Edit tour

Windows Analysis Report
http://www.kukaj-to.chat/sedo

Overview

General Information

Sample URL:	http://www.kukaj-to.chat/sedo
Analysis ID:	1576924
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious Javascript

Performs DNS queries to domains with low reputation

Detected suspicious crossdomain redirect

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6972 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7156 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1984,i,3675047681052149283,17492376251998043679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.kukaj-to.chat/sedo" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T18:19:58.307813+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	49906	34.111.103.167	443	TCP
2024-12-17T18:20:16.660448+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	49994	18.184.182.95	443	TCP
2024-12-17T18:20:18.920469+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50003	18.184.182.95	443	TCP
2024-12-17T18:20:22.309424+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50034	104.21.0.215	443	TCP
2024-12-17T18:20:23.657940+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50043	172.67.165.12	443	TCP

ET MALWARE DNS Query for Possible FakeAV Domain

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T18:18:47.024222+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	50982	1.1.1.1	53	UDP
2024-12-17T18:18:47.026070+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	55007	1.1.1.1	53	UDP
2024-12-17T18:18:50.240297+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	52639	1.1.1.1	53	UDP
2024-12-17T18:18:50.240435+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	50020	1.1.1.1	53	UDP
2024-12-17T18:18:59.515782+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	59726	1.1.1.1	53	UDP
2024-12-17T18:18:59.515941+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	63013	1.1.1.1	53	UDP
2024-12-17T18:19:05.530911+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	50145	1.1.1.1	53	UDP
2024-12-17T18:19:05.531197+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	49799	1.1.1.1	53	UDP
2024-12-17T18:19:16.306058+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	53151	1.1.1.1	53	UDP
2024-12-17T18:19:16.306218+0100	2012786	2	Potentially Bad Traffic	192.168.2.16	50318	1.1.1.1	53	UDP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://www.kukaj-to.chat/sedo

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://www.trk2dkt.com/scripts/sdk/everflow.js	Avira URL Cloud: Label: malware
Source: https://www.trk2dkt.com/29PD1BG/H7JJ78/?sub1=1377_1964&sub2=6580c255f11d4fab852aeec5f5be679d	Avira URL Cloud: Label: malware
Source: https://www.mastertrackingdomain.com/37HF1RW/2H7HLJP4/?source_id=1964&sub1=0cde5eace92144838554e74dacb8fa45	Avira URL Cloud: Label: malware

Phishing

AI detected suspicious Javascript

Source: 0.0.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://majorleagueprices.icu/?encoded_value=27976... This script demonstrates several high-risk behaviors, including redirecting the user to a suspicious domain ('https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/') and manipulating the browser history to facilitate the redirect. The use of `history.replaceState()` and `history.pushState()` to alter the current URL and the `setTimeout()` function to trigger the redirect are concerning. While the script does not appear to directly exfiltrate data, the redirect to an unknown domain is a significant risk factor. Overall, this script exhibits a high-risk profile and should be further investigated.

Source: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com	HTTP Parser: No favicon
Source: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com	HTTP Parser: No favicon
Source: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com	HTTP Parser: No favicon
Source: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com	HTTP Parser: No favicon
Source: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com	HTTP Parser: No favicon
Source: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com	HTTP Parser: No favicon
Source: https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185	HTTP Parser: No favicon
Source: https://won.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185	HTTP Parser: No favicon

Source:

Binary string: .uFj3NiDk .Pdb2Hk_U { source: chromecache_154.1.dr

Networking

Performs DNS queries to domains with low reputation

Source:	DNS query: gryclk.xyz
Source:	DNS query: gryclk.xyz

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.empowerstratic.com to https://www.mastertrackingdomain.com/37hf1rw/2h7hljp4/?source_id=1964&sub1=0cde5eace92144838554e74dacb8fa45
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.mastertrackingdomain.com to https://majorleagueprices.icu/o5akyhpk-pdea98-tf3x-iido3d4a/?encoded_value=279768q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.mastertrackingdomain.com to https://www.trk2dkt.com/29pd1bg/h7jj78/?sub1=1377_1964&sub2=6580c255f11d4fab852aeec5f5be679d
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.trk2dkt.com to https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: click.trackwora.com to https://gryclk.xyz/click?key=7d9345cdd41ca62b8c1e&t0=0.16&t1=14&t2=24216&t3=14-_-24216&t4=2433&t5=31399&t6=tt

Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:55007 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:50982 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:50020 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:52639 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:49799 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:50145 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:59726 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:63013 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:53151 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2012786 - Severity 2 - ET MALWARE DNS Query for Possible FakeAV Domain : 192.168.2.16:50318 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:49906 -> 34.111.103.167:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:49994 -> 18.184.182.95:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50003 -> 18.184.182.95:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50034 -> 104.21.0.215:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50043 -> 172.67.165.12:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /sedo HTTP/1.1Host: www.kukaj-to.chatConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /465L9XP/Z97CPJG/ HTTP/1.1Host: www.empowerstratic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /37HF1RW/2H7HLJP4/?source_id=1964&sub1=0cde5eace92144838554e74dacb8fa45 HTTP/1.1Host: www.mastertrackingdomain.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /O5akYhpK-PDEA98-tf3X-IiDo3D4a/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /css/in3-blissy-com.c3a4f0162.css HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/66bd384fedeb9d6ee2978d02_woman-blissy-cropped.jpg HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/bottom.webp HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc315a_blissy-box-500.jpg HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/mlogo.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc32f1_allure.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/bottom.webp HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc32f0_prevention.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/66bd384fedeb9d6ee2978d02_woman-blissy-cropped.jpg HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc32ec_oprahmag1.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc32ed_goodhousekeeping.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/mlogo.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc32ee_glamour.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc32ef_popsugar.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc32f1_allure.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc32f0_prevention.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/t45.webp HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc3311_improves-hair.jpg HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/newr.jpg HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc32ec_oprahmag1.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc315a_blissy-box-500.jpg HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc32ed_goodhousekeeping.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/miracle2.webp HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc32ee_glamour.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/t1.webp HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc32ef_popsugar.svg HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc3165_star.png HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/t45.webp HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc31b2_blissy-box.jpg HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /scripts/push/script/64d5p99gj0?url=majorleagueprices.icu HTTP/1.1Host: trk-quantivex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc3311_improves-hair.jpg HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/newr.jpg HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/miracle2.webp HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc3165_star.png HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /images/t1.webp HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /service-worker.js HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /scripts/push/script/64d5p99gj0?url=majorleagueprices.icu HTTP/1.1Host: trk-quantivex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/665deae8723a9bcb12bc31b2_blissy-box.jpg HTTP/1.1Host: majorleagueprices.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /scripts/ext/script/64d5p99gj0?url=majorleagueprices.icu HTTP/1.1Host: secureanalytic.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/sw/script/64d5p99gj0?url=majorleagueprices.icu HTTP/1.1Host: secureanalytic.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: majorleagueprices.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
Source: global traffic	HTTP traffic detected: GET /register/event_log/q5ejw8j4g0 HTTP/1.1Host: event.trk-quantivex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412 HTTP/1.1Host: api.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://majorleagueprices.icuSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412 HTTP/1.1Host: api.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.0/json/notifyai-digitalsubscribers/recommendations.notify-available?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412&response.id=__2bc45aa076fb445c279c905146a9f5aa__a8bd327b98bbd68842c75677f1e6b089__~~V1~~-8546183196209246962~~EvnSfqjKR28lZYTWEDIELF4uCFvA5_b1Wov7B-yjFNXnoZueAsnM0UTkqRiz-o8uV9GNaet_FWxUAZ9PPPsFwepP0QI8ApBUqMn1Hn67unFW3gMxxE5FklL3byiLVORnL2mKl-VYyYpmjqtTDTKL2EuhYyT-X-BIWbZ-mIZ0peXX-x-fnc1sjKo9ZL00ocmTMO7Tswj5WH4cylUjQLFLHQ__text&response.session=v2_1d395c24c6744aa481ce31fc78793722_450741448_1734455985_1734455985_CIi3jgYQ0pdeGMGOiK29MiABKAQw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiI6d315YeYt1lwAIABAA HTTP/1.1Host: api.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://majorleagueprices.icuSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.0/json/notifyai-digitalsubscribers/recommendations.notify-visible?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412&response.id=__2bc45aa076fb445c279c905146a9f5aa__a8bd327b98bbd68842c75677f1e6b089__~~V1~~-8546183196209246962~~EvnSfqjKR28lZYTWEDIELF4uCFvA5_b1Wov7B-yjFNXnoZueAsnM0UTkqRiz-o8uV9GNaet_FWxUAZ9PPPsFwepP0QI8ApBUqMn1Hn67unFW3gMxxE5FklL3byiLVORnL2mKl-VYyYpmjqtTDTKL2EuhYyT-X-BIWbZ-mIZ0peXX-x-fnc1sjKo9ZL00ocmTMO7Tswj5WH4cylUjQLFLHQ__text&response.session=v2_1d395c24c6744aa481ce31fc78793722_450741448_1734455985_1734455985_CIi3jgYQ0pdeGMGOiK29MiABKAQw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiI6d315YeYt1lwAIABAA HTTP/1.1Host: api.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://majorleagueprices.icuSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2F56d932aa1f6cfa49bdc3978ab8992521?srcxy=notifyai-digitalsubscribers_--___2bc45aa076fb445c279c905146a9f5aa__a8bd327b98bbd68842c75677f1e6b089__~~V1~~-8546183196209246962~~EvnSfqjKR28lZYTWEDIELF4uCFvA5_b1Wov7B-yjFNXnoZueAsnM0UTkqRiz-o8uV9GNaet_FWxUAZ9PPPsFwepP0QI8ApBUqMn1Hn67unFW3gMxxE5FklL3byiLVORnL2mKl-VYyYpmjqtTDTKL2EuhYyT-X-BIWbZ-mIZ0peXX-x-fnc1sjKo9ZL00ocmTMO7Tswj5WH4cylUjQLFLHQ__text&response.session=v2_1d395c24c6744aa481ce31fc78793722_450741448_1734455985_1734455985_CIi3jgYQ0pdeGMGOiK29MiABKAQw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiI6d315YeYt1lwAIABAA HTTP/1.1Host: images.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=14be3b4b-e0db-4ee1-9e84-04742c067024-tucte5b381e
Source: global traffic	HTTP traffic detected: GET /tr/o/IgFQdy47E0l1TDSwYRWQhTwKmNk3COc7vu2MFx4zBhZ3H_TakF1IGk_x-yxEDAXIXZW8q46dP9RRh2C5s1wG0cmzoN9dMDOXlUG0Vsat2X2d5v2nne2bTrYNt9XKA_GKNsz4hJ_TstRR8-WABMw76jA5SrFtAw8uZg7tgzL9ZtxKKyJjsuQlKwnd8CldiKw7AZzMjaPLmk5VrMXAQF3qOR3B3sHf1pNVFqnSVG1ybgxbAMeN31hGpCMgjf4NYCiZzvBSwvieZW4DUO3vmme5oMiYumC4DFIuCyqi21tBjtvJubAleai_888aK4MjwRuWoQT3MBsxSESFxS8oyUVzHS7hrJynVZVDwGQ27g0kjj4uWJ7OGxURaWAVeTo8-7NDDsrlglEmA2ajV7XOYtFy33UIM9TelnRN57rMQDhoF_UHtVsN-ZLBXrMmS-9cK6wOHGa3QXqheQknYD17ys9VYttw5SkFI4FtapxhA30BEQeQAbb4Ifq3t0kyFU5JVOgJeB0e_WkGX0hfPgt0XU4HirEABoIMB045auhGGaJ-sZyNfs25uHP2-amgnIYpwYf0zFjNhcpIdrE0wc122mgXHPVq2s7DzwCpG_Wts1wxJ8A9hIWxvTrroTg5R0AOqEpyYMBqH7TEOq0Ai9ndEvIasvmw4L15wxHBpCv8Ah9sXKykji1gf-a9v6BQXQ5jDP8LZUI8Q668H45c6YXMzr0HvkhI8wMZToe1_C6HgpPna7pv5liwSvp5Wal3GzJgNvsDC2vB3V0Xl16IJ8PNguWXZO0BfLFojJFnwvXEQWEQnVOqhPxRTcdlifbsBMKzUxlYmjIiZ8LR02vg0-H_aRqn1Ff56tvNOL7ojm_hW-FpH-PRsP40N1ZyY4A9iUJbLu3BaG38zS5W7J6KprphLwvQxzy1kbhd-9tXc_F3o9XcApGq1F250YMR7EMIa8_3YTQ9mSBFs-60-G31t6qc5mUXTHsveCTiwRELUH9UUKoSvdO1mzJM6RsCDRWAW2vj-DFCkWYTwO_EBdFvYGAieubUQAe1Ww35ksFesyZL71wrrA582u8-0GwVmDYtq0XRqduVtey0dQUcfffGcfnZz_8U0Zz-z2c0jC_leCjeDtEUL_IopdDKdkjVcikE4XtlDblOZSjhOZEBWU7wpmxMSBVdtjYBAe9a3NgZ3ne1lBU5ISa6OSylIgAZJvsf_oRg4oOn3_z7kK0PM8Vno2aIxwhGkht-Mkq2DBxNZnbXFhwSrkHjp7anvqrPy01D8ZHHcVKYolz9V8OdxVuntEZ2zHNeSeE-bo2xIq7KYupItGMyVZAqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRjshoXsBLUIPpbyLlI65nM9?h=&v=185 HTTP/1.1Host: pushclk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/badges/fkjhn587sdfk2.png HTTP/1.1Host: cdn-media-2020.s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/c/internal/download%20%288%294427.webp HTTP/1.1Host: d22322n8919ncg.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/c/internal/hero4540.webp HTTP/1.1Host: d22322n8919ncg.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/o/JDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfJ9HM71r-eA1-AnypqWquQ0jfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK?h=&v=185 HTTP/1.1Host: pushclk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/badges/7dsfjhk35tbd.png HTTP/1.1Host: cdn-media-2020.s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/o/JDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9JfeDFrA_wK9c_5nLFef8cibalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A==?h=&v=185 HTTP/1.1Host: pushclk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/o/JDvPdy1sMN2uSAhlhv6ZzbfRIux7f1Qhv2eEJNRyhkrdezwVKfo5l5OIcv6_ZXrmAZ-C1g-bUpFQDlCUE8STTR5ddP_2gonCmkzWN1yIssizH9yQ4AY2Nl0GwNNj-kLz-jhh_MPqN8HWHhgXC2vCXalzVxpWAaTy8DYteRA63Qw0sxCPBlnAEaPUcwT1mpOmY20p4XP7uvG7IME3NoVzpfoLFfIyRuhYH13uuI3Vmk_iqANq8QKPmxre-RkP3pMyToxkS_OATOBt5q2AHrZqKmNTj4H1DBR_O1Dd8DdgW02wDV7tjPHXvqTXzIUEDSXUgQkx7VJoY6HGKKC2TG_BGGo10tb2F-0Hx8dN4xCNQ6uiXP1Xw53FW6e0RnbMc15JKlC4G-uYXm5zDPIcQHfPwm8qe_LFVCdfJwp0kodkrmeooW62lc6AmykzadbmuuvW?h=&v=185 HTTP/1.1Host: pushclk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/o/JDvPdy1sMN2uSAhlhv6ZzT2YnQxZ7rJfSs4wm0B4y3bNXZQeYA1vbxm0grejE8Qkr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzVVc-bEV6pChqnKE1y3b-JcRtZiozEH5P4yQTG4XnjEIHmPC1ZZywva756pQ0Tarek2pQX_-hFToCq1f-_X_R7W80L0S01Pc9dcMFi80BH9bvw2y31ogl6bmvyYChOfbT0-yWKXaF438VzfFgTGKHKc9pF9DhLELyDwmJ3XzRLt-PHXXsuUKVgQdLIduQenGyBCTHtUmhjocYooLZMb8EYajXS1vYX7QfHx03jEI1Dq6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_CZzf_hxCPVQ8zsZge_Ox8GQ==?h=&v=185 HTTP/1.1Host: pushclk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/c/internal/unnamed1117.jpeg?h=&v=533 HTTP/1.1Host: d22322n8919ncg.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cmp/279768Q/36KPHXK/?source_id=1964&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843 HTTP/1.1Host: www.mastertrackingdomain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uniqueClick_2H7HLJP4=618440f4-ec62-404f-9d64-783f3a71452d:1734455909; transaction_id=f1a7b1367acd441384cf9d47e80d6f6d
Source: global traffic	HTTP traffic detected: GET /content/c/internal/images1339.jpeg HTTP/1.1Host: d22322n8919ncg.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/c/internal/icon8653.jpeg HTTP/1.1Host: d22322n8919ncg.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/c/internal/icone-robot-android-rouge5001.jpeg HTTP/1.1Host: d22322n8919ncg.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/c/internal/Screenshot_11302526.jpeg HTTP/1.1Host: d22322n8919ncg.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /29PD1BG/H7JJ78/?sub1=1377_1964&sub2=6580c255f11d4fab852aeec5f5be679d HTTP/1.1Host: www.trk2dkt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= HTTP/1.1Host: get-luxsheets.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/css/style.css HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/css/additional.css HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /jquery-3.5.0.min.js HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /CheckoutSDK.js?v=v15 HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /scripts/sdk/everflow.js HTTP/1.1Host: www.trk2dkt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://get-luxsheets.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uniqueClick_H7JJ78=f5b0a4f9-8882-45ae-9470-ec26f5243d0a:1734455995; transaction_id=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /7.23.0/bundle.min.js HTTP/1.1Host: browser.sentry-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get-luxsheets.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://get-luxsheets.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7.23.0/bundle.tracing.min.js HTTP/1.1Host: browser.sentry-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get-luxsheets.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://get-luxsheets.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/css/bulma.min.css HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://get-luxsheets.com/assets/shared/checkout/v15/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/css/loading.css HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://get-luxsheets.com/assets/shared/checkout/v15/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /CheckoutSDK.js?v=v15 HTTP/1.1Host: get-luxsheets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /scripts/sdk/everflow.js HTTP/1.1Host: www.trk2dkt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uniqueClick_H7JJ78=f5b0a4f9-8882-45ae-9470-ec26f5243d0a:1734455995; transaction_id=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /jquery-3.5.0.min.js HTTP/1.1Host: get-luxsheets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/img/logos/ads.png HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /7.23.0/bundle.min.js HTTP/1.1Host: browser.sentry-cdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7.23.0/bundle.tracing.min.js HTTP/1.1Host: browser.sentry-cdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/160399/300x78/3f80534177/dreamzy-logo-black.svg HTTP/1.1Host: a.storyblok.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get-luxsheets.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/css/fonts/brandon_med.woff2 HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get-luxsheets.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/img/logos/ads.png HTTP/1.1Host: get-luxsheets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/fonts/AAkorzFFbu1n.ttf HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get-luxsheets.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /age-verification?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185 HTTP/1.1Host: ally.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/fonts/vMVxOXPAZsbW.woff2 HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get-luxsheets.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /sdk/click?effp=be9ae3c9e5dfc39574592ff51220972d&sec_ch_ua_platform=Windows&sec_ch_ua_platform_version=10.0.0&sec_ch_ua_model=&_ef_transaction_id=71fb64e74261421dbebd6fa6cf6be1da&oid=287&affid=809&__cc=&async=json&gclid=&__qp=b%7Cregion%7Cpub_id%7Coid%7Ctransaction_id%7Cgclid%7Cmsclkid&__rf=https%3A%2F%2Fmajorleagueprices.icu%2F&__efckuq=96 HTTP/1.1Host: www.trk2dkt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://get-luxsheets.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://get-luxsheets.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uniqueClick_H7JJ78=f5b0a4f9-8882-45ae-9470-ec26f5243d0a:1734455995; transaction_id=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /f/160399/300x78/3f80534177/dreamzy-logo-black.svg HTTP/1.1Host: a.storyblok.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185 HTTP/1.1Host: ally.quandral.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/images/CpEpEAQ8eEXs.webp HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /api/4504272873783296/envelope/?sentry_key=9d4c19d105a244fbb75e3d28cf64ee9e&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.23.0 HTTP/1.1Host: o4504272872341504.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/css/fonts/Brandon_reg.woff2 HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get-luxsheets.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/fonts/Yfx5aeloppAM.woff2 HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get-luxsheets.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15
Source: global traffic	HTTP traffic detected: GET /sdk/click?effp=be9ae3c9e5dfc39574592ff51220972d&sec_ch_ua_platform=Windows&sec_ch_ua_platform_version=10.0.0&sec_ch_ua_model=&_ef_transaction_id=71fb64e74261421dbebd6fa6cf6be1da&oid=287&affid=809&__cc=&async=json&gclid=&__qp=b%7Cregion%7Cpub_id%7Coid%7Ctransaction_id%7Cgclid%7Cmsclkid&__rf=https%3A%2F%2Fmajorleagueprices.icu%2F&__efckuq=96 HTTP/1.1Host: www.trk2dkt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uniqueClick_H7JJ78=f5b0a4f9-8882-45ae-9470-ec26f5243d0a:1734455995; uniqueClick=ba229def-13fb-4f41-9d82-a68edb48b8ba:1734456006; transaction_id=71fb64e74261421dbebd6fa6cf6be1da\|71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /api/4504272873783296/envelope/?sentry_key=9d4c19d105a244fbb75e3d28cf64ee9e&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.23.0 HTTP/1.1Host: o4504272872341504.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/images/CpEpEAQ8eEXs.webp HTTP/1.1Host: get-luxsheets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/css/fonts/EllenLuff---Larken-Regular.woff2 HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get-luxsheets.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /age-verification/assets/style.css HTTP/1.1Host: ally.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /push-script.js HTTP/1.1Host: ally.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /permissions-redirect-script.js HTTP/1.1Host: ally.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/images/xNcpsuWcBQjG.webp HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/images/fR4HGxm3eCqo.svg HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/images/rTDN5cAAh5mz.svg HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/images/AA2yMk38yKhn.svg HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/images/fR4HGxm3eCqo.svg HTTP/1.1Host: get-luxsheets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/img/logos/paypal.svg HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/images/xNcpsuWcBQjG.webp HTTP/1.1Host: get-luxsheets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/images/rTDN5cAAh5mz.svg HTTP/1.1Host: get-luxsheets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /sdk/js?currency=USD&intent=authorize&commit=false&client-id=AVUWLRxhkXFDE1GRw4frKDjLxh1QaLUc3ouf4PPnVIyYA3D8F8aXjBEIjEQV6lnDGJn3Raklvuxvxw2f&disable-funding=card%2Cbancontact%2Cblik%2Ceps%2Cideal%2Cmercadopago%2Cmybank%2Csepa%2Csofort&enable-funding=paylater HTTP/1.1Host: www.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://get-luxsheets.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification/assets/age-verification.png HTTP/1.1Host: ally.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification/assets/font/lato-bold.woff HTTP/1.1Host: ally.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ally.quandral.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ally.quandral.com/age-verification/assets/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification/assets/font/lato-regular.woff HTTP/1.1Host: ally.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ally.quandral.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ally.quandral.com/age-verification/assets/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /push-script.js HTTP/1.1Host: ally.quandral.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /permissions-redirect-script.js HTTP/1.1Host: ally.quandral.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/push/script/57dkr26ew8?url=ally.quandral.com HTTP/1.1Host: trk-synovetra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ally.quandral.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/media/f92S2pCkhDV5.gif HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/images/AA2yMk38yKhn.svg HTTP/1.1Host: get-luxsheets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/media/h6kgpHR2MS9C.gif HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/img/logos/paypal.svg HTTP/1.1Host: get-luxsheets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /tr/t/JDvPdy1sMN2uSAhlhv6ZzbfRIux7f1Qhv2eEJNRyhkrdezwVKfo5l5OIcv6_ZXrmAZ-C1g-bUpFQDlCUE8STTR5ddP_2gonCmkzWN1yIssizH9yQ4AY2Nl0GwNNj-kLz-jhh_MPqN8HWHhgXC2vCXalzVxpWAaTy8DYteRA63Qw0sxCPBlnAEaPUcwT1mpOmY20p4XP7uvG7IME3NoVzpSnfwHGIARYNAUdqnoaPIS_iqANq8QKPmxre-RkP3pMyToxkS_OATOBt5q2AHrZqKmNTj4H1DBR_O1Dd8DdgW02wDV7tjPHXvqTXzIUEDSXUgQkx7VJoY6HGKKC2TG_BGGo10tb2F-0Hx8dN4xCNQ6uiXP1Xw53FW6e0RnbMc15JKlC4G-uYXm5zDPIcQHfPwm8qe_LFVCdfJwp0kodkrmeooW62lc6AmykzadbmuuvW?h=&v=185 HTTP/1.1Host: pushclk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/js?currency=USD&intent=authorize&commit=false&client-id=AVUWLRxhkXFDE1GRw4frKDjLxh1QaLUc3ouf4PPnVIyYA3D8F8aXjBEIjEQV6lnDGJn3Raklvuxvxw2f&disable-funding=card%2Cbancontact%2Cblik%2Ceps%2Cideal%2Cmercadopago%2Cmybank%2Csepa%2Csofort&enable-funding=paylater HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification/assets/age-verification.png HTTP/1.1Host: ally.quandral.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/ HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://get-luxsheets.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185 HTTP/1.1Host: won.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ally.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/push/script/57dkr26ew8?url=ally.quandral.com HTTP/1.1Host: trk-synovetra.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185 HTTP/1.1Host: won.quandral.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0b799de6-47be-4e34-8e0d-638110360f29?source=10443&Siteid=76100&psid=450741448&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQ HTTP/1.1Host: turapport-strience.icuConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /service-worker.js HTTP/1.1Host: ally.quandral.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0b799de6-47be-4e34-8e0d-638110360f29/2?source=10443&Siteid=76100&psid=450741448&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQ HTTP/1.1Host: turapport-strience.icuConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Referer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification/assets/style.css HTTP/1.1Host: won.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://won.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /push-script.js HTTP/1.1Host: won.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://won.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /permissions-redirect-script.js HTTP/1.1Host: won.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://won.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FhuERn4Gsj_keStOiPu2jzLbLeWO6pfgS3TeDOtLPuyW7XzW1wnDlq-DJnn3y2pCcnBqEDuUpIzLWqoI8VOE5OBD2HAdj45jJZba4fpFIqnW9n-iC-FZXsliIzluc6WEcVJU3vpqTHOXWoUNoPoba8MsC8jmgz3pzq0JIU9t6PKFGo6sgND6d816zgC0Emq76_LPi5LcnrEwjzlKKfmHXXh7p7RvgTuWQrYxCBodkaMxuJwArvgTEc71OQFZoqRnTf2gUZmzH6S4SnBhyi26_pqOZyunAS288wrDxxTS7Z2B3_0dVFNM8ezq8S5F2lZ107zBkV0AXjxgsQoQsMfn9MwsH1aZGVq54LOrb1P02kBxMhYpkOXH-tmWVB4Cv0nRyz7PKcAjbS-91wWpKWed2etx0YeW4G89LtN2BBn5N6rVKt3pHQJ_ZAGJWNEkE6lEtdw24_T0qBYRhX0qMaJMi9AOa1mkUi9ePQQ7sP8cP6Qr3yWsYSbXh4fqzgFQq6lgsd6S_IEBF2OJw6K_zaVTjFJ77ybCnRhSHtQ6IfKtkVAvee_hMTmSpCg3hBnoXYHr4Ekj99MM0xG3KDixuzB9xJbVk30WJI28s0V5Y_juOBk40L7IaZhzEwU3N8Xo0Tw1cGuflAPWg5c-9Oxc8v1uEwP2a52G8Xv10A2CRD0-eZKjdm_24GTpcsJuPcda8DAcUt6KHILJOyIvykpqCu0cmwWSjX22nxCiaoVb3l4KVfVQvmjBVs5YQ15eNg743Ewlsr_5g31g2CNQUmL_HOsFej-Au1eu2vnkcoTGY2EC6AfQ9rnu4KnPmB0EeSvDJefsXKGUtAlCSgnb5xwnnutVP2K0lRG66tCuqClhid634LUTf4yUxymbRurEqqYVnY_P3y06nCk5AoMsbT97L2WqcU0f8VRW1i22UsPsBgSDaRWcl2kowiqHsvOKQVW7W3QQOt1_BiKoOx1DKt4SvtRF6G-JJRO8WDKg42L3Qxgzfx6iRqJU8Y3w8TJwzJ5U3nT_usQBrhlPvLOZHRG-zg_frmrNRZROzE0zf-U7vZYfvXBeN8an9-plOdIJXg5z0DUdGoXWTMEUkq1WS1io0qoYa63Rrt0l8ij1-NoJ2FmzTIdp_crFIXwQ0JMRBh_NcCG3RkCqmeTPanC5CGQvFGdIzD07wUmgUEho9kq6uTO7PeeOGkIycz2I04xyLU8AZ8bgByY6vjGO55MwoXe4-rxTUWgiPeMjzXNTcDEaxuvY6T3w8GBZ6OB5Tcp4BJTkGdmAFneGg798Yh5Xwiv1KKM3GT9oX_Yv8smXEsLIm5kaoz7tv2zkf3J09kUG1zFwGM-KHBtmMtFb3o95iGx4mZohjEDfhEw_DKoJXA8SBH0n_oN1yLozoe5KN4AzzKY5xYTKIIa7dq2gspaJPxXIDBxIlNsOdL8e6SVQ3JpAuGAez-Vrv-PsYjf6RlEYu3yHDfcocobb370Wa6WxSN9yCgWy0KOIfm7ju8ezGKfYAjk-zn51QCdNo-Fv9NwAXaCBVrUbYu1UDuPu_SXlrm9xpQynN0f1QynDsgTjAM9jE0bo5fQ_zX7i_8v0W36HsIyIsX9OkRvjHeNNxwU1DwrFddvm7IRFcdZAPz7jPTmgJpWG30ep2XWje_4XomzFh4k7M1iIqQd3-2PyQ4wn3ryjYDZ-TzyHE58ZsNos_cO12Qyx0ayZD1Wbwk2t3-Hw6qJ9iIeYWEgRIgNWxgFZprA6kNMYO9wBso9tV-StIpIqPNtdobmz-uXCuqnZywmxleZk9tsr6WS8VJgVnEqbuBSbzhe9S4aTLakJTpBfNW-7FeFbBu59Gmv50Mpdo6UWBcgf3z6t201aJYJkkYG6FXdTkCnci65tXC5OMkX_Sf7x5rXLhVQg4tfb2NueCWHl3zQo9BSZTK4Px7j-tWMWXQcYwIyMzBwsIwZrX1HC6g3sjermGz1tZrOkHcIbMvlstoJlfB0KJXues_sgRZRZWtJOHjjrp0CMnopidQSByUCDCdQpqvNFiL7DiTDybra5yW97G5j6WDCwPKSrza39zXLjnLRgrccIuvUFtmS3Wr_Zevxv5OPIqULgb65hebnMM8hxAd8_CvM_RymVqyC8M6UFWCAhvYm8qe_LFVCdfJwp0kodkrmeBCTHtUmhjocYooLZMb8EYajXS1vYX7QfHx03jEI1Dq6Jc_VfDncVbp7RGdsxzXklIcP5RW4qHw8sZztCzv87M&h=&v=185 HTTP/1.1Host: spin.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://majorleagueprice
Source: global traffic	HTTP traffic detected: GET /tr/t/JDvPdy1sMN2uSAhlhv6ZzT2YnQxZ7rJfSs4wm0B4y3bNXZQeYA1vbxm0grejE8Qkr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzVVc-bEV6pChqnKE1y3b-JcRtZiozEH5P4yQTG4XnjEIHmPC1ZZywva756pQ0Tarek2pQX_-hFToCq1f-_X_R7AWDMmK0adLFuQAKNVZZwdbvw2y31ogl6bmvyYChOfbT0-yWKXaF438VzfFgTGKHKc9pF9DhLELyDwmJ3XzRLt-PHXXsuUKVgQdLIduQenGyBCTHtUmhjocYooLZMb8EYajXS1vYX7QfHx03jEI1Dq6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_CZzf_hxCPVQ8zsZge_Ox8GQ==?h=&v=185 HTTP/1.1Host: pushclk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/ext/script/57dkr26ew8?url=ally.quandral.com HTTP/1.1Host: trk-synovetra.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ally.quandral.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FhuERn4Gsj_keStOiPu2jzLbLeWO6pfgS3TeDOtLPuyW7XzW1wnDlq-DJnn3y2pCcnBqEDuUpIzLWqoI8VOE5OBD2HAdj45jJZba4fpFIqnW9n-iC-FZXsliIzluc6WEcVJU3vpqTHOXWoUNoPoba8MsC8jmgz3pzq0JIU9t6PKFGo6sgND6d816zgC0Emq76_LPi5LcnrEwjzlKKfmHXXh7p7RvgTuWQrYxCBodkaMxuJwArvgTEc71OQFZoqRnTf2gUZmzH6S4SnBhyi26_pqOZyunAS288wrDxxTS7Z2B3_0dVFNM8ezq8S5F2lZ107zBkV0AXjxgsQoQsMfn9MwsH1aZGVq54LOrb1P02kBxMhYpkOXH-tmWVB4Cv0nRyz7PKcAjbS-91wWpKWed2etx0YeW4G89LtN2BBn5N6rVKt3pHQJ_ZAGJWNEkE6lEtdw24_T0qBYRhX0qMaJMi9AOa1mkUi9ePQQ7sP8cP6Qr3yWsYSbXh4fqzgFQq6lgsd6S_IEBF2OJw6K_zaVTjFJ77ybCnRhSHtQ6IfKtkVAvee_hMTmSpCg3hBnoXYHr4Ekj99MM0xG3KDixuzB9xJbVk30WJI28s0V5Y_juOBk40L7IaZhzEwU3N8Xo0Tw1cGuflAPWg5c-9Oxc8v1uEwP2a52G8Xv10A2CRD0-eZKjdm_24GTpcsJuPcda8DAcUt6KHILJOyIvykpqCu0cmwWSjX22nxCiaoVb3l4KVfVQvmjBVs5YQ15eNg743Ewlsr_5g31g2CNQUmL_HOsFej-Au1eu2vnkcoTGY2EC6AfQ9rnu4KnPmB0EeSvDJefsXKGUtAlCSgnb5xwnnutVP2K0lRG66tCuqClhid634LUTf4yUxymbRurEqqYVnY_P3y06nCk5AoMsbT97L2WqcU0f8VRW1i22UsPsBgSDaRWcl2kowiqHsvOKQVW7W3QQOt1_BiKoOx1DKt4SvtRF6G-JJRO8WDKg42L3Qxgzfx6iRqJU8Y3w8TJwzJ5U3nT_usQBrhlPvLOZHRG-zg_frmrNRZROzE0zf-U7vZYfvXBeN8an9-plOdIJXg5z0DUdGoXWTMEUkq1WS1io0qoYa63Rrt0l8ij1-NoJ2FmzTIdp_crFIXwQ0JMRBh_NcCG3RkCqmeTPanC5CGQvFGdIzD07wUmgUEho9kq6uTO7PeeOGkIycz2I04xyLU8AZ8bgByY6vjGO55MwoXe4-rxTUWgiPeMjzXNTcDEaxuvY6T3w8GBZ6OB5Tcp4BJTkGdmAFneGg798Yh5Xwiv1KKM3GT9oX_Yv8smXEsLIm5kaoz7tv2zkf3J09kUG1zFwGM-KHBtmMtFb3o95iGx4mZohjEDfhEw_DKoJXA8SBH0n_oN1yLozoe5KN4AzzKY5xYTKIIa7dq2gspaJPxXIDBxIlNsOdL8e6SVQ3JpAuGAez-Vrv-PsYjf6RlEYu3yHDfcocobb370Wa6WxSN9yCgWy0KOIfm7ju8ezGKfYAjk-zn51QCdNo-Fv9NwAXaCBVrUbYu1UDuPu_SXlrm9xpQynN0f1QynDsgTjAM9jE0bo5fQ_zX7i_8v0W36HsIyIsX9OkRvjHeNNxwU1DwrFddvm7IRFcdZAPz7jPTmgJpWG30ep2XWje_4XomzFh4k7M1iIqQd3-2PyQ4wn3ryjYDZ-TzyHE58ZsNos_cO12Qyx0ayZD1Wbwk2t3-Hw6qJ9iIeYWEgRIgNWxgFZprA6kNMYO9wBso9tV-StIpIqPNtdobmz-uXCuqnZywmxleZk9tsr6WS8VJgVnEqbuBSbzhe9S4aTLakJTpBfNW-7FeFbBu59Gmv50Mpdo6UWBcgf3z6t201aJYJkkYG6FXdTkCnci65tXC5OMkX_Sf7x5rXLhVQg4tfb2NueCWHl3zQo9BSZTK4Px7j-tWMWXQcYwIyMzBwsIwZrX1HC6g3sjermGz1tZrOkHcIbMvlstoJlfB0KJXues_sgRZRZWtJOHjjrp0CMnopidQSByUCDCdQpqvNFiL7DiTDybra5yW97G5j6WDCwPKSrza39zXLjnLRgrccIuvUFtmS3Wr_Zevxv5OPIqULgb65hebnMM8hxAd8_CvM_RymVqyC8M6UFWCAhvYm8qe_LFVCdfJwp0kodkrmeBCTHtUmhjocYooLZMb8EYajXS1vYX7QfHx03jEI1Dq6Jc_VfDncVbp7RGdsxzXklIcP5RW4qHw8sZztCzv87M&h=&v=185 HTTP/1.1Host: spin.quandral.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate,
Source: global traffic	HTTP traffic detected: GET /v3/ HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/4504272873783296/envelope/?sentry_key=9d4c19d105a244fbb75e3d28cf64ee9e&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.23.0 HTTP/1.1Host: o4504272872341504.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification/assets/age-verification.png HTTP/1.1Host: won.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://won.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification/assets/font/lato-bold.woff HTTP/1.1Host: won.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://won.quandral.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://won.quandral.com/age-verification/assets/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pr12nolb2/?brand=hmg-evictionnotice&utm_source=cdabac55-be6f-451f-9464-58984d081e2e&utm_medium=10443&source_one=wjsc57ti7rscghc63j83i6om&offer_id=10596&psid=450741448&cep=nL48YG3D2qmYqKD_KPkvQlnE7WTOKGl2mwEFFaiYnWnCNUs8qndb9jf3qd1-jCrr1yqQi7Ndh75bAvsAAyvrd5DIHOVwklIjO6hKIwQa0IOVLpYCXbMDJjFs1nyme_UP7wzWzMtUspszgdmBOWnNJAa_R7j4Bnf1cQtNlfeYUv6XC12KqpoKJhLmp-3G1DsEISnLCk9UUrkLuHGNuFkvVMKi2Z200_ca0UgIfX_oSNsZKFOeS8yYF7N-O7aNIiJC0NAoKMrSVzEw84aZMlahgLCbhu8wsdoC5DHfd2DTbOR-87D8gmG9M94d14BZ9qbNf0C9GmWp8Vvdr8S7yIvGeMDNY_AwL_YVqBHH3nDOJ-_9H0eh58cmb_hP4HAK9eVde6dJzcCotkMLom8RECvq_cmnl6RPBHNSA-W4pr-OqbWm5aiSvijQnf6SGcyFqATJ7AqUyhGsZI55ZfPmpZK2231YjBxUpFqbFZcMVfDQLjcDjA-3uo0TBA6DQ1aEuxn7HZs_M9RCkxEB206qs8AeqyNPmmmnuGqUTKLOQ6cCfjXPlrg3nPArjg8p4s7UwEAD&lptoken=17af344945e778b8186b&Siteid=76100&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQ HTTP/1.1Host: verify.twivoria.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/sw/script/57dkr26ew8?url=ally.quandral.com HTTP/1.1Host: trk-synovetra.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ally.quandral.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /push-script.js HTTP/1.1Host: won.quandral.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /permissions-redirect-script.js HTTP/1.1Host: won.quandral.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/t/JDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A== HTTP/1.1Host: pushclk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ally.quandral.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/4504272873783296/envelope/?sentry_key=9d4c19d105a244fbb75e3d28cf64ee9e&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.23.0 HTTP/1.1Host: o4504272872341504.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification/assets/style.css HTTP/1.1Host: spin.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://spin.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FhuERn4Gsj_keStOiPu2jzLbLeWO6pfgS3TeDOtLPuyW7XzW1wnDlq-DJnn3y2pCcnBqEDuUpIzLWqoI8VOE5OBD2HAdj45jJZba4fpFIqnW9n-iC-FZXsliIzluc6WEcVJU3vpqTHOXWoUNoPoba8MsC8jmgz3pzq0JIU9t6PKFGo6sgND6d816zgC0Emq76_LPi5LcnrEwjzlKKfmHXXh7p7RvgTuWQrYxCBodkaMxuJwArvgTEc71OQFZoqRnTf2gUZmzH6S4SnBhyi26_pqOZyunAS288wrDxxTS7Z2B3_0dVFNM8ezq8S5F2lZ107zBkV0AXjxgsQoQsMfn9MwsH1aZGVq54LOrb1P02kBxMhYpkOXH-tmWVB4Cv0nRyz7PKcAjbS-91wWpKWed2etx0YeW4G89LtN2BBn5N6rVKt3pHQJ_ZAGJWNEkE6lEtdw24_T0qBYRhX0qMaJMi9AOa1mkUi9ePQQ7sP8cP6Qr3yWsYSbXh4fqzgFQq6lgsd6S_IEBF2OJw6K_zaVTjFJ77ybCnRhSHtQ6IfKtkVAvee_hMTmSpCg3hBnoXYHr4Ekj99MM0xG3KDixuzB9xJbVk30WJI28s0V5Y_juOBk40L7IaZhzEwU3N8Xo0Tw1cGuflAPWg5c-9Oxc8v1uEwP2a52G8Xv10A2CRD0-eZKjdm_24GTpcsJuPcda8DAcUt6KHILJOyIvykpqCu0cmwWSjX22nxCiaoVb3l4KVfVQvmjBVs5YQ15eNg743Ewlsr_5g31g2CNQUmL_HOsFej-Au1eu2vnkcoTGY2EC6AfQ9rnu4KnPmB0EeSvDJefsXKGUtAlCSgnb5xwnnutVP2K0lRG66tCuqClhid634LUTf4yUxymbRurEqqYVnY_P3y06nCk5AoMsbT97L2WqcU0f8VRW1i22UsPsBgSDaRWcl2kowiqHsvOKQVW7W3QQOt1_BiKoOx1DKt4SvtRF6G-JJRO8WDKg42L3Qxgzfx6iRqJU8Y3w8TJwzJ5U3nT_usQBrhlPvLOZHRG-zg_frmrNRZROzE0zf-U7vZYfvXBeN8an9-plOdIJXg5z0DUdGoXWTMEUkq1WS1io0qoYa63Rrt0l8ij1-NoJ2FmzTIdp_crFIXwQ0JMRBh_NcCG3RkCqmeTPanC5CGQvFGdIzD07wUmgUEho9kq6uTO7PeeOGkIycz2I04xyLU8AZ8bgByY6vjGO55MwoXe4-rxTUWgiPeMjzXNTcDEaxuvY6T3w8GBZ6OB5Tcp4BJTkGdmAFneGg798Yh5Xwiv1KKM3GT9oX_Yv8smXEsLIm5kaoz7tv2zkf3J09kUG1zFwGM-KHBtmMtFb3o95iGx4mZohjEDfhEw_DKoJXA8SBH0n_oN1yLozoe5KN4AzzKY5xYTKIIa7dq2gspaJPxXIDBxIlNsOdL8e6SVQ3JpAuGAez-Vrv-PsYjf6RlEYu3yHDfcocobb370Wa6WxSN9yCgWy0KOIfm7ju8ezGKfYAjk-zn51QCdNo-Fv9NwAXaCBVrUbYu1UDuPu_SXlrm9xpQynN0f1QynDsgTjAM9jE0bo5fQ_zX7i_8v0W36HsIyIsX9OkRvjHeNNxwU1DwrFddvm7IRFcdZAPz7jPTmgJpWG30ep2XWje_4XomzFh4k7M1iIqQd3-2PyQ4wn3ryjYDZ-TzyHE58ZsNos_cO12Qyx0ayZD1Wbwk2t3-Hw6qJ9iIeYWEgRIgNWxgFZprA6kNMYO9wBso9tV-StIpIqPNtdobmz-uXCuqnZywmxleZk9tsr6WS8VJgVnEqbuBSbzhe9S4aTLakJTpBfNW-7FeFbBu59Gmv50Mpdo6UWBcgf3z6t201aJYJkkYG6FXdTkCnci65tXC5OMkX_Sf7x5rXLhVQg4tfb2NueCWHl3zQo9BSZTK4Px7j-tWMWXQcYwIyMzBwsIwZrX1HC6g3sjermGz1tZrOkHcIbMvlstoJlfB0KJXues_sgRZRZWtJOHjjrp0CMnopidQSByUCDCdQpqvNFiL7DiTDybra5yW97G5j6WDCwPKSrza39zXLjnLRgrccIuvUFtmS3Wr_Zevxv5OPIqULgb65hebnMM8hxAd8_CvM_RymVqyC8M6UFWCAhvYm8qe_LFVCdfJwp0kodkrmeBCTHtUmhjocYooLZMb8EYajXS1vYX7QfHx03jEI1Dq6Jc_VfDncVbp7RGdsxzXklIcP5RW4qHw8sZztCzv87M&h=&v=185Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /push-script.js HTTP/1.1Host: spin.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://spin.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FhuERn4Gsj_keStOiPu2jzLbLeWO6pfgS3TeDOtLPuyW7XzW1wnDlq-DJnn3y2pCcnBqEDuUpIzLWqoI8VOE5OBD2HAdj45jJZba4fpFIqnW9n-iC-FZXsliIzluc6WEcVJU3vpqTHOXWoUNoPoba8MsC8jmgz3pzq0JIU9t6PKFGo6sgND6d816zgC0Emq76_LPi5LcnrEwjzlKKfmHXXh7p7RvgTuWQrYxCBodkaMxuJwArvgTEc71OQFZoqRnTf2gUZmzH6S4SnBhyi26_pqOZyunAS288wrDxxTS7Z2B3_0dVFNM8ezq8S5F2lZ107zBkV0AXjxgsQoQsMfn9MwsH1aZGVq54LOrb1P02kBxMhYpkOXH-tmWVB4Cv0nRyz7PKcAjbS-91wWpKWed2etx0YeW4G89LtN2BBn5N6rVKt3pHQJ_ZAGJWNEkE6lEtdw24_T0qBYRhX0qMaJMi9AOa1mkUi9ePQQ7sP8cP6Qr3yWsYSbXh4fqzgFQq6lgsd6S_IEBF2OJw6K_zaVTjFJ77ybCnRhSHtQ6IfKtkVAvee_hMTmSpCg3hBnoXYHr4Ekj99MM0xG3KDixuzB9xJbVk30WJI28s0V5Y_juOBk40L7IaZhzEwU3N8Xo0Tw1cGuflAPWg5c-9Oxc8v1uEwP2a52G8Xv10A2CRD0-eZKjdm_24GTpcsJuPcda8DAcUt6KHILJOyIvykpqCu0cmwWSjX22nxCiaoVb3l4KVfVQvmjBVs5YQ15eNg743Ewlsr_5g31g2CNQUmL_HOsFej-Au1eu2vnkcoTGY2EC6AfQ9rnu4KnPmB0EeSvDJefsXKGUtAlCSgnb5xwnnutVP2K0lRG66tCuqClhid634LUTf4yUxymbRurEqqYVnY_P3y06nCk5AoMsbT97L2WqcU0f8VRW1i22UsPsBgSDaRWcl2kowiqHsvOKQVW7W3QQOt1_BiKoOx1DKt4SvtRF6G-JJRO8WDKg42L3Qxgzfx6iRqJU8Y3w8TJwzJ5U3nT_usQBrhlPvLOZHRG-zg_frmrNRZROzE0zf-U7vZYfvXBeN8an9-plOdIJXg5z0DUdGoXWTMEUkq1WS1io0qoYa63Rrt0l8ij1-NoJ2FmzTIdp_crFIXwQ0JMRBh_NcCG3RkCqmeTPanC5CGQvFGdIzD07wUmgUEho9kq6uTO7PeeOGkIycz2I04xyLU8AZ8bgByY6vjGO55MwoXe4-rxTUWgiPeMjzXNTcDEaxuvY6T3w8GBZ6OB5Tcp4BJTkGdmAFneGg798Yh5Xwiv1KKM3GT9oX_Yv8smXEsLIm5kaoz7tv2zkf3J09kUG1zFwGM-KHBtmMtFb3o95iGx4mZohjEDfhEw_DKoJXA8SBH0n_oN1yLozoe5KN4AzzKY5xYTKIIa7dq2gspaJPxXIDBxIlNsOdL8e6SVQ3JpAuGAez-Vrv-PsYjf6RlEYu3yHDfcocobb370Wa6WxSN9yCgWy0KOIfm7ju8ezGKfYAjk-zn51QCdNo-Fv9NwAXaCBVrUbYu1UDuPu_SXlrm9xpQynN0f1QynDsgTjAM9jE0bo5fQ_zX7i_8v0W36HsIyIsX9OkRvjHeNNxwU1DwrFddvm7IRFcdZAPz7jPTmgJpWG30ep2XWje_4XomzFh4k7M1iIqQd3-2PyQ4wn3ryjYDZ-TzyHE58ZsNos_cO12Qyx0ayZD1Wbwk2t3-Hw6qJ9iIeYWEgRIgNWxgFZprA6kNMYO9wBso9tV-StIpIqPNtdobmz-uXCuqnZywmxleZk9tsr6WS8VJgVnEqbuBSbzhe9S4aTLakJTpBfNW-7FeFbBu59Gmv50Mpdo6UWBcgf3z6t201aJYJkkYG6FXdTkCnci65tXC5OMkX_Sf7x5rXLhVQg4tfb2NueCWHl3zQo9BSZTK4Px7j-tWMWXQcYwIyMzBwsIwZrX1HC6g3sjermGz1tZrOkHcIbMvlstoJlfB0KJXues_sgRZRZWtJOHjjrp0CMnopidQSByUCDCdQpqvNFiL7DiTDybra5yW97G5j6WDCwPKSrza39zXLjnLRgrccIuvUFtmS3Wr_Zevxv5OPIqULgb65hebnMM8hxAd8_CvM_RymVqyC8M6UFWCAhvYm8qe_LFVCdfJwp0kodkrmeBCTHtUmhjocYooLZMb8EYajXS1vYX7QfHx03jEI1Dq6Jc_VfDncVbp7RGdsxzXklIcP5RW4qHw8sZztCzv87M&h=&v=185Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/push/script/57dkr26ew8?url=won.quandral.com HTTP/1.1Host: trk-synovetra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://won.quandral.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /in/01HAWB23PV3SBFDFFBKE5XDDW5?source=10443&Siteid=PLACEHOLDER&psid=450741448&offerid=10563&subdomain=spot.&firstname=&lastname=&email=&zip_code=&creative_id=31399&click_id=CCRT17gaQpaBC0aC6zCchA HTTP/1.1Host: click.trackwora.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/fonts/6W9ZcpouIsGQ.woff2 HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get-luxsheets.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/media/f92S2pCkhDV5.gif HTTP/1.1Host: get-luxsheets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /checkout.js?v=v15 HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /age-verification/assets/age-verification.png HTTP/1.1Host: won.quandral.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /age-verification/assets/font/lato-regular.woff HTTP/1.1Host: won.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://won.quandral.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://won.quandral.com/age-verification/assets/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /permissions-redirect-script.js HTTP/1.1Host: spin.quandral.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://spin.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FhuERn4Gsj_keStOiPu2jzLbLeWO6pfgS3TeDOtLPuyW7XzW1wnDlq-DJnn3y2pCcnBqEDuUpIzLWqoI8VOE5OBD2HAdj45jJZba4fpFIqnW9n-iC-FZXsliIzluc6WEcVJU3vpqTHOXWoUNoPoba8MsC8jmgz3pzq0JIU9t6PKFGo6sgND6d816zgC0Emq76_LPi5LcnrEwjzlKKfmHXXh7p7RvgTuWQrYxCBodkaMxuJwArvgTEc71OQFZoqRnTf2gUZmzH6S4SnBhyi26_pqOZyunAS288wrDxxTS7Z2B3_0dVFNM8ezq8S5F2lZ107zBkV0AXjxgsQoQsMfn9MwsH1aZGVq54LOrb1P02kBxMhYpkOXH-tmWVB4Cv0nRyz7PKcAjbS-91wWpKWed2etx0YeW4G89LtN2BBn5N6rVKt3pHQJ_ZAGJWNEkE6lEtdw24_T0qBYRhX0qMaJMi9AOa1mkUi9ePQQ7sP8cP6Qr3yWsYSbXh4fqzgFQq6lgsd6S_IEBF2OJw6K_zaVTjFJ77ybCnRhSHtQ6IfKtkVAvee_hMTmSpCg3hBnoXYHr4Ekj99MM0xG3KDixuzB9xJbVk30WJI28s0V5Y_juOBk40L7IaZhzEwU3N8Xo0Tw1cGuflAPWg5c-9Oxc8v1uEwP2a52G8Xv10A2CRD0-eZKjdm_24GTpcsJuPcda8DAcUt6KHILJOyIvykpqCu0cmwWSjX22nxCiaoVb3l4KVfVQvmjBVs5YQ15eNg743Ewlsr_5g31g2CNQUmL_HOsFej-Au1eu2vnkcoTGY2EC6AfQ9rnu4KnPmB0EeSvDJefsXKGUtAlCSgnb5xwnnutVP2K0lRG66tCuqClhid634LUTf4yUxymbRurEqqYVnY_P3y06nCk5AoMsbT97L2WqcU0f8VRW1i22UsPsBgSDaRWcl2kowiqHsvOKQVW7W3QQOt1_BiKoOx1DKt4SvtRF6G-JJRO8WDKg42L3Qxgzfx6iRqJU8Y3w8TJwzJ5U3nT_usQBrhlPvLOZHRG-zg_frmrNRZROzE0zf-U7vZYfvXBeN8an9-plOdIJXg5z0DUdGoXWTMEUkq1WS1io0qoYa63Rrt0l8ij1-NoJ2FmzTIdp_crFIXwQ0JMRBh_NcCG3RkCqmeTPanC5CGQvFGdIzD07wUmgUEho9kq6uTO7PeeOGkIycz2I04xyLU8AZ8bgByY6vjGO55MwoXe4-rxTUWgiPeMjzXNTcDEaxuvY6T3w8GBZ6OB5Tcp4BJTkGdmAFneGg798Yh5Xwiv1KKM3GT9oX_Yv8smXEsLIm5kaoz7tv2zkf3J09kUG1zFwGM-KHBtmMtFb3o95iGx4mZohjEDfhEw_DKoJXA8SBH0n_oN1yLozoe5KN4AzzKY5xYTKIIa7dq2gspaJPxXIDBxIlNsOdL8e6SVQ3JpAuGAez-Vrv-PsYjf6RlEYu3yHDfcocobb370Wa6WxSN9yCgWy0KOIfm7ju8ezGKfYAjk-zn51QCdNo-Fv9NwAXaCBVrUbYu1UDuPu_SXlrm9xpQynN0f1QynDsgTjAM9jE0bo5fQ_zX7i_8v0W36HsIyIsX9OkRvjHeNNxwU1DwrFddvm7IRFcdZAPz7jPTmgJpWG30ep2XWje_4XomzFh4k7M1iIqQd3-2PyQ4wn3ryjYDZ-TzyHE58ZsNos_cO12Qyx0ayZD1Wbwk2t3-Hw6qJ9iIeYWEgRIgNWxgFZprA6kNMYO9wBso9tV-StIpIqPNtdobmz-uXCuqnZywmxleZk9tsr6WS8VJgVnEqbuBSbzhe9S4aTLakJTpBfNW-7FeFbBu59Gmv50Mpdo6UWBcgf3z6t201aJYJkkYG6FXdTkCnci65tXC5OMkX_Sf7x5rXLhVQg4tfb2NueCWHl3zQo9BSZTK4Px7j-tWMWXQcYwIyMzBwsIwZrX1HC6g3sjermGz1tZrOkHcIbMvlstoJlfB0KJXues_sgRZRZWtJOHjjrp0CMnopidQSByUCDCdQpqvNFiL7DiTDybra5yW97G5j6WDCwPKSrza39zXLjnLRgrccIuvUFtmS3Wr_Zevxv5OPIqULgb65hebnMM8hxAd8_CvM_RymVqyC8M6UFWCAhvYm8qe_LFVCdfJwp0kodkrmeBCTHtUmhjocYooLZMb8EYajXS1vYX7QfHx03jEI1Dq6Jc_VfDncVbp7RGdsxzXklIcP5RW4qHw8sZztCzv87M&h=&v=185Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/shared/checkout/v15/fonts/kGNvv4ukGjf4.woff2 HTTP/1.1Host: get-luxsheets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get-luxsheets.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
Source: global traffic	HTTP traffic detected: GET /pr12nolb2/assets/style.css HTTP/1.1Host: verify.twivoria.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://verify.twivoria.com/pr12nolb2/?brand=hmg-evictionnotice&utm_source=cdabac55-be6f-451f-9464-58984d081e2e&utm_medium=10443&source_one=wjsc57ti7rscghc63j83i6om&offer_id=10596&psid=450741448&cep=nL48YG3D2qmYqKD_KPkvQlnE7WTOKGl2mwEFFaiYnWnCNUs8qndb9jf3qd1-jCrr1yqQi7Ndh75bAvsAAyvrd5DIHOVwklIjO6hKIwQa0IOVLpYCXbMDJjFs1nyme_UP7wzWzMtUspszgdmBOWnNJAa_R7j4Bnf1cQtNlfeYUv6XC12KqpoKJhLmp-3G1DsEISnLCk9UUrkLuHGNuFkvVMKi2Z200_ca0UgIfX_oSNsZKFOeS8yYF7N-O7aNIiJC0NAoKMrSVzEw84aZMlahgLCbhu8wsdoC5DHfd2DTbOR-87D8gmG9M94d14BZ9qbNf0C9GmWp8Vvdr8S7yIvGeMDNY_AwL_YVqBHH3nDOJ-_9H0eh58cmb_hP4HAK9eVde6dJzcCotkMLom8RECvq_cmnl6RPBHNSA-W4pr-OqbWm5aiSvijQnf6SGcyFqATJ7AqUyhGsZI55ZfPmpZK2231YjBxUpFqbFZcMVfDQLjcDjA-3uo0TBA6DQ1aEuxn7HZs_M9RCkxEB206qs8AeqyNPmmmnuGqUTKLOQ6cCfjXPlrg3nPArjg8p4s7UwEAD&lptoken=17af344945e778b8186b&Siteid=76100&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pr12nolb2/assets/jquery.min.js HTTP/1.1Host: verify.twivoria.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://verify.twivoria.com/pr12nolb2/?brand=hmg-evictionnotice&utm_source=cdabac55-be6f-451f-9464-58984d081e2e&utm_medium=10443&source_one=wjsc57ti7rscghc63j83i6om&offer_id=10596&psid=450741448&cep=nL48YG3D2qmYqKD_KPkvQlnE7WTOKGl2mwEFFaiYnWnCNUs8qndb9jf3qd1-jCrr1yqQi7Ndh75bAvsAAyvrd5DIHOVwklIjO6hKIwQa0IOVLpYCXbMDJjFs1nyme_UP7wzWzMtUspszgdmBOWnNJAa_R7j4Bnf1cQtNlfeYUv6XC12KqpoKJhLmp-3G1DsEISnLCk9UUrkLuHGNuFkvVMKi2Z200_ca0UgIfX_oSNsZKFOeS8yYF7N-O7aNIiJC0NAoKMrSVzEw84aZMlahgLCbhu8wsdoC5DHfd2DTbOR-87D8gmG9M94d14BZ9qbNf0C9GmWp8Vvdr8S7yIvGeMDNY_AwL_YVqBHH3nDOJ-_9H0eh58cmb_hP4HAK9eVde6dJzcCotkMLom8RECvq_cmnl6RPBHNSA-W4pr-OqbWm5aiSvijQnf6SGcyFqATJ7AqUyhGsZI55ZfPmpZK2231YjBxUpFqbFZcMVfDQLjcDjA-3uo0TBA6DQ1aEuxn7HZs_M9RCkxEB206qs8AeqyNPmmmnuGqUTKLOQ6cCfjXPlrg3nPArjg8p4s7UwEAD&lptoken=17af344945e778b8186b&Siteid=76100&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.kukaj-to.chat
Source: global traffic	DNS traffic detected: DNS query: www.empowerstratic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.mastertrackingdomain.com
Source: global traffic	DNS traffic detected: DNS query: majorleagueprices.icu
Source: global traffic	DNS traffic detected: DNS query: trk-quantivex.com
Source: global traffic	DNS traffic detected: DNS query: secureanalytic.com
Source: global traffic	DNS traffic detected: DNS query: event.trk-quantivex.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: subscription.trk-quantivex.com
Source: global traffic	DNS traffic detected: DNS query: api.taboola.com
Source: global traffic	DNS traffic detected: DNS query: extension.secureanalytic.com
Source: global traffic	DNS traffic detected: DNS query: notification.secureanalytic.com
Source: global traffic	DNS traffic detected: DNS query: images.taboola.com
Source: global traffic	DNS traffic detected: DNS query: pushclk.com
Source: global traffic	DNS traffic detected: DNS query: d22322n8919ncg.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: cdn-media-2020.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: www.trk2dkt.com
Source: global traffic	DNS traffic detected: DNS query: get-luxsheets.com
Source: global traffic	DNS traffic detected: DNS query: browser.sentry-cdn.com
Source: global traffic	DNS traffic detected: DNS query: a.storyblok.com
Source: global traffic	DNS traffic detected: DNS query: ally.quandral.com
Source: global traffic	DNS traffic detected: DNS query: o4504272872341504.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: trk-synovetra.com
Source: global traffic	DNS traffic detected: DNS query: www.paypal.com
Source: global traffic	DNS traffic detected: DNS query: won.quandral.com
Source: global traffic	DNS traffic detected: DNS query: js.stripe.com
Source: global traffic	DNS traffic detected: DNS query: turapport-strience.icu
Source: global traffic	DNS traffic detected: DNS query: spin.quandral.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: verify.twivoria.com
Source: global traffic	DNS traffic detected: DNS query: click.trackwora.com
Source: global traffic	DNS traffic detected: DNS query: event.trk-synovetra.com
Source: global traffic	DNS traffic detected: DNS query: gryclk.xyz

Source: unknown

HTTP traffic detected: POST /register/event_log/q5ejw8j4g0 HTTP/1.1Host: event.trk-quantivex.comConnection: keep-aliveContent-Length: 122sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/jsonAccept: */*Origin: https://majorleagueprices.icuSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://majorleagueprices.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 17:19:08 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closepermissions-policy: interest-cohort=()strict-transport-security: max-age=31536000; includeSubDomains; preloadcf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RPAnOyGI6KZaBTctoYJN4YX1bIv4Bbr3PvwkkFuuwKty76A8TMBTZq%2FeUeWAoA4j%2Bthk1PmbXrUZB06l9LUA%2FKIP9%2BmAE2LSSTmqUNf4LnJDlttpdoI1sYuXsWLefbkF%2FHAcTQvjgNE%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8f38938d3a468c11-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1899&min_rtt=1896&rtt_var=718&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1382&delivery_rate=1517671&cwnd=198&unsent_bytes=0&cid=98afeda545b4d6ac&ts=495&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: application/json; charset=utf-8x-cloud-trace-context: 0cd41b30209840746349ff9e7d7770e0date: Tue, 17 Dec 2024 17:20:04 GMTserver: Google FrontendContent-Length: 126via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 17 Dec 2024 17:20:06 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: application/json; charset=utf-8x-cloud-trace-context: db7136ca35950d4e0c13447bd28f81cadate: Tue, 17 Dec 2024 17:20:07 GMTserver: Google FrontendContent-Length: 126via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 17 Dec 2024 17:20:08 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: application/json; charset=utf-8x-cloud-trace-context: 768959b7ddfe7cd7069db09a44e6e589date: Tue, 17 Dec 2024 17:20:08 GMTserver: Google FrontendContent-Length: 141via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 17:20:15 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mSDQG7RQhVeCGTjCX8C1akihv3dA03qQKNPMZp%2BoLTZFJXwGXv%2FDTLqSMuesgF2NsmsIMT9ciJ9%2BmEAHviSsToQgsJK41KcIb89zRLRUURg%2BQxSMeY2ZUEE0vfvtFBt89favKw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8f38952fec5f0f49-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1511&min_rtt=1495&rtt_var=593&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1713&delivery_rate=1798029&cwnd=215&unsent_bytes=0&cid=d4a8bad007e1a73a&ts=501&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 17 Dec 2024 17:20:21 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 17 Dec 2024 17:20:22 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: application/json; charset=utf-8x-cloud-trace-context: 88fdd123e6c3c808a5283a26c6ff2396date: Tue, 17 Dec 2024 17:20:23 GMTserver: Google FrontendContent-Length: 123via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_276.1.dr	String found in binary or memory: http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLMontserratThinMontserratRomanWeightExtraLightLig
Source: chromecache_175.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_276.1.dr	String found in binary or memory: http://www.zkysky.com.ar/This
Source: chromecache_232.1.dr	String found in binary or memory: https://a.storyblok.com/f/160399/300x78/3f80534177/dreamzy-logo-black.svg
Source: chromecache_232.1.dr	String found in binary or memory: https://a.storyblok.com/f/160399/300x78/e778f9065e/dreamzy-logo-white.svg
Source: chromecache_232.1.dr	String found in binary or memory: https://a.storyblok.com/f/160399/512x512/0a4eafbbe8/product4.png
Source: chromecache_232.1.dr	String found in binary or memory: https://a.storyblok.com/f/160399/512x512/4d0e50f195/product1.png
Source: chromecache_232.1.dr	String found in binary or memory: https://a.storyblok.com/f/160399/512x512/b0627fe043/product3.png
Source: chromecache_232.1.dr	String found in binary or memory: https://a.storyblok.com/f/160399/512x512/f0cd706582/product2.png
Source: chromecache_253.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
Source: chromecache_232.1.dr	String found in binary or memory: https://browser.sentry-cdn.com/7.23.0/bundle.min.js
Source: chromecache_232.1.dr	String found in binary or memory: https://browser.sentry-cdn.com/7.23.0/bundle.tracing.min.js
Source: chromecache_232.1.dr	String found in binary or memory: https://cdn.ampproject.org/v0/amp-web-push-0.1.js
Source: chromecache_272.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/665deae8723a9bcb12bc3130/665deae8723a9bcb12bc31ad_instagram-color
Source: chromecache_272.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/665deae8723a9bcb12bc3130/6660aec8cde7bb1fca7c6631_BG-Image.jpeg
Source: chromecache_232.1.dr	String found in binary or memory: https://developer.paypal.com/sdk/js/reference/#createorder
Source: chromecache_232.1.dr	String found in binary or memory: https://dreamzystore.com/pages/contact
Source: chromecache_232.1.dr	String found in binary or memory: https://dreamzystore.com/policies/privacy-policy
Source: chromecache_232.1.dr	String found in binary or memory: https://dreamzystore.com/policies/refund-policy
Source: chromecache_232.1.dr	String found in binary or memory: https://dreamzystore.com/policies/terms-of-service
Source: chromecache_232.1.dr	String found in binary or memory: https://edge.hypertune.com/graphql?token=U2FsdGVkX18buKDzHBuYONTlutooCxI9YQNUW8Z%2FH%2FQ%3D&body=$
Source: chromecache_293.1.dr	String found in binary or memory: https://ezgif.com/optimize
Source: chromecache_167.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_167.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_253.1.dr, chromecache_232.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_232.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_253.1.dr, chromecache_232.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIGpYSxP.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIWpYQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIipYSxP.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIupYSxP.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dmsans/v15/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dmsans/v15/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu6-K6h9Q.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dmserifdisplay/v15/-nFnOHM81r4j6k0gjAW3mujVU2B2G_5x0ujy.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dmserifdisplay/v15/-nFnOHM81r4j6k0gjAW3mujVU2B2G_Bx0g.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/droidsans/v18/SlGVmQWMvZQIdix7AFxXkHNSbQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/droidsans/v18/SlGWmQWMvZQIdix7AFxXmMh3eDs1Zw.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/greatvibes/v19/RWmMoKWR9v4ksMfaWd_JN9XBiaQ6DQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/greatvibes/v19/RWmMoKWR9v4ksMfaWd_JN9XFiaQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/greatvibes/v19/RWmMoKWR9v4ksMfaWd_JN9XIiaQ6DQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/greatvibes/v19/RWmMoKWR9v4ksMfaWd_JN9XJiaQ6DQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/greatvibes/v19/RWmMoKWR9v4ksMfaWd_JN9XKiaQ6DQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/greatvibes/v19/RWmMoKWR9v4ksMfaWd_JN9XLiaQ6DQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-mPCLQ7A.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-oPCI.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AUi-qJCY.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AXC-q.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwaPGR_p.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI3wi_FQft1dw.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI3wi_Gwft.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_FQft1dw.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRxC7mw9c.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRxi7mw9c.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRxy7mw9c.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRzS7mw9c.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752FD8Ghe4.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752Fj8Ghe4.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752Fz8Ghe4.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752GT8G.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752HT8Ghe4.woff2)
Source: chromecache_310.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_310.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizYRExUiTo99u79D0e0w8mIEDQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizYRExUiTo99u79D0e0x8mI.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizYRExUiTo99u79D0e0ycmIEDQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizYRExUiTo99u79D0e0ysmIEDQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0-ExdGM.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0aExdGM.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0yExdGM.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizdRExUiTo99u79D0e8fOydIRUdwzM.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizdRExUiTo99u79D0e8fOydIhUdwzM.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizdRExUiTo99u79D0e8fOydKxUdwzM.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizdRExUiTo99u79D0e8fOydLxUd.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizfRExUiTo99u79B_mh0O6tLQ.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizfRExUiTo99u79B_mh0OCtLQ0Z.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizfRExUiTo99u79B_mh0OOtLQ0Z.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v17/jizfRExUiTo99u79B_mh0OqtLQ0Z.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/zillaslab/v11/dFa5ZfeM_74wlPZtksIFYskZ6H2pW2hz.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/zillaslab/v11/dFa5ZfeM_74wlPZtksIFYskZ6HOpWw.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/zillaslab/v11/dFa6ZfeM_74wlPZtksIFajQ6_UyI.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/zillaslab/v11/dFa6ZfeM_74wlPZtksIFajo6_Q.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/zillaslab/v11/dFanZfeM_74wlPZtksIFaj8CDHeZV3B3Taw.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/zillaslab/v11/dFanZfeM_74wlPZtksIFaj8CDHeZWXB3.woff2)
Source: chromecache_232.1.dr	String found in binary or memory: https://get-luxsheets.com/callback
Source: chromecache_232.1.dr	String found in binary or memory: https://get-luxsheets.com/callback?o=%orderId%
Source: chromecache_276.1.dr	String found in binary or memory: https://github.com/JulietaUla/Montserrat)Montserrat
Source: chromecache_255.1.dr, chromecache_287.1.dr, chromecache_189.1.dr, chromecache_218.1.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript
Source: chromecache_253.1.dr	String found in binary or memory: https://help.miraclebrand.co/en-US
Source: chromecache_253.1.dr	String found in binary or memory: https://hollywoodlife.com/2017/04/17/sleep-on-silk-pillowcase-why-benefits-kourtney-kardashian/
Source: chromecache_232.1.dr	String found in binary or memory: https://js.stripe.com/v3/
Source: chromecache_279.1.dr, chromecache_300.1.dr, chromecache_211.1.dr	String found in binary or memory: https://kit.fontawesome.com/adc0c796b0.js
Source: chromecache_232.1.dr	String found in binary or memory: https://lvl11.everflowclient.io/affiliate/signup
Source: chromecache_227.1.dr	String found in binary or memory: https://secureanalytic.com/scripts/ext/script/64d5p99gj0?url=
Source: chromecache_227.1.dr	String found in binary or memory: https://secureanalytic.com/scripts/sw/script/64d5p99gj0?url=
Source: chromecache_253.1.dr	String found in binary or memory: https://trk-quantivex.com/scripts/push/script/64d5p99gj0?url=
Source: chromecache_163.1.dr	String found in binary or memory: https://trk-synovetra.com/scripts/ext/script/57dkr26ew8?url=
Source: chromecache_171.1.dr, chromecache_242.1.dr, chromecache_152.1.dr	String found in binary or memory: https://trk-synovetra.com/scripts/push/script/57dkr26ew8?url=
Source: chromecache_163.1.dr	String found in binary or memory: https://trk-synovetra.com/scripts/sw/script/57dkr26ew8?url=
Source: chromecache_175.1.dr, chromecache_156.1.dr	String found in binary or memory: https://use.typekit.net
Source: chromecache_253.1.dr	String found in binary or memory: https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/
Source: chromecache_232.1.dr	String found in binary or memory: https://www.clarity.ms/tag/
Source: chromecache_232.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_232.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-P36BH66P
Source: chromecache_253.1.dr	String found in binary or memory: https://www.miraclebrand.co/blogs/compare
Source: chromecache_253.1.dr	String found in binary or memory: https://www.miraclebrand.co/pages/bedding-all
Source: chromecache_253.1.dr	String found in binary or memory: https://www.miraclebrand.co/pages/privacy-policy
Source: chromecache_253.1.dr	String found in binary or memory: https://www.miraclebrand.co/pages/terms-and-conditions
Source: chromecache_232.1.dr	String found in binary or memory: https://www.paypal.com/sdk/js?currency=USD&intent=authorize&commit=false&client-id=AVUWL
Source: chromecache_303.1.dr, chromecache_168.1.dr	String found in binary or memory: https://www.trk2dkt.com/?nid=1298&transaction_id=
Source: chromecache_232.1.dr	String found in binary or memory: https://www.trk2dkt.com/scripts/sdk/everflow.js
Source: chromecache_253.1.dr	String found in binary or memory: https://www.webmd.com/skin-problems-and-treatments/psoriasis/psoriasis-clothing-bedding

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443

Source: classification engine

Classification label: mal64.troj.win@28/292@120/38

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1984,i,3675047681052149283,17492376251998043679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.kukaj-to.chat/sedo"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1984,i,3675047681052149283,17492376251998043679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:

Binary string: .uFj3NiDk .Pdb2Hk_U { source: chromecache_154.1.dr

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_269.1.dr

Binary or memory string: hgFsr

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.kukaj-to.chat/sedo	0%	Avira URL Cloud	safe
http://www.kukaj-to.chat/sedo	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://get-luxsheets.com/assets/shared/checkout/v15/images/AA2yMk38yKhn.svg	0%	Avira URL Cloud	safe
https://get-luxsheets.com/assets/shared/checkout/v15/media/h6kgpHR2MS9C.gif	0%	Avira URL Cloud	safe
https://spin.quandral.com/permissions-redirect-script.js	0%	Avira URL Cloud	safe
https://www.trk2dkt.com/scripts/sdk/everflow.js	100%	Avira URL Cloud	malware
https://get-luxsheets.com/jquery-3.5.0.min.js	0%	Avira URL Cloud	safe
https://majorleagueprices.icu/images/665deae8723a9bcb12bc32f0_prevention.svg	0%	Avira URL Cloud	safe
https://get-luxsheets.com/callback	0%	Avira URL Cloud	safe
https://d22322n8919ncg.cloudfront.net/content/c/internal/icone-robot-android-rouge5001.jpeg	0%	Avira URL Cloud	safe
https://get-luxsheets.com/assets/shared/checkout/img/logos/paypal.svg	0%	Avira URL Cloud	safe
https://help.miraclebrand.co/en-US	0%	Avira URL Cloud	safe
https://get-luxsheets.com/assets/shared/checkout/v15/css/style.css	0%	Avira URL Cloud	safe
https://majorleagueprices.icu/images/bottom.webp	0%	Avira URL Cloud	safe
https://majorleagueprices.icu/css/in3-blissy-com.c3a4f0162.css	0%	Avira URL Cloud	safe
https://ally.quandral.com/age-verification?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185	0%	Avira URL Cloud	safe
https://ally.quandral.com/push-script.js	0%	Avira URL Cloud	safe
https://ally.quandral.com/favicon.ico	0%	Avira URL Cloud	safe
https://majorleagueprices.icu/images/mlogo.svg	0%	Avira URL Cloud	safe
https://get-luxsheets.com/assets/shared/checkout/img/logos/ads.png	0%	Avira URL Cloud	safe
https://click.trackwora.com/in/01HAWB23PV3SBFDFFBKE5XDDW5?source=10443&Siteid=PLACEHOLDER&psid=450741448&offerid=10563&subdomain=spot.&firstname=&lastname=&email=&zip_code=&creative_id=31399&click_id=CCRT17gaQpaBC0aC6zCchA	0%	Avira URL Cloud	safe
https://www.miraclebrand.co/pages/privacy-policy	0%	Avira URL Cloud	safe
https://won.quandral.com/age-verification/assets/font/lato-bold.woff	0%	Avira URL Cloud	safe
https://ally.quandral.com/age-verification/assets/font/lato-bold.woff	0%	Avira URL Cloud	safe
https://won.quandral.com/push-script.js	0%	Avira URL Cloud	safe
https://dreamzystore.com/pages/contact	0%	Avira URL Cloud	safe
https://lvl11.everflowclient.io/affiliate/signup	0%	Avira URL Cloud	safe
https://dreamzystore.com/policies/refund-policy	0%	Avira URL Cloud	safe
https://subscription.trk-quantivex.com/register/push/q5ejw8j4g0	0%	Avira URL Cloud	safe
https://trk-quantivex.com/scripts/push/script/64d5p99gj0?url=	0%	Avira URL Cloud	safe
https://majorleagueprices.icu/images/665deae8723a9bcb12bc315a_blissy-box-500.jpg	0%	Avira URL Cloud	safe
https://majorleagueprices.icu/images/665deae8723a9bcb12bc31b2_blissy-box.jpg	0%	Avira URL Cloud	safe
https://majorleagueprices.icu/images/miracle2.webp	0%	Avira URL Cloud	safe
https://www.trk2dkt.com/29PD1BG/H7JJ78/?sub1=1377_1964&sub2=6580c255f11d4fab852aeec5f5be679d	100%	Avira URL Cloud	malware
https://get-luxsheets.com/CheckoutSDK.js?v=v15	0%	Avira URL Cloud	safe
https://majorleagueprices.icu/service-worker.js	0%	Avira URL Cloud	safe
https://get-luxsheets.com/assets/shared/checkout/v15/css/loading.css	0%	Avira URL Cloud	safe
https://get-luxsheets.com/assets/shared/checkout/v15/css/fonts/EllenLuff---Larken-Regular.woff2	0%	Avira URL Cloud	safe
https://ally.quandral.com/age-verification/assets/style.css	0%	Avira URL Cloud	safe
https://get-luxsheets.com/assets/shared/checkout/v15/fonts/6W9ZcpouIsGQ.woff2	0%	Avira URL Cloud	safe
https://won.quandral.com/age-verification?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185	0%	Avira URL Cloud	safe
https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/	0%	Avira URL Cloud	safe
https://turapport-strience.icu/0b799de6-47be-4e34-8e0d-638110360f29/2?source=10443&Siteid=76100&psid=450741448&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQ	0%	Avira URL Cloud	safe
https://get-luxsheets.com/assets/shared/checkout/v15/css/bulma.min.css	0%	Avira URL Cloud	safe
https://event.trk-quantivex.com/register/event_log/q5ejw8j4g0	0%	Avira URL Cloud	safe
https://turapport-strience.icu/0b799de6-47be-4e34-8e0d-638110360f29?source=10443&Siteid=76100&psid=450741448&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQ	0%	Avira URL Cloud	safe
https://d22322n8919ncg.cloudfront.net/content/c/internal/unnamed1117.jpeg?h=&v=533	0%	Avira URL Cloud	safe
https://get-luxsheets.com/callback?o=%orderId%	0%	Avira URL Cloud	safe
https://get-luxsheets.com/assets/shared/checkout/v15/css/fonts/brandon_med.woff2	0%	Avira URL Cloud	safe
https://dreamzystore.com/policies/privacy-policy	0%	Avira URL Cloud	safe
https://won.quandral.com/permissions-redirect-script.js	0%	Avira URL Cloud	safe
https://get-luxsheets.com/assets/shared/checkout/v15/fonts/kGNvv4ukGjf4.woff2	0%	Avira URL Cloud	safe
https://get-luxsheets.com/assets/shared/checkout/v15/fonts/AAkorzFFbu1n.ttf	0%	Avira URL Cloud	safe
https://spin.quandral.com/push-script.js	0%	Avira URL Cloud	safe
https://www.miraclebrand.co/pages/terms-and-conditions	0%	Avira URL Cloud	safe
https://dreamzystore.com/policies/terms-of-service	0%	Avira URL Cloud	safe
https://majorleagueprices.icu/images/665deae8723a9bcb12bc32ef_popsugar.svg	0%	Avira URL Cloud	safe
https://www.miraclebrand.co/blogs/compare	0%	Avira URL Cloud	safe
https://ally.quandral.com/permissions-redirect-script.js	0%	Avira URL Cloud	safe
https://d22322n8919ncg.cloudfront.net/content/c/internal/download%20%288%294427.webp	0%	Avira URL Cloud	safe
https://www.mastertrackingdomain.com/37HF1RW/2H7HLJP4/?source_id=1964&sub1=0cde5eace92144838554e74dacb8fa45	100%	Avira URL Cloud	malware
https://get-luxsheets.com/assets/shared/checkout/v15/images/xNcpsuWcBQjG.webp	0%	Avira URL Cloud	safe
https://majorleagueprices.icu/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	0%	Avira URL Cloud	safe
https://majorleagueprices.icu/images/t1.webp	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLMontserratThinMontserratRomanWeightExtraLightLig	0%	Avira URL Cloud	safe
https://won.quandral.com/age-verification/assets/age-verification.png	0%	Avira URL Cloud	safe
https://d22322n8919ncg.cloudfront.net/content/c/internal/icon8653.jpeg	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
empowerstratic.com	194.11.246.12	true	false	unknown
browser.sentry-cdn.com	151.101.194.217	true	false	high
tls13.taboola.map.fastly.net	151.101.193.44	true	false	high
verify.twivoria.com	104.21.0.215	true	false	unknown
paypal-dynamic.map.fastly.net	151.101.1.21	true	false	high
d22322n8919ncg.cloudfront.net	18.165.213.106	true	false	unknown
mobile-gtalk.l.google.com	64.233.166.188	true	false	high
won.quandral.com	104.21.81.125	true	false	high
www.trk2dkt.com	35.244.193.194	true	false	high
event.trk-synovetra.com	104.21.50.223	true	false	high
get-luxsheets.com	34.111.103.167	true	false	high
turapport-strience.icu	18.184.182.95	true	false	unknown
click.trackwora.com	172.67.165.12	true	false	unknown
www.google.com	142.250.181.100	true	false	high
gryclk.xyz	46.4.249.94	true	true	unknown
extension.secureanalytic.com	172.67.204.164	true	false	high
ally.quandral.com	104.21.81.125	true	false	high
o4504272872341504.ingest.sentry.io	34.120.195.249	true	false	high
android.l.google.com	172.217.19.206	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
spin.quandral.com	104.21.81.125	true	false	high
event.trk-quantivex.com	104.21.13.162	true	false	high
secureanalytic.com	104.21.77.48	true	false	high
a.storyblok.com	18.161.111.55	true	false	high
www.mastertrackingdomain.com	172.67.138.66	true	false	high
www.kukaj-to.chat	104.21.21.144	true	false	high
majorleagueprices.icu	104.21.46.14	true	false	high
s3-w.us-east-1.amazonaws.com	3.5.27.174	true	false	high
trk-quantivex.com	104.21.13.162	true	false	high
dexeqbeb7giwr.cloudfront.net	108.158.75.53	true	false	high
trk-synovetra.com	172.67.167.163	true	false	high
subscription.trk-quantivex.com	172.67.156.201	true	false	unknown
notification.secureanalytic.com	172.67.204.164	true	false	high
pushclk.com	172.67.171.114	true	false	high
api.taboola.com	unknown	unknown	false	high
cdn-media-2020.s3.amazonaws.com	unknown	unknown	false	high
www.paypal.com	unknown	unknown	false	high
use.fontawesome.com	unknown	unknown	false	high
images.taboola.com	unknown	unknown	false	high
kit.fontawesome.com	unknown	unknown	false	high
www.empowerstratic.com	unknown	unknown	false	high
js.stripe.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://get-luxsheets.com/assets/shared/checkout/v15/media/h6kgpHR2MS9C.gif	false	Avira URL Cloud: safe	unknown
https://a.storyblok.com/f/160399/300x78/3f80534177/dreamzy-logo-black.svg	false		high
https://spin.quandral.com/permissions-redirect-script.js	false	Avira URL Cloud: safe	unknown
https://get-luxsheets.com/assets/shared/checkout/v15/images/AA2yMk38yKhn.svg	false	Avira URL Cloud: safe	unknown
https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185	false		unknown
https://majorleagueprices.icu/images/665deae8723a9bcb12bc32f0_prevention.svg	false	Avira URL Cloud: safe	unknown
https://www.trk2dkt.com/scripts/sdk/everflow.js	false	Avira URL Cloud: malware	unknown
https://a.nel.cloudflare.com/report/v4?s=mSDQG7RQhVeCGTjCX8C1akihv3dA03qQKNPMZp%2BoLTZFJXwGXv%2FDTLqSMuesgF2NsmsIMT9ciJ9%2BmEAHviSsToQgsJK41KcIb89zRLRUURg%2BQxSMeY2ZUEE0vfvtFBt89favKw%3D%3D	false		high
https://pushclk.com/tr/o/IgFQdy47E0l1TDSwYRWQhTwKmNk3COc7vu2MFx4zBhZ3H_TakF1IGk_x-yxEDAXIXZW8q46dP9RRh2C5s1wG0cmzoN9dMDOXlUG0Vsat2X2d5v2nne2bTrYNt9XKA_GKNsz4hJ_TstRR8-WABMw76jA5SrFtAw8uZg7tgzL9ZtxKKyJjsuQlKwnd8CldiKw7AZzMjaPLmk5VrMXAQF3qOR3B3sHf1pNVFqnSVG1ybgxbAMeN31hGpCMgjf4NYCiZzvBSwvieZW4DUO3vmme5oMiYumC4DFIuCyqi21tBjtvJubAleai_888aK4MjwRuWoQT3MBsxSESFxS8oyUVzHS7hrJynVZVDwGQ27g0kjj4uWJ7OGxURaWAVeTo8-7NDDsrlglEmA2ajV7XOYtFy33UIM9TelnRN57rMQDhoF_UHtVsN-ZLBXrMmS-9cK6wOHGa3QXqheQknYD17ys9VYttw5SkFI4FtapxhA30BEQeQAbb4Ifq3t0kyFU5JVOgJeB0e_WkGX0hfPgt0XU4HirEABoIMB045auhGGaJ-sZyNfs25uHP2-amgnIYpwYf0zFjNhcpIdrE0wc122mgXHPVq2s7DzwCpG_Wts1wxJ8A9hIWxvTrroTg5R0AOqEpyYMBqH7TEOq0Ai9ndEvIasvmw4L15wxHBpCv8Ah9sXKykji1gf-a9v6BQXQ5jDP8LZUI8Q668H45c6YXMzr0HvkhI8wMZToe1_C6HgpPna7pv5liwSvp5Wal3GzJgNvsDC2vB3V0Xl16IJ8PNguWXZO0BfLFojJFnwvXEQWEQnVOqhPxRTcdlifbsBMKzUxlYmjIiZ8LR02vg0-H_aRqn1Ff56tvNOL7ojm_hW-FpH-PRsP40N1ZyY4A9iUJbLu3BaG38zS5W7J6KprphLwvQxzy1kbhd-9tXc_F3o9XcApGq1F250YMR7EMIa8_3YTQ9mSBFs-60-G31t6qc5mUXTHsveCTiwRELUH9UUKoSvdO1mzJM6RsCDRWAW2vj-DFCkWYTwO_EBdFvYGAieubUQAe1Ww35ksFesyZL71wrrA582u8-0GwVmDYtq0XRqduVtey0dQUcfffGcfnZz_8U0Zz-z2c0jC_leCjeDtEUL_IopdDKdkjVcikE4XtlDblOZSjhOZEBWU7wpmxMSBVdtjYBAe9a3NgZ3ne1lBU5ISa6OSylIgAZJvsf_oRg4oOn3_z7kK0PM8Vno2aIxwhGkht-Mkq2DBxNZnbXFhwSrkHjp7anvqrPy01D8ZHHcVKYolz9V8OdxVuntEZ2zHNeSeE-bo2xIq7KYupItGMyVZAqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRjshoXsBLUIPpbyLlI65nM9?h=&v=185	false		high
https://get-luxsheets.com/assets/shared/checkout/img/logos/paypal.svg	false	Avira URL Cloud: safe	unknown
https://get-luxsheets.com/jquery-3.5.0.min.js	false	Avira URL Cloud: safe	unknown
https://d22322n8919ncg.cloudfront.net/content/c/internal/icone-robot-android-rouge5001.jpeg	false	Avira URL Cloud: safe	unknown
https://trk-synovetra.com/scripts/push/script/57dkr26ew8?url=won.quandral.com	false		high
https://trk-synovetra.com/scripts/ext/script/57dkr26ew8?url=ally.quandral.com	false		high
https://trk-synovetra.com/scripts/push/script/57dkr26ew8?url=ally.quandral.com	false		high
https://api.taboola.com/2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412	false		high
https://cdn-media-2020.s3.amazonaws.com/content/badges/7dsfjhk35tbd.png	false		high
https://majorleagueprices.icu/images/bottom.webp	false	Avira URL Cloud: safe	unknown
https://get-luxsheets.com/assets/shared/checkout/v15/css/style.css	false	Avira URL Cloud: safe	unknown
https://ally.quandral.com/push-script.js	false	Avira URL Cloud: safe	unknown
https://majorleagueprices.icu/css/in3-blissy-com.c3a4f0162.css	false	Avira URL Cloud: safe	unknown
https://ally.quandral.com/age-verification?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185	false	Avira URL Cloud: safe	unknown
https://ally.quandral.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://majorleagueprices.icu/images/mlogo.svg	false	Avira URL Cloud: safe	unknown
https://get-luxsheets.com/assets/shared/checkout/img/logos/ads.png	false	Avira URL Cloud: safe	unknown
https://click.trackwora.com/in/01HAWB23PV3SBFDFFBKE5XDDW5?source=10443&Siteid=PLACEHOLDER&psid=450741448&offerid=10563&subdomain=spot.&firstname=&lastname=&email=&zip_code=&creative_id=31399&click_id=CCRT17gaQpaBC0aC6zCchA	false	Avira URL Cloud: safe	unknown
https://subscription.trk-quantivex.com/register/push/q5ejw8j4g0	false	Avira URL Cloud: safe	unknown
https://won.quandral.com/age-verification/assets/font/lato-bold.woff	false	Avira URL Cloud: safe	unknown
https://ally.quandral.com/age-verification/assets/font/lato-bold.woff	false	Avira URL Cloud: safe	unknown
https://trk-synovetra.com/scripts/sw/script/57dkr26ew8?url=ally.quandral.com	false		high
https://majorleagueprices.icu/images/665deae8723a9bcb12bc31b2_blissy-box.jpg	false	Avira URL Cloud: safe	unknown
https://won.quandral.com/push-script.js	false	Avira URL Cloud: safe	unknown
https://majorleagueprices.icu/images/665deae8723a9bcb12bc315a_blissy-box-500.jpg	false	Avira URL Cloud: safe	unknown
https://majorleagueprices.icu/images/miracle2.webp	false	Avira URL Cloud: safe	unknown
https://www.trk2dkt.com/29PD1BG/H7JJ78/?sub1=1377_1964&sub2=6580c255f11d4fab852aeec5f5be679d	false	Avira URL Cloud: malware	unknown
https://get-luxsheets.com/CheckoutSDK.js?v=v15	false	Avira URL Cloud: safe	unknown
https://majorleagueprices.icu/service-worker.js	false	Avira URL Cloud: safe	unknown
https://pushclk.com/tr/o/JDvPdy1sMN2uSAhlhv6ZzT2YnQxZ7rJfSs4wm0B4y3bNXZQeYA1vbxm0grejE8Qkr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzVVc-bEV6pChqnKE1y3b-JcRtZiozEH5P4yQTG4XnjEIHmPC1ZZywva756pQ0Tarek2pQX_-hFToCq1f-_X_R7W80L0S01Pc9dcMFi80BH9bvw2y31ogl6bmvyYChOfbT0-yWKXaF438VzfFgTGKHKc9pF9DhLELyDwmJ3XzRLt-PHXXsuUKVgQdLIduQenGyBCTHtUmhjocYooLZMb8EYajXS1vYX7QfHx03jEI1Dq6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_CZzf_hxCPVQ8zsZge_Ox8GQ==?h=&v=185	false		high
https://won.quandral.com/age-verification?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185	false	Avira URL Cloud: safe	unknown
https://get-luxsheets.com/assets/shared/checkout/v15/fonts/6W9ZcpouIsGQ.woff2	false	Avira URL Cloud: safe	unknown
https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com	false		unknown
https://get-luxsheets.com/assets/shared/checkout/v15/css/loading.css	false	Avira URL Cloud: safe	unknown
https://api.taboola.com/2.0/json/notifyai-digitalsubscribers/recommendations.notify-available?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412&response.id=__2bc45aa076fb445c279c905146a9f5aa__a8bd327b98bbd68842c75677f1e6b089__~~V1~~-8546183196209246962~~EvnSfqjKR28lZYTWEDIELF4uCFvA5_b1Wov7B-yjFNXnoZueAsnM0UTkqRiz-o8uV9GNaet_FWxUAZ9PPPsFwepP0QI8ApBUqMn1Hn67unFW3gMxxE5FklL3byiLVORnL2mKl-VYyYpmjqtTDTKL2EuhYyT-X-BIWbZ-mIZ0peXX-x-fnc1sjKo9ZL00ocmTMO7Tswj5WH4cylUjQLFLHQ__text&response.session=v2_1d395c24c6744aa481ce31fc78793722_450741448_1734455985_1734455985_CIi3jgYQ0pdeGMGOiK29MiABKAQw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiI6d315YeYt1lwAIABAA	false		high
https://ally.quandral.com/age-verification/assets/style.css	false	Avira URL Cloud: safe	unknown
https://get-luxsheets.com/assets/shared/checkout/v15/css/fonts/EllenLuff---Larken-Regular.woff2	false	Avira URL Cloud: safe	unknown
https://turapport-strience.icu/0b799de6-47be-4e34-8e0d-638110360f29/2?source=10443&Siteid=76100&psid=450741448&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQ	false	Avira URL Cloud: safe	unknown
https://get-luxsheets.com/assets/shared/checkout/v15/css/bulma.min.css	false	Avira URL Cloud: safe	unknown
https://turapport-strience.icu/0b799de6-47be-4e34-8e0d-638110360f29?source=10443&Siteid=76100&psid=450741448&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQ	false	Avira URL Cloud: safe	unknown
https://images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2F56d932aa1f6cfa49bdc3978ab8992521?srcxy=notifyai-digitalsubscribers_--___2bc45aa076fb445c279c905146a9f5aa__a8bd327b98bbd68842c75677f1e6b089__~~V1~~-8546183196209246962~~EvnSfqjKR28lZYTWEDIELF4uCFvA5_b1Wov7B-yjFNXnoZueAsnM0UTkqRiz-o8uV9GNaet_FWxUAZ9PPPsFwepP0QI8ApBUqMn1Hn67unFW3gMxxE5FklL3byiLVORnL2mKl-VYyYpmjqtTDTKL2EuhYyT-X-BIWbZ-mIZ0peXX-x-fnc1sjKo9ZL00ocmTMO7Tswj5WH4cylUjQLFLHQ__text&response.session=v2_1d395c24c6744aa481ce31fc78793722_450741448_1734455985_1734455985_CIi3jgYQ0pdeGMGOiK29MiABKAQw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiI6d315YeYt1lwAIABAA	false		high
https://event.trk-quantivex.com/register/event_log/q5ejw8j4g0	false	Avira URL Cloud: safe	unknown
https://d22322n8919ncg.cloudfront.net/content/c/internal/unnamed1117.jpeg?h=&v=533	false	Avira URL Cloud: safe	unknown
https://get-luxsheets.com/assets/shared/checkout/v15/css/fonts/brandon_med.woff2	false	Avira URL Cloud: safe	unknown
https://won.quandral.com/permissions-redirect-script.js	false	Avira URL Cloud: safe	unknown
https://js.stripe.com/v3/	false		high
https://get-luxsheets.com/assets/shared/checkout/v15/fonts/kGNvv4ukGjf4.woff2	false	Avira URL Cloud: safe	unknown
https://spin.quandral.com/push-script.js	false	Avira URL Cloud: safe	unknown
https://majorleagueprices.icu/images/665deae8723a9bcb12bc32ef_popsugar.svg	false	Avira URL Cloud: safe	unknown
https://secureanalytic.com/scripts/ext/script/64d5p99gj0?url=majorleagueprices.icu	false		high
https://get-luxsheets.com/assets/shared/checkout/v15/fonts/AAkorzFFbu1n.ttf	false	Avira URL Cloud: safe	unknown
https://ally.quandral.com/permissions-redirect-script.js	false	Avira URL Cloud: safe	unknown
https://d22322n8919ncg.cloudfront.net/content/c/internal/download%20%288%294427.webp	false	Avira URL Cloud: safe	unknown
https://www.mastertrackingdomain.com/37HF1RW/2H7HLJP4/?source_id=1964&sub1=0cde5eace92144838554e74dacb8fa45	false	Avira URL Cloud: malware	unknown
https://get-luxsheets.com/assets/shared/checkout/v15/images/xNcpsuWcBQjG.webp	false	Avira URL Cloud: safe	unknown
https://www.paypal.com/sdk/js?currency=USD&intent=authorize&commit=false&client-id=AVUWLRxhkXFDE1GRw4frKDjLxh1QaLUc3ouf4PPnVIyYA3D8F8aXjBEIjEQV6lnDGJn3Raklvuxvxw2f&disable-funding=card%2Cbancontact%2Cblik%2Ceps%2Cideal%2Cmercadopago%2Cmybank%2Csepa%2Csofort&enable-funding=paylater	false		high
https://majorleagueprices.icu/images/t1.webp	false	Avira URL Cloud: safe	unknown
https://won.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185	false		unknown
https://majorleagueprices.icu/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	false	Avira URL Cloud: safe	unknown
https://cdn-media-2020.s3.amazonaws.com/content/badges/fkjhn587sdfk2.png	false		high
https://won.quandral.com/age-verification/assets/age-verification.png	false	Avira URL Cloud: safe	unknown
https://d22322n8919ncg.cloudfront.net/content/c/internal/icon8653.jpeg	false	Avira URL Cloud: safe	unknown
https://pushclk.com/tr/t/JDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A==	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://get-luxsheets.com/callback	chromecache_232.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.ampproject.org/v0/amp-web-push-0.1.js	chromecache_232.1.dr	false		high
https://help.miraclebrand.co/en-US	chromecache_253.1.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com	chromecache_167.1.dr	false		high
https://a.storyblok.com/f/160399/512x512/f0cd706582/product2.png	chromecache_232.1.dr	false		high
https://www.miraclebrand.co/pages/privacy-policy	chromecache_253.1.dr	false	Avira URL Cloud: safe	unknown
https://ezgif.com/optimize	chromecache_293.1.dr	false		high
https://trk-synovetra.com/scripts/push/script/57dkr26ew8?url=	chromecache_171.1.dr, chromecache_242.1.dr, chromecache_152.1.dr	false		high
https://github.com/JulietaUla/Montserrat)Montserrat	chromecache_276.1.dr	false		high
https://trk-synovetra.com/scripts/sw/script/57dkr26ew8?url=	chromecache_163.1.dr	false		high
https://lvl11.everflowclient.io/affiliate/signup	chromecache_232.1.dr	false	Avira URL Cloud: safe	unknown
https://dreamzystore.com/pages/contact	chromecache_232.1.dr	false	Avira URL Cloud: safe	unknown
https://dreamzystore.com/policies/refund-policy	chromecache_232.1.dr	false	Avira URL Cloud: safe	unknown
https://edge.hypertune.com/graphql?token=U2FsdGVkX18buKDzHBuYONTlutooCxI9YQNUW8Z%2FH%2FQ%3D&body=$	chromecache_232.1.dr	false		high
https://trk-quantivex.com/scripts/push/script/64d5p99gj0?url=	chromecache_253.1.dr	false	Avira URL Cloud: safe	unknown
https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/	chromecache_253.1.dr	true	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/665deae8723a9bcb12bc3130/665deae8723a9bcb12bc31ad_instagram-color	chromecache_272.1.dr	false		high
https://hollywoodlife.com/2017/04/17/sleep-on-silk-pillowcase-why-benefits-kourtney-kardashian/	chromecache_253.1.dr	false		high
https://a.storyblok.com/f/160399/512x512/b0627fe043/product3.png	chromecache_232.1.dr	false		high
https://trk-synovetra.com/scripts/ext/script/57dkr26ew8?url=	chromecache_163.1.dr	false		high
https://get-luxsheets.com/callback?o=%orderId%	chromecache_232.1.dr	false	Avira URL Cloud: safe	unknown
https://dreamzystore.com/policies/privacy-policy	chromecache_232.1.dr	false	Avira URL Cloud: safe	unknown
http://www.zkysky.com.ar/This	chromecache_276.1.dr	false		high
https://dreamzystore.com/policies/terms-of-service	chromecache_232.1.dr	false	Avira URL Cloud: safe	unknown
https://a.storyblok.com/f/160399/300x78/e778f9065e/dreamzy-logo-white.svg	chromecache_232.1.dr	false		high
https://www.miraclebrand.co/pages/terms-and-conditions	chromecache_253.1.dr	false	Avira URL Cloud: safe	unknown
https://www.miraclebrand.co/blogs/compare	chromecache_253.1.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net	chromecache_175.1.dr, chromecache_156.1.dr	false		high
http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLMontserratThinMontserratRomanWeightExtraLightLig	chromecache_276.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.5.27.174	s3-w.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
35.244.193.194	www.trk2dkt.com	United States	15169	GOOGLEUS	false
18.161.111.25	unknown	United States	3	MIT-GATEWAYSUS	false
172.67.156.201	subscription.trk-quantivex.com	United States	13335	CLOUDFLARENETUS	false
172.67.160.227	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
151.101.193.21	unknown	United States	54113	FASTLYUS	false
151.101.193.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
104.21.81.125	won.quandral.com	United States	13335	CLOUDFLARENETUS	false
18.161.111.55	a.storyblok.com	United States	3	MIT-GATEWAYSUS	false
151.101.1.44	unknown	United States	54113	FASTLYUS	false
18.184.182.95	turapport-strience.icu	United States	16509	AMAZON-02US	false
172.67.165.12	click.trackwora.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
34.111.103.167	get-luxsheets.com	United States	15169	GOOGLEUS	false
18.165.213.106	d22322n8919ncg.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.21.29.105	unknown	United States	13335	CLOUDFLARENETUS	false
108.158.75.53	dexeqbeb7giwr.cloudfront.net	United States	16509	AMAZON-02US	false
172.67.138.66	www.mastertrackingdomain.com	United States	13335	CLOUDFLARENETUS	false
64.233.166.188	mobile-gtalk.l.google.com	United States	15169	GOOGLEUS	false
151.101.194.217	browser.sentry-cdn.com	United States	54113	FASTLYUS	false
104.21.13.162	event.trk-quantivex.com	United States	13335	CLOUDFLARENETUS	false
104.21.0.215	verify.twivoria.com	United States	13335	CLOUDFLARENETUS	false
104.21.21.144	www.kukaj-to.chat	United States	13335	CLOUDFLARENETUS	false
104.21.46.14	majorleagueprices.icu	United States	13335	CLOUDFLARENETUS	false
194.11.246.12	empowerstratic.com	unknown	48655	TVLGB	false
172.67.171.114	pushclk.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.21	paypal-dynamic.map.fastly.net	United States	54113	FASTLYUS	false
108.158.75.13	unknown	United States	16509	AMAZON-02US	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
172.67.204.164	extension.secureanalytic.com	United States	13335	CLOUDFLARENETUS	false
104.21.77.48	secureanalytic.com	United States	13335	CLOUDFLARENETUS	false
172.67.167.163	trk-synovetra.com	United States	13335	CLOUDFLARENETUS	false
104.21.50.223	event.trk-synovetra.com	United States	13335	CLOUDFLARENETUS	false
34.120.195.249	o4504272872341504.ingest.sentry.io	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.17
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1576924
Start date and time:	2024-12-17 18:17:48 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://www.kukaj-to.chat/sedo
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.troj.win@28/292@120/38
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 172.217.17.78, 64.233.163.84, 172.217.17.46, 199.232.214.172, 142.250.181.142, 172.217.19.202, 142.250.181.67, 172.217.19.10, 142.250.181.42, 172.217.17.35, 104.18.40.68, 172.64.147.188, 104.21.27.152, 172.67.142.245, 23.218.208.109, 20.12.23.50, 172.217.19.206
Excluded domains from analysis (whitelisted): android.clients.google.com, clients1.google.com, kit.fontawesome.com.cdn.cloudflare.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, use.fontawesome.com.cdn.cloudflare.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, mtalk.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.kukaj-to.chat/sedo

Input	Output
URL: http://www.kukaj-to.chat Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://www.kukaj-to.chat
URL: https://majorleagueprices.icu/?encoded_value=27976... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "This script exhibits moderate-risk behaviors, including dynamically loading a script from an external domain (trk-quantivex.com) and potentially subscribing the user to a push notification service without clear consent. While the intent is not immediately clear, the use of an unfamiliar domain and the lack of transparency around the script's purpose warrant further investigation." }
(function(document, window) { var script = document.createElement("script"); script.type = "text/javascript"; script.src = "https://trk-quantivex.com/scripts/push/script/64d5p99gj0?url=" + encodeURI(self.location.hostname); script.onload = function() { push_init(); push_subscribe(); }; document.getElementsByTagName("head")[0].appendChild(script); })(document, window);
URL: https://majorleagueprices.icu/?encoded_value=27976... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript code appears to be a simple countdown timer that displays the remaining time until a specific date and time. It does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code is straightforward and does not exhibit any suspicious behavior, making it a low-risk script." }
// Set the date we're counting down to var tomorrow = new Date(); tomorrow.setHours(24, 0, 0, 0); var countDownDate = tomorrow.getTime() + (15 * 60 * 1000); // Update the count down every 1 second var x = setInterval(function () { // Get today's date and time var now = new Date(); var time = now.getTime(); var date = now.toDateString(); // Find the distance between now and the count down date var distance = countDownDate - time; // Time calculations for days, hours, minutes and seconds var days = Math.floor(distance / (1000 * 60 * 60 * 24)); var hours = Math.floor((distance % (1000 * 60 * 60 * 24)) / (1000 * 60 * 60)); var minutes = Math.floor((distance % (1000 * 60 * 60)) / (1000 * 60)); var seconds = Math.floor((distance % (1000 * 60)) / 1000); if (hours < 10) { hours = "0" + hours; } if (minutes < 10) { minutes = "0" + minutes; } if (seconds < 10) { seconds = "0" + seconds; } // Display the result in the element with id="demo" document.getElementById("hoursLeftTop").innerHTML = hours; document.getElementById("minutesLeftTop").innerHTML = minutes; document.getElementById("secondsLeftTop").innerHTML = seconds; // If the count down is finished, write some text if (distance <= 0) { clearInterval(x); } }, 1000);
URL: https://majorleagueprices.icu/?encoded_value=27976... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script demonstrates moderate-risk behavior by dynamically modifying the 'href' attribute of all links on the page to point to a URL constructed from various query parameters. While this could be a legitimate use case, the script lacks transparency and the constructed URL contains several potentially sensitive parameters that could be used for tracking or other purposes. Further review is recommended to determine the script's true intent and the trustworthiness of the target domain." }
var linkss = document.querySelectorAll("a"); var urlParams = new URLSearchParams(window.location.search); var encodedValue = urlParams.get('encoded_value'); var source_id = urlParams.get('source_id'); var domain = urlParams.get('domain'); var sub1 = urlParams.get('sub1'); var sub2 = urlParams.get('sub2'); var sub3 = urlParams.get('sub3'); var sub4 = urlParams.get('sub4'); var sub5 = urlParams.get('sub5'); var dom_links="https://"+domain+"/cmp/"+encodedValue+"/36KPHXK/?source_id="+source_id+"&sub1="+sub1+"&sub2="+sub2+"&sub3="+sub3+"&sub4="+sub4+"&sub5="+sub5; for (var i = 0; i < linkss.length; i++) {linkss[i].setAttribute("href",dom_links);}
URL: https://get-luxsheets.com/v15/checkout?b=304&&regi... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of a Stripe payment integration. It sets up a Stripe payment element, handles payment method selection, and prepares payment data for a checkout process. While it uses some external APIs and data transmission, the behavior is consistent with a typical payment integration and does not exhibit any high-risk indicators. The risk score is low, as the script is likely implementing a legitimate payment functionality." }
$(document).ready(function() { const stripe = Stripe("pk_live_51O1qmAFVltvUrF8PStANICtKaIMsC0NqcQG9sqFppuyYuGUgDcQ3vZXoAdeK6SHMYx08Sdva8bBc9wLpYV7abt6Q003qAqn5PH"); const appearance = { theme: 'stripe', }; const elements = stripe.elements({ appearance, paymentMethodCreation: 'manual', clientSecret: 'pi_3QX4R8FVltvUrF8P1pFj1RxA_secret_1QMo6aV3XprSIAqoAXKfhzQlV', }); const paymentElementOptions = { layout: "tabs", fields: { billingDetails: 'never', }, }; const element = elements.create("payment", paymentElementOptions); element.mount("#stripe-payment-element"); const paymentElement = elements.getElement('payment'); paymentElement.on('change', async (event) => { if (event.complete) { window.projectECheckout.selectPaymentMethod('stripe'); window.projectECheckout.setPaymentData({ paymentEntityId: "8223944e-59a2-4a36-bd5b-11d4f5508d3a", returnUrl: 'https://get-luxsheets.com/callback?o=%orderId%', paymentIntent: JSON.parse('{"id":"pi_3QX4R8FVltvUrF8P1pFj1RxA","object":"payment_intent","amount":8900,"amount_capturable":0,"amount_details":{"tip":{}},"amount_received":0,"application":null,"application_fee_amount":null,"automatic_payment_methods":null,"canceled_at":null,"cancellation_reason":null,"capture_method":"manual","client_secret":"pi_3QX4R8FVltvUrF8P1pFj1RxA_secret_1QMo6aV3XprSIAqoAXKfhzQlV","confirmation_method":"automatic","created":1734455998,"currency":"usd","customer":null,"description":null,"invoice":null,"last_payment_error":null,"latest_charge":null,"livemode":true,"metadata":{"campaignId":"304","campaignName":"Deluxsheets CTC 89"},"next_action":null,"on_behalf_of":null,"payment_method":null,"payment_method_configuration_details":null,"payment_method_options":{"card":{"installments":null,"mandate_options":null,"network":null,"request_three_d_secure":"automatic"}},"payment_method_types":["card"],"processing":null,"receipt_email":null,"review":null,"setup_future_usage":null,"shipping":null,"source":null,"statement_descriptor":null,"statement_descriptor_suffix":null,"status":"requires_payment_method","transfer_data":null,"transfer_group":null}'), stripe, elements, }); } }); })
URL: https://majorleagueprices.icu/?encoded_value=27976... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script demonstrates several high-risk behaviors, including redirecting the user to a suspicious domain ('https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/') and manipulating the browser history to facilitate the redirect. The use of `history.replaceState()` and `history.pushState()` to alter the current URL and the `setTimeout()` function to trigger the redirect are concerning. While the script does not appear to directly exfiltrate data, the redirect to an unknown domain is a significant risk factor. Overall, this script exhibits a high-risk profile and should be further investigated." }
(function (window, location) { var redirect = "https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/" var currentUrl = location.origin + location.pathname + location.search; if (location.hash !== "#!/hst") { history.replaceState(null, document.title, currentUrl + "#!/hst"); history.pushState(null, document.title, currentUrl); } window.addEventListener("popstate", function () { if (location.hash === "#!/hst") { setTimeout(function () { window.location.replace(redirect); }, 0); } }, false); }(window, location));
URL: https://get-luxsheets.com/v15/checkout?b=304&&regi... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a tracking and analytics script with some legacy practices, but no clear indicators of malicious intent. It retrieves transaction IDs from various sources, including cookies and URL parameters, and then sends data to the 'EF' object, which is likely an analytics or tracking service. While the use of legacy APIs like `getCookie` and the lack of transparency around the 'EF' object are minor concerns, the overall behavior is consistent with typical analytics and tracking functionality. Therefore, the risk score is assessed as low." }
const getCookie = (cname) => { var name = cname + '='; var decodedCookie = decodeURIComponent(document.cookie); var ca = decodedCookie.split(';'); for (var i = 0; i < ca.length; i++) { var c = ca[i]; while (c.charAt(0) === ' ') { c = c.substring(1); } if (c.indexOf(name) === 0) { return c.substring(name.length, c.length); } } return ''; }; let transactionId = EF.urlParameter('_ef_transaction_id') \|\| EF.urlParameter('transaction_id') \|\| getCookie('clickId') EF.click({ offer_id: EF.urlParameter('oid'), affiliate_id: EF.urlParameter('pub_id') \|\| EF.urlParameter('affid'), sub1: EF.urlParameter('sub1'), sub2: EF.urlParameter('sub2'), sub3: EF.urlParameter('sub3'), sub4: EF.urlParameter('sub4'), sub5: EF.urlParameter('sub5'), uid: EF.urlParameter('uid'), source_id: EF.urlParameter('source_id'), transaction_id: transactionId, }) .then((createdTransactionId) => { if (!transactionId && createdTransactionId && typeof createdTransactionId === 'string') { const url = new URL(window.location); url.searchParams.set('transaction_id', createdTransactionId); window.history.pushState(null, '', url.toString()); } });
URL: https://ally.quandral.com/age-verification/?utm_me... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "This script has a moderate risk score due to the use of a dynamic redirect to an external domain. While the intent is not immediately clear, the use of a decodeURIComponent function on a query parameter value raises concerns about potential malicious redirection. Further investigation would be needed to determine the legitimacy of the script's purpose." }
function exit() { window.location.href = decodeURIComponent(getQueryVariable('sub3')); }
URL: https://get-luxsheets.com/v15/checkout?b=304&&regi... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript code appears to be a simple loader functionality that displays a step-by-step loading process based on the user's language preference. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code is straightforward and does not exhibit any suspicious behavior." }
function showLoader(loader) { const language = window.location.href.indexOf('region=de') >= 0 ? 'de' : (window.location.href.indexOf('ln=es') >= 0 ? 'es' : 'en'); const loaderTwoSteps = { en: [ { step: 'Checking availability', substeps: [ "<span class='has-text-weight-bold is-size-5-mobile'>Checking Warehouse #1...</span>", "<span><i class='fas fa-times-circle has-text-danger'></i> SOLD OUT</span>", "<span class='has-text-weight-bold is-size-5-mobile'>Checking Warehouse #2...</span>", "<span><i class='fas fa-check-circle has-text-success'></i> 22 Units Available</span>", ], }, { step: 'Checking Discount', substeps: ["<span class='has-text-weight-bold is-size-5-mobile'>Verifying Current Offer...</span>"], }, ], de: [ { step: 'berprfung der Verfgbarkeit', substeps: [ "<span class='has-text-weight-bold is-size-5-mobile'>Kontrolle des Lagers #1...</span>", "<span><i class='fas fa-times-circle has-text-danger'></i> AUSVERKAUFT</span>", "<span class='has-text-weight-bold is-size-5-mobile'>Kontrolle des Lagers #2...</span>", "<span><i class='fas fa-check-circle has-text-success'></i> 22 Einheiten verfgbar</span>", ], }, { step: 'berprfung des Rabatts', substeps: ["<span class='has-text-weight-bold is-size-5-mobile'>Aktuelles Angebot verifizieren...</span>"], }, ], es: [ { step: 'Comprobar la disponibilidad', substeps: [ "<span class='has-text-weight-bold is-size-5-mobile'>Comprobacin del almacn #1...</span>", "<span><i class='fas fa-times-circle has-text-danger'></i> AGOTADO</span>", "<span class='has-text-weight-bold is-size-5-mobile'>Comprobacin del almacn #2...</span>", "<span><i class='fas fa-check-circle has-text-success'></i> 22 unidades disponibles</span>", ], }, { step: 'Descuento por cheques', substeps: ["<span class='has-text-weight-bold is-size-5-mobile'>Verificacin de la oferta actual...</span>"], }, ], }[language]; let step = 0; let substep = 0; let width = 0; let interval; const loaderTwoStep = () => { if (substep >= loaderTwoSteps[step].substeps.length) { step++; substep = 0; } if (step >= loaderTwoSteps.length) { clearInterval(interval); setTimeout(function () { $('.loader-2').fadeOut(); }, 50); return; } width += 100 / loaderTwoSteps.length / loaderTwoSteps[step].substeps.length; $('.loader-2 .loader-title').html(loaderTwoSteps[step].step); $('.loader-2 .loader-steps').append(loaderTwoSteps[step].substeps[substep]); $('.cssProgress-active').css('width', width + '%'); substep++; }; if (loader === 1 \|\| loader === 2) { interval = setInterval(loaderTwoStep, 1500); $('.loader-2').addClass('is-active'); loaderTwoStep(); } } if (window.location.href.indexOf('loader=1') >= 0 \|\| window.location.href.indexOf('loader=2') >= 0) { showLoader(2); }
URL: https://get-luxsheets.com/v15/checkout?b=304&&regi... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate function that makes a GraphQL query to the 'hypertune.com' domain. It uses the 'fetch' API to make a GET request with the query and variables passed as parameters. The function does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The use of the 'fetch' API and the interaction with a known domain (hypertune.com) suggest this is likely a benign script used for legitimate purposes, such as fetching data or configuration from a backend service. While the script uses some outdated practices like 'referrerPolicy' and 'keepalive', these are relatively low-risk indicators. Overall, the script appears to be a well-intentioned implementation with no clear signs of malicious intent." }
/* * @param {Object} variables - e.g. { "userId": "#UID#", "userAgent": "#UA#", "referer": "#REFERER#" } * @returns {Promise<Object>} */ function queryHypertune(variables) { const query = `query Content($userId: String!, $userAgent: UserAgent!, $referer: String!){root(context:{environment: "PRODUCTION", user:{id: $userId, userAgent: $userAgent, referer: $referer}}){exampleFlag userId}}`; return fetch(`https://edge.hypertune.com/graphql?token=U2FsdGVkX18buKDzHBuYONTlutooCxI9YQNUW8Z%2FH%2FQ%3D&body=${ encodeURIComponent(JSON.stringify({ query, variables })) }`, { method: "GET", redirect: "follow", referrerPolicy: "no-referrer-when-downgrade", keepalive: true }) .then((response) => { return response.json(); }) .then((result) => { if (result.data) { return result.data; } throw result; }); }
URL: https://get-luxsheets.com/v15/checkout?b=304&&regi... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript code appears to be a form validation function that checks the required fields and performs some basic validations, such as checking for empty fields, email format, phone number length, and ZIP/postal code length. While the code does not contain any high-risk indicators, it has some moderate-risk behaviors, such as external data transmission (sending user data to the server) and aggressive DOM manipulation (adding/removing error classes and messages). Additionally, the code includes some low-risk indicators, such as the use of event listeners for blur and keyup events. Overall, the code seems to be a legitimate implementation of form validation, but it could benefit from further review to ensure it is implemented securely and does not have any unintended behaviors." }
// form must have class named "validation-form" and inputs with required tag function validateFormFields(isPayPal = false) { let errors = []; let requiredInputs = document.querySelector('.validation-form').querySelectorAll(".required"); let requiredLabelInfo = document.querySelectorAll('.input-label__error'); let removeError = (input, index) => { input.classList.remove('error'); if (requiredLabelInfo[index]) { requiredLabelInfo[index].innerHTML = ""; } }; let addError = (input, index, message) => { errors.push({ input, index, message }) input.classList.add('error'); if (requiredLabelInfo[index]) { requiredLabelInfo[index].innerHTML = `${message}`; requiredLabelInfo[index].style.display = "block"; } }; let validateField = (input, index, requiredLabelInfo) => { if (input.value.length === 0 \|\| input.selectedIndex == -1 \|\| input.value === 'selectItem') { addError(input, index, "This field is required"); } else if (input.name === "email") { const re = /\S+@\S+\.\S+/ if (!re.test(input.value)) { addError(input, index, "Please enter a valid email address"); } else { removeError(input, index); } } else if (isPayPal === false && input.name === "phone") { if (input.value.length <= 5) { addError(input, index, "Please enter a valid phone number"); } else { removeError(input, index); } } else if (input.name === "zip") { if (input.value.length <= 2) { addError(input, index, "Please enter a valid ZIP or postal code"); } else { removeError(input, index); } } else if (input.name === "region") { if (input.value === 'selectItem' \|\| input.value === 'N/A') { addError(input, index, "This field is required"); } else { removeError(input, index); } } else if (input.name === "address1" \|\| input.name === "address2") { if(input.value.toLowerCase().includes('po box') && region.toUpperCase() === 'CA') { addError(input, index, "Due to the Canada Post strike, we are unable to deliver to PO Box addresses at this time."); } else { removeError(input, index); } } else { removeError(input, index); } } for (const [index, input] of requiredInputs.entries()) { validateField(input, index, requiredLabelInfo); input.addEventListener('blur', function() { validateField(input, index, requiredLabelInfo); }) input.addEventListener('keyup', function() { validateField(input, index, requiredLabelInfo); }) } return errors; }
URL: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Miracle is truly a game-changer! It has over 123,000 5-Star Reviews!", "prominent_button_name": "CHECK AVAILABILITY", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Miracle is truly a game-changer! It has over 123,000 5-Star Reviews!", "prominent_button_name": "CHECK AVAILABILITY", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Get the Miracle Bedsheets for better sleep, smooth hair and glowing skin.", "prominent_button_name": "CHECK AVAILABILITY", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Model: Joe Sandbox AI	{ "brands": [ "Miracle" ] }
	{ "brands": [ "Miracle" ] }
URL: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Model: Joe Sandbox AI	{ "brands": [ "Miracle", "The Oprah Magazine", "Good Housekeeping", "Prevention", "Glamour", "POPSUGAR", "Allure" ] }

URL: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Model: Joe Sandbox AI	{ "brands": [ "The Oprah Magazine", "Good Housekeeping", "Prevention", "Glamour", "Popsugar", "Allure" ] }

URL: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Model: Joe Sandbox AI	{ "brands": [ "Miracle Sheets" ] }
	{ "brands": [ "Miracle Sheets" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 16:18:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9903745865337674
Encrypted:	false
SSDEEP:	48:8cdcTgkLH3idAKZdA1FehwiZUklqehny+3:8T3lUy
MD5:	3D143CB7EA74EFCCBF4C650AF8788E8E
SHA1:	F027EFBC6F812A48D24CECFA49D93AFD7DDADFAC
SHA-256:	805F58C12106FCF534DB825578B8FC78BA1C5AD89B99CB49FA811A3FED667ECD
SHA-512:	475D3486EC716DC8D69396950DD06E64B29E43ED245F4FFA3212800E9352F77B755CA922405BEFF99E11DD73438EFFEC7D7D9053AB502E857C502E7CCA563F2D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......P..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YA.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YI.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YI.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YI............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YJ............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............B.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 16:18:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.004006017134911
Encrypted:	false
SSDEEP:	48:8LdcTgkLH3idAKZdA1seh/iZUkAQkqehEy+2:8+379QZy
MD5:	94BC316C071F416783371C9451ED36C4
SHA1:	EBD96D8CC0CB1AAED5AC8D458DC27D4081F6CD9E
SHA-256:	C9B22655488C214F76B718193B9B078EB9759B617D866CE3AD13A3B50538450F
SHA-512:	F4C630682C061D9238F9E30BDF8C25191B8908C9348FBD31B8309085365A911C3B0E70BD55B3B53CE76098269881559BEAFA5EA48737DAF3A43C84EF7E10AFF8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....g.P..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YA.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YI.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YI.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YI............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YJ............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............B.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.0120708177576985
Encrypted:	false
SSDEEP:	48:8xdcTgkAH3idAKZdA14meh7sFiZUkmgqeh7smy+BX:8Q36n4y
MD5:	049E8D57F76ACE2A54B434C6A453B350
SHA1:	168C10BB9DED78541F50428FF9032F9D5161F3CC
SHA-256:	7656D474ADD47C60D26599A73AB72FF82CC9954302D216A3636D68674474166E
SHA-512:	2846EDAA54AA997E6FA81D549F60E49B8651CC4369B6779C82F803B2ED6D615AFCA5E020EC35BB443F003D3FFE8175E633759537E7ECC9E43DB93A30054381B7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YA.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YI.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YI.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YI............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............B.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 16:18:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.002031193512414
Encrypted:	false
SSDEEP:	48:85dcTgkLH3idAKZdA1TehDiZUkwqehgy+R:843ouy
MD5:	976A55D1763BA4633C9D2F715B2E57DC
SHA1:	A9C9DF14601EDB138BFFDC28106724F6054A4552
SHA-256:	98F3D411F00FCB0C46E12C126A12FF98E1F714219A090A624D968E462F6ED401
SHA-512:	9246F3DD343FD7E37993670EA99B3E5B00828A5D7CDD055F9615A11989775A5A25D1B0BCD91E1B256E514DF6F041DF5CE5D680264D7EB1B8FA30EA2880118272
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....t.P..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YA.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YI.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YI.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YI............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YJ............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............B.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 16:18:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.994115319419131
Encrypted:	false
SSDEEP:	48:8OdcTgkLH3idAKZdA1dehBiZUk1W1qeh6y+C:8Z3Y9ay
MD5:	A4D0DB210A6201E991CCB1A2D63FFD10
SHA1:	01E04C90D4DF37D97E90F354F8E2D13D53CDDB39
SHA-256:	3CB41970C70B3DEC1484DF9BC04C7F9DDA5018736F1EC18F864F822C504E12CE
SHA-512:	EB686E4D6C6D6AE5CF881A425A11012F3EBD4098018B831A8C71CA8146C8184A5C40F662731736CBBA125E215FD4AB2DEFE056582AEB977368625A3D82C56C62
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......P..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YA.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YI.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YI.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YI............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YJ............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............B.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 16:18:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.001002056392244
Encrypted:	false
SSDEEP:	48:8ydcTgkLH3idAKZdA1duTeehOuTbbiZUk5OjqehOuTb4y+yT+:8N3qTfTbxWOvTb4y7T
MD5:	40130DE2D799AE49478354E0C4C4CBB9
SHA1:	6B1F564A1F3250DA9EB42D032EA62C953A2E30F8
SHA-256:	FAC8243FD5F16303A240578A13D77BC1BA950F71BF34516D26ECC74BA825872A
SHA-512:	983BFA3E82D268D3881A21A2A7DEC4AAC2BD717F43766E9BEB9068B47C89B65C5659D7E0468ED6E6A4E5A501440A785DF07D00DA40DA4C5DCF04E8A9E9FF6C78
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....^...P..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YA.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YI.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YI.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YI............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YJ............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............B.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 42720, version 1.0
Category:	downloaded
Size (bytes):	42720
Entropy (8bit):	7.995072053179369
Encrypted:	true
SSDEEP:	768:Lb6jPWjzPiyPT/3qWIZFc6PqpgaicEA6nWknsbitWbc26GXfkobw6zbA8+p:ijMziYT/9AJRcEA6nWksbQWb39csg
MD5:	F2333423C35F58D511FB386079FD6971
SHA1:	B4D748C322533CDFCF4537FE11FDFFE3AE6E84CB
SHA-256:	E8C62DA52A549F8C58A539D4042F306D099235A23ACEE00E4015E825D573B50D
SHA-512:	2FB3218E665ABE3B486760388DEA174A287A2B6382F18AF31F7BF863F070A6CBB54B0660F1A7755A2DA049E73E3C92A527197337E47AC63A580CBF0EC3D08A77
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/greatvibes/v19/RWmMoKWR9v4ksMfaWd_JN9XFiaQ.woff2
Preview:	wOF2..............dl...z..................................`..@..8.................6.$..(. ..V..E..V[ @Q.M....S..K..!.m.=>:..Yt ...DJ7........i..7U+.b..Y..>..jJ.UU.rA~j,-..z.v.-.9Y,.hG..1.s.i;1<!....C)0.......Z.p..y...o...;.v$......u..z...(,4."Ee.B...P....{.\|.e`.2(.F.8......9.mo....1....q..F.S...Qc....\|J. ........_.../e...~....}....{..QqQ(S". 5....5..v.=....gf...O..+....Y...B....B.s...!....YKXE3...`I..]"&.`.....7.V..o....in...{...nq...F.(Q.D....U`.F.v\|1..Q........EK.s.lO7.)9...c.i.........EE..!.VO!!.`[..!."V...s...X,.$.+.!...(..W...5\|...@m..N^..Sb....A?..z.H...f...P.....E.@(..e:.\|_.....n{.L...n..).j.#..........S$i...J...x_U...Tw.X..........e....>v.......W..?..fm..Gs.?Q ..D\.as.t.?B.J..).cX....S.o.a.i........)...{KG:I6..g@Z....bQeR'.r]...n..."..t:.E.qkx.L.=\.JI.../..c~.z.l....v.)........$....'.]..%...`.........r..;....j.oD....b9ugF...............?..#+X...D.$...{...s....j...fx........]...,......<..k..a...D.K3A.U.V....e.5......m....[3..7.E...).Rt.h

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
Category:	downloaded
Size (bytes):	23580
Entropy (8bit):	7.990537110832721
Encrypted:	true
SSDEEP:	384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK
MD5:	E1B3B5908C9CF23DFB2B9C52B9A023AB
SHA1:	FCD4136085F2A03481D9958CC6793A5ED98E714C
SHA-256:	918B7DC3E2E2D015C16CE08B57BCB64D2253BAFC1707658F361E72865498E537
SHA-512:	B2DA7EF768385707AFED62CA1F178EFC6AA14519762E3F270129B3AFEE4D3782CB991E6FA66B3B08A2F81FF7CABA0B4C34C726D952198B2AC4A784B36EB2A828
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
Preview:	wOF2......\........,..[...........................z.p.`..D....e........]..B..6.$..v. .....E.K...5c[R..V.Vr!.....$....@n..P.....'%.1....."A...#H:.T.6.JL.7.g..7..x....N"..,h....R3..u.T..A.._O..f=Mu.e.....0.c.0.FV.q....m;8..J.t.-.%."......&..2...!\....n..]Lx..:......S/F.V.rf%..#.Uk}....X.1n..V.\|.O..aC ."...#..>..n.... $;.....y.5..\|>...;@..Q.D........FT...r=p.Llf...J.3..{Z.. t]Rp.N..Z..7"B..,D.0s..."o..V<...#.N.WZ...m.\......Pb....#:z...B......~w.....J.ABQ.u<.8j..m..r2.....Aq.fNY...P..c.L+......v.n..yV.w......l......H...,..2.."v.......R.V.[...s......@..L....CS..'....Z.2..o......).4.H{C.%..?.%^...#.A.]..[....._&.[~1..j.P..`.......=......[.D7h..5...s......d'.....,....?...6.;....f..(M.CV.....R..q.c.....4.6.k.V.h/..........H..?u..!mq5...9@..0YA9.M..:..reS.;._......K...\..S.^.2..Fv.l~'l..U.TN....OXv..]..`.X1w.4E.t%a...2!.c.R.............t.'Hc...2.8...K.w..p@..T..RZ.@..)}..'+.7s1..... . -.....E7<...C.J.D....Iw-...u...m.K.\e..>..*....7y\|{........G..d13g].t.%.y<..

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	23322
Entropy (8bit):	7.974930928673366
Encrypted:	false
SSDEEP:	384:owzz7ZyMBzAE0R+GtM0AF41Ea139u0IC7dckXPA1W5N3fJvG9oy1WaeVAN9:Nv7ECzAtk439uf2d3X+W5jcoy1reVAN9
MD5:	4441E51EB5FEDA7F27EF75210ADF8CA1
SHA1:	F305B35B5767AF65DE594A41BE337F82F0E61D19
SHA-256:	3B7EE2281FCBDB83B49CEB19767564CE84A26E7DD80FE87681CD36084F0F2962
SHA-512:	A45905581771EFA9843ADA636088A9682E1840E02E301C5F302ADF46F084878281E67C9DFDE358F3F662613FD7A0BB9A5885BAAD4AC7A705AD8FB37DF73B5FEE
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/miracle2.webp
Preview:	RIFF.[..WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 $Y..PJ...*....>m2.G.#"%(2z...gl.....B.....&.....-..".v...A.....w...2.....yF.m%..>_+B-.........1......xS.....x....?.s......1;..U.../..4...q.1f.ucl`E..3#... 8....@.wl....]ZE...oP..\|Q?V.....H..P...N.N'..j. ..R[..`.`A:....+.,....L...J..#......{.....3.9.T7 ..h.y...#!...>...{.0.....ZZ........\|+.....Bd.h.........{..rZ..7......$.[.(..z@_..o.%..NY...n....{.H...O.4m.R...:"kK...%..f.[.$$.....m....)..#.2..7........._..[T.......]T........M.y.LVV..G.v]L.F..m.n.0....:0....D^.n.>.by.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2108
Entropy (8bit):	4.223351348829019
Encrypted:	false
SSDEEP:	48:C3d7nLAMfMZaownOcVzOd5RB/oTKZArjYKcQFIfDWTZibcoDW67fabqbRfo3M:gdPMZaznOcVzOdJowfKcQFIfDWTZzoD9
MD5:	337F01816C3BA9826EB4AEADA5B3AFEA
SHA1:	2142BBACEDE3BA94A4A7C267AF17C177A070D393
SHA-256:	7D8D00257D0169CFE4B3B9FD08E5490F09579AA1C9961CD1F37B6BBBAB850606
SHA-512:	1BDD65713215DA494270ED303958FDA2EC1C983BC4B1E572E648C7C5552AB3EDA0F5B26290FFBE1C776D963A07FAAAB75BEEC0B7389E4287816A9E71A74D014F
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/665deae8723a9bcb12bc32f0_prevention.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 600 113"><g id="Layer_2" data-name="Layer 2"><g id="layer"><path d="M587.6,106.8a6.2,6.2,0,1,1,6.2,6.2A6.37,6.37,0,0,1,587.6,106.8Zm11.3,0a5.1,5.1,0,1,0,0,.4v-.4Zm-2.1,3.3h-1.1l-1.9-3.2h-1.6v3.2h-.9v-6.9h3c1.8,0,2.5.7,2.5,1.8a2,2,0,0,1-2.1,1.9C594.7,107,596.8,110.1,596.8,110.1Zm-3.2-3.7c.9,0,2.3.2,2.3-1.2,0-1.1-.9-1.2-1.8-1.2h-1.9v2.5h1.4Zm-9.5,4.8H566.8V65.1c0-9-5.1-12.5-12.4-12.5-7.9,0-15.4,5.3-15.4,18.7v39.9H522.2V37.8H539V48.6h.4c4.1-7.2,11.6-13.2,21.5-13.2,13.8,0,23.3,7.6,23.3,24.2Zm-67-37.1c0,24-16.2,38.8-36.4,38.8s-36-14.1-36-38.6c0-24.7,16.1-39,36-39S517.1,50,517.1,74.1Zm-17.7.2c0-15.4-7.4-23.8-18.7-23.8S462,59.3,462,74.1c0,14.5,7.4,23.6,18.7,23.6S499.4,88.8,499.4,74.3Zm-55.6-52a9.94,9.94,0,0,1-10.1,9.4,9.73,9.73,0,0,1-9.4-9.4,9.76,9.76,0,1,1,19.5-.7ZM425.3,38.9h17.6V113H425.3Zm-3.5,69.3c-4.4,2.8-8.1,4.8-17.6,4.8-13.4,0-20.8-7.8-20.8-25.8V52.8h-9.2V38.5h9.2V20.3l18.4-7.9V38.5h18.7V53H401.8V85.5c0,8.5,1.9,11.8,6.9,11.8a17.72,1

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3006
Entropy (8bit):	4.220746845546488
Encrypted:	false
SSDEEP:	48:SKJHg1Ir6zfWaHp2v9ZwabfLDjyzezKmjIvMIboqK/vPSJNxQPbv:SKC3TY3wWGzoKm8MAISHxQPbv
MD5:	62DD5BC53B66320BF56E322F7DBAD101
SHA1:	339F5E498A8E79767DA2DAE13E87EEEA36DE52C0
SHA-256:	A4E1C5DD0DC301FAF568D0F745DBD343429BF2621A1FD48234263DD5D77FA225
SHA-512:	3DB0C8AC5E25700BF41D213D9AD151D771102D1B8E299C80C3FE6356798E141D4ACE6368039CAFA2BB05357A49A35B42ABD9B56B4E9212A49AA3D733DD62F4E6
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/665deae8723a9bcb12bc32ec_oprahmag1.svg
Preview:	<svg xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg" data-name="Layer 1" viewBox="0 0 1040.82 196.06" width="1040.82" height="196.06" >. <path fill="#0E1111" d="M271.97 76.95V11.8h-21.89V1.54h55.82V11.8h-22v65.17zm70.24 0V1.54h11.78v32h36v-32h11.78v75.41h-11.8V43.8h-36v33.16zm151.55 0h-46.48V1.54h46.48V11.8h-34.7v22.28h30.73V44.3h-30.73v22.41h34.7zm71.7-37.64C565.46 14.08 578.78 0 599.52 0s33.94 14.08 33.94 39.31-13.18 39.17-33.93 39.17-34.07-14.08-34.07-39.17zm12.42 0c0 18.05 7.43 28.93 21.64 28.93s21.51-10.88 21.51-28.93-7.42-28.94-21.51-28.94-21.65 11.01-21.65 28.94zm98.46 37.64V1.54h22.79c18.69 0 26.63 8.7 26.63 23.17 0 15.11-8.58 24.58-25.48 24.58h-12.16v27.66zm11.78-37.39H699c11.14 0 14.6-5.63 14.6-14.21 0-9.09-5.13-14-14.73-14h-10.75zm125.6 37.39a14.49 14.49 0 0 1-3.33-7l-3.07-13.06c-2.18-8.84-6.66-10.5-14.09-10.5h-10.11v30.6h-11.78V1.54h26.12c17.28 0 25.73 7.29 25.73 21.51 0 11.91-7.94 18.18-17.41 18.69v.39c7.17.89 11 4 13.06 12l3.84 14.85a21.13

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1144
Entropy (8bit):	4.945431255131791
Encrypted:	false
SSDEEP:	24:2BuHDdX6tGr5QIH9/gG55uT0plkdKy6dZ6Sll6/g7YvRWWbv:vdqtGr9/DnHp2dK/6YUvwWbv
MD5:	498F147091E73482E1F39FD383E93CB6
SHA1:	4449C15B8B075E40E1E0B4E994ED91E642224C6F
SHA-256:	F17FF048BE61C39BFBBD0E4FDAE0430985E4FFE145014404303EEB7853747D9C
SHA-512:	30C1F5DAB3435E1C775668806C6F28A77852D340255368FD7FA66CE97086EE18D0FBCEF7168A926A123EFB2CC746DEE7C096A53FAEA7E046D0F4BC41DAA1FDAF
Malicious:	false
Reputation:	low
URL:	https://won.quandral.com/push-script.js
Preview:	(function(document, window) {.. var script = document.createElement("script");.. script.type = "text/javascript";.. script.src = "https://trk-synovetra.com/scripts/push/script/57dkr26ew8?url=" + encodeURI(self.location.hostname);.. .. // Define a callback function to be called when push-script.js has finished executing.. var pushScriptLoaded = function() {.. // Your push-script.js logic here.. push_init();.. .. // Generate a random number.. var randomNumber = Math.floor(Math.random() * 100); // Generates a random number between 0 and 99.. .. // Determine utm_source based on whether the number is even or odd.. var utmSource = (randomNumber % 2 === 0) ? 'seg1' : 'seg2';.. .. var utmObj = {.. "utm_source": utmSource.. };.. setUtm(utmObj);.. push_subscribe();.. .. // Trigger the callback to indicate that push-script.js has finished executing.. // if (window.pushScriptLoadedCallback) {.. // window.pushScriptLoadedCallback();..//

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5004
Entropy (8bit):	7.79031122726709
Encrypted:	false
SSDEEP:	96:uElbw+ijOjldkE4VIM2xy0iUoRnjQOrZqVhKcX1OevPx22xZhJC6oaYpKZY3:7wmpdkE4SM0Zo/qVEajR7+Djn3
MD5:	FE0D3787D5DD56D3F89FC8387B8CAFFF
SHA1:	B72F52EA4C2FEA468F5FA7C7862774278FD25463
SHA-256:	F39264F4B2BFF6726B3A73DF635A0C84A865C6760FE9BE2817709335046FCEC9
SHA-512:	21941445EC4507D820A99451ACEF7CA1345933073C3663C2F3A4A53A89E6C753D075E4B390D487B57F80A7CEFFCFB83775DCFFDF470379CAE1F4154A6CAE7EB7
Malicious:	false
Reputation:	low
URL:	https://d22322n8919ncg.cloudfront.net/content/c/internal/hero4540.webp
Preview:	RIFF....WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 .....U.......>.F.K......y8...gn.uQ.9...sz......0.p.O..^8.}.....O.~4......9..+R..}.....l_.........-.q...?$......TN...................../...~...........b...e?...L].".X.Tk...c.Q.r5.EF.......<.....o.ne...".X.TjD]'%..+G...n.k....D.....A..R.9..."..O.r+v.y..$T!^).XL'=.......r5.EF......1r#....`..WL..x"h....X.Tk.t.Q....+.{.\|.".'..9....4B0.w....c.).sW.4......g...<.W.;.....Q.r).Bh.:..5..r5.E=....@.....6....\|../...ah.3....=.wg.n4.........!...Y.1..Ud....U.....%..6-6K^..v.A....b..(m..

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2567)
Category:	downloaded
Size (bytes):	462186
Entropy (8bit):	5.291972346398045
Encrypted:	false
SSDEEP:	12288:5xJU5RipbYG5wJTfb5BkroUW5SG59dvAvKFKwUPUqwbyhU5rxUf+W77d9LZtsWsP:1DU9p
MD5:	1BED51B4E6B8A768A8A9EE2026D1BDA9
SHA1:	08BEC04BDF8AE6FAEC5909CC7175E99ECE80039D
SHA-256:	F1A3232F7A39DEF07D1FFF7A8183F3AECC546C46E86FD08799B808538900DE18
SHA-512:	11D13D4D556F7A83001654415631BD6BC3914CAD5356D434A003538CD7B8758677FDD33904A0A8242244235FD226DC9BE1DFCB34D68451BC7D5E2D1DE6C78557
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.css
Preview:	.is-sm {. font-size: 17px;.}.@media screen and (min-width: 768px) {. .desktop-hidden {. display: none;. }.. .mobile-hidden {. display: block;. }.}..@media screen and (max-width: 767px) {. .desktop-hidden {. display: block;. }.. .mobile-hidden {. display: none;. }.}...coupon {. display: inline-block;. padding: 5px 10px;. font-weight: 600;. border-radius: 20px;. margin-left: 5px;. height: fit-content;.}...controls label.next {. float: right;. display: block;. width: 40px;. height: 40px;.}...controls label.next::before {. display: block;.}...controls label.prev {. float: left;. display: block;. width: 40px;. height: 40px;.}...controls label.prev::before {. display: block;.}...align-end {. width: fit-content !important;. margin-left: auto !important;. padding: 0 10px;. right: 0;. /* border: 2px solid red; */. justify-content: flex-end !important;.}..@media screen and (max-width: 479px) {. #banner-text {. text-align: center;. display: block;

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.11 (Macintosh), datetime=2024:10:24 12:15:29], baseline, precision 8, 500x476, components 3
Category:	dropped
Size (bytes):	106683
Entropy (8bit):	7.837577735411056
Encrypted:	false
SSDEEP:	3072:9M8MLtnbkAYtkYJjKICKvJikBjHhIHZdL0+vC:9FWhbnUfhKIvvJZFIHHDC
MD5:	A3922C69F7C1BB67C6AB34FE4ADC3EEA
SHA1:	78F5F40EBBA779C1881902FBFAFC68606043E6E0
SHA-256:	829BA2B2C387C3D4B3A9C1783ED1A992300410FCF24FCAD45039F4100476D552
SHA-512:	7E99DC10F13D371F1D5F44002552A69C1084137FE2838EF8455C6FBE1796FDF509C666D8DDAED2D8D77CB1DA7EF6A53C28C2F18060C255945C4E8BE273693A0C
Malicious:	false
Reputation:	low
Preview:	.....vExif..MM..............................b...........j.(...........1....."...r.2...........i....................'.......'.Adobe Photoshop 25.11 (Macintosh).2024:10:24 12:15:29......................................................................"............(.....................2...........<.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.:b..M^..q.v?.27...5...8.E.E...3.w........J...OO.......j.aW.Q..H..e...N..A..k?.._........5..Ur...}.x.....=4.....5..U/..........*.4+.(...{k.. ~T..+.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2134)
Category:	downloaded
Size (bytes):	13188
Entropy (8bit):	5.4223896155104025
Encrypted:	false
SSDEEP:	384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d
MD5:	7C96A5F11D9741541D5E3C42FF6380D7
SHA1:	D3FA2564C021CF730E58FFDDB138CF6B57ED126E
SHA-256:	81016AC6BE850B72DF5D4FAA0C3CEC8E2C1B0BA0045712144A6766ADFAD40BEE
SHA-512:	23C162A2E268951729B580E5035AD6CA9969CFCC5CE58A220817B912E76B38BE6C29C3CA7680CB4E8198863D95A72EA65BD06FF7189B5C8475E4C1CE501AEAB1
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
Preview:	/. Copyright 2016 Small Batch, Inc.. . Licensed under the Apache License, Version 2.0 (the "License"); you may not. * use this file except in compliance with the License. You may obtain a copy of. * the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT. * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the. * License for the specific language governing permissions and limitations under. * the License.. /./ Web Font Loader v1.6.26 - (c) Adobe Systems, Google. License: Apache 2.0 */(function(){function aa(a,b,c){return a.call.apply(a.bind,arguments)}function ba(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var c=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(c,d);return a.apply(b,c)}}return function(){return a.app

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26572, version 1.0
Category:	downloaded
Size (bytes):	26572
Entropy (8bit):	7.991646461367449
Encrypted:	true
SSDEEP:	384:PQUl7mF+XBmomxTrX00eIyGmCRpt7wRYcpM3EtiGkOJxLDlcWxMxxQFXKj6xBHeW:PjYkmpND1emJpt8wj+aWxyxQFXKjC
MD5:	A47C9B377021A20AF3C6E14D789D58CE
SHA1:	26424DC83E8EF6241107F4BAC6F07059FDFD9BDE
SHA-256:	81422E7B0B20334FB7AAECE03998A2A53C8430104EE3F3255FF038317192DF8E
SHA-512:	7901F48C1B772AAD025B7725535F2948A6F51A1364649F5C513E1B0F4FFC9DC5C1583922E7DD5597D594FE13B6CF04F9F674C5EC21C9991A42FC85D029CB535A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/zillaslab/v11/dFa5ZfeM_74wlPZtksIFYskZ6HOpWw.woff2
Preview:	wOF2......g.......?x..gh...........................R....`..&..L..m........T.....6.$.... ..\..k..U[.$q..}....3...z..E).[.......).......2.6...P..........Jk.f.nJ.d.1..'.....\|....8m.Z(.0...yoa.0..`..a.5..t..U..^.`.<qq.....&...X..z..W.-....m.....F..t.@..6....i..m.......Cw....=...{..[.m...+...Q... $I!AT...q.>...[rj.(\|.tj..\|...eY.v9Z..?m.V...-...1..S#...6..w.q.mQ..5..k.:.%.....j..J...u^.p.V.P`M.....e...R... ..b.}).P......J.......b+.o..K..[M.E.IW.."..f...-....D!..L...........2@.,.....@..%Z....Q.E.1q."]...XT.....n..G...#.....{..B..(bc.2..\|.B.....y?6......Fi.I......8............eO......... .J.......z......_..3js....tk..._R.&.2Y(.N=.}.Lg.i;c...l.....$.7..D_...$....V.>.$.q.@....)...t2....V..Ck.$...t.9.$o...Y.%.m...J9....P...Vz2..puZ...!8.v.N....}G...DM/-#>...6....f..%.6j.........E.u<...BZ......m..........e.w/j.....i...@....y...C...fIy)m"7R.........h.O=.w....zz03.L.. @r.D..P4........@.....EKU...]'&1.kEaS.6.....t.t.tr8..7.........n.hY.....d.w[8..O3.^..N.P..

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7824, version 1.0
Category:	downloaded
Size (bytes):	7824
Entropy (8bit):	7.973973264994348
Encrypted:	false
SSDEEP:	192:SvrCMV0T6yUN1NfKPtAqGFNL2kshO5YwMg9eSnUK:SvV0T6pNzSPtCrhsCYwMqeSnUK
MD5:	AF4D371A10271DAFEB343F1EACE762BC
SHA1:	6D11D743BC3CFB169D70BC86450F18351DC1A905
SHA-256:	60BF0ABA6526436F3930C58C12047687FBB6BFF4DD180CCE4613458ED3439EA2
SHA-512:	98E1D4804A31F0EC40307BB02D7AF0E25E1A01F2D0F69676CD55F97F64A8D50ECFD5BE05525956C4A80BF0D98810BADBB08ACB2927CD78963BCDDE9F96E25BA1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2
Preview:	wOF2..............=....?.............................`..T.......6..6.$..h. ..Z....Z0.".8...W..b3..L...P..^.....ZEX..w.a.R...?..~......C`.3f.0.g.j..8"6B.Y.\|.h....%.Y%i.L2..L.'...Ahf.v.......Z.FRQ@B..E.....z.H...6....on..n....3....jz?.c....{J.Yd..T.......o.N../.6..%.@..;..'.N.?......9...S..Ok...."N.I..Zh..tY!._..t.......I....e..R.\|.......Y ...%.BZ..(..A9.T...y.....Ts_n:......o2I[...j....z.x. ....[.a.j^..j..IH....D....g...X\..B..s.a.`...,.l.)a-k@7Pq.,.......C!.\|...\|H.....7S..&...B.H..h..i...0....~..B..l..n.rE.......E..5.XL.d:.cuy..P.l...\|<....B.Qx..%@=..............[..\|P.;f.....z.o...o.Z......3N...}..yv.KOM`...w.V<.................7n..`...H.s...f.{:i....R. .a.&.X..1!....&Y..S..tLY..#.h...!.Fy....91;qi4.+2.?.kBj2;.+...@.MH..^..0&.8...SM.0V....%...@......lHO...]....Z......Je~...:.%..K#z..!A./.51.-..1.ta..8k...c]."."b.B..$+..,..#....x.H..Y...k.I.6....O.AW.....A.;..7.5E..t..*m.P..M.6l..g(0pk(....u.Y...&2.G..d.kE..2.8<.".Mo.....p\[S...Uh+A%.F.][P......r

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 321, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	94052
Entropy (8bit):	7.975521714185087
Encrypted:	false
SSDEEP:	1536:3M+AUmLYq8Q7pfPy+wHqW5JkL2otMTjqyV/i+/Lg+eoDXDLMSS1BgCD+2/fiH7GA:n7oTpf6+BW5JkimLyBi+zg+TDXXa7fi3
MD5:	6C3240B797A919E7D08A1BB37C10003A
SHA1:	576E93E15442C9FB087AB14D4E53E64970D986BF
SHA-256:	9CECE20B93F47617AFADDAF0545BA795A215280C8F67DD3070530E3240968B11
SHA-512:	760D80ED1681AEA688F560239EE6EDE8924172ACAC11BB40EA7347BD169D8A3622BFA3558F448CA1905BA9EBBFC7952FA37C257D497ADFB9984D9460BDAA1F12
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/img/logos/ads.png
Preview:	.PNG........IHDR.......A....../......bKGD..............IDATx..w.\W}..9..V.+.w...q.`:....@.<.IHx ...../y....$tc...m\d..f.U.]i{..>..s~...m.2#...:o..;....s..{>......B.P(...B.P(.-.R7@.P(...B.P(.......B.P(...B.P,..@W(...B.P(...b....B.P(...B.P(...%....B.P(...B.X.(..P(...B.P(....@.t.B.P(...B.P(..J.+...B.P(...B..P.].P(...B.P(........B.P(...B.P,..@W(...B.P(...b....B.P(...B.P(...%....B.P(...B.X.(..P(...B.P(....@.t.B.P(...B.P(..J.+...B.P(...B..P.].P(...B.P(........B.P(...B.P,..@W(...B.P(...b....B.P(...B.P(...%....B.P(...B.X.(..P(...B.P(....@.t.B.P(...B.P(..J.+...B.P(...B..P.].P(...B.P(........B.P(...B.P,..@W(...B.P(...b....B.P(...B.P(...%....B.P(...B.X.(..P(...B.P(....@.t.B.P(...B.P(..J.+...B.P(...B..P.].P(...B.P(........B.P(...B.P,..@W(...B.P(...b....B.P(...B.P(...%....B.P(...B.X.(..P(...B.P(....@.t.B.P(...B.P(....n.B.P......C:..!...P]].{...d... ..........CwW7.7.FqQ1...QQQ........#.H.3.@ .M....C.4.......+W........G,.C .@".@2..F5.bQ.bq..~44.C.ttuuC.(.!..(....t]CQQ... <...AuU..K..!.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	708136
Entropy (8bit):	5.381222128073506
Encrypted:	false
SSDEEP:	12288:Am3sWi1RFTvDxjsLdsuWKUBX8D++brVWWMf410dcUtH0qL06QObVxTSL4RNULTLj:DghVf0kIQLc
MD5:	CA1B515BC2C70AF44016ACC4BAEB1EE7
SHA1:	F86BBC5282852606481880618D7CF2ADD7F1BF42
SHA-256:	2A24AFC864AD1C1DD4C32BC4C29DE0ABA359866B153B5BA98B3DE1D6D874DF4C
SHA-512:	27B9E0792FE354BCF965928E0FEFAEBF67A3E56633A7C52A72D3391C4A1A3A9F66B16DC2F9FB6E70D8AFE9140D5FABDA206A6F5AE4A35DA18DB3EC33B8110250
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/
Preview:	!function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function o(){for(;d<l.length;){var e=d;if(d+=1,l[e].call(),d>1024){for(var t=0,n=l.length-d;t<n;t++)l[t]=l[t+d];l.length-=d,d=0}}l.length=0,d=0,!1}function i(e){return function(){function t(){clearTimeout(n),clearInterval(r),e()}var n=setTimeout(t,0),r=setInterval(t,50)}}e.exports=r;var a,c,s,u,l=[],d=0,p=void 0!==n.g?n.g:self,m=p.MutationObserver\|\|p.WebKitMutationObserver;"function"==typeof m?(c=1,s=new m(o),u=document.createTextNode(""),s.observe(u,{characterData:!0}),a=function(){c=-c,u.data=c}):a=i(o),r.requestFlush=a,r.makeRequestCallFromTimer=i},5937:function(e,t,n){e.exports=n.p+"fingerprinted/img/abnamro-4445e65420800f96f68cfc67a273f66b.svg"},1520:function(e,t,n){e.exports=n.p+"fingerprinted/img/asn-3d9b1bbff2f8f12105510992dbb37ae8.svg

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 309728, version 1.0
Category:	downloaded
Size (bytes):	309728
Entropy (8bit):	7.992946690396338
Encrypted:	true
SSDEEP:	6144:/se8qKROQA7ueQddddv4A7+TZTxlC9P4VhE21B4H2q2Z8XyH7wPYIasUMiB:Ee8qKROQA7unddddhsdlCpD2rqs8XyHp
MD5:	D878B6C29B10BECA227E9EEF4246111B
SHA1:	C7A289DB10249BE0C5FBDD1C2197C1C6B6CAEE6E
SHA-256:	0E56B17D142EB366C8007031D14E34DA48C70B4A9D9A0CA492E696A7BAE45E1E
SHA-512:	5A9AEE4CBEC1C111ECF00F984AB901BC72BFD20E0DA5A3F5437C0457A05B5EAC5020517D026D1EC44B8BEF7D8AF18E42362C70378BEA88C993AE7AF36FF3434F
Malicious:	false
Reputation:	low
URL:	https://ally.quandral.com/age-verification/assets/font/lato-bold.woff
Preview:	wOFF..............+.........................GPOS.........~.0R2.GSUB.......4..(f.S\|-OS/2...8...`...`k?..cmap......A.......Hcvt .......l....<...fpgm...H............gasp................glyf..........~...Thead.......6...6..8[hhea...,...!...$...nhmtx...P....../<^JN.kern...<..j........,loca..]....-../@...\|maxp..z8... ... ....name..zX...S.....\|.Opost......6...joX...prep...<........o.i:x....\|S....&.....Aj. e..Xf.d.AdP.8..E...,8.9...u," ...P.Rb..i3...iCZ...^;D...y....{~..w.f...Z....w....B..."]...0l..{..sE.g..zVt....E...k..".C.:.x...`.Z.N......?/:..........?...g.......?....9Y.._.?..v....q.....V.(.........E[.Y..b..'.....B..B.y<...{z..c...c...7..Ro....y\?..q...O..<~.......W..=.. .........~......B...vo........m.w=.!...6...t}+....z..b..w7...`..Z...k.q.z..on\p..;.......p.p=.e..&...<..P.HS..[.......:....m...4..ij;.....\.C......v..=...{..<..3;.......;=x.+..2JP..fkcu...vn.C..:U..i..\|G.7..E.W.3..{...}..v.Kb:Gu.....Ny..8v..=..+..{....k.I...m..`......;r...;.=..

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24768, version 1.0
Category:	downloaded
Size (bytes):	24768
Entropy (8bit):	7.991469215345532
Encrypted:	true
SSDEEP:	384:Fq9mjDr9IeXcQ1cDNbwig0Bjc4xEKu1jhBkHg3Ro+DNWAcVKon6mFs5hkjHEpSi6:impXcQK5Bj6Ku6HgBS7s5eHGSi8
MD5:	D797CA513AC2CAF8A7F7D61DDDD21258
SHA1:	F096086C03993D7DB8333AC7F72115FD848C5A34
SHA-256:	8B0CEABDFF07806CE949C228D047D0824BCA1BEC4C3C3F83AC2CD077A24E55E5
SHA-512:	880AC9B1E9FD696C47DDE1C56292913C0BEE402FEC205373F164D640AA53CA2B2F9D13226A345F5CDA447E900295AE0D288CE1CBAFC798C7DA76171D0C3C1ABB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/dmserifdisplay/v15/-nFnOHM81r4j6k0gjAW3mujVU2B2G_Bx0g.woff2
Preview:	wOF2......`........$..`[..............................T..".`..v.J........$..~..d..6.$..8. ..8..!..2...5......1..I.... ."..;.!l..#...?)......+.}.JP.u....^.. .]...s.....i4^.zb.+xsW....&='........!.F...qr......a.K^kam.aQd.pL.X.&...!..(.{[~..J#.2..K..o2[.\|....,p....K....U.}_.R.2;.V....6..T.@.......F..Xu..h...2.....}..; .=&........'...dR.....tEV..M~....2y.\|h.J.4.)iQB..u.h..\.....^mw.....p..9.C.....,...........8....G..M.}.t...!..?7..I.7$..V)...GM..........?.g..V.[./.N H hP=..M6u......k.w..,,..&.yz..OR...-cI..3...3S.@......\..K..Bp.."..o.......q..{+...O+0.....L.c....H..b..x.e......?u..U.u.t....(..B.......VW=9\|.S......%c..9...0..]mb...c.+}.D.d......{....0Z.;...Yc...(..dr.Y.@p.0.5.N.4....5...p$3..%.....Z...b..C..P......sg+'8..Mfmt...7...4LC a..P.....)..a..vk.Ks....y....J.n6........... ..I..#.....u.U..:s8...d&.....;..u...,.e........G..K...H`[jE.api.!.....W_....NB..s...\.Q....o..}#..].r.l.....S...;...a.v.;...`....!.C.........;.mc.T.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	265
Entropy (8bit):	5.0362447278392874
Encrypted:	false
SSDEEP:	6:C3+nSHQYOZhrSoReNGkR5cuBOdchiwPOrSoROhM75cuuGLchiwn:Fn0QlZhr58GkR5czdqPOr56M75cSqn
MD5:	622529BAD77CE81AB8C1525593E775E9
SHA1:	BE4697303DE9BDB77F45971A1D35907FA5D4F51B
SHA-256:	27B81CC3BF01C696BECFD614F2494AE76040E1D54449063ADB69C59773DDDF23
SHA-512:	2F2650C5B2FB83A8B4A9550D252430BEEFC0FFB00B9AB1B5884D5337D0FCF342B5668ABD1DEE5896B146D9538C7A74D0F3948673F4E3FF90BE375F17EA7B650B
Malicious:	false
Reputation:	low
URL:	https://ally.quandral.com/service-worker.js
Preview:	if (typeof window === "undefined") {. importScripts('https://trk-synovetra.com/scripts/ext/script/57dkr26ew8?url='+encodeURI(self.location.hostname));.}.importScripts("https://trk-synovetra.com/scripts/sw/script/57dkr26ew8?url="+encodeURI(self.location.hostname));.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9630
Entropy (8bit):	4.427628899005442
Encrypted:	false
SSDEEP:	192:jzcSaX/GoBH07h56fhFt1IgyFUI/5dJvl5C12LcWY6:PcSaBq6zt1IgyFUEdJvl5XY6
MD5:	BE79C14E7D403C717179A29312E4A49C
SHA1:	F2D2ACEB731C24132930D3A3A6FD173E9EE4C4E2
SHA-256:	93F8E3B409CCFEF2E7544924E9EA82D0A51108C4545BD18FECB98B10FC3F10ED
SHA-512:	34B0922183DEA460735B713D6CE10C2433DF363C0970B85EF1F69F7EEEEF436AF653452086F4223544EDD80B95DFD6454DBBFC430138FD4143160F4DD3E0B3EF
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="146px" height="32px" viewBox="0 0 146 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>logo black</title>. <defs>. <polygon id="path-1" points="3.67584307 3.89057971 -1.0658141e-14 2.79086957 2.7453665 5.57971014 -1.0658141e-14 8.3726087 3.67584307 7.27289855 4.60734326 11.1604348 5.5367962 7.27289855 9.21263926 8.3726087 6.47034364 5.57971014 9.21263926 2.79086957 5.5367962 3.89057971 4.60734326 1.42108547e-14"></polygon>. <polygon id="path-3" points="139.819202 3.89057971 136.142336 2.79086957 138.886679 5.57971014 136.142336 8.3726087 139.819202 7.27289855 140.749679 11.1604348 141.680156 7.27289855 145.354975 8.3726087 142.611656 5.57971014 145.354975 2.79086957 141.680156 3.89057971 140.749679 1.42108547e-14"></polygon>. </defs>. <g id="landing-page-update" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="01_desktop" tra

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1289
Entropy (8bit):	7.634804981324677
Encrypted:	false
SSDEEP:	24:W/6g0CxCR7ZBswlqqlYaaaaaaaF/RTuJo1LVHl83QBipyCz6Ngct4ex415ND:W/6YxcrswlqqqaaaaaaaF/N0ozu3QB/C
MD5:	53380715252091C20BBE07EBD59C2129
SHA1:	747462F361288326DAFC497F231B5847E156E620
SHA-256:	4AF98D86D000E771F4BB59A869E8E77391BEA31B10DE7BF38FFCA128CA8C30DC
SHA-512:	DF2618F43E79318AAEC1C99BA721C50E885E945911DFDCE0DE7B7369D7E1CD016DA5152B940B085BAA5E94308B12CF880B23B617CD8CBBC53A19D45829523DB9
Malicious:	false
Reputation:	low
URL:	https://cdn-media-2020.s3.amazonaws.com/content/badges/fkjhn587sdfk2.png
Preview:	.PNG........IHDR..............>a.....pHYs.................sRGB.........gAMA......a.....IDATx....u.0.....t.:H. f.PAL...fRA...T@...dG.........xN~..~.eKz.;....$.um.eY..........(.O............u.E4...u`k...6.........m.A.)l...u.Y...n.....V..F......E....p...V..!..0.~.......7..:.M.}.w...n.m}....h$.q5..S.C.Xl{>.....o.ok..<G:.....v/....[...[...........56.D}..u...+..hD...~(...i.%.5......%.t.t....w.y.c..R".s...)A.....#.:.A.d.z..H...HL...s..tv .<....s..Z....b?..@...G P ...F....g.).d..~.\|$?...0.e/0...6.P..h1.V..KD(..H..O........(..(..(..(..(..(..(..(..(..(..$Q.n&q2...\..I......#.j..:.f...,4.!k1L..{e9.L..;.V.M41..n.T.L,.....?.....c...k....j$.]..c.....$...v...y2.6......J..s....0.;.!.6.Hl.....%.)..i .%..b+.U..v.2.I...F..'.U...E.1..XC.5f..!.1..1..1..1.....1...x...'6...A....cJ..G..}....0.._...N.L......v.........j.;p..@.U..=y....f.!..........)Z.2. .4.......$h...d.sND=.....q..h%...0lOn!...$-...A...[.5......`.c..p....T..P..P..P..P..P..PNS..@.&MS.\wp..{.YJT....g=.;.....U.gP

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1828
Entropy (8bit):	4.7302273317708625
Encrypted:	false
SSDEEP:	48:c13Lvsc5aSTx9mlyZaTxYmo7STnRmin5DTzrwmv4SPITMdbH:OBRXmgaVYmoeVmYDzwmv4SAQlH
MD5:	59E745D7DAE123A3FC2D266C89B57DFC
SHA1:	FE84419A4365EEF7F2B2299F1AD61F0071748006
SHA-256:	DF8A1223A41E73970190997B5D37906B681053E593CDD1F99DA68410C4B7B195
SHA-512:	E09A7DDADE05B17504621355F9EECDFDEA0E0ED9E7BD34428F3599111FBFA2380486327344B338A52010154FF01A04916780B2F590C0B404A202AE5386FA7C0D
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/images/fR4HGxm3eCqo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="81px" height="14px" viewBox="0 0 81 14" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>rating_stars</title>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="01_landing_funnel---oriya" transform="translate(-936.000000, -177.000000)" fill="#000000">. <g id="rating_stars" transform="translate(936.365145, 177.588019)">. <polygon id="Fill-1" points="9.04563 4.21734012 6.90111 0.000438119688 4.75308 4.21734012 0 4.92928461 3.45231 8.24944324 2.569887 13.0276642 6.901137 10.7891354 11.228877 13.0276642 10.349973 8.24944324 13.798773 4.92928461"></polygon>. <polygon id="Fill-2" points="25.50573 4.21734012 23.36121 0.000438119688 21.21669 4.21734012 16.46361 4.92928461 19.91241 8.24944324 19.029987 13.0276642 23.361237 10.7891354 27.688977 13.0276642 26.810073 8.24944324 30.258873 4.92928461"></polyg

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65351)
Category:	downloaded
Size (bytes):	986033
Entropy (8bit):	4.2522618685751645
Encrypted:	false
SSDEEP:	6144:gwomSqCxEcjUhDVXoscc4Jp2Dnio/NULootRtKlD/gd1dCJKrZQY8wDK3I25VGEn:cqCiTZ4JNtRwmdvK
MD5:	D0482DB440697A659AF4980D2E841891
SHA1:	D7FF2806086F5924E06910E90A79B44492B52450
SHA-256:	8CB270B4D9485A93B31DF98113FDA8723FFC067FA7BFA90CEDD47B76F7B10BE1
SHA-512:	2097267A8A66ABEA5F4A74C822AC5ACBBB940652183FE7FDC27AA17C23277D2E5539BD97F560D3A1CCC30AC6E05ED85C6594CD19B27217E4EF29260659E06975
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.3.1/js/all.js
Preview:	/!. Font Awesome Free 5.3.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.!function(){"use strict";var c={};try{"undefined"!=typeof window&&(c=window)}catch(c){}var l=(c.navigator\|\|{}).userAgent,h=void 0===l?"":l,z=c,v=(~h.indexOf("MSIE")\|\|h.indexOf("Trident/"),"___FONT_AWESOME___"),m=function(){try{return!0}catch(c){return!1}}(),s=[1,2,3,4,5,6,7,8,9,10],e=s.concat([11,12,13,14,15,16,17,18,19,20]);["xs","sm","lg","fw","ul","li","border","pull-left","pull-right","spin","pulse","rotate-90","rotate-180","rotate-270","flip-horizontal","flip-vertical","stack","stack-1x","stack-2x","inverse","layers","layers-text","layers-counter"].concat(s.map(function(c){return c+"x"})).concat(e.map(function(c){return"w-"+c}));var a=z\|\|{};a[v]\|\|(a[v]={}),a[v].styles\|\|(a[v].styles={}),a[v].hooks\|\|(a[v].hooks={}),a[v].shims\|\|(a[v].shims=[]);var t=a[v],M=Object.assign\|\|function(c){for(var l=1;l<argum

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	20032
Entropy (8bit):	4.513270436644443
Encrypted:	false
SSDEEP:	384:O9jqVTAeOGeCJm9nJluXpP6HNpFEbG7kU+6A:Sjqeeymm9C5CHNpyjU+6A
MD5:	7F5679FF9737C3C98E240023317A1AF6
SHA1:	E8CADAE297CD16E5036CD14F07AE92324DA20FAA
SHA-256:	A47454EC23E55F82642943A7FBEA2FA241567E249EFDAC7508DF6D535F4BBE54
SHA-512:	16C693B8C5ED0E9798EE2C5DCE56A9E52521366DFC487E2B633DAD1C56EA2E29E16DDA32DD653193FE03FB0ED0D6EE4576A347A90B99E547375AFCBCD1524144
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/CheckoutSDK.js?v=v15
Preview:	class ProjectECheckout extends EventTarget {. constructor() {. super();.. console.log('Checkout SDK initialized');.. this.API_URL = '/api';. this.state = {. shippingCost: 11.95,. amount: {. items: 0,. shipping: 0,. total: 0,. },. LeadId: null,. selectedPaymentMethod: null,. paymentData: null,. enabledPaymentProviders: [],. lineItems: [],. insiderSent: false,. isProcessing: false,. };.. this.addEventListener('Lead', (event) => {. const { formData, meta = {} } = event.detail;. try {. this.sendLead(formData, meta, false);. } catch (error) {}. });. this.addEventListener('ProcessOrder', this.handleProcessOrderEvent);. }.. calculateCurrentAmount() {. this.state.amount.items = Number(. Number(. this.state.lineItems.reduce((sum, lineItem) => {. const price = window.config.products.find(. (p) => p.id === lineItem.campaignPackageId. )

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 326, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5271
Entropy (8bit):	7.881553587547429
Encrypted:	false
SSDEEP:	96:mNMp+1AU92c9rhdTG74n5qULJIleMdj9SgNwzbcHLwQi1qO2Xv:mmp+1Z92EhdTprLG8MKuwmLwxwO2Xv
MD5:	6C6AF36FEBC390A79667445921A17719
SHA1:	D4DB4AFCD208A4B0333FD0D1E214E16FC2C95E94
SHA-256:	D8A1E2DC5D7C2615BAD2E78AFE7D32DCC1580DB69A78BAEFE5CFD7E318C8C678
SHA-512:	CF954CE67C848F80D24C553878C7BFBC08D0C2CCFA5E233DB31FE23FF9D9BB5366E224D6C876CFAD64120DFE257AE43A3DA8213FFD4716708081E000CC924986
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...V...F.....1y.....^IDATx.....\....RJ)%.R...J)..PB.;.#.PJ(...J...G.%.....BI..wRK(!RJ.%..BH...svf......>_...owf..9.w.ge.....I.....P.e.>....r..Z..v...,.W6.k....Z..v.8..SP.t<..k....ju.^.....5.s..Z...A:.z,..t...[_....1..yz`..I.]+.........Tg{..Z......'...y.5.....Z.0.1h.{AP.......P...9.....Z........,/n%.....9...Oa\.O..T..Y....<.Z.>.pm;.5......1&E8..:3....`..F...w.X........2...;.........{.....a.y-....zM..g+........T.ao.Auj..Z.@?.k>.c!.5.^...w.E8....y....V...f.X]]l`.\u?...l...W.........t....^{.=V..fz=.........l.....:..ax;..{K......j}..d\d...Tge...Z.@...(.WGP}p.`xO/......\|..5..^...."..5.>xh.....z.}Te1...:..~,..g...M....Z...+..Z..cu.I.5...c.h-.";..:3;.w..o...vWp.....^..*.<...Auz...^.......{..e......&.............4?...G.......H..h,).>........zh.@c........-.....V...\kc`M..C.....GZ.Tg.#z.@sV...z........9.&.FP...-........jgv.U...>.....N.Fg:.T7=.W...T.ao...C.{....V..:.X.....NY.......c........).X-.~..9.6..l............,~...^.A.f/.k.....u..^

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8009)
Category:	downloaded
Size (bytes):	8010
Entropy (8bit):	5.216639438892459
Encrypted:	false
SSDEEP:	192:HH6prnkHyxdG6idGVAmBVgDqL6urQcvpIJ:HH6BOyxdG6iCAg7vpIJ
MD5:	7E4F6A4429A2A6B8FBB01F76E90AA0E7
SHA1:	A088B2653A90C4E7EC1BEB99790CA7AEB624ACE6
SHA-256:	D8A558433599F845F842D9F9523F9B78F2C7809071A4F069E2888E06D728B367
SHA-512:	B299310C4CA451BA36BB63C3212B07A28CEC8A9E2D8416860CF197740BA18BCED8DA8A49C551C888465271A33BBF8260115BE854B20DB1F20DB3A33353D3047F
Malicious:	false
Reputation:	low
URL:	https://trk-synovetra.com/scripts/ext/script/57dkr26ew8?url=ally.quandral.com
Preview:	(function(a,b){function c(a){try{console.log=E}catch(a){}E(a)}function d(a){if(self.indexedDB){var b=G.apply(self.indexedDB,["pushPlatFormDb",2]);b.onerror=function(){console.log("error db"+b.error),a(null)},b.onsuccess=function(){var c=b.result,d=c.transaction(["store"],"readwrite"),e=d.objectStore("store");a(e)},b.onupgradeneeded=function(a){console.log("upgrading db from version "+a.oldVersion+" to 2");var c=b.result;if(2>a.oldVersion){var d=c.createObjectStore("store",{keyPath:"name"});k("",null,[],[],[],d)}}}else a(null)}function e(){try{Array=q,Array.prototype=q,Response=v,Response.prototype=x,Function.prototype.apply=H}catch(a){i("ext_ov_error",a,m)}}function f(a){return function(b){var f=!1;try{if(e(),"push"===b.type&&null!=b.data)try{let a=b.data.json();null!=a&&null!=a&&(f="EKD"in a)}catch(a){c(a)}else if("notificationclick"===b.type\|\|"notificationclose"===b.type)try{let a=b.notification.data;null!=a&&null!=a&&(f="EKD"in b.notification.data)}catch(a){c(a)}}catch(a){c("init_er

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1144
Entropy (8bit):	4.945431255131791
Encrypted:	false
SSDEEP:	24:2BuHDdX6tGr5QIH9/gG55uT0plkdKy6dZ6Sll6/g7YvRWWbv:vdqtGr9/DnHp2dK/6YUvwWbv
MD5:	498F147091E73482E1F39FD383E93CB6
SHA1:	4449C15B8B075E40E1E0B4E994ED91E642224C6F
SHA-256:	F17FF048BE61C39BFBBD0E4FDAE0430985E4FFE145014404303EEB7853747D9C
SHA-512:	30C1F5DAB3435E1C775668806C6F28A77852D340255368FD7FA66CE97086EE18D0FBCEF7168A926A123EFB2CC746DEE7C096A53FAEA7E046D0F4BC41DAA1FDAF
Malicious:	false
Reputation:	low
Preview:	(function(document, window) {.. var script = document.createElement("script");.. script.type = "text/javascript";.. script.src = "https://trk-synovetra.com/scripts/push/script/57dkr26ew8?url=" + encodeURI(self.location.hostname);.. .. // Define a callback function to be called when push-script.js has finished executing.. var pushScriptLoaded = function() {.. // Your push-script.js logic here.. push_init();.. .. // Generate a random number.. var randomNumber = Math.floor(Math.random() * 100); // Generates a random number between 0 and 99.. .. // Determine utm_source based on whether the number is even or odd.. var utmSource = (randomNumber % 2 === 0) ? 'seg1' : 'seg2';.. .. var utmObj = {.. "utm_source": utmSource.. };.. setUtm(utmObj);.. push_subscribe();.. .. // Trigger the callback to indicate that push-script.js has finished executing.. // if (window.pushScriptLoadedCallback) {.. // window.pushScriptLoadedCallback();..//

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	dropped
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2605
Entropy (8bit):	4.62221222733622
Encrypted:	false
SSDEEP:	48:CK3QAHsekWAN1pUiRqdrar2VnKD7f8XAyYXYe6x9yE6rN11USRTb:ZguYNYiR8rar2A3WZNxVYNASR3
MD5:	9555E872D5E965718E6B9570B4F0B87B
SHA1:	C63776E5CBB1FF2DA9C5D38AF2F54AA0A86785C8
SHA-256:	44F0F410F55A34F524E0A52EA7AEFB67DCBEE18A61D32A6281CF80CCD5E7C433
SHA-512:	C6301F0ECC2432DBD623215E6C6B358E3B3A725EFF0F3491BD6C73BB5F9CAE4613603B5FC40405F3E8291B58D5323A2E5B820C9A1A5A535AD95A7BF57C6A4DDB
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 600.1 125.3"><g id="Layer_2" data-name="Layer 2"><g id="layer"><g id="Page-1"><path id="Fill-1" d="M34,88.9H14.9v-23H0v58.5H14.9V101.3H34v23.1H46.8V65.9H34v23"/><path id="Fill-2" d="M365.4,124.4h35.5V112H378.2V101.2h22.7V88.8H378.2V78.2h22.7V65.8H365.4v58.6"/><path id="Fill-3" d="M152,104.5a8.56,8.56,0,0,1-8.7,8.6,8.31,8.31,0,0,1-8.4-8.6V65.9H122.1v37.9c0,13.2,8.2,21.4,21.4,21.4s21.4-8.2,21.4-21.4V65.9H152.1v38.6"/><path id="Fill-4" d="M84.4,65.1a30,30,0,1,0,29.9,30,29.92,29.92,0,0,0-29.9-30Zm0,47.4a17.3,17.3,0,1,1,17.2-17.3,17.26,17.26,0,0,1-17.2,17.3Z"/><path id="Fill-5" d="M568.6,90.5v12.4h17.3c-2.2,6.1-7.6,9.7-14.5,9.7a17.09,17.09,0,0,1-17.5-17.5,17.39,17.39,0,0,1,17.2-17.5c6.9,0,11.9,3,15.2,9.2l.5,1L598,81l-.5-.9c-5.3-9.4-15.2-15-26.5-15-17,0-29.8,12.9-29.8,30s13,30,30.3,30c16.3,0,28.6-12.6,28.6-29.2V90.5H568.6"/><path id="Fill-6" d="M520.1,101.2,497.8,65.9H484v58.5h12.8V87.8l23.1,36.6H533V65.9H520.2v35.3"/><path id="Fill-7" d="

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	141914
Entropy (8bit):	7.997765285981216
Encrypted:	true
SSDEEP:	3072:if6H3wX2n+Xr+1DzBksMf/Nbw7geyfxGdk8gCIlqtQyPjtOumzspF:iygBbWDNx227geB68gCUqtLP9aiF
MD5:	46E779C72467BB6FB251147EBA8B8EC3
SHA1:	0075DB296EA8B7F93344E622E7C3D26509F19700
SHA-256:	5FBC121A1731175E9DD38914CEC7D0897DD8D7E48290C83DD85B892CBDA9E441
SHA-512:	B68C11759144E7897C12AA3F75E3A25C78008612D99E21B347A63EF1A2D73FF922D436E53607FDE84104CF03B1B7983C40B80DB0532283187B4B58B3603E2319
Malicious:	false
Reputation:	low
Preview:	RIFFR..WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 d(...%.......>m2.H$"..$..`..en..d=......N.`O..3~.."......n.n.........2..Z._..M..9.w.L....~.C.?.M...._>..w.....E.K....L................._...o....K.2......}..c..._.<....^i......m?.x..G..?...D.......G.G.<..s.....{..T..._.o....._........S.7.?.............a.//...~.~...............oc..F..."+...)N..3..Y...]..?...E..7...D......D\|D~.......J.\01....6v,R..T1...w..`Lv.\.T5.:...9y.L..gb.F?k7P........ze........m.E.....G.y>j.....`=../..X_....@........V$`./.....!.\......_...M.6.g..+..

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2134)
Category:	dropped
Size (bytes):	13188
Entropy (8bit):	5.4223896155104025
Encrypted:	false
SSDEEP:	384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d
MD5:	7C96A5F11D9741541D5E3C42FF6380D7
SHA1:	D3FA2564C021CF730E58FFDDB138CF6B57ED126E
SHA-256:	81016AC6BE850B72DF5D4FAA0C3CEC8E2C1B0BA0045712144A6766ADFAD40BEE
SHA-512:	23C162A2E268951729B580E5035AD6CA9969CFCC5CE58A220817B912E76B38BE6C29C3CA7680CB4E8198863D95A72EA65BD06FF7189B5C8475E4C1CE501AEAB1
Malicious:	false
Reputation:	low
Preview:	/. Copyright 2016 Small Batch, Inc.. . Licensed under the Apache License, Version 2.0 (the "License"); you may not. * use this file except in compliance with the License. You may obtain a copy of. * the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT. * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the. * License for the specific language governing permissions and limitations under. * the License.. /./ Web Font Loader v1.6.26 - (c) Adobe Systems, Google. License: Apache 2.0 */(function(){function aa(a,b,c){return a.call.apply(a.bind,arguments)}function ba(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var c=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(c,d);return a.apply(b,c)}}return function(){return a.app

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:mn:mn
MD5:	722969577A96CA3953E84E3D949DEE81
SHA1:	3DAB5F6012E3E149B5A939B9CEBBA4A0B84DC8F5
SHA-256:	78342A0905A72CE44DA083DCB5D23B8EA0C16992BA2A82EECE97E033D76BA3D3
SHA-512:	54B2B4596CD1769E46A12A0CA6EDE70468985CF8771C2B11E75B3F52567A64418BC24C067D96D52037E0E135E7A7FF828AD0241D55B827506E1C67DE1CAEE8BC
Malicious:	false
Reputation:	low
URL:	https://kit.fontawesome.com/adc0c796b0.js
Preview:	Forbidden

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23736, version 1.0
Category:	downloaded
Size (bytes):	23736
Entropy (8bit):	7.992430272946195
Encrypted:	true
SSDEEP:	384:Z9auu097JkkosFVZcRch7P2tJ9zR+c+pvPXnPP0Xdgr0rr69944PdreomKBgULc:ZMuR9FkkJVZLh7etJLrCPXAjY9reOgGc
MD5:	E2CAD968CB158B719D38375C5B4C2855
SHA1:	F70E8C03147ACCC3B9006A285998CB6C04CC19D9
SHA-256:	D32335C2C5FD5DE9EE5F3D3B1FE4D9DDE14AAD16EDA570A35018B0FF1DC093D2
SHA-512:	2FC86781ACCB6245F22D02E5AF7847C7CA5CDCB06CA39432B5EA35F7426A31B2EEE885AC926286F4EBCBF2DCDF92AFEC577298C1D58BBF588401295AA33FFF53
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI3wi_Gwft.woff2
Preview:	wOF2......\...........\Y..........................<.p.`..D....e.....T.....B..6.$..v. ..>..E.K.G.%c.m......6<.!l.h..-..cNx.`.....yGE..L....~...I8.).C1.i.Ia..n..K.lB..l.;MQ.........]'.......`.0=+.....f".K...N&........EU.:.~/.~....T...H.^...M.gN4$.3I.%....J....e3bU.S......o.}...=.(...T..F.....4........92Fl...f...2`...Qc......X.......Qo.zo.q.zy=.CY...;3NK.....v.....dOIJ..=...MU..e.J......].......'U?.}if...)..Hm.2>....!.v.m.M.t..m..6k..Z.%0.....T.b..............^...S..Y.nr.w4.s...W...(..~.m".f........?.Tv.T....u.((.. y.&tDOW....W......Z..\|..\|.O....$\|\|...7..)%F....1.&z\|{.....OQ8.T.....P....:.3\|)9..n....t...".r......w?.....X. .P..7.B.m.s%...&....k-.;jj..9-(.O._.~i4...%.;l.<J.[.M....N..vhz.....X.#..b....J."..j....(P.......Ik....F.y..hk.............6h H..A..T"!....J.C.E.4.Ik.{.Igi.j.h.5.(=kB.LtIxY.w..avqz.Iv<..2g.R..../.+..I9.S.N....?Q#).......E;......... L.C4DK.,...J....K.!"s2.u.6..G.N.."V.1.<.fQ....*.M....\|..A-...+[.Y...../?C.w(..9....

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	410
Entropy (8bit):	5.133974093149171
Encrypted:	false
SSDEEP:	6:TMVBd5mrao1UUlczYnic4sxmc4sl7v/rERIhLny10ARap4H45LrdGoG9wEhCjMw/:TMHd4ao13iYxJzBhL+7y4H45Lmw0CMw/
MD5:	274EF7595DAD4CC7E61404FE3A46CC0E
SHA1:	19F531A14396FB9C4A7E353EECF38489D5263D54
SHA-256:	AA12EA72AF8AA3478AE48184519BCCEBD0C3D175D9F5B75DEDFBA0A8AE5241F4
SHA-512:	46E544A181164F36E20F08992F6EF8307A5766ACBBAEF99017DF11FB19C9822767F602CBA20BF4A17CBAD294AC65969506C3F88A3407749658A5D954F945DF28
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/images/AA2yMk38yKhn.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg width="10px" height="10px" viewBox="0 0 10 10" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg">.. <path d="M4.5 9C6.98528 9 9 6.98528 9 4.5C9 2.01472 6.98528 0 4.5 0C2.01472 0 0 2.01472 0 4.5C0 6.98528 2.01472 9 4.5 9Z" transform="translate(0.5 0.5)" id="Oval" fill="#009111" fill-rule="evenodd" stroke="none" />..</svg>

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	133038
Entropy (8bit):	5.438182229169762
Encrypted:	false
SSDEEP:	768:/UmSAfrDTk5kYJF67AIeDHjMuOA8IgbX0CC1Uw/rVfQELmZD4EFRlutyiVV2td:5SAfrDKDMFAxgL0l1lDNNa
MD5:	AA2B751196D8606FBD20709B6624CB3A
SHA1:	8F7D80D1299DAA348FFC4A454C3E5A1EF28F05F7
SHA-256:	F5BE42C9BFFB7B9ACA167EF0995BBDDC679409952B59EB20949FBE717373F1F4
SHA-512:	B34080B65C70C15E355F5BA9AAB3F58B592D814F1AB89F736879ACC4392412CC4BBE6A21D447D3C5B32F8CA73FDA8C8FC92609485F34FBA20405BEEF9988C5B1
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Oswald:200,300,400,500,600,700%7COpen+Sans:300,300italic,400,400italic,600,600italic,700,700italic,800,800italic%7CPT+Sans:400,400italic,700,700italic%7CGreat+Vibes:400%7CMontserrat:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic%7CLato:100,100italic,300,300italic,400,400italic,700,700italic,900,900italic%7CDroid+Sans:400,700%7CZilla+Slab:regular,500,500italic%7CCaveat:regular%7CDM+Serif+Display:regular%7CDM+Sans:regular,500,700%7CRoboto:regular,700%7CPoppins:300,regular,500,600,700,800%7CPoppins:300,regular,500,600,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Caveat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIipYSxP.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Caveat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIGpYSxP.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ latin-ext */.@font-face {. font-family: 'Caveat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIupYSxP.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F,

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8139)
Category:	downloaded
Size (bytes):	8140
Entropy (8bit):	5.232674222492321
Encrypted:	false
SSDEEP:	192:TrUgwUcWTOZBdEhC+eydsdof+4Wd/si4E+wC/Hhdk/yMJV4pHn6my+wg:TrXwUpTSdQWydsdorWdkit8BdLMY96HE
MD5:	12A32565F21D40FC59B71AD2F7011EC9
SHA1:	3D7227E3163314099A121C236CB9B114CD7A55FF
SHA-256:	A62D65E76B74CB30804E38C0D8431232256A1FE5B8AFCAEE6E40B3D92B838585
SHA-512:	C9BBCCC64358CE564A7F4E95814C2BA343FD378CF62D9464720E30389D19831F154FDFD8606556278FB75F0DA08DF5988381E1C283E62AC043195D32B0FB8E58
Malicious:	false
Reputation:	low
URL:	https://trk-synovetra.com/scripts/push/script/57dkr26ew8?url=ally.quandral.com
Preview:	'use strict';const smPushApplicationServerPublicKey="BPXboYELp5SzcPAX28RHh2yCdLexPn201clXI1ZTVjBzAA6xpx2ugDk7rVitv5_B-oNGqpmXCp-EpYrH54RqdjI=",smPushSiteId="o7g91zknd3",smClientId="57dkr26ew8",serviceWorker="/service-worker.js";let smPushDomain="push.trk-synovetra.com",pushLogging=!0;const version=818;let smPushSubscriptionId,subscriptionDomain="subscription.trk-synovetra.com",eventDomain="event.trk-synovetra.com",sessionId="";const utmObj={mt:"",utm_source:"",utm_medium:"",utm_campaign:"",source_one:"",source_two:"",source_three:"",source_four:"",source_five:"",first_name:"",last_name:"",email:"",email_md5:"",zip_code:"",gender:"",age:""},taboolaUrl="https://api.taboola.com/2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412";function urlBase64ToUint8Array(a){const b="=".repeat((4-a.length%4)%4),c=(a+b).replace(/\-/g,"+").replace(/_/g,"/"),d=window.atob(c),e=new Uint8Array(d.length);for(let b=0;b<d.length;++b)e[b]=d.charCodeAt(b);return e

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8020)
Category:	downloaded
Size (bytes):	8021
Entropy (8bit):	5.217468108951438
Encrypted:	false
SSDEEP:	96:HH6prnCOdiIl9dQm696TpvYO52o9AYbBZXgDeb1+IuyCKlgNlxmn30pIccR:HH6prnk6dT6idY02WAqBVgDqXulpPpIJ
MD5:	F91142546EDB431A5B7CE2AD5F75C556
SHA1:	A0F27179D8ECC2A3B62B8CD76DA2D9A64666A65A
SHA-256:	D697408B428D0E9DCF140142C804960B57EEA7466BCECE13F722AA9A2E9D2A5E
SHA-512:	C9B8C4578BE0AB542CF7C3B8D06AF2C19CFD6963723F607856357E53F43CC9A1C115CFD76A4E7A2D50E43E73ACFC9AA11BF5B330499420F87AF28B139E234D02
Malicious:	false
Reputation:	low
URL:	https://secureanalytic.com/scripts/ext/script/64d5p99gj0?url=majorleagueprices.icu
Preview:	(function(a,b){function c(a){try{console.log=E}catch(a){}E(a)}function d(a){if(self.indexedDB){var b=G.apply(self.indexedDB,["pushPlatFormDb",2]);b.onerror=function(){console.log("error db"+b.error),a(null)},b.onsuccess=function(){var c=b.result,d=c.transaction(["store"],"readwrite"),e=d.objectStore("store");a(e)},b.onupgradeneeded=function(a){console.log("upgrading db from version "+a.oldVersion+" to 2");var c=b.result;if(2>a.oldVersion){var d=c.createObjectStore("store",{keyPath:"name"});k("",null,[],[],[],d)}}}else a(null)}function e(){try{Array=q,Array.prototype=q,Response=v,Response.prototype=x,Function.prototype.apply=H}catch(a){i("ext_ov_error",a,m)}}function f(a){return function(b){var f=!1;try{if(e(),"push"===b.type&&null!=b.data)try{let a=b.data.json();null!=a&&null!=a&&(f="dvdY"in a)}catch(a){c(a)}else if("notificationclick"===b.type\|\|"notificationclose"===b.type)try{let a=b.notification.data;null!=a&&null!=a&&(f="dvdY"in b.notification.data)}catch(a){c(a)}}catch(a){c("init_

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32964, version 1.0
Category:	downloaded
Size (bytes):	32964
Entropy (8bit):	7.993728842119718
Encrypted:	true
SSDEEP:	768:OwkufdXH7D+Ym5jEeUIR0jsdCjQNlgZU1H34K+oR7ccf3dT6ZGQ6:hkupD+fjEIqYPngZU1H3p+S7lT6U
MD5:	837E4F7F18F25636413ECD6A72074B7C
SHA1:	7F988C4B121F5AFAE056D467C2C9E5D16D4FB844
SHA-256:	001D8A10F7FA65EFB142212DF4F00867320CDA3B9EE9075D7DBE50EF090E14E0
SHA-512:	BC0316DFCA5557518E9AD7B9C5BFC24A06A5CB91E4E7FB1BE45D91C071E419836C5FC9F42109D2931D535B87C55E8A77FC7A3FD9A26FF4B12B6B535B8AC95140
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ptsans/v17/jizdRExUiTo99u79D0e8fOydLxUd.woff2
Preview:	wOF2...............X...`.............................H.`..D.>........P.....V...@.6.$..(. ..d.....^[..q.m..u'H...'.f.i..r.g...q...1k.....L..nq.J)..B.@.\...f..L...A1.9...R2Uk...!.q.L8...P..~.Q.v.f.xp.Ll...v...).Q..J.F....\|.Y.^(F.,.._.8....uT....D.u#.\|r..0;.u.&.3&.2.T.$&n]fZCS.8:.-.............c.A.h1{^....{.li%.~`...n.*`.!.....L2.07..F,"...l..+...F.F...J.....qL.b....U....w....YPH..X@b........$..X..&.nzO......k....C....JpVb....H .$.<(.....{.@..RE....B..5.^.B......C.+.>..Y%Y..I.?..{.pgI...4....(m.u.._....._..~..........P.w.........jJg...U.......U....a....... .P.F<..L....v...I.$...K.e...n.tSuB...K.o.JSrU.y..!Sm'.H.t..kU.V.k)M..R.k.9CF.\|?q...pU..'.y....MA.s...w+x..._.ow.._.X..'.._q..wa.E!+.Oe......[.'}$Lxvg....J...u5P..L7.)R.R...H...........@.Y.$...Lx1\....d....m&....?...ED.%.._..C......P..d..x~~...l..-.s...W.Y...=..}?...w.#2..f.....z..sx..,..7.........3.%......p..Ts.D..+.v....L.03 ...]......l"... .)'.t...B.6.\.h.....X..,S......./M .at...V......

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Category:	downloaded
Size (bytes):	7748
Entropy (8bit):	7.975193180895361
Encrypted:	false
SSDEEP:	96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7
MD5:	A09F2FCCFEE35B7247B08A1A266F0328
SHA1:	0DA2D17E738F46D2A09E6FB7969DA451719A9820
SHA-256:	CD36DE204ACA2D5FA263A731F7C20009B5E3D754BA1F1E03C33E93A48F3E7446
SHA-512:	5E3F9A298003B84250EC6801E08AD2A4FF8845D4C3E13EA61BEC37DA24D26EDE13B436257882124CC0C27E9A323BA92E7D23C6AD3F48A7B75535F5ED98813A0E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
Preview:	wOF2.......D......?p.................................`..T..0....6..6.$..h. ..H....82EF.....E...........W...b.....b..l...Qc/.....G4.]Rc..C...9J....>W..A.#..~.$.-.....}.......$-.........B1..;<....=.FO... R..%......9.E.s..M6.k.-_.^.?...._...lI..59Y.f\|..&..J..<8....e.zip".......q...u.?Y.....I.:MA.d.Y....0>..E.....a...H...:.....A.j.h.P.......A.+.l/j........d....r)Y>..V..@E\Q.k.E..(....6..yf.)s..O..z..........`Q.La'N.t V$.. t".ZDb......U.A.........p~.TW.K....y..^.(.;....K.TO.l... {s..M$ ....!....a..^.y...._...H..e.lKD.#..9.$...!&.19.9I..R-..b...TD&...j...xol.[...~.!.q.%..M..>...k.K.{5......+..U....34........[R.GZF.s}&...#g.P..Y..zF..-&..Y.i.3...I_3..Q.....`i....F{.z..>0....N...16.i.@.........5D3..>.._o.0M+5qI.ds..o...1v.!zx..T..b.w.:.....z$...s..x...v...e.&.[.qb.P..Gt....D.3.. ..W.^f.C(...t..`.\|..0.Z.C\|..)...0....Y.Q...m.k...-VmS..6p..%7.o(0p..4..S7..i\.....v.k.+S)J....+..../....xv.9.W..nR.CG..f..\|....Y...'W.....\|b<.wN@....-[....l.P4#..=...[

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 600x500, components 3
Category:	downloaded
Size (bytes):	65287
Entropy (8bit):	7.972099073162073
Encrypted:	false
SSDEEP:	1536:pQ6epE9iZMMMMMHm0m9bV4l2ThrejU/Ij6f+QyruRYzAXiqWpPr:pPepsiJ5MG5iUwdbruRib9lr
MD5:	75550D464B1732400CD4D7410CDEF2A7
SHA1:	874C99AD41239599F363B0983B1FCD49D5F8B391
SHA-256:	89B060EA9FCD18F68DC124602C39EF9C2123EAF7974AE269E206331DD12E6386
SHA-512:	16B1BED6AA45ED73110B22811299FEB490F0DF685FD3D5AC41A860E469732659574BD9A95F3F8BDC1346F5B89D77B2CCBA0169490AA328FAC44AF654AE19220A
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/665deae8723a9bcb12bc3311_improves-hair.jpg
Preview:	......Exif..II*.................Ducky.......K.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.1 (Macintosh)" xmpMM:InstanceID="xmp.iid:3175246E7F7911ECBCA8B2018119101A" xmpMM:DocumentID="xmp.did:3175246F7F7911ECBCA8B2018119101A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3175246C7F7911ECBCA8B2018119101A" stRef:documentID="xmp.did:3175246D7F7911ECBCA8B2018119101A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d...............@...tp......................................................................................................

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7146
Entropy (8bit):	4.280877509717708
Encrypted:	false
SSDEEP:	96:/WO5q0hGS6AsE8lkETcmzcec7O+dXei2OYSURUeiVmBUgdfw/TLBuUhyzi0J:+APoS6Ermzcec7tduiVmiTIfATkGyz/J
MD5:	2501A79EE5B6E0A50EE92EF1FD754CEF
SHA1:	17A98A282F08E4709495B90389AB6B2E85180FAE
SHA-256:	BD2289877FCFBA3592FD824905A418C0AAEFEAE44AFF26AF6A8AD3C6CE8DAFD4
SHA-512:	F1F6C0F4E1EBB7C278B6D453109C7F8FAEC5C2C771F63287E63DD6477DE2D160F7D8A7FA1EF46115F932CAC5484D90AD3A85DE76CDD0E27A197C4B28E42A7C9F
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/img/logos/paypal.svg
Preview:	<svg width="67" height="16" viewBox="0 0 67 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="Paypal">.<g id="Paypal_2">.<path id="Fill 1" fill-rule="evenodd" clip-rule="evenodd" d="M25.2757 3.67877H21.6435C21.3949 3.67877 21.1835 3.85655 21.1447 4.09817L19.6757 13.2664C19.6465 13.4474 19.7889 13.6104 19.9753 13.6104H21.7093C21.9579 13.6104 22.1692 13.4328 22.2081 13.1907L22.6042 10.7178C22.6425 10.4757 22.8543 10.298 23.1024 10.298H24.2522C26.6448 10.298 28.0256 9.15822 28.3864 6.89984C28.5488 5.91167 28.3932 5.1354 27.9231 4.59167C27.4069 3.99464 26.4913 3.67877 25.2757 3.67877ZM25.6936 7.02739C25.495 8.31034 24.4991 8.31034 23.5363 8.31034H22.9881L23.3727 5.91431C23.3956 5.76948 23.523 5.66287 23.6717 5.66287H23.923C24.5789 5.66287 25.1976 5.66287 25.5173 6.03087C25.708 6.25039 25.7663 6.57665 25.6936 7.02739Z" fill="#28356A"/>.<path id="Fill 2" fill-rule="evenodd" clip-rule="evenodd" d="M36.1329 6.98609H34.3936C34.2454 6.98609 34.1174 7.0927 34.0946 7.23753L34.0175 7.71639

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61540)
Category:	dropped
Size (bytes):	61547
Entropy (8bit):	5.409573321800217
Encrypted:	false
SSDEEP:	768:BAuXnhgPw1AuCIOTQpzEeIHV7xk65nTBt0haRAY/2bVZYRMU3qnjcs3nA8Aruf6n:RgPw1AuCITEeIHto6dpsX0uf6Eq6w
MD5:	65339905D61638547ABE56962AF619A3
SHA1:	E6180A9B2343DBB2BF5F283AC3B9D69F39D4613B
SHA-256:	47300C00B400611716D1A288E9C12476F41D0428F79DD01B78C1A5B03D37D8C0
SHA-512:	29211E2FA55EEB283E380012CC58F8663F2C1F25B68B6A211FB068AB5F73F1C1FCC8EF7D5F90689FC64345C086B0E2824CDC20EA9FAA0CC8F5FEC80F94377DA3
Malicious:	false
Reputation:	low
Preview:	var EF=function(){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function r(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}function i(e,t,n){return t&&r(e.prototype,t),n&&r(e,n),e}function t(e){return(t=Object.setPrototypeOf?Object.getPrototypeOf:function(e){return e.__proto__\|\|Object.getPrototypeOf(e)})(e)}function a(e,t){return(a=Object.setPrototypeOf\|\|function(e,t){return e.__proto__=t,e})(e,t)}function o(e,t){return!t\|\|"object"!=typeof t&&"function"!=typeof t?function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}(e):t}var s="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};var e,c=(function(e){var t,n;t=s,n=function(){function l(e,t){e=[e[0]>>>16,65535&e[0],e[

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56025)
Category:	downloaded
Size (bytes):	56154
Entropy (8bit):	5.208411138069183
Encrypted:	false
SSDEEP:	768:6wnx/qBZuhyRwgsJnGiATP9KaA7jmCthgqGy3eT91JYFUKXBc6LalvNFrn/4T0dg:6koiaOklPgGE9+I4I/
MD5:	C5DBB949F24BA236412D47C251614C7C
SHA1:	828B61BE7D6956699EA7AFAA2047028D0F20722E
SHA-256:	6534CF84DF3656BDFFD3BC452C5D80687F07816018C98BCF679A2760A7304EBA
SHA-512:	7644C7E6F116B0C12C5BFA2D0BB2F652C375A85737E556A7813356474BC29E7D8E9F8D1902161EBFE13EEB971D3694C82463B0DA950539712B3A54C082CFC14C
Malicious:	false
Reputation:	low
URL:	https://browser.sentry-cdn.com/7.23.0/bundle.min.js
Preview:	/! @sentry/browser 7.23.0 (03e6a2a) \| https://github.com/getsentry/sentry-javascript /.var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return h(t,Error)}}function r(t,e){return n.call(t)===`[object ${e}]`}function i(t){return r(t,"ErrorEvent")}function s(t){return r(t,"DOMError")}function o(t){return r(t,"String")}function c(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function u(t){return r(t,"Object")}function a(t){return"undefined"!=typeof Event&&h(t,Event)}function f(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function h(t,n){try{return t instanceof n}catch(t){return!1}}function l(t){return t&&t.Math==Math?t:void 0}const d="object"==typeof globalThis&&l(globalThis)\|\|"object"==typeof window&&l(window)\|\|"object"==typeof self&&l(self)\|\|"object"==typeof global&&l(global)\|\|function(){return this}()\|\|{};function p(){return d}fun

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24408, version 1.0
Category:	downloaded
Size (bytes):	24408
Entropy (8bit):	7.9925104649213425
Encrypted:	true
SSDEEP:	384:lwfLHrvMt+iWkciwtprblXNenWbFrqBY34OlZDsnNBvlUg0/qxFul2sOgZl06t2b:6bjU6PflXNHFrZJLDsT+gpx59cS6t2b
MD5:	EFEE2D080D7BEBDD2E0AEB2E030813A0
SHA1:	F8D38F9F9584E48C2E469877EBD94232265585F1
SHA-256:	BCA1D88ADA544D9C80872D4DA27133FAB6D347361FA26E932B47EC9559088FD0
SHA-512:	16C55AD46A26E0AF340F2B8A89BD98C1CCAD5C976B434AAFA7D1D8CD5049B40A58C5350FA42029710C9DD8040E7CEA05E57979731B941086CA096239169F4F3C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2
Preview:	wOF2......_X..........^...........................H.p.`..D....e.....t..o..B..6.$..v. .....E.K...%.E.. >.t1.`......<........%r.y.%.@g..L..^.n..>j?.Ve...~.U............Im.-...3..S....).K.....l..m6.D.hv.;.'~%v.a.D>...Se...i..Z........O....gv.(.$.2IDT...2.q.`.6..i`..&...J.H...FcD..,...".[?.~...B.c...<T..<.r..s..D.....&c.@...i\.........[Z.h.....8.1............-.h.u......=.a.Y`..P....HP.r.....V2..D.xJu.....S.m..gr5/@v.>8.]......RW......z.A....am..z...(.4...i....&.Zd......u.{G3...H......[...$..o[.-.../]....d....Q....x..Q.o..Y,...8.i-...!..Fn]N.....D_..q...n..)&..).......x&.r:.D....d.M.m..6....M.V.....n.....h.l(?..8 d../.v.......>..ED$...B..e.T.Q.Jh.........=......'n..LH...UX.......JW..J..d...-Gp..ncuR.$\.&.......H.p..t.........lw9,.......?.\|g....{ed.C"e....f..OvPXE..i.t.K.x<x0!.cj........miy...kb.........jd.\{...E......n>.vj;...U.D.b..a4..\H.$........A.....*..vl..IH..!. J3\Nm............l.....?t..#CO.......^...\.......w...`'.....

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2108
Entropy (8bit):	4.223351348829019
Encrypted:	false
SSDEEP:	48:C3d7nLAMfMZaownOcVzOd5RB/oTKZArjYKcQFIfDWTZibcoDW67fabqbRfo3M:gdPMZaznOcVzOdJowfKcQFIfDWTZzoD9
MD5:	337F01816C3BA9826EB4AEADA5B3AFEA
SHA1:	2142BBACEDE3BA94A4A7C267AF17C177A070D393
SHA-256:	7D8D00257D0169CFE4B3B9FD08E5490F09579AA1C9961CD1F37B6BBBAB850606
SHA-512:	1BDD65713215DA494270ED303958FDA2EC1C983BC4B1E572E648C7C5552AB3EDA0F5B26290FFBE1C776D963A07FAAAB75BEEC0B7389E4287816A9E71A74D014F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 600 113"><g id="Layer_2" data-name="Layer 2"><g id="layer"><path d="M587.6,106.8a6.2,6.2,0,1,1,6.2,6.2A6.37,6.37,0,0,1,587.6,106.8Zm11.3,0a5.1,5.1,0,1,0,0,.4v-.4Zm-2.1,3.3h-1.1l-1.9-3.2h-1.6v3.2h-.9v-6.9h3c1.8,0,2.5.7,2.5,1.8a2,2,0,0,1-2.1,1.9C594.7,107,596.8,110.1,596.8,110.1Zm-3.2-3.7c.9,0,2.3.2,2.3-1.2,0-1.1-.9-1.2-1.8-1.2h-1.9v2.5h1.4Zm-9.5,4.8H566.8V65.1c0-9-5.1-12.5-12.4-12.5-7.9,0-15.4,5.3-15.4,18.7v39.9H522.2V37.8H539V48.6h.4c4.1-7.2,11.6-13.2,21.5-13.2,13.8,0,23.3,7.6,23.3,24.2Zm-67-37.1c0,24-16.2,38.8-36.4,38.8s-36-14.1-36-38.6c0-24.7,16.1-39,36-39S517.1,50,517.1,74.1Zm-17.7.2c0-15.4-7.4-23.8-18.7-23.8S462,59.3,462,74.1c0,14.5,7.4,23.6,18.7,23.6S499.4,88.8,499.4,74.3Zm-55.6-52a9.94,9.94,0,0,1-10.1,9.4,9.73,9.73,0,0,1-9.4-9.4,9.76,9.76,0,1,1,19.5-.7ZM425.3,38.9h17.6V113H425.3Zm-3.5,69.3c-4.4,2.8-8.1,4.8-17.6,4.8-13.4,0-20.8-7.8-20.8-25.8V52.8h-9.2V38.5h9.2V20.3l18.4-7.9V38.5h18.7V53H401.8V85.5c0,8.5,1.9,11.8,6.9,11.8a17.72,1

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11700)
Category:	downloaded
Size (bytes):	11701
Entropy (8bit):	5.285520638605146
Encrypted:	false
SSDEEP:	192:TBFlEprnectg07AKE2H+6W/ed2orSibOinqbNE0vaUSJ5culHT+:TBXEBeUXAKE2e/ed2orJOinqbNELUSQx
MD5:	5EEB658E05B2852EFE3BE233857E6F0F
SHA1:	EFA80BFB6F0E0183D8CA19BCB6AF30E17884221A
SHA-256:	794F490768508C99DEC4D93393A53938FAEAD7B4D843D4216ABAF9D093551A6B
SHA-512:	5E74CAABBD91BE5CD677398909E3A614DA426123BF81931B6D464EE6452AD202893C64E7A7670E76ECC7FCB469FCA960C0D42250661004B73F88E3D7CC2A167A
Malicious:	false
Reputation:	low
URL:	https://secureanalytic.com/scripts/sw/script/64d5p99gj0?url=majorleagueprices.icu
Preview:	'use strict';const env={log:!0,retry:10,sleepTime:1e4,domain:"push.secureanalytic.com",notificationDomain:"notification.secureanalytic.com",subscriptionDomain:"subscription.secureanalytic.com",eventDomain:"event.secureanalytic.com"},applicationServerPublicKey="BGViNJ7LQeNu2wKZqiIyjDVtEHNyxUNhwL_JNbIYzbak_5_Gl0Rj1xoD_OAYAalvdwdNASnLqptv8HLj-tCDcoM=",siteId="q5ejw8j4g0",smClientId="64d5p99gj0",version=533,smAPIKey="87e99772e7d94df197c5677835d9135e";let smPushSubscriptionId;function getStore(a){if(self.indexedDB){var b=self.indexedDB.open("pushPlatFormDb",2);b.onerror=function(){console.log("error db"+b.error),a(null)},b.onsuccess=function(){var c=b.result,d=c.transaction(["store"],"readwrite"),e=d.objectStore("store");a(e)},b.onupgradeneeded=function(a){console.log("upgrading db from version "+a.oldVersion+" to 2");var c=b.result;if(2>a.oldVersion){var d=c.createObjectStore("store",{keyPath:"name"});setUserDataInStore("",null,[],[],[],d)}}}else a(null)}function arrayRotate(a,b){return b?

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1718x1454, components 3
Category:	dropped
Size (bytes):	173994
Entropy (8bit):	7.9822843637670235
Encrypted:	false
SSDEEP:	3072:C3nWjvBfEE7V6bqyfOP0oXYr744ADvEbgJJZ9305FPDBH2PhgYh0TsKYGUoOzjr:KnWj5fXV6bqs60oxT0pWZJu2n
MD5:	3923F5B1F41C8161CA69718D01187770
SHA1:	EA42B5A4DF55EAB3639F48018642F683144CE4E8
SHA-256:	121CC8D430AE26DE94EAD92DDC4131C7E65917C17FB64134322FFED4187DD375
SHA-512:	1AA4BB12D2C341E8F842C925099D4F868182EA529808A49407C4F0D92F04B7BEF8C21CC766523F5AAEA951BB358F7776DD97D405D02A4C7AAE531DF65091195E
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................&....&,%#%,5//5C?CWWu............................................&....&,%#%,5//5C?CWWu..........."..........5...................................................................j5..o[....4.#...oa."...kac5.oZ.....A62..f........d...s."k........B..:, R.@..Abn.`..f.3.~U.3...z.g....7WI.....k.5k..3..Q.M.{z......tC.Ya_.".i.`.=...jKd...0-....z^>...O4.k.Z:.IWRG.E..2%.....Y..#......o3F.:.!L..s.....3......p.3.a.<...,.q....2...,.H....8....H.....l...x...)...+...&kk..!s0..&33..Rky.fD..30..f.0..33...30..33........0...f..GM...$...#.&.D.J.Qf.c.L..B%..5.y...h...r..Ep.S.I4u^T.r>..^..z+V[..&..H........v[V9St<..w^W.....n......t..7..uVA.r.....g\., ]...Gae._# f".h..GR......+...0.P.."...y~k.k..N..r2...fa.j..0..0...8H.N.3....z.L.B.6Op.{.M.d&@.c.A.....0.0`.`..).R{.A...be_.$...+D..?.a.V..V.-...0.....fm' ..&.....p..)....30...d&ff...fa..ff...fa...-....5..5..!.....(....CZ].Z5-.#.h.X..'..\........l"+...K.q.-..Y......r}...

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1828
Entropy (8bit):	4.7302273317708625
Encrypted:	false
SSDEEP:	48:c13Lvsc5aSTx9mlyZaTxYmo7STnRmin5DTzrwmv4SPITMdbH:OBRXmgaVYmoeVmYDzwmv4SAQlH
MD5:	59E745D7DAE123A3FC2D266C89B57DFC
SHA1:	FE84419A4365EEF7F2B2299F1AD61F0071748006
SHA-256:	DF8A1223A41E73970190997B5D37906B681053E593CDD1F99DA68410C4B7B195
SHA-512:	E09A7DDADE05B17504621355F9EECDFDEA0E0ED9E7BD34428F3599111FBFA2380486327344B338A52010154FF01A04916780B2F590C0B404A202AE5386FA7C0D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="81px" height="14px" viewBox="0 0 81 14" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>rating_stars</title>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="01_landing_funnel---oriya" transform="translate(-936.000000, -177.000000)" fill="#000000">. <g id="rating_stars" transform="translate(936.365145, 177.588019)">. <polygon id="Fill-1" points="9.04563 4.21734012 6.90111 0.000438119688 4.75308 4.21734012 0 4.92928461 3.45231 8.24944324 2.569887 13.0276642 6.901137 10.7891354 11.228877 13.0276642 10.349973 8.24944324 13.798773 4.92928461"></polygon>. <polygon id="Fill-2" points="25.50573 4.21734012 23.36121 0.000438119688 21.21669 4.21734012 16.46361 4.92928461 19.91241 8.24944324 19.029987 13.0276642 23.361237 10.7891354 27.688977 13.0276642 26.810073 8.24944324 30.258873 4.92928461"></polyg

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1444x770, components 3
Category:	dropped
Size (bytes):	84705
Entropy (8bit):	7.969485008729184
Encrypted:	false
SSDEEP:	1536:/827KFDTTcw8/u9yBQXQcE93fiMPHex11X43CN5qfTXdoBzgbghBG+5KrcQ:AQP/ugCAcEFieHexz4I5qLqgEx5s1
MD5:	BBD5070C6EEF0584688F0836D1D82F90
SHA1:	FECBCB04833098ECBA142A266904BEE3DE826050
SHA-256:	A8FBCD7E2EC914DC53EE2AACBDEAF13DD7B16DCD6FBE98FC91253FD890A05047
SHA-512:	587418EC25DF84DFC12F821FBCD3CB647C2155D652BC2F013F4168EA2733AB4039FC46B233A51FD04E076D934676E73BAC689DF50D4238D2E32B652079D4FCA5
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"..........4..................................................................i.~...._...}..};.i....Q..#NO...B..UD..\|+./.....\|..5...E.zg.z...\|~....G.&.5........s.s].....b.?3...5..s..[.t..<..Q..z..<>5_?.i.}_~......q..pyyiU..5.w...t.k....7..&od..7..:..l.\.I...i...+..j..gD..V,.....R.K"5..Hr$52.2+Q..a.s\.....Q...H.....Eb...D...\.@Q....DG...^.Pz+-k.@..j...T.kRA....Q.DV".,...*..G.#.Q.Q+.n..6.\...k...D.'..N.....@E..#..G.\|...........j;.c.....<..1.:4.w\|N...%.k..].....:..'......\|._,n.>...?.y.o;.>W.Vt_..s.J......r...o...~.<..:{;..>C..v[..f.u.r}zw.../.;.~..5./..\|..8RwPy..U..d.....U....]On...}/..?.)...]Y+\.j....;..vjK,]Id.u.$8.E5.%.....X.....#.QT..../..TD.."=.@.$..I....B..A@j..).."".........\...A.4..nj...Es.u.j.+..p..sdUD..J.R"&c...kQ.F]F<)...:....l.....~.V7...F4<..<_...;^[.....;t.....~./.......H.......

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7146
Entropy (8bit):	4.280877509717708
Encrypted:	false
SSDEEP:	96:/WO5q0hGS6AsE8lkETcmzcec7O+dXei2OYSURUeiVmBUgdfw/TLBuUhyzi0J:+APoS6Ermzcec7tduiVmiTIfATkGyz/J
MD5:	2501A79EE5B6E0A50EE92EF1FD754CEF
SHA1:	17A98A282F08E4709495B90389AB6B2E85180FAE
SHA-256:	BD2289877FCFBA3592FD824905A418C0AAEFEAE44AFF26AF6A8AD3C6CE8DAFD4
SHA-512:	F1F6C0F4E1EBB7C278B6D453109C7F8FAEC5C2C771F63287E63DD6477DE2D160F7D8A7FA1EF46115F932CAC5484D90AD3A85DE76CDD0E27A197C4B28E42A7C9F
Malicious:	false
Reputation:	low
Preview:	<svg width="67" height="16" viewBox="0 0 67 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="Paypal">.<g id="Paypal_2">.<path id="Fill 1" fill-rule="evenodd" clip-rule="evenodd" d="M25.2757 3.67877H21.6435C21.3949 3.67877 21.1835 3.85655 21.1447 4.09817L19.6757 13.2664C19.6465 13.4474 19.7889 13.6104 19.9753 13.6104H21.7093C21.9579 13.6104 22.1692 13.4328 22.2081 13.1907L22.6042 10.7178C22.6425 10.4757 22.8543 10.298 23.1024 10.298H24.2522C26.6448 10.298 28.0256 9.15822 28.3864 6.89984C28.5488 5.91167 28.3932 5.1354 27.9231 4.59167C27.4069 3.99464 26.4913 3.67877 25.2757 3.67877ZM25.6936 7.02739C25.495 8.31034 24.4991 8.31034 23.5363 8.31034H22.9881L23.3727 5.91431C23.3956 5.76948 23.523 5.66287 23.6717 5.66287H23.923C24.5789 5.66287 25.1976 5.66287 25.5173 6.03087C25.708 6.25039 25.7663 6.57665 25.6936 7.02739Z" fill="#28356A"/>.<path id="Fill 2" fill-rule="evenodd" clip-rule="evenodd" d="M36.1329 6.98609H34.3936C34.2454 6.98609 34.1174 7.0927 34.0946 7.23753L34.0175 7.71639

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1444x770, components 3
Category:	downloaded
Size (bytes):	84705
Entropy (8bit):	7.969485008729184
Encrypted:	false
SSDEEP:	1536:/827KFDTTcw8/u9yBQXQcE93fiMPHex11X43CN5qfTXdoBzgbghBG+5KrcQ:AQP/ugCAcEFieHexz4I5qLqgEx5s1
MD5:	BBD5070C6EEF0584688F0836D1D82F90
SHA1:	FECBCB04833098ECBA142A266904BEE3DE826050
SHA-256:	A8FBCD7E2EC914DC53EE2AACBDEAF13DD7B16DCD6FBE98FC91253FD890A05047
SHA-512:	587418EC25DF84DFC12F821FBCD3CB647C2155D652BC2F013F4168EA2733AB4039FC46B233A51FD04E076D934676E73BAC689DF50D4238D2E32B652079D4FCA5
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/images/CpEpEAQ8eEXs.webp
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"..........4..................................................................i.~...._...}..};.i....Q..#NO...B..UD..\|+./.....\|..5...E.zg.z...\|~....G.&.5........s.s].....b.?3...5..s..[.t..<..Q..z..<>5_?.i.}_~......q..pyyiU..5.w...t.k....7..&od..7..:..l.\.I...i...+..j..gD..V,.....R.K"5..Hr$52.2+Q..a.s\.....Q...H.....Eb...D...\.@Q....DG...^.Pz+-k.@..j...T.kRA....Q.DV".,...*..G.#.Q.Q+.n..6.\...k...D.'..N.....@E..#..G.\|...........j;.c.....<..1.:4.w\|N...%.k..].....:..'......\|._,n.>...?.y.o;.>W.Vt_..s.J......r...o...~.<..:{;..>C..v[..f.u.r}zw.../.;.~..5./..\|..8RwPy..U..d.....U....]On...}/..?.)...]Y+\.j....;..vjK,]Id.u.$8.E5.%.....X.....#.QT..../..TD.."=.@.$..I....B..A@j..).."".........\...A.4..nj...Es.u.j.+..p..sdUD..J.R"&c...kQ.F]F<)...:....l.....~.V7...F4<..<_...;^[.....;t.....~./.......H.......

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24448, version 1.0
Category:	downloaded
Size (bytes):	24448
Entropy (8bit):	7.99088597353699
Encrypted:	true
SSDEEP:	384:9BNdyPCV6NIidqJh7Pc7qK10yJ/smPzyL6AdcEoJwDvVa7U03NymBtpxev7++/9H:bKCV6NiWuKdJ/smby+ZJSvsU0dnE7/Qg
MD5:	865E46AF816320C9F32234E8968558D0
SHA1:	6791E9F732FCBDE0F375F84CCBC14C4AC72795A3
SHA-256:	6C84348296EBE2E2A0830C3962EB02156419D9BC76371C2EADAF7329D827D550
SHA-512:	34EB9CB9C4DCA6E0CA7FA1C9379E49AF97E9CCB7C94A6A4B9CCD4D6EA62007B70A4792463902BAE705177CCAA46DA883C06911074BC13C6DD403C4EB18965074
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2
Preview:	wOF2......_........(.._"..........................H.p.`..D....e...........B..6.$..v. ..6..E.K.G.%l\e.v@..}5.a.G-:....T.fZ.....d..v..V.. b.$..BM8J.....Z..k$..`..?..3..&Q..yO...k.GG./.G.ql.E.....~....o.}.^.k&o.M.O...[..'.4.A.p....u...E`.bG........}NU....G.V..L.#.R!...f.M......9jlc...Qc.:.....T............F5.?o.:..k.Z.W...!.h...^.....t..7..Ns.9...a.xC...7,.....^...a:...QI..Gj6sF..T.P'xq....C.K.pz.@v..)LVQ..h..v..uV{@.e8...{.5...yG..x....n.6.!...m..@.'. ...Q.v.\6.[..f.....s.?.sL..E...2.>b.CG...>b..Yr.......m....8/D..n{..8..[.....V...>.h.t....!./v...h..`E..y.I..~.H...,[.w..^....jg.w...:.....a..j{.....Q...G..K^......t...[.......zNc5BV....T......N$.][r.6Jr..`..u...'..~.7..7b...0I ....$8.@M.F7.F EQ.NH........R.g.8.SH.=.p..u....?.....&......r.g......\|............^......PR....#ug.6.F..>..K;...Q..Z..Y....jB ......"s.w.ei3@..8....HW.......%....DDD.G.......eo(%K... ....a:..dH...UJ...........J..lC.~.}.......R.......E.vbe[<f....*...z...>iP9o......j).

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x170, components 3
Category:	downloaded
Size (bytes):	6804
Entropy (8bit):	7.7908468871807015
Encrypted:	false
SSDEEP:	96:IElbw+i4rY+Fm8VcoMHtDa6q4cRmWVMCCF/KAcjlp2odGVDHppGoYuYlIgtNfOrs:9wE7Fm89KtcTmWRucppr6kIgtNWnDtFo
MD5:	C6639AD87AEF0452E376ACAB7C72D7CA
SHA1:	BA2797B2D19B8EA62BF5E22F0A3BA8DC3B24075F
SHA-256:	BDC4FB6A88E39875E73BA88873D2430C71F73434210C9DE9CB8626DD9D68BA0D
SHA-512:	91F7B5A93491BC182E6C6782731AC7FC82E2F91E7AC1DA09ECF69B5E1257B265CB7052707099850E3F5DFEFED9E3F1E2E4A4694549908DA54FEA6D04822750CE
Malicious:	false
Reputation:	low
URL:	https://d22322n8919ncg.cloudfront.net/content/c/internal/images1339.jpeg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333..........."........................................C.......................!.1.AQ.."aq.2....B.....#.$3Rbr..C...4S...................................,......................!..1..AQa"q....2...............?....@X.4...L._H. .D.+..$N.y.=......v....n...@m@..D.t.H.y....Dm.G...'..HQ.3..M.i=......A8.:..#..4.P:.sE.R..._....f..ahSj$.Ds....\iimpDi...\2.....x.c.7.6...

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4200
Entropy (8bit):	4.249838009390296
Encrypted:	false
SSDEEP:	96:JM+b9JIt1RfTbugOW1l1r2krXtIWqXrr2th/:W+b9Jorbw2rr2EtWXuj/
MD5:	9A9346A63DDA1F97F1AEA5BFF802837F
SHA1:	F6314B62E8E8E95A9A5EAA4A59973BCE2F636A56
SHA-256:	40FE00E0CE6CDA4613EFE0FC92111DCBE3817CB01E1F84305884C7891D4C2489
SHA-512:	C5CE8D9ABB70D2E18370CC323EB3A3ECAF880F1D9DFCCA2A06472C0716688209D500FADDD005C1AB4A4C44199A557D5934E14A5E61235FD66F6F8E0178EFE7FE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg width="9px" height="13px" viewBox="0 0 9 13" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg">.. <g id="hourglass">.. <path d="M0.262868 0C0.117765 0 0 0.11375 0 0.253906C0 0.394063 0.117765 0.507813 0.262868 0.507813C0.407971 0.507813 0.525735 0.394063 0.525735 0.253906C0.525735 0.11375 0.407971 0 0.262868 0Z" transform="translate(4.2058825 8.607422)" id="Path" fill="#012169" stroke="none" />.. <path d="M7.88603 11.5019L7.88603 10.1309C7.88603 8.70665 6.94344 7.39479 5.59374 6.94065C5.38937 6.87197 5.25735 6.69901 5.25735 6.5C5.25735 6.29944 5.39341 6.12673 5.59382 6.05932C6.96486 5.598 7.88603 4.34657 7.88603 2.94531L7.88603 1.49807C8.48019 1.38206 8.9375 0.873539 8.9375 0.253906C8.9375 0.113699 8.81979 0 8.67463 0L0.262868 0C0.117712 0 0 0.113699 0 0.253906C0 0.866988 0.452264 1.37993 1.05147 1.49789L1.05147 2.94531C1.05147 4.34657 1.97264 5.598 3.34376 6.05935C3.54813 6.12803 3.68015 6.30

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2605
Entropy (8bit):	4.62221222733622
Encrypted:	false
SSDEEP:	48:CK3QAHsekWAN1pUiRqdrar2VnKD7f8XAyYXYe6x9yE6rN11USRTb:ZguYNYiR8rar2A3WZNxVYNASR3
MD5:	9555E872D5E965718E6B9570B4F0B87B
SHA1:	C63776E5CBB1FF2DA9C5D38AF2F54AA0A86785C8
SHA-256:	44F0F410F55A34F524E0A52EA7AEFB67DCBEE18A61D32A6281CF80CCD5E7C433
SHA-512:	C6301F0ECC2432DBD623215E6C6B358E3B3A725EFF0F3491BD6C73BB5F9CAE4613603B5FC40405F3E8291B58D5323A2E5B820C9A1A5A535AD95A7BF57C6A4DDB
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/665deae8723a9bcb12bc32ed_goodhousekeeping.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 600.1 125.3"><g id="Layer_2" data-name="Layer 2"><g id="layer"><g id="Page-1"><path id="Fill-1" d="M34,88.9H14.9v-23H0v58.5H14.9V101.3H34v23.1H46.8V65.9H34v23"/><path id="Fill-2" d="M365.4,124.4h35.5V112H378.2V101.2h22.7V88.8H378.2V78.2h22.7V65.8H365.4v58.6"/><path id="Fill-3" d="M152,104.5a8.56,8.56,0,0,1-8.7,8.6,8.31,8.31,0,0,1-8.4-8.6V65.9H122.1v37.9c0,13.2,8.2,21.4,21.4,21.4s21.4-8.2,21.4-21.4V65.9H152.1v38.6"/><path id="Fill-4" d="M84.4,65.1a30,30,0,1,0,29.9,30,29.92,29.92,0,0,0-29.9-30Zm0,47.4a17.3,17.3,0,1,1,17.2-17.3,17.26,17.26,0,0,1-17.2,17.3Z"/><path id="Fill-5" d="M568.6,90.5v12.4h17.3c-2.2,6.1-7.6,9.7-14.5,9.7a17.09,17.09,0,0,1-17.5-17.5,17.39,17.39,0,0,1,17.2-17.5c6.9,0,11.9,3,15.2,9.2l.5,1L598,81l-.5-.9c-5.3-9.4-15.2-15-26.5-15-17,0-29.8,12.9-29.8,30s13,30,30.3,30c16.3,0,28.6-12.6,28.6-29.2V90.5H568.6"/><path id="Fill-6" d="M520.1,101.2,497.8,65.9H484v58.5h12.8V87.8l23.1,36.6H533V65.9H520.2v35.3"/><path id="Fill-7" d="

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	83
Entropy (8bit):	4.585143649720566
Encrypted:	false
SSDEEP:	3:YQ3/eHiHXIeLCBRTzx2A6vJ73wWK1:YQ3PIeLCnT1VoJ73wd
MD5:	5C4AA25A838C770B28CCE719EDA1DE38
SHA1:	3785BF881BB49533D2873E9CD63570EF9C926819
SHA-256:	B00FE408C5A074E13A6600ABBF2D429CE8B88A12E516EA51070B8BB53B3C9816
SHA-512:	0831E4AD50E3E1C6BBF54EB12023652BCEA328D403E996BD905DB3001D90EC261BFC8F0BF8EBBE1CB49BE0E2C3E08226E9099A2FF4CD12039E771165C101E75B
Malicious:	false
Reputation:	low
URL:	https://api.taboola.com/2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412
Preview:	{"user":{"id":"12311932-461d-4a11-ac0e-0d467ea37c38-tucte5b381c","isNewUser":true}}

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17728, version 1.0
Category:	downloaded
Size (bytes):	17728
Entropy (8bit):	7.987337206626857
Encrypted:	false
SSDEEP:	384:/KaOBBleprMP1pjz5XxsCKqT3+m6qmTuk52+CL:vEBlepr8Hjz5BDKqTum6XTuu2h
MD5:	9D09D1DF90538B11770EC5F593B6D792
SHA1:	6E117EEEDA54F443063BECF094332B362E19ABB8
SHA-256:	A961366B4346F6078CC2F164D2C019F63B37E2693F6FC93A995048A98B25C083
SHA-512:	C6F4F73DF5B0C9A5A2DBED0D822F99D82E82B01AA92365F17B4F15B169DC70EF6101DC694D60179039FE44AD6A7FF6C99E396EC51E6E589A4EBF0257BAE479A2
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2
Preview:	wOF2......E@..........D...........................H.p.`..`..D....s.....h..M..B..6.$..v. ..$..E.r.l..c.E38..../_y6.f.......6...t...3.....l.W..,LVIDU..F...hj,W.v7.]....:.);K...LS......[y..=x..?.,...o.......=..D].2....../2..7......+<.=G....?9.....~w.8.g.#:w......S./n...L.I...lS.....F....").H.R"....3'..r.ns}....W....W.H......Of.,.P=(.4p<..0...;..w...n4..4. .+.P!.sI_.7L..U.....6FnT.GF....&...P.'JJwl..C.!..)..Y.N..h...`!>.@..~..=...p..<D.C...1D.Bv.&..5.]..7.....mjma..%.Fv.;v.i.(....%......*].aB...........y.......$.2..KpWl......[b_d!mw...b0vc.?C.....66..B.`.....oJ..J....L.WwE.D......j...vc..RHw...,.@..79.p..<.u4=aE.._..EYQ...<\=.=..?..$......;.f..}....e+O............O,.T_[.=..N.r.....TcF].......CHt..[H....r......K]..<.....$...V. ""....;_@M..Mc..S.k........A.YG....2fV......D.!.....D.8M$f.-.. ....j...`. ..Z....>...L.):.W..eo.>>Dm..>..h....>%JE\|..d%....k&..C...h+8.F$.CK..6%2o.&.2.....KS.Y...W....a....7k.0..+.`"-...w...].En....`.B...e....UE....,..'N....A...G@D.,E

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3573
Entropy (8bit):	4.790576179968057
Encrypted:	false
SSDEEP:	96:aMlJSxdoaO6MKR1bKXbJNkoiqwj8qfyPkCxn:XlJUZMKbbcbfkrpgiqkCxn
MD5:	15E17677F631836A2251CE244B68DFFB
SHA1:	A633D0D34EA10C2CD7A96722231BA55F47945F4E
SHA-256:	491A4D18AC4DFCA9632AB26AA82BDA6DE1518CB81F37663D4ADF18273DFA6027
SHA-512:	1065202CE761E5CD7E2CC72629ED092F484653D24040990C79F010AD4A72F4705FA3BCCA4345C7AC71A3615A635EAA12428E1119FD70F3A60CC9F039A4DFC8A7
Malicious:	false
Reputation:	low
URL:	https://won.quandral.com/permissions-redirect-script.js
Preview:	// Function to get the value of 'sub3' from redirectUrl..function getQueryVariable(variable) {.. var query = window.location.search.substring(1);.. var vars = query.split("&");.. for (var i = 0; i < vars.length; i++) {.. var pair = vars[i].split("=");.. if (pair[0] === variable) {.. return pair[1];.. }.. }.. return false;..}....// Function to redirect to 'redirectUrl'..function redirectToRedirectUrl() {.. var redirectUrl = getQueryVariable("sub3");.. if (redirectUrl) {.. // Decode the URL if it's encoded.. redirectUrl = decodeURIComponent(redirectUrl);.. window.location.href = redirectUrl;.. }..}....// Function to redirect after a delay and call the overlay..function redirectAfterDelay(delay) {.. createLoadingOverlay();.... setTimeout(function () {.. if (!isRedirecting) {.. redirectToRedirectUrl();.. }.. }, delay);..}....// Flag to check if redirection is in progress..var isRe

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9636
Entropy (8bit):	7.962897200654309
Encrypted:	false
SSDEEP:	192:hOLQaJMNCxxFmADmxFOi+lUIZf1IgSOgJZxX/0cPLgmmT:h4vJw4BQsXZfOgaZxXsqkmg
MD5:	3040E7C09EB391D03D43CA71A13FDED4
SHA1:	6E2AB7D3A59AD4ED68A486AC2C7CB0E4EE11753A
SHA-256:	314251309008D139CE7F5212518788DA5DE60E2861E2E7222EA871B1B0F32D4A
SHA-512:	1BE43EC272AB76E7C15D82E909826DB2C55B5DBE2D4BA4B7F18D1090E4AF9CACC64D60D2CBC5BA00145D75D382306C78FEF68E0D724E3609A9F8E353211BCB30
Malicious:	false
Reputation:	low
URL:	https://images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2F56d932aa1f6cfa49bdc3978ab8992521?srcxy=notifyai-digitalsubscribers_--___2bc45aa076fb445c279c905146a9f5aa__a8bd327b98bbd68842c75677f1e6b089__~~V1~~-8546183196209246962~~EvnSfqjKR28lZYTWEDIELF4uCFvA5_b1Wov7B-yjFNXnoZueAsnM0UTkqRiz-o8uV9GNaet_FWxUAZ9PPPsFwepP0QI8ApBUqMn1Hn67unFW3gMxxE5FklL3byiLVORnL2mKl-VYyYpmjqtTDTKL2EuhYyT-X-BIWbZ-mIZ0peXX-x-fnc1sjKo9ZL00ocmTMO7Tswj5WH4cylUjQLFLHQ__text&response.session=v2_1d395c24c6744aa481ce31fc78793722_450741448_1734455985_1734455985_CIi3jgYQ0pdeGMGOiK29MiABKAQw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiI6d315YeYt1lwAIABAA
Preview:	RIFF.%..WEBPVP8X..............VP8 .$...\|.......>.:.H.."!-..x...d..L.+........y.K.......z..'.M.;.G.._...]N......mq...............+........o............O.o....S.....v.......a.j...K.?......W........T.......a.....I`..\U....O....G..?g.!9.6A8.....7....Ua..r...J.'.Q...iN..&.$O.'...rQb..?....m...o...)..."...zJu.PEN...4Y&.5..A..J5@#..m+}..o....6..$......L..........G..z..H...&.T....x...}.q......5,.O..OJ9o.Y.n....5.Ki...o..t.0.a12R..o...F.......r?.>).fwj...}.:...$0....?.#e.l$.h...K.j.........<A.>t...Cu<'W..JcT..n.W.@6.....~..,...Up.....B..H..7.{V..........w@..5.wj.`...y...y.....:c...]L..E.EN..bk=.h.@..o..y}.^.X..c.H........%.Q.:.c..N.).O.'.Z.B.{m.@n.5oxR....).>.N.$..\|.y..p..z_...G...KEX.....7....E9E../..X..3..]..H.\|..m...y.=..V\.g...I....BY...z.j.w\|c.B.s.n.\R.\|...(dg..OO.....0/.m.(G...^4PuO4v....$Y..5.V.........{....+Yt.+W.M.j...(.?..N...p....k...L...2....l...,...e.......5..R...K>.....B.<O4.I..~LG.t......[.! .1..~......\|.."..x?M:U.!.bzUH.8....l.X.9....

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17072, version 1.0
Category:	downloaded
Size (bytes):	17072
Entropy (8bit):	7.989353907758723
Encrypted:	false
SSDEEP:	384:f3GwyH0sglp8a+PvDNJaxsHKg6gWGOiaEpnXL6tJBXGTGRO:vGWrgPvDNDHKTgWGOiaUXkVmaO
MD5:	A049F4C6BCB907E3D451BDB388C8E86F
SHA1:	F6261C1401A8A0F31AE74FB9EF7AB6DFEC3EF1B6
SHA-256:	B19EFE906C9B0345DB45525ED83C76031644E39329A36D39BADF5275BCE363C2
SHA-512:	7D26EE3315BF2964C55803D317C6021224CA1C298BB68AB96D6D4BD1870DEFBADC1A722C726C81556B376737B52E38C9BAED6D5A1FF1B2C5A25E3B634D2CBB24
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-oPCI.woff2
Preview:	wOF2......B...........BP..........................v.p.`..`..D....s.....$.....B..6.$..v. ..0..E.r.....w...........n.J"..#......-1..?%i...b.J..C...Eg"...`X.....`(...tL....2.9.!.:C.........\|eP..,.p.s..w.=..JL.c.[4..k.V\U6.V.v......v.-m..>..):....4.A.}.-..m#.r...j....3{.....~E.............=.%...........}A8....R.D.A0...(..R...NQ.q...gM....n...w..]nW....kW1l.<D.68.....=.....4..0....T.2....8......L........b......:.z.. .. ...l..O9..E..f.Y...F..q.A`.g.g.......O....=..3..b9$.....^...L...R..T.Tx..bU2....3.8........M...5.......f.>.......F.=.^.DF.N]..W...%=.......s'/..-..-..".U.f....$M...%N.P....l.w..q.W..Y.....Q)?..........&...>x..B}EW.r..+..2KX-..!...........;.6?..(xU.o.6....?...%!..~......Q.c.B.\.nA...SjZ..N].".}{.u..N...K.3.Y....H._+.a'..& ....cy...~...b.0..!...d].2...M:.p.....(..xw...p...:...t..zf.6.:5.....W.....=.t./E..p.=...`P.....{n...Y..VG.`h}..;.....2.}..a....x.'.............V._...#^.pb.;....{.'..Q....mz..<..8.3.W.-.,1.5,jpf......i<?.....

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48876, version 1.0
Category:	downloaded
Size (bytes):	48876
Entropy (8bit):	7.995650888567528
Encrypted:	true
SSDEEP:	768:6m3eD3pQRl8zGyDsavwamAumj7XRxjePjvbtCD1HukpLK1s7aAO5:6oZRl8zGyD7vwj+jPjePjTIZOYdu5
MD5:	322119C1CD7AE78B4012C5AFD91AB1A2
SHA1:	FB4465751A718389AFE6DE7DC8B474DD07B73E07
SHA-256:	FE59064F59041198E862ABC740BF8BD187056EBEFF024A554CFDCC1A08888B19
SHA-512:	CADEA2B2DF1BAFE650FD46895D024CBC830F3E031C7F251A8CCF6062E96A5921E2D18EAA7A35FD70FE61FB05202E7AAAA59A5086E27D93A8A0740B5307760171
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIWpYQ.woff2
Preview:	wOF2..............................................,...l..8.`?STAT.........$.....D..6.$.... ..~..-..[8WQ.iD.....g./..M..[z3.M..u+..nc.8.c."..3...`.........."..j..Vo..jz...cSv5X.4Mx3]2.v..W.~#.\..9..O..q..r.nk}.H../;....W.x!.\|y......_.q.G.\.&r.....Hr.g.......s.p.....@$X.r....[......5.ZA+c..uMt.ReP.(%F.b`c.]gT.......X.+...i.T...u.K.f.R.,(.&.@.p.Vwy...i.N..6.v......Tm6B..^....L.....)..r...&.Z.f ....uO..e......b\|.../J.)/yP...=.....?.\|.Hdde$..)yR.i.\|..O..V...../.b.b....t.!.E-....{M..TL..:...BT.....F.Z...@.3.(.2.=....i..{.7..Df`QSN..\...~..r....l~s...W@.$.K..@.jdI].Z.uW..l..'...........5)V._..Y...4..X(_Q..'e..4.......uk...\..m.T...... ...3..,. .-.'.rzk.....10&.s...s.o..Y).YiYM...)D..B.dJ'.oe^...8....W.....3(fI....}.........z0.\|..Z....T.Yp......#7.R...~.z.@.q.(d.....P...fe....u.k.l.s.S.B..p.G..>.Y.~u..`.a.pu.@.......x.:...A.-..pe].P.b....dv..d.DI...D....7....!72.....h..Q...mH..6..R.PUo.........I.).._......?*qk.l.j...f......tZ.....p8..y.(.......JI

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21224, version 1.0
Category:	downloaded
Size (bytes):	21224
Entropy (8bit):	7.9899918447771325
Encrypted:	false
SSDEEP:	384:mysIC68HrGncuT+YG6t817lbTJ2Qi6Ne1vqsG7MZTwswKBoBkhslzsJVD:mGb8LGnc/6t8b8Q21isGfs1gAP
MD5:	13BDFB843F942CCD9F485EB6C0BC1934
SHA1:	2BAD44362FF7569F24F2A3DF2521B27A97EC1297
SHA-256:	7A291479495FBB281655D5E870C6D118DC6B7ED18E8C235AEF5974C1E9DE4E6C
SHA-512:	754E323505975A2E9E64FCC5BB37BE5E68AF0E7973404093AA3E3505B00834E1814179BEC405E18E39BC0A474CDF57D30EDB7389FDF1894B38EFB73088670487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/droidsans/v18/SlGVmQWMvZQIdix7AFxXkHNSbQ.woff2
Preview:	wOF2......R........`..R.............................@...`.....\|........(..]..(..6.$..L. ..l..g..l.H.%...<....K...6....{.pc...PT.7...s..c..v.jV.p.P..tt....@e.e....BMF....2j...t..Tw..[KSw..+Ao...RF...}~....d?;C...T..a..vU."..;....C$k..j.\..knm...s.o.c>..l\.HVN^..o........w;..@...l.........A..'..{?......df..!.D.PF..I^.^..`yX..E.U.C....ic.t!.E..^U.C.'9...l..>c.(.A.X..HI..R&...5k:.p.f...s.t.l.\....................A3...)H...a`I...q..2..&..0o......7.qv...7.....s.$@...4..;.-....4..5.I..Z...}.~...N......:..7.>K..KX..+;..O.."vI...U....v.ZB..J!T.P.(....v.+ge7.......d..a.[k#y.N.>...3....Tk.)z...A...../..eF..\|.Ku3^B...x..Q..........}f..."..7....j........I.T...G.zwS/K.QZJ.o.2Qq.=..C!\$.k..`...M.....+...$^&..7...;.......w........Z.AZG.:...9...Ay@P.3/\.a.dQp..L9..R.B.C,.k.+.S.\|ES\._Q....&..e.C!=<....V...W....6..-d...X.....b..3.{Z..:{...b....0.N%.?..4~.:U...8q...'.&.R.Z.i....N{...k:.G..).= .h..<..!&.#DM$.=.G.....<K...<..... .xU?.5..V......y.'\|.+s.O.~./.:...W.5...

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	155955
Entropy (8bit):	4.193372887196477
Encrypted:	false
SSDEEP:	1536:KJrpfm5SfzJxQN69Bh4DSk16+6D6FGqDXj+gZiUuW4s/MXSf7eORFP/O1Sq3dNJR:KJ1+66j+HUuWiSSkPsdN/jcrdIFz
MD5:	AAAAE9F8C2FD8FB4B72D9DC05E545A3E
SHA1:	59BB4218434872807D25C3365FE67FBD734E67D0
SHA-256:	2F7164D58F35E31E75E960FDEBD6D51FBF02BAC284C57C9FFC3D6A5D68434B5D
SHA-512:	FAD06B91BB5327DC53A2FA533B4CE9E19732EEA40FF1B9F4FEC50BFF6B3609ECA896A2B968A9CE75E3B9EFC5F22A692AF9ECD3DA6CA7B380FC4CC7DEF9267E4A
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!(function (e, t) {. 'use strict';. 'object' == typeof module && 'object' == typeof module.exports. ? (module.exports = e.document. ? t(e, !0). : function (e) {. if (!e.document) throw new Error('jQuery requires a window with a document');. return t(e);. }). : t(e);.})('undefined' != typeof window ? window : this, function (C, e) {. 'use strict';. var t = [],. r = Object.getPrototypeOf,. s = t.slice,. g = t.flat. ? function (e) {. return t.flat.call(e);. }. : function (e) {. return t.concat.apply([], e);. },. u = t.push,. i = t.indexOf,. n = {},. o = n.toString,. v = n.hasOwnProperty,. a = v.toString,. l = a.call(Object),. y = {},. m = function (e) {. return 'function' == typeof e && 'number' != typeof e.nodeType;. },. x = function (e) {. return null != e

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	87
Entropy (8bit):	4.44479806695212
Encrypted:	false
SSDEEP:	3:YEdKBAHf7XgCLaRMKOi7HTRAiXYxYQDtAUUC:YEdaif7Pay8HTRhXdQWUZ
MD5:	6BE3FF284B39AB5E7BACB0FBDA37377C
SHA1:	361DD090596A45D41FFF422DE2661EDCAA2A38C0
SHA-256:	CD85F3A48C66321149AFCA877279C883758E7E93053917C1ED5D877B9D86BC02
SHA-512:	39A98393BC6EC996A69E080147B85DA35307831E698A42FE4A75AC0A1DB481DF29087CD71B1B9B8CF8E01E13EE194B6F90728EFDE99CFEDCC997E53531EC0028
Malicious:	false
Reputation:	low
URL:	https://www.trk2dkt.com/sdk/click?effp=be9ae3c9e5dfc39574592ff51220972d&sec_ch_ua_platform=Windows&sec_ch_ua_platform_version=10.0.0&sec_ch_ua_model=&_ef_transaction_id=71fb64e74261421dbebd6fa6cf6be1da&oid=287&affid=809&__cc=&async=json&gclid=&__qp=b%7Cregion%7Cpub_id%7Coid%7Ctransaction_id%7Cgclid%7Cmsclkid&__rf=https%3A%2F%2Fmajorleagueprices.icu%2F&__efckuq=96
Preview:	{"aid":1,"error_code":0,"oid":287,"transaction_id":"71fb64e74261421dbebd6fa6cf6be1da"}.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2407
Entropy (8bit):	5.122214281219304
Encrypted:	false
SSDEEP:	48:0dgm2KkRboJNkvuAvy1DGbPmDQGXRjhMEFpJz9blzh6QMP06HZp6r9:BKzbH+m0XQVDwZU
MD5:	15997B51532A33F4B13D924E85E0A2B4
SHA1:	4319A83273BD2D0C7F55DCF5CF183BB133C5C935
SHA-256:	30F4461EB49CDBC335BD681043711B4194FD76A94A5852636178146D3B0EC785
SHA-512:	F401BE0EC8DED69A9F73C0BFE264BF73458128D601EE091C2E5F5C549D241D6D109F79079C499F80476B3E8CBD4A7B43F62D4E1339A6DC9FC5AD9443EC98B23C
Malicious:	false
Reputation:	low
URL:	https://spin.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FhuERn4Gsj_keStOiPu2jzLbLeWO6pfgS3TeDOtLPuyW7XzW1wnDlq-DJnn3y2pCcnBqEDuUpIzLWqoI8VOE5OBD2HAdj45jJZba4fpFIqnW9n-iC-FZXsliIzluc6WEcVJU3vpqTHOXWoUNoPoba8MsC8jmgz3pzq0JIU9t6PKFGo6sgND6d816zgC0Emq76_LPi5LcnrEwjzlKKfmHXXh7p7RvgTuWQrYxCBodkaMxuJwArvgTEc71OQFZoqRnTf2gUZmzH6S4SnBhyi26_pqOZyunAS288wrDxxTS7Z2B3_0dVFNM8ezq8S5F2lZ107zBkV0AXjxgsQoQsMfn9MwsH1aZGVq54LOrb1P02kBxMhYpkOXH-tmWVB4Cv0nRyz7PKcAjbS-91wWpKWed2etx0YeW4G89LtN2BBn5N6rVKt3pHQJ_ZAGJWNEkE6lEtdw24_T0qBYRhX0qMaJMi9AOa1mkUi9ePQQ7sP8cP6Qr3yWsYSbXh4fqzgFQq6lgsd6S_IEBF2OJw6K_zaVTjFJ77ybCnRhSHtQ6IfKtkVAvee_hMTmSpCg3hBnoXYHr4Ekj99MM0xG3KDixuzB9xJbVk30WJI28s0V5Y_juOBk40L7IaZhzEwU3N8Xo0Tw1cGuflAPWg5c-9Oxc8v1uEwP2a52G8Xv10A2CRD0-eZKjdm_24GTpcsJuPcda8DAcUt6KHILJOyIvykpqCu0cmwWSjX22nxCiaoVb3l4KVfVQvmjBVs5YQ15eNg743Ewlsr_5g31g2CNQUmL_HOsFej-Au1eu2vnkcoTGY2EC6AfQ9rnu4KnPmB0EeSvDJefsXKGUtAlCSgnb5xwnnutVP2K0lRG66tCuqClhid634LUTf4yUxymbRurEqqYVnY_P3y06nCk5AoMsbT97L2WqcU0f8VRW1i22UsPsBgSDaRWcl2kowiqHsvOKQVW7W3QQOt1_BiKoOx1DKt4SvtRF6G-JJRO8WDKg42L3Qxgzfx6iRqJU8Y3w8TJwzJ5U3nT_usQBrhlPvLOZHRG-zg_frmrNRZROzE0zf-U7vZYfvXBeN8an9-plOdIJXg5z0DUdGoXWTMEUkq1WS1io0qoYa63Rrt0l8ij1-NoJ2FmzTIdp_crFIXwQ0JMRBh_NcCG3RkCqmeTPanC5CGQvFGdIzD07wUmgUEho9kq6uTO7PeeOGkIycz2I04xyLU8AZ8bgByY6vjGO55MwoXe4-rxTUWgiPeMjzXNTcDEaxuvY6T3w8GBZ6OB5Tcp4BJTkGdmAFneGg798Yh5Xwiv1KKM3GT9oX_Yv8smXEsLIm5kaoz7tv2zkf3J09kUG1zFwGM-KHBtmMtFb3o95iGx4mZohjEDfhEw_DKoJXA8SBH0n_oN1yLozoe5KN4AzzKY5xYTKIIa7dq2gspaJPxXIDBxIlNsOdL8e6SVQ3JpAuGAez-Vrv-PsYjf6RlEYu3yHDfcocobb370Wa6WxSN9yCgWy0KOIfm7ju8ezGKfYAjk-zn51QCdNo-Fv9NwAXaCBVrUbYu1UDuPu_SXlrm9xpQynN0f1QynDsgTjAM9jE0bo5fQ_zX7i_8v0W36HsIyIsX9OkRvjHeNNxwU1DwrFddvm7IRFcdZAPz7jPTmgJpWG30ep2XWje_4XomzFh4k7M1iIqQd3-2PyQ4wn3ryjYDZ-TzyHE58ZsNos_cO12Qyx0ayZD1Wbwk2t3-Hw6qJ9iIeYWEgRIgNWxgFZprA6kNMYO9wBso9tV-StIpIqPNtdobmz-uXCuqnZywmxleZk9tsr6WS8VJgVnEqbuBSbzhe9S4aTLakJTpBfNW-7FeFbBu59Gmv50Mpdo6UWBcgf3z6t201aJYJkkYG6FXdTkCnci65tXC5OMkX_Sf7x5rXLhVQg4tfb2NueCWHl3zQo9BSZTK4Px7j-tWMWXQcYwIyMzBwsIwZrX1HC6g3sjermGz1tZrOkHcIbMvlstoJlfB0KJXues_sgRZRZWtJOHjjrp0CMnopidQSByUCDCdQpqvNFiL7DiTDybra5yW97G5j6WDCwPKSrza39zXLjnLRgrccIuvUFtmS3Wr_Zevxv5OPIqULgb65hebnMM8hxAd8_CvM_RymVqyC8M6UFWCAhvYm8qe_LFVCdfJwp0kodkrmeBCTHtUmhjocYooLZMb8EYajXS1vYX7QfHx03jEI1Dq6Jc_VfDncVbp7RGdsxzXklIcP5RW4qHw8sZztCzv87M&h=&v=185
Preview:	<!doctype html>....<html lang="en">..<head>.. <meta charset="utf-8">...<title>Age Verification</title>...<meta content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no" name="viewport">...<meta content="noindex, nofollow, noarchive" name="robots">...<script src="https://kit.fontawesome.com/adc0c796b0.js" crossorigin="anonymous"></script>...<link rel="stylesheet" href="./assets/style.css">...<script src="../push-script.js"></script>...<script src="../permissions-redirect-script.js"></script>... <script src="../backbutton.js"></script>-->...... ...<script>....window.pushScriptLoadedCallback = function() {.... // Load permissions-redirect-script.js only after push-script.js has finished executing.... var script = document.createElement('script');.... script.src = '../permissions-redirect-script.js';.... document.body.appendChild(script);....};...</script>-->..<script>...function exit() {....window.location.href = decodeURIComponent(getQueryVariable('sub3'));

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3006
Entropy (8bit):	4.220746845546488
Encrypted:	false
SSDEEP:	48:SKJHg1Ir6zfWaHp2v9ZwabfLDjyzezKmjIvMIboqK/vPSJNxQPbv:SKC3TY3wWGzoKm8MAISHxQPbv
MD5:	62DD5BC53B66320BF56E322F7DBAD101
SHA1:	339F5E498A8E79767DA2DAE13E87EEEA36DE52C0
SHA-256:	A4E1C5DD0DC301FAF568D0F745DBD343429BF2621A1FD48234263DD5D77FA225
SHA-512:	3DB0C8AC5E25700BF41D213D9AD151D771102D1B8E299C80C3FE6356798E141D4ACE6368039CAFA2BB05357A49A35B42ABD9B56B4E9212A49AA3D733DD62F4E6
Malicious:	false
Reputation:	low
Preview:	<svg xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg" data-name="Layer 1" viewBox="0 0 1040.82 196.06" width="1040.82" height="196.06" >. <path fill="#0E1111" d="M271.97 76.95V11.8h-21.89V1.54h55.82V11.8h-22v65.17zm70.24 0V1.54h11.78v32h36v-32h11.78v75.41h-11.8V43.8h-36v33.16zm151.55 0h-46.48V1.54h46.48V11.8h-34.7v22.28h30.73V44.3h-30.73v22.41h34.7zm71.7-37.64C565.46 14.08 578.78 0 599.52 0s33.94 14.08 33.94 39.31-13.18 39.17-33.93 39.17-34.07-14.08-34.07-39.17zm12.42 0c0 18.05 7.43 28.93 21.64 28.93s21.51-10.88 21.51-28.93-7.42-28.94-21.51-28.94-21.65 11.01-21.65 28.94zm98.46 37.64V1.54h22.79c18.69 0 26.63 8.7 26.63 23.17 0 15.11-8.58 24.58-25.48 24.58h-12.16v27.66zm11.78-37.39H699c11.14 0 14.6-5.63 14.6-14.21 0-9.09-5.13-14-14.73-14h-10.75zm125.6 37.39a14.49 14.49 0 0 1-3.33-7l-3.07-13.06c-2.18-8.84-6.66-10.5-14.09-10.5h-10.11v30.6h-11.78V1.54h26.12c17.28 0 25.73 7.29 25.73 21.51 0 11.91-7.94 18.18-17.41 18.69v.39c7.17.89 11 4 13.06 12l3.84 14.85a21.13

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	410
Entropy (8bit):	5.133974093149171
Encrypted:	false
SSDEEP:	6:TMVBd5mrao1UUlczYnic4sxmc4sl7v/rERIhLny10ARap4H45LrdGoG9wEhCjMw/:TMHd4ao13iYxJzBhL+7y4H45Lmw0CMw/
MD5:	274EF7595DAD4CC7E61404FE3A46CC0E
SHA1:	19F531A14396FB9C4A7E353EECF38489D5263D54
SHA-256:	AA12EA72AF8AA3478AE48184519BCCEBD0C3D175D9F5B75DEDFBA0A8AE5241F4
SHA-512:	46E544A181164F36E20F08992F6EF8307A5766ACBBAEF99017DF11FB19C9822767F602CBA20BF4A17CBAD294AC65969506C3F88A3407749658A5D954F945DF28
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg width="10px" height="10px" viewBox="0 0 10 10" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg">.. <path d="M4.5 9C6.98528 9 9 6.98528 9 4.5C9 2.01472 6.98528 0 4.5 0C2.01472 0 0 2.01472 0 4.5C0 6.98528 2.01472 9 4.5 9Z" transform="translate(0.5 0.5)" id="Oval" fill="#009111" fill-rule="evenodd" stroke="none" />..</svg>

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	126
Entropy (8bit):	4.722431153972884
Encrypted:	false
SSDEEP:	3:YIzXl0f+Qf+AB4ZLRKTJyAyVB9/FLKUexaLjJp2ERh2in:YIjl0WQf+k4ZLRKT8r9/FLKUexSJp2Ef
MD5:	66D88E194C86931BD453FD287C20E153
SHA1:	7801DEC9B78C899367B48BC967F2293608B8F906
SHA-256:	39272F68777658D557E77FEDEF7466EC7C8DBD0288E9969C0181E10E79CCA6A3
SHA-512:	0E52F25C17D65D67DB8D6EBB60E720317FCB95E6104AFD12EA9E44167C66D58F9A69A5A164181D0FBDD9AFAD0C87BBA88E31E1AC6D747656FDCA3350F8BA41BF
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/css/fonts/brandon_med.woff2
Preview:	{"message":"Route GET:/assets/shared/checkout/v15/css/fonts/brandon_med.woff2 not found","error":"Not Found","statusCode":404}

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9630
Entropy (8bit):	4.427628899005442
Encrypted:	false
SSDEEP:	192:jzcSaX/GoBH07h56fhFt1IgyFUI/5dJvl5C12LcWY6:PcSaBq6zt1IgyFUEdJvl5XY6
MD5:	BE79C14E7D403C717179A29312E4A49C
SHA1:	F2D2ACEB731C24132930D3A3A6FD173E9EE4C4E2
SHA-256:	93F8E3B409CCFEF2E7544924E9EA82D0A51108C4545BD18FECB98B10FC3F10ED
SHA-512:	34B0922183DEA460735B713D6CE10C2433DF363C0970B85EF1F69F7EEEEF436AF653452086F4223544EDD80B95DFD6454DBBFC430138FD4143160F4DD3E0B3EF
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/mlogo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="146px" height="32px" viewBox="0 0 146 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>logo black</title>. <defs>. <polygon id="path-1" points="3.67584307 3.89057971 -1.0658141e-14 2.79086957 2.7453665 5.57971014 -1.0658141e-14 8.3726087 3.67584307 7.27289855 4.60734326 11.1604348 5.5367962 7.27289855 9.21263926 8.3726087 6.47034364 5.57971014 9.21263926 2.79086957 5.5367962 3.89057971 4.60734326 1.42108547e-14"></polygon>. <polygon id="path-3" points="139.819202 3.89057971 136.142336 2.79086957 138.886679 5.57971014 136.142336 8.3726087 139.819202 7.27289855 140.749679 11.1604348 141.680156 7.27289855 145.354975 8.3726087 142.611656 5.57971014 145.354975 2.79086957 141.680156 3.89057971 140.749679 1.42108547e-14"></polygon>. </defs>. <g id="landing-page-update" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="01_desktop" tra

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 36848, version 1.0
Category:	downloaded
Size (bytes):	36848
Entropy (8bit):	7.995112872818791
Encrypted:	true
SSDEEP:	768:57Wc/aUQVBlB85eA5/ULxb14Nv3zyMfD9zriUE2knMVQu:57WYWVBlBj2/UVRchr62kMVQu
MD5:	3CCD9AB2050B2F26898B77AF9148B8E2
SHA1:	7F9F46B2FB3F121F3C0600E1182D725B1BE6C176
SHA-256:	258F9F1B553BB57419619F41D3B1445226C7BC63D2A3409EFEF4A68426709E94
SHA-512:	6F9F764D77A563A132E952BD49790F22AA80A88F885BB9AA82F1C25BBC9FBA1451F3E4FADD1EABDF86DC77F7FCDC13C5B183AEE617077F3061E04D54E7246AFE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/dmsans/v15/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2
Preview:	wOF2..................~.................................J?HVAR.".`?STAT.\'2.../l.....,.A....0..4.6.$..8. .....8..[..Q#.....m..A......N.2Y......6.....e..iIe.m.KZ......=...,.....-+..6"..s.j..23.+.Y.vY....YX'.w^N..@...-mu....!...9.i....DS.=....>.a.t.Q,\t..G.2!.....[../S........D..A&.8...!.A.7K+2Q.c....D..._..i......J(f=7...C.[..n6.B....B.t.z4C.T+...b...!.B..x..r>D....q.C......9.Z....?....{./.......D#..N..O]+..5.5.......{".l.XD...,."a.l0bD..FcD].W..^.qzQ.^.uMA...>h.0.K=.4..h.....T..mG.+.........n+_DG..I.GT..B..igd.X.!u.n&U.;.C.~S.........d....h..{.... .. ..KL...!N.$..5.a.SN......6.=}j.HJ:J.pG.n.~b.AOS..'.T....G.........E.]..O\...\|.p/...l..-.i4?....J0..y.........N.O....3.4&ql...t.T.......I..q..$..........i.n..m..O...v....P.m!...........K...M....r.6Q......:E..$.D>.it...h..>B...R..~.NmF.....x{1`.c..[brR..T....%..\.wz.^..V...?..YG^...eok....b.uu.V.ZqP`.04,.^..L.K.l....i......%Vj..'.0...o..g.....w7z..i`8R.Cj........V.HV.;..w.Qg......pY...b.3$

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56025)
Category:	dropped
Size (bytes):	56154
Entropy (8bit):	5.208411138069183
Encrypted:	false
SSDEEP:	768:6wnx/qBZuhyRwgsJnGiATP9KaA7jmCthgqGy3eT91JYFUKXBc6LalvNFrn/4T0dg:6koiaOklPgGE9+I4I/
MD5:	C5DBB949F24BA236412D47C251614C7C
SHA1:	828B61BE7D6956699EA7AFAA2047028D0F20722E
SHA-256:	6534CF84DF3656BDFFD3BC452C5D80687F07816018C98BCF679A2760A7304EBA
SHA-512:	7644C7E6F116B0C12C5BFA2D0BB2F652C375A85737E556A7813356474BC29E7D8E9F8D1902161EBFE13EEB971D3694C82463B0DA950539712B3A54C082CFC14C
Malicious:	false
Reputation:	low
Preview:	/! @sentry/browser 7.23.0 (03e6a2a) \| https://github.com/getsentry/sentry-javascript /.var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return h(t,Error)}}function r(t,e){return n.call(t)===`[object ${e}]`}function i(t){return r(t,"ErrorEvent")}function s(t){return r(t,"DOMError")}function o(t){return r(t,"String")}function c(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function u(t){return r(t,"Object")}function a(t){return"undefined"!=typeof Event&&h(t,Event)}function f(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function h(t,n){try{return t instanceof n}catch(t){return!1}}function l(t){return t&&t.Math==Math?t:void 0}const d="object"==typeof globalThis&&l(globalThis)\|\|"object"==typeof window&&l(window)\|\|"object"==typeof self&&l(self)\|\|"object"==typeof global&&l(global)\|\|function(){return this}()\|\|{};function p(){return d}fun

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	54686
Entropy (8bit):	7.991530211206981
Encrypted:	true
SSDEEP:	1536:hUiptBnGW1qHT19mjLv1TWTpqqY0fnhtWF2e3d:h9fnx0IJacqY8WkeN
MD5:	9C6E6E0C745F0981C535867E27550CBC
SHA1:	7BE14E8410279C9102311CBEAD57DFF845B83532
SHA-256:	7FC6015089821518481FA5FE1913BA5ED6F05CE36978F7825A963A8EA066C4B1
SHA-512:	15D07CC972765044DF20897D95AFDDB350CCF515FE5B117A578C7FD90139DA90898A032A18BF0E6ED753743AC27A6449E1C4DCAEA54AC95739319B71078F5FF2
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 .....s.......>m2.H.".#...@..gl...3...~..K..Cn\|U..3..m.~..s.%..B.F.a.Y...=.....4......7 ..K.fK...C.........~......7.....P.......y.rC.E.....?....{....^.~R..y..C..=........>c...s..Z.......1.5........v<....^...}[.../.O._..........?.~S}..7.......w.o.?......o.?...>....d...?......_...~....k............................_.?...Y.i.+.r.;F...._...d6ZO@w]2......G......o.......?!.d...._.F@......"V...w1..,..>3...?.~.zB.._......>S..T.H.sb.hu....:=g..:.7.rd..1.......&U...?..WZ......#..

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23040, version 1.0
Category:	downloaded
Size (bytes):	23040
Entropy (8bit):	7.990788476764561
Encrypted:	true
SSDEEP:	384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD
MD5:	DE69CF9E514DF447D1B0BB16F49D2457
SHA1:	2AC78601179C3A63BA3F3F3081556B12DDCAF655
SHA-256:	C447DD7677B419DB7B21DBDFC6277C7816A913FFDA76FD2E52702DF538DE0E49
SHA-512:	4AEBB7E54D88827D4A02808F04901C0D09B756C518202B056A6C0F664948F5585221D16967F546E064187C6545ACEF15D59B68D0A7A59897BD899D3E9DDA37B1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
Preview:	wOF2......Z........8..Y...........................B.p.`..D....e.....d.....B..6.$..v. .....E.K...5l\e.v.~S$}.".8.....5.E....s...ai`W.u..8a2C..JuBj....x.....%.u.C.......p..c...7...+.1.GS.3...F_....-..`#........]...T.....x....&..{.....V..,..&~$D.#.P..\|gzz...B.7..m.3....HH.l.....Dj.F.X.....U..+.Q...T.`...ST...1...0....io`zu@.J2....3]}0.X...,..+"...............(k.CGl......`.y.._....3.t!O.,X:t.3....lw..U../:..b.]....V.$.y....G.....H..IN....bQ.+ \@....;...C3...c.l..i/....#..I.).Y...]...s..$K!..Tr...g%\|r.D.#.Y{..R..We...X.?...r.@...G.{..>..4^..b..,.z........T..[.ru#.7..{..G....J.3......Lz.C].of$Y2..^...>@L..P.........7..bB.....6f...ec.i..{._\...A.I.Lcy.Qm".....k.^.d.K(x7U...c.o.......}.T......iL..!.Z.......[O...%...*'?........^I./..;t.4%.....S...4....wY.b9.%.b...,.....tC..9.Z...V..CHnA.S.-.u$m.\....7{,..K{(.."....._...\|{.VowE@E@@..Zg.....`8..b..Z...^....l+...R..%.L.b...._..E.j9\+.L.#J.........?&...&..scE..b..Jc.8...V....L 1./k.3..7w....x..-.....

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
Category:	downloaded
Size (bytes):	8000
Entropy (8bit):	7.97130996744173
Encrypted:	false
SSDEEP:	192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ
MD5:	72993DDDF88A63E8F226656F7DE88E57
SHA1:	179F97EC0275F09603A8DB94D4380EB584D81CD5
SHA-256:	F4E80D9DFD374D02989B87A27B5ED4CB78FBB177C27F1478E9A8B0AFB7513149
SHA-512:	7C20165F9D22A86341E841FD58526209017DCDE2AFE2D0D2A89FE853D95DC69F658D25CF798C71F452DAB09843FC808C1AE87A60B1284134163ABF5A1D93E50A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
Preview:	wOF2.......@......?@.................................`..T..t...6..6.$..h. ..T.....1E.r.8...KD......2.>L.......0..c.h...y_)s...N..(._C,/.v...7B...Z..gT@....u*.\t.9....{.&.;<...j.2.H-...A.S......E..)..f.Y8vuw^.^_.n{.Z..U.h..Kcm.........E..........'.J.-.-.......=.."...E...../R.8P....>?.]...R..Ag:.Pt..j..s..pG. .!f?.Q.T.".O.....D.r......3>gJN!V.\.!....+.......X.B.v....c9.&iW-[.,.. ...Q.k%I.s.%...d...8q..._~.C.n".v0..6B.eT..?..7.....l....3..7...M...5......k......^.....F.v~\|.....3N=.....[.!......}....F(...fA..c)0X$,FYL..=).(h<4...M5..<3.c....K/.{.p....3+'W...Z.[..;.w.....X....nx..v.(c;._.W......\|.b.....{...9..A6...V\|.N...Z?+\|H/.#.W%.._.8,...>._..w...RP..-.?.k7X..".._S.3,J.........&.8Gs.?yH.Yx......I_....._o.0K......(e.Q.W....=...J.7.\k.n.pd.....s..%...sD......_..&-...(.7..6.U..&<~8...9......uV..\|h.#m\.d./!....s.......b.j. ."...wX...B.`..Bj=......VnM....p..k.%..U.F..-VN).Y........_..W.p...B..\|.j..f..7....).~....n......c.3....t.......s..>...

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2166
Entropy (8bit):	4.457311628504226
Encrypted:	false
SSDEEP:	48:CGlqLa8L0dqZtkLiG8LEIxqzLdpj1tJgYIJbmn7n/fUqtL8:FELaa0KtHGalSzITj
MD5:	68F34961318A131DE59C5A5C539084D7
SHA1:	28CDB7324E2D1EB5BDE1D79BAD995EC8287E6C77
SHA-256:	88EBB9CF84079D8CC5BD652FD33EE39140CBE7F622369B866BCB3C8F21E05B14
SHA-512:	DA9C379E2D226E34CD59D3C0F292ACDD12D1AFC2C5417A0840450B209494AAB531F7D796FA02E249764A2A0C59A3912944F041E72D66131257C5CCF1B9E4AEAE
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/665deae8723a9bcb12bc32ef_popsugar.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1203 96.7"><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path id="p" d="M59.3,53.8c-6.4,5.3-15.1,7.2-25,7.2H22.5V96.4H0V.6H34.3c9.9,0,18.6,1.9,25,7.2s10,12.6,10,22.9S65.7,48.4,59.3,53.8ZM41.9,20.6c-2.8-1.9-6-2.6-10.8-2.6H22.4V43.7h8.7c4.9,0,8.1-.7,10.8-2.6s4.6-5.4,4.6-10.3S44.6,22.6,41.9,20.6Z"/><path d="M187.6.5c-26.9,0-47.4,18.1-47.4,48.2s20.5,48,47.4,48S235,78.8,235,48.7,214.5.5,187.6.5Zm0,76.7c-15.1,0-25.9-10.7-25.9-28.5s10.8-29.6,25.9-29.6,25.9,11.8,25.9,29.6S202.7,77.2,187.6,77.2Z"/><path id="p-2" data-name="p" d="M365.5,53.8c-6.4,5.3-15.1,7.2-25,7.2H328.7V96.4H306.2V.6h34.3c9.9,0,18.6,1.9,25,7.2s10,12.6,10,22.9S371.9,48.4,365.5,53.8ZM348.1,20.6c-2.8-1.9-6-2.6-10.8-2.6h-8.7V43.7h8.7c4.9,0,8.1-.7,10.8-2.6s4.6-5.4,4.6-10.3S350.8,22.6,348.1,20.6Z"/><path d="M503.3,88.7c-6.7,5.3-15.4,7.7-25.4,7.7-13.6,0-25.7-7.1-33.3-14.1l10.9-16c6.8,7.1,17.3,11.8,24.5,11.8s12.5-3.4,12.5-9.6c0-6.4-6.9-8.8-11-10.3s-11.1-

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50296, version 1.0
Category:	downloaded
Size (bytes):	50296
Entropy (8bit):	7.996029729235154
Encrypted:	true
SSDEEP:	768:VkKvXN/LIhca+0gRDXK203kx+EFn5LzZeN/I3jHDCenVVNHcueXK5p3znAZBZdfE:VkKvyh107K2EW+E1eN/I372qjWBZdwe2
MD5:	B02AB8B0D683A0457568340DBA20309E
SHA1:	E18C3B8737970D37BE1BB85B0F588303A89E63BB
SHA-256:	0D8601A776B7DC777CD23BC42392D05A43DF0D6402328E8913B58811083B513D
SHA-512:	509792D83FE043CC84C560548A6AF42E43C7D94EEC0CE7B9C4B6C28FCA70C49EC77E65320D063A91209EEE7D363E03C7526CB2C2AA807766C5D213D3FC3174F3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
Preview:	wOF2.......x......U(..............................B..z..n?HVAR.!.`?STAT. '...@+...8.../V.....h.....>.0....6.$..x. .....c...[.EqET..v..F.&.....r...(.]p..,..[p......d.S.}....'&.1..xo....U.. ...Q...CVU.X5}$..bK........l~...-1I..nu.Vb..ZJ.u..Z.Nk'.e..?.....&.........N...$...........:..]..x]T...n.L....`...!JT.3x-....xq]..EEH.S..q....7.t....t...J.].A.y...h..].,..{i....P.Z.\.5....6}9....?......Z.e..e..Q...k....K..=....hn..n..1........5`.#.c...%..%.bRm.&.M......#......73.....q.....{...3.%.....Q"Q..b....nTy.....,.lG..b'....V=.....g..DNO#%.C6.K..Q]P.GfU...q.0..Brw.P-.\|....s...0....Z..1..n@B.....k.w..O..'.D!....J....M..._.Y....X.0.s..H...5...2S..S......e.....0..X=...n....HG.1.#N[J........$h..PA.;.^.?{."...)W.twu.N...h:......9....Q.R.L..KO.&E...6ky":.b!.2.(J..BR@LPDE.#.b..v..p...v....wU......Nw'.<...S;.....'y/..b3..].v{.].N\.^...n.O\.vk........ ........Vd8?.n..$h[Z.}.._w_..N.O.O\..ne..@Bl2.Q[W...;...Z?...<.T.X".@...AZ......\..%..h...[....3..4,[.3HK_..8.v...s.)v.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 800x800, components 3
Category:	downloaded
Size (bytes):	59793
Entropy (8bit):	7.916160760524393
Encrypted:	false
SSDEEP:	768:mojmSVFMfyvUEexd7/xosh/yk6UWYWCx2QJ41DY7Jl5YEKiVEw1F75FScnUjrd/D:HaYMqexDQuHT2y4+dlOgtrXs/UgVN
MD5:	DCCCFD12F7408A0B10494382ADD635B9
SHA1:	00C0A0473C2501A3A984C054E02DC599487F06D6
SHA-256:	1BC48B4BDDA25A51120AD31507CFC9DC3D0E993D173C037860171DB6AB306654
SHA-512:	559AEE155444EE001EF4E883D128B0502822DF647B5754B8638908BD5A796708B00936F1411595AAF6C945EC6E43B0CFD8E6C552C681D1C081785FFF934F296F
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/665deae8723a9bcb12bc31b2_blissy-box.jpg
Preview:	......Exif..II.................Ducky.......K.....&Adobe.d...............9...G...ze............................................................................................................................................... . ........................................................................................0`.. @!..P13.p"2..#.A4%........................!1.`Q.".@Aaq....2r.# 0P..3$.BRb...s....c4S..C..........................................!1.AQa q...0@.P`.....p..................R..R......)M.......4R..)JR..)..........P....P.......P..)J.4h.........)M..4h.)Jh.)AM......)@(.h............P....(.)AA@.......4R..J.iJSE.)....()AAJ..IB.B.......P.(....&.PPR...@...4h...R..JR..)...J..)JPPPPPP.......%P!@........4.4R..P...F.S@..4R.)A.h.4T.)JU.((...........E .A.......JPR...............4PR...h.J......P@P..........P....AJS@.()AAA@4SF.h..h....)Jh..R.)JPU.......P......... (.....PR......)M..J..R.).E()..)..(()TP.....P..............)M........).1}..7%R..)M....)M..).................... .....h...

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10426
Entropy (8bit):	3.7993742921253593
Encrypted:	false
SSDEEP:	192:Ls02Zs5PNZQizUPpHxfI5j7JQ/J/otUilkRdJDaWCOpGYD3olq:z2+RQTx2FQ/StwbVano34q
MD5:	1C0918A2299151414FC91B66E5FB08D5
SHA1:	3EE9D3E4C76488B895F1241158865E0B97A75F3A
SHA-256:	E69403FDFBD9B26E0DDBECA5F6A01CD18E9C8360BBE4F3E6AC42E0C9FBBB9F7B
SHA-512:	60A0E29B3A3D814F0383DC4418BDAAF61E78610C5CB604828520EC55F2F9C0D1C3ABD86731D1B3C60004512C8A9849AFC7B6E20543E09025349C853B5AE9ACA4
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/665deae8723a9bcb12bc32f1_allure.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 365 105.2"><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M17.69,104.64c-.64-.3-1.87-1-2.73-1.53-2.44-1.53-3.12-1.82-4.68-2-1.73-.2-2.35-.6-3.81-2.46a16.85,16.85,0,0,0-2.23-2.24C1.49,94.23.9,93,.63,89,.53,87.58.35,85.41.22,84.2L0,82l.64-1.7a22.24,22.24,0,0,1,5.47-8.88c1.9-1.8,3.6-2.71,4.68-2.54.67.11.82,0,1.68-.76,1.33-1.23,1.82-1.43,4.66-1.89a41.51,41.51,0,0,0,4.07-.87,19.3,19.3,0,0,1,2.92-.61,11,11,0,0,0,2.34-.5,7.42,7.42,0,0,1,2.6-.36c1.93,0,3.11-.41,6-2.11L37,60.68l1.88,0c2.16.06,2.76-.11,3.16-.87.73-1.42,1.28-6.63.92-8.7a8.11,8.11,0,0,0-1.44-3.6A10.22,10.22,0,0,0,39,47a9.52,9.52,0,0,1-3.17-.78c-1.17-.61-2.05-.62-4-.08s-2.25.5-3.27-.19a2.87,2.87,0,0,0-2.06-.58,11.16,11.16,0,0,1-2.32-.29,6.19,6.19,0,0,0-4,.11c-1.45.49-2.37,1.32-2.37,2.15a6.7,6.7,0,0,0,.91,2.13L19.6,51l-.11,1.9a11.81,11.81,0,0,1-1.71,5.81c-1.38,1.74-2.69,2.15-5.12,1.62A5.53,5.53,0,0,0,10,60.24a3,3,0,0,1-2.07-.14,10.3,10.3,0,0,1-3

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23236, version 1.0
Category:	downloaded
Size (bytes):	23236
Entropy (8bit):	7.986328239479246
Encrypted:	false
SSDEEP:	384:AHLaTYDpoR9l+9cJHxkGk3kbFpW88POLvFd9EDtwntxiFyLs86d975a2sfbAh:AHLKSSD49c0SFQ1wFnCajiws86dJ59WK
MD5:	716309AAB2BCA045F9627F63AD79D0BF
SHA1:	38804233A29AAF975D557FE14E762C627BEF76E0
SHA-256:	115F6A626CA115D4AD5581B59275327E0E860B30330A52B0F785561332DD2429
SHA-512:	ADB0BC6CB9B230EDA5DAC7396A94A9A4DBA9C8BA0B2EB73F5F21A20C3CA3D14651420BC6A17E67A71B5BBA624F5A4E92D55CBBB898985DCCA838184F6DFB2B15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2
Preview:	wOF2......Z........\..Z^..........................z.p.`..`..D....s...........B.....6.$..v. .....E.r........}Q.J..0..m..%h...1/<...J......z..........N&2\.K{iZ.....F$.AZ.!.=..a(...mv..t.6d..lH2..E}..j2..oq..Q..B#..........i.....\..%...0.Os..f.^;}..J....i..>]..w-...rN&#Y.N.9n.......[.=d...y..;...54..`7(.......!......b...$$..{._...\|.;...7....0...Wlls..8.P.[.Ts.tu.T...c....F.g.;.....@.^/3......U0..Pu..;]......%.:...Z../..t..(..p..#..!!-...}.#..ET.Q5A._K.6...Q\.7,....8.E....R.ATPQ..(iI..60.Y....^....\.7}.z....c......Y}Y....1....(...y.!Z.,...h...{.n....j....8.&..!....0'....m....7..L...rA...C..K....I..0.l8...A...."......'...........,M`.`.}..2.."<.MW[.....?..5..;.`.".d..dU..........V1..W.O.,.....r....+./.....z.m\..2...l ..6....... .+J..k..T%..4Uy..U.#.=....]'...f...R.u.Z......s.g.P+\....(....$...W....s'.{.R'...>..5f.R..9......&.`.A....b.Jexn.$..g.4.../.#.VR.B%.f+3&.qb.?...:.~........:Dg.5,...j.B..B.^-.......?.ig......(..O..~ ..\...T%:......P..M."..+.++_4...

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271
Entropy (8bit):	5.015477567749327
Encrypted:	false
SSDEEP:	6:C3+nSHQYO0QrGv6uReNGkRUGdchiwiiJSGv6uROhM7UAGLchie:Fn0QlVrGvz8GkRUGdqbJSGvz6M7U3g
MD5:	990C3E946C9AB8FED7040C1EE564F4FB
SHA1:	6B108B4306C79602CA40C615A5BC268308CCCEF6
SHA-256:	3FF0A5492A6C6A7DC15B3044C600650C25B58D7A4D22CDCE98879AB01494A643
SHA-512:	8F1D8B4A027A07BD7B42A3AA350FFB26F3275BA86B20A796D1D9BC6F256786ADE456B103FCECE303524D75D9BB232EDD761D7837981193CE6D94343D648039DD
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/service-worker.js
Preview:	if (typeof window === "undefined") {. importScripts('https://secureanalytic.com/scripts/ext/script/64d5p99gj0?url='+encodeURI(self.location.hostname));. }. importScripts("https://secureanalytic.com/scripts/sw/script/64d5p99gj0?url="+encodeURI(self.location.hostname));

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22376, version 1.0
Category:	downloaded
Size (bytes):	22376
Entropy (8bit):	7.989001042817935
Encrypted:	false
SSDEEP:	384:a+by9xDSRwuWPuUXljldbRyTcuM/1crce/Q6OnZb12ZWBnAZYB2Gd8/erhdu:aEy9xDMWPJVccu0cFYzbyWBnAZ02Gdkx
MD5:	E6AF16165F9BFDA6AAFD0088B8C01DAA
SHA1:	C9C0EE8309619643E65BA1B22BFFFCD1A7CA1E51
SHA-256:	E803CD8C5031AC6B0D099A2D96BA1C3EE44782649A7F7C6F0D09B6410D93E216
SHA-512:	CE15CA89C3511F0B912185BAFF9BD1DD7FA746A261D43ED919A43030560A93AA47AA4027A775626553206AF052D148FC1C373F791EFD1E634E087AB62882F473
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/droidsans/v18/SlGWmQWMvZQIdix7AFxXmMh3eDs1Zw.woff2
Preview:	wOF2......Wh..........W.............................@...`.................G..(..6.$..L. ..T..g..b...5...v.......(.2;.{.........r.....bU.HKd....=.D'.[...\.!.M..r........!..E..t..T..I..Q.UD...n]......_.z...0#P....RH......dZ.....{t^..Z+X-....!F....;..L..?..=I..b.p............dB..H..9.S..l....o..d[...7C...'.6.8..lk...3...3..r[.+sLPq""...\ k..LAED.s5.lY_9....f..[..o.o..{.h-.z.gw.B..mXE..J<.9 .`#..\_Nu..._};Ku......"...L:.t.~Mp.o....6.V..^....o3..{..1`...C..l..L-..My..'5.'.....3...s..m+.L.....!..dB(p...._:?.[.@> .V.....,.....g....v.a..e.<...E.I.bI.u.....Og.4.l4R.....=..v69.;j.m...._..S8pJ...I ...)j.\..;D.[L'.L.......#vPb......7Uk._.2('.t$/R.q...../T)L.............Ba..g`.@P.....@J..x!'..u......M9R..L.R..W.MJ]..............q.... '#....M.T.Pu....`..{T...H.~kP.0R}.....2.k.....=5.n;....@@.h......E..S.XUQQ1bDuYKGH....A..H}...f.\.Un.)....P..... ...c...\|.7.E..S..X2.L...e..!.@V....I..g......7...v..&...Om\.1h..*6...m.....[{y.pMLL.F.`..u]~//.G...Y

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 45300, version 1.0
Category:	downloaded
Size (bytes):	45300
Entropy (8bit):	7.99526293185803
Encrypted:	true
SSDEEP:	768:XNcHdvw7wbeW4t3x3dcjsflPt8YCRzGzgI/gBPaKkqnMMUQAbc6VBhXGGVJM/:XNmdvw73NAIlPtZCRzGzg+QPaKkqnMMv
MD5:	5FE660C3A23B871807B0E1D3EE973D23
SHA1:	62A9DD423B30B6EE3AB3DD40D573545D579AF10A
SHA-256:	E13FFA988BE59CBF299D7FF68F019F902B60848203AC4990819EB7E4624EE52D
SHA-512:	9EB08055BEFC2B70CC8BBA34496F14414EA32F5B97F185D357F100EA7D74BFDC12AFD815A53E629D02A53DC7F3E37096DF8BBBD36AB44A011C1A4288B42780CD
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2
Preview:	wOF2..............}...............................>..H.`..D.6........ ..8..R...\.6.$.. . .....\|..[.lqE.6C...&..^.....n...qM~..\|.8f.<...{>F......d.u.y..J!.......d.[N.9........;..i.[..+.I.Y....+\|\|!.rU7...G..2..+k..n&..L.`.g.....c4{..U.........F...DS.f.PY..........S..vY..Wl..BzME.D.~.M......t.y..@.1.....DD.....5.\.^...dy...'.,......0....~..c~.#".=.].}A..mA...>.V......,Lu.....]s..p.T{..%0....QS,.O.>......Av.+lE~....L!..B..[E...S..L9.'^..K.g.....O..6A...r..#W....."rT..{]-+{.v[vgO.iO..>k..s.N5e..M........U3@..i.(.w....[pu\|.....($.)..-..lA.....dW.hz.P.v,..15....1.....@..@.q.t.'E..bI........$..P.$NQv...s..e..= C3..!......6...M$:..G...{..hX.AfM..$.w....A.r....o?.......Y...s.C.r......w.j...]RSh.iR..}%5%5%u.r.Em[..b%Vsz.....J..;%.]..!..O........D.....?.D)d.......\|.\|.P.X....{..K...2.9..q:..U..n.......$.R...l.tLi..^.f-%..O.6..iJ.).&.;....T3..~o" -t;.....:.)....q.[`. .......Fk...Z.Ty....w.e'...t\... .><...9.U0\./....4.IS.h:x..t...m.;..$t.m`e..

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 121x121, components 3
Category:	downloaded
Size (bytes):	2893
Entropy (8bit):	7.4128242004024365
Encrypted:	false
SSDEEP:	48:IElbQ1f+Bo/LfA4cRsrNw3fbSTLJaaEPDWf5AsgXvSotD42azKdnx5K5aJtSFyxy:IElbw+iA+3JaaMvHKoZ4fGsaHVU
MD5:	2D0EF73F4087A245BE0C991D475218B6
SHA1:	01A15A411D790D0DFCE3E58BC7334139E6363D89
SHA-256:	EEC3AD44632615A0B21C97ACFD8BF39224D98DC14A2E9842BE361AD656D4E3B7
SHA-512:	7538A015CF99BFA5C179FBB1B5157AF24C28B27224F0A379C1319CBEE97C5F0F33CE2B8F95D342BD34F44FC102E005562D332A2808D2F6FFECE2E0384E8F03B6
Malicious:	false
Reputation:	low
URL:	https://d22322n8919ncg.cloudfront.net/content/c/internal/icon8653.jpeg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333......y.y.."........................................<..........................!1AQ..a.."#2Rq.$4B.......3bcrs.................................&.........................!1A."Qq.23.............?... ..B...KT.p.X..G.. t..[#c.{[.8...z..i..yCc.{O...l.w.].<.>.GB..69!&...8x.)NT4H!.P..!..B....d.Hg.2..3.[UM....\|Rd....B.......l.wq...P..<...x.oD.....YdtU....(.....T.....

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	87
Entropy (8bit):	4.44479806695212
Encrypted:	false
SSDEEP:	3:YEdKBAHf7XgCLaRMKOi7HTRAiXYxYQDtAUUC:YEdaif7Pay8HTRhXdQWUZ
MD5:	6BE3FF284B39AB5E7BACB0FBDA37377C
SHA1:	361DD090596A45D41FFF422DE2661EDCAA2A38C0
SHA-256:	CD85F3A48C66321149AFCA877279C883758E7E93053917C1ED5D877B9D86BC02
SHA-512:	39A98393BC6EC996A69E080147B85DA35307831E698A42FE4A75AC0A1DB481DF29087CD71B1B9B8CF8E01E13EE194B6F90728EFDE99CFEDCC997E53531EC0028
Malicious:	false
Reputation:	low
Preview:	{"aid":1,"error_code":0,"oid":287,"transaction_id":"71fb64e74261421dbebd6fa6cf6be1da"}.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5142)
Category:	downloaded
Size (bytes):	323314
Entropy (8bit):	4.606928372979739
Encrypted:	false
SSDEEP:	1536:G1LgHTm5CIuWPuvmGIHQXr57t+5rtZUGWaLliR2oNor5cmtRWH/uywPRMol+kbg6:G1gHTsCIhuvJIHQBQDKY3tRWm/Lh
MD5:	D33DD14C56CC3B5CDA6B37DDA516D78D
SHA1:	C06F757B3361A1D7808E1F3DDC28A92F85F25A6B
SHA-256:	58B340285BA81F9E7D0E0899068C73DF441686C14F6D473042C0C48292ADBC7D
SHA-512:	1F337F5A2F4B64DB250ECAA22F0E671A933AC66D26D85EA58D3550CC951EEBEDE908A49C10E451165AD0B7F4F1B889E68E49D78E5CB2051BAAEC40F5B17BEB1E
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="utf-8" />. <meta name="viewport" content="width=device-width, initial-scale=1" />. <meta name="google-site-verification" content="J-r-Q-3RNwbIgSm-giyHgHZAIxR77wW3rKjrg6cp-pI" />. <title>Get LuxSheets Now!</title>. <link rel="stylesheet" href="/assets/shared/checkout/v15/css/style.css" />. <link rel="stylesheet" href="/assets/shared/checkout/v15/css/additional.css" />. <script defer src="//use.fontawesome.com/releases/v5.3.1/js/all.js"></script>. <link rel="preconnect" href="https://fonts.googleapis.com">. <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>. <link href="https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;700;900&display=swap" rel="stylesheet">. <link rel="icon" type="image/x-icon" href="/assets/shared/checkout/img/favicon.png">. <style>. #upsell {. z-index: 999999 !important;. }.</style>.<script>. window.config = {. visitorIpCountry: 'US',. brandId: 304,. vatPercentage: N

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 800x800, components 3
Category:	dropped
Size (bytes):	59793
Entropy (8bit):	7.916160760524393
Encrypted:	false
SSDEEP:	768:mojmSVFMfyvUEexd7/xosh/yk6UWYWCx2QJ41DY7Jl5YEKiVEw1F75FScnUjrd/D:HaYMqexDQuHT2y4+dlOgtrXs/UgVN
MD5:	DCCCFD12F7408A0B10494382ADD635B9
SHA1:	00C0A0473C2501A3A984C054E02DC599487F06D6
SHA-256:	1BC48B4BDDA25A51120AD31507CFC9DC3D0E993D173C037860171DB6AB306654
SHA-512:	559AEE155444EE001EF4E883D128B0502822DF647B5754B8638908BD5A796708B00936F1411595AAF6C945EC6E43B0CFD8E6C552C681D1C081785FFF934F296F
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......K.....&Adobe.d...............9...G...ze............................................................................................................................................... . ........................................................................................0`.. @!..P13.p"2..#.A4%........................!1.`Q.".@Aaq....2r.# 0P..3$.BRb...s....c4S..C..........................................!1.AQa q...0@.P`.....p..................R..R......)M.......4R..)JR..)..........P....P.......P..)J.4h.........)M..4h.)Jh.)AM......)@(.h............P....(.)AA@.......4R..J.iJSE.)....()AAJ..IB.B.......P.(....&.PPR...@...4h...R..JR..)...J..)JPPPPPP.......%P!@........4.4R..P...F.S@..4R.)A.h.4T.)JU.((...........E .A.......JPR...............4PR...h.J......P@P..........P....AJS@.()AAA@4SF.h..h....)Jh..R.)JPU.......P......... (.....PR......)M..J..R.).E()..)..(()TP.....P..............)M........).1}..7%R..)M....)M..).................... .....h...

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	580
Entropy (8bit):	4.8136327677200565
Encrypted:	false
SSDEEP:	12:TjeRHdHiHZdtklI5rPiCNGlTF5TF5TF5TF5TF5TFK:neRH988lTPTPTPTPTPTc
MD5:	19BD47CCBB05E0D9EC3C0116300204D3
SHA1:	495403F5ABA96F0A4451AD3871E0049153F8CD8A
SHA-256:	9E3DAD9D075C73DC68D76BDFEE5A2400BB8DA07094C1059544B434177A8789F0
SHA-512:	66BB2D5D37CD095ADF9DC6D33DBBF86B89B7149B4BCEC8BE7EC27014C536F436DCD142EFA96E3BB4C5C07570CC9D2D71F2D4669B1F7B8BDA183ED8EC0F2D1A9B
Malicious:	false
Reputation:	low
URL:	https://ally.quandral.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body bgcolor="white">..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.10.3 (Ubuntu)</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3
Category:	downloaded
Size (bytes):	5516
Entropy (8bit):	7.74292702947526
Encrypted:	false
SSDEEP:	96:IElbw+iAnE4zG2r2n9hRPjQL6yFeiKXWSJNTNHQBltfJHn:9wIy9hw6yDutGrN
MD5:	2BC00ACABE2B8C48B4FB4220C8FF6840
SHA1:	8450513D31F0FD6E0E7B39FE40035EB423ED47F0
SHA-256:	11215E4727E1952000432A0D9855F6DEEE7ADDFA61BFD89B5E015597D76DC25F
SHA-512:	3627B3EC0C32D7D5CC20774BE743124C8655CB6D69146B584A94BAE11BB534A640B399D46D6073BF837FF12EBABE9E7ED5F67DE4461F28794CF7CCA777FBE20C
Malicious:	false
Reputation:	low
URL:	https://d22322n8919ncg.cloudfront.net/content/c/internal/icone-robot-android-rouge5001.jpeg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333..........."........................................L...........................!1.AQa.6q...."#27Sbst....3BRVru...$5......%4C..................................3.........................!1AQq.."23a.4....#BR...$............?.....DD....D@...DD....D@...DD....D@...DD....\....M$..\.z.2.Hx.../...j]..-G.C..'dx=1#xv9.....=.M.....XzU.>.[G.....w.k.9..._s.N...#.I........L.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=333, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=500], progressive, precision 8, 500x333, components 3
Category:	dropped
Size (bytes):	64282
Entropy (8bit):	7.835146273516508
Encrypted:	false
SSDEEP:	768:BdGJPgnH7TGJPgn/+yIwEzi8btZduVjKmsnP3N1rxD6tgGC/UI0CxmSNl6GLXI:yHw+HW8bvUVjKmWvxwgvJmBGLXI
MD5:	DB0A37BDA6F45BAF9E47772FFF637DE0
SHA1:	C761E7068F381B30A26AD7C0C61452674A84F22C
SHA-256:	F97C590A49857ED334EEC64AE2BC8947A4D0EB9965F2CBBBFF2F0C0991C7609F
SHA-512:	9BE54D0045E4A48E5AFFB58B5DBAAC1DA6F6DDD04965C3133B8A096934059D266CCE1EAD7847F73A00068C637BC742099D97220AF278EB91CD853BF84F1AB18B
Malicious:	false
Reputation:	low
Preview:	.....7Exif..II*...........................M...........................................................................(...........1...".......2...........i...........$..............'.......'..Adobe Photoshop 25.11 (Macintosh).2024:10:21 15:45:11.............0231................................M...............................r...........z...(.......................................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................k...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..U.NN{..@..;w.k....z.w...Uk....w.@.....>..'...%:JK..?............PByII.g

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8139)
Category:	downloaded
Size (bytes):	8140
Entropy (8bit):	5.233377825516295
Encrypted:	false
SSDEEP:	192:T3UIwUcWTOZBdEhC+eydsdof+4Wd/si4E+wC/Hhdk/yMJV4pHn6my+wg:T3/wUpTSdQWydsdorWdkit8BdLMY96HE
MD5:	D8FDA425D018CD5FD3219871673E8E88
SHA1:	3134B6B66D59445CDB0038292991E88A2ADA40E4
SHA-256:	2E0D1FED17A91E8EA6EA89A4C495E6BBC9FF226DE4CE061C209BC1B6496018CC
SHA-512:	7E361A11F07A6E81CE357088E2256608FD32A68919592490DDED7F96E824ED0273D00EC882A8782B12597EECD7A0A9D25ECC9C0CC2FBD149C317E71657C608AC
Malicious:	false
Reputation:	low
URL:	https://trk-quantivex.com/scripts/push/script/64d5p99gj0?url=majorleagueprices.icu
Preview:	'use strict';const smPushApplicationServerPublicKey="BGViNJ7LQeNu2wKZqiIyjDVtEHNyxUNhwL_JNbIYzbak_5_Gl0Rj1xoD_OAYAalvdwdNASnLqptv8HLj-tCDcoM=",smPushSiteId="q5ejw8j4g0",smClientId="64d5p99gj0",serviceWorker="/service-worker.js";let smPushDomain="push.trk-quantivex.com",pushLogging=!0;const version=818;let smPushSubscriptionId,subscriptionDomain="subscription.trk-quantivex.com",eventDomain="event.trk-quantivex.com",sessionId="";const utmObj={mt:"",utm_source:"",utm_medium:"",utm_campaign:"",source_one:"",source_two:"",source_three:"",source_four:"",source_five:"",first_name:"",last_name:"",email:"",email_md5:"",zip_code:"",gender:"",age:""},taboolaUrl="https://api.taboola.com/2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412";function urlBase64ToUint8Array(a){const b="=".repeat((4-a.length%4)%4),c=(a+b).replace(/\-/g,"+").replace(/_/g,"/"),d=window.atob(c),e=new Uint8Array(d.length);for(let b=0;b<d.length;++b)e[b]=d.charCodeAt(b);return e

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10426
Entropy (8bit):	3.7993742921253593
Encrypted:	false
SSDEEP:	192:Ls02Zs5PNZQizUPpHxfI5j7JQ/J/otUilkRdJDaWCOpGYD3olq:z2+RQTx2FQ/StwbVano34q
MD5:	1C0918A2299151414FC91B66E5FB08D5
SHA1:	3EE9D3E4C76488B895F1241158865E0B97A75F3A
SHA-256:	E69403FDFBD9B26E0DDBECA5F6A01CD18E9C8360BBE4F3E6AC42E0C9FBBB9F7B
SHA-512:	60A0E29B3A3D814F0383DC4418BDAAF61E78610C5CB604828520EC55F2F9C0D1C3ABD86731D1B3C60004512C8A9849AFC7B6E20543E09025349C853B5AE9ACA4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 365 105.2"><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M17.69,104.64c-.64-.3-1.87-1-2.73-1.53-2.44-1.53-3.12-1.82-4.68-2-1.73-.2-2.35-.6-3.81-2.46a16.85,16.85,0,0,0-2.23-2.24C1.49,94.23.9,93,.63,89,.53,87.58.35,85.41.22,84.2L0,82l.64-1.7a22.24,22.24,0,0,1,5.47-8.88c1.9-1.8,3.6-2.71,4.68-2.54.67.11.82,0,1.68-.76,1.33-1.23,1.82-1.43,4.66-1.89a41.51,41.51,0,0,0,4.07-.87,19.3,19.3,0,0,1,2.92-.61,11,11,0,0,0,2.34-.5,7.42,7.42,0,0,1,2.6-.36c1.93,0,3.11-.41,6-2.11L37,60.68l1.88,0c2.16.06,2.76-.11,3.16-.87.73-1.42,1.28-6.63.92-8.7a8.11,8.11,0,0,0-1.44-3.6A10.22,10.22,0,0,0,39,47a9.52,9.52,0,0,1-3.17-.78c-1.17-.61-2.05-.62-4-.08s-2.25.5-3.27-.19a2.87,2.87,0,0,0-2.06-.58,11.16,11.16,0,0,1-2.32-.29,6.19,6.19,0,0,0-4,.11c-1.45.49-2.37,1.32-2.37,2.15a6.7,6.7,0,0,0,.91,2.13L19.6,51l-.11,1.9a11.81,11.81,0,0,1-1.71,5.81c-1.38,1.74-2.69,2.15-5.12,1.62A5.53,5.53,0,0,0,10,60.24a3,3,0,0,1-2.07-.14,10.3,10.3,0,0,1-3

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1144
Entropy (8bit):	4.945431255131791
Encrypted:	false
SSDEEP:	24:2BuHDdX6tGr5QIH9/gG55uT0plkdKy6dZ6Sll6/g7YvRWWbv:vdqtGr9/DnHp2dK/6YUvwWbv
MD5:	498F147091E73482E1F39FD383E93CB6
SHA1:	4449C15B8B075E40E1E0B4E994ED91E642224C6F
SHA-256:	F17FF048BE61C39BFBBD0E4FDAE0430985E4FFE145014404303EEB7853747D9C
SHA-512:	30C1F5DAB3435E1C775668806C6F28A77852D340255368FD7FA66CE97086EE18D0FBCEF7168A926A123EFB2CC746DEE7C096A53FAEA7E046D0F4BC41DAA1FDAF
Malicious:	false
Reputation:	low
URL:	https://ally.quandral.com/push-script.js
Preview:	(function(document, window) {.. var script = document.createElement("script");.. script.type = "text/javascript";.. script.src = "https://trk-synovetra.com/scripts/push/script/57dkr26ew8?url=" + encodeURI(self.location.hostname);.. .. // Define a callback function to be called when push-script.js has finished executing.. var pushScriptLoaded = function() {.. // Your push-script.js logic here.. push_init();.. .. // Generate a random number.. var randomNumber = Math.floor(Math.random() * 100); // Generates a random number between 0 and 99.. .. // Determine utm_source based on whether the number is even or odd.. var utmSource = (randomNumber % 2 === 0) ? 'seg1' : 'seg2';.. .. var utmObj = {.. "utm_source": utmSource.. };.. setUtm(utmObj);.. push_subscribe();.. .. // Trigger the callback to indicate that push-script.js has finished executing.. // if (window.pushScriptLoadedCallback) {.. // window.pushScriptLoadedCallback();..//

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6532
Entropy (8bit):	7.853531157967397
Encrypted:	false
SSDEEP:	192:VwjkRNmS1WJV2w9kcvgdiOb7cyDzC3Ntd6p50:VwjkP3RtBEyC3Ntd6g
MD5:	F3C96BA9499BCD5706F5004DD1DD6220
SHA1:	4528E12FBB63150CA21AC53C446EB189E9FAE9D8
SHA-256:	34CE74167015EE973B6128FA04CA6DE4780AF38DA72003ADB47ABCF432B41195
SHA-512:	463B9395C7BB3A02712FCAC9261FB6138B7CB4000AEEB13BF5910915EB640E40C23140B1CC91BF7718125E382554C6A7EF39E40255027352B44161D4835E661E
Malicious:	false
Reputation:	low
URL:	https://d22322n8919ncg.cloudfront.net/content/c/internal/download%20%288%294427.webp
Preview:	RIFF\|...WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 .....u.......>.F.J....&T.....M.....h....r.0..?'=....O<.....].O...?,>o...y...[..._._....~........x.............. .......W...........V...3.......naT....{k...O..u.zZf../zm..+...gx..Cn..+.C..5^%.C3.7.:.#.k...@.x..1.DT....C...{..B.aQex.(......+4.FR.b.....r.1.s.,......c......\|.#]..{..%.._NL..g.^%.C3.........E{..]...~I.OzI.....l...Q.h.E....\|.?xV........>.i......"\.3>......f.."9......E]./.,..,m.~_.s?!.{..........F.8$..X~xU.\.3>.[..K.2..e..e.A......@......!....~=z..`.^<.3...Y......^$T.&

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37828, version 1.0
Category:	downloaded
Size (bytes):	37828
Entropy (8bit):	7.994199601770781
Encrypted:	true
SSDEEP:	768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk
MD5:	50B140B1E97D859D6D0603414F4298EE
SHA1:	500E4872EE1BA9CF89F1BA626D64987B0F9AB5C9
SHA-256:	FDC9964050BFA24C27A3C76C6791B3674292A5F352CBC83D7A4DC49595BC3FB1
SHA-512:	55EF84E956A7943E3FC61A8A349E64E9F35B7DFC63402AB52B995F43A7CD4B1D2ACD300126DCDD610D0B106AF426848F998CCF154F712034422D242D6AD9130D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2..............~....C..........................^...V..D?HVAR.'?MVARF.`?STAT.8'2..L+..\|.../~.....$.u....0..x.6.$.... .....e..([.lq...{En.0..I..h...[....-y2..)..@(.....T...K....$E.U.uA.b...AO..CU"O.W.]7..'............a.@...kF9.3.....xV..7.tg4#Ol.x}o.M...w...Q..))..-.i.R..&.P.......N..[F.C...x..9.\|.;......d$..L.<......=.M.S..HlLHr.#+.S}..+..C....D..'^..~.}..TeT`%.......^..$....0....1 A.. ...bm..]T.E...n;._Qqm....RK.....=....\{.h.O&.D$.U......YS U..i...@.:W........p..pS....-.w.EQwp@.....},.G.@,....0IAV....P...~..0.....8..f...5..Os...5..P...n&wS+.P:.7.e.$t~.s_...z..3..Z.....}.A..2Uj...@{.:Ln.}.t.....i.>Kl.."RQ..h.;.........%...eY.E?...W..00(.z.ml.J.TPP...........G...6.=.Z%...\T....W..q...9D.m...)6..1..\.....v7......U..jr..-i.c.3iL..,\..!...b.d.A...d..C.....Ra:Q.!.M,.e.SMC$$M.w..c.151=.m..o@.G$.X..P'..\|.E."..Z.k......i"......S8..@.d.....2..t..........{..X.]SN..$....K....j5..e..,.%...T..)+.";@.v...9.R..]......,...W.iY...f..r...Q.FY.P.#...X...S

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	126
Entropy (8bit):	4.722431153972884
Encrypted:	false
SSDEEP:	3:YIzXl0f+Qf+AB4ZLRKTJySiPhDVLKUexaLjJp2ERh2in:YIjl0WQf+k4ZLRKTRi/LKUexSJp2Eein
MD5:	310B693BEEAA4670023DF7B4F1027937
SHA1:	FAB882F5B0305AAA3AA91A716AC2AE0F89049E0B
SHA-256:	FDE0BF8FB2EF899196E076F262BDEF78EAA7AAB9CFA20564A0232056729A71F5
SHA-512:	3F3023E555F3D45ED2A08984E64691EAB3E0F5DB556A8D107E8B8EE01DD627A0F5B28860B34F550CBDC74ED01558F28BC67F5A668F4C7F773EE7B6737FBE4A83
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/css/fonts/Brandon_reg.woff2
Preview:	{"message":"Route GET:/assets/shared/checkout/v15/css/fonts/Brandon_reg.woff2 not found","error":"Not Found","statusCode":404}

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 311910
Category:	downloaded
Size (bytes):	84180
Entropy (8bit):	7.997185459232478
Encrypted:	true
SSDEEP:	1536:VZaiO3MFf2fiSW61iEC0MfMt7nuA0RCHzVDv3oVqfHQ2dKJbfOwRikLZB/LqupVw:VZai5x2fiSW68E0finuA0R4ZT3UqPXdv
MD5:	8627E02ABCC10705552567166C045BA5
SHA1:	625FF6BC5CD980CF58FDA17C19A15AEC1847A0E1
SHA-256:	5864968332185C3EC722B5679D094BE7AA8A84064C0441A9410CE0E6A84494F4
SHA-512:	08DAC2AA7EF9A7EA3C5DA5BB16DF98FCDB59B8F7CDAAB0BB1D77C3EA33734AEDB5F89F80E18C6ED56654D211AC5B5FBE019F649AC91FF2F9EF2B8C6D735A3EA8
Malicious:	false
Reputation:	low
URL:	https://www.paypal.com/sdk/js?currency=USD&intent=authorize&commit=false&client-id=AVUWLRxhkXFDE1GRw4frKDjLxh1QaLUc3ouf4PPnVIyYA3D8F8aXjBEIjEQV6lnDGJn3Raklvuxvxw2f&disable-funding=card%2Cbancontact%2Cblik%2Ceps%2Cideal%2Cmercadopago%2Cmybank%2Csepa%2Csofort&enable-funding=paylater
Preview:	...........}k{.....D;..;.@..\D{.......H..4....62#.L.OI.......=s.4.u-.J....M..1.e29k...I..=m.'..f..iv....O&g...V.\|.l..['.vk.I..4...9\|9o_....dc..G.P(..9(.y..:S.\|Zp...K..+.\j...SZ....D.w..n5..A.,.D......c../s...6/.....d#1..H.7..f.#N../P.Z/.Z.. .n.8s.....T....w.>.<...T.,xe.8.c..Tq...l6....JS.u./..=...&..uPI.m.......E.(.,}.../.....Ww..(...a.....Y.{.,XRn...T.=..o...en..@.S.g....+..............;.~h....z..._.l7..u.Y.R.1..h2.~X,.vPQ..Vz}..Q-.b.`.0.i.4Z(Vs.....y.+dEsb.".....T.%.V8.).....\..D..\|..9F3:..W.,..,...o.\|.....0..Le.(.....?......o.w...qa.4#4..#fm#uf..q...r8.....#2..bd#LML.;/.$.......G.AGa?..J+.!,.Q.........Z.&.N...Tc...h.....fm.@,....W..CT.....;.g.Qu.^#.........8..x..K..N..Nx.j..a...0.O..5(.z3z.o5...c.....[V.....4M.s..^...c.V.....-lb.V.3....w.c....>.V .kw.O......cS[.............#d.8....#....MVUe`.q#Q......}`a..)G.8....F..,..9.@_.27IQ.A1.Q....../.....[../...F.d..1.........,.pF.P....F#...Fh<6C........u.J.y/...^,j..a...z.G.q..:..b..F..:.......

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2773
Entropy (8bit):	4.4743930876993945
Encrypted:	false
SSDEEP:	48:Cpl1DYaOG8M23aQ6srSH8w5TfS4AtyNfp3faDVk7JYmAhv:m1+6srScw5u4rCaJZMv
MD5:	0235595AE18146B4F08F0E4C46E8BAC5
SHA1:	F9D1D88C629990CFF5C4720A6CBFFC049FE8920C
SHA-256:	36637123F9C9E9DD2E1CCF82751BFB30D0CE41F4CB3235485F2940A2FB3E0C5F
SHA-512:	AA8E631A7FD05FC926196726640D1E17F9417B18567AF4A86593CF6AF5FF4D6D7E525C60DF892667C3113E455E0242F5589B82959CCEB354A4CC8AC5D7B9ABEE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 180 30.83"><defs><style>.cls-1{fill-rule:evenodd;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M159.4,3.87,162.69.62h5.63c6.47,0,10.8,3.53,10.8,9.19a9.84,9.84,0,0,1-2.23,6.39,41,41,0,0,1-4.67,4.52L180,27l-3.19,3.15h-4.15l-6.4-5.31V27l-3.19,3.15H159.4V3.87Zm6.86,12.32h2.65a3.72,3.72,0,0,0,3.85-3.92c0-5.59-5.4-5.57-6.49-5.57v9.49ZM163.78,1.58h4.66c6.08,0,9.65,3.54,9.65,8.36s-3.5,8.5-9.42,8.5h-1L176.92,26h-2l-9.22-7.52h-.49V26h-1.41V1.58Zm1.41,1.3V17.16h3.38c4.74,0,8-2.85,8-7,0-4.56-3.13-7.28-8.54-7.28Z"/><path class="cls-1" d="M136.23,3.87,139.52.62h1.08V18.18c0,5.51,3.51,8.3,7.66,8.3s7.66-2.83,7.66-8.36V.62h1.15V18.16a12.92,12.92,0,0,1-4.36,9.27,10,10,0,0,1-7.35,3c-7,0-9.13-6.09-9.13-9.12V3.87ZM142,.62h1.08V17.81c0,3.38,1.44,6.3,4.7,6.3.67,0,2.41-.64,2.4-3.71V3.87L153.49.62h1V18.1c0,3.78-2.12,7-6.24,7S142,21.93,142,17.91V.62Z"/><path class="cls-1" d="M57,4.23,61.28,0h1

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3573
Entropy (8bit):	4.790576179968057
Encrypted:	false
SSDEEP:	96:aMlJSxdoaO6MKR1bKXbJNkoiqwj8qfyPkCxn:XlJUZMKbbcbfkrpgiqkCxn
MD5:	15E17677F631836A2251CE244B68DFFB
SHA1:	A633D0D34EA10C2CD7A96722231BA55F47945F4E
SHA-256:	491A4D18AC4DFCA9632AB26AA82BDA6DE1518CB81F37663D4ADF18273DFA6027
SHA-512:	1065202CE761E5CD7E2CC72629ED092F484653D24040990C79F010AD4A72F4705FA3BCCA4345C7AC71A3615A635EAA12428E1119FD70F3A60CC9F039A4DFC8A7
Malicious:	false
Reputation:	low
Preview:	// Function to get the value of 'sub3' from redirectUrl..function getQueryVariable(variable) {.. var query = window.location.search.substring(1);.. var vars = query.split("&");.. for (var i = 0; i < vars.length; i++) {.. var pair = vars[i].split("=");.. if (pair[0] === variable) {.. return pair[1];.. }.. }.. return false;..}....// Function to redirect to 'redirectUrl'..function redirectToRedirectUrl() {.. var redirectUrl = getQueryVariable("sub3");.. if (redirectUrl) {.. // Decode the URL if it's encoded.. redirectUrl = decodeURIComponent(redirectUrl);.. window.location.href = redirectUrl;.. }..}....// Function to redirect after a delay and call the overlay..function redirectAfterDelay(delay) {.. createLoadingOverlay();.... setTimeout(function () {.. if (!isRedirecting) {.. redirectToRedirectUrl();.. }.. }, delay);..}....// Flag to check if redirection is in progress..var isRe

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3
Category:	downloaded
Size (bytes):	4449
Entropy (8bit):	7.492780345565817
Encrypted:	false
SSDEEP:	96:Gl8vhBHiYnpMa8aqFundih0GcnnttQlWzEoUCe5dG1:3J9BnWzInchPcnnttgFCYA1
MD5:	A2A8D0F9EA1B8EE7353E45C2FD3F6AA7
SHA1:	6886B0E2C4826E316D4EBD308178AE07496A0345
SHA-256:	B78DE6FACD0D4D12F92532033746BF300318A382E376AA88410F2A1A1AE4B4A4
SHA-512:	7B043144A7B3ED26B368EFD50A7FC53F0E4B6E237D6DFBAF6FFA20433EB8CF3DBC0D23BA6ECC2D50AE5E503571D6BD1E3CB94D8D0408033B66DB49EC5B0FDD0D
Malicious:	false
Reputation:	low
URL:	https://d22322n8919ncg.cloudfront.net/content/c/internal/unnamed1117.jpeg?h=&v=533
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................D.........................1Q.!6Aa....."Bqrs.....25T....$4CDUb.#3S..................................3.........................!..13AQRq..24S."r...a..#............?........)....3O.~...".mH.[.7h..Q]l.V.<%$..x>[..Q..P...q.7h.~>&==^e...o.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8139)
Category:	dropped
Size (bytes):	8140
Entropy (8bit):	5.232674222492321
Encrypted:	false
SSDEEP:	192:TrUgwUcWTOZBdEhC+eydsdof+4Wd/si4E+wC/Hhdk/yMJV4pHn6my+wg:TrXwUpTSdQWydsdorWdkit8BdLMY96HE
MD5:	12A32565F21D40FC59B71AD2F7011EC9
SHA1:	3D7227E3163314099A121C236CB9B114CD7A55FF
SHA-256:	A62D65E76B74CB30804E38C0D8431232256A1FE5B8AFCAEE6E40B3D92B838585
SHA-512:	C9BBCCC64358CE564A7F4E95814C2BA343FD378CF62D9464720E30389D19831F154FDFD8606556278FB75F0DA08DF5988381E1C283E62AC043195D32B0FB8E58
Malicious:	false
Reputation:	low
Preview:	'use strict';const smPushApplicationServerPublicKey="BPXboYELp5SzcPAX28RHh2yCdLexPn201clXI1ZTVjBzAA6xpx2ugDk7rVitv5_B-oNGqpmXCp-EpYrH54RqdjI=",smPushSiteId="o7g91zknd3",smClientId="57dkr26ew8",serviceWorker="/service-worker.js";let smPushDomain="push.trk-synovetra.com",pushLogging=!0;const version=818;let smPushSubscriptionId,subscriptionDomain="subscription.trk-synovetra.com",eventDomain="event.trk-synovetra.com",sessionId="";const utmObj={mt:"",utm_source:"",utm_medium:"",utm_campaign:"",source_one:"",source_two:"",source_three:"",source_four:"",source_five:"",first_name:"",last_name:"",email:"",email_md5:"",zip_code:"",gender:"",age:""},taboolaUrl="https://api.taboola.com/2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412";function urlBase64ToUint8Array(a){const b="=".repeat((4-a.length%4)%4),c=(a+b).replace(/\-/g,"+").replace(/_/g,"/"),d=window.atob(c),e=new Uint8Array(d.length);for(let b=0;b<d.length;++b)e[b]=d.charCodeAt(b);return e

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29564, version 1.0
Category:	downloaded
Size (bytes):	29564
Entropy (8bit):	7.992009568737629
Encrypted:	true
SSDEEP:	768:10sNVi16w2qlC6wHjmGGvJmboaQfbUQ8sTsKkakVFhtMsJP:10sjw2FDmGG0S8sTERVFgcP
MD5:	1BFE1C21E486F506F32D25A8F15C6ACC
SHA1:	58271BBC42D99863FD1A1A9D2DE420FB4A480EF4
SHA-256:	5F428F3EA923DDEB2CD220A7B9A6C15D1483C06C9E0FD5ED25A91ED24BF6A301
SHA-512:	F4FF99CEC29E8FA356FF8EF4EC5CB28B71A1121610F0E9D01613375C09576D3A659B0C7B711014427F3018D264FB2AAB0716810FD9DFFDD355969C276A54929B
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/fonts/Yfx5aeloppAM.woff2
Preview:	wOF2......s\|..........s.........................?FFTM......x....`..L.....l..1..p..6.$..H. .....&[.Y........t.BpK.n..S...M.....E:+... .\.d......T..>h.@Q.++..........'.s.ui.kA.e....5..i.c.....bs..{.Odx.AEgQ..7.z..(.N..gQw.3?.9..v\|...C.../...............'s..w.ST....V.I..).E%SCn....ET.^.j:zu.p.[E.D..^.s;:.l.dR.%Q.....d..EG....e...d..=T....h..bg.-...oX...xS....W...8u!..D.......nH'....e.....M.+u].0vy....z.........0.m...D....y.B.O..O..i..&...f......~..+S..L.6.y. ......V..r...9j..0..9j.%jT..H(..-(..P.3..+.T.DO.(=.;.<...P.GT0.0......}...n. ...M0.,Bk...k.....m68.?...;VW].dL...........@.O\.......,..$......?.a..}..&.L3A`.....~.O.h.M.....6.J8..=[Q.B$.(..-R..SN.4....Y.$v.......Xi.....,....6.....%0%N...di.N{..O....{@...G.T\...5.~.Y........!.^o_...<..]..lik.).\|g....D._P.y.\|k.0.........o...b.o.%...So.l..r&.r.Oo...e...l.%...................2.y\.J.^.p...j...M..`.%..,.!..>.../..}OR....h.G......u.\|...N..++..:+J........j..:...+.....,s...R.....p%.......NM..a

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (766), with CRLF line terminators
Category:	downloaded
Size (bytes):	58956
Entropy (8bit):	4.462539689224527
Encrypted:	false
SSDEEP:	384:KDZzkukjT3yGSP7iByp9y6qbSubn6RPqO2AeGdGp5sKh8h3q5nLO6keb0jshM5gK:etJKAG82LIFHmjBQgVktx8M
MD5:	2ABE3B4412E575AFD4679F4592D7EE52
SHA1:	1A0EEC8F9E3754AA584053AEFD25C1393C03CC35
SHA-256:	71A9DB999FABCE6AC6D18943D31ECD7BD118E1575DADCEDEEB67E1F9803B18E5
SHA-512:	8BBDBB937A31E8710EBFD63819C1EFF793E76C20B86EBCECF76E1D84EE94E38C46077DCC3D0CE84698645310B6F80B044FF832EC7878FFD7FF9ED26064EDE514
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com
Preview:	<!DOCTYPE html>..<html>....<head>.. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <style>.. .wf-force-outline-none[tabindex="-1"]:focus {.. outline: none;.. }.. </style>.... <meta name="viewport" content="width=device-width, initial-scale=1">.... <title>Dermatologist-Mom Dr. Smith ONLY Sleeps on These Bedsheets. Here.s Why.</title>.... <script>.. (function (window, location) {.. var redirect = "https://www.captureclickspath.com/cmp/2SFN28H/36LZDZ2/".. var currentUrl = location.origin + location.pathname + location.search;.. if (location.hash !== "#!/hst") {.. history.replaceState(null, document.title, currentUrl + "#!/hst");.. history.pushState(null, document.title, currentUrl);.. }.... window.addEventListener("popstate", function () {.. if (location.hash === "#!/hst") {.. setTimeout(function

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	155955
Entropy (8bit):	4.193372887196477
Encrypted:	false
SSDEEP:	1536:KJrpfm5SfzJxQN69Bh4DSk16+6D6FGqDXj+gZiUuW4s/MXSf7eORFP/O1Sq3dNJR:KJ1+66j+HUuWiSSkPsdN/jcrdIFz
MD5:	AAAAE9F8C2FD8FB4B72D9DC05E545A3E
SHA1:	59BB4218434872807D25C3365FE67FBD734E67D0
SHA-256:	2F7164D58F35E31E75E960FDEBD6D51FBF02BAC284C57C9FFC3D6A5D68434B5D
SHA-512:	FAD06B91BB5327DC53A2FA533B4CE9E19732EEA40FF1B9F4FEC50BFF6B3609ECA896A2B968A9CE75E3B9EFC5F22A692AF9ECD3DA6CA7B380FC4CC7DEF9267E4A
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/jquery-3.5.0.min.js
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!(function (e, t) {. 'use strict';. 'object' == typeof module && 'object' == typeof module.exports. ? (module.exports = e.document. ? t(e, !0). : function (e) {. if (!e.document) throw new Error('jQuery requires a window with a document');. return t(e);. }). : t(e);.})('undefined' != typeof window ? window : this, function (C, e) {. 'use strict';. var t = [],. r = Object.getPrototypeOf,. s = t.slice,. g = t.flat. ? function (e) {. return t.flat.call(e);. }. : function (e) {. return t.concat.apply([], e);. },. u = t.push,. i = t.indexOf,. n = {},. o = n.toString,. v = n.hasOwnProperty,. a = v.toString,. l = a.call(Object),. y = {},. m = function (e) {. return 'function' == typeof e && 'number' != typeof e.nodeType;. },. x = function (e) {. return null != e

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65429)
Category:	dropped
Size (bytes):	78134
Entropy (8bit):	5.19643629104477
Encrypted:	false
SSDEEP:	768:eD/okOBLyKgpt1OiWR2bKz2iXHE0gfTG5FDc3eTV8zFcUY7uI9P46+QxIcZr0f9p:eNVu2c7bQ9cZYnLxVptLU2yLqN0O
MD5:	4BF72B4F9F62083F74A898AB2D066191
SHA1:	18BA12C89B7A34E973BCD937B0A313ACD004D841
SHA-256:	A83AA0408685BE74F2DF6F78113CD28E96D9F2771A5591D4BB36B21660B43ACD
SHA-512:	ECB6A28F13070E2F32CB8C14C5FFEC27FCA65A452B31F43AFF436CC568702650428877C29193EFF46C9FC80904CF6DD297BD1D56961056EA7D4F470C03C602EF
Malicious:	false
Reputation:	low
Preview:	/! @sentry/tracing & @sentry/browser 7.23.0 (03e6a2a) \| https://github.com/getsentry/sentry-javascript /.var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return l(t,Error)}}function i(t,e){return n.call(t)===`[object ${e}]`}function r(t){return i(t,"ErrorEvent")}function s(t){return i(t,"DOMError")}function o(t){return i(t,"String")}function c(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function u(t){return i(t,"Object")}function a(t){return"undefined"!=typeof Event&&l(t,Event)}function h(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function f(t){return"number"==typeof t&&t!=t}function l(t,n){try{return t instanceof n}catch(t){return!1}}function d(t){return t&&t.Math==Math?t:void 0}const p="object"==typeof globalThis&&d(globalThis)\|\|"object"==typeof window&&d(window)\|\|"object"==typeof self&&d(self)\|\|"object"==typeof global&&d(g

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	23322
Entropy (8bit):	7.974930928673366
Encrypted:	false
SSDEEP:	384:owzz7ZyMBzAE0R+GtM0AF41Ea139u0IC7dckXPA1W5N3fJvG9oy1WaeVAN9:Nv7ECzAtk439uf2d3X+W5jcoy1reVAN9
MD5:	4441E51EB5FEDA7F27EF75210ADF8CA1
SHA1:	F305B35B5767AF65DE594A41BE337F82F0E61D19
SHA-256:	3B7EE2281FCBDB83B49CEB19767564CE84A26E7DD80FE87681CD36084F0F2962
SHA-512:	A45905581771EFA9843ADA636088A9682E1840E02E301C5F302ADF46F084878281E67C9DFDE358F3F662613FD7A0BB9A5885BAAD4AC7A705AD8FB37DF73B5FEE
Malicious:	false
Reputation:	low
Preview:	RIFF.[..WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 $Y..PJ...*....>m2.G.#"%(2z...gl.....B.....&.....-..".v...A.....w...2.....yF.m%..>_+B-.........1......xS.....x....?.s......1;..U.../..4...q.1f.ucl`E..3#... 8....@.wl....]ZE...oP..\|Q?V.....H..P...N.N'..j. ..R[..`.`A:....+.,....L...J..#......{.....3.9.T7 ..h.y...#!...>...{.0.....ZZ........\|+.....Bd.h.........{..rZ..7......$.[.(..z@_..o.%..NY...n....{.H...O.4m.R...:"kK...%..f.[.$$.....m....)..#.2..7........._..[T.......]T........M.y.LVV..G.v]L.F..m.n.0....:0....D^.n.>.by.

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28512, version 1.0
Category:	downloaded
Size (bytes):	28512
Entropy (8bit):	7.993254855952905
Encrypted:	true
SSDEEP:	768:pPCtaB9GHspJLMsG5PBCmZ5B1on8A3k9PKZ3NuCgyXGtXjrVZ:pWhsHLGNBtZ5BUSyZ3Nmy2JPb
MD5:	16CBA75F4B9969077FF30BEA2F494E12
SHA1:	71B32A3BBCC6157DA9D52ACCF124660A3CFC66DC
SHA-256:	241CED7F220982F5679A64CC6DB34ED42CD21274508CC5814616D9EFE374AFDE
SHA-512:	D082AAFEE45D6824D57D72083C8F1E9E8C866D35BDE711F0088F7BD412DEE39F8905D78499550C9CBF38B0735F8341560CF9FF7351618819AB9CF876B99DAD3D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752GT8G.woff2
Preview:	wOF2......o`.......p..n..............................,..b?HVAR.(.`?STATt'".../T....(.N..d.0..8.6.$..D. ..B........%lc`...y.7[G.pc.w; .z.?.i2iU...OJchR..P`...H$.3[v.V.1WU...D[..yu.h.m!..k^....MwQ.8'.F......`.0..;p.}c.x....AFF5<.D..).).).)...Th..t.k........n..W..)~...[.).\I2.g..q..Us^...z.Su.i<i.p%s'..#fx~...>\|...........+..@Q..X9...E;W...sQn.l.-....#...F-.._...XD.#R..#Z.<...0..;......~.g?k.D....l.$D.$...H...5..CY?.3.g.d.}I_@.....bHxf..{9.....v..I.......O:.......x...T...i...p.X..d.g{.$[<......`...Ab...e..D..y=_.T..\..&h7.f.o.........{.v..:....8..j...f.(.=.").....A7.....:_..~;.t.u...Gq.......0O.z..D..U8..i5AXJ.............X....<.[dK.e..CL.}....j.{...,t........{.(...nk.f......[.~\|<Pv.........n...`~.6+..$.hEu..L.m..hn%pI.....~.{..C."...>.....l...6sF2.7....UA.....!.Es@jw[...A..L...Y.....X!.}..A.%\.......h....s..C[.K.E.x}..D{7...w...R.LQ%}..(....f.?).. ya.8.._.E.]..C,}.;W..!,........7....d.[By/$:...r..P.\\(..S..s.rl.w.U.]..sg.....Nf.E....H......

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22504, version 1.0
Category:	downloaded
Size (bytes):	22504
Entropy (8bit):	7.9897727403675995
Encrypted:	false
SSDEEP:	384:ZbL6k1TUlBxUp5VLlLJGv2VulERzgWuXlY9zehEsapJznPEUAAnUgf0n6iXatBbF:pLfTuYfVVJGv2VuIzgWAlYteh6nPEzAF
MD5:	1C6C65523675ABC6FCD78E804325BD77
SHA1:	898D9808304DC157F5DCB18CA169EC6E2B96B3D7
SHA-256:	08664859BAAB5ED98F0BF818ED77E38464FF1826DC6406D5ECBD651409AFBD92
SHA-512:	1505E8496C9BEE214C5F8815F8D88A31FFE2BAEB6FBA81A8228BD52220B9B2BB10464C1E1DBA11D6881583DFA478CDFB30A79CFA6F069C362FB65443FEB06918
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2
Preview:	wOF2......W..........W...........................z.p.`..D....e........Q..B..6.$..v. .....E.K...%...v.H$..F".... .ef ..D..[g..Nr"c.....U{AA.i.L.0.zkT.P.......BV.q.....`6.....>...[...E:4..d^.7..L......vL.\..xL..f.......T.....I......%.>+...95.N...<].....h.o7..).-....]R#..]....I..(W9..P........((...E....i}.eY.ys.y..^....k....9.s_....I...&D..Zf.C.1...CnfxQb....#.K..]....^.;3..~.@...V......:i..9...6.vU2+D.z...U......N.%..d....%...s.7...NM...I.i...<v....:.B...{..B..>.T$..@+....\|Y.>........8..Wo......r./..r.hJ...a.Dm......f..Uk...F..k......f.\...L.....s..."M......k{Ib.%.E"C...J..Jj[.Y.;...d..@........A.}....+1). m.t~...-.f...J..Cu.Z]umgqZJ..IN........c.8"v.L.q.CzU..v...{.5U....WJ.:o..<...j}...J.Dif.f~.g....N.do.~.U......x....AJ"A.)..H.I.D......:...1X..~.....W.LE.......).q.Q......K.\..rw]p......)}xP...Zj.@...(B.8.!..9$Va.8...Q....o...k...LB.j.......l.0.G.B\|Q.o.j.U.vg+k.#.0.<8.....Z...xQ...m....x..s3.....d`....;.+..smW.8A.d..._........D...%..'.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2773
Entropy (8bit):	4.4743930876993945
Encrypted:	false
SSDEEP:	48:Cpl1DYaOG8M23aQ6srSH8w5TfS4AtyNfp3faDVk7JYmAhv:m1+6srScw5u4rCaJZMv
MD5:	0235595AE18146B4F08F0E4C46E8BAC5
SHA1:	F9D1D88C629990CFF5C4720A6CBFFC049FE8920C
SHA-256:	36637123F9C9E9DD2E1CCF82751BFB30D0CE41F4CB3235485F2940A2FB3E0C5F
SHA-512:	AA8E631A7FD05FC926196726640D1E17F9417B18567AF4A86593CF6AF5FF4D6D7E525C60DF892667C3113E455E0242F5589B82959CCEB354A4CC8AC5D7B9ABEE
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/665deae8723a9bcb12bc32ee_glamour.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 180 30.83"><defs><style>.cls-1{fill-rule:evenodd;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M159.4,3.87,162.69.62h5.63c6.47,0,10.8,3.53,10.8,9.19a9.84,9.84,0,0,1-2.23,6.39,41,41,0,0,1-4.67,4.52L180,27l-3.19,3.15h-4.15l-6.4-5.31V27l-3.19,3.15H159.4V3.87Zm6.86,12.32h2.65a3.72,3.72,0,0,0,3.85-3.92c0-5.59-5.4-5.57-6.49-5.57v9.49ZM163.78,1.58h4.66c6.08,0,9.65,3.54,9.65,8.36s-3.5,8.5-9.42,8.5h-1L176.92,26h-2l-9.22-7.52h-.49V26h-1.41V1.58Zm1.41,1.3V17.16h3.38c4.74,0,8-2.85,8-7,0-4.56-3.13-7.28-8.54-7.28Z"/><path class="cls-1" d="M136.23,3.87,139.52.62h1.08V18.18c0,5.51,3.51,8.3,7.66,8.3s7.66-2.83,7.66-8.36V.62h1.15V18.16a12.92,12.92,0,0,1-4.36,9.27,10,10,0,0,1-7.35,3c-7,0-9.13-6.09-9.13-9.12V3.87ZM142,.62h1.08V17.81c0,3.38,1.44,6.3,4.7,6.3.67,0,2.41-.64,2.4-3.71V3.87L153.49.62h1V18.1c0,3.78-2.12,7-6.24,7S142,21.93,142,17.91V.62Z"/><path class="cls-1" d="M57,4.23,61.28,0h1

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1718x1454, components 3
Category:	downloaded
Size (bytes):	173994
Entropy (8bit):	7.9822843637670235
Encrypted:	false
SSDEEP:	3072:C3nWjvBfEE7V6bqyfOP0oXYr744ADvEbgJJZ9305FPDBH2PhgYh0TsKYGUoOzjr:KnWj5fXV6bqs60oxT0pWZJu2n
MD5:	3923F5B1F41C8161CA69718D01187770
SHA1:	EA42B5A4DF55EAB3639F48018642F683144CE4E8
SHA-256:	121CC8D430AE26DE94EAD92DDC4131C7E65917C17FB64134322FFED4187DD375
SHA-512:	1AA4BB12D2C341E8F842C925099D4F868182EA529808A49407C4F0D92F04B7BEF8C21CC766523F5AAEA951BB358F7776DD97D405D02A4C7AAE531DF65091195E
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/images/xNcpsuWcBQjG.webp
Preview:	......JFIF..........................................................&....&,%#%,5//5C?CWWu............................................&....&,%#%,5//5C?CWWu..........."..........5...................................................................j5..o[....4.#...oa."...kac5.oZ.....A62..f........d...s."k........B..:, R.@..Abn.`..f.3.~U.3...z.g....7WI.....k.5k..3..Q.M.{z......tC.Ya_.".i.`.=...jKd...0-....z^>...O4.k.Z:.IWRG.E..2%.....Y..#......o3F.:.!L..s.....3......p.3.a.<...,.q....2...,.H....8....H.....l...x...)...+...&kk..!s0..&33..Rky.fD..30..f.0..33...30..33........0...f..GM...$...#.&.D.J.Qf.c.L..B%..5.y...h...r..Ep.S.I4u^T.r>..^..z+V[..&..H........v[V9St<..w^W.....n......t..7..uVA.r.....g\., ]...Gae._# f".h..GR......+...0.P.."...y~k.k..N..r2...fa.j..0..0...8H.N.3....z.L.B.6Op.{.M.d&@.c.A.....0.0`.`..).R{.A...be_.$...+D..?.a.V..V.-...0.....fm' ..&.....p..)....30...d&ff...fa..ff...fa...-....5..5..!.....(....CZ].Z5-.#.h.X..'..\........l"+...K.q.-..Y......r}...

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	46850
Entropy (8bit):	7.990228351228202
Encrypted:	true
SSDEEP:	768:PrrnMnSsDJzueb5D7GWrKeUrB7+lmTINFjWQL5Njt2fPgdapeT09sCgky7I2:fnESyciJ7GWHCBgNFyQXB2AdUmOAkyE2
MD5:	6D5624C10E17EB12980AA657AB43D651
SHA1:	C08B1F95A3C7A0305D7B8A5E58484D7FA1AC9242
SHA-256:	BBD7176E420EEA130131C709D886254C930B50A2F60304DF29C2DBDE04C103DD
SHA-512:	558549D6514D595093BC29872017FBDBB02CE84F98E7B2A41FFC1C053CEE2B31721B2505E2A9D579911D2E554B06D84886C74B88214F58F32E6028DEFD5BD65E
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X.... ...N.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 ....0....O...>m4.G$....!...gn......._...+.e..7..g...7D...'.......c..`....^....s..s..n..u0........WV`........!.............:.....{\os...>.?M....}x.........?..q......_.F5...@.>....3I..Z.B7+...}......].)w.i'd"..G..&......E..E.@.&.=....R.\#..b...)...Ft)n.~X.F.Y.P.V.....(.+.....V...c]ts\|>.=9...3{.<....S....<..S#I}..FnkE.[.......Wb.....T.y......:.5.#..C#.j.E.Z?59.Yh....(.......H$o.7.)9..BV..um.D....hF2.5.....j!..m^...9Z6..G..=.....$,.ieM,.p(oQ....r....$....p...y...Io...La.w..#

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 311910
Category:	dropped
Size (bytes):	84180
Entropy (8bit):	7.997185459232478
Encrypted:	true
SSDEEP:	1536:VZaiO3MFf2fiSW61iEC0MfMt7nuA0RCHzVDv3oVqfHQ2dKJbfOwRikLZB/LqupVw:VZai5x2fiSW68E0finuA0R4ZT3UqPXdv
MD5:	8627E02ABCC10705552567166C045BA5
SHA1:	625FF6BC5CD980CF58FDA17C19A15AEC1847A0E1
SHA-256:	5864968332185C3EC722B5679D094BE7AA8A84064C0441A9410CE0E6A84494F4
SHA-512:	08DAC2AA7EF9A7EA3C5DA5BB16DF98FCDB59B8F7CDAAB0BB1D77C3EA33734AEDB5F89F80E18C6ED56654D211AC5B5FBE019F649AC91FF2F9EF2B8C6D735A3EA8
Malicious:	false
Reputation:	low
Preview:	...........}k{.....D;..;.@..\D{.......H..4....62#.L.OI.......=s.4.u-.J....M..1.e29k...I..=m.'..f..iv....O&g...V.\|.l..['.vk.I..4...9\|9o_....dc..G.P(..9(.y..:S.\|Zp...K..+.\j...SZ....D.w..n5..A.,.D......c../s...6/.....d#1..H.7..f.#N../P.Z/.Z.. .n.8s.....T....w.>.<...T.,xe.8.c..Tq...l6....JS.u./..=...&..uPI.m.......E.(.,}.../.....Ww..(...a.....Y.{.,XRn...T.=..o...en..@.S.g....+..............;.~h....z..._.l7..u.Y.R.1..h2.~X,.vPQ..Vz}..Q-.b.`.0.i.4Z(Vs.....y.+dEsb.".....T.%.V8.).....\..D..\|..9F3:..W.,..,...o.\|.....0..Le.(.....?......o.w...qa.4#4..#fm#uf..q...r8.....#2..bd#LML.;/.$.......G.AGa?..J+.!,.Q.........Z.&.N...Tc...h.....fm.@,....W..CT.....;.g.Qu.^#.........8..x..K..N..Nx.j..a...0.O..5(.z3z.o5...c.....[V.....4M.s..^...c.V.....-lb.V.3....w.c....>.V .kw.O......cS[.............#d.8....#....MVUe`.q#Q......}`a..)G.8....F..,..9.@_.27IQ.A1.Q....../.....[../...F.d..1.........,.pF.P....F#...Fh<6C........u.J.y/...^,j..a...z.G.q..:..b..F..:.......

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1000, components 3
Category:	downloaded
Size (bytes):	159316
Entropy (8bit):	7.981995843908856
Encrypted:	false
SSDEEP:	3072:oSldKzwbowzcSI4RKjYl9C2TVjz0DW103rUh7oi+ghVQieWYujUZhrj:xdI0oGI4R2Ylk2TV30DW103gpPiWlghf
MD5:	83A6BA265464C848F5CD3A96C6F94963
SHA1:	090AD8C7DB45A4BA2BBDAD6C9CDB7626B507457F
SHA-256:	02A828D63C28087A767FB91A35E460AB1D73C9A0674160AC1B23DC70E96C410E
SHA-512:	9DBFFA52B3C1DFB5CA65F7189DF51CFD9B42BEF398D7C6557C84A611F08289C7BD2D917F0263CCD61612A95E015DC6976AF1C9E8A1827C770768B1F3EBC03022
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/66bd384fedeb9d6ee2978d02_woman-blissy-cropped.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.........................................................................@.."..........................................T.........................!1..A."Qaq.#2...$3Br..4CR.b.....%S..Ds.5.Tc....&6Vt.d....................................+......................1.!.A.2"Q.a.#q3B.CR............?..2>..7J...cu..S'..&..?.@.p.J5.B..`qDwTs..n..M..Fi.E#d-.@.@.1@.'.........l..#...NwM..........1.9.P.wqe...._F>...g>a\|....k.G.-x.VYwT...Z.~e.\|?

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 42500, version 1.0
Category:	downloaded
Size (bytes):	42500
Entropy (8bit):	7.994680899740102
Encrypted:	true
SSDEEP:	768:xmnyrzcxyEZ/Hz5fyLjNBayQ5Z7s/Q658AcFVnxTSo4DVlQ4NAi3nBBy427:xmnyr6yq1fyLj7aN6K5F5xmo4VlQ41xU
MD5:	8C5246074400A5141EA18BF48DFF17EE
SHA1:	B0650D9D042DFDC6E5FBC3B9F79F87822F9EE689
SHA-256:	595C14BD7589B069E4570BA658CFAB8850611639E8A077CA84EF263BFA4671F9
SHA-512:	C2AA785DF137816784B5AB3ABE7DF399E0F31CD46A4A149162345DDC640223FF3998BCD77AA87C017C8F53081D2C7D63C576308DA1174173675A78D194D47FBE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ptsans/v17/jizYRExUiTo99u79D0e0x8mI.woff2
Preview:	wOF2..............m$..............................^..H.`..D.:..............R...H.6.$.. . ..>..\|..N[.[qB.6%..m.......5#...Tt.....x....S.K....'..3.X.vLQ......Fa.........1fg.%.h.A.~#..p..9.. .U.\|"5.j.Y,.0....R@..Y.l;...8.c2..\.)..nf...L.{".#....F..F..Es.......9o...'...ZC..4.w..DR.....4KSY..a.^^.V.....j.9.[...2J..aI... /._'.........,]..v..T.hnt.kb..\|....m.....b.Fn.;.i.A.Q....(.0c...&.F.Q......@rc...,.m.....Q..."Fb.?F.kc~`e.._.r.....g(.P./..*...T.V.r.....?.....GeF.Ih.P.f.f.W..`..H.55w'....-.=.6lAoc@.......=i.cse&..+..+.5.+.nw..k.~..N.....j^.f.o....$3I&/e]....A..+Q..-....>......5P.a03..3n.V.$.z{S.U.=...b;a.Y...O..T....\|.3_.G..@...@B...;K...tN0......Aj[[...$.i...G..3W+.S.%.9UY..`....Z.v.(.r...1....!......\|eT.Cn.O..,..s%..S..l..C......i.[...Ah9.0.....$..{.+...k.....,.6 .&.R..J..x !..."...+.~.o.jg.J....SK.R.....X.vG.((..7.....2m...L....= ..................h.`....JWE..C..dH...5D.......U.L.E.V.k.'.g.......7Kj0.,...A...SvAx.eZ.......>. )Z.\//..9..EL.)qJ.. ..1+.>_...F

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1648
Entropy (8bit):	7.79160380175523
Encrypted:	false
SSDEEP:	48:W/6fLmNY8jZJtZZvlE0ncBRP1beyLt/ZIU5Y/K0Z:WSoY8/tD+0cHcyLtuUYS0Z
MD5:	9A5F6A807A2CCBE77574C3E96A7747E8
SHA1:	455334943AE388BFD622E71453D3D287F178B505
SHA-256:	F9C3DD679FE155596C55795743475C9DF4E1E2F4AED9B09F4676ED84C397E8ED
SHA-512:	5FBB1390F3FC1F3A6204BADBF76F652AA05A3E954E898B4EE6722B88E58C743AEB1A4229C469C197AF84932B16ACB01B2034B31E090D262277E6BB6CA7543741
Malicious:	false
Reputation:	low
URL:	https://cdn-media-2020.s3.amazonaws.com/content/badges/7dsfjhk35tbd.png
Preview:	.PNG........IHDR..............>a.....pHYs.................sRGB.........gAMA......a.....IDATx...q.6...g.?.....@H.Q.f.;.K.R.K.I......@J..1w..dI...`...?.#.}.. ...0..0.C........~....&.OvC.(...K...8....d.';p..Q......>g......M...=.%....kw./.......0.oXT.Nh.....:......T..2.....8...a!.O]...h.1D........#..u9Vba..Q.%.....0...e<..G.o.\|}}w..r.......(.#4zp.R=.g..:.qF./x..69............l.2.S........?F.\|!.+.wQ.]._.n...=.C.R6..9.rp..W(#.k...1'.\..GzoyG.lI.[..8..'..:.!...=.....a.E.M...:...C^..FM..;..~.Ec....... ].....( ..A,-5@....li.i....Q..:...H....=.I.,.;.%.h...r...'."k.O.HB...Pi..R1....._.E.1..!.u.=.(PD.\|G>..l8.4..;..Uc.d.....>.....B$...$.5.h\|..[.[.....NYv.s.......H...@..8A...1=...Y.I......U.....C/..lU.p..#z...5.....E..1.(....+R..T...6&.uq.....\...e5.`..r.... .D.#..%..Z5.@R......d{../([.r9..=.^..r....ra........=0.)..n.>...G2.S...^......Dz.....m..+..5z....=.#...\R.g..o......[.G.-.G..X.8.......)..J?..Y[x.A./....Y..4..y.'..h.iR.`...{...3)..7.O......"yc.loY

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGB, interlaced
Category:	downloaded
Size (bytes):	9839
Entropy (8bit):	7.934486398924793
Encrypted:	false
SSDEEP:	192:LJAM2fKjxIaSF7yuw9oGOwXzXF6imjnDtylk85eQakf4YtuCgFgF60xUWnNjN:+GjxIaS5yx7zVBmL5yDeQakwu8f05NR
MD5:	4FE3A297FB230F1AA5DFC1282243D8B7
SHA1:	6B4F31F3C461BEBD43CBF6423E6C5058C839DE8D
SHA-256:	788515E51832C513A385E23D18CC2662CEA3589E64DA7DB7592E977EFC879B74
SHA-512:	86E79AEEA9C539566D3B2EF761EBF5884CBD33C9BDAC1745101E7A466D7E8BE8234D46D2791AFC3B46BD072F5362EA36AEE40DAC76273AE7D7A5D2732670C948
Malicious:	false
Reputation:	low
URL:	https://won.quandral.com/age-verification/assets/age-verification.png
Preview:	.PNG........IHDR..............0NS....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ba7da65c-196c-4665-916c-4c01d93137dc" xmpMM:DocumentID="xmp.did:982166E69C9B11E9ADEDC3554FCE72DD" xmpMM:InstanceID="xmp.iid:982166E59C9B11E9ADEDC3554FCE72DD" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9863c9de-c9f0-46c1-b0a9-02875fc6854c" stRef:documentID="adobe:docid:photoshop:cdb8fda8-56ff-df40-8ede-899fecc08054"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......".IDATx.b4...

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 400 x 400
Category:	downloaded
Size (bytes):	5602885
Entropy (8bit):	7.992560914386749
Encrypted:	true
SSDEEP:	98304:kEYUUgJo1w2aT40AHfLfSK0xpiJrphTLpZ9OAeLUw806yQAT5DTdHM099pqG4:CUUGo1XaEz/LqK0SJrphf7eLUzJAZTj6
MD5:	ED7089796FDFAD69D84E90D505D04F64
SHA1:	0C25A4D289CE265A0E4E8FAB5AE688105687F402
SHA-256:	14B7D99FBCB66C47D0EB58BE0FC13956C4BC0789AB4CB91DF8EBBEECAE363892
SHA-512:	85A6FA52C4A8D73941A5CC711312719A93A4B0EA888388F9B42E7D52DECBC5B1780FBA76C323AACB077F65FC7C65748838B49BEB4464DFABCCDD3D8F4DB0AF74
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/media/f92S2pCkhDV5.gif
Preview:	GIF89a................1)(.........................................{ssk......{\|s......kkkRNJ......................B=:sssBBB{{{MBBJJJ......:::...........Zc\.............RRR.{{211\|ss)!$ZRRcccZZZ!!!skk)))lcccZZ..!BFJJPRB:BRZZ!.!............sitRJR...s{{......{......................................Z_R...........chZZUJ(#.PJ=cdRcZC1!#I:1B1+mkZ{{az}k\|sZ..............s.{b..{slR..k...................................rkc.{rcJ;.......~pc.kXkVA..jm^R.....uR:1ZC1qsc..{.dJ.rc..{\|sk...:))cYR{_S..wlbZJ1).skrUJZA:.mZ\|ZIN>:ZIFsSAB(([:1kJ9M11cB1R1)cB:kJB.bUsJB\|RFkA8..m83#:%!L(']/+.{...mrsZ.o`........{..rkkR.................cV9.yD:'B1...sshJ..RH0..2 .4........ZS9...bcH..q.....QS=...kdJ......IE1ZYB...HB)\|sR..................c..........skcB(!."...x{...............ss.!..NETSCAPE2.0.....!.-GIF optimized with https://ezgif.com/optimize.!.......,.............'.5....5;;D.<......F..../..............O#6%..:.C"7?=UW.X...H.................#.........>........$.....V...9..C.........@..j.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	83
Entropy (8bit):	4.453908850367793
Encrypted:	false
SSDEEP:	3:YQ3/eHiyIwBHImA64aRSGRT65CEwWK1:YQ3a3BHhA64avV61wd
MD5:	64B1F8816169268FECA022A0576E28CC
SHA1:	8A28587F0A1CFA83854DFDE8C18EE317AC2811B0
SHA-256:	8B9628D819CFED521E5074A1547129820A826F2736DE89D4E5A8B64C9D2A4A4F
SHA-512:	816A07F67C95B7C94E5A06565DB6FFBA9B95043FE6BA2F56EE5E31219DA7DBF5636A7CD3B25156D1CE20339FA3B4BC2816CCBC822E94F26AFCDD39A9764B532D
Malicious:	false
Reputation:	low
Preview:	{"user":{"id":"14be3b4b-e0db-4ee1-9e84-04742c067024-tucte5b381e","isNewUser":true}}

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2587)
Category:	downloaded
Size (bytes):	226747
Entropy (8bit):	5.099473736404491
Encrypted:	false
SSDEEP:	6144:nyP4cPyfZeY6P96cZ363U6UQjd6U3SZDQcZhZz6oE1ZoCjTLBlhcEB8CFG5zBsB4:nyP4cPyfZeY6P96cZ363U6UQjd6U3SZx
MD5:	C3A4F016269F0D59FF76748A28403F6E
SHA1:	AFCFB38AB621D76C7E5C0B8801FC8F024F2D5558
SHA-256:	32F40D936579AB29F9C80A038BE7AE15A736916F60D250ACFB70B2F3A26B4955
SHA-512:	9EEAD0DCA119C2CF11937C2409C1D0D3C385420CAE9B26DBF4770D53F91681D273C0CF05ECD4AC6F501CCDEFD4BD9B9BF4DA9578A46FB42437C2B3CDAD5B3950
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/css/in3-blissy-com.c3a4f0162.css
Preview:	html {. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;. font-family: sans-serif;.}..body {. margin: 0;.}..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {. display: block;.}..audio, canvas, progress, video {. vertical-align: baseline;. display: inline-block;.}..audio:not([controls]) {. height: 0;. display: none;.}..[hidden], template {. display: none;.}..a {. background-color: #0000;.}..a:active, a:hover {. outline: 0;.}..abbr[title] {. border-bottom: 1px dotted;.}..b, strong {. font-weight: bold;.}..dfn {. font-style: italic;.}..h1 {. margin: .67em 0;. font-size: 2em;.}..mark {. color: #000;. background: #ff0;.}..small {. font-size: 80%;.}..sub, sup {. vertical-align: baseline;. font-size: 75%;. line-height: 0;. position: relative;.}..sup {. top: -.5em;.}..sub {. bottom: -.25em;.}..img {. border: 0;.}..svg:not(:root) {. overflow: hidden;.}..hr {. box-sizing: content-box;. height: 0;.}..

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21508, version 1.0
Category:	downloaded
Size (bytes):	21508
Entropy (8bit):	7.9880543334499885
Encrypted:	false
SSDEEP:	384:KnDSSIRNb16PJLoYYwxgdAz0PDeKAkc3qDqlxmB5nb2ztGilBTS4NYy:KmSI/ZwLoe0yGqK5bzilBPd
MD5:	24B8A8ABBEC56AB127ADC36E35F49BB3
SHA1:	0906975D70856EF3DF1AE3D91DB5D29687981C3F
SHA-256:	A79B4C65B454A795FF3868156F54BE09AC8360B9FD3BA21431B5C48FD9B66AFA
SHA-512:	1B60C792D65E363D9B4F190EC897685086685940D823D527BC3F4406127F556377A02AC7E8853A82275B0606C579B014006D42BAEE59D7B3B16AA92A335A9078
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AXC-q.woff2
Preview:	wOF2......T...........S...........................z.p.`..`..D....s.....,..X..6...L.6.$..h. ..&..p.r...9..v. "...k{o>.1.a..J..^...:R........."c&...z...+.E&.6L.@....d.(.XV....&9...&.C.....8...Mz...4.\...p.......z...M5.X.joZ..V...`^.\|..2.q.8..i..A.....h.+.BC.n...-r+..d.._7....Z%........0.aL.'].?.H...d..r..%+.\|y.,....x..K..z5R..Y......L.Y}R..........I..j....3.{..0 ..%.G`Y..B.....s6....n...CD4."..%..)....T..B.D.5.....r4.2.l9..3[.n.7.1......?.../[\V.z-.IWt...TB#4B#4B#4B#..HSs.$...,-.b2.m..s3..(..>.."H.e#..u{.Z...M.O.E.Q........fg.f..1.N..^..2i K...W.'&X a~.%T.Wo.L.e&._O.....U....~..^.:..q....L..<.px\....$C....].#(.k..g^.^.;..Z.5..WK....d...[.G.\|p..C#......Z.........1.......`D..r.7..~.\|.......>9@.x...]T.KNdt....{.......9...l@....km...6..;...~.&.............?... ..#.....VW.>.k^.l.3......;P4....A.m..FHNx..w.e..4.j.+.^.R.T.TJ.........<....w...P#W"...&...6[4..T.G.]..<.DH...Q......p.2.L..$..@.........o..).a.)W<8n...v..t..G,w..ag:%.T9cv.........

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 326, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5271
Entropy (8bit):	7.881553587547429
Encrypted:	false
SSDEEP:	96:mNMp+1AU92c9rhdTG74n5qULJIleMdj9SgNwzbcHLwQi1qO2Xv:mmp+1Z92EhdTprLG8MKuwmLwxwO2Xv
MD5:	6C6AF36FEBC390A79667445921A17719
SHA1:	D4DB4AFCD208A4B0333FD0D1E214E16FC2C95E94
SHA-256:	D8A1E2DC5D7C2615BAD2E78AFE7D32DCC1580DB69A78BAEFE5CFD7E318C8C678
SHA-512:	CF954CE67C848F80D24C553878C7BFBC08D0C2CCFA5E233DB31FE23FF9D9BB5366E224D6C876CFAD64120DFE257AE43A3DA8213FFD4716708081E000CC924986
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/665deae8723a9bcb12bc3165_star.png
Preview:	.PNG........IHDR...V...F.....1y.....^IDATx.....\....RJ)%.R...J)..PB.;.#.PJ(...J...G.%.....BI..wRK(!RJ.%..BH...svf......>_...owf..9.w.ge.....I.....P.e.>....r..Z..v...,.W6.k....Z..v.8..SP.t<..k....ju.^.....5.s..Z...A:.z,..t...[_....1..yz`..I.]+.........Tg{..Z......'...y.5.....Z.0.1h.{AP.......P...9.....Z........,/n%.....9...Oa\.O..T..Y....<.Z.>.pm;.5......1&E8..:3....`..F...w.X........2...;.........{.....a.y-....zM..g+........T.ao.Auj..Z.@?.k>.c!.5.^...w.E8....y....V...f.X]]l`.\u?...l...W.........t....^{.=V..fz=.........l.....:..ax;..{K......j}..d\d...Tge...Z.@...(.WGP}p.`xO/......\|..5..^...."..5.>xh.....z.}Te1...:..~,..g...M....Z...+..Z..cu.I.5...c.h-.";..:3;.w..o...vWp.....^..*.<...Auz...^.......{..e......&.............4?...G.......H..h,).>........zh.@c........-.....V...\kc`M..C.....GZ.Tg.#z.@sV...z........9.&.FP...-........jgv.U...>.....N.Fg:.T7=.W...T.ao...C.{....V..:.X.....NY.......c........).X-.~..9.6..l............,~...^.A.f/.k.....u..^

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (370)
Category:	downloaded
Size (bytes):	51301
Entropy (8bit):	4.875998394072045
Encrypted:	false
SSDEEP:	1536:mRQmkJzNnFAM5dPDvK8WKYndGgJ8Nalyw9qWi2/iS8aMOqQLLcc8dnpyPkuoQimX:mym0zZx5dPDvK3KYnM0RKS8a78NWPos
MD5:	4C3086CCE0F01DB71A5E08825A332F23
SHA1:	E42388DAEF592AB7730F93A847A403A5D4D7CCC4
SHA-256:	96403F5D5B8BDEB6642AF99C2D6159758F91A24D7B069C02D07286E1FEC89B5D
SHA-512:	DD98C0F4BC71F49B28F63F4752215A02417D00CB155C11B97F871EA2ECF987963DC88E3309B47BC387CB6833FBC4BC603BE806ADDC9B475D30A21B6961C92C2B
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/css/style.css
Preview:	/* bulma /.@import "./bulma.min.css";..@import "./loading.css";../ sales pop */.section.salespop {. position: fixed;. top: 120px;. left: -400px;. background: white;. border-radius: 5px;. box-shadow:. 0 0.5em 1em -0.125em rgba(10, 10, 10, 0.1),. 0 0px 0 1px rgba(10, 10, 10, 0.02);. transition: 0.5s all;.}.section.salespop.is-active {. left: 30px;.}.section.salespop .outer {. display: flex;.}.section.salespop .outer .has-image {. padding: 10px 20px;. background: #29af5c;. border-top-left-radius: 5px;. border-bottom-left-radius: 5px;.}.section.salespop .outer .has-image img {. width: 60px;.}.section.salespop .outer .inner {. padding: 10px 20px;. display: flex;. flex-direction: column;. justify-content: center;.}.section.salespop .outer .inner p.time {. font-size: 13px;. font-weight: bold;. margin-bottom: 5px;.}.section.salespop .outer .inner p.quantity {. font-style: italic;.}.section.salespop .outer .inner p:last-of-type {. margin-top: 5px;. color: #29af5c

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 20 tables, 1st "GDEF", 37 names, Microsoft, language 0x409, Copyright 2011 The Montserrat Project Authors (https://github.com/JulietaUla/Montserrat)Montserr
Category:	downloaded
Size (bytes):	394140
Entropy (8bit):	5.806236883306442
Encrypted:	false
SSDEEP:	6144:fVEJvLqfK1SzvGZP/L8TL3OlmcKSozNdXHyM7oKDI3Ewe/zV:mLqS1S+P/L8f7cKlz3yM8KDI3Ewe5
MD5:	52A37115B1D8D5D6AE0B0E373E692C9D
SHA1:	B30F63A27BCDC61C2458D0DDFBBE738A01E39714
SHA-256:	A4FE82B4BFD40C71320AB0F1DACA8BA2F230B55A56FFA94D5D1B349675B70D73
SHA-512:	F0F1922ACAABB88DEBAE2DED6C0F4DE1467CE5271AC8B56236E51704F220E9AB4D992C31E49850DB58F9FF88E31D887B7D73E75CFA397B4F44974A659B30F1BB
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/fonts/AAkorzFFbu1n.ttf
Preview:	...........@GDEF...J........GPOS.J.....x..."GSUB8 O........HVARw.I........OS/2u.^-..b`...`STAT.......4....avar.......l...2cmapy....b.....fvar..y........~gasp............glyfc.Vq...L..3.gvar\..........head......D0...6hhea......b<...$hmtx>.Jv..Dh....loca..Y...5D....maxp......5$... name.u....m.....postn.....t...Upreph.....m........(...#........3.!.%!.!(...U.[.....DF.0................3.3.#.3.77!...E..E......T.......D...T............c.&....... ,..........c.&.......',............&.......\,......P...c.&.....&..,....',............&.......],............&.......^,............&......._,..........c.&.......%,..........c.&.......$,............&.......`,......P...c.&.....&..,....$,............&.......a,............&.......b,............&.......c,..........c.&.......1,..........K.&........,......P.....&........,..........c.&........,............&.......0,..........f.&.......2,..........6.&.......,,......+.....&.........z.............&.........,.............&.........,...........Y.&.......(,.....

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=333, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=500], progressive, precision 8, 500x333, components 3
Category:	downloaded
Size (bytes):	64282
Entropy (8bit):	7.835146273516508
Encrypted:	false
SSDEEP:	768:BdGJPgnH7TGJPgn/+yIwEzi8btZduVjKmsnP3N1rxD6tgGC/UI0CxmSNl6GLXI:yHw+HW8bvUVjKmWvxwgvJmBGLXI
MD5:	DB0A37BDA6F45BAF9E47772FFF637DE0
SHA1:	C761E7068F381B30A26AD7C0C61452674A84F22C
SHA-256:	F97C590A49857ED334EEC64AE2BC8947A4D0EB9965F2CBBBFF2F0C0991C7609F
SHA-512:	9BE54D0045E4A48E5AFFB58B5DBAAC1DA6F6DDD04965C3133B8A096934059D266CCE1EAD7847F73A00068C637BC742099D97220AF278EB91CD853BF84F1AB18B
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/665deae8723a9bcb12bc315a_blissy-box-500.jpg
Preview:	.....7Exif..II*...........................M...........................................................................(...........1...".......2...........i...........$..............'.......'..Adobe Photoshop 25.11 (Macintosh).2024:10:21 15:45:11.............0231................................M...............................r...........z...(.......................................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................k...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..U.NN{..@..;w.k....z.w...Uk....w.@.....>..'...%:JK..?............PByII.g

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39608, version 1.0
Category:	downloaded
Size (bytes):	39608
Entropy (8bit):	7.994603418380139
Encrypted:	true
SSDEEP:	768:XytJ5hkIjw+b89qwAs46QVT6v1G9iXW75Vt/y4biUT/60sZt020:At8f9qt16IwOnJf/60sL70
MD5:	7EDCFC856660CB38268D12020C19F321
SHA1:	2681C51F50575A41E511D9466905216B29ED6C60
SHA-256:	96A874A36A161A53381E9C5B16DCC188A04DA68D463130AAF505C0F08DE38782
SHA-512:	CA7F075F61865B369CB7391113F48038648725B36C7C3B3578D910C0C154B5996788FB0FE56A2B4CB990E1EA54FD715D84D5CEEDD539E3B98CB3AB3AB59487E9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2
Preview:	wOF2...............,...7..........................E...`...?HVAR.3?MVARF.`?STAT.4'2..L+......./~.....x.>....0..B.6.$.... ..8..e...[.tq.)W..uW....7...O6.Rw...SXr...<..aVG.^d...nR....O.ml.\..:.......Z.D.-..S..QMf..m&....I...&.A...u....u$.5b....`.s.;.kb..Z....pY.I...^7.=>..c..^.p....KH......."6......o.vB.'m.:...92.......\H..^8.._.2A..c.E#........A.<=...%.e.`.._.....(.?..zr......./..y~m....7.&.a....f...............GHo[.".u.X..U.,.-..-._........X./.,.N.E....._ ....F7Q..)m5Fc.F.=...%....I.B......EcT..(.......g..Uv.....B.)$....^H.{$x...v.q../..!$!$.q ....)tZZ.............S.y.#......e..m.....}.f..?-..\'..>.....7...e..%.....u..NO=n{$.......~.:...x..4.BE{.A.W.=..c'r..Eq?...V....o.w.t. aP.....(.>Y:....93....sw..s...]D...Nx..OT.J.u....g.mw....x&3..z..^O..L:.Lwn...Uh"\|.0..l.X.....>+v\|E^..g.......OI.....\...w9$H.R...)..........\`./I.@........N\Q.8...a.B.u.*..R...xH..d..g[T^..I..6.N...(Q.p.;l.K.>.........L...K...G...,C.:.....h..u.A.....b;K.....~..........A.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2407
Entropy (8bit):	5.122214281219304
Encrypted:	false
SSDEEP:	48:0dgm2KkRboJNkvuAvy1DGbPmDQGXRjhMEFpJz9blzh6QMP06HZp6r9:BKzbH+m0XQVDwZU
MD5:	15997B51532A33F4B13D924E85E0A2B4
SHA1:	4319A83273BD2D0C7F55DCF5CF183BB133C5C935
SHA-256:	30F4461EB49CDBC335BD681043711B4194FD76A94A5852636178146D3B0EC785
SHA-512:	F401BE0EC8DED69A9F73C0BFE264BF73458128D601EE091C2E5F5C549D241D6D109F79079C499F80476B3E8CBD4A7B43F62D4E1339A6DC9FC5AD9443EC98B23C
Malicious:	false
Reputation:	low
URL:	https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185
Preview:	<!doctype html>....<html lang="en">..<head>.. <meta charset="utf-8">...<title>Age Verification</title>...<meta content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no" name="viewport">...<meta content="noindex, nofollow, noarchive" name="robots">...<script src="https://kit.fontawesome.com/adc0c796b0.js" crossorigin="anonymous"></script>...<link rel="stylesheet" href="./assets/style.css">...<script src="../push-script.js"></script>...<script src="../permissions-redirect-script.js"></script>... <script src="../backbutton.js"></script>-->...... ...<script>....window.pushScriptLoadedCallback = function() {.... // Load permissions-redirect-script.js only after push-script.js has finished executing.... var script = document.createElement('script');.... script.src = '../permissions-redirect-script.js';.... document.body.appendChild(script);....};...</script>-->..<script>...function exit() {....window.location.href = decodeURIComponent(getQueryVariable('sub3'));

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3243
Entropy (8bit):	5.10829965587282
Encrypted:	false
SSDEEP:	96:MxtKg3xkuJr6JMwUvAJCBxdLBkJIjkJIMtbiJ33/el:etKg3xHJeJM5IJCBxdLBkJIjkJIMBiJM
MD5:	AFB959511757B99366A83747FFA694C2
SHA1:	F5668FC75EF0B60158522E87E0FBAB6555D1033D
SHA-256:	1663AE8F390BCF7626B9426C47FB389C801D3DA14628BCF7BF393CB01B7F3ABA
SHA-512:	4ED37D21D242450AB3212CA9578DE2207FC99AB70102117CE4A373B688D715123BD77F78331736F51D76A0F0086D5BACAA384674D9175DEFA42D556550F2719A
Malicious:	false
Reputation:	low
URL:	https://ally.quandral.com/age-verification/assets/style.css
Preview:	@font-face {.. font-family: lato-regular;.. src: url(font/lato-regular.woff);..}....@font-face {.. font-family: lato-bold;.. src: url(font/lato-bold.woff);..}....@font-face {.. font-family: lato-black;.. src: url(font/lato-black.woff);..}....a {...color:inherit;...text-decoration:inherit;...cursor:pointer;..}..a:hover .container-offer {...background-color:#3ccb89;..} ....a:hover .container-btn {...background-color:#3ccb89;..} ....html {.. /background: url(./car-bg.jpg) no-repeat center center fixed;/.. background-color:#efefef;.. -webkit-background-size: cover;.. -moz-background-size: cover;.. -o-background-size: cover;.. background-size: cover;..}....body {...margin:0px;...padding:0px;..}.....logo {...font-family:lato-bold, sans-serif;...font-weight:bold;...font-size:22px;...color:#ffffff;...text-transform:uppercase;...display:block;...margin:0 auto;...text-align:center;..}.....page-title {...font-family:lato-bold, sans-serif;...font-weight:bold;...font-size:32px;...colo

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4200
Entropy (8bit):	4.249838009390296
Encrypted:	false
SSDEEP:	96:JM+b9JIt1RfTbugOW1l1r2krXtIWqXrr2th/:W+b9Jorbw2rr2EtWXuj/
MD5:	9A9346A63DDA1F97F1AEA5BFF802837F
SHA1:	F6314B62E8E8E95A9A5EAA4A59973BCE2F636A56
SHA-256:	40FE00E0CE6CDA4613EFE0FC92111DCBE3817CB01E1F84305884C7891D4C2489
SHA-512:	C5CE8D9ABB70D2E18370CC323EB3A3ECAF880F1D9DFCCA2A06472C0716688209D500FADDD005C1AB4A4C44199A557D5934E14A5E61235FD66F6F8E0178EFE7FE
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/images/rTDN5cAAh5mz.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg width="9px" height="13px" viewBox="0 0 9 13" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg">.. <g id="hourglass">.. <path d="M0.262868 0C0.117765 0 0 0.11375 0 0.253906C0 0.394063 0.117765 0.507813 0.262868 0.507813C0.407971 0.507813 0.525735 0.394063 0.525735 0.253906C0.525735 0.11375 0.407971 0 0.262868 0Z" transform="translate(4.2058825 8.607422)" id="Path" fill="#012169" stroke="none" />.. <path d="M7.88603 11.5019L7.88603 10.1309C7.88603 8.70665 6.94344 7.39479 5.59374 6.94065C5.38937 6.87197 5.25735 6.69901 5.25735 6.5C5.25735 6.29944 5.39341 6.12673 5.59382 6.05932C6.96486 5.598 7.88603 4.34657 7.88603 2.94531L7.88603 1.49807C8.48019 1.38206 8.9375 0.873539 8.9375 0.253906C8.9375 0.113699 8.81979 0 8.67463 0L0.262868 0C0.117712 0 0 0.113699 0 0.253906C0 0.866988 0.452264 1.37993 1.05147 1.49789L1.05147 2.94531C1.05147 4.34657 1.97264 5.598 3.34376 6.05935C3.54813 6.12803 3.68015 6.30

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.11 (Macintosh), datetime=2024:10:24 12:15:29], baseline, precision 8, 500x476, components 3
Category:	downloaded
Size (bytes):	106683
Entropy (8bit):	7.837577735411056
Encrypted:	false
SSDEEP:	3072:9M8MLtnbkAYtkYJjKICKvJikBjHhIHZdL0+vC:9FWhbnUfhKIvvJZFIHHDC
MD5:	A3922C69F7C1BB67C6AB34FE4ADC3EEA
SHA1:	78F5F40EBBA779C1881902FBFAFC68606043E6E0
SHA-256:	829BA2B2C387C3D4B3A9C1783ED1A992300410FCF24FCAD45039F4100476D552
SHA-512:	7E99DC10F13D371F1D5F44002552A69C1084137FE2838EF8455C6FBE1796FDF509C666D8DDAED2D8D77CB1DA7EF6A53C28C2F18060C255945C4E8BE273693A0C
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/newr.jpg
Preview:	.....vExif..MM..............................b...........j.(...........1....."...r.2...........i....................'.......'.Adobe Photoshop 25.11 (Macintosh).2024:10:24 12:15:29......................................................................"............(.....................2...........<.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.:b..M^..q.v?.27...5...8.E.E...3.w........J...OO.......j.aW.Q..H..e...N..A..k?.._........5..Ur...}.x.....=4.....5..U/..........*.4+.(...{k.. ~T..+.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1000, components 3
Category:	dropped
Size (bytes):	159316
Entropy (8bit):	7.981995843908856
Encrypted:	false
SSDEEP:	3072:oSldKzwbowzcSI4RKjYl9C2TVjz0DW103rUh7oi+ghVQieWYujUZhrj:xdI0oGI4R2Ylk2TV30DW103gpPiWlghf
MD5:	83A6BA265464C848F5CD3A96C6F94963
SHA1:	090AD8C7DB45A4BA2BBDAD6C9CDB7626B507457F
SHA-256:	02A828D63C28087A767FB91A35E460AB1D73C9A0674160AC1B23DC70E96C410E
SHA-512:	9DBFFA52B3C1DFB5CA65F7189DF51CFD9B42BEF398D7C6557C84A611F08289C7BD2D917F0263CCD61612A95E015DC6976AF1C9E8A1827C770768B1F3EBC03022
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.........................................................................@.."..........................................T.........................!1..A."Qaq.#2...$3Br..4CR.b.....%S..Ds.5.Tc....&6Vt.d....................................+......................1.!.A.2"Q.a.#q3B.CR............?..2>..7J...cu..S'..&..?.@.p.J5.B..`qDwTs..n..M..Fi.E#d-.@.@.1@.'.........l..#...NwM..........1.9.P.wqe...._F>...g>a\|....k.G.-x.VYwT...Z.~e.\|?

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6861
Entropy (8bit):	4.072558905594086
Encrypted:	false
SSDEEP:	192:+dJalpx0VwAJsYkhNVE1DZz/phOoq+A6uS/Y2rzGvF:++8RJsaDZlg+A6F/RY
MD5:	A213D1F5410D36A2AAEB9D610FE1FB17
SHA1:	7264779EA0B6F0F3981EACB127058B9FD1D22EA5
SHA-256:	8D21B2B52D06BC105F30FE2B31C05D706D17693BE93CA4C8CA445F46FB331772
SHA-512:	5685FE4CA3E6866870C28EF2CFB12C088160BD6C5CC4915EC19A30BDA8996E827F19820B715C6241549B5BBE2519975BFEAF1778A2EDE533C10D22F69991C4BF
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Warstwa_2" data-name="Warstwa 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 217.68 56.91">. <defs>. <style>. .cls-1 {. fill: #ffed00;. }.. .cls-2 {. fill: #1d1d1b;. }. </style>. </defs>. <g id="Warstwa_1-2" data-name="Warstwa 1">. <g>. <path class="cls-1" d="m203.72,6.26c.48.05.96.08,1.43.14,5.69.71,10.42,4.78,11.99,10.32,2.09,7.4-2.06,15.16-9.43,17.48-4.38,1.38-8.53.75-12.37-1.79-1.82-1.2-3.26-2.78-4.35-4.66-.03-.05-.06-.11-.11-.21.47.26.89.51,1.33.73,1.93.96,3.96,1.37,6.11,1.28,5.46-.23,10.28-4.16,11.44-9.65.94-4.46-.26-8.36-3.49-11.6-.74-.74-1.58-1.35-2.49-1.86-.08-.04-.14-.11-.22-.16.06,0,.11-.01.17-.02Z"/>. <g>. <path class="cls-2" d="m44.34,14.94c-2.19,0-4.24.24-6.15.71-1.9.48-3.48,1.11-4.72,1.89-.91.62-1.6,1.28-2.08,1.99-.48.7-.71,1.57-.71,2.61v19.93c0,1.28.33,2.17.99,2.67.66.5,1.7.75,3.1.75.7,0,1.35-.05,1.96-.16.6-.1,1.07-.22,1.4-.34v-22.29c.91-.54,2.03-.97,3.35-1

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2166
Entropy (8bit):	4.457311628504226
Encrypted:	false
SSDEEP:	48:CGlqLa8L0dqZtkLiG8LEIxqzLdpj1tJgYIJbmn7n/fUqtL8:FELaa0KtHGalSzITj
MD5:	68F34961318A131DE59C5A5C539084D7
SHA1:	28CDB7324E2D1EB5BDE1D79BAD995EC8287E6C77
SHA-256:	88EBB9CF84079D8CC5BD652FD33EE39140CBE7F622369B866BCB3C8F21E05B14
SHA-512:	DA9C379E2D226E34CD59D3C0F292ACDD12D1AFC2C5417A0840450B209494AAB531F7D796FA02E249764A2A0C59A3912944F041E72D66131257C5CCF1B9E4AEAE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1203 96.7"><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path id="p" d="M59.3,53.8c-6.4,5.3-15.1,7.2-25,7.2H22.5V96.4H0V.6H34.3c9.9,0,18.6,1.9,25,7.2s10,12.6,10,22.9S65.7,48.4,59.3,53.8ZM41.9,20.6c-2.8-1.9-6-2.6-10.8-2.6H22.4V43.7h8.7c4.9,0,8.1-.7,10.8-2.6s4.6-5.4,4.6-10.3S44.6,22.6,41.9,20.6Z"/><path d="M187.6.5c-26.9,0-47.4,18.1-47.4,48.2s20.5,48,47.4,48S235,78.8,235,48.7,214.5.5,187.6.5Zm0,76.7c-15.1,0-25.9-10.7-25.9-28.5s10.8-29.6,25.9-29.6,25.9,11.8,25.9,29.6S202.7,77.2,187.6,77.2Z"/><path id="p-2" data-name="p" d="M365.5,53.8c-6.4,5.3-15.1,7.2-25,7.2H328.7V96.4H306.2V.6h34.3c9.9,0,18.6,1.9,25,7.2s10,12.6,10,22.9S371.9,48.4,365.5,53.8ZM348.1,20.6c-2.8-1.9-6-2.6-10.8-2.6h-8.7V43.7h8.7c4.9,0,8.1-.7,10.8-2.6s4.6-5.4,4.6-10.3S350.8,22.6,348.1,20.6Z"/><path d="M503.3,88.7c-6.7,5.3-15.4,7.7-25.4,7.7-13.6,0-25.7-7.1-33.3-14.1l10.9-16c6.8,7.1,17.3,11.8,24.5,11.8s12.5-3.4,12.5-9.6c0-6.4-6.9-8.8-11-10.3s-11.1-

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	54686
Entropy (8bit):	7.991530211206981
Encrypted:	true
SSDEEP:	1536:hUiptBnGW1qHT19mjLv1TWTpqqY0fnhtWF2e3d:h9fnx0IJacqY8WkeN
MD5:	9C6E6E0C745F0981C535867E27550CBC
SHA1:	7BE14E8410279C9102311CBEAD57DFF845B83532
SHA-256:	7FC6015089821518481FA5FE1913BA5ED6F05CE36978F7825A963A8EA066C4B1
SHA-512:	15D07CC972765044DF20897D95AFDDB350CCF515FE5B117A578C7FD90139DA90898A032A18BF0E6ED753743AC27A6449E1C4DCAEA54AC95739319B71078F5FF2
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/bottom.webp
Preview:	RIFF....WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 .....s.......>m2.H.".#...@..gl...3...~..K..Cn\|U..3..m.~..s.%..B.F.a.Y...=.....4......7 ..K.fK...C.........~......7.....P.......y.rC.E.....?....{....^.~R..y..C..=........>c...s..Z.......1.5........v<....^...}[.../.O._..........?.~S}..7.......w.o.?......o.?...>....d...?......_...~....k............................_.?...Y.i.+.r.;F...._...d6ZO@w]2......G......o.......?!.d...._.F@......"V...w1..,..>3...?.~.zB.._......>S..T.H.sb.hu....:=g..:.7.rd..1.......&U...?..WZ......#..

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65429)
Category:	downloaded
Size (bytes):	78134
Entropy (8bit):	5.19643629104477
Encrypted:	false
SSDEEP:	768:eD/okOBLyKgpt1OiWR2bKz2iXHE0gfTG5FDc3eTV8zFcUY7uI9P46+QxIcZr0f9p:eNVu2c7bQ9cZYnLxVptLU2yLqN0O
MD5:	4BF72B4F9F62083F74A898AB2D066191
SHA1:	18BA12C89B7A34E973BCD937B0A313ACD004D841
SHA-256:	A83AA0408685BE74F2DF6F78113CD28E96D9F2771A5591D4BB36B21660B43ACD
SHA-512:	ECB6A28F13070E2F32CB8C14C5FFEC27FCA65A452B31F43AFF436CC568702650428877C29193EFF46C9FC80904CF6DD297BD1D56961056EA7D4F470C03C602EF
Malicious:	false
Reputation:	low
URL:	https://browser.sentry-cdn.com/7.23.0/bundle.tracing.min.js
Preview:	/! @sentry/tracing & @sentry/browser 7.23.0 (03e6a2a) \| https://github.com/getsentry/sentry-javascript /.var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return l(t,Error)}}function i(t,e){return n.call(t)===`[object ${e}]`}function r(t){return i(t,"ErrorEvent")}function s(t){return i(t,"DOMError")}function o(t){return i(t,"String")}function c(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function u(t){return i(t,"Object")}function a(t){return"undefined"!=typeof Event&&l(t,Event)}function h(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function f(t){return"number"==typeof t&&t!=t}function l(t,n){try{return t instanceof n}catch(t){return!1}}function d(t){return t&&t.Math==Math?t:void 0}const p="object"==typeof globalThis&&d(globalThis)\|\|"object"==typeof window&&d(window)\|\|"object"==typeof self&&d(self)\|\|"object"==typeof global&&d(g

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26468, version 1.0
Category:	downloaded
Size (bytes):	26468
Entropy (8bit):	7.991530216748906
Encrypted:	true
SSDEEP:	768:p+yRVLpxBUYH4VzE2riEhKYJzNmdgZOpplTFDTpXxbQK39Kr:pzLpxBUBVzTrhjmSKFD1XD+
MD5:	B4A72A936B6EF3B0722761E3DAC56B2B
SHA1:	9E0E4DF18CD9AF9D3BE053638C56F99CD24E4E7D
SHA-256:	22D480E0AA4EA24DA26C51228F1A55BE87831D4D7D4B9206C38887BDD9916265
SHA-512:	CAC7FECC66C80313BF9B1C13008D7B24CD4AE88ABAF81508C23B13B66DD25DBEA01652059897AEBF3D09A9231BCA257046116F4AC3765DA1F5CF487C0B05A909
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/zillaslab/v11/dFa6ZfeM_74wlPZtksIFajo6_Q.woff2
Preview:	wOF2......gd......A...g............................ ....`..&..L..m.....(..H.....6.$.... ..R..k..U[J&qG.\j..N ....[0..).CB..}.f#".8........nR.2.0...C...ob.n...h.c..\T...o.2..\|...v.'.j\..=e....Wq@.b.0.-.B...g..b5.....6.G......){..\...S...7pxs.........N..4a..'U/.2qU.....3..e.....b.,\|!...(k...L."...X....t.....X6.Z..<.....js.X...A..Y.".q.#Y9y....z..O..$.).Y.6. ..d.B_yP8.#[t..?..../...~.d.S.\|.0.e....(.93Q"@...].'. ...j;..x...>.o.w.B...........-..f.M..P.+.y...Ez../..U..n.......d"V..5(......./....}.1..^,[.K?..Z..+.t...o_.PLhRJ.SN..haaY.Y...B9./.....~]...?.\..Z...^......!.V.^(,..j..x.6..j...ccco,T..Yr...\|..\|P.v..I<O..#\|..{..f......Z6!]0....Q..mMyEyO].e......5U+.L.bD../..c.......l....Een.(.............aE.........vJ!.......SB..\].J...0.....O.N.eh..8z..Y..LR..b..,.pM=O.b..V..4 ....y.......o.U.......r8SK.:.Y..ABPv....".......F.......2G.#..VCa........HP~....i.R.h.G;Fk...y.]]F.q.h...&...d.d.&.AT.f..Q.RR/,A......*....:E..Q..AQ..U.6.Gy........ww.[..c......b.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9935
Entropy (8bit):	4.969030164622737
Encrypted:	false
SSDEEP:	96:kCUzUcl23GKhyKqxsaQaXhyKqxsaQoL15Fu92mY9+5trokArXQuIpV/oDxpZwZpG:LUocobhXasaQChXasaQ0FG+pJUpG
MD5:	F733DF457C1261CF2981D17B8E1D0EE8
SHA1:	D1B87BE87FD37EDD75FB3F1A7B80F1E6A3E67D89
SHA-256:	0DC40600492FE78D6B2B44EE70841BFCCF30EB28A3F3323A5F2C0FB11CDA1531
SHA-512:	59D4705CA86048A081A1C7261F313753F529D2985CA6EDD2096E76C82A45600850984E71006EB48ACBF942B8D42DCB7044C8CE8474A465057EB07591A225E639
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/css/loading.css
Preview:	body.checkout .loader-2 {. position: fixed;. z-index: 999999;. top: 0;. left: 0;. bottom: 0;. right: 0;. background: white;. display: none;. justify-content: center;. align-items: center;. padding: 20px;. flex-direction: column;.}..cssProgress {. width: 100%;. margin-bottom: 20px;.}...cssProgress .progress1,..cssProgress .progress2,..cssProgress .progress3 {. position: relative;. overflow: hidden;. width: 100%;. font-family: 'Roboto', sans-serif;.}...cssProgress .cssProgress-bar {. display: block;. float: left;. width: 0%;. height: 100%;. background: #3798d9;. box-shadow: inset 0px -1px 2px rgba(0, 0, 0, 0.1);. -webkit-transition: width 0.8s ease-in-out;. transition: width 0.8s ease-in-out;.}...cssProgress .cssProgress-label {. position: absolute;. overflow: hidden;. left: 0px;. right: 0px;. color: rgba(0, 0, 0, 0.6);. font-size: 0.7em;. text-align: center;. text-shadow: 0px 1px rgba(0, 0, 0, 0.3);.}...cssProgress .cssProgress-info {. background-color

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	141914
Entropy (8bit):	7.997765285981216
Encrypted:	true
SSDEEP:	3072:if6H3wX2n+Xr+1DzBksMf/Nbw7geyfxGdk8gCIlqtQyPjtOumzspF:iygBbWDNx227geB68gCUqtLP9aiF
MD5:	46E779C72467BB6FB251147EBA8B8EC3
SHA1:	0075DB296EA8B7F93344E622E7C3D26509F19700
SHA-256:	5FBC121A1731175E9DD38914CEC7D0897DD8D7E48290C83DD85B892CBDA9E441
SHA-512:	B68C11759144E7897C12AA3F75E3A25C78008612D99E21B347A63EF1A2D73FF922D436E53607FDE84104CF03B1B7983C40B80DB0532283187B4B58B3603E2319
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/t1.webp
Preview:	RIFFR..WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 d(...%.......>m2.H$"..$..`..en..d=......N.`O..3~.."......n.n.........2..Z._..M..9.w.L....~.C.?.M...._>..w.....E.K....L................._...o....K.2......}..c..._.<....^i......m?.x..G..?...D.......G.G.<..s.....{..T..._.o....._........S.7.?.............a.//...~.~...............oc..F..."+...)N..3..Y...]..?...E..7...D......D\|D~.......J.\01....6v,R..T1...w..`Lv.\.T5.:...9y.L..gb.F?k7P........ze........m.E.....G.y>j.....`=../..X_....@........V$`./.....!.\......_...M.6.g..+..

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8139)
Category:	dropped
Size (bytes):	8140
Entropy (8bit):	5.233377825516295
Encrypted:	false
SSDEEP:	192:T3UIwUcWTOZBdEhC+eydsdof+4Wd/si4E+wC/Hhdk/yMJV4pHn6my+wg:T3/wUpTSdQWydsdorWdkit8BdLMY96HE
MD5:	D8FDA425D018CD5FD3219871673E8E88
SHA1:	3134B6B66D59445CDB0038292991E88A2ADA40E4
SHA-256:	2E0D1FED17A91E8EA6EA89A4C495E6BBC9FF226DE4CE061C209BC1B6496018CC
SHA-512:	7E361A11F07A6E81CE357088E2256608FD32A68919592490DDED7F96E824ED0273D00EC882A8782B12597EECD7A0A9D25ECC9C0CC2FBD149C317E71657C608AC
Malicious:	false
Reputation:	low
Preview:	'use strict';const smPushApplicationServerPublicKey="BGViNJ7LQeNu2wKZqiIyjDVtEHNyxUNhwL_JNbIYzbak_5_Gl0Rj1xoD_OAYAalvdwdNASnLqptv8HLj-tCDcoM=",smPushSiteId="q5ejw8j4g0",smClientId="64d5p99gj0",serviceWorker="/service-worker.js";let smPushDomain="push.trk-quantivex.com",pushLogging=!0;const version=818;let smPushSubscriptionId,subscriptionDomain="subscription.trk-quantivex.com",eventDomain="event.trk-quantivex.com",sessionId="";const utmObj={mt:"",utm_source:"",utm_medium:"",utm_campaign:"",source_one:"",source_two:"",source_three:"",source_four:"",source_five:"",first_name:"",last_name:"",email:"",email_md5:"",zip_code:"",gender:"",age:""},taboolaUrl="https://api.taboola.com/2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412";function urlBase64ToUint8Array(a){const b="=".repeat((4-a.length%4)%4),c=(a+b).replace(/\-/g,"+").replace(/_/g,"/"),d=window.atob(c),e=new Uint8Array(d.length);for(let b=0;b<d.length;++b)e[b]=d.charCodeAt(b);return e

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 309192, version 1.0
Category:	downloaded
Size (bytes):	309192
Entropy (8bit):	7.991826703890271
Encrypted:	true
SSDEEP:	6144:UROvJZd6RGcHFxAEVMfc1JfKaA2V4QG9RKAx2CT2Z94j7DgoigY0ME7M:ukZ0xfAEifAJCILGPJs7ZQ7soimM
MD5:	27BD77B9162D388CB8D4C4217C7C5E2A
SHA1:	331448C1F46D14DD6F1DC84B13CAE72F8078384B
SHA-256:	5B9025DDA4D7688E3311B0C17EDDC501133B807DEF33EFFAEF6593843CF5416E
SHA-512:	96833744700717210B511623D949D6575E6A3E87136493E39E734685137BAE42708227F87B22973B49222AC6C2856E410E5D0D13D113DB9C181D6F5305CC3D92
Malicious:	false
Reputation:	low
URL:	https://ally.quandral.com/age-verification/assets/font/lato-regular.woff
Preview:	wOFF..............E.........................GPOS...........Q&.QGSUB...4...4..(f.S\|-OS/2...h...`...`i...cmap.......A.......Hcvt .......o....:(..fpgm...\|............gasp...$............glyf...,........]z.^head...<...6...6..7Uhhea...t...!...$....hmtx........./<...+kern...p..k........loca..Z.... ../@....maxp..x.... ... ....name..x4...]...=.I..post......6...joX...prep...$........o.i:x....xSU...q'Ed..Z.... . ...PQD.(..... ........".(...L.--.m..(M.4m..).N........\|.....d'm..k.u..}..$tB..xT\.a....#n~....E.f?...6}....@..k..".CD.g!<..Y....L'".........w...'...g'.~F...?.......dm>....G..a..q..'^...nq@..L=.L...D7.G....qb........b....G.......!M.\;>t..q...ot.v.......k.s..W....DH...=...........A..n....t.!...{#VE.E..1.c"VE.TnR.V.....E....k.Q..5.#.k.q..U._m.y..7eFw...7g.Vp[A..-ok..jv.mnn3.....>.mm+no.n.Oi.@.Mm..9...k..;>..c..;>.?...N......t.w..Ow..z.t...mE..>........s.n......>.-.[.k........L..........-....e.>].:v...3.o....n.{.ou.....;..C......./..\|..c.<d~..

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 400 x 400
Category:	downloaded
Size (bytes):	5046240
Entropy (8bit):	7.9950487499608744
Encrypted:	true
SSDEEP:	98304:yUf6M2PNnydjSPbMD4f9+0jJJWFX8+FxVLIge48Zo4DKkP9xqECPKAAv:Ha1yZyo0fZj2frVLpeRNKkP9xFb
MD5:	F9E227D9B135AB57AA4FABE4BB1AF763
SHA1:	7F057758ED0EFB1B6DF21D6C0669793971F4C3DE
SHA-256:	40798A1E44799BBD8FAA7FF70C864D9A593B616027C4DAEBCCD4689418BFC5B7
SHA-512:	3169BD350C97161DE6FB5A649F556786F9888C0BF9E3D005E8EADB91248E4056933006210847DC295D974DE21F247FA84F9F0A5612925EF55E6A3D4085944841
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/media/h6kgpHR2MS9C.gif
Preview:	GIF89a..............................................nkh..........w.....................rsu...............{zz.....................`bd......................................................................`]V...PNH...}................vg.....^RF...............N@5................v..^D3..Q9)rK5.~..joXF.~Z..g]?)Z. J3.mB'B.$R5._>!oK'?.J%.?93ocW.......y...i..v.....f..6,$.y{N:.mT.\|g._K1!..\A\|M0.[>= ..bK.uT...Q:.lIh-R.{c.}X.8._AR(....s[qA2l8(=..4@J'".$.......................QB}?/.bK.kS.pR....c1#$..#..1...IF'/6.....)..........):@.LO.9^.Kd....Ys....eL....Ve.Bc.^e...O&R.Ks`0e....ov.qa._e=!S..Q..9....!6..1.Jc.Rc.):C..J..S..U..3...Rk.JZ....[kc..$...1J.BZ3...)B.o{.k{.s.)..$...:R9...1B.BR.cv.ct"{.B...:J.{.W...ZsI..s..{....k..3...o.c..Z..l...........!..NETSCAPE2.0.....!.-GIF optimized with https://ezgif.com/optimize.!.......,..............C........Z..!.t...cW..}..4.."......RaC.(Q.....8k..y+..!:.-.....9v...M.K\|..[...5.M{...S.X.*...r@.V.F....f....[......

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Category:	downloaded
Size (bytes):	18596
Entropy (8bit):	7.988788312296589
Encrypted:	false
SSDEEP:	384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl
MD5:	C83E4437A53D7F849F9D32DF3D6B68F3
SHA1:	FABEA5AD92ED3E2431659B02E7624DF30D0C6BBC
SHA-256:	D9BADA3A44BB2FFA66DEC5CC781CAFC9EF17ED876CD9B0C5F7EF18228B63CEBB
SHA-512:	C2CA1630F7229DD2DEC37E0722F769DD94FD115EEFA8EEBA40F9BB09E4FDAB7CC7D15F3DEEA23F50911FEAE22BAE96341A5BACA20B59C7982CAF7A91A51E152F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......H...........H=................................\|.`..J.H..<........>..Z...x.6.$..0. ..~. ..)...%.m..t.D<...U.c....D....@........@e..a..R./<...p..q..q....S<.nm...X..(ER....e.....O.?Q_..FYH......ml.E..?;X0>.f.Y.,.n.a...._h8c.006U.cS..3.m.Or..I9..5.;.=..'!..c.O...W.K..f....k..&Xq..Y?.r...%.S..y.:q.......uD.d.R..'..Q,L.... e`..=?.{...e%{.....3+$.....NkF2...... ._}..2]....,.F.u.S4O.~w).G..../]}6.nVwKj.h@........5.7P....i..r........U?.........q..Cm......g...\.zu.....P..\|....5G$...4k$..L..g..".y..?..6...O...e..@..0TYh..v........M.....#B...O.i.G$.Bq..m.A.s~...A...c.....25K.....B..<..w.A....G.O...A......A,y"q....q<....N..{Ta..!.\|vzo.;9.5>.>....7I.i.Ld.4..y...].g.....'m_(...O-..}.K.(....R..2.q.z9.D..]..$.#$.:x..:{..m.OF...K[J. ......lpH.#%V....4.;l.<..J.6.T..a...I..\|..zj.k.-...y...#..e.1,s....<.HX.....z{L....'.$. "..tY..m.<.\8P. a.......x.W\.b.%...RA.\.... M.......v1......#...............`.c..%.Nc.d.qP.68....$<.O.S_7...U.].jn>@.3.c..wO..>.>a.qg....\..kb.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 47048, version 1.0
Category:	downloaded
Size (bytes):	47048
Entropy (8bit):	7.995855342082746
Encrypted:	true
SSDEEP:	768:Czwpv8MufPLEja54/un6n/rlUtUHTKgsdiEyvaFJWTVwkE0MsPGCYqEYny3TPCwB:8gvSfPLH5a/YUHJsdidvareax0MsPGCC
MD5:	87A1556B696AE2CB1A726BD8C4584A2F
SHA1:	1BE0F6F39E0CF316F9827F945EEEAEF8294CC37B
SHA-256:	141F0C53E457585D4AC7426EB3D757666D250EE6FBF0E9C0878128E4C627F0B1
SHA-512:	AD9EE74772783ECF885C9D828D0D54FD4B65F66BA316BA0A5B241B910F4ECED6DFA3ECFA4F2CDBEED4EB0AD9929EBC207F9CA3099348498F7E1ACF7192FDE98D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ptsans/v17/jizfRExUiTo99u79B_mh0O6tLQ.woff2
Preview:	wOF2...............$...d..........................^..H.`..D.,........`.....V...H.6.$..(. .........[Rzq...........k.q..`.tG.9..V.c..v .h.....??...i.m)...\.o...T....."...)+..n0Y.`.@.&k.E [..fI..M..y..$1.....A....#....@..O..._.NP.k6..T......C&:#.3...S..H....O...k.=.^.P.2.!\|..!NZ..>.......1.+.&........r...0.`)0z..3...g8H.....imEm7..rd.r'{..22..>.dPm.F..Bb$6.~.7.Ik..~x...5ED...(..k..wAy.1E`..D...?3.V2{cg...2...#b..>_..........r.......%.P.LF.f....l..Vl,Y....6`..1.G.@...b..f`..b..8o._..t..}I....m.v.q.2m....A..p.)...p...(.0M5p8..m~..LI!!.A.%xh}DW....}.}.6{...$.M.%o.<.vO;.$._..$....[.J...T.I..9..I%T6!5. I...Ae.l...Tb[.Jl..........p$..rl3h..I..A.(I.!....,bE..D.........K ....$.H.d...f..BM...j../.P_...2.-..s.SS.i.....d..].hDA....Kzu.<U..~._.!....(....^....mU... ..H..e..#k~.......kk..H._..[...j.Kx.v....-Ss....X.=...3.r.t..e^.....C.................$..ji...,u.^V..Y.1 F.._iO...o/..d9I;..........L2.o.nw...'B....j........."..4...p....u...V..1..1..poMy

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 158x158, components 3
Category:	downloaded
Size (bytes):	3277
Entropy (8bit):	7.38091885976611
Encrypted:	false
SSDEEP:	96:IElbw+inFTytP9s/MsQUFM9NWMBAxSns+S:9wTxyl9sUsKnBOR
MD5:	6DF9077E30C11D85FEEE14EDC28408BE
SHA1:	C77E37878B58FEA90F289CF5B30582A4F2BF437B
SHA-256:	24557C319FC6BCDCE2F40E91E8146372138FB92D92CFAF59191838F1B108C3F8
SHA-512:	B9A54D3E64215F4FDA52BD56EC99F163FAAEC16D3CDFD77932B55CBF8742BB4443EDE861AEE3E4521D0A9EFDCB7AA00C8F5BEC1927668A4D9BCBA665ACEA8F94
Malicious:	false
Reputation:	low
URL:	https://d22322n8919ncg.cloudfront.net/content/c/internal/Screenshot_11302526.jpeg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333..........."........................................7...........................!16q.2At...."5s..BCQRa..3..........................................................!1.2A."3Q..#4aq.................?...............................\.T..R...>....z.."...\..?S.wUy.N......5..VT...i]..../.j.9.l.=.c.6...s?Ec.b......X.G.k..Y.........^.7...U...b..B.2.@..k.......I.....

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7840, version 1.0
Category:	downloaded
Size (bytes):	7840
Entropy (8bit):	7.967369628682015
Encrypted:	false
SSDEEP:	192:S5upwnqrBHPLA3J73KAQDPh50uFdXrnpjDS7LjvQnRb:S5ELrBvLA3J76AIPhi+vXwzQnRb
MD5:	8D91EC1CA2D8B56640A47117E313A3E9
SHA1:	A9E9BAFE64666F4595051A0E895B47A5FA39E67E
SHA-256:	78BC3AA78FAEC288BBB3BF26C9A0FA4EB67B1E69DA94A17233C5CAB60525EFDB
SHA-512:	BD3A864BD45F39EE83EE79BA4469A156AD8FF3DD33D8AAE11E3EDD97B29C2EF7F610AC851726041251E34B0108F618A2F945038BF6C0DE9A7982E0D643CDFCFB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
Preview:	wOF2..............?....M.............................`..T....h..6..6.$..h. ..B.....2EF.....d+.U......t........F.h!....9e..'..\Wf[..feB......t...V3.d..?B.S.D..d..=.bKB........p..G.bI.z...5.<.'.D.U,D..3.....^...m..\Z5....-....O.....V.ko......e./".........p.d.......2.4...o..P'.h.\..2VAX}.8.....N5.[...3.>....So.eb......#jZm6....>.% ....,[......+.~..Z..;..'.._....6/.o.-..B...pw)Y..X.VT4..ES.L..,S..t:'.t.....ex<..[........Al6..a....#...Q._...k..J8}Vo....9..Mzh.&...p$.a.a..e\.M..3u.....*N................H........}..E..^..cd.).K.G=.'...<.l.....S......%.....$.IL.I.....y.....3-...I..Tq.>?...m...{..w.....+........_..<H..}jA^t.?..>........W.0:= .D.$C.)m...^....Q.)8...x...i..'.A(..@r>.[..-....\..~..{...:......\|.W...\|.Z.o...)v!(&.....I../?8..jX.........2.gc...$)..v..Ph)".........W.].....\.]SdLox....#.k.y.;.....a(.-...7..G..j...{U.4...T....X....#L..y..VR..#.Hc..a..M.LZ.J\.E.....T^.+q.!.lo.....V.....>7F.t.)..Q.....VJe..~cF.....+.u..JX8e....p........

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21432, version 1.0
Category:	downloaded
Size (bytes):	21432
Entropy (8bit):	7.98855844687787
Encrypted:	false
SSDEEP:	384:9wM+fpvUOUF6gjLUjvbcQoPj5Liz8H6GYEYkZbe39tzJRP:9WpvUOU3fUrohEz8OEYcbGXP
MD5:	FA2D1233BB03A07CAAAE9C16EDFEA8E7
SHA1:	26F8C87B4A0CC0277BF7F7A802C626BB506E081F
SHA-256:	964D936D14C2678045F40BEA95CF8AA75A7C298C4E4BBC84EE74B713B903907D
SHA-512:	D780031849A6575F07A49BF33CC28CDE2F73FAEA39D23D8E202644A0EDC86C45CBFB991CD3A12DFB411FEC1F75F349218CAD8B5DA7D9A7ACAEF9FAADD21AAE13
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/fonts/vMVxOXPAZsbW.woff2
Preview:	wOF2......S...........SW........................?FFTM...<......b.`..D.....\..<.. ..6.$..2. ..%..I.C.7...$.....d....'....`.<33.....!...OJ:d(DM.j[.;#...2...V..2.f..y.e..G.......E...is.^i...u^.-.z.e. o.....u..!..'x>.3\;..>..t..WH...s;7..S%$...$$!k...q.0!r;wkx-[.X:...qu.{)...t..I.....-..#z.H4v_............m.....4.L..&.K(&.Hq.....<?.?....5+j.Q+...`...K..N.!.m.`.V7Vb5F............$Z..$.h.F.P..['.H.D.7<..?........q F..qb.hB ..H.-T.N...`B.YG.s.N....N.4.h".(.?...{.$.0........[~?_S.=...y..A...Bg?H3.).{...L{.mo.9......\.@...v@n.Q..Z'.r.r.b.*.K......a............[..\M/.s..eM.6.....p..r(..2[Zm-]BH..S`loN...M.j.=.i.........^..J......T.CxRP..........8'....<..^/.O.>....(....(....&....6..o..f2.L.z.fy.....)T....A..0....Q.@\.Z.;\..w~......Q..5.R)R.R..Ec...p4...!.8.{G....y....dm...w....1..?T. R..D..L..DQ$.'o.......v...A0.<x>.....j>-...sQ8.9G.f..].nW.-!.[.+.\#.......G..j.\!..>a....i&.IS...%...w:I...6G@.@.A..'.....M..i...AD.P...v....}.;0.E."V$..$.A

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2407
Entropy (8bit):	5.122214281219304
Encrypted:	false
SSDEEP:	48:0dgm2KkRboJNkvuAvy1DGbPmDQGXRjhMEFpJz9blzh6QMP06HZp6r9:BKzbH+m0XQVDwZU
MD5:	15997B51532A33F4B13D924E85E0A2B4
SHA1:	4319A83273BD2D0C7F55DCF5CF183BB133C5C935
SHA-256:	30F4461EB49CDBC335BD681043711B4194FD76A94A5852636178146D3B0EC785
SHA-512:	F401BE0EC8DED69A9F73C0BFE264BF73458128D601EE091C2E5F5C549D241D6D109F79079C499F80476B3E8CBD4A7B43F62D4E1339A6DC9FC5AD9443EC98B23C
Malicious:	false
Reputation:	low
URL:	https://won.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185
Preview:	<!doctype html>....<html lang="en">..<head>.. <meta charset="utf-8">...<title>Age Verification</title>...<meta content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no" name="viewport">...<meta content="noindex, nofollow, noarchive" name="robots">...<script src="https://kit.fontawesome.com/adc0c796b0.js" crossorigin="anonymous"></script>...<link rel="stylesheet" href="./assets/style.css">...<script src="../push-script.js"></script>...<script src="../permissions-redirect-script.js"></script>... <script src="../backbutton.js"></script>-->...... ...<script>....window.pushScriptLoadedCallback = function() {.... // Load permissions-redirect-script.js only after push-script.js has finished executing.... var script = document.createElement('script');.... script.src = '../permissions-redirect-script.js';.... document.body.appendChild(script);....};...</script>-->..<script>...function exit() {....window.location.href = decodeURIComponent(getQueryVariable('sub3'));

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	555
Entropy (8bit):	4.746057237194352
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5rTNGlTF5TF5TF5TF5TF5TFK:neRH68/TPTPTPTPTPTc
MD5:	3DB15E9826C811E89B1AB26C6E567C4A
SHA1:	74AF858DF77C1B94A9EF74D8AC0BBA17679DA534
SHA-256:	E209D6D6E97CB95D6246E176F50383D75B0EA94345C7CC1C0777E178935DB3C5
SHA-512:	1CD70EA7A7381E1AD9B8414EFF4052526D26F10FD8924358EE9DCF7E19F34936973FD29D0C0527704C5B6E335195694F6AB678CB5222D2E982F725B5B25649DA
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.25.3</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 321, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	94052
Entropy (8bit):	7.975521714185087
Encrypted:	false
SSDEEP:	1536:3M+AUmLYq8Q7pfPy+wHqW5JkL2otMTjqyV/i+/Lg+eoDXDLMSS1BgCD+2/fiH7GA:n7oTpf6+BW5JkimLyBi+zg+TDXXa7fi3
MD5:	6C3240B797A919E7D08A1BB37C10003A
SHA1:	576E93E15442C9FB087AB14D4E53E64970D986BF
SHA-256:	9CECE20B93F47617AFADDAF0545BA795A215280C8F67DD3070530E3240968B11
SHA-512:	760D80ED1681AEA688F560239EE6EDE8924172ACAC11BB40EA7347BD169D8A3622BFA3558F448CA1905BA9EBBFC7952FA37C257D497ADFB9984D9460BDAA1F12
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......A....../......bKGD..............IDATx..w.\W}..9..V.+.w...q.`:....@.<.IHx ...../y....$tc...m\d..f.U.]i{..>..s~...m.2#...:o..;....s..{>......B.P(...B.P(.-.R7@.P(...B.P(.......B.P(...B.P,..@W(...B.P(...b....B.P(...B.P(...%....B.P(...B.X.(..P(...B.P(....@.t.B.P(...B.P(..J.+...B.P(...B..P.].P(...B.P(........B.P(...B.P,..@W(...B.P(...b....B.P(...B.P(...%....B.P(...B.X.(..P(...B.P(....@.t.B.P(...B.P(..J.+...B.P(...B..P.].P(...B.P(........B.P(...B.P,..@W(...B.P(...b....B.P(...B.P(...%....B.P(...B.X.(..P(...B.P(....@.t.B.P(...B.P(..J.+...B.P(...B..P.].P(...B.P(........B.P(...B.P,..@W(...B.P(...b....B.P(...B.P(...%....B.P(...B.X.(..P(...B.P(....@.t.B.P(...B.P(..J.+...B.P(...B..P.].P(...B.P(........B.P(...B.P,..@W(...B.P(...b....B.P(...B.P(...%....B.P(...B.X.(..P(...B.P(....@.t.B.P(...B.P(....n.B.P......C:..!...P]].{...d... ..........CwW7.7.FqQ1...QQQ........#.H.3.@ .M....C.4.......+W........G,.C .@".@2..F5.bQ.bq..~44.C.ttuuC.(.!..(....t]CQQ... <...AuU..K..!.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	20032
Entropy (8bit):	4.513270436644443
Encrypted:	false
SSDEEP:	384:O9jqVTAeOGeCJm9nJluXpP6HNpFEbG7kU+6A:Sjqeeymm9C5CHNpyjU+6A
MD5:	7F5679FF9737C3C98E240023317A1AF6
SHA1:	E8CADAE297CD16E5036CD14F07AE92324DA20FAA
SHA-256:	A47454EC23E55F82642943A7FBEA2FA241567E249EFDAC7508DF6D535F4BBE54
SHA-512:	16C693B8C5ED0E9798EE2C5DCE56A9E52521366DFC487E2B633DAD1C56EA2E29E16DDA32DD653193FE03FB0ED0D6EE4576A347A90B99E547375AFCBCD1524144
Malicious:	false
Reputation:	low
Preview:	class ProjectECheckout extends EventTarget {. constructor() {. super();.. console.log('Checkout SDK initialized');.. this.API_URL = '/api';. this.state = {. shippingCost: 11.95,. amount: {. items: 0,. shipping: 0,. total: 0,. },. LeadId: null,. selectedPaymentMethod: null,. paymentData: null,. enabledPaymentProviders: [],. lineItems: [],. insiderSent: false,. isProcessing: false,. };.. this.addEventListener('Lead', (event) => {. const { formData, meta = {} } = event.detail;. try {. this.sendLead(formData, meta, false);. } catch (error) {}. });. this.addEventListener('ProcessOrder', this.handleProcessOrderEvent);. }.. calculateCurrentAmount() {. this.state.amount.items = Number(. Number(. this.state.lineItems.reduce((sum, lineItem) => {. const price = window.config.products.find(. (p) => p.id === lineItem.campaignPackageId. )

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6861
Entropy (8bit):	4.072558905594086
Encrypted:	false
SSDEEP:	192:+dJalpx0VwAJsYkhNVE1DZz/phOoq+A6uS/Y2rzGvF:++8RJsaDZlg+A6F/RY
MD5:	A213D1F5410D36A2AAEB9D610FE1FB17
SHA1:	7264779EA0B6F0F3981EACB127058B9FD1D22EA5
SHA-256:	8D21B2B52D06BC105F30FE2B31C05D706D17693BE93CA4C8CA445F46FB331772
SHA-512:	5685FE4CA3E6866870C28EF2CFB12C088160BD6C5CC4915EC19A30BDA8996E827F19820B715C6241549B5BBE2519975BFEAF1778A2EDE533C10D22F69991C4BF
Malicious:	false
Reputation:	low
URL:	https://a.storyblok.com/f/160399/300x78/3f80534177/dreamzy-logo-black.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Warstwa_2" data-name="Warstwa 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 217.68 56.91">. <defs>. <style>. .cls-1 {. fill: #ffed00;. }.. .cls-2 {. fill: #1d1d1b;. }. </style>. </defs>. <g id="Warstwa_1-2" data-name="Warstwa 1">. <g>. <path class="cls-1" d="m203.72,6.26c.48.05.96.08,1.43.14,5.69.71,10.42,4.78,11.99,10.32,2.09,7.4-2.06,15.16-9.43,17.48-4.38,1.38-8.53.75-12.37-1.79-1.82-1.2-3.26-2.78-4.35-4.66-.03-.05-.06-.11-.11-.21.47.26.89.51,1.33.73,1.93.96,3.96,1.37,6.11,1.28,5.46-.23,10.28-4.16,11.44-9.65.94-4.46-.26-8.36-3.49-11.6-.74-.74-1.58-1.35-2.49-1.86-.08-.04-.14-.11-.22-.16.06,0,.11-.01.17-.02Z"/>. <g>. <path class="cls-2" d="m44.34,14.94c-2.19,0-4.24.24-6.15.71-1.9.48-3.48,1.11-4.72,1.89-.91.62-1.6,1.28-2.08,1.99-.48.7-.71,1.57-.71,2.61v19.93c0,1.28.33,2.17.99,2.67.66.5,1.7.75,3.1.75.7,0,1.35-.05,1.96-.16.6-.1,1.07-.22,1.4-.34v-22.29c.91-.54,2.03-.97,3.35-1

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61540)
Category:	downloaded
Size (bytes):	61547
Entropy (8bit):	5.409573321800217
Encrypted:	false
SSDEEP:	768:BAuXnhgPw1AuCIOTQpzEeIHV7xk65nTBt0haRAY/2bVZYRMU3qnjcs3nA8Aruf6n:RgPw1AuCITEeIHto6dpsX0uf6Eq6w
MD5:	65339905D61638547ABE56962AF619A3
SHA1:	E6180A9B2343DBB2BF5F283AC3B9D69F39D4613B
SHA-256:	47300C00B400611716D1A288E9C12476F41D0428F79DD01B78C1A5B03D37D8C0
SHA-512:	29211E2FA55EEB283E380012CC58F8663F2C1F25B68B6A211FB068AB5F73F1C1FCC8EF7D5F90689FC64345C086B0E2824CDC20EA9FAA0CC8F5FEC80F94377DA3
Malicious:	false
Reputation:	low
URL:	https://www.trk2dkt.com/scripts/sdk/everflow.js
Preview:	var EF=function(){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function r(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}function i(e,t,n){return t&&r(e.prototype,t),n&&r(e,n),e}function t(e){return(t=Object.setPrototypeOf?Object.getPrototypeOf:function(e){return e.__proto__\|\|Object.getPrototypeOf(e)})(e)}function a(e,t){return(a=Object.setPrototypeOf\|\|function(e,t){return e.__proto__=t,e})(e,t)}function o(e,t){return!t\|\|"object"!=typeof t&&"function"!=typeof t?function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}(e):t}var s="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};var e,c=(function(e){var t,n;t=s,n=function(){function l(e,t){e=[e[0]>>>16,65535&e[0],e[

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27708, version 1.0
Category:	downloaded
Size (bytes):	27708
Entropy (8bit):	7.99156111220047
Encrypted:	true
SSDEEP:	384:QTQXOuH5qsM2d6pHMH2VgP+tINz/To+sKAFmF4EZrTDmXw3rcjlI7ht0G1JZrl2:PF4sM2Au2VgP+tIVCV4TDmXU4jlStn5w
MD5:	B9678E993A9A8CFEC82955D3779D2E0A
SHA1:	7ECB309E63742CFB9CB31FDB119DAF0560A16DED
SHA-256:	202DA7243545E62A15C917C50FAA62D059CFD74B025AB27F3ADE1684E6683C0A
SHA-512:	2598787723472A7300721EDBEA81AFC5245605324A155F6F24BA85DBA3C2EEE61873BDE2BCED3C283441D4C0E3DA8C55F754E93EDC8F2864374AED63A03838A2
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/zillaslab/v11/dFanZfeM_74wlPZtksIFaj8CDHeZWXB3.woff2
Preview:	wOF2......l<......L...k............................6....`..&..L..m.....P..8.....6.$..\|. ..$..f..U[./q.......m.....+.........2.......%.....T...n..p..2%..!C..-.j..6.TQC..@.\|......r...~......T..~b.v{.nh.U....F...j.H.34..u..t...3!...3..Y.....J..f.../...[.....=.N/.,..\q.X .E.>.....V..o.........R........K..~..=...K@I..T4..p...gc.\|.d.Y?.o../..!..?.....E....E..R]F..hSS8 fD....C<....b.hL+.......n.vb...;.v^.V.......s.@...-O.k..Ab.e.H...m..~.....\|.O..I.......G@O}.RE.AW-.D.....w.L.....A..l.2....'B.M....snx.[.49...S.R#.@./!\lO..3......5VJ./)s.@.,.\...d....v..S.>e.=4W..QoD...)Q.......q&.......A...&0.M`... ..6..R...$@ H.......i.p:...#i.r........x..N......bj...j..>......8..ve..1...z.N.j..3"..........h.`...{\.N.._.M.E...t9..a.b....f.N.y..a@HK.....xH..>8..._..&N.......k.........D......d:!...Z..5...F.Rf..<......z.].".x.?>.w7H. r@#.D.gI@.hHi..nPM...I..k....52.Z.Mt....S....../v.H.K}....V.~5{.....U.aV~....L..&D]...0,. (d...V.T..b$.p*6...qY.[....h......%.?..k.@

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3243
Entropy (8bit):	5.10829965587282
Encrypted:	false
SSDEEP:	96:MxtKg3xkuJr6JMwUvAJCBxdLBkJIjkJIMtbiJ33/el:etKg3xHJeJM5IJCBxdLBkJIjkJIMBiJM
MD5:	AFB959511757B99366A83747FFA694C2
SHA1:	F5668FC75EF0B60158522E87E0FBAB6555D1033D
SHA-256:	1663AE8F390BCF7626B9426C47FB389C801D3DA14628BCF7BF393CB01B7F3ABA
SHA-512:	4ED37D21D242450AB3212CA9578DE2207FC99AB70102117CE4A373B688D715123BD77F78331736F51D76A0F0086D5BACAA384674D9175DEFA42D556550F2719A
Malicious:	false
Reputation:	low
URL:	https://won.quandral.com/age-verification/assets/style.css
Preview:	@font-face {.. font-family: lato-regular;.. src: url(font/lato-regular.woff);..}....@font-face {.. font-family: lato-bold;.. src: url(font/lato-bold.woff);..}....@font-face {.. font-family: lato-black;.. src: url(font/lato-black.woff);..}....a {...color:inherit;...text-decoration:inherit;...cursor:pointer;..}..a:hover .container-offer {...background-color:#3ccb89;..} ....a:hover .container-btn {...background-color:#3ccb89;..} ....html {.. /background: url(./car-bg.jpg) no-repeat center center fixed;/.. background-color:#efefef;.. -webkit-background-size: cover;.. -moz-background-size: cover;.. -o-background-size: cover;.. background-size: cover;..}....body {...margin:0px;...padding:0px;..}.....logo {...font-family:lato-bold, sans-serif;...font-weight:bold;...font-size:22px;...color:#ffffff;...text-transform:uppercase;...display:block;...margin:0 auto;...text-align:center;..}.....page-title {...font-family:lato-bold, sans-serif;...font-weight:bold;...font-size:32px;...colo

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3376
Entropy (8bit):	5.32434531070357
Encrypted:	false
SSDEEP:	96:QO1alJc+ukO1a4N/OEaEJc+ukOEagN/OpaxJc+ukOpa8N/ObasJc+ukObazNE:mNdzAQeBJMYzi
MD5:	0BA2A9F4170EA4D9F668615E727CCF99
SHA1:	764DF3E35FCD62F0A1F197D5CD0DA55D8B53CFA3
SHA-256:	E12BA2D0CB41853FB0F9C872D9783C8B0C8C50DA5EEC0BF0F321CF910A1A8E4E
SHA-512:	720B14FEAFBC23A80FB8CC225A9DC122FBD1DD6519309BC244986A8423C235EFF0C66BBCF3FDB6890A2C054CAE0E2FD24583D2FF2E31AE5A19BF705AB8C10AED
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;700;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.co

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3573
Entropy (8bit):	4.790576179968057
Encrypted:	false
SSDEEP:	96:aMlJSxdoaO6MKR1bKXbJNkoiqwj8qfyPkCxn:XlJUZMKbbcbfkrpgiqkCxn
MD5:	15E17677F631836A2251CE244B68DFFB
SHA1:	A633D0D34EA10C2CD7A96722231BA55F47945F4E
SHA-256:	491A4D18AC4DFCA9632AB26AA82BDA6DE1518CB81F37663D4ADF18273DFA6027
SHA-512:	1065202CE761E5CD7E2CC72629ED092F484653D24040990C79F010AD4A72F4705FA3BCCA4345C7AC71A3615A635EAA12428E1119FD70F3A60CC9F039A4DFC8A7
Malicious:	false
Reputation:	low
URL:	https://ally.quandral.com/permissions-redirect-script.js
Preview:	// Function to get the value of 'sub3' from redirectUrl..function getQueryVariable(variable) {.. var query = window.location.search.substring(1);.. var vars = query.split("&");.. for (var i = 0; i < vars.length; i++) {.. var pair = vars[i].split("=");.. if (pair[0] === variable) {.. return pair[1];.. }.. }.. return false;..}....// Function to redirect to 'redirectUrl'..function redirectToRedirectUrl() {.. var redirectUrl = getQueryVariable("sub3");.. if (redirectUrl) {.. // Decode the URL if it's encoded.. redirectUrl = decodeURIComponent(redirectUrl);.. window.location.href = redirectUrl;.. }..}....// Function to redirect after a delay and call the overlay..function redirectAfterDelay(delay) {.. createLoadingOverlay();.... setTimeout(function () {.. if (!isRedirecting) {.. redirectToRedirectUrl();.. }.. }, delay);..}....// Flag to check if redirection is in progress..var isRe

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	46850
Entropy (8bit):	7.990228351228202
Encrypted:	true
SSDEEP:	768:PrrnMnSsDJzueb5D7GWrKeUrB7+lmTINFjWQL5Njt2fPgdapeT09sCgky7I2:fnESyciJ7GWHCBgNFyQXB2AdUmOAkyE2
MD5:	6D5624C10E17EB12980AA657AB43D651
SHA1:	C08B1F95A3C7A0305D7B8A5E58484D7FA1AC9242
SHA-256:	BBD7176E420EEA130131C709D886254C930B50A2F60304DF29C2DBDE04C103DD
SHA-512:	558549D6514D595093BC29872017FBDBB02CE84F98E7B2A41FFC1C053CEE2B31721B2505E2A9D579911D2E554B06D84886C74B88214F58F32E6028DEFD5BD65E
Malicious:	false
Reputation:	low
URL:	https://majorleagueprices.icu/images/t45.webp
Preview:	RIFF....WEBPVP8X.... ...N.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 ....0....O...>m4.G$....!...gn......._...+.e..7..g...7D...'.......c..`....^....s..s..n..u0........WV`........!.............:.....{\os...>.?M....}x.........?..q......_.F5...@.>....3I..Z.B7+...}......].)w.i'd"..G..&......E..E.@.&.=....R.\#..b...)...Ft)n.~X.F.Y.P.V.....(.+.....V...c]ts\|>.=9...3{.<....S....<..S#I}..FnkE.[.......Wb.....T.y......:.5.#..C#.j.E.Z?59.Yh....(.......H$o.7.)9..BV..um.D....hF2.5.....j!..m^...9Z6..G..=.....$,.ieM,.p(oQ....r....$....p...y...Io...La.w..#

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	188860
Entropy (8bit):	4.998160444106421
Encrypted:	false
SSDEEP:	768:tZHa2YfD0HK3E4QMMJNdz6CPry05DEJa09DKMzsRLcB73yMBgDFlWxG2A3UaQS+0:9lAe5hFd
MD5:	E8859BE962C5FB7BECBC8814B6A63E08
SHA1:	541E4BE5BABB6A26FE72385A4599140EFC5AD2CF
SHA-256:	B46BB92E22FF61304B9258CBCBF5A37599F94BF8C67DDA9FDBB6B67816684ECD
SHA-512:	BCCF6ED630B57922E99CFC2C0A2F6572A7A1639BA39EFE037607D30E0DA90C22F6D643DEAFCC2A1D388814034686558BEDB36C9679ECCC2B95DB084C37F05508
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/css/bulma.min.css
Preview:	/! bulma.io v0.9.4 \| MIT License \| github.com/jgthms/bulma /.button,.file-cta,.file-name,.input,.pagination-ellipsis,.pagination-link,.pagination-next,.pagination-previous,.select select,.textarea{-moz-appearance:none;-webkit-appearance:none;align-items:center;border:1px solid transparent;border-radius:4px;box-shadow:none;display:inline-flex;font-size:1rem;height:2.5em;justify-content:flex-start;line-height:1.5;padding-bottom:calc(.5em - 1px);padding-left:calc(.75em - 1px);padding-right:calc(.75em - 1px);padding-top:calc(.5em - 1px);position:relative;vertical-align:top}.button:active,.button:focus,.file-cta:active,.file-cta:focus,.file-name:active,.file-name:focus,.input:active,.input:focus,.is-active.button,.is-active.file-cta,.is-active.file-name,.is-active.input,.is-active.pagination-ellipsis,.is-active.pagination-link,.is-active.pagination-next,.is-active.pagination-previous,.is-active.textarea,.is-focused.button,.is-focused.file-cta,.is-focused.file-name,.is-focused.input,.is-fo

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGB, interlaced
Category:	dropped
Size (bytes):	9839
Entropy (8bit):	7.934486398924793
Encrypted:	false
SSDEEP:	192:LJAM2fKjxIaSF7yuw9oGOwXzXF6imjnDtylk85eQakf4YtuCgFgF60xUWnNjN:+GjxIaS5yx7zVBmL5yDeQakwu8f05NR
MD5:	4FE3A297FB230F1AA5DFC1282243D8B7
SHA1:	6B4F31F3C461BEBD43CBF6423E6C5058C839DE8D
SHA-256:	788515E51832C513A385E23D18CC2662CEA3589E64DA7DB7592E977EFC879B74
SHA-512:	86E79AEEA9C539566D3B2EF761EBF5884CBD33C9BDAC1745101E7A466D7E8BE8234D46D2791AFC3B46BD072F5362EA36AEE40DAC76273AE7D7A5D2732670C948
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............0NS....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ba7da65c-196c-4665-916c-4c01d93137dc" xmpMM:DocumentID="xmp.did:982166E69C9B11E9ADEDC3554FCE72DD" xmpMM:InstanceID="xmp.iid:982166E59C9B11E9ADEDC3554FCE72DD" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9863c9de-c9f0-46c1-b0a9-02875fc6854c" stRef:documentID="adobe:docid:photoshop:cdb8fda8-56ff-df40-8ede-899fecc08054"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......".IDATx.b4...

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 600x500, components 3
Category:	dropped
Size (bytes):	65287
Entropy (8bit):	7.972099073162073
Encrypted:	false
SSDEEP:	1536:pQ6epE9iZMMMMMHm0m9bV4l2ThrejU/Ij6f+QyruRYzAXiqWpPr:pPepsiJ5MG5iUwdbruRib9lr
MD5:	75550D464B1732400CD4D7410CDEF2A7
SHA1:	874C99AD41239599F363B0983B1FCD49D5F8B391
SHA-256:	89B060EA9FCD18F68DC124602C39EF9C2123EAF7974AE269E206331DD12E6386
SHA-512:	16B1BED6AA45ED73110B22811299FEB490F0DF685FD3D5AC41A860E469732659574BD9A95F3F8BDC1346F5B89D77B2CCBA0169490AA328FAC44AF654AE19220A
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......K.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.1 (Macintosh)" xmpMM:InstanceID="xmp.iid:3175246E7F7911ECBCA8B2018119101A" xmpMM:DocumentID="xmp.did:3175246F7F7911ECBCA8B2018119101A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3175246C7F7911ECBCA8B2018119101A" stRef:documentID="xmp.did:3175246D7F7911ECBCA8B2018119101A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d...............@...tp......................................................................................................

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	141
Entropy (8bit):	4.831764817376034
Encrypted:	false
SSDEEP:	3:YIzXl0f+Qf+AB4ZLRKTJyO8UIVOuJEbSKDDXFLKUexaLjJp2ERh2in:YIjl0WQf+k4ZLRKTA7TJ0SuXFLKUexSD
MD5:	FB5C2F9F3C95E988198B0812946A0708
SHA1:	C278CF3744BC5A7FB9A19F2642C0B65AF4F9C72A
SHA-256:	45C4F83FE2986B391245E31F0D09A6CCCEA42691A9ECC0706AF407F9DAFA6768
SHA-512:	242D90E763EFD8D81F233D032C40EFF965A1159B7911643494CA6CC14BA54A089C76AB05B764EC426301E3D63553CF8C41C49889B675076CD97D1A84BF5120FB
Malicious:	false
Reputation:	low
URL:	https://get-luxsheets.com/assets/shared/checkout/v15/css/fonts/EllenLuff---Larken-Regular.woff2
Preview:	{"message":"Route GET:/assets/shared/checkout/v15/css/fonts/EllenLuff---Larken-Regular.woff2 not found","error":"Not Found","statusCode":404}

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGB, interlaced
Category:	downloaded
Size (bytes):	9839
Entropy (8bit):	7.934486398924793
Encrypted:	false
SSDEEP:	192:LJAM2fKjxIaSF7yuw9oGOwXzXF6imjnDtylk85eQakf4YtuCgFgF60xUWnNjN:+GjxIaS5yx7zVBmL5yDeQakwu8f05NR
MD5:	4FE3A297FB230F1AA5DFC1282243D8B7
SHA1:	6B4F31F3C461BEBD43CBF6423E6C5058C839DE8D
SHA-256:	788515E51832C513A385E23D18CC2662CEA3589E64DA7DB7592E977EFC879B74
SHA-512:	86E79AEEA9C539566D3B2EF761EBF5884CBD33C9BDAC1745101E7A466D7E8BE8234D46D2791AFC3B46BD072F5362EA36AEE40DAC76273AE7D7A5D2732670C948
Malicious:	false
Reputation:	low
URL:	https://ally.quandral.com/age-verification/assets/age-verification.png
Preview:	.PNG........IHDR..............0NS....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ba7da65c-196c-4665-916c-4c01d93137dc" xmpMM:DocumentID="xmp.did:982166E69C9B11E9ADEDC3554FCE72DD" xmpMM:InstanceID="xmp.iid:982166E59C9B11E9ADEDC3554FCE72DD" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9863c9de-c9f0-46c1-b0a9-02875fc6854c" stRef:documentID="adobe:docid:photoshop:cdb8fda8-56ff-df40-8ede-899fecc08054"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......".IDATx.b4...

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 17, 2024 18:18:19.156831026 CET	192.168.2.16	1.1.1.1	0x655e	Standard query (0)	www.kukaj-to.chat	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:19.157377958 CET	192.168.2.16	1.1.1.1	0x15a3	Standard query (0)	www.kukaj-to.chat	65	IN (0x0001)	false
Dec 17, 2024 18:18:19.680588961 CET	192.168.2.16	1.1.1.1	0x68b1	Standard query (0)	www.kukaj-to.chat	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:19.680725098 CET	192.168.2.16	1.1.1.1	0x40ae	Standard query (0)	www.kukaj-to.chat	65	IN (0x0001)	false
Dec 17, 2024 18:18:22.725244045 CET	192.168.2.16	1.1.1.1	0xc218	Standard query (0)	www.empowerstratic.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:22.725440025 CET	192.168.2.16	1.1.1.1	0x2a9a	Standard query (0)	www.empowerstratic.com	65	IN (0x0001)	false
Dec 17, 2024 18:18:23.004704952 CET	192.168.2.16	1.1.1.1	0x50c5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:23.004851103 CET	192.168.2.16	1.1.1.1	0xf911	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 17, 2024 18:18:25.984117031 CET	192.168.2.16	1.1.1.1	0xce71	Standard query (0)	www.mastertrackingdomain.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:25.984410048 CET	192.168.2.16	1.1.1.1	0xedf3	Standard query (0)	www.mastertrackingdomain.com	65	IN (0x0001)	false
Dec 17, 2024 18:18:29.777077913 CET	192.168.2.16	1.1.1.1	0x5fc5	Standard query (0)	majorleagueprices.icu	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:29.777364969 CET	192.168.2.16	1.1.1.1	0xef3d	Standard query (0)	majorleagueprices.icu	65	IN (0x0001)	false
Dec 17, 2024 18:18:33.199631929 CET	192.168.2.16	1.1.1.1	0x84c8	Standard query (0)	majorleagueprices.icu	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:33.199753046 CET	192.168.2.16	1.1.1.1	0x628a	Standard query (0)	majorleagueprices.icu	65	IN (0x0001)	false
Dec 17, 2024 18:18:40.285972118 CET	192.168.2.16	1.1.1.1	0x7b19	Standard query (0)	majorleagueprices.icu	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:40.286174059 CET	192.168.2.16	1.1.1.1	0xcf72	Standard query (0)	majorleagueprices.icu	65	IN (0x0001)	false
Dec 17, 2024 18:18:47.024221897 CET	192.168.2.16	1.1.1.1	0x1f61	Standard query (0)	trk-quantivex.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:47.026070118 CET	192.168.2.16	1.1.1.1	0x7f9b	Standard query (0)	trk-quantivex.com	65	IN (0x0001)	false
Dec 17, 2024 18:18:50.240297079 CET	192.168.2.16	1.1.1.1	0xd26a	Standard query (0)	trk-quantivex.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:50.240434885 CET	192.168.2.16	1.1.1.1	0xe0b9	Standard query (0)	trk-quantivex.com	65	IN (0x0001)	false
Dec 17, 2024 18:18:53.214677095 CET	192.168.2.16	1.1.1.1	0x94bc	Standard query (0)	secureanalytic.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:53.214876890 CET	192.168.2.16	1.1.1.1	0xf489	Standard query (0)	secureanalytic.com	65	IN (0x0001)	false
Dec 17, 2024 18:18:59.515782118 CET	192.168.2.16	1.1.1.1	0xef37	Standard query (0)	event.trk-quantivex.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:59.515940905 CET	192.168.2.16	1.1.1.1	0x9555	Standard query (0)	event.trk-quantivex.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:05.530910969 CET	192.168.2.16	1.1.1.1	0xe69b	Standard query (0)	event.trk-quantivex.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:05.531197071 CET	192.168.2.16	1.1.1.1	0x353d	Standard query (0)	event.trk-quantivex.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:08.549287081 CET	192.168.2.16	1.1.1.1	0xa988	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:08.549424887 CET	192.168.2.16	1.1.1.1	0x921f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:16.306057930 CET	192.168.2.16	1.1.1.1	0xba71	Standard query (0)	subscription.trk-quantivex.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:16.306217909 CET	192.168.2.16	1.1.1.1	0xe250	Standard query (0)	subscription.trk-quantivex.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:22.523370028 CET	192.168.2.16	1.1.1.1	0xf4d	Standard query (0)	api.taboola.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:22.525115013 CET	192.168.2.16	1.1.1.1	0xe935	Standard query (0)	api.taboola.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:24.601623058 CET	192.168.2.16	1.1.1.1	0x293f	Standard query (0)	api.taboola.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:24.601867914 CET	192.168.2.16	1.1.1.1	0xea78	Standard query (0)	api.taboola.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:39.979021072 CET	192.168.2.16	1.1.1.1	0x9189	Standard query (0)	extension.secureanalytic.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:39.979161024 CET	192.168.2.16	1.1.1.1	0xc72f	Standard query (0)	extension.secureanalytic.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:39.982189894 CET	192.168.2.16	1.1.1.1	0x9ace	Standard query (0)	notification.secureanalytic.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:39.982352972 CET	192.168.2.16	1.1.1.1	0x75f5	Standard query (0)	notification.secureanalytic.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:46.379456043 CET	192.168.2.16	1.1.1.1	0xba7b	Standard query (0)	images.taboola.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:46.379862070 CET	192.168.2.16	1.1.1.1	0x569f	Standard query (0)	images.taboola.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:46.380374908 CET	192.168.2.16	1.1.1.1	0x864a	Standard query (0)	pushclk.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:46.380522966 CET	192.168.2.16	1.1.1.1	0x4a3e	Standard query (0)	pushclk.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:48.369852066 CET	192.168.2.16	1.1.1.1	0x4a84	Standard query (0)	d22322n8919ncg.cloudfront.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.369970083 CET	192.168.2.16	1.1.1.1	0xf4f1	Standard query (0)	d22322n8919ncg.cloudfront.net	65	IN (0x0001)	false
Dec 17, 2024 18:19:48.407568932 CET	192.168.2.16	1.1.1.1	0x654	Standard query (0)	cdn-media-2020.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.407699108 CET	192.168.2.16	1.1.1.1	0x31c7	Standard query (0)	cdn-media-2020.s3.amazonaws.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:53.889594078 CET	192.168.2.16	1.1.1.1	0xeb6c	Standard query (0)	www.trk2dkt.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:53.889722109 CET	192.168.2.16	1.1.1.1	0x85a7	Standard query (0)	www.trk2dkt.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:56.006732941 CET	192.168.2.16	1.1.1.1	0xc357	Standard query (0)	get-luxsheets.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:56.006894112 CET	192.168.2.16	1.1.1.1	0x907c	Standard query (0)	get-luxsheets.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:58.351361990 CET	192.168.2.16	1.1.1.1	0xe84	Standard query (0)	browser.sentry-cdn.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:58.351485968 CET	192.168.2.16	1.1.1.1	0x5986	Standard query (0)	browser.sentry-cdn.com	65	IN (0x0001)	false
Dec 17, 2024 18:19:58.352556944 CET	192.168.2.16	1.1.1.1	0xae5a	Standard query (0)	www.trk2dkt.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:58.352823019 CET	192.168.2.16	1.1.1.1	0xed2c	Standard query (0)	www.trk2dkt.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:00.258163929 CET	192.168.2.16	1.1.1.1	0xc3f4	Standard query (0)	get-luxsheets.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:00.258322954 CET	192.168.2.16	1.1.1.1	0x8f12	Standard query (0)	get-luxsheets.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:00.631385088 CET	192.168.2.16	1.1.1.1	0x5d50	Standard query (0)	www.trk2dkt.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:00.631531000 CET	192.168.2.16	1.1.1.1	0xb72e	Standard query (0)	www.trk2dkt.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:00.773132086 CET	192.168.2.16	1.1.1.1	0xb3f7	Standard query (0)	browser.sentry-cdn.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:00.773397923 CET	192.168.2.16	1.1.1.1	0xd962	Standard query (0)	browser.sentry-cdn.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:01.208005905 CET	192.168.2.16	1.1.1.1	0x32d0	Standard query (0)	a.storyblok.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:01.208122969 CET	192.168.2.16	1.1.1.1	0xeae5	Standard query (0)	a.storyblok.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:02.513799906 CET	192.168.2.16	1.1.1.1	0xf539	Standard query (0)	ally.quandral.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:02.513969898 CET	192.168.2.16	1.1.1.1	0xc094	Standard query (0)	ally.quandral.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:02.981606960 CET	192.168.2.16	1.1.1.1	0x8e0a	Standard query (0)	o4504272872341504.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:02.981782913 CET	192.168.2.16	1.1.1.1	0x1bf1	Standard query (0)	o4504272872341504.ingest.sentry.io	65	IN (0x0001)	false
Dec 17, 2024 18:20:04.125186920 CET	192.168.2.16	1.1.1.1	0x2a0d	Standard query (0)	a.storyblok.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:04.125446081 CET	192.168.2.16	1.1.1.1	0x9549	Standard query (0)	a.storyblok.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:04.873564005 CET	192.168.2.16	1.1.1.1	0xa051	Standard query (0)	o4504272872341504.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:04.873716116 CET	192.168.2.16	1.1.1.1	0x3b65	Standard query (0)	o4504272872341504.ingest.sentry.io	65	IN (0x0001)	false
Dec 17, 2024 18:20:05.840404034 CET	192.168.2.16	1.1.1.1	0x685c	Standard query (0)	ally.quandral.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:05.840544939 CET	192.168.2.16	1.1.1.1	0x175	Standard query (0)	ally.quandral.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:06.549994946 CET	192.168.2.16	1.1.1.1	0xe474	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:06.550374031 CET	192.168.2.16	1.1.1.1	0x5415	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:09.434328079 CET	192.168.2.16	1.1.1.1	0x8442	Standard query (0)	ally.quandral.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:09.434485912 CET	192.168.2.16	1.1.1.1	0xce88	Standard query (0)	ally.quandral.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:09.452214003 CET	192.168.2.16	1.1.1.1	0xb65f	Standard query (0)	trk-synovetra.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:09.452590942 CET	192.168.2.16	1.1.1.1	0x1f19	Standard query (0)	trk-synovetra.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:10.356601000 CET	192.168.2.16	1.1.1.1	0x3b55	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:10.356745958 CET	192.168.2.16	1.1.1.1	0x91cf	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:11.169500113 CET	192.168.2.16	1.1.1.1	0xa7e5	Standard query (0)	pushclk.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:11.169645071 CET	192.168.2.16	1.1.1.1	0xde1f	Standard query (0)	pushclk.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:12.458642960 CET	192.168.2.16	1.1.1.1	0x145d	Standard query (0)	won.quandral.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:12.458810091 CET	192.168.2.16	1.1.1.1	0xc69c	Standard query (0)	won.quandral.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:12.620904922 CET	192.168.2.16	1.1.1.1	0x4dc	Standard query (0)	trk-synovetra.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:12.621370077 CET	192.168.2.16	1.1.1.1	0x2b8e	Standard query (0)	trk-synovetra.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:13.276648998 CET	192.168.2.16	1.1.1.1	0x18b	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:13.277015924 CET	192.168.2.16	1.1.1.1	0x76c8	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:13.280337095 CET	192.168.2.16	1.1.1.1	0xf262	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:13.280541897 CET	192.168.2.16	1.1.1.1	0xa323	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:14.250729084 CET	192.168.2.16	1.1.1.1	0x4acd	Standard query (0)	turapport-strience.icu	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:14.251804113 CET	192.168.2.16	1.1.1.1	0xc64a	Standard query (0)	turapport-strience.icu	65	IN (0x0001)	false
Dec 17, 2024 18:20:15.531335115 CET	192.168.2.16	1.1.1.1	0x21f5	Standard query (0)	won.quandral.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:15.531553030 CET	192.168.2.16	1.1.1.1	0x7a3e	Standard query (0)	won.quandral.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:15.553325891 CET	192.168.2.16	1.1.1.1	0xa582	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:15.553634882 CET	192.168.2.16	1.1.1.1	0x5bcd	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:16.417339087 CET	192.168.2.16	1.1.1.1	0x9922	Standard query (0)	spin.quandral.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:16.417557955 CET	192.168.2.16	1.1.1.1	0x40dd	Standard query (0)	spin.quandral.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:17.731770992 CET	192.168.2.16	1.1.1.1	0xbf0d	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:17.732099056 CET	192.168.2.16	1.1.1.1	0x85c5	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:17.732930899 CET	192.168.2.16	1.1.1.1	0x64b4	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:17.733177900 CET	192.168.2.16	1.1.1.1	0xf13e	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:18.923218966 CET	192.168.2.16	1.1.1.1	0xe0e8	Standard query (0)	verify.twivoria.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:18.923371077 CET	192.168.2.16	1.1.1.1	0x22c0	Standard query (0)	verify.twivoria.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:19.161809921 CET	192.168.2.16	1.1.1.1	0xdf6e	Standard query (0)	won.quandral.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:19.162003040 CET	192.168.2.16	1.1.1.1	0x7ed6	Standard query (0)	won.quandral.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:19.527286053 CET	192.168.2.16	1.1.1.1	0x2fe4	Standard query (0)	spin.quandral.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:19.527431011 CET	192.168.2.16	1.1.1.1	0xb6a1	Standard query (0)	spin.quandral.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:20.033263922 CET	192.168.2.16	1.1.1.1	0xe98c	Standard query (0)	click.trackwora.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:20.033505917 CET	192.168.2.16	1.1.1.1	0x35d6	Standard query (0)	click.trackwora.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:21.859225035 CET	192.168.2.16	1.1.1.1	0xd1c8	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:21.859374046 CET	192.168.2.16	1.1.1.1	0x8094	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:22.337842941 CET	192.168.2.16	1.1.1.1	0x641d	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:22.338135958 CET	192.168.2.16	1.1.1.1	0xd19f	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:22.367080927 CET	192.168.2.16	1.1.1.1	0x2b69	Standard query (0)	event.trk-synovetra.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:22.367260933 CET	192.168.2.16	1.1.1.1	0xca81	Standard query (0)	event.trk-synovetra.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:23.033384085 CET	192.168.2.16	1.1.1.1	0x12c9	Standard query (0)	spin.quandral.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:23.033384085 CET	192.168.2.16	1.1.1.1	0x97db	Standard query (0)	spin.quandral.com	65	IN (0x0001)	false
Dec 17, 2024 18:20:23.660435915 CET	192.168.2.16	1.1.1.1	0xca00	Standard query (0)	gryclk.xyz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:23.660563946 CET	192.168.2.16	1.1.1.1	0x986	Standard query (0)	gryclk.xyz	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 17, 2024 18:18:19.677345991 CET	1.1.1.1	192.168.2.16	0x15a3	No error (0)	www.kukaj-to.chat			65	IN (0x0001)	false
Dec 17, 2024 18:18:19.677463055 CET	1.1.1.1	192.168.2.16	0x655e	No error (0)	www.kukaj-to.chat		104.21.21.144	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:19.677463055 CET	1.1.1.1	192.168.2.16	0x655e	No error (0)	www.kukaj-to.chat		172.67.199.31	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:19.818820000 CET	1.1.1.1	192.168.2.16	0x40ae	No error (0)	www.kukaj-to.chat			65	IN (0x0001)	false
Dec 17, 2024 18:18:19.819498062 CET	1.1.1.1	192.168.2.16	0x68b1	No error (0)	www.kukaj-to.chat		104.21.21.144	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:19.819498062 CET	1.1.1.1	192.168.2.16	0x68b1	No error (0)	www.kukaj-to.chat		172.67.199.31	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:23.141769886 CET	1.1.1.1	192.168.2.16	0xf911	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 17, 2024 18:18:23.142833948 CET	1.1.1.1	192.168.2.16	0x50c5	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:23.452763081 CET	1.1.1.1	192.168.2.16	0x2a9a	No error (0)	www.empowerstratic.com	empowerstratic.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:18:23.453039885 CET	1.1.1.1	192.168.2.16	0xc218	No error (0)	www.empowerstratic.com	empowerstratic.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:18:23.453039885 CET	1.1.1.1	192.168.2.16	0xc218	No error (0)	empowerstratic.com		194.11.246.12	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:26.295459986 CET	1.1.1.1	192.168.2.16	0xce71	No error (0)	www.mastertrackingdomain.com		172.67.138.66	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:26.295459986 CET	1.1.1.1	192.168.2.16	0xce71	No error (0)	www.mastertrackingdomain.com		104.21.8.24	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:26.295939922 CET	1.1.1.1	192.168.2.16	0xedf3	No error (0)	www.mastertrackingdomain.com			65	IN (0x0001)	false
Dec 17, 2024 18:18:30.186995029 CET	1.1.1.1	192.168.2.16	0xef3d	No error (0)	majorleagueprices.icu			65	IN (0x0001)	false
Dec 17, 2024 18:18:30.188028097 CET	1.1.1.1	192.168.2.16	0x5fc5	No error (0)	majorleagueprices.icu		104.21.46.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:30.188028097 CET	1.1.1.1	192.168.2.16	0x5fc5	No error (0)	majorleagueprices.icu		172.67.222.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:33.343513012 CET	1.1.1.1	192.168.2.16	0x84c8	No error (0)	majorleagueprices.icu		172.67.222.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:33.343513012 CET	1.1.1.1	192.168.2.16	0x84c8	No error (0)	majorleagueprices.icu		104.21.46.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:33.346065998 CET	1.1.1.1	192.168.2.16	0x628a	No error (0)	majorleagueprices.icu			65	IN (0x0001)	false
Dec 17, 2024 18:18:40.470480919 CET	1.1.1.1	192.168.2.16	0xcf72	No error (0)	majorleagueprices.icu			65	IN (0x0001)	false
Dec 17, 2024 18:18:40.470499039 CET	1.1.1.1	192.168.2.16	0x7b19	No error (0)	majorleagueprices.icu		104.21.46.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:40.470499039 CET	1.1.1.1	192.168.2.16	0x7b19	No error (0)	majorleagueprices.icu		172.67.222.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:47.309117079 CET	1.1.1.1	192.168.2.16	0x1f61	No error (0)	trk-quantivex.com		104.21.13.162	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:47.309117079 CET	1.1.1.1	192.168.2.16	0x1f61	No error (0)	trk-quantivex.com		172.67.156.201	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:47.309324980 CET	1.1.1.1	192.168.2.16	0x7f9b	No error (0)	trk-quantivex.com			65	IN (0x0001)	false
Dec 17, 2024 18:18:50.380296946 CET	1.1.1.1	192.168.2.16	0xd26a	No error (0)	trk-quantivex.com		172.67.156.201	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:50.380296946 CET	1.1.1.1	192.168.2.16	0xd26a	No error (0)	trk-quantivex.com		104.21.13.162	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:50.380312920 CET	1.1.1.1	192.168.2.16	0xe0b9	No error (0)	trk-quantivex.com			65	IN (0x0001)	false
Dec 17, 2024 18:18:53.468792915 CET	1.1.1.1	192.168.2.16	0xf489	No error (0)	secureanalytic.com			65	IN (0x0001)	false
Dec 17, 2024 18:18:53.468985081 CET	1.1.1.1	192.168.2.16	0x94bc	No error (0)	secureanalytic.com		104.21.77.48	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:53.468985081 CET	1.1.1.1	192.168.2.16	0x94bc	No error (0)	secureanalytic.com		172.67.204.164	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:59.665010929 CET	1.1.1.1	192.168.2.16	0xef37	No error (0)	event.trk-quantivex.com		104.21.13.162	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:59.665010929 CET	1.1.1.1	192.168.2.16	0xef37	No error (0)	event.trk-quantivex.com		172.67.156.201	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:18:59.665071011 CET	1.1.1.1	192.168.2.16	0x9555	No error (0)	event.trk-quantivex.com			65	IN (0x0001)	false
Dec 17, 2024 18:19:05.669064045 CET	1.1.1.1	192.168.2.16	0xe69b	No error (0)	event.trk-quantivex.com		104.21.13.162	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:05.669064045 CET	1.1.1.1	192.168.2.16	0xe69b	No error (0)	event.trk-quantivex.com		172.67.156.201	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:05.669368029 CET	1.1.1.1	192.168.2.16	0x353d	No error (0)	event.trk-quantivex.com			65	IN (0x0001)	false
Dec 17, 2024 18:19:08.686443090 CET	1.1.1.1	192.168.2.16	0xa988	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:09.331864119 CET	1.1.1.1	192.168.2.16	0x900d	No error (0)	android.l.google.com		172.217.19.206	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:09.331864119 CET	1.1.1.1	192.168.2.16	0x900d	No error (0)	android.l.google.com		142.250.181.78	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:09.331864119 CET	1.1.1.1	192.168.2.16	0x900d	No error (0)	android.l.google.com		216.58.208.238	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:09.331864119 CET	1.1.1.1	192.168.2.16	0x900d	No error (0)	android.l.google.com		142.250.181.46	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:09.331864119 CET	1.1.1.1	192.168.2.16	0x900d	No error (0)	android.l.google.com		172.217.19.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:09.331864119 CET	1.1.1.1	192.168.2.16	0x900d	No error (0)	android.l.google.com		172.217.21.46	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:09.331864119 CET	1.1.1.1	192.168.2.16	0x900d	No error (0)	android.l.google.com		142.250.181.110	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:09.331864119 CET	1.1.1.1	192.168.2.16	0x900d	No error (0)	android.l.google.com		142.250.181.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:09.331864119 CET	1.1.1.1	192.168.2.16	0x900d	No error (0)	android.l.google.com		142.250.181.142	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:09.331864119 CET	1.1.1.1	192.168.2.16	0x900d	No error (0)	android.l.google.com		172.217.17.78	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:09.331864119 CET	1.1.1.1	192.168.2.16	0x900d	No error (0)	android.l.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:09.331864119 CET	1.1.1.1	192.168.2.16	0x900d	No error (0)	android.l.google.com		172.217.17.46	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:12.021642923 CET	1.1.1.1	192.168.2.16	0x9896	No error (0)	mobile-gtalk.l.google.com		64.233.166.188	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:16.451447010 CET	1.1.1.1	192.168.2.16	0xba71	No error (0)	subscription.trk-quantivex.com		172.67.156.201	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:16.451447010 CET	1.1.1.1	192.168.2.16	0xba71	No error (0)	subscription.trk-quantivex.com		104.21.13.162	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:16.451791048 CET	1.1.1.1	192.168.2.16	0xe250	No error (0)	subscription.trk-quantivex.com			65	IN (0x0001)	false
Dec 17, 2024 18:19:22.660171986 CET	1.1.1.1	192.168.2.16	0xf4d	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:19:22.660171986 CET	1.1.1.1	192.168.2.16	0xf4d	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:22.660171986 CET	1.1.1.1	192.168.2.16	0xf4d	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:22.660171986 CET	1.1.1.1	192.168.2.16	0xf4d	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:22.660171986 CET	1.1.1.1	192.168.2.16	0xf4d	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:22.738723040 CET	1.1.1.1	192.168.2.16	0xe935	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:19:24.740236044 CET	1.1.1.1	192.168.2.16	0x293f	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:19:24.740236044 CET	1.1.1.1	192.168.2.16	0x293f	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:24.740236044 CET	1.1.1.1	192.168.2.16	0x293f	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:24.740236044 CET	1.1.1.1	192.168.2.16	0x293f	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:24.740236044 CET	1.1.1.1	192.168.2.16	0x293f	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:24.741919994 CET	1.1.1.1	192.168.2.16	0xea78	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:19:40.124073982 CET	1.1.1.1	192.168.2.16	0xc72f	No error (0)	extension.secureanalytic.com			65	IN (0x0001)	false
Dec 17, 2024 18:19:40.124247074 CET	1.1.1.1	192.168.2.16	0x9189	No error (0)	extension.secureanalytic.com		172.67.204.164	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:40.124247074 CET	1.1.1.1	192.168.2.16	0x9189	No error (0)	extension.secureanalytic.com		104.21.77.48	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:40.128669977 CET	1.1.1.1	192.168.2.16	0x9ace	No error (0)	notification.secureanalytic.com		172.67.204.164	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:40.128669977 CET	1.1.1.1	192.168.2.16	0x9ace	No error (0)	notification.secureanalytic.com		104.21.77.48	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:40.130719900 CET	1.1.1.1	192.168.2.16	0x75f5	No error (0)	notification.secureanalytic.com			65	IN (0x0001)	false
Dec 17, 2024 18:19:46.674117088 CET	1.1.1.1	192.168.2.16	0xba7b	No error (0)	images.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:19:46.674117088 CET	1.1.1.1	192.168.2.16	0xba7b	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:46.674117088 CET	1.1.1.1	192.168.2.16	0xba7b	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:46.674117088 CET	1.1.1.1	192.168.2.16	0xba7b	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:46.674117088 CET	1.1.1.1	192.168.2.16	0xba7b	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:46.674993992 CET	1.1.1.1	192.168.2.16	0x569f	No error (0)	images.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:19:46.676786900 CET	1.1.1.1	192.168.2.16	0x864a	No error (0)	pushclk.com		172.67.171.114	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:46.676786900 CET	1.1.1.1	192.168.2.16	0x864a	No error (0)	pushclk.com		104.21.29.105	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:46.677422047 CET	1.1.1.1	192.168.2.16	0x4a3e	No error (0)	pushclk.com			65	IN (0x0001)	false
Dec 17, 2024 18:19:48.647322893 CET	1.1.1.1	192.168.2.16	0x4a84	No error (0)	d22322n8919ncg.cloudfront.net		18.165.213.106	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.647322893 CET	1.1.1.1	192.168.2.16	0x4a84	No error (0)	d22322n8919ncg.cloudfront.net		18.165.213.11	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.647322893 CET	1.1.1.1	192.168.2.16	0x4a84	No error (0)	d22322n8919ncg.cloudfront.net		18.165.213.213	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.647322893 CET	1.1.1.1	192.168.2.16	0x4a84	No error (0)	d22322n8919ncg.cloudfront.net		18.165.213.179	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.786478043 CET	1.1.1.1	192.168.2.16	0x654	No error (0)	cdn-media-2020.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:19:48.786478043 CET	1.1.1.1	192.168.2.16	0x654	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:19:48.786478043 CET	1.1.1.1	192.168.2.16	0x654	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.27.174	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.786478043 CET	1.1.1.1	192.168.2.16	0x654	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.41.249	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.786478043 CET	1.1.1.1	192.168.2.16	0x654	No error (0)	s3-w.us-east-1.amazonaws.com		16.15.184.183	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.786478043 CET	1.1.1.1	192.168.2.16	0x654	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.27.48	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.786478043 CET	1.1.1.1	192.168.2.16	0x654	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.212.89	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.786478043 CET	1.1.1.1	192.168.2.16	0x654	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.28.220	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.786478043 CET	1.1.1.1	192.168.2.16	0x654	No error (0)	s3-w.us-east-1.amazonaws.com		16.15.178.234	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.786478043 CET	1.1.1.1	192.168.2.16	0x654	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.27.160	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:48.818538904 CET	1.1.1.1	192.168.2.16	0x31c7	No error (0)	cdn-media-2020.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:19:48.818538904 CET	1.1.1.1	192.168.2.16	0x31c7	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:19:54.307347059 CET	1.1.1.1	192.168.2.16	0xeb6c	No error (0)	www.trk2dkt.com		35.244.193.194	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:56.397294044 CET	1.1.1.1	192.168.2.16	0xc357	No error (0)	get-luxsheets.com		34.111.103.167	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:58.488722086 CET	1.1.1.1	192.168.2.16	0xe84	No error (0)	browser.sentry-cdn.com		151.101.194.217	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:58.488722086 CET	1.1.1.1	192.168.2.16	0xe84	No error (0)	browser.sentry-cdn.com		151.101.66.217	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:58.488722086 CET	1.1.1.1	192.168.2.16	0xe84	No error (0)	browser.sentry-cdn.com		151.101.130.217	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:58.488722086 CET	1.1.1.1	192.168.2.16	0xe84	No error (0)	browser.sentry-cdn.com		151.101.2.217	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:19:58.491494894 CET	1.1.1.1	192.168.2.16	0xae5a	No error (0)	www.trk2dkt.com		35.244.193.194	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:00.400224924 CET	1.1.1.1	192.168.2.16	0xc3f4	No error (0)	get-luxsheets.com		34.111.103.167	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:00.774503946 CET	1.1.1.1	192.168.2.16	0x5d50	No error (0)	www.trk2dkt.com		35.244.193.194	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:00.915383101 CET	1.1.1.1	192.168.2.16	0xb3f7	No error (0)	browser.sentry-cdn.com		151.101.194.217	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:00.915383101 CET	1.1.1.1	192.168.2.16	0xb3f7	No error (0)	browser.sentry-cdn.com		151.101.2.217	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:00.915383101 CET	1.1.1.1	192.168.2.16	0xb3f7	No error (0)	browser.sentry-cdn.com		151.101.66.217	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:00.915383101 CET	1.1.1.1	192.168.2.16	0xb3f7	No error (0)	browser.sentry-cdn.com		151.101.130.217	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:01.445939064 CET	1.1.1.1	192.168.2.16	0x32d0	No error (0)	a.storyblok.com		18.161.111.55	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:01.445939064 CET	1.1.1.1	192.168.2.16	0x32d0	No error (0)	a.storyblok.com		18.161.111.123	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:01.445939064 CET	1.1.1.1	192.168.2.16	0x32d0	No error (0)	a.storyblok.com		18.161.111.129	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:01.445939064 CET	1.1.1.1	192.168.2.16	0x32d0	No error (0)	a.storyblok.com		18.161.111.25	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:02.814011097 CET	1.1.1.1	192.168.2.16	0xc094	No error (0)	ally.quandral.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:02.816865921 CET	1.1.1.1	192.168.2.16	0xf539	No error (0)	ally.quandral.com		104.21.81.125	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:02.816865921 CET	1.1.1.1	192.168.2.16	0xf539	No error (0)	ally.quandral.com		172.67.160.227	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:03.203897953 CET	1.1.1.1	192.168.2.16	0x8e0a	No error (0)	o4504272872341504.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:04.263205051 CET	1.1.1.1	192.168.2.16	0x2a0d	No error (0)	a.storyblok.com		18.161.111.25	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:04.263205051 CET	1.1.1.1	192.168.2.16	0x2a0d	No error (0)	a.storyblok.com		18.161.111.123	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:04.263205051 CET	1.1.1.1	192.168.2.16	0x2a0d	No error (0)	a.storyblok.com		18.161.111.55	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:04.263205051 CET	1.1.1.1	192.168.2.16	0x2a0d	No error (0)	a.storyblok.com		18.161.111.129	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:05.011337996 CET	1.1.1.1	192.168.2.16	0xa051	No error (0)	o4504272872341504.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:05.978749037 CET	1.1.1.1	192.168.2.16	0x175	No error (0)	ally.quandral.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:05.981718063 CET	1.1.1.1	192.168.2.16	0x685c	No error (0)	ally.quandral.com		172.67.160.227	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:05.981718063 CET	1.1.1.1	192.168.2.16	0x685c	No error (0)	ally.quandral.com		104.21.81.125	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:06.687500000 CET	1.1.1.1	192.168.2.16	0xe474	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:06.688672066 CET	1.1.1.1	192.168.2.16	0x5415	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:09.573856115 CET	1.1.1.1	192.168.2.16	0x8442	No error (0)	ally.quandral.com		104.21.81.125	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:09.573856115 CET	1.1.1.1	192.168.2.16	0x8442	No error (0)	ally.quandral.com		172.67.160.227	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:09.574495077 CET	1.1.1.1	192.168.2.16	0xce88	No error (0)	ally.quandral.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:09.721369028 CET	1.1.1.1	192.168.2.16	0xb65f	No error (0)	trk-synovetra.com		172.67.167.163	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:09.721369028 CET	1.1.1.1	192.168.2.16	0xb65f	No error (0)	trk-synovetra.com		104.21.50.223	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:09.721786022 CET	1.1.1.1	192.168.2.16	0x1f19	No error (0)	trk-synovetra.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:10.493922949 CET	1.1.1.1	192.168.2.16	0x3b55	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:10.493922949 CET	1.1.1.1	192.168.2.16	0x3b55	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:10.493922949 CET	1.1.1.1	192.168.2.16	0x3b55	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:10.493922949 CET	1.1.1.1	192.168.2.16	0x3b55	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:10.493922949 CET	1.1.1.1	192.168.2.16	0x3b55	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:10.493922949 CET	1.1.1.1	192.168.2.16	0x3b55	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:10.723479986 CET	1.1.1.1	192.168.2.16	0x91cf	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:10.723479986 CET	1.1.1.1	192.168.2.16	0x91cf	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:11.307100058 CET	1.1.1.1	192.168.2.16	0xa7e5	No error (0)	pushclk.com		104.21.29.105	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:11.307100058 CET	1.1.1.1	192.168.2.16	0xa7e5	No error (0)	pushclk.com		172.67.171.114	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:11.307595015 CET	1.1.1.1	192.168.2.16	0xde1f	No error (0)	pushclk.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:12.603765011 CET	1.1.1.1	192.168.2.16	0x145d	No error (0)	won.quandral.com		104.21.81.125	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:12.603765011 CET	1.1.1.1	192.168.2.16	0x145d	No error (0)	won.quandral.com		172.67.160.227	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:12.603781939 CET	1.1.1.1	192.168.2.16	0xc69c	No error (0)	won.quandral.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:12.758630991 CET	1.1.1.1	192.168.2.16	0x4dc	No error (0)	trk-synovetra.com		172.67.167.163	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:12.758630991 CET	1.1.1.1	192.168.2.16	0x4dc	No error (0)	trk-synovetra.com		104.21.50.223	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:12.761440039 CET	1.1.1.1	192.168.2.16	0x2b8e	No error (0)	trk-synovetra.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:13.414724112 CET	1.1.1.1	192.168.2.16	0x18b	No error (0)	js.stripe.com	dexeqbeb7giwr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:13.414724112 CET	1.1.1.1	192.168.2.16	0x18b	No error (0)	dexeqbeb7giwr.cloudfront.net		108.158.75.53	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:13.414724112 CET	1.1.1.1	192.168.2.16	0x18b	No error (0)	dexeqbeb7giwr.cloudfront.net		108.158.75.13	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:13.414724112 CET	1.1.1.1	192.168.2.16	0x18b	No error (0)	dexeqbeb7giwr.cloudfront.net		108.158.75.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:13.414724112 CET	1.1.1.1	192.168.2.16	0x18b	No error (0)	dexeqbeb7giwr.cloudfront.net		108.158.75.50	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:13.418533087 CET	1.1.1.1	192.168.2.16	0xf262	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:13.418533087 CET	1.1.1.1	192.168.2.16	0xf262	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:13.418533087 CET	1.1.1.1	192.168.2.16	0xf262	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:13.418533087 CET	1.1.1.1	192.168.2.16	0xf262	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:13.418533087 CET	1.1.1.1	192.168.2.16	0xf262	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:13.418533087 CET	1.1.1.1	192.168.2.16	0xf262	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:13.418703079 CET	1.1.1.1	192.168.2.16	0xa323	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:13.418703079 CET	1.1.1.1	192.168.2.16	0xa323	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:13.581389904 CET	1.1.1.1	192.168.2.16	0x76c8	No error (0)	js.stripe.com	dexeqbeb7giwr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:14.718122959 CET	1.1.1.1	192.168.2.16	0x4acd	No error (0)	turapport-strience.icu		18.184.182.95	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:15.668286085 CET	1.1.1.1	192.168.2.16	0x7a3e	No error (0)	won.quandral.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:15.670185089 CET	1.1.1.1	192.168.2.16	0x21f5	No error (0)	won.quandral.com		104.21.81.125	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:15.670185089 CET	1.1.1.1	192.168.2.16	0x21f5	No error (0)	won.quandral.com		172.67.160.227	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:15.690481901 CET	1.1.1.1	192.168.2.16	0xa582	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:16.563388109 CET	1.1.1.1	192.168.2.16	0x9922	No error (0)	spin.quandral.com		104.21.81.125	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:16.563388109 CET	1.1.1.1	192.168.2.16	0x9922	No error (0)	spin.quandral.com		172.67.160.227	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:16.564534903 CET	1.1.1.1	192.168.2.16	0x40dd	No error (0)	spin.quandral.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:17.871368885 CET	1.1.1.1	192.168.2.16	0xbf0d	No error (0)	js.stripe.com	dexeqbeb7giwr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:17.871368885 CET	1.1.1.1	192.168.2.16	0xbf0d	No error (0)	dexeqbeb7giwr.cloudfront.net		108.158.75.13	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:17.871368885 CET	1.1.1.1	192.168.2.16	0xbf0d	No error (0)	dexeqbeb7giwr.cloudfront.net		108.158.75.53	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:17.871368885 CET	1.1.1.1	192.168.2.16	0xbf0d	No error (0)	dexeqbeb7giwr.cloudfront.net		108.158.75.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:17.871368885 CET	1.1.1.1	192.168.2.16	0xbf0d	No error (0)	dexeqbeb7giwr.cloudfront.net		108.158.75.50	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:17.871385098 CET	1.1.1.1	192.168.2.16	0x85c5	No error (0)	js.stripe.com	dexeqbeb7giwr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:17.871395111 CET	1.1.1.1	192.168.2.16	0x64b4	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:17.872221947 CET	1.1.1.1	192.168.2.16	0xf13e	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:19.256714106 CET	1.1.1.1	192.168.2.16	0xe0e8	No error (0)	verify.twivoria.com		104.21.0.215	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:19.256714106 CET	1.1.1.1	192.168.2.16	0xe0e8	No error (0)	verify.twivoria.com		172.67.128.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:19.257298946 CET	1.1.1.1	192.168.2.16	0x22c0	No error (0)	verify.twivoria.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:19.299639940 CET	1.1.1.1	192.168.2.16	0xdf6e	No error (0)	won.quandral.com		172.67.160.227	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:19.299639940 CET	1.1.1.1	192.168.2.16	0xdf6e	No error (0)	won.quandral.com		104.21.81.125	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:19.300256014 CET	1.1.1.1	192.168.2.16	0x7ed6	No error (0)	won.quandral.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:19.666052103 CET	1.1.1.1	192.168.2.16	0x2fe4	No error (0)	spin.quandral.com		104.21.81.125	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:19.666052103 CET	1.1.1.1	192.168.2.16	0x2fe4	No error (0)	spin.quandral.com		172.67.160.227	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:19.667324066 CET	1.1.1.1	192.168.2.16	0xb6a1	No error (0)	spin.quandral.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:20.316806078 CET	1.1.1.1	192.168.2.16	0xe98c	No error (0)	click.trackwora.com		172.67.165.12	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:20.316806078 CET	1.1.1.1	192.168.2.16	0xe98c	No error (0)	click.trackwora.com		104.21.33.171	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:20.317476988 CET	1.1.1.1	192.168.2.16	0x35d6	No error (0)	click.trackwora.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:21.999099016 CET	1.1.1.1	192.168.2.16	0x8094	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:22.003360033 CET	1.1.1.1	192.168.2.16	0xd1c8	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:22.476692915 CET	1.1.1.1	192.168.2.16	0xd19f	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:22.477780104 CET	1.1.1.1	192.168.2.16	0x641d	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 18:20:22.519856930 CET	1.1.1.1	192.168.2.16	0x2b69	No error (0)	event.trk-synovetra.com		104.21.50.223	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:22.519856930 CET	1.1.1.1	192.168.2.16	0x2b69	No error (0)	event.trk-synovetra.com		172.67.167.163	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:22.520797014 CET	1.1.1.1	192.168.2.16	0xca81	No error (0)	event.trk-synovetra.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:23.171705008 CET	1.1.1.1	192.168.2.16	0x12c9	No error (0)	spin.quandral.com		172.67.160.227	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:23.171705008 CET	1.1.1.1	192.168.2.16	0x12c9	No error (0)	spin.quandral.com		104.21.81.125	A (IP address)	IN (0x0001)	false
Dec 17, 2024 18:20:23.171720982 CET	1.1.1.1	192.168.2.16	0x97db	No error (0)	spin.quandral.com			65	IN (0x0001)	false
Dec 17, 2024 18:20:24.235802889 CET	1.1.1.1	192.168.2.16	0xca00	No error (0)	gryclk.xyz		46.4.249.94	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49702	104.21.21.144	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:22 UTC	664	OUT	GET /sedo HTTP/1.1 Host: www.kukaj-to.chat Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:18:22 UTC	963	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 17 Dec 2024 17:18:22 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://www.empowerstratic.com/465L9XP/Z97CPJG/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VZ3ylVQ2ZR%2Bc%2FFcr%2FyEUHjO9BE2UOZ6wNjRnA%2BNe1PynSUqROCCEGlnYhlNedBsMuj31ug%2F4gN6uvBitUf8Bxkh2jMnaot4vGv32WJQCw72ppKtNXKZahKKFPQppAGSq5qSqQA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38926efe9717ad-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1904&min_rtt=1901&rtt_var=719&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1242&delivery_rate=1514522&cwnd=171&unsent_bytes=0&cid=1fe85e6ea2fd2302&ts=455&x=0"
2024-12-17 17:18:22 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49707	194.11.246.12	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:25 UTC	681	OUT	GET /465L9XP/Z97CPJG/ HTTP/1.1 Host: www.empowerstratic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:18:25 UTC	666	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 17 Dec 2024 17:18:25 GMT Content-Type: text/html; charset=utf-8 Content-Length: 134 Connection: close Accept-Ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model Location: https://www.mastertrackingdomain.com/37HF1RW/2H7HLJP4/?source_id=1964&sub1=0cde5eace92144838554e74dacb8fa45 Set-Cookie: uniqueClick_Z97CPJG=c6484861-ffa8-4242-88b5-c1a2aded0aad:1734455905; Path=/; Expires=Thu, 16 Jan 2025 17:18:25 GMT; SameSite=None Set-Cookie: transaction_id=0cde5eace92144838554e74dacb8fa45; Path=/; Expires=Mon, 17 Mar 2025 17:18:25 GMT; SameSite=None Vary: Origin X-Eflow-Request-Id: 823ea18b-b8a4-469c-8e79-af7f98f75a23
2024-12-17 17:18:25 UTC	134	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 73 74 65 72 74 72 61 63 6b 69 6e 67 64 6f 6d 61 69 6e 2e 63 6f 6d 2f 33 37 48 46 31 52 57 2f 32 48 37 48 4c 4a 50 34 2f 3f 73 6f 75 72 63 65 5f 69 64 3d 31 39 36 34 26 61 6d 70 3b 73 75 62 31 3d 30 63 64 65 35 65 61 63 65 39 32 31 34 34 38 33 38 35 35 34 65 37 34 64 61 63 62 38 66 61 34 35 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://www.mastertrackingdomain.com/37HF1RW/2H7HLJP4/?source_id=1964&sub1=0cde5eace92144838554e74dacb8fa45">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49711	172.67.138.66	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:28 UTC	741	OUT	GET /37HF1RW/2H7HLJP4/?source_id=1964&sub1=0cde5eace92144838554e74dacb8fa45 HTTP/1.1 Host: www.mastertrackingdomain.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:18:29 UTC	1235	IN	HTTP/1.1 302 Found Date: Tue, 17 Dec 2024 17:18:29 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://majorleagueprices.icu/O5akYhpK-PDEA98-tf3X-IiDo3D4a/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Set-Cookie: uniqueClick_2H7HLJP4=618440f4-ec62-404f-9d64-783f3a71452d:1734455909; Path=/; Expires=Wed, 18 Dec 2024 17:18:29 GMT; Secure; SameSite=None Set-Cookie: transaction_id=f1a7b1367acd441384cf9d47e80d6f6d; Path=/; Expires=Mon, 17 Mar 2025 17:18:29 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: dd561d1c-6b71-4663-ba6d-ace0fa65a83c cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jTRZxGDuRiM0Mwvdt%2F2xbDKtSBw0Ap1xl6%2Bx4Mfg5rVOxZTBA%2Fd6dQjpoEqZ%2B7iftl3z4RTf7J2ZqNbMsRWjaOst7ShJ03NcykoYEWE7ZkApAv8TwOrIDlUlReVQbyUENTLH9Us%2FC9CHU%2F%2FQ5OHO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38929779ebc32f-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 17:18:29 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 36 32 32 26 6d 69 6e 5f 72 74 74 3d 31 36 31 34 26 72 74 74 5f 76 61 72 3d 36 32 33 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 36 31 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 31 39 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 37 33 32 39 33 37 26 63 77 6e 64 3d 31 33 39 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 36 62 33 63 30 31 36 35 35 61 39 36 38 61 39 30 26 74 73 3d 31 30 32 36 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1622&min_rtt=1614&rtt_var=623&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2861&recv_bytes=1319&delivery_rate=1732937&cwnd=139&unsent_bytes=0&cid=6b3c01655a968a90&ts=1026&x=0"
2024-12-17 17:18:29 UTC	278	IN	Data Raw: 31 30 66 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6a 6f 72 6c 65 61 67 75 65 70 72 69 63 65 73 2e 69 63 75 2f 4f 35 61 6b 59 68 70 4b 2d 50 44 45 41 39 38 2d 74 66 33 58 2d 49 69 44 6f 33 44 34 61 2f 3f 65 6e 63 6f 64 65 64 5f 76 61 6c 75 65 3d 32 37 39 37 36 38 51 26 61 6d 70 3b 73 75 62 31 3d 30 63 64 65 35 65 61 63 65 39 32 31 34 34 38 33 38 35 35 34 65 37 34 64 61 63 62 38 66 61 34 35 26 61 6d 70 3b 73 75 62 32 3d 26 61 6d 70 3b 73 75 62 33 3d 26 61 6d 70 3b 73 75 62 34 3d 26 61 6d 70 3b 73 75 62 35 3d 32 33 38 34 33 26 61 6d 70 3b 73 6f 75 72 63 65 5f 69 64 3d 31 39 36 34 26 61 6d 70 3b 69 70 3d 38 2e 34 36 2e 31 32 33 2e 31 38 39 26 61 6d 70 3b 64 6f 6d 61 69 6e 3d 77 77 77 2e 6d 61 73 74 65 72 74 72 61 63 6b 69 6e 67 64 6f 6d Data Ascii: 10f<a href="https://majorleagueprices.icu/O5akYhpK-PDEA98-tf3X-IiDo3D4a/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdom
2024-12-17 17:18:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49714	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:32 UTC	850	OUT	GET /O5akYhpK-PDEA98-tf3X-IiDo3D4a/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:18:33 UTC	1221	IN	HTTP/1.1 302 Found Date: Tue, 17 Dec 2024 17:18:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: no-cache expires: Tue, 17 Dec 2024 17:18:32 GMT location: http://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com permissions-policy: interest-cohort=() Set-Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a; Path=/ strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v31uiCjht6ObGvv87ODmneAY57jfuImSQ8eq8s1svAI9vBuoAAZVhxqwnVjtE59Ji3yIDAeI5vRrq2ocnMrWiry4kMHtLYHicZ1hyWAIkstXtpPW721k%2B%2F2iY%2FXcoIBajWMCsX9wGr4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3892aff920c46d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1537&min_rtt=1532&rtt_var=585&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=1428&delivery_rate=1855146&cwnd=247&unsent_bytes=0&cid=8b13753f088dd1f8&ts=529&x=0"
2024-12-17 17:18:33 UTC	148	IN	Data Raw: 39 31 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d Data Ascii: 91<html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.25.3</center></body></html>
2024-12-17 17:18:33 UTC	3	IN	Data Raw: 0a 0d 0a Data Ascii:
2024-12-17 17:18:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49716	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:35 UTC	870	OUT	GET /?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:36 UTC	1027	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:36 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close accept-ranges: bytes Cache-Control: no-cache expires: Tue, 17 Dec 2024 17:18:35 GMT last-modified: Wed, 11 Dec 2024 12:36:36 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Crw277qBGr9qkVi%2BhOD1k2ZRUqqCPAvpdt7NGvopjsavlWflDJrSK4I23RDVFyEJxlSZpN6NJ6U6X%2Fpyxen8laShRPs%2Feb30zVzyI9KFzko4fPTKNPsCJHpAIE7eFxc76X13Nm9V7LA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3892c46a730cba-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1711&min_rtt=1709&rtt_var=646&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1448&delivery_rate=1685912&cwnd=215&unsent_bytes=0&cid=d9a0a2519b7d0050&ts=538&x=0"
2024-12-17 17:18:36 UTC	1369	IN	Data Raw: 32 64 33 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 2e 77 66 2d 66 6f 72 63 65 2d 6f 75 74 6c 69 6e 65 2d 6e 6f 6e 65 5b 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 5d 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 Data Ascii: 2d3a<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <style> .wf-force-outline-none[tabindex="-1"]:focus { outline: none; } </style> <meta name="vi
2024-12-17 17:18:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2e 2f 63 73 73 2f 69 6e 33 2d 62 6c 69 73 73 79 2d 63 6f 6d 2e 63 33 61 34 66 30 31 36 32 2e 63 73 73 22 3e 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d Data Ascii: } </style> <link rel="stylesheet" type="text/css" href="./css/in3-blissy-com.c3a4f0162.css"> <link href="https://fonts.googleapis.com" rel="preconnect" /> <link href="https://fonts.gstatic.com" rel="preconnect" crossorigin=
2024-12-17 17:18:36 UTC	1369	IN	Data Raw: 41 4c 45 3c 2f 73 74 72 6f 6e 67 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 26 6e 62 73 70 3b 53 41 4c 45 26 6e 62 73 70 3b 45 4e 44 49 4e 47 26 6e 62 73 70 3b 49 4e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 69 76 2d 62 6c 6f 63 6b 2d 36 39 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 68 6f 75 72 73 4c 65 66 74 54 6f 70 22 20 63 6c 61 73 73 3d 22 72 65 61 73 6f 6e 73 2d 32 2d 62 6f 64 79 20 62 6f 6c 64 20 62 6c 69 73 73 79 2d 62 6c 75 65 20 73 61 6c 65 62 61 72 22 3e 30 32 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 61 73 6f 6e 73 2d 32 2d 62 6f 64 79 20 62 6f 6c 64 20 62 Data Ascii: ALE</strong> \| SALE ENDING IN</div> <div class="div-block-69"> <div id="hoursLeftTop" class="reasons-2-body bold blissy-blue salebar">02</div> <div class="reasons-2-body bold b
2024-12-17 17:18:36 UTC	1369	IN	Data Raw: 6f 77 6e 44 61 74 65 20 2d 20 74 69 6d 65 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 69 6d 65 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 20 66 6f 72 20 64 61 79 73 2c 20 68 6f 75 72 73 2c 20 6d 69 6e 75 74 65 73 20 61 6e 64 20 73 65 63 6f 6e 64 73 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 61 79 73 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 64 69 73 74 61 6e 63 65 20 2f 20 28 31 30 30 30 20 2a 20 36 30 20 2a 20 36 30 20 2a 20 32 34 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 68 6f 75 72 73 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 64 69 73 74 61 6e 63 65 20 25 20 28 31 30 30 30 20 2a 20 36 30 20 2a Data Ascii: ownDate - time; // Time calculations for days, hours, minutes and seconds var days = Math.floor(distance / (1000 * 60 * 60 * 24)); var hours = Math.floor((distance % (1000 * 60 *
2024-12-17 17:18:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 31 30 30 30 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 73 65 63 74 69 6f 6e 2d 32 20 64 61 72 6b 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 75 73 74 6f 6d 2d 63 6f 6e 74 61 69 6e 65 72 2d 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 63 6f 6c 6c 61 70 73 65 3d 22 6d 65 64 69 75 6d 22 20 64 61 74 61 2d 61 6e 69 6d Data Ascii: } }, 1000); </script> </div> </div> </div> <div class="header-section-2 darker"> <div class="custom-container-2"> <div data-collapse="medium" data-anim
2024-12-17 17:18:36 UTC	1369	IN	Data Raw: 74 69 6f 6e 2d 61 64 76 65 72 74 6f 72 69 61 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 70 2d 61 64 76 65 72 74 6f 72 69 61 6c 20 68 69 64 65 22 3e 41 64 76 65 72 74 6f 72 69 61 6c 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 2d 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 75 73 74 6f 6d 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 72 65 61 64 63 72 75 6d 62 73 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: tion-advertorial"> <div> <p class="p-advertorial hide">Advertorial</p> </div> </div> <div class="section-content"> <div class="custom-container"> <div class="breadcrumbs-container">
2024-12-17 17:18:36 UTC	1369	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 65 61 74 2d 63 6f 6c 75 6d 6e 2d 32 20 77 2d 63 6f 6c 20 77 2d 63 6f 6c 2d 32 22 3e 3c 69 6d 67 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 22 2e 2f 69 6d 61 67 65 73 2f 36 36 35 64 65 61 65 38 37 32 33 61 39 62 63 62 31 32 62 63 33 32 65 63 5f 6f 70 72 61 68 6d 61 67 31 2e 73 76 67 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 61 6c 74 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: > <div class="feat-column-2 w-col w-col-2"><img src="./images/665deae8723a9bcb12bc32ec_oprahmag1.svg" loading="lazy" alt=""> </div>
2024-12-17 17:18:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 65 61 74 2d 63 6f 6c 75 6d 6e 20 77 2d 63 6f 6c 20 77 2d 63 6f 6c 2d 32 20 77 2d 63 6f 6c 2d 74 69 6e 79 2d 34 22 3e 3c 69 6d 67 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 22 2e 2f 69 6d 61 67 65 73 2f 36 36 35 64 65 61 65 38 37 32 33 61 39 62 63 62 31 32 62 63 33 32 65 63 5f 6f 70 72 61 68 6d 61 67 31 2e 73 76 67 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 61 6c 74 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="feat-column w-col w-col-2 w-col-tiny-4"><img src="./images/665deae8723a9bcb12bc32ec_oprahmag1.svg" loading="lazy" alt=""> </div>
2024-12-17 17:18:36 UTC	634	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 74 6f 70 2d 61 6c 65 72 74 2d 76 35 22 3e 3c 65 6d 20 63 6c 61 73 73 3d 22 69 74 61 6c 69 63 2d 74 65 78 74 22 3e 4e 6f 74 65 3a 20 53 74 75 64 69 65 73 20 73 68 6f 77 20 74 68 61 74 20 79 6f 75 72 20 62 65 64 73 68 65 65 74 73 20 63 6f 75 6c 64 20 62 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 66 66 65 63 74 69 6e 67 20 79 6f 75 72 20 73 6b 69 6e 20 61 6e 64 20 68 61 69 72 20 68 65 61 6c 74 68 21 3c 2f 65 6d 3e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 2d 63 6f 6e 74 65 6e 74 Data Ascii: </div> <p class="top-alert-v5"><em class="italic-text">Note: Studies show that your bedsheets could be affecting your skin and hair health!</em></p> <div class="p-content
2024-12-17 17:18:36 UTC	1369	IN	Data Raw: 37 66 63 34 0d 0a 4e 6f 2c 20 72 65 61 6c 6c 79 21 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 4e 6f 62 6f 64 79 20 6b 6e 6f 77 73 20 74 68 69 73 20 62 65 74 74 65 72 20 74 68 61 6e 20 44 72 2e 20 4a 65 6e 6e 69 66 65 72 20 53 6d 69 74 68 2c 20 61 20 64 65 72 6d 61 74 6f 6c 6f 67 69 73 74 2e 20 54 68 61 74 e2 80 99 73 20 77 68 79 20 73 68 65 20 72 65 63 6f 6d 6d 65 6e 64 73 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 61 74 20 61 6c 6c 20 68 65 72 20 70 61 74 69 65 6e 74 73 20 72 65 70 6c 61 63 65 20 74 68 65 69 72 20 62 65 64 73 68 65 65 74 73 20 61 6e 64 20 70 69 6c 6c 6f 77 63 61 73 65 73 20 77 69 74 68 20 61 20 4d 69 72 61 63 6c 65 20 53 68 65 65 Data Ascii: 7fc4No, really!</p> <p>Nobody knows this better than Dr. Jennifer Smith, a dermatologist. Thats why she recommends that all her patients replace their bedsheets and pillowcases with a Miracle Shee

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49723	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:39 UTC	779	OUT	GET /css/in3-blissy-com.c3a4f0162.css HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:39 UTC	1048	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:39 GMT Content-Type: text/css Content-Length: 226747 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "6759874e-375bb" expires: Tue, 17 Dec 2024 17:18:38 GMT last-modified: Wed, 11 Dec 2024 12:36:30 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5JbpInd9Pz9l0if4%2FJbsexVcqdW5elyN0dwSB1ysyOE4ZGpkL5H0BeFiYVb%2Bfz%2BIEZFkq0IUyhgi4wahxpnafgUxKccWI1gAwSzbomrW72UxJh56knrJd1LhRsZAubR%2BYJU3wsdePds%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3892d7ff2219ae-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2110&min_rtt=2079&rtt_var=802&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1357&delivery_rate=1404521&cwnd=227&unsent_bytes=0&cid=76ca349839831e63&ts=544&x=0"
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 68 74 6d 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 61 75 64 69 6f Data Ascii: html { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; font-family: sans-serif;}body { margin: 0;}article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block;}audio
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 6e 74 65 72 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 2c 20 68 74 6d 6c 20 69 6e 70 75 74 5b 64 69 73 61 62 6c 65 64 5d 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 20 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 69 6e 70 75 74 20 7b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d Data Ascii: nter;}button[disabled], html input[disabled] { cursor: default;}button::-moz-focus-inner, input::-moz-focus-inner { border: 0; padding: 0;}input { line-height: normal;}input[type="checkbox"], input[type="radio"] { box-sizing: border-
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 42 41 41 48 2f 2f 77 41 50 41 41 45 41 41 41 41 41 41 41 41 41 41 41 41 43 41 41 41 33 4f 51 45 41 41 41 41 41 41 51 41 41 41 41 41 41 41 41 41 41 41 41 49 41 41 44 63 35 41 51 41 41 41 41 41 42 41 41 41 41 41 41 41 41 41 41 41 41 41 67 41 41 4e 7a 6b 42 41 41 41 41 41 41 45 42 49 41 41 41 41 79 41 44 67 41 41 46 41 41 41 4a 41 51 63 4a 41 52 63 44 49 50 35 41 51 41 47 41 2f 6f 42 41 41 63 41 42 77 45 44 2b 67 50 36 41 51 41 41 42 41 4f 41 41 41 41 4c 67 41 34 41 41 42 51 41 41 45 77 45 58 43 51 45 48 34 41 48 41 51 50 36 41 41 59 42 41 41 63 41 42 77 45 44 2b 67 50 36 41 51 41 41 41 41 77 44 41 41 4f 41 44 51 41 4c 41 41 41 38 41 48 77 41 76 41 41 41 42 49 53 49 47 48 51 45 55 46 6a 4d 68 4d 6a 59 39 41 54 51 6d 42 Data Ascii: AAAAAAAAAAAAABAAH//wAPAAEAAAAAAAAAAAACAAA3OQEAAAAAAQAAAAAAAAAAAAIAADc5AQAAAAABAAAAAAAAAAAAAgAANzkBAAAAAAEBIAAAAyADgAAFAAAJAQcJARcDIP5AQAGA/oBAAcABwED+gP6AQAABAOAAAALgA4AABQAAEwEXCQEH4AHAQP6AAYBAAcABwED+gP6AQAAAAwDAAOADQALAAA8AHwAvAAABISIGHQEUFjMhMjY9ATQmB
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 41 44 51 41 41 41 41 45 41 41 41 41 41 41 41 49 41 42 77 43 57 41 41 45 41 41 41 41 41 41 41 4d 41 44 51 42 49 41 41 45 41 41 41 41 41 41 41 51 41 44 51 43 72 41 41 45 41 41 41 41 41 41 41 55 41 43 77 41 6e 41 41 45 41 41 41 41 41 41 41 59 41 44 51 42 76 41 41 45 41 41 41 41 41 41 41 6f 41 47 67 44 53 41 41 4d 41 41 51 51 4a 41 41 45 41 47 67 41 4e 41 41 4d 41 41 51 51 4a 41 41 49 41 44 67 43 64 41 41 4d 41 41 51 51 4a 41 41 4d 41 47 67 42 56 41 41 4d 41 41 51 51 4a 41 41 51 41 47 67 43 34 41 41 4d 41 41 51 51 4a 41 41 55 41 46 67 41 79 41 41 4d 41 41 51 51 4a 41 41 59 41 47 67 42 38 41 41 4d 41 41 51 51 4a 41 41 6f 41 4e 41 44 73 64 32 56 69 5a 6d 78 76 64 79 31 70 59 32 39 75 63 77 42 33 41 47 55 41 59 67 42 6d 41 47 77 41 62 77 42 33 41 43 30 41 61 51 Data Ascii: ADQAAAAEAAAAAAAIABwCWAAEAAAAAAAMADQBIAAEAAAAAAAQADQCrAAEAAAAAAAUACwAnAAEAAAAAAAYADQBvAAEAAAAAAAoAGgDSAAMAAQQJAAEAGgANAAMAAQQJAAIADgCdAAMAAQQJAAMAGgBVAAMAAQQJAAQAGgC4AAMAAQQJAAUAFgAyAAMAAQQJAAYAGgB8AAMAAQQJAAoANADsd2ViZmxvdy1pY29ucwB3AGUAYgBmAGwAbwB3AC0AaQ
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 72 2d 62 6f 78 3b 0a 7d 0a 0a 68 74 6d 6c 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 7d 0a 0a 69 6d 67 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 64 69 73 70 6c 61 79 3a Data Ascii: r-box;}html { height: 100%;}body { color: #333; background-color: #fff; min-height: 100%; margin: 0; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px;}img { vertical-align: middle; max-width: 100%; display:
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 74 65 78 74 2d 69 6e 64 65 6e 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 75 74 6f 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 Data Ascii: : inherit; font-variant: inherit; text-align: inherit; letter-spacing: inherit; -webkit-text-decoration: inherit; text-decoration: inherit; text-indent: 0; text-transform: inherit; text-shadow: none; font-smoothing: auto; vertical-alig
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 2d 77 65 62 66 6c 6f 77 2d 62 61 64 67 65 20 3e 20 69 6d 67 20 7b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 0a 68 Data Ascii: : none !important;}.w-webflow-badge > img { visibility: visible !important; opacity: 1 !important; vertical-align: middle !important; display: inline-block !important;}h1, h2, h3, h4, h5, h6 { margin-bottom: 10px; font-weight: bold;}h
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 7d 0a 0a 66 69 65 6c 64 73 65 74 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 2c 20 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 20 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 2e 77 2d 66 6f 72 6d 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 35 70 78 3b 0a 7d 0a 0a 2e 77 2d 66 6f 72 6d 2d 64 6f 6e 65 20 7b 0a 20 20 74 65 78 74 2d Data Ascii: ion: absolute; top: 0; left: 0;}fieldset { border: 0; margin: 0; padding: 0;}button, [type="button"], [type="reset"] { cursor: pointer; -webkit-appearance: button; border: 0;}.w-form { margin: 0 0 15px;}.w-form-done { text-
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 7b 0a 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 77 2d 73 65 6c 65 63 74 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 33 66 33 66 33 3b 0a 7d 0a 0a 2e 77 2d 73 65 6c 65 63 74 5b 6d 75 6c 74 69 70 6c 65 5d 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 77 2d 66 6f 72 6d 2d 6c 61 62 65 6c 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 72 61 64 69 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d Data Ascii: { height: auto;}.w-select { background-color: #f3f3f3;}.w-select[multiple] { height: auto;}.w-form-label { cursor: pointer; margin-bottom: 0; font-weight: normal; display: inline-block;}.w-radio { margin-bottom: 5px; padding-
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 39 70 78 20 38 70 78 20 31 31 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 66 69 6c 65 2d 6e 61 6d 65 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 72 65 6d 6f 76 65 2d 6c 69 6e 6b 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 20 Data Ascii: 0; padding: 8px 9px 8px 11px; display: flex;}.w-file-upload-file-name { font-size: 14px; font-weight: normal; display: block;}.w-file-remove-link { cursor: pointer; width: auto; height: auto; margin-top: 3px; margin-left: 10px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49724	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:39 UTC	849	OUT	GET /images/66bd384fedeb9d6ee2978d02_woman-blissy-cropped.jpg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:39 UTC	1050	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:39 GMT Content-Type: image/jpeg Content-Length: 159316 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598750-26e54" expires: Tue, 17 Dec 2024 17:18:38 GMT last-modified: Wed, 11 Dec 2024 12:36:32 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k0igH5T78jbL9TgsyTS2VtVbh%2B2WJQDmUaPexQChZk%2Byu%2FAhhRJqiZjsxPlO0lAG3VZMFhBVo9UeybXRrlb%2BaXInHNxgaG13xemdrwUETEg1jdp6p8GTXb2v7Ob8m0FclJsTfmYlDG0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3892d89cbd0f4d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1617&min_rtt=1599&rtt_var=636&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1427&delivery_rate=1672394&cwnd=217&unsent_bytes=0&cid=310059ef73312fb8&ts=533&x=0"
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 0b 59 36 e6 3e 6b dc c6 fe 48 07 5c e8 43 b5 4d 43 8d c7 82 37 37 aa 01 d0 22 c8 39 ae 9b 97 9b ee 80 c8 50 0e 11 6f 62 90 ed 4f 8a f1 90 a4 5f e8 bd f7 45 22 e9 2e d4 95 ee d4 a6 65 00 b9 5e 22 c5 11 b2 5c a3 93 a2 08 8c a9 bb c5 8a 71 21 b0 4d dc 6f aa 70 00 81 d7 74 47 fc 27 aa 35 ef 74 57 ec 4a 02 89 9e 6c 69 64 5c 85 c5 ef bf 77 e7 ff 00 75 d7 b9 eb f8 67 ae 42 e2 f6 b3 bf c3 9d 39 d9 65 d3 3c c1 7e fc 7a 2d 23 06 f8 1b e8 b3 8c 13 ef c7 a2 d1 f0 6d 18 df 45 59 21 39 16 c1 2f 1e e1 23 18 b8 04 25 d8 76 d1 64 0b 37 64 60 11 40 bd 92 8d ea 90 18 0d 10 ee 74 45 68 28 c3 43 a2 0c 20 11 75 ed 7a 2f 5a da 2f 6c 8e 89 ed 8f 92 12 37 40 4e cb dd 0a 5d 9b d6 b6 b6 d1 78 1f 05 ed 87 92 f7 a2 03 c7 6b 2f 6c 7f 44 17 d4 e8 bd cd ad 90 3d 07 61 7e a8 43 bc 91 09 Data Ascii: Y6>kH\CMC77"9PobO_E".e^"\q!MoptG'5tWJlid\wugB9e<~z-#mEY!9/#%vd7d`@tEh(C uz/Z/l7@N]xk/lD=a~C
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 63 7a d2 3b f2 ae 3b fa 47 c6 3b 19 bf 22 9a ac 7b 72 f3 45 8f 92 07 6f b6 88 40 04 94 07 42 9c 6a 2d ac 80 94 67 79 22 d9 00 1b 84 53 e9 74 3f b2 0b 25 ad 00 5b 54 04 59 18 a2 5a d7 48 00 0f 04 52 8c 50 11 70 83 84 ca 49 fb f8 a5 9d b2 49 c8 06 b2 8f 15 5b c7 07 71 da ab 2c be 97 55 bc 77 e0 72 70 eb 3d af bf 6a 53 19 6d ca 9f 57 fd f1 4c 64 f8 56 84 bd 70 ac 7d bd b6 5d 73 94 4d a9 e2 f4 5c 8b c2 bd 2b da ba eb 28 ff 00 0f 16 9d 14 7d aa 2e 51 8b 01 e8 94 1a ff 00 b2 24 7b 04 a0 ba 0c 76 1d 92 ed 96 c9 bf 50 8c 0e a8 d6 c1 c0 97 5d d1 9b 21 d8 a6 e0 fc d0 87 1b a5 a3 39 13 10 77 bf 44 76 cb e0 9a 8b 84 20 91 a5 f5 41 9d b6 64 71 35 b7 29 98 71 b2 38 28 d4 a0 f4 4d 7d 90 89 82 66 1d 7f 24 3c c5 2d 03 d1 30 46 ed 07 52 99 73 9d 02 30 7e 88 d0 3d 12 8b 04 Data Ascii: cz;;G;"{rEo@Bj-gy"St?%[TYZHRPpII[q,Uwrp=jSmWLdVp}]sM\+(}.Q${vP]!9wDv Adq5)q8(M}f$<-0FRs0~=
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 1a a1 d8 04 18 50 38 a1 3b 22 ee 83 79 bb a4 6b be e1 de 89 61 a2 42 bc fb 87 7a 20 39 33 e9 3c 3e c3 50 7c c2 f9 bd c5 cd 67 93 d5 7d 21 fa 4e eb 87 d4 7a 85 f3 77 8b 40 99 a5 f5 5a f1 74 cb 2e d9 ae 0e eb 55 b3 f3 2e 83 e1 e3 bd c4 2b 9e 70 bd 2a 99 ea ba 03 87 4e f7 10 ad 6b 1c 9d 03 93 4d 8c 6b 76 ca ce bc 0c 58 1e 4f 75 9d 11 e9 75 bb e5 57 73 40 c5 97 db 35 f6 90 82 d6 a9 6a 61 6b 28 7a 27 5d ad 52 d4 fb b5 00 18 c5 fd 91 de 8b 90 3e 91 cc fb 34 e7 fb 85 76 06 2f ad 2b bd 17 23 7d 23 63 fb 1d 49 b7 e0 29 55 e3 db 94 5a 2e 4f 82 f5 82 10 35 3e ab c4 59 36 a2 1f 04 07 4d 10 db 74 04 6a 80 29 1a ec bd d7 55 ef 44 07 73 a5 d0 60 b6 a8 0e e8 48 e8 80 e8 90 14 ef e4 8a 74 08 e6 c4 6c 8a 7c 12 1d 08 77 48 bf 74 b1 49 38 14 03 69 85 82 ac e3 86 ec 77 82 b3 Data Ascii: P8;"ykaBz 93<>P\|g}!Nzw@Zt.U.+p*NkMkvXOuuWs@5jak(z']R>4v/+#}#cI)UZ.O5>Y6Mtj)UDs`Htl\|wHtI8iw
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: e8 80 dc 7e a8 2e 87 9b 4d 50 41 bd c2 1f 8b f4 45 1d 2c 84 1b 94 74 63 02 8e 2d d5 13 f5 46 1a 20 0e dd f4 47 68 20 a2 0d b4 4a 03 7f 32 91 94 1b f9 a5 9a 12 4d 16 1b 6a 95 66 84 25 47 6f ba b1 e8 c4 42 40 3e 28 62 37 6a 2b 85 ca b4 1c d3 9d 53 f6 3b 45 1d 4c 45 d3 f6 9b ec aa 08 5b 9f 5b 75 43 ce 7c 52 40 eb e4 86 fb 2b d1 94 e7 d7 75 e2 e0 4a 27 55 e0 51 a0 31 36 08 43 f4 44 dd 0d c5 91 a0 54 3d 08 75 d2 40 a1 bd 91 a3 2a 1d 75 eb a4 f9 b4 dd 78 94 80 dc da a6 f8 85 fb 07 fa 25 5a 75 48 e2 27 dc 3b d1 1f 66 e5 0f a4 df ff 00 4e a8 f5 0b e7 07 16 47 bd 97 d5 7d 1f fa 4c ff 00 f4 da 83 e6 3f cd 7c e1 e2 b6 b2 4b ea af 8f a6 79 32 dc 30 da ad 9e ab 7e e1 db bd c4 4b 01 c3 cf 2d 4b 3d 56 f3 c3 a7 7b 98 75 5b b1 c9 bf e4 f7 6b 12 dd f2 9b 81 85 8b 05 ca 0e Data Ascii: ~.MPAE,tc-F Gh J2Mjf%GoB@>(b7j+S;ELE[[uC\|R@+uJ'UQ16CDT=u@*ux%ZuH';fNG}L?\|Ky20~K-K=V{u[k
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 87 44 43 a1 37 46 3a 14 5b 6e 4a 66 29 23 f4 44 3a 9d 11 8e c7 5e a8 84 74 ba 08 04 d8 6e 80 5a fa 8b af 5b a2 02 48 36 41 9d 41 61 65 23 07 9a 8b a7 b9 2a 4e 10 0d b5 48 1c 5d 10 be c5 79 ce 21 23 23 fc d6 39 d3 29 cd e0 8e d2 00 4d a3 70 4b 83 70 96 34 8a 83 aa 1b d9 14 1d 35 41 6d 56 d0 ca 6e 34 5e ba 28 20 21 db 5e 88 03 5d 08 28 a2 c4 a3 6e 91 0c 35 28 74 45 0e b2 35 ad a9 48 07 a6 a8 da 79 a2 8f 2d 91 af f2 40 0a 30 17 d5 14 14 3b a1 41 16 f5 46 02 e1 14 0b 23 01 64 c8 20 d9 1b d1 14 7e e8 76 28 31 ac 87 74 17 be da 21 02 da dd 03 41 16 ba 10 81 bb a1 69 37 48 0c 2f 61 e2 85 a2 fb a0 b5 8a 10 9d 30 d8 80 8d b0 5e f2 2b d6 f0 44 03 6e 02 f3 7c 97 bc 02 33 4f e8 85 05 a1 18 6e 3c 11 40 28 ed 06 c8 0b cf 0a 47 fc fa 3f 52 bb 73 22 7f 07 0f e5 0b 89 b8 Data Ascii: DC7F:[nJf)#D:^tnZ[H6AAae#*NH]y!##9)MpKp45AmVn4^( !^](n5(tE5Hy-@0;AF#d ~v(1t!Ai7H/a0^+Dn\|3On<@(G?Rs"
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 6f e3 93 e6 aa c7 02 36 d9 26 fc 0c f8 23 c6 0d d5 da 2e 2e 4c 37 92 44 ea 2e 31 3d bb c9 27 cd 67 6e c1 1e 0e 81 24 70 77 ef 64 68 f7 5a a4 5c 66 37 d6 59 3e 69 dc 7c 69 68 b7 be 91 63 8e c2 9f 7d 91 5d 86 3c 6c 96 a0 dd 6e 11 71 a9 9a 7b f9 3e 69 c0 e3 44 76 fb e7 dd 60 be c1 28 f1 45 34 92 81 a1 28 f1 2f 2a d8 f1 de 2a 32 b2 02 04 af 37 59 7e 39 8c 9c 4e 52 79 89 04 f5 51 62 8e 53 e2 8e dc 3a 4b 84 e6 32 0d a4 30 1f bf 0b 4d c1 47 70 5f c1 50 70 2c 3d ec 94 12 16 8b 84 42 5a d1 7f 04 64 9d a5 e3 dc 27 0d 1b 59 23 18 4b b5 b6 37 59 19 40 2c 8c 34 3a a2 84 7b 20 0c 02 1b 58 5c 20 17 b2 1d f6 d1 20 f5 ec bd a0 2b c3 55 eb 74 4c c1 6d 57 8e 83 64 3f 08 5e 3e 29 01 50 69 aa 31 08 0d b6 b2 40 42 6f ba 29 28 e4 59 14 8e a9 81 09 40 e4 62 2e 8b be e8 1d 88 51 Data Ascii: o6&#..L7D.1='gn$pwdhZ\f7Y>i\|ihc}]<lnq{>iDv`(E4(/**27Y~9NRyQbS:K20MGp_Pp,=BZd'Y#K7Y@,4:{ X\ +UtLmWd?^>)Pi1@Bo)(Y@b.Q
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: eb 56 1d 8a 5a 24 c8 7d 97 84 8a 20 62 8d b6 e8 c3 14 6f 8a 34 69 6e 7b 21 e7 ba 89 18 a3 0e e5 0f d6 6d fe a4 04 af 38 fd 50 97 0b 28 a1 89 37 fa 91 be b1 67 f5 6a 90 48 f3 00 bd b2 61 f5 8b 0f 55 ef 6f 6d b5 28 33 fe 60 4a f1 b1 d1 31 f6 e6 5b 42 bd ed cd b5 c1 41 1e d8 1f d1 05 87 8a 68 2b 1a 0e e8 de d8 d3 d5 00 e4 b4 22 96 8b 9e 89 b9 ab 6f 8e 8b c2 a9 a7 aa 4a 2f c8 10 18 80 3e 49 23 54 db 6e bd ed 20 9d d3 21 8c 23 d5 15 d0 8f 04 3e d0 d2 37 5e f6 81 6d d0 62 ba 9d a7 64 53 4c df 0d 52 a2 66 8d 10 09 9b ad 92 04 7d 94 78 22 9a 46 f8 5d 2f da b5 78 ca d2 98 35 f6 26 93 b2 29 a1 69 3b 68 9d 99 5a bd da 36 e9 03 13 40 dd 6c 11 0e 1c cf e9 52 1d a3 42 02 f6 92 13 d9 23 4e 18 df 04 9b b0 b6 0e 81 4a 17 b5 78 bc 58 24 68 87 60 ec 3d 12 4e c1 9a 7a 29 a2 Data Ascii: VZ$} bo4in{!m8P(7gjHaUom(3`J1[BAh+"oJ/>I#Tn !#>7^mbdSLRf}x"F]/x5&)i;hZ6@lRB#NJxX$h`=Nz)
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: f2 62 75 23 c1 c9 b9 08 9d 35 10 8b 22 5a c7 c5 1c db a2 0d d3 32 67 50 bc 35 16 46 b6 b7 45 20 24 04 d7 64 07 a6 a8 e4 22 90 8a 05 21 78 84 3e 68 2d e6 90 06 c8 97 b8 f3 47 d8 a2 14 87 fe 12 7e 81 34 aa 3c ad 27 aa 76 fb 59 32 ab 36 61 41 a9 b8 ed 53 98 4d 8d 95 4a 6a c7 b8 93 75 64 cc 0d bb 8a aa 48 2e 4f 45 ae 37 d0 37 9a b5 e0 ee 52 22 be 57 9e ed ca 09 58 5f 20 68 ea 56 81 92 f2 29 c4 f9 0b 99 cd 70 95 35 11 b3 55 9d 79 1c 80 cd 54 37 63 97 48 d0 f0 69 b2 c4 d3 d8 0d af b2 5d fc 14 63 bf 90 3e 4a 4d cc fe d7 52 dd da e4 26 be a2 c3 47 2e 8f 7f 04 5a ef e4 0f 92 46 4e 07 8f fa 08 1a 73 bb 71 09 fa 87 23 7d 65 30 e8 e5 d0 2f e0 7e 96 10 04 dd dc 10 3f f4 50 18 3b 71 59 41 d9 c8 df 5b c9 7b d9 cb 70 77 03 de 7f 92 92 77 03 df 6f b9 4b 63 4c 57 eb 89 3c Data Ascii: bu#5"Z2gP5FE $d"!x>h-G~4<'vY26aASMJjudH.OE77R"WX_ hV)p5UyT7cHi]c>JMR&G.ZFNsq#}e0/~?P;qYA[{pwwoKcLW<
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: bd e0 84 6d b2 0c 61 e2 8e d0 88 07 ea 8e 10 1a 6f 06 87 fc e1 96 f3 5d ab 93 85 e9 21 fc a1 71 6f 06 05 f1 66 7e ab b5 32 77 f0 90 fe 50 b1 fb 69 16 7c 44 fd 95 c3 c9 73 b7 17 8d 84 be a1 74 4e 25 fc 23 b4 e8 b9 cb 8b a7 ef 6f e4 a8 d8 9d fb ee f5 4b 46 75 09 03 72 f7 5b c5 2f 1a ba 83 a6 a2 48 e4 66 e8 12 13 3e ca 40 4b 80 25 1d af e8 8d 49 42 fa 92 08 06 c5 4b 43 97 65 73 6f 62 98 44 38 80 0a 87 c6 24 e5 89 de 8a e5 26 5e 95 ac 26 c5 54 f3 2d 0b e0 89 f7 07 44 8d 9f d7 55 bb b6 3d e4 c6 aa b5 c1 a6 ce 4a 56 35 ce 9c 80 35 ba 27 d5 33 4e d3 66 9d 53 08 97 e2 4f e6 dc d9 1d 93 f6 80 df 74 e6 4c b9 3b 35 2d 36 49 b6 89 d0 92 08 37 54 92 2e 2d 07 c1 24 1c 2e 9c 4d 4c e7 5a c0 a6 e2 95 f7 b6 a8 f4 0b c4 f1 ba 70 d9 35 4d e3 a7 20 6b 74 a5 ad a2 46 3b e5 e8 Data Ascii: mao]!qof~2wPi\|DstN%#oKFur[/Hf>@K%IBKCesobD8$&^&T-DU=JV55'3NfSOtL;5-6I7T.-$.MLZp5M ktF;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49725	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:39 UTC	811	OUT	GET /images/bottom.webp HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:39 UTC	1046	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:39 GMT Content-Type: image/webp Content-Length: 54686 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598751-d59e" expires: Tue, 17 Dec 2024 17:18:38 GMT last-modified: Wed, 11 Dec 2024 12:36:33 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2Fr5g%2FbYuv66S9ScPvkKr1EU49EcNStT2wdb7yYpsnLaV5Rjqrk%2FbTflcdj5IamUnJGVeej5ZAN3IkcF2RxRYmBX4aCYEflfBB03qz92NFbrLjnzwOJ7nMVLz7kJm2cMHq8Ts0nkrrg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3892d978318c87-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2046&min_rtt=1991&rtt_var=857&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1389&delivery_rate=1199671&cwnd=214&unsent_bytes=0&cid=480194f8b88f7fdb&ts=545&x=0"
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 52 49 46 46 96 d5 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 83 03 00 a2 02 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 7e 3a e7 ca f7 85 ce 37 d7 b0 e5 8a b8 b1 ea 12 40 63 cc 61 35 ae 45 84 20 08 60 f2 6f eb ba c5 94 96 d7 85 7d b8 cc 45 a2 2e a4 10 98 05 4e 6e 7b 1b 94 82 3a b5 ce e9 9c fd e7 ca 9b 63 2d e0 66 e7 20 d6 b2 21 fb 66 7c cb 35 d8 69 7e 48 25 52 3e 31 29 9c 92 a5 82 35 91 64 9a 79 c2 3c 30 b6 f3 59 2f 2a 8e 23 45 0e 1f fd 2f 6a 9e a0 c8 5b a4 8c 2b 4c 22 bf 29 50 90 23 a3 c9 04 1f a6 4e 5c 5e 56 97 33 0d 78 9a 4e 82 1e 3e 85 fc 9f 60 cc 0b 0d bf 41 5b 6c 4d f8 a0 09 34 c3 59 9a 89 3f 76 01 8b cf 01 75 ae 32 41 fb 44 54 a8 27 1c cf 48 6e c4 14 a0 ac ef d8 5e 6a 4e c4 f0 b4 4a 54 0a 10 90 d3 3d ed 66 94 08 09 fb dc 82 d6 91 4d 65 02 72 37 d2 dd 7c 72 84 19 41 f0 36 d2 fb f4 28 aa be e6 ce 13 6c 6c 6b 33 5e 1f f8 6c 05 77 96 a6 d4 11 a5 2e 02 ec 79 9a 04 66 5c Data Ascii: ~:7@ca5E `o}E.Nn{:c-f !f\|5i~H%R>1)5dy<0Y/*#E/j[+L")P#N\^V3xN>`A[lM4Y?vu2ADT'Hn^jNJT=fMer7\|rA6(llk3^lw.yf\
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: b7 0b 80 79 e8 30 cb ca 91 a8 09 6c 9d 14 80 ad 68 f5 d5 ac da d6 33 35 2f c7 e5 23 c6 e4 47 77 78 36 f8 d1 37 f2 d9 2e 6a 1e 98 ce 13 f6 d6 53 f4 4a 3b 64 a8 c2 5e 90 96 4b 1c 9b 28 f2 c6 54 c3 68 0e e3 19 45 11 ba 56 42 71 d5 6c ab 02 bc d2 24 a8 df 60 2a a6 3f d6 17 85 a3 b3 60 cb c2 2f 3b ad 6c 1f db 86 12 82 63 76 2a 51 cc f9 9d 15 f4 be 11 a1 f0 a9 56 41 be 12 d9 02 bd d8 07 f9 cb a2 b5 90 83 b9 eb 06 6e ef c1 68 60 ec 16 1a 4d 57 9a db d6 17 04 7b 13 12 a4 6a b1 e7 01 82 89 b8 12 33 f6 4a 68 7f 22 3e d9 a7 1d 81 bb 99 5c e9 54 83 51 c8 cb 97 13 6b 28 ac f5 e5 5e 18 ca be 1c d1 a7 fc 05 28 f7 48 88 c0 d6 eb eb 5b da 2d d6 33 1f b3 70 b6 5c 95 3e 69 d3 94 82 e4 a7 14 31 24 c6 1d 29 3d f1 25 be 62 46 63 20 55 b7 24 2e 46 88 01 2f 22 5f 35 f0 c9 9c 39 Data Ascii: y0lh35/#Gwx67.jSJ;d^K(ThEVBql$`?`/;lcvQVAnh`MW{j3Jh">\TQk(^(H[-3p\>i1$)=%bFc U$.F/"_59
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 39 b9 5f b5 a0 fb 91 d5 6f 9e a2 dd 20 86 24 32 c4 8b a5 92 12 e8 71 8f 84 3f 50 23 36 9d f0 8e eb ef 8c 68 c9 3c dd ab 03 23 33 c3 88 d7 44 91 48 9c 9e 22 7a 0f a4 8c 14 fb 24 9c 25 70 2c 3d 55 43 aa 4e 1a 31 fd fa 03 fb e5 85 b3 6f 87 59 6a dc 94 bb d3 04 44 b1 92 9a f3 be 11 7e 7d fb 1e ee a3 ec 57 e3 fa e8 de de eb e8 b1 a2 60 4b ed 90 80 cb c1 71 e2 b4 73 61 83 f8 bc 2b 7f 0f 0b 32 e5 14 cb 86 eb 6f 60 f3 36 09 d0 e8 04 11 a6 5e 7c 3d 55 2c b3 ab 68 5c a5 5c e4 62 87 05 d2 a1 67 27 6b 3b 89 cf b8 58 82 c9 5a ce 84 fb 77 52 9e e7 aa e2 7c 97 29 ea 5b 48 c7 cb 79 ec 27 e8 7f f0 bb 2f 25 b3 62 83 d0 35 e2 f9 ec 2f 7f ed a4 30 32 ed 46 a1 52 d9 72 8e 54 93 31 79 bd 6d e5 89 9b 11 3e a7 ca 8f 0d f6 b5 00 62 75 b6 aa 63 2c 72 5c ac 1e 89 1a bc b3 19 6d f8 Data Ascii: 9_o $2q?P#6h<#3DH"z$%p,=UCN1oYjD~}W`Kqsa+2o`6^\|=U,h\\bg'k;XZwR\|)[Hy'/%b5/02FRrT1ym>buc,r\m
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: d9 ba ec 9c c9 ff 57 12 26 c4 a5 1f b2 32 7b 71 bb e1 1d 39 31 50 20 76 fc 28 05 b7 14 f4 f4 e9 66 31 9a 8a da a3 96 8d d1 ea 23 c8 7b f6 10 4d d3 05 b5 84 c3 e8 bc 68 3d 4d 6a 36 5c 0d 9c a5 39 e2 c8 1b 59 f8 d5 39 03 60 e0 e8 e8 68 70 5e 24 0d 73 11 9e 89 4e df 04 34 33 ba be c6 4e af c6 09 f6 a5 70 46 70 60 50 4b 73 11 f7 91 f5 11 42 2d ae 3e 3f fd a0 14 d2 34 ce b2 cf 0a 26 7e a8 8e 48 45 10 51 f0 9d 8c 72 b7 78 42 27 a5 68 11 dc 9f 4d 6d 8d 8c e7 b7 0e 01 b9 fa cf 59 eb 28 40 c3 a8 eb 24 49 fb c0 4c 4e 5f d7 dd 64 be e1 49 f7 57 e9 20 01 5f b2 36 82 1f 34 cf 7e ff f8 e6 5d 1e c9 8a e1 4c 75 7d 2e 54 e4 34 1a 99 2e 5a 56 ac 9f c2 8e fc 92 d5 76 01 d0 bc ec 39 62 db 23 6c d2 07 45 4d 7d 9e 20 0b 0a f0 ce 94 9f 07 7c 72 23 5f d2 1c 26 97 d6 c8 e6 94 05 Data Ascii: W&2{q91P v(f1#{Mh=Mj6\9Y9`hp^$sN43NpFp`PKsB->?4&~HEQrxB'hMmY(@$ILN_dIW _64~]Lu}.T4.ZVv9b#lEM} \|r#_&
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 92 46 0c c7 15 4f c7 75 fe 55 b6 6f 54 09 9b 36 0b 11 39 f5 0f 59 2c 41 b2 23 76 e8 c3 f0 82 90 b9 d1 7d 1b 13 12 eb 52 11 fd 84 ca fd 5b 9e dc ee c2 b4 86 29 0b 60 07 3f a9 f0 9d 39 f3 c6 59 cc 6c 77 90 af 18 91 4f ba fb bc 20 e8 24 7b cd e4 0b 5a 0c 04 96 44 fb 2d 56 09 f6 cc d4 12 19 e4 12 08 19 dc 39 17 2a 88 7c 71 3b 3a 96 15 4b 85 11 aa 32 35 d0 42 1b 74 dc b0 8f 7b 04 92 28 04 0e 63 d4 fd ce 42 a4 8f 37 46 c1 b6 5a b0 52 a8 80 2b b0 ac 8d b6 49 2e f9 9e 46 51 a6 1d 77 ba 6c 42 ed d8 dc 99 cf 5f 2d 00 b4 06 b2 41 1f e1 0c f8 ee 33 6b b4 02 c6 99 bf 90 9e 3a b8 fd 5e 5f 63 d9 fc 93 4b 87 79 5f bf ee 86 db 18 f4 15 c2 30 e4 ad 32 27 f6 ed 70 49 b8 09 50 90 91 ea 67 43 c9 ed cd 73 9e fd 54 9e da 48 9e 44 f3 62 88 5a a7 f9 05 91 b3 ad b5 03 c7 74 35 a2 Data Ascii: FOuUoT69Y,A#v}R[)`?9YlwO ${ZD-V9*\|q;:K25Bt{(cB7FZR+I.FQwlB_-A3k:^_cKy_02'pIPgCsTHDbZt5
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 60 32 d8 e2 1f ae 29 c4 40 4b c4 19 33 c5 ff 62 a9 ab fb 3e 9e 23 3f b0 c9 4e 1d 4e 15 44 17 64 b4 b6 85 e2 bc 41 63 f1 64 15 1a 09 25 00 b3 d4 a6 bf a2 c7 2c f7 83 8a 56 b7 1b 7f e8 65 c2 ed fc 5e 6e ee a3 5d a2 fe 35 df 5c 96 04 60 97 00 24 96 e0 d1 fd c0 5a 61 59 06 a7 6a f3 82 cf d8 d1 46 f1 6a a9 2d 22 1a f6 31 70 35 54 84 7a 99 de d8 ed eb c7 04 ae 22 48 37 35 9b 35 59 7a d1 10 41 d2 0f e0 c4 ab 66 03 7b ae 60 87 17 52 8f e8 74 50 1d 14 f5 53 95 b4 96 6e 13 ed 63 4f 12 fa 78 7c 10 ff 27 b3 42 83 89 6a 6c 4b f2 6b 7b 59 8d 9a 60 75 c6 ff 2f f3 c2 b4 e4 66 db b8 f7 5e df 9d ca 09 b5 c5 72 fd 1f 79 70 f1 14 6a 5e f1 f2 70 91 26 61 fc e2 43 64 49 76 06 19 02 ab 46 f9 78 22 be 3f 1f e3 00 24 fb b7 37 91 7a bf 12 0e 9a 8e b0 72 f0 b1 3f 78 e3 f3 a2 c5 8a Data Ascii: `2)@K3b>#?NNDdAcd%,Ve^n]5\`$ZaYjFj-"1p5Tz"H755YzAf{`RtPSncOx\|'BjlKk{Y`u/f^rypj^p&aCdIvFx"?$7zr?x
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: f0 94 fe be 93 9d 54 b3 b7 76 18 e5 c6 ec e5 7d 8b ae 75 42 3e f2 30 6c 2f 52 a4 b8 bf d9 db 64 db cc d0 fd 93 68 b9 6b 34 d9 5d 8e 80 00 fe ff 00 eb c8 94 f1 d9 14 db e9 da 0f 37 bb 02 cf 7b 43 80 4c 7a 7f fc 15 62 a3 6c f7 c6 60 f9 a8 dd f8 86 de ae 90 6a c9 e9 9b 56 48 79 72 0c 70 f8 6a 95 db 04 94 0e 88 1b d2 66 dc dd bd 36 b7 3d 33 1f f7 ac ba a9 a8 3c 85 66 4d 96 71 f4 a3 5b 82 35 8b 7d 30 67 11 73 72 2e 69 fb 08 61 bb 7b c3 93 44 b2 d3 68 19 92 5b fd c9 25 e2 85 87 0d 35 26 a0 bd 84 92 2d 80 29 41 08 bf 66 07 6d 3a cd d7 38 c5 4b 8f 19 79 10 d0 3c 00 7b 6f 03 fa 99 49 79 99 3e fe 3b 27 48 83 9e ab 2c e2 0e ed 2e c8 ef fb ff de be 68 59 13 fa 85 04 66 8a 43 ee aa a4 75 05 89 ee 1a 14 22 1f ae 64 37 9f ee c5 39 7d 21 21 07 5f 52 55 d7 52 f3 b5 10 70 Data Ascii: Tv}uB>0l/Rdhk4]7{CLzbl`jVHyrpjf6=3<fMq[5}0gsr.ia{Dh[%5&-)Afm:8Ky<{oIy>;'H,.hYfCu"d79}!!_RURp
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 62 ca af fa 44 a2 88 11 d2 97 15 00 ab f8 c7 07 fd 33 a9 5f 99 3c f0 1e 8b a0 72 70 c1 00 db 9e e0 5e 27 2d 35 e1 27 4e e6 53 7d de 6b 3c 3f f5 84 5c ee 04 45 01 de f1 2e 7e f4 04 1c 4a 5d 9c 59 50 bf 11 50 bd 6c 0e e4 1f 73 dc a9 ce 59 bb ed 15 72 db 8f c4 ab f0 14 e0 f5 a6 8f 9b a7 b6 a0 25 9e a5 28 66 3d ef a0 6c f6 d7 6d 51 30 96 cd 43 59 e6 9f 1e 80 b8 e9 e5 df 55 f9 7c 3b 2b 20 07 9e 0f 0e 19 4b ac 68 c4 a4 26 cf 44 5d 5c f4 00 4f e7 75 84 b3 63 18 00 4b 7e 8d 19 c7 eb 8d 5e 96 5c 67 f7 bf f9 92 f0 b7 5d 86 ed 93 98 6b 80 50 f2 be e6 28 4c b7 07 8c 70 1f fb 82 64 fe 34 48 c0 7f d1 10 24 06 f0 26 66 49 4b b2 5f 7f b1 8a fd 95 a1 81 89 d9 5f 38 d3 63 ca a8 f0 d8 32 d5 3f c6 37 27 32 c5 63 29 07 8f 3c 5d 5e f7 01 ab 3e 60 4b b5 76 5d 7d cb 50 3a 81 26 Data Ascii: bD3_<rp^'-5'NS}k<?\E.~J]YPPlsYr%(f=lmQ0CYU\|;+ Kh&D]\OucK~^\g]kP(Lpd4H$&fIK__8c2?7'2c)<]^>`Kv]}P:&
2024-12-17 17:18:39 UTC	1369	IN	Data Raw: 2a 1a b3 ad ec be be fc 15 75 37 14 1d 34 b1 1c 59 ed 7a 65 84 95 d7 ae 6f ae 29 92 d3 d0 90 3c e9 8a 30 8e a7 0c ab 7b 3f 05 2f 35 e8 e5 cc 95 5b 98 41 0d e7 f8 5f 89 b9 65 83 92 7e 7e 69 ab 92 60 cd a2 d1 26 56 c0 87 5f 5c f4 fa ce 6c ec 2f 4d d0 82 d4 c5 88 28 af f8 b6 98 e6 57 86 a7 2b 63 65 ab df 42 37 32 0c 82 91 5c 8a dd ec 32 1b 39 b0 0d 81 77 f0 fe 46 be 4e 1c 35 e7 85 14 1c d7 be 03 b7 33 eb 6d d2 0a e9 63 74 dd f7 16 d3 98 75 af 58 a8 96 2d b7 33 05 19 98 5d 4a 8e 8d 19 06 67 8d 83 08 07 af 7a 3b a8 23 e0 59 73 d2 8a b9 f9 92 bc 71 5b 6e 6d 69 2b d9 52 78 2a 42 03 6d 45 94 96 01 55 0e 54 80 bc f4 cd 05 9b 39 18 d3 2f bb b4 09 58 94 46 0b 51 ba ba 54 65 16 4b 1e 39 2a 36 7b 60 8d a6 f9 c2 8c 87 55 37 11 2f f8 28 3b 70 34 0d 04 41 45 5b de fa 3f Data Ascii: u74Yzeo)<0{?/5[A_e~~i`&V_\l/M(W+ceB72\29wFN53mctuX-3]Jgz;#Ysq[nmi+RxBmEUT9/XFQTeK9*6{`U7/(;p4AE[?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49735	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:42 UTC	843	OUT	GET /images/665deae8723a9bcb12bc315a_blissy-box-500.jpg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:43 UTC	1054	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:43 GMT Content-Type: image/jpeg Content-Length: 64282 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598753-fb1a" expires: Tue, 17 Dec 2024 17:18:42 GMT last-modified: Wed, 11 Dec 2024 12:36:35 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VCtSmOfHFjpI5n2y5EU2fjv5CNtER%2F2oNmEWI%2F4UtG02Q8%2BHYjQmqsWvVrfds%2F9cbCCthuOEr38WU950XxUZJB7R28megu%2FEIPBgunY745N%2Ffo7m3oysGSYB9XXHS4P%2Bmzd9DRcDLpM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3892ef5f2c1885-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1509&min_rtt=1499&rtt_var=584&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1421&delivery_rate=1841109&cwnd=193&unsent_bytes=0&cid=0f631374ae8c1810&ts=535&x=0"
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: ff d8 ff e1 10 37 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 f4 01 00 00 01 01 03 00 01 00 00 00 4d 01 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 22 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d6 00 00 00 69 87 04 00 01 00 00 00 ec 00 00 00 24 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 31 30 3a 32 31 20 31 35 3a 34 35 3a 31 31 00 00 00 04 00 00 90 07 00 04 Data Ascii: 7ExifII*M(1"2i$''Adobe Photoshop 25.11 (Macintosh)2024:10:21 15:45:11
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: ef 14 de ad 9f bc ab e4 64 0a eb 2e 0e 63 48 8d 5f 25 ba f8 fa 7e f5 8f 95 d5 b2 b6 ef 01 82 3b d3 6b 5c 34 ef ee db 7d 5f f5 ca 2d a7 f7 eb b1 43 2c c6 3f a4 7e d5 c7 84 6e 07 d8 ef 9b ed 9d 1d f8 04 ff 00 68 b3 f7 bf 00 b9 6c 6f ad 75 b1 fb 6e 0e b0 1d 76 10 05 83 f7 b6 7b 9c cb 1b fe bf a2 fe 8c b4 99 d4 f1 dd ee 6d 9e a5 4c 06 c0 78 71 a0 c0 c9 63 da 7f c2 62 6e 65 fb bf c2 51 ff 00 5f 42 3c c1 3b 48 fd a8 12 c7 d8 3a ce be e0 26 78 d4 68 39 5a 83 85 cf 8c 92 03 1b 61 fd 21 f5 2a 7f f5 ea 30 5d fd b6 fe 95 74 2a cf 2f 23 2e 2b 24 d5 6e b7 25 69 41 49 24 92 9d 8d 49 24 92 4a 7f ff d1 f4 fc c3 18 77 9f 0a de 7f e8 95 f3 85 c4 36 cb 49 e0 39 df 81 5f 47 e6 7f 44 bf fe 2d ff 00 f5 25 7c e1 96 f3 65 d9 0f 70 05 cf 7b dc e6 8d 01 2e 25 d0 21 03 ba 7a 37 5f Data Ascii: d.cH_%~;k\4}_-C,?~nhlounv{mLxqcbneQ_B<;H:&xh9Za!0]t/#.+$n%iAI$I$Jw6I9_GD-%\|ep{.%!z7_
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: db a5 b8 f6 7f c2 52 ef fb 71 9b 2d ff 00 08 8a 9d 79 11 f4 4a 8c c9 d1 a5 03 ed 1b 74 3a 27 6e 50 94 94 9e 0f 82 5b 5d e0 a0 32 5b e2 9f ed 55 f8 84 94 cb 69 fd d2 98 b1 de 09 be d5 5f 8a 5f 6a 62 4a 58 b1 de 09 8b 5c 39 09 9d 96 c4 07 e7 30 6a 92 9b 1a 0d 62 0f 8a 7f da 0c ac 4d 84 16 f8 f7 59 59 1d 44 9d 01 d1 3f 4d ac e7 65 cb c4 d3 4f b9 e0 f0 4f f8 36 7f df d2 53 bd 55 ad ba b6 d8 d9 0d 76 a2 44 18 f8 15 34 92 49 4f ff d3 f4 dc f6 35 f8 39 0c 7c ed 75 4f 6b a3 98 2d 21 79 75 7f e2 b3 ed 2e b2 d1 d5 4d 4d 2f 30 d7 63 ef 31 cb 7d cc be a6 ff 00 d1 5e ab 90 01 a2 d0 75 05 8e 91 e5 0b 27 1a a1 50 7b 46 a2 41 07 e2 12 53 c2 9f f1 51 93 a4 75 f7 18 e2 68 7f f0 cb 72 63 fe 2b 7a 98 fa 3d 7b 9f f8 3b 47 e4 c8 5e 83 29 e5 25 3e 71 67 f8 a9 ea 96 19 7f 58 aa Data Ascii: Rq-yJt:'nP[]2[Ui__jbJX\90jbMYYD?MeOO6SUvD4IO59\|uOk-!yu.MM/0c1}^u'P{FASQuhrc+z={;G^)%>qgX
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: fb 8d 91 ff 00 6c d9 ff 00 90 57 7a 36 56 56 47 51 66 ec 7b ab ad ad 71 73 df 5b d8 de 36 b4 6e b1 ad f7 2d dd 3f d6 53 b6 37 0f f6 a4 a7 ff d9 ff ed 18 88 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 cd cf fa 7d a8 c7 be 09 05 70 76 ae af 05 c3 4e 38 42 49 4d 04 3a 00 00 00 00 01 0d 00 00 00 10 00 00 00 01 00 00 00 00 00 0b 70 72 69 6e 74 4f 75 74 70 75 74 00 00 00 05 00 00 00 00 50 73 74 53 62 6f 6f 6c 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 15 00 45 00 50 Data Ascii: lWz6VVGQf{qs[6n-?S7Photoshop 3.08BIMZ%G8BIM%}pvN8BIM:printOutputPstSboolInteenumInteClrmprintSixteenBitboolprinterNameTEXTEP
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 01 00 00 00 02 38 42 49 4d 04 08 00 00 00 00 00 10 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 44 00 00 00 00 00 10 00 00 00 02 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 1e 00 00 00 00 00 04 00 00 00 00 38 42 49 4d 04 1a 00 00 00 00 03 83 00 00 00 06 00 00 00 00 00 00 00 00 00 00 01 4d 00 00 01 f4 00 00 00 27 00 36 00 36 00 35 00 64 00 65 00 61 00 65 00 38 00 37 00 32 00 33 00 61 00 39 00 62 00 63 00 62 00 31 00 32 00 62 00 63 00 33 00 31 00 35 00 61 00 5f 00 62 00 6c 00 69 00 73 00 73 00 79 00 2d 00 62 00 6f 00 78 00 2d 00 35 00 30 00 30 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 01 f4 00 00 01 4d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 Data Ascii: 8BIM@@8BIMD@@8BIM8BIMM'665deae8723a9bcb12bc315a_blissy-box-500M
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f5 55 91 4e 4e 7b ba 96 40 b8 c6 3b 77 0a 6b Data Ascii: 2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?UNN{@;wk
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: ba 3f 4d 56 ae da bd 0e dc 8c 5c ba cb 5b 79 ac 8d 5a fa df 0e 07 fd 7f 7d 72 3f e2 ff 00 ea 77 56 a6 fb f3 fa 9d 2f c2 c7 be 8f 4a 96 39 db 2f 71 f5 19 66 f3 47 d2 ae ad b5 bb fa 47 a6 ff 00 f8 25 db d1 d0 7a 65 0e df e8 8b 6c e4 59 77 e9 08 fe ab 5c 3d 36 ff 00 db 6a be 4c 53 9c f4 a1 1a dc b3 42 71 8c 7a f1 39 0e ca ea 94 bd ac b6 a7 e6 33 fc 16 4e 2b 4f a8 3f cc 1b 3f b1 67 f3 8a cd 27 a9 ee b4 9c 67 bd af 26 c6 6f 6b 59 ae ea ec db b2 d7 7b 37 7e b0 d5 ba 2b fb bc 12 35 80 88 e5 87 59 1f a6 88 39 89 fd 10 e5 5d d3 f1 6d 6d a2 dc 2a 6d da 4e c0 59 59 de 23 73 0f fd f1 51 c9 fa bd 43 01 7f 4f 77 d9 6d 61 2e ad 8e 97 54 1c 41 dd 0d 76 f7 54 cb 1a ed 96 b3 f9 8b 2b df fa 15 d1 6c 09 8d 63 c1 23 ca c0 f5 2b 4c ef 78 87 84 c6 ea 99 58 f6 b7 13 35 86 9c 8c Data Ascii: ?MV\[yZ}r?wV/J9/qfGG%zelYw\=6jLSBqz93N+O??g'g&okY{7~+5Y9]mm*mNYY#sQCOwma.TAvT+lc#+LxX5
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 0f f0 14 7f db b6 7f ef 3a d9 4c 92 9c 7a dd 9e cb 58 eb 28 ac 57 b8 07 16 3d ee 77 b8 ec f6 b5 d5 31 bf 9c ad 9b af 1c 56 63 e5 fd ea d5 e7 6d 47 ce 07 de 61 56 96 c7 29 29 19 bf 23 bd 46 3e 23 fb d1 2b b5 cf d1 ed 2c 7f 69 e0 fd df 9c a2 e0 d5 1d 12 52 f9 39 74 62 d2 6f c8 78 ae b1 dc f2 4f ee b1 bf 9c e5 cf 75 1b ba ef 55 05 b8 f8 76 b7 04 ea d6 7b 5b ea 7f 2a e7 58 fa f7 b7 fe 09 bf a3 ff 00 8c 5a 8d e9 b4 fd b9 d9 b7 da ec 97 0d 68 65 b0 e1 59 fc e2 df df ff 00 83 ff 00 47 fd 75 70 99 d4 99 27 ba 4a 6b 74 cf b4 63 e1 63 e3 dd 4d 83 d3 ac 34 97 16 b8 82 3f 33 d8 f7 7b 59 f4 59 fc 85 7b 70 ec 85 01 29 8d 42 4a 4a 1d 09 e5 a6 49 d0 0e 49 41 6d b5 cc b9 c1 a0 6a 67 cb c3 f7 96 1f 59 eb 2e b8 3b 1f 19 db 6a 1e d2 ef 13 c2 4a 65 d4 ba 97 52 cd 7d 98 7d 22 Data Ascii: :LzX(W=w1VcmGaV))#F>#+,iR9tboxOuUv{[*XZheYGup'JktccM4?3{YY{p)BJJIIAmjgY.;jJeR}}"
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 30 38 39 43 41 35 38 44 44 41 42 46 41 43 37 42 30 43 41 39 42 39 44 38 38 33 39 44 30 31 41 36 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 66 38 39 39 64 38 38 2d 30 35 63 61 2d 34 33 34 32 2d 39 66 36 64 2d 64 30 39 34 30 66 61 39 33 65 31 65 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 30 38 39 43 41 35 38 44 44 41 42 46 41 43 37 42 30 43 41 39 42 39 44 38 38 33 39 44 30 31 41 36 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 3a Data Ascii: tp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="089CA58DDABFAC7B0CA9B9D8839D01A6" xmpMM:InstanceID="xmp.iid:7f899d88-05ca-4342-9f6d-d0940fa93e1e" xmpMM:OriginalDocumentID="089CA58DDABFAC7B0CA9B9D8839D01A6" dc:format="image/jpeg" photoshop:ColorMode="3" xmp:
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49738	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:42 UTC	809	OUT	GET /images/mlogo.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:43 UTC	1048	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:43 GMT Content-Type: image/svg+xml Content-Length: 9630 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598750-259e" expires: Tue, 17 Dec 2024 17:18:42 GMT last-modified: Wed, 11 Dec 2024 12:36:32 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NBHzBA%2F4D7l0T5gBluzxSPmvCVNULSbNGhFL0zXw1SL4ve4Iin4R7wN2wi4XDqEgX%2F69KXfz81yPTBX44GND4dO9NYP6iKWUVeuZ7XjVQUIgu3M%2FvANLmUz6wXojeSpdAQ6n7J9DaC4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3892effefb4204-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1575&min_rtt=1563&rtt_var=610&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=1387&delivery_rate=1759036&cwnd=234&unsent_bytes=0&cid=f1d62e9bd7318a64&ts=517&x=0"
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 36 70 78 22 20 68 65 69 67 68 74 3d 22 33 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 36 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 6c 6f 67 6f 20 62 6c 61 63 6b 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 70 61 74 68 2d 31 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="146px" height="32px" viewBox="0 0 146 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>logo black</title> <defs> <polygon id="path-1"
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 64 3d 22 4d 32 2e 39 33 31 30 30 34 34 35 2c 30 2e 33 36 35 34 32 30 32 39 20 43 32 2e 39 35 34 35 34 37 38 36 2c 30 2e 31 37 30 36 33 37 36 38 31 20 33 2e 31 30 32 39 37 33 37 32 2c 30 2e 30 30 30 32 30 32 38 39 38 35 35 31 20 33 2e 33 37 33 32 31 31 31 34 2c 30 2e 30 30 30 32 30 32 38 39 38 35 35 31 20 4c 33 2e 37 36 35 32 36 30 31 32 2c 30 2e 30 30 30 32 30 32 38 39 38 35 35 31 20 43 33 2e 39 36 32 38 32 30 30 35 2c 30 2e 30 30 30 32 30 32 38 39 38 35 35 31 20 34 2e 31 30 39 31 39 38 36 35 2c 30 2e 30 39 37 35 39 34 32 30 32 39 20 34 2e 31 38 33 39 32 33 33 39 2c 30 2e 32 34 33 36 38 31 31 35 39 20 4c 39 2e 35 38 38 36 37 31 37 36 2c 31 31 2e 37 33 36 38 36 39 36 20 4c 39 2e 36 36 32 33 37 32 38 37 2c 31 31 2e 37 33 36 38 36 39 36 20 4c 31 35 2e 30 36 Data Ascii: d="M2.93100445,0.36542029 C2.95454786,0.170637681 3.10297372,0.000202898551 3.37321114,0.000202898551 L3.76526012,0.000202898551 C3.96282005,0.000202898551 4.10919865,0.0975942029 4.18392339,0.243681159 L9.58867176,11.7368696 L9.66237287,11.7368696 L15.06
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 36 2e 38 32 35 39 37 31 20 43 32 38 2e 30 31 34 33 35 39 37 2c 31 37 2e 30 36 39 34 34 39 33 20 32 37 2e 37 39 32 32 33 32 38 2c 31 37 2e 32 38 39 35 39 34 32 20 32 37 2e 35 34 36 35 36 32 34 2c 31 37 2e 32 38 39 35 39 34 32 20 4c 32 35 2e 32 36 31 38 32 37 38 2c 31 37 2e 32 38 39 35 39 34 32 20 43 32 35 2e 30 31 36 31 35 37 35 2c 31 37 2e 32 38 39 35 39 34 32 20 32 34 2e 37 39 35 30 35 34 31 2c 31 37 2e 30 36 39 34 34 39 33 20 32 34 2e 37 39 35 30 35 34 31 2c 31 36 2e 38 32 35 39 37 31 20 4c 32 34 2e 37 39 35 30 35 34 31 2c 30 2e 37 30 36 36 39 35 36 35 32 20 5a 22 20 69 64 3d 22 46 69 6c 6c 2d 33 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 31 2e 37 34 Data Ascii: 6.825971 C28.0143597,17.0694493 27.7922328,17.2895942 27.5465624,17.2895942 L25.2618278,17.2895942 C25.0161575,17.2895942 24.7950541,17.0694493 24.7950541,16.825971 L24.7950541,0.706695652 Z" id="Fill-3"></path> <path d="M41.74
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 36 37 38 32 36 30 38 37 20 43 35 38 2e 37 34 36 37 30 30 37 2c 30 2e 31 32 31 37 33 39 31 33 20 35 38 2e 38 36 39 35 33 35 39 2c 30 20 35 39 2e 30 39 30 36 33 39 32 2c 30 20 4c 35 39 2e 33 33 36 33 30 39 36 2c 30 20 43 35 39 2e 35 38 31 39 38 2c 30 20 35 39 2e 36 38 30 32 34 38 31 2c 30 2e 31 32 31 37 33 39 31 33 20 35 39 2e 37 35 33 39 34 39 32 2c 30 2e 32 36 37 38 32 36 30 38 37 20 4c 36 37 2e 33 32 31 36 32 30 36 2c 31 36 2e 36 35 34 39 32 37 35 20 43 36 37 2e 34 36 37 39 39 39 32 2c 31 36 2e 39 37 32 34 36 33 38 20 36 37 2e 32 37 32 34 38 36 35 2c 31 37 2e 32 38 38 39 38 35 35 20 36 36 2e 39 30 33 39 38 30 39 2c 31 37 2e 32 38 38 39 38 35 35 20 4c 36 34 2e 37 36 36 36 34 38 36 2c 31 37 2e 32 38 38 39 38 35 35 20 43 36 34 2e 33 39 37 31 31 39 34 2c 31 Data Ascii: 67826087 C58.7467007,0.12173913 58.8695359,0 59.0906392,0 L59.3363096,0 C59.58198,0 59.6802481,0.12173913 59.7539492,0.267826087 L67.3216206,16.6549275 C67.4679992,16.9724638 67.2724865,17.2889855 66.9039809,17.2889855 L64.7666486,17.2889855 C64.3971194,1
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 32 37 36 38 31 20 37 30 2e 34 31 39 35 32 34 31 2c 31 33 2e 36 36 31 34 36 33 38 20 37 30 2e 34 31 39 35 32 34 31 2c 38 2e 37 39 30 38 38 34 30 36 20 43 37 30 2e 34 31 39 35 32 34 31 2c 33 2e 39 32 30 33 30 34 33 35 20 37 34 2e 33 37 35 38 34 30 38 2c 30 2e 30 30 30 33 30 34 33 34 37 38 32 36 20 37 39 2e 32 38 39 32 34 38 34 2c 30 2e 30 30 30 33 30 34 33 34 37 38 32 36 22 20 69 64 3d 22 46 69 6c 6c 2d 39 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 39 30 2e 36 36 33 30 37 30 35 2c 30 2e 37 30 36 36 39 35 36 35 32 20 43 39 30 2e 36 36 33 30 37 30 35 2c 30 2e 34 36 33 32 31 37 33 39 31 20 39 30 2e 38 35 39 36 30 36 38 2c 30 2e 32 34 34 30 38 36 39 35 37 20 39 Data Ascii: 27681 70.4195241,13.6614638 70.4195241,8.79088406 C70.4195241,3.92030435 74.3758408,0.000304347826 79.2892484,0.000304347826" id="Fill-9"></path> <path d="M90.6630705,0.706695652 C90.6630705,0.463217391 90.8596068,0.244086957 9
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 2e 38 33 30 34 36 33 38 20 4c 31 31 36 2e 33 33 36 30 33 35 2c 31 36 2e 38 32 35 39 37 31 20 43 31 31 36 2e 33 33 36 30 33 35 2c 31 37 2e 30 36 39 34 34 39 33 20 31 31 36 2e 31 33 39 34 39 38 2c 31 37 2e 32 38 39 35 39 34 32 20 31 31 35 2e 38 36 39 32 36 31 2c 31 37 2e 32 38 39 35 39 34 32 20 4c 31 30 35 2e 38 36 39 34 35 33 2c 31 37 2e 32 38 39 35 39 34 32 20 43 31 30 35 2e 35 39 39 32 31 35 2c 31 37 2e 32 38 39 35 39 34 32 20 31 30 35 2e 34 30 32 36 37 39 2c 31 37 2e 30 36 39 34 34 39 33 20 31 30 35 2e 34 30 32 36 37 39 2c 31 36 2e 38 32 35 39 37 31 20 4c 31 30 35 2e 34 30 32 36 37 39 2c 30 2e 37 30 36 36 39 35 36 35 32 20 5a 22 20 69 64 3d 22 46 69 6c 6c 2d 31 33 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: .8304638 L116.336035,16.825971 C116.336035,17.0694493 116.139498,17.2895942 115.869261,17.2895942 L105.869453,17.2895942 C105.599215,17.2895942 105.402679,17.0694493 105.402679,16.825971 L105.402679,0.706695652 Z" id="Fill-13"></path>
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 35 33 2e 35 31 32 36 38 33 37 20 32 33 2e 38 35 31 39 37 37 36 20 35 35 2e 31 37 30 39 35 38 37 20 32 33 2e 38 35 31 39 37 37 36 20 35 37 2e 34 37 33 30 39 34 39 20 32 38 2e 31 36 31 35 34 32 38 20 35 39 2e 37 37 35 32 33 31 31 20 32 33 2e 38 35 31 39 37 37 36 20 36 31 2e 34 32 32 32 34 36 33 20 32 33 2e 38 35 31 39 37 37 36 22 3e 3c 2f 70 6f 6c 79 67 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 36 38 2e 33 31 33 37 30 39 39 2c 32 35 2e 37 33 38 30 32 31 31 20 4c 36 37 2e 34 34 33 36 32 37 33 2c 32 37 2e 39 36 37 38 37 36 32 20 4c 36 39 2e 31 39 33 30 30 35 31 2c 32 37 2e 39 36 37 38 37 36 32 20 4c 36 38 2e 33 31 33 37 30 39 39 2c 32 35 2e 37 33 38 30 32 31 31 20 5a 20 4d 37 30 2e 32 33 37 31 30 34 Data Ascii: 53.5126837 23.8519776 55.1709587 23.8519776 57.4730949 28.1615428 59.7752311 23.8519776 61.4222463 23.8519776"></polygon> <path d="M68.3137099,25.7380211 L67.4436273,27.9678762 L69.1930051,27.9678762 L68.3137099,25.7380211 Z M70.237104
2024-12-17 17:18:43 UTC	47	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e Data Ascii: > </g> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49739	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:42 UTC	835	OUT	GET /images/665deae8723a9bcb12bc32f1_allure.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:43 UTC	1053	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:43 GMT Content-Type: image/svg+xml Content-Length: 10426 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "6759874f-28ba" expires: Tue, 17 Dec 2024 17:18:42 GMT last-modified: Wed, 11 Dec 2024 12:36:31 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xSt%2B3KsxFaSltj%2FhVHdIn5gNH5%2FEfHLZaK6NTnXa45cF67Zbz7155BFv6vbS4DiYJyrs5ya%2F9AsFIAqOvW%2FEXZOHy0LqFYsOW6PKGsEzom3Ik3XA38Avn01Ba5qqzyM8iIzeE2e1dUw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3892f00ce9c3f3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2340&min_rtt=2339&rtt_var=878&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=1413&delivery_rate=1248396&cwnd=190&unsent_bytes=0&cid=aedc269c3c7fe5ac&ts=517&x=0"
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 35 20 31 30 35 2e 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 36 39 2c 31 30 34 2e 36 34 63 2d 2e 36 34 2d 2e 33 2d 31 2e 38 37 2d 31 2d 32 2e 37 33 2d 31 2e 35 33 2d 32 2e 34 34 2d 31 2e 35 33 2d 33 2e 31 32 2d 31 2e 38 32 2d 34 2e 36 38 2d 32 2d 31 2e 37 33 2d 2e 32 2d 32 2e 33 35 2d 2e 36 2d 33 2e 38 31 2d 32 2e 34 36 61 31 36 2e 38 35 2c 31 36 2e 38 35 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 365 105.2"><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M17.69,104.64c-.64-.3-1.87-1-2.73-1.53-2.44-1.53-3.12-1.82-4.68-2-1.73-.2-2.35-.6-3.81-2.46a16.85,16.85,0,0,
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 2c 31 37 2e 39 2c 31 37 2e 39 2c 30 2c 30 2c 31 2c 32 2c 37 2e 33 2c 32 33 2e 37 39 2c 32 33 2e 37 39 2c 30 2c 30 2c 30 2c 2e 36 2c 33 2e 37 36 2c 32 2e 34 39 2c 32 2e 34 39 2c 30 2c 30 2c 31 2c 2e 31 31 2c 31 2e 37 39 2c 38 2e 34 38 2c 38 2e 34 38 2c 30 2c 30 2c 30 2c 30 2c 33 2e 37 37 2c 31 32 2e 33 33 2c 31 32 2e 33 33 2c 30 2c 30 2c 31 2d 2e 30 39 2c 34 63 2d 2e 31 38 2c 31 2e 34 39 2d 2e 34 32 2c 34 2e 34 33 2d 2e 35 34 2c 36 2e 35 32 73 2d 2e 33 31 2c 34 2e 31 34 2d 2e 34 32 2c 34 2e 35 37 61 38 2e 38 31 2c 38 2e 38 31 2c 30 2c 30 2c 30 2d 2e 30 37 2c 34 2e 32 36 2c 35 2e 32 31 2c 35 2e 32 31 2c 30 2c 30 2c 31 2d 2e 32 37 2c 34 2c 37 2e 38 36 2c 37 2e 38 36 2c 30 2c 30 2c 30 2d 2e 35 38 2c 32 2e 33 38 63 30 2c 31 2e 34 31 2c 31 2e 35 35 2c 35 2e 32 Data Ascii: ,17.9,17.9,0,0,1,2,7.3,23.79,23.79,0,0,0,.6,3.76,2.49,2.49,0,0,1,.11,1.79,8.48,8.48,0,0,0,0,3.77,12.33,12.33,0,0,1-.09,4c-.18,1.49-.42,4.43-.54,6.52s-.31,4.14-.42,4.57a8.81,8.81,0,0,0-.07,4.26,5.21,5.21,0,0,1-.27,4,7.86,7.86,0,0,0-.58,2.38c0,1.41,1.55,5.2
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 2c 2e 34 39 2c 32 2e 32 37 2e 35 32 2c 33 2e 31 32 2e 33 61 31 31 2e 39 33 2c 31 31 2e 39 33 2c 30 2c 30 2c 30 2c 32 2e 34 39 2d 31 2e 32 37 63 32 2e 39 32 2d 31 2e 39 31 2c 32 2e 36 37 2d 31 2e 38 37 2c 38 2e 37 36 2d 31 2e 35 33 2c 33 2e 33 32 2e 31 38 2c 37 2e 36 34 2e 33 31 2c 38 2e 34 31 2e 32 35 2e 36 2c 30 2c 31 2e 34 35 2d 33 2e 35 32 2c 32 2d 38 2e 32 33 2e 32 33 2d 31 2e 39 2e 36 34 2d 34 2e 35 31 2e 39 32 2d 35 2e 38 32 2e 35 34 2d 32 2e 35 33 2e 35 33 2d 32 2e 36 34 2d 2e 33 35 2d 33 2e 37 34 2d 2e 34 33 2d 2e 35 33 2d 2e 34 33 2d 2e 35 36 2d 2e 32 2d 33 2e 38 61 39 34 2e 37 32 2c 39 34 2e 37 32 2c 30 2c 30 2c 30 2d 2e 30 39 2d 31 34 2e 33 39 6c 2d 2e 33 32 2d 32 2e 39 34 2e 35 32 2d 32 2e 33 32 63 2e 37 2d 33 2e 31 38 2e 36 38 2d 33 2e 34 31 Data Ascii: ,.49,2.27.52,3.12.3a11.93,11.93,0,0,0,2.49-1.27c2.92-1.91,2.67-1.87,8.76-1.53,3.32.18,7.64.31,8.41.25.6,0,1.45-3.52,2-8.23.23-1.9.64-4.51.92-5.82.54-2.53.53-2.64-.35-3.74-.43-.53-.43-.56-.2-3.8a94.72,94.72,0,0,0-.09-14.39l-.32-2.94.52-2.32c.7-3.18.68-3.41
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 31 34 2e 37 2c 31 34 2e 37 2c 30 2c 30 2c 30 2d 35 2e 36 39 2d 2e 34 31 2c 32 30 2e 36 37 2c 32 30 2e 36 37 2c 30 2c 30 2c 31 2d 34 2e 36 38 2c 30 63 2d 35 2e 32 32 2d 2e 33 37 2d 36 2e 38 39 2d 2e 33 33 2d 38 2e 38 38 2e 32 31 73 2d 31 2e 39 32 2e 35 31 2d 34 2e 33 32 2d 2e 33 37 61 33 2e 38 35 2c 33 2e 38 35 2c 30 2c 30 2c 30 2d 32 2e 37 33 2d 2e 31 39 6c 2d 31 2e 35 36 2e 32 34 2d 31 2e 32 31 2d 2e 36 31 61 35 2e 35 36 2c 35 2e 35 36 2c 30 2c 30 2c 30 2d 31 2e 37 32 2d 2e 36 31 2c 33 2e 35 39 2c 33 2e 35 39 2c 30 2c 30 2c 30 2d 31 2e 35 31 2e 37 33 6c 2d 31 2c 2e 37 33 2d 31 2e 39 2d 2e 30 35 61 31 32 2e 31 33 2c 31 32 2e 31 33 2c 30 2c 30 2c 30 2d 34 2c 2e 34 35 2c 36 2e 38 38 2c 36 2e 38 38 2c 30 2c 30 2c 31 2d 33 2e 37 35 2e 32 36 2c 36 36 2e 38 38 Data Ascii: 14.7,14.7,0,0,0-5.69-.41,20.67,20.67,0,0,1-4.68,0c-5.22-.37-6.89-.33-8.88.21s-1.92.51-4.32-.37a3.85,3.85,0,0,0-2.73-.19l-1.56.24-1.21-.61a5.56,5.56,0,0,0-1.72-.61,3.59,3.59,0,0,0-1.51.73l-1,.73-1.9-.05a12.13,12.13,0,0,0-4,.45,6.88,6.88,0,0,1-3.75.26,66.88
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 35 2e 33 2e 32 33 2d 31 2e 31 38 2d 2e 35 33 61 32 2e 39 2c 32 2e 39 2c 30 2c 30 2c 30 2d 32 2e 31 2d 2e 33 37 2c 31 39 2c 31 39 2c 30 2c 30 2c 31 2d 32 2e 35 38 2e 31 37 2c 34 2e 36 38 2c 34 2e 36 38 2c 30 2c 30 2c 31 2d 32 2e 37 38 2d 2e 35 33 63 2d 33 2e 38 36 2d 31 2e 39 2d 39 2e 37 38 2d 31 30 2e 36 36 2d 31 32 2e 34 31 2d 31 38 2e 33 38 2d 31 2e 34 2d 34 2e 31 34 2d 31 2e 34 2d 34 2e 30 39 2d 31 2e 34 38 2d 31 36 2e 38 32 2c 30 2d 36 2e 32 36 2d 2e 31 37 2d 31 32 2e 36 36 2d 2e 32 39 2d 31 34 2e 32 32 61 33 32 2e 34 32 2c 33 32 2e 34 32 2c 30 2c 30 2c 30 2d 31 2e 31 34 2d 36 2e 38 39 63 2d 2e 32 32 2d 2e 35 35 2d 2e 32 33 2d 2e 35 35 2d 31 2e 34 34 2d 2e 34 33 61 39 2c 39 2c 30 2c 30 2c 31 2d 34 2e 35 36 2d 2e 37 63 2d 32 2e 32 35 2d 31 2e 32 39 2d Data Ascii: 5.3.23-1.18-.53a2.9,2.9,0,0,0-2.1-.37,19,19,0,0,1-2.58.17,4.68,4.68,0,0,1-2.78-.53c-3.86-1.9-9.78-10.66-12.41-18.38-1.4-4.14-1.4-4.09-1.48-16.82,0-6.26-.17-12.66-.29-14.22a32.42,32.42,0,0,0-1.14-6.89c-.22-.55-.23-.55-1.44-.43a9,9,0,0,1-4.56-.7c-2.25-1.29-
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 31 2e 32 36 2c 34 2e 34 33 2c 31 2e 36 34 2c 33 2e 35 2e 34 38 2c 35 2e 37 35 2c 31 2e 34 31 2c 36 2e 37 33 2c 32 2e 37 39 73 31 2e 32 34 2c 35 2e 33 35 2e 34 37 2c 36 2e 36 35 61 31 31 2e 37 32 2c 31 31 2e 37 32 2c 30 2c 30 2c 31 2d 32 2e 33 39 2c 31 2e 39 32 63 2d 31 2e 31 33 2e 37 34 2d 32 2e 38 35 2c 32 2d 33 2e 38 31 2c 32 2e 37 34 61 39 2e 30 38 2c 39 2e 30 38 2c 30 2c 30 2c 31 2d 32 2c 31 2e 33 36 63 2d 2e 31 37 2c 30 2d 31 2e 31 36 2d 2e 32 37 2d 32 2e 32 32 2d 2e 35 38 5a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 33 30 2e 33 32 2c 31 30 31 2e 39 33 63 2d 32 2e 35 35 2d 31 2e 38 36 2d 34 2d 34 2e 38 38 2d 33 2e 34 35 2d 37 2e 33 36 2e 36 35 2d 33 2e 31 31 2c 32 2e 36 31 2d 34 2e 38 2c 35 2e 35 38 2d 34 2e 38 32 61 31 38 2c 31 38 2c 30 2c 30 2c 31 Data Ascii: 1.26,4.43,1.64,3.5.48,5.75,1.41,6.73,2.79s1.24,5.35.47,6.65a11.72,11.72,0,0,1-2.39,1.92c-1.13.74-2.85,2-3.81,2.74a9.08,9.08,0,0,1-2,1.36c-.17,0-1.16-.27-2.22-.58Z"/><path d="M230.32,101.93c-2.55-1.86-4-4.88-3.45-7.36.65-3.11,2.61-4.8,5.58-4.82a18,18,0,0,1
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 34 2c 32 31 2e 34 34 2c 30 2c 30 2c 30 2c 34 2e 34 35 2c 33 2e 31 33 6c 31 2e 32 37 2e 36 35 68 31 32 2e 31 34 6c 31 2c 2e 38 39 63 32 2e 37 34 2c 32 2e 33 36 2c 32 2e 39 2c 35 2e 31 34 2e 34 39 2c 38 2e 32 39 2d 31 2e 31 38 2c 31 2e 35 35 2d 32 2e 35 33 2c 32 2e 31 31 2d 36 2e 35 31 2c 32 2e 37 61 31 38 2e 32 33 2c 31 38 2e 32 33 2c 30 2c 30 2c 31 2d 36 2e 38 39 2d 2e 30 39 63 2d 31 2e 34 32 2d 2e 33 34 2d 31 2e 36 37 2d 2e 33 35 2d 32 2e 31 31 2d 2e 31 2d 31 2e 37 39 2c 31 2d 31 2e 35 38 2c 31 2d 36 2e 37 33 2c 31 68 2d 34 2e 38 37 6c 2d 31 2e 31 35 2d 2e 35 33 61 34 2c 34 2c 30 2c 30 2c 30 2d 33 2e 36 33 2d 2e 31 35 2c 31 31 2e 30 37 2c 31 31 2e 30 37 2c 30 2c 30 2c 31 2d 35 2e 34 35 2e 30 37 2c 34 2e 35 36 2c 34 2e 35 36 2c 30 2c 30 2c 30 2d 33 2e 31 Data Ascii: 4,21.44,0,0,0,4.45,3.13l1.27.65h12.14l1,.89c2.74,2.36,2.9,5.14.49,8.29-1.18,1.55-2.53,2.11-6.51,2.7a18.23,18.23,0,0,1-6.89-.09c-1.42-.34-1.67-.35-2.11-.1-1.79,1-1.58,1-6.73,1h-4.87l-1.15-.53a4,4,0,0,0-3.63-.15,11.07,11.07,0,0,1-5.45.07,4.56,4.56,0,0,0-3.1
2024-12-17 17:18:43 UTC	843	IN	Data Raw: 37 32 2c 30 2c 30 2c 30 2c 33 2e 37 34 2c 31 2e 36 36 2c 31 38 2e 39 34 2c 31 38 2e 39 34 2c 30 2c 30 2c 31 2c 34 2e 36 37 2c 31 2e 33 39 6c 31 2e 31 31 2e 34 39 2c 32 2e 35 39 2d 2e 37 31 63 31 2e 34 33 2d 2e 33 38 2c 33 2e 31 32 2d 2e 37 39 2c 33 2e 37 36 2d 2e 39 61 36 2e 34 39 2c 36 2e 34 39 2c 30 2c 30 2c 30 2c 33 2e 38 38 2d 31 2e 37 32 2c 33 35 2e 37 32 2c 33 35 2e 37 32 2c 30 2c 30 2c 30 2c 35 2e 37 32 2d 36 2e 34 32 63 32 2e 32 32 2d 33 2c 33 2e 34 38 2d 34 2e 34 36 2c 34 2e 32 31 2d 34 2e 38 37 2e 35 2d 2e 32 37 2c 31 2e 31 35 2d 2e 33 33 2c 33 2e 36 33 2d 2e 33 33 2c 33 2e 34 39 2c 30 2c 34 2e 30 38 2e 31 35 2c 35 2e 32 33 2c 31 2e 33 31 2c 32 2e 33 32 2c 32 2e 33 34 2c 32 2c 37 2e 31 36 2d 2e 38 35 2c 31 32 2e 38 36 61 31 31 2e 34 36 2c 31 31 Data Ascii: 72,0,0,0,3.74,1.66,18.94,18.94,0,0,1,4.67,1.39l1.11.49,2.59-.71c1.43-.38,3.12-.79,3.76-.9a6.49,6.49,0,0,0,3.88-1.72,35.72,35.72,0,0,0,5.72-6.42c2.22-3,3.48-4.46,4.21-4.87.5-.27,1.15-.33,3.63-.33,3.49,0,4.08.15,5.23,1.31,2.32,2.34,2,7.16-.85,12.86a11.46,11

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49736	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:42 UTC	413	OUT	GET /images/bottom.webp HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:43 UTC	1057	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:43 GMT Content-Type: image/webp Content-Length: 54686 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598751-d59e" expires: Tue, 17 Dec 2024 17:18:42 GMT last-modified: Wed, 11 Dec 2024 12:36:33 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zzgTSj17bwMAef89wCQTwmrwOzl%2FwOcV4F3s%2Fhmzmx7%2BcnNUgM%2BV9rz8WeuG%2FiYsJcL1Atix6Mn%2BvA5oy5BufxuMiT55uYWDrn%2Fx6Yx1SjX%2BvmI%2BYuL5PSGd0Jjc1wwqOOwOV9AKc8o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3892f00c300f53-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1797&min_rtt=1752&rtt_var=689&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=991&delivery_rate=1666666&cwnd=193&unsent_bytes=0&cid=6ce72f4ab9a929e9&ts=524&x=0"
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 52 49 46 46 96 d5 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 83 03 00 a2 02 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 7e 3a e7 ca f7 85 ce 37 d7 b0 e5 8a b8 b1 ea 12 40 63 cc 61 35 ae 45 84 20 08 60 f2 6f eb ba c5 94 96 d7 85 7d b8 cc 45 a2 2e a4 10 98 05 4e 6e 7b 1b 94 82 3a b5 ce e9 9c fd e7 ca 9b 63 2d e0 66 e7 20 d6 b2 21 fb 66 7c cb 35 d8 69 7e 48 25 52 3e 31 29 9c 92 a5 82 35 91 64 9a 79 c2 3c 30 b6 f3 59 2f 2a 8e 23 45 0e 1f fd 2f 6a 9e a0 c8 5b a4 8c 2b 4c 22 bf 29 50 90 23 a3 c9 04 1f a6 4e 5c 5e 56 97 33 0d 78 9a 4e 82 1e 3e 85 fc 9f 60 cc 0b 0d bf 41 5b 6c 4d f8 a0 09 34 c3 59 9a 89 3f 76 01 8b cf 01 75 ae 32 41 fb 44 54 a8 27 1c cf 48 6e c4 14 a0 ac ef d8 5e 6a 4e c4 f0 b4 4a 54 0a 10 90 d3 3d ed 66 94 08 09 fb dc 82 d6 91 4d 65 02 72 37 d2 dd 7c 72 84 19 41 f0 36 d2 fb f4 28 aa be e6 ce 13 6c 6c 6b 33 5e 1f f8 6c 05 77 96 a6 d4 11 a5 2e 02 ec 79 9a 04 66 5c Data Ascii: ~:7@ca5E `o}E.Nn{:c-f !f\|5i~H%R>1)5dy<0Y/*#E/j[+L")P#N\^V3xN>`A[lM4Y?vu2ADT'Hn^jNJT=fMer7\|rA6(llk3^lw.yf\
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: b7 0b 80 79 e8 30 cb ca 91 a8 09 6c 9d 14 80 ad 68 f5 d5 ac da d6 33 35 2f c7 e5 23 c6 e4 47 77 78 36 f8 d1 37 f2 d9 2e 6a 1e 98 ce 13 f6 d6 53 f4 4a 3b 64 a8 c2 5e 90 96 4b 1c 9b 28 f2 c6 54 c3 68 0e e3 19 45 11 ba 56 42 71 d5 6c ab 02 bc d2 24 a8 df 60 2a a6 3f d6 17 85 a3 b3 60 cb c2 2f 3b ad 6c 1f db 86 12 82 63 76 2a 51 cc f9 9d 15 f4 be 11 a1 f0 a9 56 41 be 12 d9 02 bd d8 07 f9 cb a2 b5 90 83 b9 eb 06 6e ef c1 68 60 ec 16 1a 4d 57 9a db d6 17 04 7b 13 12 a4 6a b1 e7 01 82 89 b8 12 33 f6 4a 68 7f 22 3e d9 a7 1d 81 bb 99 5c e9 54 83 51 c8 cb 97 13 6b 28 ac f5 e5 5e 18 ca be 1c d1 a7 fc 05 28 f7 48 88 c0 d6 eb eb 5b da 2d d6 33 1f b3 70 b6 5c 95 3e 69 d3 94 82 e4 a7 14 31 24 c6 1d 29 3d f1 25 be 62 46 63 20 55 b7 24 2e 46 88 01 2f 22 5f 35 f0 c9 9c 39 Data Ascii: y0lh35/#Gwx67.jSJ;d^K(ThEVBql$`?`/;lcvQVAnh`MW{j3Jh">\TQk(^(H[-3p\>i1$)=%bFc U$.F/"_59
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 39 b9 5f b5 a0 fb 91 d5 6f 9e a2 dd 20 86 24 32 c4 8b a5 92 12 e8 71 8f 84 3f 50 23 36 9d f0 8e eb ef 8c 68 c9 3c dd ab 03 23 33 c3 88 d7 44 91 48 9c 9e 22 7a 0f a4 8c 14 fb 24 9c 25 70 2c 3d 55 43 aa 4e 1a 31 fd fa 03 fb e5 85 b3 6f 87 59 6a dc 94 bb d3 04 44 b1 92 9a f3 be 11 7e 7d fb 1e ee a3 ec 57 e3 fa e8 de de eb e8 b1 a2 60 4b ed 90 80 cb c1 71 e2 b4 73 61 83 f8 bc 2b 7f 0f 0b 32 e5 14 cb 86 eb 6f 60 f3 36 09 d0 e8 04 11 a6 5e 7c 3d 55 2c b3 ab 68 5c a5 5c e4 62 87 05 d2 a1 67 27 6b 3b 89 cf b8 58 82 c9 5a ce 84 fb 77 52 9e e7 aa e2 7c 97 29 ea 5b 48 c7 cb 79 ec 27 e8 7f f0 bb 2f 25 b3 62 83 d0 35 e2 f9 ec 2f 7f ed a4 30 32 ed 46 a1 52 d9 72 8e 54 93 31 79 bd 6d e5 89 9b 11 3e a7 ca 8f 0d f6 b5 00 62 75 b6 aa 63 2c 72 5c ac 1e 89 1a bc b3 19 6d f8 Data Ascii: 9_o $2q?P#6h<#3DH"z$%p,=UCN1oYjD~}W`Kqsa+2o`6^\|=U,h\\bg'k;XZwR\|)[Hy'/%b5/02FRrT1ym>buc,r\m
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: d9 ba ec 9c c9 ff 57 12 26 c4 a5 1f b2 32 7b 71 bb e1 1d 39 31 50 20 76 fc 28 05 b7 14 f4 f4 e9 66 31 9a 8a da a3 96 8d d1 ea 23 c8 7b f6 10 4d d3 05 b5 84 c3 e8 bc 68 3d 4d 6a 36 5c 0d 9c a5 39 e2 c8 1b 59 f8 d5 39 03 60 e0 e8 e8 68 70 5e 24 0d 73 11 9e 89 4e df 04 34 33 ba be c6 4e af c6 09 f6 a5 70 46 70 60 50 4b 73 11 f7 91 f5 11 42 2d ae 3e 3f fd a0 14 d2 34 ce b2 cf 0a 26 7e a8 8e 48 45 10 51 f0 9d 8c 72 b7 78 42 27 a5 68 11 dc 9f 4d 6d 8d 8c e7 b7 0e 01 b9 fa cf 59 eb 28 40 c3 a8 eb 24 49 fb c0 4c 4e 5f d7 dd 64 be e1 49 f7 57 e9 20 01 5f b2 36 82 1f 34 cf 7e ff f8 e6 5d 1e c9 8a e1 4c 75 7d 2e 54 e4 34 1a 99 2e 5a 56 ac 9f c2 8e fc 92 d5 76 01 d0 bc ec 39 62 db 23 6c d2 07 45 4d 7d 9e 20 0b 0a f0 ce 94 9f 07 7c 72 23 5f d2 1c 26 97 d6 c8 e6 94 05 Data Ascii: W&2{q91P v(f1#{Mh=Mj6\9Y9`hp^$sN43NpFp`PKsB->?4&~HEQrxB'hMmY(@$ILN_dIW _64~]Lu}.T4.ZVv9b#lEM} \|r#_&
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 92 46 0c c7 15 4f c7 75 fe 55 b6 6f 54 09 9b 36 0b 11 39 f5 0f 59 2c 41 b2 23 76 e8 c3 f0 82 90 b9 d1 7d 1b 13 12 eb 52 11 fd 84 ca fd 5b 9e dc ee c2 b4 86 29 0b 60 07 3f a9 f0 9d 39 f3 c6 59 cc 6c 77 90 af 18 91 4f ba fb bc 20 e8 24 7b cd e4 0b 5a 0c 04 96 44 fb 2d 56 09 f6 cc d4 12 19 e4 12 08 19 dc 39 17 2a 88 7c 71 3b 3a 96 15 4b 85 11 aa 32 35 d0 42 1b 74 dc b0 8f 7b 04 92 28 04 0e 63 d4 fd ce 42 a4 8f 37 46 c1 b6 5a b0 52 a8 80 2b b0 ac 8d b6 49 2e f9 9e 46 51 a6 1d 77 ba 6c 42 ed d8 dc 99 cf 5f 2d 00 b4 06 b2 41 1f e1 0c f8 ee 33 6b b4 02 c6 99 bf 90 9e 3a b8 fd 5e 5f 63 d9 fc 93 4b 87 79 5f bf ee 86 db 18 f4 15 c2 30 e4 ad 32 27 f6 ed 70 49 b8 09 50 90 91 ea 67 43 c9 ed cd 73 9e fd 54 9e da 48 9e 44 f3 62 88 5a a7 f9 05 91 b3 ad b5 03 c7 74 35 a2 Data Ascii: FOuUoT69Y,A#v}R[)`?9YlwO ${ZD-V9*\|q;:K25Bt{(cB7FZR+I.FQwlB_-A3k:^_cKy_02'pIPgCsTHDbZt5
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 60 32 d8 e2 1f ae 29 c4 40 4b c4 19 33 c5 ff 62 a9 ab fb 3e 9e 23 3f b0 c9 4e 1d 4e 15 44 17 64 b4 b6 85 e2 bc 41 63 f1 64 15 1a 09 25 00 b3 d4 a6 bf a2 c7 2c f7 83 8a 56 b7 1b 7f e8 65 c2 ed fc 5e 6e ee a3 5d a2 fe 35 df 5c 96 04 60 97 00 24 96 e0 d1 fd c0 5a 61 59 06 a7 6a f3 82 cf d8 d1 46 f1 6a a9 2d 22 1a f6 31 70 35 54 84 7a 99 de d8 ed eb c7 04 ae 22 48 37 35 9b 35 59 7a d1 10 41 d2 0f e0 c4 ab 66 03 7b ae 60 87 17 52 8f e8 74 50 1d 14 f5 53 95 b4 96 6e 13 ed 63 4f 12 fa 78 7c 10 ff 27 b3 42 83 89 6a 6c 4b f2 6b 7b 59 8d 9a 60 75 c6 ff 2f f3 c2 b4 e4 66 db b8 f7 5e df 9d ca 09 b5 c5 72 fd 1f 79 70 f1 14 6a 5e f1 f2 70 91 26 61 fc e2 43 64 49 76 06 19 02 ab 46 f9 78 22 be 3f 1f e3 00 24 fb b7 37 91 7a bf 12 0e 9a 8e b0 72 f0 b1 3f 78 e3 f3 a2 c5 8a Data Ascii: `2)@K3b>#?NNDdAcd%,Ve^n]5\`$ZaYjFj-"1p5Tz"H755YzAf{`RtPSncOx\|'BjlKk{Y`u/f^rypj^p&aCdIvFx"?$7zr?x
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: f0 94 fe be 93 9d 54 b3 b7 76 18 e5 c6 ec e5 7d 8b ae 75 42 3e f2 30 6c 2f 52 a4 b8 bf d9 db 64 db cc d0 fd 93 68 b9 6b 34 d9 5d 8e 80 00 fe ff 00 eb c8 94 f1 d9 14 db e9 da 0f 37 bb 02 cf 7b 43 80 4c 7a 7f fc 15 62 a3 6c f7 c6 60 f9 a8 dd f8 86 de ae 90 6a c9 e9 9b 56 48 79 72 0c 70 f8 6a 95 db 04 94 0e 88 1b d2 66 dc dd bd 36 b7 3d 33 1f f7 ac ba a9 a8 3c 85 66 4d 96 71 f4 a3 5b 82 35 8b 7d 30 67 11 73 72 2e 69 fb 08 61 bb 7b c3 93 44 b2 d3 68 19 92 5b fd c9 25 e2 85 87 0d 35 26 a0 bd 84 92 2d 80 29 41 08 bf 66 07 6d 3a cd d7 38 c5 4b 8f 19 79 10 d0 3c 00 7b 6f 03 fa 99 49 79 99 3e fe 3b 27 48 83 9e ab 2c e2 0e ed 2e c8 ef fb ff de be 68 59 13 fa 85 04 66 8a 43 ee aa a4 75 05 89 ee 1a 14 22 1f ae 64 37 9f ee c5 39 7d 21 21 07 5f 52 55 d7 52 f3 b5 10 70 Data Ascii: Tv}uB>0l/Rdhk4]7{CLzbl`jVHyrpjf6=3<fMq[5}0gsr.ia{Dh[%5&-)Afm:8Ky<{oIy>;'H,.hYfCu"d79}!!_RURp
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 62 ca af fa 44 a2 88 11 d2 97 15 00 ab f8 c7 07 fd 33 a9 5f 99 3c f0 1e 8b a0 72 70 c1 00 db 9e e0 5e 27 2d 35 e1 27 4e e6 53 7d de 6b 3c 3f f5 84 5c ee 04 45 01 de f1 2e 7e f4 04 1c 4a 5d 9c 59 50 bf 11 50 bd 6c 0e e4 1f 73 dc a9 ce 59 bb ed 15 72 db 8f c4 ab f0 14 e0 f5 a6 8f 9b a7 b6 a0 25 9e a5 28 66 3d ef a0 6c f6 d7 6d 51 30 96 cd 43 59 e6 9f 1e 80 b8 e9 e5 df 55 f9 7c 3b 2b 20 07 9e 0f 0e 19 4b ac 68 c4 a4 26 cf 44 5d 5c f4 00 4f e7 75 84 b3 63 18 00 4b 7e 8d 19 c7 eb 8d 5e 96 5c 67 f7 bf f9 92 f0 b7 5d 86 ed 93 98 6b 80 50 f2 be e6 28 4c b7 07 8c 70 1f fb 82 64 fe 34 48 c0 7f d1 10 24 06 f0 26 66 49 4b b2 5f 7f b1 8a fd 95 a1 81 89 d9 5f 38 d3 63 ca a8 f0 d8 32 d5 3f c6 37 27 32 c5 63 29 07 8f 3c 5d 5e f7 01 ab 3e 60 4b b5 76 5d 7d cb 50 3a 81 26 Data Ascii: bD3_<rp^'-5'NS}k<?\E.~J]YPPlsYr%(f=lmQ0CYU\|;+ Kh&D]\OucK~^\g]kP(Lpd4H$&fIK__8c2?7'2c)<]^>`Kv]}P:&
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 2a 1a b3 ad ec be be fc 15 75 37 14 1d 34 b1 1c 59 ed 7a 65 84 95 d7 ae 6f ae 29 92 d3 d0 90 3c e9 8a 30 8e a7 0c ab 7b 3f 05 2f 35 e8 e5 cc 95 5b 98 41 0d e7 f8 5f 89 b9 65 83 92 7e 7e 69 ab 92 60 cd a2 d1 26 56 c0 87 5f 5c f4 fa ce 6c ec 2f 4d d0 82 d4 c5 88 28 af f8 b6 98 e6 57 86 a7 2b 63 65 ab df 42 37 32 0c 82 91 5c 8a dd ec 32 1b 39 b0 0d 81 77 f0 fe 46 be 4e 1c 35 e7 85 14 1c d7 be 03 b7 33 eb 6d d2 0a e9 63 74 dd f7 16 d3 98 75 af 58 a8 96 2d b7 33 05 19 98 5d 4a 8e 8d 19 06 67 8d 83 08 07 af 7a 3b a8 23 e0 59 73 d2 8a b9 f9 92 bc 71 5b 6e 6d 69 2b d9 52 78 2a 42 03 6d 45 94 96 01 55 0e 54 80 bc f4 cd 05 9b 39 18 d3 2f bb b4 09 58 94 46 0b 51 ba ba 54 65 16 4b 1e 39 2a 36 7b 60 8d a6 f9 c2 8c 87 55 37 11 2f f8 28 3b 70 34 0d 04 41 45 5b de fa 3f Data Ascii: u74Yzeo)<0{?/5[A_e~~i`&V_\l/M(W+ceB72\29wFN53mctuX-3]Jgz;#Ysq[nmi+RxBmEUT9/XFQTeK9*6{`U7/(;p4AE[?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49737	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:42 UTC	839	OUT	GET /images/665deae8723a9bcb12bc32f0_prevention.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:43 UTC	1046	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:43 GMT Content-Type: image/svg+xml Content-Length: 2108 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "6759874f-83c" expires: Tue, 17 Dec 2024 17:18:42 GMT last-modified: Wed, 11 Dec 2024 12:36:31 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mY3CrY27F%2BSPHwLxiPc94sVw1hlEei9xnJtSp0koO3lXtIeiWNjqwBEjhnJUTz2%2BH4wDRqQ9QkBlAbJmxZGkZU58E2bxlQajI7ECmgkCWIi7WMGYGfEELpH0Yfjofr6WZ%2BOZEdvtXBk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3892f02e88c5c7-IAD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=7179&min_rtt=7146&rtt_var=2747&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1417&delivery_rate=393743&cwnd=32&unsent_bytes=0&cid=56da539b25da268d&ts=555&x=0"
2024-12-17 17:18:43 UTC	323	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 30 20 31 31 33 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 6c 61 79 65 72 22 3e 3c 70 61 74 68 20 64 3d 22 4d 35 38 37 2e 36 2c 31 30 36 2e 38 61 36 2e 32 2c 36 2e 32 2c 30 2c 31 2c 31 2c 36 2e 32 2c 36 2e 32 41 36 2e 33 37 2c 36 2e 33 37 2c 30 2c 30 2c 31 2c 35 38 37 2e 36 2c 31 30 36 2e 38 5a 6d 31 31 2e 33 2c 30 61 35 2e 31 2c 35 2e 31 2c 30 2c 31 2c 30 2c 30 2c 2e 34 76 2d 2e 34 5a 6d 2d 32 2e 31 2c 33 2e 33 68 2d 31 2e 31 6c 2d 31 2e 39 2d 33 2e 32 68 2d 31 2e 36 76 33 2e 32 68 2d 2e 39 76 2d 36 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 600 113"><g id="Layer_2" data-name="Layer 2"><g id="layer"><path d="M587.6,106.8a6.2,6.2,0,1,1,6.2,6.2A6.37,6.37,0,0,1,587.6,106.8Zm11.3,0a5.1,5.1,0,1,0,0,.4v-.4Zm-2.1,3.3h-1.1l-1.9-3.2h-1.6v3.2h-.9v-6.
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 38 2c 31 31 30 2e 31 5a 6d 2d 33 2e 32 2d 33 2e 37 63 2e 39 2c 30 2c 32 2e 33 2e 32 2c 32 2e 33 2d 31 2e 32 2c 30 2d 31 2e 31 2d 2e 39 2d 31 2e 32 2d 31 2e 38 2d 31 2e 32 68 2d 31 2e 39 76 32 2e 35 68 31 2e 34 5a 6d 2d 39 2e 35 2c 34 2e 38 48 35 36 36 2e 38 56 36 35 2e 31 63 30 2d 39 2d 35 2e 31 2d 31 32 2e 35 2d 31 32 2e 34 2d 31 32 2e 35 2d 37 2e 39 2c 30 2d 31 35 2e 34 2c 35 2e 33 2d 31 35 2e 34 2c 31 38 2e 37 76 33 39 2e 39 48 35 32 32 2e 32 56 33 37 2e 38 48 35 33 39 56 34 38 2e 36 68 2e 34 63 34 2e 31 2d 37 2e 32 2c 31 31 2e 36 2d 31 33 2e 32 2c 32 31 2e 35 2d 31 33 2e 32 2c 31 33 2e 38 2c 30 2c 32 33 2e 33 2c 37 2e 36 2c 32 33 2e 33 2c 32 34 2e 32 5a 6d 2d 36 37 2d 33 37 2e 31 63 30 2c 32 34 2d 31 36 2e 32 2c 33 38 2e 38 2d 33 36 2e 34 2c 33 38 2e Data Ascii: 8,110.1Zm-3.2-3.7c.9,0,2.3.2,2.3-1.2,0-1.1-.9-1.2-1.8-1.2h-1.9v2.5h1.4Zm-9.5,4.8H566.8V65.1c0-9-5.1-12.5-12.4-12.5-7.9,0-15.4,5.3-15.4,18.7v39.9H522.2V37.8H539V48.6h.4c4.1-7.2,11.6-13.2,21.5-13.2,13.8,0,23.3,7.6,23.3,24.2Zm-67-37.1c0,24-16.2,38.8-36.4,38.
2024-12-17 17:18:43 UTC	416	IN	Data Raw: 2c 37 39 2e 38 5a 4d 31 35 39 2e 39 2c 36 36 2e 39 63 2d 2e 32 2d 39 2d 36 2d 31 36 2e 31 2d 31 36 2e 32 2d 31 36 2e 31 2d 37 2e 38 2c 30 2d 31 35 2e 39 2c 34 2e 38 2d 31 37 2e 38 2c 31 36 2e 31 5a 6d 2d 34 37 2d 33 30 4c 31 30 39 2e 32 2c 35 34 61 32 30 2c 32 30 2c 30 2c 30 2c 30 2d 36 2e 34 2d 31 2e 31 63 2d 31 34 2e 36 2c 30 2d 31 35 2c 31 33 2e 38 2d 31 35 2c 31 37 2e 38 76 34 30 2e 34 48 37 30 2e 35 56 33 37 2e 37 48 38 37 2e 36 56 34 39 48 38 38 63 33 2e 34 2d 38 2e 36 2c 38 2e 38 2d 31 33 2e 36 2c 31 36 2e 39 2d 31 33 2e 36 41 31 39 2e 36 34 2c 31 39 2e 36 34 2c 30 2c 30 2c 31 2c 31 31 32 2e 39 2c 33 36 2e 39 5a 4d 36 37 2e 31 2c 33 39 2e 36 63 30 2c 33 30 2e 35 2d 32 31 2e 39 2c 33 39 2e 35 2d 34 37 2e 36 2c 33 39 2e 35 76 33 32 2e 31 48 30 56 32 Data Ascii: ,79.8ZM159.9,66.9c-.2-9-6-16.1-16.2-16.1-7.8,0-15.9,4.8-17.8,16.1Zm-47-30L109.2,54a20,20,0,0,0-6.4-1.1c-14.6,0-15,13.8-15,17.8v40.4H70.5V37.7H87.6V49H88c3.4-8.6,8.8-13.6,16.9-13.6A19.64,19.64,0,0,1,112.9,36.9ZM67.1,39.6c0,30.5-21.9,39.5-47.6,39.5v32.1H0V2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49740	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:43 UTC	451	OUT	GET /images/66bd384fedeb9d6ee2978d02_woman-blissy-cropped.jpg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:43 UTC	1053	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:43 GMT Content-Type: image/jpeg Content-Length: 159316 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598750-26e54" expires: Tue, 17 Dec 2024 17:18:42 GMT last-modified: Wed, 11 Dec 2024 12:36:32 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ymTGUm01tAvomlx72PmvGgbIfjYrvPtfV1n%2Btmdjcj54AaAT7wCkYx6%2B%2BzJt9963mpeQQCmrCNlzed8eSExIMCkxNC3SFj1X9Ysos6Im%2FFuX%2BE3qfDEh2CAIFSSeCmxdf5RH2bX3KGE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3892f14f93d146-CDG alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=81883&min_rtt=81880&rtt_var=30711&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=1029&delivery_rate=35651&cwnd=32&unsent_bytes=0&cid=2c8f1a9b1f7510f7&ts=812&x=0"
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 0b 59 36 e6 3e 6b dc c6 fe 48 07 5c e8 43 b5 4d 43 8d c7 82 37 37 aa 01 d0 22 c8 39 ae 9b 97 9b ee 80 c8 50 0e 11 6f 62 90 ed 4f 8a f1 90 a4 5f e8 bd f7 45 22 e9 2e d4 95 ee d4 a6 65 00 b9 5e 22 c5 11 b2 5c a3 93 a2 08 8c a9 bb c5 8a 71 21 b0 4d dc 6f aa 70 00 81 d7 74 47 fc 27 aa 35 ef 74 57 ec 4a 02 89 9e 6c 69 64 5c 85 c5 ef bf 77 e7 ff 00 75 d7 b9 eb f8 67 ae 42 e2 f6 b3 bf c3 9d 39 d9 65 d3 3c c1 7e fc 7a 2d 23 06 f8 1b e8 b3 8c 13 ef c7 a2 d1 f0 6d 18 df 45 59 21 39 16 c1 2f 1e e1 23 18 b8 04 25 d8 76 d1 64 0b 37 64 60 11 40 bd 92 8d ea 90 18 0d 10 ee 74 45 68 28 c3 43 a2 0c 20 11 75 ed 7a 2f 5a da 2f 6c 8e 89 ed 8f 92 12 37 40 4e cb dd 0a 5d 9b d6 b6 b6 d1 78 1f 05 ed 87 92 f7 a2 03 c7 6b 2f 6c 7f 44 17 d4 e8 bd cd ad 90 3d 07 61 7e a8 43 bc 91 09 Data Ascii: Y6>kH\CMC77"9PobO_E".e^"\q!MoptG'5tWJlid\wugB9e<~z-#mEY!9/#%vd7d`@tEh(C uz/Z/l7@N]xk/lD=a~C
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 63 7a d2 3b f2 ae 3b fa 47 c6 3b 19 bf 22 9a ac 7b 72 f3 45 8f 92 07 6f b6 88 40 04 94 07 42 9c 6a 2d ac 80 94 67 79 22 d9 00 1b 84 53 e9 74 3f b2 0b 25 ad 00 5b 54 04 59 18 a2 5a d7 48 00 0f 04 52 8c 50 11 70 83 84 ca 49 fb f8 a5 9d b2 49 c8 06 b2 8f 15 5b c7 07 71 da ab 2c be 97 55 bc 77 e0 72 70 eb 3d af bf 6a 53 19 6d ca 9f 57 fd f1 4c 64 f8 56 84 bd 70 ac 7d bd b6 5d 73 94 4d a9 e2 f4 5c 8b c2 bd 2b da ba eb 28 ff 00 0f 16 9d 14 7d aa 2e 51 8b 01 e8 94 1a ff 00 b2 24 7b 04 a0 ba 0c 76 1d 92 ed 96 c9 bf 50 8c 0e a8 d6 c1 c0 97 5d d1 9b 21 d8 a6 e0 fc d0 87 1b a5 a3 39 13 10 77 bf 44 76 cb e0 9a 8b 84 20 91 a5 f5 41 9d b6 64 71 35 b7 29 98 71 b2 38 28 d4 a0 f4 4d 7d 90 89 82 66 1d 7f 24 3c c5 2d 03 d1 30 46 ed 07 52 99 73 9d 02 30 7e 88 d0 3d 12 8b 04 Data Ascii: cz;;G;"{rEo@Bj-gy"St?%[TYZHRPpII[q,Uwrp=jSmWLdVp}]sM\+(}.Q${vP]!9wDv Adq5)q8(M}f$<-0FRs0~=
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 1a a1 d8 04 18 50 38 a1 3b 22 ee 83 79 bb a4 6b be e1 de 89 61 a2 42 bc fb 87 7a 20 39 33 e9 3c 3e c3 50 7c c2 f9 bd c5 cd 67 93 d5 7d 21 fa 4e eb 87 d4 7a 85 f3 77 8b 40 99 a5 f5 5a f1 74 cb 2e d9 ae 0e eb 55 b3 f3 2e 83 e1 e3 bd c4 2b 9e 70 bd 2a 99 ea ba 03 87 4e f7 10 ad 6b 1c 9d 03 93 4d 8c 6b 76 ca ce bc 0c 58 1e 4f 75 9d 11 e9 75 bb e5 57 73 40 c5 97 db 35 f6 90 82 d6 a9 6a 61 6b 28 7a 27 5d ad 52 d4 fb b5 00 18 c5 fd 91 de 8b 90 3e 91 cc fb 34 e7 fb 85 76 06 2f ad 2b bd 17 23 7d 23 63 fb 1d 49 b7 e0 29 55 e3 db 94 5a 2e 4f 82 f5 82 10 35 3e ab c4 59 36 a2 1f 04 07 4d 10 db 74 04 6a 80 29 1a ec bd d7 55 ef 44 07 73 a5 d0 60 b6 a8 0e e8 48 e8 80 e8 90 14 ef e4 8a 74 08 e6 c4 6c 8a 7c 12 1d 08 77 48 bf 74 b1 49 38 14 03 69 85 82 ac e3 86 ec 77 82 b3 Data Ascii: P8;"ykaBz 93<>P\|g}!Nzw@Zt.U.+p*NkMkvXOuuWs@5jak(z']R>4v/+#}#cI)UZ.O5>Y6Mtj)UDs`Htl\|wHtI8iw
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: e8 80 dc 7e a8 2e 87 9b 4d 50 41 bd c2 1f 8b f4 45 1d 2c 84 1b 94 74 63 02 8e 2d d5 13 f5 46 1a 20 0e dd f4 47 68 20 a2 0d b4 4a 03 7f 32 91 94 1b f9 a5 9a 12 4d 16 1b 6a 95 66 84 25 47 6f ba b1 e8 c4 42 40 3e 28 62 37 6a 2b 85 ca b4 1c d3 9d 53 f6 3b 45 1d 4c 45 d3 f6 9b ec aa 08 5b 9f 5b 75 43 ce 7c 52 40 eb e4 86 fb 2b d1 94 e7 d7 75 e2 e0 4a 27 55 e0 51 a0 31 36 08 43 f4 44 dd 0d c5 91 a0 54 3d 08 75 d2 40 a1 bd 91 a3 2a 1d 75 eb a4 f9 b4 dd 78 94 80 dc da a6 f8 85 fb 07 fa 25 5a 75 48 e2 27 dc 3b d1 1f 66 e5 0f a4 df ff 00 4e a8 f5 0b e7 07 16 47 bd 97 d5 7d 1f fa 4c ff 00 f4 da 83 e6 3f cd 7c e1 e2 b6 b2 4b ea af 8f a6 79 32 dc 30 da ad 9e ab 7e e1 db bd c4 4b 01 c3 cf 2d 4b 3d 56 f3 c3 a7 7b 98 75 5b b1 c9 bf e4 f7 6b 12 dd f2 9b 81 85 8b 05 ca 0e Data Ascii: ~.MPAE,tc-F Gh J2Mjf%GoB@>(b7j+S;ELE[[uC\|R@+uJ'UQ16CDT=u@*ux%ZuH';fNG}L?\|Ky20~K-K=V{u[k
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 87 44 43 a1 37 46 3a 14 5b 6e 4a 66 29 23 f4 44 3a 9d 11 8e c7 5e a8 84 74 ba 08 04 d8 6e 80 5a fa 8b af 5b a2 02 48 36 41 9d 41 61 65 23 07 9a 8b a7 b9 2a 4e 10 0d b5 48 1c 5d 10 be c5 79 ce 21 23 23 fc d6 39 d3 29 cd e0 8e d2 00 4d a3 70 4b 83 70 96 34 8a 83 aa 1b d9 14 1d 35 41 6d 56 d0 ca 6e 34 5e ba 28 20 21 db 5e 88 03 5d 08 28 a2 c4 a3 6e 91 0c 35 28 74 45 0e b2 35 ad a9 48 07 a6 a8 da 79 a2 8f 2d 91 af f2 40 0a 30 17 d5 14 14 3b a1 41 16 f5 46 02 e1 14 0b 23 01 64 c8 20 d9 1b d1 14 7e e8 76 28 31 ac 87 74 17 be da 21 02 da dd 03 41 16 ba 10 81 bb a1 69 37 48 0c 2f 61 e2 85 a2 fb a0 b5 8a 10 9d 30 d8 80 8d b0 5e f2 2b d6 f0 44 03 6e 02 f3 7c 97 bc 02 33 4f e8 85 05 a1 18 6e 3c 11 40 28 ed 06 c8 0b cf 0a 47 fc fa 3f 52 bb 73 22 7f 07 0f e5 0b 89 b8 Data Ascii: DC7F:[nJf)#D:^tnZ[H6AAae#*NH]y!##9)MpKp45AmVn4^( !^](n5(tE5Hy-@0;AF#d ~v(1t!Ai7H/a0^+Dn\|3On<@(G?Rs"
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 6f e3 93 e6 aa c7 02 36 d9 26 fc 0c f8 23 c6 0d d5 da 2e 2e 4c 37 92 44 ea 2e 31 3d bb c9 27 cd 67 6e c1 1e 0e 81 24 70 77 ef 64 68 f7 5a a4 5c 66 37 d6 59 3e 69 dc 7c 69 68 b7 be 91 63 8e c2 9f 7d 91 5d 86 3c 6c 96 a0 dd 6e 11 71 a9 9a 7b f9 3e 69 c0 e3 44 76 fb e7 dd 60 be c1 28 f1 45 34 92 81 a1 28 f1 2f 2a d8 f1 de 2a 32 b2 02 04 af 37 59 7e 39 8c 9c 4e 52 79 89 04 f5 51 62 8e 53 e2 8e dc 3a 4b 84 e6 32 0d a4 30 1f bf 0b 4d c1 47 70 5f c1 50 70 2c 3d ec 94 12 16 8b 84 42 5a d1 7f 04 64 9d a5 e3 dc 27 0d 1b 59 23 18 4b b5 b6 37 59 19 40 2c 8c 34 3a a2 84 7b 20 0c 02 1b 58 5c 20 17 b2 1d f6 d1 20 f5 ec bd a0 2b c3 55 eb 74 4c c1 6d 57 8e 83 64 3f 08 5e 3e 29 01 50 69 aa 31 08 0d b6 b2 40 42 6f ba 29 28 e4 59 14 8e a9 81 09 40 e4 62 2e 8b be e8 1d 88 51 Data Ascii: o6&#..L7D.1='gn$pwdhZ\f7Y>i\|ihc}]<lnq{>iDv`(E4(/**27Y~9NRyQbS:K20MGp_Pp,=BZd'Y#K7Y@,4:{ X\ +UtLmWd?^>)Pi1@Bo)(Y@b.Q
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: eb 56 1d 8a 5a 24 c8 7d 97 84 8a 20 62 8d b6 e8 c3 14 6f 8a 34 69 6e 7b 21 e7 ba 89 18 a3 0e e5 0f d6 6d fe a4 04 af 38 fd 50 97 0b 28 a1 89 37 fa 91 be b1 67 f5 6a 90 48 f3 00 bd b2 61 f5 8b 0f 55 ef 6f 6d b5 28 33 fe 60 4a f1 b1 d1 31 f6 e6 5b 42 bd ed cd b5 c1 41 1e d8 1f d1 05 87 8a 68 2b 1a 0e e8 de d8 d3 d5 00 e4 b4 22 96 8b 9e 89 b9 ab 6f 8e 8b c2 a9 a7 aa 4a 2f c8 10 18 80 3e 49 23 54 db 6e bd ed 20 9d d3 21 8c 23 d5 15 d0 8f 04 3e d0 d2 37 5e f6 81 6d d0 62 ba 9d a7 64 53 4c df 0d 52 a2 66 8d 10 09 9b ad 92 04 7d 94 78 22 9a 46 f8 5d 2f da b5 78 ca d2 98 35 f6 26 93 b2 29 a1 69 3b 68 9d 99 5a bd da 36 e9 03 13 40 dd 6c 11 0e 1c cf e9 52 1d a3 42 02 f6 92 13 d9 23 4e 18 df 04 9b b0 b6 0e 81 4a 17 b5 78 bc 58 24 68 87 60 ec 3d 12 4e c1 9a 7a 29 a2 Data Ascii: VZ$} bo4in{!m8P(7gjHaUom(3`J1[BAh+"oJ/>I#Tn !#>7^mbdSLRf}x"F]/x5&)i;hZ6@lRB#NJxX$h`=Nz)
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: f2 62 75 23 c1 c9 b9 08 9d 35 10 8b 22 5a c7 c5 1c db a2 0d d3 32 67 50 bc 35 16 46 b6 b7 45 20 24 04 d7 64 07 a6 a8 e4 22 90 8a 05 21 78 84 3e 68 2d e6 90 06 c8 97 b8 f3 47 d8 a2 14 87 fe 12 7e 81 34 aa 3c ad 27 aa 76 fb 59 32 ab 36 61 41 a9 b8 ed 53 98 4d 8d 95 4a 6a c7 b8 93 75 64 cc 0d bb 8a aa 48 2e 4f 45 ae 37 d0 37 9a b5 e0 ee 52 22 be 57 9e ed ca 09 58 5f 20 68 ea 56 81 92 f2 29 c4 f9 0b 99 cd 70 95 35 11 b3 55 9d 79 1c 80 cd 54 37 63 97 48 d0 f0 69 b2 c4 d3 d8 0d af b2 5d fc 14 63 bf 90 3e 4a 4d cc fe d7 52 dd da e4 26 be a2 c3 47 2e 8f 7f 04 5a ef e4 0f 92 46 4e 07 8f fa 08 1a 73 bb 71 09 fa 87 23 7d 65 30 e8 e5 d0 2f e0 7e 96 10 04 dd dc 10 3f f4 50 18 3b 71 59 41 d9 c8 df 5b c9 7b d9 cb 70 77 03 de 7f 92 92 77 03 df 6f b9 4b 63 4c 57 eb 89 3c Data Ascii: bu#5"Z2gP5FE $d"!x>h-G~4<'vY26aASMJjudH.OE77R"WX_ hV)p5UyT7cHi]c>JMR&G.ZFNsq#}e0/~?P;qYA[{pwwoKcLW<
2024-12-17 17:18:44 UTC	1369	IN	Data Raw: bd e0 84 6d b2 0c 61 e2 8e d0 88 07 ea 8e 10 1a 6f 06 87 fc e1 96 f3 5d ab 93 85 e9 21 fc a1 71 6f 06 05 f1 66 7e ab b5 32 77 f0 90 fe 50 b1 fb 69 16 7c 44 fd 95 c3 c9 73 b7 17 8d 84 be a1 74 4e 25 fc 23 b4 e8 b9 cb 8b a7 ef 6f e4 a8 d8 9d fb ee f5 4b 46 75 09 03 72 f7 5b c5 2f 1a ba 83 a6 a2 48 e4 66 e8 12 13 3e ca 40 4b 80 25 1d af e8 8d 49 42 fa 92 08 06 c5 4b 43 97 65 73 6f 62 98 44 38 80 0a 87 c6 24 e5 89 de 8a e5 26 5e 95 ac 26 c5 54 f3 2d 0b e0 89 f7 07 44 8d 9f d7 55 bb b6 3d e4 c6 aa b5 c1 a6 ce 4a 56 35 ce 9c 80 35 ba 27 d5 33 4e d3 66 9d 53 08 97 e2 4f e6 dc d9 1d 93 f6 80 df 74 e6 4c b9 3b 35 2d 36 49 b6 89 d0 92 08 37 54 92 2e 2d 07 c1 24 1c 2e 9c 4d 4c e7 5a c0 a6 e2 95 f7 b6 a8 f4 0b c4 f1 ba 70 d9 35 4d e3 a7 20 6b 74 a5 ad a2 46 3b e5 e8 Data Ascii: mao]!qof~2wPi\|DstN%#oKFur[/Hf>@K%IBKCesobD8$&^&T-DU=JV55'3NfSOtL;5-6I7T.-$.MLZp5M ktF;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49742	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:43 UTC	838	OUT	GET /images/665deae8723a9bcb12bc32ec_oprahmag1.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:43 UTC	1041	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:43 GMT Content-Type: image/svg+xml Content-Length: 3006 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598751-bbe" expires: Tue, 17 Dec 2024 17:18:42 GMT last-modified: Wed, 11 Dec 2024 12:36:33 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5BqCyOVVY2aiq2U918hRXoGtitvShMAKK41N35qZumJHdQU9qeGYR2vhyLTNpHT2vXVykVvFQ9GnAFeaQ8uLCRp7mJLY1Ah4WZjDDtffQa4QJ8l1H2tmaZ94luT0AKkQisSHzXukaiA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3892f11b227271-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2004&min_rtt=1974&rtt_var=800&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1416&delivery_rate=1318284&cwnd=225&unsent_bytes=0&cid=0f92d1443b4aecc9&ts=530&x=0"
2024-12-17 17:18:43 UTC	328	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 34 30 2e 38 32 20 31 39 36 2e 30 36 22 20 77 69 64 74 68 3d 22 31 30 34 30 2e 38 32 22 20 20 68 65 69 67 68 74 3d 22 31 39 36 2e 30 36 22 20 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 45 31 31 31 31 22 20 64 3d 22 4d 32 37 31 2e 39 37 20 37 36 2e 39 35 56 31 31 2e 38 68 2d 32 31 2e 38 39 56 31 2e 35 34 68 35 35 2e 38 32 56 31 31 2e 38 68 2d 32 32 76 36 35 2e 31 37 7a 6d 37 30 2e 32 34 20 30 56 31 Data Ascii: <svg xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg" data-name="Layer 1" viewBox="0 0 1040.82 196.06" width="1040.82" height="196.06" > <path fill="#0E1111" d="M271.97 76.95V11.8h-21.89V1.54h55.82V11.8h-22v65.17zm70.24 0V1
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 34 68 34 36 2e 34 38 56 31 31 2e 38 68 2d 33 34 2e 37 76 32 32 2e 32 38 68 33 30 2e 37 33 56 34 34 2e 33 68 2d 33 30 2e 37 33 76 32 32 2e 34 31 68 33 34 2e 37 7a 6d 37 31 2e 37 2d 33 37 2e 36 34 43 35 36 35 2e 34 36 20 31 34 2e 30 38 20 35 37 38 2e 37 38 20 30 20 35 39 39 2e 35 32 20 30 73 33 33 2e 39 34 20 31 34 2e 30 38 20 33 33 2e 39 34 20 33 39 2e 33 31 2d 31 33 2e 31 38 20 33 39 2e 31 37 2d 33 33 2e 39 33 20 33 39 2e 31 37 2d 33 34 2e 30 37 2d 31 34 2e 30 38 2d 33 34 2e 30 37 2d 33 39 2e 31 37 7a 6d 31 32 2e 34 32 20 30 63 30 20 31 38 2e 30 35 20 37 2e 34 33 20 32 38 2e 39 33 20 32 31 2e 36 34 20 32 38 2e 39 33 73 32 31 2e 35 31 2d 31 30 2e 38 38 20 32 31 2e 35 31 2d 32 38 2e 39 33 2d 37 2e 34 32 2d 32 38 2e 39 34 2d 32 31 2e 35 31 2d 32 38 2e 39 34 Data Ascii: 4h46.48V11.8h-34.7v22.28h30.73V44.3h-30.73v22.41h34.7zm71.7-37.64C565.46 14.08 578.78 0 599.52 0s33.94 14.08 33.94 39.31-13.18 39.17-33.93 39.17-34.07-14.08-34.07-39.17zm12.42 0c0 18.05 7.43 28.93 21.64 28.93s21.51-10.88 21.51-28.93-7.42-28.94-21.51-28.94
2024-12-17 17:18:43 UTC	1309	IN	Data Raw: 2e 35 33 2d 39 2e 37 33 48 34 31 37 6c 2d 35 2e 37 36 2d 31 36 2e 39 61 31 36 31 2e 37 35 20 31 36 31 2e 37 35 20 30 20 30 20 31 2d 35 2e 38 39 2d 31 39 2e 38 34 68 2d 2e 35 31 61 32 30 31 2e 36 39 20 32 30 31 2e 36 39 20 30 20 30 20 31 2d 35 2e 38 39 20 31 39 2e 37 31 7a 6d 31 35 33 2e 37 39 2d 38 2e 35 38 76 33 38 2e 39 32 68 2d 39 2e 33 35 6c 2d 31 2e 35 34 2d 39 2e 37 32 63 2d 33 2e 30 37 20 37 2e 34 32 2d 31 32 20 31 31 2e 32 36 2d 32 30 2e 37 34 20 31 31 2e 32 36 2d 31 39 2e 33 33 20 30 2d 33 32 2e 37 38 2d 31 33 2e 34 34 2d 33 32 2e 37 38 2d 33 38 2e 39 32 20 30 2d 32 35 2e 32 33 20 31 34 2e 32 32 2d 33 39 2e 35 36 20 33 35 2e 32 31 2d 33 39 2e 35 36 20 31 34 2e 33 35 20 30 20 32 33 2e 35 36 20 36 20 32 38 2e 33 20 31 38 2e 31 37 6c 2d 31 31 20 35 Data Ascii: .53-9.73H417l-5.76-16.9a161.75 161.75 0 0 1-5.89-19.84h-.51a201.69 201.69 0 0 1-5.89 19.71zm153.79-8.58v38.92h-9.35l-1.54-9.72c-3.07 7.42-12 11.26-20.74 11.26-19.33 0-32.78-13.44-32.78-38.92 0-25.23 14.22-39.56 35.21-39.56 14.35 0 23.56 6 28.3 18.17l-11 5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49741	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:43 UTC	845	OUT	GET /images/665deae8723a9bcb12bc32ed_goodhousekeeping.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:43 UTC	1046	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:43 GMT Content-Type: image/svg+xml Content-Length: 2605 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598751-a2d" expires: Tue, 17 Dec 2024 17:18:42 GMT last-modified: Wed, 11 Dec 2024 12:36:33 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BK3RETGZ0qBDzUTYCeXftNcMphQIdVNC1gUgdep7Ffxm5cqYHW%2FhLs6pJ4Hp99gFqKaUbtqRyEEJj4VLW4bsm1TbjGoM2pzIbxkHK3itRaDf2peH9laSA0LfSWILawwyjX%2BWs5a3TZQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3892f15fc4d118-CDG alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=81547&min_rtt=81544&rtt_var=30585&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1423&delivery_rate=35797&cwnd=32&unsent_bytes=0&cid=b58f214eb0d1c97c&ts=818&x=0"
2024-12-17 17:18:43 UTC	323	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 30 2e 31 20 31 32 35 2e 33 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 6c 61 79 65 72 22 3e 3c 67 20 69 64 3d 22 50 61 67 65 2d 31 22 3e 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 31 22 20 64 3d 22 4d 33 34 2c 38 38 2e 39 48 31 34 2e 39 76 2d 32 33 48 30 76 35 38 2e 35 48 31 34 2e 39 56 31 30 31 2e 33 48 33 34 76 32 33 2e 31 48 34 36 2e 38 56 36 35 2e 39 48 33 34 76 32 33 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 32 22 20 64 3d 22 4d 33 36 35 2e 34 2c 31 32 34 2e 34 68 33 35 2e 35 56 31 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 600.1 125.3"><g id="Layer_2" data-name="Layer 2"><g id="layer"><g id="Page-1"><path id="Fill-1" d="M34,88.9H14.9v-23H0v58.5H14.9V101.3H34v23.1H46.8V65.9H34v23"/><path id="Fill-2" d="M365.4,124.4h35.5V11
2024-12-17 17:18:43 UTC	1369	IN	Data Raw: 46 69 6c 6c 2d 33 22 20 64 3d 22 4d 31 35 32 2c 31 30 34 2e 35 61 38 2e 35 36 2c 38 2e 35 36 2c 30 2c 30 2c 31 2d 38 2e 37 2c 38 2e 36 2c 38 2e 33 31 2c 38 2e 33 31 2c 30 2c 30 2c 31 2d 38 2e 34 2d 38 2e 36 56 36 35 2e 39 48 31 32 32 2e 31 76 33 37 2e 39 63 30 2c 31 33 2e 32 2c 38 2e 32 2c 32 31 2e 34 2c 32 31 2e 34 2c 32 31 2e 34 73 32 31 2e 34 2d 38 2e 32 2c 32 31 2e 34 2d 32 31 2e 34 56 36 35 2e 39 48 31 35 32 2e 31 76 33 38 2e 36 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 34 22 20 64 3d 22 4d 38 34 2e 34 2c 36 35 2e 31 61 33 30 2c 33 30 2c 30 2c 31 2c 30 2c 32 39 2e 39 2c 33 30 2c 32 39 2e 39 32 2c 32 39 2e 39 32 2c 30 2c 30 2c 30 2d 32 39 2e 39 2d 33 30 5a 6d 30 2c 34 37 2e 34 61 31 37 2e 33 2c 31 37 2e 33 2c 30 2c 31 2c 31 2c 31 37 2e 32 Data Ascii: Fill-3" d="M152,104.5a8.56,8.56,0,0,1-8.7,8.6,8.31,8.31,0,0,1-8.4-8.6V65.9H122.1v37.9c0,13.2,8.2,21.4,21.4,21.4s21.4-8.2,21.4-21.4V65.9H152.1v38.6"/><path id="Fill-4" d="M84.4,65.1a30,30,0,1,0,29.9,30,29.92,29.92,0,0,0-29.9-30Zm0,47.4a17.3,17.3,0,1,1,17.2
2024-12-17 17:18:43 UTC	913	IN	Data Raw: 38 48 32 33 35 2e 33 56 37 38 2e 32 48 32 35 38 56 36 35 2e 38 48 32 32 32 2e 35 76 35 38 2e 36 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 31 32 22 20 64 3d 22 4d 33 31 33 2e 33 2c 36 35 2e 39 48 32 39 37 2e 35 4c 32 38 30 2e 38 2c 38 36 2e 37 56 36 35 2e 39 48 32 36 38 76 35 38 2e 35 68 31 32 2e 38 56 31 30 34 2e 31 6c 34 2e 36 2d 35 2e 38 2c 31 34 2e 33 2c 32 36 2e 31 68 31 34 2e 36 4c 32 39 34 2e 35 2c 38 39 6c 31 38 2e 38 2d 32 33 2e 31 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 31 33 22 20 64 3d 22 4d 34 32 32 2e 39 2c 33 30 2e 31 43 34 32 32 2e 39 2c 31 32 2e 36 2c 34 31 30 2e 35 2e 39 2c 33 39 32 2e 31 2e 39 48 33 37 35 2e 37 56 35 39 2e 34 68 31 36 2e 39 63 31 37 2e 35 2d 2e 31 2c 33 30 2e 33 2d 31 32 2e 34 2c 33 30 2e 33 2d Data Ascii: 8H235.3V78.2H258V65.8H222.5v58.6"/><path id="Fill-12" d="M313.3,65.9H297.5L280.8,86.7V65.9H268v58.5h12.8V104.1l4.6-5.8,14.3,26.1h14.6L294.5,89l18.8-23.1"/><path id="Fill-13" d="M422.9,30.1C422.9,12.6,410.5.9,392.1.9H375.7V59.4h16.9c17.5-.1,30.3-12.4,30.3-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49756	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:46 UTC	411	OUT	GET /images/mlogo.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:46 UTC	1049	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:46 GMT Content-Type: image/svg+xml Content-Length: 9630 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598750-259e" expires: Tue, 17 Dec 2024 17:18:45 GMT last-modified: Wed, 11 Dec 2024 12:36:32 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5%2BisKhtYbLSkZogKyvfvK6EZLSTETI4%2FfWHp3sFQhyEgbAX6bO87YA6P9ChBqEzB5hKGRajw%2Fiuwiir7atKhwwrW87flgmGum38bEZyyK1KMA3o18DizjmJwHBgwBF%2FDVqWbZSj6eRg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389303fca19e05-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1982&min_rtt=1973&rtt_var=758&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=989&delivery_rate=1426477&cwnd=242&unsent_bytes=0&cid=7edc0cb38b25f9cf&ts=528&x=0"
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 36 70 78 22 20 68 65 69 67 68 74 3d 22 33 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 36 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 6c 6f 67 6f 20 62 6c 61 63 6b 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 70 61 74 68 2d 31 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="146px" height="32px" viewBox="0 0 146 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>logo black</title> <defs> <polygon id="path-1"
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 64 3d 22 4d 32 2e 39 33 31 30 30 34 34 35 2c 30 2e 33 36 35 34 32 30 32 39 20 43 32 2e 39 35 34 35 34 37 38 36 2c 30 2e 31 37 30 36 33 37 36 38 31 20 33 2e 31 30 32 39 37 33 37 32 2c 30 2e 30 30 30 32 30 32 38 39 38 35 35 31 20 33 2e 33 37 33 32 31 31 31 34 2c 30 2e 30 30 30 32 30 32 38 39 38 35 35 31 20 4c 33 2e 37 36 35 32 36 30 31 32 2c 30 2e 30 30 30 32 30 32 38 39 38 35 35 31 20 43 33 2e 39 36 32 38 32 30 30 35 2c 30 2e 30 30 30 32 30 32 38 39 38 35 35 31 20 34 2e 31 30 39 31 39 38 36 35 2c 30 2e 30 39 37 35 39 34 32 30 32 39 20 34 2e 31 38 33 39 32 33 33 39 2c 30 2e 32 34 33 36 38 31 31 35 39 20 4c 39 2e 35 38 38 36 37 31 37 36 2c 31 31 2e 37 33 36 38 36 39 36 20 4c 39 2e 36 36 32 33 37 32 38 37 2c 31 31 2e 37 33 36 38 36 39 36 20 4c 31 35 2e 30 36 Data Ascii: d="M2.93100445,0.36542029 C2.95454786,0.170637681 3.10297372,0.000202898551 3.37321114,0.000202898551 L3.76526012,0.000202898551 C3.96282005,0.000202898551 4.10919865,0.0975942029 4.18392339,0.243681159 L9.58867176,11.7368696 L9.66237287,11.7368696 L15.06
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 36 2e 38 32 35 39 37 31 20 43 32 38 2e 30 31 34 33 35 39 37 2c 31 37 2e 30 36 39 34 34 39 33 20 32 37 2e 37 39 32 32 33 32 38 2c 31 37 2e 32 38 39 35 39 34 32 20 32 37 2e 35 34 36 35 36 32 34 2c 31 37 2e 32 38 39 35 39 34 32 20 4c 32 35 2e 32 36 31 38 32 37 38 2c 31 37 2e 32 38 39 35 39 34 32 20 43 32 35 2e 30 31 36 31 35 37 35 2c 31 37 2e 32 38 39 35 39 34 32 20 32 34 2e 37 39 35 30 35 34 31 2c 31 37 2e 30 36 39 34 34 39 33 20 32 34 2e 37 39 35 30 35 34 31 2c 31 36 2e 38 32 35 39 37 31 20 4c 32 34 2e 37 39 35 30 35 34 31 2c 30 2e 37 30 36 36 39 35 36 35 32 20 5a 22 20 69 64 3d 22 46 69 6c 6c 2d 33 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 31 2e 37 34 Data Ascii: 6.825971 C28.0143597,17.0694493 27.7922328,17.2895942 27.5465624,17.2895942 L25.2618278,17.2895942 C25.0161575,17.2895942 24.7950541,17.0694493 24.7950541,16.825971 L24.7950541,0.706695652 Z" id="Fill-3"></path> <path d="M41.74
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 36 37 38 32 36 30 38 37 20 43 35 38 2e 37 34 36 37 30 30 37 2c 30 2e 31 32 31 37 33 39 31 33 20 35 38 2e 38 36 39 35 33 35 39 2c 30 20 35 39 2e 30 39 30 36 33 39 32 2c 30 20 4c 35 39 2e 33 33 36 33 30 39 36 2c 30 20 43 35 39 2e 35 38 31 39 38 2c 30 20 35 39 2e 36 38 30 32 34 38 31 2c 30 2e 31 32 31 37 33 39 31 33 20 35 39 2e 37 35 33 39 34 39 32 2c 30 2e 32 36 37 38 32 36 30 38 37 20 4c 36 37 2e 33 32 31 36 32 30 36 2c 31 36 2e 36 35 34 39 32 37 35 20 43 36 37 2e 34 36 37 39 39 39 32 2c 31 36 2e 39 37 32 34 36 33 38 20 36 37 2e 32 37 32 34 38 36 35 2c 31 37 2e 32 38 38 39 38 35 35 20 36 36 2e 39 30 33 39 38 30 39 2c 31 37 2e 32 38 38 39 38 35 35 20 4c 36 34 2e 37 36 36 36 34 38 36 2c 31 37 2e 32 38 38 39 38 35 35 20 43 36 34 2e 33 39 37 31 31 39 34 2c 31 Data Ascii: 67826087 C58.7467007,0.12173913 58.8695359,0 59.0906392,0 L59.3363096,0 C59.58198,0 59.6802481,0.12173913 59.7539492,0.267826087 L67.3216206,16.6549275 C67.4679992,16.9724638 67.2724865,17.2889855 66.9039809,17.2889855 L64.7666486,17.2889855 C64.3971194,1
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 32 37 36 38 31 20 37 30 2e 34 31 39 35 32 34 31 2c 31 33 2e 36 36 31 34 36 33 38 20 37 30 2e 34 31 39 35 32 34 31 2c 38 2e 37 39 30 38 38 34 30 36 20 43 37 30 2e 34 31 39 35 32 34 31 2c 33 2e 39 32 30 33 30 34 33 35 20 37 34 2e 33 37 35 38 34 30 38 2c 30 2e 30 30 30 33 30 34 33 34 37 38 32 36 20 37 39 2e 32 38 39 32 34 38 34 2c 30 2e 30 30 30 33 30 34 33 34 37 38 32 36 22 20 69 64 3d 22 46 69 6c 6c 2d 39 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 39 30 2e 36 36 33 30 37 30 35 2c 30 2e 37 30 36 36 39 35 36 35 32 20 43 39 30 2e 36 36 33 30 37 30 35 2c 30 2e 34 36 33 32 31 37 33 39 31 20 39 30 2e 38 35 39 36 30 36 38 2c 30 2e 32 34 34 30 38 36 39 35 37 20 39 Data Ascii: 27681 70.4195241,13.6614638 70.4195241,8.79088406 C70.4195241,3.92030435 74.3758408,0.000304347826 79.2892484,0.000304347826" id="Fill-9"></path> <path d="M90.6630705,0.706695652 C90.6630705,0.463217391 90.8596068,0.244086957 9
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 2e 38 33 30 34 36 33 38 20 4c 31 31 36 2e 33 33 36 30 33 35 2c 31 36 2e 38 32 35 39 37 31 20 43 31 31 36 2e 33 33 36 30 33 35 2c 31 37 2e 30 36 39 34 34 39 33 20 31 31 36 2e 31 33 39 34 39 38 2c 31 37 2e 32 38 39 35 39 34 32 20 31 31 35 2e 38 36 39 32 36 31 2c 31 37 2e 32 38 39 35 39 34 32 20 4c 31 30 35 2e 38 36 39 34 35 33 2c 31 37 2e 32 38 39 35 39 34 32 20 43 31 30 35 2e 35 39 39 32 31 35 2c 31 37 2e 32 38 39 35 39 34 32 20 31 30 35 2e 34 30 32 36 37 39 2c 31 37 2e 30 36 39 34 34 39 33 20 31 30 35 2e 34 30 32 36 37 39 2c 31 36 2e 38 32 35 39 37 31 20 4c 31 30 35 2e 34 30 32 36 37 39 2c 30 2e 37 30 36 36 39 35 36 35 32 20 5a 22 20 69 64 3d 22 46 69 6c 6c 2d 31 33 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: .8304638 L116.336035,16.825971 C116.336035,17.0694493 116.139498,17.2895942 115.869261,17.2895942 L105.869453,17.2895942 C105.599215,17.2895942 105.402679,17.0694493 105.402679,16.825971 L105.402679,0.706695652 Z" id="Fill-13"></path>
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 35 33 2e 35 31 32 36 38 33 37 20 32 33 2e 38 35 31 39 37 37 36 20 35 35 2e 31 37 30 39 35 38 37 20 32 33 2e 38 35 31 39 37 37 36 20 35 37 2e 34 37 33 30 39 34 39 20 32 38 2e 31 36 31 35 34 32 38 20 35 39 2e 37 37 35 32 33 31 31 20 32 33 2e 38 35 31 39 37 37 36 20 36 31 2e 34 32 32 32 34 36 33 20 32 33 2e 38 35 31 39 37 37 36 22 3e 3c 2f 70 6f 6c 79 67 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 36 38 2e 33 31 33 37 30 39 39 2c 32 35 2e 37 33 38 30 32 31 31 20 4c 36 37 2e 34 34 33 36 32 37 33 2c 32 37 2e 39 36 37 38 37 36 32 20 4c 36 39 2e 31 39 33 30 30 35 31 2c 32 37 2e 39 36 37 38 37 36 32 20 4c 36 38 2e 33 31 33 37 30 39 39 2c 32 35 2e 37 33 38 30 32 31 31 20 5a 20 4d 37 30 2e 32 33 37 31 30 34 Data Ascii: 53.5126837 23.8519776 55.1709587 23.8519776 57.4730949 28.1615428 59.7752311 23.8519776 61.4222463 23.8519776"></polygon> <path d="M68.3137099,25.7380211 L67.4436273,27.9678762 L69.1930051,27.9678762 L68.3137099,25.7380211 Z M70.237104
2024-12-17 17:18:46 UTC	47	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e Data Ascii: > </g> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49755	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:46 UTC	836	OUT	GET /images/665deae8723a9bcb12bc32ee_glamour.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:46 UTC	1049	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:46 GMT Content-Type: image/svg+xml Content-Length: 2773 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "6759874e-ad5" expires: Tue, 17 Dec 2024 17:18:45 GMT last-modified: Wed, 11 Dec 2024 12:36:30 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JMDPrvlcMji9VZOzJjZCgRngFpU%2BHHk1w19vx7O3JpLEOvRG4D2WxcLn4bBdV%2FHlRlVtuPLshJWKdW2Lp%2BpuujOQ%2BTJTTquaRjTKgsaQpJm2wx9TOjcT5TtCaefRpELDcrC95oMFB2w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389303f8990f69-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1476&min_rtt=1470&rtt_var=564&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=1414&delivery_rate=1917268&cwnd=250&unsent_bytes=0&cid=2b6afe67185b9fd6&ts=528&x=0"
2024-12-17 17:18:46 UTC	320	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 30 20 33 30 2e 38 33 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 35 39 2e 34 2c 33 2e 38 37 2c 31 36 32 2e 36 39 2e 36 32 68 35 2e 36 33 63 36 2e 34 37 2c 30 2c 31 30 2e 38 2c 33 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 180 30.83"><defs><style>.cls-1{fill-rule:evenodd;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M159.4,3.87,162.69.62h5.63c6.47,0,10.8,3
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 2c 32 37 6c 2d 33 2e 31 39 2c 33 2e 31 35 68 2d 34 2e 31 35 6c 2d 36 2e 34 2d 35 2e 33 31 56 32 37 6c 2d 33 2e 31 39 2c 33 2e 31 35 48 31 35 39 2e 34 56 33 2e 38 37 5a 6d 36 2e 38 36 2c 31 32 2e 33 32 68 32 2e 36 35 61 33 2e 37 32 2c 33 2e 37 32 2c 30 2c 30 2c 30 2c 33 2e 38 35 2d 33 2e 39 32 63 30 2d 35 2e 35 39 2d 35 2e 34 2d 35 2e 35 37 2d 36 2e 34 39 2d 35 2e 35 37 76 39 2e 34 39 5a 4d 31 36 33 2e 37 38 2c 31 2e 35 38 68 34 2e 36 36 63 36 2e 30 38 2c 30 2c 39 2e 36 35 2c 33 2e 35 34 2c 39 2e 36 35 2c 38 2e 33 36 73 2d 33 2e 35 2c 38 2e 35 2d 39 2e 34 32 2c 38 2e 35 68 2d 31 4c 31 37 36 2e 39 32 2c 32 36 68 2d 32 6c 2d 39 2e 32 32 2d 37 2e 35 32 68 2d 2e 34 39 56 32 36 68 2d 31 2e 34 31 56 31 2e 35 38 5a 6d 31 2e 34 31 2c 31 2e 33 56 31 37 2e 31 36 68 Data Ascii: ,27l-3.19,3.15h-4.15l-6.4-5.31V27l-3.19,3.15H159.4V3.87Zm6.86,12.32h2.65a3.72,3.72,0,0,0,3.85-3.92c0-5.59-5.4-5.57-6.49-5.57v9.49ZM163.78,1.58h4.66c6.08,0,9.65,3.54,9.65,8.36s-3.5,8.5-9.42,8.5h-1L176.92,26h-2l-9.22-7.52h-.49V26h-1.41V1.58Zm1.41,1.3V17.16h
2024-12-17 17:18:46 UTC	1084	IN	Data Raw: 32 2e 38 63 36 2e 37 34 2c 30 2c 31 31 2e 31 2d 34 2e 37 33 2c 31 31 2e 38 39 2d 31 30 2e 38 35 48 31 36 2e 36 31 56 31 37 68 31 30 63 2d 31 2c 34 2e 37 34 2d 34 2e 34 32 2c 38 2e 31 37 2d 31 30 2e 30 36 2c 38 2e 31 37 2d 36 2e 34 36 2c 30 2d 31 31 2e 32 2d 34 2e 38 34 2d 31 31 2e 32 2d 31 31 2e 34 33 53 31 30 2e 31 33 2c 32 2e 33 35 2c 31 36 2e 35 31 2c 32 2e 33 35 61 31 36 2e 31 38 2c 31 36 2e 31 38 2c 30 2c 30 2c 31 2c 38 2e 37 39 2c 33 6c 2d 2e 33 37 2c 31 2e 30 37 4c 32 31 2e 34 39 2c 39 2e 37 33 61 31 34 2e 32 31 2c 31 34 2e 32 31 2c 30 2c 30 2c 30 2d 37 2d 33 63 2d 32 2e 35 37 2d 2e 33 31 2d 35 2e 33 34 2e 33 32 2d 36 2e 38 32 2c 32 2e 35 37 61 39 2e 36 35 2c 39 2e 36 35 2c 30 2c 30 2c 30 2d 2e 38 38 2c 36 2e 38 34 2c 39 2e 33 38 2c 39 2e 33 38 2c Data Ascii: 2.8c6.74,0,11.1-4.73,11.89-10.85H16.61V17h10c-1,4.74-4.42,8.17-10.06,8.17-6.46,0-11.2-4.84-11.2-11.43S10.13,2.35,16.51,2.35a16.18,16.18,0,0,1,8.79,3l-.37,1.07L21.49,9.73a14.21,14.21,0,0,0-7-3c-2.57-.31-5.34.32-6.82,2.57a9.65,9.65,0,0,0-.88,6.84,9.38,9.38,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49760	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:46 UTC	837	OUT	GET /images/665deae8723a9bcb12bc32ef_popsugar.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:46 UTC	1053	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:46 GMT Content-Type: image/svg+xml Content-Length: 2166 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598753-876" expires: Tue, 17 Dec 2024 17:18:45 GMT last-modified: Wed, 11 Dec 2024 12:36:35 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kocjbz3YMeP6FXm7%2F4e%2F1GHsXZnGSnylwsjC8R4fMgrGoHGTZcyrcW3%2B0Tmnu%2FNO1qYU%2FIgNaDEI4u7U%2Bun9COagJqvbI1Wxkk7C6s6rbiEo5qSHt9gb10JLEYBgjn5D8HoCdGC3m6Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389303ff600f80-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1502&min_rtt=1494&rtt_var=577&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1415&delivery_rate=1867007&cwnd=207&unsent_bytes=0&cid=d0662a683c4c0853&ts=530&x=0"
2024-12-17 17:18:46 UTC	316	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 33 20 39 36 2e 37 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 69 64 3d 22 70 22 20 64 3d 22 4d 35 39 2e 33 2c 35 33 2e 38 63 2d 36 2e 34 2c 35 2e 33 2d 31 35 2e 31 2c 37 2e 32 2d 32 35 2c 37 2e 32 48 32 32 2e 35 56 39 36 2e 34 48 30 56 2e 36 48 33 34 2e 33 63 39 2e 39 2c 30 2c 31 38 2e 36 2c 31 2e 39 2c 32 35 2c 37 2e 32 73 31 30 2c 31 32 2e 36 2c 31 30 2c 32 32 2e 39 53 36 35 2e 37 2c 34 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1203 96.7"><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path id="p" d="M59.3,53.8c-6.4,5.3-15.1,7.2-25,7.2H22.5V96.4H0V.6H34.3c9.9,0,18.6,1.9,25,7.2s10,12.6,10,22.9S65.7,48
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 63 34 2e 39 2c 30 2c 38 2e 31 2d 2e 37 2c 31 30 2e 38 2d 32 2e 36 73 34 2e 36 2d 35 2e 34 2c 34 2e 36 2d 31 30 2e 33 53 34 34 2e 36 2c 32 32 2e 36 2c 34 31 2e 39 2c 32 30 2e 36 5a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 37 2e 36 2e 35 63 2d 32 36 2e 39 2c 30 2d 34 37 2e 34 2c 31 38 2e 31 2d 34 37 2e 34 2c 34 38 2e 32 73 32 30 2e 35 2c 34 38 2c 34 37 2e 34 2c 34 38 53 32 33 35 2c 37 38 2e 38 2c 32 33 35 2c 34 38 2e 37 2c 32 31 34 2e 35 2e 35 2c 31 38 37 2e 36 2e 35 5a 6d 30 2c 37 36 2e 37 63 2d 31 35 2e 31 2c 30 2d 32 35 2e 39 2d 31 30 2e 37 2d 32 35 2e 39 2d 32 38 2e 35 73 31 30 2e 38 2d 32 39 2e 36 2c 32 35 2e 39 2d 32 39 2e 36 2c 32 35 2e 39 2c 31 31 2e 38 2c 32 35 2e 39 2c 32 39 2e 36 53 32 30 32 2e 37 2c 37 37 2e 32 2c 31 38 37 2e 36 2c 37 37 2e Data Ascii: c4.9,0,8.1-.7,10.8-2.6s4.6-5.4,4.6-10.3S44.6,22.6,41.9,20.6Z"/><path d="M187.6.5c-26.9,0-47.4,18.1-47.4,48.2s20.5,48,47.4,48S235,78.8,235,48.7,214.5.5,187.6.5Zm0,76.7c-15.1,0-25.9-10.7-25.9-28.5s10.8-29.6,25.9-29.6,25.9,11.8,25.9,29.6S202.7,77.2,187.6,77.
2024-12-17 17:18:46 UTC	481	IN	Data Raw: 37 2c 31 31 2d 32 36 2e 37 2c 33 30 73 31 31 2e 39 2c 33 30 2c 32 37 2e 31 2c 33 30 2c 31 39 2e 35 2d 36 2c 31 39 2e 35 2d 36 56 35 38 2e 35 48 37 38 31 2e 36 56 34 31 2e 38 68 34 31 2e 31 56 38 30 2e 36 5a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 39 38 37 2e 35 2c 39 36 2e 35 48 39 36 33 2e 31 6c 2d 36 2e 38 2d 31 39 2e 33 48 39 32 32 2e 31 6c 2d 36 2e 38 2c 31 39 2e 33 48 38 39 32 4c 39 32 38 2e 31 2e 35 68 32 33 2e 33 5a 4d 39 35 31 2e 31 2c 35 39 2e 37 2c 39 33 39 2e 32 2c 32 35 2e 33 2c 39 32 37 2e 33 2c 35 39 2e 37 5a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 33 32 2e 35 2c 39 36 2e 35 68 2d 32 36 2e 31 6c 2d 32 30 2e 31 2d 33 36 2e 37 68 2d 37 2e 31 56 39 36 2e 35 68 2d 32 32 2e 35 56 2e 36 68 33 34 2e 34 63 31 30 2e 37 2c 30 2c 31 39 2c 32 2e 32 Data Ascii: 7,11-26.7,30s11.9,30,27.1,30,19.5-6,19.5-6V58.5H781.6V41.8h41.1V80.6Z"/><path d="M987.5,96.5H963.1l-6.8-19.3H922.1l-6.8,19.3H892L928.1.5h23.3ZM951.1,59.7,939.2,25.3,927.3,59.7Z"/><path d="M1132.5,96.5h-26.1l-20.1-36.7h-7.1V96.5h-22.5V.6h34.4c10.7,0,19,2.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49757	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:46 UTC	437	OUT	GET /images/665deae8723a9bcb12bc32f1_allure.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:46 UTC	1049	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:46 GMT Content-Type: image/svg+xml Content-Length: 10426 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "6759874f-28ba" expires: Tue, 17 Dec 2024 17:18:45 GMT last-modified: Wed, 11 Dec 2024 12:36:31 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I4KOTIEgbasVggRLhqCRzXVa5OFBtFcJvNvwtTu%2Bv5zG4NXaSCbCcbACO4Kpgw9SzCqiJvRCQWuNKWDqJn7P7ABtaL6mjLUOkBFVMwsyxlbm9r2v%2Fz6lDS%2FZvb50j6bZBw7lVC6jYME%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389303f855c431-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1523&min_rtt=1501&rtt_var=607&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1015&delivery_rate=1741204&cwnd=229&unsent_bytes=0&cid=41979b1145f14111&ts=530&x=0"
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 35 20 31 30 35 2e 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 36 39 2c 31 30 34 2e 36 34 63 2d 2e 36 34 2d 2e 33 2d 31 2e 38 37 2d 31 2d 32 2e 37 33 2d 31 2e 35 33 2d 32 2e 34 34 2d 31 2e 35 33 2d 33 2e 31 32 2d 31 2e 38 32 2d 34 2e 36 38 2d 32 2d 31 2e 37 33 2d 2e 32 2d 32 2e 33 35 2d 2e 36 2d 33 2e 38 31 2d 32 2e 34 36 61 31 36 2e 38 35 2c 31 36 2e 38 35 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 365 105.2"><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M17.69,104.64c-.64-.3-1.87-1-2.73-1.53-2.44-1.53-3.12-1.82-4.68-2-1.73-.2-2.35-.6-3.81-2.46a16.85,16.85,0,0,
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 2c 31 37 2e 39 2c 31 37 2e 39 2c 30 2c 30 2c 31 2c 32 2c 37 2e 33 2c 32 33 2e 37 39 2c 32 33 2e 37 39 2c 30 2c 30 2c 30 2c 2e 36 2c 33 2e 37 36 2c 32 2e 34 39 2c 32 2e 34 39 2c 30 2c 30 2c 31 2c 2e 31 31 2c 31 2e 37 39 2c 38 2e 34 38 2c 38 2e 34 38 2c 30 2c 30 2c 30 2c 30 2c 33 2e 37 37 2c 31 32 2e 33 33 2c 31 32 2e 33 33 2c 30 2c 30 2c 31 2d 2e 30 39 2c 34 63 2d 2e 31 38 2c 31 2e 34 39 2d 2e 34 32 2c 34 2e 34 33 2d 2e 35 34 2c 36 2e 35 32 73 2d 2e 33 31 2c 34 2e 31 34 2d 2e 34 32 2c 34 2e 35 37 61 38 2e 38 31 2c 38 2e 38 31 2c 30 2c 30 2c 30 2d 2e 30 37 2c 34 2e 32 36 2c 35 2e 32 31 2c 35 2e 32 31 2c 30 2c 30 2c 31 2d 2e 32 37 2c 34 2c 37 2e 38 36 2c 37 2e 38 36 2c 30 2c 30 2c 30 2d 2e 35 38 2c 32 2e 33 38 63 30 2c 31 2e 34 31 2c 31 2e 35 35 2c 35 2e 32 Data Ascii: ,17.9,17.9,0,0,1,2,7.3,23.79,23.79,0,0,0,.6,3.76,2.49,2.49,0,0,1,.11,1.79,8.48,8.48,0,0,0,0,3.77,12.33,12.33,0,0,1-.09,4c-.18,1.49-.42,4.43-.54,6.52s-.31,4.14-.42,4.57a8.81,8.81,0,0,0-.07,4.26,5.21,5.21,0,0,1-.27,4,7.86,7.86,0,0,0-.58,2.38c0,1.41,1.55,5.2
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 2c 2e 34 39 2c 32 2e 32 37 2e 35 32 2c 33 2e 31 32 2e 33 61 31 31 2e 39 33 2c 31 31 2e 39 33 2c 30 2c 30 2c 30 2c 32 2e 34 39 2d 31 2e 32 37 63 32 2e 39 32 2d 31 2e 39 31 2c 32 2e 36 37 2d 31 2e 38 37 2c 38 2e 37 36 2d 31 2e 35 33 2c 33 2e 33 32 2e 31 38 2c 37 2e 36 34 2e 33 31 2c 38 2e 34 31 2e 32 35 2e 36 2c 30 2c 31 2e 34 35 2d 33 2e 35 32 2c 32 2d 38 2e 32 33 2e 32 33 2d 31 2e 39 2e 36 34 2d 34 2e 35 31 2e 39 32 2d 35 2e 38 32 2e 35 34 2d 32 2e 35 33 2e 35 33 2d 32 2e 36 34 2d 2e 33 35 2d 33 2e 37 34 2d 2e 34 33 2d 2e 35 33 2d 2e 34 33 2d 2e 35 36 2d 2e 32 2d 33 2e 38 61 39 34 2e 37 32 2c 39 34 2e 37 32 2c 30 2c 30 2c 30 2d 2e 30 39 2d 31 34 2e 33 39 6c 2d 2e 33 32 2d 32 2e 39 34 2e 35 32 2d 32 2e 33 32 63 2e 37 2d 33 2e 31 38 2e 36 38 2d 33 2e 34 31 Data Ascii: ,.49,2.27.52,3.12.3a11.93,11.93,0,0,0,2.49-1.27c2.92-1.91,2.67-1.87,8.76-1.53,3.32.18,7.64.31,8.41.25.6,0,1.45-3.52,2-8.23.23-1.9.64-4.51.92-5.82.54-2.53.53-2.64-.35-3.74-.43-.53-.43-.56-.2-3.8a94.72,94.72,0,0,0-.09-14.39l-.32-2.94.52-2.32c.7-3.18.68-3.41
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 31 34 2e 37 2c 31 34 2e 37 2c 30 2c 30 2c 30 2d 35 2e 36 39 2d 2e 34 31 2c 32 30 2e 36 37 2c 32 30 2e 36 37 2c 30 2c 30 2c 31 2d 34 2e 36 38 2c 30 63 2d 35 2e 32 32 2d 2e 33 37 2d 36 2e 38 39 2d 2e 33 33 2d 38 2e 38 38 2e 32 31 73 2d 31 2e 39 32 2e 35 31 2d 34 2e 33 32 2d 2e 33 37 61 33 2e 38 35 2c 33 2e 38 35 2c 30 2c 30 2c 30 2d 32 2e 37 33 2d 2e 31 39 6c 2d 31 2e 35 36 2e 32 34 2d 31 2e 32 31 2d 2e 36 31 61 35 2e 35 36 2c 35 2e 35 36 2c 30 2c 30 2c 30 2d 31 2e 37 32 2d 2e 36 31 2c 33 2e 35 39 2c 33 2e 35 39 2c 30 2c 30 2c 30 2d 31 2e 35 31 2e 37 33 6c 2d 31 2c 2e 37 33 2d 31 2e 39 2d 2e 30 35 61 31 32 2e 31 33 2c 31 32 2e 31 33 2c 30 2c 30 2c 30 2d 34 2c 2e 34 35 2c 36 2e 38 38 2c 36 2e 38 38 2c 30 2c 30 2c 31 2d 33 2e 37 35 2e 32 36 2c 36 36 2e 38 38 Data Ascii: 14.7,14.7,0,0,0-5.69-.41,20.67,20.67,0,0,1-4.68,0c-5.22-.37-6.89-.33-8.88.21s-1.92.51-4.32-.37a3.85,3.85,0,0,0-2.73-.19l-1.56.24-1.21-.61a5.56,5.56,0,0,0-1.72-.61,3.59,3.59,0,0,0-1.51.73l-1,.73-1.9-.05a12.13,12.13,0,0,0-4,.45,6.88,6.88,0,0,1-3.75.26,66.88
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 35 2e 33 2e 32 33 2d 31 2e 31 38 2d 2e 35 33 61 32 2e 39 2c 32 2e 39 2c 30 2c 30 2c 30 2d 32 2e 31 2d 2e 33 37 2c 31 39 2c 31 39 2c 30 2c 30 2c 31 2d 32 2e 35 38 2e 31 37 2c 34 2e 36 38 2c 34 2e 36 38 2c 30 2c 30 2c 31 2d 32 2e 37 38 2d 2e 35 33 63 2d 33 2e 38 36 2d 31 2e 39 2d 39 2e 37 38 2d 31 30 2e 36 36 2d 31 32 2e 34 31 2d 31 38 2e 33 38 2d 31 2e 34 2d 34 2e 31 34 2d 31 2e 34 2d 34 2e 30 39 2d 31 2e 34 38 2d 31 36 2e 38 32 2c 30 2d 36 2e 32 36 2d 2e 31 37 2d 31 32 2e 36 36 2d 2e 32 39 2d 31 34 2e 32 32 61 33 32 2e 34 32 2c 33 32 2e 34 32 2c 30 2c 30 2c 30 2d 31 2e 31 34 2d 36 2e 38 39 63 2d 2e 32 32 2d 2e 35 35 2d 2e 32 33 2d 2e 35 35 2d 31 2e 34 34 2d 2e 34 33 61 39 2c 39 2c 30 2c 30 2c 31 2d 34 2e 35 36 2d 2e 37 63 2d 32 2e 32 35 2d 31 2e 32 39 2d Data Ascii: 5.3.23-1.18-.53a2.9,2.9,0,0,0-2.1-.37,19,19,0,0,1-2.58.17,4.68,4.68,0,0,1-2.78-.53c-3.86-1.9-9.78-10.66-12.41-18.38-1.4-4.14-1.4-4.09-1.48-16.82,0-6.26-.17-12.66-.29-14.22a32.42,32.42,0,0,0-1.14-6.89c-.22-.55-.23-.55-1.44-.43a9,9,0,0,1-4.56-.7c-2.25-1.29-
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 31 2e 32 36 2c 34 2e 34 33 2c 31 2e 36 34 2c 33 2e 35 2e 34 38 2c 35 2e 37 35 2c 31 2e 34 31 2c 36 2e 37 33 2c 32 2e 37 39 73 31 2e 32 34 2c 35 2e 33 35 2e 34 37 2c 36 2e 36 35 61 31 31 2e 37 32 2c 31 31 2e 37 32 2c 30 2c 30 2c 31 2d 32 2e 33 39 2c 31 2e 39 32 63 2d 31 2e 31 33 2e 37 34 2d 32 2e 38 35 2c 32 2d 33 2e 38 31 2c 32 2e 37 34 61 39 2e 30 38 2c 39 2e 30 38 2c 30 2c 30 2c 31 2d 32 2c 31 2e 33 36 63 2d 2e 31 37 2c 30 2d 31 2e 31 36 2d 2e 32 37 2d 32 2e 32 32 2d 2e 35 38 5a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 33 30 2e 33 32 2c 31 30 31 2e 39 33 63 2d 32 2e 35 35 2d 31 2e 38 36 2d 34 2d 34 2e 38 38 2d 33 2e 34 35 2d 37 2e 33 36 2e 36 35 2d 33 2e 31 31 2c 32 2e 36 31 2d 34 2e 38 2c 35 2e 35 38 2d 34 2e 38 32 61 31 38 2c 31 38 2c 30 2c 30 2c 31 Data Ascii: 1.26,4.43,1.64,3.5.48,5.75,1.41,6.73,2.79s1.24,5.35.47,6.65a11.72,11.72,0,0,1-2.39,1.92c-1.13.74-2.85,2-3.81,2.74a9.08,9.08,0,0,1-2,1.36c-.17,0-1.16-.27-2.22-.58Z"/><path d="M230.32,101.93c-2.55-1.86-4-4.88-3.45-7.36.65-3.11,2.61-4.8,5.58-4.82a18,18,0,0,1
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 34 2c 32 31 2e 34 34 2c 30 2c 30 2c 30 2c 34 2e 34 35 2c 33 2e 31 33 6c 31 2e 32 37 2e 36 35 68 31 32 2e 31 34 6c 31 2c 2e 38 39 63 32 2e 37 34 2c 32 2e 33 36 2c 32 2e 39 2c 35 2e 31 34 2e 34 39 2c 38 2e 32 39 2d 31 2e 31 38 2c 31 2e 35 35 2d 32 2e 35 33 2c 32 2e 31 31 2d 36 2e 35 31 2c 32 2e 37 61 31 38 2e 32 33 2c 31 38 2e 32 33 2c 30 2c 30 2c 31 2d 36 2e 38 39 2d 2e 30 39 63 2d 31 2e 34 32 2d 2e 33 34 2d 31 2e 36 37 2d 2e 33 35 2d 32 2e 31 31 2d 2e 31 2d 31 2e 37 39 2c 31 2d 31 2e 35 38 2c 31 2d 36 2e 37 33 2c 31 68 2d 34 2e 38 37 6c 2d 31 2e 31 35 2d 2e 35 33 61 34 2c 34 2c 30 2c 30 2c 30 2d 33 2e 36 33 2d 2e 31 35 2c 31 31 2e 30 37 2c 31 31 2e 30 37 2c 30 2c 30 2c 31 2d 35 2e 34 35 2e 30 37 2c 34 2e 35 36 2c 34 2e 35 36 2c 30 2c 30 2c 30 2d 33 2e 31 Data Ascii: 4,21.44,0,0,0,4.45,3.13l1.27.65h12.14l1,.89c2.74,2.36,2.9,5.14.49,8.29-1.18,1.55-2.53,2.11-6.51,2.7a18.23,18.23,0,0,1-6.89-.09c-1.42-.34-1.67-.35-2.11-.1-1.79,1-1.58,1-6.73,1h-4.87l-1.15-.53a4,4,0,0,0-3.63-.15,11.07,11.07,0,0,1-5.45.07,4.56,4.56,0,0,0-3.1
2024-12-17 17:18:46 UTC	843	IN	Data Raw: 37 32 2c 30 2c 30 2c 30 2c 33 2e 37 34 2c 31 2e 36 36 2c 31 38 2e 39 34 2c 31 38 2e 39 34 2c 30 2c 30 2c 31 2c 34 2e 36 37 2c 31 2e 33 39 6c 31 2e 31 31 2e 34 39 2c 32 2e 35 39 2d 2e 37 31 63 31 2e 34 33 2d 2e 33 38 2c 33 2e 31 32 2d 2e 37 39 2c 33 2e 37 36 2d 2e 39 61 36 2e 34 39 2c 36 2e 34 39 2c 30 2c 30 2c 30 2c 33 2e 38 38 2d 31 2e 37 32 2c 33 35 2e 37 32 2c 33 35 2e 37 32 2c 30 2c 30 2c 30 2c 35 2e 37 32 2d 36 2e 34 32 63 32 2e 32 32 2d 33 2c 33 2e 34 38 2d 34 2e 34 36 2c 34 2e 32 31 2d 34 2e 38 37 2e 35 2d 2e 32 37 2c 31 2e 31 35 2d 2e 33 33 2c 33 2e 36 33 2d 2e 33 33 2c 33 2e 34 39 2c 30 2c 34 2e 30 38 2e 31 35 2c 35 2e 32 33 2c 31 2e 33 31 2c 32 2e 33 32 2c 32 2e 33 34 2c 32 2c 37 2e 31 36 2d 2e 38 35 2c 31 32 2e 38 36 61 31 31 2e 34 36 2c 31 31 Data Ascii: 72,0,0,0,3.74,1.66,18.94,18.94,0,0,1,4.67,1.39l1.11.49,2.59-.71c1.43-.38,3.12-.79,3.76-.9a6.49,6.49,0,0,0,3.88-1.72,35.72,35.72,0,0,0,5.72-6.42c2.22-3,3.48-4.46,4.21-4.87.5-.27,1.15-.33,3.63-.33,3.49,0,4.08.15,5.23,1.31,2.32,2.34,2,7.16-.85,12.86a11.46,11

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49758	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:46 UTC	441	OUT	GET /images/665deae8723a9bcb12bc32f0_prevention.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:46 UTC	1050	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:46 GMT Content-Type: image/svg+xml Content-Length: 2108 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "6759874f-83c" expires: Tue, 17 Dec 2024 17:18:45 GMT last-modified: Wed, 11 Dec 2024 12:36:31 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZEBj%2BdNNxH5nZtbVcHzesT%2F0cYxbr8mcEWYO5f4ye4%2BNxp9AZuj99bjsPujDkImjkXvKMoH6l12X8S8lvXKWNLSNTzrRVlYAIC5xi%2FuM4wJDL62rYKSTKIDerl%2BX2KhEWId7VdwqRTE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3893040e0dc331-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1746&min_rtt=1737&rtt_var=670&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1019&delivery_rate=1612368&cwnd=79&unsent_bytes=0&cid=500dc8c8a8b2d5ec&ts=539&x=0"
2024-12-17 17:18:46 UTC	319	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 30 20 31 31 33 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 6c 61 79 65 72 22 3e 3c 70 61 74 68 20 64 3d 22 4d 35 38 37 2e 36 2c 31 30 36 2e 38 61 36 2e 32 2c 36 2e 32 2c 30 2c 31 2c 31 2c 36 2e 32 2c 36 2e 32 41 36 2e 33 37 2c 36 2e 33 37 2c 30 2c 30 2c 31 2c 35 38 37 2e 36 2c 31 30 36 2e 38 5a 6d 31 31 2e 33 2c 30 61 35 2e 31 2c 35 2e 31 2c 30 2c 31 2c 30 2c 30 2c 2e 34 76 2d 2e 34 5a 6d 2d 32 2e 31 2c 33 2e 33 68 2d 31 2e 31 6c 2d 31 2e 39 2d 33 2e 32 68 2d 31 2e 36 76 33 2e 32 68 2d 2e 39 76 2d 36 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 600 113"><g id="Layer_2" data-name="Layer 2"><g id="layer"><path d="M587.6,106.8a6.2,6.2,0,1,1,6.2,6.2A6.37,6.37,0,0,1,587.6,106.8Zm11.3,0a5.1,5.1,0,1,0,0,.4v-.4Zm-2.1,3.3h-1.1l-1.9-3.2h-1.6v3.2h-.9v-6.
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 35 39 36 2e 38 2c 31 31 30 2e 31 5a 6d 2d 33 2e 32 2d 33 2e 37 63 2e 39 2c 30 2c 32 2e 33 2e 32 2c 32 2e 33 2d 31 2e 32 2c 30 2d 31 2e 31 2d 2e 39 2d 31 2e 32 2d 31 2e 38 2d 31 2e 32 68 2d 31 2e 39 76 32 2e 35 68 31 2e 34 5a 6d 2d 39 2e 35 2c 34 2e 38 48 35 36 36 2e 38 56 36 35 2e 31 63 30 2d 39 2d 35 2e 31 2d 31 32 2e 35 2d 31 32 2e 34 2d 31 32 2e 35 2d 37 2e 39 2c 30 2d 31 35 2e 34 2c 35 2e 33 2d 31 35 2e 34 2c 31 38 2e 37 76 33 39 2e 39 48 35 32 32 2e 32 56 33 37 2e 38 48 35 33 39 56 34 38 2e 36 68 2e 34 63 34 2e 31 2d 37 2e 32 2c 31 31 2e 36 2d 31 33 2e 32 2c 32 31 2e 35 2d 31 33 2e 32 2c 31 33 2e 38 2c 30 2c 32 33 2e 33 2c 37 2e 36 2c 32 33 2e 33 2c 32 34 2e 32 5a 6d 2d 36 37 2d 33 37 2e 31 63 30 2c 32 34 2d 31 36 2e 32 2c 33 38 2e 38 2d 33 36 2e 34 Data Ascii: 596.8,110.1Zm-3.2-3.7c.9,0,2.3.2,2.3-1.2,0-1.1-.9-1.2-1.8-1.2h-1.9v2.5h1.4Zm-9.5,4.8H566.8V65.1c0-9-5.1-12.5-12.4-12.5-7.9,0-15.4,5.3-15.4,18.7v39.9H522.2V37.8H539V48.6h.4c4.1-7.2,11.6-13.2,21.5-13.2,13.8,0,23.3,7.6,23.3,24.2Zm-67-37.1c0,24-16.2,38.8-36.4
2024-12-17 17:18:46 UTC	420	IN	Data Raw: 37 36 2e 35 2c 37 39 2e 38 5a 4d 31 35 39 2e 39 2c 36 36 2e 39 63 2d 2e 32 2d 39 2d 36 2d 31 36 2e 31 2d 31 36 2e 32 2d 31 36 2e 31 2d 37 2e 38 2c 30 2d 31 35 2e 39 2c 34 2e 38 2d 31 37 2e 38 2c 31 36 2e 31 5a 6d 2d 34 37 2d 33 30 4c 31 30 39 2e 32 2c 35 34 61 32 30 2c 32 30 2c 30 2c 30 2c 30 2d 36 2e 34 2d 31 2e 31 63 2d 31 34 2e 36 2c 30 2d 31 35 2c 31 33 2e 38 2d 31 35 2c 31 37 2e 38 76 34 30 2e 34 48 37 30 2e 35 56 33 37 2e 37 48 38 37 2e 36 56 34 39 48 38 38 63 33 2e 34 2d 38 2e 36 2c 38 2e 38 2d 31 33 2e 36 2c 31 36 2e 39 2d 31 33 2e 36 41 31 39 2e 36 34 2c 31 39 2e 36 34 2c 30 2c 30 2c 31 2c 31 31 32 2e 39 2c 33 36 2e 39 5a 4d 36 37 2e 31 2c 33 39 2e 36 63 30 2c 33 30 2e 35 2d 32 31 2e 39 2c 33 39 2e 35 2d 34 37 2e 36 2c 33 39 2e 35 76 33 32 2e 31 Data Ascii: 76.5,79.8ZM159.9,66.9c-.2-9-6-16.1-16.2-16.1-7.8,0-15.9,4.8-17.8,16.1Zm-47-30L109.2,54a20,20,0,0,0-6.4-1.1c-14.6,0-15,13.8-15,17.8v40.4H70.5V37.7H87.6V49H88c3.4-8.6,8.8-13.6,16.9-13.6A19.64,19.64,0,0,1,112.9,36.9ZM67.1,39.6c0,30.5-21.9,39.5-47.6,39.5v32.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49759	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:46 UTC	808	OUT	GET /images/t45.webp HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:46 UTC	1051	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:46 GMT Content-Type: image/webp Content-Length: 46850 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598752-b702" expires: Tue, 17 Dec 2024 17:18:45 GMT last-modified: Wed, 11 Dec 2024 12:36:34 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UnltVUeRqgLBd47lBse2Hqsc%2Fn6ksa%2FKpidRSD7XPSISwxl0WtDFIUMYJTgbQcWfwpZT%2FZZH63RLSiM9OZO3XWTxBq6pttDF%2BdKHYPxpv6640qkPJ%2BLaYIlPp%2Fn0pSYnnRBFJjWEjE4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3893040bdb0f43-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1576&min_rtt=1561&rtt_var=615&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=1386&delivery_rate=1737061&cwnd=32&unsent_bytes=0&cid=055dcf83f1727bf0&ts=539&x=0"
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 52 49 46 46 fa b6 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 4e 04 00 e7 03 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X NICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: a5 af 68 4b fc 33 b2 c7 cc 26 4b 68 33 94 bc e0 9c f2 60 8d 38 ef a3 f2 39 8e 4c 9f e3 de 40 80 7a ec 1c 58 42 6a fa c0 8d 8d e0 6d 68 14 92 cc 6e f1 06 4e 06 e4 21 90 e1 12 df eb 50 65 6d d9 03 d5 70 f4 e3 39 8c b8 00 d0 f4 f7 27 cd fb 6e 69 a8 a4 6b 1f fd 13 0d 2b a7 cb 98 db 2e 5b ba 59 2f e5 8a ce f1 1b 8b 3f 44 11 e4 d8 b6 39 8a bb db 37 44 76 41 b5 b0 b1 8c 1f 3f ea 4d fc 82 15 e9 c7 0d 3c 2b ff 16 07 a2 eb db f4 20 e6 80 74 aa 08 38 0e f2 79 c3 f4 11 2e 69 1f 0e 13 9f 19 c1 79 7b fe 23 21 20 0d 34 d1 fd 09 d3 86 a2 fc 86 22 e9 fb 60 f2 6a 6b 51 01 46 ed 34 6c ec 98 eb e8 4e 4b 58 eb 90 23 65 d8 95 06 50 91 d2 2f 26 06 11 3a 38 78 87 00 98 16 3c 3d 29 bd cb 6b 5f 10 2b 25 cd db 30 79 a2 96 88 93 e4 05 a7 e5 4e ff 8f f9 cc f7 db 91 69 8e f6 33 1d f0 Data Ascii: hK3&Kh3`89L@zXBjmhnN!Pemp9'nik+.[Y/?D97DvA?M<+ t8y.iy{#! 4"`jkQF4lNKX#eP/&:8x<=)k_+%0yNi3
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: af 66 3a 42 5c 8a 3b 13 39 31 ca d0 34 1e e6 b9 ac 11 6e c2 c0 84 31 7c e8 21 a8 f6 f5 c3 65 dd d1 05 66 10 e9 66 3d bf 65 e2 ab e1 1c d9 a5 1c 4c 23 36 0e 68 ea 18 fa fa 86 5a 54 f1 fb 1e 20 7c a8 c8 56 99 a0 68 33 a9 d9 45 3c 23 bf ac 1a c0 d0 b2 43 45 9e d1 9c 32 40 f9 c0 05 91 a1 4c a8 6c bd fd 8f d6 f6 29 0c b3 56 f8 71 af d3 24 38 15 bb 96 74 94 96 68 49 12 6d bb c2 37 cd f9 88 07 ca f2 4b 3a 77 27 b4 62 8e 4a 24 b9 a4 8d ba fb 58 a9 50 15 1c c7 9b 21 b0 36 12 49 9d e3 8b b3 0e 27 55 d1 a6 f9 d9 c3 c9 81 c4 52 c9 62 11 59 6c 90 ec 5f 1c 78 85 37 2a 00 70 60 ee 9e 8e 17 58 bc 09 51 36 87 1d 87 e8 ed 42 eb 98 4b 5f 94 89 95 a1 26 6b 7a 13 4f c5 5d 25 b2 3c 09 7e b1 15 2f 11 64 18 40 83 a2 c7 c3 64 71 f9 b6 7c 35 4f 54 3a b7 5b 0b 18 38 0e 23 6f 48 9b Data Ascii: f:B\;914n1\|!eff=eL#6hZT \|Vh3E<#CE2@Ll)Vq$8thIm7K:w'bJ$XP!6I'URbYl_x7*p`XQ6BK_&kzO]%<~/d@dq\|5OT:[8#oH
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 8e 55 82 3a a2 20 3d 24 59 36 f7 92 dc 22 c5 c9 f5 26 5d 47 cf 61 38 23 f9 f0 45 f0 6d c9 1b 34 56 90 36 a4 4c 93 f1 8e cb 13 b3 ad c2 72 c0 58 b7 a2 20 0f 0d 52 80 bc 65 e8 ff 2a 4c a3 a1 e9 25 a2 cf ef 9b 19 a3 2e c9 3e 22 01 d7 20 91 50 cf d3 1e 7b 01 ae f8 fc 85 82 24 1d b3 81 b3 54 a5 c4 aa 66 51 96 f9 7c cd cf 08 7f 4a d6 ea 4a aa 74 0c 7c e5 01 83 c3 0d bc 3c 14 79 52 f1 4f aa 0c cd 30 62 9d 58 cd 00 19 70 2f c9 f5 92 f3 47 c9 af 1c 57 56 ed 4b 77 db 7e 25 9a a9 d0 d5 52 aa 6c 9e c6 9b 59 0c fb 60 e3 55 47 e0 48 de d3 c5 56 a3 69 cf ab 5f 4e 26 de 31 5c 46 ef b1 8c 8a 37 ad 63 48 c9 1c a2 b8 9b 66 90 4b 7e 8a e3 fc 36 48 51 61 46 1d c0 4f e3 44 40 5f a9 58 c9 71 55 3c fc 99 bc 53 4d b2 ee c3 f4 6e 26 7c ee c2 92 05 73 32 3d 47 64 b5 c7 10 79 c9 e7 Data Ascii: U: =$Y6"&]Ga8#Em4V6LrX Re*L%.>" P{$TfQ\|JJt\|<yRO0bXp/GWVKw~%RlY`UGHVi_N&1\F7cHfK~6HQaFOD@_XqU<SMn&\|s2=Gdy
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 8e 5d ca cc 2e ba 76 a5 03 ba 10 7f 9f 90 dc 5b 58 7d b0 db c1 26 db c6 84 c8 7f 9e cd d9 c1 c6 07 e3 33 df 25 6c 70 60 e3 10 3d e4 2e 9d 4b be e6 20 4f 3d 77 d0 01 b9 a5 60 d9 e4 a1 33 50 1e 18 de f5 71 e7 a0 55 a5 ee 30 ab 37 49 4d 90 c3 06 a9 45 87 5d d6 67 36 e0 26 b9 d6 9d c9 9e fa d1 1c cc 9c 1e 0b 07 a1 6a 76 39 61 73 5a 64 9d f6 d4 1e 79 92 e7 4b 9a 1f ba 25 bc 40 94 d0 7a ff 89 3f 65 c6 f7 fe c5 7f 07 7e 7a eb 70 95 95 b2 b3 f9 c9 f8 20 40 17 39 61 8c 9c b3 c4 14 36 f2 2b 02 02 84 07 a7 e6 7e 67 f7 7e 92 d2 65 8f 8b b9 3e 44 bc 3c 39 46 f8 59 e2 4d e7 38 59 c6 d9 0b 6b 67 66 15 cf 80 f3 87 59 b3 13 c9 3d b5 0a 6f e1 82 38 b6 fe ae 73 21 f9 99 b0 6d 72 48 b3 b3 3e b7 0a 4c 8a d2 41 cc f4 8a 69 70 78 07 8d f1 b3 be 35 2c 03 28 33 41 c2 a3 bc f3 65 Data Ascii: ].v[X}&3%lp`=.K O=w`3PqU07IME]g6&jv9asZdyK%@z?e~zp @9a6+~g~e>D<9FYM8YkgfY=o8s!mrH>LAipx5,(3Ae
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 2d 7c 9a 11 f1 c3 ba d2 83 e7 34 16 27 21 36 d2 52 4c 89 1d 57 d9 59 fe 79 cd cd ed 00 9f e0 51 67 22 24 70 59 5f c9 06 61 f0 b8 b8 11 ac 3a 02 7e 3e 4f 82 02 ea b7 26 9b 95 01 9d 3e bc 2f 81 53 24 e2 b1 cb fb 63 6b 81 c4 c5 cb 68 e3 09 17 be a7 b8 74 d4 89 6d 89 f7 c5 1b 20 33 ae 4d b2 77 53 bc 75 33 55 7f 3f 38 d5 b2 65 a7 96 4e 88 6b 76 41 1b 2d 70 eb e9 a7 8c cd f3 5d 14 71 e4 2a ca 86 66 10 00 bd 14 8a a6 47 7e 7f c7 fb 97 97 41 1a eb ae 4f 84 3b f9 45 fb 78 97 78 99 a5 eb 71 17 a8 fa 8e 0a fe 63 26 99 f3 15 78 4c f0 3d 52 f9 3a 74 b0 2d 0d d9 d2 59 be 45 83 66 02 58 25 9f 6b a6 82 f1 e5 56 d5 9f 21 e7 31 f4 6e 1c 26 f8 db 01 0f 14 1c f5 74 c1 f8 4a cd 16 58 79 a1 ee 8c e4 1a 33 26 63 c6 b6 bf b2 4e de 52 56 57 d9 21 80 9d d5 91 f7 a8 be 01 4a a2 2c Data Ascii: -\|4'!6RLWYyQg"$pY_a:~>O&>/S$ckhtm 3MwSu3U?8eNkvA-p]q*fG~AO;Exxqc&xL=R:t-YEfX%kV!1n&tJXy3&cNRVW!J,
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 1d f0 37 eb e4 8f c4 92 87 6b b0 18 a0 fd 04 d8 9e d3 46 87 16 c9 c0 e0 3e 41 bb 65 fe 6a 5a 1b 6a 6c de ff 9a 88 51 ed a8 5e 22 c4 ed 9b 46 02 7c 80 be fd 78 72 e3 71 35 35 ec d8 44 12 f3 17 1d 20 33 48 17 f3 b1 0e cd 21 a7 cb 2b 6e e3 e2 2e 04 e3 c9 a0 a3 2e 15 d6 59 3c 89 36 5c c0 1b 86 f6 6f dd b1 cb d7 b5 7c 8a 03 e1 9d f7 09 37 4e 55 d4 4d 42 43 01 4e ca 3d 5c a8 ac aa 7a d6 5f 97 93 e8 63 39 16 79 9e 44 4b 92 81 27 de 0f 6d 02 e1 b9 8b 7e ea 73 5b 4a 56 8c 11 60 f7 97 2e 9c cb 3e 92 7d e5 e8 44 67 52 d1 26 7e d1 1b 02 d2 92 4f 11 c8 b1 9e f6 51 ab 71 ec 64 b6 33 5f 10 a0 c0 8e 36 7a 26 ac 9c 07 f9 66 6b 18 57 f5 91 1a dc c7 62 ae cd fe 37 d0 51 25 d9 4f 06 28 ea 2b 88 05 5e 06 53 22 78 76 5b 82 3e 5e 67 78 33 b5 2f 8a f5 4d 69 5c e0 b6 e5 fa 5c ea Data Ascii: 7kF>AejZjlQ^"F\|xrq55D 3H!+n..Y<6\o\|7NUMBCN=\z_c9yDK'm~s[JV`.>}DgR&~OQqd3_6z&fkWb7Q%O(+^S"xv[>^gx3/Mi\\
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 1b 23 67 7b 84 1f 05 cc 5a 59 00 c6 46 08 de 86 36 b8 20 e7 51 f7 78 eb 63 99 4b cf 35 97 84 36 d4 ef a1 c6 44 56 76 d4 e2 b4 16 99 ea c9 56 a2 9d a2 b7 b1 73 10 40 3a a2 9f 5c 4c 09 11 37 12 23 0d 9e 44 61 bf fc 6e 81 25 a0 fd 12 ae ba 91 ee 46 a7 f2 dd 76 9b a0 af bf f5 5f 1e 89 17 93 ed e2 b0 0c f0 3b 83 8c 95 a5 d9 ba 31 31 d9 25 7e 06 c8 7c 53 13 23 91 33 71 21 6c 36 b1 d3 b6 f3 43 ac d1 99 3d a3 18 bb af 3a 9d 40 eb 75 2d 4a b4 6a 96 5a 2e 9e 56 99 f5 79 90 d5 59 c8 8f af 4e 12 92 cf 45 ca e6 bc 31 a5 8d 52 d0 fb 56 dc fa c7 a2 a0 35 52 02 00 76 70 14 8d 39 7c f2 21 e9 ac 99 c3 a7 cf 99 cc 84 8c d8 d3 bf 48 0e 48 b3 29 73 5e 42 7a ff c7 41 35 15 d4 37 db 15 df 34 ed 6b 5e eb 3c e2 e7 ba e4 de 56 19 06 2f ba 4c 28 a7 e7 a7 e7 e8 a4 d8 ef 85 85 84 b0 Data Ascii: #g{ZYF6 QxcK56DVvVs@:\L7#Dan%Fv_;11%~\|S#3q!l6C=:@u-JjZ.VyYNE1RV5Rvp9\|!HH)s^BzA574k^<V/L(
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 1c c9 ee 2a 00 7c 3e fd 8e 8a 66 75 f2 61 b5 02 a0 f6 4e 3c 82 13 f7 aa 3a 46 fe 42 4e 3b 5e 31 29 5c 7b 40 44 28 3c b1 3a 6f df 4f 63 05 2f 92 e4 86 b8 d3 f3 00 72 a6 12 5b ec 40 5a 23 3c 70 03 9e bb 1d 14 35 48 ee bb 22 ad 3e 28 a1 d1 f9 84 55 3a 4f 07 fb a2 dc 18 07 6a ac ca 4f 12 cc 36 71 8e 79 bd 62 fb 84 0c 2c 7e 30 12 28 c9 9c 31 b7 9e e5 ad 3f a0 f6 3e 7e 90 6f 6f a7 84 60 61 9f cd 07 c6 37 2c 3d cf 3c 6f 83 c0 46 b4 6d e8 e1 49 f4 f2 2a f2 ea 0f 85 9c aa cf 33 db f2 09 39 e2 af 88 e5 4f 11 78 78 c9 3b b1 56 28 3f 9b d1 e9 c2 3c 4c 13 76 4e cc 01 e1 1a ea 5e cd 75 62 63 0b ef bf e1 36 a2 62 52 49 60 4a b7 84 5d 43 d6 8d 6c c5 b2 26 25 47 e4 e6 f5 18 50 5b 4a b5 9b 28 7f be a5 ca 48 81 a4 28 e0 62 72 49 c1 a4 93 f1 97 11 19 29 14 0e 50 e2 71 a2 42 Data Ascii: \|>fuaN<:FBN;^1)\{@D(<:oOc/r[@Z#<p5H">(U:OjO6qyb,~0(1?>~oo`a7,=<oFmI39Oxx;V(?<LvN^ubc6bRI`J]Cl&%GP[J(H(brI)PqB
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: de 7b 40 aa e1 7a 1b 69 5a ee 6c 61 3d ac 5d ad f5 7f a9 6f 33 b5 d1 b8 45 5a 04 9f b5 d7 57 c2 69 e6 7a 10 34 d7 42 a6 fc 42 60 96 37 0b 29 99 1f e0 c6 d9 53 19 02 fa 0b 5b e9 11 20 43 fa 83 66 96 df 23 84 29 47 8b 05 ea 65 ca 9e f3 41 8e 65 b5 7c 5b eb c6 f9 8e 55 da 6f 86 6f 57 f7 f9 31 24 22 2f f9 e3 51 ae 16 e2 45 f0 da 0c 67 00 3a 74 c1 fe 9c 00 6d f3 b9 21 45 3d 6a 8c 87 c6 b5 ec b1 44 60 c5 f2 3f d6 6a b7 57 c6 a2 47 5a 3e e9 21 17 dd 4a f5 0e 0b 4a e8 db 7b 29 90 2d ae c1 32 70 69 dd 8f 99 eb ab 5b 06 a4 59 3e 26 f7 b6 f4 f3 04 25 0e 66 f6 ed b3 62 b8 bf 2e 7f d4 d1 e3 9b 26 fa 35 78 f8 a4 cc 12 98 91 82 97 ca 74 ae d4 5a 91 ca eb 02 02 39 61 16 4e 65 f5 bd 26 9d 59 06 75 b4 ed 07 23 ca 42 6b bc f9 1a 0f ed 7d 28 dd 96 45 4e 20 2c 5b 0a 4f b1 d2 Data Ascii: {@ziZla=]o3EZWiz4BB`7)S[ Cf#)GeAe\|[UooW1$"/QEg:tm!E=jD`?jWGZ>!JJ{)-2pi[Y>&%fb.&5xtZ9aNe&Yu#Bk}(EN ,[O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49761	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:46 UTC	842	OUT	GET /images/665deae8723a9bcb12bc3311_improves-hair.jpg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:46 UTC	1046	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:46 GMT Content-Type: image/jpeg Content-Length: 65287 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "6759874f-ff07" expires: Tue, 17 Dec 2024 17:18:45 GMT last-modified: Wed, 11 Dec 2024 12:36:31 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hbkGX3pQzpWLXLdpG54IYisf5EegUMne82Gfl%2BymThRnRzKh6XZtJoSTkRysI927%2Fe%2BS5qJu1oacNYNb8SLlCGdvfZHXNjikhPHp9dofkhHJxc3qdRMg7RKY06HW7rfGi6uA8xMUsEw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3893054caa1902-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1562&min_rtt=1548&rtt_var=590&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1420&delivery_rate=1886304&cwnd=219&unsent_bytes=0&cid=1add2eb8f2b125c2&ts=544&x=0"
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 4b 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyK1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 00 a9 40 0a 82 80 02 a5 00 00 00 00 2a 0a 02 a0 a1 52 80 00 54 a0 00 00 00 2a 50 00 00 05 40 00 a0 2a 0a 00 54 14 00 a9 42 a5 00 2a 0a 02 a5 00 00 00 00 00 00 54 a0 00 00 0a 82 80 00 00 00 15 28 00 05 4a 00 01 52 80 00 00 2a 50 a9 42 a5 00 2a 50 04 7a 09 00 00 00 00 00 00 00 00 00 14 09 a2 00 00 0a 94 00 02 a5 00 00 00 54 a0 00 00 00 00 Data Ascii: @RTP@TBT(JRPBPzT
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 5c 3d ed 25 4d 64 b7 29 22 a5 00 00 8a e3 b7 b5 e7 ea f0 9f 12 b6 78 34 95 72 59 cf 2d c7 d9 c1 2d 61 7a 4c 6a 95 ad 99 08 eb b1 d3 65 4b 5b 9b 61 d6 d2 2f 4f 34 df df e7 50 b7 13 6c f2 78 4a 23 5e 73 7d 3e 7c 64 d6 4f b6 32 5b 1a 00 46 6d ba aa 77 56 15 29 0a 54 10 f7 62 b7 f9 4b 93 bb 54 63 cd 32 69 7a 43 55 a5 7c cb 67 4b 66 55 f5 1f 67 17 43 7a f2 54 8f 30 f4 9f 4b 01 45 74 7b f1 70 fa 5a 4a 56 4b 72 92 00 15 28 08 b2 3b 7b 8c ba 3c c3 c4 2d cc da 89 e7 22 78 fc ef ce 71 75 f2 35 d2 e4 b5 65 89 25 93 6c b6 b9 eb dd 65 7d 72 75 46 f2 6b f4 77 ab e4 fa 98 b6 9f 07 85 bc 94 46 b5 1c c6 fc 11 9b 49 3a d9 49 6c 68 01 19 c6 dd 45 7b a9 0a c1 58 f2 9a 27 c9 ea 27 87 cb 7f 9f f9 fa a8 84 c5 ea ce 31 8f 31 ea 67 63 5b 7a a5 e6 0e 8e 59 8b ab 8f 90 a1 0a a7 d2 Data Ascii: \=%Md)"x4rY--azLjeK[a/O4PlxJ#^s}>\|dO2[FmwV)TbKTc2izCU\|gKfUgCzT0KEt{pZJVKr(;{<-"xqu5e%le}ruFkwFI:IlhE{X''11gc[zY
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: d4 05 4a 00 01 12 47 66 f6 9d 1a 7a b4 b5 6a a9 a6 0c 5b 4f 9b 1e 27 b6 e4 e9 d2 63 be b1 1e 36 89 71 5e 7e d1 ad ae da d9 8e 36 6b e2 23 a8 87 61 31 c6 da f9 b1 38 f4 48 93 8c 9f e9 70 65 6f 41 cc c4 73 b6 e4 8c 5a c9 f6 c6 4b 63 40 08 c9 b7 51 87 6e 25 6d 8d 57 94 e0 1a d8 b7 ae 7d b5 7c 9d dc aa db fb c5 cc a7 19 64 af ad ea 2d 98 9d 3d 2d b2 c6 f7 6d 3d 77 4f 06 c7 d4 f2 bc a2 92 a2 7c c2 85 51 cb ef c3 c1 e9 79 29 59 31 cd 42 a0 a0 00 10 ec 76 db cb 7d 45 63 06 2d e6 b6 ef 25 d8 5f 3d e9 c1 f9 fd 7c 27 2f 66 9e cc 2d 2b 2d cd 39 d3 9d ae ba d4 f3 53 16 a6 bd 2c a4 39 ac 64 b6 e2 b6 d7 55 26 da 9d df 6f 9f b6 ea c6 89 e6 e5 cf 38 e3 16 d2 7d b1 92 d8 d0 02 33 6d be c3 b7 06 96 b1 0f 09 d4 a7 12 ba 6e f8 3b 78 fc f5 d2 4c f4 f2 c2 cd 65 6b 93 3e a6 76 Data Ascii: JGfzj[O'c6q^~6k#a18HpeoAsZKc@Qn%mW}\|d-=-m=wO\|Qy)Y1Bv}Ec-%_=\|'/f-+-9S,9dU&o8}3mn;xLek>v
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: e6 b0 db 0e 6d cd cd b8 3c ad b9 e9 cb cd ab ea 63 be 8b 66 52 2d d2 6d 5d b7 db 09 5f bb 8f a1 e8 c7 55 59 8e 22 d7 67 96 33 69 27 5b 29 2d 8d 00 23 2a ed 1c 73 7a 5c 2e d9 46 5b 65 e6 57 62 7b ce 0e e9 4b c7 f6 3a 5b 67 d2 6b 5e 7d 6d 16 d4 df f2 6a d2 bb cb 53 1e d5 b7 31 c0 5a 7d 73 ef 2f c5 23 16 bb ae 7b ed 2d 9c 63 ed 78 d1 37 a9 c1 ec 91 32 d6 5f e7 db 5d af 0f 13 36 92 a6 b2 5b 98 01 52 80 02 00 cf b7 84 e7 ea 9d a6 bd 41 9b 68 b9 75 f4 56 61 11 a4 a5 a3 ce 0e dc c4 73 fc fb eb 2b 7e 62 6d ce cd b6 5a e7 83 6a a1 de 2b d4 45 75 55 be 4d eb 20 f6 72 f4 fd 3c fb 8d 33 d7 a6 39 49 cd 19 46 92 75 b2 92 d8 d0 02 33 ae d1 9f 2f a5 1c 6f 97 03 b6 29 9a c4 f6 9c 9d 12 af 8b ed 48 59 6b 73 a7 0b 15 bf 07 d1 9f 63 cf 7d 55 9d 0a 2f 5a ba 2b 57 9e d2 37 7c Data Ascii: m<cfR-m]_UY"g3i'[)-#*sz\.F[eWb{K:[gk^}mjS1Z}s/#{-cx72_]6[RAhuVas+~bmZj+EuUM r<39IFu3/o)HYksc}U/Z+W7\|
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 5e 15 38 86 61 de 2b ed 3c 8a 63 98 9c 48 25 3b b9 25 96 3b 0b 28 54 a0 23 36 d1 d6 5d fc 95 2b 0f f4 e7 ad 89 c8 57 2a 63 36 9a 4d 3c 7d 99 d8 da 50 e1 ed e0 db af 18 d6 a6 54 c6 9e 2d b1 ce f6 af 1b 0b 53 b5 b6 1f 32 7a fe 57 3b d1 86 32 37 73 1e 0c 28 99 87 2d 3b cc ef ee 79 f9 2b 4c 93 35 93 1c d4 00 15 28 0a 9f 2e d7 ab 8d 5b 93 5f ed 4b 73 fc 4f 1b cb a6 ea 73 e8 d3 f3 e5 74 91 94 9d d8 fc 6b 1d 13 d4 e7 c9 27 4c 89 ce d9 fc b1 1d 5d 52 3b 69 ca 14 8d a5 e5 37 4a 7d 19 3c c2 89 00 55 52 09 00 08 cd b4 6d 97 77 21 44 67 d1 97 3a 9c 95 33 26 33 a2 f2 17 37 46 6e 56 99 bc ff 00 4b 49 5d b9 1b 4e dd 5b 8a f2 89 e8 b3 d3 d6 94 c2 be 5d 77 5f 17 ce 7e af 97 a9 95 a3 78 0b a9 98 79 b6 d9 56 6e 4f 3e 9e f3 25 4d 64 b7 30 00 00 07 cb d5 ea 8f a2 fc dc db ee Data Ascii: ^8a+<cH%;%;(T#6]+W*c6M<}PT-S2zW;27s(-;y+L5(.[_KsOstk'L]R;i7J}<URmw!Dg:3&37FnVKI]N[]w_~xyVnO>%Md0
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 5e 18 f5 78 43 d5 e1 0f 57 84 3d 5e 10 8b 12 e7 3a 35 ca e5 36 f1 d2 77 79 fb 1b ac 1a 86 aa e9 06 a1 e1 3e 27 ff 00 42 04 45 dc 26 fd 1a be 0d 25 d3 4b ae 9e d4 17 ae 94 5e 6e 77 7d 4d a7 24 e9 7b 96 9e e9 b5 d7 51 5a b4 06 8c 9f a4 84 86 cd db 8f d1 9b e8 fa 35 7d 09 8e a8 76 08 10 d7 70 9a ae 8d 5f c8 96 8b e6 8e bd 69 cb c2 2f f6 4c 3d 5d cd 39 52 32 a4 65 21 94 81 12 45 12 32 a4 12 52 32 a4 11 24 65 21 95 23 22 46 54 8c a9 06 92 06 84 8c a4 32 a4 65 48 32 20 64 42 84 32 a4 65 21 42 0a 22 cb d3 ae 4c fb 34 ef 3f 62 dd 6e 31 ed 16 eb 4c 49 7a db 55 df 20 ca d1 9a aa cd 74 62 f7 6b 9f fd 0b 34 a6 a0 dd be ad e9 31 61 d7 b6 2d 47 3c 75 7b 9a fa 5d c9 61 d5 93 57 5f ab 9a 4c 23 ab 1a 55 d5 cf fe 86 9a 32 2d 42 b9 51 50 5d 4d bc c0 bc ea 4e 98 c7 76 3e 8d Data Ascii: ^xCW=^:56wy>'BE&%K^nw}M${QZ5}vp_i/L=]9R2e!E2R2$e!#"FT2eH2 dB2e!B"L4?bn1LIzU tbk41a-G<u{]aW_L#U2-BQP]MNv>
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 5e 66 6b db 99 5e e3 e0 ea 3e 72 a6 d3 0e 77 4a 30 f7 7d c6 bc 22 46 78 36 62 cd 39 4d 19 4a a5 19 52 89 a5 a5 08 51 5b 0f b6 3a 49 f6 5e 8e 6a 4c f4 2a ac a0 5a a4 fc dc 00 64 28 28 28 28 2e 7f d1 e9 d7 26 7d 9a 77 9f b7 3a 93 c9 9b 6a 2a 33 0c e3 38 d5 72 8d f9 71 88 cd ac be 53 08 f2 1b ec 2a 78 89 1d 8d b7 e6 34 cf 69 a7 b2 cb 23 e5 26 38 7e 46 fe 95 e6 76 fd b9 97 ee 36 0e a2 e7 3d c7 7b a5 98 74 fc 57 4f ea 11 7f 06 09 7c b5 ba 42 0b 8a ed 12 b7 a3 78 50 ef cb 4a 67 c8 7a d6 b2 49 70 b3 37 35 9c af 34 34 cc 9c a9 2e d2 db 41 41 76 ec 83 d3 9e 4c fb 34 ef 3f 6e 75 27 93 3f 23 07 b4 cc 29 43 89 41 71 77 8a a8 25 e2 c9 56 9b 2a 47 cb 90 92 9f 37 87 e1 52 09 2e 25 1e 72 91 54 42 4f 97 05 ff 00 98 b2 6f e9 5e 67 6f db 99 7e e3 60 ea 3e 72 ae e3 dd d3 8e Data Ascii: ^fk^>rwJ0}"Fx6b9MJRQ[:I^jLZd((((.&}w:j38rqSx4i#&8~Fv6={tWO\|BxPJgzIp7544.AAvL4?nu'?#)CAqw%VG7R.%rTBOo^go~`>r
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 21 41 71 62 a2 e4 c6 40 db 44 dc 9e 02 98 76 37 ed 50 be 4e 52 28 d4 93 0c 23 b1 92 2e 0d b7 b1 b6 df cd 6b 70 8f 87 24 e9 1e 52 4e 3c cb 03 a9 52 f2 9b 72 76 5e 8f c1 d3 ae 4c fb 34 ef 3f 6e 75 27 93 16 ae c5 38 40 94 1d 58 52 83 5d a6 ea e8 2e 4d fc a3 2d 36 94 ae 51 ab e4 23 50 a5 2f 32 98 7d 7e 73 2a 55 56 a3 75 6f 1d 1a 8a da 9e 72 5a 88 94 e2 7b 20 c8 e1 1f 1f 2b 89 32 51 1e ee 99 e6 a6 fd b9 95 ee 36 0f 50 4f 2d f0 d6 2c 36 c4 ce 75 b2 a8 22 04 40 b6 2d 24 a0 fc 7a 1c b4 70 e4 49 35 25 e8 1d a5 42 32 b8 39 96 db 2d 1e 4b 6a 07 da 56 d4 e7 b7 29 06 52 e2 ad 6a 6c d9 e3 db ae 89 cc d6 98 33 27 09 35 0a f0 99 a8 5e 57 e1 e9 cf 26 7d 9b 77 9f b7 3a 91 c9 92 5e a2 d4 f0 f9 80 a7 aa 33 08 dd e9 3c aa 92 f9 ca 9a f2 49 98 72 d5 48 8a aa 66 49 32 4b 0e 2b Data Ascii: !Aqb@Dv7PNR(#.kp$RN<Rrv^L4?nu'8@XR].M-6Q#P/2}~s*UVuorZ{ +2Q6PO-,6u"@-$zpI5%B29-KjV)Rjl3'5^W&}w:^3<IrHfI2K+
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 9f fb 17 42 f3 7a 75 c9 9f 66 dd e7 ed ce a4 f2 60 d5 4b ab bb 74 d3 85 ea 30 57 e0 60 93 c4 2c df 33 71 fd 88 66 6a 72 3a 72 db 23 b9 fc a5 e7 42 a5 17 97 77 70 f2 5e 51 e2 b2 b0 46 97 7f a7 93 e6 24 c7 4f 92 6a 4f cc df 64 94 a9 40 85 b6 57 c9 df 09 fa 1e 8a 22 2d 42 df b7 32 bd c6 c1 ea 77 f9 3c c6 d8 b7 ba 4e 3a d1 82 30 46 2b b0 cc 4d ed 8e c3 69 62 54 bc ae 46 23 cf 11 2a ca b7 14 97 a6 49 8b 96 3b 84 64 26 23 3b dc 32 71 36 e7 c9 b9 cb 8f 9a d1 3e c4 a7 95 06 37 cd c5 69 b4 f0 d2 9a 28 4e fd 8b 97 ef f4 e7 93 3e cd 3b cf db 9d 49 e4 b1 aa 9c a4 b4 fe 81 51 a7 d6 7e b7 6f 49 2d 96 5a 36 a3 35 94 dd ba 11 26 2c 14 1a 52 4c 92 2d ad d4 e5 3b 57 23 ba 8e 3a ee 74 75 17 a4 9a 0e de df 0d b9 66 a2 90 cb 1c 37 9b 4e 56 ef 12 0a 3a 24 16 56 76 4b 5e 47 b3 Data Ascii: Bzuf`Kt0W`,3qfjr:r#Bwp^QF$OjOd@W"-B2w<N:0F+MibTF#*I;d&#;2q6>7i(N>;IQ~oI-Z65&,RL-;W#:tuf7NV:$VvK^G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49762	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:46 UTC	808	OUT	GET /images/newr.jpg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:46 UTC	1042	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:46 GMT Content-Type: image/jpeg Content-Length: 106683 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598753-1a0bb" expires: Tue, 17 Dec 2024 17:18:45 GMT last-modified: Wed, 11 Dec 2024 12:36:35 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qDQmMQT5ee0GLa4KEGXtcvDPnfLzExzWhUgKFfIYrLjoeYkLp4Kh2R3T9ZVku445ZA4i3VKfa1FMdgJPNWQzKXTCMReh1b9JFNCPz8BurN9BZFzkmGKXwEgUmQNELCnqg6h6wG8xVMs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389305ea3f1889-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1546&min_rtt=1542&rtt_var=587&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=1386&delivery_rate=1849271&cwnd=252&unsent_bytes=0&cid=a98c1091de4a8b1c&ts=481&x=0"
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: ff d8 ff e1 16 76 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 94 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 31 30 3a 32 34 20 31 32 3a 31 35 3a 32 39 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 01 f4 a0 03 00 04 00 00 00 01 00 00 01 dc 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: vExifMM*bj(1"r2i''Adobe Photoshop 25.11 (Macintosh)2024:10:24 12:15:29"
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 8e 2d cc b6 e2 e3 5b 5a d3 ab 5d c3 9c e6 fd 2f 62 60 16 69 4d 7e b3 f5 91 f4 13 46 34 07 f7 74 4c 2e 70 5d 76 5d 82 cb 9e eb 4c c6 e7 19 d5 13 a5 f4 fb 3a 8d e4 ba 5c c6 ea e2 7b 95 ba 3e ad bd f7 01 92 e1 8f 4b 47 e8 a9 ac eb 07 f3 ec 71 1f 4d 4b e9 8e 9d 53 18 99 0b 71 b2 71 dc 03 58 0c bc 90 1f 1c 34 bb e8 d7 fd 6d ab 4f ae 7d 53 c8 e9 f4 fa b5 d9 b8 31 c0 38 f1 04 ff 00 29 1b 23 ea a7 50 c6 60 b2 a2 6e c4 0e 0f 7d 6e 77 b8 eb 0e 73 4f ef 39 74 9d 5b a7 8b 71 ad ea d9 f7 6c a5 9b 3e cb 8e 4f b4 17 06 ba eb ae fd fb 7d de 9d 7f e8 fd 3f e5 a1 c5 b5 2e 10 de c7 93 c5 e0 75 8c bc 77 0a f2 8f ad 54 86 87 3b e9 37 5d a3 df f9 cb a3 ad cd 73 43 9b a8 3c 2e 4b 22 ea 6f 7d 9b 06 d6 87 1d 91 fb a0 fb 78 5d 0f 48 79 7e 28 92 74 fc 3f d5 bb 10 90 ea b1 d1 6f 64 Data Ascii: -[Z]/b`iM~F4tL.p]v]L:\{>KGqMKSqqX4mO}S18)#P`n}nwsO9t[ql>O}?.uwT;7]sC<.K"o}x]Hy~(t?od
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 3d 2c b1 cf 00 5a e0 df 79 fc ef 73 bf 37 dd ee 51 d8 e2 ae ac b1 07 86 de 1d ec d4 16 4e 9c 93 e2 93 d8 d2 e9 f0 e5 77 d5 7d 45 65 d6 8b 33 24 3a c3 0d 66 e8 1a f9 33 dc f5 a9 8d f5 4b a5 e3 09 0c d0 38 34 c6 9e e3 ff 00 4b e9 27 85 84 87 8f e8 45 f6 63 bf 1e c6 38 b5 9e ea df b4 c4 1f f0 7b bf 92 ad fd 82 d7 be 05 65 df 0e 57 69 57 49 c1 aa 3f 44 d0 06 a4 19 26 23 c5 df cb 6e cf ed a3 8a 2a 60 80 00 20 09 00 40 9d 77 42 6f b7 66 d7 7b a6 a9 e3 d9 d0 b3 9f 5b 85 35 8a ec 22 18 fb 26 1a 4f e7 ff 00 67 f3 10 b1 be a0 12 ed f7 e5 ea 4f bc 52 cf 0f e5 bf 7a ee 03 6b 16 6c 02 09 82 d3 f3 77 fe 60 a7 a0 64 81 07 51 1f d5 0e ff 00 be a7 88 57 55 a7 25 f4 79 6c 6f a8 dd 3a 97 8b 03 af 7b c6 ad 2e 78 02 7c db 5b 5a b5 a8 fa bf 4b 64 f3 02 44 8f 1f 35 ae 4b 2a 75 Data Ascii: =,Zys7QNw}Ee3$:f3K84K'Ec8{eWiWI?D&#n` @wBof{[5"&OgORzklw`dQWU%ylo:{.x\|[ZKdD5Ku
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 21 dd 0e 77 d6 5a 46 6f d5 8c 8a 9b ab c4 39 bf d6 63 ab 73 57 03 97 6e 65 db 5d 95 97 95 6b 8b b7 03 6d 95 d4 d1 b9 ae 97 35 a6 e7 6c dc d7 bb dd b3 de bd 46 de 8d 95 6e 16 46 31 75 7f a6 69 0d 32 74 71 6b 9b 3f 47 cd 71 f6 ff 00 8b 5e ac 6d 6d ad 38 8e dc 0f ac df 56 d6 7b 89 9d f5 b9 98 ee db ed 4c 95 74 2a 0f 2e df d9 f5 07 3d a5 8f 78 9d 85 ef b1 ee d3 56 3b f5 7a aa 63 3f ed c5 d0 5d 65 57 f4 e7 f5 2c 67 b6 eb 8b a9 2d 75 95 4b 9b f4 dd 5f be f7 e4 6e fd 25 0f c2 ff 00 83 45 1f e2 df eb 0b 49 db fb 35 80 f8 ba f7 91 cf d1 75 d5 bf f7 96 af 4e fa 97 d7 b1 a9 b7 1e fc da 4d 4f 92 cf 40 1a c8 71 d7 73 b6 54 df 6e f6 54 f4 c4 bc 5d f8 dd 46 f7 1b 1d 55 af 6b 49 60 b5 cd da 03 4c 59 4f bd db 19 f4 6d f6 ad 9c 17 38 e2 b5 96 00 2c 63 b7 1d ae 0e 1e f6 b1 Data Ascii: !wZFo9csWne]km5lFnF1ui2tqk?Gq^mm8V{Lt*.=xV;zc?]eW,g-uK_n%EI5uNMO@qsTnT]FUkI`LYOm8,c
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 17 7a 96 66 d4 f6 fa a0 fa 6d 68 63 3d 11 75 6f 2d d8 69 b6 cf 52 cc 3f 5e bf e9 1f a2 b3 67 f3 de a7 ad 4f cd e9 24 a7 e8 db ba 5f 5e aa bb 8f 4e cb aa ab af 75 cf 7b ed 0e b3 57 5c 5f 86 da f7 ef 65 4d 66 25 af ae df d1 59 fa 5a a8 fd 1f f3 bb cd 7e 37 d6 53 95 7b a8 cd c7 66 3b 83 05 0c 75 44 96 c5 6e f5 5e e1 a7 bd d9 21 9f e1 b6 7d 9d ff 00 43 d5 ab f4 bf 36 24 92 9f a4 99 89 f5 94 62 35 ae ce ad d9 46 ca cb dd b1 bb 05 6d 60 6d c1 9f a1 f7 bd f9 1f a5 7f b5 9e b5 5f a1 a7 f6 7f ab eb 63 8d f8 7f 5b 4d 0f 2d ea 38 e3 22 1c 2b 02 ad b5 fb 9b ed f5 37 0b ac f5 2a b3 f9 ab 1a ef 4f fd 36 3d ff 00 cd 2f 9c 52 49 4f d3 3d 33 13 a9 d3 93 95 76 7d ed bf d5 f4 db 56 cd 00 6b 03 e7 f4 5b 19 e9 6e f5 3f d2 64 7e ff 00 ad e9 fa 58 d8 da 2b e5 54 92 53 f5 52 4b Data Ascii: zfmhc=uo-iR?^gO$_^Nu{W\_eMf%YZ~7S{f;uDn^!}C6$b5Fm`m_c[M-8"+7*O6=/RIO=3v}Vk[n?d~X+TSRK
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 38 42 49 4d 04 00 00 00 00 00 00 02 00 01 38 42 49 4d 04 02 00 00 00 00 00 04 00 00 00 00 38 42 49 4d 04 30 00 00 00 00 00 02 01 01 38 42 49 4d 04 2d 00 00 00 00 00 06 00 01 00 00 00 03 38 42 49 4d 04 08 00 00 00 00 00 10 00 00 00 01 00 00 02 40 Data Ascii: 2Z5-8BIMp8BIM8BIM8BIM08BIM-8BIM@
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 98 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 Data Ascii: "?3!1AQa"q2B#$Rb34rC%Scs5&DTdE
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 8d 40 24 97 6d 64 fe e6 ef 4f 72 ed fe b1 09 c4 ab fe 38 7f d4 58 b9 f7 31 57 c9 bb 2c 0e 8e 76 6b c6 3e 2d b7 7f a3 63 9d f3 03 45 c2 d1 d2 8e 7b 2d b6 d7 3a 29 05 a3 61 02 08 6b 6e b6 db 0b f7 7b 1b ea 57 fa 3f cf ff 00 48 ba ff 00 ad 36 fa 5d 31 d5 cc 1b dc d6 0f 87 d3 7f fd 16 ae 7b a7 67 60 e3 b5 d8 99 6e 0c 6e 78 0f 63 a4 6d d1 df 67 db 69 05 de 97 aa ea 3d 9e a7 f8 36 7f 53 7b 45 d1 21 92 1c 24 8e 2d 9b fd 0f 1d b8 b5 d7 53 22 49 2e 73 bc 7f 75 74 96 74 3c 3e a7 58 19 54 8b 1d f9 af 92 1e 3e 0f 69 0b 1f a5 50 6d 1b 87 2d d3 4f e0 ba 27 64 1c 0c 71 7d af 0c a4 68 e7 cf 07 b7 f9 c9 96 6d 9c 01 c3 4e 6d bd 16 9e 99 4b 2b a5 f7 43 89 6b 68 de 5e 5c 4f 6d af dd b7 6f f2 11 f3 dd 6b ba 4f bf 10 e6 b5 a4 0b 2a 6c 3d c0 01 ee 77 a6 4b 77 bd 9f c9 50 b7 27 Data Ascii: @$mdOr8X1W,vk>-cE{-:)akn{W?H6]1{g`nnxcmgi=6S{E!$-S"I.sutt<>XT>iPm-O'dq}hmNmK+Ckh^\OmokO*l=wKwP'
2024-12-17 17:18:47 UTC	1369	IN	Data Raw: 9f 63 be 07 f2 2e fe af e6 99 fd 51 f9 17 00 7e 83 be 07 f2 2e fe af e6 99 fd 51 f9 13 31 f5 fa 27 27 46 61 3a 60 9d 4e 36 63 7f ff d4 f5 54 c5 3a 62 81 d9 4d 2e a8 c0 fc 76 83 fb df f7 d7 ae 6b a7 b4 57 5d 8c 23 8b 1c 0f 9f ee ae a3 3f f9 a6 ff 00 5b f8 39 73 54 80 32 b2 18 d6 ee 6d 76 41 88 d0 96 b5 dd ca 8a 3f ce 7d 19 7f c9 fd 5b 36 58 e1 67 ac 39 07 5f 87 01 2b 8e e6 17 30 c6 f2 37 8f 03 cc ff 00 d1 4d b1 c7 90 00 3f 91 30 a9 e1 b0 4e 87 c3 c9 58 11 3d 98 88 58 b8 ba 41 e7 fd ca 2e 20 11 fe be 0a 56 86 37 f4 8f 78 60 60 f7 12 43 47 f6 a5 06 db 71 6a df ea 58 d6 16 c0 76 e3 c1 2d 36 31 a7 f9 4e ad ae 7e d4 e1 02 84 cf f7 06 b8 1d 43 60 fc 94 d8 e2 e2 3b ea 27 e6 36 b8 aa 9f 6d c7 f7 10 d7 bb 6b 1f 64 00 1b ed ad fe 8d bf ce 39 9f 41 ff 00 f4 15 ec 7c Data Ascii: c.Q~.Q1''Fa:`N6cT:bM.vkW]#?[9sT2mvA?}[6Xg9_+07M?0NX=XA. V7x``CGqjXv-61N~C`;'6mkd9A\|
2024-12-17 17:18:47 UTC	1369	IN	Data Raw: d3 05 4b ae e2 5b 9b d1 3a 86 15 2d 0f b7 27 16 ea 6b 6b 8e d0 5d 65 6f ad 8d 73 ff 00 37 dc e4 a3 b2 9b c9 2e 4f f6 5f d6 9a c8 c7 a4 b5 80 d8 ef b4 67 56 f6 d6 ec 86 bb d0 ac 5f 7d 2d 67 ea f7 53 87 ea 51 fa 17 59 fa 4c 4a be cb 5e 35 3e 97 a5 6b a3 e1 f5 4c 86 db 83 d5 cd 96 e1 8c 4a 6a be ab 81 3b ad b2 96 53 9b 8f f6 82 df d7 29 67 a7 eb fd aa b7 fb ef ce be 9f fb 4d e9 d6 54 f4 49 2e 4b a1 fd 5f eb 7d 37 2a bb 72 85 79 75 b4 52 e7 45 84 38 64 52 3f 63 7d ad 9b d9 f4 2d e8 9b 32 b2 19 bf d4 fb 65 7e 95 6b 57 ad 63 75 0b ae 63 b1 c5 b6 30 32 2a 6d 56 8a 83 6d 93 fa 5b fe 8b 9c cd a5 bb 36 7f a3 ff 00 85 4d 9c 8c 63 60 19 78 04 48 d0 ba b7 61 25 55 f4 e6 3a b6 0f 54 6f d8 05 84 69 2f 11 ab 60 7b 58 f9 7e ef fa da 42 8c ad f2 6d f6 17 17 46 bc 7e 6b 3f Data Ascii: K[:-'kk]eos7.O_gV_}-gSQYLJ^5>kLJj;S)gMTI.K_}7ryuRE8dR?c}-2e~kWcuc02mVm[6Mc`xHa%U:Toi/`{X~BmF~k?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49763	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:46 UTC	440	OUT	GET /images/665deae8723a9bcb12bc32ec_oprahmag1.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:46 UTC	1045	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:46 GMT Content-Type: image/svg+xml Content-Length: 3006 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598751-bbe" expires: Tue, 17 Dec 2024 17:18:45 GMT last-modified: Wed, 11 Dec 2024 12:36:33 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=16qj8ao4S1oi8Rb40343naIfQtQJpqSm1Grsi67FmbS0UHALujCvH0cu4SdqdKjxmr8C%2Fn4s29cRqfqa96ziugbzbinzBE6Hvm7Uxp%2FNQXRziPdZkMtLDJHqxydWSHV4cNXz9eXKDlw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38930628cf72aa-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1819&min_rtt=1815&rtt_var=690&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=1018&delivery_rate=1574973&cwnd=191&unsent_bytes=0&cid=b5128897576c5fbb&ts=528&x=0"
2024-12-17 17:18:46 UTC	324	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 34 30 2e 38 32 20 31 39 36 2e 30 36 22 20 77 69 64 74 68 3d 22 31 30 34 30 2e 38 32 22 20 20 68 65 69 67 68 74 3d 22 31 39 36 2e 30 36 22 20 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 45 31 31 31 31 22 20 64 3d 22 4d 32 37 31 2e 39 37 20 37 36 2e 39 35 56 31 31 2e 38 68 2d 32 31 2e 38 39 56 31 2e 35 34 68 35 35 2e 38 32 56 31 31 2e 38 68 2d 32 32 76 36 35 2e 31 37 7a 6d 37 30 2e 32 34 20 30 56 31 Data Ascii: <svg xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg" data-name="Layer 1" viewBox="0 0 1040.82 196.06" width="1040.82" height="196.06" > <path fill="#0E1111" d="M271.97 76.95V11.8h-21.89V1.54h55.82V11.8h-22v65.17zm70.24 0V1
2024-12-17 17:18:46 UTC	1369	IN	Data Raw: 56 31 2e 35 34 68 34 36 2e 34 38 56 31 31 2e 38 68 2d 33 34 2e 37 76 32 32 2e 32 38 68 33 30 2e 37 33 56 34 34 2e 33 68 2d 33 30 2e 37 33 76 32 32 2e 34 31 68 33 34 2e 37 7a 6d 37 31 2e 37 2d 33 37 2e 36 34 43 35 36 35 2e 34 36 20 31 34 2e 30 38 20 35 37 38 2e 37 38 20 30 20 35 39 39 2e 35 32 20 30 73 33 33 2e 39 34 20 31 34 2e 30 38 20 33 33 2e 39 34 20 33 39 2e 33 31 2d 31 33 2e 31 38 20 33 39 2e 31 37 2d 33 33 2e 39 33 20 33 39 2e 31 37 2d 33 34 2e 30 37 2d 31 34 2e 30 38 2d 33 34 2e 30 37 2d 33 39 2e 31 37 7a 6d 31 32 2e 34 32 20 30 63 30 20 31 38 2e 30 35 20 37 2e 34 33 20 32 38 2e 39 33 20 32 31 2e 36 34 20 32 38 2e 39 33 73 32 31 2e 35 31 2d 31 30 2e 38 38 20 32 31 2e 35 31 2d 32 38 2e 39 33 2d 37 2e 34 32 2d 32 38 2e 39 34 2d 32 31 2e 35 31 2d 32 Data Ascii: V1.54h46.48V11.8h-34.7v22.28h30.73V44.3h-30.73v22.41h34.7zm71.7-37.64C565.46 14.08 578.78 0 599.52 0s33.94 14.08 33.94 39.31-13.18 39.17-33.93 39.17-34.07-14.08-34.07-39.17zm12.42 0c0 18.05 7.43 28.93 21.64 28.93s21.51-10.88 21.51-28.93-7.42-28.94-21.51-2
2024-12-17 17:18:46 UTC	1313	IN	Data Raw: 6d 2d 32 37 2e 35 33 2d 39 2e 37 33 48 34 31 37 6c 2d 35 2e 37 36 2d 31 36 2e 39 61 31 36 31 2e 37 35 20 31 36 31 2e 37 35 20 30 20 30 20 31 2d 35 2e 38 39 2d 31 39 2e 38 34 68 2d 2e 35 31 61 32 30 31 2e 36 39 20 32 30 31 2e 36 39 20 30 20 30 20 31 2d 35 2e 38 39 20 31 39 2e 37 31 7a 6d 31 35 33 2e 37 39 2d 38 2e 35 38 76 33 38 2e 39 32 68 2d 39 2e 33 35 6c 2d 31 2e 35 34 2d 39 2e 37 32 63 2d 33 2e 30 37 20 37 2e 34 32 2d 31 32 20 31 31 2e 32 36 2d 32 30 2e 37 34 20 31 31 2e 32 36 2d 31 39 2e 33 33 20 30 2d 33 32 2e 37 38 2d 31 33 2e 34 34 2d 33 32 2e 37 38 2d 33 38 2e 39 32 20 30 2d 32 35 2e 32 33 20 31 34 2e 32 32 2d 33 39 2e 35 36 20 33 35 2e 32 31 2d 33 39 2e 35 36 20 31 34 2e 33 35 20 30 20 32 33 2e 35 36 20 36 20 32 38 2e 33 20 31 38 2e 31 37 6c 2d Data Ascii: m-27.53-9.73H417l-5.76-16.9a161.75 161.75 0 0 1-5.89-19.84h-.51a201.69 201.69 0 0 1-5.89 19.71zm153.79-8.58v38.92h-9.35l-1.54-9.72c-3.07 7.42-12 11.26-20.74 11.26-19.33 0-32.78-13.44-32.78-38.92 0-25.23 14.22-39.56 35.21-39.56 14.35 0 23.56 6 28.3 18.17l-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49764	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:46 UTC	795	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:46 UTC	760	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:46 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Fri, 06 Dec 2024 15:31:09 GMT ETag: "675318bd-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gdtylXSI177uNC6poEhNyWMKhxNifVqV%2FKNo8LXuzLZ0U4lNylwxyp%2FkE5mKtMUlJr%2Bg3OlDn66GGtcE3jCRyTB8LQVW3cDD7MGCGtMlw0DpuidQPGDsqBT8mnAmg%2BHgFafqXs6BRy4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389306bcb58cad-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 19 Dec 2024 17:18:46 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-12-17 17:18:46 UTC	609	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-12-17 17:18:46 UTC	630	IN	Data Raw: 2b 6e 28 6f 2e 68 72 65 66 2c 61 2b 6c 2e 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6c 29 3b 61 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 64 2c 6f 29 7d 7d 63 61 74 63 68 28 68 29 7b 65 28 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 66 6f 72 28 Data Ascii: +n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49765	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:46 UTC	445	OUT	GET /images/665deae8723a9bcb12bc315a_blissy-box-500.jpg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:47 UTC	1047	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:47 GMT Content-Type: image/jpeg Content-Length: 64282 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598753-fb1a" expires: Tue, 17 Dec 2024 17:18:46 GMT last-modified: Wed, 11 Dec 2024 12:36:35 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=acq49Vp8qQHOO61j5iwMySmKJNsSzsQBySdFWdmR4g9cpPSwFErO%2BIlEFWTtDyfJHD3supUA%2F%2FjmfZVhrgrotOOMz1b7Y96Ijwp6lnMOtBVs7CjL4K%2FIxE35Le34rR8TAf9zUgffYpc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3893076ce381dc-IAD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=7102&min_rtt=7081&rtt_var=2671&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1023&delivery_rate=412371&cwnd=32&unsent_bytes=0&cid=60887c706a75cfb8&ts=544&x=0"
2024-12-17 17:18:47 UTC	1369	IN	Data Raw: ff d8 ff e1 10 37 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 f4 01 00 00 01 01 03 00 01 00 00 00 4d 01 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 22 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d6 00 00 00 69 87 04 00 01 00 00 00 ec 00 00 00 24 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 31 30 3a 32 31 20 31 35 3a 34 35 3a 31 31 00 00 00 04 00 00 90 07 00 04 Data Ascii: 7ExifII*M(1"2i$''Adobe Photoshop 25.11 (Macintosh)2024:10:21 15:45:11
2024-12-17 17:18:47 UTC	1369	IN	Data Raw: ef 14 de ad 9f bc ab e4 64 0a eb 2e 0e 63 48 8d 5f 25 ba f8 fa 7e f5 8f 95 d5 b2 b6 ef 01 82 3b d3 6b 5c 34 ef ee db 7d 5f f5 ca 2d a7 f7 eb b1 43 2c c6 3f a4 7e d5 c7 84 6e 07 d8 ef 9b ed 9d 1d f8 04 ff 00 68 b3 f7 bf 00 b9 6c 6f ad 75 b1 fb 6e 0e b0 1d 76 10 05 83 f7 b6 7b 9c cb 1b fe bf a2 fe 8c b4 99 d4 f1 dd ee 6d 9e a5 4c 06 c0 78 71 a0 c0 c9 63 da 7f c2 62 6e 65 fb bf c2 51 ff 00 5f 42 3c c1 3b 48 fd a8 12 c7 d8 3a ce be e0 26 78 d4 68 39 5a 83 85 cf 8c 92 03 1b 61 fd 21 f5 2a 7f f5 ea 30 5d fd b6 fe 95 74 2a cf 2f 23 2e 2b 24 d5 6e b7 25 69 41 49 24 92 9d 8d 49 24 92 4a 7f ff d1 f4 fc c3 18 77 9f 0a de 7f e8 95 f3 85 c4 36 cb 49 e0 39 df 81 5f 47 e6 7f 44 bf fe 2d ff 00 f5 25 7c e1 96 f3 65 d9 0f 70 05 cf 7b dc e6 8d 01 2e 25 d0 21 03 ba 7a 37 5f Data Ascii: d.cH_%~;k\4}_-C,?~nhlounv{mLxqcbneQ_B<;H:&xh9Za!0]t/#.+$n%iAI$I$Jw6I9_GD-%\|ep{.%!z7_
2024-12-17 17:18:47 UTC	1369	IN	Data Raw: db a5 b8 f6 7f c2 52 ef fb 71 9b 2d ff 00 08 8a 9d 79 11 f4 4a 8c c9 d1 a5 03 ed 1b 74 3a 27 6e 50 94 94 9e 0f 82 5b 5d e0 a0 32 5b e2 9f ed 55 f8 84 94 cb 69 fd d2 98 b1 de 09 be d5 5f 8a 5f 6a 62 4a 58 b1 de 09 8b 5c 39 09 9d 96 c4 07 e7 30 6a 92 9b 1a 0d 62 0f 8a 7f da 0c ac 4d 84 16 f8 f7 59 59 1d 44 9d 01 d1 3f 4d ac e7 65 cb c4 d3 4f b9 e0 f0 4f f8 36 7f df d2 53 bd 55 ad ba b6 d8 d9 0d 76 a2 44 18 f8 15 34 92 49 4f ff d3 f4 dc f6 35 f8 39 0c 7c ed 75 4f 6b a3 98 2d 21 79 75 7f e2 b3 ed 2e b2 d1 d5 4d 4d 2f 30 d7 63 ef 31 cb 7d cc be a6 ff 00 d1 5e ab 90 01 a2 d0 75 05 8e 91 e5 0b 27 1a a1 50 7b 46 a2 41 07 e2 12 53 c2 9f f1 51 93 a4 75 f7 18 e2 68 7f f0 cb 72 63 fe 2b 7a 98 fa 3d 7b 9f f8 3b 47 e4 c8 5e 83 29 e5 25 3e 71 67 f8 a9 ea 96 19 7f 58 aa Data Ascii: Rq-yJt:'nP[]2[Ui__jbJX\90jbMYYD?MeOO6SUvD4IO59\|uOk-!yu.MM/0c1}^u'P{FASQuhrc+z={;G^)%>qgX
2024-12-17 17:18:47 UTC	1369	IN	Data Raw: fb 8d 91 ff 00 6c d9 ff 00 90 57 7a 36 56 56 47 51 66 ec 7b ab ad ad 71 73 df 5b d8 de 36 b4 6e b1 ad f7 2d dd 3f d6 53 b6 37 0f f6 a4 a7 ff d9 ff ed 18 88 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 cd cf fa 7d a8 c7 be 09 05 70 76 ae af 05 c3 4e 38 42 49 4d 04 3a 00 00 00 00 01 0d 00 00 00 10 00 00 00 01 00 00 00 00 00 0b 70 72 69 6e 74 4f 75 74 70 75 74 00 00 00 05 00 00 00 00 50 73 74 53 62 6f 6f 6c 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 15 00 45 00 50 Data Ascii: lWz6VVGQf{qs[6n-?S7Photoshop 3.08BIMZ%G8BIM%}pvN8BIM:printOutputPstSboolInteenumInteClrmprintSixteenBitboolprinterNameTEXTEP
2024-12-17 17:18:47 UTC	1369	IN	Data Raw: 01 00 00 00 02 38 42 49 4d 04 08 00 00 00 00 00 10 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 44 00 00 00 00 00 10 00 00 00 02 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 1e 00 00 00 00 00 04 00 00 00 00 38 42 49 4d 04 1a 00 00 00 00 03 83 00 00 00 06 00 00 00 00 00 00 00 00 00 00 01 4d 00 00 01 f4 00 00 00 27 00 36 00 36 00 35 00 64 00 65 00 61 00 65 00 38 00 37 00 32 00 33 00 61 00 39 00 62 00 63 00 62 00 31 00 32 00 62 00 63 00 33 00 31 00 35 00 61 00 5f 00 62 00 6c 00 69 00 73 00 73 00 79 00 2d 00 62 00 6f 00 78 00 2d 00 35 00 30 00 30 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 01 f4 00 00 01 4d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 Data Ascii: 8BIM@@8BIMD@@8BIM8BIMM'665deae8723a9bcb12bc315a_blissy-box-500M
2024-12-17 17:18:47 UTC	1369	IN	Data Raw: 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f5 55 91 4e 4e 7b ba 96 40 b8 c6 3b 77 0a 6b Data Ascii: 2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?UNN{@;wk
2024-12-17 17:18:47 UTC	1369	IN	Data Raw: ba 3f 4d 56 ae da bd 0e dc 8c 5c ba cb 5b 79 ac 8d 5a fa df 0e 07 fd 7f 7d 72 3f e2 ff 00 ea 77 56 a6 fb f3 fa 9d 2f c2 c7 be 8f 4a 96 39 db 2f 71 f5 19 66 f3 47 d2 ae ad b5 bb fa 47 a6 ff 00 f8 25 db d1 d0 7a 65 0e df e8 8b 6c e4 59 77 e9 08 fe ab 5c 3d 36 ff 00 db 6a be 4c 53 9c f4 a1 1a dc b3 42 71 8c 7a f1 39 0e ca ea 94 bd ac b6 a7 e6 33 fc 16 4e 2b 4f a8 3f cc 1b 3f b1 67 f3 8a cd 27 a9 ee b4 9c 67 bd af 26 c6 6f 6b 59 ae ea ec db b2 d7 7b 37 7e b0 d5 ba 2b fb bc 12 35 80 88 e5 87 59 1f a6 88 39 89 fd 10 e5 5d d3 f1 6d 6d a2 dc 2a 6d da 4e c0 59 59 de 23 73 0f fd f1 51 c9 fa bd 43 01 7f 4f 77 d9 6d 61 2e ad 8e 97 54 1c 41 dd 0d 76 f7 54 cb 1a ed 96 b3 f9 8b 2b df fa 15 d1 6c 09 8d 63 c1 23 ca c0 f5 2b 4c ef 78 87 84 c6 ea 99 58 f6 b7 13 35 86 9c 8c Data Ascii: ?MV\[yZ}r?wV/J9/qfGG%zelYw\=6jLSBqz93N+O??g'g&okY{7~+5Y9]mm*mNYY#sQCOwma.TAvT+lc#+LxX5
2024-12-17 17:18:47 UTC	1369	IN	Data Raw: 0f f0 14 7f db b6 7f ef 3a d9 4c 92 9c 7a dd 9e cb 58 eb 28 ac 57 b8 07 16 3d ee 77 b8 ec f6 b5 d5 31 bf 9c ad 9b af 1c 56 63 e5 fd ea d5 e7 6d 47 ce 07 de 61 56 96 c7 29 29 19 bf 23 bd 46 3e 23 fb d1 2b b5 cf d1 ed 2c 7f 69 e0 fd df 9c a2 e0 d5 1d 12 52 f9 39 74 62 d2 6f c8 78 ae b1 dc f2 4f ee b1 bf 9c e5 cf 75 1b ba ef 55 05 b8 f8 76 b7 04 ea d6 7b 5b ea 7f 2a e7 58 fa f7 b7 fe 09 bf a3 ff 00 8c 5a 8d e9 b4 fd b9 d9 b7 da ec 97 0d 68 65 b0 e1 59 fc e2 df df ff 00 83 ff 00 47 fd 75 70 99 d4 99 27 ba 4a 6b 74 cf b4 63 e1 63 e3 dd 4d 83 d3 ac 34 97 16 b8 82 3f 33 d8 f7 7b 59 f4 59 fc 85 7b 70 ec 85 01 29 8d 42 4a 4a 1d 09 e5 a6 49 d0 0e 49 41 6d b5 cc b9 c1 a0 6a 67 cb c3 f7 96 1f 59 eb 2e b8 3b 1f 19 db 6a 1e d2 ef 13 c2 4a 65 d4 ba 97 52 cd 7d 98 7d 22 Data Ascii: :LzX(W=w1VcmGaV))#F>#+,iR9tboxOuUv{[*XZheYGup'JktccM4?3{YY{p)BJJIIAmjgY.;jJeR}}"
2024-12-17 17:18:47 UTC	1369	IN	Data Raw: 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 30 38 39 43 41 35 38 44 44 41 42 46 41 43 37 42 30 43 41 39 42 39 44 38 38 33 39 44 30 31 41 36 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 66 38 39 39 64 38 38 2d 30 35 63 61 2d 34 33 34 32 2d 39 66 36 64 2d 64 30 39 34 30 66 61 39 33 65 31 65 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 30 38 39 43 41 35 38 44 44 41 42 46 41 43 37 42 30 43 41 39 42 39 44 38 38 33 39 44 30 31 41 36 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 3a Data Ascii: tp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="089CA58DDABFAC7B0CA9B9D8839D01A6" xmpMM:InstanceID="xmp.iid:7f899d88-05ca-4342-9f6d-d0940fa93e1e" xmpMM:OriginalDocumentID="089CA58DDABFAC7B0CA9B9D8839D01A6" dc:format="image/jpeg" photoshop:ColorMode="3" xmp:
2024-12-17 17:18:47 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49766	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:47 UTC	447	OUT	GET /images/665deae8723a9bcb12bc32ed_goodhousekeeping.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:47 UTC	1051	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:47 GMT Content-Type: image/svg+xml Content-Length: 2605 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598751-a2d" expires: Tue, 17 Dec 2024 17:18:46 GMT last-modified: Wed, 11 Dec 2024 12:36:33 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8aXakDiRZDLfffaBoLsNmfdwNR4eIaUWsi1rRLiqIJZ43ey98QdF2m83q4%2Bb6bDDQhZ2D%2BnJfoqxNQ%2BYWlajw8Nv6hCQNh9QrraqA7k%2BYkedLNJ9bhA59m%2FPxLxNHn87u3j1ntTWrVg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38930a3f314295-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1583&min_rtt=1576&rtt_var=605&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2854&recv_bytes=1025&delivery_rate=1785932&cwnd=252&unsent_bytes=0&cid=31850d13fade4037&ts=540&x=0"
2024-12-17 17:18:47 UTC	318	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 30 2e 31 20 31 32 35 2e 33 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 6c 61 79 65 72 22 3e 3c 67 20 69 64 3d 22 50 61 67 65 2d 31 22 3e 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 31 22 20 64 3d 22 4d 33 34 2c 38 38 2e 39 48 31 34 2e 39 76 2d 32 33 48 30 76 35 38 2e 35 48 31 34 2e 39 56 31 30 31 2e 33 48 33 34 76 32 33 2e 31 48 34 36 2e 38 56 36 35 2e 39 48 33 34 76 32 33 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 32 22 20 64 3d 22 4d 33 36 35 2e 34 2c 31 32 34 2e 34 68 33 35 2e 35 56 31 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 600.1 125.3"><g id="Layer_2" data-name="Layer 2"><g id="layer"><g id="Page-1"><path id="Fill-1" d="M34,88.9H14.9v-23H0v58.5H14.9V101.3H34v23.1H46.8V65.9H34v23"/><path id="Fill-2" d="M365.4,124.4h35.5V11
2024-12-17 17:18:47 UTC	1369	IN	Data Raw: 20 69 64 3d 22 46 69 6c 6c 2d 33 22 20 64 3d 22 4d 31 35 32 2c 31 30 34 2e 35 61 38 2e 35 36 2c 38 2e 35 36 2c 30 2c 30 2c 31 2d 38 2e 37 2c 38 2e 36 2c 38 2e 33 31 2c 38 2e 33 31 2c 30 2c 30 2c 31 2d 38 2e 34 2d 38 2e 36 56 36 35 2e 39 48 31 32 32 2e 31 76 33 37 2e 39 63 30 2c 31 33 2e 32 2c 38 2e 32 2c 32 31 2e 34 2c 32 31 2e 34 2c 32 31 2e 34 73 32 31 2e 34 2d 38 2e 32 2c 32 31 2e 34 2d 32 31 2e 34 56 36 35 2e 39 48 31 35 32 2e 31 76 33 38 2e 36 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 34 22 20 64 3d 22 4d 38 34 2e 34 2c 36 35 2e 31 61 33 30 2c 33 30 2c 30 2c 31 2c 30 2c 32 39 2e 39 2c 33 30 2c 32 39 2e 39 32 2c 32 39 2e 39 32 2c 30 2c 30 2c 30 2d 32 39 2e 39 2d 33 30 5a 6d 30 2c 34 37 2e 34 61 31 37 2e 33 2c 31 37 2e 33 2c 30 2c 31 2c 31 Data Ascii: id="Fill-3" d="M152,104.5a8.56,8.56,0,0,1-8.7,8.6,8.31,8.31,0,0,1-8.4-8.6V65.9H122.1v37.9c0,13.2,8.2,21.4,21.4,21.4s21.4-8.2,21.4-21.4V65.9H152.1v38.6"/><path id="Fill-4" d="M84.4,65.1a30,30,0,1,0,29.9,30,29.92,29.92,0,0,0-29.9-30Zm0,47.4a17.3,17.3,0,1,1
2024-12-17 17:18:47 UTC	918	IN	Data Raw: 38 56 38 38 2e 38 48 32 33 35 2e 33 56 37 38 2e 32 48 32 35 38 56 36 35 2e 38 48 32 32 32 2e 35 76 35 38 2e 36 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 31 32 22 20 64 3d 22 4d 33 31 33 2e 33 2c 36 35 2e 39 48 32 39 37 2e 35 4c 32 38 30 2e 38 2c 38 36 2e 37 56 36 35 2e 39 48 32 36 38 76 35 38 2e 35 68 31 32 2e 38 56 31 30 34 2e 31 6c 34 2e 36 2d 35 2e 38 2c 31 34 2e 33 2c 32 36 2e 31 68 31 34 2e 36 4c 32 39 34 2e 35 2c 38 39 6c 31 38 2e 38 2d 32 33 2e 31 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 31 33 22 20 64 3d 22 4d 34 32 32 2e 39 2c 33 30 2e 31 43 34 32 32 2e 39 2c 31 32 2e 36 2c 34 31 30 2e 35 2e 39 2c 33 39 32 2e 31 2e 39 48 33 37 35 2e 37 56 35 39 2e 34 68 31 36 2e 39 63 31 37 2e 35 2d 2e 31 2c 33 30 2e 33 2d 31 32 2e 34 2c Data Ascii: 8V88.8H235.3V78.2H258V65.8H222.5v58.6"/><path id="Fill-12" d="M313.3,65.9H297.5L280.8,86.7V65.9H268v58.5h12.8V104.1l4.6-5.8,14.3,26.1h14.6L294.5,89l18.8-23.1"/><path id="Fill-13" d="M422.9,30.1C422.9,12.6,410.5.9,392.1.9H375.7V59.4h16.9c17.5-.1,30.3-12.4,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49785	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:49 UTC	813	OUT	GET /images/miracle2.webp HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:49 UTC	1049	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:49 GMT Content-Type: image/webp Content-Length: 23322 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598751-5b1a" expires: Tue, 17 Dec 2024 17:18:48 GMT last-modified: Wed, 11 Dec 2024 12:36:33 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BJM%2FlXnzLF3BS5BpCB4mC9VsxHyn1stL1PNV%2FlE44bNM0M56GNjLDaOd3AKDaKMQOv0pHsJ7KYp7%2BeQ1x8J14sXRTeMCjeAlS3vaI1z9ZeBMUP3ex3Keut6v1ciaEqb8LRpOr5%2BzXH4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3893167b034252-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2281&min_rtt=1599&rtt_var=1087&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1391&delivery_rate=1826141&cwnd=235&unsent_bytes=0&cid=c9f933e33a07490f&ts=524&x=0"
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 52 49 46 46 12 5b 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 ff 02 00 af 01 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF[WEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 44 af 12 31 5c 34 ca 55 f7 cb d9 d6 82 4f 15 19 cd 5d ee 0e d6 3e 7e 34 c7 e4 fd c2 7a a8 8e ad 79 b7 84 4b f9 e2 9a 4f f9 b3 9e 25 d0 d3 0e 61 0e d8 24 f4 04 36 db ce 7c d6 b9 49 bd 1c 1a f3 12 16 bb c9 73 da c5 1d 4c 4a 16 fa cf 60 a0 ff 04 c9 dc e0 17 01 3e 0d a8 42 0b 76 3b 0c ff 42 30 96 68 63 d8 36 11 68 22 41 24 18 8b 65 1c fb 3c 53 43 d4 a5 1a b9 23 d5 3e 37 0e 5f 55 53 6a 4b 86 e5 e5 de 84 39 d9 61 f7 49 71 f5 d1 26 19 73 1e 73 6b 0e 7c b4 6e ec 19 86 f6 86 81 fa 3e e0 5c f7 46 b2 f9 3c 00 08 a6 ab dc 39 e1 89 6a 5f b6 27 68 24 01 de ea 07 f0 3f f6 03 8b 4e bf f9 a3 71 bb 06 a9 ea a6 a3 b1 22 55 f6 3a 4d f6 ea 0e ea 7b b0 ca 1a 3c a0 30 e9 6e a5 46 cc 83 bd f0 ab dd c5 69 23 3e 61 52 2b 34 00 41 4c 6b d9 e8 87 4b d8 d2 f9 f6 21 c7 fa b5 58 55 6c Data Ascii: D1\4UO]>~4zyKO%a$6\|IsLJ`>Bv;B0hc6h"A$e<SC#>7_USjK9aIq&ssk\|n>\F<9j_'h$?Nq"U:M{<0nFi#>aR+4ALkK!XUl
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: ad 49 8c b5 62 f7 5b cc 82 73 c8 6b e7 7c 8c 16 7e de ea 26 d0 bb 56 91 97 8d 92 d7 41 3b 3e ed 46 80 86 9d 7b a6 1d 6f e1 7b 61 1d c9 a1 c8 ae 39 33 b9 54 c6 4a e6 b0 fc 2e 6c 02 ac 65 a5 b1 f8 2a 04 d4 01 13 a1 a6 8c 89 14 50 70 ae 2c c9 3d c6 c2 84 7c 7f 90 8c c0 91 01 81 09 cd 28 08 a6 c0 aa e7 d7 07 2f 71 8d 4a ba c0 99 58 c3 e5 31 cc 80 7b c1 87 db 2a 6b a6 03 de 28 a0 67 fc fa 10 59 e9 6a c2 fc ff 5b 27 56 f9 d9 c1 56 51 2a 30 47 71 a3 3e ff f1 a6 91 35 fb 85 a8 40 1b 34 16 85 df 77 b8 06 64 13 18 a0 31 db 84 10 1f 15 8f 72 8e 31 0e f9 09 df 18 99 6f c6 f7 da 48 97 a3 4c f1 ee 91 3b 7e 0c 7a 3e 5b 1d 02 09 c7 9f cc fb f6 0e cd a5 ae fb a3 b5 5d 51 eb ac 27 0c dd cd 6a fe 8c d9 ad ea 3e 11 9a df 1d 69 2c 6f fa 20 49 f4 c5 47 ee b9 ab d1 cd 16 7e 84 Data Ascii: Ib[sk\|~&VA;>F{o{a93TJ.lePp,=\|(/qJX1{k(gYj['VVQ*0Gq>5@4wd1r1oHL;~z>[]Q'j>i,o IG~
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: d4 ea 39 dd 21 97 78 09 97 df b3 5b ad 7d 17 6e 28 76 a4 df 39 49 03 9b 0f 02 e2 ad d5 01 73 95 91 21 69 d5 48 7d 61 46 b6 4a 91 dc 06 a3 aa ce 1b b2 14 46 93 d8 cc 97 97 52 89 86 b1 e4 22 2b 05 ef 8d fc 00 57 10 6f 4e 43 59 03 57 3b 87 95 46 55 40 e1 9e c5 df 02 48 49 33 4e c4 60 fe 8c cd a4 75 2a 78 13 5a 37 ce 58 5e ca 17 b5 59 1b c1 41 ac 2c 51 cb 43 bc 4e 1f d1 9f 46 14 0f f2 40 45 92 65 92 46 67 fc 31 cf ab 23 28 74 c9 29 ed 71 08 12 34 6f df e5 a9 50 79 f7 a1 4d 6b 04 9e 63 ac 2e 20 73 0f ac 4a 71 db 8c df 7c 62 4b 1b b6 1f 3a 19 72 bf 80 ea 14 90 a2 40 e1 16 6f be 5b ef 9e 3f d0 90 90 bd ac 3d fa a1 42 9c 2c 00 cf bd ff e5 44 08 27 e4 65 c5 85 5c 73 69 63 e5 2c 1e 0d 16 e1 41 37 8d 43 4e 81 d3 a7 5b 50 44 b7 f4 27 70 6c b4 7b 78 b6 fe 89 e3 3e 7a Data Ascii: 9!x[}n(v9Is!iH}aFJFR"+WoNCYW;FU@HI3N`u*xZ7X^YA,QCNF@EeFg1#(t)q4oPyMkc. sJq\|bK:r@o[?=B,D'e\sic,A7CN[PD'pl{x>z
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: fb f8 4c 57 58 d0 04 05 78 7c fb 0c 17 28 1e c8 c1 25 f1 4d 9e 7a a1 00 6f 3a b1 7d e1 75 9d 96 3e 6d f4 aa e9 3a 6a 74 77 d1 ed d0 10 ec 7b d0 de 78 ab 88 4f fb 27 5f fd 59 be d2 97 50 86 0f 0b 91 08 fa 31 db c6 1c da 3b 08 02 60 fb 66 16 1c 30 09 ad b6 15 18 91 1e 06 eb 3b 35 1e 32 c8 00 b2 45 33 54 8f 82 a7 80 4c b2 b6 93 f7 76 8a 18 7d c3 1c f1 08 ab f5 e5 9e 1b 4b 2b 82 0a 12 62 ba d2 75 96 64 f2 7e 2c db 37 e1 ad 3e b7 4f 97 1c 17 b5 5d c7 1a db 3a d9 19 73 41 45 ab cf 33 d3 1e fb d7 d5 54 0c 47 0c 38 29 1a 40 64 e6 0b ad d3 ae 0e c9 f5 22 c4 37 5d c6 54 5f 8a c0 d8 07 72 bc be 44 14 b7 d3 3e 35 34 2a f3 09 4a 7b 32 5f 19 b1 91 c5 af b6 06 76 39 16 1b 02 0b ef 51 b8 43 dc 3b 78 a0 bf 60 71 28 d7 8b c6 d3 7f 15 67 2b 39 74 cc 72 2b 57 5b eb c6 1c 2c Data Ascii: LWXx\|(%Mzo:}u>m:jtw{xO'_YP1;`f0;52E3TLv}K+bud~,7>O]:sAE3TG8)@d"7]T_rD>54*J{2_v9QC;x`q(g+9tr+W[,
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 86 5e 18 7c 7b 43 63 21 08 29 86 62 f2 6a 29 d0 84 71 7b 8f df 84 41 03 80 30 84 37 61 79 a3 05 d4 55 1d c0 2f 40 9e 8d 1d 52 7d f0 85 b1 5a 97 78 4f 50 28 1f eb f7 4c e8 10 cf 8f 0c 35 d7 9a a7 9e 0d 58 74 22 8e 04 5c c4 1c 36 e2 39 d7 a7 33 7d 63 c4 58 00 9a d0 25 66 0b 30 9f f3 7a 0e e8 3b 5c 3d bc 2a a4 22 c6 b4 68 a0 6c 80 c8 07 9f ab 2b 1d 6c 31 33 67 6b c3 20 1f 67 d2 83 19 e5 c9 eb 02 fd a1 9c 6e ec 16 ac 92 50 a7 00 46 0b 44 55 d8 7f 80 3a b2 9c 66 8b 51 13 6b 82 d2 21 80 1d 42 84 1e a2 03 76 cd 7b 92 90 60 56 40 be 00 f5 da 44 d1 36 84 4a b5 f7 10 ca 33 55 7e b9 b7 ee 61 6d c0 90 f3 79 fe 20 0e 61 cb 73 0e d2 0e cc cd ef 02 67 f2 eb 64 de aa d6 d5 33 aa 8d cd e5 5b ce b2 38 30 54 8e 1e c8 38 c8 f1 eb 07 0d 39 12 b5 82 e0 63 19 2e 97 3f 3e e4 09 Data Ascii: ^\|{Cc!)bj)q{A07ayU/@R}ZxOP(L5Xt"\693}cX%f0z;\=*"hl+l13gk gnPFDU:fQk!Bv{`V@D6J3U~amy asgd3[80T89c.?>
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 78 b8 90 ba c8 b7 5d 12 a5 90 fc 8f 68 44 56 6b 39 02 40 07 6a d6 f7 05 80 b8 f3 0a 2e c8 65 50 83 c9 43 f7 05 8d 87 5b 02 0d 93 13 96 87 20 5a 0f 39 fe ca 37 c1 4a 82 98 74 29 90 46 86 98 2f 3e 47 06 3b 45 24 5d a9 ca ab 58 20 2c 01 61 ca 21 3b 4b d2 23 6a 14 25 f8 8b 98 9d 53 4b a4 0a 7c d6 ec 99 49 9c 13 70 4f 54 bc d0 41 47 28 ac eb 12 e0 6f 20 4f fa b6 dc 2b 92 30 33 22 13 e1 b0 c8 f7 22 a9 7d a0 e1 b4 4f 7f 9e 86 73 e3 a4 75 1d 02 46 cd 80 e7 40 8b 75 da 8c bf 2a 80 1f a9 b3 b3 6c db b7 c8 12 8a 49 ed 40 80 9f bf d4 1c a3 f5 05 de 3f 3e 7b 61 e3 61 ed 45 53 0a f9 58 0a 60 64 57 ff b8 3b db 06 b2 c0 fd 17 46 85 fe e8 1f 8c 08 b4 90 51 75 aa 15 0e 2b c4 33 2a 11 70 84 21 50 ad 6e 88 3e a5 fe b4 cb 71 d1 6b 65 cb ec dd a6 a2 ff 9b 04 b2 4b 4f 93 6a 9b Data Ascii: x]hDVk9@j.ePC[ Z97Jt)F/>G;E$]X ,a!;K#j%SK\|IpOTAG(o O+03""}OsuF@ulI@?>{aaESX`dW;FQu+3p!Pn>qkeKOj
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 74 ec d3 a4 bc 1f 68 78 2a 65 42 8e 2e 7a 1b 36 d3 bd 14 8a 14 74 b0 94 64 54 61 94 f2 6a 81 17 36 fe 92 d1 1f c3 04 f2 b3 f6 2c 3b 61 2e 25 bf b0 3e a7 4a 10 9d bc b9 69 86 bf fb ab 6a 1b 6a 26 82 6d df b8 e9 cf 59 70 36 a2 c5 ef ec 64 e8 54 ca 57 d8 a7 fc 0b a4 fb 82 74 6b d0 20 ab 37 19 ec 4c cc 1d 31 bd 49 21 d0 16 97 a1 5e 62 a9 4d 75 0f 04 2a d0 83 2e 07 74 b9 ef 1d b5 db dc 24 29 58 6e e8 62 26 cc 82 77 6c 88 be 01 88 a4 0e 73 66 25 89 e4 de 4d 8a 06 ab 01 80 2f c2 0f b8 3f 26 f1 08 0b bc 06 ea ab ad 58 e5 3a ad 26 59 27 f0 d0 78 a9 48 b4 d2 92 47 9e a7 3a c2 7e 73 be 71 01 01 5e a9 f6 36 7d 97 74 65 0b 75 4c 95 78 f4 d3 22 3c 13 17 f6 18 b0 9d 0d 43 af af 4e e5 52 a8 a1 a4 49 e1 b4 4c a7 53 29 89 c2 40 f5 7c a9 bb 05 a7 0d 59 f6 5f 85 92 01 89 80 Data Ascii: thxeB.z6tdTaj6,;a.%>Jijj&mYp6dTWtk 7L1I!^bMu.t$)Xnb&wlsf%M/?&X:&Y'xHG:~sq^6}teuLx"<CNRILS)@\|Y_
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 00 06 03 ad b1 9c fe b7 7c 49 45 33 cc a8 d7 ea f6 5f 37 cc 31 27 81 b8 96 3d bd c5 fd ed cb de 96 f5 3a 54 5a 82 68 9e 02 b5 94 e4 db 30 ba 2a 33 9e 88 bb 11 38 ec 5c 00 b3 c0 60 76 b1 1a f0 43 15 37 66 4c 67 a6 30 a5 70 cf 5f b9 a5 7a 92 c0 96 b7 24 dc 82 43 4c fb 53 3e 7d 6c 10 02 fb 41 74 b5 12 28 24 fe 4a 01 9e 18 da 11 f3 d9 1f be 04 e6 41 46 86 e2 ca fb af 12 a8 e8 ab 49 21 15 ea 87 80 46 03 f8 ab d1 b1 7a 0a ae e1 4c 29 c7 a3 14 f8 b8 d2 8b 70 73 52 0d ad 8f d4 2c e6 dc 74 94 6b 23 d6 d0 42 95 c7 bd 1a 1f 3c 2f 9d 86 b2 32 2d 0e 85 ad ea 7b e1 da 56 65 9f 5f 83 e6 9f 82 af 4a b4 74 6c 98 25 68 43 0e 2b ab 99 df 79 18 6e 5e c8 18 12 25 ea a2 37 f6 e3 d8 cf 7c ba 4e d4 f1 23 bd 11 9a 08 81 09 6c 88 d4 ce 18 f4 a3 ce 08 74 fe 12 11 fa e2 7e 66 e1 1a Data Ascii: \|IE3_71'=:TZh0*38\`vC7fLg0p_z$CLS>}lAt($JAFI!FzL)psR,tk#B</2-{Ve_Jtl%hC+yn^%7\|N#lt~f
2024-12-17 17:18:49 UTC	711	IN	Data Raw: 6b 05 07 e9 ce 82 e9 fc 80 97 f0 86 32 c3 dd 91 28 a7 40 b9 f6 ca 52 24 7b 79 1d 83 26 7e 52 ff 80 34 47 d4 47 dd 52 aa 2a 98 7d d8 1c 29 e5 9b 77 dc cd 2f d1 c6 65 1c 6c 02 0d c0 69 32 75 3b f6 91 a9 20 95 f1 04 ef 3e 04 0a 25 1c 58 b6 8a 35 cd 7c 86 5b 57 8a 13 00 f8 1c 20 b2 aa cc 3e 8a 6d c8 a0 b7 de 98 9e 18 d5 81 01 e2 ba 7c 7d 7e a2 5f 11 bf cc 1f 7d 0e a1 e9 0a 7a f1 df 47 f7 21 a1 f8 ed fb e5 d4 00 d9 75 3a 63 45 93 df e1 13 19 6b 69 e8 9d dc 68 50 a0 cf 43 d6 bc a9 47 22 30 cb 13 8d d7 0c b5 70 92 79 cb 47 cd d0 9d 5b 22 4f 30 b5 b3 b3 21 03 49 7b 69 3d 0c 3b 30 e4 fa 60 05 40 79 5c e4 36 48 b7 fd ee 0d 51 bf c2 09 23 6f c6 5c c7 00 27 82 51 a8 2c c3 18 3b 72 98 2c 70 ac 7c b5 65 ce ff 8b 74 2c 4e 41 10 84 17 1a 60 d1 e9 a6 c4 71 2b 50 5c 88 38 Data Ascii: k2(@R${y&~R4GGR*})w/eli2u; >%X5\|[W >m\|}~_}zG!u:cEkihPCG"0pyG["O0!I{i=;0`@y\6HQ#o\'Q,;r,p\|et,NA`q+P\8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49786	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:49 UTC	438	OUT	GET /images/665deae8723a9bcb12bc32ee_glamour.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:49 UTC	1047	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:49 GMT Content-Type: image/svg+xml Content-Length: 2773 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "6759874e-ad5" expires: Tue, 17 Dec 2024 17:18:48 GMT last-modified: Wed, 11 Dec 2024 12:36:30 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IHmSPG%2F2rlyI9%2F55TLO34UHyZf9ZcVdtmviwCeNBGdcGnVzXUsBtdTuuMqeU6Ko7qn503rQ3ZbnGrptuW3%2BAvGKuPQc3I9KgRDg632MI0I574oS4nJztGQJvjnibeVpM4DgID4E5JPo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3893168ddd431a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2335&min_rtt=2229&rtt_var=912&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1016&delivery_rate=1310004&cwnd=224&unsent_bytes=0&cid=8194ad09589e7dce&ts=524&x=0"
2024-12-17 17:18:49 UTC	322	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 30 20 33 30 2e 38 33 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 35 39 2e 34 2c 33 2e 38 37 2c 31 36 32 2e 36 39 2e 36 32 68 35 2e 36 33 63 36 2e 34 37 2c 30 2c 31 30 2e 38 2c 33 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 180 30.83"><defs><style>.cls-1{fill-rule:evenodd;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M159.4,3.87,162.69.62h5.63c6.47,0,10.8,3
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 37 6c 2d 33 2e 31 39 2c 33 2e 31 35 68 2d 34 2e 31 35 6c 2d 36 2e 34 2d 35 2e 33 31 56 32 37 6c 2d 33 2e 31 39 2c 33 2e 31 35 48 31 35 39 2e 34 56 33 2e 38 37 5a 6d 36 2e 38 36 2c 31 32 2e 33 32 68 32 2e 36 35 61 33 2e 37 32 2c 33 2e 37 32 2c 30 2c 30 2c 30 2c 33 2e 38 35 2d 33 2e 39 32 63 30 2d 35 2e 35 39 2d 35 2e 34 2d 35 2e 35 37 2d 36 2e 34 39 2d 35 2e 35 37 76 39 2e 34 39 5a 4d 31 36 33 2e 37 38 2c 31 2e 35 38 68 34 2e 36 36 63 36 2e 30 38 2c 30 2c 39 2e 36 35 2c 33 2e 35 34 2c 39 2e 36 35 2c 38 2e 33 36 73 2d 33 2e 35 2c 38 2e 35 2d 39 2e 34 32 2c 38 2e 35 68 2d 31 4c 31 37 36 2e 39 32 2c 32 36 68 2d 32 6c 2d 39 2e 32 32 2d 37 2e 35 32 68 2d 2e 34 39 56 32 36 68 2d 31 2e 34 31 56 31 2e 35 38 5a 6d 31 2e 34 31 2c 31 2e 33 56 31 37 2e 31 36 68 33 2e Data Ascii: 7l-3.19,3.15h-4.15l-6.4-5.31V27l-3.19,3.15H159.4V3.87Zm6.86,12.32h2.65a3.72,3.72,0,0,0,3.85-3.92c0-5.59-5.4-5.57-6.49-5.57v9.49ZM163.78,1.58h4.66c6.08,0,9.65,3.54,9.65,8.36s-3.5,8.5-9.42,8.5h-1L176.92,26h-2l-9.22-7.52h-.49V26h-1.41V1.58Zm1.41,1.3V17.16h3.
2024-12-17 17:18:49 UTC	1082	IN	Data Raw: 38 63 36 2e 37 34 2c 30 2c 31 31 2e 31 2d 34 2e 37 33 2c 31 31 2e 38 39 2d 31 30 2e 38 35 48 31 36 2e 36 31 56 31 37 68 31 30 63 2d 31 2c 34 2e 37 34 2d 34 2e 34 32 2c 38 2e 31 37 2d 31 30 2e 30 36 2c 38 2e 31 37 2d 36 2e 34 36 2c 30 2d 31 31 2e 32 2d 34 2e 38 34 2d 31 31 2e 32 2d 31 31 2e 34 33 53 31 30 2e 31 33 2c 32 2e 33 35 2c 31 36 2e 35 31 2c 32 2e 33 35 61 31 36 2e 31 38 2c 31 36 2e 31 38 2c 30 2c 30 2c 31 2c 38 2e 37 39 2c 33 6c 2d 2e 33 37 2c 31 2e 30 37 4c 32 31 2e 34 39 2c 39 2e 37 33 61 31 34 2e 32 31 2c 31 34 2e 32 31 2c 30 2c 30 2c 30 2d 37 2d 33 63 2d 32 2e 35 37 2d 2e 33 31 2d 35 2e 33 34 2e 33 32 2d 36 2e 38 32 2c 32 2e 35 37 61 39 2e 36 35 2c 39 2e 36 35 2c 30 2c 30 2c 30 2d 2e 38 38 2c 36 2e 38 34 2c 39 2e 33 38 2c 39 2e 33 38 2c 30 2c Data Ascii: 8c6.74,0,11.1-4.73,11.89-10.85H16.61V17h10c-1,4.74-4.42,8.17-10.06,8.17-6.46,0-11.2-4.84-11.2-11.43S10.13,2.35,16.51,2.35a16.18,16.18,0,0,1,8.79,3l-.37,1.07L21.49,9.73a14.21,14.21,0,0,0-7-3c-2.57-.31-5.34.32-6.82,2.57a9.65,9.65,0,0,0-.88,6.84,9.38,9.38,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49784	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:49 UTC	807	OUT	GET /images/t1.webp HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:49 UTC	1051	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:49 GMT Content-Type: image/webp Content-Length: 141914 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598750-22a5a" expires: Tue, 17 Dec 2024 17:18:48 GMT last-modified: Wed, 11 Dec 2024 12:36:32 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c2o%2FGRoatsRtc2CizPDjgxkX7MSvA3CGhxwq0Vsyc4GPwIVyqhMkoaQxF93HERoi%2B0%2FV%2BercfuKulsOQWjfoljgV9XydGQh6HFq22AxXHZwZUpv8SLmPAHrb6w6Ia4ZPOscMrv6GDVo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3893168bef8c09-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2752&min_rtt=1854&rtt_var=1337&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=1385&delivery_rate=1574973&cwnd=240&unsent_bytes=0&cid=54405263d3b9efc4&ts=530&x=0"
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 52 49 46 46 52 2a 02 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 ef 05 00 e7 03 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFR*WEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 07 da 8b 14 0b a5 53 87 9d ff e7 32 c6 58 49 db d9 25 18 4a 3e 7e 84 dc f4 88 22 21 80 ff ed 11 d0 3e 5b f3 4a b7 31 96 90 94 b5 e3 ee 08 4b df b5 bc 20 3b 66 cb c3 a7 7f 8a 90 83 ab 12 66 ed 57 28 8f 21 bb 5f 41 5c f2 42 c0 55 6a e7 8c f9 70 04 9d df fe 73 f3 ea 27 e0 0b 61 0e c5 93 52 7a 57 d7 77 43 8b 4b 20 ad 59 b9 b4 16 f9 84 2c db f7 33 fe 3a c3 c3 ad ad 57 84 7e 25 b8 fa 9e b6 75 ea c7 ac b8 64 34 03 9c d1 ee 7d 32 17 cf 00 ee 04 c8 03 2c 11 6d 69 34 6a a1 db 55 1b 4f fd 2d c7 e4 73 42 b8 96 44 8c 91 09 1d df 00 a5 35 fb 7d 8a ce 04 8d ef fb 58 93 f9 de 36 26 43 e4 d4 55 4c c7 02 bd 8e cb 8a 4e 94 e3 7f d0 b6 e3 3f c8 8e bf 82 7a 1d 99 ae 6c d8 29 94 51 62 4d 60 dc f9 06 b5 de 8d ea 35 04 f9 84 c8 f2 d9 83 ad f9 09 fe 9a af 0a ba cc d0 9b da 0a 2c Data Ascii: S2XI%J>~"!>[J1K ;ffW(!_A\BUjps'aRzWwCK Y,3:W~%ud4}2,mi4jUO-sBD5}X6&CULN?zl)QbM`5,
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 70 5d 78 76 16 f3 cc 3f 7d 3d 81 82 3e 95 3e 50 80 9a 9f c4 5b d0 df 10 ae 1b ce c2 2a 80 41 a0 d0 7d 57 73 f0 28 84 e3 37 ea 5a c7 c9 3e a8 2f 3b 1f fa 37 fe 69 62 60 7e 03 77 d8 3b 9b 35 d3 c8 32 e0 ce c0 a0 b5 80 76 c8 a4 23 7e a9 da ef a7 14 36 1a 5f 49 ab ab 4d ad 8a 4b 53 07 3a bd d9 49 e8 6b 45 e0 99 78 e6 c8 97 30 62 ca 42 db da 63 58 2b 02 e0 26 78 1b ea 7b aa 77 b9 5e db f8 f4 d4 9f ec 3d 7b d6 4e 5d 19 1d f1 c4 18 50 9e 44 6b a4 a6 fd cb 68 75 de 8d 4f 58 01 c0 d0 3c c3 f9 0b 1c d6 ca 25 28 e4 f0 9d 35 6d 72 d4 e3 fb 28 c6 19 d8 ed d3 61 c2 76 f7 d1 b1 fe 08 81 09 75 61 dc df b3 45 3a d4 fe 83 01 69 97 e1 a3 4d 40 40 d7 8d 38 f6 a9 d8 a8 71 a9 00 34 2f 20 65 0d a2 78 51 e7 8c 57 04 2d 32 29 d7 76 ab 18 99 cc 08 92 df 64 5f 1c 4c f5 6c 4b ba b4 Data Ascii: p]xv?}=>>P[*A}Ws(7Z>/;7ib`~w;52v#~6_IMKS:IkEx0bBcX+&x{w^={N]PDkhuOX<%(5mr(avuaE:iM@@8q4/ exQW-2)vd_LlK
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: a7 af fd a7 7a 26 ea c8 bf ab 76 b6 dc ca 6d 10 c6 e7 1e b0 5a 35 1d 6d 61 a9 86 33 87 ab cd 8e 2c 38 76 58 d2 1c bf 25 d1 d8 0c 17 a3 c4 3e e1 ec ce a4 a9 a4 cc 9e c8 47 c5 83 79 2e 0f fd 44 a9 88 93 e9 6d dd b1 ba 30 ac 85 bd 07 98 8b 51 29 32 38 e0 11 c5 33 57 83 26 ea 2f 9d 33 bc 07 8b 51 91 7f 08 ff 64 97 9f ff ff 1d 87 88 b0 6a 36 d7 ff df 1e 29 c6 0a 53 7c 40 33 3d cd f5 a4 85 f6 a2 20 c9 fe 67 9f b2 df af 28 5e 6f 0d cf 7b 0e bc cf 6f ce 4d 68 7f bc 3a b7 aa 99 d5 4c 16 01 63 a1 5f 22 36 54 8e fd 16 d1 b5 78 4e 04 88 38 d3 ff d8 fb 4b c5 c3 88 49 95 07 c2 12 01 5b c9 0b 70 05 9b 00 0a bc 31 54 5d bd 95 0d ec 2c 33 3e 1f a3 c8 62 39 3e 77 78 f4 30 96 5b e5 45 af 71 2a e4 d8 09 3f e5 d1 2c 64 9d 7c 8f 89 4e 60 fc e4 12 4e d5 64 e4 c8 18 de 19 ce e5 Data Ascii: z&vmZ5ma3,8vX%>Gy.Dm0Q)283W&/3Qdj6)S\|@3= g(^o{oMh:Lc_"6TxN8KI[p1T],3>b9>wx0[Eq*?,d\|N`Nd
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: c7 2c b2 85 eb a0 9f 17 6b 79 d9 e4 a4 33 10 a6 07 ee 4d 32 c0 82 c7 bf f7 0c a3 f2 4b 27 e4 a9 a7 07 b6 db 2b 32 4a 48 8d fc ea 7f 28 b9 e7 84 80 b3 5f e2 e1 35 03 05 18 f9 02 06 c3 2e ee 1e ee 1d 97 92 1f 8b ae 3b 7c a5 7e c7 b4 8a cb 8f 67 b2 9c 66 44 34 cf 70 92 4d 14 be 52 7e d8 7d a3 be d9 eb 8e f5 aa 1e 4d 10 0f 0e f0 4c 7a a3 dc fd 85 f7 e1 aa 39 88 f2 00 af 49 c9 80 fd f0 31 5f bf 58 97 fb 32 6c 5b 0b 41 43 88 ee 76 23 55 cd 45 2b 50 54 74 90 16 39 55 8a df 4f 3e 97 3c af af 1c 06 e6 a9 26 77 fd be 6b 84 06 85 97 71 0f 7f 73 99 6a 9b 41 77 e1 2c 55 76 e8 9b 4e ab 91 02 23 44 13 8c b2 7c 2c 13 5f bf 74 8f 31 53 e0 98 b3 1c c2 d6 87 5c 6a 3c 73 7b 96 14 c4 e6 ad af 5d d4 0d 18 e9 90 92 b3 40 b5 f6 6e 35 0f b9 38 b8 75 1d e4 1d 03 85 d4 07 e5 1d 7c Data Ascii: ,ky3M2K'+2JH(_5.;\|~gfD4pMR~}MLz9I1_X2l[ACv#UE+PTt9UO><&wkqsjAw,UvN#D\|,_t1S\j<s{]@n58u\|
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 65 b3 89 1a ed 2f 69 2d 79 5e ef 93 82 27 62 53 81 21 86 36 10 05 90 e9 a6 df a2 09 9d 98 87 a9 46 d2 50 b4 2f ae 7c f3 39 e0 e7 06 de d3 e4 8c da ad 2c a0 4e 2f f8 a0 aa 96 49 2c c3 e1 19 d9 0d f5 78 dd 18 94 e3 60 65 0b 80 84 c6 24 8f 46 a3 96 ca d3 ff 96 0f 43 ac 56 3c 63 c9 71 3d da 68 6e 6e d0 f5 42 5a 0c 15 5e b6 5a 54 f4 08 2d d7 a7 b1 53 83 b0 ff 8f 5b a6 09 05 70 b7 64 be 3b 92 c0 69 0d 21 4d d8 9f 3f 04 e0 8e 0a c7 58 74 43 23 b7 1e 4c 60 d1 cd 7c fe 8f 7d 73 0c c2 53 45 18 4e d4 50 36 e7 ef cc 0a f3 6d b7 4b 20 79 d1 6a d2 40 9c c0 bd 4d 89 c5 6e 99 58 c8 e6 db 25 ac 39 1a c9 2a ac 72 89 f5 cd 03 ff 1d 5d f8 e2 93 47 39 c7 00 91 e4 f1 1b 45 6f 41 c2 5b 37 96 aa a8 3b d8 45 2b 12 f6 fc ec c5 fc c0 ce 86 54 04 1e 6d e8 c0 d0 f1 4a 99 fa 29 e2 9b Data Ascii: e/i-y^'bS!6FP/\|9,N/I,x`e$FCV<cq=hnnBZ^ZT-S[pd;i!M?XtC#L`\|}sSENP6mK yj@MnX%9*r]G9EoA[7;E+TmJ)
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 5e d1 49 7e 40 44 d3 56 1f f3 5f ee cc 29 55 4d 21 3d 92 b1 e8 25 12 ef 06 43 7b fe b2 70 1c bc f9 1d b0 13 f1 68 d6 72 6a ed 1e 81 e5 0c 2b 66 a5 32 cf ea 9a db 01 bf 50 20 44 f6 b1 4a 42 ea 0f 19 a2 31 23 bb 98 76 0e 7f 93 8c 55 6b 11 0e 07 3e 2f dc ad 42 26 c3 5d e4 f6 f6 09 ae 3e 64 4b fc d8 23 68 82 25 44 d0 ad 3c b2 18 58 13 fe 57 72 4c 13 02 ce 8c 42 2b e5 81 64 a7 7e 74 1b a6 a4 d8 a4 f1 26 71 ab a0 e6 4b ac 13 1f 6f 52 2e 12 36 0f 90 c9 15 83 2b ae d9 40 17 75 48 87 88 2e 7a c5 85 b3 3e db 0f 4a 67 11 bd 28 77 b7 a2 d6 c3 0e 2a 2b 18 ef 0b a4 08 92 6c 52 92 95 7a 70 e4 f7 d9 fd ec c2 1e 8f 85 66 f8 1b 12 d7 b6 c3 65 b3 94 55 6c e0 3a dc 2d d4 3b c7 84 70 a5 94 a7 4d 8f 33 cd 49 ec d3 04 72 19 1f 5f 04 f1 08 cc 25 19 95 43 69 80 80 5e 93 19 d3 4d Data Ascii: ^I~@DV_)UM!=%C{phrj+f2P DJB1#vUk>/B&]>dK#h%D<XWrLB+d~t&qKoR.6+@uH.z>Jg(w*+lRzpfeUl:-;pM3Ir_%Ci^M
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 72 74 b2 46 8c 55 e9 22 54 e7 2f 0c 95 40 34 97 65 5a 72 af f2 88 e4 1b a8 88 09 12 79 51 b3 42 27 f3 ff ad d4 23 93 a0 90 f5 ef 51 38 3d a8 6c b9 91 c9 bf 49 a8 88 69 56 6c 46 3a a6 df cd 77 8b e0 84 f4 cf f5 95 e6 9e a1 cb 56 66 b2 4c f6 21 f7 70 37 52 6f e6 1a c3 90 72 98 0a 92 42 3e 36 0b fa db 1e 3d 4c 56 c2 bd 5f e9 c4 d3 a2 9e 98 c6 99 79 1a 29 d0 90 1d 0a c1 db 3c 7e 0d 2b ff b2 f2 47 87 f5 53 01 b5 57 de a7 4f c7 28 41 27 38 ab 64 66 df 3f ad 8b 91 2d a3 67 86 5f d0 da 1b 9f 1b cd 97 61 5a b4 95 42 38 0b 84 07 3d 71 f7 44 ae cd d4 4e 32 72 aa 7b 41 6e 59 33 9f c3 19 a3 0a 1d 72 8c 95 b1 11 1a 4b 5d ba 3d 88 7c b8 db e5 36 d1 28 27 f7 26 f7 71 f0 07 9b 4d 66 5c 4e ce 73 49 f0 f4 58 0c 89 ae e2 49 26 c1 37 3a 61 80 75 15 3d ad 4e 33 08 70 dd 97 72 Data Ascii: rtFU"T/@4eZryQB'#Q8=lIiVlF:wVfL!p7RorB>6=LV_y)<~+GSWO(A'8df?-g_aZB8=qDN2r{AnY3rK]=\|6('&qMf\NsIXI&7:au=N3pr
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 53 e9 bc e8 d6 bd 80 2a c0 f8 ba 9e c2 98 d9 75 8f 64 bf 56 05 30 22 77 0a 87 be d4 de b9 fb bc 19 a5 3c cd 86 f2 82 25 79 b2 9c fd 9f 00 44 c1 80 90 ec f4 b9 05 49 9e b5 c6 ad 68 fb b0 96 dd f4 4e d3 98 b4 ec 98 77 ad 3b d6 8f ba 11 fd a6 a6 91 e0 98 7e 8c 29 34 f1 2a 13 44 06 a5 e8 6c ae e2 a0 01 57 8c 8f 69 7f 39 af 7b 77 7a 6b e1 3c 71 71 6a b1 6d bf ca c9 fb b3 7f f6 5c 60 d8 2a a1 23 77 b2 c9 f0 fb c7 4b ca 0d 31 97 fe c0 ab 8e 09 64 2c aa e6 d0 26 cf ee 26 93 4b 66 6c fc fe 79 37 38 57 60 b0 ba 2a e9 40 58 16 e0 96 7b fa 6b 90 ce d9 87 9b 3c 9e 1f 83 f7 1a a3 5e f8 25 76 0a 95 fe 49 2d 7f 5e b3 54 bf 96 45 63 ff 4e 35 58 f9 ac 01 34 9d 99 d5 6a 7f cf 86 cf 58 33 71 a1 45 0c f3 1c 97 cb 6b 4b 29 92 08 09 81 41 25 29 56 16 2d f6 5b 57 17 f7 b6 79 c2 Data Ascii: SudV0"w<%yDIhNw;~)4DlWi9{wzk<qqjm\`#wK1d,&&Kfly78W`@X{k<^%vI-^TEcN5X4jX3qEkK)A%)V-[Wy
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 93 72 7a fd 70 83 f6 f7 50 aa 23 15 c9 42 b6 ea a1 10 d1 6d 0f 4d 5e 7c f9 e0 b3 d1 7f 48 af f6 3b 4c 9b d3 9f 63 12 86 a0 cf 26 54 d2 85 f3 8c b1 3a 63 e7 20 d8 78 b1 77 63 29 51 8d 70 1e c4 76 d9 9e 75 b2 00 02 e5 f0 d3 5e e1 c9 a6 4a a6 92 e2 b7 00 58 bc d2 37 bd 94 25 41 4c 30 d9 c4 6c bf ee b6 b2 ca ec 38 a0 1f 4f 4f 08 cc 25 51 df c2 49 4c f8 95 d9 e3 22 b6 fe 95 0b 69 3c 7f 18 7a c0 42 2f 7a f3 25 4d d4 ce 84 60 72 c3 49 a8 d9 05 a8 8c 24 4f 6f cd 1e ee 49 f0 49 a3 90 33 0e d0 9c 56 34 a8 99 c6 0b 43 e8 b0 40 1e 5f 80 c8 3b 8e c2 71 f5 57 35 96 6a 4d 41 a9 ee da bf 92 f6 f7 ef ac ba 1f 84 fe 39 8e 98 59 cf 01 54 20 37 8d 7b ca e1 06 d0 6f 3c b5 83 4e e9 15 40 ea 10 27 1c ae cb cf ac 3c d2 1b c0 3e 92 9d 9b 95 2f 45 ad b4 5d 33 24 0a 00 e5 15 38 bd Data Ascii: rzpP#BmM^\|H;Lc&T:c xwc)Qpvu^JX7%AL0l8OO%QIL"i<zB/z%M`rI$OoII3V4C@_;qW5jMA9YT 7{o<N@'<>/E]3$8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49788	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:49 UTC	439	OUT	GET /images/665deae8723a9bcb12bc32ef_popsugar.svg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:49 UTC	1059	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:49 GMT Content-Type: image/svg+xml Content-Length: 2166 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598753-876" expires: Tue, 17 Dec 2024 17:18:48 GMT last-modified: Wed, 11 Dec 2024 12:36:35 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lyEftG%2Bz45%2B0HT5ckLrNjryggTq52Oad3SLwSriuI%2BJoBmQgvPGJvEy2K%2F5AQXbDXeQvpIAjiutW%2BPnjOxMmcSznb6ijj%2BC2TPTvZYJLLXoZJS%2B51%2FleHtj%2BsayJZRz8b71aBhGOO8s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389317dc768c45-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1840&min_rtt=1811&rtt_var=738&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1017&delivery_rate=1425085&cwnd=215&unsent_bytes=0&cid=24dd7232c2682be5&ts=552&x=0"
2024-12-17 17:18:49 UTC	310	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 33 20 39 36 2e 37 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 69 64 3d 22 70 22 20 64 3d 22 4d 35 39 2e 33 2c 35 33 2e 38 63 2d 36 2e 34 2c 35 2e 33 2d 31 35 2e 31 2c 37 2e 32 2d 32 35 2c 37 2e 32 48 32 32 2e 35 56 39 36 2e 34 48 30 56 2e 36 48 33 34 2e 33 63 39 2e 39 2c 30 2c 31 38 2e 36 2c 31 2e 39 2c 32 35 2c 37 2e 32 73 31 30 2c 31 32 2e 36 2c 31 30 2c 32 32 2e 39 53 36 35 2e 37 2c 34 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1203 96.7"><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path id="p" d="M59.3,53.8c-6.4,5.3-15.1,7.2-25,7.2H22.5V96.4H0V.6H34.3c9.9,0,18.6,1.9,25,7.2s10,12.6,10,22.9S65.7,48
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 2e 37 68 38 2e 37 63 34 2e 39 2c 30 2c 38 2e 31 2d 2e 37 2c 31 30 2e 38 2d 32 2e 36 73 34 2e 36 2d 35 2e 34 2c 34 2e 36 2d 31 30 2e 33 53 34 34 2e 36 2c 32 32 2e 36 2c 34 31 2e 39 2c 32 30 2e 36 5a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 37 2e 36 2e 35 63 2d 32 36 2e 39 2c 30 2d 34 37 2e 34 2c 31 38 2e 31 2d 34 37 2e 34 2c 34 38 2e 32 73 32 30 2e 35 2c 34 38 2c 34 37 2e 34 2c 34 38 53 32 33 35 2c 37 38 2e 38 2c 32 33 35 2c 34 38 2e 37 2c 32 31 34 2e 35 2e 35 2c 31 38 37 2e 36 2e 35 5a 6d 30 2c 37 36 2e 37 63 2d 31 35 2e 31 2c 30 2d 32 35 2e 39 2d 31 30 2e 37 2d 32 35 2e 39 2d 32 38 2e 35 73 31 30 2e 38 2d 32 39 2e 36 2c 32 35 2e 39 2d 32 39 2e 36 2c 32 35 2e 39 2c 31 31 2e 38 2c 32 35 2e 39 2c 32 39 2e 36 53 32 30 32 2e 37 2c 37 37 2e 32 2c 31 38 37 Data Ascii: .7h8.7c4.9,0,8.1-.7,10.8-2.6s4.6-5.4,4.6-10.3S44.6,22.6,41.9,20.6Z"/><path d="M187.6.5c-26.9,0-47.4,18.1-47.4,48.2s20.5,48,47.4,48S235,78.8,235,48.7,214.5.5,187.6.5Zm0,76.7c-15.1,0-25.9-10.7-25.9-28.5s10.8-29.6,25.9-29.6,25.9,11.8,25.9,29.6S202.7,77.2,187
2024-12-17 17:18:49 UTC	487	IN	Data Raw: 2c 30 2d 32 36 2e 37 2c 31 31 2d 32 36 2e 37 2c 33 30 73 31 31 2e 39 2c 33 30 2c 32 37 2e 31 2c 33 30 2c 31 39 2e 35 2d 36 2c 31 39 2e 35 2d 36 56 35 38 2e 35 48 37 38 31 2e 36 56 34 31 2e 38 68 34 31 2e 31 56 38 30 2e 36 5a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 39 38 37 2e 35 2c 39 36 2e 35 48 39 36 33 2e 31 6c 2d 36 2e 38 2d 31 39 2e 33 48 39 32 32 2e 31 6c 2d 36 2e 38 2c 31 39 2e 33 48 38 39 32 4c 39 32 38 2e 31 2e 35 68 32 33 2e 33 5a 4d 39 35 31 2e 31 2c 35 39 2e 37 2c 39 33 39 2e 32 2c 32 35 2e 33 2c 39 32 37 2e 33 2c 35 39 2e 37 5a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 33 32 2e 35 2c 39 36 2e 35 68 2d 32 36 2e 31 6c 2d 32 30 2e 31 2d 33 36 2e 37 68 2d 37 2e 31 56 39 36 2e 35 68 2d 32 32 2e 35 56 2e 36 68 33 34 2e 34 63 31 30 2e 37 2c 30 2c Data Ascii: ,0-26.7,11-26.7,30s11.9,30,27.1,30,19.5-6,19.5-6V58.5H781.6V41.8h41.1V80.6Z"/><path d="M987.5,96.5H963.1l-6.8-19.3H922.1l-6.8,19.3H892L928.1.5h23.3ZM951.1,59.7,939.2,25.3,927.3,59.7Z"/><path d="M1132.5,96.5h-26.1l-20.1-36.7h-7.1V96.5h-22.5V.6h34.4c10.7,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49789	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:49 UTC	833	OUT	GET /images/665deae8723a9bcb12bc3165_star.png HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:49 UTC	1046	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:49 GMT Content-Type: image/png Content-Length: 5271 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598752-1497" expires: Tue, 17 Dec 2024 17:18:48 GMT last-modified: Wed, 11 Dec 2024 12:36:34 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wi3K8Lmclj207mRjj1NMwfhfrvpy%2BdwzVDzd3rLVaiq9PYPcSl7zRfKi40GUXyEo32nQ%2FcDwFPOXbktgwT53Bsu5sY4pccIgWgJ3CqRST%2Ft5lgu%2Fuw3n6NRFWb4G9QfenqT6iBpTIik%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3893186f160f3e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1643&min_rtt=1643&rtt_var=616&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=1411&delivery_rate=1777236&cwnd=213&unsent_bytes=0&cid=277e463894c3c915&ts=528&x=0"
2024-12-17 17:18:49 UTC	323	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 01 46 08 06 00 00 00 31 79 b7 18 00 00 14 5e 49 44 41 54 78 da ed dd 0f 84 5c d7 1e c0 f1 a5 84 52 4a 29 25 94 52 ca e3 11 4a 29 a1 94 50 42 a8 3b c7 23 94 50 4a 28 a5 94 10 4a 09 a1 84 47 09 25 94 12 aa 8f 12 42 49 ad b9 77 52 4b 28 21 52 4a 08 25 84 10 42 48 93 99 cb be 73 76 66 f3 ff cf ec ee 9d b9 ff 3e 5f be 9e b6 6f 77 66 ce 9f df 9e 39 e7 77 7f 67 65 05 00 00 f4 93 49 91 1d d7 0a 00 50 11 65 1e 3e 9e 14 83 f5 72 14 06 5a 03 00 76 c8 fa e5 b0 ab 2c 06 57 36 02 6b fc df f4 cf 5a 05 00 76 c0 38 0f 87 53 50 dd 74 3c 0a 9f 6b 15 00 d8 ee 6a 75 18 5e 89 c1 f4 e6 c3 81 35 fd 73 fa f7 5a 07 00 b6 41 3a b0 7a 2c a8 ce 74 90 05 00 5b 5f ad ae 86 dd 31 88 de 79 7a 60 1d dc 49 ff 5d 2b 01 c0 16 Data Ascii: PNGIHDRVF1y^IDATx\RJ)%RJ)PB;#PJ(JG%BIwRK(!RJ%BHsvf>_owf9wgeIPe>rZv,W6kZv8SPt<kju^5sZA:z,t[_1yz`I]+
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: e1 a5 18 2c 2f 6e 25 b0 a6 ff 7f fa 39 ad 07 00 4f 61 5c 84 4f b7 18 54 a7 07 59 f1 e7 b4 1e 00 3c be 5a 9d 3e 0c 70 6d 3b 81 35 fd 9c 87 06 00 e0 31 26 45 38 ba cd a0 3a 33 1c d5 8a 00 f0 60 b5 fa 46 0c 8e b7 77 16 58 07 b7 d3 ef d1 9a 00 b0 92 32 01 b2 93 3b 0c aa b3 0c 81 ec a4 d6 04 d0 7b ee fe 1e de 99 e3 61 80 79 2d d3 ef d3 aa 00 7a 4d 0c 86 67 2b 0a aa 9b 9e d5 aa 00 fa 1b 54 87 61 6f c5 41 75 6a fc bd 5a 17 40 3f 03 6b 3e f8 63 21 81 35 fe 5e ad 0b a0 77 94 45 38 b8 90 a0 ba 79 90 15 7f bf 56 06 d0 1b 66 f7 58 5d 5d 6c 60 1d 5c 75 3f 16 80 fe 6c 01 8c c2 57 8b 0c aa f7 8d af a3 b5 01 74 7f b5 ba 16 5e 7b ca 3d 56 8b f2 66 7a 3d ad 0e a0 e3 ab d5 ec c4 92 82 ea 6c d5 9a 9d d0 ea 00 3a cb dd 61 78 3b 06 bb 7b 4b 0d ac f1 f5 d2 eb 6a 7d 00 9d 64 5c Data Ascii: ,/n%9Oa\OTY<Z>pm;51&E8:3`FwX2;{ay-zMg+TaoAujZ@?k>c!5^wE8yVfX]]l`\u?lWt^{=Vfz=l:ax;{Kj}d\
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 6a f5 72 d8 e5 61 80 16 3f 34 e0 7e 2c a0 91 7b ab 47 04 a8 56 ef b5 1e 31 8a 81 1a 49 69 3a 65 1e 3e 99 8c b2 13 71 52 ae 46 6f 09 4c 9d f0 d6 46 7f c6 7e 4d fd 2b 1d 0b 58 c4 d7 fb 9f c3 4b e3 f3 e1 dd 71 1e 3e 9b 25 fc 5f 70 b5 4a ff ae 76 49 fd 9e fa 3f 8d 83 34 1e 1c 76 01 f3 06 d1 54 30 65 14 3e 48 57 26 97 79 f6 43 9c 4c 97 04 15 3e c7 4b 69 9c 6c 5c 65 1e c7 8d c2 2e 10 44 87 e1 8d c9 30 7c b4 b1 2f 9a 0f fe 57 16 83 2b 02 05 77 9e 5d 10 c7 51 1c 4f 1b e3 2a 8e af 34 ce cc 36 74 92 7f 8a f0 56 99 87 8f 27 45 76 6c f6 44 94 93 7b 2e 35 e3 60 3a ee b2 63 69 1c a6 f1 68 56 a2 cd 87 4a b9 43 25 36 f8 90 2c 77 48 06 87 4a a4 43 32 38 54 22 1d 92 01 0e 95 48 87 64 d8 f1 a1 d2 28 0c 1c 2a 91 15 1f 92 c5 79 e5 90 cc a1 12 49 87 64 70 a8 44 3a 24 83 43 25 Data Ascii: jra?4~,{GV1Ii:e>qRFoLF~M+XKq>%_pJvI?4vT0e>HW&yCL>Kil\e.D0\|/W+w]QO46tV'EvlD{.5`:cihVJC%6,wHJC28T"Hd(yIdpD:$C%
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 7d dd 73 2d b2 d3 26 00 59 71 4d d5 3c fb 41 74 e9 31 b3 72 83 6a b9 92 d5 f9 8b 9a aa d8 2c 37 a8 96 2b b9 73 cf a9 a9 8a 07 c1 75 5a 6e 50 2d 57 72 fb 5e 50 53 15 4f 06 d7 51 78 5d 2d 57 72 5b 5e 52 53 15 cf 0e ae ab 61 77 59 0c ae 9a 28 e4 9c 07 55 c5 e0 8a 9a aa 78 21 a9 9c 99 5a ae a4 9a aa a8 98 54 d6 4c 2d 57 f2 05 35 55 7f 0f ef 88 16 d8 12 e3 51 78 2f 0e 9e db 26 10 f9 64 4d d5 f1 30 ec 11 25 b0 2d 26 45 f8 50 2d 57 f2 b1 9a aa c3 b0 57 74 c0 8e 28 8b 70 40 b9 41 72 56 53 75 18 3e 12 15 50 55 70 3d 68 52 b1 f7 35 55 47 61 20 1a a0 da 3d d7 3c 1c 36 b9 d8 e3 f2 7f 9f 8a 02 58 d4 9e eb 51 93 8c bd 33 0f 5f 9a fd 58 6c 70 cd b3 6f 4d 36 f6 a8 fc df 31 b3 1e 4b da 73 cd 4e 99 70 ec fe 53 55 d9 77 66 3b 96 46 2a 8b 36 2e b2 9f 4c 3e 76 77 4f 35 3b 6d Data Ascii: }s-&YqM<At1rj,7+suZnP-Wr^PSOQx]-Wr[^RSawY(Ux!ZTL-W5UQx/&dM0%-&EP-WWt(p@ArVSu>PUp=hR5UGa =<6XQ3_XlpoM61KsNpSUwf;F*6.L>vwO5;m
2024-12-17 17:18:49 UTC	841	IN	Data Raw: c8 65 95 cb 8a 2d 05 d6 de ee ab c5 d5 fa 4f f3 96 ed eb fd 37 9b d8 4e a9 bd e4 b2 02 73 ec a9 f5 b4 6c df a9 94 66 66 04 6c 9d d4 6e 3d 2d 5b 28 97 15 f3 4f 92 1e 4d 8c db 1b 65 fb 56 c3 6e 3d 5f c1 1f e5 61 78 63 56 b6 f0 b6 5c 56 e0 e1 6d 80 7e e4 b0 de 9c 14 e1 68 d7 72 50 1b 13 60 a7 65 0b 8f f6 22 17 56 2e 2b e6 da 37 eb 70 0e eb b8 18 fc 3d 1e 85 cf 97 55 b6 af f7 01 36 95 2d 8c ed 9d da 5d 2e 2b fa bd 62 ed 66 0e eb a5 38 c1 0f d5 55 b6 af f7 01 36 b6 7b 6a ff 6e 96 2d 94 cb 8a 79 56 ac dd ca 61 5d 2b 8b 70 40 af 36 87 d4 1f 5d 4a e7 4b f3 45 af 62 8e 15 6b 07 06 7d ba 1a 7a 18 f6 ea cd 46 ef e5 ef ed c8 15 de 6b 7a 13 f3 04 d6 b6 e6 b0 96 69 f5 d0 b6 b2 7d 7d 27 f5 d7 ec 5b 52 29 97 15 dd dc 0b 6b 67 0e eb 9d 72 94 9d fc a7 08 6f e9 c1 f6 92 fa Data Ascii: e-O7Nslffln=-[(OMeVn=_axcV\Vm~hrP`e"V.+7p=U6-].+bf8U6{jn-yVa]+p@6]JKEbk}zFkzi}}'[R)kgro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49790	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:49 UTC	410	OUT	GET /images/t45.webp HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:49 UTC	1042	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:49 GMT Content-Type: image/webp Content-Length: 46850 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598752-b702" expires: Tue, 17 Dec 2024 17:18:48 GMT last-modified: Wed, 11 Dec 2024 12:36:34 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4IO%2BgtlRX9awr9RANlBQzvqDlCSSHH6jMna11UVqlLEgVU87VgiLyuTsefLXxt7pK8K47yn734%2BjMOiHgIJtAWL9a6CX6T63jIiVwos3oZtlPsANawxIhwJtDmfYhMJEkeiob58cPZs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3893186d7df3bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1959&min_rtt=1684&rtt_var=828&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=988&delivery_rate=1733966&cwnd=80&unsent_bytes=0&cid=bbcf7fc1532fefe2&ts=520&x=0"
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 52 49 46 46 fa b6 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 4e 04 00 e7 03 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X NICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: a5 af 68 4b fc 33 b2 c7 cc 26 4b 68 33 94 bc e0 9c f2 60 8d 38 ef a3 f2 39 8e 4c 9f e3 de 40 80 7a ec 1c 58 42 6a fa c0 8d 8d e0 6d 68 14 92 cc 6e f1 06 4e 06 e4 21 90 e1 12 df eb 50 65 6d d9 03 d5 70 f4 e3 39 8c b8 00 d0 f4 f7 27 cd fb 6e 69 a8 a4 6b 1f fd 13 0d 2b a7 cb 98 db 2e 5b ba 59 2f e5 8a ce f1 1b 8b 3f 44 11 e4 d8 b6 39 8a bb db 37 44 76 41 b5 b0 b1 8c 1f 3f ea 4d fc 82 15 e9 c7 0d 3c 2b ff 16 07 a2 eb db f4 20 e6 80 74 aa 08 38 0e f2 79 c3 f4 11 2e 69 1f 0e 13 9f 19 c1 79 7b fe 23 21 20 0d 34 d1 fd 09 d3 86 a2 fc 86 22 e9 fb 60 f2 6a 6b 51 01 46 ed 34 6c ec 98 eb e8 4e 4b 58 eb 90 23 65 d8 95 06 50 91 d2 2f 26 06 11 3a 38 78 87 00 98 16 3c 3d 29 bd cb 6b 5f 10 2b 25 cd db 30 79 a2 96 88 93 e4 05 a7 e5 4e ff 8f f9 cc f7 db 91 69 8e f6 33 1d f0 Data Ascii: hK3&Kh3`89L@zXBjmhnN!Pemp9'nik+.[Y/?D97DvA?M<+ t8y.iy{#! 4"`jkQF4lNKX#eP/&:8x<=)k_+%0yNi3
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: af 66 3a 42 5c 8a 3b 13 39 31 ca d0 34 1e e6 b9 ac 11 6e c2 c0 84 31 7c e8 21 a8 f6 f5 c3 65 dd d1 05 66 10 e9 66 3d bf 65 e2 ab e1 1c d9 a5 1c 4c 23 36 0e 68 ea 18 fa fa 86 5a 54 f1 fb 1e 20 7c a8 c8 56 99 a0 68 33 a9 d9 45 3c 23 bf ac 1a c0 d0 b2 43 45 9e d1 9c 32 40 f9 c0 05 91 a1 4c a8 6c bd fd 8f d6 f6 29 0c b3 56 f8 71 af d3 24 38 15 bb 96 74 94 96 68 49 12 6d bb c2 37 cd f9 88 07 ca f2 4b 3a 77 27 b4 62 8e 4a 24 b9 a4 8d ba fb 58 a9 50 15 1c c7 9b 21 b0 36 12 49 9d e3 8b b3 0e 27 55 d1 a6 f9 d9 c3 c9 81 c4 52 c9 62 11 59 6c 90 ec 5f 1c 78 85 37 2a 00 70 60 ee 9e 8e 17 58 bc 09 51 36 87 1d 87 e8 ed 42 eb 98 4b 5f 94 89 95 a1 26 6b 7a 13 4f c5 5d 25 b2 3c 09 7e b1 15 2f 11 64 18 40 83 a2 c7 c3 64 71 f9 b6 7c 35 4f 54 3a b7 5b 0b 18 38 0e 23 6f 48 9b Data Ascii: f:B\;914n1\|!eff=eL#6hZT \|Vh3E<#CE2@Ll)Vq$8thIm7K:w'bJ$XP!6I'URbYl_x7*p`XQ6BK_&kzO]%<~/d@dq\|5OT:[8#oH
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 8e 55 82 3a a2 20 3d 24 59 36 f7 92 dc 22 c5 c9 f5 26 5d 47 cf 61 38 23 f9 f0 45 f0 6d c9 1b 34 56 90 36 a4 4c 93 f1 8e cb 13 b3 ad c2 72 c0 58 b7 a2 20 0f 0d 52 80 bc 65 e8 ff 2a 4c a3 a1 e9 25 a2 cf ef 9b 19 a3 2e c9 3e 22 01 d7 20 91 50 cf d3 1e 7b 01 ae f8 fc 85 82 24 1d b3 81 b3 54 a5 c4 aa 66 51 96 f9 7c cd cf 08 7f 4a d6 ea 4a aa 74 0c 7c e5 01 83 c3 0d bc 3c 14 79 52 f1 4f aa 0c cd 30 62 9d 58 cd 00 19 70 2f c9 f5 92 f3 47 c9 af 1c 57 56 ed 4b 77 db 7e 25 9a a9 d0 d5 52 aa 6c 9e c6 9b 59 0c fb 60 e3 55 47 e0 48 de d3 c5 56 a3 69 cf ab 5f 4e 26 de 31 5c 46 ef b1 8c 8a 37 ad 63 48 c9 1c a2 b8 9b 66 90 4b 7e 8a e3 fc 36 48 51 61 46 1d c0 4f e3 44 40 5f a9 58 c9 71 55 3c fc 99 bc 53 4d b2 ee c3 f4 6e 26 7c ee c2 92 05 73 32 3d 47 64 b5 c7 10 79 c9 e7 Data Ascii: U: =$Y6"&]Ga8#Em4V6LrX Re*L%.>" P{$TfQ\|JJt\|<yRO0bXp/GWVKw~%RlY`UGHVi_N&1\F7cHfK~6HQaFOD@_XqU<SMn&\|s2=Gdy
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 8e 5d ca cc 2e ba 76 a5 03 ba 10 7f 9f 90 dc 5b 58 7d b0 db c1 26 db c6 84 c8 7f 9e cd d9 c1 c6 07 e3 33 df 25 6c 70 60 e3 10 3d e4 2e 9d 4b be e6 20 4f 3d 77 d0 01 b9 a5 60 d9 e4 a1 33 50 1e 18 de f5 71 e7 a0 55 a5 ee 30 ab 37 49 4d 90 c3 06 a9 45 87 5d d6 67 36 e0 26 b9 d6 9d c9 9e fa d1 1c cc 9c 1e 0b 07 a1 6a 76 39 61 73 5a 64 9d f6 d4 1e 79 92 e7 4b 9a 1f ba 25 bc 40 94 d0 7a ff 89 3f 65 c6 f7 fe c5 7f 07 7e 7a eb 70 95 95 b2 b3 f9 c9 f8 20 40 17 39 61 8c 9c b3 c4 14 36 f2 2b 02 02 84 07 a7 e6 7e 67 f7 7e 92 d2 65 8f 8b b9 3e 44 bc 3c 39 46 f8 59 e2 4d e7 38 59 c6 d9 0b 6b 67 66 15 cf 80 f3 87 59 b3 13 c9 3d b5 0a 6f e1 82 38 b6 fe ae 73 21 f9 99 b0 6d 72 48 b3 b3 3e b7 0a 4c 8a d2 41 cc f4 8a 69 70 78 07 8d f1 b3 be 35 2c 03 28 33 41 c2 a3 bc f3 65 Data Ascii: ].v[X}&3%lp`=.K O=w`3PqU07IME]g6&jv9asZdyK%@z?e~zp @9a6+~g~e>D<9FYM8YkgfY=o8s!mrH>LAipx5,(3Ae
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 2d 7c 9a 11 f1 c3 ba d2 83 e7 34 16 27 21 36 d2 52 4c 89 1d 57 d9 59 fe 79 cd cd ed 00 9f e0 51 67 22 24 70 59 5f c9 06 61 f0 b8 b8 11 ac 3a 02 7e 3e 4f 82 02 ea b7 26 9b 95 01 9d 3e bc 2f 81 53 24 e2 b1 cb fb 63 6b 81 c4 c5 cb 68 e3 09 17 be a7 b8 74 d4 89 6d 89 f7 c5 1b 20 33 ae 4d b2 77 53 bc 75 33 55 7f 3f 38 d5 b2 65 a7 96 4e 88 6b 76 41 1b 2d 70 eb e9 a7 8c cd f3 5d 14 71 e4 2a ca 86 66 10 00 bd 14 8a a6 47 7e 7f c7 fb 97 97 41 1a eb ae 4f 84 3b f9 45 fb 78 97 78 99 a5 eb 71 17 a8 fa 8e 0a fe 63 26 99 f3 15 78 4c f0 3d 52 f9 3a 74 b0 2d 0d d9 d2 59 be 45 83 66 02 58 25 9f 6b a6 82 f1 e5 56 d5 9f 21 e7 31 f4 6e 1c 26 f8 db 01 0f 14 1c f5 74 c1 f8 4a cd 16 58 79 a1 ee 8c e4 1a 33 26 63 c6 b6 bf b2 4e de 52 56 57 d9 21 80 9d d5 91 f7 a8 be 01 4a a2 2c Data Ascii: -\|4'!6RLWYyQg"$pY_a:~>O&>/S$ckhtm 3MwSu3U?8eNkvA-p]q*fG~AO;Exxqc&xL=R:t-YEfX%kV!1n&tJXy3&cNRVW!J,
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 1d f0 37 eb e4 8f c4 92 87 6b b0 18 a0 fd 04 d8 9e d3 46 87 16 c9 c0 e0 3e 41 bb 65 fe 6a 5a 1b 6a 6c de ff 9a 88 51 ed a8 5e 22 c4 ed 9b 46 02 7c 80 be fd 78 72 e3 71 35 35 ec d8 44 12 f3 17 1d 20 33 48 17 f3 b1 0e cd 21 a7 cb 2b 6e e3 e2 2e 04 e3 c9 a0 a3 2e 15 d6 59 3c 89 36 5c c0 1b 86 f6 6f dd b1 cb d7 b5 7c 8a 03 e1 9d f7 09 37 4e 55 d4 4d 42 43 01 4e ca 3d 5c a8 ac aa 7a d6 5f 97 93 e8 63 39 16 79 9e 44 4b 92 81 27 de 0f 6d 02 e1 b9 8b 7e ea 73 5b 4a 56 8c 11 60 f7 97 2e 9c cb 3e 92 7d e5 e8 44 67 52 d1 26 7e d1 1b 02 d2 92 4f 11 c8 b1 9e f6 51 ab 71 ec 64 b6 33 5f 10 a0 c0 8e 36 7a 26 ac 9c 07 f9 66 6b 18 57 f5 91 1a dc c7 62 ae cd fe 37 d0 51 25 d9 4f 06 28 ea 2b 88 05 5e 06 53 22 78 76 5b 82 3e 5e 67 78 33 b5 2f 8a f5 4d 69 5c e0 b6 e5 fa 5c ea Data Ascii: 7kF>AejZjlQ^"F\|xrq55D 3H!+n..Y<6\o\|7NUMBCN=\z_c9yDK'm~s[JV`.>}DgR&~OQqd3_6z&fkWb7Q%O(+^S"xv[>^gx3/Mi\\
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 1b 23 67 7b 84 1f 05 cc 5a 59 00 c6 46 08 de 86 36 b8 20 e7 51 f7 78 eb 63 99 4b cf 35 97 84 36 d4 ef a1 c6 44 56 76 d4 e2 b4 16 99 ea c9 56 a2 9d a2 b7 b1 73 10 40 3a a2 9f 5c 4c 09 11 37 12 23 0d 9e 44 61 bf fc 6e 81 25 a0 fd 12 ae ba 91 ee 46 a7 f2 dd 76 9b a0 af bf f5 5f 1e 89 17 93 ed e2 b0 0c f0 3b 83 8c 95 a5 d9 ba 31 31 d9 25 7e 06 c8 7c 53 13 23 91 33 71 21 6c 36 b1 d3 b6 f3 43 ac d1 99 3d a3 18 bb af 3a 9d 40 eb 75 2d 4a b4 6a 96 5a 2e 9e 56 99 f5 79 90 d5 59 c8 8f af 4e 12 92 cf 45 ca e6 bc 31 a5 8d 52 d0 fb 56 dc fa c7 a2 a0 35 52 02 00 76 70 14 8d 39 7c f2 21 e9 ac 99 c3 a7 cf 99 cc 84 8c d8 d3 bf 48 0e 48 b3 29 73 5e 42 7a ff c7 41 35 15 d4 37 db 15 df 34 ed 6b 5e eb 3c e2 e7 ba e4 de 56 19 06 2f ba 4c 28 a7 e7 a7 e7 e8 a4 d8 ef 85 85 84 b0 Data Ascii: #g{ZYF6 QxcK56DVvVs@:\L7#Dan%Fv_;11%~\|S#3q!l6C=:@u-JjZ.VyYNE1RV5Rvp9\|!HH)s^BzA574k^<V/L(
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 1c c9 ee 2a 00 7c 3e fd 8e 8a 66 75 f2 61 b5 02 a0 f6 4e 3c 82 13 f7 aa 3a 46 fe 42 4e 3b 5e 31 29 5c 7b 40 44 28 3c b1 3a 6f df 4f 63 05 2f 92 e4 86 b8 d3 f3 00 72 a6 12 5b ec 40 5a 23 3c 70 03 9e bb 1d 14 35 48 ee bb 22 ad 3e 28 a1 d1 f9 84 55 3a 4f 07 fb a2 dc 18 07 6a ac ca 4f 12 cc 36 71 8e 79 bd 62 fb 84 0c 2c 7e 30 12 28 c9 9c 31 b7 9e e5 ad 3f a0 f6 3e 7e 90 6f 6f a7 84 60 61 9f cd 07 c6 37 2c 3d cf 3c 6f 83 c0 46 b4 6d e8 e1 49 f4 f2 2a f2 ea 0f 85 9c aa cf 33 db f2 09 39 e2 af 88 e5 4f 11 78 78 c9 3b b1 56 28 3f 9b d1 e9 c2 3c 4c 13 76 4e cc 01 e1 1a ea 5e cd 75 62 63 0b ef bf e1 36 a2 62 52 49 60 4a b7 84 5d 43 d6 8d 6c c5 b2 26 25 47 e4 e6 f5 18 50 5b 4a b5 9b 28 7f be a5 ca 48 81 a4 28 e0 62 72 49 c1 a4 93 f1 97 11 19 29 14 0e 50 e2 71 a2 42 Data Ascii: \|>fuaN<:FBN;^1)\{@D(<:oOc/r[@Z#<p5H">(U:OjO6qyb,~0(1?>~oo`a7,=<oFmI39Oxx;V(?<LvN^ubc6bRI`J]Cl&%GP[J(H(brI)PqB
2024-12-17 17:18:49 UTC	711	IN	Data Raw: de 7b 40 aa e1 7a 1b 69 5a ee 6c 61 3d ac 5d ad f5 7f a9 6f 33 b5 d1 b8 45 5a 04 9f b5 d7 57 c2 69 e6 7a 10 34 d7 42 a6 fc 42 60 96 37 0b 29 99 1f e0 c6 d9 53 19 02 fa 0b 5b e9 11 20 43 fa 83 66 96 df 23 84 29 47 8b 05 ea 65 ca 9e f3 41 8e 65 b5 7c 5b eb c6 f9 8e 55 da 6f 86 6f 57 f7 f9 31 24 22 2f f9 e3 51 ae 16 e2 45 f0 da 0c 67 00 3a 74 c1 fe 9c 00 6d f3 b9 21 45 3d 6a 8c 87 c6 b5 ec b1 44 60 c5 f2 3f d6 6a b7 57 c6 a2 47 5a 3e e9 21 17 dd 4a f5 0e 0b 4a e8 db 7b 29 90 2d ae c1 32 70 69 dd 8f 99 eb ab 5b 06 a4 59 3e 26 f7 b6 f4 f3 04 25 0e 66 f6 ed b3 62 b8 bf 2e 7f d4 d1 e3 9b 26 fa 35 78 f8 a4 cc 12 98 91 82 97 ca 74 ae d4 5a 91 ca eb 02 02 39 61 16 4e 65 f5 bd 26 9d 59 06 75 b4 ed 07 23 ca 42 6b bc f9 1a 0f ed 7d 28 dd 96 45 4e 20 2c 5b 0a 4f b1 d2 Data Ascii: {@ziZla=]o3EZWiz4BB`7)S[ Cf#)GeAe\|[UooW1$"/QEg:tm!E=jD`?jWGZ>!JJ{)-2pi[Y>&%fb.&5xtZ9aNe&Yu#Bk}(EN ,[O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49791	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:49 UTC	839	OUT	GET /images/665deae8723a9bcb12bc31b2_blissy-box.jpg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:49 UTC	1050	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:49 GMT Content-Type: image/jpeg Content-Length: 59793 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598752-e991" expires: Tue, 17 Dec 2024 17:18:48 GMT last-modified: Wed, 11 Dec 2024 12:36:34 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cEtpL4eeHp6DpCM8VodKZpT8GlhbISIJK5TeAunS5o0gs2B%2BBU7yPhJ7wTRIpZUe5ODlT9e%2B9NaC2Vj4Xn7XCBKjcj0xFKLUTprpy1LgDjvmR6o%2BcAfOvKS0jNR2ltQ6%2BAhwX6O1l%2B4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389318ce5bc359-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1674&min_rtt=1662&rtt_var=648&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1417&delivery_rate=1658148&cwnd=234&unsent_bytes=0&cid=71ac873a6b046e5b&ts=529&x=0"
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 4b 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 39 07 00 00 47 c1 00 00 7a 65 00 00 e9 8f ff db 00 84 00 03 02 02 02 02 02 03 02 02 03 05 03 03 03 05 05 04 03 03 04 05 06 05 05 05 05 05 06 08 06 07 07 07 07 06 08 08 09 0a 0a 0a 09 08 0c 0c 0c 0c 0c 0c 0e 0e 0e 0e 0e 10 10 10 10 10 10 10 10 10 10 01 03 04 04 06 06 06 0c 08 08 0c 12 0e 0c 0e 12 14 10 10 10 10 14 11 10 10 10 10 10 11 11 10 10 10 10 10 10 11 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c2 00 11 08 03 20 03 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 eb 00 01 01 01 01 01 01 01 01 01 00 Data Ascii: ExifII*DuckyK&Adobed9Gze
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 28 50 00 00 00 00 00 00 00 00 00 00 00 00 20 00 10 a0 00 0f c1 94 a6 cd 1a 05 29 4a 68 a5 29 4a 52 94 1a 3c b8 d6 b1 af a4 9f a1 af b0 9e c4 d2 f3 21 95 e5 18 30 52 94 a5 00 00 68 1a 28 29 13 99 ca b1 58 4e 75 83 95 9c 6b 99 28 50 00 00 00 00 00 00 00 04 07 a6 3d 87 be 3d e7 ba 3d 27 48 e0 bf 81 dc f3 50 03 f0 46 8a 68 d9 4a 52 83 45 34 68 a0 a5 29 4a 53 c3 cf 7e 8c 5f 6d 9f 7a be fb 3e b0 61 72 72 97 91 82 14 a6 8a 52 82 94 d0 29 4a 68 d1 4d 15 36 6c d5 9a 29 0c 9c e5 e5 67 12 d6 4e 35 cc 84 4c 28 86 8b 64 2a ee 3a 9d 8d 9d 0e e7 a0 f5 c7 a9 3b 1d 2a 03 07 13 ca bc 0d 65 f8 2e 93 8d 40 0f c0 9a 29 b3 45 29 4d 03 45 34 68 a0 a5 29 4d 14 f9 9c ba 7a e4 f7 2f de 4f b7 67 b1 2a f2 39 cb c8 c1 09 16 a9 4a 68 a0 1a 29 a2 9a 34 68 d1 4e 89 a0 50 52 d4 11 6a 89 Data Ascii: (P )Jh)JR<!0Rh()XNuk(P==='HPFhJRE4h)JS~_mz>arrR)JhM6l)gN5L(d:;e.@)E)ME4h)Mz/Og*9Jh)4hNPRj
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 4d 1a 34 52 80 68 a0 a0 a6 eb 51 aa a6 ce 86 8a 68 a9 57 49 b2 9d 2b 69 d0 ec 75 3b d7 7a d1 a0 43 26 0e 51 e7 3c 91 e3 5f 1c 79 65 f3 9e c4 f8 9d f2 00 00 08 0f e7 46 8d 1a 34 52 94 d1 a2 94 a0 d1 a3 66 8f 0e 35 9c 6f d4 9f 69 3e e5 9e f0 71 97 91 93 06 4c 46 48 65 40 a0 d1 a3 49 a2 ae 92 95 49 4a 53 45 00 d1 4d d6 a3 55 d0 e8 6c d1 4a 53 69 a3 47 5b 3a 1d 0e a7 53 bd 76 ad 94 18 32 73 38 c7 9e 3c 67 8e 5f 1a f9 e3 91 e8 d6 7e 47 58 00 00 08 0f e7 26 8d 1a 29 4d 14 d1 4d 14 a5 29 a3 60 f9 bc ba 77 8f 7a 7d c3 ec 57 a5 32 bc 23 06 0c 12 30 65 72 64 a4 06 81 a2 9a 29 a3 45 42 d4 2e 93 4a 41 a5 a9 4d 9b 35 5d 0d 9b 36 68 d1 4d a5 3a 1d 2b a2 76 3b 1d 8e d5 d2 b6 68 18 32 71 38 c7 94 f1 c7 8a 5f 24 be 63 ac 71 eb 8f 06 c0 00 00 80 fe 70 68 d1 4d 14 a5 34 68 Data Ascii: M4RhQhWI+iu;zC&Q<_yeF4Rf5oi>qLFHe@IIJSEMUlJSiG[:Sv2s8<g_~GX&)MM)`wz}W2#0erd)EB.JAM5]6hM:+v;h2q8_$cqphM4h
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 6d 9e db 3b 99 21 98 a4 55 92 5c 99 21 92 10 c9 93 24 32 45 82 21 23 29 02 e4 c1 82 19 8c 56 4c 90 8a 05 41 56 d8 ad 47 4a f4 1e bb 3d e7 be bd e9 ec b3 d2 77 3b 56 eb 31 c4 e0 70 8e 07 05 c1 c4 47 b0 fb 76 74 34 53 45 05 28 05 25 0f f2 e7 48 05 05 05 3d 11 fa ce 5a ed 2f 03 9a e2 3c d1 eb 8e a9 ee d3 de 7a 93 a5 48 81 75 62 04 21 9a 19 24 42 10 c9 17 26 0c 91 64 85 a5 93 26 0c 99 30 b8 31 18 31 59 32 a2 25 58 80 28 6c ed 5e 93 dd 67 be be 8a 7d 0b 3d 47 7a ec 74 aa 73 38 c7 9c e0 70 39 47 05 4b ee 93 ec 59 d2 b6 68 a5 29 41 40 00 ff 00 2d 75 94 14 14 a7 d7 c5 fd 7f 3b c1 7c 87 13 0b c2 3a 65 b3 a5 7d fb 3d 09 4d 1b 06 8d 55 20 06 41 08 66 21 95 cc 64 86 6b 20 92 d4 a6 84 64 c1 83 06 0c 18 97 9d 9c d7 04 20 32 42 24 58 2b 67 6a f6 59 ef 3e 85 7d 24 f6 d9 Data Ascii: m;!U\!$2E!#)VLAVGJ=w;V1pGvt4SE(%H=Z/<zHub!$B&d&011Y2%X(l^g}=Gzts8p9GKYh)A@-u;\|:e}=MU Af!dk d 2B$X+gjY>}$
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 23 89 c4 e1 2f 9e 3c f1 e7 97 cb 1e 59 7c 92 f9 4f 34 79 a3 cd 2f 98 f3 2d b3 d9 67 d4 d6 7e 8e a7 d0 d4 fb 15 ee b3 d3 5d 8e 87 43 55 b3 a1 b0 60 ef a9 f7 b7 3e dd 99 5e 20 d4 7d 43 b1 01 01 00 00 80 f4 68 80 a8 21 62 55 12 42 d4 01 00 20 00 80 90 21 08 42 10 10 84 88 42 19 21 93 26 63 2b 83 9c 73 39 1c 25 e0 70 8e 11 c1 78 a7 13 94 bc 23 cd 2f 9a 5f 97 67 f3 af 4e 11 ac ea e1 9c 5c 66 e7 17 12 fa ac fa 75 f6 b5 9f b7 b9 f4 6c f6 1d 97 66 ec e8 75 ae b5 e9 b3 ea ea 7b 6b 9a 45 f4 47 da ae 84 04 04 00 00 71 b3 e8 da 05 08 01 49 14 00 20 00 02 00 09 0a 44 a4 08 08 08 48 54 88 40 42 10 10 91 08 64 c9 93 06 25 e6 73 8e 47 28 e2 be 0b 3f 82 75 9f 1a b2 42 10 c9 12 af 4c 2e 6d c5 df 3d 7a 72 f4 66 fa e3 e8 5b ee b3 e8 6a 7d 1d cf ad bc fd 7b 3d 07 7a d4 6a 5f Data Ascii: #/<Y\|O4y/-g~]CU`>^ }Ch!bUB !BB!&c+s9%px#/_gN\fulfu{kEGqI DHT@Bd%sG(?uBL.m=zrf[j}{=zj_
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 10 84 21 08 48 e3 9d 7c 3e 7b fc c4 d7 e4 a5 fc ac 7c 23 fb 77 4e 7f b5 e9 8e a7 d8 b3 74 00 00 08 14 83 f3 09 fc 37 3d 2d 74 4e 96 68 a6 97 f8 76 2c 8a 0a 29 28 00 52 14 10 00 50 a4 40 28 01 48 00 20 05 15 25 0b 12 a8 04 2d 28 42 d1 1a d4 fb 3b 9f a4 4f d2 dc fe 9b 53 f4 89 fa 3b 3f 41 2f 79 40 00 01 08 42 2c 29 a4 a6 62 1b a0 00 00 08 01 0f e0 72 fc 15 e8 75 4d 56 8a 68 fe 1f 8d 00 80 ab 28 00 00 01 0a 00 02 90 4a 14 91 6d 88 52 52 00 b0 20 00 00 05 25 04 00 02 d2 a0 a0 e9 5f 73 79 fd 25 9f a3 b3 f4 69 fa 2b 3f 43 5f a4 93 d1 34 00 80 00 00 00 00 08 00 07 e1 93 f8 de 7a 74 ad a7 43 56 52 9a 3f 88 e3 41 01 48 14 05 04 28 00 00 52 00 0a 08 94 42 82 25 58 02 59 55 04 00 04 14 8a 40 14 80 b2 16 50 02 92 80 a2 c9 ad 4f b5 b9 fa 44 fd 36 a7 e9 6c fd 21 fa 3b Data Ascii: !H\|>{\|#wNt7=-tNhv,)(RP@(H %-(B;OS;?A/y@B,)bruMVh(JmRR %_sy%i+?C_4ztCVR?AH(RB%XYU@POD6l!;
2024-12-17 17:18:49 UTC	1369	IN	Data Raw: 22 fe cb 53 f5 9a 9a 34 9a 34 68 d9 aa d1 a3 f9 2c a9 0a a4 59 26 ad 84 a0 8a 12 00 29 00 00 16 00 04 00 a8 20 40 01 05 41 00 08 01 00 20 20 85 08 20 4a 00 41 10 a4 15 09 00 16 58 88 02 c4 11 49 01 16 1f b1 d4 fd 66 a5 36 69 36 6a b4 68 d9 a3 f9 2c 04 50 00 0a 10 b0 a8 52 00 85 04 0a 4a b0 80 01 0a 12 00 82 90 15 04 08 08 00 20 04 00 80 02 02 08 50 80 80 10 44 a1 22 00 14 40 91 49 28 23 2b fb 1d e7 f5 75 4d a6 d7 46 93 55 a3 66 cf e4 b0 00 a0 4a 09 56 42 89 56 21 50 14 44 aa 44 52 14 82 4a a0 00 90 02 a4 01 29 00 01 01 08 00 04 04 04 29 00 20 89 40 42 00 40 09 00 45 04 95 02 c4 12 07 eb f4 fd 5e a5 4d 9b 34 68 dd 68 da 69 7f 93 40 a4 05 00 02 a8 99 85 b6 45 49 56 02 92 92 92 14 80 29 0b 0a 41 02 0b 0b 21 52 29 00 00 80 84 29 05 48 02 00 40 01 00 20 21 01 Data Ascii: "S44h,Y&) @A JAXIf6i6jh,PRJ PD"@I(#+uMFUfJVBV!PDDRJ)) @B@E^M4hhi@EIV)A!R))H@ !
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 82 92 17 e9 49 a2 08 26 a9 e2 51 54 92 92 52 6a 49 49 0d 52 de 5f 5f 39 79 6a bb 02 08 59 42 da 68 aa 2f 9d 7e 3a 08 20 9a 27 8d 45 24 a4 d4 9a 92 14 b5 12 4a eb e6 e5 2a 63 17 52 08 5b 42 c4 48 e9 21 7c 9b f0 9f 8e 82 08 27 05 45 52 4a 49 49 a9 25 3e e4 96 8b 1e 73 21 7d 20 5b 2d a1 66 22 0a 2f 97 71 fc aa 08 20 82 70 15 45 52 4a 4d 49 29 22 26 4a f9 d9 ca b9 c4 b4 5a 42 da 68 a2 e8 bc 14 fa 02 68 82 08 20 9e 35 24 a2 a9 25 26 a4 89 16 90 bc b5 5d f3 77 65 4c 22 44 b5 12 ca 10 fb 0a 3f 11 fc 4e 3e 8f a3 e8 e3 f8 9c 4e 22 08 20 9e 35 14 91 25 24 48 53 ee b1 fe 96 fc e5 f5 79 21 04 2c c4 b6 82 68 ab c3 7d 1f c6 e3 8e 3f 8d c7 e3 a0 82 09 e3 51 49 12 24 2a 92 52 08 eb 92 b4 d9 f3 6a ac 89 ea 44 b4 85 a4 21 a2 8a bc 77 1c 7d 1c 7f 13 8e 38 fe 04 f0 3f 89 34 Data Ascii: I&QTRjIIR__9yjYBh/~: 'E$JcR[BH!\|'ERJII%>s!} [-f"/q pERJMI)"&JZBhh 5$%&]weL"D?N>N" 5%$HSy!,h}?QI$RjD!w}8?4
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 70 8c 84 f0 2a 0a 84 c5 d3 1d 5a 7c 74 45 55 da bb 6a 91 49 92 24 84 a2 4a 02 5b 49 4e 76 b0 e2 2f b3 7f 71 69 13 ab 87 21 6d 6d 93 3f 5b b5 4c 8e d7 b7 a0 98 16 50 4c 68 a0 96 a2 83 44 a5 0f 44 1d 0a d0 ea 1d 41 d5 74 5b b0 89 ee 10 eb 9d 73 aa 22 d4 44 4f 22 da b1 49 49 48 b1 29 16 02 c0 58 12 81 3b 64 a0 36 91 91 1b 8a 5b bc 5b bc 42 f1 6e e9 09 b8 83 0c 2a 12 26 28 85 a5 44 58 fa a7 17 13 0f 23 3a f6 d7 b2 63 6d 88 a4 89 0a 82 c4 58 97 11 63 1b 99 77 52 dc b2 15 49 e7 5f 81 fb 5c 84 17 79 44 21 bc d8 52 1b 9e 32 91 ce b4 47 2c f7 53 3a d7 04 bd 31 2f cc eb 4c ea 4c ea 22 0b b8 e0 c0 5d eb 0e 24 b7 c4 17 76 9c 84 cf 72 39 8e 26 40 97 88 c9 c8 c9 10 eb 41 0f 72 87 b8 41 2e b9 59 51 50 e3 8f c3 6d 18 61 86 18 62 91 60 2d b2 76 c9 5a 25 68 5b 65 23 11 56 Data Ascii: pZ\|tEUjI$J[INv/qi!mm?[LPLhDDAt[s"DO"IIH)X;d6[[Bn&(DX#:cmXcwRI_\yD!R2G,S:1/LL"]$vr9&@ArA.YQPmab`-vZ%h[e#V
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 91 86 18 61 86 29 29 29 28 27 45 b8 77 1e f3 3d e3 26 82 82 82 85 92 df c2 cb c5 18 62 91 86 29 18 a4 a4 a4 a4 45 9a 09 7a f2 09 93 74 f7 0e 59 8d bc 9b 89 85 7e d2 c3 27 73 b4 47 74 dc a2 47 78 ce 13 76 dc 94 c2 cc dc a5 2c 4e a2 59 e1 66 e5 c3 0b 1a e5 c9 5d b9 e6 d8 6f 2c c3 0c 30 c3 0c 31 dd 9b f2 65 4b d3 45 d3 6f c4 4b 65 db f8 bb 9d cc ac 0b 98 cb 63 1f 0b 0b 1a c6 06 35 e8 ce 30 ad 86 18 62 91 86 18 61 8b 97 23 66 1d 87 0e be f9 fa eb 07 eb 71 cf d7 e3 9e c7 1c 4c 4c 74 12 d5 b8 f1 3b 83 3b dc 64 a7 d6 bb b7 7f e8 45 7d 35 61 8b 39 39 16 12 5b b6 5c 8b 79 cd 77 dc d8 bd 7e ed cb 39 93 86 42 d3 91 ef b7 3b a9 85 88 b2 8c 36 cc ad c3 70 d9 ba 13 ff 00 e6 f2 61 62 76 e8 9d 25 25 03 21 29 ae 4d ce c3 46 df bc 86 ed 9f ec 31 25 ea bf 59 ee 3d e9 36 ac Data Ascii: a)))('Ew=&b)EztY~'sGtGxv,NYf]o,01eKEoKec50ba#fqLLt;;dE}5a99[\yw~9B;6pabv%%!)MF1%Y=6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49792	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:49 UTC	457	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:49 UTC	764	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:49 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Mon, 16 Dec 2024 06:12:29 GMT ETag: "675fc4cd-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rinDX9%2Fg%2Fa%2Fi4lLJnDYGlcpd39U7oaxI1sYXUdAk94owyt3PolMGwTxnce58aT1Upklnq%2FGu6r4DWt24E1nwIyKLylG6Zqm%2F4OGhxw21ExavhMBujxbSebxFYgDZAK6aZsqDl%2BDqRa0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389318e8ba8cdd-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 19 Dec 2024 17:18:49 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-12-17 17:18:49 UTC	605	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-12-17 17:18:49 UTC	634	IN	Data Raw: 74 6f 3a 22 2b 6e 28 6f 2e 68 72 65 66 2c 61 2b 6c 2e 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6c 29 3b 61 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 64 2c 6f 29 7d 7d 63 61 74 63 68 28 68 29 7b 65 28 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b Data Ascii: to:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49793	104.21.13.162	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:49 UTC	578	OUT	GET /scripts/push/script/64d5p99gj0?url=majorleagueprices.icu HTTP/1.1 Host: trk-quantivex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:18:50 UTC	1346	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:50 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: 0 Cache-Control: max-age=14400, must-revalidate X-XSS-Protection: 1; mode=block Pragma: no-cache X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 1558 Last-Modified: Tue, 17 Dec 2024 16:52:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GQZGaQEtE4VQyzBwjvMdg7%2FXmKxtjfYFLip0%2FP3Wo08Q6eRXncOWFvAEr8D0tXjOMWi98aXDHDALZoTdUbyVTSNAeJdyPCagIIi%2FMzp3hbKQIhPMc4MSCeVmZwDEnCHvNsF8lA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-17 17:18:50 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 33 38 39 33 31 61 63 63 37 33 34 33 65 65 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 30 36 39 26 6d 69 6e 5f 72 74 74 3d 32 30 36 32 26 72 74 74 5f 76 61 72 3d 37 37 39 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 33 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 35 36 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 34 31 36 31 30 30 26 63 77 6e 64 3d 32 33 30 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 36 32 65 65 34 66 30 37 64 34 32 Data Ascii: CF-RAY: 8f38931acc7343ee-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2069&min_rtt=2062&rtt_var=779&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=1156&delivery_rate=1416100&cwnd=230&unsent_bytes=0&cid=62ee4f07d42
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 31 66 63 63 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 73 6d 50 75 73 68 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 6c 69 63 4b 65 79 3d 22 42 47 56 69 4e 4a 37 4c 51 65 4e 75 32 77 4b 5a 71 69 49 79 6a 44 56 74 45 48 4e 79 78 55 4e 68 77 4c 5f 4a 4e 62 49 59 7a 62 61 6b 5f 35 5f 47 6c 30 52 6a 31 78 6f 44 5f 4f 41 59 41 61 6c 76 64 77 64 4e 41 53 6e 4c 71 70 74 76 38 48 4c 6a 2d 74 43 44 63 6f 4d 3d 22 2c 73 6d 50 75 73 68 53 69 74 65 49 64 3d 22 71 35 65 6a 77 38 6a 34 67 30 22 2c 73 6d 43 6c 69 65 6e 74 49 64 3d 22 36 34 64 35 70 39 39 67 6a 30 22 2c 73 65 72 76 69 63 65 57 6f 72 6b 65 72 3d 22 2f 73 65 72 76 69 63 65 2d 77 6f 72 6b 65 72 2e 6a 73 22 3b 6c 65 74 20 73 6d 50 75 73 68 44 6f 6d 61 69 6e 3d 22 70 75 73 Data Ascii: 1fcc'use strict';const smPushApplicationServerPublicKey="BGViNJ7LQeNu2wKZqiIyjDVtEHNyxUNhwL_JNbIYzbak_5_Gl0Rj1xoD_OAYAalvdwdNASnLqptv8HLj-tCDcoM=",smPushSiteId="q5ejw8j4g0",smClientId="64d5p99gj0",serviceWorker="/service-worker.js";let smPushDomain="pus
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 2e 73 6f 75 72 63 65 4f 6e 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 6f 6e 65 2c 62 2e 73 6f 75 72 63 65 5f 6f 6e 65 29 2c 61 2e 73 6f 75 72 63 65 54 77 6f 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 74 77 6f 2c 62 2e 73 6f 75 72 63 65 5f 74 77 6f 29 2c 61 2e 73 6f 75 72 63 65 54 68 72 65 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 2c 62 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 29 2c 61 2e 73 6f 75 72 63 65 46 6f 75 72 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 66 6f 75 72 2c 62 2e 73 6f 75 72 63 65 5f 66 6f 75 72 29 2c 61 2e 73 6f 75 72 63 65 46 69 76 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 Data Ascii: .sourceOne=setIfNull(utmObj.source_one,b.source_one),a.sourceTwo=setIfNull(utmObj.source_two,b.source_two),a.sourceThree=setIfNull(utmObj.source_three,b.source_three),a.sourceFour=setIfNull(utmObj.source_four,b.source_four),a.sourceFive=setIfNull(utmObj.s
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 2c 22 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 2c 76 65 72 73 69 6f 6e 29 2c 61 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 73 75 62 73 63 72 69 62 65 28 7b 75 73 65 72 56 69 73 69 62 6c 65 4f 6e 6c 79 3a 21 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 3a 62 7d 29 7d 22 64 65 6e 69 65 64 22 3d 3d 3d 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 70 65 72 6d 69 73 73 69 6f 6e 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 64 65 6e 69 65 64 5f 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 64 65 6e 69 65 64 5f 69 6d 70 72 65 73 73 69 6f 6e 22 2c 76 65 72 73 69 6f 6e 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 Data Ascii: subscribe_prompt","subscribe_prompt",version),a.pushManager.subscribe({userVisibleOnly:!0,applicationServerKey:b})}"denied"===Notification.permission&&logPushEvent("denied_impression","denied_impression",version)}).catch(function(a){console.error("Service
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 2e 6c 6f 67 28 22 74 61 62 6f 6f 6c 61 55 72 6c 20 66 65 74 63 68 20 65 72 72 6f 72 22 2c 61 29 2c 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 74 61 62 6f 6f 6c 61 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 20 57 6f 72 6b 65 72 20 45 72 72 6f 72 22 2c 61 29 2c 70 75 73 68 4c 6f 67 67 69 6e 67 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 73 75 62 73 63 72 69 62 69 6e 67 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 75 73 68 5f 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 69 73 65 28 29 7b 72 65 74 75 72 6e 20 6e 61 76 69 67 61 74 Data Ascii: .log("taboolaUrl fetch error",a),logPushEvent("taboola_request_error",a,version)})})}).catch(function(a){console.error("Service Worker Error",a),pushLogging&&logPushEvent("error_subscribing",a,version)})}})}function push_subscribe_promise(){return navigat
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 68 4c 6f 67 67 69 6e 67 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 73 75 62 73 63 72 69 62 69 6e 67 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 49 66 4e 75 6c 6c 28 63 2c 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 6e 75 6c 6c 3d 3d 3d 63 7c 7c 22 22 3d 3d 3d 63 3f 61 3a 63 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 61 2c 62 2c 63 29 7b 6c 65 74 20 64 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 3b 22 7b 7d 22 21 3d 3d 64 26 26 28 62 3d 64 29 3b 6c 65 74 20 65 3d 7b 7d 3b 70 75 6c 6c 55 72 6c 50 61 72 61 6d 73 28 65 29 2c 65 2e 6d 65 73 73 61 67 65 3d 62 2c 65 2e 76 65 72 73 69 6f 6e 3d 63 2c 65 2e 65 76 65 6e 74 3d 22 70 5f 22 2b 61 3b 66 Data Ascii: hLogging&&logPushEvent("error_subscribing",a,version)})}function setIfNull(c,a){return void 0===c\|\|null===c\|\|""===c?a:c}function logPushEvent(a,b,c){let d=JSON.stringify(b);"{}"!==d&&(b=d);let e={};pullUrlParams(e),e.message=b,e.version=c,e.event="p_"+a;f
2024-12-17 17:18:50 UTC	1303	IN	Data Raw: 76 69 63 65 57 6f 72 6b 65 72 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 22 50 75 73 68 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 28 73 65 73 73 69 6f 6e 49 64 3d 61 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 55 74 6d 28 61 29 7b 22 73 65 72 76 69 63 65 57 6f 72 6b 65 72 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 22 50 75 73 68 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 6e 75 6c 6c 21 3d 61 26 26 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 75 74 6d 4f 62 6a 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 53 65 73 73 69 6f 6e 49 64 28 29 7b 72 65 74 75 72 6e 20 73 65 73 73 69 6f 6e 49 64 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 72 6c 56 61 72 73 28 29 7b 6c 65 74 20 61 3d 7b 7d 2c 62 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 Data Ascii: viceWorker"in navigator&&"PushManager"in window&&(sessionId=a)}function setUtm(a){"serviceWorker"in navigator&&"PushManager"in window&&null!=a&&Object.assign(utmObj,a)}function getSessionId(){return sessionId}function getUrlVars(){let a={},b=window.locati
2024-12-17 17:18:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49794	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:50 UTC	444	OUT	GET /images/665deae8723a9bcb12bc3311_improves-hair.jpg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:50 UTC	1046	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:50 GMT Content-Type: image/jpeg Content-Length: 65287 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "6759874f-ff07" expires: Tue, 17 Dec 2024 17:18:49 GMT last-modified: Wed, 11 Dec 2024 12:36:31 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wRu0aA%2BzdA2KwF%2FMR7TEv529pRZ4Axjaq50jyortyuaGUYzAdx7Ie6ArxobQwetqcLUUVQTKqr90L7MqixsIJYMvzqCV3GnLzJL8cyRDe4YaVmt%2F67G7DNP2xeZ72QjhOMcadJduPIM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38931caa790f75-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1591&min_rtt=1573&rtt_var=626&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1022&delivery_rate=1697674&cwnd=221&unsent_bytes=0&cid=ed5e746bf9c0ee8b&ts=543&x=0"
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 4b 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyK1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 00 a9 40 0a 82 80 02 a5 00 00 00 00 2a 0a 02 a0 a1 52 80 00 54 a0 00 00 00 2a 50 00 00 05 40 00 a0 2a 0a 00 54 14 00 a9 42 a5 00 2a 0a 02 a5 00 00 00 00 00 00 54 a0 00 00 0a 82 80 00 00 00 15 28 00 05 4a 00 01 52 80 00 00 2a 50 a9 42 a5 00 2a 50 04 7a 09 00 00 00 00 00 00 00 00 00 14 09 a2 00 00 0a 94 00 02 a5 00 00 00 54 a0 00 00 00 00 Data Ascii: @RTP@TBT(JRPBPzT
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 5c 3d ed 25 4d 64 b7 29 22 a5 00 00 8a e3 b7 b5 e7 ea f0 9f 12 b6 78 34 95 72 59 cf 2d c7 d9 c1 2d 61 7a 4c 6a 95 ad 99 08 eb b1 d3 65 4b 5b 9b 61 d6 d2 2f 4f 34 df df e7 50 b7 13 6c f2 78 4a 23 5e 73 7d 3e 7c 64 d6 4f b6 32 5b 1a 00 46 6d ba aa 77 56 15 29 0a 54 10 f7 62 b7 f9 4b 93 bb 54 63 cd 32 69 7a 43 55 a5 7c cb 67 4b 66 55 f5 1f 67 17 43 7a f2 54 8f 30 f4 9f 4b 01 45 74 7b f1 70 fa 5a 4a 56 4b 72 92 00 15 28 08 b2 3b 7b 8c ba 3c c3 c4 2d cc da 89 e7 22 78 fc ef ce 71 75 f2 35 d2 e4 b5 65 89 25 93 6c b6 b9 eb dd 65 7d 72 75 46 f2 6b f4 77 ab e4 fa 98 b6 9f 07 85 bc 94 46 b5 1c c6 fc 11 9b 49 3a d9 49 6c 68 01 19 c6 dd 45 7b a9 0a c1 58 f2 9a 27 c9 ea 27 87 cb 7f 9f f9 fa a8 84 c5 ea ce 31 8f 31 ea 67 63 5b 7a a5 e6 0e 8e 59 8b ab 8f 90 a1 0a a7 d2 Data Ascii: \=%Md)"x4rY--azLjeK[a/O4PlxJ#^s}>\|dO2[FmwV)TbKTc2izCU\|gKfUgCzT0KEt{pZJVKr(;{<-"xqu5e%le}ruFkwFI:IlhE{X''11gc[zY
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: d4 05 4a 00 01 12 47 66 f6 9d 1a 7a b4 b5 6a a9 a6 0c 5b 4f 9b 1e 27 b6 e4 e9 d2 63 be b1 1e 36 89 71 5e 7e d1 ad ae da d9 8e 36 6b e2 23 a8 87 61 31 c6 da f9 b1 38 f4 48 93 8c 9f e9 70 65 6f 41 cc c4 73 b6 e4 8c 5a c9 f6 c6 4b 63 40 08 c9 b7 51 87 6e 25 6d 8d 57 94 e0 1a d8 b7 ae 7d b5 7c 9d dc aa db fb c5 cc a7 19 64 af ad ea 2d 98 9d 3d 2d b2 c6 f7 6d 3d 77 4f 06 c7 d4 f2 bc a2 92 a2 7c c2 85 51 cb ef c3 c1 e9 79 29 59 31 cd 42 a0 a0 00 10 ec 76 db cb 7d 45 63 06 2d e6 b6 ef 25 d8 5f 3d e9 c1 f9 fd 7c 27 2f 66 9e cc 2d 2b 2d cd 39 d3 9d ae ba d4 f3 53 16 a6 bd 2c a4 39 ac 64 b6 e2 b6 d7 55 26 da 9d df 6f 9f b6 ea c6 89 e6 e5 cf 38 e3 16 d2 7d b1 92 d8 d0 02 33 6d be c3 b7 06 96 b1 0f 09 d4 a7 12 ba 6e f8 3b 78 fc f5 d2 4c f4 f2 c2 cd 65 6b 93 3e a6 76 Data Ascii: JGfzj[O'c6q^~6k#a18HpeoAsZKc@Qn%mW}\|d-=-m=wO\|Qy)Y1Bv}Ec-%_=\|'/f-+-9S,9dU&o8}3mn;xLek>v
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: e6 b0 db 0e 6d cd cd b8 3c ad b9 e9 cb cd ab ea 63 be 8b 66 52 2d d2 6d 5d b7 db 09 5f bb 8f a1 e8 c7 55 59 8e 22 d7 67 96 33 69 27 5b 29 2d 8d 00 23 2a ed 1c 73 7a 5c 2e d9 46 5b 65 e6 57 62 7b ce 0e e9 4b c7 f6 3a 5b 67 d2 6b 5e 7d 6d 16 d4 df f2 6a d2 bb cb 53 1e d5 b7 31 c0 5a 7d 73 ef 2f c5 23 16 bb ae 7b ed 2d 9c 63 ed 78 d1 37 a9 c1 ec 91 32 d6 5f e7 db 5d af 0f 13 36 92 a6 b2 5b 98 01 52 80 02 00 cf b7 84 e7 ea 9d a6 bd 41 9b 68 b9 75 f4 56 61 11 a4 a5 a3 ce 0e dc c4 73 fc fb eb 2b 7e 62 6d ce cd b6 5a e7 83 6a a1 de 2b d4 45 75 55 be 4d eb 20 f6 72 f4 fd 3c fb 8d 33 d7 a6 39 49 cd 19 46 92 75 b2 92 d8 d0 02 33 ae d1 9f 2f a5 1c 6f 97 03 b6 29 9a c4 f6 9c 9d 12 af 8b ed 48 59 6b 73 a7 0b 15 bf 07 d1 9f 63 cf 7d 55 9d 0a 2f 5a ba 2b 57 9e d2 37 7c Data Ascii: m<cfR-m]_UY"g3i'[)-#*sz\.F[eWb{K:[gk^}mjS1Z}s/#{-cx72_]6[RAhuVas+~bmZj+EuUM r<39IFu3/o)HYksc}U/Z+W7\|
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 5e 15 38 86 61 de 2b ed 3c 8a 63 98 9c 48 25 3b b9 25 96 3b 0b 28 54 a0 23 36 d1 d6 5d fc 95 2b 0f f4 e7 ad 89 c8 57 2a 63 36 9a 4d 3c 7d 99 d8 da 50 e1 ed e0 db af 18 d6 a6 54 c6 9e 2d b1 ce f6 af 1b 0b 53 b5 b6 1f 32 7a fe 57 3b d1 86 32 37 73 1e 0c 28 99 87 2d 3b cc ef ee 79 f9 2b 4c 93 35 93 1c d4 00 15 28 0a 9f 2e d7 ab 8d 5b 93 5f ed 4b 73 fc 4f 1b cb a6 ea 73 e8 d3 f3 e5 74 91 94 9d d8 fc 6b 1d 13 d4 e7 c9 27 4c 89 ce d9 fc b1 1d 5d 52 3b 69 ca 14 8d a5 e5 37 4a 7d 19 3c c2 89 00 55 52 09 00 08 cd b4 6d 97 77 21 44 67 d1 97 3a 9c 95 33 26 33 a2 f2 17 37 46 6e 56 99 bc ff 00 4b 49 5d b9 1b 4e dd 5b 8a f2 89 e8 b3 d3 d6 94 c2 be 5d 77 5f 17 ce 7e af 97 a9 95 a3 78 0b a9 98 79 b6 d9 56 6e 4f 3e 9e f3 25 4d 64 b7 30 00 00 07 cb d5 ea 8f a2 fc dc db ee Data Ascii: ^8a+<cH%;%;(T#6]+W*c6M<}PT-S2zW;27s(-;y+L5(.[_KsOstk'L]R;i7J}<URmw!Dg:3&37FnVKI]N[]w_~xyVnO>%Md0
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 5e 18 f5 78 43 d5 e1 0f 57 84 3d 5e 10 8b 12 e7 3a 35 ca e5 36 f1 d2 77 79 fb 1b ac 1a 86 aa e9 06 a1 e1 3e 27 ff 00 42 04 45 dc 26 fd 1a be 0d 25 d3 4b ae 9e d4 17 ae 94 5e 6e 77 7d 4d a7 24 e9 7b 96 9e e9 b5 d7 51 5a b4 06 8c 9f a4 84 86 cd db 8f d1 9b e8 fa 35 7d 09 8e a8 76 08 10 d7 70 9a ae 8d 5f c8 96 8b e6 8e bd 69 cb c2 2f f6 4c 3d 5d cd 39 52 32 a4 65 21 94 81 12 45 12 32 a4 12 52 32 a4 11 24 65 21 95 23 22 46 54 8c a9 06 92 06 84 8c a4 32 a4 65 48 32 20 64 42 84 32 a4 65 21 42 0a 22 cb d3 ae 4c fb 34 ef 3f 62 dd 6e 31 ed 16 eb 4c 49 7a db 55 df 20 ca d1 9a aa cd 74 62 f7 6b 9f fd 0b 34 a6 a0 dd be ad e9 31 61 d7 b6 2d 47 3c 75 7b 9a fa 5d c9 61 d5 93 57 5f ab 9a 4c 23 ab 1a 55 d5 cf fe 86 9a 32 2d 42 b9 51 50 5d 4d bc c0 bc ea 4e 98 c7 76 3e 8d Data Ascii: ^xCW=^:56wy>'BE&%K^nw}M${QZ5}vp_i/L=]9R2e!E2R2$e!#"FT2eH2 dB2e!B"L4?bn1LIzU tbk41a-G<u{]aW_L#U2-BQP]MNv>
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 5e 66 6b db 99 5e e3 e0 ea 3e 72 a6 d3 0e 77 4a 30 f7 7d c6 bc 22 46 78 36 62 cd 39 4d 19 4a a5 19 52 89 a5 a5 08 51 5b 0f b6 3a 49 f6 5e 8e 6a 4c f4 2a ac a0 5a a4 fc dc 00 64 28 28 28 28 2e 7f d1 e9 d7 26 7d 9a 77 9f b7 3a 93 c9 9b 6a 2a 33 0c e3 38 d5 72 8d f9 71 88 cd ac be 53 08 f2 1b ec 2a 78 89 1d 8d b7 e6 34 cf 69 a7 b2 cb 23 e5 26 38 7e 46 fe 95 e6 76 fd b9 97 ee 36 0e a2 e7 3d c7 7b a5 98 74 fc 57 4f ea 11 7f 06 09 7c b5 ba 42 0b 8a ed 12 b7 a3 78 50 ef cb 4a 67 c8 7a d6 b2 49 70 b3 37 35 9c af 34 34 cc 9c a9 2e d2 db 41 41 76 ec 83 d3 9e 4c fb 34 ef 3f 6e 75 27 93 3f 23 07 b4 cc 29 43 89 41 71 77 8a a8 25 e2 c9 56 9b 2a 47 cb 90 92 9f 37 87 e1 52 09 2e 25 1e 72 91 54 42 4f 97 05 ff 00 98 b2 6f e9 5e 67 6f db 99 7e e3 60 ea 3e 72 ae e3 dd d3 8e Data Ascii: ^fk^>rwJ0}"Fx6b9MJRQ[:I^jLZd((((.&}w:j38rqSx4i#&8~Fv6={tWO\|BxPJgzIp7544.AAvL4?nu'?#)CAqw%VG7R.%rTBOo^go~`>r
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 21 41 71 62 a2 e4 c6 40 db 44 dc 9e 02 98 76 37 ed 50 be 4e 52 28 d4 93 0c 23 b1 92 2e 0d b7 b1 b6 df cd 6b 70 8f 87 24 e9 1e 52 4e 3c cb 03 a9 52 f2 9b 72 76 5e 8f c1 d3 ae 4c fb 34 ef 3f 6e 75 27 93 16 ae c5 38 40 94 1d 58 52 83 5d a6 ea e8 2e 4d fc a3 2d 36 94 ae 51 ab e4 23 50 a5 2f 32 98 7d 7e 73 2a 55 56 a3 75 6f 1d 1a 8a da 9e 72 5a 88 94 e2 7b 20 c8 e1 1f 1f 2b 89 32 51 1e ee 99 e6 a6 fd b9 95 ee 36 0f 50 4f 2d f0 d6 2c 36 c4 ce 75 b2 a8 22 04 40 b6 2d 24 a0 fc 7a 1c b4 70 e4 49 35 25 e8 1d a5 42 32 b8 39 96 db 2d 1e 4b 6a 07 da 56 d4 e7 b7 29 06 52 e2 ad 6a 6c d9 e3 db ae 89 cc d6 98 33 27 09 35 0a f0 99 a8 5e 57 e1 e9 cf 26 7d 9b 77 9f b7 3a 91 c9 92 5e a2 d4 f0 f9 80 a7 aa 33 08 dd e9 3c aa 92 f9 ca 9a f2 49 98 72 d5 48 8a aa 66 49 32 4b 0e 2b Data Ascii: !Aqb@Dv7PNR(#.kp$RN<Rrv^L4?nu'8@XR].M-6Q#P/2}~s*UVuorZ{ +2Q6PO-,6u"@-$zpI5%B29-KjV)Rjl3'5^W&}w:^3<IrHfI2K+
2024-12-17 17:18:50 UTC	711	IN	Data Raw: 9f fb 17 42 f3 7a 75 c9 9f 66 dd e7 ed ce a4 f2 60 d5 4b ab bb 74 d3 85 ea 30 57 e0 60 93 c4 2c df 33 71 fd 88 66 6a 72 3a 72 db 23 b9 fc a5 e7 42 a5 17 97 77 70 f2 5e 51 e2 b2 b0 46 97 7f a7 93 e6 24 c7 4f 92 6a 4f cc df 64 94 a9 40 85 b6 57 c9 df 09 fa 1e 8a 22 2d 42 df b7 32 bd c6 c1 ea 77 f9 3c c6 d8 b7 ba 4e 3a d1 82 30 46 2b b0 cc 4d ed 8e c3 69 62 54 bc ae 46 23 cf 11 2a ca b7 14 97 a6 49 8b 96 3b 84 64 26 23 3b dc 32 71 36 e7 c9 b9 cb 8f 9a d1 3e c4 a7 95 06 37 cd c5 69 b4 f0 d2 9a 28 4e fd 8b 97 ef f4 e7 93 3e cd 3b cf db 9d 49 e4 b1 aa 9c a4 b4 fe 81 51 a7 d6 7e b7 6f 49 2d 96 5a 36 a3 35 94 dd ba 11 26 2c 14 1a 52 4c 92 2d ad d4 e5 3b 57 23 ba 8e 3a ee 74 75 17 a4 9a 0e de df 0d b9 66 a2 90 cb 1c 37 9b 4e 56 ef 12 0a 3a 24 16 56 76 4b 5e 47 b3 Data Ascii: Bzuf`Kt0W`,3qfjr:r#Bwp^QF$OjOd@W"-B2w<N:0F+MibTF#*I;d&#;2q6>7i(N>;IQ~oI-Z65&,RL-;W#:tuf7NV:$VvK^G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49795	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:50 UTC	410	OUT	GET /images/newr.jpg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:50 UTC	1045	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:50 GMT Content-Type: image/jpeg Content-Length: 106683 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598753-1a0bb" expires: Tue, 17 Dec 2024 17:18:49 GMT last-modified: Wed, 11 Dec 2024 12:36:35 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MCTdOWUtfnu2WCv5lwGhsgiWtNgY79NEvqmxyZhX%2F9n99swuQpK9oH2mmsUlsUkASUkU0JTiWn2BSgXAAdLozdC5QlfWMw8OsmeE2LFDrf9cOHSzDSndVYglAnFcJZsqE93%2B9vs0Nq8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38931d0dda7d06-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2023&min_rtt=2023&rtt_var=1011&sent=6&recv=7&lost=0&retrans=1&sent_bytes=4246&recv_bytes=988&delivery_rate=116279&cwnd=244&unsent_bytes=0&cid=2b66871492fc3356&ts=552&x=0"
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: ff d8 ff e1 16 76 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 94 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 31 30 3a 32 34 20 31 32 3a 31 35 3a 32 39 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 01 f4 a0 03 00 04 00 00 00 01 00 00 01 dc 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: vExifMM*bj(1"r2i''Adobe Photoshop 25.11 (Macintosh)2024:10:24 12:15:29"
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 8e 2d cc b6 e2 e3 5b 5a d3 ab 5d c3 9c e6 fd 2f 62 60 16 69 4d 7e b3 f5 91 f4 13 46 34 07 f7 74 4c 2e 70 5d 76 5d 82 cb 9e eb 4c c6 e7 19 d5 13 a5 f4 fb 3a 8d e4 ba 5c c6 ea e2 7b 95 ba 3e ad bd f7 01 92 e1 8f 4b 47 e8 a9 ac eb 07 f3 ec 71 1f 4d 4b e9 8e 9d 53 18 99 0b 71 b2 71 dc 03 58 0c bc 90 1f 1c 34 bb e8 d7 fd 6d ab 4f ae 7d 53 c8 e9 f4 fa b5 d9 b8 31 c0 38 f1 04 ff 00 29 1b 23 ea a7 50 c6 60 b2 a2 6e c4 0e 0f 7d 6e 77 b8 eb 0e 73 4f ef 39 74 9d 5b a7 8b 71 ad ea d9 f7 6c a5 9b 3e cb 8e 4f b4 17 06 ba eb ae fd fb 7d de 9d 7f e8 fd 3f e5 a1 c5 b5 2e 10 de c7 93 c5 e0 75 8c bc 77 0a f2 8f ad 54 86 87 3b e9 37 5d a3 df f9 cb a3 ad cd 73 43 9b a8 3c 2e 4b 22 ea 6f 7d 9b 06 d6 87 1d 91 fb a0 fb 78 5d 0f 48 79 7e 28 92 74 fc 3f d5 bb 10 90 ea b1 d1 6f 64 Data Ascii: -[Z]/b`iM~F4tL.p]v]L:\{>KGqMKSqqX4mO}S18)#P`n}nwsO9t[ql>O}?.uwT;7]sC<.K"o}x]Hy~(t?od
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 3d 2c b1 cf 00 5a e0 df 79 fc ef 73 bf 37 dd ee 51 d8 e2 ae ac b1 07 86 de 1d ec d4 16 4e 9c 93 e2 93 d8 d2 e9 f0 e5 77 d5 7d 45 65 d6 8b 33 24 3a c3 0d 66 e8 1a f9 33 dc f5 a9 8d f5 4b a5 e3 09 0c d0 38 34 c6 9e e3 ff 00 4b e9 27 85 84 87 8f e8 45 f6 63 bf 1e c6 38 b5 9e ea df b4 c4 1f f0 7b bf 92 ad fd 82 d7 be 05 65 df 0e 57 69 57 49 c1 aa 3f 44 d0 06 a4 19 26 23 c5 df cb 6e cf ed a3 8a 2a 60 80 00 20 09 00 40 9d 77 42 6f b7 66 d7 7b a6 a9 e3 d9 d0 b3 9f 5b 85 35 8a ec 22 18 fb 26 1a 4f e7 ff 00 67 f3 10 b1 be a0 12 ed f7 e5 ea 4f bc 52 cf 0f e5 bf 7a ee 03 6b 16 6c 02 09 82 d3 f3 77 fe 60 a7 a0 64 81 07 51 1f d5 0e ff 00 be a7 88 57 55 a7 25 f4 79 6c 6f a8 dd 3a 97 8b 03 af 7b c6 ad 2e 78 02 7c db 5b 5a b5 a8 fa bf 4b 64 f3 02 44 8f 1f 35 ae 4b 2a 75 Data Ascii: =,Zys7QNw}Ee3$:f3K84K'Ec8{eWiWI?D&#n` @wBof{[5"&OgORzklw`dQWU%ylo:{.x\|[ZKdD5Ku
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 21 dd 0e 77 d6 5a 46 6f d5 8c 8a 9b ab c4 39 bf d6 63 ab 73 57 03 97 6e 65 db 5d 95 97 95 6b 8b b7 03 6d 95 d4 d1 b9 ae 97 35 a6 e7 6c dc d7 bb dd b3 de bd 46 de 8d 95 6e 16 46 31 75 7f a6 69 0d 32 74 71 6b 9b 3f 47 cd 71 f6 ff 00 8b 5e ac 6d 6d ad 38 8e dc 0f ac df 56 d6 7b 89 9d f5 b9 98 ee db ed 4c 95 74 2a 0f 2e df d9 f5 07 3d a5 8f 78 9d 85 ef b1 ee d3 56 3b f5 7a aa 63 3f ed c5 d0 5d 65 57 f4 e7 f5 2c 67 b6 eb 8b a9 2d 75 95 4b 9b f4 dd 5f be f7 e4 6e fd 25 0f c2 ff 00 83 45 1f e2 df eb 0b 49 db fb 35 80 f8 ba f7 91 cf d1 75 d5 bf f7 96 af 4e fa 97 d7 b1 a9 b7 1e fc da 4d 4f 92 cf 40 1a c8 71 d7 73 b6 54 df 6e f6 54 f4 c4 bc 5d f8 dd 46 f7 1b 1d 55 af 6b 49 60 b5 cd da 03 4c 59 4f bd db 19 f4 6d f6 ad 9c 17 38 e2 b5 96 00 2c 63 b7 1d ae 0e 1e f6 b1 Data Ascii: !wZFo9csWne]km5lFnF1ui2tqk?Gq^mm8V{Lt*.=xV;zc?]eW,g-uK_n%EI5uNMO@qsTnT]FUkI`LYOm8,c
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 17 7a 96 66 d4 f6 fa a0 fa 6d 68 63 3d 11 75 6f 2d d8 69 b6 cf 52 cc 3f 5e bf e9 1f a2 b3 67 f3 de a7 ad 4f cd e9 24 a7 e8 db ba 5f 5e aa bb 8f 4e cb aa ab af 75 cf 7b ed 0e b3 57 5c 5f 86 da f7 ef 65 4d 66 25 af ae df d1 59 fa 5a a8 fd 1f f3 bb cd 7e 37 d6 53 95 7b a8 cd c7 66 3b 83 05 0c 75 44 96 c5 6e f5 5e e1 a7 bd d9 21 9f e1 b6 7d 9d ff 00 43 d5 ab f4 bf 36 24 92 9f a4 99 89 f5 94 62 35 ae ce ad d9 46 ca cb dd b1 bb 05 6d 60 6d c1 9f a1 f7 bd f9 1f a5 7f b5 9e b5 5f a1 a7 f6 7f ab eb 63 8d f8 7f 5b 4d 0f 2d ea 38 e3 22 1c 2b 02 ad b5 fb 9b ed f5 37 0b ac f5 2a b3 f9 ab 1a ef 4f fd 36 3d ff 00 cd 2f 9c 52 49 4f d3 3d 33 13 a9 d3 93 95 76 7d ed bf d5 f4 db 56 cd 00 6b 03 e7 f4 5b 19 e9 6e f5 3f d2 64 7e ff 00 ad e9 fa 58 d8 da 2b e5 54 92 53 f5 52 4b Data Ascii: zfmhc=uo-iR?^gO$_^Nu{W\_eMf%YZ~7S{f;uDn^!}C6$b5Fm`m_c[M-8"+7*O6=/RIO=3v}Vk[n?d~X+TSRK
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 38 42 49 4d 04 00 00 00 00 00 00 02 00 01 38 42 49 4d 04 02 00 00 00 00 00 04 00 00 00 00 38 42 49 4d 04 30 00 00 00 00 00 02 01 01 38 42 49 4d 04 2d 00 00 00 00 00 06 00 01 00 00 00 03 38 42 49 4d 04 08 00 00 00 00 00 10 00 00 00 01 00 00 02 40 Data Ascii: 2Z5-8BIMp8BIM8BIM8BIM08BIM-8BIM@
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 98 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 Data Ascii: "?3!1AQa"q2B#$Rb34rC%Scs5&DTdE
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 8d 40 24 97 6d 64 fe e6 ef 4f 72 ed fe b1 09 c4 ab fe 38 7f d4 58 b9 f7 31 57 c9 bb 2c 0e 8e 76 6b c6 3e 2d b7 7f a3 63 9d f3 03 45 c2 d1 d2 8e 7b 2d b6 d7 3a 29 05 a3 61 02 08 6b 6e b6 db 0b f7 7b 1b ea 57 fa 3f cf ff 00 48 ba ff 00 ad 36 fa 5d 31 d5 cc 1b dc d6 0f 87 d3 7f fd 16 ae 7b a7 67 60 e3 b5 d8 99 6e 0c 6e 78 0f 63 a4 6d d1 df 67 db 69 05 de 97 aa ea 3d 9e a7 f8 36 7f 53 7b 45 d1 21 92 1c 24 8e 2d 9b fd 0f 1d b8 b5 d7 53 22 49 2e 73 bc 7f 75 74 96 74 3c 3e a7 58 19 54 8b 1d f9 af 92 1e 3e 0f 69 0b 1f a5 50 6d 1b 87 2d d3 4f e0 ba 27 64 1c 0c 71 7d af 0c a4 68 e7 cf 07 b7 f9 c9 96 6d 9c 01 c3 4e 6d bd 16 9e 99 4b 2b a5 f7 43 89 6b 68 de 5e 5c 4f 6d af dd b7 6f f2 11 f3 dd 6b ba 4f bf 10 e6 b5 a4 0b 2a 6c 3d c0 01 ee 77 a6 4b 77 bd 9f c9 50 b7 27 Data Ascii: @$mdOr8X1W,vk>-cE{-:)akn{W?H6]1{g`nnxcmgi=6S{E!$-S"I.sutt<>XT>iPm-O'dq}hmNmK+Ckh^\OmokO*l=wKwP'
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: 9f 63 be 07 f2 2e fe af e6 99 fd 51 f9 17 00 7e 83 be 07 f2 2e fe af e6 99 fd 51 f9 13 31 f5 fa 27 27 46 61 3a 60 9d 4e 36 63 7f ff d4 f5 54 c5 3a 62 81 d9 4d 2e a8 c0 fc 76 83 fb df f7 d7 ae 6b a7 b4 57 5d 8c 23 8b 1c 0f 9f ee ae a3 3f f9 a6 ff 00 5b f8 39 73 54 80 32 b2 18 d6 ee 6d 76 41 88 d0 96 b5 dd ca 8a 3f ce 7d 19 7f c9 fd 5b 36 58 e1 67 ac 39 07 5f 87 01 2b 8e e6 17 30 c6 f2 37 8f 03 cc ff 00 d1 4d b1 c7 90 00 3f 91 30 a9 e1 b0 4e 87 c3 c9 58 11 3d 98 88 58 b8 ba 41 e7 fd ca 2e 20 11 fe be 0a 56 86 37 f4 8f 78 60 60 f7 12 43 47 f6 a5 06 db 71 6a df ea 58 d6 16 c0 76 e3 c1 2d 36 31 a7 f9 4e ad ae 7e d4 e1 02 84 cf f7 06 b8 1d 43 60 fc 94 d8 e2 e2 3b ea 27 e6 36 b8 aa 9f 6d c7 f7 10 d7 bb 6b 1f 64 00 1b ed ad fe 8d bf ce 39 9f 41 ff 00 f4 15 ec 7c Data Ascii: c.Q~.Q1''Fa:`N6cT:bM.vkW]#?[9sT2mvA?}[6Xg9_+07M?0NX=XA. V7x``CGqjXv-61N~C`;'6mkd9A\|
2024-12-17 17:18:50 UTC	1369	IN	Data Raw: d3 05 4b ae e2 5b 9b d1 3a 86 15 2d 0f b7 27 16 ea 6b 6b 8e d0 5d 65 6f ad 8d 73 ff 00 37 dc e4 a3 b2 9b c9 2e 4f f6 5f d6 9a c8 c7 a4 b5 80 d8 ef b4 67 56 f6 d6 ec 86 bb d0 ac 5f 7d 2d 67 ea f7 53 87 ea 51 fa 17 59 fa 4c 4a be cb 5e 35 3e 97 a5 6b a3 e1 f5 4c 86 db 83 d5 cd 96 e1 8c 4a 6a be ab 81 3b ad b2 96 53 9b 8f f6 82 df d7 29 67 a7 eb fd aa b7 fb ef ce be 9f fb 4d e9 d6 54 f4 49 2e 4b a1 fd 5f eb 7d 37 2a bb 72 85 79 75 b4 52 e7 45 84 38 64 52 3f 63 7d ad 9b d9 f4 2d e8 9b 32 b2 19 bf d4 fb 65 7e 95 6b 57 ad 63 75 0b ae 63 b1 c5 b6 30 32 2a 6d 56 8a 83 6d 93 fa 5b fe 8b 9c cd a5 bb 36 7f a3 ff 00 85 4d 9c 8c 63 60 19 78 04 48 d0 ba b7 61 25 55 f4 e6 3a b6 0f 54 6f d8 05 84 69 2f 11 ab 60 7b 58 f9 7e ef fa da 42 8c ad f2 6d f6 17 17 46 bc 7e 6b 3f Data Ascii: K[:-'kk]eos7.O_gV_}-gSQYLJ^5>kLJj;S)gMTI.K_}7ryuRE8dR?c}-2e~kWcuc02mVm[6Mc`xHa%U:Toi/`{X~BmF~k?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49808	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:52 UTC	415	OUT	GET /images/miracle2.webp HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:52 UTC	1048	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:52 GMT Content-Type: image/webp Content-Length: 23322 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598751-5b1a" expires: Tue, 17 Dec 2024 17:18:51 GMT last-modified: Wed, 11 Dec 2024 12:36:33 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k6lUG5s8CuIxgN%2Bc8kw3hRpBGNqi71D7Vc%2BvqEMtYJxfB51yweozRNrV%2BVYSDE861zEOumx9YR%2BEIJe2GrDrm4bzfHtc1fo5nqCnbAV2xX2%2BndnJpR6XSuErsImF4f9LUNsNCoDMORw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38932a7ae1c427-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1531&min_rtt=1528&rtt_var=580&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=993&delivery_rate=1874197&cwnd=32&unsent_bytes=0&cid=1a84c3f795391294&ts=520&x=0"
2024-12-17 17:18:52 UTC	1369	IN	Data Raw: 52 49 46 46 12 5b 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 ff 02 00 af 01 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF[WEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-12-17 17:18:52 UTC	1369	IN	Data Raw: 44 af 12 31 5c 34 ca 55 f7 cb d9 d6 82 4f 15 19 cd 5d ee 0e d6 3e 7e 34 c7 e4 fd c2 7a a8 8e ad 79 b7 84 4b f9 e2 9a 4f f9 b3 9e 25 d0 d3 0e 61 0e d8 24 f4 04 36 db ce 7c d6 b9 49 bd 1c 1a f3 12 16 bb c9 73 da c5 1d 4c 4a 16 fa cf 60 a0 ff 04 c9 dc e0 17 01 3e 0d a8 42 0b 76 3b 0c ff 42 30 96 68 63 d8 36 11 68 22 41 24 18 8b 65 1c fb 3c 53 43 d4 a5 1a b9 23 d5 3e 37 0e 5f 55 53 6a 4b 86 e5 e5 de 84 39 d9 61 f7 49 71 f5 d1 26 19 73 1e 73 6b 0e 7c b4 6e ec 19 86 f6 86 81 fa 3e e0 5c f7 46 b2 f9 3c 00 08 a6 ab dc 39 e1 89 6a 5f b6 27 68 24 01 de ea 07 f0 3f f6 03 8b 4e bf f9 a3 71 bb 06 a9 ea a6 a3 b1 22 55 f6 3a 4d f6 ea 0e ea 7b b0 ca 1a 3c a0 30 e9 6e a5 46 cc 83 bd f0 ab dd c5 69 23 3e 61 52 2b 34 00 41 4c 6b d9 e8 87 4b d8 d2 f9 f6 21 c7 fa b5 58 55 6c Data Ascii: D1\4UO]>~4zyKO%a$6\|IsLJ`>Bv;B0hc6h"A$e<SC#>7_USjK9aIq&ssk\|n>\F<9j_'h$?Nq"U:M{<0nFi#>aR+4ALkK!XUl
2024-12-17 17:18:52 UTC	1369	IN	Data Raw: ad 49 8c b5 62 f7 5b cc 82 73 c8 6b e7 7c 8c 16 7e de ea 26 d0 bb 56 91 97 8d 92 d7 41 3b 3e ed 46 80 86 9d 7b a6 1d 6f e1 7b 61 1d c9 a1 c8 ae 39 33 b9 54 c6 4a e6 b0 fc 2e 6c 02 ac 65 a5 b1 f8 2a 04 d4 01 13 a1 a6 8c 89 14 50 70 ae 2c c9 3d c6 c2 84 7c 7f 90 8c c0 91 01 81 09 cd 28 08 a6 c0 aa e7 d7 07 2f 71 8d 4a ba c0 99 58 c3 e5 31 cc 80 7b c1 87 db 2a 6b a6 03 de 28 a0 67 fc fa 10 59 e9 6a c2 fc ff 5b 27 56 f9 d9 c1 56 51 2a 30 47 71 a3 3e ff f1 a6 91 35 fb 85 a8 40 1b 34 16 85 df 77 b8 06 64 13 18 a0 31 db 84 10 1f 15 8f 72 8e 31 0e f9 09 df 18 99 6f c6 f7 da 48 97 a3 4c f1 ee 91 3b 7e 0c 7a 3e 5b 1d 02 09 c7 9f cc fb f6 0e cd a5 ae fb a3 b5 5d 51 eb ac 27 0c dd cd 6a fe 8c d9 ad ea 3e 11 9a df 1d 69 2c 6f fa 20 49 f4 c5 47 ee b9 ab d1 cd 16 7e 84 Data Ascii: Ib[sk\|~&VA;>F{o{a93TJ.lePp,=\|(/qJX1{k(gYj['VVQ*0Gq>5@4wd1r1oHL;~z>[]Q'j>i,o IG~
2024-12-17 17:18:52 UTC	1369	IN	Data Raw: d4 ea 39 dd 21 97 78 09 97 df b3 5b ad 7d 17 6e 28 76 a4 df 39 49 03 9b 0f 02 e2 ad d5 01 73 95 91 21 69 d5 48 7d 61 46 b6 4a 91 dc 06 a3 aa ce 1b b2 14 46 93 d8 cc 97 97 52 89 86 b1 e4 22 2b 05 ef 8d fc 00 57 10 6f 4e 43 59 03 57 3b 87 95 46 55 40 e1 9e c5 df 02 48 49 33 4e c4 60 fe 8c cd a4 75 2a 78 13 5a 37 ce 58 5e ca 17 b5 59 1b c1 41 ac 2c 51 cb 43 bc 4e 1f d1 9f 46 14 0f f2 40 45 92 65 92 46 67 fc 31 cf ab 23 28 74 c9 29 ed 71 08 12 34 6f df e5 a9 50 79 f7 a1 4d 6b 04 9e 63 ac 2e 20 73 0f ac 4a 71 db 8c df 7c 62 4b 1b b6 1f 3a 19 72 bf 80 ea 14 90 a2 40 e1 16 6f be 5b ef 9e 3f d0 90 90 bd ac 3d fa a1 42 9c 2c 00 cf bd ff e5 44 08 27 e4 65 c5 85 5c 73 69 63 e5 2c 1e 0d 16 e1 41 37 8d 43 4e 81 d3 a7 5b 50 44 b7 f4 27 70 6c b4 7b 78 b6 fe 89 e3 3e 7a Data Ascii: 9!x[}n(v9Is!iH}aFJFR"+WoNCYW;FU@HI3N`u*xZ7X^YA,QCNF@EeFg1#(t)q4oPyMkc. sJq\|bK:r@o[?=B,D'e\sic,A7CN[PD'pl{x>z
2024-12-17 17:18:52 UTC	1369	IN	Data Raw: fb f8 4c 57 58 d0 04 05 78 7c fb 0c 17 28 1e c8 c1 25 f1 4d 9e 7a a1 00 6f 3a b1 7d e1 75 9d 96 3e 6d f4 aa e9 3a 6a 74 77 d1 ed d0 10 ec 7b d0 de 78 ab 88 4f fb 27 5f fd 59 be d2 97 50 86 0f 0b 91 08 fa 31 db c6 1c da 3b 08 02 60 fb 66 16 1c 30 09 ad b6 15 18 91 1e 06 eb 3b 35 1e 32 c8 00 b2 45 33 54 8f 82 a7 80 4c b2 b6 93 f7 76 8a 18 7d c3 1c f1 08 ab f5 e5 9e 1b 4b 2b 82 0a 12 62 ba d2 75 96 64 f2 7e 2c db 37 e1 ad 3e b7 4f 97 1c 17 b5 5d c7 1a db 3a d9 19 73 41 45 ab cf 33 d3 1e fb d7 d5 54 0c 47 0c 38 29 1a 40 64 e6 0b ad d3 ae 0e c9 f5 22 c4 37 5d c6 54 5f 8a c0 d8 07 72 bc be 44 14 b7 d3 3e 35 34 2a f3 09 4a 7b 32 5f 19 b1 91 c5 af b6 06 76 39 16 1b 02 0b ef 51 b8 43 dc 3b 78 a0 bf 60 71 28 d7 8b c6 d3 7f 15 67 2b 39 74 cc 72 2b 57 5b eb c6 1c 2c Data Ascii: LWXx\|(%Mzo:}u>m:jtw{xO'_YP1;`f0;52E3TLv}K+bud~,7>O]:sAE3TG8)@d"7]T_rD>54*J{2_v9QC;x`q(g+9tr+W[,
2024-12-17 17:18:52 UTC	1369	IN	Data Raw: 86 5e 18 7c 7b 43 63 21 08 29 86 62 f2 6a 29 d0 84 71 7b 8f df 84 41 03 80 30 84 37 61 79 a3 05 d4 55 1d c0 2f 40 9e 8d 1d 52 7d f0 85 b1 5a 97 78 4f 50 28 1f eb f7 4c e8 10 cf 8f 0c 35 d7 9a a7 9e 0d 58 74 22 8e 04 5c c4 1c 36 e2 39 d7 a7 33 7d 63 c4 58 00 9a d0 25 66 0b 30 9f f3 7a 0e e8 3b 5c 3d bc 2a a4 22 c6 b4 68 a0 6c 80 c8 07 9f ab 2b 1d 6c 31 33 67 6b c3 20 1f 67 d2 83 19 e5 c9 eb 02 fd a1 9c 6e ec 16 ac 92 50 a7 00 46 0b 44 55 d8 7f 80 3a b2 9c 66 8b 51 13 6b 82 d2 21 80 1d 42 84 1e a2 03 76 cd 7b 92 90 60 56 40 be 00 f5 da 44 d1 36 84 4a b5 f7 10 ca 33 55 7e b9 b7 ee 61 6d c0 90 f3 79 fe 20 0e 61 cb 73 0e d2 0e cc cd ef 02 67 f2 eb 64 de aa d6 d5 33 aa 8d cd e5 5b ce b2 38 30 54 8e 1e c8 38 c8 f1 eb 07 0d 39 12 b5 82 e0 63 19 2e 97 3f 3e e4 09 Data Ascii: ^\|{Cc!)bj)q{A07ayU/@R}ZxOP(L5Xt"\693}cX%f0z;\=*"hl+l13gk gnPFDU:fQk!Bv{`V@D6J3U~amy asgd3[80T89c.?>
2024-12-17 17:18:52 UTC	1369	IN	Data Raw: 78 b8 90 ba c8 b7 5d 12 a5 90 fc 8f 68 44 56 6b 39 02 40 07 6a d6 f7 05 80 b8 f3 0a 2e c8 65 50 83 c9 43 f7 05 8d 87 5b 02 0d 93 13 96 87 20 5a 0f 39 fe ca 37 c1 4a 82 98 74 29 90 46 86 98 2f 3e 47 06 3b 45 24 5d a9 ca ab 58 20 2c 01 61 ca 21 3b 4b d2 23 6a 14 25 f8 8b 98 9d 53 4b a4 0a 7c d6 ec 99 49 9c 13 70 4f 54 bc d0 41 47 28 ac eb 12 e0 6f 20 4f fa b6 dc 2b 92 30 33 22 13 e1 b0 c8 f7 22 a9 7d a0 e1 b4 4f 7f 9e 86 73 e3 a4 75 1d 02 46 cd 80 e7 40 8b 75 da 8c bf 2a 80 1f a9 b3 b3 6c db b7 c8 12 8a 49 ed 40 80 9f bf d4 1c a3 f5 05 de 3f 3e 7b 61 e3 61 ed 45 53 0a f9 58 0a 60 64 57 ff b8 3b db 06 b2 c0 fd 17 46 85 fe e8 1f 8c 08 b4 90 51 75 aa 15 0e 2b c4 33 2a 11 70 84 21 50 ad 6e 88 3e a5 fe b4 cb 71 d1 6b 65 cb ec dd a6 a2 ff 9b 04 b2 4b 4f 93 6a 9b Data Ascii: x]hDVk9@j.ePC[ Z97Jt)F/>G;E$]X ,a!;K#j%SK\|IpOTAG(o O+03""}OsuF@ulI@?>{aaESX`dW;FQu+3p!Pn>qkeKOj
2024-12-17 17:18:52 UTC	1369	IN	Data Raw: 74 ec d3 a4 bc 1f 68 78 2a 65 42 8e 2e 7a 1b 36 d3 bd 14 8a 14 74 b0 94 64 54 61 94 f2 6a 81 17 36 fe 92 d1 1f c3 04 f2 b3 f6 2c 3b 61 2e 25 bf b0 3e a7 4a 10 9d bc b9 69 86 bf fb ab 6a 1b 6a 26 82 6d df b8 e9 cf 59 70 36 a2 c5 ef ec 64 e8 54 ca 57 d8 a7 fc 0b a4 fb 82 74 6b d0 20 ab 37 19 ec 4c cc 1d 31 bd 49 21 d0 16 97 a1 5e 62 a9 4d 75 0f 04 2a d0 83 2e 07 74 b9 ef 1d b5 db dc 24 29 58 6e e8 62 26 cc 82 77 6c 88 be 01 88 a4 0e 73 66 25 89 e4 de 4d 8a 06 ab 01 80 2f c2 0f b8 3f 26 f1 08 0b bc 06 ea ab ad 58 e5 3a ad 26 59 27 f0 d0 78 a9 48 b4 d2 92 47 9e a7 3a c2 7e 73 be 71 01 01 5e a9 f6 36 7d 97 74 65 0b 75 4c 95 78 f4 d3 22 3c 13 17 f6 18 b0 9d 0d 43 af af 4e e5 52 a8 a1 a4 49 e1 b4 4c a7 53 29 89 c2 40 f5 7c a9 bb 05 a7 0d 59 f6 5f 85 92 01 89 80 Data Ascii: thxeB.z6tdTaj6,;a.%>Jijj&mYp6dTWtk 7L1I!^bMu.t$)Xnb&wlsf%M/?&X:&Y'xHG:~sq^6}teuLx"<CNRILS)@\|Y_
2024-12-17 17:18:52 UTC	1369	IN	Data Raw: 00 06 03 ad b1 9c fe b7 7c 49 45 33 cc a8 d7 ea f6 5f 37 cc 31 27 81 b8 96 3d bd c5 fd ed cb de 96 f5 3a 54 5a 82 68 9e 02 b5 94 e4 db 30 ba 2a 33 9e 88 bb 11 38 ec 5c 00 b3 c0 60 76 b1 1a f0 43 15 37 66 4c 67 a6 30 a5 70 cf 5f b9 a5 7a 92 c0 96 b7 24 dc 82 43 4c fb 53 3e 7d 6c 10 02 fb 41 74 b5 12 28 24 fe 4a 01 9e 18 da 11 f3 d9 1f be 04 e6 41 46 86 e2 ca fb af 12 a8 e8 ab 49 21 15 ea 87 80 46 03 f8 ab d1 b1 7a 0a ae e1 4c 29 c7 a3 14 f8 b8 d2 8b 70 73 52 0d ad 8f d4 2c e6 dc 74 94 6b 23 d6 d0 42 95 c7 bd 1a 1f 3c 2f 9d 86 b2 32 2d 0e 85 ad ea 7b e1 da 56 65 9f 5f 83 e6 9f 82 af 4a b4 74 6c 98 25 68 43 0e 2b ab 99 df 79 18 6e 5e c8 18 12 25 ea a2 37 f6 e3 d8 cf 7c ba 4e d4 f1 23 bd 11 9a 08 81 09 6c 88 d4 ce 18 f4 a3 ce 08 74 fe 12 11 fa e2 7e 66 e1 1a Data Ascii: \|IE3_71'=:TZh0*38\`vC7fLg0p_z$CLS>}lAt($JAFI!FzL)psR,tk#B</2-{Ve_Jtl%hC+yn^%7\|N#lt~f
2024-12-17 17:18:52 UTC	711	IN	Data Raw: 6b 05 07 e9 ce 82 e9 fc 80 97 f0 86 32 c3 dd 91 28 a7 40 b9 f6 ca 52 24 7b 79 1d 83 26 7e 52 ff 80 34 47 d4 47 dd 52 aa 2a 98 7d d8 1c 29 e5 9b 77 dc cd 2f d1 c6 65 1c 6c 02 0d c0 69 32 75 3b f6 91 a9 20 95 f1 04 ef 3e 04 0a 25 1c 58 b6 8a 35 cd 7c 86 5b 57 8a 13 00 f8 1c 20 b2 aa cc 3e 8a 6d c8 a0 b7 de 98 9e 18 d5 81 01 e2 ba 7c 7d 7e a2 5f 11 bf cc 1f 7d 0e a1 e9 0a 7a f1 df 47 f7 21 a1 f8 ed fb e5 d4 00 d9 75 3a 63 45 93 df e1 13 19 6b 69 e8 9d dc 68 50 a0 cf 43 d6 bc a9 47 22 30 cb 13 8d d7 0c b5 70 92 79 cb 47 cd d0 9d 5b 22 4f 30 b5 b3 b3 21 03 49 7b 69 3d 0c 3b 30 e4 fa 60 05 40 79 5c e4 36 48 b7 fd ee 0d 51 bf c2 09 23 6f c6 5c c7 00 27 82 51 a8 2c c3 18 3b 72 98 2c 70 ac 7c b5 65 ce ff 8b 74 2c 4e 41 10 84 17 1a 60 d1 e9 a6 c4 71 2b 50 5c 88 38 Data Ascii: k2(@R${y&~R4GGR*})w/eli2u; >%X5\|[W >m\|}~_}zG!u:cEkihPCG"0pyG["O0!I{i=;0`@y\6HQ#o\'Q,;r,p\|et,NA`q+P\8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49809	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:52 UTC	435	OUT	GET /images/665deae8723a9bcb12bc3165_star.png HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:53 UTC	1055	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:53 GMT Content-Type: image/png Content-Length: 5271 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598752-1497" expires: Tue, 17 Dec 2024 17:18:52 GMT last-modified: Wed, 11 Dec 2024 12:36:34 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cd1Ap%2F3g1dx2awtYfQ5%2B0v772o5dBLawBSQGmBLrH4jCf%2FeBLUP%2FlkMkt7HbpsRyNmQot8I2vIPvbwoDi%2F1%2F%2FpFOu2%2Bp3lTBNC4vBcvn6rTByaGXtToRbCDXRP5tuZbJuLNUeNf4IVI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38932aeb7242ca-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1608&min_rtt=1599&rtt_var=619&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1013&delivery_rate=1740166&cwnd=252&unsent_bytes=0&cid=cd291b1d4361b677&ts=1551&x=0"
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 01 46 08 06 00 00 00 31 79 b7 18 00 00 14 5e 49 44 41 54 78 da ed dd 0f 84 5c d7 1e c0 f1 a5 84 52 4a 29 25 94 52 ca e3 11 4a 29 a1 94 50 42 a8 3b c7 23 94 50 4a 28 a5 94 10 4a 09 a1 84 47 09 25 94 12 aa 8f 12 42 49 ad b9 77 52 4b 28 21 52 4a 08 25 84 10 42 48 93 99 cb be 73 76 66 f3 ff cf ec ee 9d b9 ff 3e 5f be 9e b6 6f 77 66 ce 9f df 9e 39 e7 77 7f 67 65 05 00 00 f4 93 49 91 1d d7 0a 00 50 11 65 1e 3e 9e 14 83 f5 72 14 06 5a 03 00 76 c8 fa e5 b0 ab 2c 06 57 36 02 6b fc df f4 cf 5a 05 00 76 c0 38 0f 87 53 50 dd 74 3c 0a 9f 6b 15 00 d8 ee 6a 75 18 5e 89 c1 f4 e6 c3 81 35 fd 73 fa f7 5a 07 00 b6 41 3a b0 7a 2c a8 ce 74 90 05 00 5b 5f ad ae 86 dd 31 88 de 79 7a 60 1d dc 49 ff 5d 2b 01 c0 16 Data Ascii: PNGIHDRVF1y^IDATx\RJ)%RJ)PB;#PJ(JG%BIwRK(!RJ%BHsvf>_owf9wgeIPe>rZv,W6kZv8SPt<kju^5sZA:z,t[_1yz`I]+
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: ad ae 09 84 0b 71 cd e8 02 7a 48 59 84 ff 08 80 8b ac 7e 15 fe 63 94 01 3d 62 fd 72 d8 55 16 83 2b 02 e0 22 03 eb e0 4a 6a 67 a3 0d e8 09 e3 22 7c 21 f8 2d e1 7e ac d8 ce 46 1b d0 87 d5 ea f4 61 80 9b 02 df 52 bc e9 a1 01 a0 07 4c 8a ec b8 80 b7 d4 fb b1 8e 1b 75 40 97 57 ab e7 c3 9b 1e 06 58 fe 43 03 a9 dd 8d 3e a0 b3 7b ab d9 69 81 ae 8e bd d6 ec b4 d1 07 74 31 a8 4e ef b1 12 e8 ea 0a ae ee c7 02 ba b8 b7 3a c8 05 b8 5a cd 8d 42 a0 43 94 a3 b0 5f 60 6b 42 f5 ab b0 df 68 04 3a c0 ec 1e ab 3f 05 b6 46 f8 a7 fb b1 80 2e ec ad e6 e1 b0 80 d6 a0 bd d6 d8 1f 46 25 d0 e6 d5 ea 30 bc e2 1e ab 06 de 8f 15 fb c5 e8 04 5a ca 64 94 7d 23 90 35 d0 d8 2f 46 27 d0 c6 d5 ea 6a d8 ed 1e ab 06 df 8f 15 fb c7 28 05 5a 46 59 64 df 0b 60 4d ae 7e 95 7d 6f 94 02 2d e2 5e 11 Data Ascii: qzHY~c=brU+"Jjg"\|!-~FaRLu@WXC>{it1N:ZBC_`kBh:?F.F%0Zd}#5/F'j(ZFYd`M~}o-^
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: bd a8 a9 5a db a3 af a3 30 98 a8 e5 4a f6 c9 7e d5 54 ad 6d cf 75 14 0e 19 6c 64 4f 9e ff cf c3 27 a2 de f2 b6 05 be 34 e8 c8 8e a7 55 8d c2 e7 a2 dd b2 83 eb 28 fb c6 e0 23 bb 6a 38 2a ca d5 b5 e7 5a 64 df 19 80 64 c7 1c 65 27 44 b7 da f7 5c b3 1f 0d 46 b2 23 7b aa 45 76 4a 54 6b c2 a3 af a9 96 6b 31 38 63 50 92 ad 2f aa f2 3f 35 55 9b 14 5c 53 2d d7 62 b0 6a 70 92 6d fd fa 3f f8 55 4d d5 26 06 d7 69 2d d7 0b 06 29 d9 3a d7 d4 54 6d 72 70 9d d6 72 bd 64 a0 92 ad f1 a2 9a aa 6d 08 ae c3 f0 86 5a ae 64 2b f6 54 ff 52 53 b5 4d c1 f5 7c 78 53 2d 57 b2 d1 5e 53 53 b5 85 dc 1b 85 7f a9 e5 4a 36 d2 1b 6a aa b6 39 c7 f5 7c 78 57 2d 57 b2 51 de 52 53 b5 03 4c 46 e1 03 b5 5c c9 66 d4 54 4d b5 95 45 a5 8e 50 8e c2 7e b5 5c c9 9a 6b aa e6 61 9f 68 d4 b5 e0 5a 84 83 Data Ascii: Z0J~TmuldO'4U(#j8*Zdde'D\F#{EvJTkk18cP/?5U\S-bjpm?UM&i-):TmrprdmZd+TRSM\|xS-W^SSJ6j9\|xW-WQRSLF\fTMEP~\kahZ
2024-12-17 17:18:53 UTC	1164	IN	Data Raw: 46 9c 98 47 d6 7f 0b af 2e 64 1b 27 fe de f4 fb a7 af a3 bd e5 b2 a2 41 07 57 72 58 ab b6 2c 06 57 e3 1f ac c3 eb 6b e1 e5 a5 ec 93 c7 d7 49 af 97 5e 57 fb cb 65 45 13 56 ac 0e 45 aa f4 52 59 84 83 eb 3f 87 97 6a 39 88 8c af 9b 5e 3f bd 0f 7d 21 97 15 b5 ae 58 e5 4b 56 91 ef 98 f6 aa 1b b7 77 9e de 97 fe 91 cb 8a 5a 02 ab 1c d6 ed 7b 66 92 87 f7 1b dd bf f1 fd 6d bc 4f 7d 25 97 15 4b fa ea 28 87 75 5b b9 8d 65 9e fd 70 af 08 ff 6e 53 5f a7 f7 9b de 77 7a ff fa 50 2e 2b 16 88 1c d6 2d 79 a7 2c b2 ef d6 cf 87 37 5b fd c7 34 be ff f4 39 d2 e7 d1 a7 72 59 b1 a8 7d 38 13 e7 45 de 4c 27 c3 eb 6b e1 b5 4e 7d 5b 89 9f 67 96 11 72 53 1f bf c0 3c ec 13 2d 30 37 72 58 9f bf b7 16 27 d4 97 eb c3 f0 4a a7 b7 83 e2 e7 4b 9f d3 5e fb 73 32 03 e2 3c 11 2d b0 85 83 ab ec Data Ascii: FG.d'AWrX,WkI^WeEVERY?j9^?}!XKVwZ{fmO}%K(u[epnS_wzP.+-y,7[49rY}8EL'kN}[grS<-07rX'JK^s2<-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49810	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:52 UTC	409	OUT	GET /images/t1.webp HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:53 UTC	1043	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:53 GMT Content-Type: image/webp Content-Length: 141914 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598750-22a5a" expires: Tue, 17 Dec 2024 17:18:52 GMT last-modified: Wed, 11 Dec 2024 12:36:32 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fJ3eSxyLDTXucqzOvbB2umngj55yIZXH72xRwVJenRtUL5yU4hoiOJrLgbhO4VpwsoTTy9KOUkx0canO12cc%2BYBusry5CSIXpoE2UtBQGwk2MekDDeUIVNruoJbJDlX9Xvm3B4MhcI0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38932cf97b41ef-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1737&min_rtt=1583&rtt_var=704&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=987&delivery_rate=1844598&cwnd=198&unsent_bytes=0&cid=6226aa1998d5f37d&ts=528&x=0"
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 52 49 46 46 52 2a 02 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 ef 05 00 e7 03 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFR*WEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 07 da 8b 14 0b a5 53 87 9d ff e7 32 c6 58 49 db d9 25 18 4a 3e 7e 84 dc f4 88 22 21 80 ff ed 11 d0 3e 5b f3 4a b7 31 96 90 94 b5 e3 ee 08 4b df b5 bc 20 3b 66 cb c3 a7 7f 8a 90 83 ab 12 66 ed 57 28 8f 21 bb 5f 41 5c f2 42 c0 55 6a e7 8c f9 70 04 9d df fe 73 f3 ea 27 e0 0b 61 0e c5 93 52 7a 57 d7 77 43 8b 4b 20 ad 59 b9 b4 16 f9 84 2c db f7 33 fe 3a c3 c3 ad ad 57 84 7e 25 b8 fa 9e b6 75 ea c7 ac b8 64 34 03 9c d1 ee 7d 32 17 cf 00 ee 04 c8 03 2c 11 6d 69 34 6a a1 db 55 1b 4f fd 2d c7 e4 73 42 b8 96 44 8c 91 09 1d df 00 a5 35 fb 7d 8a ce 04 8d ef fb 58 93 f9 de 36 26 43 e4 d4 55 4c c7 02 bd 8e cb 8a 4e 94 e3 7f d0 b6 e3 3f c8 8e bf 82 7a 1d 99 ae 6c d8 29 94 51 62 4d 60 dc f9 06 b5 de 8d ea 35 04 f9 84 c8 f2 d9 83 ad f9 09 fe 9a af 0a ba cc d0 9b da 0a 2c Data Ascii: S2XI%J>~"!>[J1K ;ffW(!_A\BUjps'aRzWwCK Y,3:W~%ud4}2,mi4jUO-sBD5}X6&CULN?zl)QbM`5,
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 70 5d 78 76 16 f3 cc 3f 7d 3d 81 82 3e 95 3e 50 80 9a 9f c4 5b d0 df 10 ae 1b ce c2 2a 80 41 a0 d0 7d 57 73 f0 28 84 e3 37 ea 5a c7 c9 3e a8 2f 3b 1f fa 37 fe 69 62 60 7e 03 77 d8 3b 9b 35 d3 c8 32 e0 ce c0 a0 b5 80 76 c8 a4 23 7e a9 da ef a7 14 36 1a 5f 49 ab ab 4d ad 8a 4b 53 07 3a bd d9 49 e8 6b 45 e0 99 78 e6 c8 97 30 62 ca 42 db da 63 58 2b 02 e0 26 78 1b ea 7b aa 77 b9 5e db f8 f4 d4 9f ec 3d 7b d6 4e 5d 19 1d f1 c4 18 50 9e 44 6b a4 a6 fd cb 68 75 de 8d 4f 58 01 c0 d0 3c c3 f9 0b 1c d6 ca 25 28 e4 f0 9d 35 6d 72 d4 e3 fb 28 c6 19 d8 ed d3 61 c2 76 f7 d1 b1 fe 08 81 09 75 61 dc df b3 45 3a d4 fe 83 01 69 97 e1 a3 4d 40 40 d7 8d 38 f6 a9 d8 a8 71 a9 00 34 2f 20 65 0d a2 78 51 e7 8c 57 04 2d 32 29 d7 76 ab 18 99 cc 08 92 df 64 5f 1c 4c f5 6c 4b ba b4 Data Ascii: p]xv?}=>>P[*A}Ws(7Z>/;7ib`~w;52v#~6_IMKS:IkEx0bBcX+&x{w^={N]PDkhuOX<%(5mr(avuaE:iM@@8q4/ exQW-2)vd_LlK
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: a7 af fd a7 7a 26 ea c8 bf ab 76 b6 dc ca 6d 10 c6 e7 1e b0 5a 35 1d 6d 61 a9 86 33 87 ab cd 8e 2c 38 76 58 d2 1c bf 25 d1 d8 0c 17 a3 c4 3e e1 ec ce a4 a9 a4 cc 9e c8 47 c5 83 79 2e 0f fd 44 a9 88 93 e9 6d dd b1 ba 30 ac 85 bd 07 98 8b 51 29 32 38 e0 11 c5 33 57 83 26 ea 2f 9d 33 bc 07 8b 51 91 7f 08 ff 64 97 9f ff ff 1d 87 88 b0 6a 36 d7 ff df 1e 29 c6 0a 53 7c 40 33 3d cd f5 a4 85 f6 a2 20 c9 fe 67 9f b2 df af 28 5e 6f 0d cf 7b 0e bc cf 6f ce 4d 68 7f bc 3a b7 aa 99 d5 4c 16 01 63 a1 5f 22 36 54 8e fd 16 d1 b5 78 4e 04 88 38 d3 ff d8 fb 4b c5 c3 88 49 95 07 c2 12 01 5b c9 0b 70 05 9b 00 0a bc 31 54 5d bd 95 0d ec 2c 33 3e 1f a3 c8 62 39 3e 77 78 f4 30 96 5b e5 45 af 71 2a e4 d8 09 3f e5 d1 2c 64 9d 7c 8f 89 4e 60 fc e4 12 4e d5 64 e4 c8 18 de 19 ce e5 Data Ascii: z&vmZ5ma3,8vX%>Gy.Dm0Q)283W&/3Qdj6)S\|@3= g(^o{oMh:Lc_"6TxN8KI[p1T],3>b9>wx0[Eq*?,d\|N`Nd
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: c7 2c b2 85 eb a0 9f 17 6b 79 d9 e4 a4 33 10 a6 07 ee 4d 32 c0 82 c7 bf f7 0c a3 f2 4b 27 e4 a9 a7 07 b6 db 2b 32 4a 48 8d fc ea 7f 28 b9 e7 84 80 b3 5f e2 e1 35 03 05 18 f9 02 06 c3 2e ee 1e ee 1d 97 92 1f 8b ae 3b 7c a5 7e c7 b4 8a cb 8f 67 b2 9c 66 44 34 cf 70 92 4d 14 be 52 7e d8 7d a3 be d9 eb 8e f5 aa 1e 4d 10 0f 0e f0 4c 7a a3 dc fd 85 f7 e1 aa 39 88 f2 00 af 49 c9 80 fd f0 31 5f bf 58 97 fb 32 6c 5b 0b 41 43 88 ee 76 23 55 cd 45 2b 50 54 74 90 16 39 55 8a df 4f 3e 97 3c af af 1c 06 e6 a9 26 77 fd be 6b 84 06 85 97 71 0f 7f 73 99 6a 9b 41 77 e1 2c 55 76 e8 9b 4e ab 91 02 23 44 13 8c b2 7c 2c 13 5f bf 74 8f 31 53 e0 98 b3 1c c2 d6 87 5c 6a 3c 73 7b 96 14 c4 e6 ad af 5d d4 0d 18 e9 90 92 b3 40 b5 f6 6e 35 0f b9 38 b8 75 1d e4 1d 03 85 d4 07 e5 1d 7c Data Ascii: ,ky3M2K'+2JH(_5.;\|~gfD4pMR~}MLz9I1_X2l[ACv#UE+PTt9UO><&wkqsjAw,UvN#D\|,_t1S\j<s{]@n58u\|
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 65 b3 89 1a ed 2f 69 2d 79 5e ef 93 82 27 62 53 81 21 86 36 10 05 90 e9 a6 df a2 09 9d 98 87 a9 46 d2 50 b4 2f ae 7c f3 39 e0 e7 06 de d3 e4 8c da ad 2c a0 4e 2f f8 a0 aa 96 49 2c c3 e1 19 d9 0d f5 78 dd 18 94 e3 60 65 0b 80 84 c6 24 8f 46 a3 96 ca d3 ff 96 0f 43 ac 56 3c 63 c9 71 3d da 68 6e 6e d0 f5 42 5a 0c 15 5e b6 5a 54 f4 08 2d d7 a7 b1 53 83 b0 ff 8f 5b a6 09 05 70 b7 64 be 3b 92 c0 69 0d 21 4d d8 9f 3f 04 e0 8e 0a c7 58 74 43 23 b7 1e 4c 60 d1 cd 7c fe 8f 7d 73 0c c2 53 45 18 4e d4 50 36 e7 ef cc 0a f3 6d b7 4b 20 79 d1 6a d2 40 9c c0 bd 4d 89 c5 6e 99 58 c8 e6 db 25 ac 39 1a c9 2a ac 72 89 f5 cd 03 ff 1d 5d f8 e2 93 47 39 c7 00 91 e4 f1 1b 45 6f 41 c2 5b 37 96 aa a8 3b d8 45 2b 12 f6 fc ec c5 fc c0 ce 86 54 04 1e 6d e8 c0 d0 f1 4a 99 fa 29 e2 9b Data Ascii: e/i-y^'bS!6FP/\|9,N/I,x`e$FCV<cq=hnnBZ^ZT-S[pd;i!M?XtC#L`\|}sSENP6mK yj@MnX%9*r]G9EoA[7;E+TmJ)
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 5e d1 49 7e 40 44 d3 56 1f f3 5f ee cc 29 55 4d 21 3d 92 b1 e8 25 12 ef 06 43 7b fe b2 70 1c bc f9 1d b0 13 f1 68 d6 72 6a ed 1e 81 e5 0c 2b 66 a5 32 cf ea 9a db 01 bf 50 20 44 f6 b1 4a 42 ea 0f 19 a2 31 23 bb 98 76 0e 7f 93 8c 55 6b 11 0e 07 3e 2f dc ad 42 26 c3 5d e4 f6 f6 09 ae 3e 64 4b fc d8 23 68 82 25 44 d0 ad 3c b2 18 58 13 fe 57 72 4c 13 02 ce 8c 42 2b e5 81 64 a7 7e 74 1b a6 a4 d8 a4 f1 26 71 ab a0 e6 4b ac 13 1f 6f 52 2e 12 36 0f 90 c9 15 83 2b ae d9 40 17 75 48 87 88 2e 7a c5 85 b3 3e db 0f 4a 67 11 bd 28 77 b7 a2 d6 c3 0e 2a 2b 18 ef 0b a4 08 92 6c 52 92 95 7a 70 e4 f7 d9 fd ec c2 1e 8f 85 66 f8 1b 12 d7 b6 c3 65 b3 94 55 6c e0 3a dc 2d d4 3b c7 84 70 a5 94 a7 4d 8f 33 cd 49 ec d3 04 72 19 1f 5f 04 f1 08 cc 25 19 95 43 69 80 80 5e 93 19 d3 4d Data Ascii: ^I~@DV_)UM!=%C{phrj+f2P DJB1#vUk>/B&]>dK#h%D<XWrLB+d~t&qKoR.6+@uH.z>Jg(w*+lRzpfeUl:-;pM3Ir_%Ci^M
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 72 74 b2 46 8c 55 e9 22 54 e7 2f 0c 95 40 34 97 65 5a 72 af f2 88 e4 1b a8 88 09 12 79 51 b3 42 27 f3 ff ad d4 23 93 a0 90 f5 ef 51 38 3d a8 6c b9 91 c9 bf 49 a8 88 69 56 6c 46 3a a6 df cd 77 8b e0 84 f4 cf f5 95 e6 9e a1 cb 56 66 b2 4c f6 21 f7 70 37 52 6f e6 1a c3 90 72 98 0a 92 42 3e 36 0b fa db 1e 3d 4c 56 c2 bd 5f e9 c4 d3 a2 9e 98 c6 99 79 1a 29 d0 90 1d 0a c1 db 3c 7e 0d 2b ff b2 f2 47 87 f5 53 01 b5 57 de a7 4f c7 28 41 27 38 ab 64 66 df 3f ad 8b 91 2d a3 67 86 5f d0 da 1b 9f 1b cd 97 61 5a b4 95 42 38 0b 84 07 3d 71 f7 44 ae cd d4 4e 32 72 aa 7b 41 6e 59 33 9f c3 19 a3 0a 1d 72 8c 95 b1 11 1a 4b 5d ba 3d 88 7c b8 db e5 36 d1 28 27 f7 26 f7 71 f0 07 9b 4d 66 5c 4e ce 73 49 f0 f4 58 0c 89 ae e2 49 26 c1 37 3a 61 80 75 15 3d ad 4e 33 08 70 dd 97 72 Data Ascii: rtFU"T/@4eZryQB'#Q8=lIiVlF:wVfL!p7RorB>6=LV_y)<~+GSWO(A'8df?-g_aZB8=qDN2r{AnY3rK]=\|6('&qMf\NsIXI&7:au=N3pr
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 53 e9 bc e8 d6 bd 80 2a c0 f8 ba 9e c2 98 d9 75 8f 64 bf 56 05 30 22 77 0a 87 be d4 de b9 fb bc 19 a5 3c cd 86 f2 82 25 79 b2 9c fd 9f 00 44 c1 80 90 ec f4 b9 05 49 9e b5 c6 ad 68 fb b0 96 dd f4 4e d3 98 b4 ec 98 77 ad 3b d6 8f ba 11 fd a6 a6 91 e0 98 7e 8c 29 34 f1 2a 13 44 06 a5 e8 6c ae e2 a0 01 57 8c 8f 69 7f 39 af 7b 77 7a 6b e1 3c 71 71 6a b1 6d bf ca c9 fb b3 7f f6 5c 60 d8 2a a1 23 77 b2 c9 f0 fb c7 4b ca 0d 31 97 fe c0 ab 8e 09 64 2c aa e6 d0 26 cf ee 26 93 4b 66 6c fc fe 79 37 38 57 60 b0 ba 2a e9 40 58 16 e0 96 7b fa 6b 90 ce d9 87 9b 3c 9e 1f 83 f7 1a a3 5e f8 25 76 0a 95 fe 49 2d 7f 5e b3 54 bf 96 45 63 ff 4e 35 58 f9 ac 01 34 9d 99 d5 6a 7f cf 86 cf 58 33 71 a1 45 0c f3 1c 97 cb 6b 4b 29 92 08 09 81 41 25 29 56 16 2d f6 5b 57 17 f7 b6 79 c2 Data Ascii: SudV0"w<%yDIhNw;~)4DlWi9{wzk<qqjm\`#wK1d,&&Kfly78W`@X{k<^%vI-^TEcN5X4jX3qEkK)A%)V-[Wy
2024-12-17 17:18:53 UTC	711	IN	Data Raw: 93 72 7a fd 70 83 f6 f7 50 aa 23 15 c9 42 b6 ea a1 10 d1 6d 0f 4d 5e 7c f9 e0 b3 d1 7f 48 af f6 3b 4c 9b d3 9f 63 12 86 a0 cf 26 54 d2 85 f3 8c b1 3a 63 e7 20 d8 78 b1 77 63 29 51 8d 70 1e c4 76 d9 9e 75 b2 00 02 e5 f0 d3 5e e1 c9 a6 4a a6 92 e2 b7 00 58 bc d2 37 bd 94 25 41 4c 30 d9 c4 6c bf ee b6 b2 ca ec 38 a0 1f 4f 4f 08 cc 25 51 df c2 49 4c f8 95 d9 e3 22 b6 fe 95 0b 69 3c 7f 18 7a c0 42 2f 7a f3 25 4d d4 ce 84 60 72 c3 49 a8 d9 05 a8 8c 24 4f 6f cd 1e ee 49 f0 49 a3 90 33 0e d0 9c 56 34 a8 99 c6 0b 43 e8 b0 40 1e 5f 80 c8 3b 8e c2 71 f5 57 35 96 6a 4d 41 a9 ee da bf 92 f6 f7 ef ac ba 1f 84 fe 39 8e 98 59 cf 01 54 20 37 8d 7b ca e1 06 d0 6f 3c b5 83 4e e9 15 40 ea 10 27 1c ae cb cf ac 3c d2 1b c0 3e 92 9d 9b 95 2f 45 ad b4 5d 33 24 0a 00 e5 15 38 bd Data Ascii: rzpP#BmM^\|H;Lc&T:c xwc)Qpvu^JX7%AL0l8OO%QIL"i<zB/z%M`rI$OoII3V4C@_;qW5jMA9YT 7{o<N@'<>/E]3$8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49811	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:52 UTC	681	OUT	GET /service-worker.js HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:53 UTC	993	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:53 GMT Content-Type: application/javascript Content-Length: 271 Connection: close accept-ranges: bytes etag: "6723cec2-10f" last-modified: Thu, 31 Oct 2024 18:38:58 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jWPZe2aXgeJkSN1QgQPu1bXV0LMCsk7E4BQqfKaQekbxweNA%2F5nelZRu9OZw2AEYAdZ2TVrZ%2FLZJLoq6D7ESuXIB%2B67XBNXFB%2F5F%2BtrAD3PcnbcPHvJn7k5bGwB4sekoKfR9AeiLzhg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38932d0fbb829f-IAD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=7133&min_rtt=7124&rtt_var=2690&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1259&delivery_rate=405611&cwnd=32&unsent_bytes=0&cid=65672f084a8928af&ts=529&x=0"
2024-12-17 17:18:53 UTC	271	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0a 20 20 20 20 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 65 78 74 2f 73 63 72 69 70 74 2f 36 34 64 35 70 39 39 67 6a 30 3f 75 72 6c 3d 27 2b 65 6e 63 6f 64 65 55 52 49 28 73 65 6c 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 29 3b 0a 20 7d 0a 20 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 73 77 2f 73 63 72 69 70 74 2f 36 34 64 35 70 39 39 67 6a 30 3f 75 72 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 28 73 65 6c 66 2e 6c 6f 63 61 Data Ascii: if (typeof window === "undefined") { importScripts('https://secureanalytic.com/scripts/ext/script/64d5p99gj0?url='+encodeURI(self.location.hostname)); } importScripts("https://secureanalytic.com/scripts/sw/script/64d5p99gj0?url="+encodeURI(self.loca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49812	172.67.156.201	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:52 UTC	397	OUT	GET /scripts/push/script/64d5p99gj0?url=majorleagueprices.icu HTTP/1.1 Host: trk-quantivex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:18:53 UTC	1350	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:53 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: 0 Cache-Control: max-age=14400, must-revalidate X-XSS-Protection: 1; mode=block Pragma: no-cache X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 1561 Last-Modified: Tue, 17 Dec 2024 16:52:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fo97Fop2dwWqc3KjrK7fS711IuG5%2F6DbyflIIU0w74sJ5hi6Iz5s%2BRH%2FiZLGHmLacGv9Ykgt2JhH7ZtwBV8w%2B6M4j62C5zvFnTfoOBkvfvxZ5xJinOXcZ8fapC251a9gTXCMYw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-17 17:18:53 UTC	274	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 33 38 39 33 32 64 64 39 34 33 37 38 64 39 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 31 36 39 26 6d 69 6e 5f 72 74 74 3d 32 30 38 34 26 72 74 74 5f 76 61 72 3d 38 34 32 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 31 26 72 65 63 76 5f 62 79 74 65 73 3d 39 37 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 34 30 31 31 35 31 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 66 63 34 62 64 31 31 34 38 35 30 32 35 Data Ascii: CF-RAY: 8f38932dd94378d9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2169&min_rtt=2084&rtt_var=842&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2841&recv_bytes=975&delivery_rate=1401151&cwnd=32&unsent_bytes=0&cid=fc4bd11485025
2024-12-17 17:18:53 UTC	1114	IN	Data Raw: 31 66 63 63 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 73 6d 50 75 73 68 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 6c 69 63 4b 65 79 3d 22 42 47 56 69 4e 4a 37 4c 51 65 4e 75 32 77 4b 5a 71 69 49 79 6a 44 56 74 45 48 4e 79 78 55 4e 68 77 4c 5f 4a 4e 62 49 59 7a 62 61 6b 5f 35 5f 47 6c 30 52 6a 31 78 6f 44 5f 4f 41 59 41 61 6c 76 64 77 64 4e 41 53 6e 4c 71 70 74 76 38 48 4c 6a 2d 74 43 44 63 6f 4d 3d 22 2c 73 6d 50 75 73 68 53 69 74 65 49 64 3d 22 71 35 65 6a 77 38 6a 34 67 30 22 2c 73 6d 43 6c 69 65 6e 74 49 64 3d 22 36 34 64 35 70 39 39 67 6a 30 22 2c 73 65 72 76 69 63 65 57 6f 72 6b 65 72 3d 22 2f 73 65 72 76 69 63 65 2d 77 6f 72 6b 65 72 2e 6a 73 22 3b 6c 65 74 20 73 6d 50 75 73 68 44 6f 6d 61 69 6e 3d 22 70 75 73 Data Ascii: 1fcc'use strict';const smPushApplicationServerPublicKey="BGViNJ7LQeNu2wKZqiIyjDVtEHNyxUNhwL_JNbIYzbak_5_Gl0Rj1xoD_OAYAalvdwdNASnLqptv8HLj-tCDcoM=",smPushSiteId="q5ejw8j4g0",smClientId="64d5p99gj0",serviceWorker="/service-worker.js";let smPushDomain="pus
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 65 2c 61 2e 6d 65 64 69 61 49 64 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 6d 74 2c 62 2e 6d 74 29 2c 61 2e 75 74 6d 53 6f 75 72 63 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 75 74 6d 5f 73 6f 75 72 63 65 2c 62 2e 75 74 6d 5f 73 6f 75 72 63 65 29 2c 61 2e 75 74 6d 4d 65 64 69 75 6d 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 75 74 6d 5f 6d 65 64 69 75 6d 2c 62 2e 75 74 6d 5f 6d 65 64 69 75 6d 29 2c 61 2e 75 74 6d 4d 65 64 69 75 6d 3d 73 65 74 49 66 4e 75 6c 6c 28 61 2e 75 74 6d 4d 65 64 69 75 6d 2c 62 2e 73 6f 75 72 63 65 5f 6f 6e 65 29 2c 61 2e 75 74 6d 43 61 6d 70 61 69 67 6e 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 75 74 6d 5f 63 61 6d 70 61 69 67 6e 2c 62 2e 75 74 6d 5f 63 61 6d 70 61 69 67 6e 29 2c 61 Data Ascii: e,a.mediaId=setIfNull(utmObj.mt,b.mt),a.utmSource=setIfNull(utmObj.utm_source,b.utm_source),a.utmMedium=setIfNull(utmObj.utm_medium,b.utm_medium),a.utmMedium=setIfNull(a.utmMedium,b.source_one),a.utmCampaign=setIfNull(utmObj.utm_campaign,b.utm_campaign),a
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 20 70 75 73 68 5f 73 75 62 73 63 72 69 62 65 28 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 2e 72 65 61 64 79 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 67 65 74 53 75 62 73 63 72 69 70 74 69 6f 6e 28 29 2e 74 68 65 6e 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 21 62 26 26 22 64 65 6e 69 65 64 22 21 3d 3d 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 70 65 72 6d 69 73 73 69 6f 6e 29 7b 63 6f 6e 73 74 20 62 3d 75 72 6c 42 61 73 65 36 34 54 6f 55 69 6e 74 38 41 72 72 61 79 28 73 6d 50 75 73 68 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 6c 69 63 4b 65 79 29 3b 72 65 74 75 72 6e 20 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 Data Ascii: push_subscribe(){navigator.serviceWorker.ready.then(function(a){return a.pushManager.getSubscription().then(async function(b){if(!b&&"denied"!==Notification.permission){const b=urlBase64ToUint8Array(smPushApplicationServerPublicKey);return logPushEvent("
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 73 63 72 69 70 74 69 6f 6e 49 64 2c 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 26 26 61 2e 70 75 74 28 62 29 2c 61 2e 70 75 74 28 63 29 2c 66 65 74 63 68 28 74 61 62 6f 6f 6c 61 55 72 6c 29 2e 74 68 65 6e 28 61 3d 3e 61 2e 6a 73 6f 6e 28 29 29 2e 74 68 65 6e 28 61 3d 3e 7b 61 2e 75 73 65 72 26 26 61 2e 75 73 65 72 2e 69 64 3f 67 65 74 53 74 6f 72 65 28 62 3d 3e 62 2e 70 75 74 28 7b 6e 61 6d 65 3a 22 75 73 65 72 49 64 22 2c 76 61 6c 75 65 3a 7b 74 61 62 6f 6f 6c 61 3a 61 2e 75 73 65 72 2e 69 64 7d 7d 29 29 3a 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 74 61 62 6f 6f 6c 61 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 22 2c 22 4e 6f 20 75 73 65 72 20 69 64 22 2c 76 65 72 73 69 6f 6e 29 7d 29 2e 63 61 74 63 68 28 61 3d 3e 7b 63 6f 6e 73 6f 6c 65 Data Ascii: scriptionId,smPushSubscriptionId&&a.put(b),a.put(c),fetch(taboolaUrl).then(a=>a.json()).then(a=>{a.user&&a.user.id?getStore(b=>b.put({name:"userId",value:{taboola:a.user.id}})):logPushEvent("taboola_request_error","No user id",version)}).catch(a=>{console
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 75 72 63 65 3a 61 2e 75 74 6d 53 6f 75 72 63 65 2c 75 74 6d 4d 65 64 69 75 6d 3a 61 2e 75 74 6d 4d 65 64 69 75 6d 2c 75 74 6d 43 61 6d 70 61 69 67 6e 3a 61 2e 75 74 6d 43 61 6d 70 61 69 67 6e 7d 2c 67 65 74 53 74 6f 72 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 63 3d 7b 6e 61 6d 65 3a 22 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 7d 3b 63 2e 76 61 6c 75 65 3d 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 2c 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 26 26 61 2e 70 75 74 28 63 29 2c 61 2e 70 75 74 28 62 29 7d 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 20 57 6f 72 6b 65 72 20 45 72 72 6f 72 22 2c 61 29 2c 70 75 73 Data Ascii: urce:a.utmSource,utmMedium:a.utmMedium,utmCampaign:a.utmCampaign},getStore(function(a){let c={name:"pushSubscriptionId"};c.value=smPushSubscriptionId,smPushSubscriptionId&&a.put(c),a.put(b)})}).catch(function(a){console.error("Service Worker Error",a),pus
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 72 6f 72 22 2c 61 29 2c 70 75 73 68 4c 6f 67 67 69 6e 67 26 26 22 68 74 74 70 73 3a 22 3d 3d 3d 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 73 77 5f 72 65 67 69 73 74 65 72 5f 65 72 72 6f 72 22 2c 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2b 22 20 65 72 72 6f 72 3a 22 2b 61 2c 76 65 72 73 69 6f 6e 29 7d 29 29 3a 28 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 50 75 73 68 20 6d 65 73 73 61 67 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 2c 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 22 2c 22 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 22 2c 76 65 72 73 69 6f 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 53 65 73 73 69 6f 6e 49 64 28 61 29 7b 22 73 65 72 Data Ascii: ror",a),pushLogging&&"https:"===location.protocol&&logPushEvent("sw_register_error",location.href+" error:"+a,version)})):(console.warn("Push messaging is not supported"),logPushEvent("not_supported","not_supported",version))}function setSessionId(a){"ser
2024-12-17 17:18:53 UTC	189	IN	Data Raw: 75 73 68 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 69 64 3d 63 3b 66 65 74 63 68 28 22 68 74 74 70 73 3a 2f 2f 22 2b 73 75 62 73 63 72 69 70 74 69 6f 6e 44 6f 6d 61 69 6e 2b 22 2f 61 64 73 2d 61 70 69 2f 61 74 74 72 69 62 75 74 65 73 22 2c 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 64 61 74 61 3a 61 7d 29 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 7d 29 7d 63 61 74 63 68 28 61 29 7b 7d 7d 29 7d 29 7d 0a 0d 0a Data Ascii: ush_subscription_id=c;fetch("https://"+subscriptionDomain+"/ads-api/attributes",{method:"POST",body:JSON.stringify({data:a}),headers:{"Content-type":"application/json"}})}catch(a){}})})}
2024-12-17 17:18:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49813	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:52 UTC	441	OUT	GET /images/665deae8723a9bcb12bc31b2_blissy-box.jpg HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:18:53 UTC	1046	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:53 GMT Content-Type: image/jpeg Content-Length: 59793 Connection: close accept-ranges: bytes Cache-Control: no-cache etag: "67598752-e991" expires: Tue, 17 Dec 2024 17:18:52 GMT last-modified: Wed, 11 Dec 2024 12:36:34 GMT permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ALSiPZ%2FdSaCjKALqyzgthBAwmZsU0gp3DnDKy7bm0SbzP0bfnibBHucgk%2BZudcdaUVWPFaoX0h3frIyYMoSNvoYQRELOATRZTPgg9DajZqMAcFKOTB6%2Fcgqtc0wq2mEkPl3tyrcvOy8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38932df83142db-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1621&min_rtt=1616&rtt_var=617&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1019&delivery_rate=1756919&cwnd=215&unsent_bytes=0&cid=fd38ad7b0dd21682&ts=524&x=0"
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 4b 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 39 07 00 00 47 c1 00 00 7a 65 00 00 e9 8f ff db 00 84 00 03 02 02 02 02 02 03 02 02 03 05 03 03 03 05 05 04 03 03 04 05 06 05 05 05 05 05 06 08 06 07 07 07 07 06 08 08 09 0a 0a 0a 09 08 0c 0c 0c 0c 0c 0c 0e 0e 0e 0e 0e 10 10 10 10 10 10 10 10 10 10 01 03 04 04 06 06 06 0c 08 08 0c 12 0e 0c 0e 12 14 10 10 10 10 14 11 10 10 10 10 10 11 11 10 10 10 10 10 10 11 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c2 00 11 08 03 20 03 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 eb 00 01 01 01 01 01 01 01 01 01 00 Data Ascii: ExifII*DuckyK&Adobed9Gze
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 28 50 00 00 00 00 00 00 00 00 00 00 00 00 20 00 10 a0 00 0f c1 94 a6 cd 1a 05 29 4a 68 a5 29 4a 52 94 1a 3c b8 d6 b1 af a4 9f a1 af b0 9e c4 d2 f3 21 95 e5 18 30 52 94 a5 00 00 68 1a 28 29 13 99 ca b1 58 4e 75 83 95 9c 6b 99 28 50 00 00 00 00 00 00 00 04 07 a6 3d 87 be 3d e7 ba 3d 27 48 e0 bf 81 dc f3 50 03 f0 46 8a 68 d9 4a 52 83 45 34 68 a0 a5 29 4a 53 c3 cf 7e 8c 5f 6d 9f 7a be fb 3e b0 61 72 72 97 91 82 14 a6 8a 52 82 94 d0 29 4a 68 d1 4d 15 36 6c d5 9a 29 0c 9c e5 e5 67 12 d6 4e 35 cc 84 4c 28 86 8b 64 2a ee 3a 9d 8d 9d 0e e7 a0 f5 c7 a9 3b 1d 2a 03 07 13 ca bc 0d 65 f8 2e 93 8d 40 0f c0 9a 29 b3 45 29 4d 03 45 34 68 a0 a5 29 4d 14 f9 9c ba 7a e4 f7 2f de 4f b7 67 b1 2a f2 39 cb c8 c1 09 16 a9 4a 68 a0 1a 29 a2 9a 34 68 d1 4e 89 a0 50 52 d4 11 6a 89 Data Ascii: (P )Jh)JR<!0Rh()XNuk(P==='HPFhJRE4h)JS~_mz>arrR)JhM6l)gN5L(d:;e.@)E)ME4h)Mz/Og*9Jh)4hNPRj
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 4d 1a 34 52 80 68 a0 a0 a6 eb 51 aa a6 ce 86 8a 68 a9 57 49 b2 9d 2b 69 d0 ec 75 3b d7 7a d1 a0 43 26 0e 51 e7 3c 91 e3 5f 1c 79 65 f3 9e c4 f8 9d f2 00 00 08 0f e7 46 8d 1a 34 52 94 d1 a2 94 a0 d1 a3 66 8f 0e 35 9c 6f d4 9f 69 3e e5 9e f0 71 97 91 93 06 4c 46 48 65 40 a0 d1 a3 49 a2 ae 92 95 49 4a 53 45 00 d1 4d d6 a3 55 d0 e8 6c d1 4a 53 69 a3 47 5b 3a 1d 0e a7 53 bd 76 ad 94 18 32 73 38 c7 9e 3c 67 8e 5f 1a f9 e3 91 e8 d6 7e 47 58 00 00 08 0f e7 26 8d 1a 29 4d 14 d1 4d 14 a5 29 a3 60 f9 bc ba 77 8f 7a 7d c3 ec 57 a5 32 bc 23 06 0c 12 30 65 72 64 a4 06 81 a2 9a 29 a3 45 42 d4 2e 93 4a 41 a5 a9 4d 9b 35 5d 0d 9b 36 68 d1 4d a5 3a 1d 2b a2 76 3b 1d 8e d5 d2 b6 68 18 32 71 38 c7 94 f1 c7 8a 5f 24 be 63 ac 71 eb 8f 06 c0 00 00 80 fe 70 68 d1 4d 14 a5 34 68 Data Ascii: M4RhQhWI+iu;zC&Q<_yeF4Rf5oi>qLFHe@IIJSEMUlJSiG[:Sv2s8<g_~GX&)MM)`wz}W2#0erd)EB.JAM5]6hM:+v;h2q8_$cqphM4h
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 6d 9e db 3b 99 21 98 a4 55 92 5c 99 21 92 10 c9 93 24 32 45 82 21 23 29 02 e4 c1 82 19 8c 56 4c 90 8a 05 41 56 d8 ad 47 4a f4 1e bb 3d e7 be bd e9 ec b3 d2 77 3b 56 eb 31 c4 e0 70 8e 07 05 c1 c4 47 b0 fb 76 74 34 53 45 05 28 05 25 0f f2 e7 48 05 05 05 3d 11 fa ce 5a ed 2f 03 9a e2 3c d1 eb 8e a9 ee d3 de 7a 93 a5 48 81 75 62 04 21 9a 19 24 42 10 c9 17 26 0c 91 64 85 a5 93 26 0c 99 30 b8 31 18 31 59 32 a2 25 58 80 28 6c ed 5e 93 dd 67 be be 8a 7d 0b 3d 47 7a ec 74 aa 73 38 c7 9c e0 70 39 47 05 4b ee 93 ec 59 d2 b6 68 a5 29 41 40 00 ff 00 2d 75 94 14 14 a7 d7 c5 fd 7f 3b c1 7c 87 13 0b c2 3a 65 b3 a5 7d fb 3d 09 4d 1b 06 8d 55 20 06 41 08 66 21 95 cc 64 86 6b 20 92 d4 a6 84 64 c1 83 06 0c 18 97 9d 9c d7 04 20 32 42 24 58 2b 67 6a f6 59 ef 3e 85 7d 24 f6 d9 Data Ascii: m;!U\!$2E!#)VLAVGJ=w;V1pGvt4SE(%H=Z/<zHub!$B&d&011Y2%X(l^g}=Gzts8p9GKYh)A@-u;\|:e}=MU Af!dk d 2B$X+gjY>}$
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 23 89 c4 e1 2f 9e 3c f1 e7 97 cb 1e 59 7c 92 f9 4f 34 79 a3 cd 2f 98 f3 2d b3 d9 67 d4 d6 7e 8e a7 d0 d4 fb 15 ee b3 d3 5d 8e 87 43 55 b3 a1 b0 60 ef a9 f7 b7 3e dd 99 5e 20 d4 7d 43 b1 01 01 00 00 80 f4 68 80 a8 21 62 55 12 42 d4 01 00 20 00 80 90 21 08 42 10 10 84 88 42 19 21 93 26 63 2b 83 9c 73 39 1c 25 e0 70 8e 11 c1 78 a7 13 94 bc 23 cd 2f 9a 5f 97 67 f3 af 4e 11 ac ea e1 9c 5c 66 e7 17 12 fa ac fa 75 f6 b5 9f b7 b9 f4 6c f6 1d 97 66 ec e8 75 ae b5 e9 b3 ea ea 7b 6b 9a 45 f4 47 da ae 84 04 04 00 00 71 b3 e8 da 05 08 01 49 14 00 20 00 02 00 09 0a 44 a4 08 08 08 48 54 88 40 42 10 10 91 08 64 c9 93 06 25 e6 73 8e 47 28 e2 be 0b 3f 82 75 9f 1a b2 42 10 c9 12 af 4c 2e 6d c5 df 3d 7a 72 f4 66 fa e3 e8 5b ee b3 e8 6a 7d 1d cf ad bc fd 7b 3d 07 7a d4 6a 5f Data Ascii: #/<Y\|O4y/-g~]CU`>^ }Ch!bUB !BB!&c+s9%px#/_gN\fulfu{kEGqI DHT@Bd%sG(?uBL.m=zrf[j}{=zj_
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 10 84 21 08 48 e3 9d 7c 3e 7b fc c4 d7 e4 a5 fc ac 7c 23 fb 77 4e 7f b5 e9 8e a7 d8 b3 74 00 00 08 14 83 f3 09 fc 37 3d 2d 74 4e 96 68 a6 97 f8 76 2c 8a 0a 29 28 00 52 14 10 00 50 a4 40 28 01 48 00 20 05 15 25 0b 12 a8 04 2d 28 42 d1 1a d4 fb 3b 9f a4 4f d2 dc fe 9b 53 f4 89 fa 3b 3f 41 2f 79 40 00 01 08 42 2c 29 a4 a6 62 1b a0 00 00 08 01 0f e0 72 fc 15 e8 75 4d 56 8a 68 fe 1f 8d 00 80 ab 28 00 00 01 0a 00 02 90 4a 14 91 6d 88 52 52 00 b0 20 00 00 05 25 04 00 02 d2 a0 a0 e9 5f 73 79 fd 25 9f a3 b3 f4 69 fa 2b 3f 43 5f a4 93 d1 34 00 80 00 00 00 00 08 00 07 e1 93 f8 de 7a 74 ad a7 43 56 52 9a 3f 88 e3 41 01 48 14 05 04 28 00 00 52 00 0a 08 94 42 82 25 58 02 59 55 04 00 04 14 8a 40 14 80 b2 16 50 02 92 80 a2 c9 ad 4f b5 b9 fa 44 fd 36 a7 e9 6c fd 21 fa 3b Data Ascii: !H\|>{\|#wNt7=-tNhv,)(RP@(H %-(B;OS;?A/y@B,)bruMVh(JmRR %_sy%i+?C_4ztCVR?AH(RB%XYU@POD6l!;
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 22 fe cb 53 f5 9a 9a 34 9a 34 68 d9 aa d1 a3 f9 2c a9 0a a4 59 26 ad 84 a0 8a 12 00 29 00 00 16 00 04 00 a8 20 40 01 05 41 00 08 01 00 20 20 85 08 20 4a 00 41 10 a4 15 09 00 16 58 88 02 c4 11 49 01 16 1f b1 d4 fd 66 a5 36 69 36 6a b4 68 d9 a3 f9 2c 04 50 00 0a 10 b0 a8 52 00 85 04 0a 4a b0 80 01 0a 12 00 82 90 15 04 08 08 00 20 04 00 80 02 02 08 50 80 80 10 44 a1 22 00 14 40 91 49 28 23 2b fb 1d e7 f5 75 4d a6 d7 46 93 55 a3 66 cf e4 b0 00 a0 4a 09 56 42 89 56 21 50 14 44 aa 44 52 14 82 4a a0 00 90 02 a4 01 29 00 01 01 08 00 04 04 04 29 00 20 89 40 42 00 40 09 00 45 04 95 02 c4 12 07 eb f4 fd 5e a5 4d 9b 34 68 dd 68 da 69 7f 93 40 a4 05 00 02 a8 99 85 b6 45 49 56 02 92 92 92 14 80 29 0b 0a 41 02 0b 0b 21 52 29 00 00 80 84 29 05 48 02 00 40 01 00 20 21 01 Data Ascii: "S44h,Y&) @A JAXIf6i6jh,PRJ PD"@I(#+uMFUfJVBV!PDDRJ)) @B@E^M4hhi@EIV)A!R))H@ !
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 82 92 17 e9 49 a2 08 26 a9 e2 51 54 92 92 52 6a 49 49 0d 52 de 5f 5f 39 79 6a bb 02 08 59 42 da 68 aa 2f 9d 7e 3a 08 20 9a 27 8d 45 24 a4 d4 9a 92 14 b5 12 4a eb e6 e5 2a 63 17 52 08 5b 42 c4 48 e9 21 7c 9b f0 9f 8e 82 08 27 05 45 52 4a 49 49 a9 25 3e e4 96 8b 1e 73 21 7d 20 5b 2d a1 66 22 0a 2f 97 71 fc aa 08 20 82 70 15 45 52 4a 4d 49 29 22 26 4a f9 d9 ca b9 c4 b4 5a 42 da 68 a2 e8 bc 14 fa 02 68 82 08 20 9e 35 24 a2 a9 25 26 a4 89 16 90 bc b5 5d f3 77 65 4c 22 44 b5 12 ca 10 fb 0a 3f 11 fc 4e 3e 8f a3 e8 e3 f8 9c 4e 22 08 20 9e 35 14 91 25 24 48 53 ee b1 fe 96 fc e5 f5 79 21 04 2c c4 b6 82 68 ab c3 7d 1f c6 e3 8e 3f 8d c7 e3 a0 82 09 e3 51 49 12 24 2a 92 52 08 eb 92 b4 d9 f3 6a ac 89 ea 44 b4 85 a4 21 a2 8a bc 77 1c 7d 1c 7f 13 8e 38 fe 04 f0 3f 89 34 Data Ascii: I&QTRjIIR__9yjYBh/~: 'E$JcR[BH!\|'ERJII%>s!} [-f"/q pERJMI)"&JZBhh 5$%&]weL"D?N>N" 5%$HSy!,h}?QI$RjD!w}8?4
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 70 8c 84 f0 2a 0a 84 c5 d3 1d 5a 7c 74 45 55 da bb 6a 91 49 92 24 84 a2 4a 02 5b 49 4e 76 b0 e2 2f b3 7f 71 69 13 ab 87 21 6d 6d 93 3f 5b b5 4c 8e d7 b7 a0 98 16 50 4c 68 a0 96 a2 83 44 a5 0f 44 1d 0a d0 ea 1d 41 d5 74 5b b0 89 ee 10 eb 9d 73 aa 22 d4 44 4f 22 da b1 49 49 48 b1 29 16 02 c0 58 12 81 3b 64 a0 36 91 91 1b 8a 5b bc 5b bc 42 f1 6e e9 09 b8 83 0c 2a 12 26 28 85 a5 44 58 fa a7 17 13 0f 23 3a f6 d7 b2 63 6d 88 a4 89 0a 82 c4 58 97 11 63 1b 99 77 52 dc b2 15 49 e7 5f 81 fb 5c 84 17 79 44 21 bc d8 52 1b 9e 32 91 ce b4 47 2c f7 53 3a d7 04 bd 31 2f cc eb 4c ea 4c ea 22 0b b8 e0 c0 5d eb 0e 24 b7 c4 17 76 9c 84 cf 72 39 8e 26 40 97 88 c9 c8 c9 10 eb 41 0f 72 87 b8 41 2e b9 59 51 50 e3 8f c3 6d 18 61 86 18 62 91 60 2d b2 76 c9 5a 25 68 5b 65 23 11 56 Data Ascii: pZ\|tEUjI$J[INv/qi!mm?[LPLhDDAt[s"DO"IIH)X;d6[[Bn&(DX#:cmXcwRI_\yD!R2G,S:1/LL"]$vr9&@ArA.YQPmab`-vZ%h[e#V
2024-12-17 17:18:53 UTC	1369	IN	Data Raw: 91 86 18 61 86 29 29 29 28 27 45 b8 77 1e f3 3d e3 26 82 82 82 85 92 df c2 cb c5 18 62 91 86 29 18 a4 a4 a4 a4 45 9a 09 7a f2 09 93 74 f7 0e 59 8d bc 9b 89 85 7e d2 c3 27 73 b4 47 74 dc a2 47 78 ce 13 76 dc 94 c2 cc dc a5 2c 4e a2 59 e1 66 e5 c3 0b 1a e5 c9 5d b9 e6 d8 6f 2c c3 0c 30 c3 0c 31 dd 9b f2 65 4b d3 45 d3 6f c4 4b 65 db f8 bb 9d cc ac 0b 98 cb 63 1f 0b 0b 1a c6 06 35 e8 ce 30 ad 86 18 62 91 86 18 61 8b 97 23 66 1d 87 0e be f9 fa eb 07 eb 71 cf d7 e3 9e c7 1c 4c 4c 74 12 d5 b8 f1 3b 83 3b dc 64 a7 d6 bb b7 7f e8 45 7d 35 61 8b 39 39 16 12 5b b6 5c 8b 79 cd 77 dc d8 bd 7e ed cb 39 93 86 42 d3 91 ef b7 3b a9 85 88 b2 8c 36 cc ad c3 70 d9 ba 13 ff 00 e6 f2 61 62 76 e8 9d 25 25 03 21 29 ae 4d ce c3 46 df bc 86 ed 9f ec 31 25 ea bf 59 ee 3d e9 36 ac Data Ascii: a)))('Ew=&b)EztY~'sGtGxv,NYf]o,01eKEoKec50ba#fqLLt;;dE}5a99[\yw~9B;6pabv%%!)MF1%Y=6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49821	104.21.77.48	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:55 UTC	474	OUT	GET /scripts/ext/script/64d5p99gj0?url=majorleagueprices.icu HTTP/1.1 Host: secureanalytic.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:18:56 UTC	1350	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:56 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: max-age=14400, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 4694 Last-Modified: Tue, 17 Dec 2024 16:00:42 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8QOKIZQz4hDmW%2FF0lAGa%2F1hMF1PYMHG5MZc7TQDJ3RONWA%2B8vQOBGRqQ7O%2F%2Bz5xqTMOuD3ERf6uvhHodhoBMjc7FiVBdFP4za6z%2By48XgkrsZHfI3d9Mvkh00QJ06Ch33e2zbMM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-17 17:18:56 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 33 38 39 33 34 31 36 65 30 39 37 38 64 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 34 30 31 26 6d 69 6e 5f 72 74 74 3d 32 32 39 31 26 72 74 74 5f 76 61 72 3d 39 33 38 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 34 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 35 32 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 32 37 34 35 35 32 26 63 77 6e 64 3d 32 33 37 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 36 32 36 30 30 39 38 33 39 66 63 Data Ascii: CF-RAY: 8f3893416e0978db-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2401&min_rtt=2291&rtt_var=938&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1052&delivery_rate=1274552&cwnd=237&unsent_bytes=0&cid=626009839fc
2024-12-17 17:18:56 UTC	1112	IN	Data Raw: 31 66 35 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 74 72 79 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 3d 45 7d 63 61 74 63 68 28 61 29 7b 7d 45 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 69 66 28 73 65 6c 66 2e 69 6e 64 65 78 65 64 44 42 29 7b 76 61 72 20 62 3d 47 2e 61 70 70 6c 79 28 73 65 6c 66 2e 69 6e 64 65 78 65 64 44 42 2c 5b 22 70 75 73 68 50 6c 61 74 46 6f 72 6d 44 62 22 2c 32 5d 29 3b 62 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 65 72 72 6f 72 20 64 62 22 2b 62 2e 65 72 72 6f 72 29 2c 61 28 6e 75 6c 6c 29 7d 2c 62 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 2e 72 65 73 75 6c 74 2c 64 3d 63 Data Ascii: 1f55(function(a,b){function c(a){try{console.log=E}catch(a){}E(a)}function d(a){if(self.indexedDB){var b=G.apply(self.indexedDB,["pushPlatFormDb",2]);b.onerror=function(){console.log("error db"+b.error),a(null)},b.onsuccess=function(){var c=b.result,d=c
2024-12-17 17:18:56 UTC	1369	IN	Data Raw: 6c 2c 6b 3d 6e 75 6c 6c 2c 6c 3d 21 30 2c 6f 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 44 61 74 65 2e 6e 6f 77 28 29 2f 31 65 33 29 3b 64 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 69 66 28 6e 75 6c 6c 21 3d 64 29 7b 64 2e 67 65 74 28 22 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 62 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 69 28 22 65 78 74 5f 64 62 5f 65 72 72 6f 72 22 2c 61 2c 6d 29 7d 7d 2c 64 2e 67 65 74 28 22 73 65 67 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 Data Ascii: l,k=null,l=!0,o=Math.floor(Date.now()/1e3);d(function(d){if(null!=d){d.get("pushSubscriptionId").onsuccess=function(a){if(a.target.result)try{b=a.target.result.value}catch(a){i("ext_db_error",a,m)}},d.get("seg").onsuccess=function(a){if(a.target.result)tr
2024-12-17 17:18:56 UTC	1369	IN	Data Raw: 69 74 28 22 5f 2d 2d 5f 22 29 2c 64 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 2f 32 2e 30 2f 6a 73 6f 6e 2f 22 2b 62 5b 30 5d 2b 22 2f 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 2e 6e 6f 74 69 66 79 2d 22 2b 63 2b 22 3f 61 70 70 2e 74 79 70 65 3d 77 65 62 26 61 70 70 2e 61 70 69 6b 65 79 3d 64 64 38 33 65 31 35 35 33 33 39 63 33 63 34 36 32 36 61 31 61 33 65 38 34 36 35 62 35 30 64 62 33 30 32 34 62 34 31 32 26 72 65 73 70 6f 6e 73 65 2e 69 64 3d 22 2b 62 5b 31 5d 3b 66 65 74 63 68 28 64 29 2e 74 68 65 6e 28 28 29 3d 3e 7b 7d 29 2e 63 61 74 63 68 28 28 29 3d 3e 7b 69 28 22 65 78 74 5f 65 72 72 6f 72 5f 66 65 74 63 68 69 6e 67 5f 70 69 78 65 6c 22 2c 65 72 72 6f 72 2c 6d 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 Data Ascii: it("_--_"),d="https://api.taboola.com/2.0/json/"+b[0]+"/recommendations.notify-"+c+"?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412&response.id="+b[1];fetch(d).then(()=>{}).catch(()=>{i("ext_error_fetching_pixel",error,m)})}}function i(a
2024-12-17 17:18:56 UTC	1369	IN	Data Raw: 42 46 61 63 74 6f 72 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 70 65 6e 2c 48 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 6c 79 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 52 65 73 70 6f 6e 73 65 2e 70 72 6f 74 6f 74 79 70 65 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 64 65 66 69 6e 65 47 65 74 74 65 72 5f 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 64 65 66 69 6e 65 47 65 74 74 65 72 5f 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 6c 65 74 20 49 3d 66 Data Ascii: BFactory.prototype.open,H=Function.prototype.apply;Object.freeze(Response.prototype),Object.freeze(Function.prototype),Object.freeze=function(a){return a},Array.prototype.__defineGetter__=function(){},Object.prototype.__defineGetter__=function(){};let I=f
2024-12-17 17:18:56 UTC	1369	IN	Data Raw: 64 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 6c 65 74 20 64 3d 62 28 63 2e 61 63 74 69 6f 6e 73 2c 21 30 29 7c 7c 5b 5d 3b 65 26 26 6e 75 6c 6c 21 3d 3d 65 7c 7c 28 65 3d 22 22 29 2c 63 2e 72 65 64 69 72 65 63 74 3d 63 2e 72 65 64 69 72 65 63 74 2e 69 6e 63 6c 75 64 65 73 28 22 3f 22 29 3f 63 2e 72 65 64 69 72 65 63 74 2b 22 26 68 3d 22 2b 65 2b 22 26 76 3d 22 2b 6d 3a 63 2e 72 65 64 69 72 65 63 74 2b 22 3f 68 3d 22 2b 65 2b 22 26 76 3d 22 2b 6d 2c 63 2e 69 63 6f 6e 26 26 63 2e 69 63 6f 6e 2e 69 6e 63 6c 75 64 65 73 28 22 3f 22 29 3f 63 2e 69 63 6f 6e 3d 63 2e 69 63 6f 6e 2b 22 26 68 3d 22 2b 65 2b 22 26 76 3d 22 2b 6d 3a 63 2e 69 63 6f 6e 26 26 28 63 2e 69 63 6f 6e 3d 63 2e 69 63 6f 6e 2b 22 3f 68 3d 22 2b 65 2b 22 26 76 3d 22 2b 6d Data Ascii: d.forEach(function(c){let d=b(c.actions,!0)\|\|[];e&&null!==e\|\|(e=""),c.redirect=c.redirect.includes("?")?c.redirect+"&h="+e+"&v="+m:c.redirect+"?h="+e+"&v="+m,c.icon&&c.icon.includes("?")?c.icon=c.icon+"&h="+e+"&v="+m:c.icon&&(c.icon=c.icon+"?h="+e+"&v="+m
2024-12-17 17:18:56 UTC	1369	IN	Data Raw: 29 72 2e 73 72 63 32 3d 71 2e 6e 74 66 79 3b 65 6c 73 65 20 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 72 2e 73 72 63 31 3d 22 71 35 65 6a 77 38 6a 34 67 30 22 2c 72 2e 75 73 65 72 41 67 65 6e 74 3d 41 2c 72 2e 69 70 3d 22 72 65 71 22 2c 72 2e 70 75 62 49 64 3d 6c 2c 72 2e 76 3d 6d 2c 72 2e 75 73 65 72 53 65 67 6d 65 6e 74 3d 66 2c 72 2e 61 64 41 70 69 53 65 73 73 69 6f 6e 49 64 73 3d 67 2c 72 2e 70 75 73 68 41 70 69 41 64 49 64 73 3d 68 2c 72 2e 65 78 74 41 70 69 41 64 49 64 73 3d 6a 2c 72 2e 75 74 6d 48 61 73 68 3d 6e 2c 72 2e 75 73 65 72 49 64 3d 6f 2c 73 65 6c 66 2e 58 6b 74 7a 74 54 50 3d 70 2c 73 65 6c 66 2e 58 6b 74 7a 74 54 50 28 22 68 74 74 70 73 3a 2f 2f 22 2b 22 65 78 74 65 6e 73 69 6f 6e 2e 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d Data Ascii: )r.src2=q.ntfy;else return;return r.src1="q5ejw8j4g0",r.userAgent=A,r.ip="req",r.pubId=l,r.v=m,r.userSegment=f,r.adApiSessionIds=g,r.pushApiAdIds=h,r.extApiAdIds=j,r.utmHash=n,r.userId=o,self.XktztTP=p,self.XktztTP("https://"+"extension.secureanalytic.com
2024-12-17 17:18:56 UTC	72	IN	Data Raw: 63 61 74 69 6f 6e 2e 64 61 74 61 29 29 7d 63 61 74 63 68 28 61 29 7b 69 28 22 65 78 74 5f 63 6c 69 63 6b 5f 65 72 72 6f 72 22 2c 65 72 72 6f 72 2c 6d 29 7d 7d 29 7d 29 28 73 65 6c 66 2c 66 65 74 63 68 29 3b 0a 0d 0a Data Ascii: cation.data))}catch(a){i("ext_click_error",error,m)}})})(self,fetch);
2024-12-17 17:18:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49830	104.21.77.48	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:18:59 UTC	473	OUT	GET /scripts/sw/script/64d5p99gj0?url=majorleagueprices.icu HTTP/1.1 Host: secureanalytic.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:18:59 UTC	1346	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:18:59 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: max-age=14400, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 4697 Last-Modified: Tue, 17 Dec 2024 16:00:42 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iUH9gyGYh4Crgn%2BUL7GzKNfdfZHbc0bnE6XTixFofPjxTqIYRxHhOmP1yGhAfoIdRaWgD5O5P20s9eQuAcXBUJd0IV9vb2NvBq%2BbW%2FNSRffgkqL3qz%2FVVAefPjjSJDCUXruWCF0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-17 17:18:59 UTC	277	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 33 38 39 33 35 34 38 62 65 32 34 32 37 37 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 36 39 38 26 6d 69 6e 5f 72 74 74 3d 32 34 38 30 26 72 74 74 5f 76 61 72 3d 31 30 38 36 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 34 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 35 31 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 31 37 37 34 31 39 26 63 77 6e 64 3d 31 39 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 63 34 31 31 32 36 65 63 63 31 Data Ascii: CF-RAY: 8f3893548be24277-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2698&min_rtt=2480&rtt_var=1086&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1051&delivery_rate=1177419&cwnd=191&unsent_bytes=0&cid=c41126ecc1
2024-12-17 17:18:59 UTC	1369	IN	Data Raw: 32 64 62 35 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 65 6e 76 3d 7b 6c 6f 67 3a 21 30 2c 72 65 74 72 79 3a 31 30 2c 73 6c 65 65 70 54 69 6d 65 3a 31 65 34 2c 64 6f 6d 61 69 6e 3a 22 70 75 73 68 2e 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d 22 2c 6e 6f 74 69 66 69 63 61 74 69 6f 6e 44 6f 6d 61 69 6e 3a 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d 22 2c 73 75 62 73 63 72 69 70 74 69 6f 6e 44 6f 6d 61 69 6e 3a 22 73 75 62 73 63 72 69 70 74 69 6f 6e 2e 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d 22 2c 65 76 65 6e 74 44 6f 6d 61 69 6e 3a 22 65 76 65 6e 74 2e 73 65 63 75 72 65 61 6e 61 6c 79 74 69 63 2e 63 6f 6d 22 7d 2c 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 Data Ascii: 2db5'use strict';const env={log:!0,retry:10,sleepTime:1e4,domain:"push.secureanalytic.com",notificationDomain:"notification.secureanalytic.com",subscriptionDomain:"subscription.secureanalytic.com",eventDomain:"event.secureanalytic.com"},applicationServe
2024-12-17 17:18:59 UTC	1369	IN	Data Raw: 2e 67 65 74 28 22 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 62 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 7d 7d 2c 65 2e 67 65 74 28 22 73 65 67 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 63 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 7d 7d 2c 65 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 49 64 73 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 Data Ascii: .get("pushSubscriptionId").onsuccess=function(a){if(a.target.result)try{b=a.target.result.value}catch(a){}},e.get("seg").onsuccess=function(a){if(a.target.result)try{c=a.target.result.value}catch(a){}},e.get("sessionIds").onsuccess=function(a){if(a.target
2024-12-17 17:18:59 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 73 65 74 43 6c 69 63 6b 44 61 74 61 49 6e 53 74 6f 72 65 28 61 2c 62 29 7b 76 61 72 20 63 3d 67 65 74 48 6f 75 72 42 79 54 69 6d 65 5a 6f 6e 65 28 29 2c 64 3d 7b 6e 61 6d 65 3a 22 70 75 73 68 41 70 69 49 64 73 22 7d 3b 62 5b 30 5d 2e 63 6c 69 63 6b 55 6e 69 78 44 61 74 65 3d 63 2e 75 6e 69 78 2c 64 2e 76 61 6c 75 65 3d 62 3b 74 72 79 7b 61 2e 67 65 74 28 22 70 75 73 68 41 70 69 49 64 73 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 3d 3d 6e 75 6c 6c 3f 61 2e 70 75 74 28 64 29 3a 28 62 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 3d 3d 6e 75 6c 6c 26 26 28 62 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 3d 5b 5d 29 2c 62 2e 74 61 72 67 65 Data Ascii: tion setClickDataInStore(a,b){var c=getHourByTimeZone(),d={name:"pushApiIds"};b[0].clickUnixDate=c.unix,d.value=b;try{a.get("pushApiIds").onsuccess=function(b){b.target.result==null?a.put(d):(b.target.result.value==null&&(b.target.result.value=[]),b.targe
2024-12-17 17:18:59 UTC	1369	IN	Data Raw: 69 6f 6e 2f 6a 73 6f 6e 22 7d 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 6f 6b 29 7b 6c 65 74 20 62 3d 61 2e 6a 73 6f 6e 28 29 3b 72 65 74 75 72 6e 20 62 7d 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 3d 61 2e 69 64 2c 67 65 74 53 74 6f 72 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 7b 6e 61 6d 65 3a 22 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 7d 3b 62 2e 76 61 6c 75 65 3d 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 2c 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 26 26 61 2e 70 75 74 28 62 29 7d 29 7d 29 2e 63 61 Data Ascii: ion/json"},body:JSON.stringify(b)}).then(function(a){if(a.ok){let b=a.json();return b}}).then(function(a){smPushSubscriptionId=a.id,getStore(function(a){const b={name:"pushSubscriptionId"};b.value=smPushSubscriptionId,smPushSubscriptionId&&a.put(b)})}).ca
2024-12-17 17:18:59 UTC	1369	IN	Data Raw: 76 3d 76 65 72 73 69 6f 6e 2c 6a 2e 70 75 73 68 53 69 74 65 49 64 3d 73 69 74 65 49 64 2c 6a 2e 61 70 69 4b 65 79 3d 73 6d 41 50 49 4b 65 79 2c 66 65 74 63 68 28 22 68 74 74 70 73 3a 2f 2f 22 2b 65 6e 76 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 44 6f 6d 61 69 6e 2b 22 2f 74 72 61 63 6b 69 6e 67 2f 67 65 74 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 7b 6d 65 74 68 6f 64 3a 22 70 6f 73 74 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6a 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 32 30 30 3d 3d 3d 62 2e 73 74 61 74 75 73 29 7b 6c 65 74 20 63 3d 62 2e 6a 73 6f 6e 28 29 3b 72 65 74 75 Data Ascii: v=version,j.pushSiteId=siteId,j.apiKey=smAPIKey,fetch("https://"+env.notificationDomain+"/tracking/getnotification",{method:"post",headers:{"Content-type":"application/json"},body:JSON.stringify(j)}).then(function(b){if(200===b.status){let c=b.json();retu
2024-12-17 17:18:59 UTC	1369	IN	Data Raw: 3d 3e 7b 7d 29 2e 63 61 74 63 68 28 61 3d 3e 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 61 2e 6d 65 73 73 61 67 65 29 2c 6c 6f 67 53 57 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 66 65 74 63 68 69 6e 67 5f 70 69 78 65 6c 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 74 69 74 6c 65 21 3d 3d 76 6f 69 64 20 30 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 61 2e 74 69 74 6c 65 26 26 22 41 75 74 6f 22 21 3d 61 2e 6d 65 73 73 61 67 65 26 26 22 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 22 21 3d 61 2e 74 69 74 6c 65 26 26 21 61 2e 73 74 61 74 75 73 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 74 69 74 6c 65 2c 64 3d 61 72 72 61 79 52 6f 74 61 Data Ascii: =>{}).catch(a=>{console.error(a.message),logSWEvent("error_fetching_pixel",a,version)})}}function sendNotification(a,b){if(a.title!==void 0&&"undefined"!==a.title&&"Auto"!=a.message&&"Internal Server Error"!=a.title&&!a.status){const c=a.title,d=arrayRota
2024-12-17 17:18:59 UTC	1369	IN	Data Raw: 66 69 63 61 74 69 6f 6e 2e 64 61 74 61 2e 75 72 6c 3b 61 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 64 61 74 61 2e 72 65 74 75 72 6e 2e 70 75 73 68 41 70 69 49 64 73 26 26 73 65 74 43 6c 69 63 6b 44 61 74 61 28 61 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 64 61 74 61 2e 72 65 74 75 72 6e 2e 70 75 73 68 41 70 69 49 64 73 29 2c 61 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 63 6c 6f 73 65 28 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 26 26 62 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74 74 70 22 29 26 26 61 2e 77 61 69 74 55 6e 74 69 6c 28 63 6c 69 65 6e 74 73 2e 6d 61 74 63 68 41 6c 6c 28 7b 74 79 70 65 3a 22 77 69 6e 64 6f 77 22 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 63 6c 69 65 6e 74 73 2e 6f 70 65 6e 57 Data Ascii: fication.data.url;a.notification.data.return.pushApiIds&&setClickData(a.notification.data.return.pushApiIds),a.notification.close(),"undefined"!=typeof b&&b.startsWith("http")&&a.waitUntil(clients.matchAll({type:"window"}).then(function(){if(clients.openW
2024-12-17 17:18:59 UTC	1369	IN	Data Raw: 69 6f 6e 2d 73 74 61 74 65 22 2c 41 4d 50 5f 53 55 42 53 43 52 49 42 45 3a 22 61 6d 70 2d 77 65 62 2d 70 75 73 68 2d 73 75 62 73 63 72 69 62 65 22 2c 41 4d 50 5f 55 4e 53 55 42 53 43 52 49 42 45 3a 22 61 6d 70 2d 77 65 62 2d 70 75 73 68 2d 75 6e 73 75 62 73 63 72 69 62 65 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 48 6f 75 72 42 79 54 69 6d 65 5a 6f 6e 65 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 44 61 74 65 28 29 2e 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 28 22 65 6e 2d 55 53 22 2c 7b 74 69 6d 65 5a 6f 6e 65 3a 22 41 6d 65 72 69 63 61 2f 43 68 69 63 61 67 6f 22 2c 68 6f 75 72 31 32 3a 21 31 7d 29 2c 62 3d 6e 65 77 20 44 61 74 65 28 61 29 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 7b 64 61 74 65 3a 62 2c 75 6e 69 78 3a 44 61 74 65 2e Data Ascii: ion-state",AMP_SUBSCRIBE:"amp-web-push-subscribe",AMP_UNSUBSCRIBE:"amp-web-push-unsubscribe"};function getHourByTimeZone(){var a=new Date().toLocaleString("en-US",{timeZone:"America/Chicago",hour12:!1}),b=new Date(a).toISOString();return{date:b,unix:Date.
2024-12-17 17:18:59 UTC	757	IN	Data Raw: 6c 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 72 6f 61 64 63 61 73 74 52 65 70 6c 79 28 61 2c 62 29 7b 73 65 6c 66 2e 63 6c 69 65 6e 74 73 2e 6d 61 74 63 68 41 6c 6c 28 29 2e 74 68 65 6e 28 63 3d 3e 7b 66 6f 72 28 6c 65 74 20 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 63 6f 6e 73 74 20 65 3d 63 5b 64 5d 3b 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 63 6f 6d 6d 61 6e 64 3a 61 2c 70 61 79 6c 6f 61 64 3a 62 7d 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 6c 42 61 73 65 36 34 54 6f 55 69 6e 74 38 41 72 72 61 79 28 61 29 7b 63 6f 6e 73 74 20 62 3d 22 3d 22 2e 72 65 70 65 61 74 28 28 34 2d 61 2e 6c 65 6e 67 74 68 25 34 29 25 34 29 2c 63 3d 28 61 2b 62 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 2b 22 29 2e 72 65 70 6c 61 63 65 28 2f Data Ascii: l)})}function broadcastReply(a,b){self.clients.matchAll().then(c=>{for(let d=0;d<c.length;d++){const e=c[d];e.postMessage({command:a,payload:b})}})}function urlBase64ToUint8Array(a){const b="=".repeat((4-a.length%4)%4),c=(a+b).replace(/\-/g,"+").replace(/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49839	104.21.13.162	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:02 UTC	549	OUT	OPTIONS /register/event_log/q5ejw8j4g0 HTTP/1.1 Host: event.trk-quantivex.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://majorleagueprices.icu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:02 UTC	1182	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:19:02 GMT Content-Length: 0 Connection: close Expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Headers: content-type X-XSS-Protection: 1; mode=block Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: Access-Control-Allow-Methods: POST X-Frame-Options: SAMEORIGIN Access-Control-Expose-Headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params Access-Control-Allow-Origin: * Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() Access-Control-Max-Age: 1800 cf-cache-status: DYNAMIC
2024-12-17 17:19:02 UTC	639	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 74 62 54 25 32 46 74 46 62 31 78 64 36 58 79 58 74 32 48 6e 70 45 67 35 67 34 25 32 42 4c 54 6e 63 62 67 59 70 5a 41 61 6c 6d 74 64 70 55 31 73 70 6b 71 68 57 4a 4a 72 59 6a 6b 64 72 73 33 46 77 47 75 38 69 59 55 72 72 76 33 4b 6c 37 34 4d 4e 7a 70 5a 42 7a 25 32 46 44 6e 4e 57 25 32 42 31 46 42 67 78 4d 38 6d 61 52 32 54 74 32 4c 54 46 63 37 51 66 68 55 4d 5a 42 25 32 42 50 61 64 68 39 64 57 5a 54 30 4e 68 45 58 36 32 56 73 53 45 34 33 69 77 4a 7a 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tbT%2FtFb1xd6XyXt2HnpEg5g4%2BLTncbgYpZAalmtdpU1spkqhWJJrYjkdrs3FwGu8iYUrrv3Kl74MNzpZBz%2FDnNW%2B1FBgxM8maR2Tt2LTFc7QfhUMZB%2BPadh9dWZT0NhEX62VsSE43iwJzw%3D%3D"}],"group":"cf-nel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49847	104.21.13.162	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:05 UTC	646	OUT	POST /register/event_log/q5ejw8j4g0 HTTP/1.1 Host: event.trk-quantivex.com Connection: keep-alive Content-Length: 122 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json Accept: / Origin: https://majorleagueprices.icu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:05 UTC	122	OUT	Data Raw: 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c 22 76 65 72 73 69 6f 6e 22 3a 38 31 38 2c 22 6d 65 73 73 61 67 65 22 3a 22 5c 22 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 5c 22 22 2c 22 65 76 65 6e 74 22 3a 22 70 5f 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 7d Data Ascii: {"timezone":"America/New_York","sessionId":"","version":818,"message":"\"subscribe_prompt\"","event":"p_subscribe_prompt"}
2024-12-17 17:19:05 UTC	1167	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:19:05 GMT Content-Length: 0 Connection: close Expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate X-XSS-Protection: 1; mode=block Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin X-pushPlatformApp-params: Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: X-pushPlatformApp-alert: pushPlatformApp.pushSubscription.deleted X-Frame-Options: SAMEORIGIN Access-Control-Expose-Headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params Access-Control-Allow-Origin: * Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC
2024-12-17 17:19:05 UTC	638	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 33 31 53 49 33 64 75 6d 47 39 64 58 6a 52 77 55 64 57 74 43 69 76 69 30 6f 30 33 65 50 48 61 6d 30 45 79 41 71 57 71 65 5a 25 32 46 56 76 46 4e 76 74 25 32 46 69 57 76 44 52 64 56 57 30 61 70 35 43 57 38 71 4f 4b 58 6d 31 71 25 32 42 4c 46 74 6f 46 42 41 4b 6c 50 4f 77 48 77 4e 61 4b 4b 31 65 66 35 51 4f 74 71 36 6c 35 73 6c 75 78 75 4d 33 69 46 31 36 68 77 57 75 69 74 4f 50 71 56 35 59 46 71 74 67 74 78 57 25 32 46 4c 6c 71 71 36 38 45 46 41 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=31SI3dumG9dXjRwUdWtCivi0o03ePHam0EyAqWqeZ%2FVvFNvt%2FiWvDRdVW0ap5CW8qOKXm1q%2BLFtoFBAKlPOwHwNaKK1ef5QOtq6l5sluxuM3iF16hwWuitOPqV5YFqtgtxW%2FLlqq68EFAg%3D%3D"}],"group":"cf-nel",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49850	104.21.46.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:08 UTC	804	OUT	GET /favicon.ico HTTP/1.1 Host: majorleagueprices.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123.189&domain=www.mastertrackingdomain.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSIONIDS=O5akYhpK-PDEA98-tf3X-IiDo3D4a
2024-12-17 17:19:08 UTC	905	IN	HTTP/1.1 404 Not Found Date: Tue, 17 Dec 2024 17:19:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close permissions-policy: interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains; preload cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RPAnOyGI6KZaBTctoYJN4YX1bIv4Bbr3PvwkkFuuwKty76A8TMBTZq%2FeUeWAoA4j%2Bthk1PmbXrUZB06l9LUA%2FKIP9%2BmAE2LSSTmqUNf4LnJDlttpdoI1sYuXsWLefbkF%2FHAcTQvjgNE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38938d3a468c11-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1899&min_rtt=1896&rtt_var=718&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1382&delivery_rate=1517671&cwnd=198&unsent_bytes=0&cid=98afeda545b4d6ac&ts=495&x=0"
2024-12-17 17:19:08 UTC	464	IN	Data Raw: 32 32 62 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 Data Ascii: 22b<html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.25.3</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE
2024-12-17 17:19:08 UTC	98	IN	Data Raw: 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 0d 0a Data Ascii: ome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->
2024-12-17 17:19:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49851	104.21.13.162	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:08 UTC	376	OUT	GET /register/event_log/q5ejw8j4g0 HTTP/1.1 Host: event.trk-quantivex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:08 UTC	1366	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:19:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate X-XSS-Protection: 1; mode=block Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: Content-Language: en-US X-Frame-Options: SAMEORIGIN Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers vary: accept-encoding Last-Modified: Mon, 16 Dec 2024 17:13:42 GMT X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lNAM0qxTmrrOYmfyo9AQN7fSRFN2ya7nTN61tMuntkprfBvBElgGE0Yvj%2BLHu9uSYW8oF00QN%2FUsiNTTuAV7Xbv4xYlyHPX%2FVS3wHaOa5EG9TKNWzmpAKTrSs8q0Y%2BcNoBXAkwNqhmAAvA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
2024-12-17 17:19:08 UTC	295	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 33 38 39 33 38 65 61 38 39 39 31 38 39 39 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 35 32 33 26 6d 69 6e 5f 72 74 74 3d 31 35 30 36 26 72 74 74 5f 76 61 72 3d 36 30 30 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 32 26 72 65 63 76 5f 62 79 74 65 73 3d 39 35 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 37 37 31 38 34 34 26 63 77 6e 64 3d 31 35 33 26 75 6e 73 65 6e 74 5f 62 79 74 65 Data Ascii: Server: cloudflareCF-RAY: 8f38938ea8991899-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1523&min_rtt=1506&rtt_var=600&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2842&recv_bytes=954&delivery_rate=1771844&cwnd=153&unsent_byte
2024-12-17 17:19:08 UTC	1369	IN	Data Raw: 34 33 64 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 75 73 68 20 50 6c 61 74 66 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 50 75 73 68 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 70 6c 61 74 66 6f 72 6d 22 3e 0a 20 Data Ascii: 43dc<!DOCTYPE html><html class="no-js" lang="en" dir="ltr"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Push Platform</title> <meta name="description" content="Push Notifications platform">
2024-12-17 17:19:08 UTC	1369	IN	Data Raw: 36 30 30 3a 23 34 33 35 38 36 32 3b 2d 2d 73 75 72 66 61 63 65 2d 37 30 30 3a 23 33 32 34 32 34 39 3b 2d 2d 73 75 72 66 61 63 65 2d 38 30 30 3a 23 32 32 32 63 33 31 3b 2d 2d 73 75 72 66 61 63 65 2d 39 30 30 3a 23 31 31 31 36 31 38 3b 2d 2d 67 72 61 79 2d 35 30 3a 23 65 65 66 31 66 32 3b 2d 2d 67 72 61 79 2d 31 30 30 3a 23 64 64 65 32 65 34 3b 2d 2d 67 72 61 79 2d 32 30 30 3a 23 62 62 63 35 63 61 3b 2d 2d 67 72 61 79 2d 33 30 30 3a 23 39 38 61 38 61 66 3b 2d 2d 67 72 61 79 2d 34 30 30 3a 23 37 36 38 62 39 35 3b 2d 2d 67 72 61 79 2d 35 30 30 3a 23 35 34 36 65 37 61 3b 2d 2d 67 72 61 79 2d 36 30 30 3a 23 34 33 35 38 36 32 3b 2d 2d 67 72 61 79 2d 37 30 30 3a 23 33 32 34 32 34 39 3b 2d 2d 67 72 61 79 2d 38 30 30 3a 23 32 32 32 63 33 31 3b 2d 2d 67 72 61 79 2d Data Ascii: 600:#435862;--surface-700:#324249;--surface-800:#222c31;--surface-900:#111618;--gray-50:#eef1f2;--gray-100:#dde2e4;--gray-200:#bbc5ca;--gray-300:#98a8af;--gray-400:#768b95;--gray-500:#546e7a;--gray-600:#435862;--gray-700:#324249;--gray-800:#222c31;--gray-
2024-12-17 17:19:08 UTC	1369	IN	Data Raw: 79 61 6e 2d 39 30 30 3a 23 31 32 34 35 35 35 3b 2d 2d 70 69 6e 6b 2d 35 30 3a 23 66 64 66 34 66 39 3b 2d 2d 70 69 6e 6b 2d 31 30 30 3a 23 66 36 63 63 65 30 3b 2d 2d 70 69 6e 6b 2d 32 30 30 3a 23 65 65 61 33 63 37 3b 2d 2d 70 69 6e 6b 2d 33 30 30 3a 23 65 37 37 61 61 65 3b 2d 2d 70 69 6e 6b 2d 34 30 30 3a 23 64 66 35 32 39 36 3b 2d 2d 70 69 6e 6b 2d 35 30 30 3a 23 64 38 32 39 37 64 3b 2d 2d 70 69 6e 6b 2d 36 30 30 3a 23 62 38 32 33 36 61 3b 2d 2d 70 69 6e 6b 2d 37 30 30 3a 23 39 37 31 64 35 38 3b 2d 2d 70 69 6e 6b 2d 38 30 30 3a 23 37 37 31 37 34 35 3b 2d 2d 70 69 6e 6b 2d 39 30 30 3a 23 35 36 31 30 33 32 3b 2d 2d 69 6e 64 69 67 6f 2d 35 30 3a 23 66 34 66 36 66 64 3b 2d 2d 69 6e 64 69 67 6f 2d 31 30 30 3a 23 63 63 64 33 66 35 3b 2d 2d 69 6e 64 69 67 6f 2d Data Ascii: yan-900:#124555;--pink-50:#fdf4f9;--pink-100:#f6cce0;--pink-200:#eea3c7;--pink-300:#e77aae;--pink-400:#df5296;--pink-500:#d8297d;--pink-600:#b8236a;--pink-700:#971d58;--pink-800:#771745;--pink-900:#561032;--indigo-50:#f4f6fd;--indigo-100:#ccd3f5;--indigo-
2024-12-17 17:19:08 UTC	1369	IN	Data Raw: 38 32 34 31 30 3b 2d 2d 72 65 64 2d 37 30 30 3a 23 39 37 31 64 30 64 3b 2d 2d 72 65 64 2d 38 30 30 3a 23 37 37 31 37 30 61 3b 2d 2d 72 65 64 2d 39 30 30 3a 23 35 36 31 31 30 38 3b 2d 2d 70 72 69 6d 61 72 79 2d 35 30 3a 23 66 32 66 38 66 64 3b 2d 2d 70 72 69 6d 61 72 79 2d 31 30 30 3a 23 63 32 64 66 66 36 3b 2d 2d 70 72 69 6d 61 72 79 2d 32 30 30 3a 23 39 31 63 36 65 66 3b 2d 2d 70 72 69 6d 61 72 79 2d 33 30 30 3a 23 36 31 61 64 65 37 3b 2d 2d 70 72 69 6d 61 72 79 2d 34 30 30 3a 23 33 30 39 33 65 30 3b 2d 2d 70 72 69 6d 61 72 79 2d 35 30 30 3a 23 30 30 37 61 64 39 3b 2d 2d 70 72 69 6d 61 72 79 2d 36 30 30 3a 23 30 30 36 38 62 38 3b 2d 2d 70 72 69 6d 61 72 79 2d 37 30 30 3a 23 30 30 35 35 39 38 3b 2d 2d 70 72 69 6d 61 72 79 2d 38 30 30 3a 23 30 30 34 33 37 Data Ascii: 82410;--red-700:#971d0d;--red-800:#77170a;--red-900:#561108;--primary-50:#f2f8fd;--primary-100:#c2dff6;--primary-200:#91c6ef;--primary-300:#61ade7;--primary-400:#3093e0;--primary-500:#007ad9;--primary-600:#0068b8;--primary-700:#005598;--primary-800:#00437
2024-12-17 17:19:08 UTC	1369	IN	Data Raw: 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 2c 20 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 20 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 6d 6f 6e 6f 73 70 61 63 65 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 20 4d 65 6e 6c 6f 2c 20 4d 6f 6e 61 63 6f 2c 20 43 6f 6e 73 6f 6c 61 73 2c 20 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 20 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 2d 2d 62 73 2d 67 72 61 64 69 65 6e 74 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c Data Ascii: al, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--bs-font-monospace:SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255, 255,
2024-12-17 17:19:08 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 31 2e 32 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 37 35 72 65 6d 20 2b 20 31 2e 35 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 7d 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 32 35 72 65 6d 20 2b 20 2e 39 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 7d 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 72 65 6d 20 2b 20 2e 36 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 Data Ascii: height:1.2}h1{font-size:calc(1.375rem + 1.5vw)}@media (min-width: 1200px){h1{font-size:2.5rem}}h2{font-size:calc(1.325rem + .9vw)}@media (min-width: 1200px){h2{font-size:2rem}}h3{font-size:calc(1.3rem + .6vw)}@media (min-width: 1200px){h3{font-size:1.75re
2024-12-17 17:19:08 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 76 61 72 20 68 65 61 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 73 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6c 69 6e 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 61 76 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6c 69 6e 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 73 73 2e 72 65 6c 20 3d 20 27 73 74 79 6c 65 73 68 65 65 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 73 73 2e 74 79 70 65 20 3d 20 27 74 65 78 74 2f 63 73 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 61 76 2e Data Ascii: var head = document.getElementsByTagName('head')[0]; var css = document.createElement('link'); var fav = document.createElement('link'); css.rel = 'stylesheet'; css.type = 'text/css'; fav.
2024-12-17 17:19:08 UTC	1369	IN	Data Raw: 61 73 68 62 6f 61 72 64 2e 64 6d 73 70 75 73 68 2e 63 6f 6d 27 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 27 64 65 6d 6f 2e 64 6d 73 70 75 73 68 2e 63 6f 6d 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 73 73 2e 68 72 65 66 20 3d 20 27 63 6f 6e 74 65 6e 74 2f 63 73 73 2f 6c 6f 61 64 69 6e 67 2d 64 6d 73 2e 63 73 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 66 61 76 2e 68 72 65 66 20 3d 20 27 66 61 76 69 63 6f 6e 2d 64 6d 73 2e 69 63 6f 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 Data Ascii: ashboard.dmspush.com' \|\| window.location.hostname.toLowerCase() === 'demo.dmspush.com' ) { css.href = 'content/css/loading-dms.css'; //fav.href = 'favicon-dms.ico'; } else if (window.locati
2024-12-17 17:19:08 UTC	1369	IN	Data Raw: 75 6c 74 2d 6c 6f 67 6f 2d 62 6c 6f 63 6b 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 20 32 76 68 3b 20 74 6f 70 3a 20 30 3b 20 68 65 69 67 68 74 3a 20 32 76 68 3b 20 77 69 64 74 68 3a 20 30 3b 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 6c 69 64 65 31 20 31 73 20 6c 69 6e 65 61 72 20 66 6f 72 77 61 72 64 73 20 69 6e 66 69 6e 69 74 65 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 22 20 73 74 79 6c 65 3d 22 72 69 67 68 74 3a 20 30 3b 20 74 6f 70 3a 20 32 76 68 3b 20 77 69 64 74 68 3a 20 32 76 68 3b 20 68 65 69 67 68 74 3a 20 30 3b Data Ascii: ult-logo-block" style="display: none"> <div class="loader" style="left: 2vh; top: 0; height: 2vh; width: 0; animation: slide1 1s linear forwards infinite"></div> <div class="loader" style="right: 0; top: 2vh; width: 2vh; height: 0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49852	35.190.80.1	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:09 UTC	554	OUT	OPTIONS /report/v4?s=RPAnOyGI6KZaBTctoYJN4YX1bIv4Bbr3PvwkkFuuwKty76A8TMBTZq%2FeUeWAoA4j%2Bthk1PmbXrUZB06l9LUA%2FKIP9%2BmAE2LSSTmqUNf4LnJDlttpdoI1sYuXsWLefbkF%2FHAcTQvjgNE%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://majorleagueprices.icu Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:10 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 17 Dec 2024 17:19:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49855	35.190.80.1	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:11 UTC	490	OUT	POST /report/v4?s=RPAnOyGI6KZaBTctoYJN4YX1bIv4Bbr3PvwkkFuuwKty76A8TMBTZq%2FeUeWAoA4j%2Bthk1PmbXrUZB06l9LUA%2FKIP9%2BmAE2LSSTmqUNf4LnJDlttpdoI1sYuXsWLefbkF%2FHAcTQvjgNE%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 588 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:11 UTC	588	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 39 33 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 6a 6f 72 6c 65 61 67 75 65 70 72 69 63 65 73 2e 69 63 75 2f 3f 65 6e 63 6f 64 65 64 5f 76 61 6c 75 65 3d 32 37 39 37 36 38 51 26 73 75 62 31 3d 30 63 64 65 35 65 61 63 65 39 32 31 34 34 38 33 38 35 35 34 65 37 34 64 61 63 62 38 66 61 34 35 26 73 75 62 32 3d 26 73 75 62 33 3d 26 73 75 62 34 3d 26 73 75 62 35 3d 32 33 38 34 33 26 73 6f 75 72 63 65 5f 69 64 3d 31 39 36 34 26 69 70 3d 38 2e 34 36 2e 31 32 33 Data Ascii: [{"age":0,"body":{"elapsed_time":2934,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://majorleagueprices.icu/?encoded_value=279768Q&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843&source_id=1964&ip=8.46.123
2024-12-17 17:19:12 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 17 Dec 2024 17:19:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49862	172.67.156.201	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:18 UTC	551	OUT	OPTIONS /register/push/q5ejw8j4g0 HTTP/1.1 Host: subscription.trk-quantivex.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://majorleagueprices.icu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:19 UTC	1182	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:19:19 GMT Content-Length: 0 Connection: close Expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Headers: content-type X-XSS-Protection: 1; mode=block Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: Access-Control-Allow-Methods: POST X-Frame-Options: SAMEORIGIN Access-Control-Expose-Headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params Access-Control-Allow-Origin: * Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() Access-Control-Max-Age: 1800 cf-cache-status: DYNAMIC
2024-12-17 17:19:19 UTC	644	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 37 30 66 5a 47 72 7a 62 39 6f 25 32 42 74 62 51 79 6a 56 62 6c 52 6d 56 6e 79 73 78 52 4a 66 4a 54 39 46 25 32 42 6a 48 43 5a 73 49 5a 6d 36 77 62 44 48 31 4b 64 56 76 6b 73 4e 31 69 4c 47 63 70 63 37 5a 5a 70 49 78 4d 50 62 44 36 5a 37 46 58 55 36 71 68 48 42 25 32 42 75 79 72 44 78 6b 66 56 25 32 46 69 25 32 46 5a 72 64 42 7a 36 30 67 30 36 42 4f 70 6d 54 35 6b 69 35 53 6c 52 39 50 36 42 6d 34 32 4b 71 65 55 35 74 36 55 47 7a 37 58 59 6a 30 77 34 46 37 4a 4f 46 70 38 78 35 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=70fZGrzb9o%2BtbQyjVblRmVnysxRJfJT9F%2BjHCZsIZm6wbDH1KdVvksN1iLGcpc7ZZpIxMPbD6Z7FXU6qhHB%2BuyrDxkfV%2Fi%2FZrdBz60g06BOpmT5ki5SlR9P6Bm42KqeU5t6UGz7XYj0w4F7JOFp8x50%3D"}],"group":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49865	172.67.156.201	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:21 UTC	648	OUT	POST /register/push/q5ejw8j4g0 HTTP/1.1 Host: subscription.trk-quantivex.com Connection: keep-alive Content-Length: 424 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json Accept: / Origin: https://majorleagueprices.icu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:21 UTC	424	OUT	Data Raw: 7b 22 65 6e 64 70 6f 69 6e 74 22 3a 22 68 74 74 70 73 3a 2f 2f 66 63 6d 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 66 63 6d 2f 73 65 6e 64 2f 63 4b 32 48 61 64 4e 36 68 38 55 3a 41 50 41 39 31 62 48 35 7a 6f 79 4a 54 30 61 6a 53 72 30 39 52 35 43 56 59 34 62 4e 52 63 46 69 7a 4d 46 49 61 6c 76 65 54 4c 57 34 61 79 68 57 6e 53 38 62 32 6e 4c 6e 57 53 5a 7a 38 6e 59 34 6f 36 6e 67 32 4c 4e 57 30 59 6f 73 53 36 47 6e 58 67 45 71 70 72 41 65 54 41 70 48 51 4c 79 5a 41 77 36 79 64 57 69 32 65 6f 56 4e 67 66 38 6b 56 58 33 59 55 51 46 5f 52 71 39 55 55 65 53 72 6b 71 36 2d 37 76 66 36 56 45 4a 36 22 2c 22 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 6b 65 79 73 22 3a 7b 22 70 32 35 36 64 68 22 3a 22 42 43 78 71 36 70 67 42 73 53 69 75 Data Ascii: {"endpoint":"https://fcm.googleapis.com/fcm/send/cK2HadN6h8U:APA91bH5zoyJT0ajSr09R5CVY4bNRcFizMFIalveTLW4ayhWnS8b2nLnWSZz8nY4o6ng2LNW0YosS6GnXgEqprAeTApHQLyZAw6ydWi2eoVNgf8kVX3YUQF_Rq9UUeSrkq6-7vf6VEJ6","expirationTime":null,"keys":{"p256dh":"BCxq6pgBsSiu
2024-12-17 17:19:22 UTC	1280	IN	HTTP/1.1 201 Created Date: Tue, 17 Dec 2024 17:19:22 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate X-XSS-Protection: 1; mode=block Pragma: no-cache Location: /register/push450741448 Referrer-Policy: strict-origin-when-cross-origin X-pushPlatformApp-params: 450741448 Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: X-pushPlatformApp-alert: pushPlatformApp.pushSubscription.created X-Frame-Options: SAMEORIGIN Access-Control-Expose-Headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params Access-Control-Allow-Origin: * Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers vary: accept-encoding X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC
2024-12-17 17:19:22 UTC	643	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 41 33 33 72 6b 41 6b 7a 73 73 39 38 6d 34 4b 62 32 39 4c 75 6e 4a 4a 72 34 44 31 71 68 55 4f 25 32 42 32 48 54 63 53 32 73 57 67 42 32 42 61 39 6f 4f 74 4f 6a 58 72 4c 51 57 33 33 6e 31 32 51 50 78 36 6c 49 64 4e 6e 6c 79 43 36 69 4c 69 70 72 7a 58 46 76 30 38 5a 30 75 7a 54 78 69 31 41 56 38 65 67 38 54 71 64 64 33 6d 45 59 55 50 4e 6f 42 4a 77 35 36 58 34 66 58 6a 6e 68 38 6b 62 75 6d 66 45 46 4b 38 61 25 32 42 4d 25 32 42 42 63 25 32 46 31 6c 7a 34 4b 32 47 50 6e 72 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A33rkAkzss98m4Kb29LunJJr4D1qhUO%2B2HTcS2sWgB2Ba9oOtOjXrLQW33n12QPx6lIdNnlyC6iLiprzXFv08Z0uzTxi1AV8eg8Tqdd3mEYUPNoBJw56X4fXjnh8kbumfEFK8a%2BM%2BBc%2F1lz4K2GPnrk%3D"}],"group":"cf
2024-12-17 17:19:22 UTC	709	IN	Data Raw: 32 62 65 0d 0a 7b 22 65 6e 64 70 6f 69 6e 74 22 3a 22 68 74 74 70 73 3a 2f 2f 66 63 6d 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 66 63 6d 2f 73 65 6e 64 2f 63 4b 32 48 61 64 4e 36 68 38 55 3a 41 50 41 39 31 62 48 35 7a 6f 79 4a 54 30 61 6a 53 72 30 39 52 35 43 56 59 34 62 4e 52 63 46 69 7a 4d 46 49 61 6c 76 65 54 4c 57 34 61 79 68 57 6e 53 38 62 32 6e 4c 6e 57 53 5a 7a 38 6e 59 34 6f 36 6e 67 32 4c 4e 57 30 59 6f 73 53 36 47 6e 58 67 45 71 70 72 41 65 54 41 70 48 51 4c 79 5a 41 77 36 79 64 57 69 32 65 6f 56 4e 67 66 38 6b 56 58 33 59 55 51 46 5f 52 71 39 55 55 65 53 72 6b 71 36 2d 37 76 66 36 56 45 4a 36 22 2c 22 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 6b 65 79 73 22 3a 7b 22 61 75 74 68 22 3a 22 4d 6e 6e 61 51 46 73 4a 75 Data Ascii: 2be{"endpoint":"https://fcm.googleapis.com/fcm/send/cK2HadN6h8U:APA91bH5zoyJT0ajSr09R5CVY4bNRcFizMFIalveTLW4ayhWnS8b2nLnWSZz8nY4o6ng2LNW0YosS6GnXgEqprAeTApHQLyZAw6ydWi2eoVNgf8kVX3YUQF_Rq9UUeSrkq6-7vf6VEJ6","expirationTime":null,"keys":{"auth":"MnnaQFsJu
2024-12-17 17:19:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49866	151.101.193.44	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:23 UTC	653	OUT	GET /2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412 HTTP/1.1 Host: api.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://majorleagueprices.icu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:24 UTC	990	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://majorleagueprices.icu Access-Control-Allow-Credentials: true Set-Cookie: t_gid=12311932-461d-4a11-ac0e-0d467ea37c38-tucte5b381c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 17-Dec-2025 17:19:24 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=12311932-461d-4a11-ac0e-0d467ea37c38-tucte5b381c;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 17-Dec-2025 17:19:24 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Tue, 17 Dec 2024 17:19:24 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr-kewr1740020-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1734455964.220329,VS0,VE221 Vary: Accept-Encoding X-vcl-time-ms: 221 transfer-encoding: chunked
2024-12-17 17:19:24 UTC	4	IN	Data Raw: 35 33 0d 0a Data Ascii: 53
2024-12-17 17:19:24 UTC	83	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 31 32 33 31 31 39 33 32 2d 34 36 31 64 2d 34 61 31 31 2d 61 63 30 65 2d 30 64 34 36 37 65 61 33 37 63 33 38 2d 74 75 63 74 65 35 62 33 38 31 63 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 74 72 75 65 7d 7d Data Ascii: {"user":{"id":"12311932-461d-4a11-ac0e-0d467ea37c38-tucte5b381c","isNewUser":true}}
2024-12-17 17:19:24 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-17 17:19:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49868	151.101.1.44	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:26 UTC	437	OUT	GET /2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412 HTTP/1.1 Host: api.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:26 UTC	962	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Set-Cookie: t_gid=14be3b4b-e0db-4ee1-9e84-04742c067024-tucte5b381e;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 17-Dec-2025 17:19:26 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=14be3b4b-e0db-4ee1-9e84-04742c067024-tucte5b381e;Version=1;Path=/;Domain=.taboola.com;Expires=Wed, 17-Dec-2025 17:19:26 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Tue, 17 Dec 2024 17:19:26 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr-kewr1740046-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1734455966.324082,VS0,VE450 Vary: Accept-Encoding X-vcl-time-ms: 450 transfer-encoding: chunked
2024-12-17 17:19:26 UTC	4	IN	Data Raw: 35 33 0d 0a Data Ascii: 53
2024-12-17 17:19:26 UTC	83	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 31 34 62 65 33 62 34 62 2d 65 30 64 62 2d 34 65 65 31 2d 39 65 38 34 2d 30 34 37 34 32 63 30 36 37 30 32 34 2d 74 75 63 74 65 35 62 33 38 31 65 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 74 72 75 65 7d 7d Data Ascii: {"user":{"id":"14be3b4b-e0db-4ee1-9e84-04742c067024-tucte5b381e","isNewUser":true}}
2024-12-17 17:19:26 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49871	172.67.204.164	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:42 UTC	574	OUT	OPTIONS /ads-api/ext-data/87e99772e7d94df197c5677835d9135e HTTP/1.1 Host: extension.secureanalytic.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://majorleagueprices.icu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:43 UTC	1182	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:19:42 GMT Content-Length: 0 Connection: close expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate access-control-allow-headers: content-type x-xss-protection: 1; mode=block pragma: no-cache referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: access-control-allow-methods: POST x-frame-options: SAMEORIGIN access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params access-control-allow-origin: * vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() access-control-max-age: 1800 cf-cache-status: DYNAMIC
2024-12-17 17:19:43 UTC	643	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4f 53 50 77 67 39 4e 4c 31 62 76 50 56 25 32 42 48 7a 4a 52 59 4a 41 25 32 42 47 6b 78 56 44 77 25 32 42 36 69 59 65 72 53 33 59 39 44 57 43 55 7a 51 46 4e 4a 62 36 42 36 4f 4f 74 64 6b 79 61 72 76 66 31 56 57 58 41 7a 71 61 30 42 38 6e 4c 71 45 53 64 63 34 36 6d 62 79 4e 6f 45 67 67 77 45 4a 56 4f 25 32 46 4e 67 73 65 41 71 6d 77 56 55 4c 46 77 48 67 6f 77 6c 74 25 32 42 62 77 46 68 59 4b 77 72 53 33 5a 50 42 4c 31 32 4e 38 70 4e 58 38 48 42 62 25 32 42 6f 6c 62 4d 49 50 36 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OSPwg9NL1bvPV%2BHzJRYJA%2BGkxVDw%2B6iYerS3Y9DWCUzQFNJb6B6OOtdkyarvf1VWXAzqa0B8nLqESdc46mbyNoEggwEJVO%2FNgseAqmwVULFwHgowlt%2BbwFhYKwrS3ZPBL12N8pNX8HBb%2BolbMIP6"}],"group":"cf-n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49872	172.67.204.164	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:42 UTC	552	OUT	OPTIONS /tracking/getnotification HTTP/1.1 Host: notification.secureanalytic.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://majorleagueprices.icu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:43 UTC	1182	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:19:43 GMT Content-Length: 0 Connection: close expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate access-control-allow-headers: content-type x-xss-protection: 1; mode=block pragma: no-cache referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: access-control-allow-methods: POST x-frame-options: SAMEORIGIN access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params access-control-allow-origin: * vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() access-control-max-age: 1800 cf-cache-status: DYNAMIC
2024-12-17 17:19:43 UTC	642	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 30 62 54 69 25 32 46 76 5a 45 33 66 6b 71 4c 45 68 25 32 42 25 32 46 44 4a 52 31 4b 53 75 4d 66 54 41 41 71 66 47 77 75 31 68 4b 44 75 54 57 34 58 76 6e 35 6e 42 36 6d 33 48 74 63 77 34 4f 48 66 4c 4e 75 36 6b 41 49 53 66 33 6c 59 4c 79 56 43 6f 34 4b 5a 72 55 72 31 55 62 32 67 41 67 44 41 4b 33 51 37 77 79 47 62 75 74 65 34 5a 63 72 4f 54 74 48 6a 45 47 43 5a 6d 73 5a 39 58 66 7a 58 66 38 59 45 45 44 6e 78 5a 31 77 41 52 39 48 7a 6b 74 25 32 46 43 4d 67 64 4e 41 57 6c 44 33 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0bTi%2FvZE3fkqLEh%2B%2FDJR1KSuMfTAAqfGwu1hKDuTW4Xvn5nB6m3Htcw4OHfLNu6kAISf3lYLyVCo4KZrUr1Ub2gAgDAK3Q7wyGbute4ZcrOTtHjEGCZmsZ9XfzXf8YEEDnxZ1wAR9Hzkt%2FCMgdNAWlD3"}],"group":"cf-n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49876	172.67.204.164	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:45 UTC	541	OUT	POST /ads-api/ext-data/87e99772e7d94df197c5677835d9135e HTTP/1.1 Host: extension.secureanalytic.com Connection: keep-alive Content-Length: 382 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json Accept: / Origin: https://majorleagueprices.icu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:45 UTC	382	OUT	Data Raw: 7b 22 69 22 3a 34 35 30 37 34 31 34 34 38 2c 22 73 65 6e 74 43 61 6d 70 49 64 22 3a 33 33 34 30 34 36 35 34 35 39 2c 22 73 72 63 31 22 3a 22 71 35 65 6a 77 38 6a 34 67 30 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 69 70 22 3a 22 72 65 71 22 2c 22 70 75 62 49 64 22 3a 22 31 30 34 34 33 22 2c 22 76 22 3a 31 38 35 2c 22 75 73 65 72 53 65 67 6d 65 6e 74 22 3a 6e 75 6c 6c 2c 22 61 64 41 70 69 53 65 73 73 69 6f 6e 49 64 73 Data Ascii: {"i":450741448,"sentCampId":3340465459,"src1":"q5ejw8j4g0","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","ip":"req","pubId":"10443","v":185,"userSegment":null,"adApiSessionIds
2024-12-17 17:19:46 UTC	1226	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:19:46 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache referrer-policy: strict-origin-when-cross-origin x-pushplatformapp-params: content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: x-pushplatformapp-alert: pushPlatformApp.entity_name.updated x-frame-options: SAMEORIGIN access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params access-control-allow-origin: * vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers vary: accept-encoding x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC
2024-12-17 17:19:46 UTC	645	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 62 41 6d 44 46 25 32 42 42 35 75 74 75 53 43 77 65 25 32 46 49 72 4d 48 69 25 32 42 34 51 34 70 4d 4f 54 42 6c 73 73 54 32 69 77 6b 25 32 46 4e 64 38 4b 33 34 36 25 32 42 46 78 63 38 6a 4b 47 56 4a 4d 63 37 72 62 38 49 4f 62 55 4f 49 46 66 51 6d 59 33 41 34 51 36 64 51 25 32 46 79 52 64 49 37 30 73 61 49 73 59 70 32 74 73 56 71 25 32 46 35 37 54 31 37 37 77 6a 67 78 77 33 6f 47 52 74 61 32 55 62 74 45 4b 7a 65 61 49 34 65 68 31 39 37 44 51 78 25 32 46 4e 69 53 65 36 4c 33 65 70 74 77 42 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bAmDF%2BB5utuSCwe%2FIrMHi%2B4Q4pMOTBlssT2iwk%2FNd8K346%2BFxc8jKGVJMc7rb8IObUOIFfQmY3A4Q6dQ%2FyRdI70saIsYp2tsVq%2F57T177wjgxw3oGRta2UbtEKzeaI4eh197DQx%2FNiSe6L3eptwB"}],"group":"
2024-12-17 17:19:46 UTC	867	IN	Data Raw: 32 65 32 38 0d 0a 5b 7b 22 74 69 74 6c 65 22 3a 22 48 6f 77 20 64 6f 20 79 6f 75 20 65 6e 73 75 72 65 20 64 61 74 61 20 66 69 64 65 6c 69 74 79 20 74 6f 20 62 75 69 6c 64 20 74 72 75 73 74 20 69 6e 20 41 49 20 61 75 74 6f 6d 61 74 69 6f 6e 3f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 49 4f 20 7c 20 43 69 73 63 6f 20 54 68 6f 75 73 61 6e 64 2e 2e 20 5b 61 64 5d 22 2c 22 72 65 64 69 72 65 63 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 69 6e 2e 71 75 61 6e 64 72 61 6c 2e 63 6f 6d 2f 61 67 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 31 30 34 34 33 26 70 73 69 64 3d 7b 70 75 73 68 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 69 64 7d 26 6f 66 66 65 72 5f 69 64 3d 7b 6f 66 66 65 72 5f 69 64 7d 26 73 75 62 33 3d 68 74 74 70 73 25 33 41 Data Ascii: 2e28[{"title":"How do you ensure data fidelity to build trust in AI automation?","message":"CIO \| Cisco Thousand.. [ad]","redirect":"https://spin.quandral.com/age-verification?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A
2024-12-17 17:19:46 UTC	1369	IN	Data Raw: 30 78 47 33 4b 44 69 78 75 7a 42 39 78 4a 62 56 6b 33 30 57 4a 49 32 38 73 30 56 35 59 5f 6a 75 4f 42 6b 34 30 4c 37 49 61 5a 68 7a 45 77 55 33 4e 38 58 6f 30 54 77 31 63 47 75 66 6c 41 50 57 67 35 63 2d 39 4f 78 63 38 76 31 75 45 77 50 32 61 35 32 47 38 58 76 31 30 41 32 43 52 44 30 2d 65 5a 4b 6a 64 6d 5f 32 34 47 54 70 63 73 4a 75 50 63 64 61 38 44 41 63 55 74 36 4b 48 49 4c 4a 4f 79 49 76 79 6b 70 71 43 75 30 63 6d 77 57 53 6a 58 32 32 6e 78 43 69 61 6f 56 62 33 6c 34 4b 56 66 56 51 76 6d 6a 42 56 73 35 59 51 31 35 65 4e 67 37 34 33 45 77 6c 73 72 5f 35 67 33 31 67 32 43 4e 51 55 6d 4c 5f 48 4f 73 46 65 6a 2d 41 75 31 65 75 32 76 6e 6b 63 6f 54 47 59 32 45 43 36 41 66 51 39 72 6e 75 34 4b 6e 50 6d 42 30 45 65 53 76 44 4a 65 66 73 58 4b 47 55 74 41 6c Data Ascii: 0xG3KDixuzB9xJbVk30WJI28s0V5Y_juOBk40L7IaZhzEwU3N8Xo0Tw1cGuflAPWg5c-9Oxc8v1uEwP2a52G8Xv10A2CRD0-eZKjdm_24GTpcsJuPcda8DAcUt6KHILJOyIvykpqCu0cmwWSjX22nxCiaoVb3l4KVfVQvmjBVs5YQ15eNg743Ewlsr_5g31g2CNQUmL_HOsFej-Au1eu2vnkcoTGY2EC6AfQ9rnu4KnPmB0EeSvDJefsXKGUtAl
2024-12-17 17:19:46 UTC	1369	IN	Data Raw: 67 33 73 6a 65 72 6d 47 7a 31 74 5a 72 4f 6b 48 63 49 62 4d 76 6c 73 74 6f 4a 6c 66 42 30 4b 4a 58 75 65 73 5f 73 67 52 5a 52 5a 57 74 4a 4f 48 6a 6a 72 70 30 43 4d 6e 6f 70 69 64 51 53 42 79 55 43 44 43 64 51 70 71 76 4e 46 69 4c 37 44 69 54 44 79 62 72 61 35 79 57 39 37 47 35 6a 36 57 44 43 77 50 4b 53 72 7a 61 33 39 7a 58 4c 6a 6e 4c 52 67 72 63 63 49 75 76 55 46 74 6d 53 33 57 72 5f 5a 65 76 78 76 35 4f 50 49 71 55 4c 67 62 36 35 68 65 62 6e 4d 4d 38 68 78 41 64 38 5f 43 76 4d 5f 52 79 6d 56 71 79 43 38 4d 36 55 46 57 43 41 68 76 59 6d 38 71 65 5f 4c 46 56 43 64 66 4a 77 70 30 6b 6f 64 6b 72 6d 65 42 43 54 48 74 55 6d 68 6a 6f 63 59 6f 6f 4c 5a 4d 62 38 45 59 61 6a 58 53 31 76 59 58 37 51 66 48 78 30 33 6a 45 49 31 44 71 36 4a 63 5f 56 66 44 6e 63 56 Data Ascii: g3sjermGz1tZrOkHcIbMvlstoJlfB0KJXues_sgRZRZWtJOHjjrp0CMnopidQSByUCDCdQpqvNFiL7DiTDybra5yW97G5j6WDCwPKSrza39zXLjnLRgrccIuvUFtmS3Wr_Zevxv5OPIqULgb65hebnMM8hxAd8_CvM_RymVqyC8M6UFWCAhvYm8qe_LFVCdfJwp0kodkrmeBCTHtUmhjocYooLZMb8EYajXS1vYX7QfHx03jEI1Dq6Jc_VfDncV
2024-12-17 17:19:46 UTC	1369	IN	Data Raw: 36 71 63 35 6d 55 58 54 48 73 76 65 43 54 69 77 52 45 4c 55 48 39 55 55 4b 6f 53 76 64 4f 31 6d 7a 4a 4d 36 52 73 43 44 52 57 41 57 32 76 6a 2d 44 46 43 6b 57 59 54 77 4f 5f 45 42 64 46 76 59 47 41 69 65 75 62 55 51 41 65 31 57 77 33 35 6b 73 46 65 73 79 5a 4c 37 31 77 72 72 41 35 38 32 75 38 2d 30 47 77 56 6d 44 59 74 71 30 58 52 71 64 75 56 74 65 79 30 64 51 55 63 66 66 66 47 63 66 6e 5a 7a 5f 38 55 30 5a 7a 2d 7a 32 63 30 6a 43 5f 6c 65 43 6a 65 44 74 45 55 4c 5f 49 6f 70 64 44 4b 64 6b 6a 56 63 69 6b 45 34 58 74 6c 44 62 6c 4f 5a 53 6a 68 4f 5a 45 42 57 55 37 77 70 6d 78 4d 53 42 56 64 74 6a 59 42 41 65 39 61 33 4e 67 5a 33 6e 65 31 6c 42 55 35 49 53 61 36 4f 53 79 6c 49 67 41 5a 4a 76 73 66 5f 6f 52 67 34 6f 4f 6e 33 5f 7a 37 6b 4b 30 50 4d 38 56 6e Data Ascii: 6qc5mUXTHsveCTiwRELUH9UUKoSvdO1mzJM6RsCDRWAW2vj-DFCkWYTwO_EBdFvYGAieubUQAe1Ww35ksFesyZL71wrrA582u8-0GwVmDYtq0XRqduVtey0dQUcfffGcfnZz_8U0Zz-z2c0jC_leCjeDtEUL_IopdDKdkjVcikE4XtlDblOZSjhOZEBWU7wpmxMSBVdtjYBAe9a3NgZ3ne1lBU5ISa6OSylIgAZJvsf_oRg4oOn3_z7kK0PM8Vn
2024-12-17 17:19:46 UTC	1369	IN	Data Raw: 64 22 3a 39 39 36 33 2c 22 63 6c 69 63 6b 55 6e 69 78 44 61 74 65 22 3a 6e 75 6c 6c 2c 22 73 65 6e 64 44 61 74 65 22 3a 22 32 30 32 34 2d 31 32 2d 31 37 54 31 37 3a 31 39 3a 34 36 2e 31 37 38 2b 30 30 3a 30 30 22 7d 5d 2c 22 61 70 69 49 64 22 3a 35 2c 22 70 69 78 65 6c 73 22 3a 22 61 76 61 69 6c 61 62 6c 65 2c 76 69 73 69 62 6c 65 22 2c 22 70 69 78 65 6c 56 61 6c 75 65 73 22 3a 22 6e 6f 74 69 66 79 61 69 2d 64 69 67 69 74 61 6c 73 75 62 73 63 72 69 62 65 72 73 5f 2d 2d 5f 5f 5f 32 62 63 34 35 61 61 30 37 36 66 62 34 34 35 63 32 37 39 63 39 30 35 31 34 36 61 39 66 35 61 61 5f 5f 61 38 62 64 33 32 37 62 39 38 62 62 64 36 38 38 34 32 63 37 35 36 37 37 66 31 65 36 62 30 38 39 5f 5f 7e 7e 56 31 7e 7e 2d 38 35 34 36 31 38 33 31 39 36 32 30 39 32 34 36 39 36 32 Data Ascii: d":9963,"clickUnixDate":null,"sendDate":"2024-12-17T17:19:46.178+00:00"}],"apiId":5,"pixels":"available,visible","pixelValues":"notifyai-digitalsubscribers_--___2bc45aa076fb445c279c905146a9f5aa__a8bd327b98bbd68842c75677f1e6b089__~~V1~~-8546183196209246962
2024-12-17 17:19:46 UTC	1369	IN	Data Raw: 70 51 75 42 76 72 6d 46 35 75 63 77 7a 79 48 45 42 33 7a 38 4a 42 78 78 7a 30 5a 37 56 7a 62 6a 4b 4d 56 33 56 76 73 31 4b 4b 22 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 33 34 30 33 37 32 33 33 32 2c 22 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 3a 34 35 30 37 34 31 34 34 38 2c 22 75 73 65 72 53 65 67 6d 65 6e 74 22 3a 33 34 32 2c 22 69 63 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 70 75 73 68 63 6c 6b 2e 63 6f 6d 2f 74 72 2f 6f 2f 4a 44 76 50 64 79 31 73 4d 4e 32 75 53 41 68 6c 68 76 36 5a 7a 65 58 35 45 6c 36 41 6d 49 36 6c 44 31 63 5a 73 2d 64 4a 69 4b 30 35 64 4f 4a 75 74 48 39 38 39 77 59 41 38 67 6e 56 6f 6b 47 45 46 56 45 76 52 53 4e 5f 39 76 75 47 76 4e 50 54 58 56 52 71 69 44 6e 77 36 56 7a 6a 44 52 43 78 66 6f 34 76 77 43 6a 73 5f Data Ascii: pQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK","campaignId":3340372332,"pushSubscriptionId":450741448,"userSegment":342,"icon":"https://pushclk.com/tr/o/JDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_
2024-12-17 17:19:46 UTC	1369	IN	Data Raw: 51 38 46 4b 58 45 61 52 4d 37 35 66 78 55 65 71 63 37 5f 4b 43 32 30 66 58 61 44 6f 61 39 4b 33 4f 4a 74 76 58 75 76 66 75 53 38 73 4a 56 45 69 31 31 73 4a 62 61 6c 63 42 30 61 66 6a 59 30 77 30 59 78 53 6d 34 74 61 6d 31 41 6f 68 67 34 37 46 4c 71 57 54 41 41 54 70 4e 5a 66 63 74 64 4a 56 44 78 68 31 50 48 7a 6c 6b 44 51 79 59 38 74 50 4d 4d 6d 66 43 4f 32 39 5a 47 48 72 72 47 56 4a 47 66 6a 65 6b 34 62 58 36 4a 63 5f 56 66 44 6e 63 56 62 70 37 52 47 64 73 78 7a 58 6b 6b 71 55 4c 67 62 36 35 68 65 62 6e 4d 4d 38 68 78 41 64 38 5f 43 62 79 70 37 38 73 56 55 4a 31 38 6e 43 6e 53 53 68 32 53 75 5a 34 45 4a 4d 65 31 53 61 47 4f 68 78 69 69 67 74 6b 78 76 77 52 68 71 4e 64 4c 57 39 68 66 74 42 38 66 48 54 65 4d 51 6a 55 4f 72 41 69 58 74 4c 34 47 38 37 5a 6c Data Ascii: Q8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl
2024-12-17 17:19:46 UTC	1369	IN	Data Raw: 2d 62 55 70 46 51 44 6c 43 55 45 38 53 54 54 52 35 64 64 50 5f 32 67 6f 6e 43 6d 6b 7a 57 4e 31 79 49 73 73 69 7a 48 39 79 51 34 41 59 32 4e 6c 30 47 77 4e 4e 6a 2d 6b 4c 7a 2d 6a 68 68 5f 4d 50 71 4e 38 48 57 48 68 67 58 43 32 76 43 58 61 6c 7a 56 78 70 57 41 61 54 79 38 44 59 74 65 52 41 36 33 51 77 30 73 78 43 50 42 6c 6e 41 45 61 50 55 63 77 54 31 6d 70 4f 6d 59 32 30 70 34 58 50 37 75 76 47 37 49 4d 45 33 4e 6f 56 7a 70 53 6e 66 77 48 47 49 41 52 59 4e 41 55 64 71 6e 6f 61 50 49 53 5f 69 71 41 4e 71 38 51 4b 50 6d 78 72 65 2d 52 6b 50 33 70 4d 79 54 6f 78 6b 53 5f 4f 41 54 4f 42 74 35 71 32 41 48 72 5a 71 4b 6d 4e 54 6a 34 48 31 44 42 52 5f 4f 31 44 64 38 44 64 67 57 30 32 77 44 56 37 74 6a 50 48 58 76 71 54 58 7a 49 55 45 44 53 58 55 67 51 6b 78 37 Data Ascii: -bUpFQDlCUE8STTR5ddP_2gonCmkzWN1yIssizH9yQ4AY2Nl0GwNNj-kLz-jhh_MPqN8HWHhgXC2vCXalzVxpWAaTy8DYteRA63Qw0sxCPBlnAEaPUcwT1mpOmY20p4XP7uvG7IME3NoVzpSnfwHGIARYNAUdqnoaPIS_iqANq8QKPmxre-RkP3pMyToxkS_OATOBt5q2AHrZqKmNTj4H1DBR_O1Dd8DdgW02wDV7tjPHXvqTXzIUEDSXUgQkx7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49877	172.67.204.164	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:46 UTC	519	OUT	POST /tracking/getnotification HTTP/1.1 Host: notification.secureanalytic.com Connection: keep-alive Content-Length: 416 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json Accept: / Origin: https://majorleagueprices.icu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:46 UTC	416	OUT	Data Raw: 7b 22 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 43 72 65 61 74 65 44 61 74 65 22 3a 22 32 30 32 34 2d 31 32 2d 31 37 54 31 31 3a 31 39 3a 32 32 2d 30 36 3a 30 30 5b 41 6d 65 72 69 63 61 2f 43 68 69 63 61 67 6f 5d 22 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 33 34 30 34 36 35 34 35 39 2c 22 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 3a 34 35 30 37 34 31 34 34 38 2c 22 74 74 6c 22 3a 31 37 33 34 34 35 35 39 37 39 2c 22 61 63 74 69 6f 6e 73 22 3a 5b 5d 2c 22 75 73 65 72 53 65 67 6d 65 6e 74 22 3a 6e 75 6c 6c 2c 22 61 64 41 70 69 53 65 73 73 69 6f 6e 49 64 73 22 3a 5b 5d 2c 22 70 75 73 68 41 70 69 41 64 49 64 73 22 3a 5b 5d 2c 22 65 78 74 41 70 69 41 64 49 64 73 22 3a 5b 5d 2c 22 70 75 73 68 41 70 69 49 64 73 22 3a 5b 5d 2c 22 75 74 6d Data Ascii: {"pushSubscriptionCreateDate":"2024-12-17T11:19:22-06:00[America/Chicago]","campaignId":3340465459,"pushSubscriptionId":450741448,"ttl":1734455979,"actions":[],"userSegment":null,"adApiSessionIds":[],"pushApiAdIds":[],"extApiAdIds":[],"pushApiIds":[],"utm
2024-12-17 17:19:46 UTC	1224	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:19:46 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache referrer-policy: strict-origin-when-cross-origin x-pushplatformapp-params: 0 content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: x-pushplatformapp-alert: pushPlatformApp.tracking.updated x-frame-options: SAMEORIGIN access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params access-control-allow-origin: * vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers vary: accept-encoding x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC
2024-12-17 17:19:46 UTC	645	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 78 55 56 41 55 47 70 79 25 32 42 6b 71 47 74 47 55 51 4e 31 42 7a 50 74 36 62 6d 56 73 66 78 6b 50 79 66 5a 6d 6a 50 51 53 47 63 25 32 46 38 35 6d 42 34 31 62 71 37 51 53 69 78 7a 33 73 42 4e 7a 78 42 53 49 7a 6a 4b 32 62 42 4b 71 59 54 45 66 56 30 6f 62 35 6b 59 43 4e 34 71 61 7a 25 32 46 56 25 32 42 48 37 76 75 35 70 52 42 6f 75 6f 4a 56 79 61 37 54 46 6d 25 32 46 53 54 7a 25 32 42 6c 56 67 69 43 78 6c 72 6b 63 6d 4c 78 71 35 76 64 51 4b 52 52 68 37 30 7a 41 75 45 25 32 42 69 71 52 7a 6c 79 22 7d 5d 2c 22 67 72 6f 75 70 22 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xUVAUGpy%2BkqGtGUQN1BzPt6bmVsfxkPyfZmjPQSGc%2F85mB41bq7QSixz3sBNzxBSIzjK2bBKqYTEfV0ob5kYCN4qaz%2FV%2BH7vu5pRBouoJVya7TFm%2FSTz%2BlVgiCxlrkcmLxq5vdQKRRh70zAuE%2BiqRzly"}],"group"
2024-12-17 17:19:46 UTC	692	IN	Data Raw: 32 61 64 0d 0a 5b 7b 22 74 69 74 6c 65 22 3a 22 24 31 30 30 20 2d 20 50 61 79 6d 65 6e 74 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 e2 9c 94 ef b8 8f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 56 69 65 77 20 69 6d 6d 65 64 69 61 74 65 6c 79 2e 2e 2e 22 2c 22 72 65 64 69 72 65 63 74 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 77 61 72 64 77 69 6e 6e 65 72 73 75 72 76 65 79 73 2e 63 6f 6d 2f 73 77 65 65 70 73 3f 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 72 77 5f 63 73 68 61 70 5f 31 30 30 26 75 74 6d 5f 73 6f 75 72 63 65 3d 70 75 73 68 26 63 69 64 3d 43 41 31 30 30 2d 31 26 73 31 3d 31 30 34 34 33 26 73 32 3d 33 2e 38 36 2e 36 30 2e 32 32 30 26 73 33 3d 32 22 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 33 34 30 34 36 35 34 35 39 2c 22 70 75 73 68 53 75 62 73 63 72 69 70 Data Ascii: 2ad[{"title":"$100 - Payment Notification ","message":"View immediately...","redirect":"https://rewardwinnersurveys.com/sweeps?utm_content=rw_cshap_100&utm_source=push&cid=CA100-1&s1=10443&s2=3.86.60.220&s3=2","campaignId":3340465459,"pushSubscrip
2024-12-17 17:19:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49878	151.101.193.44	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:47 UTC	1054	OUT	GET /2.0/json/notifyai-digitalsubscribers/recommendations.notify-available?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412&response.id=__2bc45aa076fb445c279c905146a9f5aa__a8bd327b98bbd68842c75677f1e6b089__~~V1~~-8546183196209246962~~EvnSfqjKR28lZYTWEDIELF4uCFvA5_b1Wov7B-yjFNXnoZueAsnM0UTkqRiz-o8uV9GNaet_FWxUAZ9PPPsFwepP0QI8ApBUqMn1Hn67unFW3gMxxE5FklL3byiLVORnL2mKl-VYyYpmjqtTDTKL2EuhYyT-X-BIWbZ-mIZ0peXX-x-fnc1sjKo9ZL00ocmTMO7Tswj5WH4cylUjQLFLHQ__text&response.session=v2_1d395c24c6744aa481ce31fc78793722_450741448_1734455985_1734455985_CIi3jgYQ0pdeGMGOiK29MiABKAQw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiI6d315YeYt1lwAIABAA HTTP/1.1 Host: api.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Origin: https://majorleagueprices.icu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:48 UTC	592	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Content-Type: image/gif Cache-Control: no-cache Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://majorleagueprices.icu Access-Control-Allow-Credentials: true Accept-Ranges: bytes Date: Tue, 17 Dec 2024 17:19:48 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr-kewr1740035-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1734455988.025598,VS0,VE226 X-vcl-time-ms: 226

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49879	151.101.193.44	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:47 UTC	1052	OUT	GET /2.0/json/notifyai-digitalsubscribers/recommendations.notify-visible?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412&response.id=__2bc45aa076fb445c279c905146a9f5aa__a8bd327b98bbd68842c75677f1e6b089__~~V1~~-8546183196209246962~~EvnSfqjKR28lZYTWEDIELF4uCFvA5_b1Wov7B-yjFNXnoZueAsnM0UTkqRiz-o8uV9GNaet_FWxUAZ9PPPsFwepP0QI8ApBUqMn1Hn67unFW3gMxxE5FklL3byiLVORnL2mKl-VYyYpmjqtTDTKL2EuhYyT-X-BIWbZ-mIZ0peXX-x-fnc1sjKo9ZL00ocmTMO7Tswj5WH4cylUjQLFLHQ__text&response.session=v2_1d395c24c6744aa481ce31fc78793722_450741448_1734455985_1734455985_CIi3jgYQ0pdeGMGOiK29MiABKAQw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiI6d315YeYt1lwAIABAA HTTP/1.1 Host: api.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Origin: https://majorleagueprices.icu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:48 UTC	592	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Content-Type: image/gif Cache-Control: no-cache Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://majorleagueprices.icu Access-Control-Allow-Credentials: true Accept-Ranges: bytes Date: Tue, 17 Dec 2024 17:19:48 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-nyc-kteb1890040-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1734455988.029926,VS0,VE450 X-vcl-time-ms: 450

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49880	151.101.193.44	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:47 UTC	1218	OUT	GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2F56d932aa1f6cfa49bdc3978ab8992521?srcxy=notifyai-digitalsubscribers_--___2bc45aa076fb445c279c905146a9f5aa__a8bd327b98bbd68842c75677f1e6b089__~~V1~~-8546183196209246962~~EvnSfqjKR28lZYTWEDIELF4uCFvA5_b1Wov7B-yjFNXnoZueAsnM0UTkqRiz-o8uV9GNaet_FWxUAZ9PPPsFwepP0QI8ApBUqMn1Hn67unFW3gMxxE5FklL3byiLVORnL2mKl-VYyYpmjqtTDTKL2EuhYyT-X-BIWbZ-mIZ0peXX-x-fnc1sjKo9ZL00ocmTMO7Tswj5WH4cylUjQLFLHQ__text&response.session=v2_1d395c24c6744aa481ce31fc78793722_450741448_1734455985_1734455985_CIi3jgYQ0pdeGMGOiK29MiABKAQw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiI6d315YeYt1lwAIABAA HTTP/1.1 Host: images.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=14be3b4b-e0db-4ee1-9e84-04742c067024-tucte5b381e
2024-12-17 17:19:48 UTC	1372	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9636 Server: nginx Content-Type: image/webp access-control-allow-headers: X-Requested-With access-control-allow-origin: * cache-tag: 462876769757500249278315239883331651157,619149009496235914396518764768921979263,29ecf9b93bbf306179626feeda1fab70 edge-cache-tag: 462876769757500249278315239883331651157,619149009496235914396518764768921979263,29ecf9b93bbf306179626feeda1fab70 etag: "e14e3d1e0f27cb5c8f35bdd1b5bec3ff" last-modified: Tue, 10 Dec 2024 09:08:15 GMT req-referer: https://26.yourrewards-locker.com/ status: 200 OK surrogate-reporting: width=200,height=200,bytes=14785,format="jpg",owidth=1024,oheight=682,obytes=55863,oformat="jpg",crt=1734105427,ocrt=1733821694,ef=(1,13,17,23,30) timing-allow-origin: * x-orig-request-id: 0e5adb2648dcff3c03cf5f6ee8061189 x-ratelimit-limit: 101 x-ratelimit-remaining: 100 x-ratelimit-reset: 1 x-request-id: 5dc482ae01a6c2bb31bb4a24ce29e153 x-envoy-upstream-service-time: 327 Via: 1.1 varnish, 1.1 varnish Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Date: Tue, 17 Dec 2024 17:19:48 GMT Age: 350561 X-Served-By: cache-iad-kcgs7200083-IAD, cache-iad-kcgs7200083-IAD, cache-lax-kwhp1940128-LAX, cache-iad-kcgs7200040-IAD, cache-ewr-kewr1740023-EWR X-Cache: Miss from cloudfront, MISS, MISS, MISS, HIT, HIT X-Cache-Hits: 0, 0, 0, 12, 1
2024-12-17 17:19:48 UTC	789	IN	Data Raw: 58 2d 54 69 6d 65 72 3a 20 53 31 37 33 34 34 35 35 39 38 38 2e 31 39 34 38 38 32 2c 56 53 30 2c 56 45 31 0d 0a 56 61 72 79 3a 20 49 6d 61 67 65 46 6f 72 6d 61 74 0d 0a 58 2d 64 65 62 75 67 3a 20 2f 74 61 62 6f 6f 6c 61 2f 69 6d 61 67 65 2f 66 65 74 63 68 2f 66 5f 6a 70 67 25 32 43 71 5f 61 75 74 6f 25 32 43 68 5f 32 30 30 25 32 43 77 5f 32 30 30 25 32 43 63 5f 66 69 6c 6c 25 32 43 67 5f 66 61 63 65 73 3a 61 75 74 6f 25 32 43 65 5f 73 68 61 72 70 65 6e 2f 68 74 74 70 25 33 41 25 32 46 25 32 46 63 64 6e 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 25 32 46 6c 69 62 74 72 63 25 32 46 73 74 61 74 69 63 25 32 46 74 68 75 6d 62 6e 61 69 6c 73 25 32 46 35 36 64 39 33 32 61 61 31 66 36 63 66 61 34 39 62 64 63 33 39 37 38 61 62 38 39 39 32 35 32 31 3f 73 72 63 78 79 3d 6e Data Ascii: X-Timer: S1734455988.194882,VS0,VE1Vary: ImageFormatX-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2F56d932aa1f6cfa49bdc3978ab8992521?srcxy=n
2024-12-17 17:19:48 UTC	1378	IN	Data Raw: 52 49 46 46 9c 25 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 c7 00 00 c7 00 00 56 50 38 20 bc 24 00 00 d0 7c 00 9d 01 2a c8 00 c8 00 3e 91 3a 97 48 a5 a3 22 21 2d 16 bc 78 b0 12 09 64 00 c1 4c 0a 2b 8f 9c e8 ad e5 ff 0c a3 c5 79 9f 4b e6 c7 f0 dd f9 7f e4 7a c2 ff 27 e9 4d d1 3b cd 47 9c c7 a4 5f f3 fe 92 5d 4e fd 13 9e b4 9f e0 6d 71 9a db a6 cf 9a ff 01 fb 9d ec 0d 97 fe ce 7f d6 f4 2b f9 d7 e3 df df f9 d3 ff 6f fc 97 92 bf 11 bf c0 ff 11 ec 17 f9 4f f4 6f f5 9e 9a 9f 53 ff 0f fc 1f 8a 76 d3 fe 83 fe 8f f8 cf 61 1f 6a be b5 ff 4b fc 3f ab d7 e0 f9 c7 f6 57 d8 0b 83 d3 d6 fd 82 bf 54 fa b6 7f 8d e5 e3 ea 9f 61 ff e7 ff e1 18 49 60 97 f7 5c 55 ae 1c cd 81 df a2 4f d1 ae bb df 02 47 94 c5 3f 67 0c 21 39 96 36 41 38 dc 03 c4 bf 2e f0 37 2e f5 c7 Data Ascii: RIFF%WEBPVP8XVP8 $\|*>:H"!-xdL+yKz'M;G_]Nmq+oOoSvajK?WTaI`\UOG?g!96A8.7.
2024-12-17 17:19:48 UTC	1378	IN	Data Raw: c8 21 a9 d0 92 13 14 7f 49 11 f2 41 5a 17 4d 35 e8 30 28 06 90 ae d5 f5 19 e5 46 31 9b e0 f4 69 b6 b0 92 8f 6d 06 5b b4 19 05 d7 00 ed 9c 3d 9c 25 cd 41 86 b3 4d ea f2 26 72 b9 f2 91 7a 1f 2a 41 98 3d 1d 40 b4 4a 87 41 d1 b2 3c 14 8c 80 2d 25 70 5f 51 92 46 fe 46 f6 27 55 12 ff ef 73 e8 5b 11 bb 4f 02 32 f8 bc 04 3b 32 a9 d2 86 cc 50 4c 42 c4 01 80 ec 2a 2c 54 d9 5f 8c 77 bf f8 9a a3 94 06 a5 5c 6a 4e d8 df b1 74 8e 48 be 20 c2 a3 52 cf 5f 45 9a f3 38 bf 9d c5 5e c6 f9 1e c2 0f eb 56 19 f2 66 a1 45 61 a7 cf 44 3a 0c 5f f9 0c 59 ef 03 9a 53 8c aa b2 00 4d a7 1b d9 ac 11 1c 46 4a ca 36 c4 6b 3c 2e 2e 3c bf db f4 dd 9d 97 89 87 6c 35 82 77 c5 9f 79 86 7a 44 85 ba 3b 05 c3 b2 53 b5 9d 90 63 5b b6 25 68 a7 9c 1b dc df ab 40 02 82 42 53 1f 9d 65 ba 45 3f 9e ff Data Ascii: !IAZM50(F1im[=%AM&rzA=@JA<-%p_QFF'Us[O2;2PLB,T_w\jNtH R_E8^VfEaD:_YSMFJ6k<..<l5wyzD;Sc[%h@BSeE?
2024-12-17 17:19:48 UTC	1378	IN	Data Raw: 53 04 89 a8 fe b2 db 71 d5 0c 75 39 af ed 0e 95 4d 06 f9 eb 4c 30 20 a9 de c9 75 61 ed ed f3 1b aa be d7 ab f6 69 be 46 c3 e7 37 00 ca 3f 2e ca 3c f0 06 b7 b0 dc 4d d1 19 95 82 ef cf 8e 5f 9d ef fc c0 66 a4 fd 5b e1 d1 04 d5 9b 6c de bb 44 c2 5c 3b 58 65 56 b3 4c 4d 2e 24 13 bb 81 7a 9d 1d 34 01 f1 4a 68 f2 8d 76 d8 65 bc 34 17 f4 e6 8f dc 37 74 13 7e 93 0f 57 c2 7e 2a c7 c5 4f ba c1 0e 0d 08 85 aa 8a 55 fc 2a 3a 12 f4 f2 a7 de 32 d5 3f f7 57 32 16 07 23 ee 17 dd 8a fc 37 78 94 b0 d6 c5 7a ba 45 7e 93 95 a9 f8 33 7d ae b8 1c b8 81 dc aa 48 c1 ff e2 27 fc 76 86 88 f6 12 a3 04 a1 29 82 40 f1 11 7f ea c1 9f ce 9d 73 9c 65 18 36 5f 8c 7c 05 d1 64 cf 1e ad d6 15 41 cc 61 a2 ea 9c 8a 8a b1 3d 8a 75 16 6c 92 65 8d a6 21 01 d3 f4 f8 74 8e 15 4d 86 41 7c cc f3 4e Data Ascii: Squ9ML0 uaiF7?.<M_f[lD\;XeVLM.$z4Jhve47t~W~OU:2?W2#7xzE~3}H'v)@se6_\|dAa=ule!tMA\|N
2024-12-17 17:19:48 UTC	1378	IN	Data Raw: 09 c0 53 1c be 38 5b 2d eb fa d2 f0 8e c9 e7 83 60 60 69 15 d0 2d 60 30 93 b6 57 18 df 7e 51 e2 08 30 2a b4 89 78 e8 ad 4c 0a f5 ac 79 5b 36 c4 f1 fc c7 d9 1f 3c d4 b1 2f 97 60 82 a9 25 4e 64 6d 1e 10 44 8f 8e 3b a1 a3 a5 06 2f 87 44 7f df f6 f1 2e 5d 66 a9 7a 73 8c ac 60 97 ab 27 9c 72 62 52 a7 b0 72 bb 62 50 d0 2b d7 c0 8d 35 bd 4a 55 49 31 ff bf 7e d0 f7 19 9d c4 d4 cc d2 21 35 74 66 be c2 94 a6 37 1e 9c 04 20 9f e2 07 99 bd a9 10 79 d1 a7 9c 30 32 92 40 fd 5a 0b 4b df df 06 6e b6 29 42 a7 95 92 66 2f 24 4d 67 15 db 94 fd 53 dd f1 a4 bf 97 a7 88 ce f2 cc 1e 4a d9 c3 f6 fe 2f 0b 84 f3 fe 09 5f bd 41 8c f6 ea 8d 12 2d 97 9e b7 d2 41 e7 7d a1 07 d4 91 f8 17 69 0f eb 4c 7d e2 49 fc 4b 8f fe 22 5d e3 2e 48 88 cb 1b 8e 66 42 f4 c3 e1 35 25 34 6f 61 2f fe f2 Data Ascii: S8[-``i-`0W~Q0*xLy[6</`%NdmD;/D.]fzs`'rbRrbP+5JUI1~!5tf7 y02@ZKn)Bf/$MgSJ/_A-A}iL}IK"].HfB5%4oa/
2024-12-17 17:19:48 UTC	1378	IN	Data Raw: 15 ca 2f 58 3c 15 0d 98 bd 0f 78 f7 db e6 5d a9 dc 53 81 47 a0 3e f5 7f f1 f8 32 3a c0 57 fc 5f 61 32 7b c1 4d 1f fe 34 b2 d3 57 63 6f a5 9c ca 2d 0e 44 80 35 04 39 fe b0 99 a7 41 91 31 ae 7c c4 f9 5e 4f 74 e6 9c d6 88 36 0e a4 dc 8f c2 f9 9b 77 cb b3 b2 aa 4b 66 c0 0e a5 43 35 29 12 47 97 71 94 ea 25 88 85 33 07 11 c4 eb 24 c4 b6 3a 60 0c c4 e3 b8 8c 7c b0 ac fa b7 fd 1d 4b c8 58 39 e1 52 78 5e 9e c8 47 65 f4 e4 ac 2d 33 c6 95 9e 32 ff b6 f4 57 29 6d 0d 6f b2 da b4 61 1c 0d 77 cb c9 8c b7 87 4d 3b 92 9c ca a6 5c a4 d2 52 59 04 f7 6a 3c 13 4f 7e 72 b9 80 ab a7 ca 57 56 32 84 d9 8f 72 36 52 d3 44 59 a9 9f c5 d0 f1 39 a7 82 6c a1 b2 99 3f db 33 7a 95 3c cc 86 5d 82 a4 93 2d 85 da 02 60 c6 4a 25 51 40 7c 71 bc 24 6f 3c 29 5a 2b 56 48 11 00 ff 32 3a 9b 79 f1 Data Ascii: /X<x]SG>2:W_a2{M4Wco-D59A1\|^Ot6wKfC5)Gq%3$:`\|KX9Rx^Ge-32W)moawM;\RYj<O~rWV2r6RDY9l?3z<]-`J%Q@\|q$o<)Z+VH2:y
2024-12-17 17:19:48 UTC	1378	IN	Data Raw: 9d 9a a4 51 ff e1 5d f5 67 10 9f 5c fd 41 23 83 7a 5a 95 9d 4c 25 40 8a 8b 1e b6 dc 40 d2 3e 80 8d 0b 7a b5 f5 fb b5 7b d6 e0 1c fb d9 4d ae 25 13 2b 3e 75 26 a3 e3 7f 96 0c f6 70 4a 62 5c b0 41 e3 13 30 c6 e0 08 6b 3a e0 6a 49 ce 81 d4 d6 14 5a 95 93 98 d0 d4 38 e2 16 b2 77 d4 50 8d 2b 64 7b 70 d3 9c 4b f0 44 7b 75 6c f9 73 b5 a7 f1 76 39 76 ae 8a 05 f8 6a 59 cd 18 a1 4a 57 c0 4f f1 cf ff 6f 6d 80 9c 48 9d e6 41 48 89 c8 ee 5f 88 4d fe 2e ee 2d 55 cb b7 b6 6e 13 c8 90 bf 83 c4 8c 37 95 18 11 c8 69 ed 75 0a 75 dc c4 b9 5b 83 5f 2e a8 ee f5 d3 83 9e 0a 0e a9 be be d0 d4 b8 9c c5 f4 f2 0e ba a8 51 07 31 36 c5 80 a3 5c 5a b0 7a 08 ae 02 bc dd 3d ad 8d 0e 17 91 7f ec cc f7 3b a8 48 7c 3c d9 5a 1c 2c e2 86 bf ed 78 52 05 86 77 0a 4c 7d f7 a0 57 0b 0e 2d d7 3b Data Ascii: Q]g\A#zZL%@@>z{M%+>u&pJb\A0k:jIZ8wP+d{pKD{ulsv9vjYJWOomHAH_M.-Un7iuu[_.Q16\Zz=;H\|<Z,xRwL}W-;
2024-12-17 17:19:48 UTC	1368	IN	Data Raw: d0 72 c7 24 09 f4 5e 10 0f 4f 2c a2 57 88 6f c4 06 2f 87 98 cc 42 30 f9 fd b7 31 a7 41 09 3b d2 9c 87 d8 a3 00 b0 68 28 38 81 77 b5 a7 f9 84 61 f1 15 f1 0e 06 f6 d2 95 fd f4 30 31 8d c6 be 28 cd 12 c5 72 3f 47 a5 98 b1 22 70 20 a1 c8 9c 6b 79 1d d3 2e 5a 0f dc 79 87 91 97 52 48 d7 fd a9 5f 03 6e 37 d9 4a e7 d5 f9 bb 44 96 11 b4 2f 8a 0e 08 ee 4e cb e3 09 aa d9 33 a8 c6 5d 6a 38 19 a7 4c ef 40 0a 5a bb ac 22 3b d1 6c 68 ee a6 13 25 4e fb 1d e9 5a b7 e5 f3 b6 cb 15 02 af 4e f0 d4 8b d1 64 0d 19 b9 70 65 0c 8a 96 f2 24 bf 86 b9 71 82 59 9c f7 ba aa 4f 9d e4 8f 4b 2c 88 30 c2 45 94 81 a0 38 d8 fe 01 ff 9e 1c a5 ba 70 dc 0a 5b 5f 8b ae dc 2d d4 30 6e 0f 33 dc 07 3e 56 b5 eb 41 fa a8 29 1c 35 5f 3c ee cc 70 c4 26 bb 72 93 0f a8 05 70 c6 c6 12 0d 79 a6 c2 66 d1 Data Ascii: r$^O,Wo/B01A;h(8wa01(r?G"p ky.ZyRH_n7JD/N3]j8L@Z";lh%NZNdpe$qYOK,0E8p[_-0n3>VA)5_<p&rpyf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49882	172.67.171.114	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:49 UTC	1868	OUT	GET /tr/o/IgFQdy47E0l1TDSwYRWQhTwKmNk3COc7vu2MFx4zBhZ3H_TakF1IGk_x-yxEDAXIXZW8q46dP9RRh2C5s1wG0cmzoN9dMDOXlUG0Vsat2X2d5v2nne2bTrYNt9XKA_GKNsz4hJ_TstRR8-WABMw76jA5SrFtAw8uZg7tgzL9ZtxKKyJjsuQlKwnd8CldiKw7AZzMjaPLmk5VrMXAQF3qOR3B3sHf1pNVFqnSVG1ybgxbAMeN31hGpCMgjf4NYCiZzvBSwvieZW4DUO3vmme5oMiYumC4DFIuCyqi21tBjtvJubAleai_888aK4MjwRuWoQT3MBsxSESFxS8oyUVzHS7hrJynVZVDwGQ27g0kjj4uWJ7OGxURaWAVeTo8-7NDDsrlglEmA2ajV7XOYtFy33UIM9TelnRN57rMQDhoF_UHtVsN-ZLBXrMmS-9cK6wOHGa3QXqheQknYD17ys9VYttw5SkFI4FtapxhA30BEQeQAbb4Ifq3t0kyFU5JVOgJeB0e_WkGX0hfPgt0XU4HirEABoIMB045auhGGaJ-sZyNfs25uHP2-amgnIYpwYf0zFjNhcpIdrE0wc122mgXHPVq2s7DzwCpG_Wts1wxJ8A9hIWxvTrroTg5R0AOqEpyYMBqH7TEOq0Ai9ndEvIasvmw4L15wxHBpCv8Ah9sXKykji1gf-a9v6BQXQ5jDP8LZUI8Q668H45c6YXMzr0HvkhI8wMZToe1_C6HgpPna7pv5liwSvp5Wal3GzJgNvsDC2vB3V0Xl16IJ8PNguWXZO0BfLFojJFnwvXEQWEQnVOqhPxRTcdlifbsBMKzUxlYmjIiZ8LR02vg0-H_aRqn1Ff56tvNOL7ojm_hW-FpH-PRsP40N1ZyY4A9iUJbLu3BaG38zS5W7J6KprphLwvQxzy1kbhd-9tXc_F3o9XcApGq1F250YMR7EMIa8_3YTQ9mSBFs-60-G31t6qc5mUXTHsveCTiwRELUH9UUKoSvdO1mzJM6RsCDR [TRUNCATED] Host: pushclk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:49 UTC	1358	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 17 Dec 2024 17:19:49 GMT Content-Length: 0 Connection: close location: https://images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2F56d932aa1f6cfa49bdc3978ab8992521?srcxy=notifyai-digitalsubscribers_--___2bc45aa076fb445c279c905146a9f5aa__a8bd327b98bbd68842c75677f1e6b089__~~V1~~-8546183196209246962~~EvnSfqjKR28lZYTWEDIELF4uCFvA5_b1Wov7B-yjFNXnoZueAsnM0UTkqRiz-o8uV9GNaet_FWxUAZ9PPPsFwepP0QI8ApBUqMn1Hn67unFW3gMxxE5FklL3byiLVORnL2mKl-VYyYpmjqtTDTKL2EuhYyT-X-BIWbZ-mIZ0peXX-x-fnc1sjKo9ZL00ocmTMO7Tswj5WH4cylUjQLFLHQ__text&response.session=v2_1d395c24c6744aa481ce31fc78793722_450741448_1734455985_1734455985_CIi3jgYQ0pdeGMGOiK29MiABKAQw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiI6d315YeYt1lwAIABAA expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
2024-12-17 17:19:49 UTC	917	IN	Data Raw: 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 76 61 72 79 3a 20 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 4d 65 74 68 6f 64 0d 0a 76 61 72 79 3a 20 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 48 65 61 64 65 72 73 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 63 61 6d 65 72 61 3d 28 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 28 73 65 6c 66 29 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 6d 61 67 6e 65 74 6f 6d 65 74 65 72 3d 28 29 2c 20 6d 69 63 72 6f 70 68 6f 6e 65 3d 28 29 2c 20 6d 69 64 69 3d 28 29 2c 20 70 61 79 6d 65 6e 74 3d 28 29 2c 20 Data Ascii: vary: Originvary: Access-Control-Request-Methodvary: Access-Control-Request-Headersx-content-type-options: nosniffpermissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49890	3.5.27.174	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:50 UTC	498	OUT	GET /content/badges/fkjhn587sdfk2.png HTTP/1.1 Host: cdn-media-2020.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:50 UTC	446	IN	HTTP/1.1 200 OK x-amz-id-2: yDCyGvEL4G12Gfqjgf6fLYexhL2JXKxDGam/uwTzzruwtYVuj00xlAt4blR755DFQtqfAfgVSsHkYe0QldgF9JGL/1D+tpubAwaYkWDQKww= x-amz-request-id: 0P5EW5NMR4WT84S5 Date: Tue, 17 Dec 2024 17:19:51 GMT Last-Modified: Thu, 14 Dec 2023 09:31:14 GMT ETag: "53380715252091c20bbe07ebd59c2129" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Content-Length: 1289 Server: AmazonS3 Connection: close
2024-12-17 17:19:50 UTC	1289	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 06 00 00 00 c3 3e 61 cb 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 04 9e 49 44 41 54 78 01 ed dd cd 75 d4 30 14 05 e0 cb cf 9e 74 80 3a 48 a8 20 66 c7 8e 50 41 4c 05 84 0a 66 52 41 92 0a c6 54 40 a8 c0 b3 64 47 a8 c0 a6 82 84 1d ac 82 c4 78 4e 7e 0e 09 7e 96 65 4b 7a f7 3b e7 1d 0e c4 24 8e 75 6d 8f 65 59 06 88 88 88 88 88 88 88 88 88 28 7f 4f a0 8f b1 b5 d3 95 e9 fe ad ed fe bc b0 75 05 45 34 04 a0 b0 75 60 6b d7 d6 1e 36 0d ff 18 17 00 17 84 ef b6 ce 6d ad 41 c9 29 6c 9d da ba b4 75 ed 59 8d ad 15 6e 8e 16 14 b1 c2 56 0d ff 46 7f a8 dc f7 de 03 45 c7 d8 fa 8c 70 0d 7f Data Ascii: PNGIHDR>apHYssRGBgAMAaIDATxu0t:H fPALfRAT@dGxN~~eKz;$umeY(OuE4u`k6mA)luYnVFEp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49889	18.165.213.106	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:50 UTC	510	OUT	GET /content/c/internal/download%20%288%294427.webp HTTP/1.1 Host: d22322n8919ncg.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:51 UTC	519	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 6532 Connection: close Date: Tue, 17 Dec 2024 17:19:52 GMT Last-Modified: Sun, 10 Nov 2024 09:40:07 GMT ETag: "f3c96ba9499bcd5706f5004dd1dd6220" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 53a0f975e2490ceb7823ef71fea7315a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: Hygu7lz2nXjiOklCG0LBniwmg4sg7TDud6Bbp8KtHNi1BM2ntcOGQQ== Cache-Control: max-age=31536000
2024-12-17 17:19:51 UTC	6532	IN	Data Raw: 52 49 46 46 7c 19 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 c1 01 00 e0 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF\|WEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49888	18.165.213.106	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:50 UTC	496	OUT	GET /content/c/internal/hero4540.webp HTTP/1.1 Host: d22322n8919ncg.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:51 UTC	519	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 5004 Connection: close Date: Tue, 17 Dec 2024 17:19:52 GMT Last-Modified: Fri, 23 Feb 2024 14:35:17 GMT ETag: "fe0d3787d5dd56d3f89fc8387b8cafff" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 487e773bc809cb87809f770954ce1e22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: YVMQ0bMSU1htzFupzYOmzrSz6Qz_RMNhQnDLJejjxoD16zRHJPnRrA== Cache-Control: max-age=31536000
2024-12-17 17:19:51 UTC	5004	IN	Data Raw: 52 49 46 46 84 13 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 9a 01 00 cd 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49892	172.67.171.114	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:50 UTC	908	OUT	GET /tr/o/JDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfJ9HM71r-eA1-AnypqWquQ0jfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK?h=&v=185 HTTP/1.1 Host: pushclk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:51 UTC	1341	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 17 Dec 2024 17:19:51 GMT Content-Length: 0 Connection: close location: https://d22322n8919ncg.cloudfront.net/content/c/internal/images1339.jpeg expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QtaMcl3KZH9lP14gGkNUaoQcxC6g76V0re2Ru7x%2BQP0UE2gR4I9ZAomCBErAU%2BHXzt5UDyMQNmx%2B7zf6YAJZVTE%2BaQqNTDqEXwAfVP9KC2xGRU4bFdwTYcuXBh4h1g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-17 17:19:51 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 33 38 39 34 39 39 33 39 30 66 34 32 61 63 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 32 33 34 26 6d 69 6e 5f 72 74 74 3d 32 32 33 34 26 72 74 74 5f 76 61 72 3d 31 31 31 37 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 31 26 73 65 6e 74 5f 62 79 74 65 73 3d 34 31 39 32 26 72 65 63 76 5f 62 79 74 65 73 3d 31 34 38 36 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 38 39 30 33 26 63 77 6e 64 3d 32 31 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 35 32 38 32 32 62 35 32 66 38 62 Data Ascii: CF-RAY: 8f389499390f42ac-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2234&min_rtt=2234&rtt_var=1117&sent=6&recv=7&lost=0&retrans=1&sent_bytes=4192&recv_bytes=1486&delivery_rate=168903&cwnd=215&unsent_bytes=0&cid=52822b52f8b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49891	3.5.27.174	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:51 UTC	497	OUT	GET /content/badges/7dsfjhk35tbd.png HTTP/1.1 Host: cdn-media-2020.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:51 UTC	446	IN	HTTP/1.1 200 OK x-amz-id-2: UQDwl9Q8fa//Jebf+OZGEZ6QH3Y4pDBL06esPJKsffVufcfhatlbfXzaD2xmoa0EmiSqh2gZrF8Q9Na3WbNJUYueFE/UEXnciqf71BrkQUQ= x-amz-request-id: EA8XMARFG6F43723 Date: Tue, 17 Dec 2024 17:19:52 GMT Last-Modified: Thu, 14 Dec 2023 09:31:02 GMT ETag: "9a5f6a807a2ccbe77574c3e96a7747e8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Content-Length: 1648 Server: AmazonS3 Connection: close
2024-12-17 17:19:51 UTC	1648	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 06 00 00 00 c3 3e 61 cb 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 06 05 49 44 41 54 78 01 ed 9d ed 71 dc 36 10 86 1f 67 f2 3f e9 c0 e8 c0 e9 40 48 05 51 07 66 2a 88 3b b8 4b 05 52 2a b8 4b 05 49 2a e0 b9 02 cb 15 90 ae 40 4a 05 0e 31 77 97 b1 64 49 c6 82 84 08 60 f7 99 d9 b9 3f 98 23 81 7d b1 f8 20 b8 04 c3 30 0c c3 30 0c 43 1d af d0 81 9b ec a7 d3 ef 8f 93 bd 7e a2 dc a7 c9 ee 26 1b 4f 76 43 e3 b4 28 80 e0 e0 4b 8e 0e bf 38 fd ce e1 e6 64 ef 27 3b 70 14 86 51 18 c1 e9 9b c9 fa c9 3e 67 b6 0f 93 bd e3 18 4d 8c 95 09 3d fd 25 9c fe 94 85 6b 77 18 2f ca b9 b7 df b2 9e e3 Data Ascii: PNGIHDR>apHYssRGBgAMAaIDATxq6g?@HQf;KRKI*@J1wdI`?#} 00C~&OvC(K8d';pQ>gM=%kw/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49895	172.67.171.114	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:51 UTC	868	OUT	GET /tr/o/JDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9JfeDFrA_wK9c_5nLFef8cibalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A==?h=&v=185 HTTP/1.1 Host: pushclk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:51 UTC	1364	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 17 Dec 2024 17:19:51 GMT Content-Length: 0 Connection: close location: https://d22322n8919ncg.cloudfront.net/content/c/internal/icone-robot-android-rouge5001.jpeg expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yxzSzxI9ZY4QH7FOCj2hWvIJ4zN3XUbQZGM4WMdAEkF%2F8EO7%2FbmM2j2RTcKixjsGgNR3FAuls%2BIgL%2BjYlLVQs%2BsnWgeYVP7%2FlOrai4wRghsivtMZk2jBhpPeJBBHWw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-17 17:19:51 UTC	277	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 33 38 39 34 39 61 37 62 34 36 37 63 61 36 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 36 33 31 31 26 6d 69 6e 5f 72 74 74 3d 31 39 39 30 26 72 74 74 5f 76 61 72 3d 33 35 31 30 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 35 26 72 65 63 76 5f 62 79 74 65 73 3d 31 34 34 36 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 34 36 37 33 33 36 26 63 77 6e 64 3d 32 33 36 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 36 31 36 31 39 31 34 62 30 37 Data Ascii: CF-RAY: 8f38949a7b467ca6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=6311&min_rtt=1990&rtt_var=3510&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1446&delivery_rate=1467336&cwnd=236&unsent_bytes=0&cid=6161914b07

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49894	172.67.171.114	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:51 UTC	908	OUT	GET /tr/o/JDvPdy1sMN2uSAhlhv6ZzbfRIux7f1Qhv2eEJNRyhkrdezwVKfo5l5OIcv6_ZXrmAZ-C1g-bUpFQDlCUE8STTR5ddP_2gonCmkzWN1yIssizH9yQ4AY2Nl0GwNNj-kLz-jhh_MPqN8HWHhgXC2vCXalzVxpWAaTy8DYteRA63Qw0sxCPBlnAEaPUcwT1mpOmY20p4XP7uvG7IME3NoVzpfoLFfIyRuhYH13uuI3Vmk_iqANq8QKPmxre-RkP3pMyToxkS_OATOBt5q2AHrZqKmNTj4H1DBR_O1Dd8DdgW02wDV7tjPHXvqTXzIUEDSXUgQkx7VJoY6HGKKC2TG_BGGo10tb2F-0Hx8dN4xCNQ6uiXP1Xw53FW6e0RnbMc15JKlC4G-uYXm5zDPIcQHfPwm8qe_LFVCdfJwp0kodkrmeooW62lc6AmykzadbmuuvW?h=&v=185 HTTP/1.1 Host: pushclk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:51 UTC	1365	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 17 Dec 2024 17:19:51 GMT Content-Length: 0 Connection: close location: https://d22322n8919ncg.cloudfront.net/content/c/internal/icon8653.jpeg expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b0wgfyWZAxumBCQN0V4ScmWdCGmshijKK09xC0cBILCKiEc1M3lTcjPVUEt9X2A6kdiixoy4aGM8JvrBNkQYcc%2FqfGsG1PWRs%2FJdRaTnHWqedaWZvp5Xjj57Ji6Pkg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38949a798bc47f-EWR
2024-12-17 17:19:51 UTC	247	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 37 31 37 34 26 6d 69 6e 5f 72 74 74 3d 31 35 33 33 26 72 74 74 5f 76 61 72 3d 34 30 36 36 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 35 26 72 65 63 76 5f 62 79 74 65 73 3d 31 34 38 36 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 39 30 34 37 36 31 26 63 77 6e 64 3d 32 35 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 66 30 61 35 63 35 61 63 37 37 31 65 38 66 31 63 26 74 73 3d 34 37 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=7174&min_rtt=1533&rtt_var=4066&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1486&delivery_rate=1904761&cwnd=252&unsent_bytes=0&cid=f0a5c5ac771e8f1c&ts=471&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49893	172.67.171.114	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:51 UTC	868	OUT	GET /tr/o/JDvPdy1sMN2uSAhlhv6ZzT2YnQxZ7rJfSs4wm0B4y3bNXZQeYA1vbxm0grejE8Qkr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzVVc-bEV6pChqnKE1y3b-JcRtZiozEH5P4yQTG4XnjEIHmPC1ZZywva756pQ0Tarek2pQX_-hFToCq1f-_X_R7W80L0S01Pc9dcMFi80BH9bvw2y31ogl6bmvyYChOfbT0-yWKXaF438VzfFgTGKHKc9pF9DhLELyDwmJ3XzRLt-PHXXsuUKVgQdLIduQenGyBCTHtUmhjocYooLZMb8EYajXS1vYX7QfHx03jEI1Dq6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_CZzf_hxCPVQ8zsZge_Ox8GQ==?h=&v=185 HTTP/1.1 Host: pushclk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:51 UTC	1350	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 17 Dec 2024 17:19:51 GMT Content-Length: 0 Connection: close location: https://d22322n8919ncg.cloudfront.net/content/c/internal/Screenshot_11302526.jpeg expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nZcpDLe9uDzJLO2NVipye5soCbcoEX4rQYZxKzCKCocJLW%2Fphj%2FBh6hPbNM5AJ2yuDsR%2Fe4Zf4RTHccWj2lgdu6kDIW%2BGjcl98hJcnaf7eAMwLQtuJ7RK3VYf0vz8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-17 17:19:51 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 33 38 39 34 39 61 62 63 37 63 34 33 64 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 35 32 36 26 6d 69 6e 5f 72 74 74 3d 32 35 32 36 26 72 74 74 5f 76 61 72 3d 31 32 36 33 26 73 65 6e 74 3d 37 26 72 65 63 76 3d 38 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 31 26 73 65 6e 74 5f 62 79 74 65 73 3d 34 31 38 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 34 34 36 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 31 36 31 35 32 26 63 77 6e 64 3d 32 34 33 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 63 38 66 38 39 63 30 61 62 64 31 Data Ascii: CF-RAY: 8f38949abc7c43df-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2526&min_rtt=2526&rtt_var=1263&sent=7&recv=8&lost=0&retrans=1&sent_bytes=4188&recv_bytes=1446&delivery_rate=216152&cwnd=243&unsent_bytes=0&cid=c8f89c0abd1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49898	18.165.213.106	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:52 UTC	508	OUT	GET /content/c/internal/unnamed1117.jpeg?h=&v=533 HTTP/1.1 Host: d22322n8919ncg.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:53 UTC	519	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 4449 Connection: close Date: Tue, 17 Dec 2024 17:19:54 GMT Last-Modified: Wed, 21 Dec 2022 13:57:16 GMT ETag: "a2a8d0f9ea1b8ee7353e45c2fd3f6aa7" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1b300ac0fc08f49360b62bb3f1350070.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: Xkfx4ehXNe1FzDHjJdGkSa-RbyVmy7bQ6i1qAUbj92jagYn8avha6A== Cache-Control: max-age=31536000
2024-12-17 17:19:53 UTC	4449	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 Data Ascii: JFIF(ICC_PROFILE0mntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49900	172.67.138.66	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:52 UTC	1006	OUT	GET /cmp/279768Q/36KPHXK/?source_id=1964&sub1=0cde5eace92144838554e74dacb8fa45&sub2=&sub3=&sub4=&sub5=23843 HTTP/1.1 Host: www.mastertrackingdomain.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uniqueClick_2H7HLJP4=618440f4-ec62-404f-9d64-783f3a71452d:1734455909; transaction_id=f1a7b1367acd441384cf9d47e80d6f6d
2024-12-17 17:19:53 UTC	1356	IN	HTTP/1.1 302 Found Date: Tue, 17 Dec 2024 17:19:53 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://www.trk2dkt.com/29PD1BG/H7JJ78/?sub1=1377_1964&sub2=6580c255f11d4fab852aeec5f5be679d Set-Cookie: uniqueClick_36KPHXK=6e37303e-2e3f-4359-b371-c3990e69695f:1734455993; Path=/; Expires=Wed, 18 Dec 2024 17:19:53 GMT; Secure; SameSite=None Set-Cookie: transaction_id=f1a7b1367acd441384cf9d47e80d6f6d\|6580c255f11d4fab852aeec5f5be679d; Path=/; Expires=Mon, 17 Mar 2025 17:19:53 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: 6f9eabbc-57ca-4e56-b7e4-cc223f5e53ce cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T3rcaS8nrQ2WRwvdk1n%2BqDLch%2FBE%2Fg8gJVdy0hHew%2FjDdk7QKt9ORFlWneoUUWwmu683xULJc1MtjMPv2BQfnFL1RSiFifukgauRH%2BR6AbtGZd5TOHoZV38Ul7d5Aky0xaODA1veEN9dDJA25lRq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3894a52fd2422f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1598&min_rtt=1592&rtt_var=610&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2862&recv_bytes=1606&delivery_rate=1776155&cwnd=137&unsent_bytes=0&cid=84ab8e08993ab879&ts=1031&x=0"
2024-12-17 17:19:53 UTC	13	IN	Data Raw: 37 37 0d 0a 3c 61 20 68 72 65 66 3d 22 Data Ascii: 77<a href="
2024-12-17 17:19:53 UTC	112	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 72 6b 32 64 6b 74 2e 63 6f 6d 2f 32 39 50 44 31 42 47 2f 48 37 4a 4a 37 38 2f 3f 73 75 62 31 3d 31 33 37 37 5f 31 39 36 34 26 61 6d 70 3b 73 75 62 32 3d 36 35 38 30 63 32 35 35 66 31 31 64 34 66 61 62 38 35 32 61 65 65 63 35 66 35 62 65 36 37 39 64 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: https://www.trk2dkt.com/29PD1BG/H7JJ78/?sub1=1377_1964&sub2=6580c255f11d4fab852aeec5f5be679d">Found</a>.
2024-12-17 17:19:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49899	18.165.213.106	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:53 UTC	498	OUT	GET /content/c/internal/images1339.jpeg HTTP/1.1 Host: d22322n8919ncg.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:54 UTC	519	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 6804 Connection: close Date: Tue, 17 Dec 2024 17:19:55 GMT Last-Modified: Sun, 10 Nov 2024 09:40:00 GMT ETag: "c6639ad87aef0452e376acab7c72d7ca" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 5008327c23740ce2f9d9ed54c8a489e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: QATcW7gXF42z3whymU3Qry87XipiSb6xr3LqbcVlnPvZ7PVAFKCuEw== Cache-Control: max-age=31536000
2024-12-17 17:19:54 UTC	6804	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49901	18.165.213.106	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:53 UTC	496	OUT	GET /content/c/internal/icon8653.jpeg HTTP/1.1 Host: d22322n8919ncg.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:54 UTC	519	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2893 Connection: close Date: Tue, 17 Dec 2024 17:19:55 GMT Last-Modified: Fri, 23 Feb 2024 14:35:12 GMT ETag: "2d0ef73f4087a245be0c991d475218b6" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1c642e00a55bc084d1dd63dc30d4a59a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: 1Uu2v7T65noWdAy6QsnCCxtkTldO61eqtvpEhPTR4-f3BV8AFoRurQ== Cache-Control: max-age=31536000
2024-12-17 17:19:54 UTC	2893	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49902	18.165.213.106	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:53 UTC	517	OUT	GET /content/c/internal/icone-robot-android-rouge5001.jpeg HTTP/1.1 Host: d22322n8919ncg.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:54 UTC	519	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 5516 Connection: close Date: Tue, 17 Dec 2024 17:19:55 GMT Last-Modified: Wed, 20 Mar 2024 18:05:09 GMT ETag: "2bc00acabe2b8c48b4fb4220c8ff6840" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 358b28eebad5be133b48dbeaa3a5bbdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: JDZfw4RSrn1jl1wrJTAyD5jB0HjWIW4YD1vDgiEmFVn-6xvrzH3FGA== Cache-Control: max-age=31536000
2024-12-17 17:19:54 UTC	5516	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49903	18.165.213.106	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:53 UTC	507	OUT	GET /content/c/internal/Screenshot_11302526.jpeg HTTP/1.1 Host: d22322n8919ncg.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:54 UTC	519	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 3277 Connection: close Date: Tue, 17 Dec 2024 17:19:55 GMT Last-Modified: Tue, 19 Mar 2024 21:32:26 GMT ETag: "6df9077e30c11d85feee14edc28408be" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8192d9c2a41eb0d51bafc2c7271a2a64.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: RCd0rgisV90j6smvSFBcvKxHccuLMZr4PAUOJ2CFATolCBpWaWIO_w== Cache-Control: max-age=31536000
2024-12-17 17:19:54 UTC	3277	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49905	35.244.193.194	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:55 UTC	773	OUT	GET /29PD1BG/H7JJ78/?sub1=1377_1964&sub2=6580c255f11d4fab852aeec5f5be679d HTTP/1.1 Host: www.trk2dkt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:55 UTC	786	IN	HTTP/1.1 302 Found server: nginx date: Tue, 17 Dec 2024 17:19:55 GMT content-type: text/html; charset=utf-8 Content-Length: 189 accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= set-cookie: uniqueClick_H7JJ78=f5b0a4f9-8882-45ae-9470-ec26f5243d0a:1734455995; Path=/; Expires=Thu, 16 Jan 2025 17:19:55 GMT; Secure; SameSite=None set-cookie: transaction_id=71fb64e74261421dbebd6fa6cf6be1da; Path=/; Expires=Mon, 17 Mar 2025 17:19:55 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: a2fee74e-c4c4-4146-9805-74d56bc12157 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:19:55 UTC	189	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 65 74 2d 6c 75 78 73 68 65 65 74 73 2e 63 6f 6d 2f 76 31 35 2f 63 68 65 63 6b 6f 75 74 3f 62 3d 33 30 34 26 61 6d 70 3b 26 61 6d 70 3b 72 65 67 69 6f 6e 3d 75 73 26 61 6d 70 3b 70 75 62 5f 69 64 3d 38 30 39 26 61 6d 70 3b 6f 69 64 3d 32 38 37 26 61 6d 70 3b 74 72 61 6e 73 61 63 74 69 6f 6e 5f 69 64 3d 37 31 66 62 36 34 65 37 34 32 36 31 34 32 31 64 62 65 62 64 36 66 61 36 63 66 36 62 65 31 64 61 26 61 6d 70 3b 67 63 6c 69 64 3d 26 61 6d 70 3b 6d 73 63 6c 6b 69 64 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49906	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:57 UTC	819	OUT	GET /v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:19:58 UTC	370	IN	HTTP/1.1 200 OK set-cookie: cv=v15; Path=/; Expires=Wed, 18 Dec 2024 17:19:57 GMT; Secure content-type: text/html; charset=utf-8 x-cloud-trace-context: 6343695e62dec7cdd0ca5c69c34542b3 date: Tue, 17 Dec 2024 17:19:58 GMT server: Google Frontend Content-Length: 323314 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:19:58 UTC	1020	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4a 2d 72 2d 51 2d 33 52 4e 77 62 49 67 53 6d 2d 67 69 79 48 67 48 5a 41 49 78 52 37 37 77 57 33 72 4b 6a 72 67 36 63 70 2d 70 49 22 20 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 47 65 74 20 4c 75 78 53 68 65 65 74 73 20 4e 6f 77 21 3c Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="google-site-verification" content="J-r-Q-3RNwbIgSm-giyHgHZAIxR77wW3rKjrg6cp-pI" /> <title>Get LuxSheets Now!<
2024-12-17 17:19:58 UTC	1390	IN	Data Raw: 63 79 46 6f 72 6d 61 74 3a 20 27 24 25 25 76 61 6c 75 65 25 25 27 2c 0a 20 20 20 20 63 75 72 72 65 6e 63 79 3a 20 27 55 53 44 27 2c 0a 20 20 20 20 63 6f 75 6e 74 72 79 3a 20 7b 22 61 6c 70 68 61 32 63 6f 64 65 22 3a 22 55 53 22 2c 22 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 75 72 72 65 6e 63 79 49 64 22 3a 31 2c 22 76 61 74 52 61 74 65 22 3a 22 30 2e 30 30 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 3a 22 65 6e 22 2c 22 74 61 78 4e 61 6d 65 22 3a 22 56 41 54 22 2c 22 63 75 72 72 65 6e 63 79 22 3a 7b 22 69 64 22 3a 31 2c 22 63 6f 64 65 22 3a 22 55 53 44 22 2c 22 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 64 6f 6c 6c 61 72 22 2c 22 66 6f 72 6d 61 74 22 Data Ascii: cyFormat: '$%%value%%', currency: 'USD', country: {"alpha2code":"US","name":"United States","currencyId":1,"vatRate":"0.00","locale":"en-US","languageCode":"en","taxName":"VAT","currency":{"id":1,"code":"USD","name":"United States dollar","format"
2024-12-17 17:19:58 UTC	1390	IN	Data Raw: 22 6e 61 6d 65 22 3a 22 4d 69 6e 6e 65 73 6f 74 61 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4d 53 22 2c 22 6e 61 6d 65 22 3a 22 4d 69 73 73 69 73 73 69 70 70 69 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4d 4f 22 2c 22 6e 61 6d 65 22 3a 22 4d 69 73 73 6f 75 72 69 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4d 54 22 2c 22 6e 61 6d 65 22 3a 22 4d 6f 6e 74 61 6e 61 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4e 45 22 2c 22 6e 61 6d 65 22 3a 22 4e 65 62 72 61 73 6b 61 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4e Data Ascii: "name":"Minnesota"},{"countryCode":"US","code":"MS","name":"Mississippi"},{"countryCode":"US","code":"MO","name":"Missouri"},{"countryCode":"US","code":"MT","name":"Montana"},{"countryCode":"US","code":"NE","name":"Nebraska"},{"countryCode":"US","code":"N
2024-12-17 17:19:58 UTC	1390	IN	Data Raw: 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 57 49 22 2c 22 6e 61 6d 65 22 3a 22 57 69 73 63 6f 6e 73 69 6e 22 7d 5d 7d 2c 0a 20 20 20 20 63 6f 75 6e 74 72 69 65 73 3a 20 5b 7b 22 61 6c 70 68 61 32 63 6f 64 65 22 3a 22 55 53 22 2c 22 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 75 72 72 65 6e 63 79 49 64 22 3a 31 2c 22 76 61 74 52 61 74 65 22 3a 22 30 2e 30 30 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 3a 22 65 6e 22 2c 22 74 61 78 4e 61 6d 65 22 3a 22 56 41 54 22 2c 22 63 75 72 72 65 6e 63 79 22 3a 7b 22 69 64 22 3a 31 2c 22 63 6f 64 65 22 3a 22 55 53 44 22 2c 22 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 64 6f 6c 6c 61 72 22 2c 22 66 6f 72 6d 61 74 22 3a Data Ascii: :"US","code":"WI","name":"Wisconsin"}]}, countries: [{"alpha2code":"US","name":"United States","currencyId":1,"vatRate":"0.00","locale":"en-US","languageCode":"en","taxName":"VAT","currency":{"id":1,"code":"USD","name":"United States dollar","format":
2024-12-17 17:19:58 UTC	1390	IN	Data Raw: 6e 61 6d 65 22 3a 22 4d 69 6e 6e 65 73 6f 74 61 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4d 53 22 2c 22 6e 61 6d 65 22 3a 22 4d 69 73 73 69 73 73 69 70 70 69 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4d 4f 22 2c 22 6e 61 6d 65 22 3a 22 4d 69 73 73 6f 75 72 69 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4d 54 22 2c 22 6e 61 6d 65 22 3a 22 4d 6f 6e 74 61 6e 61 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4e 45 22 2c 22 6e 61 6d 65 22 3a 22 4e 65 62 72 61 73 6b 61 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4e 56 Data Ascii: name":"Minnesota"},{"countryCode":"US","code":"MS","name":"Mississippi"},{"countryCode":"US","code":"MO","name":"Missouri"},{"countryCode":"US","code":"MT","name":"Montana"},{"countryCode":"US","code":"NE","name":"Nebraska"},{"countryCode":"US","code":"NV
2024-12-17 17:19:58 UTC	1390	IN	Data Raw: 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 57 49 22 2c 22 6e 61 6d 65 22 3a 22 57 69 73 63 6f 6e 73 69 6e 22 7d 5d 7d 2c 7b 22 61 6c 70 68 61 32 63 6f 64 65 22 3a 22 43 41 22 2c 22 6e 61 6d 65 22 3a 22 43 61 6e 61 64 61 22 2c 22 63 75 72 72 65 6e 63 79 49 64 22 3a 31 2c 22 76 61 74 52 61 74 65 22 3a 22 30 2e 30 30 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 43 41 22 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 3a 22 65 6e 22 2c 22 74 61 78 4e 61 6d 65 22 3a 22 56 41 54 22 2c 22 63 75 72 72 65 6e 63 79 22 3a 7b 22 69 64 22 3a 31 2c 22 63 6f 64 65 22 3a 22 55 53 44 22 2c 22 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 64 6f 6c 6c 61 72 22 2c 22 66 6f 72 6d 61 74 22 3a 22 24 25 25 76 61 6c 75 65 25 25 22 7d 2c 22 72 65 67 69 6f 6e 73 22 3a 5b Data Ascii: "US","code":"WI","name":"Wisconsin"}]},{"alpha2code":"CA","name":"Canada","currencyId":1,"vatRate":"0.00","locale":"en-CA","languageCode":"en","taxName":"VAT","currency":{"id":1,"code":"USD","name":"United States dollar","format":"$%%value%%"},"regions":[
2024-12-17 17:19:58 UTC	1390	IN	Data Raw: 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 3a 22 64 65 22 2c 22 74 61 78 4e 61 6d 65 22 3a 22 56 41 54 22 2c 22 63 75 72 72 65 6e 63 79 22 3a 7b 22 69 64 22 3a 33 2c 22 63 6f 64 65 22 3a 22 45 55 52 22 2c 22 6e 61 6d 65 22 3a 22 45 75 72 6f 22 2c 22 66 6f 72 6d 61 74 22 3a 22 e2 82 ac 25 25 76 61 6c 75 65 25 25 22 7d 2c 22 72 65 67 69 6f 6e 73 22 3a 5b 5d 7d 2c 7b 22 61 6c 70 68 61 32 63 6f 64 65 22 3a 22 41 54 22 2c 22 6e 61 6d 65 22 3a 22 41 75 73 74 72 69 61 22 2c 22 63 75 72 72 65 6e 63 79 49 64 22 3a 33 2c 22 76 61 74 52 61 74 65 22 3a 22 30 2e 32 30 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 64 65 2d 41 54 22 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 3a 22 64 65 22 2c 22 74 61 78 4e 61 6d 65 22 3a 22 56 41 54 22 2c 22 63 75 72 72 65 6e 63 79 22 3a 7b Data Ascii: ,"languageCode":"de","taxName":"VAT","currency":{"id":3,"code":"EUR","name":"Euro","format":"%%value%%"},"regions":[]},{"alpha2code":"AT","name":"Austria","currencyId":3,"vatRate":"0.20","locale":"de-AT","languageCode":"de","taxName":"VAT","currency":{
2024-12-17 17:19:58 UTC	1390	IN	Data Raw: 22 3a 22 41 52 22 2c 22 6e 61 6d 65 22 3a 22 41 72 6b 61 6e 73 61 73 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 43 41 22 2c 22 6e 61 6d 65 22 3a 22 43 61 6c 69 66 6f 72 6e 69 61 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 43 4f 22 2c 22 6e 61 6d 65 22 3a 22 43 6f 6c 6f 72 61 64 6f 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 43 54 22 2c 22 6e 61 6d 65 22 3a 22 43 6f 6e 6e 65 63 74 69 63 75 74 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 44 45 22 2c 22 6e 61 6d 65 22 3a 22 44 65 6c 61 77 61 72 65 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c Data Ascii: ":"AR","name":"Arkansas"},{"countryCode":"US","code":"CA","name":"userfornia"},{"countryCode":"US","code":"CO","name":"Colorado"},{"countryCode":"US","code":"CT","name":"Connecticut"},{"countryCode":"US","code":"DE","name":"Delaware"},{"countryCode":"US",
2024-12-17 17:19:58 UTC	1390	IN	Data Raw: 6f 64 65 22 3a 22 4e 4d 22 2c 22 6e 61 6d 65 22 3a 22 4e 65 77 20 4d 65 78 69 63 6f 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4e 59 22 2c 22 6e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4e 43 22 2c 22 6e 61 6d 65 22 3a 22 4e 6f 72 74 68 20 43 61 72 6f 6c 69 6e 61 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4e 44 22 2c 22 6e 61 6d 65 22 3a 22 4e 6f 72 74 68 20 44 61 6b 6f 74 61 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 64 65 22 3a 22 4f 48 22 2c 22 6e 61 6d 65 22 3a 22 4f 68 69 6f 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 Data Ascii: ode":"NM","name":"New Mexico"},{"countryCode":"US","code":"NY","name":"New York"},{"countryCode":"US","code":"NC","name":"North Carolina"},{"countryCode":"US","code":"ND","name":"North Dakota"},{"countryCode":"US","code":"OH","name":"Ohio"},{"countryCode"
2024-12-17 17:19:58 UTC	1390	IN	Data Raw: 61 6e 69 74 6f 62 61 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 43 41 22 2c 22 63 6f 64 65 22 3a 22 4e 42 22 2c 22 6e 61 6d 65 22 3a 22 4e 65 77 20 42 72 75 6e 73 77 69 63 6b 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 43 41 22 2c 22 63 6f 64 65 22 3a 22 4e 4c 22 2c 22 6e 61 6d 65 22 3a 22 4e 65 77 66 6f 75 6e 64 6c 61 6e 64 20 61 6e 64 20 4c 61 62 72 61 64 6f 72 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 43 41 22 2c 22 63 6f 64 65 22 3a 22 4e 53 22 2c 22 6e 61 6d 65 22 3a 22 4e 6f 76 61 20 53 63 6f 74 69 61 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 43 41 22 2c 22 63 6f 64 65 22 3a 22 4f 4e 22 2c 22 6e 61 6d 65 22 3a 22 4f 6e 74 61 72 69 6f 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 43 Data Ascii: anitoba"},{"countryCode":"CA","code":"NB","name":"New Brunswick"},{"countryCode":"CA","code":"NL","name":"Newfoundland and Labrador"},{"countryCode":"CA","code":"NS","name":"Nova Scotia"},{"countryCode":"CA","code":"ON","name":"Ontario"},{"countryCode":"C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49908	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:59 UTC	701	OUT	GET /assets/shared/checkout/v15/css/style.css HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:00 UTC	431	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: b090eb9261e648349f88059f21997e3a server: Google Frontend Content-Length: 51301 via: 1.1 google date: Tue, 17 Dec 2024 17:19:59 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"c865-193cfe30d00" Content-Type: text/css; charset=UTF-8 Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:00 UTC	959	IN	Data Raw: 2f 2a 20 62 75 6c 6d 61 20 2a 2f 0a 40 69 6d 70 6f 72 74 20 22 2e 2f 62 75 6c 6d 61 2e 6d 69 6e 2e 63 73 73 22 3b 0a 0a 40 69 6d 70 6f 72 74 20 22 2e 2f 6c 6f 61 64 69 6e 67 2e 63 73 73 22 3b 0a 0a 2f 2a 20 73 61 6c 65 73 20 70 6f 70 20 2a 2f 0a 73 65 63 74 69 6f 6e 2e 73 61 6c 65 73 70 6f 70 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 74 6f 70 3a 20 31 32 30 70 78 3b 0a 20 20 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 0a 20 20 20 20 30 20 30 2e 35 65 6d 20 31 65 6d 20 2d 30 2e 31 32 35 65 6d 20 72 67 62 61 28 31 30 2c 20 31 30 2c 20 31 30 2c 20 30 2e 31 29 2c 0a Data Ascii: /* bulma /@import "./bulma.min.css";@import "./loading.css";/ sales pop */section.salespop { position: fixed; top: 120px; left: -400px; background: white; border-radius: 5px; box-shadow: 0 0.5em 1em -0.125em rgba(10, 10, 10, 0.1),
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 79 70 65 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 39 61 66 35 63 3b 0a 7d 0a 73 65 63 74 69 6f 6e 2e 73 61 6c 65 73 70 6f 70 20 2e 6f 75 74 65 72 20 2e 69 6e 6e 65 72 20 70 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 20 69 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 39 61 66 35 63 3b 0a 7d 0a 2e 62 75 74 74 6f 6e 2e 69 73 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 39 61 66 34 65 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 7d 0a 2f 2a 20 74 6f 70 20 62 61 72 20 2a 2f 0a 62 6f 64 79 2e 63 68 65 63 6b 6f 75 74 20 2e 74 6f 70 62 61 72 20 7b 0a 20 20 70 61 64 64 Data Ascii: ype { margin-top: 5px; color: #29af5c;}section.salespop .outer .inner p:last-of-type i { color: #29af5c;}.button.is-success { background-color: #19af4e; border-color: transparent; color: #fff;}/* top bar */body.checkout .topbar { padd
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 2e 35 29 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 32 33 34 35 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 62 6f 64 79 2e 63 68 65 63 6b 6f 75 74 20 73 65 63 74 69 6f 6e 2e 64 6f 77 6e 73 65 6c 6c 2e 69 73 2d 61 63 74 69 76 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 7d 0a 62 6f 64 79 2e 63 68 65 63 6b 6f 75 74 20 73 65 63 74 69 6f 6e 2e 64 6f 77 6e 73 65 6c 6c 20 2e 69 6e 6e 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 34 30 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 Data Ascii: .5); justify-content: center; align-items: center; z-index: 12345; display: none;}body.checkout section.downsell.is-active { display: flex;}body.checkout section.downsell .inner { padding: 40px; border-radius: 5px; background: white;
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 20 2e 6c 6f 61 64 65 72 2d 32 2e 69 73 2d 61 63 74 69 76 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 7d 0a 62 6f 64 79 2e 63 68 65 63 6b 6f 75 74 20 2e 6c 6f 61 64 69 6e 67 20 2e 69 6e 6e 65 72 20 7b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 3b 0a 7d 0a 62 6f 64 79 2e 63 68 65 63 6b 6f 75 74 20 2e 6c 6f 61 64 69 6e 67 20 2e 69 6e 6e 65 72 20 70 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 72 65 6d 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 62 6f 64 79 2e 63 68 65 63 6b 6f 75 74 20 2e 6c 6f 61 64 69 6e 67 20 2e 69 6e 6e 65 72 20 2e 63 73 73 50 72 6f 67 72 65 73 73 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 30 Data Ascii: .loader-2.is-active { display: flex;}body.checkout .loading .inner { max-width: 500px;}body.checkout .loading .inner p { margin-bottom: 10px; font-size: 1.5rem; text-align: center;}body.checkout .loading .inner .cssProgress { width: 500
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 64 33 30 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 3b 0a 7d 0a 73 65 63 74 69 6f 6e 2e 75 70 73 65 6c 6c 20 2e 75 70 73 65 6c 6c 2d 69 6e 6e 65 72 20 2e 75 70 73 65 6c 6c 2d 68 65 61 64 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 64 33 30 30 3b 0a 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 Data Ascii: px; position: relative; border-radius: 5px; background: #ffd300; padding: 5px;}section.upsell .upsell-inner .upsell-header { background: #ffd300; color: black; font-weight: bold; text-align: center; padding: 10px 20px; border-top-lef
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 72 65 6d 29 3b 0a 20 20 72 69 67 68 74 3a 20 63 61 6c 63 28 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 20 2b 20 30 2e 32 35 72 65 6d 29 3b 0a 20 20 74 6f 70 3a 20 31 32 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 67 72 61 79 3b 0a 7d 0a 73 65 63 74 69 6f 6e 2e 75 70 73 65 6c 6c 20 2e 75 70 73 65 6c 6c 2d 69 6e 6e 65 72 20 2e 75 70 73 65 6c 6c 2d 63 6f 6e 74 65 6e 74 20 2e 75 70 73 65 6c 6c 2d 63 61 72 74 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 72 65 6d 3b 0a 7d 0a 73 65 63 74 69 6f 6e 2e 75 70 73 65 6c 6c 20 2e 75 70 73 65 6c 6c 2d 69 6e 6e 65 72 20 2e 75 70 73 65 6c 6c 2d 63 6f 6e 74 65 6e 74 20 2e 75 70 73 65 6c 6c 2d 63 61 72 74 20 2e 68 61 73 2d 69 6d 61 67 65 73 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 Data Ascii: rem); right: calc(16.6666666667% + 0.25rem); top: 12px; background: gray;}section.upsell .upsell-inner .upsell-content .upsell-cart { margin-bottom: 2rem;}section.upsell .upsell-inner .upsell-content .upsell-cart .has-images { position: rela
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 67 3a 20 32 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 73 6d 6f 6b 65 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 63 61 6c 63 28 32 35 30 70 78 20 2b 20 33 72 65 6d 29 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 73 65 63 74 69 6f 6e 2e 75 70 73 65 6c 6c 20 2e 75 70 73 65 6c 6c 2d 69 6e 6e 65 72 20 2e 75 70 73 65 6c 6c 2d 63 6f 6e 74 65 6e 74 20 2e 75 70 73 65 6c 6c 2d 6f 66 66 65 72 73 20 68 32 20 73 70 61 6e 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 73 6d 6f 6b 65 3b 0a 7d 0a 73 65 63 74 69 6f 6e 2e 75 70 73 65 6c 6c 20 2e 75 70 73 65 6c 6c 2d 69 Data Ascii: g: 20px; background: whitesmoke; border-radius: 5px; height: calc(250px + 3rem); overflow-y: scroll; overflow-x: hidden;}section.upsell .upsell-inner .upsell-content .upsell-offers h2 span { background: whitesmoke;}section.upsell .upsell-i
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 70 73 65 6c 6c 2d 63 6f 6e 74 65 6e 74 20 2e 75 70 73 65 6c 6c 2d 6f 66 66 65 72 73 20 2e 75 70 73 65 6c 6c 2d 6f 66 66 65 72 20 68 33 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 35 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 7d 0a 73 65 63 74 69 6f 6e 2e 75 70 73 65 6c 6c 20 2e 75 70 73 65 6c 6c 2d 69 6e 6e 65 72 20 2e 75 70 73 65 6c 6c 2d 63 6f 6e 74 65 6e 74 20 2e 75 70 73 65 6c 6c 2d 6f 66 66 65 72 73 20 2e 75 70 73 65 6c 6c 2d 6f 66 66 65 72 20 68 34 20 7b 0a 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 Data Ascii: psell-content .upsell-offers .upsell-offer h3 { font-size: 1rem; font-weight: normal; letter-spacing: 0.5px; line-height: 32px; font-style: italic;}section.upsell .upsell-inner .upsell-content .upsell-offers .upsell-offer h4 { letter-spacing
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 74 2d 73 69 7a 65 3a 20 31 2e 32 72 65 6d 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 73 65 63 74 69 6f 6e 2e 75 70 73 65 6c 6c 0a 20 20 2e 75 70 73 65 6c 6c 2d 69 6e 6e 65 72 0a 20 20 2e 75 70 73 65 6c 6c 2d 63 6f 6e 74 65 6e 74 0a 20 20 2e 75 70 73 65 6c 6c 2d 6f 66 66 65 72 73 0a 20 20 2e 75 70 73 65 6c 6c 2d 6f 66 66 65 72 0a 20 20 61 2e 62 75 74 74 6f 6e 0a 20 20 73 76 67 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 7d 0a 0a 73 65 63 74 69 6f 6e 2e 74 68 61 6e 6b 79 6f 75 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 34 72 65 6d 20 30 3b 0a 7d 0a 73 65 63 74 69 6f 6e 2e 74 68 61 6e 6b 79 6f 75 20 2e 63 6f 6c 75 6d 6e 73 20 7b 0a 20 20 6d 61 72 67 69 Data Ascii: t-size: 1.2rem; width: 100%; text-align: center;}section.upsell .upsell-inner .upsell-content .upsell-offers .upsell-offer a.button svg { margin-left: 10px;}section.thankyou { padding: 4rem 0;}section.thankyou .columns { margi
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 73 6d 6f 6b 65 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 0a 7d 0a 73 65 63 74 69 6f 6e 2e 74 68 61 6e 6b 79 6f 75 20 2e 74 68 61 6e 6b 79 6f 75 2d 63 6f 6e 74 65 6e 74 20 2e 61 64 64 72 65 73 73 2d 62 6f 78 20 70 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 31 72 65 6d 3b 0a 7d 0a 73 65 63 74 69 6f 6e 2e 74 68 61 6e 6b 79 6f 75 20 2e 74 68 61 6e 6b 79 6f 75 2d 63 6f 6e 74 65 6e 74 20 68 32 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 0a 20 20 66 6f 6e 74 2d 73 69 Data Ascii: background: whitesmoke; margin-bottom: 1rem;}section.thankyou .thankyou-content .address-box p:first-of-type { margin-bottom: 10px; font-size: 1.1rem;}section.thankyou .thankyou-content h2 { font-weight: bold; margin-bottom: 1rem; font-si

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49907	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:59 UTC	706	OUT	GET /assets/shared/checkout/v15/css/additional.css HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:00 UTC	433	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: ad1fb3ec5caf6d5bd3f42f3f25f69dd8 server: Google Frontend Content-Length: 462186 via: 1.1 google date: Tue, 17 Dec 2024 17:19:59 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"70d6a-193cfe30d00" Content-Type: text/css; charset=UTF-8 Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:00 UTC	957	IN	Data Raw: 2e 69 73 2d 73 6d 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 2e 64 65 73 6b 74 6f 70 2d 68 69 64 64 65 6e 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 0a 20 20 2e 6d 6f 62 69 6c 65 2d 68 69 64 64 65 6e 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 20 20 2e 64 65 73 6b 74 6f 70 2d 68 69 64 64 65 6e 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 7d 0a 0a 20 20 2e 6d 6f 62 69 6c 65 2d 68 69 Data Ascii: .is-sm { font-size: 17px;}@media screen and (min-width: 768px) { .desktop-hidden { display: none; } .mobile-hidden { display: block; }}@media screen and (max-width: 767px) { .desktop-hidden { display: block; } .mobile-hi
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 7d 0a 0a 20 20 2e 63 6f 6e 74 72 6f 6c 73 20 6c 61 62 65 6c 2c 0a 20 20 2e 63 6f 6e 74 72 6f 6c 73 20 6c 61 62 65 6c 2e 70 72 65 76 2c 0a 20 20 2e 63 6f 6e 74 72 6f 6c 73 20 6c 61 62 65 6c 2e 6e 65 78 74 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 39 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 39 70 78 3b 0a 20 20 7d 0a 0a 20 20 2e 63 6f 6e 74 72 6f 6c 73 20 6c 61 62 65 6c 2e 70 72 65 76 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 31 25 3b 0a 20 20 7d 0a 0a 20 20 2e 63 6f 6e 74 72 6f 6c 73 20 6c 61 62 65 6c 2e 6e 65 78 Data Ascii: text-align: center; display: block; white-space: nowrap; } .controls label, .controls label.prev, .controls label.next { width: 29px; height: 29px; } .controls label.prev { margin: 0 0 0 1%; } .controls label.nex
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 3b 0a 7d 0a 0a 2e 61 6d 61 7a 6f 6e 2d 63 6f 6c 6f 72 2e 61 63 74 69 76 65 20 2e 73 65 6c 65 63 74 6f 72 2d 63 6f 6e 74 65 6e 74 2c 0a 2e 61 6d 61 7a 6f 6e 2d 73 69 7a 65 2e 61 63 74 69 76 65 20 2e 73 65 6c 65 63 74 6f 72 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 7d 0a 0a 2e 61 6d 61 7a 6f 6e 2d 73 69 7a 65 20 2e 69 6e 2d 73 74 6f 63 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 30 61 37 32 31 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 7d 0a 0a 2e 61 6d 61 7a 6f 6e 2d 73 69 7a 65 20 2e 6c 69 6d 69 74 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 61 35 32 32 62 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 7d 0a 0a 2e 73 74 69 63 6b 79 2d 6e 61 76 2e 73 63 72 6f 6c 6c 65 64 20 Data Ascii: ;}.amazon-color.active .selector-content,.amazon-size.active .selector-content { color: #000;}.amazon-size .in-stock { color: #50a721; font-weight: 500;}.amazon-size .limited { color: #da522b; font-weight: 500;}.sticky-nav.scrolled
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 6d 69 6e 2d 68 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 6c 69 73 74 2d 69 74 65 6d 2d 6d 69 6e 2d 68 65 69 67 68 74 29 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 76 61 72 28 2d 2d 6c 69 73 74 2d 69 74 65 6d 2d 70 61 64 64 69 6e 67 2d 6c 65 66 74 29 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 76 61 72 28 2d 2d 6c 69 73 74 2d 69 74 65 6d 2d 70 61 64 64 69 6e 67 2d 72 69 67 68 74 29 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 3b 0a 7d 0a 0a 2e 64 72 6f 70 64 6f 77 6e 2d 73 65 6c 65 63 74 2e 6f 70 65 6e 20 Data Ascii: min-height: var(--list-item-min-height); outline: none; padding-left: var(--list-item-padding-left); padding-right: var(--list-item-padding-right); text-align: left; -webkit-transition: all 0.2s; transition: all 0.2s;}.dropdown-select.open
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 31 32 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 37 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 69 Data Ascii: -size: 12px; font-weight: 700; height: 35px; margin-bottom: 0; margin-top: 0; padding: 8px 12px; padding-left: 10px; padding-top: 7px; position: relative; text-align: left !important; text-transform: none; transition: all 0.2s ease-i
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 2d 73 6c 69 64 65 72 20 2e 73 6c 69 64 65 20 7b 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 23 63 6f 6c 6f 72 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 61 63 74 69 76 65 20 64 69 76 20 7b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 30 31 32 31 36 39 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 35 30 25 20 35 30 25 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 36 70 78 20 31 36 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 34 70 78 20 21 69 6d 70 6f 72 74 Data Ascii: -slider .slide { min-width: 100%;}#colors-container .active div { border-width: 1px; border-color: #012169; border-radius: 6px; background-position: 50% 50%; background-size: 16px 16px; background-repeat: no-repeat; padding: 4px !import
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 6c 65 66 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 20 20 2e 65 73 5f 63 6f 6d 6d 65 6e 74 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 7d 0a 20 20 23 65 73 5f 74 69 6d 65 72 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 20 20 23 65 73 5f 63 6f 75 6e 74 64 6f 77 6e 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 69 6e 69 74 69 61 6c 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 20 20 2e 65 73 Data Ascii: left !important; } .es_comment { text-align: left; } #es_timer { margin-left: 0 !important; } #es_countdown { display: flex; justify-content: space-between; width: initial; }}@media screen and (max-width: 767px) { .es
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 7d 0a 0a 2e 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 74 65 72 6d 6c 79 4d 65 73 73 61 67 65 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 42 72 61 6e 64 6f 6e 20 52 65 67 22 3b 0a 7d 0a 2e 74 65 72 6d 6c 79 42 75 74 74 6f 6e 43 6f 6e 74 61 69 6e Data Ascii: font-size: 17px !important; }}.hidden { display: none;}.termlyMessageContainer { display: flex; font-size: 14px; font-weight: 400; align-items: center; margin-bottom: 0 !important; font-family: "Brandon Reg";}.termlyButtonContain
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 0a 3a 72 6f 6f 74 20 7b 0a 20 20 2d 2d 70 69 6e 6b 2d 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 23 64 63 66 66 38 65 3b 0a 20 20 2d 2d 70 69 6e 6b 2d 63 6f 6c 6f 72 3a 20 23 64 61 35 32 32 62 3b 0a 20 20 2d 2d 70 69 6e 6b 2d 6c 69 67 68 74 2d 63 6f 6c 6f 72 32 3a 20 23 66 64 65 32 63 62 3b 0a 20 20 2d 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 64 63 66 66 38 65 3b 0a 20 20 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 62 61 6e 6e 65 72 3a 20 23 30 30 30 3b 0a 20 20 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 75 70 6f 6e 3a 20 23 66 66 66 3b 0a 20 20 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 2d 62 Data Ascii: :root { --pink-light-color: #dcff8e; --pink-color: #da522b; --pink-light-color2: #fde2cb; --primary-color: #dcff8e; --secondary-text-color: #fff; --secondary-background-banner: #000; --secondary-background-coupon: #fff; --secondary-text-b
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 51 63 4a 41 52 63 44 49 50 35 41 51 41 47 41 2f 6f 42 41 41 63 41 42 77 45 44 2b 67 50 36 41 51 41 41 42 41 4f 41 41 41 41 4c 67 41 34 41 41 42 51 41 41 45 77 45 58 43 51 45 48 34 41 48 41 51 50 36 41 41 59 42 41 41 63 41 42 77 45 44 2b 67 50 36 41 51 41 41 41 41 77 44 41 41 4f 41 44 51 41 4c 41 41 41 38 41 48 77 41 76 41 41 41 42 49 53 49 47 48 51 45 55 46 6a 4d 68 4d 6a 59 39 41 54 51 6d 42 79 45 69 42 68 30 42 46 42 59 7a 49 54 49 32 50 51 45 30 4a 67 63 68 49 67 59 64 41 52 51 57 4d 79 45 79 4e 6a 30 42 4e 43 59 44 49 50 33 41 44 52 4d 54 44 51 4a 41 44 52 4d 54 44 66 33 41 44 52 4d 54 44 51 4a 41 44 52 4d 54 44 66 33 41 44 52 4d 54 44 51 4a 41 44 52 4d 54 41 73 41 54 44 53 41 4e 45 78 4d 4e 49 41 30 54 77 42 4d 4e 49 41 30 54 45 77 30 67 44 52 50 41 Data Ascii: QcJARcDIP5AQAGA/oBAAcABwED+gP6AQAABAOAAAALgA4AABQAAEwEXCQEH4AHAQP6AAYBAAcABwED+gP6AQAAAAwDAAOADQALAAA8AHwAvAAABISIGHQEUFjMhMjY9ATQmByEiBh0BFBYzITI2PQE0JgchIgYdARQWMyEyNj0BNCYDIP3ADRMTDQJADRMTDf3ADRMTDQJADRMTDf3ADRMTDQJADRMTAsATDSANExMNIA0TwBMNIA0TEw0gDRPA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49909	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:59 UTC	666	OUT	GET /jquery-3.5.0.min.js HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:00 UTC	447	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: f45b87294a53b5bdbf56e2f9a284d16f server: Google Frontend Content-Length: 155955 via: 1.1 google date: Tue, 17 Dec 2024 17:19:59 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"26133-193cfe30d00" Content-Type: application/javascript; charset=UTF-8 Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:00 UTC	943	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 30 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 27 6f 62 6a 65 63 74 27 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 26 26 20 27 6f 62 6a 65 63 74 27 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 0a 20 20 20 20 3f 20 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 65 2e 64 6f 63 75 6d 65 6e 74 0a 20 20 20 20 20 20 20 20 3f 20 74 28 65 2c 20 21 30 29 0a 20 20 20 20 20 20 20 20 3a 20 66 75 6e 63 74 Data Ascii: /! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /!(function (e, t) { 'use strict'; 'object' == typeof module && 'object' == typeof module.exports ? (module.exports = e.document ? t(e, !0) : funct
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 70 65 3b 0a 20 20 20 20 7d 2c 0a 20 20 20 20 78 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 20 21 3d 20 65 20 26 26 20 65 20 3d 3d 3d 20 65 2e 77 69 6e 64 6f 77 3b 0a 20 20 20 20 7d 2c 0a 20 20 20 20 45 20 3d 20 43 2e 64 6f 63 75 6d 65 6e 74 2c 0a 20 20 20 20 63 20 3d 20 7b 20 74 79 70 65 3a 20 21 30 2c 20 73 72 63 3a 20 21 30 2c 20 6e 6f 6e 63 65 3a 20 21 30 2c 20 6e 6f 4d 6f 64 75 6c 65 3a 20 21 30 20 7d 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 20 74 2c 20 6e 29 20 7b 0a 20 20 20 20 76 61 72 20 72 2c 0a 20 20 20 20 20 20 69 2c 0a 20 20 20 20 20 20 6f 20 3d 20 28 6e 20 3d 20 6e 20 7c 7c 20 45 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0a 20 20 20 20 Data Ascii: pe; }, x = function (e) { return null != e && e === e.window; }, E = C.document, c = { type: !0, src: !0, nonce: !0, noModule: !0 }; function b(e, t, n) { var r, i, o = (n = n \|\| E).createElement('script');
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 65 2c 20 74 2c 20 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 73 6c 69 63 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 29 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 66 69 72 73 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 6c 61 73 74 3a 20 Data Ascii: unction (e, t) { return n.call(e, t, e); }), ); }, slice: function () { return this.pushStack(s.apply(this, arguments)); }, first: function () { return this.eq(0); }, last:
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 20 73 2b 2b 0a 20 20 20 20 20 20 20 20 29 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 75 6c 6c 20 21 3d 20 28 65 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 72 20 3d 20 65 5b 74 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 5f 5f 70 72 6f 74 6f 5f 5f 27 20 21 3d 3d 20 74 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 21 3d 3d 20 72 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6c 20 26 26 20 72 20 26 26 20 28 53 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 72 29 20 7c 7c 20 28 69 20 3d 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 29 0a 20 20 20 20 20 Data Ascii: s++ ) if (null != (e = arguments[s])) for (t in e) (r = e[t]), '__proto__' !== t && a !== r && (l && r && (S.isPlainObject(r) \|\| (i = Array.isArray(r)))
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 21 31 20 3d 3d 3d 20 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 20 72 2c 20 65 5b 72 5d 29 29 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 6d 61 6b 65 41 72 72 61 79 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 20 21 3d 20 65 20 26 26 20 28 70 28 4f 62 6a 65 63 74 28 65 29 29 20 3f 20 53 2e 6d 65 72 67 65 28 6e 2c 20 27 73 74 72 69 6e 67 27 20 3d 3d 20 74 79 70 65 6f 66 20 65 20 3f 20 5b 65 5d 20 3a 20 65 29 20 3a 20 75 2e 63 61 6c 6c 28 6e 2c 20 65 29 29 2c 20 6e 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 69 6e 41 72 72 61 79 3a 20 Data Ascii: !1 === t.call(e[r], r, e[r])) break; return e; }, makeArray: function (e, t) { var n = t \|\| []; return null != e && (p(Object(e)) ? S.merge(n, 'string' == typeof e ? [e] : e) : u.call(n, e)), n; }, inArray:
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 20 20 20 76 2c 0a 20 20 20 20 20 20 73 2c 0a 20 20 20 20 20 20 63 2c 0a 20 20 20 20 20 20 79 2c 0a 20 20 20 20 20 20 53 20 3d 20 27 73 69 7a 7a 6c 65 27 20 2b 20 31 20 2a 20 6e 65 77 20 44 61 74 65 28 29 2c 0a 20 20 20 20 20 20 70 20 3d 20 6e 2e 64 6f 63 75 6d 65 6e 74 2c 0a 20 20 20 20 20 20 6b 20 3d 20 30 2c 0a 20 20 20 20 20 20 72 20 3d 20 30 2c 0a 20 20 20 20 20 20 6d 20 3d 20 75 65 28 29 2c 0a 20 20 20 20 20 20 78 20 3d 20 75 65 28 29 2c 0a 20 20 20 20 20 20 41 20 3d 20 75 65 28 29 2c 0a 20 20 20 20 20 20 4e 20 3d 20 75 65 28 29 2c 0a 20 20 20 20 20 20 44 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 20 3d 3d 3d 20 74 20 26 26 20 28 6c 20 3d 20 21 30 29 2c 20 30 3b 0a 20 20 20 20 20 20 Data Ascii: v, s, c, y, S = 'sizzle' + 1 * new Date(), p = n.document, k = 0, r = 0, m = ue(), x = ue(), A = ue(), N = ue(), D = function (e, t) { return e === t && (l = !0), 0;
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 27 2a 28 5b 3e 2b 7e 5d 7c 27 20 2b 20 4d 20 2b 20 27 29 27 20 2b 20 4d 20 2b 20 27 2a 27 29 2c 0a 20 20 20 20 20 20 55 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 4d 20 2b 20 27 7c 3e 27 29 2c 0a 20 20 20 20 20 20 58 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 46 29 2c 0a 20 20 20 20 20 20 56 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 27 5e 27 20 2b 20 49 20 2b 20 27 24 27 29 2c 0a 20 20 20 20 20 20 47 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 49 44 3a 20 6e 65 77 20 52 65 67 45 78 70 28 27 5e 23 28 27 20 2b 20 49 20 2b 20 27 29 27 29 2c 0a 20 20 20 20 20 20 20 20 43 4c 41 53 53 3a 20 6e 65 77 20 52 65 67 45 78 70 28 27 5e 5c 5c 2e 28 27 20 2b 20 49 20 2b 20 27 29 27 29 2c 0a 20 20 20 20 20 20 20 20 54 41 47 3a 20 6e 65 77 20 52 65 67 45 78 70 28 27 5e 28 27 20 Data Ascii: '([>+~]\|' + M + ')' + M + ''), U = new RegExp(M + '\|>'), X = new RegExp(F), V = new RegExp('^' + I + '$'), G = { ID: new RegExp('^#(' + I + ')'), CLASS: new RegExp('^\\.(' + I + ')'), TAG: new RegExp('^('
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 6f 6d 43 68 61 72 43 6f 64 65 28 28 6e 20 3e 3e 20 31 30 29 20 7c 20 35 35 32 39 36 2c 20 28 31 30 32 33 20 26 20 6e 29 20 7c 20 35 36 33 32 30 29 29 0a 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 72 65 20 3d 20 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 0a 20 20 20 20 20 20 69 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 0a 20 20 20 20 20 20 20 20 20 20 3f 20 27 5c 30 27 20 3d 3d 3d 20 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 27 5c 75 66 66 66 64 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 3a 20 65 2e 73 6c 69 63 65 28 30 2c 20 2d Data Ascii: omCharCode((n >> 10) \| 55296, (1023 & n) \| 56320)) ); }, re = /([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g, ie = function (e, t) { return t ? '\0' === e ? '\ufffd' : e.slice(0, -
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 69 66 20 28 39 20 3d 3d 3d 20 70 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 28 61 20 3d 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 29 20 72 65 74 75 72 6e 20 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 2e 69 64 20 3d 3d 3d 20 69 29 20 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 61 29 2c 20 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 66 20 26 26 20 28 61 20 3d 20 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 20 26 26 20 79 28 65 2c 20 61 29 20 26 26 20 61 2e 69 64 20 3d 3d 3d 20 69 29 20 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 61 29 2c 20 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 Data Ascii: if (9 === p) { if (!(a = e.getElementById(i))) return n; if (a.id === i) return n.push(a), n; } else if (f && (a = f.getElementById(i)) && y(e, a) && a.id === i) return n.push(a), n; } else {
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 20 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 20 28 65 5b 74 20 2b 20 27 20 27 5d 20 3d 20 6e 29 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 7d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 65 5b 53 5d 20 3d 20 21 30 29 2c 20 65 3b 0a 20 20 20 20 7d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 66 69 65 6c 64 73 65 74 27 29 3b 0a 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 65 28 74 29 3b 0a 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 31 3b 0a 20 20 20 20 20 20 Data Ascii: delete e[r.shift()], (e[t + ' '] = n); }; } function le(e) { return (e[S] = !0), e; } function ce(e) { var t = C.createElement('fieldset'); try { return !!e(t); } catch (e) { return !1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49910	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:59 UTC	667	OUT	GET /CheckoutSDK.js?v=v15 HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:00 UTC	445	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 9bf3e55acbaf37c9c49bbdd6ba6f669f server: Google Frontend Content-Length: 20032 via: 1.1 google date: Tue, 17 Dec 2024 17:19:59 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"4e40-193cfe30d00" Content-Type: application/javascript; charset=UTF-8 Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:00 UTC	945	IN	Data Raw: 63 6c 61 73 73 20 50 72 6f 6a 65 63 74 45 43 68 65 63 6b 6f 75 74 20 65 78 74 65 6e 64 73 20 45 76 65 6e 74 54 61 72 67 65 74 20 7b 0a 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 20 7b 0a 20 20 20 20 73 75 70 65 72 28 29 3b 0a 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 43 68 65 63 6b 6f 75 74 20 53 44 4b 20 69 6e 69 74 69 61 6c 69 7a 65 64 27 29 3b 0a 0a 20 20 20 20 74 68 69 73 2e 41 50 49 5f 55 52 4c 20 3d 20 27 2f 61 70 69 27 3b 0a 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 20 3d 20 7b 0a 20 20 20 20 20 20 73 68 69 70 70 69 6e 67 43 6f 73 74 3a 20 31 31 2e 39 35 2c 0a 20 20 20 20 20 20 61 6d 6f 75 6e 74 3a 20 7b 0a 20 20 20 20 20 20 20 20 69 74 65 6d 73 3a 20 30 2c 0a 20 20 20 20 20 20 20 20 73 68 69 70 70 69 6e 67 3a 20 30 2c 0a 20 20 20 20 Data Ascii: class ProjectECheckout extends EventTarget { constructor() { super(); console.log('Checkout SDK initialized'); this.API_URL = '/api'; this.state = { shippingCost: 11.95, amount: { items: 0, shipping: 0,
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 20 28 70 29 20 3d 3e 20 70 2e 69 64 20 3d 3d 3d 20 6c 69 6e 65 49 74 65 6d 2e 63 61 6d 70 61 69 67 6e 50 61 63 6b 61 67 65 49 64 0a 20 20 20 20 20 20 20 20 20 20 29 2e 70 72 69 63 65 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 73 75 6d 20 2b 20 70 72 69 63 65 3b 0a 20 20 20 20 20 20 20 20 7d 2c 20 30 29 0a 20 20 20 20 20 20 29 2e 74 6f 46 69 78 65 64 28 32 29 0a 20 20 20 20 29 3b 0a 0a 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 2e 61 6d 6f 75 6e 74 2e 74 6f 74 61 6c 20 3d 20 4e 75 6d 62 65 72 28 0a 20 20 20 20 20 20 4e 75 6d 62 65 72 28 0a 20 20 20 20 20 20 20 20 4e 75 6d 62 65 72 28 74 68 69 73 2e 73 74 61 74 65 2e 61 6d 6f 75 6e 74 2e 73 68 69 70 70 69 6e 67 29 20 2b 20 4e 75 6d 62 65 72 28 74 68 69 73 2e 73 74 61 74 65 2e 61 6d 6f 75 6e 74 Data Ascii: (p) => p.id === lineItem.campaignPackageId ).price; return sum + price; }, 0) ).toFixed(2) ); this.state.amount.total = Number( Number( Number(this.state.amount.shipping) + Number(this.state.amount
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 72 65 73 73 5f 6c 69 6e 65 5f 31 2c 0a 20 20 20 20 20 20 20 20 61 64 64 72 65 73 73 32 3a 20 61 64 64 72 65 73 73 5f 6c 69 6e 65 5f 32 2c 0a 20 20 20 20 20 20 20 20 63 69 74 79 3a 20 61 64 6d 69 6e 5f 61 72 65 61 5f 32 2c 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 72 79 3a 20 63 6f 75 6e 74 72 79 5f 63 6f 64 65 2c 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 3a 20 61 64 6d 69 6e 5f 61 72 65 61 5f 31 20 3f 20 61 64 6d 69 6e 5f 61 72 65 61 5f 31 20 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 7a 69 70 63 6f 64 65 3a 20 70 6f 73 74 61 6c 5f 63 6f 64 65 2c 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 63 6f 6e 73 74 20 66 69 6c 6c 49 6e 70 75 74 20 3d 20 28 6e 61 6d 65 2c 20 76 61 6c 75 65 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 6c 65 74 20 Data Ascii: ress_line_1, address2: address_line_2, city: admin_area_2, country: country_code, state: admin_area_1 ? admin_area_1 : null, zipcode: postal_code, }, }; const fillInput = (name, value) => { let
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 73 63 72 6f 6c 6c 54 6f 70 3a 20 24 28 76 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 6c 74 73 5b 30 5d 2e 69 6e 70 75 74 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 7d 2c 0a 20 20 20 20 20 20 20 20 35 30 30 0a 20 20 20 20 20 20 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 24 28 27 23 61 64 64 72 65 73 73 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 0a 20 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 50 72 6f 63 65 73 73 4f 72 64 65 72 45 76 65 6e 74 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 45 76 65 6e 74 28 27 50 72 6f 63 65 73 73 69 6e 67 27 29 29 3b 0a 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 61 77 61 69 74 20 6e 65 77 20 50 Data Ascii: scrollTop: $(validationResults[0].input).offset().top }, 500 ); } else { $('#address-form').submit(); } } async handleProcessOrderEvent(event) { this.dispatchEvent(new Event('Processing')); try { await new P
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 73 75 62 6d 69 74 0a 20 20 20 20 20 20 20 20 20 20 61 77 61 69 74 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 72 65 73 6f 6c 76 65 29 20 3d 3e 20 73 65 74 54 69 6d 65 6f 75 74 28 72 65 73 6f 6c 76 65 2c 20 35 30 30 29 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 73 74 61 74 65 2e 69 73 50 72 6f 63 65 73 73 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 2e 69 73 50 72 6f 63 65 73 73 69 6e 67 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 65 73 70 6f 6e 73 65 20 3d 20 61 77 61 69 74 20 74 68 69 73 2e 73 65 6e 64 4c 65 61 64 28 66 6f 72 6d 44 61 74 61 2c 20 6d 65 74 61 2c Data Ascii: submit await new Promise((resolve) => setTimeout(resolve, 500)); if (this.state.isProcessing) { return; } this.state.isProcessing = true; const response = await this.sendLead(formData, meta,
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 46 2e 75 72 6c 50 61 72 61 6d 65 74 65 72 28 27 70 75 62 5f 69 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 45 46 2e 75 72 6c 50 61 72 61 6d 65 74 65 72 28 27 61 66 66 69 64 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 72 66 6c 6f 77 49 6e 70 75 74 2e 61 69 64 20 3d 20 45 46 2e 75 72 6c 50 61 72 61 6d 65 74 65 72 28 27 61 66 66 69 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 77 61 69 74 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 72 65 73 6f 6c 76 65 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 70 69 78 65 6c 49 66 72 61 6d 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 Data Ascii: F.urlParameter('pub_id'); } if (EF.urlParameter('affid')) { everflowInput.aid = EF.urlParameter('affid'); } await new Promise((resolve) => { const pixelIframe = document.createE
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 27 2c 20 73 75 62 6d 69 74 4f 72 64 65 72 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 61 77 61 69 74 20 73 75 62 6d 69 74 4f 72 64 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 0a 20 20 20 20 20 20 20 20 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 27 45 72 72 6f 72 27 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 64 65 74 61 69 6c 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 4d 65 73 73 61 67 65 3a 20 65 72 72 6f 72 2e 6d 65 73 73 61 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 73 41 64 64 72 65 73 73 56 65 72 69 66 Data Ascii: ', submitOrder); } else { await submitOrder(); } }); } catch (error) { this.dispatchEvent( new CustomEvent('Error', { detail: { errorMessage: error.message, isAddressVerif
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 20 7d 0a 0a 20 20 61 73 79 6e 63 20 63 61 6c 63 75 6c 61 74 65 53 68 69 70 69 6e 67 43 6f 73 74 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 75 72 6c 50 61 72 61 6d 73 20 3d 20 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 0a 20 20 20 20 69 66 20 28 0a 20 20 20 20 20 20 75 72 6c 50 61 72 61 6d 73 2e 67 65 74 28 27 73 68 69 70 70 69 6e 67 27 29 20 3d 3d 3d 20 27 66 72 65 65 27 20 7c 7c 0a 20 20 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 2e 6c 69 6e 65 49 74 65 6d 73 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 30 0a 20 20 20 20 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 30 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 66 65 74 63 68 28 60 24 7b 74 68 69 73 Data Ascii: } async calculateShipingCost() { const urlParams = new URLSearchParams(window.location.search); if ( urlParams.get('shipping') === 'free' \|\| this.state.lineItems.length === 0 ) { return 0; } return fetch(`${this
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 65 6e 67 74 68 20 3d 3d 3d 20 30 29 20 72 65 74 75 72 6e 20 30 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 75 70 73 65 6c 6c 73 2e 72 65 64 75 63 65 28 28 61 2c 20 62 29 20 3d 3e 20 61 20 2b 20 62 2e 71 75 61 6e 74 69 74 79 2c 20 30 29 3b 0a 20 20 7d 0a 0a 20 20 72 65 6d 6f 76 65 55 70 73 65 6c 6c 46 72 6f 6d 43 61 72 74 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 2e 6c 69 6e 65 49 74 65 6d 73 20 3d 20 74 68 69 73 2e 73 74 61 74 65 2e 6c 69 6e 65 49 74 65 6d 73 2e 66 69 6c 74 65 72 28 0a 20 20 20 20 20 20 28 6c 69 6e 65 49 74 65 6d 29 20 3d 3e 20 6c 69 6e 65 49 74 65 6d 2e 69 73 55 70 73 65 6c 6c 20 3d 3d 3d 20 66 61 6c 73 65 0a 20 20 20 20 29 3b 0a 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 63 61 72 74 27 2c 20 74 68 69 73 2e 73 74 61 Data Ascii: ength === 0) return 0; return upsells.reduce((a, b) => a + b.quantity, 0); } removeUpsellFromCart() { this.state.lineItems = this.state.lineItems.filter( (lineItem) => lineItem.isUpsell === false ); console.log('cart', this.sta
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 6f 70 74 69 6e 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 49 6e 73 69 64 65 72 2e 65 76 65 6e 74 4d 61 6e 61 67 65 72 2e 64 69 73 70 61 74 63 68 28 27 69 6e 69 74 2d 6d 61 6e 61 67 65 72 3a 72 65 2d 69 6e 69 74 69 61 6c 69 7a 65 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 2e 69 6e 73 69 64 65 72 53 65 6e 74 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 49 6e 73 69 64 65 72 20 6f 62 6a 65 63 74 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 27 2c 20 65 72 72 29 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 2e 69 6e 73 69 64 65 Data Ascii: optin: true, }, }; Insider.eventManager.dispatch('init-manager:re-initialize'); this.state.insiderSent = true; } } catch (err) { console.log('Insider object is not defined', err); this.state.inside

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49915	35.244.193.194	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:19:59 UTC	664	OUT	GET /scripts/sdk/everflow.js HTTP/1.1 Host: www.trk2dkt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://get-luxsheets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uniqueClick_H7JJ78=f5b0a4f9-8882-45ae-9470-ec26f5243d0a:1734455995; transaction_id=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:00 UTC	380	IN	HTTP/1.1 200 OK server: nginx date: Tue, 17 Dec 2024 17:19:59 GMT content-type: text/javascript accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model cache-control: max-age=14400 vary: Origin x-eflow-request-id: c2c39cdf-f0c5-4fce-ba76-b3b67468b906 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-12-17 17:20:00 UTC	1010	IN	Data Raw: 33 35 63 33 0d 0a 76 61 72 20 45 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 Data Ascii: 35c3var EF=function(){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function r(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writa
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 3e 31 36 2c 36 35 35 33 35 26 65 5b 31 5d 5d 2c 74 3d 5b 74 5b 30 5d 3e 3e 3e 31 36 2c 36 35 35 33 35 26 74 5b 30 5d 2c 74 5b 31 5d 3e 3e 3e 31 36 2c 36 35 35 33 35 26 74 5b 31 5d 5d 3b 76 61 72 20 6e 3d 5b 30 2c 30 2c 30 2c 30 5d 3b 72 65 74 75 72 6e 20 6e 5b 33 5d 2b 3d 65 5b 33 5d 2b 74 5b 33 5d 2c 6e 5b 32 5d 2b 3d 6e 5b 33 5d 3e 3e 3e 31 36 2c 6e 5b 33 5d 26 3d 36 35 35 33 35 2c 6e 5b 32 5d 2b 3d 65 5b 32 5d 2b 74 5b 32 5d 2c 6e 5b 31 5d 2b 3d 6e 5b 32 5d 3e 3e 3e 31 36 2c 6e 5b 32 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 31 5d 2b 74 5b 31 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 30 5d 2b 3d 65 5b 30 5d 2b 74 5b 30 5d 2c 6e 5b 30 5d 26 3d 36 35 35 33 35 2c 5b 6e 5b 30 5d 3c 3c 31 36 7c Data Ascii: >16,65535&e[1]],t=[t[0]>>>16,65535&t[0],t[1]>>>16,65535&t[1]];var n=[0,0,0,0];return n[3]+=e[3]+t[3],n[2]+=n[3]>>>16,n[3]&=65535,n[2]+=e[2]+t[2],n[1]+=n[2]>>>16,n[2]&=65535,n[1]+=e[1]+t[1],n[0]+=n[1]>>>16,n[1]&=65535,n[0]+=e[0]+t[0],n[0]&=65535,[n[0]<<16\|
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 36 29 29 3c 3c 31 36 7c 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 37 29 29 3c 3c 32 34 2c 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 29 7c 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 31 29 29 3c 3c 38 7c 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 32 29 29 3c 3c 31 36 7c 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 33 29 29 3c 3c 32 34 5d 2c 73 3d 5b 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 31 32 29 7c 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 31 33 29 29 3c 3c 38 7c 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 31 34 29 29 3c 3c 31 36 7c 28 32 35 35 26 65 2e 63 68 61 72 43 Data Ascii: (255&e.charCodeAt(d+6))<<16\|(255&e.charCodeAt(d+7))<<24,255&e.charCodeAt(d)\|(255&e.charCodeAt(d+1))<<8\|(255&e.charCodeAt(d+2))<<16\|(255&e.charCodeAt(d+3))<<24],s=[255&e.charCodeAt(d+12)\|(255&e.charCodeAt(d+13))<<8\|(255&e.charCodeAt(d+14))<<16\|(255&e.charC
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 30 5d 3e 3e 3e 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 38 29 2b 28 22 30 30 30 30 30 30 30 30 22 2b 28 69 5b 31 5d 3e 3e 3e 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 38 29 2b 28 22 30 30 30 30 30 30 30 30 22 2b 28 61 5b 30 5d 3e 3e 3e 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 38 29 2b 28 22 30 30 30 30 30 30 30 30 22 2b 28 61 5b 31 5d 3e 3e 3e 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 38 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 26 26 65 2e 66 6f 72 45 61 63 68 3d 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 29 65 2e Data Ascii: 0]>>>0).toString(16)).slice(-8)+("00000000"+(i[1]>>>0).toString(16)).slice(-8)+("00000000"+(a[0]>>>0).toString(16)).slice(-8)+("00000000"+(a[1]>>>0).toString(16)).slice(-8)}function u(e,t){if(Array.prototype.forEach&&e.forEach===Array.prototype.forEach)e.
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 48 65 69 67 68 74 2c 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 57 69 64 74 68 5d 3b 72 65 74 75 72 6e 20 65 2e 73 63 72 65 65 6e 2e 64 65 74 65 63 74 53 63 72 65 65 6e 4f 72 69 65 6e 74 61 74 69 6f 6e 26 26 74 2e 73 6f 72 74 28 29 2e 72 65 76 65 72 73 65 28 29 2c 74 7d 72 65 74 75 72 6e 20 65 2e 4e 4f 54 5f 41 56 41 49 4c 41 42 4c 45 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 29 72 65 74 75 72 6e 20 65 2e 4e 4f 54 5f 41 56 41 49 4c 41 42 4c 45 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 2c 72 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 6e 61 76 69 Data Ascii: dow.screen.availHeight,window.screen.availWidth];return e.screen.detectScreenOrientation&&t.sort().reverse(),t}return e.NOT_AVAILABLE},o=function(e){if(null==navigator.plugins)return e.NOT_AVAILABLE;for(var t=[],n=0,r=navigator.plugins.length;n<r;n++)navi
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 6c 75 67 69 6e 73 46 6f 72 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 2e 70 6c 75 67 69 6e 73 2e 73 6f 72 74 50 6c 75 67 69 6e 73 46 6f 72 5b 6e 5d 3b 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 69 29 29 7b 74 3d 21 30 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 74 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 45 52 52 4f 52 7d 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 45 52 Data Ascii: luginsFor.length;n<r;n++){var i=e.plugins.sortPluginsFor[n];if(navigator.userAgent.match(i)){t=!0;break}}return t},y=function(t){try{return!!window.sessionStorage}catch(e){return t.ERROR}},v=function(t){try{return!!window.localStorage}catch(e){return t.ER
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 69 6c 6c 54 65 78 74 28 22 43 77 6d 20 66 6a 6f 72 64 62 61 6e 6b 20 67 6c 79 70 68 73 20 76 65 78 74 20 71 75 69 7a 2c 20 f0 9f 98 83 22 2c 32 2c 31 35 29 2c 72 2e 66 69 6c 6c 53 74 79 6c 65 3d 22 72 67 62 61 28 31 30 32 2c 20 32 30 34 2c 20 30 2c 20 30 2e 32 29 22 2c 72 2e 66 6f 6e 74 3d 22 31 38 70 74 20 41 72 69 61 6c 22 2c 72 2e 66 69 6c 6c 54 65 78 74 28 22 43 77 6d 20 66 6a 6f 72 64 62 61 6e 6b 20 67 6c 79 70 68 73 20 76 65 78 74 20 71 75 69 7a 2c 20 f0 9f 98 83 22 2c 34 2c 34 35 29 2c 72 2e 67 6c 6f 62 61 6c 43 6f 6d 70 6f 73 69 74 65 4f 70 65 72 61 74 69 6f 6e 3d 22 6d 75 6c 74 69 70 6c 79 22 2c 72 2e 66 69 6c 6c 53 74 79 6c 65 3d 22 72 67 62 28 32 35 35 2c 30 2c 32 35 35 29 22 2c 72 2e 62 65 67 69 6e 50 61 74 68 28 29 2c 72 2e 61 72 63 28 35 30 Data Ascii: illText("Cwm fjordbank glyphs vext quiz, ",2,15),r.fillStyle="rgba(102, 204, 0, 0.2)",r.font="18pt Arial",r.fillText("Cwm fjordbank glyphs vext quiz, ",4,45),r.globalCompositeOperation="multiply",r.fillStyle="rgb(255,0,255)",r.beginPath(),r.arc(50
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 6e 20 6d 65 64 69 75 6d 70 20 66 6c 6f 61 74 3b 76 61 72 79 69 6e 67 20 76 65 63 32 20 76 61 72 79 69 6e 54 65 78 43 6f 6f 72 64 69 6e 61 74 65 3b 76 6f 69 64 20 6d 61 69 6e 28 29 20 7b 67 6c 5f 46 72 61 67 43 6f 6c 6f 72 3d 76 65 63 34 28 76 61 72 79 69 6e 54 65 78 43 6f 6f 72 64 69 6e 61 74 65 2c 30 2c 31 29 3b 7d 22 29 2c 6f 2e 63 6f 6d 70 69 6c 65 53 68 61 64 65 72 28 61 29 2c 6f 2e 61 74 74 61 63 68 53 68 61 64 65 72 28 72 2c 69 29 2c 6f 2e 61 74 74 61 63 68 53 68 61 64 65 72 28 72 2c 61 29 2c 6f 2e 6c 69 6e 6b 50 72 6f 67 72 61 6d 28 72 29 2c 6f 2e 75 73 65 50 72 6f 67 72 61 6d 28 72 29 2c 72 2e 76 65 72 74 65 78 50 6f 73 41 74 74 72 69 62 3d 6f 2e 67 65 74 41 74 74 72 69 62 4c 6f 63 61 74 69 6f 6e 28 72 2c 22 61 74 74 72 56 65 72 74 65 78 22 29 2c Data Ascii: n mediump float;varying vec2 varyinTexCoordinate;void main() {gl_FragColor=vec4(varyinTexCoordinate,0,1);}"),o.compileShader(a),o.attachShader(r,i),o.attachShader(r,a),o.linkProgram(r),o.useProgram(r),r.vertexPosAttrib=o.getAttribLocation(r,"attrVertex"),
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 7d 28 6f 29 29 2c 73 2e 70 75 73 68 28 22 77 65 62 67 6c 20 6d 61 78 20 63 6f 6d 62 69 6e 65 64 20 74 65 78 74 75 72 65 20 69 6d 61 67 65 20 75 6e 69 74 73 3a 22 2b 6f 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 6f 2e 4d 41 58 5f 43 4f 4d 42 49 4e 45 44 5f 54 45 58 54 55 52 45 5f 49 4d 41 47 45 5f 55 4e 49 54 53 29 29 2c 73 2e 70 75 73 68 28 22 77 65 62 67 6c 20 6d 61 78 20 63 75 62 65 20 6d 61 70 20 74 65 78 74 75 72 65 20 73 69 7a 65 3a 22 2b 6f 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 6f 2e 4d 41 58 5f 43 55 42 45 5f 4d 41 50 5f 54 45 58 54 55 52 45 5f 53 49 5a 45 29 29 2c 73 2e 70 75 73 68 28 22 77 65 62 67 6c 20 6d 61 78 20 66 72 61 67 6d 65 6e 74 20 75 6e 69 66 6f 72 6d 20 76 65 63 74 6f 72 73 3a 22 2b 6f 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 6f Data Ascii: }(o)),s.push("webgl max combined texture image units:"+o.getParameter(o.MAX_COMBINED_TEXTURE_IMAGE_UNITS)),s.push("webgl max cube map texture size:"+o.getParameter(o.MAX_CUBE_MAP_TEXTURE_SIZE)),s.push("webgl max fragment uniform vectors:"+o.getParameter(o
2024-12-17 17:20:00 UTC	1390	IN	Data Raw: 53 4b 45 44 5f 56 45 4e 44 4f 52 5f 57 45 42 47 4c 29 29 2c 73 2e 70 75 73 68 28 22 77 65 62 67 6c 20 75 6e 6d 61 73 6b 65 64 20 72 65 6e 64 65 72 65 72 3a 22 2b 6f 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 63 2e 55 4e 4d 41 53 4b 45 44 5f 52 45 4e 44 45 52 45 52 5f 57 45 42 47 4c 29 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6f 2e 67 65 74 53 68 61 64 65 72 50 72 65 63 69 73 69 6f 6e 46 6f 72 6d 61 74 26 26 75 28 5b 22 46 4c 4f 41 54 22 2c 22 49 4e 54 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 75 28 5b 22 56 45 52 54 45 58 22 2c 22 46 52 41 47 4d 45 4e 54 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 75 28 5b 22 48 49 47 48 22 2c 22 4d 45 44 49 55 4d 22 2c 22 4c 4f 57 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 75 28 5b 22 70 72 65 63 Data Ascii: SKED_VENDOR_WEBGL)),s.push("webgl unmasked renderer:"+o.getParameter(c.UNMASKED_RENDERER_WEBGL)))}catch(e){}return o.getShaderPrecisionFormat&&u(["FLOAT","INT"],function(a){u(["VERTEX","FRAGMENT"],function(i){u(["HIGH","MEDIUM","LOW"],function(r){u(["prec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49913	151.101.194.217	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:00 UTC	575	OUT	GET /7.23.0/bundle.min.js HTTP/1.1 Host: browser.sentry-cdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://get-luxsheets.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://get-luxsheets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:00 UTC	448	IN	HTTP/1.1 200 OK Connection: close Content-Length: 56154 Expires: Wed, 05 Nov 2025 11:17:09 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 01 Dec 2022 16:53:49 GMT Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Age: 637226 Date: Tue, 17 Dec 2024 17:20:00 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: * Server: Fastly Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 2f 2a 21 20 40 73 65 6e 74 72 79 2f 62 72 6f 77 73 65 72 20 37 2e 32 33 2e 30 20 28 30 33 65 36 61 32 61 29 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 73 65 6e 74 72 79 2d 6a 61 76 61 73 63 72 69 70 74 20 2a 2f 0a 76 61 72 20 53 65 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 73 77 69 74 63 68 28 6e 2e 63 61 6c 6c 28 74 29 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 78 63 65 70 74 69 6f 6e 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e 5d 22 3a 72 65 74 Data Ascii: /! @sentry/browser 7.23.0 (03e6a2a) \| https://github.com/getsentry/sentry-javascript /var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":ret
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 5b 5d 3b 6c 65 74 20 69 2c 73 2c 63 2c 75 2c 61 3b 69 66 28 21 65 7c 7c 21 65 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 22 22 3b 72 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 63 6f 6e 73 74 20 66 3d 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 6e 2e 66 69 6c 74 65 72 28 28 74 3d 3e 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 29 29 2e 6d 61 70 28 28 74 3d 3e 5b 74 2c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 5d 29 29 3a 6e 75 6c 6c 3b 69 66 28 66 26 26 66 2e 6c 65 6e 67 74 68 29 66 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 72 2e 70 75 73 68 28 60 5b 24 7b 74 5b 30 5d 7d 3d 22 24 7b 74 5b 31 5d 7d 22 5d 60 29 7d 29 29 3b 65 6c 73 65 20 69 66 28 65 2e 69 64 26 26 72 2e 70 75 73 68 28 60 23 24 7b 65 Data Ascii: [];let i,s,c,u,a;if(!e\|\|!e.tagName)return"";r.push(e.tagName.toLowerCase());const f=n&&n.length?n.filter((t=>e.getAttribute(t))).map((t=>[t,e.getAttribute(t)])):null;if(f&&f.length)f.forEach((t=>{r.push(`[${t[0]}="${t[1]}"]`)}));else if(e.id&&r.push(`#${e
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 70 72 6f 74 6f 63 6f 6c 3a 65 2c 70 75 62 6c 69 63 4b 65 79 3a 72 7d 29 7d 28 74 29 3a 45 28 74 29 7d 63 6f 6e 73 74 20 24 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 2c 22 61 73 73 65 72 74 22 2c 22 74 72 61 63 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 78 28 74 2c 6e 3d 30 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 30 3d 3d 3d 6e 7c 7c 74 2e 6c 65 6e 67 74 68 3c 3d 6e 3f 74 3a 60 24 7b 74 2e 73 75 62 73 74 72 28 30 2c 6e 29 7d 2e 2e 2e 60 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 2c 6e 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c Data Ascii: protocol:e,publicKey:r})}(t):E(t)}const $=["debug","info","warn","error","log","assert","trace"];function x(t,n=0){return"string"!=typeof t\|\|0===n\|\|t.length<=n?t:`${t.substr(0,n)}...`}function j(t,n){if(!Array.isArray(t))return"";const e=[];for(let n=0;n<
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 6e 3d 34 30 29 7b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 43 28 74 29 29 3b 69 66 28 65 2e 73 6f 72 74 28 29 2c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 68 61 73 20 6e 6f 20 6b 65 79 73 5d 22 3b 69 66 28 65 5b 30 5d 2e 6c 65 6e 67 74 68 3e 3d 6e 29 72 65 74 75 72 6e 20 78 28 65 5b 30 5d 2c 6e 29 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 3b 74 3e 30 3b 74 2d 2d 29 7b 63 6f 6e 73 74 20 72 3d 65 2e 73 6c 69 63 65 28 30 2c 74 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 3b 69 66 28 21 28 72 2e 6c 65 6e 67 74 68 3e 6e 29 29 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 72 3a 78 28 72 2c 6e Data Ascii: );return n}return{}}function N(t,n=40){const e=Object.keys(C(t));if(e.sort(),!e.length)return"[object has no keys]";if(e[0].length>=n)return x(e[0],n);for(let t=e.length;t>0;t--){const r=e.slice(0,t).join(", ");if(!(r.length>n))return t===e.length?r:x(r,n
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 69 6f 6e 20 46 28 29 7b 69 66 28 21 28 22 66 65 74 63 68 22 69 6e 20 42 29 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 48 65 61 64 65 72 73 2c 6e 65 77 20 52 65 71 75 65 73 74 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 29 2c 6e 65 77 20 52 65 73 70 6f 6e 73 65 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 2f 5e 66 75 6e 63 74 69 6f 6e 20 66 65 74 63 68 5c 28 5c 29 5c 73 2b 5c 7b 5c 73 2b 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 5c 73 2b 5c 7d 24 2f 2e 74 65 73 74 28 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 6f 6e 73 74 20 7a 3d 70 28 29 2c 57 3d 7b 7d 2c 4a 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e Data Ascii: ion F(){if(!("fetch"in B))return!1;try{return new Headers,new Request("http://www.example.com"),new Response,!0}catch(t){return!1}}function X(t){return t&&/^function fetch\s+\{\s+\[native code\]\s+\}$/.test(t.toString())}const z=p(),W={},J={};function
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 69 29 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 2e 5f 5f 73 65 6e 74 72 79 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 5f 68 61 6e 64 6c 65 72 73 5f 5f 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 65 2c 72 29 7d 7d 29 29 29 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 78 68 72 22 3a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 69 6e 20 7a 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 70 72 6f 74 6f 74 79 70 65 3b 54 28 74 2c 22 6f 70 65 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e Data Ascii: =Object.keys(i).length&&delete e.__sentry_instrumentation_handlers__)}catch(t){}return t.call(this,n,e,r)}})))}))}();break;case"xhr":!function(){if(!("XMLHttpRequest"in z))return;const t=XMLHttpRequest.prototype;T(t,"open",(function(t){return function(...
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 28 2e 2e 2e 6e 29 7b 63 6f 6e 73 74 20 65 3d 7b 61 72 67 73 3a 6e 2c 66 65 74 63 68 44 61 74 61 3a 7b 6d 65 74 68 6f 64 3a 59 28 6e 29 2c 75 72 6c 3a 51 28 6e 29 7d 2c 73 74 61 72 74 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 3b 72 65 74 75 72 6e 20 56 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 7d 29 2c 74 2e 61 70 70 6c 79 28 7a 2c 6e 29 2e 74 68 65 6e 28 28 74 3d 3e 28 56 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 72 65 73 70 6f 6e 73 65 3a 74 7d 29 2c 74 29 29 2c 28 74 3d 3e 7b 74 68 72 6f 77 20 56 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 65 72 72 6f 72 3a 74 7d 29 2c 74 7d 29 29 7d 7d Data Ascii: (...n){const e={args:n,fetchData:{method:Y(n),url:Q(n)},startTimestamp:Date.now()};return V("fetch",{...e}),t.apply(z,n).then((t=>(V("fetch",{...e,endTimestamp:Date.now(),response:t}),t)),(t=>{throw V("fetch",{...e,endTimestamp:Date.now(),error:t}),t}))}}
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 74 68 6f 64 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 22 47 45 54 22 7d 66 75 6e 63 74 69 6f 6e 20 51 28 74 3d 5b 5d 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 5b 30 5d 3f 74 5b 30 5d 3a 22 52 65 71 75 65 73 74 22 69 6e 20 7a 26 26 68 28 74 5b 30 5d 2c 52 65 71 75 65 73 74 29 3f 74 5b 30 5d 2e 75 72 6c 3a 53 74 72 69 6e 67 28 74 5b 30 5d 29 7d 6c 65 74 20 5a 3b 6c 65 74 20 74 74 2c 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 2c 6e 3d 21 31 29 7b 72 65 74 75 72 6e 20 65 3d 3e 7b 69 66 28 21 65 7c 7c 6e 74 3d 3d 3d 65 29 72 65 74 75 72 6e 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 6b 65 79 70 72 65 73 73 22 21 3d 3d 74 2e 74 79 70 65 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 63 6f 6e 73 74 20 6e Data Ascii: thod).toUpperCase():"GET"}function Q(t=[]){return"string"==typeof t[0]?t[0]:"Request"in z&&h(t[0],Request)?t[0].url:String(t[0])}let Z;let tt,nt;function et(t,n=!1){return e=>{if(!e\|\|nt===e)return;if(function(t){if("keypress"!==t.type)return!1;try{const n
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 61 74 28 74 2c 6e 29 7b 63 6f 6e 73 74 20 65 3d 6f 74 28 74 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6d 65 63 68 61 6e 69 73 6d 3b 69 66 28 65 2e 6d 65 63 68 61 6e 69 73 6d 3d 7b 74 79 70 65 3a 22 67 65 6e 65 72 69 63 22 2c 68 61 6e 64 6c 65 64 3a 21 30 2c 2e 2e 2e 72 2c 2e 2e 2e 6e 7d 2c 6e 26 26 22 64 61 74 61 22 69 6e 20 6e 29 7b 63 6f 6e 73 74 20 74 3d 7b 2e 2e 2e 72 26 26 72 2e 64 61 74 61 2c 2e 2e 2e 6e 2e 64 61 74 61 7d 3b 65 2e 6d 65 63 68 61 6e 69 73 6d 2e 64 61 74 61 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 74 28 74 29 7b 69 66 28 74 26 26 74 2e 5f 5f 73 65 6e 74 72 79 5f 63 61 70 74 75 72 65 64 5f 5f 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 44 28 74 2c 22 5f 5f 73 65 6e 74 72 79 5f 63 Data Ascii: unction at(t,n){const e=ot(t);if(!e)return;const r=e.mechanism;if(e.mechanism={type:"generic",handled:!0,...r,...n},n&&"data"in n){const t={...r&&r.data,...n.data};e.mechanism.data=t}}function ft(t){if(t&&t.__sentry_captured__)return!0;try{D(t,"__sentry_c
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 22 69 6e 20 74 7d 28 6e 29 3f 22 5b 53 79 6e 74 68 65 74 69 63 45 76 65 6e 74 5d 22 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 21 3d 6e 3f 22 5b 4e 61 4e 5d 22 3a 76 6f 69 64 20 30 3d 3d 3d 6e 3f 22 5b 75 6e 64 65 66 69 6e 65 64 5d 22 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 60 5b 46 75 6e 63 74 69 6f 6e 3a 20 24 7b 48 28 6e 29 7d 5d 60 3a 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 60 5b 24 7b 53 74 72 69 6e 67 28 6e 29 7d 5d 60 3a 22 62 69 67 69 6e 74 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 60 5b 42 69 67 49 6e 74 3a 20 24 7b 53 74 72 69 6e 67 28 6e 29 7d 5d 60 3a 60 5b 6f 62 6a 65 63 74 20 24 7b 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f Data Ascii: topPropagation"in t}(n)?"[SyntheticEvent]":"number"==typeof n&&n!=n?"[NaN]":void 0===n?"[undefined]":"function"==typeof n?`[Function: ${H(n)}]`:"symbol"==typeof n?`[${String(n)}]`:"bigint"==typeof n?`[BigInt: ${String(n)}]`:`[object ${Object.getPrototypeO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49914	151.101.194.217	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:00 UTC	583	OUT	GET /7.23.0/bundle.tracing.min.js HTTP/1.1 Host: browser.sentry-cdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://get-luxsheets.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://get-luxsheets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:00 UTC	546	IN	HTTP/1.1 200 OK Connection: close Content-Length: 78134 Cache-Control: public, max-age=31536000 Expires: Wed, 10 Dec 2025 08:19:34 GMT Last-Modified: Thu, 01 Dec 2022 16:53:50 GMT ETag: W/"9ed0185da60ba567f2c15e4af20b2e39" Content-Type: application/javascript; charset=utf-8 X-GUploader-Response-Body-Transformations: gunzipped Accept-Ranges: bytes Age: 637226 Date: Tue, 17 Dec 2024 17:20:00 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: * Server: Fastly Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 2f 2a 21 20 40 73 65 6e 74 72 79 2f 74 72 61 63 69 6e 67 20 26 20 40 73 65 6e 74 72 79 2f 62 72 6f 77 73 65 72 20 37 2e 32 33 2e 30 20 28 30 33 65 36 61 32 61 29 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 73 65 6e 74 72 79 2d 6a 61 76 61 73 63 72 69 70 74 20 2a 2f 0a 76 61 72 20 53 65 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 73 77 69 74 63 68 28 6e 2e 63 61 6c 6c 28 74 29 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 78 63 65 70 74 69 6f 6e 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 Data Ascii: /! @sentry/tracing & @sentry/browser 7.23.0 (03e6a2a) \| https://github.com/getsentry/sentry-javascript /var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 6f 69 6e 28 75 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 3c 75 6e 6b 6e 6f 77 6e 3e 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 2c 6e 29 7b 63 6f 6e 73 74 20 65 3d 74 2c 69 3d 5b 5d 3b 6c 65 74 20 72 2c 73 2c 63 2c 75 2c 61 3b 69 66 28 21 65 7c 7c 21 65 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 22 22 3b 69 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 63 6f 6e 73 74 20 68 3d 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 6e 2e 66 69 6c 74 65 72 28 28 74 3d 3e 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 29 29 2e 6d 61 70 28 28 74 3d 3e 5b 74 2c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 5d 29 29 3a 6e 75 6c 6c 3b 69 66 28 68 26 26 68 2e 6c 65 6e 67 74 68 29 68 2e 66 6f 72 45 61 63 68 28 28 Data Ascii: oin(u)}catch(t){return"<unknown>"}}function _(t,n){const e=t,i=[];let r,s,c,u,a;if(!e\|\|!e.tagName)return"";i.push(e.tagName.toLowerCase());const h=n&&n.length?n.filter((t=>e.getAttribute(t))).map((t=>[t,e.getAttribute(t)])):null;if(h&&h.length)h.forEach((
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 3b 74 26 26 28 61 3d 74 5b 30 5d 29 7d 72 65 74 75 72 6e 20 45 28 7b 68 6f 73 74 3a 73 2c 70 61 73 73 3a 72 2c 70 61 74 68 3a 75 2c 70 72 6f 6a 65 63 74 49 64 3a 61 2c 70 6f 72 74 3a 6f 2c 70 72 6f 74 6f 63 6f 6c 3a 65 2c 70 75 62 6c 69 63 4b 65 79 3a 69 7d 29 7d 28 74 29 3a 45 28 74 29 7d 63 6f 6e 73 74 20 24 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 2c 22 61 73 73 65 72 74 22 2c 22 74 72 61 63 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 78 28 74 2c 6e 3d 30 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 30 3d 3d 3d 6e 7c 7c 74 2e 6c 65 6e 67 74 68 3c 3d 6e 3f 74 3a 60 24 7b 74 2e 73 75 62 73 74 72 28 30 2c 6e 29 7d 2e 2e 2e 60 7d 66 75 6e 63 74 69 6f 6e Data Ascii: ;t&&(a=t[0])}return E({host:s,pass:r,path:u,projectId:a,port:o,protocol:e,publicKey:i})}(t):E(t)}const $=["debug","info","warn","error","log","assert","trace"];function x(t,n=0){return"string"!=typeof t\|\|0===n\|\|t.length<=n?t:`${t.substr(0,n)}...`}function
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 73 74 20 65 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 26 26 28 6e 5b 65 5d 3d 74 5b 65 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 6e 3d 34 30 29 7b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 4d 28 74 29 29 3b 69 66 28 65 2e 73 6f 72 74 28 29 2c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 68 61 73 20 6e 6f 20 6b 65 79 73 5d 22 3b 69 66 28 65 5b 30 5d 2e 6c 65 6e 67 74 68 3e 3d 6e 29 72 65 74 75 72 6e 20 78 28 65 5b 30 5d 2c 6e 29 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 3b 74 3e 30 3b 74 2d 2d 29 7b 63 6f 6e 73 74 20 69 3d 65 2e 73 6c 69 Data Ascii: st e in t)Object.prototype.hasOwnProperty.call(t,e)&&(n[e]=t[e]);return n}return{}}function N(t,n=40){const e=Object.keys(M(t));if(e.sort(),!e.length)return"[object has no keys]";if(e[0].length>=n)return x(e[0],n);for(let t=e.length;t>0;t--){const i=e.sli
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 6e 61 6d 65 7c 7c 48 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 48 7d 7d 63 6f 6e 73 74 20 42 3d 6d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 58 28 29 7b 69 66 28 21 28 22 66 65 74 63 68 22 69 6e 20 42 29 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 48 65 61 64 65 72 73 2c 6e 65 77 20 52 65 71 75 65 73 74 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 29 2c 6e 65 77 20 52 65 73 70 6f 6e 73 65 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 2f 5e 66 75 6e 63 74 69 6f 6e 20 66 65 74 63 68 5c 28 5c 29 5c 73 2b 5c 7b 5c 73 2b 5c 5b 6e 61 74 69 76 65 20 Data Ascii: tion"==typeof t&&t.name\|\|H}catch(t){return H}}const B=m();function X(){if(!("fetch"in B))return!1;try{return new Headers,new Request("http://www.example.com"),new Response,!0}catch(t){return!1}}function z(t){return t&&/^function fetch\s+\{\s+\[native
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 26 26 28 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 73 2e 68 61 6e 64 6c 65 72 2c 69 29 2c 73 2e 68 61 6e 64 6c 65 72 3d 76 6f 69 64 20 30 2c 64 65 6c 65 74 65 20 72 5b 6e 5d 29 2c 30 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 2e 5f 5f 73 65 6e 74 72 79 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 5f 68 61 6e 64 6c 65 72 73 5f 5f 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 65 2c 69 29 7d 7d 29 29 29 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 78 68 72 22 3a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 69 6e 20 57 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 58 4d 4c 48 74 Data Ascii: &&(t.call(this,n,s.handler,i),s.handler=void 0,delete r[n]),0===Object.keys(r).length&&delete e.__sentry_instrumentation_handlers__)}catch(t){}return t.call(this,n,e,i)}})))}))}();break;case"xhr":!function(){if(!("XMLHttpRequest"in W))return;const t=XMLHt
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 28 29 29 72 65 74 75 72 6e 3b 52 28 57 2c 22 66 65 74 63 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 6e 29 7b 63 6f 6e 73 74 20 65 3d 7b 61 72 67 73 3a 6e 2c 66 65 74 63 68 44 61 74 61 3a 7b 6d 65 74 68 6f 64 3a 51 28 6e 29 2c 75 72 6c 3a 5a 28 6e 29 7d 2c 73 74 61 72 74 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 3b 72 65 74 75 72 6e 20 59 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 7d 29 2c 74 2e 61 70 70 6c 79 28 57 2c 6e 29 2e 74 68 65 6e 28 28 74 3d 3e 28 59 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 72 65 73 70 6f 6e 73 65 3a 74 7d 29 2c 74 29 29 2c 28 74 3d 3e Data Ascii: t){}return t}())return;R(W,"fetch",(function(t){return function(...n){const e={args:n,fetchData:{method:Q(n),url:Z(n)},startTimestamp:Date.now()};return Y("fetch",{...e}),t.apply(W,n).then((t=>(Y("fetch",{...e,endTimestamp:Date.now(),response:t}),t)),(t=>
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 3f 53 74 72 69 6e 67 28 74 5b 30 5d 2e 6d 65 74 68 6f 64 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 74 5b 31 5d 26 26 74 5b 31 5d 2e 6d 65 74 68 6f 64 3f 53 74 72 69 6e 67 28 74 5b 31 5d 2e 6d 65 74 68 6f 64 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 22 47 45 54 22 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 74 3d 5b 5d 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 5b 30 5d 3f 74 5b 30 5d 3a 22 52 65 71 75 65 73 74 22 69 6e 20 57 26 26 6c 28 74 5b 30 5d 2c 52 65 71 75 65 73 74 29 3f 74 5b 30 5d 2e 75 72 6c 3a 53 74 72 69 6e 67 28 74 5b 30 5d 29 7d 6c 65 74 20 74 74 3b 6c 65 74 20 6e 74 2c 65 74 3b 66 75 6e 63 74 69 6f 6e 20 69 74 28 74 2c 6e 3d 21 31 29 7b 72 65 74 75 72 6e 20 65 3d 3e 7b 69 66 28 21 65 7c 7c 65 74 3d 3d Data Ascii: ?String(t[0].method).toUpperCase():t[1]&&t[1].method?String(t[1].method).toUpperCase():"GET"}function Z(t=[]){return"string"==typeof t[0]?t[0]:"Request"in W&&l(t[0],Request)?t[0].url:String(t[0])}let tt;let nt,et;function it(t,n=!1){return e=>{if(!e\|\|et==
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 72 5b 30 5d 3d 72 5b 30 5d 7c 7c 7b 7d 3b 73 2e 76 61 6c 75 65 7c 7c 28 73 2e 76 61 6c 75 65 3d 6e 7c 7c 22 22 29 2c 73 2e 74 79 70 65 7c 7c 28 73 2e 74 79 70 65 3d 65 7c 7c 22 45 72 72 6f 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 74 28 74 2c 6e 29 7b 63 6f 6e 73 74 20 65 3d 63 74 28 74 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 69 3d 65 2e 6d 65 63 68 61 6e 69 73 6d 3b 69 66 28 65 2e 6d 65 63 68 61 6e 69 73 6d 3d 7b 74 79 70 65 3a 22 67 65 6e 65 72 69 63 22 2c 68 61 6e 64 6c 65 64 3a 21 30 2c 2e 2e 2e 69 2c 2e 2e 2e 6e 7d 2c 6e 26 26 22 64 61 74 61 22 69 6e 20 6e 29 7b 63 6f 6e 73 74 20 74 3d 7b 2e 2e 2e 69 26 26 69 2e 64 61 74 61 2c 2e 2e 2e 6e 2e 64 61 74 61 7d 3b 65 2e 6d 65 63 68 61 6e 69 73 6d 2e 64 61 74 61 3d 74 7d 7d 66 75 6e Data Ascii: r[0]=r[0]\|\|{};s.value\|\|(s.value=n\|\|""),s.type\|\|(s.type=e\|\|"Error")}function ht(t,n){const e=ct(t);if(!e)return;const i=e.mechanism;if(e.mechanism={type:"generic",handled:!0,...i,...n},n&&"data"in n){const t={...i&&i.data,...n.data};e.mechanism.data=t}}fun
2024-12-17 17:20:00 UTC	1379	IN	Data Raw: 65 76 65 6e 74 44 65 66 61 75 6c 74 22 69 6e 20 65 26 26 22 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 22 69 6e 20 65 3f 22 5b 53 79 6e 74 68 65 74 69 63 45 76 65 6e 74 5d 22 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 21 3d 6e 3f 22 5b 4e 61 4e 5d 22 3a 76 6f 69 64 20 30 3d 3d 3d 6e 3f 22 5b 75 6e 64 65 66 69 6e 65 64 5d 22 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 60 5b 46 75 6e 63 74 69 6f 6e 3a 20 24 7b 46 28 6e 29 7d 5d 60 3a 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 60 5b 24 7b 53 74 72 69 6e 67 28 6e 29 7d 5d 60 3a 22 62 69 67 69 6e 74 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 60 5b 42 69 67 49 6e 74 3a 20 24 7b 53 74 72 69 6e 67 28 6e 29 7d 5d 60 3a 60 5b 6f 62 6a 65 63 74 20 24 7b 4f 62 6a Data Ascii: eventDefault"in e&&"stopPropagation"in e?"[SyntheticEvent]":"number"==typeof n&&n!=n?"[NaN]":void 0===n?"[undefined]":"function"==typeof n?`[Function: ${F(n)}]`:"symbol"==typeof n?`[${String(n)}]`:"bigint"==typeof n?`[BigInt: ${String(n)}]`:`[object ${Obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49916	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:01 UTC	633	OUT	GET /assets/shared/checkout/v15/css/bulma.min.css HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://get-luxsheets.com/assets/shared/checkout/v15/css/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:02 UTC	433	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 3fdcccff0e6f06336d41794f45f3a2cf server: Google Frontend Content-Length: 207302 via: 1.1 google date: Tue, 17 Dec 2024 17:20:02 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"329c6-193cfe30d00" Content-Type: text/css; charset=UTF-8 Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:02 UTC	957	IN	Data Raw: 2f 2a 21 20 62 75 6c 6d 61 2e 69 6f 20 76 30 2e 39 2e 34 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 67 74 68 6d 73 2f 62 75 6c 6d 61 20 2a 2f 2e 62 75 74 74 6f 6e 2c 2e 66 69 6c 65 2d 63 74 61 2c 2e 66 69 6c 65 2d 6e 61 6d 65 2c 2e 69 6e 70 75 74 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 65 6c 6c 69 70 73 69 73 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 6e 6b 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2c 2e 73 65 6c 65 63 74 20 73 65 6c 65 63 74 2c 2e 74 65 78 74 61 72 65 61 7b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 Data Ascii: /! bulma.io v0.9.4 \| MIT License \| github.com/jgthms/bulma /.button,.file-cta,.file-name,.input,.pagination-ellipsis,.pagination-link,.pagination-next,.pagination-previous,.select select,.textarea{-moz-appearance:none;-webkit-appearance:none;align-items
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 2d 66 6f 63 75 73 65 64 2e 66 69 6c 65 2d 6e 61 6d 65 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 69 6e 70 75 74 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 65 6c 6c 69 70 73 69 73 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 6e 6b 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2c 2e 69 73 2d 66 6f 63 75 73 65 64 2e 74 65 78 74 61 72 65 61 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 65 6c 6c 69 70 73 69 73 3a 61 63 74 69 76 65 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 65 6c 6c 69 70 73 69 73 3a 66 6f 63 75 73 2c 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 6e 6b 3a 61 63 74 69 76 Data Ascii: -focused.file-name,.is-focused.input,.is-focused.pagination-ellipsis,.is-focused.pagination-link,.is-focused.pagination-next,.is-focused.pagination-previous,.is-focused.textarea,.pagination-ellipsis:active,.pagination-ellipsis:focus,.pagination-link:activ
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 2e 69 73 2d 61 72 72 6f 77 6c 65 73 73 29 3a 3a 61 66 74 65 72 2c 2e 73 65 6c 65 63 74 3a 6e 6f 74 28 2e 69 73 2d 6d 75 6c 74 69 70 6c 65 29 3a 6e 6f 74 28 2e 69 73 2d 6c 6f 61 64 69 6e 67 29 3a 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 33 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 2e 36 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 2e 34 33 37 35 65 6d 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 74 72 Data Ascii: .is-arrowless)::after,.select:not(.is-multiple):not(.is-loading)::after{border:3px solid transparent;border-radius:2px;border-right:0;border-top:0;content:" ";display:block;height:.625em;margin-top:-.4375em;pointer-events:none;position:absolute;top:50%;tr
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 64 65 6c 65 74 65 3a 3a 62 65 66 6f 72 65 2c 2e 6d 6f 64 61 6c 2d 63 6c 6f 73 65 3a 3a 62 65 66 6f 72 65 7b 68 65 69 67 68 74 3a 32 70 78 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 65 6c 65 74 65 3a 3a 61 66 74 65 72 2c 2e 6d 6f 64 61 6c 2d 63 6c 6f 73 65 3a 3a 61 66 74 65 72 7b 68 65 69 67 68 74 3a 35 30 25 3b 77 69 64 74 68 3a 32 70 78 7d 2e 64 65 6c 65 74 65 3a 66 6f 63 75 73 2c 2e 64 65 6c 65 74 65 3a 68 6f 76 65 72 2c 2e 6d 6f 64 61 6c 2d 63 6c 6f 73 65 3a 66 6f 63 75 73 2c 2e 6d 6f 64 61 6c 2d 63 6c 6f 73 65 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 31 30 2c 31 30 2c 31 30 2c 2e 33 29 7d 2e 64 65 6c 65 74 65 3a 61 Data Ascii: transform-origin:center center}.delete::before,.modal-close::before{height:2px;width:50%}.delete::after,.modal-close::after{height:50%;width:2px}.delete:focus,.delete:hover,.modal-close:focus,.modal-close:hover{background-color:rgba(10,10,10,.3)}.delete:a
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 6f 2c 2e 69 6d 61 67 65 2e 69 73 2d 33 62 79 32 20 69 6d 67 2c 2e 69 6d 61 67 65 2e 69 73 2d 33 62 79 34 20 2e 68 61 73 2d 72 61 74 69 6f 2c 2e 69 6d 61 67 65 2e 69 73 2d 33 62 79 34 20 69 6d 67 2c 2e 69 6d 61 67 65 2e 69 73 2d 33 62 79 35 20 2e 68 61 73 2d 72 61 74 69 6f 2c 2e 69 6d 61 67 65 2e 69 73 2d 33 62 79 35 20 69 6d 67 2c 2e 69 6d 61 67 65 2e 69 73 2d 34 62 79 33 20 2e 68 61 73 2d 72 61 74 69 6f 2c 2e 69 6d 61 67 65 2e 69 73 2d 34 62 79 33 20 69 6d 67 2c 2e 69 6d 61 67 65 2e 69 73 2d 34 62 79 35 20 2e 68 61 73 2d 72 61 74 69 6f 2c 2e 69 6d 61 67 65 2e 69 73 2d 34 62 79 35 20 69 6d 67 2c 2e 69 6d 61 67 65 2e 69 73 2d 35 62 79 33 20 2e 68 61 73 2d 72 61 74 69 6f 2c 2e 69 6d 61 67 65 2e 69 73 2d 35 62 79 33 20 69 6d 67 2c 2e 69 6d 61 67 65 2e 69 73 Data Ascii: o,.image.is-3by2 img,.image.is-3by4 .has-ratio,.image.is-3by4 img,.image.is-3by5 .has-ratio,.image.is-3by5 img,.image.is-4by3 .has-ratio,.image.is-4by3 img,.image.is-4by5 .has-ratio,.image.is-4by5 img,.image.is-5by3 .has-ratio,.image.is-5by3 img,.image.is
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 6f 7a 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 62 6f 64 79 2c 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 22 53 65 67 6f 65 20 55 49 22 2c 52 6f 62 6f 74 6f 2c 4f 78 79 67 65 6e 2c 55 62 75 6e 74 75 2c Data Ascii: text-size-adjust:100%;-moz-text-size-adjust:100%;text-size-adjust:100%}article,aside,figure,footer,header,hgroup,section{display:block}body,button,input,optgroup,select,textarea{font-family:BlinkMacSystemFont,-apple-system,"Segoe UI",Roboto,Oxygen,Ubuntu,
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 41 72 6f 75 6e 64 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 2e 35 65 6d 20 31 65 6d 20 2d 2e 31 32 35 65 6d 20 72 67 62 61 28 31 30 2c 31 30 2c 31 30 2c 2e 31 29 2c 30 20 30 20 30 20 31 70 78 20 72 67 62 61 28 31 30 2c 31 30 2c 31 30 2c 2e 30 32 29 3b 63 6f 6c Data Ascii: from{transform:rotate(0)}to{transform:rotate(359deg)}}@keyframes spinAround{from{transform:rotate(0)}to{transform:rotate(359deg)}}.box{background-color:#fff;border-radius:6px;box-shadow:0 .5em 1em -.125em rgba(10,10,10,.1),0 0 0 1px rgba(10,10,10,.02);col
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 65 2c 2e 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 34 61 34 61 34 61 3b 63 6f 6c 6f 72 3a 23 33 36 33 36 33 36 7d 2e 62 75 74 74 6f 6e 2e 69 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 34 61 34 61 34 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 62 75 74 74 6f 6e 2e 69 73 2d 74 65 78 74 2e 69 73 2d 66 6f 63 75 73 65 64 2c 2e 62 75 74 74 6f 6e 2e 69 73 2d 74 65 78 74 2e 69 73 2d 68 6f 76 65 72 65 64 2c 2e 62 75 74 74 6f 6e 2e 69 73 2d 74 65 78 74 3a 66 6f 63 75 73 2c 2e 62 75 74 74 6f 6e 2e 69 73 2d 74 65 78 74 3a 68 Data Ascii: e,.button:active{border-color:#4a4a4a;color:#363636}.button.is-text{background-color:transparent;border-color:transparent;color:#4a4a4a;text-decoration:underline}.button.is-text.is-focused,.button.is-text.is-hovered,.button.is-text:focus,.button.is-text:h
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 30 61 30 61 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 62 75 74 74 6f 6e 2e 69 73 2d 77 68 69 74 65 2e 69 73 2d 69 6e 76 65 72 74 65 64 2e 69 73 2d 68 6f 76 65 72 65 64 2c 2e 62 75 74 74 6f 6e 2e 69 73 2d 77 68 69 74 65 2e 69 73 2d 69 6e 76 65 72 74 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 62 75 74 74 6f 6e 2e 69 73 2d 77 68 69 74 65 2e 69 73 2d 69 6e 76 65 72 74 65 64 5b 64 69 73 61 62 6c 65 64 5d 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 75 74 74 6f 6e 2e 69 73 2d 77 68 69 74 65 2e 69 73 2d 69 6e 76 65 72 74 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 61 30 61 30 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 78 2d 73 Data Ascii: 0a0a;color:#fff}.button.is-white.is-inverted.is-hovered,.button.is-white.is-inverted:hover{background-color:#000}.button.is-white.is-inverted[disabled],fieldset[disabled] .button.is-white.is-inverted{background-color:#0a0a0a;border-color:transparent;box-s
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 69 73 2d 69 6e 76 65 72 74 65 64 2e 69 73 2d 6f 75 74 6c 69 6e 65 64 2e 69 73 2d 68 6f 76 65 72 65 64 2c 2e 62 75 74 74 6f 6e 2e 69 73 2d 77 68 69 74 65 2e 69 73 2d 69 6e 76 65 72 74 65 64 2e 69 73 2d 6f 75 74 6c 69 6e 65 64 3a 66 6f 63 75 73 2c 2e 62 75 74 74 6f 6e 2e 69 73 2d 77 68 69 74 65 2e 69 73 2d 69 6e 76 65 72 74 65 64 2e 69 73 2d 6f 75 74 6c 69 6e 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 61 30 61 30 61 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 62 75 74 74 6f 6e 2e 69 73 2d 77 68 69 74 65 2e 69 73 2d 69 6e 76 65 72 74 65 64 2e 69 73 2d 6f 75 74 6c 69 6e 65 64 2e 69 73 2d 6c 6f 61 64 69 6e 67 2e 69 73 2d 66 6f 63 75 73 65 64 3a 3a 61 66 74 65 72 2c 2e 62 75 74 74 6f 6e 2e 69 73 2d 77 68 69 74 65 2e 69 73 2d Data Ascii: is-inverted.is-outlined.is-hovered,.button.is-white.is-inverted.is-outlined:focus,.button.is-white.is-inverted.is-outlined:hover{background-color:#0a0a0a;color:#fff}.button.is-white.is-inverted.is-outlined.is-loading.is-focused::after,.button.is-white.is-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49917	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:01 UTC	631	OUT	GET /assets/shared/checkout/v15/css/loading.css HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://get-luxsheets.com/assets/shared/checkout/v15/css/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:02 UTC	430	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 54133d951145e57029a5d9953f69e152 server: Google Frontend Content-Length: 9935 via: 1.1 google date: Tue, 17 Dec 2024 17:20:02 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"26cf-193cfe30d00" Content-Type: text/css; charset=UTF-8 Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:02 UTC	960	IN	Data Raw: 62 6f 64 79 2e 63 68 65 63 6b 6f 75 74 20 2e 6c 6f 61 64 65 72 2d 32 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 39 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 7d 0a 2e 63 73 73 50 72 6f 67 72 65 73 73 Data Ascii: body.checkout .loader-2 { position: fixed; z-index: 999999; top: 0; left: 0; bottom: 0; right: 0; background: white; display: none; justify-content: center; align-items: center; padding: 20px; flex-direction: column;}.cssProgress
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 73 20 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 69 6e 66 6f 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 39 35 37 35 63 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 63 73 73 50 72 6f 67 72 65 73 73 20 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 64 61 6e 67 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 66 35 33 35 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 63 73 73 50 72 6f 67 72 65 73 73 20 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 36 36 62 62 36 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 63 73 73 50 72 6f 67 72 65 73 73 20 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 77 61 72 6e 69 6e 67 Data Ascii: s .cssProgress-info { background-color: #9575cd !important;}.cssProgress .cssProgress-danger { background-color: #ef5350 !important;}.cssProgress .cssProgress-success { background-color: #66bb6a !important;}.cssProgress .cssProgress-warning
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 37 35 25 2c 0a 20 20 20 20 74 72 61 6e 73 70 61 72 65 6e 74 20 37 35 25 2c 0a 20 20 20 20 74 72 61 6e 73 70 61 72 65 6e 74 0a 20 20 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 33 35 70 78 20 33 35 70 78 3b 0a 7d 0a 0a 2e 63 73 73 50 72 6f 67 72 65 73 73 20 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 61 63 74 69 76 65 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 63 73 73 50 72 6f 67 72 65 73 73 41 63 74 69 76 65 20 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 2d 6d 73 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 63 73 73 50 72 6f 67 72 65 73 73 41 63 74 69 76 65 20 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 63 73 73 50 72 6f 67 72 65 73 73 41 63 Data Ascii: 75%, transparent 75%, transparent ); background-size: 35px 35px;}.cssProgress .cssProgress-active { -webkit-animation: cssProgressActive 2s linear infinite; -ms-animation: cssProgressActive 2s linear infinite; animation: cssProgressAc
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 2e 70 72 6f 67 72 65 73 73 31 20 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 62 61 72 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 7d 0a 0a 2e 70 72 6f 67 72 65 73 73 31 20 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 6c 61 62 65 6c 20 7b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 7d 0a 0a 2e 70 72 6f 67 72 65 73 73 32 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 39 70 78 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 70 78 20 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 0a 7d 0a 0a 2e 70 72 6f 67 72 65 73 73 32 20 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 62 61 72 20 7b 0a 20 20 68 65 Data Ascii: .progress1 .cssProgress-bar { height: 18px;}.progress1 .cssProgress-label { line-height: 18px;}.progress2 { background-color: #eee; border-radius: 9px; box-shadow: inset 0px 1px 3px rgba(0, 0, 0, 0.2);}.progress2 .cssProgress-bar { he
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 73 2d 33 78 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 70 72 6f 67 72 65 73 73 34 20 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 62 61 72 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 34 78 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 7d 0a 0a 2e 70 72 6f 67 72 65 73 73 34 20 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 62 61 72 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 35 78 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 31 34 70 78 3b 0a 7d 0a 0a 2e 70 72 6f 67 72 65 73 73 34 20 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 62 61 72 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 67 6c 6f 77 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 35 70 78 20 30 70 78 20 31 35 70 78 20 30 70 78 20 23 33 37 39 38 64 39 3b 0a 7d 0a 0a 2e 70 72 6f 67 72 65 73 73 34 20 Data Ascii: s-3x { height: 10px;}.progress4 .cssProgress-bar.cssProgress-4x { height: 12px;}.progress4 .cssProgress-bar.cssProgress-5x { height: 14px;}.progress4 .cssProgress-bar.cssProgress-glow { box-shadow: 5px 0px 15px 0px #3798d9;}.progress4
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 73 73 47 6c 6f 77 41 63 74 69 76 65 33 20 33 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0a 7d 0a 0a 2e 70 72 6f 67 72 65 73 73 34 20 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 62 61 72 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 67 6c 6f 77 2d 61 63 74 69 76 65 2e 63 73 73 50 72 6f 67 72 65 73 73 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 63 73 73 50 72 6f 67 72 65 73 73 47 6c 6f 77 41 63 74 69 76 65 34 20 33 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 2d 6d 73 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 63 73 73 50 72 6f 67 72 65 73 73 47 6c 6f 77 41 63 74 69 76 65 34 20 33 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 63 73 73 50 72 6f 67 Data Ascii: ssGlowActive3 3s linear infinite;}.progress4 .cssProgress-bar.cssProgress-glow-active.cssProgress-success { -webkit-animation: cssProgressGlowActive4 3s linear infinite; -ms-animation: cssProgressGlowActive4 3s linear infinite; animation: cssProg
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 35 70 78 20 30 70 78 20 31 35 70 78 20 30 70 78 20 23 39 35 37 35 63 64 3b 0a 20 20 7d 0a 20 20 34 35 25 20 7b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 31 70 78 20 30 70 78 20 34 70 78 20 30 70 78 20 23 39 35 37 35 63 64 3b 0a 20 20 7d 0a 7d 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 63 73 73 50 72 6f 67 72 65 73 73 47 6c 6f 77 41 63 74 69 76 65 33 20 7b 0a 20 20 30 25 2c 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 35 70 78 20 30 70 78 20 31 35 70 78 20 30 70 78 20 23 65 66 35 33 35 30 3b 0a 20 20 7d 0a 20 20 34 35 25 20 7b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 31 70 78 20 30 70 78 20 34 70 78 20 30 70 78 20 23 65 66 35 33 35 30 Data Ascii: box-shadow: 5px 0px 15px 0px #9575cd; } 45% { box-shadow: 1px 0px 4px 0px #9575cd; }}@-webkit-keyframes cssProgressGlowActive3 { 0%, 100% { box-shadow: 5px 0px 15px 0px #ef5350; } 45% { box-shadow: 1px 0px 4px 0px #ef5350
2024-12-17 17:20:02 UTC	635	IN	Data Raw: 63 74 69 76 65 35 20 7b 0a 20 20 30 25 2c 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 35 70 78 20 30 70 78 20 31 35 70 78 20 30 70 78 20 23 66 66 62 37 34 64 3b 0a 20 20 7d 0a 20 20 34 35 25 20 7b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 31 70 78 20 30 70 78 20 34 70 78 20 30 70 78 20 23 66 66 62 37 34 64 3b 0a 20 20 7d 0a 7d 0a 2e 6c 6f 61 64 69 6e 67 20 2e 69 6e 6e 65 72 20 2e 63 73 73 50 72 6f 67 72 65 73 73 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 30 70 78 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 70 72 6f 67 72 65 73 73 31 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 45 45 3b 0a Data Ascii: ctive5 { 0%, 100% { box-shadow: 5px 0px 15px 0px #ffb74d; } 45% { box-shadow: 1px 0px 4px 0px #ffb74d; }}.loading .inner .cssProgress { width: 500px; overflow: hidden; position: relative;}.progress1 { background-color: #EEE;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49918	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:01 UTC	377	OUT	GET /CheckoutSDK.js?v=v15 HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:02 UTC	445	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 9bf3e55acbaf37c9c49bbdd6ba6f669f server: Google Frontend Content-Length: 20032 via: 1.1 google Date: Tue, 17 Dec 2024 17:19:59 GMT Age: 3 Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"4e40-193cfe30d00" Content-Type: application/javascript; charset=UTF-8 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:02 UTC	945	IN	Data Raw: 63 6c 61 73 73 20 50 72 6f 6a 65 63 74 45 43 68 65 63 6b 6f 75 74 20 65 78 74 65 6e 64 73 20 45 76 65 6e 74 54 61 72 67 65 74 20 7b 0a 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 20 7b 0a 20 20 20 20 73 75 70 65 72 28 29 3b 0a 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 43 68 65 63 6b 6f 75 74 20 53 44 4b 20 69 6e 69 74 69 61 6c 69 7a 65 64 27 29 3b 0a 0a 20 20 20 20 74 68 69 73 2e 41 50 49 5f 55 52 4c 20 3d 20 27 2f 61 70 69 27 3b 0a 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 20 3d 20 7b 0a 20 20 20 20 20 20 73 68 69 70 70 69 6e 67 43 6f 73 74 3a 20 31 31 2e 39 35 2c 0a 20 20 20 20 20 20 61 6d 6f 75 6e 74 3a 20 7b 0a 20 20 20 20 20 20 20 20 69 74 65 6d 73 3a 20 30 2c 0a 20 20 20 20 20 20 20 20 73 68 69 70 70 69 6e 67 3a 20 30 2c 0a 20 20 20 20 Data Ascii: class ProjectECheckout extends EventTarget { constructor() { super(); console.log('Checkout SDK initialized'); this.API_URL = '/api'; this.state = { shippingCost: 11.95, amount: { items: 0, shipping: 0,
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 20 28 70 29 20 3d 3e 20 70 2e 69 64 20 3d 3d 3d 20 6c 69 6e 65 49 74 65 6d 2e 63 61 6d 70 61 69 67 6e 50 61 63 6b 61 67 65 49 64 0a 20 20 20 20 20 20 20 20 20 20 29 2e 70 72 69 63 65 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 73 75 6d 20 2b 20 70 72 69 63 65 3b 0a 20 20 20 20 20 20 20 20 7d 2c 20 30 29 0a 20 20 20 20 20 20 29 2e 74 6f 46 69 78 65 64 28 32 29 0a 20 20 20 20 29 3b 0a 0a 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 2e 61 6d 6f 75 6e 74 2e 74 6f 74 61 6c 20 3d 20 4e 75 6d 62 65 72 28 0a 20 20 20 20 20 20 4e 75 6d 62 65 72 28 0a 20 20 20 20 20 20 20 20 4e 75 6d 62 65 72 28 74 68 69 73 2e 73 74 61 74 65 2e 61 6d 6f 75 6e 74 2e 73 68 69 70 70 69 6e 67 29 20 2b 20 4e 75 6d 62 65 72 28 74 68 69 73 2e 73 74 61 74 65 2e 61 6d 6f 75 6e 74 Data Ascii: (p) => p.id === lineItem.campaignPackageId ).price; return sum + price; }, 0) ).toFixed(2) ); this.state.amount.total = Number( Number( Number(this.state.amount.shipping) + Number(this.state.amount
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 72 65 73 73 5f 6c 69 6e 65 5f 31 2c 0a 20 20 20 20 20 20 20 20 61 64 64 72 65 73 73 32 3a 20 61 64 64 72 65 73 73 5f 6c 69 6e 65 5f 32 2c 0a 20 20 20 20 20 20 20 20 63 69 74 79 3a 20 61 64 6d 69 6e 5f 61 72 65 61 5f 32 2c 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 72 79 3a 20 63 6f 75 6e 74 72 79 5f 63 6f 64 65 2c 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 3a 20 61 64 6d 69 6e 5f 61 72 65 61 5f 31 20 3f 20 61 64 6d 69 6e 5f 61 72 65 61 5f 31 20 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 7a 69 70 63 6f 64 65 3a 20 70 6f 73 74 61 6c 5f 63 6f 64 65 2c 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 63 6f 6e 73 74 20 66 69 6c 6c 49 6e 70 75 74 20 3d 20 28 6e 61 6d 65 2c 20 76 61 6c 75 65 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 6c 65 74 20 Data Ascii: ress_line_1, address2: address_line_2, city: admin_area_2, country: country_code, state: admin_area_1 ? admin_area_1 : null, zipcode: postal_code, }, }; const fillInput = (name, value) => { let
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 73 63 72 6f 6c 6c 54 6f 70 3a 20 24 28 76 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 6c 74 73 5b 30 5d 2e 69 6e 70 75 74 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 7d 2c 0a 20 20 20 20 20 20 20 20 35 30 30 0a 20 20 20 20 20 20 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 24 28 27 23 61 64 64 72 65 73 73 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 0a 20 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 50 72 6f 63 65 73 73 4f 72 64 65 72 45 76 65 6e 74 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 45 76 65 6e 74 28 27 50 72 6f 63 65 73 73 69 6e 67 27 29 29 3b 0a 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 61 77 61 69 74 20 6e 65 77 20 50 Data Ascii: scrollTop: $(validationResults[0].input).offset().top }, 500 ); } else { $('#address-form').submit(); } } async handleProcessOrderEvent(event) { this.dispatchEvent(new Event('Processing')); try { await new P
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 73 75 62 6d 69 74 0a 20 20 20 20 20 20 20 20 20 20 61 77 61 69 74 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 72 65 73 6f 6c 76 65 29 20 3d 3e 20 73 65 74 54 69 6d 65 6f 75 74 28 72 65 73 6f 6c 76 65 2c 20 35 30 30 29 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 73 74 61 74 65 2e 69 73 50 72 6f 63 65 73 73 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 2e 69 73 50 72 6f 63 65 73 73 69 6e 67 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 65 73 70 6f 6e 73 65 20 3d 20 61 77 61 69 74 20 74 68 69 73 2e 73 65 6e 64 4c 65 61 64 28 66 6f 72 6d 44 61 74 61 2c 20 6d 65 74 61 2c Data Ascii: submit await new Promise((resolve) => setTimeout(resolve, 500)); if (this.state.isProcessing) { return; } this.state.isProcessing = true; const response = await this.sendLead(formData, meta,
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 46 2e 75 72 6c 50 61 72 61 6d 65 74 65 72 28 27 70 75 62 5f 69 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 45 46 2e 75 72 6c 50 61 72 61 6d 65 74 65 72 28 27 61 66 66 69 64 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 72 66 6c 6f 77 49 6e 70 75 74 2e 61 69 64 20 3d 20 45 46 2e 75 72 6c 50 61 72 61 6d 65 74 65 72 28 27 61 66 66 69 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 77 61 69 74 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 72 65 73 6f 6c 76 65 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 70 69 78 65 6c 49 66 72 61 6d 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 Data Ascii: F.urlParameter('pub_id'); } if (EF.urlParameter('affid')) { everflowInput.aid = EF.urlParameter('affid'); } await new Promise((resolve) => { const pixelIframe = document.createE
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 27 2c 20 73 75 62 6d 69 74 4f 72 64 65 72 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 61 77 61 69 74 20 73 75 62 6d 69 74 4f 72 64 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 0a 20 20 20 20 20 20 20 20 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 27 45 72 72 6f 72 27 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 64 65 74 61 69 6c 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 4d 65 73 73 61 67 65 3a 20 65 72 72 6f 72 2e 6d 65 73 73 61 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 73 41 64 64 72 65 73 73 56 65 72 69 66 Data Ascii: ', submitOrder); } else { await submitOrder(); } }); } catch (error) { this.dispatchEvent( new CustomEvent('Error', { detail: { errorMessage: error.message, isAddressVerif
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 20 7d 0a 0a 20 20 61 73 79 6e 63 20 63 61 6c 63 75 6c 61 74 65 53 68 69 70 69 6e 67 43 6f 73 74 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 75 72 6c 50 61 72 61 6d 73 20 3d 20 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 0a 20 20 20 20 69 66 20 28 0a 20 20 20 20 20 20 75 72 6c 50 61 72 61 6d 73 2e 67 65 74 28 27 73 68 69 70 70 69 6e 67 27 29 20 3d 3d 3d 20 27 66 72 65 65 27 20 7c 7c 0a 20 20 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 2e 6c 69 6e 65 49 74 65 6d 73 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 30 0a 20 20 20 20 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 30 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 66 65 74 63 68 28 60 24 7b 74 68 69 73 Data Ascii: } async calculateShipingCost() { const urlParams = new URLSearchParams(window.location.search); if ( urlParams.get('shipping') === 'free' \|\| this.state.lineItems.length === 0 ) { return 0; } return fetch(`${this
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 65 6e 67 74 68 20 3d 3d 3d 20 30 29 20 72 65 74 75 72 6e 20 30 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 75 70 73 65 6c 6c 73 2e 72 65 64 75 63 65 28 28 61 2c 20 62 29 20 3d 3e 20 61 20 2b 20 62 2e 71 75 61 6e 74 69 74 79 2c 20 30 29 3b 0a 20 20 7d 0a 0a 20 20 72 65 6d 6f 76 65 55 70 73 65 6c 6c 46 72 6f 6d 43 61 72 74 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 2e 6c 69 6e 65 49 74 65 6d 73 20 3d 20 74 68 69 73 2e 73 74 61 74 65 2e 6c 69 6e 65 49 74 65 6d 73 2e 66 69 6c 74 65 72 28 0a 20 20 20 20 20 20 28 6c 69 6e 65 49 74 65 6d 29 20 3d 3e 20 6c 69 6e 65 49 74 65 6d 2e 69 73 55 70 73 65 6c 6c 20 3d 3d 3d 20 66 61 6c 73 65 0a 20 20 20 20 29 3b 0a 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 63 61 72 74 27 2c 20 74 68 69 73 2e 73 74 61 Data Ascii: ength === 0) return 0; return upsells.reduce((a, b) => a + b.quantity, 0); } removeUpsellFromCart() { this.state.lineItems = this.state.lineItems.filter( (lineItem) => lineItem.isUpsell === false ); console.log('cart', this.sta
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 6f 70 74 69 6e 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 49 6e 73 69 64 65 72 2e 65 76 65 6e 74 4d 61 6e 61 67 65 72 2e 64 69 73 70 61 74 63 68 28 27 69 6e 69 74 2d 6d 61 6e 61 67 65 72 3a 72 65 2d 69 6e 69 74 69 61 6c 69 7a 65 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 2e 69 6e 73 69 64 65 72 53 65 6e 74 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 49 6e 73 69 64 65 72 20 6f 62 6a 65 63 74 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 27 2c 20 65 72 72 29 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 73 74 61 74 65 2e 69 6e 73 69 64 65 Data Ascii: optin: true, }, }; Insider.eventManager.dispatch('init-manager:re-initialize'); this.state.insiderSent = true; } } catch (err) { console.log('Insider object is not defined', err); this.state.inside

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49920	35.244.193.194	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:02 UTC	487	OUT	GET /scripts/sdk/everflow.js HTTP/1.1 Host: www.trk2dkt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uniqueClick_H7JJ78=f5b0a4f9-8882-45ae-9470-ec26f5243d0a:1734455995; transaction_id=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:02 UTC	380	IN	HTTP/1.1 200 OK server: nginx date: Tue, 17 Dec 2024 17:20:02 GMT content-type: text/javascript accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model cache-control: max-age=14400 vary: Origin x-eflow-request-id: 31f01898-2e94-4e8a-9190-72fe519eeb79 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-12-17 17:20:02 UTC	1010	IN	Data Raw: 32 65 64 62 0d 0a 76 61 72 20 45 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 Data Ascii: 2edbvar EF=function(){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function r(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writa
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 3e 31 36 2c 36 35 35 33 35 26 65 5b 31 5d 5d 2c 74 3d 5b 74 5b 30 5d 3e 3e 3e 31 36 2c 36 35 35 33 35 26 74 5b 30 5d 2c 74 5b 31 5d 3e 3e 3e 31 36 2c 36 35 35 33 35 26 74 5b 31 5d 5d 3b 76 61 72 20 6e 3d 5b 30 2c 30 2c 30 2c 30 5d 3b 72 65 74 75 72 6e 20 6e 5b 33 5d 2b 3d 65 5b 33 5d 2b 74 5b 33 5d 2c 6e 5b 32 5d 2b 3d 6e 5b 33 5d 3e 3e 3e 31 36 2c 6e 5b 33 5d 26 3d 36 35 35 33 35 2c 6e 5b 32 5d 2b 3d 65 5b 32 5d 2b 74 5b 32 5d 2c 6e 5b 31 5d 2b 3d 6e 5b 32 5d 3e 3e 3e 31 36 2c 6e 5b 32 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 31 5d 2b 74 5b 31 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 30 5d 2b 3d 65 5b 30 5d 2b 74 5b 30 5d 2c 6e 5b 30 5d 26 3d 36 35 35 33 35 2c 5b 6e 5b 30 5d 3c 3c 31 36 7c Data Ascii: >16,65535&e[1]],t=[t[0]>>>16,65535&t[0],t[1]>>>16,65535&t[1]];var n=[0,0,0,0];return n[3]+=e[3]+t[3],n[2]+=n[3]>>>16,n[3]&=65535,n[2]+=e[2]+t[2],n[1]+=n[2]>>>16,n[2]&=65535,n[1]+=e[1]+t[1],n[0]+=n[1]>>>16,n[1]&=65535,n[0]+=e[0]+t[0],n[0]&=65535,[n[0]<<16\|
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 36 29 29 3c 3c 31 36 7c 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 37 29 29 3c 3c 32 34 2c 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 29 7c 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 31 29 29 3c 3c 38 7c 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 32 29 29 3c 3c 31 36 7c 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 33 29 29 3c 3c 32 34 5d 2c 73 3d 5b 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 31 32 29 7c 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 31 33 29 29 3c 3c 38 7c 28 32 35 35 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2b 31 34 29 29 3c 3c 31 36 7c 28 32 35 35 26 65 2e 63 68 61 72 43 Data Ascii: (255&e.charCodeAt(d+6))<<16\|(255&e.charCodeAt(d+7))<<24,255&e.charCodeAt(d)\|(255&e.charCodeAt(d+1))<<8\|(255&e.charCodeAt(d+2))<<16\|(255&e.charCodeAt(d+3))<<24],s=[255&e.charCodeAt(d+12)\|(255&e.charCodeAt(d+13))<<8\|(255&e.charCodeAt(d+14))<<16\|(255&e.charC
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 30 5d 3e 3e 3e 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 38 29 2b 28 22 30 30 30 30 30 30 30 30 22 2b 28 69 5b 31 5d 3e 3e 3e 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 38 29 2b 28 22 30 30 30 30 30 30 30 30 22 2b 28 61 5b 30 5d 3e 3e 3e 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 38 29 2b 28 22 30 30 30 30 30 30 30 30 22 2b 28 61 5b 31 5d 3e 3e 3e 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 38 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 26 26 65 2e 66 6f 72 45 61 63 68 3d 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 29 65 2e Data Ascii: 0]>>>0).toString(16)).slice(-8)+("00000000"+(i[1]>>>0).toString(16)).slice(-8)+("00000000"+(a[0]>>>0).toString(16)).slice(-8)+("00000000"+(a[1]>>>0).toString(16)).slice(-8)}function u(e,t){if(Array.prototype.forEach&&e.forEach===Array.prototype.forEach)e.
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 48 65 69 67 68 74 2c 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 57 69 64 74 68 5d 3b 72 65 74 75 72 6e 20 65 2e 73 63 72 65 65 6e 2e 64 65 74 65 63 74 53 63 72 65 65 6e 4f 72 69 65 6e 74 61 74 69 6f 6e 26 26 74 2e 73 6f 72 74 28 29 2e 72 65 76 65 72 73 65 28 29 2c 74 7d 72 65 74 75 72 6e 20 65 2e 4e 4f 54 5f 41 56 41 49 4c 41 42 4c 45 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 29 72 65 74 75 72 6e 20 65 2e 4e 4f 54 5f 41 56 41 49 4c 41 42 4c 45 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 2c 72 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 6e 61 76 69 Data Ascii: dow.screen.availHeight,window.screen.availWidth];return e.screen.detectScreenOrientation&&t.sort().reverse(),t}return e.NOT_AVAILABLE},o=function(e){if(null==navigator.plugins)return e.NOT_AVAILABLE;for(var t=[],n=0,r=navigator.plugins.length;n<r;n++)navi
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 6c 75 67 69 6e 73 46 6f 72 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 2e 70 6c 75 67 69 6e 73 2e 73 6f 72 74 50 6c 75 67 69 6e 73 46 6f 72 5b 6e 5d 3b 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 69 29 29 7b 74 3d 21 30 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 74 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 45 52 52 4f 52 7d 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 45 52 Data Ascii: luginsFor.length;n<r;n++){var i=e.plugins.sortPluginsFor[n];if(navigator.userAgent.match(i)){t=!0;break}}return t},y=function(t){try{return!!window.sessionStorage}catch(e){return t.ERROR}},v=function(t){try{return!!window.localStorage}catch(e){return t.ER
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 69 6c 6c 54 65 78 74 28 22 43 77 6d 20 66 6a 6f 72 64 62 61 6e 6b 20 67 6c 79 70 68 73 20 76 65 78 74 20 71 75 69 7a 2c 20 f0 9f 98 83 22 2c 32 2c 31 35 29 2c 72 2e 66 69 6c 6c 53 74 79 6c 65 3d 22 72 67 62 61 28 31 30 32 2c 20 32 30 34 2c 20 30 2c 20 30 2e 32 29 22 2c 72 2e 66 6f 6e 74 3d 22 31 38 70 74 20 41 72 69 61 6c 22 2c 72 2e 66 69 6c 6c 54 65 78 74 28 22 43 77 6d 20 66 6a 6f 72 64 62 61 6e 6b 20 67 6c 79 70 68 73 20 76 65 78 74 20 71 75 69 7a 2c 20 f0 9f 98 83 22 2c 34 2c 34 35 29 2c 72 2e 67 6c 6f 62 61 6c 43 6f 6d 70 6f 73 69 74 65 4f 70 65 72 61 74 69 6f 6e 3d 22 6d 75 6c 74 69 70 6c 79 22 2c 72 2e 66 69 6c 6c 53 74 79 6c 65 3d 22 72 67 62 28 32 35 35 2c 30 2c 32 35 35 29 22 2c 72 2e 62 65 67 69 6e 50 61 74 68 28 29 2c 72 2e 61 72 63 28 35 30 Data Ascii: illText("Cwm fjordbank glyphs vext quiz, ",2,15),r.fillStyle="rgba(102, 204, 0, 0.2)",r.font="18pt Arial",r.fillText("Cwm fjordbank glyphs vext quiz, ",4,45),r.globalCompositeOperation="multiply",r.fillStyle="rgb(255,0,255)",r.beginPath(),r.arc(50
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 6e 20 6d 65 64 69 75 6d 70 20 66 6c 6f 61 74 3b 76 61 72 79 69 6e 67 20 76 65 63 32 20 76 61 72 79 69 6e 54 65 78 43 6f 6f 72 64 69 6e 61 74 65 3b 76 6f 69 64 20 6d 61 69 6e 28 29 20 7b 67 6c 5f 46 72 61 67 43 6f 6c 6f 72 3d 76 65 63 34 28 76 61 72 79 69 6e 54 65 78 43 6f 6f 72 64 69 6e 61 74 65 2c 30 2c 31 29 3b 7d 22 29 2c 6f 2e 63 6f 6d 70 69 6c 65 53 68 61 64 65 72 28 61 29 2c 6f 2e 61 74 74 61 63 68 53 68 61 64 65 72 28 72 2c 69 29 2c 6f 2e 61 74 74 61 63 68 53 68 61 64 65 72 28 72 2c 61 29 2c 6f 2e 6c 69 6e 6b 50 72 6f 67 72 61 6d 28 72 29 2c 6f 2e 75 73 65 50 72 6f 67 72 61 6d 28 72 29 2c 72 2e 76 65 72 74 65 78 50 6f 73 41 74 74 72 69 62 3d 6f 2e 67 65 74 41 74 74 72 69 62 4c 6f 63 61 74 69 6f 6e 28 72 2c 22 61 74 74 72 56 65 72 74 65 78 22 29 2c Data Ascii: n mediump float;varying vec2 varyinTexCoordinate;void main() {gl_FragColor=vec4(varyinTexCoordinate,0,1);}"),o.compileShader(a),o.attachShader(r,i),o.attachShader(r,a),o.linkProgram(r),o.useProgram(r),r.vertexPosAttrib=o.getAttribLocation(r,"attrVertex"),
2024-12-17 17:20:02 UTC	1263	IN	Data Raw: 7d 28 6f 29 29 2c 73 2e 70 75 73 68 28 22 77 65 62 67 6c 20 6d 61 78 20 63 6f 6d 62 69 6e 65 64 20 74 65 78 74 75 72 65 20 69 6d 61 67 65 20 75 6e 69 74 73 3a 22 2b 6f 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 6f 2e 4d 41 58 5f 43 4f 4d 42 49 4e 45 44 5f 54 45 58 54 55 52 45 5f 49 4d 41 47 45 5f 55 4e 49 54 53 29 29 2c 73 2e 70 75 73 68 28 22 77 65 62 67 6c 20 6d 61 78 20 63 75 62 65 20 6d 61 70 20 74 65 78 74 75 72 65 20 73 69 7a 65 3a 22 2b 6f 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 6f 2e 4d 41 58 5f 43 55 42 45 5f 4d 41 50 5f 54 45 58 54 55 52 45 5f 53 49 5a 45 29 29 2c 73 2e 70 75 73 68 28 22 77 65 62 67 6c 20 6d 61 78 20 66 72 61 67 6d 65 6e 74 20 75 6e 69 66 6f 72 6d 20 76 65 63 74 6f 72 73 3a 22 2b 6f 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 6f Data Ascii: }(o)),s.push("webgl max combined texture image units:"+o.getParameter(o.MAX_COMBINED_TEXTURE_IMAGE_UNITS)),s.push("webgl max cube map texture size:"+o.getParameter(o.MAX_CUBE_MAP_TEXTURE_SIZE)),s.push("webgl max fragment uniform vectors:"+o.getParameter(o
2024-12-17 17:20:02 UTC	1224	IN	Data Raw: 34 63 31 0d 0a 6d 65 74 65 72 28 6f 2e 56 45 52 53 49 4f 4e 29 29 3b 74 72 79 7b 76 61 72 20 63 3d 6f 2e 67 65 74 45 78 74 65 6e 73 69 6f 6e 28 22 57 45 42 47 4c 5f 64 65 62 75 67 5f 72 65 6e 64 65 72 65 72 5f 69 6e 66 6f 22 29 3b 63 26 26 28 73 2e 70 75 73 68 28 22 77 65 62 67 6c 20 75 6e 6d 61 73 6b 65 64 20 76 65 6e 64 6f 72 3a 22 2b 6f 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 63 2e 55 4e 4d 41 53 4b 45 44 5f 56 45 4e 44 4f 52 5f 57 45 42 47 4c 29 29 2c 73 2e 70 75 73 68 28 22 77 65 62 67 6c 20 75 6e 6d 61 73 6b 65 64 20 72 65 6e 64 65 72 65 72 3a 22 2b 6f 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 63 2e 55 4e 4d 41 53 4b 45 44 5f 52 45 4e 44 45 52 45 52 5f 57 45 42 47 4c 29 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6f 2e 67 65 74 53 Data Ascii: 4c1meter(o.VERSION));try{var c=o.getExtension("WEBGL_debug_renderer_info");c&&(s.push("webgl unmasked vendor:"+o.getParameter(c.UNMASKED_VENDOR_WEBGL)),s.push("webgl unmasked renderer:"+o.getParameter(c.UNMASKED_RENDERER_WEBGL)))}catch(e){}return o.getS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49919	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:02 UTC	376	OUT	GET /jquery-3.5.0.min.js HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:02 UTC	447	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: f45b87294a53b5bdbf56e2f9a284d16f server: Google Frontend Content-Length: 155955 via: 1.1 google Date: Tue, 17 Dec 2024 17:19:59 GMT Age: 3 Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"26133-193cfe30d00" Content-Type: application/javascript; charset=UTF-8 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:02 UTC	943	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 30 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 27 6f 62 6a 65 63 74 27 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 26 26 20 27 6f 62 6a 65 63 74 27 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 0a 20 20 20 20 3f 20 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 65 2e 64 6f 63 75 6d 65 6e 74 0a 20 20 20 20 20 20 20 20 3f 20 74 28 65 2c 20 21 30 29 0a 20 20 20 20 20 20 20 20 3a 20 66 75 6e 63 74 Data Ascii: /! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /!(function (e, t) { 'use strict'; 'object' == typeof module && 'object' == typeof module.exports ? (module.exports = e.document ? t(e, !0) : funct
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 70 65 3b 0a 20 20 20 20 7d 2c 0a 20 20 20 20 78 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 20 21 3d 20 65 20 26 26 20 65 20 3d 3d 3d 20 65 2e 77 69 6e 64 6f 77 3b 0a 20 20 20 20 7d 2c 0a 20 20 20 20 45 20 3d 20 43 2e 64 6f 63 75 6d 65 6e 74 2c 0a 20 20 20 20 63 20 3d 20 7b 20 74 79 70 65 3a 20 21 30 2c 20 73 72 63 3a 20 21 30 2c 20 6e 6f 6e 63 65 3a 20 21 30 2c 20 6e 6f 4d 6f 64 75 6c 65 3a 20 21 30 20 7d 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 20 74 2c 20 6e 29 20 7b 0a 20 20 20 20 76 61 72 20 72 2c 0a 20 20 20 20 20 20 69 2c 0a 20 20 20 20 20 20 6f 20 3d 20 28 6e 20 3d 20 6e 20 7c 7c 20 45 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0a 20 20 20 20 Data Ascii: pe; }, x = function (e) { return null != e && e === e.window; }, E = C.document, c = { type: !0, src: !0, nonce: !0, noModule: !0 }; function b(e, t, n) { var r, i, o = (n = n \|\| E).createElement('script');
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 65 2c 20 74 2c 20 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 73 6c 69 63 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 29 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 66 69 72 73 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 6c 61 73 74 3a 20 Data Ascii: unction (e, t) { return n.call(e, t, e); }), ); }, slice: function () { return this.pushStack(s.apply(this, arguments)); }, first: function () { return this.eq(0); }, last:
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 20 73 2b 2b 0a 20 20 20 20 20 20 20 20 29 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 75 6c 6c 20 21 3d 20 28 65 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 72 20 3d 20 65 5b 74 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 5f 5f 70 72 6f 74 6f 5f 5f 27 20 21 3d 3d 20 74 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 21 3d 3d 20 72 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6c 20 26 26 20 72 20 26 26 20 28 53 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 72 29 20 7c 7c 20 28 69 20 3d 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 29 0a 20 20 20 20 20 Data Ascii: s++ ) if (null != (e = arguments[s])) for (t in e) (r = e[t]), '__proto__' !== t && a !== r && (l && r && (S.isPlainObject(r) \|\| (i = Array.isArray(r)))
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 21 31 20 3d 3d 3d 20 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 20 72 2c 20 65 5b 72 5d 29 29 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 6d 61 6b 65 41 72 72 61 79 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 20 21 3d 20 65 20 26 26 20 28 70 28 4f 62 6a 65 63 74 28 65 29 29 20 3f 20 53 2e 6d 65 72 67 65 28 6e 2c 20 27 73 74 72 69 6e 67 27 20 3d 3d 20 74 79 70 65 6f 66 20 65 20 3f 20 5b 65 5d 20 3a 20 65 29 20 3a 20 75 2e 63 61 6c 6c 28 6e 2c 20 65 29 29 2c 20 6e 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 69 6e 41 72 72 61 79 3a 20 Data Ascii: !1 === t.call(e[r], r, e[r])) break; return e; }, makeArray: function (e, t) { var n = t \|\| []; return null != e && (p(Object(e)) ? S.merge(n, 'string' == typeof e ? [e] : e) : u.call(n, e)), n; }, inArray:
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 20 20 20 76 2c 0a 20 20 20 20 20 20 73 2c 0a 20 20 20 20 20 20 63 2c 0a 20 20 20 20 20 20 79 2c 0a 20 20 20 20 20 20 53 20 3d 20 27 73 69 7a 7a 6c 65 27 20 2b 20 31 20 2a 20 6e 65 77 20 44 61 74 65 28 29 2c 0a 20 20 20 20 20 20 70 20 3d 20 6e 2e 64 6f 63 75 6d 65 6e 74 2c 0a 20 20 20 20 20 20 6b 20 3d 20 30 2c 0a 20 20 20 20 20 20 72 20 3d 20 30 2c 0a 20 20 20 20 20 20 6d 20 3d 20 75 65 28 29 2c 0a 20 20 20 20 20 20 78 20 3d 20 75 65 28 29 2c 0a 20 20 20 20 20 20 41 20 3d 20 75 65 28 29 2c 0a 20 20 20 20 20 20 4e 20 3d 20 75 65 28 29 2c 0a 20 20 20 20 20 20 44 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 20 3d 3d 3d 20 74 20 26 26 20 28 6c 20 3d 20 21 30 29 2c 20 30 3b 0a 20 20 20 20 20 20 Data Ascii: v, s, c, y, S = 'sizzle' + 1 * new Date(), p = n.document, k = 0, r = 0, m = ue(), x = ue(), A = ue(), N = ue(), D = function (e, t) { return e === t && (l = !0), 0;
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 27 2a 28 5b 3e 2b 7e 5d 7c 27 20 2b 20 4d 20 2b 20 27 29 27 20 2b 20 4d 20 2b 20 27 2a 27 29 2c 0a 20 20 20 20 20 20 55 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 4d 20 2b 20 27 7c 3e 27 29 2c 0a 20 20 20 20 20 20 58 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 46 29 2c 0a 20 20 20 20 20 20 56 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 27 5e 27 20 2b 20 49 20 2b 20 27 24 27 29 2c 0a 20 20 20 20 20 20 47 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 49 44 3a 20 6e 65 77 20 52 65 67 45 78 70 28 27 5e 23 28 27 20 2b 20 49 20 2b 20 27 29 27 29 2c 0a 20 20 20 20 20 20 20 20 43 4c 41 53 53 3a 20 6e 65 77 20 52 65 67 45 78 70 28 27 5e 5c 5c 2e 28 27 20 2b 20 49 20 2b 20 27 29 27 29 2c 0a 20 20 20 20 20 20 20 20 54 41 47 3a 20 6e 65 77 20 52 65 67 45 78 70 28 27 5e 28 27 20 Data Ascii: '([>+~]\|' + M + ')' + M + ''), U = new RegExp(M + '\|>'), X = new RegExp(F), V = new RegExp('^' + I + '$'), G = { ID: new RegExp('^#(' + I + ')'), CLASS: new RegExp('^\\.(' + I + ')'), TAG: new RegExp('^('
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 6f 6d 43 68 61 72 43 6f 64 65 28 28 6e 20 3e 3e 20 31 30 29 20 7c 20 35 35 32 39 36 2c 20 28 31 30 32 33 20 26 20 6e 29 20 7c 20 35 36 33 32 30 29 29 0a 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 72 65 20 3d 20 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 0a 20 20 20 20 20 20 69 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 0a 20 20 20 20 20 20 20 20 20 20 3f 20 27 5c 30 27 20 3d 3d 3d 20 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 27 5c 75 66 66 66 64 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 3a 20 65 2e 73 6c 69 63 65 28 30 2c 20 2d Data Ascii: omCharCode((n >> 10) \| 55296, (1023 & n) \| 56320)) ); }, re = /([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g, ie = function (e, t) { return t ? '\0' === e ? '\ufffd' : e.slice(0, -
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 69 66 20 28 39 20 3d 3d 3d 20 70 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 28 61 20 3d 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 29 20 72 65 74 75 72 6e 20 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 2e 69 64 20 3d 3d 3d 20 69 29 20 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 61 29 2c 20 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 66 20 26 26 20 28 61 20 3d 20 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 20 26 26 20 79 28 65 2c 20 61 29 20 26 26 20 61 2e 69 64 20 3d 3d 3d 20 69 29 20 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 61 29 2c 20 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 Data Ascii: if (9 === p) { if (!(a = e.getElementById(i))) return n; if (a.id === i) return n.push(a), n; } else if (f && (a = f.getElementById(i)) && y(e, a) && a.id === i) return n.push(a), n; } else {
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 20 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 20 28 65 5b 74 20 2b 20 27 20 27 5d 20 3d 20 6e 29 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 7d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 65 5b 53 5d 20 3d 20 21 30 29 2c 20 65 3b 0a 20 20 20 20 7d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 66 69 65 6c 64 73 65 74 27 29 3b 0a 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 65 28 74 29 3b 0a 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 31 3b 0a 20 20 20 20 20 20 Data Ascii: delete e[r.shift()], (e[t + ' '] = n); }; } function le(e) { return (e[S] = !0), e; } function ce(e) { var t = C.createElement('fieldset'); try { return !!e(t); } catch (e) { return !1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49923	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:02 UTC	747	OUT	GET /assets/shared/checkout/img/logos/ads.png HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:02 UTC	418	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: b0f2a6c279a3474cbc8e0f0606fce539 server: Google Frontend Content-Length: 94052 via: 1.1 google date: Tue, 17 Dec 2024 17:20:02 GMT Last-Modified: Mon, 16 Dec 2024 14:33:03 GMT ETag: W/"16f64-193cfe30918" Content-Type: image/png Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:02 UTC	972	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 01 41 08 06 00 00 00 e4 2f 85 eb 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec bd 77 9c 5c 57 7d f7 ff 39 e7 b6 a9 db bb 56 bb 2b ed aa 77 db b2 e4 de 71 c5 60 3a 84 10 08 a4 40 02 3c 0f 49 48 78 20 09 04 02 09 c9 2f 79 c8 93 04 02 a1 24 74 63 08 06 8c 6d 5c 64 cb 96 ac 66 f5 55 df 5d 69 7b 9b dd 9d 3e b7 9c 73 7e 7f 9c 99 6d da 32 23 cb d6 ca 3a 6f bf c6 3b 9a b9 e5 dc 73 ef dc 7b 3e e7 db 88 10 02 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 2e 2d f4 52 37 40 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 12 e8 0a 85 42 a1 50 28 14 0a 85 42 a1 50 2c 08 94 40 57 28 14 0a 85 42 a1 50 28 14 0a 85 62 01 a0 04 ba 42 a1 50 28 14 0a 85 42 a1 50 28 14 0b 00 25 d0 15 0a Data Ascii: PNGIHDRA/bKGDIDATxw\W}9V+wq`:@<IHx /y$tcm\dfU]i{>s~m2#:o;s{>BP(BP(.-R7@P(BP(BP(BP,@W(BP(bBP(BP(%
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 28 c7 c8 c8 18 74 5d 43 51 51 11 82 c1 20 3c cf 03 08 41 75 55 15 8a 4b 8a 01 21 a6 1c 27 e7 1c 62 d2 67 84 10 b8 9e 87 81 fe 01 0c 0d 0f c3 30 4c 38 76 06 a9 54 0a 9e c7 90 4a 25 51 5c 5c 0c 01 20 1e 8b a1 bc bc 02 84 00 c1 40 00 8b 16 2f c6 63 8f fd 1a 55 95 95 d0 75 0d ba ae c3 63 0c 82 73 78 1e 43 3a 9d 42 4d 75 35 12 c9 64 76 df 02 96 cf 82 cf b2 b0 a4 b9 19 c1 60 10 7e cb 04 a5 97 70 8e 97 52 90 c1 76 90 73 7b 00 db 06 4a ea 81 d2 1a 20 15 07 6a 97 83 07 4a 5e d1 e6 09 21 70 5c 17 8e ed c0 25 3a ba 13 2e 5c 42 d1 9f e6 a5 07 fb d3 f7 b7 8d d8 f7 47 6d be 29 6a f3 ca b2 80 36 5c 62 d2 d6 a5 c5 c6 f6 c6 b0 f1 3f e5 61 fd 5c c8 20 e8 8a 7a a8 0d 6a b8 79 51 00 2e 17 b3 ee cb 30 8c 4b d7 8f 0a 85 42 a1 50 28 16 14 4a a0 2b 14 0a 85 42 31 07 86 46 a0 81 Data Ascii: (t]CQQ <AuUK!'bg0L8vTJ%Q\\ @/cUucsxC:BMu5dv`~pRvs{J jJ^!p\%:.\BGm)j6\b?a\ zjyQ.0KBP(J+B1F
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 80 a6 51 1c 1a 1e bc 57 e8 14 1e a1 10 44 5a bd 05 19 4f cd 2e ad e0 53 ac e8 44 26 85 13 02 20 04 44 00 94 4c b8 b8 53 21 90 35 a4 83 c8 45 40 04 c1 d1 a1 4c 49 86 c6 31 d9 82 7e cb 92 92 4b dd 59 0a 85 42 a1 50 28 16 08 4a a0 2b 14 0a 85 e2 75 89 10 02 01 83 a2 c8 a2 70 18 cf 5a bc a7 42 29 90 76 59 b0 6d cc 59 4d 34 0a 8f 4a eb 39 30 49 a0 03 93 8b 9e e7 36 2e 5d db 49 ce b5 5d fe 9b 66 8d ec 9a c8 66 75 17 00 e5 59 eb ba 46 d1 39 92 31 e2 29 0f 1c 2a 49 9c 42 a1 50 28 14 8a f3 51 02 5d a1 50 28 14 af 5b 72 75 c8 85 00 28 11 e7 c9 62 02 82 a1 a4 57 37 e4 b0 6a a1 11 30 4a c6 2d e6 82 c8 58 74 31 75 85 ac a7 bb 14 ec 14 32 0e 1d 44 5a d4 99 10 20 42 80 13 99 3c 4e 03 20 a8 6c 80 c7 05 16 95 07 9c 96 4a 1f 5c 95 c5 5d a1 50 28 14 0a c5 0c 28 81 ae 50 28 Data Ascii: QWDZO.SD& DLS!5E@LI1~KYBP(J+upZB)vYmYM4J90I6.]I]ffuYF91)*IBP(Q]P([ru(bW7j0J-Xt1u2DZ B<N lJ\]P((P(
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 94 c0 cb 95 3c cf 5a cc c7 ff 42 4c f2 18 98 2c d2 85 1c a8 21 57 5e 0d d0 05 81 95 13 e5 42 40 17 04 8c 03 96 ae f1 d1 94 3b 7c 7a 30 35 25 06 fd aa ba d0 6b de 87 97 02 c6 d8 2b df c8 34 0c c3 80 6d db 75 87 0e 1d ba db f3 bc 9a 7c db d1 d5 d5 75 5d 7f 7f ff d5 a3 a3 a3 cf 65 32 99 cc 85 08 d6 d9 70 5d 17 ba ae 63 f9 f2 e5 30 4d f3 a2 1f f3 2b 69 d7 bb df fd 6e 1c 3d 7a 14 3b 77 ee 44 30 18 2c 74 13 1a 80 22 00 d5 00 f2 3d b0 20 80 30 26 45 86 28 14 f9 22 38 a0 5b 04 a1 22 1d a9 98 07 2e 0a 70 dc 12 08 02 a8 82 bc fe e6 73 53 32 01 94 22 cf eb 94 73 29 0c 7d 41 2a 27 40 54 4e 91 82 a1 14 88 f6 79 48 0c f2 d9 22 d4 f2 c2 73 05 6a 56 58 18 3c 6d 2f ef e9 b4 ef 22 42 94 d1 79 15 bf 80 07 01 53 a3 28 f3 e9 91 4b dd 17 33 a1 04 ba 42 a1 50 28 0a 43 00 9e e1 Data Ascii: <ZBL,!W^B@;\|z05%k+4mu\|u]e2p]c0M+in=z;wD0,t"= 0&E("8[".psS2"s)}A*'@TNyH"sjVX<m/"ByS(K3BP(C
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 2a 75 a1 9b 19 87 31 76 a1 ae e3 af 09 b9 84 75 9c 73 84 c3 aa 7a 80 e2 f2 42 30 01 dd ca ba bb 8f b9 78 95 9e 30 33 92 88 31 a4 52 0c 95 35 05 79 9d 28 e6 80 50 20 5c 4b c1 d2 1c a4 d0 38 f4 ec 2d 96 b9 a8 1e e8 72 b6 8c 39 5e 30 48 b4 bc ae 87 8c e0 58 5a 62 9d 5a b6 c5 ff 4b c3 a2 a3 97 ba 1f 66 62 c1 0a 74 00 5f 03 50 97 7d 9f 0b 0e bb 58 bf 43 91 e7 e7 73 2d 97 13 a2 cf 03 f8 38 ce cb 10 f9 ba 87 40 5e 3f 46 f6 55 0e 29 c2 1b 00 2c c9 be 9a 01 d4 40 0e 95 2d 00 81 ec b2 c7 f1 da dd 53 15 0a c5 ab 85 10 60 76 06 9e e3 80 70 03 a9 e8 18 1e fd cd 6f 90 18 bc 11 b7 de 7c 03 28 21 e0 9e 77 f1 7f ed 44 03 6a 97 1c 84 9b 02 5c 06 38 31 c0 15 13 4f 0a 1d 52 14 9b 00 5e 7e f6 2e f2 83 2f 7c 8e ff fe 3f fd 85 60 1e 7c 06 c1 1f 6c 28 47 eb 90 0d 4b 23 08 e8 04 Data Ascii: *u1vuszB0x031R5y(P \K8-r9^0HXZbZKfbt_P}XCs-8@^?FU),@-S`vpo\|(!wDj\81OR^~./\|?`\|l(GK#
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 23 04 e0 9e 08 b7 3e 93 7c db 70 cc 5d 92 7b dc cf e5 b7 24 20 2d 84 26 a1 68 5c e3 db 5d bf de 3a 31 74 ce 5d b0 21 0b 0b 59 a0 c7 b3 af 1e 00 87 00 3c 03 99 0c f7 a3 98 b1 a6 e1 9c 9c 03 f0 cf 00 ba 71 be 98 9e 2c d0 0d 00 65 00 56 41 ba d8 5f 8d f9 85 64 2e 06 fb 4a 21 0a e0 2b 00 7e 03 39 71 f2 36 00 f7 14 b8 0d 35 02 50 28 ae 00 74 5d 87 ae 6b 70 1c 07 36 04 46 e2 09 38 b6 83 a6 ba 2a 84 2c 8a 80 a5 83 33 76 61 a5 d9 98 01 71 fd dd 0f 93 1f 7f f6 73 48 c4 cb c7 ad e7 33 b9 b9 e7 84 fa 13 7f ff 67 e4 a6 77 7d 47 04 8b a3 15 16 c7 ea 30 05 07 90 f1 f8 28 74 c2 01 42 e5 b2 14 33 26 8b 9b ce 79 c9 e1 b2 71 e8 b9 91 02 cd 8a 77 53 73 de b8 28 f0 cc d2 b0 01 f7 95 cd 4a 5c d6 0c 0f 0f bf e2 6d 50 4a 11 0c 06 ad 3d 7b f6 bc 61 68 68 68 f1 c5 68 d7 d8 d8 58 Data Ascii: #>\|p]{$ -&h\]:1t]!Y<q,eVA_d.J!+~9q65P(t]kp6F8*,3vaqsH3gw}G0(tB3&yqwSs(J\mPJ={ahhhhX
2024-12-17 17:20:02 UTC	1390	IN	Data Raw: 63 b1 58 c8 75 5d 2b 1e 8f f3 13 27 4e a4 4d d3 4c 74 74 74 44 01 f4 15 15 15 9d f1 f9 7c 27 02 81 c0 01 ce f9 60 3e 13 0d 42 08 64 32 19 7c e2 13 9f c0 77 be f3 1d ec d8 b1 43 59 d1 5f 27 88 0b 8c 1e ba 68 10 79 4b cc a1 e9 44 13 1c 25 9c a1 4a 08 14 03 f0 01 c2 e3 0c 63 9c 8b 01 42 31 02 21 c7 87 f4 02 46 d5 02 80 ae 13 ac bd 37 8c 27 7f 14 81 31 ab 9b fb e4 35 26 96 11 02 70 5c 81 ca 12 03 56 80 c2 4b 09 68 06 a1 42 a0 86 31 51 05 59 13 84 70 86 24 f3 30 48 29 06 09 81 7d 31 4a af 8d 0b dc 5c 2a 13 0a 68 3a 29 e2 0c e5 9c a3 54 c8 e9 65 4d 00 1e 63 88 73 81 51 dd 24 c3 54 43 5a 64 3d f4 5f 0d d1 3e 6e cd 16 b9 79 6b 12 60 0c 65 9c a1 14 42 14 41 ea 48 ce 39 52 cc 13 23 a6 8f 46 28 45 2c 77 1c 94 e6 df 2e 32 dd 37 68 96 53 e6 2f a6 60 9e 58 71 ec 48 f2 Data Ascii: cXu]+'NMLtttD\|'`>Bd2\|wCY_'hyKD%JcB1!F7'15&p\VKhB1QYp$0H)}1J\*h:)TeMcsQ$TCZd=_>nyk`eBAH9R#F(E,w.27hS/`XqH
2024-12-17 17:20:03 UTC	1390	IN	Data Raw: 68 ba cb cf 2b 23 95 95 a2 42 10 97 43 cf 70 3e b4 3e 1e fc 73 ee e8 4f da e9 a9 aa 8d 10 80 39 42 5a d8 27 7d 2e 00 98 26 41 77 a7 7b 47 4f b7 fd 97 89 34 0b 1b 94 7a 94 60 52 61 cc 09 b1 4b 00 24 99 67 2d 0e fb ce 14 57 eb ff 42 35 ec 27 00 fc 45 1a 28 01 74 9d d4 a6 53 fc 8e 53 07 53 77 46 06 dc 4d fd 23 f6 9a 14 17 9a 10 02 06 a1 30 00 c4 3c 0f 91 51 17 02 04 21 5d 13 19 f0 23 d1 98 f7 82 06 fc d2 1f a6 4f c6 22 6c 53 64 c4 fd 6c 22 ed 85 0c a2 65 05 fa d4 36 78 5c e8 2e 11 a8 1b 75 1f 8b 0d 69 ff 9c 1a f5 c6 0a ae 77 2e e0 05 c3 5a bc e5 3a bf 37 d2 ed dc d6 d9 9e 79 7b 57 4f e6 d6 98 e3 ad 48 72 46 29 08 2c 42 41 00 24 92 1e bc 84 80 9f 6a 28 0f e9 ed f4 25 b1 bd a2 d6 fc a5 61 d1 5f 13 82 4c be fb 24 00 9c b4 80 af 88 42 d3 c8 86 ae d3 99 3b 1c 4f Data Ascii: h+#BCp>>sO9BZ'}.&Aw{GO4z`RaK$g-WB5'E(tSSSwFM#0<Q!]#O"lSdl"e6x\.uiw.Z:7y{WOHrF),BA$j(%a_L$B;O
2024-12-17 17:20:03 UTC	1390	IN	Data Raw: 34 1f 4e 9c 38 b1 f1 d4 a9 53 1b d7 ae 5d 7b 7f 3a 9d fe 42 30 18 dc 49 08 99 e2 ce 40 29 45 3c 1e 87 e7 79 28 2d 2d 85 10 e2 82 eb c1 2b 2e 3e 4b af f6 3d d6 f8 bc 75 df 70 cc 6d 12 20 30 ce 2b 27 35 f1 2f 4a 34 a4 05 a7 ed ad 99 5b 9b d6 f9 7e 59 52 af f7 05 4b 35 88 ec c8 4b 08 20 54 41 41 2d 02 92 fd 8c 03 d0 0d 82 ee 43 f6 e6 ae 33 f6 35 14 04 be 9c 00 22 e7 57 27 16 00 5c c1 50 a1 1b f6 d2 95 be ed 15 4d c6 99 74 8c 43 d3 88 11 1b 61 b7 1c 7d 31 f1 7f 8e 74 24 6f d2 04 74 5f b6 7a 25 30 7b 4c 38 01 01 05 10 20 14 1e 04 3a 22 99 ab 1e fb 76 e4 ff 06 fd da 98 41 a9 ed 27 5a 48 03 cd 16 d3 98 6a 41 07 11 20 44 08 8d 12 47 33 08 27 b4 30 2b 10 05 01 21 f0 f5 f7 d9 f7 9e 6e 4b fd fe 98 e3 56 eb 84 60 be d8 66 d9 47 1a 38 04 4e 0d a7 56 d9 fb f8 17 b6 96 Data Ascii: 4N8S]{:B0I@)E<y(--+.>K=upm 0+'5/J4[~YRK5K TAA-C35"W'\PMtCa}1t$ot_z%0{L8 :"vA'ZHjA DG3'0+!nKV`fG8NV
2024-12-17 17:20:03 UTC	1390	IN	Data Raw: e4 c9 d5 fd fd fd 1b ca cb cb 4f 8c 8e 8e ba b3 0d f8 39 e7 30 4d 13 1b 37 6e 44 20 10 98 33 b1 9a 10 02 a6 69 c2 b2 ac c6 ff fa af ff fa 9b 97 5e 7a e9 81 d1 d1 d1 57 56 77 ae 40 18 63 46 5b 5b db ca 6f 7d eb 5b 5f 4a a7 d3 15 ef 7b df fb fe 6d b2 48 e7 9c c3 ef f7 23 10 08 60 64 64 04 d5 d5 d5 e3 e5 e3 14 97 16 aa 13 b6 fc c6 c0 13 ed 47 32 0f f4 1d cf 2c 16 73 e4 26 26 90 ae e3 71 c6 ad 8e 23 e9 9b 9b b7 f8 7f 15 aa d0 4e e4 ce 23 21 40 b4 d7 83 93 99 48 12 47 28 20 38 96 b6 1d 4a 5d 1b 63 9e 19 26 fa 24 09 36 55 90 49 2b 8b 80 8f 50 d1 b2 21 f0 6c c5 12 63 b7 bf 9c 20 3a 20 ae 7e f1 d1 b1 bf 3a 33 98 be c6 10 d2 3d bc 50 cb 55 ce 75 5f cb fe 4b 08 a1 73 51 88 9b aa 98 e5 b3 b9 05 25 17 82 72 01 9a 13 95 85 62 82 c2 01 c7 d9 fe f4 86 5d 8f c4 fe e8 81 Data Ascii: O90M7nD 3i^zWVw@cF[[o}[_J{mH#`ddG2,s&&q#N#!@HG( 8J]c&$6UI+P!lc : ~:3=PUu_KsQ%rb]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49921	151.101.194.217	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:02 UTC	366	OUT	GET /7.23.0/bundle.min.js HTTP/1.1 Host: browser.sentry-cdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:02 UTC	448	IN	HTTP/1.1 200 OK Connection: close Content-Length: 56154 Expires: Wed, 05 Nov 2025 11:17:09 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 01 Dec 2022 16:53:49 GMT Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Tue, 17 Dec 2024 17:20:02 GMT Age: 637229 Vary: Accept-Encoding Access-Control-Allow-Origin: * Server: Fastly Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 2f 2a 21 20 40 73 65 6e 74 72 79 2f 62 72 6f 77 73 65 72 20 37 2e 32 33 2e 30 20 28 30 33 65 36 61 32 61 29 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 73 65 6e 74 72 79 2d 6a 61 76 61 73 63 72 69 70 74 20 2a 2f 0a 76 61 72 20 53 65 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 73 77 69 74 63 68 28 6e 2e 63 61 6c 6c 28 74 29 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 78 63 65 70 74 69 6f 6e 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e 5d 22 3a 72 65 74 Data Ascii: /! @sentry/browser 7.23.0 (03e6a2a) \| https://github.com/getsentry/sentry-javascript /var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":ret
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 5b 5d 3b 6c 65 74 20 69 2c 73 2c 63 2c 75 2c 61 3b 69 66 28 21 65 7c 7c 21 65 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 22 22 3b 72 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 63 6f 6e 73 74 20 66 3d 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 6e 2e 66 69 6c 74 65 72 28 28 74 3d 3e 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 29 29 2e 6d 61 70 28 28 74 3d 3e 5b 74 2c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 5d 29 29 3a 6e 75 6c 6c 3b 69 66 28 66 26 26 66 2e 6c 65 6e 67 74 68 29 66 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 72 2e 70 75 73 68 28 60 5b 24 7b 74 5b 30 5d 7d 3d 22 24 7b 74 5b 31 5d 7d 22 5d 60 29 7d 29 29 3b 65 6c 73 65 20 69 66 28 65 2e 69 64 26 26 72 2e 70 75 73 68 28 60 23 24 7b 65 Data Ascii: [];let i,s,c,u,a;if(!e\|\|!e.tagName)return"";r.push(e.tagName.toLowerCase());const f=n&&n.length?n.filter((t=>e.getAttribute(t))).map((t=>[t,e.getAttribute(t)])):null;if(f&&f.length)f.forEach((t=>{r.push(`[${t[0]}="${t[1]}"]`)}));else if(e.id&&r.push(`#${e
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 70 72 6f 74 6f 63 6f 6c 3a 65 2c 70 75 62 6c 69 63 4b 65 79 3a 72 7d 29 7d 28 74 29 3a 45 28 74 29 7d 63 6f 6e 73 74 20 24 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 2c 22 61 73 73 65 72 74 22 2c 22 74 72 61 63 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 78 28 74 2c 6e 3d 30 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 30 3d 3d 3d 6e 7c 7c 74 2e 6c 65 6e 67 74 68 3c 3d 6e 3f 74 3a 60 24 7b 74 2e 73 75 62 73 74 72 28 30 2c 6e 29 7d 2e 2e 2e 60 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 2c 6e 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c Data Ascii: protocol:e,publicKey:r})}(t):E(t)}const $=["debug","info","warn","error","log","assert","trace"];function x(t,n=0){return"string"!=typeof t\|\|0===n\|\|t.length<=n?t:`${t.substr(0,n)}...`}function j(t,n){if(!Array.isArray(t))return"";const e=[];for(let n=0;n<
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 6e 3d 34 30 29 7b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 43 28 74 29 29 3b 69 66 28 65 2e 73 6f 72 74 28 29 2c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 68 61 73 20 6e 6f 20 6b 65 79 73 5d 22 3b 69 66 28 65 5b 30 5d 2e 6c 65 6e 67 74 68 3e 3d 6e 29 72 65 74 75 72 6e 20 78 28 65 5b 30 5d 2c 6e 29 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 3b 74 3e 30 3b 74 2d 2d 29 7b 63 6f 6e 73 74 20 72 3d 65 2e 73 6c 69 63 65 28 30 2c 74 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 3b 69 66 28 21 28 72 2e 6c 65 6e 67 74 68 3e 6e 29 29 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 72 3a 78 28 72 2c 6e Data Ascii: );return n}return{}}function N(t,n=40){const e=Object.keys(C(t));if(e.sort(),!e.length)return"[object has no keys]";if(e[0].length>=n)return x(e[0],n);for(let t=e.length;t>0;t--){const r=e.slice(0,t).join(", ");if(!(r.length>n))return t===e.length?r:x(r,n
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 69 6f 6e 20 46 28 29 7b 69 66 28 21 28 22 66 65 74 63 68 22 69 6e 20 42 29 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 48 65 61 64 65 72 73 2c 6e 65 77 20 52 65 71 75 65 73 74 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 29 2c 6e 65 77 20 52 65 73 70 6f 6e 73 65 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 2f 5e 66 75 6e 63 74 69 6f 6e 20 66 65 74 63 68 5c 28 5c 29 5c 73 2b 5c 7b 5c 73 2b 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 5c 73 2b 5c 7d 24 2f 2e 74 65 73 74 28 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 6f 6e 73 74 20 7a 3d 70 28 29 2c 57 3d 7b 7d 2c 4a 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e Data Ascii: ion F(){if(!("fetch"in B))return!1;try{return new Headers,new Request("http://www.example.com"),new Response,!0}catch(t){return!1}}function X(t){return t&&/^function fetch\s+\{\s+\[native code\]\s+\}$/.test(t.toString())}const z=p(),W={},J={};function
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 69 29 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 2e 5f 5f 73 65 6e 74 72 79 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 5f 68 61 6e 64 6c 65 72 73 5f 5f 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 65 2c 72 29 7d 7d 29 29 29 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 78 68 72 22 3a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 69 6e 20 7a 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 70 72 6f 74 6f 74 79 70 65 3b 54 28 74 2c 22 6f 70 65 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e Data Ascii: =Object.keys(i).length&&delete e.__sentry_instrumentation_handlers__)}catch(t){}return t.call(this,n,e,r)}})))}))}();break;case"xhr":!function(){if(!("XMLHttpRequest"in z))return;const t=XMLHttpRequest.prototype;T(t,"open",(function(t){return function(...
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 28 2e 2e 2e 6e 29 7b 63 6f 6e 73 74 20 65 3d 7b 61 72 67 73 3a 6e 2c 66 65 74 63 68 44 61 74 61 3a 7b 6d 65 74 68 6f 64 3a 59 28 6e 29 2c 75 72 6c 3a 51 28 6e 29 7d 2c 73 74 61 72 74 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 3b 72 65 74 75 72 6e 20 56 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 7d 29 2c 74 2e 61 70 70 6c 79 28 7a 2c 6e 29 2e 74 68 65 6e 28 28 74 3d 3e 28 56 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 72 65 73 70 6f 6e 73 65 3a 74 7d 29 2c 74 29 29 2c 28 74 3d 3e 7b 74 68 72 6f 77 20 56 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 65 72 72 6f 72 3a 74 7d 29 2c 74 7d 29 29 7d 7d Data Ascii: (...n){const e={args:n,fetchData:{method:Y(n),url:Q(n)},startTimestamp:Date.now()};return V("fetch",{...e}),t.apply(z,n).then((t=>(V("fetch",{...e,endTimestamp:Date.now(),response:t}),t)),(t=>{throw V("fetch",{...e,endTimestamp:Date.now(),error:t}),t}))}}
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 74 68 6f 64 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 22 47 45 54 22 7d 66 75 6e 63 74 69 6f 6e 20 51 28 74 3d 5b 5d 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 5b 30 5d 3f 74 5b 30 5d 3a 22 52 65 71 75 65 73 74 22 69 6e 20 7a 26 26 68 28 74 5b 30 5d 2c 52 65 71 75 65 73 74 29 3f 74 5b 30 5d 2e 75 72 6c 3a 53 74 72 69 6e 67 28 74 5b 30 5d 29 7d 6c 65 74 20 5a 3b 6c 65 74 20 74 74 2c 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 2c 6e 3d 21 31 29 7b 72 65 74 75 72 6e 20 65 3d 3e 7b 69 66 28 21 65 7c 7c 6e 74 3d 3d 3d 65 29 72 65 74 75 72 6e 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 6b 65 79 70 72 65 73 73 22 21 3d 3d 74 2e 74 79 70 65 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 63 6f 6e 73 74 20 6e Data Ascii: thod).toUpperCase():"GET"}function Q(t=[]){return"string"==typeof t[0]?t[0]:"Request"in z&&h(t[0],Request)?t[0].url:String(t[0])}let Z;let tt,nt;function et(t,n=!1){return e=>{if(!e\|\|nt===e)return;if(function(t){if("keypress"!==t.type)return!1;try{const n
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 61 74 28 74 2c 6e 29 7b 63 6f 6e 73 74 20 65 3d 6f 74 28 74 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6d 65 63 68 61 6e 69 73 6d 3b 69 66 28 65 2e 6d 65 63 68 61 6e 69 73 6d 3d 7b 74 79 70 65 3a 22 67 65 6e 65 72 69 63 22 2c 68 61 6e 64 6c 65 64 3a 21 30 2c 2e 2e 2e 72 2c 2e 2e 2e 6e 7d 2c 6e 26 26 22 64 61 74 61 22 69 6e 20 6e 29 7b 63 6f 6e 73 74 20 74 3d 7b 2e 2e 2e 72 26 26 72 2e 64 61 74 61 2c 2e 2e 2e 6e 2e 64 61 74 61 7d 3b 65 2e 6d 65 63 68 61 6e 69 73 6d 2e 64 61 74 61 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 74 28 74 29 7b 69 66 28 74 26 26 74 2e 5f 5f 73 65 6e 74 72 79 5f 63 61 70 74 75 72 65 64 5f 5f 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 44 28 74 2c 22 5f 5f 73 65 6e 74 72 79 5f 63 Data Ascii: unction at(t,n){const e=ot(t);if(!e)return;const r=e.mechanism;if(e.mechanism={type:"generic",handled:!0,...r,...n},n&&"data"in n){const t={...r&&r.data,...n.data};e.mechanism.data=t}}function ft(t){if(t&&t.__sentry_captured__)return!0;try{D(t,"__sentry_c
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 22 69 6e 20 74 7d 28 6e 29 3f 22 5b 53 79 6e 74 68 65 74 69 63 45 76 65 6e 74 5d 22 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 21 3d 6e 3f 22 5b 4e 61 4e 5d 22 3a 76 6f 69 64 20 30 3d 3d 3d 6e 3f 22 5b 75 6e 64 65 66 69 6e 65 64 5d 22 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 60 5b 46 75 6e 63 74 69 6f 6e 3a 20 24 7b 48 28 6e 29 7d 5d 60 3a 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 60 5b 24 7b 53 74 72 69 6e 67 28 6e 29 7d 5d 60 3a 22 62 69 67 69 6e 74 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 60 5b 42 69 67 49 6e 74 3a 20 24 7b 53 74 72 69 6e 67 28 6e 29 7d 5d 60 3a 60 5b 6f 62 6a 65 63 74 20 24 7b 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f Data Ascii: topPropagation"in t}(n)?"[SyntheticEvent]":"number"==typeof n&&n!=n?"[NaN]":void 0===n?"[undefined]":"function"==typeof n?`[Function: ${H(n)}]`:"symbol"==typeof n?`[${String(n)}]`:"bigint"==typeof n?`[BigInt: ${String(n)}]`:`[object ${Object.getPrototypeO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49922	151.101.194.217	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:02 UTC	374	OUT	GET /7.23.0/bundle.tracing.min.js HTTP/1.1 Host: browser.sentry-cdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:02 UTC	546	IN	HTTP/1.1 200 OK Connection: close Content-Length: 78134 Cache-Control: public, max-age=31536000 Expires: Wed, 10 Dec 2025 08:19:34 GMT Last-Modified: Thu, 01 Dec 2022 16:53:50 GMT ETag: W/"9ed0185da60ba567f2c15e4af20b2e39" Content-Type: application/javascript; charset=utf-8 X-GUploader-Response-Body-Transformations: gunzipped Accept-Ranges: bytes Age: 637228 Date: Tue, 17 Dec 2024 17:20:02 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: * Server: Fastly Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 2f 2a 21 20 40 73 65 6e 74 72 79 2f 74 72 61 63 69 6e 67 20 26 20 40 73 65 6e 74 72 79 2f 62 72 6f 77 73 65 72 20 37 2e 32 33 2e 30 20 28 30 33 65 36 61 32 61 29 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 73 65 6e 74 72 79 2d 6a 61 76 61 73 63 72 69 70 74 20 2a 2f 0a 76 61 72 20 53 65 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 73 77 69 74 63 68 28 6e 2e 63 61 6c 6c 28 74 29 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 78 63 65 70 74 69 6f 6e 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 Data Ascii: /! @sentry/tracing & @sentry/browser 7.23.0 (03e6a2a) \| https://github.com/getsentry/sentry-javascript /var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 6f 69 6e 28 75 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 3c 75 6e 6b 6e 6f 77 6e 3e 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 2c 6e 29 7b 63 6f 6e 73 74 20 65 3d 74 2c 69 3d 5b 5d 3b 6c 65 74 20 72 2c 73 2c 63 2c 75 2c 61 3b 69 66 28 21 65 7c 7c 21 65 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 22 22 3b 69 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 63 6f 6e 73 74 20 68 3d 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 6e 2e 66 69 6c 74 65 72 28 28 74 3d 3e 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 29 29 2e 6d 61 70 28 28 74 3d 3e 5b 74 2c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 5d 29 29 3a 6e 75 6c 6c 3b 69 66 28 68 26 26 68 2e 6c 65 6e 67 74 68 29 68 2e 66 6f 72 45 61 63 68 28 28 Data Ascii: oin(u)}catch(t){return"<unknown>"}}function _(t,n){const e=t,i=[];let r,s,c,u,a;if(!e\|\|!e.tagName)return"";i.push(e.tagName.toLowerCase());const h=n&&n.length?n.filter((t=>e.getAttribute(t))).map((t=>[t,e.getAttribute(t)])):null;if(h&&h.length)h.forEach((
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 3b 74 26 26 28 61 3d 74 5b 30 5d 29 7d 72 65 74 75 72 6e 20 45 28 7b 68 6f 73 74 3a 73 2c 70 61 73 73 3a 72 2c 70 61 74 68 3a 75 2c 70 72 6f 6a 65 63 74 49 64 3a 61 2c 70 6f 72 74 3a 6f 2c 70 72 6f 74 6f 63 6f 6c 3a 65 2c 70 75 62 6c 69 63 4b 65 79 3a 69 7d 29 7d 28 74 29 3a 45 28 74 29 7d 63 6f 6e 73 74 20 24 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 2c 22 61 73 73 65 72 74 22 2c 22 74 72 61 63 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 78 28 74 2c 6e 3d 30 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 30 3d 3d 3d 6e 7c 7c 74 2e 6c 65 6e 67 74 68 3c 3d 6e 3f 74 3a 60 24 7b 74 2e 73 75 62 73 74 72 28 30 2c 6e 29 7d 2e 2e 2e 60 7d 66 75 6e 63 74 69 6f 6e Data Ascii: ;t&&(a=t[0])}return E({host:s,pass:r,path:u,projectId:a,port:o,protocol:e,publicKey:i})}(t):E(t)}const $=["debug","info","warn","error","log","assert","trace"];function x(t,n=0){return"string"!=typeof t\|\|0===n\|\|t.length<=n?t:`${t.substr(0,n)}...`}function
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 73 74 20 65 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 26 26 28 6e 5b 65 5d 3d 74 5b 65 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 6e 3d 34 30 29 7b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 4d 28 74 29 29 3b 69 66 28 65 2e 73 6f 72 74 28 29 2c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 68 61 73 20 6e 6f 20 6b 65 79 73 5d 22 3b 69 66 28 65 5b 30 5d 2e 6c 65 6e 67 74 68 3e 3d 6e 29 72 65 74 75 72 6e 20 78 28 65 5b 30 5d 2c 6e 29 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 3b 74 3e 30 3b 74 2d 2d 29 7b 63 6f 6e 73 74 20 69 3d 65 2e 73 6c 69 Data Ascii: st e in t)Object.prototype.hasOwnProperty.call(t,e)&&(n[e]=t[e]);return n}return{}}function N(t,n=40){const e=Object.keys(M(t));if(e.sort(),!e.length)return"[object has no keys]";if(e[0].length>=n)return x(e[0],n);for(let t=e.length;t>0;t--){const i=e.sli
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 6e 61 6d 65 7c 7c 48 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 48 7d 7d 63 6f 6e 73 74 20 42 3d 6d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 58 28 29 7b 69 66 28 21 28 22 66 65 74 63 68 22 69 6e 20 42 29 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 48 65 61 64 65 72 73 2c 6e 65 77 20 52 65 71 75 65 73 74 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 29 2c 6e 65 77 20 52 65 73 70 6f 6e 73 65 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 2f 5e 66 75 6e 63 74 69 6f 6e 20 66 65 74 63 68 5c 28 5c 29 5c 73 2b 5c 7b 5c 73 2b 5c 5b 6e 61 74 69 76 65 20 Data Ascii: tion"==typeof t&&t.name\|\|H}catch(t){return H}}const B=m();function X(){if(!("fetch"in B))return!1;try{return new Headers,new Request("http://www.example.com"),new Response,!0}catch(t){return!1}}function z(t){return t&&/^function fetch\s+\{\s+\[native
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 26 26 28 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 73 2e 68 61 6e 64 6c 65 72 2c 69 29 2c 73 2e 68 61 6e 64 6c 65 72 3d 76 6f 69 64 20 30 2c 64 65 6c 65 74 65 20 72 5b 6e 5d 29 2c 30 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 2e 5f 5f 73 65 6e 74 72 79 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 5f 68 61 6e 64 6c 65 72 73 5f 5f 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 65 2c 69 29 7d 7d 29 29 29 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 78 68 72 22 3a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 69 6e 20 57 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 58 4d 4c 48 74 Data Ascii: &&(t.call(this,n,s.handler,i),s.handler=void 0,delete r[n]),0===Object.keys(r).length&&delete e.__sentry_instrumentation_handlers__)}catch(t){}return t.call(this,n,e,i)}})))}))}();break;case"xhr":!function(){if(!("XMLHttpRequest"in W))return;const t=XMLHt
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 28 29 29 72 65 74 75 72 6e 3b 52 28 57 2c 22 66 65 74 63 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 6e 29 7b 63 6f 6e 73 74 20 65 3d 7b 61 72 67 73 3a 6e 2c 66 65 74 63 68 44 61 74 61 3a 7b 6d 65 74 68 6f 64 3a 51 28 6e 29 2c 75 72 6c 3a 5a 28 6e 29 7d 2c 73 74 61 72 74 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 3b 72 65 74 75 72 6e 20 59 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 7d 29 2c 74 2e 61 70 70 6c 79 28 57 2c 6e 29 2e 74 68 65 6e 28 28 74 3d 3e 28 59 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 72 65 73 70 6f 6e 73 65 3a 74 7d 29 2c 74 29 29 2c 28 74 3d 3e Data Ascii: t){}return t}())return;R(W,"fetch",(function(t){return function(...n){const e={args:n,fetchData:{method:Q(n),url:Z(n)},startTimestamp:Date.now()};return Y("fetch",{...e}),t.apply(W,n).then((t=>(Y("fetch",{...e,endTimestamp:Date.now(),response:t}),t)),(t=>
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 3f 53 74 72 69 6e 67 28 74 5b 30 5d 2e 6d 65 74 68 6f 64 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 74 5b 31 5d 26 26 74 5b 31 5d 2e 6d 65 74 68 6f 64 3f 53 74 72 69 6e 67 28 74 5b 31 5d 2e 6d 65 74 68 6f 64 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 22 47 45 54 22 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 74 3d 5b 5d 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 5b 30 5d 3f 74 5b 30 5d 3a 22 52 65 71 75 65 73 74 22 69 6e 20 57 26 26 6c 28 74 5b 30 5d 2c 52 65 71 75 65 73 74 29 3f 74 5b 30 5d 2e 75 72 6c 3a 53 74 72 69 6e 67 28 74 5b 30 5d 29 7d 6c 65 74 20 74 74 3b 6c 65 74 20 6e 74 2c 65 74 3b 66 75 6e 63 74 69 6f 6e 20 69 74 28 74 2c 6e 3d 21 31 29 7b 72 65 74 75 72 6e 20 65 3d 3e 7b 69 66 28 21 65 7c 7c 65 74 3d 3d Data Ascii: ?String(t[0].method).toUpperCase():t[1]&&t[1].method?String(t[1].method).toUpperCase():"GET"}function Z(t=[]){return"string"==typeof t[0]?t[0]:"Request"in W&&l(t[0],Request)?t[0].url:String(t[0])}let tt;let nt,et;function it(t,n=!1){return e=>{if(!e\|\|et==
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 72 5b 30 5d 3d 72 5b 30 5d 7c 7c 7b 7d 3b 73 2e 76 61 6c 75 65 7c 7c 28 73 2e 76 61 6c 75 65 3d 6e 7c 7c 22 22 29 2c 73 2e 74 79 70 65 7c 7c 28 73 2e 74 79 70 65 3d 65 7c 7c 22 45 72 72 6f 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 74 28 74 2c 6e 29 7b 63 6f 6e 73 74 20 65 3d 63 74 28 74 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 69 3d 65 2e 6d 65 63 68 61 6e 69 73 6d 3b 69 66 28 65 2e 6d 65 63 68 61 6e 69 73 6d 3d 7b 74 79 70 65 3a 22 67 65 6e 65 72 69 63 22 2c 68 61 6e 64 6c 65 64 3a 21 30 2c 2e 2e 2e 69 2c 2e 2e 2e 6e 7d 2c 6e 26 26 22 64 61 74 61 22 69 6e 20 6e 29 7b 63 6f 6e 73 74 20 74 3d 7b 2e 2e 2e 69 26 26 69 2e 64 61 74 61 2c 2e 2e 2e 6e 2e 64 61 74 61 7d 3b 65 2e 6d 65 63 68 61 6e 69 73 6d 2e 64 61 74 61 3d 74 7d 7d 66 75 6e Data Ascii: r[0]=r[0]\|\|{};s.value\|\|(s.value=n\|\|""),s.type\|\|(s.type=e\|\|"Error")}function ht(t,n){const e=ct(t);if(!e)return;const i=e.mechanism;if(e.mechanism={type:"generic",handled:!0,...i,...n},n&&"data"in n){const t={...i&&i.data,...n.data};e.mechanism.data=t}}fun
2024-12-17 17:20:02 UTC	1379	IN	Data Raw: 65 76 65 6e 74 44 65 66 61 75 6c 74 22 69 6e 20 65 26 26 22 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 22 69 6e 20 65 3f 22 5b 53 79 6e 74 68 65 74 69 63 45 76 65 6e 74 5d 22 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 21 3d 6e 3f 22 5b 4e 61 4e 5d 22 3a 76 6f 69 64 20 30 3d 3d 3d 6e 3f 22 5b 75 6e 64 65 66 69 6e 65 64 5d 22 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 60 5b 46 75 6e 63 74 69 6f 6e 3a 20 24 7b 46 28 6e 29 7d 5d 60 3a 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 60 5b 24 7b 53 74 72 69 6e 67 28 6e 29 7d 5d 60 3a 22 62 69 67 69 6e 74 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 60 5b 42 69 67 49 6e 74 3a 20 24 7b 53 74 72 69 6e 67 28 6e 29 7d 5d 60 3a 60 5b 6f 62 6a 65 63 74 20 24 7b 4f 62 6a Data Ascii: eventDefault"in e&&"stopPropagation"in e?"[SyntheticEvent]":"number"==typeof n&&n!=n?"[NaN]":void 0===n?"[undefined]":"function"==typeof n?`[Function: ${F(n)}]`:"symbol"==typeof n?`[${String(n)}]`:"bigint"==typeof n?`[BigInt: ${String(n)}]`:`[object ${Obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49924	18.161.111.55	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:03 UTC	625	OUT	GET /f/160399/300x78/3f80534177/dreamzy-logo-black.svg HTTP/1.1 Host: a.storyblok.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://get-luxsheets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:04 UTC	659	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 6861 Connection: close Date: Tue, 17 Dec 2024 17:20:04 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 09 Oct 2023 08:13:07 GMT ETag: "a213d1f5410d36a2aaeb9d610fe1fb17" x-amz-server-side-encryption: AES256 Cache-Control: public; max-age=31536000 Expires: Tue, 08 Oct 2024 08:13:05 GMT x-amz-version-id: oZ6hnZChxARJpSGM4JC15aGUcD7MHYJj Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8ddb34cf6930071cc06ac942a8998048.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P4 X-Amz-Cf-Id: MElgyszDrT-s4-XGo4s8aE2565eJ8HUtxfVs-vxLxTZWwI1JWzteig==
2024-12-17 17:20:04 UTC	6861	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 57 61 72 73 74 77 61 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 57 61 72 73 74 77 61 20 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 37 2e 36 38 20 35 36 2e 39 31 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 65 64 30 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 31 64 31 64 31 62 3b 0a 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Warstwa_2" data-name="Warstwa 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 217.68 56.91"> <defs> <style> .cls-1 { fill: #ffed00; } .cls-2 { fill: #1d1d1b;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49927	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:04 UTC	664	OUT	GET /assets/shared/checkout/v15/css/fonts/brandon_med.woff2 HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://get-luxsheets.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:04 UTC	306	IN	HTTP/1.1 404 Not Found content-type: application/json; charset=utf-8 x-cloud-trace-context: 0cd41b30209840746349ff9e7d7770e0 date: Tue, 17 Dec 2024 17:20:04 GMT server: Google Frontend Content-Length: 126 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:04 UTC	126	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 52 6f 75 74 65 20 47 45 54 3a 2f 61 73 73 65 74 73 2f 73 68 61 72 65 64 2f 63 68 65 63 6b 6f 75 74 2f 76 31 35 2f 63 73 73 2f 66 6f 6e 74 73 2f 62 72 61 6e 64 6f 6e 5f 6d 65 64 2e 77 6f 66 66 32 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Route GET:/assets/shared/checkout/v15/css/fonts/brandon_med.woff2 not found","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49928	34.120.195.249	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:04 UTC	768	OUT	POST /api/4504272873783296/envelope/?sentry_key=9d4c19d105a244fbb75e3d28cf64ee9e&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.23.0 HTTP/1.1 Host: o4504272872341504.ingest.sentry.io Connection: keep-alive Content-Length: 447 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://get-luxsheets.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://get-luxsheets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:04 UTC	447	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 32 2d 31 37 54 31 37 3a 32 30 3a 30 31 2e 38 34 35 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 32 33 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 39 63 64 34 38 65 61 39 62 39 30 34 34 39 35 62 38 30 39 31 65 63 32 33 63 39 38 39 66 30 31 34 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 31 32 2d 31 37 54 31 37 3a 32 30 3a 30 31 2e 38 34 34 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 32 2d 31 37 54 31 37 3a 32 30 3a 30 31 2e 38 34 34 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-12-17T17:20:01.845Z","sdk":{"name":"sentry.javascript.browser","version":"7.23.0"}}{"type":"session"}{"sid":"9cd48ea9b904495b8091ec23c989f014","init":true,"started":"2024-12-17T17:20:01.844Z","timestamp":"2024-12-17T17:20:01.844Z","stat
2024-12-17 17:20:04 UTC	530	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 17 Dec 2024 17:20:04 GMT Content-Type: application/json vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-12-17 17:20:04 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49929	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:04 UTC	397	OUT	GET /assets/shared/checkout/img/logos/ads.png HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:05 UTC	418	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 69afe19aeb225afe08fa2ceae438be7c server: Google Frontend Content-Length: 94052 via: 1.1 google date: Tue, 17 Dec 2024 17:20:05 GMT Last-Modified: Mon, 16 Dec 2024 14:33:03 GMT ETag: W/"16f64-193cfe30918" Content-Type: image/png Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:05 UTC	972	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 01 41 08 06 00 00 00 e4 2f 85 eb 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec bd 77 9c 5c 57 7d f7 ff 39 e7 b6 a9 db bb 56 bb 2b ed aa 77 db b2 e4 de 71 c5 60 3a 84 10 08 a4 40 02 3c 0f 49 48 78 20 09 04 02 09 c9 2f 79 c8 93 04 02 a1 24 74 63 08 06 8c 6d 5c 64 cb 96 ac 66 f5 55 df 5d 69 7b 9b dd 9d 3e b7 9c 73 7e 7f 9c 99 6d da 32 23 cb d6 ca 3a 6f bf c6 3b 9a b9 e5 dc 73 ef dc 7b 3e e7 db 88 10 02 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 2e 2d f4 52 37 40 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 12 e8 0a 85 42 a1 50 28 14 0a 85 42 a1 50 2c 08 94 40 57 28 14 0a 85 42 a1 50 28 14 0a 85 62 01 a0 04 ba 42 a1 50 28 14 0a 85 42 a1 50 28 14 0b 00 25 d0 15 0a Data Ascii: PNGIHDRA/bKGDIDATxw\W}9V+wq`:@<IHx /y$tcm\dfU]i{>s~m2#:o;s{>BP(BP(.-R7@P(BP(BP(BP,@W(BP(bBP(BP(%
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 28 c7 c8 c8 18 74 5d 43 51 51 11 82 c1 20 3c cf 03 08 41 75 55 15 8a 4b 8a 01 21 a6 1c 27 e7 1c 62 d2 67 84 10 b8 9e 87 81 fe 01 0c 0d 0f c3 30 4c 38 76 06 a9 54 0a 9e c7 90 4a 25 51 5c 5c 0c 01 20 1e 8b a1 bc bc 02 84 00 c1 40 00 8b 16 2f c6 63 8f fd 1a 55 95 95 d0 75 0d ba ae c3 63 0c 82 73 78 1e 43 3a 9d 42 4d 75 35 12 c9 64 76 df 02 96 cf 82 cf b2 b0 a4 b9 19 c1 60 10 7e cb 04 a5 97 70 8e 97 52 90 c1 76 90 73 7b 00 db 06 4a ea 81 d2 1a 20 15 07 6a 97 83 07 4a 5e d1 e6 09 21 70 5c 17 8e ed c0 25 3a ba 13 2e 5c 42 d1 9f e6 a5 07 fb d3 f7 b7 8d d8 f7 47 6d be 29 6a f3 ca b2 80 36 5c 62 d2 d6 a5 c5 c6 f6 c6 b0 f1 3f e5 61 fd 5c c8 20 e8 8a 7a a8 0d 6a b8 79 51 00 2e 17 b3 ee cb 30 8c 4b d7 8f 0a 85 42 a1 50 28 16 14 4a a0 2b 14 0a 85 42 31 07 86 46 a0 81 Data Ascii: (t]CQQ <AuUK!'bg0L8vTJ%Q\\ @/cUucsxC:BMu5dv`~pRvs{J jJ^!p\%:.\BGm)j6\b?a\ zjyQ.0KBP(J+B1F
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 80 a6 51 1c 1a 1e bc 57 e8 14 1e a1 10 44 5a bd 05 19 4f cd 2e ad e0 53 ac e8 44 26 85 13 02 20 04 44 00 94 4c b8 b8 53 21 90 35 a4 83 c8 45 40 04 c1 d1 a1 4c 49 86 c6 31 d9 82 7e cb 92 92 4b dd 59 0a 85 42 a1 50 28 16 08 4a a0 2b 14 0a 85 e2 75 89 10 02 01 83 a2 c8 a2 70 18 cf 5a bc a7 42 29 90 76 59 b0 6d cc 59 4d 34 0a 8f 4a eb 39 30 49 a0 03 93 8b 9e e7 36 2e 5d db 49 ce b5 5d fe 9b 66 8d ec 9a c8 66 75 17 00 e5 59 eb ba 46 d1 39 92 31 e2 29 0f 1c 2a 49 9c 42 a1 50 28 14 8a f3 51 02 5d a1 50 28 14 af 5b 72 75 c8 85 00 28 11 e7 c9 62 02 82 a1 a4 57 37 e4 b0 6a a1 11 30 4a c6 2d e6 82 c8 58 74 31 75 85 ac a7 bb 14 ec 14 32 0e 1d 44 5a d4 99 10 20 42 80 13 99 3c 4e 03 20 a8 6c 80 c7 05 16 95 07 9c 96 4a 1f 5c 95 c5 5d a1 50 28 14 0a c5 0c 28 81 ae 50 28 Data Ascii: QWDZO.SD& DLS!5E@LI1~KYBP(J+upZB)vYmYM4J90I6.]I]ffuYF91)*IBP(Q]P([ru(bW7j0J-Xt1u2DZ B<N lJ\]P((P(
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 94 c0 cb 95 3c cf 5a cc c7 ff 42 4c f2 18 98 2c d2 85 1c a8 21 57 5e 0d d0 05 81 95 13 e5 42 40 17 04 8c 03 96 ae f1 d1 94 3b 7c 7a 30 35 25 06 fd aa ba d0 6b de 87 97 02 c6 d8 2b df c8 34 0c c3 80 6d db 75 87 0e 1d ba db f3 bc 9a 7c db d1 d5 d5 75 5d 7f 7f ff d5 a3 a3 a3 cf 65 32 99 cc 85 08 d6 d9 70 5d 17 ba ae 63 f9 f2 e5 30 4d f3 a2 1f f3 2b 69 d7 bb df fd 6e 1c 3d 7a 14 3b 77 ee 44 30 18 2c 74 13 1a 80 22 00 d5 00 f2 3d b0 20 80 30 26 45 86 28 14 f9 22 38 a0 5b 04 a1 22 1d a9 98 07 2e 0a 70 dc 12 08 02 a8 82 bc fe e6 73 53 32 01 94 22 cf eb 94 73 29 0c 7d 41 2a 27 40 54 4e 91 82 a1 14 88 f6 79 48 0c f2 d9 22 d4 f2 c2 73 05 6a 56 58 18 3c 6d 2f ef e9 b4 ef 22 42 94 d1 79 15 bf 80 07 01 53 a3 28 f3 e9 91 4b dd 17 33 a1 04 ba 42 a1 50 28 0a 43 00 9e e1 Data Ascii: <ZBL,!W^B@;\|z05%k+4mu\|u]e2p]c0M+in=z;wD0,t"= 0&E("8[".psS2"s)}A*'@TNyH"sjVX<m/"ByS(K3BP(C
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 2a 75 a1 9b 19 87 31 76 a1 ae e3 af 09 b9 84 75 9c 73 84 c3 aa 7a 80 e2 f2 42 30 01 dd ca ba bb 8f b9 78 95 9e 30 33 92 88 31 a4 52 0c 95 35 05 79 9d 28 e6 80 50 20 5c 4b c1 d2 1c a4 d0 38 f4 ec 2d 96 b9 a8 1e e8 72 b6 8c 39 5e 30 48 b4 bc ae 87 8c e0 58 5a 62 9d 5a b6 c5 ff 4b c3 a2 a3 97 ba 1f 66 62 c1 0a 74 00 5f 03 50 97 7d 9f 0b 0e bb 58 bf 43 91 e7 e7 73 2d 97 13 a2 cf 03 f8 38 ce cb 10 f9 ba 87 40 5e 3f 46 f6 55 0e 29 c2 1b 00 2c c9 be 9a 01 d4 40 0e 95 2d 00 81 ec b2 c7 f1 da dd 53 15 0a c5 ab 85 10 60 76 06 9e e3 80 70 03 a9 e8 18 1e fd cd 6f 90 18 bc 11 b7 de 7c 03 28 21 e0 9e 77 f1 7f ed 44 03 6a 97 1c 84 9b 02 5c 06 38 31 c0 15 13 4f 0a 1d 52 14 9b 00 5e 7e f6 2e f2 83 2f 7c 8e ff fe 3f fd 85 60 1e 7c 06 c1 1f 6c 28 47 eb 90 0d 4b 23 08 e8 04 Data Ascii: *u1vuszB0x031R5y(P \K8-r9^0HXZbZKfbt_P}XCs-8@^?FU),@-S`vpo\|(!wDj\81OR^~./\|?`\|l(GK#
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 23 04 e0 9e 08 b7 3e 93 7c db 70 cc 5d 92 7b dc cf e5 b7 24 20 2d 84 26 a1 68 5c e3 db 5d bf de 3a 31 74 ce 5d b0 21 0b 0b 59 a0 c7 b3 af 1e 00 87 00 3c 03 99 0c f7 a3 98 b1 a6 e1 9c 9c 03 f0 cf 00 ba 71 be 98 9e 2c d0 0d 00 65 00 56 41 ba d8 5f 8d f9 85 64 2e 06 fb 4a 21 0a e0 2b 00 7e 03 39 71 f2 36 00 f7 14 b8 0d 35 02 50 28 ae 00 74 5d 87 ae 6b 70 1c 07 36 04 46 e2 09 38 b6 83 a6 ba 2a 84 2c 8a 80 a5 83 33 76 61 a5 d9 98 01 71 fd dd 0f 93 1f 7f f6 73 48 c4 cb c7 ad e7 33 b9 b9 e7 84 fa 13 7f ff 67 e4 a6 77 7d 47 04 8b a3 15 16 c7 ea 30 05 07 90 f1 f8 28 74 c2 01 42 e5 b2 14 33 26 8b 9b ce 79 c9 e1 b2 71 e8 b9 91 02 cd 8a 77 53 73 de b8 28 f0 cc d2 b0 01 f7 95 cd 4a 5c d6 0c 0f 0f bf e2 6d 50 4a 11 0c 06 ad 3d 7b f6 bc 61 68 68 68 f1 c5 68 d7 d8 d8 58 Data Ascii: #>\|p]{$ -&h\]:1t]!Y<q,eVA_d.J!+~9q65P(t]kp6F8*,3vaqsH3gw}G0(tB3&yqwSs(J\mPJ={ahhhhX
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 63 b1 58 c8 75 5d 2b 1e 8f f3 13 27 4e a4 4d d3 4c 74 74 74 44 01 f4 15 15 15 9d f1 f9 7c 27 02 81 c0 01 ce f9 60 3e 13 0d 42 08 64 32 19 7c e2 13 9f c0 77 be f3 1d ec d8 b1 43 59 d1 5f 27 88 0b 8c 1e ba 68 10 79 4b cc a1 e9 44 13 1c 25 9c a1 4a 08 14 03 f0 01 c2 e3 0c 63 9c 8b 01 42 31 02 21 c7 87 f4 02 46 d5 02 80 ae 13 ac bd 37 8c 27 7f 14 81 31 ab 9b fb e4 35 26 96 11 02 70 5c 81 ca 12 03 56 80 c2 4b 09 68 06 a1 42 a0 86 31 51 05 59 13 84 70 86 24 f3 30 48 29 06 09 81 7d 31 4a af 8d 0b dc 5c 2a 13 0a 68 3a 29 e2 0c e5 9c a3 54 c8 e9 65 4d 00 1e 63 88 73 81 51 dd 24 c3 54 43 5a 64 3d f4 5f 0d d1 3e 6e cd 16 b9 79 6b 12 60 0c 65 9c a1 14 42 14 41 ea 48 ce 39 52 cc 13 23 a6 8f 46 28 45 2c 77 1c 94 e6 df 2e 32 dd 37 68 96 53 e6 2f a6 60 9e 58 71 ec 48 f2 Data Ascii: cXu]+'NMLtttD\|'`>Bd2\|wCY_'hyKD%JcB1!F7'15&p\VKhB1QYp$0H)}1J\*h:)TeMcsQ$TCZd=_>nyk`eBAH9R#F(E,w.27hS/`XqH
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 68 ba cb cf 2b 23 95 95 a2 42 10 97 43 cf 70 3e b4 3e 1e fc 73 ee e8 4f da e9 a9 aa 8d 10 80 39 42 5a d8 27 7d 2e 00 98 26 41 77 a7 7b 47 4f b7 fd 97 89 34 0b 1b 94 7a 94 60 52 61 cc 09 b1 4b 00 24 99 67 2d 0e fb ce 14 57 eb ff 42 35 ec 27 00 fc 45 1a 28 01 74 9d d4 a6 53 fc 8e 53 07 53 77 46 06 dc 4d fd 23 f6 9a 14 17 9a 10 02 06 a1 30 00 c4 3c 0f 91 51 17 02 04 21 5d 13 19 f0 23 d1 98 f7 82 06 fc d2 1f a6 4f c6 22 6c 53 64 c4 fd 6c 22 ed 85 0c a2 65 05 fa d4 36 78 5c e8 2e 11 a8 1b 75 1f 8b 0d 69 ff 9c 1a f5 c6 0a ae 77 2e e0 05 c3 5a bc e5 3a bf 37 d2 ed dc d6 d9 9e 79 7b 57 4f e6 d6 98 e3 ad 48 72 46 29 08 2c 42 41 00 24 92 1e bc 84 80 9f 6a 28 0f e9 ed f4 25 b1 bd a2 d6 fc a5 61 d1 5f 13 82 4c be fb 24 00 9c b4 80 af 88 42 d3 c8 86 ae d3 99 3b 1c 4f Data Ascii: h+#BCp>>sO9BZ'}.&Aw{GO4z`RaK$g-WB5'E(tSSSwFM#0<Q!]#O"lSdl"e6x\.uiw.Z:7y{WOHrF),BA$j(%a_L$B;O
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 34 1f 4e 9c 38 b1 f1 d4 a9 53 1b d7 ae 5d 7b 7f 3a 9d fe 42 30 18 dc 49 08 99 e2 ce 40 29 45 3c 1e 87 e7 79 28 2d 2d 85 10 e2 82 eb c1 2b 2e 3e 4b af f6 3d d6 f8 bc 75 df 70 cc 6d 12 20 30 ce 2b 27 35 f1 2f 4a 34 a4 05 a7 ed ad 99 5b 9b d6 f9 7e 59 52 af f7 05 4b 35 88 ec c8 4b 08 20 54 41 41 2d 02 92 fd 8c 03 d0 0d 82 ee 43 f6 e6 ae 33 f6 35 14 04 be 9c 00 22 e7 57 27 16 00 5c c1 50 a1 1b f6 d2 95 be ed 15 4d c6 99 74 8c 43 d3 88 11 1b 61 b7 1c 7d 31 f1 7f 8e 74 24 6f d2 04 74 5f b6 7a 25 30 7b 4c 38 01 01 05 10 20 14 1e 04 3a 22 99 ab 1e fb 76 e4 ff 06 fd da 98 41 a9 ed 27 5a 48 03 cd 16 d3 98 6a 41 07 11 20 44 08 8d 12 47 33 08 27 b4 30 2b 10 05 01 21 f0 f5 f7 d9 f7 9e 6e 4b fd fe 98 e3 56 eb 84 60 be d8 66 d9 47 1a 38 04 4e 0d a7 56 d9 fb f8 17 b6 96 Data Ascii: 4N8S]{:B0I@)E<y(--+.>K=upm 0+'5/J4[~YRK5K TAA-C35"W'\PMtCa}1t$ot_z%0{L8 :"vA'ZHjA DG3'0+!nKV`fG8NV
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: e4 c9 d5 fd fd fd 1b ca cb cb 4f 8c 8e 8e ba b3 0d f8 39 e7 30 4d 13 1b 37 6e 44 20 10 98 33 b1 9a 10 02 a6 69 c2 b2 ac c6 ff fa af ff fa 9b 97 5e 7a e9 81 d1 d1 d1 57 56 77 ae 40 18 63 46 5b 5b db ca 6f 7d eb 5b 5f 4a a7 d3 15 ef 7b df fb fe 6d b2 48 e7 9c c3 ef f7 23 10 08 60 64 64 04 d5 d5 d5 e3 e5 e3 14 97 16 aa 13 b6 fc c6 c0 13 ed 47 32 0f f4 1d cf 2c 16 73 e4 26 26 90 ae e3 71 c6 ad 8e 23 e9 9b 9b b7 f8 7f 15 aa d0 4e e4 ce 23 21 40 b4 d7 83 93 99 48 12 47 28 20 38 96 b6 1d 4a 5d 1b 63 9e 19 26 fa 24 09 36 55 90 49 2b 8b 80 8f 50 d1 b2 21 f0 6c c5 12 63 b7 bf 9c 20 3a 20 ae 7e f1 d1 b1 bf 3a 33 98 be c6 10 d2 3d bc 50 cb 55 ce 75 5f cb fe 4b 08 a1 73 51 88 9b aa 98 e5 b3 b9 05 25 17 82 72 01 9a 13 95 85 62 82 c2 01 c7 d9 fe f4 86 5d 8f c4 fe e8 81 Data Ascii: O90M7nD 3i^zWVw@cF[[o}[_J{mH#`ddG2,s&&q#N#!@HG( 8J]c&$6UI+P!lc : ~:3=PUu_KsQ%rb]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49930	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:04 UTC	659	OUT	GET /assets/shared/checkout/v15/fonts/AAkorzFFbu1n.ttf HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://get-luxsheets.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:05 UTC	418	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 9b3734c06b51aabf7d35b92f6cc23edd server: Google Frontend Content-Length: 394140 via: 1.1 google date: Tue, 17 Dec 2024 17:20:05 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"6039c-193cfe30d00" Content-Type: font/ttf Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:05 UTC	972	IN	Data Raw: 00 01 00 00 00 14 01 00 00 04 00 40 47 44 45 46 d3 19 91 4a 00 01 c9 e8 00 00 07 8f 47 50 4f 53 f1 4a ce ee 00 01 d1 78 00 01 d4 22 47 53 55 42 38 20 4f a8 00 03 a5 9c 00 00 2a 0c 48 56 41 52 77 1a 49 cd 00 03 cf a8 00 00 12 89 4f 53 2f 32 75 bd 5e 2d 00 01 62 60 00 00 00 60 53 54 41 54 f8 e8 d5 d8 00 03 e2 34 00 00 00 b8 61 76 61 72 b4 8e e0 01 00 03 e3 6c 00 00 00 32 63 6d 61 70 79 e3 d2 a0 00 01 62 c0 00 00 0a ea 66 76 61 72 8f f1 79 b0 00 03 e2 ec 00 00 00 7e 67 61 73 70 00 00 00 10 00 01 c9 e0 00 00 00 08 67 6c 79 66 63 f9 56 71 00 00 01 4c 00 01 33 d8 67 76 61 72 5c b2 e0 7f 00 03 e3 a0 00 02 1f fc 68 65 61 64 18 15 b2 e7 00 01 44 30 00 00 00 36 68 68 65 61 09 1a 09 85 00 01 62 3c 00 00 00 24 68 6d 74 78 3e b9 4a 76 00 01 44 68 00 00 1d d4 6c 6f 63 Data Ascii: @GDEFJGPOSJx"GSUB8 O*HVARwIOS/2u^-b``STAT4avarl2cmapybfvary~gaspglyfcVqL3gvar\headD06hheab<$hmtx>JvDhloc
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 00 b7 ff ff 00 09 00 00 02 a7 03 59 02 26 00 01 00 00 00 06 07 28 2c 00 00 04 00 09 00 00 03 a8 02 bc 00 06 00 0a 00 0e 00 16 00 00 33 01 33 15 23 37 01 37 37 21 15 37 21 15 21 13 21 15 21 11 21 15 21 09 01 bd 15 16 0e fe 4d 79 0a 01 38 0a 01 87 fe 79 05 01 be fe 2e 01 c3 fe 51 02 bc 13 04 fd 53 d3 13 13 9a 13 fe b9 13 02 bc 13 ff ff 00 09 00 00 03 a8 03 63 02 26 00 1b 00 00 00 07 07 20 00 b4 00 00 00 02 00 85 00 00 02 ab 02 bc 00 11 00 23 00 00 33 11 21 32 16 15 14 06 06 23 37 32 16 16 15 14 06 23 25 21 32 36 35 34 26 23 21 35 21 32 36 35 34 26 23 21 85 01 15 6c 7f 38 64 41 11 51 6b 36 7d 80 fe eb 01 19 70 75 75 70 fe e2 01 0a 64 6f 6f 64 fe fb 02 bc 59 58 3a 4d 26 0d 29 50 3b 58 5f 13 4f 55 55 4e 13 50 4e 4e 50 00 00 01 00 3b ff fd 02 90 02 bf 00 21 00 Data Ascii: Y&(,33#777!7!!!!!!My8y.QSc& #3!2#72#%!2654&#!5!2654&#!l8dAQk6}puupdoodYX:M&)P;X_OUUNPNNP;!
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 01 a5 4e 84 62 36 36 62 84 4e 47 7d 2d 0c 30 73 42 49 7d 5d 33 33 5d 7d 49 42 75 2e 0c 2d 7d 97 13 03 35 60 80 4c 4c 80 60 35 2c 2d 0e 2e 26 33 5b 79 47 47 79 5b 33 28 2e 0f 2d 2d 5a 01 00 ff 00 00 ff ff 00 3b ff fd 02 96 03 62 02 26 00 47 00 00 00 06 07 27 66 ff ff ff 00 3b ff fd 02 96 03 62 02 26 00 47 00 00 00 06 07 25 66 ff ff ff 00 3b ff fd 02 96 03 62 02 26 00 47 00 00 00 06 07 24 66 ff ff ff 00 3b fe fd 02 96 02 bf 02 26 00 47 00 00 00 06 07 02 66 00 ff ff 00 3b ff fd 02 96 03 4a 02 26 00 47 00 00 00 06 07 1c 66 ff ff ff 00 3b ff fd 02 96 03 35 02 26 00 47 00 00 00 06 07 2c 66 ff 00 03 00 3b ff fd 03 0c 02 bf 00 03 00 25 00 29 00 00 25 35 21 15 05 22 2e 02 35 34 3e 02 33 32 16 17 07 26 26 23 22 0e 02 15 14 1e 02 33 32 36 37 17 06 06 37 11 33 11 01 Data Ascii: Nb66bNG}-0sBI}]33]}IBu.-}5`LL`5,-.&3[yGGy[3(.--Z;b&G'f;b&G%f;b&G$f;&Gf;J&Gf;5&G,f;%)%5!".54>32&&#"326773
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 09 01 4c 11 14 08 fe b9 0c fe b8 09 02 bc fd ba 02 46 fd 44 02 9f fd c4 02 3c fd 61 ff ff 00 85 ff 50 03 37 02 bc 02 26 00 74 00 00 00 07 07 00 00 b2 00 00 00 01 00 85 00 00 02 ab 02 bc 00 0b 00 00 33 11 33 01 23 11 33 11 23 01 33 11 85 11 02 0c 0b 14 11 fd f4 0b 02 bc fd 5b 02 a5 fd 44 02 a5 fd 5b ff ff 00 85 ff fd 04 8e 02 bc 00 26 00 76 00 00 00 07 00 65 03 30 00 00 ff ff 00 85 00 00 02 ab 03 63 02 26 00 76 00 00 00 06 07 20 6c 00 ff ff 00 85 00 00 02 ab 03 63 02 26 00 76 00 00 00 06 07 25 6c 00 ff ff 00 85 fe fd 02 ab 02 bc 02 26 00 76 00 00 00 06 07 02 6c 00 ff ff 00 85 00 00 02 ab 03 4b 02 26 00 76 00 00 00 06 07 1c 6c 00 ff ff 00 85 ff 50 02 ab 02 bc 02 26 00 76 00 00 00 06 07 00 6c 00 00 02 00 85 ff 3b 02 ab 02 bc 00 07 00 16 00 00 33 11 33 01 07 Data Ascii: LFD<aP7&t33#3#3[D[&ve0c&v lc&v%l&vlK&vlP&vl;33
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 32 32 5b 79 48 48 79 5b 32 00 ff ff 00 3b ff ba 03 09 03 02 02 26 00 81 00 00 00 06 07 35 09 00 ff ff 00 3b ff ba 03 09 03 63 02 26 00 9d 00 00 00 06 07 20 76 00 ff ff 00 3b ff fd 03 09 03 59 02 26 00 81 00 00 00 06 07 28 76 00 ff ff 00 3b ff fd 03 09 03 ca 02 26 00 81 00 00 00 06 07 2a 76 00 ff ff 00 3b ff fd 03 09 03 bc 02 26 00 81 00 00 00 06 07 29 76 00 ff ff 00 3b ff fd 03 09 03 98 02 26 00 81 00 00 00 06 07 2b 76 00 00 03 00 3b 00 00 04 13 02 bc 00 15 00 19 00 21 00 00 21 22 26 26 35 34 36 36 33 33 15 23 22 06 06 15 14 16 16 33 33 15 13 21 15 21 13 21 15 21 11 21 15 21 01 ac 6e a6 5d 5d a6 6e 9b 9b 69 9d 57 57 9d 69 9b 09 01 87 fe 79 05 01 be fe 2e 01 c3 fe 51 5a 9e 65 65 9f 5b 13 56 96 60 60 95 55 13 01 6d 13 fe b9 13 02 bc 13 00 02 00 85 00 00 02 Data Ascii: 22[yHHy[2;&5;c& v;Y&(v;&*v;&)v;&+v;!!"&&546633#"33!!!!!!n]]niWWiy.QZee[V``Um
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 02 ab fd 61 08 31 59 78 47 43 77 5b 34 33 5d 7b 48 2b 51 49 22 0b 20 4c 57 2f 4d 83 61 36 36 60 7e 03 35 60 80 4c 0a 13 09 47 79 5b 33 33 5b 79 46 02 47 79 5a 33 10 24 1d 0f 1d 25 13 35 5f 81 4b 49 80 62 37 00 00 01 00 04 00 00 02 20 02 bc 00 07 00 00 21 11 21 35 21 15 21 11 01 08 fe fc 02 1c fe fc 02 a9 13 13 fd 57 ff ff 00 04 00 00 02 20 02 bc 02 26 00 bd 00 00 00 06 07 33 e6 ff ff ff 00 04 00 00 02 20 03 63 02 26 00 bd 00 00 00 06 07 25 e6 00 ff ff 00 04 ff 2b 02 20 02 bc 02 26 00 bd 00 00 00 06 07 03 e6 00 ff ff 00 04 fe fd 02 20 02 bc 02 26 00 bd 00 00 00 06 07 02 e6 00 ff ff 00 04 ff 50 02 20 02 bc 02 26 00 bd 00 00 00 06 07 00 e6 00 ff ff 00 04 ff 60 02 20 02 bc 02 26 00 bd 00 00 00 06 07 06 e6 00 00 01 00 7f ff fd 02 9b 02 bc 00 11 00 00 05 22 26 Data Ascii: a1YxGCw[43]{H+QI" LW/Ma66`~5`LGy[33[yFGyZ3$%5_KIb7 !!5!!W &3 c&%+ & &P &` &"&
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 05 00 ff ff 00 0a 00 00 02 58 03 36 02 26 00 e3 00 00 00 06 07 2c 05 00 ff ff 00 0a 00 00 02 58 03 59 02 26 00 e3 00 00 00 06 07 28 05 00 00 01 00 32 00 00 02 58 02 bc 00 0b 00 00 33 35 01 17 21 35 21 15 01 27 21 15 32 02 05 01 fd ff 02 17 fd fb 01 02 10 0f 02 a1 07 13 0f fd 5f 07 13 00 ff ff 00 32 00 00 02 58 03 63 02 26 00 ed 00 00 00 06 07 20 19 00 ff ff 00 32 00 00 02 58 03 63 02 26 00 ed 00 00 00 06 07 25 19 00 ff ff 00 32 00 00 02 58 03 4b 02 26 00 ed 00 00 00 06 07 1c 19 00 ff ff 00 32 ff 50 02 58 02 bc 02 26 00 ed 00 00 00 06 07 00 23 00 00 04 00 78 ff fd 02 e8 03 63 00 10 00 14 00 18 00 1c 00 00 05 22 26 27 37 16 16 33 32 36 35 11 33 11 14 06 06 01 11 33 11 03 37 33 07 21 37 33 07 01 47 3c 6a 29 0c 28 64 38 6f 80 14 41 74 fe e9 14 19 8c 28 96 01 Data Ascii: X6&,XY&(2X35!5!'!2_2Xc& 2Xc&%2XK&2PX&#xc"&'732653373!73G<j)(d8oAt(
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 07 24 24 00 ff ff 00 41 ff fd 02 4e 03 a4 02 26 01 11 00 00 00 06 07 61 24 00 ff ff 00 41 ff fd 02 4e 03 b0 02 26 01 11 00 00 00 06 07 62 24 00 ff ff 00 41 ff fd 02 4e 03 af 02 26 01 11 00 00 00 06 07 63 24 00 ff ff 00 41 ff fd 02 4e 03 63 02 26 01 11 00 00 00 06 07 31 24 00 ff ff 00 41 ff fd 02 4e 03 4b 02 26 01 11 00 00 00 06 07 18 24 00 ff ff 00 41 ff fd 02 4e 03 4b 02 26 01 11 00 00 00 06 07 1c 24 00 ff ff 00 41 ff 50 02 4e 02 bf 02 26 01 11 00 00 00 06 07 00 24 00 ff ff 00 41 ff fd 02 4e 03 63 02 26 01 11 00 00 00 06 07 1e 24 00 ff ff 00 41 ff fd 02 4e 03 97 02 26 01 11 00 00 00 06 07 30 24 00 ff ff 00 41 ff fd 02 4e 03 66 02 26 01 11 00 00 00 06 07 32 24 00 ff ff 00 41 ff fd 02 4e 03 36 02 26 01 11 00 00 00 06 07 2c 24 00 ff ff 00 41 ff fd 02 4e 03 Data Ascii: $$AN&a$AN&b$AN&c$ANc&1$ANK&$ANK&$APN&$ANc&$AN&0$ANf&2$AN6&,$AN
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 00 00 00 06 07 30 a7 00 ff ff 00 2f 00 00 01 77 03 66 02 26 01 31 00 00 00 06 07 32 a7 00 ff ff 00 2f 00 00 01 77 03 36 02 26 01 31 00 00 00 06 07 2c a7 00 ff ff 00 2f ff 2b 01 77 02 bc 02 26 01 31 00 00 00 06 07 38 b0 00 ff ff 00 2f 00 00 01 77 03 59 02 26 01 31 00 00 00 06 07 28 a7 00 00 01 00 04 ff 99 01 5e 02 bc 00 10 00 00 17 22 26 27 37 16 16 33 32 35 11 21 35 21 11 14 06 b2 35 5d 1c 0e 1d 53 31 97 fe fa 01 1a 56 67 35 2e 0c 2c 30 b4 02 49 13 fd a2 62 63 00 ff ff 00 04 ff 99 01 5e 03 63 02 26 01 42 00 00 00 06 07 24 a5 00 ff ff 00 85 ff 99 03 c0 02 bc 00 26 00 6a 00 00 00 07 01 42 02 62 00 00 00 01 00 85 00 00 04 49 02 bf 00 25 00 00 01 32 16 15 11 23 11 34 26 23 22 06 15 11 23 11 34 26 23 22 06 06 15 11 23 11 33 15 27 36 36 33 32 16 17 23 36 36 03 Data Ascii: 0/wf&12/w6&1,/+w&18/wY&1(^"&'7325!5!5]S1Vg5.,0Ibc^c&B$&jBbI%2#4&#"#4&#"#3'6632#66
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 00 7f ff fd 02 97 03 63 02 26 01 5b 00 00 00 06 07 1e 5d 00 ff ff 00 7f ff fd 02 97 03 97 02 26 01 5b 00 00 00 06 07 30 5d 00 ff ff 00 7f ff fd 02 f6 03 4d 02 26 01 5b 00 00 00 07 06 ff 01 70 00 b7 ff ff 00 7f ff fd 02 f6 03 63 02 26 01 65 00 00 00 06 07 20 5d 00 ff ff 00 7f ff 50 02 f6 03 4d 02 26 01 65 00 00 00 06 07 00 5d 00 ff ff 00 7f ff fd 02 f6 03 63 02 26 01 65 00 00 00 06 07 1e 5d 00 ff ff 00 7f ff fd 02 f6 03 97 02 26 01 65 00 00 00 06 07 30 5d 00 ff ff 00 7f ff fd 02 f6 03 59 02 26 01 65 00 00 00 06 07 28 5d 00 ff ff 00 7f ff fd 02 97 03 63 02 26 01 5b 00 00 00 06 07 23 5d 00 ff ff 00 7f ff fd 02 97 03 66 02 26 01 5b 00 00 00 06 07 32 5d 00 ff ff 00 7f ff fd 02 97 03 36 02 26 01 5b 00 00 00 06 07 2c 5d 00 ff ff 00 7f ff fd 02 97 03 bd 02 26 01 Data Ascii: c&[]&[0]M&[pc&e ]PM&e]c&e]&e0]Y&e(]c&[#]f&[2]6&[,]&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49933	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:05 UTC	1251	OUT	GET /age-verification?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185 HTTP/1.1 Host: ally.quandral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:05 UTC	1162	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 17 Dec 2024 17:20:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: http://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yVZKtbZ2n1vsLVKxeaxAoVS5G%2B1ChpRwNghJCE%2FwqBpwR%2BbmLYgjElfz9j1fo5jt1gcsXFjXGo7KnF0tDdd79p4OJibh%2FUhXMbcVI77Yz5nfRuxBLMXtX4w7skqPzIStBBIbvA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3894f2db3aefa7-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 17:20:05 UTC	216	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 38 38 38 26 6d 69 6e 5f 72 74 74 3d 31 38 38 34 26 72 74 74 5f 76 61 72 3d 37 31 35 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 38 35 31 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 35 32 31 36 32 35 26 63 77 6e 64 3d 31 36 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 66 65 66 39 30 39 66 34 61 35 38 37 66 37 33 37 26 74 73 3d 34 37 30 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1888&min_rtt=1884&rtt_var=715&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1851&delivery_rate=1521625&cwnd=161&unsent_bytes=0&cid=fef909f4a587f737&ts=470&x=0"
2024-12-17 17:20:05 UTC	200	IN	Data Raw: 63 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: c2<html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>
2024-12-17 17:20:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49932	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:05 UTC	661	OUT	GET /assets/shared/checkout/v15/fonts/vMVxOXPAZsbW.woff2 HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://get-luxsheets.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:05 UTC	418	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: f9513381897baad062090659e9498cb0 server: Google Frontend Content-Length: 21432 via: 1.1 google date: Tue, 17 Dec 2024 17:20:05 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"53b8-193cfe30d00" Content-Type: font/woff2 Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:05 UTC	972	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 53 b8 00 0f 00 00 00 00 fb 8c 00 00 53 57 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 3c 1b 81 89 08 1c 89 62 06 60 00 87 44 11 08 0a 82 a8 5c 81 e8 3c 0b 86 20 00 01 36 02 24 03 8c 32 04 20 05 8a 25 07 91 49 1b 43 d7 37 d0 db f6 24 14 a8 9d 80 e6 64 d5 fe b3 1e 27 e3 16 de e3 60 05 3c 33 33 90 c7 01 c8 b6 9f 21 f9 ff ff 4f 4a 3a 64 28 44 4d 80 6a 5b eb be 3b 23 14 c3 e8 32 2a 1a cf ab b7 56 d9 e4 32 c7 b4 66 91 ae 79 8a 65 f7 b2 47 d6 81 06 10 15 d1 1d 87 45 8d 99 16 69 73 b8 5e 69 0a 17 16 75 5e 2e 2d d3 7a d6 65 d5 20 6f eb b7 d1 cd f8 8c 75 f9 dc a1 21 ee f7 27 78 3e eb 8a 33 5c 3b dc d7 9f 3e 95 85 74 b8 7f 57 48 01 03 0b 73 3b 37 bf 09 53 25 24 fa e9 f4 83 24 24 21 6b Data Ascii: wOF2SSW?FFTM<b`D\< 6$2 %IC7$d'`<33!OJ:d(DMj[;#2*V2fyeGEis^iu^.-ze ou!'x>3\;>tWHs;7S%$$$!k
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 44 bc 50 a4 fc e9 76 fb ff e2 bd d1 7d dc b6 3b 30 87 45 0e 22 56 24 04 1b 24 a4 41 82 c8 f4 35 7f 7d 8c 2d 0f 9b c3 c3 03 b7 e5 bc 74 aa 58 c5 80 a9 3c 7e 41 3b 8c b3 d6 70 ee 7e 5b a5 42 34 a9 d3 74 c7 9a 56 4a 2b 56 d0 8d 5e c4 06 c8 00 43 7c de 7b 85 00 7c ff 64 5e 14 f0 fb ad 99 2c fd f8 20 18 0e 70 0c 78 06 c3 45 45 85 c8 85 40 22 e5 42 8a c2 44 2c 26 52 66 22 0d d6 67 0e 33 d3 9c 6d 83 b9 c9 f6 2f cf ce ec 42 b9 61 85 a7 26 0c 95 a3 38 ac 3c 25 a1 f2 d5 85 91 c2 31 f0 89 20 04 d4 d5 60 8c 66 56 89 cf c3 32 e5 04 6b 41 0b 18 74 3f 22 1f e9 61 28 f7 e7 8c 40 00 0d 81 06 c0 de 7e 68 73 e0 7c fb 14 0c 5c 11 80 ff e0 40 c0 72 b5 f8 37 2f ce 40 f8 0f 72 37 38 7f 67 8d 03 a0 00 fe 29 a9 8a 2a de f6 a1 26 14 24 2a 2e 11 39 25 bd 60 d1 30 34 98 b0 9e bd 8d Data Ascii: DPv};0E"V$$A5}-tX<~A;p~[B4tVJ+V^C\|{\|d^, pxEE@"BD,&Rf"g3m/Ba&8<%1 `fV2kAt?"a(@~hs\|\@r7/@r78g)&$.9%`04
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 51 0b c7 2a 01 c0 36 cc c3 0f c2 0a 72 fb 8f 2e 64 61 2b 60 40 f4 19 c7 a8 68 00 6e 20 1c 44 a1 2f 69 25 45 4c fc 5c 0a e1 4b f1 e6 0c c9 90 f2 9b e7 ce 03 50 66 22 91 42 20 97 55 16 90 60 d7 00 0f 9c 37 10 8d f6 9d 88 11 49 62 d0 b8 5c e7 20 38 59 9d 11 e8 7d 07 81 7b dc d9 0e 5c 01 a3 23 f2 5e 48 c5 cd b2 c2 57 47 21 76 56 bf 24 60 ee 26 39 98 eb 5a e6 f9 9b d6 80 5b 6c 85 06 fe f3 34 58 c1 87 39 e4 66 ec 9f a4 e9 2b 28 0a 2d 06 90 d6 d9 9e 10 b8 62 43 31 f6 22 97 3c e3 bf 4e 95 b6 cf e5 19 6b be f5 4b ce 29 7f 7e 6c bc 54 26 7d 5c f2 2d db 3f f0 b8 3f 24 55 e9 1b cf 45 b5 39 e2 1a da 05 38 23 a5 e6 0e 12 b0 3e 31 46 c1 b7 2b 41 a4 22 d8 fb e7 c4 8e 98 26 12 a9 4f 2f 1b f5 c0 fd 25 4a 0d 38 41 c9 ab c6 87 a2 ce d8 60 96 8b ce 69 42 27 d3 6b c1 50 ce 3b Data Ascii: Q*6r.da+`@hn D/i%EL\KPf"B U`7Ib\ 8Y}{\#^HWG!vV$`&9Z[l4X9f+(-bC1"<NkK)~lT&}\-??$UE98#>1F+A"&O/%J8A`iB'kP;
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 6f 8d c5 70 69 83 8e ee 35 14 16 c9 bb bc 73 c8 71 85 b2 3f 3c 21 c3 21 25 d6 1f 65 8e 71 74 00 4c 6e 68 6d 1a b7 bb 53 71 a4 ed 21 01 a7 69 d6 ad d9 b6 77 10 76 85 b5 c9 85 b7 5e 3b 0e e3 b7 9a d1 dc 31 43 4b ee be b2 a7 7e b1 0f d0 47 45 56 69 66 c2 0f 12 3e 39 4d 70 a6 38 2d 80 94 08 7d 96 57 9d 9f 1b 4a af 25 8e 27 bc 7d 76 60 58 e5 e4 11 c6 47 e3 c3 4a f4 f6 ea 72 73 6b 2c 93 03 c7 66 04 df de 58 e4 aa 11 73 20 01 c9 71 98 62 cb 0e 09 25 b1 2a aa 24 80 88 a2 de 2f 92 fc 35 51 88 1d 15 d1 1a 8d 85 54 99 ba d3 7f 55 31 e4 b0 63 1a 25 6f b3 5b fd bd 31 ab 7d 3c 1a 81 a4 c2 55 3a 83 3d 13 e2 16 b3 46 b3 07 e3 12 87 6f f1 62 1b 77 44 c1 bb 79 83 19 a2 e3 f1 83 b4 e2 75 f8 e1 6a 29 18 cd 30 85 2b 9e c2 49 67 e6 44 98 82 ef 0c 16 9b ca d1 01 0b c5 ac cc 7e Data Ascii: opi5sq?<!!%eqtLnhmSq!iwv^;1CK~GEVif>9Mp8-}WJ%'}v`XGJrsk,fXs qb%*$/5QTU1c%o[1}<U:=FobwDyuj)0+IgD~
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 2d 1b 15 56 8e 6a 6b ae b3 fe 46 3b a8 da 7f 35 42 75 a2 9d f7 1b da 0b c2 bc 3e 8b d5 66 97 85 c7 18 25 d5 47 55 b7 be 6a 4b e5 5e fd e9 7f dd 65 98 96 db f6 38 fe 5a de f5 58 60 4b 6c 77 7c 94 8f bf 0d 02 39 ae 4f 44 4c 41 49 27 90 49 24 69 8a d4 e9 32 66 c9 9e 2b 6f 81 c2 c5 4a 96 29 5f a9 6a 8d da 47 d1 b0 49 f3 56 07 74 e8 dc ad 67 9f 04 ff 83 54 0f 1d 97 98 92 9e 95 5b 30 f1 64 53 4e 33 fd 49 d6 39 e6 9e 6f c1 91 f1 a9 d9 85 e5 b5 cd 9d fd a3 d3 8b eb bb c7 97 f7 af 7d 4f b1 01 82 75 7b 95 6a ad 1e 87 4e d1 63 7a f3 b6 bd 66 47 e3 5d fb d9 ff bc 55 94 55 bb ee 34 d3 60 d6 34 db f1 b4 59 2b 5c b7 28 9e f2 ea 61 9e 7d f4 cd 44 13 4f 31 e5 74 0b 9c 69 91 7b c6 14 b7 c4 74 67 62 96 63 98 eb ee 58 e0 c2 b1 d8 25 63 99 cb c7 4a 57 bd c6 b5 af 77 c3 db 9b Data Ascii: -VjkF;5Bu>f%GUjK^e8ZX`Klw\|9ODLAI'I$i2f+oJ)_jGIVtgT[0dSN3I9o}Ou{jNczfG]UU4`4Y+\(a}DO1ti{tgbcX%cJWw
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 06 60 8f 6e 5f 00 5d 0c 4b 46 f7 d6 0f d1 a1 7a 3d 6a b6 a8 4a 7d 97 be 4b 97 18 12 24 d0 70 8b 5a 7b f6 8f dc 3c c4 b8 5b 52 44 6c 8b 50 a0 7e 41 ff 7f a1 cb db 4d a3 be 7e dd 1c e4 8f de 6c d7 b5 cb 2b 1e f5 f8 2c b7 69 a0 c9 c0 a6 ee 43 e8 e5 be 3d e2 7f 78 bc aa f9 d5 a8 15 55 91 96 05 0a 3c bb 2a da 37 d4 14 36 be 7e e8 e2 dc 43 5c dd 5b 30 f0 6d 18 fc 67 01 d0 eb bb c5 07 a7 be 58 3f 63 b1 a7 e5 2f 98 59 ac be 52 65 2b 30 40 b9 6a 8d 86 1b 6b 82 69 da 2d b0 cc 1a 9b ec 80 92 db 01 69 cc a5 60 1c 90 fe 12 92 d8 7b 30 ec da b9 28 bc 18 b7 ce 20 60 9e 0d 43 f3 5a 17 6c c4 0a e8 18 d1 ee 6a ba 20 f0 96 45 6c 3f d1 61 48 11 61 82 3d 26 32 c8 c4 54 ff f0 78 f6 e2 23 72 c1 88 fe 46 10 d6 fa ff 96 a9 c0 6c 60 0e b0 08 58 01 ac 03 b6 00 5b 81 6d c0 1e e0 10 Data Ascii: `n_]KFz=jJ}K$pZ{<[RDlP~AM~l+,iC=xU<*76~C\[0mgX?c/YRe+0@jki-i`{0( `CZlj El?aHa=&2Tx#rFl`X[m
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 80 69 7d 5d 27 54 6c 47 3d 34 1c 33 4d 00 c3 1b 45 2c 74 63 18 a0 33 de 5b 88 51 a3 1b 17 46 50 0e 87 13 0d f8 8b 8f e8 14 69 d5 f5 6c 84 86 9c 4e cd 35 9e 55 fd 60 b3 a0 32 de 13 38 6a 05 43 b9 76 84 5a f0 e6 a8 99 cd 41 4e 37 56 31 1d d9 46 e7 a3 90 ea 9f 8b 59 f0 24 e4 01 01 dd fe 23 2f 38 c8 c2 39 76 2f ec 25 c6 bd 64 38 a8 0f eb 7d 6d ca ec 63 a7 3a 7b e7 5c b6 80 3d dc 97 ef 4d eb dc 78 72 65 3e 5f a7 ba 4d ed 31 8a 34 ae f3 b7 ee 7a 2a f5 76 5b e2 8c 99 80 43 2b ed 07 ad ed f2 12 f9 08 e2 c5 c7 f8 bb 8b 0e 3a 68 7f db ad cd 76 bd c6 07 3c 88 4c f6 ad 69 5e 80 67 cf cc 3a 1d 4a c4 ba 5b b0 a0 94 7b 28 5c 15 44 89 02 4e 26 a0 59 7b 32 87 eb 0d 16 3d 64 fa b4 28 1b ee 8d f0 8b 79 2e c0 3e 54 98 13 96 a2 24 be 0e 63 12 01 68 a4 a5 dd cc 7b e7 b0 b0 f5 Data Ascii: i}]'TlG=43ME,tc3[QFPilN5U`28jCvZAN7V1FY$#/89v/%d8}mc:{\=Mxre>_M14z*v[C+:hv<Li^g:J[{(\DN&Y{2=d(y.>T$ch{
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 80 54 bf d1 43 fc e8 8c 1a e5 c5 77 38 cb dc cb 5c cd 64 cc 66 13 cc 6c 69 69 f8 97 bf d6 70 3f 0c 49 f6 43 12 0c 9b 1e 36 75 35 6d ef 53 5b 1b 8e b3 ac 56 ab b1 b1 b3 f1 41 04 a9 5e f2 88 12 9b 50 83 fa e3 39 09 9d 3f 4c 5c 0b a3 35 6a c3 45 0c b7 df 21 6a 3e 9e 1b ce c2 48 a1 c2 91 4c b8 f3 cf d1 8e 78 4e d2 3e cc 6b ad 4a 9c ab 02 9b 74 50 3e 96 52 e6 e8 04 79 9c 8e 09 10 c0 24 15 be e5 68 8d 57 26 1a 16 fe 48 48 00 f8 2c 76 86 61 0c 8e f2 bd a4 25 76 2f c4 b9 ba f2 2e 19 ba 50 84 fb 40 08 98 c2 5b 73 e7 1e 40 eb c8 13 b4 4c de 11 fb 7c c1 43 af 5f 27 31 7b fd d5 6e 80 28 cd 0d 3b 3e 7b 49 1f 72 05 f6 04 73 ba 7f ab 99 29 0b db 8c 2f bd 85 6f b5 c1 ca c8 02 1d d9 1c 5d 08 a3 d2 1f 2c 5e de cc ad 48 7f 5e b4 0d f1 ff 3f 95 35 3d b2 d6 46 78 1c ce 2d 14 Data Ascii: TCw8\dfliip?IC6u5mS[VA^P9?L\5jE!j>HLxN>kJtP>Ry$hW&HH,va%v/.P@[s@L\|C_'1{n(;>{Irs)/o],^H^?5=Fx-
2024-12-17 17:20:05 UTC	1390	IN	Data Raw: 11 05 e2 36 08 a8 47 12 68 e1 ec 25 51 7e ec e1 86 6c 37 b1 0d 4b 18 d7 ad f6 90 8f e2 22 1b 4e 26 37 e6 0e 45 0d ce 68 ba 11 49 9c d6 9c 58 cf 4c 38 2b c9 4d 2b ca d0 85 5f 43 d8 0f 25 bc f8 00 69 ec 2d f0 d2 37 40 69 19 c5 17 e1 9c 1a a4 c1 ca 3e 97 18 5b f3 60 86 39 62 cb e7 c9 22 a0 a7 2c 90 3a 30 a2 ba a2 22 ef cb 52 4a 00 a4 54 a1 8c 64 ab f6 3a a0 09 11 bd d3 69 55 98 17 33 42 1d d2 95 25 38 57 e5 46 74 d8 38 5e 3c 41 1e e4 0a 26 8e a8 16 11 29 86 7c 82 b8 78 38 19 c2 98 d4 b1 ff 16 0e 40 8e a4 0a 64 ac 17 77 78 f7 2d a8 26 2b 7d 92 58 84 e4 79 4a ad 49 26 1d 92 9b cd e1 d6 53 19 9d d8 77 f7 cc 7e 92 8b 32 c9 c5 fe 37 d0 a3 12 dc 5d 9e 2b d9 bf 3d 17 d4 e0 0a 82 6a 09 80 44 be 61 14 5a b7 5f 36 2b 10 12 9e 30 d6 15 4c 60 4c 7d e9 fe 00 9c 9e 6c c6 Data Ascii: 6Gh%Q~l7K"N&7EhIXL8+M+_C%i-7@i>[`9b",:0"RJTd:iU3B%8WFt8^<A&)\|x8@dwx-&+}XyJI&Sw~27]+=jDaZ_6+0L`L}l
2024-12-17 17:20:06 UTC	1390	IN	Data Raw: 3e 88 23 3e 68 23 a2 8b e0 f5 f5 f7 d6 29 e5 b1 48 e0 18 a8 5b 28 8e 4c 35 8e c2 ff 37 e2 2f b1 7d 6e 96 5c ad ca 24 91 d3 41 34 ea 4c ff 6c eb ac 2c ae b0 2f 87 1c 4d 66 fb ac e4 a8 59 1f 19 1b 8b f6 69 14 a4 59 92 22 45 e1 99 a5 28 d4 be f8 fb 3c f2 29 32 56 b2 67 d7 91 fa d8 3e 76 e5 5f 72 29 15 0c be ad 8e 5e 0c 5b 1d 18 d7 1e a8 0b 9b 89 79 80 6a 0e c7 29 f8 f6 b8 58 3b 5f 01 e2 4e c9 f0 bd 2b 1d 31 ce 98 95 c9 11 43 22 c5 f2 77 05 d7 56 06 9a 7c 3e bd 17 84 94 a1 06 25 63 b4 eb 93 92 bd 35 72 7d b3 21 c9 86 66 53 92 7d 69 57 f0 4e b2 97 dd 03 56 9e a3 24 78 10 ed 83 b3 15 5e cb d7 19 96 f7 15 e3 86 9e fa aa 40 23 d9 54 11 d4 2c 6e 85 7d bd 7e 5c 58 8b 9f e2 ab 31 96 8d f8 bc 01 f6 b9 69 fb 54 4e d0 27 d5 88 39 07 16 e0 d4 48 b2 8c 3a 7d 1c e8 ff f3 Data Ascii: >#>h#)H[(L57/}n\$A4Ll,/MfYiY"E(<)2Vg>v_r)^[yj)X;_N+1C"wV\|>%c5r}!fS}iWNV$x^@#T,n}~\X1iTN'9H:}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49935	34.120.195.249	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:05 UTC	769	OUT	POST /api/4504272873783296/envelope/?sentry_key=9d4c19d105a244fbb75e3d28cf64ee9e&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.23.0 HTTP/1.1 Host: o4504272872341504.ingest.sentry.io Connection: keep-alive Content-Length: 7627 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://get-luxsheets.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://get-luxsheets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:05 UTC	7627	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 61 62 32 64 34 31 61 62 64 32 31 34 34 34 64 64 39 65 39 62 64 36 38 37 66 34 39 32 37 34 36 33 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 32 2d 31 37 54 31 37 3a 32 30 3a 30 33 2e 35 30 34 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 32 33 2e 30 22 7d 2c 22 74 72 61 63 65 22 3a 7b 22 72 65 6c 65 61 73 65 22 3a 22 6c 61 6e 64 69 6e 67 70 61 67 65 2d 72 6f 75 74 65 72 40 76 31 35 22 2c 22 70 75 62 6c 69 63 5f 6b 65 79 22 3a 22 39 64 34 63 31 39 64 31 30 35 61 32 34 34 66 62 62 37 35 65 33 64 32 38 63 66 36 34 65 65 39 65 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 38 66 34 32 61 Data Ascii: {"event_id":"ab2d41abd21444dd9e9bd687f4927463","sent_at":"2024-12-17T17:20:03.504Z","sdk":{"name":"sentry.javascript.browser","version":"7.23.0"},"trace":{"release":"landingpage-router@v15","public_key":"9d4c19d105a244fbb75e3d28cf64ee9e","trace_id":"8f42a
2024-12-17 17:20:06 UTC	530	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 17 Dec 2024 17:20:06 GMT Content-Type: application/json vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-12-17 17:20:06 UTC	52	IN	Data Raw: 32 39 0d 0a 7b 22 69 64 22 3a 22 61 62 32 64 34 31 61 62 64 32 31 34 34 34 64 64 39 65 39 62 64 36 38 37 66 34 39 32 37 34 36 33 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 29{"id":"ab2d41abd21444dd9e9bd687f4927463"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49936	35.244.193.194	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:05 UTC	1013	OUT	GET /sdk/click?effp=be9ae3c9e5dfc39574592ff51220972d&sec_ch_ua_platform=Windows&sec_ch_ua_platform_version=10.0.0&sec_ch_ua_model=&_ef_transaction_id=71fb64e74261421dbebd6fa6cf6be1da&oid=287&affid=809&__cc=&async=json&gclid=&__qp=b%7Cregion%7Cpub_id%7Coid%7Ctransaction_id%7Cgclid%7Cmsclkid&__rf=https%3A%2F%2Fmajorleagueprices.icu%2F&__efckuq=96 HTTP/1.1 Host: www.trk2dkt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://get-luxsheets.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://get-luxsheets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uniqueClick_H7JJ78=f5b0a4f9-8882-45ae-9470-ec26f5243d0a:1734455995; transaction_id=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:06 UTC	761	IN	HTTP/1.1 200 OK server: nginx date: Tue, 17 Dec 2024 17:20:06 GMT content-type: application/json; charset=utf-8 Content-Length: 87 accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model access-control-allow-credentials: true access-control-allow-origin: https://get-luxsheets.com set-cookie: uniqueClick=ba229def-13fb-4f41-9d82-a68edb48b8ba:1734456006; Path=/; Expires=Thu, 16 Jan 2025 17:20:06 GMT; Secure; SameSite=None set-cookie: transaction_id=71fb64e74261421dbebd6fa6cf6be1da\|71fb64e74261421dbebd6fa6cf6be1da; Path=/; Expires=Mon, 17 Mar 2025 17:20:06 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: 2cdd31c6-0081-412e-89cf-f8512ac05689 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:06 UTC	87	IN	Data Raw: 7b 22 61 69 64 22 3a 31 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 6f 69 64 22 3a 32 38 37 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 5f 69 64 22 3a 22 37 31 66 62 36 34 65 37 34 32 36 31 34 32 31 64 62 65 62 64 36 66 61 36 63 66 36 62 65 31 64 61 22 7d 0a Data Ascii: {"aid":1,"error_code":0,"oid":287,"transaction_id":"71fb64e74261421dbebd6fa6cf6be1da"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49934	18.161.111.25	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:05 UTC	388	OUT	GET /f/160399/300x78/3f80534177/dreamzy-logo-black.svg HTTP/1.1 Host: a.storyblok.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:06 UTC	666	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 6861 Connection: close Date: Tue, 17 Dec 2024 17:20:04 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 09 Oct 2023 08:13:07 GMT ETag: "a213d1f5410d36a2aaeb9d610fe1fb17" x-amz-server-side-encryption: AES256 Cache-Control: public; max-age=31536000 Expires: Tue, 08 Oct 2024 08:13:05 GMT x-amz-version-id: oZ6hnZChxARJpSGM4JC15aGUcD7MHYJj Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 cd436c4b56d76ad1cb04b447a4cd9cfe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P4 X-Amz-Cf-Id: jvId4-3OoImoqozwT4NnAIBDNP_WQ6-BNZFa7crgCLSLPTrIbIJU0g== Age: 3
2024-12-17 17:20:06 UTC	6861	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 57 61 72 73 74 77 61 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 57 61 72 73 74 77 61 20 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 37 2e 36 38 20 35 36 2e 39 31 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 65 64 30 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 31 64 31 64 31 62 3b 0a 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Warstwa_2" data-name="Warstwa 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 217.68 56.91"> <defs> <style> .cls-1 { fill: #ffed00; } .cls-2 { fill: #1d1d1b;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49931	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:05 UTC	1211	OUT	GET /age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185 HTTP/1.1 Host: ally.quandral.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:06 UTC	851	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 25 Jul 2024 20:36:31 GMT cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pZuuVQjE9KPbiaLArdvaK%2F2nglLG5KiieD4Tg%2B1WejKbJQHYD3DP6Ixp1FiywnQApDYmDJuP7RL4ndi%2BBcuF1ZlzdVF2OaRnJzhrPjitrf9WS2ONRuuli%2FCGM95lqZAf5mo2iA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f3894f66fd5c454-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1516&min_rtt=1506&rtt_var=585&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1811&delivery_rate=1839949&cwnd=162&unsent_bytes=0&cid=207886aebaf3e0be&ts=1170&x=0"
2024-12-17 17:20:06 UTC	518	IN	Data Raw: 39 36 37 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 09 3c 74 69 74 6c 65 3e 41 67 65 20 56 65 72 69 66 69 63 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0d 0a 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 61 72 63 68 69 Data Ascii: 967<!doctype html><html lang="en"><head> <meta charset="utf-8"><title>Age Verification</title><meta content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no" name="viewport"><meta content="noindex, nofollow, noarchi
2024-12-17 17:20:06 UTC	1369	IN	Data Raw: 70 74 3e 0d 0a 09 3c 21 2d 2d 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2e 2e 2f 62 61 63 6b 62 75 74 74 6f 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 2d 2d 3e 0d 0a 09 0d 0a 09 3c 21 2d 2d 0d 0a 09 3c 73 63 72 69 70 74 3e 0d 0a 09 09 77 69 6e 64 6f 77 2e 70 75 73 68 53 63 72 69 70 74 4c 6f 61 64 65 64 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 20 20 2f 2f 20 4c 6f 61 64 20 70 65 72 6d 69 73 73 69 6f 6e 73 2d 72 65 64 69 72 65 63 74 2d 73 63 72 69 70 74 2e 6a 73 20 6f 6e 6c 79 20 61 66 74 65 72 20 70 75 73 68 2d 73 63 72 69 70 74 2e 6a 73 20 68 61 73 20 66 69 6e 69 73 68 65 64 20 65 78 65 63 75 74 69 6e 67 0d 0a 09 09 20 20 76 61 72 20 73 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d Data Ascii: pt>...<script src="../backbutton.js"></script>-->...<script>window.pushScriptLoadedCallback = function() { // Load permissions-redirect-script.js only after push-script.js has finished executing var script = document.createElem
2024-12-17 17:20:06 UTC	527	IN	Data Raw: 74 73 2f 61 67 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 2e 70 6e 67 22 3e 3c 2f 69 6d 67 3e 0d 0a 20 20 09 09 3c 2f 61 3e 0d 0a 20 20 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 66 66 65 72 2d 73 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 74 69 74 6c 65 22 3e 56 65 72 69 66 79 20 79 6f 75 72 20 41 67 65 3c 2f 73 70 61 6e 3e 0d 0a 20 20 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 75 62 74 69 74 6c 65 22 3e 3c 70 3e 43 6f 6e 74 69 6e 75 65 20 62 65 6c 6f 77 20 69 66 20 79 6f 75 20 61 72 65 20 6f 76 65 72 20 74 68 65 20 61 67 65 20 6f 66 20 31 38 3c 2f 70 3e 3c 2f 73 70 61 6e 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 66 66 65 72 2d 73 70 61 63 65 72 22 3e 3c 2f 64 Data Ascii: ts/age-verification.png"></img> </a> <div class="offer-spacer"></div> <span class="page-title">Verify your Age</span> <span class="page-subtitle"><p>Continue below if you are over the age of 18</p></span><div class="offer-spacer"></d
2024-12-17 17:20:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49937	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:05 UTC	758	OUT	GET /assets/shared/checkout/v15/images/CpEpEAQ8eEXs.webp HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:06 UTC	419	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 27928da1a4247bc5b2bb3c710b9a62a4 server: Google Frontend Content-Length: 84705 via: 1.1 google date: Tue, 17 Dec 2024 17:20:06 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"14ae1-193cfe30d00" Content-Type: image/webp Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:06 UTC	971	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 03 02 05 a4 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 b4 69 f0 7e a3 bc c3 d2 bc 5f c7 e3 eb Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"4i~_
2024-12-17 17:20:06 UTC	1390	IN	Data Raw: 3b 74 b5 81 b5 e7 1e 7e 1c 2f b9 f9 87 ac f9 b0 c7 48 df a3 ea ad e2 9d b7 9f fc 7f 9b e9 5d 9b 1f f5 7e 80 e6 d3 d5 a5 e3 ba ab f2 3e 57 57 dd c2 ff 00 ab f4 a6 af ce e0 e2 74 70 f3 f8 de 2e 13 c5 2e 37 97 cb 6b 90 8f 62 5d 9e ae 8f 01 d1 d7 71 19 3d a7 4c e0 fa 34 b8 8d f4 58 7c 96 19 bd 9f 9c ed 63 a0 c9 d7 ea 33 79 0e b1 f4 27 4d aa 55 e5 c7 02 f5 48 24 b7 49 75 35 32 1b dc f4 7e 8e fe 61 d1 77 89 df d7 8d a1 6b 0f bf a2 ed fc fd 5d d1 cd 5a 55 16 c6 51 92 84 d5 fb b4 af c8 f4 6b 29 b9 8b 4a 2e ea d2 bf 4a a8 b6 28 8d d0 a8 fa 7c d6 ae d6 b5 4f 84 cf 16 6a 97 e5 99 c8 9b 92 57 6d 7c a7 bb 46 e9 28 a6 b2 83 9a d0 00 28 b4 d1 50 1c c5 41 15 64 64 8d 07 ab 24 19 1a ac a2 39 29 a8 f5 86 8e 05 92 15 b1 5a 2d 35 55 aa e6 aa 80 8a 88 39 a0 22 2a 8a 08 2a 40 Data Ascii: ;t~/H]~>WWtp..7kb]q=L4X\|c3y'MUH$Iu52~awk]ZUQk)J.J(\|OjWm\|F((PAdd$9)Z-5U9"**@
2024-12-17 17:20:06 UTC	1390	IN	Data Raw: e4 66 f9 b7 a3 79 1f 87 8d 09 6c 55 f9 5f 17 4a de 76 9c c5 6f 57 f1 1f 6c fa bf 71 be 47 eb 7e 45 cb 1c b6 96 4f 47 e0 f1 7b 33 e2 3e f7 d9 7f 86 fa 37 90 fc df 9d 3f be f9 47 5b 37 17 92 ea e0 f1 f2 76 7d d7 37 07 7e cd e5 97 37 97 8e d7 78 f6 f6 e9 14 53 c3 c7 83 f2 33 ea 6b a6 72 7a 7f 6f e9 fa 5e 51 dd f5 2b e9 f4 46 e7 bb 7b 61 39 a4 0b 3a 11 13 20 c7 aa d9 10 e4 cd 41 5e 22 99 f5 a2 ea b6 d5 ca 32 e2 96 15 ac cc ef a8 d1 a3 73 51 30 f4 f9 38 a5 d7 71 dd 7e 35 27 13 d3 f0 b6 b3 b7 e2 3b 79 77 e5 8a 4d e2 bf 31 b3 c5 e6 e0 f4 3c a7 69 9d f4 da 15 17 58 a3 c9 6a 60 56 d7 53 93 be 59 70 6a 25 29 f0 72 ad cb cb 97 9d ea f5 fc ff 00 4d 65 ac 4b d8 76 4b bb 9b 79 6c e0 1c c4 3b 7f 23 b0 5b b7 5a fd f3 54 6b 09 59 0d 39 6e 50 ca ce 5d 37 c5 bd 0b 7a 39 ae Data Ascii: fylU_JvoWlqG~EOG{3>7?G[7v}7~7xS3krzo^Q+F{a9: A^"2sQ08q~5';ywM1<iXj`VSYpj%)rMeKvKyl;#[ZTkY9nP]7z9
2024-12-17 17:20:06 UTC	1390	IN	Data Raw: 56 71 85 89 2c 85 6e 29 5e 77 3e c6 4c 93 a3 ec 54 9a e6 cb aa d9 d1 46 b1 2c a5 69 49 e4 8d fa 8b 15 88 6c 11 e4 4b 1b e0 d4 99 14 56 8e 68 c1 5a 48 20 08 f8 a1 1c c7 40 48 22 92 95 e2 7c 7e fe 37 e7 7e 1c 7a 9c 97 63 d3 cd 16 ad 2d 0a ce a1 a7 cf f4 ef dd f0 5d 87 38 f4 27 4f cf c1 39 60 32 b7 67 b5 2b 1c f7 51 e7 e9 cb 56 b1 e8 5e ce d9 be b3 76 c7 af de 48 b2 f6 db 07 ad 35 47 8d 45 6c aa ad 51 51 a0 35 cd 88 dc d7 cd 53 e2 7b 0e 10 df eb 78 6e b8 5a 75 67 36 64 63 ac 8f 2a ff 00 36 73 f1 53 dd c6 fa bd bc bd 6d e1 b9 1a 5c f9 cd 73 d7 f3 31 d6 e7 5b c4 f4 c9 b9 c6 6f 73 69 55 f2 44 d6 a3 33 90 89 ac 8d 6e 36 93 52 a5 80 27 d6 c8 d2 34 5d 04 29 97 d1 61 f4 e6 ee ee 1e ab 33 e2 e8 63 9c e7 3d bd 87 6e 8e 85 09 6b 22 8d 93 a6 6f cf 0b 3a 66 7a 32 3b a6 Data Ascii: Vq,n)^w>LTF,iIlKVhZH @H"\|~7~zc-]8'O9`2g+QV^vH5GElQQ5S{xnZug6dc*6sSm\s1[osiUD3n6R'4])a3c=nk"o:fz2;
2024-12-17 17:20:06 UTC	1390	IN	Data Raw: 55 77 3d c8 f6 48 aa e9 16 23 41 ad 4b 23 64 47 a4 ac 85 46 be 11 58 e9 22 91 ce 58 9e 2c 46 ae 51 ae 47 03 9a e8 57 c4 e1 e3 1f a8 ad 7c c4 31 e8 31 68 ad db 09 94 ed 97 a5 5e 83 27 4f 78 b2 f4 97 59 b0 f8 92 e6 c0 d7 d3 14 54 47 b5 d4 48 ab a3 54 6d 39 11 45 04 04 69 0e 18 a3 91 5c 83 51 ca d5 56 0e 10 4f 38 f1 8f 52 f2 9f 8f f3 fb af 22 f5 af 2f d7 8b b2 d6 e6 3a 1e 9c f5 7c bf d3 7c bf 2e fc ab af e5 ef a1 e9 54 76 3e b7 d6 c1 f1 ef 43 f3 5f 95 e5 dd f6 8f 2b f5 3f 67 ae 5a d6 38 0e fb e1 75 39 de 8b e6 fc 9f 46 e9 2a 5a fa 7f 55 73 6d f9 67 36 46 6d 0e eb e7 78 36 3a 6c 2d 9f a5 f4 7a 24 89 be 8d 4f 0b e9 46 2e 2c b0 63 5d bc 5c d5 5c f2 87 22 68 73 d6 c6 a7 3d d1 74 d7 45 ab 8d a3 71 9f c8 74 9c c2 d3 b3 56 db 5d 1f 49 83 bc cd 8c 5d 5c 33 9a c0 d2 Data Ascii: Uw=H#AK#dGFX"X,FQGW\|11h^'OxYTGHTm9Ei\QVO8R"/:\|\|.Tv>C_+?gZ8u9F*ZUsmg6Fmx6:l-z$OF.,c]\\"hs=tEqtV]I]\3
2024-12-17 17:20:06 UTC	1390	IN	Data Raw: e5 f7 e7 bc d1 5c f7 1a 25 00 be 50 52 f3 b3 dc 5d 65 46 17 1b 55 0b 71 d7 88 b2 ca 31 17 60 a3 01 7a bd 2a e5 e8 33 eb 1a 14 69 40 4d 5a 1a c5 b8 e9 b0 b1 15 79 a3 d5 bd 37 89 9b e2 fb fa c8 f9 65 e7 d7 a5 83 16 49 34 ca 97 c7 cb 24 96 40 fb d2 a5 29 ad be aa cd 3b ac 88 99 52 35 94 d2 34 99 f2 42 92 95 1b 89 6c 81 ee 82 5b 03 16 c7 a3 9a 34 73 d6 27 28 22 b8 46 8e 19 41 05 14 55 6a a2 b2 35 ca d2 2a 28 80 53 44 72 a0 20 a0 08 a8 80 f8 e3 cc 99 1a ea 1c 8a 38 80 8f 94 eb ee f2 df 3b e2 74 17 b1 f5 b9 37 37 b9 4f 4f f4 7d 1f 3f f3 be cb 8a c7 18 7d 3b cb 7d 2f 7d 30 70 2d 67 4e 4c f6 df 20 f6 36 f8 fe 56 6c 7e 7c ec fb 6f 99 76 fd 7d 58 5c 79 03 8e b7 ae e4 f9 d7 5f 45 ae 69 9d d4 e2 5b e5 f9 ed 74 bd 1d 67 b8 8c 7b 33 1f 77 29 d9 6c d4 a0 c9 ab 71 c7 67 Data Ascii: \%PR]eFUq1`z3i@MZy7eI4$@);R54Bl[4s'("FAUj5(SDr 8;t77OO}?};}/}0p-gNL 6Vl~\|ov}X\y_Ei[tg{3w)lqg
2024-12-17 17:20:06 UTC	1390	IN	Data Raw: 96 2e 75 ea 4f f2 c1 3d 4c f2 c0 f5 35 f2 a7 1e a8 79 53 eb d4 5d e6 1d b6 2e cb c7 71 db 49 01 a3 84 05 25 44 52 e5 14 24 1a a9 76 aa 8a 82 28 22 c5 32 82 16 28 12 00 2a 2a 08 22 80 8a 0a 35 55 10 73 4d 14 04 73 40 12 9c 0b 23 14 50 47 35 51 92 b2 90 50 11 cb 02 a8 88 3c 67 e4 b9 df 1f cf f8 92 d3 b4 dc 25 b3 52 74 ed 3c d3 d6 fc 8f bf bf 7b b6 e6 3a 2c ef ce 7b 1c eb 7a ce bd 08 b6 b7 ea a7 d5 f3 38 e9 da 72 50 68 4d 66 f4 11 d3 75 ed 3a 3e 67 a0 75 b3 9d b7 5a ce 33 9b ef b9 76 f0 ed d1 8a 6b 70 c6 6c 6b 54 cf bc 56 8d 6b d5 c1 a1 15 7b 8d a4 cd d3 a9 a6 95 ac f7 5c cb 5a 46 6b 2d 8a cb a2 a8 96 0a ef 7a 90 b6 d3 48 a1 5b 05 4b 8c bf d3 37 96 67 fd af 9a c9 26 96 ab 25 c5 28 a6 80 67 9a 21 9c eb e1 46 ae cc 46 76 96 14 06 e7 39 b7 ae 70 b6 76 32 4b 17 Data Ascii: .uO=L5yS].qI%DR$v("2(**"5UsMs@#PG5QP<g%Rt<{:,{z8rPhMfu:>guZ3vkplkTVk{\ZFk-zH[K7g&%(g!FFv9pv2K
2024-12-17 17:20:06 UTC	1390	IN	Data Raw: c2 77 37 7c ec b3 d4 2e 79 1b 53 d9 8f 26 b9 73 e9 ab e7 b7 eb b3 4e 56 eb 3b c6 75 a4 94 52 d0 52 64 02 e8 14 d6 51 44 81 ae 49 50 50 68 e1 a6 aa 88 8a d7 00 a8 8e 41 9a 21 31 27 ca b1 c1 77 c1 f0 f8 4f 4a f3 df 57 e9 e9 cc 6c fa 79 fa 51 a4 c9 7d d9 cf 8d 61 24 6a aa 43 29 a9 6f 5b 0e 73 bf 9b 96 d8 91 dc 97 63 93 5c b3 99 16 89 14 8f ad 5d be 59 64 f4 e9 39 dd ec 17 07 a1 a5 5c 1d 4d ec 3b a8 91 52 d4 55 41 8d 94 46 ab e3 b1 cf 81 e3 87 2d 89 24 0e 4d 49 a9 4e 90 d3 b7 45 5d 3d 29 ec d5 bb 9b 72 1f 0c f1 75 e7 0a be 5f b7 f3 e0 2e 3c a0 97 d4 a0 69 06 59 a4 86 69 a6 19 86 a2 19 86 ab 4c c3 44 33 cd 08 4a 84 ed 21 24 0c ea fb 31 91 e8 e1 59 3a 2a b4 b4 48 29 ed 67 95 12 df 3e 41 c9 e6 d5 0e d7 a6 79 b3 e5 bc df 38 4a e8 7d bc 83 7e 70 85 b6 42 a9 6c 29 Data Ascii: w7\|.yS&sNV;uRRdQDIPPhA!1'wOJWlyQ}a$jC)o[sc\]Yd9\M;RUAF-$MINE]=)ru_.<iYiLD3J!$1Y:*H)g>Ay8J}~pBl)
2024-12-17 17:20:06 UTC	1390	IN	Data Raw: bd 67 53 2e 5d 08 75 2a ac e1 55 f3 4b 55 0b 2a 54 75 b0 a2 db c1 9c 38 96 4c fa af 97 96 c9 f4 eb b3 5e 46 7b 5c f2 f8 99 ee b3 59 e0 16 bd d1 b6 f9 0d af 53 54 f2 5b 1e a4 59 e7 77 3b 64 8e 30 ed 9a 71 cf ea 45 e6 5f d1 b1 70 57 71 4c 37 6d 22 62 ae d2 19 26 b1 66 5b f4 03 38 d1 4a ce 66 a1 19 46 9b 57 34 d1 2b 38 be 96 51 2e 15 4d b7 c8 cf 5b a8 56 59 d2 a0 4b 06 35 4d d6 98 8b 95 a7 5f af 3f 15 36 79 ef a5 e1 b0 62 c3 a9 be 73 a5 9d 0b 79 e4 3a 15 e7 54 e8 8e 74 3a 23 9f 2b a0 39 d2 3a 23 9b 0e 90 e6 ca e9 0e 70 3a 25 e7 14 e8 8e 74 4e 89 98 01 d1 37 9f 69 d0 a7 3a e3 a1 4c 16 9d 01 ce 86 8f 37 a6 d8 b1 ed 1e 5d ea 52 5f 7b 1a dc cf 64 05 ea d3 c3 0e 74 68 3d a3 88 5f 61 c9 51 67 8e d6 b6 d3 04 65 86 5b 52 1d 7c 59 35 06 d8 b6 9d 7d 6c 39 35 ae 53 bd Data Ascii: gS.]uUKUTu8L^F{\YST[Yw;d0qE_pWqL7m"b&f[8JfFW4+8Q.M[VYK5M_?6ybsy:Tt:#+9:#p:%tN7i:L7]R_{dth=_aQge[R\|Y5}l95S
2024-12-17 17:20:06 UTC	1390	IN	Data Raw: ba 0a 2a 5e 32 5e 68 26 7a cb 65 b1 a2 5d 9b 12 7b 34 e0 a6 92 dd 29 c3 66 9b b3 24 ad 28 68 47 16 a0 8e 3b 60 73 94 9e fe 63 93 4f 9d b8 d2 c4 94 5b 57 26 c1 84 e9 8c 80 f4 25 eb 1f d3 1c ab ba 86 d7 34 bd 49 1c c3 fa 60 e6 5f d4 36 5e 65 7a 87 1c c1 d3 a2 73 52 f4 2a 60 27 44 1c f9 d0 a9 ce 9d 10 73 8e e8 03 98 97 a2 2d e7 ce 8d 87 3c bb 8e 8e 7e 4d b6 59 90 bb 6a 61 a6 ec 46 33 e4 d4 8c 97 ea 49 66 34 9a 71 14 96 fb ac ce 4d 48 eb 31 9a e4 63 b7 61 d2 e1 3f 6d 95 8e 9b 09 a9 80 ed 79 53 15 9d 3a d7 22 de a1 17 98 3a 94 4e 5a 2e b9 0e 45 bd 6d 78 e7 19 d6 87 1e 9d 73 4e 51 fd 74 6b c9 9d 68 71 89 b3 ad 67 20 76 6f 38 97 76 89 1c 5c 1d e4 47 10 ce e9 87 08 bd dd 73 8b b3 d7 dc b7 87 8f b7 75 9e 49 91 d5 52 f5 f9 32 5d ba 9d 31 ce d7 eb a3 b9 e5 22 ef 2b Data Ascii: ^2^h&ze]{4)f$(hG;`scO[W&%4I`_6^ezsR`'Ds-<~MYjaF3If4qMH1ca?myS:":NZ.EmxsNQtkhqg vo8v\GsuIR2]1"+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49938	34.120.195.249	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:06 UTC	498	OUT	GET /api/4504272873783296/envelope/?sentry_key=9d4c19d105a244fbb75e3d28cf64ee9e&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.23.0 HTTP/1.1 Host: o4504272872341504.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:06 UTC	290	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Tue, 17 Dec 2024 17:20:06 GMT Content-Type: text/html Content-Length: 548 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:06 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49939	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:07 UTC	664	OUT	GET /assets/shared/checkout/v15/css/fonts/Brandon_reg.woff2 HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://get-luxsheets.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:07 UTC	306	IN	HTTP/1.1 404 Not Found content-type: application/json; charset=utf-8 x-cloud-trace-context: db7136ca35950d4e0c13447bd28f81ca date: Tue, 17 Dec 2024 17:20:07 GMT server: Google Frontend Content-Length: 126 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:07 UTC	126	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 52 6f 75 74 65 20 47 45 54 3a 2f 61 73 73 65 74 73 2f 73 68 61 72 65 64 2f 63 68 65 63 6b 6f 75 74 2f 76 31 35 2f 63 73 73 2f 66 6f 6e 74 73 2f 42 72 61 6e 64 6f 6e 5f 72 65 67 2e 77 6f 66 66 32 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Route GET:/assets/shared/checkout/v15/css/fonts/Brandon_reg.woff2 not found","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49940	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:07 UTC	661	OUT	GET /assets/shared/checkout/v15/fonts/Yfx5aeloppAM.woff2 HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://get-luxsheets.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15
2024-12-17 17:20:07 UTC	418	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: c0a92731d3d965375b14d0c13ca4cb58 server: Google Frontend Content-Length: 29564 via: 1.1 google date: Tue, 17 Dec 2024 17:20:07 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"737c-193cfe30d00" Content-Type: font/woff2 Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:07 UTC	972	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 73 7c 00 0f 00 00 00 01 98 b0 00 00 73 1a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 18 1b 81 f1 78 1c 8c 08 06 60 00 87 4c 11 08 0a 83 e8 6c 82 f3 31 0b 87 70 00 01 36 02 24 03 8f 48 04 20 05 8c 02 07 9b 26 5b 02 59 91 01 b5 e2 f6 ee 95 14 18 74 1b 42 70 4b dd 6e ae ce 53 0b e4 e6 4d d2 9b 11 12 9f df 45 3a 2b 82 8d 03 20 c1 5c cc 64 ff ff ff ff 9f 9c 54 c6 d8 3e 68 07 40 51 93 2a 2b 2b c8 91 84 9c dd a6 82 0c b7 a5 b6 9c 27 cc 73 af 75 69 a8 6b 41 e9 65 13 b2 99 db 35 a3 e5 9d 69 e2 63 a7 cb 05 dd ee 62 73 ee 0f 7b b7 4f 64 78 c0 41 45 67 51 89 ca 37 f2 7a e3 b3 1f 28 e6 85 4e 1e ce 67 51 77 d6 92 33 3f 9c 39 aa e9 76 7c ac d0 e5 a1 43 cc 17 a7 2f b1 e2 8e 0c 91 f3 cc df c9 Data Ascii: wOF2s\|s?FFTMx`Ll1p6$H &[YtBpKnSME:+ \dT>h@Q*++'suikAe5icbs{OdxAEgQ7z(NgQw3?9v\|C/
2024-12-17 17:20:07 UTC	1390	IN	Data Raw: d4 02 2c 73 80 8a f2 8a 52 ae 89 11 92 fc 70 25 bf e5 fb 2e 07 fb c3 4e 4d da 07 61 a8 b1 84 bf ea ab 43 15 61 4e f8 8b fd 90 e5 45 a2 a5 40 d2 52 e0 e1 4e 7e 96 07 6a af 29 fd 2f 9a 9d d3 a1 58 33 1e 9e 63 36 cb 01 26 97 ce 03 70 00 94 f6 e4 b2 de f9 29 fd 47 fe 29 5d ee 72 ad 97 d2 0b 2f b4 b4 8e 4a c5 19 a3 d0 04 f0 4a 43 68 20 0e e0 41 61 20 7f 6f 6a da ee bb c5 5e 50 24 0e 92 e8 90 58 60 74 74 56 ea 41 3a c5 3b 8d dd 6b 5c 34 72 b7 fb f6 6f f8 fb b1 04 88 c0 e3 02 07 12 07 1c 25 82 b8 00 90 4a 20 1d b0 0b 90 02 16 94 44 f2 4e 29 75 8e b9 02 48 9d 52 8e 95 ec 2a 85 ce b9 28 63 e5 5c ba 75 d7 ba 55 69 77 6e 4b b7 9d 8b ce 3c ff ff 7b ab d9 bf 27 97 9c 20 cc 95 ed 78 c2 92 a5 fc d5 dd 13 0e 1f b2 aa c9 f6 91 8b 5c 90 ab 9b 10 75 48 1e e3 fe 42 cd 42 85 Data Ascii: ,sRp%.NMaCaNE@RN~j)/X3c6&p)G)]r/JJCh Aa oj^P$X`ttVA:;k\4ro%J DN)uHR*(c\uUiwnK<{' x\uHBB
2024-12-17 17:20:07 UTC	1390	IN	Data Raw: 63 08 e7 4f dc ba ab 5c 25 62 6f 5c e4 c8 5c 5d e7 c4 97 ab 2c ee 00 13 2e d2 48 94 84 e7 0b c4 6c 0b df 71 e9 5f 2f 4a e8 40 7a 77 a7 75 bf 26 4a 03 91 32 c5 14 b3 1d 22 01 95 e2 6d 05 ab 22 5a 92 da 91 77 72 76 8b d8 1b c4 47 9d b1 92 2a 09 28 6d e4 d0 7e 7d a0 7c 94 32 30 47 42 a7 bb 57 eb c3 33 1e 8b 45 4e b3 49 58 22 49 3e 96 2d d1 a2 74 ba 34 a1 e8 a8 a5 70 43 a2 a5 dc 94 76 22 ad ad e0 00 92 78 a3 80 66 fa 68 e5 62 7e 9e a2 16 99 fd 11 66 cb 57 61 c6 c9 34 06 23 99 24 4b 54 e2 ed 94 ed e6 ec 4f 09 00 2a eb 72 f7 ef 26 03 a7 d9 4c f4 40 9b c7 0b 7d 83 01 f3 d5 cf 26 2e a6 99 cd 70 f3 a4 16 2e fe 90 2c 43 f9 31 87 4c 87 2c 52 ca c8 28 b6 26 db 99 1e 4c a3 30 ab ab ce a8 59 8f 05 c6 69 be 7a e5 57 8b 79 85 16 f9 fd 91 f1 a9 83 64 2c 38 91 65 92 6b 10 Data Ascii: cO\%bo\\],.Hlq_/J@zwu&J2"m"ZwrvG(m~}\|20GBW3ENIX"I>-t4pCv"xfhb~fWa4#$KTOr&L@}&.p.,C1L,R(&L0YizWyd,8ek
2024-12-17 17:20:07 UTC	1390	IN	Data Raw: 91 75 d8 25 e7 8e 6a 43 b4 04 ca a2 a5 17 b5 d2 ed 91 58 1f 7a f9 ae 0a 06 22 60 b0 94 04 c4 e4 58 78 99 82 6b 66 47 05 bd 1f 3d f3 42 5f 42 89 a7 51 81 0a 79 6d 4d 2f 09 09 5a d8 8a 41 d3 f2 18 ca bf 19 8e e7 09 9a 9a d8 4f c4 36 eb 51 60 05 f8 e5 e4 9a 16 d5 2e dd 16 44 bb d8 3a ff b6 ba 23 50 b5 af 52 65 c4 b6 26 df ac 2f 22 3c 3c ba a4 2b 72 53 6f b2 4b a7 a6 fe f9 2e 8c 06 e7 21 de 4d cd 5b d4 30 95 65 41 c9 e7 d4 48 bd 8d e8 18 78 37 7b dd d7 28 0a 9d 46 98 24 1e d2 d7 7e 03 95 7a fc e9 be c7 93 33 bb a4 3a cb b3 ab 21 16 0d b3 68 37 93 46 d2 9e 74 d7 63 f7 24 75 3f 3d 98 83 87 b4 3d 92 c7 c5 93 c7 8d ec 00 be 11 70 b7 d2 71 cd 80 a5 45 17 28 8b e6 c4 82 2d c7 76 c7 63 ad 82 30 24 92 39 11 60 b1 6a b7 1a 61 91 d8 e8 9c 18 61 33 6f e7 4e 35 42 3e b1 Data Ascii: u%jCXz"`XxkfG=B_BQymM/ZAO6Q`.D:#PRe&/"<<+rSoK.!M[0eAHx7{(F$~z3:!h7Ftc$u?==pqE(-vc0$9`jaa3oN5B>
2024-12-17 17:20:07 UTC	1390	IN	Data Raw: 8a bb 8a 57 94 8a 72 49 41 a9 45 ad 4e 47 1a 94 26 c4 ce 3b 41 90 0a 89 61 11 10 41 11 12 61 11 11 51 11 13 71 89 a0 48 8a a2 68 8a a1 a2 54 8c 8c 93 09 32 49 a6 90 02 28 81 26 d5 a6 66 a8 39 6a 41 5c 12 57 c4 35 71 43 dc 12 77 c4 3d 70 00 8e c0 09 38 13 2f c4 2b f1 46 bc 13 1f f0 84 17 bc d5 d7 37 7c e3 17 ff 13 0d aa 88 2e 61 4a ae 24 1c 09 8f 22 a0 88 28 12 8a 4c a4 10 a9 44 16 1d 9b 8e 43 c7 45 f2 90 7c a4 00 29 44 8a 90 62 4a 71 1e 88 48 00 10 a2 4c a9 eb c0 4a 08 0f 55 c2 78 b8 12 c1 6b 21 da c0 ad 77 3c 28 1d de 69 81 d3 df 82 f7 e4 87 cc 33 f8 21 69 c5 b4 fa 50 93 d7 a6 75 5d fd ba 29 b6 9d da 0f 1d a7 ae 53 77 d1 d3 f4 56 fd d3 e0 34 54 4f ee a7 f6 d3 fb 99 fd ec 7e 6e 3f bf 5e 88 4b 71 39 ae c4 d5 b8 16 37 e2 2e 64 83 14 4c a1 14 4e 91 14 4d b1 Data Ascii: WrIAENG&;AaAaQqHhT2I(&f9jA\W5qCw=p8/+F7\|.aJ$"(LDCE\|)DbJqHLJUxk!w<(i3!iPu])SwV4TO~n?^Kq97.dLNM
2024-12-17 17:20:07 UTC	1390	IN	Data Raw: 13 53 33 73 0b cb f6 e5 dc 9b bd 77 f9 30 a7 8f 6d 35 00 00 00 70 1a 4a e7 74 ea d4 c9 62 de ec fc f7 fa 0d b4 33 d5 a4 cf fc 25 f9 01 db 84 4f fd d7 fb 53 07 83 ee 9d 12 13 c1 8f d7 6b c8 77 52 a6 4c 9b 31 6b 6e 9a 97 5a 5f 29 a5 94 52 7e a4 a7 25 44 44 c4 cc cc cc cc b7 b2 b6 d2 47 c3 f9 7a 32 b9 c9 92 3b a7 38 cc c5 c3 27 70 a0 3d d8 33 db 0a 8d 2e 43 f8 a6 7f 57 fd c0 01 e4 9d 72 9c 77 5f 2d dc 19 11 11 11 33 33 11 01 98 23 a2 58 24 56 91 2d d9 39 38 e3 ee c4 6b 7e 41 61 d1 f9 18 14 97 81 2c c8 49 4e a9 a4 53 46 56 2e f9 ca 66 c1 ac 28 28 91 4a ef c7 6b 9c ba a4 21 6a 4e 83 db b7 55 86 0a 06 47 dc 68 b1 1a b8 df 63 9e 5c 9d af ae be e1 19 18 1a 19 9b 98 9a 99 5b 58 6e d1 be 34 4d d3 34 4d d3 34 7d 5a 27 a2 0f 6c 0d 08 78 f4 d9 b5 d7 a5 5a d8 df fd d3 Data Ascii: S3sw0m5pJtb3%OSkwRL1knZ_)R~%DDGz2;8'p=3.CWrw_-33#X$V-98k~Aa,INSFV.f((Jk!jNUGhc\[Xn4M4M4}Z'lxZ
2024-12-17 17:20:07 UTC	1390	IN	Data Raw: e0 45 30 24 0a 8d 11 3d 80 2c eb 3f 28 8b 55 d4 d3 0c 6d 33 e6 fa 02 b1 84 15 6b 36 6c d9 a9 3d e6 c0 91 93 3a 23 2e 5c b9 71 e7 c1 93 17 1f 34 8f d6 e1 62 81 8a 8e e9 0a a7 78 0c 01 11 49 c9 08 0a 2a 1a 3a 06 a6 b2 d8 67 e3 38 24 49 d6 6f 03 fd 00 44 92 21 9d 2c 3d 2f 2a 87 6a bf 58 eb 26 b8 12 54 f0 b4 6a e7 c9 f0 98 af 87 3e 03 c4 35 cb 7f b4 01 94 11 0e 1c 39 ef 8f 35 74 dc 47 56 9c 2b c3 ac 65 3e d9 9d 66 cb fe c8 03 00 00 77 96 88 c8 34 66 4a 2e d8 a5 03 c6 1e 00 00 55 55 00 a0 f8 98 0a 00 70 47 60 a4 34 93 8e 81 a9 2c 37 1b 47 b9 26 0f 9f 80 90 48 1b 7b 02 4f 50 25 b7 b4 ec ae 29 92 72 a6 7a de ac db 9a dd 59 ad 05 35 3c ad ea 95 3b 86 74 d7 73 f1 3f 80 5a cb c7 3e 1c dc 3c ad f7 e5 1b 7e 41 53 d2 6d 9f bb 08 a5 43 e6 ca 94 5d 93 9b d6 a2 45 ab 36 Data Ascii: E0$=,?(Um3k6l=:#.\q4bxI:g8$IoD!,=/jX&Tj>595tGV+e>fw4fJ.UUpG`4,7G&H{OP%)rzY5<;ts?Z><~ASmC]E6
2024-12-17 17:20:07 UTC	1390	IN	Data Raw: f4 5a a7 b7 3a bd d7 e9 a3 4e 9f 75 fa aa c3 77 cd 7e e8 f4 4b b3 3f 9a 03 70 21 24 78 3d 34 78 3d 03 90 04 83 24 3c 48 22 82 24 23 ac 4c b0 32 c3 8a 8d 1d 17 3b 1e 76 16 d2 b2 91 96 88 20 7b 82 1c 09 72 21 c8 8d 20 0f a1 79 8a c9 87 53 7e 9c 92 72 2a 10 a3 60 8c 14 d8 85 49 4b a5 a3 24 a1 a5 08 2d 4d 68 19 62 ca 36 86 c8 59 ed be 6a 4f a5 fd 81 98 f8 21 31 57 f6 db 7f 4f d9 b7 b7 1f ae 10 e7 8b a9 00 0f 80 07 b0 00 0c 08 fd 93 c9 c2 3b 9d fa 01 00 00 40 00 00 74 49 00 f0 61 03 01 ab 47 07 00 00 1e 00 00 00 80 3b c2 30 0c 00 00 84 fe e1 6e d4 ec da 71 e7 8a 9f c5 21 84 d8 ec 14 fc 06 e7 6d 2f 71 db fe f2 b6 27 c4 26 c9 c0 14 7f 36 fb 25 6a a9 a8 a7 d2 aa 54 4f 35 96 b9 6d db 9f ea 97 80 1d ee e5 5f c5 7c 5d 4d 9c f6 d8 75 47 97 65 66 e3 28 d7 87 87 4f 40 Data Ascii: Z:Nuw~K?p!$x=4x=$<H"$#L2;v {r! yS~r*`IK$-Mhb6YjO!1WO;@tIaG;0nq!m/q'&6%jTO5m_\|]MuGef(O@
2024-12-17 17:20:07 UTC	1390	IN	Data Raw: 32 42 cd 9a c6 13 3d 67 6c dd a7 91 34 53 44 46 af f5 23 4f dc 75 e4 1f ca 40 d2 db 27 97 38 db e4 16 97 b8 27 7f 65 a7 de da d4 5a 3c 3a 23 bf 36 5d c9 80 74 82 4e 70 a4 d4 9b 93 00 46 7f 05 d8 f1 84 00 57 e0 c8 dc d9 d9 6a 23 55 ff aa 0a 70 1b 67 85 a1 5a c9 e0 a6 64 ae 24 66 3c c1 db b9 f6 76 2d f5 0b d5 50 27 34 e5 e8 28 0d 1d 37 02 4e ba df 07 de dd c3 d7 47 b9 71 e0 a6 d5 32 98 35 75 dc 32 77 43 09 7b 08 83 0e ad 5d 2e 74 76 ae 11 f5 a7 b5 05 ba ee 09 c8 da 5a 38 4e 18 68 6b 63 f7 dc 17 0f cf a1 34 4f 77 36 ee ba fa 88 a4 4d 70 2a 2d b0 bd aa 25 22 c2 b7 af d5 c2 ad 1d 20 9d e4 bb 83 22 18 01 77 35 1d 22 91 df 12 f2 87 0b 00 a0 a1 74 0c 80 01 60 5a 7e 37 dc 76 5c cf 0f c2 24 cb 0b 45 80 52 19 00 ee 2c 48 61 30 f8 38 89 5f ef 40 f4 36 e3 0d 04 42 de Data Ascii: 2B=gl4SDF#Ou@'8'eZ<:#6]tNpFWj#UpgZd$f<v-P'4(7NGq25u2wC{].tvZ8Nhkc4Ow6Mp*-%" "w5"t`Z~7v\$ER,Ha08_@6B
2024-12-17 17:20:07 UTC	1390	IN	Data Raw: 7f 81 b1 76 b5 ad 2f a7 98 c7 2e ed 34 44 e7 d9 af 58 ff 30 d6 e6 25 7c 81 a8 58 c0 bc a2 01 da 02 43 c8 ff c1 db 72 fd 56 54 bf ee ea de d8 57 7c d2 27 02 ff bf ff 8d ff ee 06 5f fe 3d f0 66 c0 e7 d7 bb 6d 77 dd 3b 7c 7b e5 ff db 93 5b 3f 06 7c fa f8 b3 c8 ed 0a 00 7c fc fa 93 2e 03 de fe 91 57 03 2a ac 7e f2 3a e7 74 bf cc b5 e0 5b 2f 95 1d 9b 56 3c 03 64 59 11 2f ca 8a 12 23 d9 24 85 ca 53 6e 47 d9 e5 44 c7 ee f2 ca df b0 af c2 74 c7 a9 83 b5 de 76 be d2 a6 89 37 da 02 e4 56 db 36 e6 9d 83 d4 dd ba dc ce f7 eb 4b 3c 6e 40 45 64 91 16 dc d6 31 17 04 01 43 99 84 85 b1 4f 40 83 1f 14 f3 82 54 7c 27 b3 02 1b 2f 60 29 96 05 7e 98 fa 7f 10 01 0e cf 5c 73 a9 00 32 81 82 04 93 0b 11 4a 41 29 8c 4a b8 08 91 a2 54 99 a5 16 3b 16 8a 97 20 91 86 56 d2 47 52 85 9e Data Ascii: v/.4DX0%\|XCrVTW\|'_=fmw;\|{[?\|\|.W*~:t[/V<dY/#$SnGDtv7V6K<n@Ed1CO@T\|'/`)~\s2JA)JT; VGR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49941	35.244.193.194	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:07 UTC	899	OUT	GET /sdk/click?effp=be9ae3c9e5dfc39574592ff51220972d&sec_ch_ua_platform=Windows&sec_ch_ua_platform_version=10.0.0&sec_ch_ua_model=&_ef_transaction_id=71fb64e74261421dbebd6fa6cf6be1da&oid=287&affid=809&__cc=&async=json&gclid=&__qp=b%7Cregion%7Cpub_id%7Coid%7Ctransaction_id%7Cgclid%7Cmsclkid&__rf=https%3A%2F%2Fmajorleagueprices.icu%2F&__efckuq=96 HTTP/1.1 Host: www.trk2dkt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uniqueClick_H7JJ78=f5b0a4f9-8882-45ae-9470-ec26f5243d0a:1734455995; uniqueClick=ba229def-13fb-4f41-9d82-a68edb48b8ba:1734456006; transaction_id=71fb64e74261421dbebd6fa6cf6be1da\|71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:08 UTC	555	IN	HTTP/1.1 200 OK server: nginx date: Tue, 17 Dec 2024 17:20:07 GMT content-type: application/json; charset=utf-8 Content-Length: 87 accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model set-cookie: transaction_id=71fb64e74261421dbebd6fa6cf6be1da\|71fb64e74261421dbebd6fa6cf6be1da\|71fb64e74261421dbebd6fa6cf6be1da; Path=/; Expires=Mon, 17 Mar 2025 17:20:07 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: 356811bf-d214-4eda-8da1-d36dc16bc043 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:08 UTC	87	IN	Data Raw: 7b 22 61 69 64 22 3a 31 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 6f 69 64 22 3a 32 38 37 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 5f 69 64 22 3a 22 37 31 66 62 36 34 65 37 34 32 36 31 34 32 31 64 62 65 62 64 36 66 61 36 63 66 36 62 65 31 64 61 22 7d 0a Data Ascii: {"aid":1,"error_code":0,"oid":287,"transaction_id":"71fb64e74261421dbebd6fa6cf6be1da"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	49945	34.120.195.249	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:07 UTC	498	OUT	GET /api/4504272873783296/envelope/?sentry_key=9d4c19d105a244fbb75e3d28cf64ee9e&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.23.0 HTTP/1.1 Host: o4504272872341504.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:08 UTC	290	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Tue, 17 Dec 2024 17:20:08 GMT Content-Type: text/html Content-Length: 548 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:08 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	49947	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:08 UTC	532	OUT	GET /assets/shared/checkout/v15/images/CpEpEAQ8eEXs.webp HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:08 UTC	419	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 27928da1a4247bc5b2bb3c710b9a62a4 server: Google Frontend Content-Length: 84705 via: 1.1 google Date: Tue, 17 Dec 2024 17:20:06 GMT Age: 2 Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"14ae1-193cfe30d00" Content-Type: image/webp Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:08 UTC	971	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 03 02 05 a4 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 b4 69 f0 7e a3 bc c3 d2 bc 5f c7 e3 eb Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"4i~_
2024-12-17 17:20:08 UTC	1390	IN	Data Raw: 3b 74 b5 81 b5 e7 1e 7e 1c 2f b9 f9 87 ac f9 b0 c7 48 df a3 ea ad e2 9d b7 9f fc 7f 9b e9 5d 9b 1f f5 7e 80 e6 d3 d5 a5 e3 ba ab f2 3e 57 57 dd c2 ff 00 ab f4 a6 af ce e0 e2 74 70 f3 f8 de 2e 13 c5 2e 37 97 cb 6b 90 8f 62 5d 9e ae 8f 01 d1 d7 71 19 3d a7 4c e0 fa 34 b8 8d f4 58 7c 96 19 bd 9f 9c ed 63 a0 c9 d7 ea 33 79 0e b1 f4 27 4d aa 55 e5 c7 02 f5 48 24 b7 49 75 35 32 1b dc f4 7e 8e fe 61 d1 77 89 df d7 8d a1 6b 0f bf a2 ed fc fd 5d d1 cd 5a 55 16 c6 51 92 84 d5 fb b4 af c8 f4 6b 29 b9 8b 4a 2e ea d2 bf 4a a8 b6 28 8d d0 a8 fa 7c d6 ae d6 b5 4f 84 cf 16 6a 97 e5 99 c8 9b 92 57 6d 7c a7 bb 46 e9 28 a6 b2 83 9a d0 00 28 b4 d1 50 1c c5 41 15 64 64 8d 07 ab 24 19 1a ac a2 39 29 a8 f5 86 8e 05 92 15 b1 5a 2d 35 55 aa e6 aa 80 8a 88 39 a0 22 2a 8a 08 2a 40 Data Ascii: ;t~/H]~>WWtp..7kb]q=L4X\|c3y'MUH$Iu52~awk]ZUQk)J.J(\|OjWm\|F((PAdd$9)Z-5U9"**@
2024-12-17 17:20:08 UTC	1390	IN	Data Raw: e4 66 f9 b7 a3 79 1f 87 8d 09 6c 55 f9 5f 17 4a de 76 9c c5 6f 57 f1 1f 6c fa bf 71 be 47 eb 7e 45 cb 1c b6 96 4f 47 e0 f1 7b 33 e2 3e f7 d9 7f 86 fa 37 90 fc df 9d 3f be f9 47 5b 37 17 92 ea e0 f1 f2 76 7d d7 37 07 7e cd e5 97 37 97 8e d7 78 f6 f6 e9 14 53 c3 c7 83 f2 33 ea 6b a6 72 7a 7f 6f e9 fa 5e 51 dd f5 2b e9 f4 46 e7 bb 7b 61 39 a4 0b 3a 11 13 20 c7 aa d9 10 e4 cd 41 5e 22 99 f5 a2 ea b6 d5 ca 32 e2 96 15 ac cc ef a8 d1 a3 73 51 30 f4 f9 38 a5 d7 71 dd 7e 35 27 13 d3 f0 b6 b3 b7 e2 3b 79 77 e5 8a 4d e2 bf 31 b3 c5 e6 e0 f4 3c a7 69 9d f4 da 15 17 58 a3 c9 6a 60 56 d7 53 93 be 59 70 6a 25 29 f0 72 ad cb cb 97 9d ea f5 fc ff 00 4d 65 ac 4b d8 76 4b bb 9b 79 6c e0 1c c4 3b 7f 23 b0 5b b7 5a fd f3 54 6b 09 59 0d 39 6e 50 ca ce 5d 37 c5 bd 0b 7a 39 ae Data Ascii: fylU_JvoWlqG~EOG{3>7?G[7v}7~7xS3krzo^Q+F{a9: A^"2sQ08q~5';ywM1<iXj`VSYpj%)rMeKvKyl;#[ZTkY9nP]7z9
2024-12-17 17:20:08 UTC	1390	IN	Data Raw: 56 71 85 89 2c 85 6e 29 5e 77 3e c6 4c 93 a3 ec 54 9a e6 cb aa d9 d1 46 b1 2c a5 69 49 e4 8d fa 8b 15 88 6c 11 e4 4b 1b e0 d4 99 14 56 8e 68 c1 5a 48 20 08 f8 a1 1c c7 40 48 22 92 95 e2 7c 7e fe 37 e7 7e 1c 7a 9c 97 63 d3 cd 16 ad 2d 0a ce a1 a7 cf f4 ef dd f0 5d 87 38 f4 27 4f cf c1 39 60 32 b7 67 b5 2b 1c f7 51 e7 e9 cb 56 b1 e8 5e ce d9 be b3 76 c7 af de 48 b2 f6 db 07 ad 35 47 8d 45 6c aa ad 51 51 a0 35 cd 88 dc d7 cd 53 e2 7b 0e 10 df eb 78 6e b8 5a 75 67 36 64 63 ac 8f 2a ff 00 36 73 f1 53 dd c6 fa bd bc bd 6d e1 b9 1a 5c f9 cd 73 d7 f3 31 d6 e7 5b c4 f4 c9 b9 c6 6f 73 69 55 f2 44 d6 a3 33 90 89 ac 8d 6e 36 93 52 a5 80 27 d6 c8 d2 34 5d 04 29 97 d1 61 f4 e6 ee ee 1e ab 33 e2 e8 63 9c e7 3d bd 87 6e 8e 85 09 6b 22 8d 93 a6 6f cf 0b 3a 66 7a 32 3b a6 Data Ascii: Vq,n)^w>LTF,iIlKVhZH @H"\|~7~zc-]8'O9`2g+QV^vH5GElQQ5S{xnZug6dc*6sSm\s1[osiUD3n6R'4])a3c=nk"o:fz2;
2024-12-17 17:20:08 UTC	1390	IN	Data Raw: 55 77 3d c8 f6 48 aa e9 16 23 41 ad 4b 23 64 47 a4 ac 85 46 be 11 58 e9 22 91 ce 58 9e 2c 46 ae 51 ae 47 03 9a e8 57 c4 e1 e3 1f a8 ad 7c c4 31 e8 31 68 ad db 09 94 ed 97 a5 5e 83 27 4f 78 b2 f4 97 59 b0 f8 92 e6 c0 d7 d3 14 54 47 b5 d4 48 ab a3 54 6d 39 11 45 04 04 69 0e 18 a3 91 5c 83 51 ca d5 56 0e 10 4f 38 f1 8f 52 f2 9f 8f f3 fb af 22 f5 af 2f d7 8b b2 d6 e6 3a 1e 9c f5 7c bf d3 7c bf 2e fc ab af e5 ef a1 e9 54 76 3e b7 d6 c1 f1 ef 43 f3 5f 95 e5 dd f6 8f 2b f5 3f 67 ae 5a d6 38 0e fb e1 75 39 de 8b e6 fc 9f 46 e9 2a 5a fa 7f 55 73 6d f9 67 36 46 6d 0e eb e7 78 36 3a 6c 2d 9f a5 f4 7a 24 89 be 8d 4f 0b e9 46 2e 2c b0 63 5d bc 5c d5 5c f2 87 22 68 73 d6 c6 a7 3d d1 74 d7 45 ab 8d a3 71 9f c8 74 9c c2 d3 b3 56 db 5d 1f 49 83 bc cd 8c 5d 5c 33 9a c0 d2 Data Ascii: Uw=H#AK#dGFX"X,FQGW\|11h^'OxYTGHTm9Ei\QVO8R"/:\|\|.Tv>C_+?gZ8u9F*ZUsmg6Fmx6:l-z$OF.,c]\\"hs=tEqtV]I]\3
2024-12-17 17:20:08 UTC	1390	IN	Data Raw: e5 f7 e7 bc d1 5c f7 1a 25 00 be 50 52 f3 b3 dc 5d 65 46 17 1b 55 0b 71 d7 88 b2 ca 31 17 60 a3 01 7a bd 2a e5 e8 33 eb 1a 14 69 40 4d 5a 1a c5 b8 e9 b0 b1 15 79 a3 d5 bd 37 89 9b e2 fb fa c8 f9 65 e7 d7 a5 83 16 49 34 ca 97 c7 cb 24 96 40 fb d2 a5 29 ad be aa cd 3b ac 88 99 52 35 94 d2 34 99 f2 42 92 95 1b 89 6c 81 ee 82 5b 03 16 c7 a3 9a 34 73 d6 27 28 22 b8 46 8e 19 41 05 14 55 6a a2 b2 35 ca d2 2a 28 80 53 44 72 a0 20 a0 08 a8 80 f8 e3 cc 99 1a ea 1c 8a 38 80 8f 94 eb ee f2 df 3b e2 74 17 b1 f5 b9 37 37 b9 4f 4f f4 7d 1f 3f f3 be cb 8a c7 18 7d 3b cb 7d 2f 7d 30 70 2d 67 4e 4c f6 df 20 f6 36 f8 fe 56 6c 7e 7c ec fb 6f 99 76 fd 7d 58 5c 79 03 8e b7 ae e4 f9 d7 5f 45 ae 69 9d d4 e2 5b e5 f9 ed 74 bd 1d 67 b8 8c 7b 33 1f 77 29 d9 6c d4 a0 c9 ab 71 c7 67 Data Ascii: \%PR]eFUq1`z3i@MZy7eI4$@);R54Bl[4s'("FAUj5(SDr 8;t77OO}?};}/}0p-gNL 6Vl~\|ov}X\y_Ei[tg{3w)lqg
2024-12-17 17:20:08 UTC	1390	IN	Data Raw: 96 2e 75 ea 4f f2 c1 3d 4c f2 c0 f5 35 f2 a7 1e a8 79 53 eb d4 5d e6 1d b6 2e cb c7 71 db 49 01 a3 84 05 25 44 52 e5 14 24 1a a9 76 aa 8a 82 28 22 c5 32 82 16 28 12 00 2a 2a 08 22 80 8a 0a 35 55 10 73 4d 14 04 73 40 12 9c 0b 23 14 50 47 35 51 92 b2 90 50 11 cb 02 a8 88 3c 67 e4 b9 df 1f cf f8 92 d3 b4 dc 25 b3 52 74 ed 3c d3 d6 fc 8f bf bf 7b b6 e6 3a 2c ef ce 7b 1c eb 7a ce bd 08 b6 b7 ea a7 d5 f3 38 e9 da 72 50 68 4d 66 f4 11 d3 75 ed 3a 3e 67 a0 75 b3 9d b7 5a ce 33 9b ef b9 76 f0 ed d1 8a 6b 70 c6 6c 6b 54 cf bc 56 8d 6b d5 c1 a1 15 7b 8d a4 cd d3 a9 a6 95 ac f7 5c cb 5a 46 6b 2d 8a cb a2 a8 96 0a ef 7a 90 b6 d3 48 a1 5b 05 4b 8c bf d3 37 96 67 fd af 9a c9 26 96 ab 25 c5 28 a6 80 67 9a 21 9c eb e1 46 ae cc 46 76 96 14 06 e7 39 b7 ae 70 b6 76 32 4b 17 Data Ascii: .uO=L5yS].qI%DR$v("2(**"5UsMs@#PG5QP<g%Rt<{:,{z8rPhMfu:>guZ3vkplkTVk{\ZFk-zH[K7g&%(g!FFv9pv2K
2024-12-17 17:20:08 UTC	1390	IN	Data Raw: c2 77 37 7c ec b3 d4 2e 79 1b 53 d9 8f 26 b9 73 e9 ab e7 b7 eb b3 4e 56 eb 3b c6 75 a4 94 52 d0 52 64 02 e8 14 d6 51 44 81 ae 49 50 50 68 e1 a6 aa 88 8a d7 00 a8 8e 41 9a 21 31 27 ca b1 c1 77 c1 f0 f8 4f 4a f3 df 57 e9 e9 cc 6c fa 79 fa 51 a4 c9 7d d9 cf 8d 61 24 6a aa 43 29 a9 6f 5b 0e 73 bf 9b 96 d8 91 dc 97 63 93 5c b3 99 16 89 14 8f ad 5d be 59 64 f4 e9 39 dd ec 17 07 a1 a5 5c 1d 4d ec 3b a8 91 52 d4 55 41 8d 94 46 ab e3 b1 cf 81 e3 87 2d 89 24 0e 4d 49 a9 4e 90 d3 b7 45 5d 3d 29 ec d5 bb 9b 72 1f 0c f1 75 e7 0a be 5f b7 f3 e0 2e 3c a0 97 d4 a0 69 06 59 a4 86 69 a6 19 86 a2 19 86 ab 4c c3 44 33 cd 08 4a 84 ed 21 24 0c ea fb 31 91 e8 e1 59 3a 2a b4 b4 48 29 ed 67 95 12 df 3e 41 c9 e6 d5 0e d7 a6 79 b3 e5 bc df 38 4a e8 7d bc 83 7e 70 85 b6 42 a9 6c 29 Data Ascii: w7\|.yS&sNV;uRRdQDIPPhA!1'wOJWlyQ}a$jC)o[sc\]Yd9\M;RUAF-$MINE]=)ru_.<iYiLD3J!$1Y:*H)g>Ay8J}~pBl)
2024-12-17 17:20:08 UTC	1390	IN	Data Raw: bd 67 53 2e 5d 08 75 2a ac e1 55 f3 4b 55 0b 2a 54 75 b0 a2 db c1 9c 38 96 4c fa af 97 96 c9 f4 eb b3 5e 46 7b 5c f2 f8 99 ee b3 59 e0 16 bd d1 b6 f9 0d af 53 54 f2 5b 1e a4 59 e7 77 3b 64 8e 30 ed 9a 71 cf ea 45 e6 5f d1 b1 70 57 71 4c 37 6d 22 62 ae d2 19 26 b1 66 5b f4 03 38 d1 4a ce 66 a1 19 46 9b 57 34 d1 2b 38 be 96 51 2e 15 4d b7 c8 cf 5b a8 56 59 d2 a0 4b 06 35 4d d6 98 8b 95 a7 5f af 3f 15 36 79 ef a5 e1 b0 62 c3 a9 be 73 a5 9d 0b 79 e4 3a 15 e7 54 e8 8e 74 3a 23 9f 2b a0 39 d2 3a 23 9b 0e 90 e6 ca e9 0e 70 3a 25 e7 14 e8 8e 74 4e 89 98 01 d1 37 9f 69 d0 a7 3a e3 a1 4c 16 9d 01 ce 86 8f 37 a6 d8 b1 ed 1e 5d ea 52 5f 7b 1a dc cf 64 05 ea d3 c3 0e 74 68 3d a3 88 5f 61 c9 51 67 8e d6 b6 d3 04 65 86 5b 52 1d 7c 59 35 06 d8 b6 9d 7d 6c 39 35 ae 53 bd Data Ascii: gS.]uUKUTu8L^F{\YST[Yw;d0qE_pWqL7m"b&f[8JfFW4+8Q.M[VYK5M_?6ybsy:Tt:#+9:#p:%tN7i:L7]R_{dth=_aQge[R\|Y5}l95S
2024-12-17 17:20:08 UTC	1390	IN	Data Raw: ba 0a 2a 5e 32 5e 68 26 7a cb 65 b1 a2 5d 9b 12 7b 34 e0 a6 92 dd 29 c3 66 9b b3 24 ad 28 68 47 16 a0 8e 3b 60 73 94 9e fe 63 93 4f 9d b8 d2 c4 94 5b 57 26 c1 84 e9 8c 80 f4 25 eb 1f d3 1c ab ba 86 d7 34 bd 49 1c c3 fa 60 e6 5f d4 36 5e 65 7a 87 1c c1 d3 a2 73 52 f4 2a 60 27 44 1c f9 d0 a9 ce 9d 10 73 8e e8 03 98 97 a2 2d e7 ce 8d 87 3c bb 8e 8e 7e 4d b6 59 90 bb 6a 61 a6 ec 46 33 e4 d4 8c 97 ea 49 66 34 9a 71 14 96 fb ac ce 4d 48 eb 31 9a e4 63 b7 61 d2 e1 3f 6d 95 8e 9b 09 a9 80 ed 79 53 15 9d 3a d7 22 de a1 17 98 3a 94 4e 5a 2e b9 0e 45 bd 6d 78 e7 19 d6 87 1e 9d 73 4e 51 fd 74 6b c9 9d 68 71 89 b3 ad 67 20 76 6f 38 97 76 89 1c 5c 1d e4 47 10 ce e9 87 08 bd dd 73 8b b3 d7 dc b7 87 8f b7 75 9e 49 91 d5 52 f5 f9 32 5d ba 9d 31 ce d7 eb a3 b9 e5 22 ef 2b Data Ascii: ^2^h&ze]{4)f$(hG;`scO[W&%4I`_6^ezsR`'Ds-<~MYjaF3If4qMH1ca?myS:":NZ.EmxsNQtkhqg vo8v\GsuIR2]1"+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49948	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:08 UTC	803	OUT	GET /assets/shared/checkout/v15/css/fonts/EllenLuff---Larken-Regular.woff2 HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://get-luxsheets.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://get-luxsheets.com/assets/shared/checkout/v15/css/additional.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:08 UTC	306	IN	HTTP/1.1 404 Not Found content-type: application/json; charset=utf-8 x-cloud-trace-context: 768959b7ddfe7cd7069db09a44e6e589 date: Tue, 17 Dec 2024 17:20:08 GMT server: Google Frontend Content-Length: 141 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:08 UTC	141	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 52 6f 75 74 65 20 47 45 54 3a 2f 61 73 73 65 74 73 2f 73 68 61 72 65 64 2f 63 68 65 63 6b 6f 75 74 2f 76 31 35 2f 63 73 73 2f 66 6f 6e 74 73 2f 45 6c 6c 65 6e 4c 75 66 66 2d 2d 2d 4c 61 72 6b 65 6e 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Route GET:/assets/shared/checkout/v15/css/fonts/EllenLuff---Larken-Regular.woff2 not found","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	49949	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:08 UTC	1111	OUT	GET /age-verification/assets/style.css HTTP/1.1 Host: ally.quandral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:09 UTC	901	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:09 GMT Content-Type: text/css Content-Length: 3243 Connection: close Last-Modified: Wed, 15 May 2024 19:37:59 GMT ETag: "66450f17-cab" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5343 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wAKKs1KMZNzk3Hk1Fa1E9w%2FvAHbLZ3Vbc4Qn6%2FLG%2FIYRePuFXe6hOV1XvK657B4%2F4ryyL9InXco4MgU03hwx8gRtgbpt2joSsrvEpZ7AkgJujXODVAq3DzzLvaSrUmqkiDkGxw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389509e8628cc6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1784&min_rtt=1776&rtt_var=683&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1689&delivery_rate=1583514&cwnd=222&unsent_bytes=0&cid=1cb8b3bc6e8b6c19&ts=460&x=0"
2024-12-17 17:20:09 UTC	468	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 6c 61 74 6f 2d 72 65 67 75 6c 61 72 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 66 6f 6e 74 2f 6c 61 74 6f 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 29 3b 0d 0a 7d 0d 0a 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 6c 61 74 6f 2d 62 6f 6c 64 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 66 6f 6e 74 2f 6c 61 74 6f 2d 62 6f 6c 64 2e 77 6f 66 66 29 3b 0d 0a 7d 0d 0a 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 6c 61 74 6f 2d 62 6c 61 63 6b 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 66 6f 6e 74 2f 6c 61 74 6f 2d 62 6c 61 63 6b 2e 77 6f 66 66 29 3b 0d 0a 7d 0d 0a 0d 0a 61 20 7b 0d 0a 09 63 Data Ascii: @font-face { font-family: lato-regular; src: url(font/lato-regular.woff);}@font-face { font-family: lato-bold; src: url(font/lato-bold.woff);}@font-face { font-family: lato-black; src: url(font/lato-black.woff);}a {c
2024-12-17 17:20:09 UTC	1369	IN	Data Raw: 2e 2f 63 61 72 2d 62 67 2e 6a 70 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 20 66 69 78 65 64 3b 2a 2f 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 66 65 66 65 66 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 2d 6d 6f 7a 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 2d 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 30 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 67 6f 20 7b Data Ascii: ./car-bg.jpg) no-repeat center center fixed;*/ background-color:#efefef; -webkit-background-size: cover; -moz-background-size: cover; -o-background-size: cover; background-size: cover;}body {margin:0px;padding:0px;}.logo {
2024-12-17 17:20:09 UTC	1369	IN	Data Raw: 33 35 65 63 37 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 31 30 70 78 20 30 20 31 30 70 78 20 30 3b 0d 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 61 69 6e 20 7b 0d 0a 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 63 6f 6e 74 65 6e 74 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 35 35 70 78 20 33 30 70 78 20 35 35 70 78 20 33 30 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0d 0a 09 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0d 0a 09 77 69 64 74 68 3a 34 34 25 3b 0d 0a 09 6d 61 78 2d 77 69 64 74 68 3a 35 34 34 70 78 3b 0d 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 33 30 30 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: 35ec7;padding:10px 0 10px 0;width:100%;margin-bottom:50px;}.container-main {}.container-content {padding:55px 30px 55px 30px;display:block;margin:0 auto;width:44%;max-width:544px;min-width:300px;background-color
2024-12-17 17:20:09 UTC	37	IN	Data Raw: 0d 0a 2e 6f 66 66 65 72 2d 74 69 74 6c 65 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 7d 0d 0a 0d 0a 7d Data Ascii: .offer-title {font-size:13px;}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.16	49950	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:08 UTC	1078	OUT	GET /push-script.js HTTP/1.1 Host: ally.quandral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:09 UTC	917	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:09 GMT Content-Type: application/javascript Content-Length: 1144 Connection: close Last-Modified: Thu, 25 Jul 2024 18:54:01 GMT ETag: "66a29f49-478" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5343 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LmWzmampAbL7swDOWB7tz5SpnjydiZORVcXHVfXk12OU%2BX2afc%2Fy5VpSTsrnpxywzbntPW2ZUy3NaF0E0%2FjE%2BWqYc3iCfy5oWW7Ja3v4G1RuzUJQe4Eq2rXVnlbmtkhfbMe%2Fng%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389509e9deefa7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1800&min_rtt=1781&rtt_var=707&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1656&delivery_rate=1505154&cwnd=161&unsent_bytes=0&cid=8c8d2bf5fb6b83ee&ts=449&x=0"
2024-12-17 17:20:09 UTC	452	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 20 77 69 6e 64 6f 77 29 20 7b 0d 0a 20 20 76 61 72 20 73 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 20 73 63 72 69 70 74 2e 74 79 70 65 20 3d 20 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 0d 0a 20 20 73 63 72 69 70 74 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 74 72 6b 2d 73 79 6e 6f 76 65 74 72 61 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 70 75 73 68 2f 73 63 72 69 70 74 2f 35 37 64 6b 72 32 36 65 77 38 3f 75 72 6c 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 28 73 65 6c 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 3b 0d 0a 20 20 0d 0a 20 20 2f 2f 20 44 65 66 69 6e 65 20 61 20 63 61 6c Data Ascii: (function(document, window) { var script = document.createElement("script"); script.type = "text/javascript"; script.src = "https://trk-synovetra.com/scripts/push/script/57dkr26ew8?url=" + encodeURI(self.location.hostname); // Define a cal
2024-12-17 17:20:09 UTC	692	IN	Data Raw: 6d 20 6e 75 6d 62 65 72 0d 0a 20 20 20 20 76 61 72 20 72 61 6e 64 6f 6d 4e 75 6d 62 65 72 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 31 30 30 29 3b 20 2f 2f 20 47 65 6e 65 72 61 74 65 73 20 61 20 72 61 6e 64 6f 6d 20 6e 75 6d 62 65 72 20 62 65 74 77 65 65 6e 20 30 20 61 6e 64 20 39 39 0d 0a 20 20 20 20 0d 0a 20 20 20 20 2f 2f 20 44 65 74 65 72 6d 69 6e 65 20 75 74 6d 5f 73 6f 75 72 63 65 20 62 61 73 65 64 20 6f 6e 20 77 68 65 74 68 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 69 73 20 65 76 65 6e 20 6f 72 20 6f 64 64 0d 0a 20 20 20 20 76 61 72 20 75 74 6d 53 6f 75 72 63 65 20 3d 20 28 72 61 6e 64 6f 6d 4e 75 6d 62 65 72 20 25 20 32 20 3d 3d 3d 20 30 29 20 3f 20 27 73 65 67 31 27 20 3a 20 27 73 65 67 32 27 3b 0d Data Ascii: m number var randomNumber = Math.floor(Math.random() * 100); // Generates a random number between 0 and 99 // Determine utm_source based on whether the number is even or odd var utmSource = (randomNumber % 2 === 0) ? 'seg1' : 'seg2';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.16	49951	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:08 UTC	1094	OUT	GET /permissions-redirect-script.js HTTP/1.1 Host: ally.quandral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:09 UTC	915	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:09 GMT Content-Type: application/javascript Content-Length: 3573 Connection: close Last-Modified: Thu, 25 Jul 2024 20:25:18 GMT ETag: "66a2b4ae-df5" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5343 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AsUBa7ccvb4RJJB3UXWV7vULQP81T%2Fe1dUfcPzEzToJ6b5%2F6AQ1m8eAV5gxj0mt1WjEO4RV%2FnEEAweYoidFb%2FSJvKPkG0lbsNbHIu0HiDoyWEKwEGnryzNGAaRg48ZWokNX4wA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389509ef790f87-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1530&min_rtt=1527&rtt_var=579&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1672&delivery_rate=1880231&cwnd=229&unsent_bytes=0&cid=e7e366fe741ac3a2&ts=459&x=0"
2024-12-17 17:20:09 UTC	454	IN	Data Raw: 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 67 65 74 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 27 73 75 62 33 27 20 66 72 6f 6d 20 72 65 64 69 72 65 63 74 55 72 6c 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 76 61 72 69 61 62 6c 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 0d 0a 20 20 20 20 76 61 72 20 76 61 72 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 26 22 29 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 76 61 72 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 61 69 72 20 3d 20 76 61 72 73 5b 69 5d Data Ascii: // Function to get the value of 'sub3' from redirectUrlfunction getQueryVariable(variable) { var query = window.location.search.substring(1); var vars = query.split("&"); for (var i = 0; i < vars.length; i++) { var pair = vars[i]
2024-12-17 17:20:09 UTC	1369	IN	Data Raw: 0a 20 20 20 20 76 61 72 20 72 65 64 69 72 65 63 74 55 72 6c 20 3d 20 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 73 75 62 33 22 29 3b 0d 0a 20 20 20 20 69 66 20 28 72 65 64 69 72 65 63 74 55 72 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 44 65 63 6f 64 65 20 74 68 65 20 55 52 4c 20 69 66 20 69 74 27 73 20 65 6e 63 6f 64 65 64 0d 0a 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 55 72 6c 20 3d 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 65 64 69 72 65 63 74 55 72 6c 29 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 72 65 64 69 72 65 63 74 55 72 6c 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 72 65 64 69 72 65 63 74 20 61 Data Ascii: var redirectUrl = getQueryVariable("sub3"); if (redirectUrl) { // Decode the URL if it's encoded redirectUrl = decodeURIComponent(redirectUrl); window.location.href = redirectUrl; }}// Function to redirect a
2024-12-17 17:20:09 UTC	1369	IN	Data Raw: 6f 6e 20 21 3d 3d 20 27 64 65 66 61 75 6c 74 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 61 6e 63 65 6c 20 74 68 65 20 73 63 68 65 64 75 6c 65 64 20 72 65 64 69 72 65 63 74 69 6f 6e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 72 65 64 69 72 65 63 74 54 69 6d 65 6f 75 74 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 52 65 64 69 72 65 63 74 20 61 66 74 65 72 20 61 20 64 65 6c 61 79 20 6f 66 20 31 20 73 65 63 6f 6e 64 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 41 66 74 65 72 44 65 6c 61 79 28 35 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 2c 20 31 30 30 30 29 3b 0d 0a 7d 0d 0a 0d 0a 2f 2f 20 49 6e 69 74 69 61 74 65 20 74 68 65 20 70 72 Data Ascii: on !== 'default') { // Cancel the scheduled redirection clearTimeout(redirectTimeout); // Redirect after a delay of 1 second redirectAfterDelay(5000); } }, 1000);}// Initiate the pr
2024-12-17 17:20:09 UTC	381	IN	Data Raw: 6c 61 63 6b 27 3b 0d 0a 20 20 20 20 74 65 78 74 2e 73 74 79 6c 65 2e 66 6f 6e 74 53 69 7a 65 20 3d 20 27 31 38 70 78 27 3b 0d 0a 20 20 20 20 74 65 78 74 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 20 3d 20 27 30 27 3b 0d 0a 0d 0a 20 20 20 20 2f 2f 20 41 70 70 65 6e 64 20 74 68 65 20 74 65 78 74 20 74 6f 20 74 68 65 20 62 6f 78 0d 0a 20 20 20 20 62 6f 78 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 65 78 74 29 3b 0d 0a 20 20 20 20 2f 2f 20 41 70 70 65 6e 64 20 74 68 65 20 62 6f 78 20 74 6f 20 74 68 65 20 6f 76 65 72 6c 61 79 0d 0a 20 20 20 20 6f 76 65 72 6c 61 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 6f 78 29 3b 0d 0a 20 20 20 20 2f 2f 20 41 70 70 65 6e 64 20 74 68 65 20 6f 76 65 72 6c 61 79 20 74 6f 20 74 68 65 20 62 6f 64 79 0d 0a 20 20 20 20 64 6f 63 75 6d Data Ascii: lack'; text.style.fontSize = '18px'; text.style.margin = '0'; // Append the text to the box box.appendChild(text); // Append the box to the overlay overlay.appendChild(box); // Append the overlay to the body docum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.16	49952	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:09 UTC	882	OUT	GET /assets/shared/checkout/v15/images/xNcpsuWcBQjG.webp HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:09 UTC	420	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: dedc50fdaeb5c3e34720061d0b2f9b67 server: Google Frontend Content-Length: 173994 via: 1.1 google date: Tue, 17 Dec 2024 17:20:09 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"2a7aa-193cfe30d00" Content-Type: image/webp Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:09 UTC	970	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 05 04 05 06 06 05 07 08 07 08 07 0a 0a 09 09 0a 0a 10 0b 0c 0b 0c 0b 10 18 0f 11 0f 0f 11 0f 18 15 19 15 13 15 19 15 26 1e 1a 1a 1e 26 2c 25 23 25 2c 35 2f 2f 35 43 3f 43 57 57 75 01 04 04 04 04 05 04 05 06 06 05 07 08 07 08 07 0a 0a 09 09 0a 0a 10 0b 0c 0b 0c 0b 10 18 0f 11 0f 0f 11 0f 18 15 19 15 13 15 19 15 26 1e 1a 1a 1e 26 2c 25 23 25 2c 35 2f 2f 35 43 3f 43 57 57 75 ff c2 00 11 08 05 ae 06 b6 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 03 04 02 05 00 01 06 07 08 09 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ad c8 6a 35 a8 e4 6f 5b 11 93 86 c9 8f Data Ascii: JFIF&&,%#%,5//5C?CWWu&&,%#%,5//5C?CWWu"5j5o[
2024-12-17 17:20:09 UTC	1390	IN	Data Raw: c0 9a 09 00 13 6c 22 2b 07 13 9c 4b bc 71 af 2d a0 f7 59 b3 e0 9d b7 a4 a2 72 7d a2 f6 ee 9a 20 0e bb 69 49 a5 9e 95 db 00 83 22 47 3a 6e 5f a4 2d f9 0e e8 07 96 f5 08 d7 1e af 7b c3 75 cb 7c 22 1b 57 9d aa ea a9 99 af 71 68 47 41 6f cf 3f 57 a4 ac 6d b9 24 f4 73 aa 5a ae 9e b4 a4 b0 50 85 dd c7 37 62 76 06 a5 b5 0c 06 46 02 26 82 03 37 a5 c8 cb 46 6f 08 82 1b 23 13 1b c2 16 d1 60 40 4c 68 52 2d 00 af a9 e9 08 70 d4 9d fa ad 79 fe 76 94 25 4e 12 09 ad 6c 6b 3c 8e cd ef 53 36 60 c9 4d 91 22 47 5a c3 44 d4 02 0f 24 4b 79 84 a5 0d 04 c1 90 dc a3 10 b9 a1 b4 69 8f 19 29 40 50 92 84 c2 4a 11 0e 41 10 60 cb 30 1c eb 1c 64 83 20 53 88 e1 72 24 27 31 14 9e b2 60 b6 38 05 42 5b 68 b4 f6 9c db 1d bd aa 0d 32 f3 68 32 d3 06 5e 68 dc d7 28 6d 8f 6a 6c 86 d2 46 10 c7 Data Ascii: l"+Kq-Yr} iI"G:n_-{u\|"WqhGAo?Wm$sZP7bvF&7Fo#`@LhR-pyv%Nlk<S6`M"GZD$Kyi)@PJA`0d Sr$'1`8B[h2h2^h(mjlF
2024-12-17 17:20:09 UTC	1390	IN	Data Raw: 33 0c cc c3 33 30 dc a1 84 f2 18 bf 3c 17 79 ae 19 ad 19 63 9a 14 b2 d2 c1 87 13 48 23 8a 2e 30 a2 8c c0 c8 a5 6b 0f 9b 66 be ba c5 41 69 bc f1 5c fb e4 13 c7 76 25 26 f0 af 05 92 e2 8c 91 aa 0c 6c 15 aa 7a cb 8a 8c a9 c0 7d 06 72 6e 37 ce f8 f7 ac 78 4b 3e 6f 69 cd 7a d2 77 d5 9d 1d 4b 62 6e b9 e5 9c 74 30 ec 26 54 71 e4 1e 65 9d c2 4d 80 f0 d9 65 6f 43 6a c5 dd b7 3d 74 dd be e0 ea d2 2f 7f 44 5f 55 2d d0 27 16 b7 7f 52 73 6e 86 b4 ed 18 e5 2e 16 e1 ea 87 4b 52 22 da 05 2b 6a a5 86 c4 41 96 16 22 16 23 d0 d1 15 38 c9 ab da 1e 6a bc a3 b3 40 e3 51 d6 96 5a d6 13 c1 e2 41 76 d3 36 ca 0c 9b ad 7e b8 72 74 b7 02 55 7d 15 18 ca 72 31 5a e5 70 96 e6 4b 3a 0e 87 a6 c5 e1 f3 b5 e6 19 e4 d5 e9 82 bc cc 2e 0c b4 70 bf 11 46 6b 20 0a cf 7b 68 9b cc 8c 11 43 44 11 Data Ascii: 330<ycH#.0kfAi\v%&lz}rn7xK>oizwKbnt0&TqeMeoCj=t/D_U-'Rsn.KR"+jA"#8j@QZAv6~rtU}r1ZpK:.pFk {hCD
2024-12-17 17:20:09 UTC	1390	IN	Data Raw: 6b 85 87 d1 a7 41 c5 47 84 ef 6a d7 88 dd 8d 7b 43 c5 84 5c 95 73 06 3a c6 27 b8 4c 36 64 14 ad 28 c0 dc 82 74 33 2a b0 3a 74 8e 3c c2 65 95 9c 16 18 29 06 9d 88 b4 9c 95 25 d7 36 ca da 26 d3 4c 8e 68 72 80 a4 99 09 82 16 05 53 9c 45 0c c2 a7 1b 3a 87 1b 32 67 2c 0c 8b 63 ec aa ca 34 da a7 1c d8 0c 44 0c 40 e8 1e e6 fa 22 5b 8c 8c 24 76 bb cc c5 c9 64 52 59 98 84 cc c3 33 30 c9 46 46 66 61 99 98 7c cf 06 b6 e6 23 4f 44 33 78 4a 6b 98 34 e0 5d 08 7d 6c 9e a3 23 24 39 12 98 48 69 76 34 46 44 91 9b 26 88 6b 22 6e 63 d1 8a b0 20 07 88 83 a8 de ca cc 7b 64 20 fd 31 c0 7c a7 ef 3f 2f 14 9f 4d fc d1 f5 16 53 81 a0 d8 2d 2b dc 57 aa 3a 0a e6 39 29 bb 5c 9d 27 69 e6 9d 43 a7 6d 54 e5 a9 e7 34 de 93 ce 1c d5 c2 a5 3a 1b de 66 dc e9 5e a5 b5 59 d5 5c 26 52 d9 09 44 Data Ascii: kAGj{C\s:'L6d(t3*:t<e)%6&LhrSE:2g,c4D@"[$vdRY30FFfa\|#OD3xJk4]}l#$9Hiv4FD&k"nc {d 1\|?/MS-+W:9)\'iCmT4:f^Y\&RD
2024-12-17 17:20:09 UTC	1390	IN	Data Raw: a3 1b 12 06 62 12 31 b5 b6 b6 78 89 0b a2 54 bc 3a a1 34 20 16 eb cc 54 55 e5 a5 62 a0 58 73 36 3c 33 3c c7 2b d2 70 e2 55 5d 67 2a 54 e9 c4 f5 cc 53 81 0b 4a 61 83 33 46 0d c0 ba 76 75 ba 2a 06 20 81 96 a6 0e 7a b8 2a 37 73 56 2f 11 ec 29 94 c1 e9 a8 53 50 3e 8d b2 91 46 57 64 04 08 b9 06 64 02 82 b4 a8 6c b3 12 c7 59 5b 54 15 7d 17 d6 bc 12 e1 bf a0 da f3 3e d3 3b eb ac f8 1e bc bd ba a2 bb 08 7d 04 36 a0 32 8a 8f b5 d9 e7 53 ee f9 f6 b4 70 b2 57 ee 41 53 ec 73 2d cf 56 f4 36 71 4e 56 0e 93 08 58 c0 55 35 19 ab 29 6b 1e af b3 70 86 99 34 c0 56 4d 3d 49 66 55 98 4d 98 26 26 c0 48 16 63 9a 90 ab 10 7d 84 0e 59 33 5e c8 f3 2a 99 1b cd 38 59 3b 5c c0 fc 96 38 15 5b 50 b6 e8 b9 4e a4 3c 82 42 52 d6 89 cc 73 5d e6 b1 77 9a c3 79 98 4b 23 89 2c cc 4c cc c3 c5 Data Ascii: b1xT:4 TUbXs6<3<+pU]gTSJa3Fvu z7sV/)SP>FWddlY[T}>;}62SpWASs-V6qNVXU5)kp4VM=IfUM&&Hc}Y3^8Y;\8[PN<BRs]wyK#,L
2024-12-17 17:20:09 UTC	1390	IN	Data Raw: 2a cc cc da 59 98 79 64 75 1d f2 d4 f5 b5 9c c6 50 65 cd 81 c3 04 20 4d 80 4d 02 91 8e 4c 89 73 0c 96 b0 80 a7 80 84 f4 84 1c d6 c6 e1 19 02 81 42 52 d4 74 3c f9 1a 56 ea 0e 33 e4 0f a5 7e 49 d6 3d 13 d6 f9 be ab 3d 8c 32 0b 36 47 58 a5 e8 61 7e 79 ca b7 fc e9 77 d1 f1 bd 29 aa 9e 9a a8 03 b5 f6 06 cc ba 85 d4 82 f8 8a 7d 12 8c a3 73 54 ab 5d e5 af 9c f4 67 62 ed 45 aa b3 b2 9c 42 16 63 2b 21 60 21 43 e6 cc d6 2c 5a 4e ab 45 de 92 20 ad 7d 82 65 62 5d 12 8b c7 f1 de 87 c8 9c bf 9f 5d f2 cc bc 8d 4d a1 7f c6 93 9b 08 9e d7 63 58 15 f5 89 ad a0 74 d4 a0 31 41 03 ad 19 91 c3 7a c1 63 24 cc d9 a8 b5 21 73 4e 64 67 2d 9a 24 9b 05 1b 86 63 95 dd e5 6c 26 33 c7 45 b1 8c 03 07 04 29 32 08 dc 65 02 7a cd 6e ed c5 1a cd 65 c4 2d b0 01 70 c7 41 75 c7 b8 e9 e8 1e ad Data Ascii: *YyduPe MMLsBRt<V3~I==26GXa~yw)}sT]gbEBc+!`!C,ZNE }eb]]McXt1Azc$!sNdg-$cl&3E)2ezne-pAu
2024-12-17 17:20:09 UTC	1390	IN	Data Raw: e3 56 1c 72 49 1c 7b 13 3b 7d ff 00 a6 70 1d f6 69 ce ac c6 a2 b3 43 c5 a4 eb 1a 69 05 6c 8b 86 d0 38 d2 bb d0 7d 8f 63 a4 5c 83 05 4a 45 99 6b 8a 3e c2 ad 1a 5d a0 08 26 da a6 b1 92 08 54 d8 f9 41 e8 b4 dc dd e9 d1 75 74 d7 23 15 1d 2e 8e 31 7b 69 b3 5a d1 c2 44 79 35 1c f1 c5 76 c5 7b 34 25 92 cc a3 e7 ad 2b 4e 6d 36 86 c8 8c c7 43 aa f1 3d 48 7c cd e0 a7 e6 e8 ee 14 78 b8 60 1f 29 eb 42 b6 64 c9 59 bc 8c 97 59 98 6f 21 33 79 98 57 66 b3 e9 78 b3 58 35 1c b3 0c 1c e4 6a 53 30 bc 98 98 09 31 20 06 cd 46 f6 3d 51 34 1c 06 13 08 5c 65 08 2c 98 4d 40 43 19 d0 79 50 de 4b e3 3e 41 b7 a1 a3 c4 7a fe 1d a5 8a cc e4 6c cc 6b 64 1e 91 83 08 ad a5 55 77 4e 4d da 87 4b a7 68 2c 03 f3 1d 5d 61 ce 3e b2 87 6d 63 c8 5f 97 62 d6 06 80 74 3d 61 42 fa be a3 9b 39 5a 7e Data Ascii: VrI{;}piCil8}c\JEk>]&TAut#.1{iZDy5v{4%+Nm6C=H\|x`)BdYYo!3yWfxX5jS01 F=Q4\e,M@CyPK>AzlkdUwNMKh,]a>mc_bt=aB9Z~
2024-12-17 17:20:09 UTC	1390	IN	Data Raw: ba 99 45 c9 c8 54 6e a6 51 73 37 aa 52 b0 bb 66 bc d4 5e 8b 50 51 59 d1 f3 79 75 3c 03 14 b6 55 79 cf 71 59 99 e4 b5 d7 a1 3d 8b a1 a6 b6 cf 5d 64 b1 4a dd 75 89 60 c2 d3 57 62 02 04 56 cb 49 cb f3 dd bd 23 3c 80 ac eb 19 2b d5 07 5b e6 a9 9e 6c d5 56 aa 25 36 ca bb 36 b6 fc b5 92 75 84 a7 79 d3 51 12 e5 e3 34 f6 06 55 5f ac 72 8c 91 33 a3 f4 5f 26 e8 8f 57 f2 9e c8 e7 17 cd 74 85 3c 8e 87 d3 b9 a3 cf 88 df 36 76 b7 de 4a c1 e8 6a f1 78 97 b4 9c dd 53 16 d5 5a 8e a6 1c 51 52 a8 45 d9 d4 e2 42 70 d6 06 de a2 16 33 09 29 8a 64 b3 58 12 25 86 42 d9 06 64 35 2a d6 49 9a 58 b0 91 21 c6 23 01 8e 2e e7 99 9a 49 8c a1 0e 06 06 0a ab 23 00 6f 4a 02 48 ad 0a d4 6d 67 a6 37 26 f8 7a 2e fb 6e 2f d5 3c 3e c7 6e de b3 f1 fd 0e 0f e7 6f af bc 7f d5 e4 f0 5b ea 1e 93 eb Data Ascii: ETnQs7Rf^PQYyu<UyqY=]dJu`WbVI#<+[lV%66uyQ4U_r3_&Wt<6vJjxSZQREBp3)dX%Bd5*IX!#.I#oJHmg7&z.n/<>no[
2024-12-17 17:20:09 UTC	1390	IN	Data Raw: b4 ae c4 c8 c9 90 59 6b 5b 4d 47 0a 66 60 88 66 61 9b d6 05 98 4c 15 95 db cb 02 16 2e b4 be 42 e7 27 98 0e 30 93 73 93 8f e3 54 d9 3d eb 01 20 b7 0d 48 07 31 c0 38 30 49 3b 3a 22 5b 6b be 5d b9 57 3d 7b bc f1 7b fc a3 d7 7a 5b af 37 ac 16 e7 b1 cf a2 bc 96 f0 e5 a4 0e 31 72 59 e5 7b 9c ba 0a ba da be 74 f2 af 9d be b0 f9 63 ed fc 55 7a 2e 5f b6 f7 78 0d 69 ce 19 9f 54 bb e5 3b 3d 4a 4e 7f b6 e6 37 9a b4 af 12 97 99 ac be a6 9a e9 7d 43 c6 7d 1b 5c bd 49 ca 1b 73 12 b4 01 43 57 7b cb 8e 72 11 a9 2c fc 83 bb e2 c5 50 ec b9 93 d3 bd 8f ce 7d 10 95 32 49 0d 88 6d 98 65 e4 54 8f 41 18 61 18 ab 90 0e e6 8c 79 be 28 c9 0f 2e 9b db 17 25 b0 0d 85 c9 59 0c c3 c0 67 30 bb d8 76 94 2a 30 b1 97 c6 87 d1 f3 97 5c 34 fe f7 2c dc d1 07 24 89 16 2c 89 62 42 39 bd 99 12 Data Ascii: Yk[MGf`faL.B'0sT= H180I;:"[k]W={{z[71rY{tcUz._xiT;=JN7}C}\IsCW{r,P}2ImeTAay(.%Yg0v*0\4,$,bB9
2024-12-17 17:20:09 UTC	1390	IN	Data Raw: 35 bd 1f 5e 3f 4f 1b 69 6a b7 cd fa 25 2c 89 c3 d0 30 1c 7c fb 73 74 fd 57 98 5e 7d c0 7e 56 e9 bd 7e 7f 6f 17 17 ec 1c ba a1 ce 7a 27 8d e3 5f 1e da d3 da 7d df cf de f6 bc 2f 5b bc dd e9 7b 3d e3 3a 7a 7b 7b ae d2 eb 89 e9 35 ce e0 20 da a5 57 66 44 f3 de 23 dc 6a 0f 2b b8 3d 19 ea 5d 87 95 f6 e7 a0 f0 9d ed 32 f9 c7 1d e9 fe 56 c5 1b ec 38 05 a2 9c 11 e6 43 24 13 18 c0 d8 0c 22 2e cb e6 58 8d 12 50 c1 99 29 31 9c 57 06 cc b5 e8 95 da 4c 17 5a d9 8e 72 bf ad ad 14 b4 e5 74 75 ae 73 8e 17 a1 51 96 89 09 2f 8b 02 ad bc 3a bb 6e 6f a7 f3 ef 79 b2 e4 22 4f 44 4c 33 21 64 39 24 47 20 f5 98 50 ee 1c c1 61 e0 0b f5 81 f7 f9 28 0b 63 a9 a0 10 ad 95 f3 7e 62 2c 31 3c 80 73 14 11 b2 75 bc 8a 11 25 47 2d 22 bb b3 66 a8 37 1a 39 f5 fa 55 5a e7 55 e9 12 ae 4e ab b3 Data Ascii: 5^?Oij%,0\|stW^}~V~oz'_}/[{=:z{{5 WfD#j+=]2V8C$".XP)1WLZrtusQ/:noy"ODL3!d9$G Pa(c~b,1<su%G-"f79UZUN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.16	49953	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:09 UTC	881	OUT	GET /assets/shared/checkout/v15/images/fR4HGxm3eCqo.svg HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:09 UTC	419	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: b4db807dd98491c4535461046ea6322c server: Google Frontend Content-Length: 1828 via: 1.1 google date: Tue, 17 Dec 2024 17:20:09 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"724-193cfe30d00" Content-Type: image/svg+xml Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:09 UTC	971	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 31 70 78 22 20 68 65 69 67 68 74 3d 22 31 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 31 20 31 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 72 61 74 69 6e 67 5f 73 74 61 72 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 50 61 67 65 2d 31 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="81px" height="14px" viewBox="0 0 81 14" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>rating_stars</title> <g id="Page-1" stroke="none" stroke
2024-12-17 17:20:09 UTC	857	IN	Data Raw: 33 30 2e 32 35 38 38 37 33 20 34 2e 39 32 39 32 38 34 36 31 22 3e 3c 2f 70 6f 6c 79 67 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 46 69 6c 6c 2d 33 22 20 70 6f 69 6e 74 73 3d 22 34 31 2e 39 36 35 38 33 20 34 2e 32 31 37 33 34 30 31 32 20 33 39 2e 38 32 31 33 31 20 30 2e 30 30 30 34 33 38 31 31 39 36 38 38 20 33 37 2e 36 37 36 37 39 20 34 2e 32 31 37 33 34 30 31 32 20 33 32 2e 39 32 33 37 31 20 34 2e 39 32 39 32 38 34 36 31 20 33 36 2e 33 37 32 35 31 20 38 2e 32 34 39 34 34 33 32 34 20 33 35 2e 34 39 30 30 38 37 20 31 33 2e 30 32 37 36 36 34 32 20 33 39 2e 38 32 31 33 33 37 20 31 30 2e 37 38 39 31 33 35 34 20 34 34 2e 31 35 32 35 38 37 20 31 33 2e 30 32 37 36 36 34 32 20 34 33 2e 32 37 30 31 36 34 20 Data Ascii: 30.258873 4.92928461"></polygon> <polygon id="Fill-3" points="41.96583 4.21734012 39.82131 0.000438119688 37.67679 4.21734012 32.92371 4.92928461 36.37251 8.24944324 35.490087 13.0276642 39.821337 10.7891354 44.152587 13.0276642 43.270164

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.16	49954	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:09 UTC	881	OUT	GET /assets/shared/checkout/v15/images/rTDN5cAAh5mz.svg HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:10 UTC	420	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 87217944f39b7a65df58eb9fedda258d server: Google Frontend Content-Length: 4200 via: 1.1 google date: Tue, 17 Dec 2024 17:20:10 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"1068-193cfe30d00" Content-Type: image/svg+xml Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:10 UTC	970	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 39 70 78 22 20 68 65 69 67 68 74 3d 22 31 33 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 20 31 33 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 68 6f 75 72 67 6c 61 73 73 22 3e 0d 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2e 32 36 32 38 36 38 20 30 43 30 2e 31 31 37 37 36 35 20 30 20 30 20 30 2e 31 31 33 37 35 20 30 20 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="9px" height="13px" viewBox="0 0 9 13" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg"> <g id="hourglass"> <path d="M0.262868 0C0.117765 0 0 0.11375 0 0
2024-12-17 17:20:10 UTC	1390	IN	Data Raw: 35 43 33 2e 35 34 38 31 33 20 36 2e 31 32 38 30 33 20 33 2e 36 38 30 31 35 20 36 2e 33 30 30 39 39 20 33 2e 36 38 30 31 35 20 36 2e 35 43 33 2e 36 38 30 31 35 20 36 2e 37 30 30 35 36 20 33 2e 35 34 34 30 39 20 36 2e 38 37 33 32 37 20 33 2e 33 34 33 36 38 20 36 2e 39 34 30 36 38 43 31 2e 39 39 34 30 36 20 37 2e 33 39 34 37 39 20 31 2e 30 35 31 34 37 20 38 2e 37 30 36 36 35 20 31 2e 30 35 31 34 37 20 31 30 2e 31 33 30 39 4c 31 2e 30 35 31 34 37 20 31 31 2e 35 30 32 31 43 30 2e 34 35 32 32 36 34 20 31 31 2e 36 32 30 31 20 30 20 31 32 2e 31 33 33 20 30 20 31 32 2e 37 34 36 31 43 30 20 31 32 2e 38 38 36 33 20 30 2e 31 31 37 37 31 32 20 31 33 20 30 2e 32 36 32 38 36 38 20 31 33 4c 38 2e 36 37 34 36 33 20 31 33 43 38 2e 38 31 39 37 39 20 31 33 20 38 2e 39 33 37 Data Ascii: 5C3.54813 6.12803 3.68015 6.30099 3.68015 6.5C3.68015 6.70056 3.54409 6.87327 3.34368 6.94068C1.99406 7.39479 1.05147 8.70665 1.05147 10.1309L1.05147 11.5021C0.452264 11.6201 0 12.133 0 12.7461C0 12.8863 0.117712 13 0.262868 13L8.67463 13C8.81979 13 8.937
2024-12-17 17:20:10 UTC	1390	IN	Data Raw: 35 20 31 30 2e 34 38 36 37 43 34 2e 30 38 30 38 34 20 31 30 2e 34 31 33 33 20 34 2e 32 38 36 38 35 20 31 30 2e 33 30 34 20 34 2e 34 36 38 37 32 20 31 30 2e 31 36 36 43 34 2e 36 35 30 38 36 20 31 30 2e 33 30 34 32 20 34 2e 38 35 36 39 38 20 31 30 2e 34 31 33 35 20 35 2e 30 37 35 31 36 20 31 30 2e 34 38 36 37 43 35 2e 37 37 20 31 30 2e 37 32 30 36 20 36 2e 31 38 38 31 39 20 31 30 2e 39 36 31 32 20 36 2e 32 38 36 32 34 20 31 31 2e 34 37 36 36 5a 4d 30 2e 35 37 30 37 39 31 20 31 32 2e 34 39 32 32 43 30 2e 36 37 39 32 37 36 20 31 32 2e 31 39 36 36 20 30 2e 39 37 31 36 33 38 20 31 31 2e 39 38 34 34 20 31 2e 33 31 34 33 34 20 31 31 2e 39 38 34 34 4c 37 2e 36 32 33 31 36 20 31 31 2e 39 38 34 34 43 37 2e 38 33 33 36 37 20 31 31 2e 39 38 34 34 20 38 2e 30 33 31 36 Data Ascii: 5 10.4867C4.08084 10.4133 4.28685 10.304 4.46872 10.166C4.65086 10.3042 4.85698 10.4135 5.07516 10.4867C5.77 10.7206 6.18819 10.9612 6.28624 11.4766ZM0.570791 12.4922C0.679276 12.1966 0.971638 11.9844 1.31434 11.9844L7.62316 11.9844C7.83367 11.9844 8.0316
2024-12-17 17:20:10 UTC	450	IN	Data Raw: 38 34 32 32 38 20 34 2e 30 30 34 32 39 20 31 2e 30 39 32 39 31 20 33 2e 38 36 35 37 36 20 31 2e 32 38 31 30 38 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 2e 31 30 32 39 34 31 33 20 32 2e 36 39 31 34 30 37 29 22 20 69 64 3d 22 53 68 61 70 65 22 20 66 69 6c 6c 3d 22 23 30 31 32 31 36 39 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2e 32 36 32 38 36 38 20 30 43 30 2e 31 31 37 37 31 32 20 30 20 30 20 30 2e 31 31 33 36 39 39 20 30 20 30 2e 32 35 33 39 30 36 4c 30 20 30 2e 38 33 37 38 39 31 43 30 20 30 2e 39 37 38 30 39 38 20 30 2e 31 31 37 37 31 32 20 31 2e 30 39 31 38 20 30 2e 32 36 32 38 36 38 20 31 2e 30 39 31 38 43 30 2e 34 30 38 30 32 33 20 31 2e 30 39 31 38 20 30 Data Ascii: 84228 4.00429 1.09291 3.86576 1.28108Z" transform="translate(2.1029413 2.691407)" id="Shape" fill="#012169" stroke="none" /> <path d="M0.262868 0C0.117712 0 0 0.113699 0 0.253906L0 0.837891C0 0.978098 0.117712 1.0918 0.262868 1.0918C0.408023 1.0918 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.16	49961	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:11 UTC	881	OUT	GET /assets/shared/checkout/v15/images/AA2yMk38yKhn.svg HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:11 UTC	422	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 78091fd41758fe765729551d48b7f12f;o=1 server: Google Frontend Content-Length: 410 via: 1.1 google date: Tue, 17 Dec 2024 17:20:11 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"19a-193cfe30d00" Content-Type: image/svg+xml Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:11 UTC	410	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 70 78 22 20 68 65 69 67 68 74 3d 22 31 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 20 31 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 35 20 39 43 36 2e 39 38 35 32 38 20 39 20 39 20 36 2e 39 38 35 32 38 20 39 20 34 2e 35 43 39 20 32 2e 30 31 34 37 32 20 36 2e 39 38 35 32 38 20 30 20 34 2e 35 20 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="10px" height="10px" viewBox="0 0 10 10" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg"> <path d="M4.5 9C6.98528 9 9 6.98528 9 4.5C9 2.01472 6.98528 0 4.5 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.16	49962	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:11 UTC	531	OUT	GET /assets/shared/checkout/v15/images/fR4HGxm3eCqo.svg HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:11 UTC	419	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: b4db807dd98491c4535461046ea6322c server: Google Frontend Content-Length: 1828 via: 1.1 google Date: Tue, 17 Dec 2024 17:20:09 GMT Age: 2 Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"724-193cfe30d00" Content-Type: image/svg+xml Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:11 UTC	971	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 31 70 78 22 20 68 65 69 67 68 74 3d 22 31 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 31 20 31 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 72 61 74 69 6e 67 5f 73 74 61 72 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 50 61 67 65 2d 31 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="81px" height="14px" viewBox="0 0 81 14" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>rating_stars</title> <g id="Page-1" stroke="none" stroke
2024-12-17 17:20:11 UTC	857	IN	Data Raw: 33 30 2e 32 35 38 38 37 33 20 34 2e 39 32 39 32 38 34 36 31 22 3e 3c 2f 70 6f 6c 79 67 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 46 69 6c 6c 2d 33 22 20 70 6f 69 6e 74 73 3d 22 34 31 2e 39 36 35 38 33 20 34 2e 32 31 37 33 34 30 31 32 20 33 39 2e 38 32 31 33 31 20 30 2e 30 30 30 34 33 38 31 31 39 36 38 38 20 33 37 2e 36 37 36 37 39 20 34 2e 32 31 37 33 34 30 31 32 20 33 32 2e 39 32 33 37 31 20 34 2e 39 32 39 32 38 34 36 31 20 33 36 2e 33 37 32 35 31 20 38 2e 32 34 39 34 34 33 32 34 20 33 35 2e 34 39 30 30 38 37 20 31 33 2e 30 32 37 36 36 34 32 20 33 39 2e 38 32 31 33 33 37 20 31 30 2e 37 38 39 31 33 35 34 20 34 34 2e 31 35 32 35 38 37 20 31 33 2e 30 32 37 36 36 34 32 20 34 33 2e 32 37 30 31 36 34 20 Data Ascii: 30.258873 4.92928461"></polygon> <polygon id="Fill-3" points="41.96583 4.21734012 39.82131 0.000438119688 37.67679 4.21734012 32.92371 4.92928461 36.37251 8.24944324 35.490087 13.0276642 39.821337 10.7891354 44.152587 13.0276642 43.270164

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.16	49963	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:11 UTC	874	OUT	GET /assets/shared/checkout/img/logos/paypal.svg HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:12 UTC	420	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 0a190740cd545f0f55fa3ab2442adae5 server: Google Frontend Content-Length: 7146 via: 1.1 google date: Tue, 17 Dec 2024 17:20:11 GMT Last-Modified: Mon, 16 Dec 2024 14:33:03 GMT ETag: W/"1bea-193cfe30918" Content-Type: image/svg+xml Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:12 UTC	970	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 37 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 69 64 3d 22 50 61 79 70 61 6c 22 3e 0a 3c 67 20 69 64 3d 22 50 61 79 70 61 6c 5f 32 22 3e 0a 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 20 31 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 2e 32 37 35 37 20 33 2e 36 37 38 37 37 48 32 31 2e 36 34 33 35 43 32 31 2e 33 39 34 39 20 33 2e 36 37 38 37 37 20 32 31 2e 31 38 33 35 20 33 2e 38 35 36 35 35 20 32 31 2e 31 34 34 37 Data Ascii: <svg width="67" height="16" viewBox="0 0 67 16" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Paypal"><g id="Paypal_2"><path id="Fill 1" fill-rule="evenodd" clip-rule="evenodd" d="M25.2757 3.67877H21.6435C21.3949 3.67877 21.1835 3.85655 21.1447
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: 34 2e 30 39 34 36 20 37 2e 32 33 37 35 33 4c 33 34 2e 30 31 37 35 20 37 2e 37 31 36 33 39 4c 33 33 2e 38 39 36 20 37 2e 35 34 32 38 36 43 33 33 2e 35 31 39 35 20 37 2e 30 30 34 38 34 20 33 32 2e 36 37 39 37 20 36 2e 38 32 35 30 31 20 33 31 2e 38 34 31 37 20 36 2e 38 32 35 30 31 43 32 39 2e 39 31 39 36 20 36 2e 38 32 35 30 31 20 32 38 2e 32 37 38 20 38 2e 32 35 38 30 36 20 32 37 2e 39 35 38 33 20 31 30 2e 32 36 38 32 43 32 37 2e 37 39 32 31 20 31 31 2e 32 37 30 39 20 32 38 2e 30 32 38 33 20 31 32 2e 32 32 39 38 20 32 38 2e 36 30 36 33 20 31 32 2e 38 39 38 34 43 32 39 2e 31 33 36 33 20 31 33 2e 35 31 33 32 20 32 39 2e 38 39 34 37 20 31 33 2e 37 36 39 34 20 33 30 2e 37 39 37 20 31 33 2e 37 36 39 34 43 33 32 2e 33 34 35 37 20 31 33 2e 37 36 39 34 20 33 33 2e Data Ascii: 4.0946 7.23753L34.0175 7.71639L33.896 7.54286C33.5195 7.00484 32.6797 6.82501 31.8417 6.82501C29.9196 6.82501 28.278 8.25806 27.9583 10.2682C27.7921 11.2709 28.0283 12.2298 28.6063 12.8984C29.1363 13.5132 29.8947 13.7694 30.797 13.7694C32.3457 13.7694 33.
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: 38 31 37 4c 34 35 2e 35 38 31 39 20 31 33 2e 32 36 36 34 43 34 35 2e 35 35 32 38 20 31 33 2e 34 34 37 34 20 34 35 2e 36 39 35 31 20 31 33 2e 36 31 30 34 20 34 35 2e 38 38 30 35 20 31 33 2e 36 31 30 34 48 34 37 2e 37 34 34 36 43 34 37 2e 39 31 37 37 20 31 33 2e 36 31 30 34 20 34 38 2e 30 36 35 38 20 31 33 2e 34 38 36 31 20 34 38 2e 30 39 32 39 20 31 33 2e 33 31 36 36 4c 34 38 2e 35 30 39 39 20 31 30 2e 37 31 37 38 43 34 38 2e 35 34 38 31 20 31 30 2e 34 37 35 37 20 34 38 2e 37 36 30 31 20 31 30 2e 32 39 38 20 34 39 2e 30 30 38 31 20 31 30 2e 32 39 38 48 35 30 2e 31 35 37 34 43 35 32 2e 35 35 30 34 20 31 30 2e 32 39 38 20 35 33 2e 39 33 30 38 20 39 2e 31 35 38 32 32 20 35 34 2e 32 39 32 20 36 2e 38 39 39 38 34 43 35 34 2e 34 35 35 31 20 35 2e 39 31 31 36 37 Data Ascii: 817L45.5819 13.2664C45.5528 13.4474 45.6951 13.6104 45.8805 13.6104H47.7446C47.9177 13.6104 48.0658 13.4861 48.0929 13.3166L48.5099 10.7178C48.5481 10.4757 48.7601 10.298 49.0081 10.298H50.1574C52.5504 10.298 53.9308 9.15822 54.292 6.89984C54.4551 5.91167
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: 2e 36 34 30 37 31 20 35 39 2e 30 35 34 35 20 38 2e 38 30 32 33 38 20 35 39 2e 33 31 39 20 39 2e 31 30 36 39 37 43 35 39 2e 35 38 35 20 39 2e 34 31 34 39 33 20 35 39 2e 36 39 30 32 20 39 2e 38 34 34 37 33 20 35 39 2e 36 31 33 33 20 31 30 2e 33 31 38 35 5a 22 20 66 69 6c 6c 3d 22 23 32 39 38 46 43 32 22 2f 3e 0a 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 20 36 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 36 34 2e 30 38 38 33 20 33 2e 39 33 30 33 4c 36 32 2e 35 39 37 36 20 31 33 2e 32 36 36 34 43 36 32 2e 35 36 38 34 20 31 33 2e 34 34 37 34 20 36 32 2e 37 31 30 36 20 31 33 2e 36 31 30 34 20 36 32 2e 38 39 36 20 31 33 2e 36 31 30 34 48 36 34 2e 33 39 34 38 43 36 34 2e Data Ascii: .64071 59.0545 8.80238 59.319 9.10697C59.585 9.41493 59.6902 9.84473 59.6133 10.3185Z" fill="#298FC2"/><path id="Fill 6" fill-rule="evenodd" clip-rule="evenodd" d="M64.0883 3.9303L62.5976 13.2664C62.5684 13.4474 62.7106 13.6104 62.896 13.6104H64.3948C64.
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: 30 31 39 37 35 20 31 35 2e 33 38 34 38 20 37 2e 30 30 30 37 31 20 31 35 2e 33 39 32 31 20 36 2e 39 38 32 31 32 20 31 35 2e 33 39 32 31 48 34 2e 35 38 38 33 37 5a 22 20 66 69 6c 6c 3d 22 23 32 38 33 35 36 41 22 2f 3e 0a 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 20 38 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 32 2e 39 36 39 37 20 34 2e 31 35 38 37 35 43 31 32 2e 39 35 34 39 20 34 2e 32 35 32 33 33 20 31 32 2e 39 33 37 38 20 34 2e 33 34 37 39 35 20 31 32 2e 39 31 38 38 20 34 2e 34 34 36 32 31 43 31 32 2e 32 36 31 38 20 37 2e 37 36 36 35 37 20 31 30 2e 30 31 34 32 20 38 2e 39 31 33 36 32 20 37 2e 31 34 33 36 35 20 38 2e 39 31 33 36 32 48 35 2e 36 38 32 30 35 43 Data Ascii: 01975 15.3848 7.00071 15.3921 6.98212 15.3921H4.58837Z" fill="#28356A"/><path id="Fill 8" fill-rule="evenodd" clip-rule="evenodd" d="M12.9697 4.15875C12.9549 4.25233 12.9378 4.34795 12.9188 4.44621C12.2618 7.76657 10.0142 8.91362 7.14365 8.91362H5.68205C
2024-12-17 17:20:12 UTC	616	IN	Data Raw: 36 38 38 35 20 33 2e 39 37 30 30 32 20 36 2e 30 30 32 35 39 20 33 2e 38 30 32 32 20 36 2e 31 38 32 37 34 20 33 2e 37 31 37 35 36 43 36 2e 32 36 35 30 31 20 33 2e 36 37 38 37 35 20 36 2e 33 35 35 37 35 20 33 2e 36 35 37 33 37 20 36 2e 34 35 32 20 33 2e 36 35 37 33 37 48 31 30 2e 33 35 36 36 43 31 30 2e 38 31 39 31 20 33 2e 36 35 37 33 37 20 31 31 2e 32 35 30 39 20 33 2e 36 38 37 32 34 20 31 31 2e 36 34 35 20 33 2e 37 34 39 39 32 43 31 31 2e 37 35 37 36 20 33 2e 37 36 37 36 34 20 31 31 2e 38 36 37 20 33 2e 37 38 38 31 34 20 31 31 2e 39 37 33 38 20 33 2e 38 31 31 31 33 43 31 32 2e 30 38 20 33 2e 38 33 34 35 36 20 31 32 2e 31 38 33 35 20 33 2e 38 36 30 37 37 20 31 32 2e 32 38 34 20 33 2e 38 38 39 34 37 43 31 32 2e 33 33 33 38 20 33 2e 39 30 34 31 32 20 31 32 Data Ascii: 6885 3.97002 6.00259 3.8022 6.18274 3.71756C6.26501 3.67875 6.35575 3.65737 6.452 3.65737H10.3566C10.8191 3.65737 11.2509 3.68724 11.645 3.74992C11.7576 3.76764 11.867 3.78814 11.9738 3.81113C12.08 3.83456 12.1835 3.86077 12.284 3.88947C12.3338 3.90412 12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.16	49964	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:11 UTC	532	OUT	GET /assets/shared/checkout/v15/images/xNcpsuWcBQjG.webp HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:12 UTC	420	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 76401cb4bb065cee5fa9cd983ce4f202 server: Google Frontend Content-Length: 173994 via: 1.1 google date: Tue, 17 Dec 2024 17:20:11 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"2a7aa-193cfe30d00" Content-Type: image/webp Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:12 UTC	970	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 05 04 05 06 06 05 07 08 07 08 07 0a 0a 09 09 0a 0a 10 0b 0c 0b 0c 0b 10 18 0f 11 0f 0f 11 0f 18 15 19 15 13 15 19 15 26 1e 1a 1a 1e 26 2c 25 23 25 2c 35 2f 2f 35 43 3f 43 57 57 75 01 04 04 04 04 05 04 05 06 06 05 07 08 07 08 07 0a 0a 09 09 0a 0a 10 0b 0c 0b 0c 0b 10 18 0f 11 0f 0f 11 0f 18 15 19 15 13 15 19 15 26 1e 1a 1a 1e 26 2c 25 23 25 2c 35 2f 2f 35 43 3f 43 57 57 75 ff c2 00 11 08 05 ae 06 b6 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 03 04 02 05 00 01 06 07 08 09 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ad c8 6a 35 a8 e4 6f 5b 11 93 86 c9 8f Data Ascii: JFIF&&,%#%,5//5C?CWWu&&,%#%,5//5C?CWWu"5j5o[
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: c0 9a 09 00 13 6c 22 2b 07 13 9c 4b bc 71 af 2d a0 f7 59 b3 e0 9d b7 a4 a2 72 7d a2 f6 ee 9a 20 0e bb 69 49 a5 9e 95 db 00 83 22 47 3a 6e 5f a4 2d f9 0e e8 07 96 f5 08 d7 1e af 7b c3 75 cb 7c 22 1b 57 9d aa ea a9 99 af 71 68 47 41 6f cf 3f 57 a4 ac 6d b9 24 f4 73 aa 5a ae 9e b4 a4 b0 50 85 dd c7 37 62 76 06 a5 b5 0c 06 46 02 26 82 03 37 a5 c8 cb 46 6f 08 82 1b 23 13 1b c2 16 d1 60 40 4c 68 52 2d 00 af a9 e9 08 70 d4 9d fa ad 79 fe 76 94 25 4e 12 09 ad 6c 6b 3c 8e cd ef 53 36 60 c9 4d 91 22 47 5a c3 44 d4 02 0f 24 4b 79 84 a5 0d 04 c1 90 dc a3 10 b9 a1 b4 69 8f 19 29 40 50 92 84 c2 4a 11 0e 41 10 60 cb 30 1c eb 1c 64 83 20 53 88 e1 72 24 27 31 14 9e b2 60 b6 38 05 42 5b 68 b4 f6 9c db 1d bd aa 0d 32 f3 68 32 d3 06 5e 68 dc d7 28 6d 8f 6a 6c 86 d2 46 10 c7 Data Ascii: l"+Kq-Yr} iI"G:n_-{u\|"WqhGAo?Wm$sZP7bvF&7Fo#`@LhR-pyv%Nlk<S6`M"GZD$Kyi)@PJA`0d Sr$'1`8B[h2h2^h(mjlF
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: 33 0c cc c3 33 30 dc a1 84 f2 18 bf 3c 17 79 ae 19 ad 19 63 9a 14 b2 d2 c1 87 13 48 23 8a 2e 30 a2 8c c0 c8 a5 6b 0f 9b 66 be ba c5 41 69 bc f1 5c fb e4 13 c7 76 25 26 f0 af 05 92 e2 8c 91 aa 0c 6c 15 aa 7a cb 8a 8c a9 c0 7d 06 72 6e 37 ce f8 f7 ac 78 4b 3e 6f 69 cd 7a d2 77 d5 9d 1d 4b 62 6e b9 e5 9c 74 30 ec 26 54 71 e4 1e 65 9d c2 4d 80 f0 d9 65 6f 43 6a c5 dd b7 3d 74 dd be e0 ea d2 2f 7f 44 5f 55 2d d0 27 16 b7 7f 52 73 6e 86 b4 ed 18 e5 2e 16 e1 ea 87 4b 52 22 da 05 2b 6a a5 86 c4 41 96 16 22 16 23 d0 d1 15 38 c9 ab da 1e 6a bc a3 b3 40 e3 51 d6 96 5a d6 13 c1 e2 41 76 d3 36 ca 0c 9b ad 7e b8 72 74 b7 02 55 7d 15 18 ca 72 31 5a e5 70 96 e6 4b 3a 0e 87 a6 c5 e1 f3 b5 e6 19 e4 d5 e9 82 bc cc 2e 0c b4 70 bf 11 46 6b 20 0a cf 7b 68 9b cc 8c 11 43 44 11 Data Ascii: 330<ycH#.0kfAi\v%&lz}rn7xK>oizwKbnt0&TqeMeoCj=t/D_U-'Rsn.KR"+jA"#8j@QZAv6~rtU}r1ZpK:.pFk {hCD
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: 6b 85 87 d1 a7 41 c5 47 84 ef 6a d7 88 dd 8d 7b 43 c5 84 5c 95 73 06 3a c6 27 b8 4c 36 64 14 ad 28 c0 dc 82 74 33 2a b0 3a 74 8e 3c c2 65 95 9c 16 18 29 06 9d 88 b4 9c 95 25 d7 36 ca da 26 d3 4c 8e 68 72 80 a4 99 09 82 16 05 53 9c 45 0c c2 a7 1b 3a 87 1b 32 67 2c 0c 8b 63 ec aa ca 34 da a7 1c d8 0c 44 0c 40 e8 1e e6 fa 22 5b 8c 8c 24 76 bb cc c5 c9 64 52 59 98 84 cc c3 33 30 c9 46 46 66 61 99 98 7c cf 06 b6 e6 23 4f 44 33 78 4a 6b 98 34 e0 5d 08 7d 6c 9e a3 23 24 39 12 98 48 69 76 34 46 44 91 9b 26 88 6b 22 6e 63 d1 8a b0 20 07 88 83 a8 de ca cc 7b 64 20 fd 31 c0 7c a7 ef 3f 2f 14 9f 4d fc d1 f5 16 53 81 a0 d8 2d 2b dc 57 aa 3a 0a e6 39 29 bb 5c 9d 27 69 e6 9d 43 a7 6d 54 e5 a9 e7 34 de 93 ce 1c d5 c2 a5 3a 1b de 66 dc e9 5e a5 b5 59 d5 5c 26 52 d9 09 44 Data Ascii: kAGj{C\s:'L6d(t3*:t<e)%6&LhrSE:2g,c4D@"[$vdRY30FFfa\|#OD3xJk4]}l#$9Hiv4FD&k"nc {d 1\|?/MS-+W:9)\'iCmT4:f^Y\&RD
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: a3 1b 12 06 62 12 31 b5 b6 b6 78 89 0b a2 54 bc 3a a1 34 20 16 eb cc 54 55 e5 a5 62 a0 58 73 36 3c 33 3c c7 2b d2 70 e2 55 5d 67 2a 54 e9 c4 f5 cc 53 81 0b 4a 61 83 33 46 0d c0 ba 76 75 ba 2a 06 20 81 96 a6 0e 7a b8 2a 37 73 56 2f 11 ec 29 94 c1 e9 a8 53 50 3e 8d b2 91 46 57 64 04 08 b9 06 64 02 82 b4 a8 6c b3 12 c7 59 5b 54 15 7d 17 d6 bc 12 e1 bf a0 da f3 3e d3 3b eb ac f8 1e bc bd ba a2 bb 08 7d 04 36 a0 32 8a 8f b5 d9 e7 53 ee f9 f6 b4 70 b2 57 ee 41 53 ec 73 2d cf 56 f4 36 71 4e 56 0e 93 08 58 c0 55 35 19 ab 29 6b 1e af b3 70 86 99 34 c0 56 4d 3d 49 66 55 98 4d 98 26 26 c0 48 16 63 9a 90 ab 10 7d 84 0e 59 33 5e c8 f3 2a 99 1b cd 38 59 3b 5c c0 fc 96 38 15 5b 50 b6 e8 b9 4e a4 3c 82 42 52 d6 89 cc 73 5d e6 b1 77 9a c3 79 98 4b 23 89 2c cc 4c cc c3 c5 Data Ascii: b1xT:4 TUbXs6<3<+pU]gTSJa3Fvu z7sV/)SP>FWddlY[T}>;}62SpWASs-V6qNVXU5)kp4VM=IfUM&&Hc}Y3^8Y;\8[PN<BRs]wyK#,L
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: 2a cc cc da 59 98 79 64 75 1d f2 d4 f5 b5 9c c6 50 65 cd 81 c3 04 20 4d 80 4d 02 91 8e 4c 89 73 0c 96 b0 80 a7 80 84 f4 84 1c d6 c6 e1 19 02 81 42 52 d4 74 3c f9 1a 56 ea 0e 33 e4 0f a5 7e 49 d6 3d 13 d6 f9 be ab 3d 8c 32 0b 36 47 58 a5 e8 61 7e 79 ca b7 fc e9 77 d1 f1 bd 29 aa 9e 9a a8 03 b5 f6 06 cc ba 85 d4 82 f8 8a 7d 12 8c a3 73 54 ab 5d e5 af 9c f4 67 62 ed 45 aa b3 b2 9c 42 16 63 2b 21 60 21 43 e6 cc d6 2c 5a 4e ab 45 de 92 20 ad 7d 82 65 62 5d 12 8b c7 f1 de 87 c8 9c bf 9f 5d f2 cc bc 8d 4d a1 7f c6 93 9b 08 9e d7 63 58 15 f5 89 ad a0 74 d4 a0 31 41 03 ad 19 91 c3 7a c1 63 24 cc d9 a8 b5 21 73 4e 64 67 2d 9a 24 9b 05 1b 86 63 95 dd e5 6c 26 33 c7 45 b1 8c 03 07 04 29 32 08 dc 65 02 7a cd 6e ed c5 1a cd 65 c4 2d b0 01 70 c7 41 75 c7 b8 e9 e8 1e ad Data Ascii: *YyduPe MMLsBRt<V3~I==26GXa~yw)}sT]gbEBc+!`!C,ZNE }eb]]McXt1Azc$!sNdg-$cl&3E)2ezne-pAu
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: e3 56 1c 72 49 1c 7b 13 3b 7d ff 00 a6 70 1d f6 69 ce ac c6 a2 b3 43 c5 a4 eb 1a 69 05 6c 8b 86 d0 38 d2 bb d0 7d 8f 63 a4 5c 83 05 4a 45 99 6b 8a 3e c2 ad 1a 5d a0 08 26 da a6 b1 92 08 54 d8 f9 41 e8 b4 dc dd e9 d1 75 74 d7 23 15 1d 2e 8e 31 7b 69 b3 5a d1 c2 44 79 35 1c f1 c5 76 c5 7b 34 25 92 cc a3 e7 ad 2b 4e 6d 36 86 c8 8c c7 43 aa f1 3d 48 7c cd e0 a7 e6 e8 ee 14 78 b8 60 1f 29 eb 42 b6 64 c9 59 bc 8c 97 59 98 6f 21 33 79 98 57 66 b3 e9 78 b3 58 35 1c b3 0c 1c e4 6a 53 30 bc 98 98 09 31 20 06 cd 46 f6 3d 51 34 1c 06 13 08 5c 65 08 2c 98 4d 40 43 19 d0 79 50 de 4b e3 3e 41 b7 a1 a3 c4 7a fe 1d a5 8a cc e4 6c cc 6b 64 1e 91 83 08 ad a5 55 77 4e 4d da 87 4b a7 68 2c 03 f3 1d 5d 61 ce 3e b2 87 6d 63 c8 5f 97 62 d6 06 80 74 3d 61 42 fa be a3 9b 39 5a 7e Data Ascii: VrI{;}piCil8}c\JEk>]&TAut#.1{iZDy5v{4%+Nm6C=H\|x`)BdYYo!3yWfxX5jS01 F=Q4\e,M@CyPK>AzlkdUwNMKh,]a>mc_bt=aB9Z~
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: ba 99 45 c9 c8 54 6e a6 51 73 37 aa 52 b0 bb 66 bc d4 5e 8b 50 51 59 d1 f3 79 75 3c 03 14 b6 55 79 cf 71 59 99 e4 b5 d7 a1 3d 8b a1 a6 b6 cf 5d 64 b1 4a dd 75 89 60 c2 d3 57 62 02 04 56 cb 49 cb f3 dd bd 23 3c 80 ac eb 19 2b d5 07 5b e6 a9 9e 6c d5 56 aa 25 36 ca bb 36 b6 fc b5 92 75 84 a7 79 d3 51 12 e5 e3 34 f6 06 55 5f ac 72 8c 91 33 a3 f4 5f 26 e8 8f 57 f2 9e c8 e7 17 cd 74 85 3c 8e 87 d3 b9 a3 cf 88 df 36 76 b7 de 4a c1 e8 6a f1 78 97 b4 9c dd 53 16 d5 5a 8e a6 1c 51 52 a8 45 d9 d4 e2 42 70 d6 06 de a2 16 33 09 29 8a 64 b3 58 12 25 86 42 d9 06 64 35 2a d6 49 9a 58 b0 91 21 c6 23 01 8e 2e e7 99 9a 49 8c a1 0e 06 06 0a ab 23 00 6f 4a 02 48 ad 0a d4 6d 67 a6 37 26 f8 7a 2e fb 6e 2f d5 3c 3e c7 6e de b3 f1 fd 0e 0f e7 6f af bc 7f d5 e4 f0 5b ea 1e 93 eb Data Ascii: ETnQs7Rf^PQYyu<UyqY=]dJu`WbVI#<+[lV%66uyQ4U_r3_&Wt<6vJjxSZQREBp3)dX%Bd5*IX!#.I#oJHmg7&z.n/<>no[
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: b4 ae c4 c8 c9 90 59 6b 5b 4d 47 0a 66 60 88 66 61 9b d6 05 98 4c 15 95 db cb 02 16 2e b4 be 42 e7 27 98 0e 30 93 73 93 8f e3 54 d9 3d eb 01 20 b7 0d 48 07 31 c0 38 30 49 3b 3a 22 5b 6b be 5d b9 57 3d 7b bc f1 7b fc a3 d7 7a 5b af 37 ac 16 e7 b1 cf a2 bc 96 f0 e5 a4 0e 31 72 59 e5 7b 9c ba 0a ba da be 74 f2 af 9d be b0 f9 63 ed fc 55 7a 2e 5f b6 f7 78 0d 69 ce 19 9f 54 bb e5 3b 3d 4a 4e 7f b6 e6 37 9a b4 af 12 97 99 ac be a6 9a e9 7d 43 c6 7d 1b 5c bd 49 ca 1b 73 12 b4 01 43 57 7b cb 8e 72 11 a9 2c fc 83 bb e2 c5 50 ec b9 93 d3 bd 8f ce 7d 10 95 32 49 0d 88 6d 98 65 e4 54 8f 41 18 61 18 ab 90 0e e6 8c 79 be 28 c9 0f 2e 9b db 17 25 b0 0d 85 c9 59 0c c3 c0 67 30 bb d8 76 94 2a 30 b1 97 c6 87 d1 f3 97 5c 34 fe f7 2c dc d1 07 24 89 16 2c 89 62 42 39 bd 99 12 Data Ascii: Yk[MGf`faL.B'0sT= H180I;:"[k]W={{z[71rY{tcUz._xiT;=JN7}C}\IsCW{r,P}2ImeTAay(.%Yg0v*0\4,$,bB9
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: 35 bd 1f 5e 3f 4f 1b 69 6a b7 cd fa 25 2c 89 c3 d0 30 1c 7c fb 73 74 fd 57 98 5e 7d c0 7e 56 e9 bd 7e 7f 6f 17 17 ec 1c ba a1 ce 7a 27 8d e3 5f 1e da d3 da 7d df cf de f6 bc 2f 5b bc dd e9 7b 3d e3 3a 7a 7b 7b ae d2 eb 89 e9 35 ce e0 20 da a5 57 66 44 f3 de 23 dc 6a 0f 2b b8 3d 19 ea 5d 87 95 f6 e7 a0 f0 9d ed 32 f9 c7 1d e9 fe 56 c5 1b ec 38 05 a2 9c 11 e6 43 24 13 18 c0 d8 0c 22 2e cb e6 58 8d 12 50 c1 99 29 31 9c 57 06 cc b5 e8 95 da 4c 17 5a d9 8e 72 bf ad ad 14 b4 e5 74 75 ae 73 8e 17 a1 51 96 89 09 2f 8b 02 ad bc 3a bb 6e 6f a7 f3 ef 79 b2 e4 22 4f 44 4c 33 21 64 39 24 47 20 f5 98 50 ee 1c c1 61 e0 0b f5 81 f7 f9 28 0b 63 a9 a0 10 ad 95 f3 7e 62 2c 31 3c 80 73 14 11 b2 75 bc 8a 11 25 47 2d 22 bb b3 66 a8 37 1a 39 f5 fa 55 5a e7 55 e9 12 ae 4e ab b3 Data Ascii: 5^?Oij%,0\|stW^}~V~oz'_}/[{=:z{{5 WfD#j+=]2V8C$".XP)1WLZrtusQ/:noy"ODL3!d9$G Pa(c~b,1<su%G-"f79UZUN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.16	49965	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:11 UTC	531	OUT	GET /assets/shared/checkout/v15/images/rTDN5cAAh5mz.svg HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:12 UTC	420	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 5220b089ff1fad55cb0924fa9fa519c7 server: Google Frontend Content-Length: 4200 via: 1.1 google date: Tue, 17 Dec 2024 17:20:11 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"1068-193cfe30d00" Content-Type: image/svg+xml Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:12 UTC	970	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 39 70 78 22 20 68 65 69 67 68 74 3d 22 31 33 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 20 31 33 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 68 6f 75 72 67 6c 61 73 73 22 3e 0d 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2e 32 36 32 38 36 38 20 30 43 30 2e 31 31 37 37 36 35 20 30 20 30 20 30 2e 31 31 33 37 35 20 30 20 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="9px" height="13px" viewBox="0 0 9 13" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg"> <g id="hourglass"> <path d="M0.262868 0C0.117765 0 0 0.11375 0 0
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: 35 43 33 2e 35 34 38 31 33 20 36 2e 31 32 38 30 33 20 33 2e 36 38 30 31 35 20 36 2e 33 30 30 39 39 20 33 2e 36 38 30 31 35 20 36 2e 35 43 33 2e 36 38 30 31 35 20 36 2e 37 30 30 35 36 20 33 2e 35 34 34 30 39 20 36 2e 38 37 33 32 37 20 33 2e 33 34 33 36 38 20 36 2e 39 34 30 36 38 43 31 2e 39 39 34 30 36 20 37 2e 33 39 34 37 39 20 31 2e 30 35 31 34 37 20 38 2e 37 30 36 36 35 20 31 2e 30 35 31 34 37 20 31 30 2e 31 33 30 39 4c 31 2e 30 35 31 34 37 20 31 31 2e 35 30 32 31 43 30 2e 34 35 32 32 36 34 20 31 31 2e 36 32 30 31 20 30 20 31 32 2e 31 33 33 20 30 20 31 32 2e 37 34 36 31 43 30 20 31 32 2e 38 38 36 33 20 30 2e 31 31 37 37 31 32 20 31 33 20 30 2e 32 36 32 38 36 38 20 31 33 4c 38 2e 36 37 34 36 33 20 31 33 43 38 2e 38 31 39 37 39 20 31 33 20 38 2e 39 33 37 Data Ascii: 5C3.54813 6.12803 3.68015 6.30099 3.68015 6.5C3.68015 6.70056 3.54409 6.87327 3.34368 6.94068C1.99406 7.39479 1.05147 8.70665 1.05147 10.1309L1.05147 11.5021C0.452264 11.6201 0 12.133 0 12.7461C0 12.8863 0.117712 13 0.262868 13L8.67463 13C8.81979 13 8.937
2024-12-17 17:20:12 UTC	1390	IN	Data Raw: 35 20 31 30 2e 34 38 36 37 43 34 2e 30 38 30 38 34 20 31 30 2e 34 31 33 33 20 34 2e 32 38 36 38 35 20 31 30 2e 33 30 34 20 34 2e 34 36 38 37 32 20 31 30 2e 31 36 36 43 34 2e 36 35 30 38 36 20 31 30 2e 33 30 34 32 20 34 2e 38 35 36 39 38 20 31 30 2e 34 31 33 35 20 35 2e 30 37 35 31 36 20 31 30 2e 34 38 36 37 43 35 2e 37 37 20 31 30 2e 37 32 30 36 20 36 2e 31 38 38 31 39 20 31 30 2e 39 36 31 32 20 36 2e 32 38 36 32 34 20 31 31 2e 34 37 36 36 5a 4d 30 2e 35 37 30 37 39 31 20 31 32 2e 34 39 32 32 43 30 2e 36 37 39 32 37 36 20 31 32 2e 31 39 36 36 20 30 2e 39 37 31 36 33 38 20 31 31 2e 39 38 34 34 20 31 2e 33 31 34 33 34 20 31 31 2e 39 38 34 34 4c 37 2e 36 32 33 31 36 20 31 31 2e 39 38 34 34 43 37 2e 38 33 33 36 37 20 31 31 2e 39 38 34 34 20 38 2e 30 33 31 36 Data Ascii: 5 10.4867C4.08084 10.4133 4.28685 10.304 4.46872 10.166C4.65086 10.3042 4.85698 10.4135 5.07516 10.4867C5.77 10.7206 6.18819 10.9612 6.28624 11.4766ZM0.570791 12.4922C0.679276 12.1966 0.971638 11.9844 1.31434 11.9844L7.62316 11.9844C7.83367 11.9844 8.0316
2024-12-17 17:20:12 UTC	450	IN	Data Raw: 38 34 32 32 38 20 34 2e 30 30 34 32 39 20 31 2e 30 39 32 39 31 20 33 2e 38 36 35 37 36 20 31 2e 32 38 31 30 38 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 2e 31 30 32 39 34 31 33 20 32 2e 36 39 31 34 30 37 29 22 20 69 64 3d 22 53 68 61 70 65 22 20 66 69 6c 6c 3d 22 23 30 31 32 31 36 39 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2e 32 36 32 38 36 38 20 30 43 30 2e 31 31 37 37 31 32 20 30 20 30 20 30 2e 31 31 33 36 39 39 20 30 20 30 2e 32 35 33 39 30 36 4c 30 20 30 2e 38 33 37 38 39 31 43 30 20 30 2e 39 37 38 30 39 38 20 30 2e 31 31 37 37 31 32 20 31 2e 30 39 31 38 20 30 2e 32 36 32 38 36 38 20 31 2e 30 39 31 38 43 30 2e 34 30 38 30 32 33 20 31 2e 30 39 31 38 20 30 Data Ascii: 84228 4.00429 1.09291 3.86576 1.28108Z" transform="translate(2.1029413 2.691407)" id="Shape" fill="#012169" stroke="none" /> <path d="M0.262868 0C0.117712 0 0 0.113699 0 0.253906L0 0.837891C0 0.978098 0.117712 1.0918 0.262868 1.0918C0.408023 1.0918 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.16	49966	151.101.1.21	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:11 UTC	773	OUT	GET /sdk/js?currency=USD&intent=authorize&commit=false&client-id=AVUWLRxhkXFDE1GRw4frKDjLxh1QaLUc3ouf4PPnVIyYA3D8F8aXjBEIjEQV6lnDGJn3Raklvuxvxw2f&disable-funding=card%2Cbancontact%2Cblik%2Ceps%2Cideal%2Cmercadopago%2Cmybank%2Csepa%2Csofort&enable-funding=paylater HTTP/1.1 Host: www.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://get-luxsheets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:12 UTC	1276	IN	HTTP/1.1 200 OK Connection: close Content-Length: 84180 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server-Timing Cache-Control: public, max-age=3600, s-maxage=10800 Content-Encoding: gzip Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com; connect-src 'self' https://.paypal.com https://.paypalobjects.com https://.qualtrics.com; frame-src 'self' https://.paypal.com https://.paypalobjects.com https://.qualtrics.com; script-src 'nonce-ixW0SM7sc1GWltoScN8DBggmihaxg+LwxkgE76e2U4ehpEk9' 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'nonce-ixW0SM7sc1GWltoScN8DBggmihaxg+LwxkgE76e2U4ehpEk9' 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/javascript; charset=utf-8 Disable-Set-Cookie: true Etag: W/"148d4-Yl/2vFzZgM9Y/aF8GaFa7BhHoOE"
2024-12-17 17:20:12 UTC	1354	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6d 46 33 53 53 30 4e 57 6f 58 6f 33 48 61 6f 6a 67 6d 49 56 56 58 61 76 75 6b 52 6e 5a 48 35 39 37 75 2b 78 5a 4e 58 52 43 69 4b 57 7a 53 4b 7a 66 4e 50 48 77 39 4e 43 33 32 47 6d 62 6c 59 31 32 2b 48 58 70 6b 43 45 59 65 59 47 79 76 52 42 4e 6b 6b 4a 67 30 41 41 41 42 62 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 52 77 59 32 51 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4d 7a 55 7a 4e 44 4d 35 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 66 51 3d 3d 0d 0a 50 33 70 3a 20 74 72 75 65 0d 0a 50 61 79 70 61 6c 2d 44 65 62 75 67 Data Ascii: Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==P3p: truePaypal-Debug
2024-12-17 17:20:12 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 dc 7d 6b 7b e2 b8 92 f0 f7 fd 15 44 3b 87 b5 3b 82 40 cf f4 5c 44 7b b2 84 90 84 0e 10 06 48 d2 dd 34 cb e3 80 08 9e 36 32 23 cb b9 4c e0 bf bf 4f 49 be c8 c6 90 9e 99 f3 ee 87 3d 73 9e 34 b6 75 2d 95 4a a5 ba 1a f3 80 4d 85 e3 31 e3 65 32 39 6b f5 07 c3 49 bf d9 3d 6d f6 27 cd 8f bd 66 bf d5 69 76 87 83 c9 04 4f 26 67 d7 dd d3 56 f7 7c d2 6c b7 ce 5b 27 ad 76 6b f8 49 be ef 34 07 83 fa 39 7c 39 6f 5f 9d d4 db 83 c9 64 63 be fc 47 a1 50 28 1c bd 39 28 9c 79 bc e0 3a 53 ca 7c 5a 70 d8 dc e3 4b 1b ba 2b ac 5c 6a fb b4 e0 53 5a f0 02 b1 0a 44 f9 77 bf dc 6e 35 9a dd 41 b3 2c 9e 44 e1 cd d1 7f 1c c4 83 63 98 9a 2f 73 8f 1b 0f 36 2f 88 82 c3 0a d4 64 23 31 b6 e8 48 8c 37 c6 a3 c3 66 de 23 4e 8a 9b 2f 50 90 5a 2f 9b 5a f4 b2 20 0c Data Ascii: }k{D;;@\D{H462#LOI=s4u-JM1e29kI=m'fivO&gV\|l['vkI49\|9o_dcGP(9(y:S\|ZpK+\jSZDwn5A,Dc/s6/d#1H7f#N/PZ/Z
2024-12-17 17:20:12 UTC	1378	IN	Data Raw: 1a c2 ca 90 be 07 13 4b 6a 99 43 24 85 19 ad b0 71 f4 2f 63 54 29 fd 52 2f 9d 8d 5f de 6e cc a3 7b 6c e4 1d 41 05 75 18 94 e7 dc 5b 36 16 36 6f 78 33 6a a0 ca 13 3a a4 40 9e cc 43 04 84 0a 67 c7 2f e9 dc e1 43 79 ee b8 f4 10 1d a3 c3 e7 b0 a0 04 5f c3 63 82 32 81 1c 56 78 3c 7e 2c 6b af ac 26 79 2c 4b f8 0f 16 94 8a f2 d4 f7 87 f4 49 58 4d 7c 57 2c 1a d3 e3 78 c9 16 d4 9e 95 1d e6 53 2e 4e e8 dc e3 d4 78 c4 e9 8f 53 d8 0f b0 3f fc 51 65 6c 92 f4 47 7b 05 a8 ac b6 cc a3 69 6e a8 eb d3 02 20 d2 e1 61 c4 32 7a 1a 77 30 37 73 36 bc da e3 c2 f8 c5 c4 9e 25 8c aa 89 1d 6b 8b 1c f2 e3 d1 88 95 1d cc 25 25 24 bc 66 50 2b d9 9c bc ec 7a 53 db f5 d7 eb 97 8d 59 9e dc d3 18 0e db 87 af 03 04 58 16 f1 fd ed cf 08 1d 72 59 40 c1 24 55 26 3e 88 0a 9e e1 60 b6 6f 2e 3f Data Ascii: KjC$q/cT)R/_n{lAu[66ox3j:@Cg/Cy_c2Vx<~,k&y,KIXM\|W,xS.NxS?QelG{in a2zw07s6%k%%$fP+zSYXrY@$U&>`o.?
2024-12-17 17:20:12 UTC	1378	IN	Data Raw: 25 9d 08 25 1d 55 dc c1 e8 44 ee 79 3f 7f 76 7e d4 ae 83 51 63 41 a7 5f bd 40 e4 cf 30 55 d2 e6 b3 33 8f 2f f3 31 42 2f d9 b3 9f 81 2f 3e 73 a8 3b cb 1f c2 40 2f de a1 2c c8 5f ff 54 29 6f 66 bb f9 eb ae 17 6b 31 5f d8 ae 2b f9 f2 fc 6d a1 97 fe ad 0f 5a 8c fc 5d a1 97 bb 81 93 32 7f e7 ea c5 42 a8 0f e9 72 05 04 30 7f 55 53 90 f2 56 c1 ea 6a 45 59 93 73 8f e7 96 6f e9 e5 6d d7 f5 1e 5b 52 64 94 5b b8 a3 17 9e 7b 7c 4a f7 14 3e d1 0b 87 04 a2 ee e6 c3 f8 54 2f bb 9b e6 5c e7 34 99 5b f0 0f 3f 42 5e 3b 42 5e 5b 55 b4 31 1a 2e 38 a5 a7 de d2 76 d8 80 4e 03 9e 3f fc db b8 2f 1b a3 95 e7 8b be 77 e7 e5 e3 f1 ef 71 6f 41 4a 13 eb c6 56 2f a0 db b1 2c 66 46 d6 16 b5 c4 6c e1 65 83 9d c8 7e e5 2b 7d f6 41 ef 0a ca 53 6e 55 6a fc bd 13 69 32 f9 e1 a1 49 cb 0e 9b Data Ascii: %%UDy?v~QcA_@0U3/1B//>s;@/,_T)ofk1_+mZ]2Br0USVjEYsom[Rd[{\|J>T/\4[?B^;B^[U1.8vN?/wqoAJV/,fFle~+}ASnUji2I
2024-12-17 17:20:12 UTC	1378	IN	Data Raw: 84 31 3e e1 2e 18 50 d6 e1 cf c0 aa 24 ec e8 c4 90 57 98 83 41 b1 f8 a4 a6 c3 ac a7 da 93 a5 ec 6e cb 9c fa 9e fb 40 0d 73 93 60 4d cf 30 5f 06 87 96 b6 dd fb f0 a6 64 55 f1 c4 30 65 77 67 ba 65 49 5c 4c b3 14 07 94 94 36 fc 60 b5 1b 76 12 59 7d e2 f0 25 80 25 f3 92 c2 4d f7 c2 86 5b 45 fa 83 b4 e9 df 2e 9a 7a b3 90 f5 b8 9f 7a 09 3c 2b 80 0e 2c d5 f5 f7 be b0 a7 5f 33 03 0a 47 79 50 cd 8c 30 7a 91 1a 5d f4 32 ee 75 34 c6 4c b7 68 3f a8 62 07 fe d8 60 4f da 33 cc 1a 6c 44 96 b6 e8 b5 8f 69 bc 04 cc 24 86 07 26 a7 c2 62 e6 c6 c4 39 05 61 3c b2 9c 03 e5 b8 2c 67 66 51 03 56 0b cb 89 69 b3 80 13 06 de db d2 ed e5 58 9f b0 21 4c e2 14 8b 7a 61 6e 6e 36 a1 2f 43 42 42 13 d3 ff b0 a2 95 b1 4d 4e 41 71 bd 4e c1 d0 d4 5c 03 00 2f 80 32 99 62 c1 bd c7 02 a8 d4 a4 Data Ascii: 1>.P$WAn@s`M0_dU0ewgeI\L6`vY}%%M[E.zz<+,_3GyP0z]2u4Lh?b`O3lDi$&b9a<,gfQViX!Lzann6/CBBMNAqN\/2b
2024-12-17 17:20:12 UTC	1378	IN	Data Raw: ca 2b fe 57 eb a5 75 d6 af 77 9a 04 39 a1 35 40 ef aa 77 dd 23 68 05 e6 07 68 83 5b 16 6a d8 ae 5b 78 b4 fd 42 74 d4 15 ee 9e d5 ed 91 96 bf f0 2f 0c 25 c3 e8 ec 16 8e 2b f9 1b 80 1d bc 99 a0 b4 12 2e 4c 3d 37 11 35 9d 84 1b 73 67 5d 50 7b 2b f5 7f 1c 6f 41 7b 27 51 55 18 e8 e8 08 99 e0 13 2e af 15 11 24 a3 b5 ef a4 e4 ed a7 af 8f 18 d9 77 5e 20 08 c0 f1 24 55 f7 fa 95 d1 9a a1 f0 95 85 7e d8 10 19 42 fd 3a 48 0c 0a 0a d1 bb e4 f2 a1 49 e3 fe 78 a5 8b 62 f1 e0 5a 4a 1f f8 73 42 23 bc 15 65 94 e7 b6 77 11 c9 84 b7 45 8b 39 82 fe 5b 29 17 c9 ed ba 16 41 3f 5a 4d 79 80 d1 7d 62 10 7b 16 0a 61 0b 51 9d 70 47 0b ab 13 4a 57 0f c4 b7 35 10 61 8e e2 ff 11 58 d8 13 5d b0 aa de 1c 1d 21 f9 39 59 bf d8 23 0f 80 16 87 f2 28 16 2f 0c f3 f8 d6 e0 26 09 cb 1e 1d a1 4d Data Ascii: +Wuw95@w#hh[j[xBt/%+.L=75sg]P{+oA{'QU.$w^ $U~B:HIxbZJsB#ewE9[)A?ZMy}b{aQpGJW5aX]!9Y#(/&M
2024-12-17 17:20:12 UTC	1378	IN	Data Raw: 14 5e 1a dc aa 1e 55 cc d8 db ad e0 28 81 fd 6f c9 35 a0 e0 15 8b 29 79 bf 67 62 90 14 f3 f7 56 e5 38 f3 81 80 8c 57 60 4f d7 59 38 18 44 84 46 ae 54 6f bb e9 8d 46 38 a6 df 7c 35 84 ef f2 86 aa 0e 5c cb b2 5a 66 f6 cc ce 33 99 ca 11 48 fd cd d6 ff b2 75 d9 5f 6c 5f 16 f0 a9 3b d7 d8 d1 bf d5 86 3a ea fe 69 2b c2 5b fd b3 26 d0 64 12 30 d7 f9 4a dd e7 89 14 ce 4f 26 92 6c 94 27 93 29 f7 7c 7f a2 2e 89 93 40 38 ae 3f 51 10 9c 4c c1 15 6c 32 f9 06 2e 4e ba db 44 ce 7e 10 5f 15 42 b0 52 77 1e fd 8e a5 03 32 f6 ea 37 dd 77 fd 88 bf f9 53 db 1b 70 09 56 07 66 c8 20 64 8e 86 38 92 db 1f 01 e5 cf 03 69 78 ec f1 ba eb 1a 91 a4 73 2f 27 af f8 2b 9e e6 a7 b6 5e e8 37 14 9d 89 9f 45 23 fe 76 51 45 44 3f af 23 6b f6 e8 16 20 67 1f 33 64 0a 89 c2 29 9b 7a 93 99 6f d9 Data Ascii: ^U(o5)ygbV8W`OY8DFToF8\|5\Zf3Hu_l_;:i+[&d0JO&l')\|.@8?QLl2.ND~_BRw27wSpVf d8ixs/'+^7E#vQED?#k g3d)zo
2024-12-17 17:20:12 UTC	1378	IN	Data Raw: 30 94 86 96 de 9a 7a c2 8f bf 07 c0 18 5e 09 08 15 4c bf 0d 5a 30 99 7c 68 0d 23 27 1b 66 a1 4a f5 ed f7 3f bc fb f1 a7 9f 7f b1 ef a6 33 3a 47 21 c5 46 81 33 9b a0 43 f4 14 ff 0f 25 eb 56 4e e1 98 b6 cb 00 32 75 61 48 61 c2 dc f5 3c 6e a4 e4 0a 6f 22 41 89 c4 b4 43 34 41 87 0d 66 48 13 e1 53 5b 80 05 bb d7 1a 5c 45 12 f4 10 96 d5 2a ae fe 92 20 0d 1a 22 8c ca 28 85 a7 ff 63 97 fe ac 97 3e 57 4a bf 84 f8 54 16 5e db 7b a4 bc 61 4b 49 4e 3c f3 a7 6d 16 24 e3 37 9b 56 74 d7 fe 0d 65 95 b3 6b 54 56 3d 6d af 60 d7 0b 3f 15 e6 10 df 5a 5f ae 2e 4b db a3 15 32 82 ff c8 3e 3a 3a 31 f3 b7 7f ce ce a0 c7 68 49 97 9e f3 27 1d a1 c3 cc f1 bc 62 d6 8a 29 9b ca 05 c3 61 78 9f f5 3a a2 cd 07 1a 65 7f e5 ec 0d 27 d8 62 0f b6 eb cc 0a 61 03 11 7f bf 62 d1 c1 19 91 70 19 Data Ascii: 0z^LZ0\|h#'fJ?3:G!F3C%VN2uaHa<no"AC4AfHS[\E* "(c>WJT^{aKIN<m$7VtekTV=m`?Z_.K2>::1hI'b)ax:e'babp
2024-12-17 17:20:12 UTC	1378	IN	Data Raw: 72 d2 32 03 57 c7 65 e1 5d af 56 f1 4d 5c 37 3b bb 4c b7 1a ca 0e a4 44 45 ab 72 c8 22 39 c0 ce 5b fd c7 98 0f dc b2 de 63 4a 3d 8e 58 b0 bc a3 5c f3 b0 cc 17 0e cb 4a a0 7f 52 52 61 29 0e 96 15 cd d8 1d 37 37 79 73 22 f9 cc 66 52 de d1 91 3a 33 52 3d 85 35 cd da 9e bc d9 19 d9 2d de ce a3 bd cd 7c 03 a6 45 7a bd 44 6b 24 f1 8f 43 00 85 14 12 88 54 35 2c 4b 89 cd 46 03 f6 07 6d d5 b2 92 87 a4 d4 77 fa 51 91 81 18 e4 6d 33 63 a0 81 c0 37 b2 7d 53 33 df 65 fb 96 0d 69 f8 5b ac 54 94 bd 65 23 95 31 5d a6 be 43 47 b0 e5 c1 43 b7 4c 3a 0e a0 75 38 a8 0f c0 f0 3a 7d 1e 21 e9 cc 1a 69 bc 74 e6 9b 51 0d 25 33 b7 13 84 4c bc 8d a5 9a 69 b0 ee fa 8e 35 77 76 6e be 7c 04 63 5a 9e a2 ce a1 19 f6 b1 38 44 65 74 c8 09 e4 af c3 8e 15 9d 93 d8 8b d6 dc f8 0d ae 7c eb 75 Data Ascii: r2We]VM\7;LDEr"9[cJ=X\JRRa)77ys"fR:3R=5-\|EzDk$CT5,KFmwQm3c7}S3ei[Te#1]CGCL:u8:}!itQ%3Li5wvn\|cZ8Det\|u
2024-12-17 17:20:12 UTC	1378	IN	Data Raw: ef f1 10 f1 01 26 96 76 60 c7 2c 47 69 70 4c d3 8e 43 10 77 39 eb 14 db a4 b9 b2 df b8 f9 f0 de 1d 0e 26 a3 b0 d9 6f e7 12 b2 54 a0 11 91 ca 09 3d 08 7e ea 6e 96 61 32 34 53 4a 59 0f 7b b2 7b d9 b9 17 9f ef 32 a2 c3 dc 00 76 24 1e 90 a1 0d 25 b2 46 2b 38 be 8c 6c f3 2c f3 4f 46 6c 1e 3a e4 87 a8 30 f3 a8 b2 37 a0 4f 0e c4 bb 89 ac fe 61 cf 02 db f5 60 bb 39 d7 22 23 1c 8f 79 6c c8 a8 6d 12 74 f2 0a 10 57 72 4c 93 c0 c8 8e 8d ec 7b fc cf 07 19 2f a2 89 ab 15 c9 4a f5 f2 6f 6f db cc 5b 08 b0 f5 7a aa 81 8d 19 11 05 da 35 ef dc 6a e9 99 c1 a6 95 92 f7 70 48 21 2c af 28 1e ee bc f9 bc 66 6f a0 6e 3e db 4c bf 4d 35 6e ff 49 3f d6 2d 83 5a 14 8e 70 53 79 89 5d b1 6b 06 dc 28 8e c2 ac 83 90 e7 b8 4a 84 3c fd e5 f5 c9 49 be 78 c7 08 11 65 db 21 93 45 e2 00 98 02 Data Ascii: &v`,GipLCw9&oT=~na24SJY{{2v$%F+8l,OFl:07Oa`9"#ylmtWrL{/Joo[z5jpH!,(fon>LM5nI?-ZpSy]k(J<Ixe!E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.16	49969	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:11 UTC	1168	OUT	GET /age-verification/assets/age-verification.png HTTP/1.1 Host: ally.quandral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:12 UTC	905	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:12 GMT Content-Type: image/png Content-Length: 9839 Connection: close Last-Modified: Wed, 15 May 2024 19:37:59 GMT ETag: "66450f17-266f" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5346 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JLDt%2F8jXVvQYv6mm7%2BzQ%2FhyZ8L1mJ%2Btd8ixBEKfOhkI4KDGEIRUH3JZCvrTwzdgyDCktWs8EyUtN9YtzpFaADRuta6WPvMs490JL6V0zW7JDXDTYA1mr1wATOqZYEZl9DA%2Bbqg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38951c49ac0f80-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1540&min_rtt=1448&rtt_var=728&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1746&delivery_rate=1333333&cwnd=207&unsent_bytes=0&cid=12aab66457867fe2&ts=456&x=0"
2024-12-17 17:20:12 UTC	464	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 02 00 00 01 c6 30 4e 53 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR0NStEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 62 61 37 64 61 36 35 63 2d 31 39 36 63 2d 34 36 36 35 2d 39 31 36 63 2d 34 63 30 31 64 39 33 31 33 37 64 63 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 38 32 31 36 36 45 36 39 43 39 42 31 31 45 39 41 44 45 44 43 33 35 35 34 46 43 45 37 32 44 44 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 38 32 31 36 36 45 35 39 43 39 42 31 31 45 39 41 44 45 44 43 33 35 35 34 46 43 45 37 32 44 44 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 Data Ascii: #" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ba7da65c-196c-4665-916c-4c01d93137dc" xmpMM:DocumentID="xmp.did:982166E69C9B11E9ADEDC3554FCE72DD" xmpMM:InstanceID="xmp.iid:982166E59C9B11E9ADEDC3554FCE72DD" xmp:CreatorTool="Ad
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: f3 f5 09 64 e2 02 d8 23 84 3b 17 5a 39 33 32 13 69 2f be d1 4e 62 42 1a d8 89 84 75 f3 20 16 33 c2 9d 0e ef b2 fd f9 f3 67 e1 8d c4 ff 0c ff f0 74 8c f7 cd f3 f8 f6 5e 09 a8 9f b6 21 8d 36 b3 c4 00 9e 54 01 7a 00 e8 56 a0 d3 6b 67 2c 41 9d 5e b0 fb f3 fb b7 be d7 51 60 39 81 e6 62 05 0e eb 49 2d da 4c 4c ac c4 17 21 e4 87 34 c1 49 09 78 6f 18 a3 dc fb 0f 11 67 04 03 20 23 20 e9 18 0d 1b 4c c4 f7 aa 89 01 c4 74 72 a9 e9 68 0a a7 7f e8 da 34 85 03 62 66 da 88 0c 69 ac 49 88 9a 69 9a 85 99 71 d1 44 7d 38 f7 d3 a7 4f 94 07 5b 46 d5 3d da 86 f4 9f bf ff a3 72 2e 0c 78 83 89 89 61 08 82 11 e0 68 ac 53 88 70 71 f8 3c 24 04 40 b8 d3 3b 2c d0 c4 21 82 74 72 f4 9a d9 8e 6b 36 de 02 ba 0f 32 2b 0a 71 56 76 9c 0a 90 e1 18 bc 0d 28 18 97 7f 04 48 c2 07 9d 64 65 f8 80 Data Ascii: d#;Z932i/NbBu 3gt^!6TzVkg,A^Q`9bI-LL!4Ixog # Ltrh4bfiIiqD}8O[F=r.xahSpq<$@;,!trk62+qVv(Hde
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: af d9 a2 81 58 d1 f1 f1 3a ec a0 b5 ed c5 a2 20 08 a1 95 cd bb 0b 4c 63 13 dd 79 c5 c6 af 10 ee a0 7f c6 b8 ac 59 f6 59 df 0c 30 d3 34 65 51 e4 f9 f0 0d e7 cb 9f a6 41 b9 bc 68 91 84 fb fe 86 7d 82 10 54 1f cb 34 01 8f c6 c7 f7 f9 a6 f9 ce 87 67 13 c0 1c 0e 87 03 81 c0 27 7d 4f a7 81 78 ed c2 37 21 21 e9 e4 5b cb af 3a 96 b9 fe 38 5c a3 63 0b b2 eb d7 18 df 47 93 a1 0c 37 3e 00 dd 3d b8 23 43 c4 f2 b6 fb 54 d7 62 b8 3d ea 74 9c 36 40 a7 b4 5d 07 da fd d7 63 fd 81 e2 e9 e6 0d ce fa f4 40 43 db 7c 26 70 24 73 c4 b2 63 0a b9 f2 ae 23 73 53 04 4d f9 6f 8c 40 8e 42 08 35 de b6 bc b7 7d 38 a0 0c 4a 12 f8 f0 9d d5 85 45 65 d7 a5 4c 14 77 87 f4 52 27 84 58 ea 65 e7 0f e8 64 ee 89 14 50 93 e1 56 50 66 c6 23 a7 58 56 df ef 72 54 39 8f 4b 99 28 b4 11 70 23 79 da 8e Data Ascii: X: LcyYY04eQAh}T4g'}Ox7!![:8\cG7>=#CTb=t6@]c@C\|&p$sc#sSMo@B5}8JEeLwR'XedPVPf#XVrT9K(p#y
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 73 f3 64 14 b9 fe f6 2e 90 29 f3 8c ed 36 8b d5 fa b0 ff 84 bd e1 2d 8a 6b 6d 70 64 5d b2 be 28 92 e3 94 62 67 71 92 07 17 65 9b cd 6a 56 69 8a 58 a6 20 4f 34 70 52 6a 69 81 f6 d8 fa 51 9c 2c 84 93 c8 c5 63 cd 05 8d c7 70 60 ae 6c dc ea a6 e7 94 99 b4 11 a5 23 66 6d b2 59 4c 36 bb 85 cf 16 27 36 e8 80 f7 cb 36 8b aa fe fd 3e 63 8f 79 d1 5a a6 b0 0e fb 68 2b 8c 06 b8 6c 8a c4 9a 0b 96 18 83 cf 48 96 34 75 b7 d7 bb 50 aa cc 9d 06 a6 c3 98 b0 db 45 03 1d e8 f1 32 73 1a fd 27 ee f1 ae b9 90 94 ac 4d 7c 26 6f d4 76 51 8c 5a 2e 1e 65 85 9c 3b f0 db 10 4e fc 28 d5 6c 36 eb 74 ba f5 d7 d6 79 d1 f6 c3 5e 3b 42 e4 aa 5f ff fd f4 ae fe 3c ac 26 4c 48 3d b9 65 a4 44 2a f7 79 b0 c7 89 67 cb 87 b6 25 23 50 b6 f1 19 f6 2c a7 f3 37 7b 4d 19 0a 8c 32 a8 51 54 11 f8 7a 31 Data Ascii: sd.)6-kmpd](bgqejViX O4pRjiQ,cp`l#fmYL6'66>cyZh+lH4uPE2s'M\|&ovQZ.e;N(l6ty^;B_<&LH=eD*yg%#P,7{M2QTz1
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 66 05 68 05 36 c8 ca 60 c8 d0 0a ca f7 8b f9 7f 26 4c e8 1d 99 96 71 67 eb ce ff 6e df d1 0b 96 0e f5 99 bd c3 99 83 32 3b 04 94 db c7 85 c3 77 80 73 53 3f 4c a9 56 2b 98 69 0b 15 d8 99 60 5b aa 0c 97 3a 0d 1a 3a 06 94 a7 ce 3d 39 63 4a 57 d6 7f 30 ba 69 9f 9c 5e 34 37 3e a6 95 86 19 2c 00 3a 91 91 ef 6c b9 40 8d 75 7b e8 a0 98 25 ab af ee dd 34 d8 60 a8 fc ec 9b 7f b6 af 1d 0c 1b a1 e1 3b e3 3b 9e 3c c3 bf 1e 03 6a ce 87 63 ab c0 71 ec e8 38 38 4a ef f8 66 b0 3a 7a e8 0b 50 66 04 d9 59 5c b5 21 eb f0 a9 fb f5 d5 72 f6 1d 60 b7 cb d7 5c ca ca d6 b1 ef 00 3b f9 e2 e3 1e 70 38 38 8a 18 4c 44 79 95 f5 c3 b2 fe 3f 6f b9 d2 b5 a3 96 19 0e f4 7c c5 ea 0b 50 86 e5 98 11 ad 59 9d 25 0b 5f a9 d2 6a c1 d2 8b d0 e7 c6 0d af 56 18 2b 61 35 54 a5 80 61 01 1f a1 c2 8e Data Ascii: fh6`&Lqgn2;wsS?LV+i`[::=9cJW0i^47>,:l@u{%4`;;<jcq88Jf:zPfY\!r`\;p88LDy?o\|PY%_jV+a5Ta
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: e5 29 47 ca 76 7c 6d fc 57 50 b1 43 1f 2e 6a 33 a7 b1 ac c0 28 21 f7 e0 15 67 33 44 e5 7f 6c 9a c3 b2 f4 5c df 92 12 67 c8 33 dc 6e 97 cb 75 b8 66 53 e4 a8 4c c8 7d e6 c8 fe f7 97 fa 18 96 f1 91 ab 8c ca ec e5 88 58 d6 af 9e 4a 9f cd 1e 3f 57 cd 07 ed 1e 4b e4 a8 4c 50 eb ed 23 26 5f bf 5d 32 5e ba 30 49 ae 99 47 b0 d4 ca 13 7a 58 46 3c 65 a7 82 c4 69 48 39 ca db ce 46 94 ca 77 97 cd a9 ac b8 90 e3 8b e1 22 3f 48 f3 31 51 89 c7 eb bd 56 5e 75 b3 b2 c6 64 6e b6 3b 5d 6a 55 6c 5a 72 e2 e8 61 19 39 59 99 1c cb f6 bf d3 20 34 bc 36 bb aa 22 4d 65 42 52 86 d9 7f e3 93 2f f2 fb ee a2 4e e8 ba c6 e6 82 43 c7 45 f1 9e 4b 15 e0 74 45 ad 09 86 83 67 8a 79 8e 5b f2 44 ee 90 d4 94 fe d7 5a f4 39 ba 3b f4 f3 49 f3 b3 5e 2a 2c df 62 17 9b fa 4d 65 02 cb 79 bb be 33 15 Data Ascii: )Gv\|mWPC.j3(!g3Dl\g3nufSL}XJ?WKLP#&_]2^0IGzXF<eiH9Fw"?H1QV^udn;]jUlZra9Y 46"MeBR/NCEKtEgy[DZ9;I^*,bMey3
2024-12-17 17:20:12 UTC	1161	IN	Data Raw: ca 06 7b 39 82 c0 5e 8e c8 45 14 c5 07 3e c6 87 bd 1c 3d dd a5 18 a1 07 8c fa 7a 73 48 59 23 f6 72 84 4c 9d c9 8c 42 0f 18 fb 0a eb 8c 46 a3 d3 e9 7c 60 49 ec e5 78 20 b0 1b 4d 26 d3 b1 b3 16 6a b6 48 79 29 c7 8e 82 1a 9e 63 16 ce 95 6e e8 81 dc 03 7c 55 a9 54 1c c7 75 65 2d d1 3a c4 ef c7 a0 1e f2 40 97 cb e5 b2 5a ad 30 02 53 8e 9e 69 dd f5 5f 7a 22 b4 f2 9e 29 ec 68 88 1c f3 dc d2 8c 85 73 52 7a 14 7c 21 59 b4 db ed a8 b5 df ec 98 13 45 ad bb f6 98 dd 6e aa f6 86 52 85 46 10 4a 72 68 04 41 a1 11 14 1a 41 50 68 04 41 a1 11 04 85 46 10 14 1a 41 a1 11 04 85 46 10 14 1a 41 50 68 04 41 a1 11 14 1a 41 14 81 f2 ee 87 4e 49 14 26 8f 93 be 7c f1 fc 15 4b 63 b3 3b ec f5 8f 19 a1 1d 9e 21 fd 2e f2 c1 93 0d 9d ce 6a 69 73 17 95 f4 f8 8e f8 c2 02 e9 97 34 56 bf 71 Data Ascii: {9^E>=zsHY#rLBF\|`Ix M&jHy)cn\|UTue-:@Z0Si_z")hsRz\|!YEnRFJrhAAPhAFAFAPhAANI&\|Kc;!.jis4Vq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.16	49967	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:12 UTC	625	OUT	GET /age-verification/assets/font/lato-bold.woff HTTP/1.1 Host: ally.quandral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ally.quandral.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ally.quandral.com/age-verification/assets/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:12 UTC	915	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:12 GMT Content-Type: application/font-woff Content-Length: 309728 Connection: close Last-Modified: Wed, 15 May 2024 19:38:00 GMT ETag: "66450f18-4b9e0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4479 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9byA2XiqI7WqCZZQBApC4d9KYEtsTgQCXQsXoraFc65nOG%2BCps8c4fqaJM0pTcfyVqpV34SITzrwYiOipRLxbBPh4cnBHLlQwW%2F7zNm2wo22UylS8rw6sPyyAwbaDpIpS33wVQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38951d6dc7d13b-CDG alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=81628&min_rtt=81628&rtt_var=30610&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1203&delivery_rate=35771&cwnd=32&unsent_bytes=0&cid=795d33ab81244432&ts=532&x=0"
2024-12-17 17:20:12 UTC	454	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 04 b9 e0 00 11 00 00 00 09 2b 18 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 50 4f 53 00 00 01 80 00 01 cd 84 00 03 7e fe 30 52 32 e3 47 53 55 42 00 01 cf 04 00 00 0f 34 00 00 28 66 b0 53 7c 2d 4f 53 2f 32 00 01 de 38 00 00 00 60 00 00 00 60 6b 3f e8 19 63 6d 61 70 00 01 de 98 00 00 11 41 00 00 15 a4 d6 c1 a0 48 63 76 74 20 00 01 ef dc 00 00 00 6c 00 00 00 e6 3c fc b6 9f 66 70 67 6d 00 01 f0 48 00 00 05 a8 00 00 0b 97 e4 14 db f0 67 61 73 70 00 01 f5 f0 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 01 f5 f8 00 01 e5 fa 00 03 7e c4 b3 84 83 54 68 65 61 64 00 03 db f4 00 00 00 36 00 00 00 36 07 de 38 5b 68 68 65 61 00 03 dc 2c 00 00 00 21 00 00 00 24 0d 83 0c 6e 68 6d 74 78 00 03 dc 50 00 00 15 Data Ascii: wOFF+GPOS~0R2GSUB4(fS\|-OS/28``k?cmapAHcvt l<fpgmHgaspglyf~Thead668[hhea,!$nhmtxP
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: a6 bb 69 43 5a db ec f5 5e 3b 44 ad 1e cf 79 cf f9 de e7 7b 7e fe 2e 77 d2 66 af bd f6 5a ff fb 7f df 77 9a 16 a1 13 42 18 c5 13 22 5d 84 f4 1f 30 6c 8c b8 7b c6 a2 f9 73 45 ab 67 e6 cf 7a 56 74 9e fb d4 82 e7 45 7f 11 c2 6b 84 94 22 88 43 bd 3a cf 82 78 fc fb b3 60 11 5a e7 99 4e 84 09 fd b3 b3 e6 3f 2f 3a f8 ff df d5 ff ff 18 ff ff fb 3f f7 d4 fc 67 c5 10 ff ff c7 f9 ff 3f dd ff ff e7 39 59 9b cf 5f fd 3f 84 a3 76 8d 90 ff e8 71 a8 08 17 eb c4 56 91 28 8e 09 03 df 09 17 f7 89 07 45 5b d1 59 c4 88 01 62 84 18 27 a6 8a a7 b9 de 42 ff 19 42 ec b8 79 3c f0 b4 ff a8 7b 7a d0 cd 63 ee db fe 63 d0 1d 09 37 8f 13 52 6f 1e 17 1f be 79 5c 3f e1 e6 71 cb d1 9b c7 4f 1a dd 3c 7e 7f eb cd e3 e5 1f fd 57 d7 09 3d 84 88 20 b3 f3 0f cf 83 eb ef ff e3 f3 7e 0f fd f1 f9 Data Ascii: iCZ^;Dy{~.wfZwB"]0l{sEgzVtEk"C:x`ZN?/:?g?9Y_?vqV(E[Yb'BBy<{zcc7Roy\?qO<~W= ~
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 11 31 77 48 1f 51 96 20 ba 4b 87 98 05 1b e4 07 62 a3 7c 4b bc 25 bf d2 75 96 19 ba c1 72 9d 6e b4 cc d3 8d 95 5e dd 38 f9 96 ee 29 59 ac 9b 01 33 e5 eb ba 59 72 9b ae 4c da 75 6e a9 06 0d 22 ba 66 c9 f3 41 ab 44 37 22 2d 31 e8 88 54 42 96 cb 77 43 36 c9 6a a2 6d 31 d1 b6 98 68 4b 34 e6 c9 03 f5 37 48 6f fd 8d d2 2b 22 fe 72 06 4f 8b a5 ff 34 8b de e2 5e 5d 1f d0 66 33 4a dc aa 1b 2d 5a ea c6 8a fb ff bf cd 48 d4 0f f9 bb b8 ed 5f ce aa 31 33 c9 16 33 a5 93 d9 f8 c4 ab b2 94 91 6a 19 21 3f e8 4b 59 c5 28 0e ce c8 d7 ef 11 f7 e8 f3 64 b1 e1 1e f1 80 e1 5e e9 31 dc 27 da 18 9a 89 bb 0d f7 43 0b 71 ab e1 41 d1 d1 f0 88 e8 20 6e 0b dc 5f 25 a3 96 33 62 19 ab e9 d1 56 93 b9 79 19 f5 3a a3 9e 63 d4 32 56 2a 3b e4 ef b2 8a d1 af 33 da ad 9c dd 44 dc ca 59 a5 e2 Data Ascii: 1wHQ Kb\|K%urn^8)Y3YrLun"fAD7"-1TBwC6jm1hK47Ho+"rO4^]f3J-ZH_133j!?KY(d^1'CqA n_%3bVy:c2V*;3DY
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 1c 81 a3 f0 0d 1c 83 6f e1 3b f8 1e 7e 20 a3 1e 87 13 70 12 7e 84 53 70 1a ce c0 59 38 07 c9 70 1e 2e c0 45 b8 04 29 70 19 52 e1 0a 98 20 0d ae 42 ba b8 cd 90 01 59 c2 60 c8 86 1c c8 05 33 e4 81 05 ae 89 fa 86 02 b0 52 13 15 41 31 d8 c0 09 25 70 1d 4a c1 05 65 50 c1 b8 95 e0 81 1b e0 85 2a 59 40 65 5d 6c 74 4a b7 b1 04 ae 43 29 b8 a0 52 a6 1b 3d 70 03 bc 50 05 d5 bc fe 17 a8 81 5a f0 c9 82 fa 78 01 19 27 50 27 50 19 d5 fb 57 b5 02 b9 a9 bb cc 09 e4 4c 85 4a c7 43 85 63 e3 d5 1e 5e 5d c0 ab 2d 81 fa c3 83 af d9 6f c6 94 08 a5 7a 09 e6 ec fa e2 0e ce fe 96 33 3d 5a 16 a5 2e ce a2 2e ce a2 62 6c 4c 5d 64 a5 c6 53 a8 85 63 18 ed 3d 46 ca 65 94 54 6a a3 e1 fa 3c d1 90 da 68 0c d5 4c 23 ea a1 06 d4 43 bd 18 71 96 61 ba a8 a7 a9 95 da 38 83 6a 32 48 9e 66 f4 34 Data Ascii: o;~ p~SpY8p.E)pR BY`3RA1%pJeP*Y@e]ltJC)R=pPZx'P'PWLJCc^]-oz3=Z..blL]dSc=FeTj<hL#Cqa8j2Hf4
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: ab dc e0 2a 37 b8 ca 0d ae 72 83 ab dc e0 2a 37 b8 ca 0d 9c 36 94 cc 7c 19 8f be 83 bb 64 f7 eb bc 53 71 8d 91 2e 32 92 9b 39 6b ef 25 5d 23 af df 2a a6 e0 ee a7 78 e5 78 d1 4f be 21 fa cb 0d f4 ff 6f d0 d7 bf 41 2f bf 0e b7 bf 0b 5f 1d ca 28 5e bc f2 00 ab f3 aa ae ab fc 50 d7 4d 6e 61 75 5e c7 f9 93 75 d3 64 12 59 b4 9c 2c 5a 4e 45 11 a2 53 e4 fb ba 72 f9 0f 9d 5b 7e c8 55 87 73 d5 87 b9 ea dd 64 cb 0a ae fa 0d fd e8 3a fa d1 75 c4 eb 58 62 75 06 b1 3a 9c 58 9d 49 ac 76 20 56 fb 11 9b d3 a9 3e ee 20 36 a7 13 9b d3 89 cd 19 c4 e6 22 62 73 11 b1 b9 88 d8 5c 44 6c f6 23 36 e7 d2 67 75 a7 cf ea 49 2f 15 41 1f 15 4d 1f d5 99 3e aa 13 3d d3 bd f4 4c 1d e8 99 b2 e8 99 3a d0 33 75 a0 67 8a a6 1f 7a 83 7e e8 0d fa a1 37 e8 6d d6 11 ab 63 89 d5 0e c4 e8 04 fa 98 Data Ascii: 7r76\|dSq.29k%]#*xxO!oA/_(^PMnau^udY,ZNESr[~Usd:uXbu:XIv V> 6"bs\Dl#6guI/AM>=L:3ugz~7mc
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 53 55 ce a2 aa 9c 45 55 39 8b aa 72 16 55 65 9c d1 2c f7 91 c9 4b 8c 4e 69 35 96 c0 75 28 05 17 54 ca d1 5a 86 37 de e0 e8 85 2a a8 96 f1 54 a0 f1 54 a0 f1 54 a0 f1 54 a0 f1 f5 89 51 d1 30 50 a5 a5 93 1d f3 c9 8e 2e b2 5c 3e d9 29 87 2c 94 17 78 6f 27 0f 67 cf ae f3 de 8e 03 c5 e7 a3 f8 30 14 1e 8a c2 6f f1 bf 1f 72 38 d0 9f 2f 24 d7 de cd 68 ef 32 d2 d7 8c 34 9f 3c 97 41 9e d3 7e ae f7 8a 6e b0 08 d7 8d 12 8d a9 67 ef a2 9e 6d 42 7e fb 91 fc 96 4c 7e b3 92 df ac e4 b7 36 e4 b4 e3 e4 b4 ef c9 69 67 a8 46 8b 98 45 0a b3 58 c5 2c e2 b4 59 90 47 0a 99 c9 2f f8 df fb 78 de 32 fc 6e 39 de 36 14 3f 3b 88 9f 1d c4 cf 0e e2 67 07 f1 b3 e5 f8 d9 01 3c 6a 05 3e f4 2c fe b3 44 9f 47 6c 0a f9 0a f1 bd 8d 38 5e 42 fc 3e c7 dd 9c e7 6e a2 88 df 28 e2 b7 17 f1 db 83 f8 Data Ascii: SUEU9rUe,KNi5u(TZ7*TTTTQ0P.\>),xo'g0or8/$h24<A~ngmB~L~6igFEX,YG/x2n96?;g<j>,DGl8^B>n(
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 86 54 b8 02 95 62 79 bd 96 62 87 b6 7b fa ef 38 7e 0f 3f c0 75 d1 58 ef 82 32 50 a0 9c 1d 76 43 05 54 82 07 6e f0 75 2f 54 41 35 fc 02 35 50 0b 3e 50 71 ba 06 62 87 a1 21 34 82 c6 c0 dc 0c b7 c3 df c4 16 c3 5d 70 37 dc 03 f7 82 a6 9e 66 1c ef 87 e6 d0 02 22 e0 57 45 b5 e1 b1 a6 aa 76 1c 35 65 45 33 4e 47 e8 04 9d a1 0b 74 87 47 a1 07 f4 84 18 e8 05 bd a1 0f f4 05 14 69 48 c7 91 33 20 4b b4 31 64 43 0e e4 82 19 f2 c0 02 d7 a0 00 ac d4 fc 45 50 0c 36 70 42 09 5c 87 52 70 41 19 54 a2 1f 22 55 34 44 11 e1 a8 c1 80 12 0c ec 78 33 76 3a e2 0f f1 d2 51 34 60 77 1a fc 5f e3 66 b6 e8 49 be 8c 81 5e d0 1b fa 40 5f e8 07 fd 21 16 06 c0 40 a0 aa 10 83 61 08 0c 85 61 30 1c 46 c0 63 5a de 85 51 f0 38 8c 86 31 30 16 c6 c1 78 98 00 13 61 12 4c 86 27 60 31 ac 21 33 af 93 Data Ascii: Tbyb{8~?uX2PvCTnu/TA55P>Pqb!4]p7f"WEv5eE3NGtGiH3 K1dCEP6pB\RpAT"U4Dx3v:Q4`w_fI^@_!@aa0FcZQ810xaL'`1!3
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 9f 3f 06 46 fe e9 cc d5 81 4f 5b cc e2 cc f9 9c f9 0a 67 ae a8 73 66 0c 77 db 86 bb 0d 67 84 89 b8 f8 63 f2 db ff aa 4b 08 23 9b d9 a8 28 b4 1e e8 7a a0 4f f3 67 2e 3a 8e 6c 2a a9 df 3b a7 9f a8 37 6c d4 1a 85 75 67 e8 ef 4b fe 9c 9b 1a fe 96 9b c2 58 ed 0e ff f2 bb b7 92 4d bf 14 73 e8 9e ff db 59 57 d2 db 44 a3 f7 24 7a 9b 08 7a 9b 08 7a 9b 08 7a 9b 08 7a 9b 08 dc 24 82 d5 8c a0 b7 89 60 3f a2 e9 6d a2 e9 6d a2 e9 6d a2 e9 6d a2 e9 6d 22 e8 6d a2 e9 6d 22 e8 6d 22 e8 6d 22 e8 6d 22 e8 6d 22 88 a3 08 7a 9b 08 72 4a 04 bd 4d 04 bd 4d 04 bd 4d 04 fe 12 41 6f 13 c1 1a 47 d0 db 44 d0 db 44 90 65 22 88 b7 24 e2 2d 89 9d 4b e2 8e 12 51 59 22 2a 4b e4 be 13 51 59 22 f1 96 44 bc 25 11 6f 49 c4 5b 12 f1 96 44 6f 13 21 96 88 bb c4 52 48 80 d7 e0 75 58 06 cb 61 05 Data Ascii: ?FO[gsfwgcK#(zOg.:l;7lugKXMsYWD$zzzzz$`?mmmmm"mm"m"m"m"m"zrJMMMAoGDDe"$-KQY"KQY"D%oI[Do!RHuXa
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: b5 d7 e0 da ef e1 da af e3 da df e0 da 2d 71 ed 96 b8 76 4b 5c bb 25 ae dd 12 d7 6e 89 6b cf a1 86 8a 25 d2 16 32 7e 7b f2 6d 77 59 41 5e 8f 25 af c7 92 d7 63 99 45 0c b3 88 61 16 31 cc 22 86 57 c5 90 d7 63 c9 eb b1 e4 f5 58 f2 7a 2c 79 3d 96 fc 1c 4e 7e 1e 4d 7e ee 43 7e ee 42 7e 9e 44 7e 5e 40 7e 1e 42 7e 9e 45 7e 1e 42 7e 9e 45 7e ee 4c 7e 4e 20 37 af 20 37 af 25 37 af 24 37 8f 26 37 c7 91 9b e3 c8 cd 6b c8 cd 9d c8 c7 b1 e4 e3 58 f2 71 ac f6 1e 30 b9 58 ab c9 63 c9 c5 b1 e4 d6 58 72 6b 2c b9 f5 69 72 eb d3 ac 44 0c f9 b3 0b f9 33 96 bc 19 4b de 8c 25 6f c6 92 37 f5 7a 13 2b d2 00 cf 6e 08 8d a0 31 70 2e 39 2f 96 d5 8b 61 f5 62 58 bd 18 56 2f 26 b0 7a 31 81 f7 27 b4 df 30 8c 61 f5 62 58 bd 18 56 2f 86 d5 8b 61 f5 62 58 bd 18 56 2f c6 5f 81 46 33 4e 47 Data Ascii: -qvK\%nk%2~{mwYA^%cEa1"WcXz,y=N~M~C~B~D~^@~B~E~B~E~L~N 7 7%7$7&7kXq0XcXrk,irD3K%o7z+n1p.9/abXV/&z1'0abXV/abXV/_F3NG
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 51 e8 01 3d 21 06 7a 41 6f e8 03 7d a1 1f e0 d1 c6 58 18 00 03 61 10 0c 46 79 43 60 28 0c 83 e1 30 02 1e 83 91 30 0a 1e 97 36 a2 c7 46 f4 d8 88 1e 1b d1 63 23 7a 6c 44 8f 8d e8 b1 11 3d 36 a2 c7 46 f4 d8 88 1e 1b d1 63 23 7a 6c 44 8f 8d e8 b1 11 3d 36 a2 c7 46 f4 d8 88 1e 1b d1 63 23 7a 6c 44 8f 8d e8 b1 11 3d 3e e3 5c 78 01 5e 84 79 30 1f 5e 82 05 10 0f 0b e1 65 78 05 16 c1 ab b0 18 96 80 3f 7a 60 b9 ac 26 6a aa 89 9a 6a a2 a6 9a a8 a9 26 6a aa 89 9a 6a a2 a6 9a a8 a9 26 6a aa 89 9a 6a a2 a6 9a a8 a9 26 6a aa 89 9a 6a a2 a6 9a a8 a9 26 6a aa 89 9a 6a e3 7b b2 d6 f8 3e 6c 81 ad f0 01 7c 08 1f c1 36 d8 0e 3b 60 27 7c 0c bb 60 37 ec 81 bd b0 0f f6 c3 01 48 84 4f e0 53 f8 0c 3e 87 6f a4 85 88 f9 42 74 23 67 9a c9 97 69 e2 02 f9 f0 92 cc 22 5a ca 88 96 5a 22 Data Ascii: Q=!zAo}XaFyC`(006Fc#zlD=6Fc#zlD=6Fc#zlD=>\x^y0^ex?z`&jj&jj&jj&jj&jj{>l\|6;`'\|`7HOS>oBt#gi"ZZ"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.16	49968	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:12 UTC	628	OUT	GET /age-verification/assets/font/lato-regular.woff HTTP/1.1 Host: ally.quandral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ally.quandral.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ally.quandral.com/age-verification/assets/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:12 UTC	924	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:12 GMT Content-Type: application/font-woff Content-Length: 309192 Connection: close Last-Modified: Wed, 15 May 2024 19:38:02 GMT ETag: "66450f1a-4b7c8" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sP80I%2BgR3ImmEoR68%2FhjV%2Bugrt9k8ttO3Lgv5pupOa%2FoWdf61zJUF2V4m%2BhxZns%2BV4xgpysAfppNrB4eEFeLB8r4hoUcJpmNcEgDOzBnLBs%2BvbtVVSsrzdVIylNxPey0H14%2Fug%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38951d6e0a6614-AMS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=77282&min_rtt=77277&rtt_var=28989&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1206&delivery_rate=37765&cwnd=32&unsent_bytes=0&cid=7625a2e9010330ea&ts=729&x=0"
2024-12-17 17:20:12 UTC	445	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 04 b7 c8 00 11 00 00 00 09 45 e8 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 50 4f 53 00 00 01 80 00 01 c5 b4 00 03 7f 8e 51 26 fe 51 47 53 55 42 00 01 c7 34 00 00 0f 34 00 00 28 66 b0 53 7c 2d 4f 53 2f 32 00 01 d6 68 00 00 00 60 00 00 00 60 69 fa e8 0e 63 6d 61 70 00 01 d6 c8 00 00 11 41 00 00 15 a4 d6 c1 a0 48 63 76 74 20 00 01 e8 0c 00 00 00 6f 00 00 00 e6 3a 28 b3 90 66 70 67 6d 00 01 e8 7c 00 00 05 a8 00 00 0b 97 e4 14 db f0 67 61 73 70 00 01 ee 24 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 01 ee 2c 00 01 eb 0d 00 03 98 e0 5d 7a df 5e 68 65 61 64 00 03 d9 3c 00 00 00 36 00 00 00 36 08 01 37 55 68 68 65 61 00 03 d9 74 00 00 00 21 00 00 00 24 0d f1 0c ba 68 6d 74 78 00 03 d9 98 00 00 15 Data Ascii: wOFFEGPOSQ&QGSUB44(fS\|-OS/2h``icmapAHcvt o:(fpgm\|gasp$glyf,]z^head<667Uhheat!$hmtx
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 2d 2d 09 6d d3 01 28 4d 93 34 6d 92 0e 29 e9 4e ec fa cf 1d a2 d6 e9 f9 7c be f7 fb df 83 e3 64 27 6d f6 da 6b af 75 dd d7 7d df e9 24 74 42 08 83 78 54 5c 10 61 03 07 0d 1f 23 6e 7e e2 c5 d9 d3 45 db a7 66 3f f9 8c e8 36 7d f2 dc e7 c4 40 11 c6 6b 84 94 22 84 43 44 9d 67 21 3c fe ed 59 a8 08 af f3 4c 27 22 85 f2 cc 93 b3 9f 13 9d 03 ff 77 0f fc df 27 f0 ff c0 67 27 cf 7e 46 0c 0d fc 3f 2e f0 ff e3 81 ff 9f e3 64 6d 3e 7f f5 7f 18 47 ed 1a 61 ff e8 71 b8 a8 27 5e 17 1b c5 6e 71 40 e8 f9 4c 3d d1 4c b4 16 1d 44 37 d1 47 0c 12 0f 88 71 62 92 98 ca f5 e6 05 ce 10 62 cb b5 e3 c7 a3 02 47 dd d4 8d d7 8e f9 df 05 8e 21 4d d6 5c 3b 3e 74 e9 da 71 e1 1b d7 8e 6f 74 b8 76 dc b8 ea da f1 13 db b5 e3 a1 a2 6b c7 73 eb 03 57 d7 09 05 c2 44 48 c1 91 df 3d 0f ad d7 fd Data Ascii: --m(M4m)N\|d'mku}$tBxT\a#n~Ef?6}@k"CDg!<YL'"w'g'~F?.dm>Gaq'^nq@L=LD7GqbbG!M\;>tqotvksWDH=
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 5f ac 92 6f 8b d5 72 af ae 9b 34 eb 86 c8 d5 ba d1 32 4f 37 56 3a 75 e3 78 3c 99 e3 13 30 45 be a2 7b 52 7e a8 73 49 87 ae 42 fa 42 ee 93 85 21 4f ca f3 21 cb 44 1b 22 6b 67 c8 3e 59 1e f6 b2 5c 1b b6 56 ba 89 ae 85 44 d7 42 a2 6b a7 a1 40 7e 16 f5 a6 54 a3 56 69 d7 fd cb 19 4c 15 63 fe 34 8b be a2 89 ae 1f 68 b3 19 29 0c ba d1 a2 9e 6e 2c c7 ff bb 19 fd 1c f6 6f 61 f8 db 59 35 66 26 19 62 8a 2c 62 36 aa 58 20 8b 19 c9 cb 08 a6 90 2f a4 8b 51 8a 38 c3 a4 6c 17 f5 94 02 99 ab 6f 2a 6e d0 c7 4a 8f be 99 88 d1 37 17 d7 eb 6f 81 db 44 84 be b5 b8 55 df 49 f0 91 e0 fd d9 18 b5 9c 11 4b 59 4d 3b ab 59 ca dc 54 46 b5 33 ea 51 46 75 32 af ac b0 7f 4b 17 a3 db 19 4d c7 d9 e1 a2 3e 67 39 c5 64 71 23 f3 51 75 e3 84 a2 9b 22 a2 38 eb 0a 67 55 f0 ca 2b bc f2 46 ae db Data Ascii: _or42O7V:ux<0E{R~sIBB!O!D"kg>Y\VDBk@~TViLc4h)n,oaY5f&b,b6X /Q8lo*nJ7oDUIKYM;YTF3QFu2KM>g9dq#Qu"8gU+F
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: f4 c4 86 fe 6b d8 0b df 00 71 a2 27 4e f4 c4 89 9e 38 d1 13 27 fa ef e1 20 1c 82 c3 b2 58 ff 03 1c 81 1f e1 28 1c 83 e3 70 02 4e c1 69 38 03 29 f0 13 9c 85 54 48 83 74 38 07 19 90 09 46 30 c1 05 2a a4 2c c8 21 0f 9b 21 17 f2 20 1f 0a e0 22 5c 16 21 fa 42 28 22 cb 5b a0 18 ac 50 02 0e 28 85 32 70 82 0b 2a 65 91 be 0a 3c 50 0d 57 c1 2b 8b a8 ac ed 86 12 59 6d 70 40 29 94 81 13 aa 64 8e c1 03 d5 70 15 bc 50 23 8b 0d 2a f8 c0 0f 3f cb e2 28 bc 40 e8 7f a9 13 c8 84 f2 ef 6a 05 aa c5 9e 32 9b 9c 69 0b 54 8a e8 9d 0a 47 ab 2c 3c bc fa 22 af ce 0b d6 1f 1e 7c ed 32 31 65 e3 cc 9f 89 1f 3f d5 4b 08 55 62 4f b9 8f 33 bd 64 d1 14 ea e2 0b d4 c5 17 a8 18 af 0b d6 c2 1e 6a e1 38 46 5b c5 48 66 46 f9 96 4a ac 13 8e 53 49 6d d4 93 6a a6 1e f5 50 14 f5 50 7b ea a1 41 a8 Data Ascii: kq'N8' X(pNi8)THt8F0,!! "\!B("[P(2pe<PW+Ymp@)dpP#*?(@j2iTG,<"\|21e?KUbO3dj8F[HfFJSImjPP{A
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: c9 3a d9 5c ad 94 ab 5d e6 0a 35 64 99 6c ae 52 c3 55 6a b8 4a 0d 57 a9 e1 2a 35 5c a5 86 ab d4 a0 19 3f 99 f9 ac 30 30 ba 8f 91 55 2d e7 07 df a9 d0 de fb 38 13 78 af 4b 7b e7 ed b8 2c 20 af 87 89 89 c1 fc fd a8 18 20 5f 12 03 e5 52 fa ff 97 e8 eb 5f a2 97 5f 8c db d7 c3 57 fb 07 df ef da c4 ea cc d6 75 97 1b 74 3d e4 bb ac ce 2b 38 7f 8a ee 31 b9 9d 2c 7a 89 2c 7a 89 8a 42 d1 b9 e5 3b ba 72 b9 56 57 21 57 73 d5 c1 5c b5 25 57 6d 42 b6 d4 de e3 79 9f 7e 74 31 fd e8 62 e2 f5 1e 62 f5 3e 62 b5 07 b1 3a 84 58 6d 4d ac 76 23 36 07 13 9b 59 c4 e6 60 62 73 30 b1 79 1f b1 39 85 d8 9c 42 6c 4e 21 36 a7 10 9b dd 88 cd b1 f4 59 b7 d3 67 c5 d1 4b c5 d0 47 b5 a4 8f 6a 43 1f d5 9a 9e e9 06 7a a6 16 54 30 eb e8 99 5a d0 33 b5 a0 67 6a 49 3f f4 12 fd d0 4b f4 43 2f d1 Data Ascii: :\]5dlRUjJW*5\?00U-8xK{, _R__Wut=+81,z,zB;rVW!Ws\%WmBy~t1bb>b:XmMv#6Y`bs0y9BlN!6YgKGjCzT0Z3gjI?KC/
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 04 17 54 ca d1 5a c6 a6 aa 1c 4d 55 39 9a aa 72 34 55 e5 68 aa ca 04 43 be dc 4c 26 37 19 4a 64 be c1 01 a5 50 06 4e a8 92 c3 b5 0c 6f a8 e6 78 15 bc 50 23 13 a9 40 13 a9 40 13 a9 40 13 a9 40 13 a3 88 51 d1 30 58 a5 9d 27 3b 5e 26 3b da c9 72 85 64 a7 4c b2 90 2d f8 de 4e 2e ce 7e 21 58 b1 69 ef ed 5c 44 f1 85 c1 f7 76 7c 28 5c 17 78 3f e4 bb 60 7f be 88 5c 5b 9f d1 d6 32 d2 77 8c 94 48 9e 2b 22 cf 5d 61 c4 64 dd 10 f2 d7 48 71 9d 6e b4 68 a8 1b 2b ea 93 df 4e 92 df 7e 22 bf 95 91 df ca c8 6f cd c8 69 3f 90 d3 0e 91 d3 b4 6a 54 9b 85 91 59 ac 60 16 33 b4 77 98 c8 23 a5 cc 44 7b b7 7d 15 9e b7 18 bf 7b 49 d9 2e 0c f8 d9 16 fc 6c 0b 7e b6 05 3f db 82 9f bd 84 9f 6d c4 a3 5e c6 87 66 e1 3f 8b f0 97 32 e2 7c 3e f1 bd 96 38 5e 44 fc 0e e7 6e ce 13 bf 4d 89 df Data Ascii: TZMU9r4UhCL&7JdPNoxP#@@@@Q0X';^&;rdL-N.~!Xi\Dv\|(\x?`\[2wH+"]adHqnh+N~"oi?jTY`3w#D{}{I.l~?m^f?2\|>8^DnM
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 3c 15 d2 78 9c 0e e7 20 03 aa c4 f8 88 96 62 86 b6 7b ca 41 8e 87 e0 30 94 8a eb 14 27 b8 c0 0d e5 ec 70 05 90 ff 94 2a f0 40 35 1f bf 0a 5e a8 01 15 7c e0 87 9f a1 16 a7 6b 20 66 e8 1b 42 23 68 0c cc 4d 7f 03 fc 4b 3c ad 8f 86 9b a1 29 c4 82 a6 9e e6 1c 6f 81 5b e1 36 68 05 bf 28 aa 3d 8f 35 55 75 e4 a8 29 eb 4e c6 e9 02 5d a1 1b dc 05 3d e1 6e e8 05 bd a1 0f dc 03 7d a1 1f f4 07 14 a9 bf 80 23 67 41 8e 68 a6 37 43 2e e4 41 3e 14 c0 45 b8 2c 9a eb 0b a1 48 b4 d2 5b a0 18 ac 50 02 0e 28 85 32 70 82 0b aa 50 0e 91 2a ea a1 08 05 35 44 a0 84 08 76 fc 46 76 3a fa 77 f1 d2 45 44 b1 3b 51 ff c7 b8 99 26 7a 53 5d f4 81 7b a0 2f f4 83 fe 30 00 06 c2 bd 30 08 06 03 55 85 18 02 43 61 18 0c 87 fb e1 01 78 10 46 c0 48 18 05 a3 61 0c 8c 85 71 f0 10 3c 0c 8f c0 78 98 Data Ascii: <x b{A0'p@5^\|k fB#hMK<)o[6h(=5Uu)N]=n}#gAh7C.A>E,H[P(2pP5DvFv:wED;Q&zS]{/00UCaxFHaq<x
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 53 38 b3 43 20 06 ba ff e1 cc 89 9c d9 86 33 47 72 e6 83 9c 39 9d 33 9f a9 73 66 1c 77 db 8c bb d5 33 42 1f aa a0 07 e5 0f ff 55 97 10 49 36 2b a1 a2 b0 06 fb b4 92 60 e6 f2 d3 71 9c 25 2b fc d6 39 9d 09 7c 4f c8 14 79 a5 ee 0c 79 d5 e9 3f e5 a6 7a bf e6 a6 48 56 bb c5 df 7e b6 3e d9 f4 a0 f6 bd 1c ff f5 ac ab e8 6d 5a b0 d6 49 f4 36 d1 dc 77 34 bd 4d 34 8a 8f a6 b7 89 a6 b7 89 a6 b7 89 e6 0a d1 44 45 0b 9c b0 05 4a 68 41 6f d3 82 de a6 05 bd 4d 34 bd 4d 0b 7a 9b 68 7a 9b 68 f4 11 4d 6f 13 4d 6f 13 4d 6f 13 4d 6f 13 4d 6f 13 4d 6f 13 4d 6f 13 4d 6f 13 4d 6f 13 4d 6f 13 4d 6f 13 4d 6f 13 4d 6f 13 4d 6f 13 4d bc 25 11 6f 49 ec 5c 12 2a 9b 87 ca e6 a1 b2 79 dc f7 3c 54 36 8f 78 4b 22 de 92 88 b7 24 e2 2d 89 78 4b e2 5f b4 58 c8 5d 2c 82 c5 f0 12 24 c3 12 78 Data Ascii: S8C 3Gr93sfw3BUI6+`q%+9\|Oyy?zHV~>mZI6w4M4DEJhAoM4MzhzhMoMoMoMoMoMoMoMoMoMoMoMoMoMoM%oI\*y<T6xK"$-xK_X],$x
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 02 fa ff 02 6a b7 c7 89 e0 27 e0 5a dd 16 fd 87 ba 4d ab 13 a2 71 ed 68 5c 3b 1a d7 8e c6 b5 df 0a d6 6d f7 e2 da 93 70 ed 69 b8 f6 23 b8 f6 7e 5c 3b 1a d7 8e c6 b5 a3 71 ed 68 5c 3b 1a d7 8e c6 b5 87 50 43 c5 13 69 63 19 3f 9e 7f 3d e5 55 f2 7a 3c 79 3d 9e bc 1e cf 2c e2 98 45 1c b3 88 63 16 71 bc 2a 8e bc 1e 4f 5e 8f 27 af c7 93 d7 e3 c9 eb f1 e4 67 85 fc dc 83 fc 7c 07 f9 b9 35 f9 b9 0f f9 79 04 f9 f9 4e f2 f3 20 f2 f3 9d e4 e7 41 e4 e7 56 e4 e7 87 c8 cd 13 c8 cd 09 e4 e6 47 c9 cd 3d c8 cd 43 c8 cd 43 c8 cd 53 c9 cd ad c8 c7 f1 e4 e3 78 f2 71 bc f6 1e 30 b9 58 ab c9 e3 c9 c5 f1 e4 d6 78 72 6b 3c b9 75 30 b9 75 30 2b 11 47 fe 6c 4d fe 8c 27 6f c6 93 37 e3 c9 9b f1 e4 cd 70 25 93 15 69 80 67 37 84 46 d0 18 38 97 9c 17 cf ea c5 b1 7a 71 ac 5e 1c ab 17 17 Data Ascii: j'ZMqh\;mpi#~\;qh\;PCic?=Uz<y=,Ecq*O^'g\|5yN AVG=CCSxq0Xxrk<u0u0+GlM'o7p%ig7F8zq^
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: a6 28 2f 73 5c ce f1 0d 78 13 56 f1 7c 35 9c a4 e6 e8 21 fd fa 47 39 4e 84 19 30 13 66 c1 6c 98 03 73 e1 79 98 27 4b 0d 1d a5 d3 10 0f 9d a0 33 dc 09 5d 80 8c 63 e8 06 77 41 77 e8 01 3d e1 6e e8 05 bd a1 0f dc 03 7d a1 1f f4 87 01 30 10 ee 85 41 30 18 ee 83 21 52 35 0c 85 61 30 1c ee 87 07 e0 41 18 01 23 61 94 b4 12 3d 56 a2 c7 4a f4 58 89 1e 2b d1 63 25 7a ac 44 8f 95 e8 b1 12 3d 56 a2 c7 4a f4 58 89 1e 2b d1 63 25 7a ac 44 8f 95 e8 b1 12 3d 56 a2 c7 4a f4 58 89 1e 2b d1 63 25 7a ac 44 8f 95 e8 a9 21 7a 6a 88 9e 1a c3 4c 98 05 b3 61 0e cc 85 e7 61 1e bc 00 f3 e1 45 58 00 49 b0 10 16 c1 62 78 99 3e e8 15 78 15 96 c2 32 a0 57 22 6a 2a 88 9a 0a a2 a6 82 a8 a9 20 6a 2a 88 9a 0a a2 a6 82 a8 a9 20 6a 2a 88 9a 0a a2 a6 82 a8 a9 20 6a 2a 0c eb a4 d7 b0 1e 36 c0 Data Ascii: (/s\xV\|5!G9N0flsy'K3]cwAw=n}0A0!R5a0A#a=VJX+c%zD=VJX+c%zD=VJX+c%zD!zjLaaEXIbx>x2W"j* j* j* j*6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.16	49970	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:12 UTC	355	OUT	GET /push-script.js HTTP/1.1 Host: ally.quandral.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:12 UTC	915	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:12 GMT Content-Type: application/javascript Content-Length: 1144 Connection: close Last-Modified: Thu, 25 Jul 2024 18:54:01 GMT ETag: "66a29f49-478" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5346 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=icE8KUAZMkUc%2F0ixxhSM8RvV6vJ6G9sKfAd%2BUXLNTNfRyt3pvb9esBdcBYHNXxQUpqL13X06jp5PyKgwB%2Fu5R9yZT9R2DlMvzcEHOLy5cDhnY274D92adh%2BHGQriSKLJYYgiDw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38951d8f5befa1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=8980&min_rtt=1863&rtt_var=5096&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=933&delivery_rate=1567364&cwnd=165&unsent_bytes=0&cid=580f9a01dcc9eec7&ts=451&x=0"
2024-12-17 17:20:12 UTC	454	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 20 77 69 6e 64 6f 77 29 20 7b 0d 0a 20 20 76 61 72 20 73 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 20 73 63 72 69 70 74 2e 74 79 70 65 20 3d 20 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 0d 0a 20 20 73 63 72 69 70 74 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 74 72 6b 2d 73 79 6e 6f 76 65 74 72 61 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 70 75 73 68 2f 73 63 72 69 70 74 2f 35 37 64 6b 72 32 36 65 77 38 3f 75 72 6c 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 28 73 65 6c 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 3b 0d 0a 20 20 0d 0a 20 20 2f 2f 20 44 65 66 69 6e 65 20 61 20 63 61 6c Data Ascii: (function(document, window) { var script = document.createElement("script"); script.type = "text/javascript"; script.src = "https://trk-synovetra.com/scripts/push/script/57dkr26ew8?url=" + encodeURI(self.location.hostname); // Define a cal
2024-12-17 17:20:12 UTC	690	IN	Data Raw: 6e 75 6d 62 65 72 0d 0a 20 20 20 20 76 61 72 20 72 61 6e 64 6f 6d 4e 75 6d 62 65 72 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 31 30 30 29 3b 20 2f 2f 20 47 65 6e 65 72 61 74 65 73 20 61 20 72 61 6e 64 6f 6d 20 6e 75 6d 62 65 72 20 62 65 74 77 65 65 6e 20 30 20 61 6e 64 20 39 39 0d 0a 20 20 20 20 0d 0a 20 20 20 20 2f 2f 20 44 65 74 65 72 6d 69 6e 65 20 75 74 6d 5f 73 6f 75 72 63 65 20 62 61 73 65 64 20 6f 6e 20 77 68 65 74 68 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 69 73 20 65 76 65 6e 20 6f 72 20 6f 64 64 0d 0a 20 20 20 20 76 61 72 20 75 74 6d 53 6f 75 72 63 65 20 3d 20 28 72 61 6e 64 6f 6d 4e 75 6d 62 65 72 20 25 20 32 20 3d 3d 3d 20 30 29 20 3f 20 27 73 65 67 31 27 20 3a 20 27 73 65 67 32 27 3b 0d 0a 20 Data Ascii: number var randomNumber = Math.floor(Math.random() * 100); // Generates a random number between 0 and 99 // Determine utm_source based on whether the number is even or odd var utmSource = (randomNumber % 2 === 0) ? 'seg1' : 'seg2';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.16	49971	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:12 UTC	371	OUT	GET /permissions-redirect-script.js HTTP/1.1 Host: ally.quandral.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:12 UTC	913	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:12 GMT Content-Type: application/javascript Content-Length: 3573 Connection: close Last-Modified: Thu, 25 Jul 2024 20:25:18 GMT ETag: "66a2b4ae-df5" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5346 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QpcUfBjA2vDZEJbjHpzQy9D6bRbnHmtdImlRx8NCKoFcWBmbYYy3UYgl4k8X1LRZfYCZ4I9%2Bv5VjhLKPS%2F8yMQmXRC36NmW52W1Qlz%2BHxHtWxsdqpyEFZ28JsxkfSKUIkFcwTg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38951d8b68427f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=5231&min_rtt=1701&rtt_var=2904&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=949&delivery_rate=1716637&cwnd=238&unsent_bytes=0&cid=3a26e35c5d1402c1&ts=464&x=0"
2024-12-17 17:20:12 UTC	456	IN	Data Raw: 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 67 65 74 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 27 73 75 62 33 27 20 66 72 6f 6d 20 72 65 64 69 72 65 63 74 55 72 6c 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 76 61 72 69 61 62 6c 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 0d 0a 20 20 20 20 76 61 72 20 76 61 72 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 26 22 29 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 76 61 72 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 61 69 72 20 3d 20 76 61 72 73 5b 69 5d Data Ascii: // Function to get the value of 'sub3' from redirectUrlfunction getQueryVariable(variable) { var query = window.location.search.substring(1); var vars = query.split("&"); for (var i = 0; i < vars.length; i++) { var pair = vars[i]
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 20 20 20 76 61 72 20 72 65 64 69 72 65 63 74 55 72 6c 20 3d 20 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 73 75 62 33 22 29 3b 0d 0a 20 20 20 20 69 66 20 28 72 65 64 69 72 65 63 74 55 72 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 44 65 63 6f 64 65 20 74 68 65 20 55 52 4c 20 69 66 20 69 74 27 73 20 65 6e 63 6f 64 65 64 0d 0a 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 55 72 6c 20 3d 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 65 64 69 72 65 63 74 55 72 6c 29 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 72 65 64 69 72 65 63 74 55 72 6c 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 72 65 64 69 72 65 63 74 20 61 66 74 Data Ascii: var redirectUrl = getQueryVariable("sub3"); if (redirectUrl) { // Decode the URL if it's encoded redirectUrl = decodeURIComponent(redirectUrl); window.location.href = redirectUrl; }}// Function to redirect aft
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 20 21 3d 3d 20 27 64 65 66 61 75 6c 74 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 61 6e 63 65 6c 20 74 68 65 20 73 63 68 65 64 75 6c 65 64 20 72 65 64 69 72 65 63 74 69 6f 6e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 72 65 64 69 72 65 63 74 54 69 6d 65 6f 75 74 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 52 65 64 69 72 65 63 74 20 61 66 74 65 72 20 61 20 64 65 6c 61 79 20 6f 66 20 31 20 73 65 63 6f 6e 64 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 41 66 74 65 72 44 65 6c 61 79 28 35 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 2c 20 31 30 30 30 29 3b 0d 0a 7d 0d 0a 0d 0a 2f 2f 20 49 6e 69 74 69 61 74 65 20 74 68 65 20 70 72 6f 63 Data Ascii: !== 'default') { // Cancel the scheduled redirection clearTimeout(redirectTimeout); // Redirect after a delay of 1 second redirectAfterDelay(5000); } }, 1000);}// Initiate the proc
2024-12-17 17:20:12 UTC	379	IN	Data Raw: 63 6b 27 3b 0d 0a 20 20 20 20 74 65 78 74 2e 73 74 79 6c 65 2e 66 6f 6e 74 53 69 7a 65 20 3d 20 27 31 38 70 78 27 3b 0d 0a 20 20 20 20 74 65 78 74 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 20 3d 20 27 30 27 3b 0d 0a 0d 0a 20 20 20 20 2f 2f 20 41 70 70 65 6e 64 20 74 68 65 20 74 65 78 74 20 74 6f 20 74 68 65 20 62 6f 78 0d 0a 20 20 20 20 62 6f 78 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 65 78 74 29 3b 0d 0a 20 20 20 20 2f 2f 20 41 70 70 65 6e 64 20 74 68 65 20 62 6f 78 20 74 6f 20 74 68 65 20 6f 76 65 72 6c 61 79 0d 0a 20 20 20 20 6f 76 65 72 6c 61 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 6f 78 29 3b 0d 0a 20 20 20 20 2f 2f 20 41 70 70 65 6e 64 20 74 68 65 20 6f 76 65 72 6c 61 79 20 74 6f 20 74 68 65 20 62 6f 64 79 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e Data Ascii: ck'; text.style.fontSize = '18px'; text.style.margin = '0'; // Append the text to the box box.appendChild(text); // Append the box to the overlay overlay.appendChild(box); // Append the overlay to the body documen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.16	49972	172.67.167.163	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:12 UTC	570	OUT	GET /scripts/push/script/57dkr26ew8?url=ally.quandral.com HTTP/1.1 Host: trk-synovetra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ally.quandral.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:12 UTC	1346	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:12 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: 0 Cache-Control: max-age=14400, must-revalidate X-XSS-Protection: 1; mode=block Pragma: no-cache X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 5346 Last-Modified: Tue, 17 Dec 2024 15:51:06 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5aa6GaAQDQ2cPrAj%2FtcazMKB4vnqDVPau7PYLTqcSTmKnvEOShuLmnnwyBWOGGsWg6yKKBnYQc%2FH2vnuUYwngnwg7oMxjLNeL6T0PAU4OJqwbkF1dO1qDdYNfZ7Ie4IRjMQ4%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-17 17:20:12 UTC	276	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 33 38 39 35 31 64 62 61 62 38 38 63 38 34 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 39 39 31 26 6d 69 6e 5f 72 74 74 3d 31 39 38 36 26 72 74 74 5f 76 61 72 3d 37 35 35 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 35 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 34 38 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 34 33 38 34 32 33 26 63 77 6e 64 3d 31 37 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 34 62 37 31 65 32 31 39 33 65 65 Data Ascii: CF-RAY: 8f38951dbab88c84-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1991&min_rtt=1986&rtt_var=755&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1148&delivery_rate=1438423&cwnd=175&unsent_bytes=0&cid=4b71e2193ee
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 31 66 63 63 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 73 6d 50 75 73 68 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 6c 69 63 4b 65 79 3d 22 42 50 58 62 6f 59 45 4c 70 35 53 7a 63 50 41 58 32 38 52 48 68 32 79 43 64 4c 65 78 50 6e 32 30 31 63 6c 58 49 31 5a 54 56 6a 42 7a 41 41 36 78 70 78 32 75 67 44 6b 37 72 56 69 74 76 35 5f 42 2d 6f 4e 47 71 70 6d 58 43 70 2d 45 70 59 72 48 35 34 52 71 64 6a 49 3d 22 2c 73 6d 50 75 73 68 53 69 74 65 49 64 3d 22 6f 37 67 39 31 7a 6b 6e 64 33 22 2c 73 6d 43 6c 69 65 6e 74 49 64 3d 22 35 37 64 6b 72 32 36 65 77 38 22 2c 73 65 72 76 69 63 65 57 6f 72 6b 65 72 3d 22 2f 73 65 72 76 69 63 65 2d 77 6f 72 6b 65 72 2e 6a 73 22 3b 6c 65 74 20 73 6d 50 75 73 68 44 6f 6d 61 69 6e 3d 22 70 75 73 Data Ascii: 1fcc'use strict';const smPushApplicationServerPublicKey="BPXboYELp5SzcPAX28RHh2yCdLexPn201clXI1ZTVjBzAA6xpx2ugDk7rVitv5_B-oNGqpmXCp-EpYrH54RqdjI=",smPushSiteId="o7g91zknd3",smClientId="57dkr26ew8",serviceWorker="/service-worker.js";let smPushDomain="pus
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 2e 73 6f 75 72 63 65 4f 6e 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 6f 6e 65 2c 62 2e 73 6f 75 72 63 65 5f 6f 6e 65 29 2c 61 2e 73 6f 75 72 63 65 54 77 6f 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 74 77 6f 2c 62 2e 73 6f 75 72 63 65 5f 74 77 6f 29 2c 61 2e 73 6f 75 72 63 65 54 68 72 65 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 2c 62 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 29 2c 61 2e 73 6f 75 72 63 65 46 6f 75 72 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 66 6f 75 72 2c 62 2e 73 6f 75 72 63 65 5f 66 6f 75 72 29 2c 61 2e 73 6f 75 72 63 65 46 69 76 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 Data Ascii: .sourceOne=setIfNull(utmObj.source_one,b.source_one),a.sourceTwo=setIfNull(utmObj.source_two,b.source_two),a.sourceThree=setIfNull(utmObj.source_three,b.source_three),a.sourceFour=setIfNull(utmObj.source_four,b.source_four),a.sourceFive=setIfNull(utmObj.s
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 2c 22 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 2c 76 65 72 73 69 6f 6e 29 2c 61 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 73 75 62 73 63 72 69 62 65 28 7b 75 73 65 72 56 69 73 69 62 6c 65 4f 6e 6c 79 3a 21 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 3a 62 7d 29 7d 22 64 65 6e 69 65 64 22 3d 3d 3d 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 70 65 72 6d 69 73 73 69 6f 6e 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 64 65 6e 69 65 64 5f 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 64 65 6e 69 65 64 5f 69 6d 70 72 65 73 73 69 6f 6e 22 2c 76 65 72 73 69 6f 6e 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 Data Ascii: subscribe_prompt","subscribe_prompt",version),a.pushManager.subscribe({userVisibleOnly:!0,applicationServerKey:b})}"denied"===Notification.permission&&logPushEvent("denied_impression","denied_impression",version)}).catch(function(a){console.error("Service
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 2e 6c 6f 67 28 22 74 61 62 6f 6f 6c 61 55 72 6c 20 66 65 74 63 68 20 65 72 72 6f 72 22 2c 61 29 2c 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 74 61 62 6f 6f 6c 61 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 20 57 6f 72 6b 65 72 20 45 72 72 6f 72 22 2c 61 29 2c 70 75 73 68 4c 6f 67 67 69 6e 67 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 73 75 62 73 63 72 69 62 69 6e 67 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 75 73 68 5f 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 69 73 65 28 29 7b 72 65 74 75 72 6e 20 6e 61 76 69 67 61 74 Data Ascii: .log("taboolaUrl fetch error",a),logPushEvent("taboola_request_error",a,version)})})}).catch(function(a){console.error("Service Worker Error",a),pushLogging&&logPushEvent("error_subscribing",a,version)})}})}function push_subscribe_promise(){return navigat
2024-12-17 17:20:12 UTC	1369	IN	Data Raw: 68 4c 6f 67 67 69 6e 67 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 73 75 62 73 63 72 69 62 69 6e 67 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 49 66 4e 75 6c 6c 28 63 2c 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 6e 75 6c 6c 3d 3d 3d 63 7c 7c 22 22 3d 3d 3d 63 3f 61 3a 63 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 61 2c 62 2c 63 29 7b 6c 65 74 20 64 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 3b 22 7b 7d 22 21 3d 3d 64 26 26 28 62 3d 64 29 3b 6c 65 74 20 65 3d 7b 7d 3b 70 75 6c 6c 55 72 6c 50 61 72 61 6d 73 28 65 29 2c 65 2e 6d 65 73 73 61 67 65 3d 62 2c 65 2e 76 65 72 73 69 6f 6e 3d 63 2c 65 2e 65 76 65 6e 74 3d 22 70 5f 22 2b 61 3b 66 Data Ascii: hLogging&&logPushEvent("error_subscribing",a,version)})}function setIfNull(c,a){return void 0===c\|\|null===c\|\|""===c?a:c}function logPushEvent(a,b,c){let d=JSON.stringify(b);"{}"!==d&&(b=d);let e={};pullUrlParams(e),e.message=b,e.version=c,e.event="p_"+a;f
2024-12-17 17:20:12 UTC	1303	IN	Data Raw: 76 69 63 65 57 6f 72 6b 65 72 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 22 50 75 73 68 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 28 73 65 73 73 69 6f 6e 49 64 3d 61 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 55 74 6d 28 61 29 7b 22 73 65 72 76 69 63 65 57 6f 72 6b 65 72 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 22 50 75 73 68 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 6e 75 6c 6c 21 3d 61 26 26 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 75 74 6d 4f 62 6a 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 53 65 73 73 69 6f 6e 49 64 28 29 7b 72 65 74 75 72 6e 20 73 65 73 73 69 6f 6e 49 64 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 72 6c 56 61 72 73 28 29 7b 6c 65 74 20 61 3d 7b 7d 2c 62 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 Data Ascii: viceWorker"in navigator&&"PushManager"in window&&(sessionId=a)}function setUtm(a){"serviceWorker"in navigator&&"PushManager"in window&&null!=a&&Object.assign(utmObj,a)}function getSessionId(){return sessionId}function getUrlVars(){let a={},b=window.locati
2024-12-17 17:20:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.16	49976	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:12 UTC	880	OUT	GET /assets/shared/checkout/v15/media/f92S2pCkhDV5.gif HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:13 UTC	421	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 20a3df5d0a679004e514bcee9408804f server: Google Frontend via: 1.1 google date: Tue, 17 Dec 2024 17:20:13 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"557e45-193cfe30d00" Content-Type: image/gif Content-Length: 5602885 Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:13 UTC	969	IN	Data Raw: 47 49 46 38 39 61 90 01 90 01 f7 04 00 c6 c5 c5 ce ce cd d6 d7 d7 31 29 28 a5 a5 a5 ad ad ad b5 b5 b5 9c 9c 9c 94 94 94 8c 8c 8c bd bd bd a5 a5 9c 9c 9c 94 b6 b5 ad bc be b5 8c 8c 84 94 94 8b 84 84 7b 73 73 6b ad b2 b5 9c a5 9c 7b 7c 73 84 8c 85 a5 ad ad 6b 6b 6b 52 4e 4a cd d4 d6 c5 ce cc ac ad a5 b5 bd bd 84 84 84 bd c2 c6 9c a5 a5 94 9c 9c 42 3d 3a 73 73 73 42 42 42 7b 7b 7b 4d 42 42 4a 4a 4a a5 9c 9c ad a5 a6 3a 3a 3a c9 c5 ce a3 9c a5 9c 94 94 a4 a5 ad 5a 63 5c c5 bd c5 b9 b5 bd b5 ad b5 94 8c 8c 8c 84 84 52 52 52 84 7b 7b 32 31 31 7c 73 73 29 21 24 5a 52 52 63 63 63 5a 5a 5a 21 21 21 73 6b 6b 29 29 29 6c 63 63 63 5a 5a 19 19 21 42 46 4a 4a 50 52 42 3a 42 52 5a 5a 21 19 21 19 19 19 8c 82 8c 91 8a 94 df de d6 73 69 74 52 4a 52 8c 94 94 73 7b 7b de de Data Ascii: GIF89a1)({ssk{\|skkkRNJB=:sssBBB{{{MBBJJJ:::Zc\RRR{{211\|ss)!$ZRRcccZZZ!!!skk)))lcccZZ!BFJJPRB:BRZZ!!sitRJRs{{
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: e4 ca 85 24 82 b6 bf ba ec 56 ee c2 c0 39 f2 c4 43 98 cb e0 dc f9 f8 fa fb fc 40 e0 ce 6a 1d ab 17 6b d2 c0 51 8a 44 6d 5a 18 8a 94 43 53 0a 19 4a 84 58 0d a0 2a 59 e8 d2 b9 63 d7 cb 57 3c 78 3d e8 0d 3a 68 e9 59 29 6b 28 61 a5 bc b7 b2 25 cb 94 fe a0 e5 4b 30 8e a6 34 4d 84 68 a9 f3 d5 31 17 c8 90 c4 44 86 92 c9 af a8 d1 98 de 7e 8c 24 69 70 22 ce 86 50 9d 22 a3 48 b5 2a c4 aa fd c0 91 4a 94 71 27 47 9f 3f 7f 0a 3d f6 e9 66 33 97 68 d3 aa d5 06 13 69 b4 ac 16 ff 68 96 33 87 6e 96 d7 af ef c4 8e c5 54 82 d3 db a3 70 dd 7a 7b b5 94 a9 d4 87 88 a1 8a 22 ab 50 94 d5 65 05 1f 4b f6 fb 97 db a5 0c e7 ba 0a 59 87 37 2c 48 81 c6 90 51 e3 db f2 2f db d3 a8 53 a7 36 9b d5 f4 b8 9a 33 e6 36 c1 7c ae 16 b0 ce 9e 81 82 1e 5a 11 70 60 8b c0 bd 15 36 7c 79 ea 53 c7 c7 Data Ascii: $V9C@jkQDmZCSJXYcW<x=:hY)k(a%K04Mh1D~$ip"P"HJq'G?=f3hih3nTpz{"PeKY7,HQ/S636\|Zp`6\|yS
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: 0f 65 d3 27 41 f8 20 dd cd 31 88 22 19 13 65 6c 09 33 6c 66 93 70 b7 2c 29 2e 73 89 d2 1e aa 50 1e f7 bb 64 1e 79 58 45 7f 0e 82 78 34 ff 95 0e 4d 43 99 53 08 be 49 8c 63 5c e9 57 3a 78 c9 57 ee ef 25 f9 34 8d 48 61 ca b6 6e 0e 50 5d bb e4 a5 19 53 49 08 8d 4d 75 a4 89 92 69 56 0f d2 a6 87 e4 94 99 7e b5 a9 54 d0 89 a7 94 52 f2 a7 40 7d 59 36 cd ca 40 aa be b4 71 8a db 15 3f e3 2a d7 c4 0a f5 56 ce 14 1e 95 f4 ba d7 ad 2e f3 b3 09 5d 68 57 6f da d3 a7 de 65 ac f1 0c a7 4b 91 ea c6 b5 66 8f ad 4a 95 6c 37 eb 57 59 4b 1e ec 9a e6 aa d7 66 39 8b d0 a7 fc 35 08 6e f2 ea 6f 7d 6b cc c2 3a 95 5d 88 9d 6b 59 19 6b d4 58 ce f2 b1 ba a5 97 c4 b6 64 c0 e8 45 15 5e ac 64 24 64 6b 29 24 de ce 94 b8 eb bc 44 44 06 4b de e1 ee 2b 46 44 32 ed 66 ae bb dc 8f 36 69 70 8e Data Ascii: e'A 1"el3lfp,).sPdyXEx4MCSIc\W:xW%4HanP]SIMuiV~TR@}Y6@q?*V.]hWoeKfJl7WYKf95no}k:]kYkXdE^d$dk)$DDK+FD2f6ip
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: f2 08 89 9c 08 57 b0 88 26 90 48 32 dd 08 8a 11 d6 66 63 78 91 57 b7 2e ec 52 8e b9 f1 0b 15 59 82 ac 28 89 0a 39 8b 80 58 80 27 82 5f 20 69 8d 22 36 91 32 72 8e a3 38 8c 83 52 77 33 67 91 ee 87 6f b9 a3 19 23 d8 5e 83 87 7a a7 27 80 b9 82 87 28 a9 60 d3 e8 90 3d b9 6e 56 a6 80 30 89 66 f8 28 86 4a 78 3c 1d a5 8f 6a 68 6b 6b 28 90 e9 f6 90 15 79 27 75 f8 93 f4 05 80 97 c8 90 4f 88 0e 65 b4 69 df f6 41 2a 27 83 d1 d8 74 50 f9 10 68 48 95 fc 98 4c 0e 28 41 59 83 66 8e f2 86 aa 28 0f 17 92 7d 6a b4 81 01 f4 75 d7 28 40 b9 f4 16 6f d8 92 df 87 5b db 44 94 f4 d2 96 51 29 ff 95 1d 55 95 2b 08 65 79 e2 79 85 94 94 62 a1 81 69 f5 8c ba 38 84 d2 a8 7c a6 a3 5e 69 17 7b d7 d4 94 00 94 0e bf 38 93 34 29 8c d9 17 99 92 b9 88 b4 65 98 49 d2 5b 09 19 3b fe a6 98 60 17 Data Ascii: W&H2fcxW.RY(9X'_ i"62r8Rw3go#^z'(`=nV0f(Jx<jhkk(y'uOeiA*'tPhHL(AYf(}ju(@o[DQ)U+eyybi8\|^i{84)eI[;`
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: c8 92 dc 17 6b 7c c4 e1 8b 99 1c 25 c4 af db a0 67 e2 73 1d 98 85 db 76 02 7d c3 c6 6d 6c 0f 6f 1c c2 fc da c3 54 97 6d 5d 5b b5 b2 2c 48 e8 ab b4 41 fb ca eb 0a 1e 6c 74 c7 80 4c 6e 29 1b 68 93 0c b9 19 45 c5 60 97 c8 ef 4b 80 a5 ac 9c 4b 16 ff b7 d8 ab bd 11 dc 44 9f 6c b7 5c 7b c1 b5 8c c9 e2 e9 b5 b4 8c 8d 62 49 7d 62 6c a7 4e 2c c2 82 f9 b9 3e aa c5 8d 6c cc 66 58 9e 78 dc ca ae 6c 68 49 76 c9 52 8a b2 ed da ce 69 6c 5f 58 ba cc 7f d7 bd 1b 83 c7 8a dc cd 82 a5 34 13 d8 84 e1 4c bf 37 b6 ca e5 bc b4 cc 9c 3f 9d 36 9b e7 1a 0e 0a 8b 8e cf a4 c9 e7 d6 c1 ca 8c 80 43 14 6e 80 b1 b6 db fc 04 8b 6c d1 0f 97 a1 7e bc c5 64 bc 0f 08 bd 0a 68 a7 ae 1c 0d a7 39 1b b2 2f 2c 46 d6 2a c8 b5 78 d2 e7 1c ab d9 cc d2 2d fd 1a 2f ed bb f3 d7 c0 a4 7b 86 92 9c d1 1a Data Ascii: k\|%gsv}mloTm][,HAltLn)hE`KKDl\{bI}blN,>lfXxlhIvRil_X4L7?6Cnl~dh9/,F*x-/{
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: 8a eb 8a b2 a9 37 ba 55 f2 be c0 c5 f6 ba d7 9a b1 e7 3e ea fe b4 e9 fc 05 14 b8 0e df 35 4f 9f 12 86 2a 55 4d 21 42 50 95 a8 31 8c 28 11 9b 3e 69 18 c5 69 ab 18 09 1f 2f 7a c1 88 89 34 86 2c 9f c5 66 18 51 3a d3 f4 30 61 36 8d 30 b5 81 f3 c6 6d a6 4d 7e ff 72 12 1c b4 2e 1a cb 78 f3 ea dd 23 69 f0 11 a9 97 35 07 ea 0c d8 73 69 d3 a2 2d 21 3a 54 38 71 2a d5 aa 56 4f aa 6c 15 73 25 3c a0 20 85 8e 24 9a ec a1 d6 b3 0d 71 39 3a e8 e9 6b 59 4f 5c 91 76 35 87 f3 a6 5d a7 e5 76 b2 1b 84 ea 11 58 90 43 91 95 bc f6 aa ae 52 bc 3c 0f 3f 5d cb 36 ab 63 a9 8f 23 a7 75 89 f2 64 4c 77 7d 7f fe 05 26 76 9e 48 a8 a3 38 8a c6 e4 b6 a8 47 c1 a8 51 43 8a 8b 99 66 5d 80 49 61 bf 5e 0a 30 f1 ff 5e be 9a 8f 05 ed 4c 76 b0 d1 c2 b3 6d d3 ae 2d 1c b1 ef c6 92 b1 46 5d ce bc 79 Data Ascii: 7U>5OUM!BP1(>ii/z4,fQ:0a60mM~r.x#i5si-!:T8qVOls%< $q9:kYO\v5]vXCR<?]6c#udLw}&vH8GQCf]Ia^0^Lvm-F]y
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: d2 47 f9 04 49 8d 0b e9 89 ce 87 2e a1 91 80 91 62 e3 e2 8f 4c 07 b1 04 9c d1 00 0b 18 a7 57 ea c9 c9 05 ea 30 6e 5a 02 21 4b f9 99 be 05 c6 d4 9a 5f ad a9 58 95 d5 cc b2 4e b3 8f 01 d3 e6 36 63 c9 d3 53 f1 d0 02 12 0d 27 3b cd 48 d7 13 2d 46 ad 39 fb 54 5a cb 72 cc 19 b4 13 98 ed 71 c7 91 da d7 49 31 62 d5 46 72 eb 67 1d bd 1a d6 b1 3a f6 b1 66 8d ff 6c 63 03 15 21 9d 0a 10 51 29 25 92 2f a5 30 39 50 5c ea 4b 75 ad 6b af a8 0a 1e ae 85 35 12 e3 70 02 0b 7e a8 4c 4d 12 d6 aa f8 c4 89 56 15 bb 1f c6 0e 14 b2 b8 15 a4 6e 25 bb 5b de 0a f4 50 38 5d 2b 02 ab 67 19 ad d2 f3 aa 82 08 ed 01 44 6b d7 68 6c 4b a3 cd 1c 68 50 11 f0 d4 f4 7d d3 b5 c4 4c ea 43 77 b8 4f f6 00 21 b1 12 22 2b 4d ab 77 db 56 99 b7 b7 8b a3 12 7a 7d 2b cd 57 55 d6 b2 88 bb dd 72 f4 9a 81 Data Ascii: GI.bLW0nZ!K_XN6cS';H-F9TZrqI1bFrg:flc!Q)%/09P\Kuk5p~LMVn%[P8]+gDkhlKhP}LCwO!"+MwVz}+WUr
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: a8 90 7d 07 8a f8 b6 ff 7a 49 37 04 7f d7 6c fa 43 0d 68 d7 8e ef 88 25 20 09 8f fa b6 6a 73 16 8c 01 65 6b f0 c5 50 af 83 59 1e 87 8c 99 72 6a 0c 66 27 f7 57 05 2a 50 51 13 b9 83 70 b8 93 09 49 87 2e a6 7d c5 37 90 a3 a7 1e 04 69 90 df e8 09 c4 f6 43 cb a5 74 ba a4 3f ce 35 73 6f 36 92 52 d9 8b 24 c9 78 80 26 5d 62 c8 7f 5a 69 1f 2e f9 92 51 d9 7e 81 b5 85 17 71 8a 33 78 03 d3 27 7a e0 c7 93 6a d9 00 d7 f8 93 67 77 93 c9 05 7a 49 d7 1a 35 57 94 47 a7 94 df 98 4f 5a d6 83 7d c8 00 93 26 72 e7 24 3e d9 a8 5f 6f 86 78 53 d9 7b 55 69 95 e9 86 56 ee 85 8f 2b 99 8f 2d b8 71 53 17 34 23 35 67 1e d9 6c 2b c6 4e 38 56 77 45 98 96 0a f0 01 d3 a8 96 68 89 7d 16 70 02 94 08 97 aa 85 6c 9e 08 23 88 a0 80 48 97 97 4a d8 6f d5 88 97 4c 79 7c be 01 0d 47 05 6c cc 67 98 Data Ascii: }zI7lCh% jsekPYrjf'W*PQpI.}7iCt?5so6R$x&]bZi.Q~q3x'zjgwzI5WGOZ}&r$>_oxS{UiV+-qS4#5gl+N8VwEh}pl#HJoLy\|Glg
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: b0 54 cc a7 e2 e2 a3 3c 43 c8 c1 17 8f 21 0b c3 31 9c ac 34 ac ac 8f 0c c9 91 3c c9 40 7c 51 fb b6 b3 8f eb c6 3b 29 b9 fc 18 7a 4a 39 0b d6 17 b3 05 e4 c1 51 ea 87 8f 53 bb 9b 39 2c 97 9c c9 ff db 46 65 31 6d 84 49 cb 79 e2 cd b7 fc 75 94 35 86 0d b5 cb e6 fc 9f 62 5c 92 2d bc a3 c1 2c 69 d0 5a c9 2c 56 94 5c 16 88 d2 f6 72 7b 2a c2 69 7c 74 70 f7 c4 79 fa 5e ac 22 98 99 d6 a1 75 2a 49 7e 45 9b 0c 71 cd c8 ac 31 d8 36 85 58 ec 66 2e ea 95 87 0c ce b8 1c ff 33 ba 9c a9 b3 84 75 90 4c 1c c0 ac 5c 45 75 73 42 44 9e 89 db 84 fd 05 a1 a8 5c a9 c3 4c cc 6f 5c bb 9a 66 52 73 1c 81 a9 e7 a4 3f 39 6c ab bc 03 1a 03 0a 53 5c c1 cf bb 0a d9 24 74 12 0d d1 3d fd cd 07 3c ce 2c 09 5f e7 1c 65 25 e7 95 88 0c d1 c9 d4 be 16 dc 5c 1c 5a 9e fe f5 a0 0e 90 83 a3 cb 91 4d Data Ascii: T<C!14<@\|Q;)zJ9QS9,Fe1mIyu5b\-,iZ,V\r{i\|tpy^"uI~Eq16Xf.3uL\EusBD\Lo\fRs?9lS\$t=<,_e%\ZM
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: f1 aa 58 f4 f2 f6 aa 95 db e7 fb fc b5 fd ff fc 94 2d cb a5 8b d7 a6 42 00 38 41 5a 08 89 a0 26 47 89 1a c5 30 a4 90 51 8a 48 92 ff 48 d1 2a 78 b0 50 a7 5e c7 48 a9 bb e7 6a 9d 25 58 b2 6a f1 c0 14 ac 98 20 61 2d 61 16 d3 d5 4c 60 cd 70 43 c6 bd a8 66 4b 9b cf 9f 40 bb e1 1c 3a 8e 5c bf 9f a5 d8 91 5c 7a af de bc a6 24 73 74 f3 47 15 a0 d5 ab 01 6b 12 e4 f8 eb d1 87 af 16 3b 32 f2 40 2d 93 d7 88 68 d3 2e e2 c0 36 52 82 1a b3 76 b1 5d 74 20 26 cf a4 4c 4b 9e ac c4 97 56 06 87 2e 63 12 13 3c 38 b0 a8 9b 88 c1 e5 5c 3c 6d 14 b7 a0 8f 63 25 16 47 b9 72 d1 a2 47 f7 c6 52 9a b7 33 54 78 4e 43 bf cb a7 af 2a d6 d3 57 6d 6e fd 24 36 61 45 86 1e 0f ac 34 2b 51 ad 6d 86 08 78 0e a1 f1 30 b6 5b 5f 87 37 7b 66 95 94 af 54 15 44 ca 1a 36 c6 d1 30 f0 c2 c6 80 18 69 3c Data Ascii: X-B8AZ&G0QHHxP^Hj%Xj a-aL`pCfK@:\\z$stGk;2@-h.6Rv]t &LKV.c<8\<mc%GrGR3TxNCWmn$6aE4+Qmx0[_7{fTD60i<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.16	49977	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:12 UTC	531	OUT	GET /assets/shared/checkout/v15/images/AA2yMk38yKhn.svg HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:13 UTC	422	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 78091fd41758fe765729551d48b7f12f;o=1 server: Google Frontend Content-Length: 410 via: 1.1 google Date: Tue, 17 Dec 2024 17:20:11 GMT Age: 2 Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"19a-193cfe30d00" Content-Type: image/svg+xml Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:13 UTC	410	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 70 78 22 20 68 65 69 67 68 74 3d 22 31 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 20 31 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 35 20 39 43 36 2e 39 38 35 32 38 20 39 20 39 20 36 2e 39 38 35 32 38 20 39 20 34 2e 35 43 39 20 32 2e 30 31 34 37 32 20 36 2e 39 38 35 32 38 20 30 20 34 2e 35 20 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="10px" height="10px" viewBox="0 0 10 10" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg"> <path d="M4.5 9C6.98528 9 9 6.98528 9 4.5C9 2.01472 6.98528 0 4.5 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.16	49975	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:12 UTC	880	OUT	GET /assets/shared/checkout/v15/media/h6kgpHR2MS9C.gif HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://get-luxsheets.com/v15/checkout?b=304&&region=us&pub_id=809&oid=287&transaction_id=71fb64e74261421dbebd6fa6cf6be1da&gclid=&msclkid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:13 UTC	421	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 967e3a192676978b06e8b48931e77ae1 server: Google Frontend via: 1.1 google date: Tue, 17 Dec 2024 17:20:13 GMT Last-Modified: Mon, 16 Dec 2024 14:33:04 GMT ETag: W/"68b5bc-193cfe30d00" Content-Type: image/gif Content-Length: 6862268 Age: 0 Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:13 UTC	969	IN	Data Raw: 47 49 46 38 39 61 90 01 90 01 f7 09 00 e6 e6 e6 e6 e6 ef e6 ef ef e6 ef e6 de e7 ef de e6 e6 ef ef ef d5 de de e6 de e6 de de de ef f6 f7 e6 e1 de e6 fa f0 6e 6b 68 d6 ce cf 96 8c 88 b5 b2 ad 88 82 77 ad ad ac a5 a0 98 9c 9b 9c bd be b5 b6 b5 b5 a5 a4 a5 84 83 85 72 73 75 de dc d6 ce c5 c5 d6 d6 d6 d6 de d6 ce d6 ce 7b 7a 7a ce ce ce be bd bd c5 c6 c5 8b 8c 8b c5 c6 bd 94 94 94 ce ce c5 d6 d6 ce 60 62 64 ad b5 b9 c5 cc ce ce d6 d6 8b 8e 94 b5 b6 bd a5 ad ad ce ce d6 9c a5 a6 bd bd c6 ac ad b5 bd c6 c8 9c 9c a5 a5 a5 ad 94 96 9c b5 bb c5 c5 db de cf f5 de de f6 e6 d4 f3 ea bf ee d6 a8 d7 d4 ce c5 ce b9 d8 d8 f3 ef e5 f4 e6 e2 96 cd cf 60 5d 56 f7 f7 f7 50 4e 48 ac ad 9b 7d bd c1 d6 e6 eb d2 d6 de be b4 aa b5 b2 a5 99 d8 d3 82 76 67 c5 c3 b4 bd bd ac 5e 52 Data Ascii: GIF89ankhwrsu{zz`bd`]VPNH}vg^R
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: a3 2a a5 da b3 dd b7 72 40 83 56 fc 46 b6 ac b5 b3 66 c9 81 1d db ee a9 5b b7 fb ea f1 eb c7 8f e9 5b a7 d2 f2 3e 3d d7 36 af de bc 6a d1 06 36 eb d7 ab 5f b2 60 83 0a 0d ab 78 e8 3a 9d dc 76 26 1e a7 ad e5 35 a3 23 1f 82 d4 cc 99 a4 67 9c de 2c 3f 1b 5d f4 e3 c9 d3 36 d3 69 53 c7 ce a2 d2 b9 3d b8 ad bb 1c 7a a3 ed 92 a8 53 ea 76 e6 ee a2 35 c7 c0 69 17 1d fd 58 e3 e6 cc 26 93 a3 5e c9 71 35 6b b1 d2 7c 66 8e 38 9c 23 c9 96 9e 95 ef 5e fe 30 e7 d8 99 34 93 77 ff 3f 9a 74 a9 bc c9 8b 75 8e ab 58 8d 6b 57 a8 f0 ee 62 75 af b4 e7 dd 69 f7 11 af b5 d8 b7 30 df 7b 00 86 45 51 74 f5 35 45 8d 61 d4 d0 d3 8f 3f 74 d9 75 1f 7c f8 f9 07 58 5a 68 15 06 61 84 88 29 26 56 64 e8 4d b4 61 7a d8 d5 26 62 67 24 7e 66 5b 47 11 0d f5 8c 76 a9 79 c7 d3 5c 48 08 50 0d 51 a3 Data Ascii: *r@VFf[[>=6j6_`x:v&5#g,?]6iS=zSv5iX&^q5k\|f8#^04w?tuXkWbui0{EQt5Ea?tu\|XZha)&VdMaz&bg$~f[Gvy\HPQ
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: a9 2c a8 8f 18 a1 e7 de 78 48 28 a0 4a 63 a7 6a 52 0f 52 25 c3 d4 13 82 8c a4 de 7c 68 50 24 3a 56 ab 86 6f a2 96 f9 dc 40 b9 da d5 8d ff c2 26 9d 34 1a 2b 6d 13 02 0d 4c a2 15 7e 6b 15 9d df 0e b8 db 00 6a ca 35 1e ad 6b e6 20 47 d6 eb 48 e4 49 a1 eb ab 10 31 27 d7 03 69 76 9c e7 7b 9b 85 b6 87 b5 99 2a 76 83 8a 5c e4 56 ac 22 a8 ad 2d 92 6e 95 fc cb 6b 16 e4 c1 56 56 ed a6 f5 e0 18 08 81 fa a8 41 f2 89 a5 8e 42 98 cc ce ba a1 c3 ba a5 22 1d ca 2d 5b 5d 4b e0 ac 3e 97 2c 9b a3 5f 6d 93 a7 af 4f 1a f0 5a 0c c1 96 41 e2 e1 db 5a ee 53 b8 c3 ed 2b 02 fd 4a dd 4c fe 48 b9 f9 bb 11 5e 79 a6 93 a7 8c 83 b9 bc bd 2a ea 5c 1a 19 e0 e0 63 40 3e 75 0f 54 a8 02 bd ab 99 6d 77 7c cc 66 d9 d0 f6 de b1 49 08 43 13 82 94 79 b7 f6 55 57 bd ea 83 ee 35 27 07 05 d0 b1 e7 Data Ascii: ,xH(JcjRR%\|hP$:Vo@&4+mL~kj5k GHI1'iv{v\V"-nkVVAB"-[]K>,_mOZAZS+JLH^y\c@>uTmw\|fICyUW5'
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: 6c 5e a4 68 da 66 86 55 65 23 c4 56 50 5e d5 51 5b 79 3e 95 54 89 1f 82 5f 08 33 6e 2d a9 92 2e e4 79 fb 37 74 fa f6 63 f7 a5 68 90 d5 58 3c c8 54 95 f4 27 fc 60 64 39 e6 6a e9 12 75 96 02 20 f0 c0 14 e4 15 48 32 44 47 34 14 58 8c 91 87 4c 39 8c 6a b9 7c d1 d8 0e 0f c7 22 48 84 31 96 81 8b 0c c2 85 d2 68 67 dc 06 86 5a 89 87 5e 89 72 44 01 96 0f d6 5c 53 42 78 92 27 1b 1b 99 70 50 09 78 e5 01 92 80 48 3c a0 35 47 84 07 97 a5 65 98 8d f4 48 94 f6 88 d7 e4 8d a7 38 9c df 66 88 8c 92 21 73 e9 81 f7 b0 31 a3 76 66 4d 48 5e 37 e5 53 3c d6 4e 18 22 20 24 99 4e f8 28 67 03 ff a6 5c 6c 15 5b 4e e2 15 4e d4 91 d4 47 5d 1b c5 80 d9 90 46 77 88 9a 7a 88 0d d1 c1 53 10 a9 56 c9 05 26 12 b5 96 1e f9 39 65 e2 43 b9 24 31 7f 87 68 2f b1 2d aa 18 4f f9 f5 9b 97 a9 72 c0 Data Ascii: l^hfUe#VP^Q[y>T_3n-.y7tchX<T'`d9ju H2DG4XL9j\|"H1hgZ^rD\SBx'pPxH<5GeH8f!s1vfMH^7S<N" $N(g\l[NNG]FwzSV&9eC$1h/-Or
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: cb 7d 13 92 6a af ea 4c 2c c5 69 dc 2b 6f 11 2a ba b6 59 25 0c c7 59 95 56 cc 2d 44 b1 2e 8c 64 18 7b ac 9e fb 2e 9e f4 1f 6a 22 b1 71 9c 3d b8 a7 ba 96 db 41 f4 8b c8 af 52 b1 fe 66 c5 e8 31 bb e0 4c cf 38 6a ba f3 90 9f 03 99 b2 d5 57 11 ad ff a2 76 48 aa 16 08 5c 2b d6 b0 2f e6 07 80 6b 78 62 fe 08 c1 e3 21 96 0a 86 68 bd b4 51 d2 08 ac 03 d3 62 3c f5 aa 91 5b 97 51 e6 1f 25 c4 d4 63 5c 73 c1 63 30 f8 c1 2f dd a5 28 68 5b b2 40 b7 64 c8 9c 83 e0 35 d1 64 6d a6 fa 76 7f 90 64 b7 8d 86 d6 55 7b 26 f4 74 0e 7a fa 6b 65 cd b4 79 bc c7 3e d7 15 92 31 a3 9f 0c 7b 93 dc ae ec 81 26 4c dc c4 0e 64 3c db 92 7b ff 90 0d e1 99 29 fa 23 af 17 ec 2d de 23 41 b0 73 22 7c 1d 96 23 e7 a3 47 bd 35 49 2d 20 de 24 c2 a5 9b aa a8 96 6a 55 d1 4d 4c a3 49 8e f3 2d 46 57 a7 Data Ascii: }jL,i+o*Y%YV-D.d{.j"q=ARf1L8jWvH\+/kxb!hQb<[Q%c\sc0/(h[@d5dmvdU{&tzkey>1{&Ld<{)#-#As"\|#G5I- $jUMLI-FW
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: a8 43 a5 27 57 6e b0 39 d1 a8 3d db 1d 45 9e f0 de 4f 7a 20 c5 b7 e4 8d b3 62 d5 7f 48 42 6e dd 18 33 25 3d 7b 55 a7 4e 95 38 3c e9 d2 a6 e4 ba 2f a7 de df 7b d4 a8 38 f2 2d c0 f8 06 f4 09 a8 e3 c2 59 ea 3e fb 30 52 67 b4 b8 b4 41 8c 34 0a d7 9a 10 ae 08 c3 69 4f 08 6b 1e 7c c6 b2 b4 56 03 8c 30 12 5b 33 07 9b d8 32 82 87 9f f4 08 c0 81 b3 c9 0e 02 cd ac ba ee 51 4a 1a ca 3e 4b 6e c6 d0 3c 9b 90 35 20 83 2c 0d 36 b2 e6 2a d2 39 6e 1a 82 47 22 f0 3a ea 41 b7 7e 98 a0 4f 27 e8 82 1b e7 48 da 1a ac ce ba eb 88 ba f1 38 e9 8a ea ce 3f 2f 95 c2 4f 4b ea c0 a4 c6 23 36 3f 92 12 3e ac 16 83 87 1e 7f 76 f0 07 a5 da b2 a3 0a a2 25 5f f2 ed cf cc de c1 67 50 cd 2c fa aa 3a 23 f9 b3 ff 4e b6 9f 94 04 89 3d 01 cf 69 10 cc e9 14 aa f4 ca b0 42 d3 d4 ac 0a 2d 44 ac 47 Data Ascii: C'Wn9=EOz bHBn3%={UN8</{8-Y>0RgA4iOk\|V0[32QJ>Kn<5 ,6*9nG":A~O'H8?/OK#6?>v%_gP,:#N=iB-DG
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: 77 33 0f e6 eb 5d aa 53 d6 66 61 8b a7 f8 70 0d 46 b0 69 6b 3e a8 ba 55 ae 25 15 79 37 f2 5d 40 a9 d4 93 ec ec 50 37 3b 40 82 9d 62 eb bd 18 d2 96 a0 a9 eb 53 4b e6 c9 92 f4 dc a9 92 ed 92 5e 3a a1 82 c2 53 86 6d 40 5f 2d a4 82 bc 19 ad a2 19 27 99 08 cc 18 75 ab 4b d9 e1 55 23 1b 3f f1 a2 77 7f f9 57 c3 d9 af a3 07 d9 22 79 d9 e8 20 94 c1 6f b9 e6 ff 5d ec 5c 45 57 e3 fa 41 34 43 28 c5 6e 42 15 e7 ca fc 1a 91 2b fd ad a7 56 43 16 62 94 7c cf 1e ab 7c 6e 1f c7 ba 3a 7a aa 73 52 4a 0a 94 2b 4d 09 61 38 a3 92 c2 02 a0 73 85 29 1c 62 3c b3 2b b6 fc 3c 61 cf 40 0c e6 90 55 98 ce 50 52 62 3d b0 d2 44 03 e9 b1 a9 11 01 2e c2 ba 3b 10 91 26 27 85 a4 e3 86 71 1e 18 17 c7 f6 e5 6e d6 7d 21 13 60 e9 93 43 c9 57 d3 40 56 55 30 35 47 e4 51 fd 8d 95 34 b5 c6 11 ba 29 Data Ascii: w3]SfapFik>U%y7]@P7;@bSK^:Sm@_-'uKU#?wW"y o]\EWA4C(nB+VCb\|\|n:zsRJ+Ma8s)b<+<a@UPRb=D.;&'qn}!`CW@VU05GQ4)
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: a8 d4 93 2c c2 bc b1 ff 5b 32 98 b8 dc 07 e7 e9 26 c9 e8 ab 1f a3 38 60 32 35 bd 14 2c 21 60 22 78 5c 1e 23 0a 9c c1 94 c6 34 44 07 d8 a9 1e ee d1 87 ad 62 b7 a4 f8 a1 18 21 08 49 1b 3e e2 32 29 ef 50 c1 45 ea 1e 28 19 3a 6c 13 31 4f fa 06 8d 5b c8 76 db c1 08 0a 42 d0 f2 b3 1d 10 3d d3 ec 4a ab 9a 4a 23 5c 4d ff c4 ad 4b f4 cf c9 fb b6 61 f3 88 9a b3 89 54 c2 cc 93 8b b9 e1 a2 ba b9 b1 4e b6 2c 4c 8b 7b c0 b8 6c b3 a6 88 1f 8e 24 b8 bf aa b8 53 eb 4c a1 8b ce 4a 24 87 2d 53 13 f9 fc 9f 68 0c 4e f8 02 87 bb 43 c4 00 8b d1 cf a2 9c be 23 3f 7c 02 98 fd 7a 3d 77 c2 a4 ad a4 3c 25 ba b0 cb f4 1e 92 08 ae 41 cc a7 3f 42 9a 80 72 cd c6 cb 2e 9f c8 86 9b 9b bf da ba 89 de 92 27 d9 5a bf 46 93 b1 9d 94 21 75 b3 87 c6 f8 49 55 64 cd da 58 9e 87 b0 b9 9f 84 d2 22 Data Ascii: ,[2&8`25,!`"x\#4Db!I>2)PE(:l1O[vB=JJ#\MKaTN,L{l$SLJ$-ShNC#?\|z=w<%A?Br.'ZF!uIUdX"
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: 27 de 88 c8 0b 3d 6f 1b 5f 7e f6 67 a4 ab 3f e6 c1 bb 7d 69 db 98 dd ba 08 5a 9d 0d 56 eb 57 e3 68 bd 05 af f8 8a 8d ce bc da f9 fb 4f b4 72 c8 08 6e 32 06 74 eb c1 71 ae b0 8a df 9b f6 ad 1f 50 d5 5c d6 88 2e 1b a8 01 c5 e7 d1 2b 89 54 02 60 fd ad c2 45 1c b9 9f 21 48 dd 1d c8 d5 2d 43 0b 8e e6 20 da ad 9a fd ad 4e dc 2e b2 75 45 e3 41 b4 2b 64 54 d8 ac d7 80 75 c2 75 93 47 52 76 5f 17 e9 5f 7f fe 6a 7c 54 d9 33 04 c6 42 cd 45 c6 f2 4b 19 1e c7 99 e2 6b ff 8f 36 cc 1c 66 0c 5e 14 4d c4 1b dc de 96 35 95 8c 9c 92 65 3d 5e dd 2a a7 eb 34 cb be 30 d0 be ca db 0d db 87 4d e0 72 c4 bd 5e d3 6d dc aa 8f 58 1c eb 3f ac 59 40 b9 dc 34 cb 4a f4 b4 46 bf d4 b1 f7 70 d5 32 95 ee fe 62 6b d3 2e 5d d3 46 a1 52 44 c5 92 30 c7 d7 24 48 d6 8e 2d 21 d6 3c 33 85 d5 01 8d Data Ascii: '=o_~g?}iZVWhOrn2tqP\.+T`E!H-C N.uEA+dTuuGRv__j\|T3BEKk6f^M5e=^*40Mr^mX?Y@4JFp2bk.]FRD0$H-!<3
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: a2 91 96 9a 62 45 e2 55 23 92 73 ad 84 20 93 17 c1 57 16 78 dd 39 b4 a1 34 3e fd 76 54 8a 26 c6 93 d6 62 b1 dd a5 25 61 58 7a 24 ff d1 6c 16 35 15 15 56 f9 38 b9 26 7c 55 0e 74 e2 37 2c 86 27 1e 3e 1e 66 f6 51 9c e8 f1 d5 db 77 79 a2 07 18 7d 16 b1 64 d4 58 f7 00 68 a6 45 27 75 b5 db 41 87 ce 17 dd 92 5d dd 64 66 58 ce e9 f3 1c 52 13 51 f7 95 56 5c f9 e3 a0 00 06 88 ca 20 84 58 71 45 cf 9d 1d 9a d6 65 92 34 92 88 da 89 1c 95 c4 53 a3 bb 9d 55 64 6c ad ba 9a 2b 36 2f 1e 47 4d 36 50 09 50 0f 35 ef d0 ca dd 72 44 1a 09 a3 ae ae d6 a6 a8 a7 15 25 88 d1 9b 75 8e 97 23 9f 03 45 14 9c 9f 1e 62 c3 eb 65 5b ee 19 1a 37 12 11 da 92 57 5a 59 c8 e4 b3 19 72 38 2e b2 de 69 2b 90 bc 3a e6 29 5e 60 f3 be 9b 5e 42 6b 02 57 25 60 fc b1 69 5d 35 00 07 7c 6e c1 fe 25 e8 12 Data Ascii: bEU#s Wx94>vT&b%aXz$l5V8&\|Ut7,'>fQwy}dXhE'uA]dfXRQV\ XqEe4SUdl+6/GM6PP5rD%u#Ebe[7WZYr8.i+:)^`^BkW%`i]5\|n%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.16	49978	34.111.103.167	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:13 UTC	524	OUT	GET /assets/shared/checkout/img/logos/paypal.svg HTTP/1.1 Host: get-luxsheets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cv=v15; ef_witness=1; ef_affid=809; ef_tid_c_o_287=71fb64e74261421dbebd6fa6cf6be1da; ef_tid_c_a_1=71fb64e74261421dbebd6fa6cf6be1da
2024-12-17 17:20:13 UTC	420	IN	HTTP/1.1 200 OK accept-ranges: bytes x-cloud-trace-context: 0a190740cd545f0f55fa3ab2442adae5 server: Google Frontend Content-Length: 7146 via: 1.1 google Date: Tue, 17 Dec 2024 17:20:11 GMT Age: 2 Last-Modified: Mon, 16 Dec 2024 14:33:03 GMT ETag: W/"1bea-193cfe30918" Content-Type: image/svg+xml Cache-Control: public,max-age=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 17:20:13 UTC	970	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 37 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 69 64 3d 22 50 61 79 70 61 6c 22 3e 0a 3c 67 20 69 64 3d 22 50 61 79 70 61 6c 5f 32 22 3e 0a 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 20 31 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 2e 32 37 35 37 20 33 2e 36 37 38 37 37 48 32 31 2e 36 34 33 35 43 32 31 2e 33 39 34 39 20 33 2e 36 37 38 37 37 20 32 31 2e 31 38 33 35 20 33 2e 38 35 36 35 35 20 32 31 2e 31 34 34 37 Data Ascii: <svg width="67" height="16" viewBox="0 0 67 16" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Paypal"><g id="Paypal_2"><path id="Fill 1" fill-rule="evenodd" clip-rule="evenodd" d="M25.2757 3.67877H21.6435C21.3949 3.67877 21.1835 3.85655 21.1447
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: 34 2e 30 39 34 36 20 37 2e 32 33 37 35 33 4c 33 34 2e 30 31 37 35 20 37 2e 37 31 36 33 39 4c 33 33 2e 38 39 36 20 37 2e 35 34 32 38 36 43 33 33 2e 35 31 39 35 20 37 2e 30 30 34 38 34 20 33 32 2e 36 37 39 37 20 36 2e 38 32 35 30 31 20 33 31 2e 38 34 31 37 20 36 2e 38 32 35 30 31 43 32 39 2e 39 31 39 36 20 36 2e 38 32 35 30 31 20 32 38 2e 32 37 38 20 38 2e 32 35 38 30 36 20 32 37 2e 39 35 38 33 20 31 30 2e 32 36 38 32 43 32 37 2e 37 39 32 31 20 31 31 2e 32 37 30 39 20 32 38 2e 30 32 38 33 20 31 32 2e 32 32 39 38 20 32 38 2e 36 30 36 33 20 31 32 2e 38 39 38 34 43 32 39 2e 31 33 36 33 20 31 33 2e 35 31 33 32 20 32 39 2e 38 39 34 37 20 31 33 2e 37 36 39 34 20 33 30 2e 37 39 37 20 31 33 2e 37 36 39 34 43 33 32 2e 33 34 35 37 20 31 33 2e 37 36 39 34 20 33 33 2e Data Ascii: 4.0946 7.23753L34.0175 7.71639L33.896 7.54286C33.5195 7.00484 32.6797 6.82501 31.8417 6.82501C29.9196 6.82501 28.278 8.25806 27.9583 10.2682C27.7921 11.2709 28.0283 12.2298 28.6063 12.8984C29.1363 13.5132 29.8947 13.7694 30.797 13.7694C32.3457 13.7694 33.
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: 38 31 37 4c 34 35 2e 35 38 31 39 20 31 33 2e 32 36 36 34 43 34 35 2e 35 35 32 38 20 31 33 2e 34 34 37 34 20 34 35 2e 36 39 35 31 20 31 33 2e 36 31 30 34 20 34 35 2e 38 38 30 35 20 31 33 2e 36 31 30 34 48 34 37 2e 37 34 34 36 43 34 37 2e 39 31 37 37 20 31 33 2e 36 31 30 34 20 34 38 2e 30 36 35 38 20 31 33 2e 34 38 36 31 20 34 38 2e 30 39 32 39 20 31 33 2e 33 31 36 36 4c 34 38 2e 35 30 39 39 20 31 30 2e 37 31 37 38 43 34 38 2e 35 34 38 31 20 31 30 2e 34 37 35 37 20 34 38 2e 37 36 30 31 20 31 30 2e 32 39 38 20 34 39 2e 30 30 38 31 20 31 30 2e 32 39 38 48 35 30 2e 31 35 37 34 43 35 32 2e 35 35 30 34 20 31 30 2e 32 39 38 20 35 33 2e 39 33 30 38 20 39 2e 31 35 38 32 32 20 35 34 2e 32 39 32 20 36 2e 38 39 39 38 34 43 35 34 2e 34 35 35 31 20 35 2e 39 31 31 36 37 Data Ascii: 817L45.5819 13.2664C45.5528 13.4474 45.6951 13.6104 45.8805 13.6104H47.7446C47.9177 13.6104 48.0658 13.4861 48.0929 13.3166L48.5099 10.7178C48.5481 10.4757 48.7601 10.298 49.0081 10.298H50.1574C52.5504 10.298 53.9308 9.15822 54.292 6.89984C54.4551 5.91167
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: 2e 36 34 30 37 31 20 35 39 2e 30 35 34 35 20 38 2e 38 30 32 33 38 20 35 39 2e 33 31 39 20 39 2e 31 30 36 39 37 43 35 39 2e 35 38 35 20 39 2e 34 31 34 39 33 20 35 39 2e 36 39 30 32 20 39 2e 38 34 34 37 33 20 35 39 2e 36 31 33 33 20 31 30 2e 33 31 38 35 5a 22 20 66 69 6c 6c 3d 22 23 32 39 38 46 43 32 22 2f 3e 0a 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 20 36 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 36 34 2e 30 38 38 33 20 33 2e 39 33 30 33 4c 36 32 2e 35 39 37 36 20 31 33 2e 32 36 36 34 43 36 32 2e 35 36 38 34 20 31 33 2e 34 34 37 34 20 36 32 2e 37 31 30 36 20 31 33 2e 36 31 30 34 20 36 32 2e 38 39 36 20 31 33 2e 36 31 30 34 48 36 34 2e 33 39 34 38 43 36 34 2e Data Ascii: .64071 59.0545 8.80238 59.319 9.10697C59.585 9.41493 59.6902 9.84473 59.6133 10.3185Z" fill="#298FC2"/><path id="Fill 6" fill-rule="evenodd" clip-rule="evenodd" d="M64.0883 3.9303L62.5976 13.2664C62.5684 13.4474 62.7106 13.6104 62.896 13.6104H64.3948C64.
2024-12-17 17:20:13 UTC	1390	IN	Data Raw: 30 31 39 37 35 20 31 35 2e 33 38 34 38 20 37 2e 30 30 30 37 31 20 31 35 2e 33 39 32 31 20 36 2e 39 38 32 31 32 20 31 35 2e 33 39 32 31 48 34 2e 35 38 38 33 37 5a 22 20 66 69 6c 6c 3d 22 23 32 38 33 35 36 41 22 2f 3e 0a 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 20 38 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 32 2e 39 36 39 37 20 34 2e 31 35 38 37 35 43 31 32 2e 39 35 34 39 20 34 2e 32 35 32 33 33 20 31 32 2e 39 33 37 38 20 34 2e 33 34 37 39 35 20 31 32 2e 39 31 38 38 20 34 2e 34 34 36 32 31 43 31 32 2e 32 36 31 38 20 37 2e 37 36 36 35 37 20 31 30 2e 30 31 34 32 20 38 2e 39 31 33 36 32 20 37 2e 31 34 33 36 35 20 38 2e 39 31 33 36 32 48 35 2e 36 38 32 30 35 43 Data Ascii: 01975 15.3848 7.00071 15.3921 6.98212 15.3921H4.58837Z" fill="#28356A"/><path id="Fill 8" fill-rule="evenodd" clip-rule="evenodd" d="M12.9697 4.15875C12.9549 4.25233 12.9378 4.34795 12.9188 4.44621C12.2618 7.76657 10.0142 8.91362 7.14365 8.91362H5.68205C
2024-12-17 17:20:13 UTC	616	IN	Data Raw: 36 38 38 35 20 33 2e 39 37 30 30 32 20 36 2e 30 30 32 35 39 20 33 2e 38 30 32 32 20 36 2e 31 38 32 37 34 20 33 2e 37 31 37 35 36 43 36 2e 32 36 35 30 31 20 33 2e 36 37 38 37 35 20 36 2e 33 35 35 37 35 20 33 2e 36 35 37 33 37 20 36 2e 34 35 32 20 33 2e 36 35 37 33 37 48 31 30 2e 33 35 36 36 43 31 30 2e 38 31 39 31 20 33 2e 36 35 37 33 37 20 31 31 2e 32 35 30 39 20 33 2e 36 38 37 32 34 20 31 31 2e 36 34 35 20 33 2e 37 34 39 39 32 43 31 31 2e 37 35 37 36 20 33 2e 37 36 37 36 34 20 31 31 2e 38 36 37 20 33 2e 37 38 38 31 34 20 31 31 2e 39 37 33 38 20 33 2e 38 31 31 31 33 43 31 32 2e 30 38 20 33 2e 38 33 34 35 36 20 31 32 2e 31 38 33 35 20 33 2e 38 36 30 37 37 20 31 32 2e 32 38 34 20 33 2e 38 38 39 34 37 43 31 32 2e 33 33 33 38 20 33 2e 39 30 34 31 32 20 31 32 Data Ascii: 6885 3.97002 6.00259 3.8022 6.18274 3.71756C6.26501 3.67875 6.35575 3.65737 6.452 3.65737H10.3566C10.8191 3.65737 11.2509 3.68724 11.645 3.74992C11.7576 3.76764 11.867 3.78814 11.9738 3.81113C12.08 3.83456 12.1835 3.86077 12.284 3.88947C12.3338 3.90412 12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.16	49981	104.21.29.105	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:13 UTC	1163	OUT	GET /tr/t/JDvPdy1sMN2uSAhlhv6ZzbfRIux7f1Qhv2eEJNRyhkrdezwVKfo5l5OIcv6_ZXrmAZ-C1g-bUpFQDlCUE8STTR5ddP_2gonCmkzWN1yIssizH9yQ4AY2Nl0GwNNj-kLz-jhh_MPqN8HWHhgXC2vCXalzVxpWAaTy8DYteRA63Qw0sxCPBlnAEaPUcwT1mpOmY20p4XP7uvG7IME3NoVzpSnfwHGIARYNAUdqnoaPIS_iqANq8QKPmxre-RkP3pMyToxkS_OATOBt5q2AHrZqKmNTj4H1DBR_O1Dd8DdgW02wDV7tjPHXvqTXzIUEDSXUgQkx7VJoY6HGKKC2TG_BGGo10tb2F-0Hx8dN4xCNQ6uiXP1Xw53FW6e0RnbMc15JKlC4G-uYXm5zDPIcQHfPwm8qe_LFVCdfJwp0kodkrmeooW62lc6AmykzadbmuuvW?h=&v=185 HTTP/1.1 Host: pushclk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:14 UTC	1150	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 17 Dec 2024 17:20:14 GMT Content-Length: 0 Connection: close location: https://turapport-strience.icu/0b799de6-47be-4e34-8e0d-638110360f29?source=10443&Siteid=76100&psid=450741448&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQ expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC
2024-12-17 17:20:14 UTC	613	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 64 53 39 4d 6c 78 4d 44 61 7a 62 4e 4a 53 46 62 31 4f 42 72 6e 31 36 68 36 30 47 4e 73 42 64 4d 35 33 45 78 46 35 6c 4f 4c 74 75 6e 6b 65 64 39 54 51 56 6a 35 74 45 57 41 5a 6b 43 30 49 63 66 46 37 58 37 72 50 64 45 66 62 41 74 6a 78 48 67 4f 4e 75 5a 6b 4e 6d 6e 6c 69 49 70 71 4d 68 65 54 68 35 52 45 38 38 7a 72 67 6d 64 64 6e 4d 50 61 6c 74 44 6b 42 55 4c 76 55 36 6e 71 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e 45 4c 3a 20 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dS9MlxMDazbNJSFb1OBrn16h60GNsBdM53ExF5lOLtunked9TQVj5tEWAZkC0IcfF7X7rPdEfbAtjxHgONuZkNmnliIpqMheTh5RE88zrgmddnMPaltDkBULvU6nqw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.16	49986	151.101.193.21	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:14 UTC	596	OUT	GET /sdk/js?currency=USD&intent=authorize&commit=false&client-id=AVUWLRxhkXFDE1GRw4frKDjLxh1QaLUc3ouf4PPnVIyYA3D8F8aXjBEIjEQV6lnDGJn3Raklvuxvxw2f&disable-funding=card%2Cbancontact%2Cblik%2Ceps%2Cideal%2Cmercadopago%2Cmybank%2Csepa%2Csofort&enable-funding=paylater HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:15 UTC	1276	IN	HTTP/1.1 200 OK Connection: close Content-Length: 84180 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server-Timing Cache-Control: public, max-age=3600, s-maxage=10800 Content-Encoding: gzip Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com; connect-src 'self' https://.paypal.com https://.paypalobjects.com https://.qualtrics.com; frame-src 'self' https://.paypal.com https://.paypalobjects.com https://.qualtrics.com; script-src 'nonce-ixW0SM7sc1GWltoScN8DBggmihaxg+LwxkgE76e2U4ehpEk9' 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'nonce-ixW0SM7sc1GWltoScN8DBggmihaxg+LwxkgE76e2U4ehpEk9' 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/javascript; charset=utf-8 Disable-Set-Cookie: true Etag: W/"148d4-Yl/2vFzZgM9Y/aF8GaFa7BhHoOE"
2024-12-17 17:20:15 UTC	1351	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6d 46 33 53 53 30 4e 57 6f 58 6f 33 48 61 6f 6a 67 6d 49 56 56 58 61 76 75 6b 52 6e 5a 48 35 39 37 75 2b 78 5a 4e 58 52 43 69 4b 57 7a 53 4b 7a 66 4e 50 48 77 39 4e 43 33 32 47 6d 62 6c 59 31 32 2b 48 58 70 6b 43 45 59 65 59 47 79 76 52 42 4e 6b 6b 4a 67 30 41 41 41 42 62 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 52 77 59 32 51 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4d 7a 55 7a 4e 44 4d 35 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 66 51 3d 3d 0d 0a 50 33 70 3a 20 74 72 75 65 0d 0a 50 61 79 70 61 6c 2d 44 65 62 75 67 Data Ascii: Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==P3p: truePaypal-Debug
2024-12-17 17:20:15 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 dc 7d 6b 7b e2 b8 92 f0 f7 fd 15 44 3b 87 b5 3b 82 40 cf f4 5c 44 7b b2 84 90 84 0e 10 06 48 d2 dd 34 cb e3 80 08 9e 36 32 23 cb b9 4c e0 bf bf 4f 49 be c8 c6 90 9e 99 f3 ee 87 3d 73 9e 34 b6 75 2d 95 4a a5 ba 1a f3 80 4d 85 e3 31 e3 65 32 39 6b f5 07 c3 49 bf d9 3d 6d f6 27 cd 8f bd 66 bf d5 69 76 87 83 c9 04 4f 26 67 d7 dd d3 56 f7 7c d2 6c b7 ce 5b 27 ad 76 6b f8 49 be ef 34 07 83 fa 39 7c 39 6f 5f 9d d4 db 83 c9 64 63 be fc 47 a1 50 28 1c bd 39 28 9c 79 bc e0 3a 53 ca 7c 5a 70 d8 dc e3 4b 1b ba 2b ac 5c 6a fb b4 e0 53 5a f0 02 b1 0a 44 f9 77 bf dc 6e 35 9a dd 41 b3 2c 9e 44 e1 cd d1 7f 1c c4 83 63 98 9a 2f 73 8f 1b 0f 36 2f 88 82 c3 0a d4 64 23 31 b6 e8 48 8c 37 c6 a3 c3 66 de 23 4e 8a 9b 2f 50 90 5a 2f 9b 5a f4 b2 20 0c Data Ascii: }k{D;;@\D{H462#LOI=s4u-JM1e29kI=m'fivO&gV\|l['vkI49\|9o_dcGP(9(y:S\|ZpK+\jSZDwn5A,Dc/s6/d#1H7f#N/PZ/Z
2024-12-17 17:20:15 UTC	1378	IN	Data Raw: 1a c2 ca 90 be 07 13 4b 6a 99 43 24 85 19 ad b0 71 f4 2f 63 54 29 fd 52 2f 9d 8d 5f de 6e cc a3 7b 6c e4 1d 41 05 75 18 94 e7 dc 5b 36 16 36 6f 78 33 6a a0 ca 13 3a a4 40 9e cc 43 04 84 0a 67 c7 2f e9 dc e1 43 79 ee b8 f4 10 1d a3 c3 e7 b0 a0 04 5f c3 63 82 32 81 1c 56 78 3c 7e 2c 6b af ac 26 79 2c 4b f8 0f 16 94 8a f2 d4 f7 87 f4 49 58 4d 7c 57 2c 1a d3 e3 78 c9 16 d4 9e 95 1d e6 53 2e 4e e8 dc e3 d4 78 c4 e9 8f 53 d8 0f b0 3f fc 51 65 6c 92 f4 47 7b 05 a8 ac b6 cc a3 69 6e a8 eb d3 02 20 d2 e1 61 c4 32 7a 1a 77 30 37 73 36 bc da e3 c2 f8 c5 c4 9e 25 8c aa 89 1d 6b 8b 1c f2 e3 d1 88 95 1d cc 25 25 24 bc 66 50 2b d9 9c bc ec 7a 53 db f5 d7 eb 97 8d 59 9e dc d3 18 0e db 87 af 03 04 58 16 f1 fd ed cf 08 1d 72 59 40 c1 24 55 26 3e 88 0a 9e e1 60 b6 6f 2e 3f Data Ascii: KjC$q/cT)R/_n{lAu[66ox3j:@Cg/Cy_c2Vx<~,k&y,KIXM\|W,xS.NxS?QelG{in a2zw07s6%k%%$fP+zSYXrY@$U&>`o.?
2024-12-17 17:20:15 UTC	1378	IN	Data Raw: 25 9d 08 25 1d 55 dc c1 e8 44 ee 79 3f 7f 76 7e d4 ae 83 51 63 41 a7 5f bd 40 e4 cf 30 55 d2 e6 b3 33 8f 2f f3 31 42 2f d9 b3 9f 81 2f 3e 73 a8 3b cb 1f c2 40 2f de a1 2c c8 5f ff 54 29 6f 66 bb f9 eb ae 17 6b 31 5f d8 ae 2b f9 f2 fc 6d a1 97 fe ad 0f 5a 8c fc 5d a1 97 bb 81 93 32 7f e7 ea c5 42 a8 0f e9 72 05 04 30 7f 55 53 90 f2 56 c1 ea 6a 45 59 93 73 8f e7 96 6f e9 e5 6d d7 f5 1e 5b 52 64 94 5b b8 a3 17 9e 7b 7c 4a f7 14 3e d1 0b 87 04 a2 ee e6 c3 f8 54 2f bb 9b e6 5c e7 34 99 5b f0 0f 3f 42 5e 3b 42 5e 5b 55 b4 31 1a 2e 38 a5 a7 de d2 76 d8 80 4e 03 9e 3f fc db b8 2f 1b a3 95 e7 8b be 77 e7 e5 e3 f1 ef 71 6f 41 4a 13 eb c6 56 2f a0 db b1 2c 66 46 d6 16 b5 c4 6c e1 65 83 9d c8 7e e5 2b 7d f6 41 ef 0a ca 53 6e 55 6a fc bd 13 69 32 f9 e1 a1 49 cb 0e 9b Data Ascii: %%UDy?v~QcA_@0U3/1B//>s;@/,_T)ofk1_+mZ]2Br0USVjEYsom[Rd[{\|J>T/\4[?B^;B^[U1.8vN?/wqoAJV/,fFle~+}ASnUji2I
2024-12-17 17:20:15 UTC	1378	IN	Data Raw: 84 31 3e e1 2e 18 50 d6 e1 cf c0 aa 24 ec e8 c4 90 57 98 83 41 b1 f8 a4 a6 c3 ac a7 da 93 a5 ec 6e cb 9c fa 9e fb 40 0d 73 93 60 4d cf 30 5f 06 87 96 b6 dd fb f0 a6 64 55 f1 c4 30 65 77 67 ba 65 49 5c 4c b3 14 07 94 94 36 fc 60 b5 1b 76 12 59 7d e2 f0 25 80 25 f3 92 c2 4d f7 c2 86 5b 45 fa 83 b4 e9 df 2e 9a 7a b3 90 f5 b8 9f 7a 09 3c 2b 80 0e 2c d5 f5 f7 be b0 a7 5f 33 03 0a 47 79 50 cd 8c 30 7a 91 1a 5d f4 32 ee 75 34 c6 4c b7 68 3f a8 62 07 fe d8 60 4f da 33 cc 1a 6c 44 96 b6 e8 b5 8f 69 bc 04 cc 24 86 07 26 a7 c2 62 e6 c6 c4 39 05 61 3c b2 9c 03 e5 b8 2c 67 66 51 03 56 0b cb 89 69 b3 80 13 06 de db d2 ed e5 58 9f b0 21 4c e2 14 8b 7a 61 6e 6e 36 a1 2f 43 42 42 13 d3 ff b0 a2 95 b1 4d 4e 41 71 bd 4e c1 d0 d4 5c 03 00 2f 80 32 99 62 c1 bd c7 02 a8 d4 a4 Data Ascii: 1>.P$WAn@s`M0_dU0ewgeI\L6`vY}%%M[E.zz<+,_3GyP0z]2u4Lh?b`O3lDi$&b9a<,gfQViX!Lzann6/CBBMNAqN\/2b
2024-12-17 17:20:15 UTC	1378	IN	Data Raw: ca 2b fe 57 eb a5 75 d6 af 77 9a 04 39 a1 35 40 ef aa 77 dd 23 68 05 e6 07 68 83 5b 16 6a d8 ae 5b 78 b4 fd 42 74 d4 15 ee 9e d5 ed 91 96 bf f0 2f 0c 25 c3 e8 ec 16 8e 2b f9 1b 80 1d bc 99 a0 b4 12 2e 4c 3d 37 11 35 9d 84 1b 73 67 5d 50 7b 2b f5 7f 1c 6f 41 7b 27 51 55 18 e8 e8 08 99 e0 13 2e af 15 11 24 a3 b5 ef a4 e4 ed a7 af 8f 18 d9 77 5e 20 08 c0 f1 24 55 f7 fa 95 d1 9a a1 f0 95 85 7e d8 10 19 42 fd 3a 48 0c 0a 0a d1 bb e4 f2 a1 49 e3 fe 78 a5 8b 62 f1 e0 5a 4a 1f f8 73 42 23 bc 15 65 94 e7 b6 77 11 c9 84 b7 45 8b 39 82 fe 5b 29 17 c9 ed ba 16 41 3f 5a 4d 79 80 d1 7d 62 10 7b 16 0a 61 0b 51 9d 70 47 0b ab 13 4a 57 0f c4 b7 35 10 61 8e e2 ff 11 58 d8 13 5d b0 aa de 1c 1d 21 f9 39 59 bf d8 23 0f 80 16 87 f2 28 16 2f 0c f3 f8 d6 e0 26 09 cb 1e 1d a1 4d Data Ascii: +Wuw95@w#hh[j[xBt/%+.L=75sg]P{+oA{'QU.$w^ $U~B:HIxbZJsB#ewE9[)A?ZMy}b{aQpGJW5aX]!9Y#(/&M
2024-12-17 17:20:15 UTC	1378	IN	Data Raw: 14 5e 1a dc aa 1e 55 cc d8 db ad e0 28 81 fd 6f c9 35 a0 e0 15 8b 29 79 bf 67 62 90 14 f3 f7 56 e5 38 f3 81 80 8c 57 60 4f d7 59 38 18 44 84 46 ae 54 6f bb e9 8d 46 38 a6 df 7c 35 84 ef f2 86 aa 0e 5c cb b2 5a 66 f6 cc ce 33 99 ca 11 48 fd cd d6 ff b2 75 d9 5f 6c 5f 16 f0 a9 3b d7 d8 d1 bf d5 86 3a ea fe 69 2b c2 5b fd b3 26 d0 64 12 30 d7 f9 4a dd e7 89 14 ce 4f 26 92 6c 94 27 93 29 f7 7c 7f a2 2e 89 93 40 38 ae 3f 51 10 9c 4c c1 15 6c 32 f9 06 2e 4e ba db 44 ce 7e 10 5f 15 42 b0 52 77 1e fd 8e a5 03 32 f6 ea 37 dd 77 fd 88 bf f9 53 db 1b 70 09 56 07 66 c8 20 64 8e 86 38 92 db 1f 01 e5 cf 03 69 78 ec f1 ba eb 1a 91 a4 73 2f 27 af f8 2b 9e e6 a7 b6 5e e8 37 14 9d 89 9f 45 23 fe 76 51 45 44 3f af 23 6b f6 e8 16 20 67 1f 33 64 0a 89 c2 29 9b 7a 93 99 6f d9 Data Ascii: ^U(o5)ygbV8W`OY8DFToF8\|5\Zf3Hu_l_;:i+[&d0JO&l')\|.@8?QLl2.ND~_BRw27wSpVf d8ixs/'+^7E#vQED?#k g3d)zo
2024-12-17 17:20:15 UTC	1378	IN	Data Raw: 30 94 86 96 de 9a 7a c2 8f bf 07 c0 18 5e 09 08 15 4c bf 0d 5a 30 99 7c 68 0d 23 27 1b 66 a1 4a f5 ed f7 3f bc fb f1 a7 9f 7f b1 ef a6 33 3a 47 21 c5 46 81 33 9b a0 43 f4 14 ff 0f 25 eb 56 4e e1 98 b6 cb 00 32 75 61 48 61 c2 dc f5 3c 6e a4 e4 0a 6f 22 41 89 c4 b4 43 34 41 87 0d 66 48 13 e1 53 5b 80 05 bb d7 1a 5c 45 12 f4 10 96 d5 2a ae fe 92 20 0d 1a 22 8c ca 28 85 a7 ff 63 97 fe ac 97 3e 57 4a bf 84 f8 54 16 5e db 7b a4 bc 61 4b 49 4e 3c f3 a7 6d 16 24 e3 37 9b 56 74 d7 fe 0d 65 95 b3 6b 54 56 3d 6d af 60 d7 0b 3f 15 e6 10 df 5a 5f ae 2e 4b db a3 15 32 82 ff c8 3e 3a 3a 31 f3 b7 7f ce ce a0 c7 68 49 97 9e f3 27 1d a1 c3 cc f1 bc 62 d6 8a 29 9b ca 05 c3 61 78 9f f5 3a a2 cd 07 1a 65 7f e5 ec 0d 27 d8 62 0f b6 eb cc 0a 61 03 11 7f bf 62 d1 c1 19 91 70 19 Data Ascii: 0z^LZ0\|h#'fJ?3:G!F3C%VN2uaHa<no"AC4AfHS[\E* "(c>WJT^{aKIN<m$7VtekTV=m`?Z_.K2>::1hI'b)ax:e'babp
2024-12-17 17:20:15 UTC	1378	IN	Data Raw: 72 d2 32 03 57 c7 65 e1 5d af 56 f1 4d 5c 37 3b bb 4c b7 1a ca 0e a4 44 45 ab 72 c8 22 39 c0 ce 5b fd c7 98 0f dc b2 de 63 4a 3d 8e 58 b0 bc a3 5c f3 b0 cc 17 0e cb 4a a0 7f 52 52 61 29 0e 96 15 cd d8 1d 37 37 79 73 22 f9 cc 66 52 de d1 91 3a 33 52 3d 85 35 cd da 9e bc d9 19 d9 2d de ce a3 bd cd 7c 03 a6 45 7a bd 44 6b 24 f1 8f 43 00 85 14 12 88 54 35 2c 4b 89 cd 46 03 f6 07 6d d5 b2 92 87 a4 d4 77 fa 51 91 81 18 e4 6d 33 63 a0 81 c0 37 b2 7d 53 33 df 65 fb 96 0d 69 f8 5b ac 54 94 bd 65 23 95 31 5d a6 be 43 47 b0 e5 c1 43 b7 4c 3a 0e a0 75 38 a8 0f c0 f0 3a 7d 1e 21 e9 cc 1a 69 bc 74 e6 9b 51 0d 25 33 b7 13 84 4c bc 8d a5 9a 69 b0 ee fa 8e 35 77 76 6e be 7c 04 63 5a 9e a2 ce a1 19 f6 b1 38 44 65 74 c8 09 e4 af c3 8e 15 9d 93 d8 8b d6 dc f8 0d ae 7c eb 75 Data Ascii: r2We]VM\7;LDEr"9[cJ=X\JRRa)77ys"fR:3R=5-\|EzDk$CT5,KFmwQm3c7}S3ei[Te#1]CGCL:u8:}!itQ%3Li5wvn\|cZ8Det\|u
2024-12-17 17:20:15 UTC	1378	IN	Data Raw: ef f1 10 f1 01 26 96 76 60 c7 2c 47 69 70 4c d3 8e 43 10 77 39 eb 14 db a4 b9 b2 df b8 f9 f0 de 1d 0e 26 a3 b0 d9 6f e7 12 b2 54 a0 11 91 ca 09 3d 08 7e ea 6e 96 61 32 34 53 4a 59 0f 7b b2 7b d9 b9 17 9f ef 32 a2 c3 dc 00 76 24 1e 90 a1 0d 25 b2 46 2b 38 be 8c 6c f3 2c f3 4f 46 6c 1e 3a e4 87 a8 30 f3 a8 b2 37 a0 4f 0e c4 bb 89 ac fe 61 cf 02 db f5 60 bb 39 d7 22 23 1c 8f 79 6c c8 a8 6d 12 74 f2 0a 10 57 72 4c 93 c0 c8 8e 8d ec 7b fc cf 07 19 2f a2 89 ab 15 c9 4a f5 f2 6f 6f db cc 5b 08 b0 f5 7a aa 81 8d 19 11 05 da 35 ef dc 6a e9 99 c1 a6 95 92 f7 70 48 21 2c af 28 1e ee bc f9 bc 66 6f a0 6e 3e db 4c bf 4d 35 6e ff 49 3f d6 2d 83 5a 14 8e 70 53 79 89 5d b1 6b 06 dc 28 8e c2 ac 83 90 e7 b8 4a 84 3c fd e5 f5 c9 49 be 78 c7 08 11 65 db 21 93 45 e2 00 98 02 Data Ascii: &v`,GipLCw9&oT=~na24SJY{{2v$%F+8l,OFl:07Oa`9"#ylmtWrL{/Joo[z5jpH!,(fon>LM5nI?-ZpSy]k(J<Ixe!E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.16	49988	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:14 UTC	385	OUT	GET /age-verification/assets/age-verification.png HTTP/1.1 Host: ally.quandral.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:15 UTC	904	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:15 GMT Content-Type: image/png Content-Length: 9839 Connection: close Last-Modified: Wed, 15 May 2024 19:37:59 GMT ETag: "66450f17-266f" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5349 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mNR%2BLlo6fVEZMDmjOudqsuNQyKgfKVy5h8TiIxjta6j6hu8c2ShwdwpSg%2F4aKEKmszLzG%2BxaXdudjrVenCcRwYQ1igUFTgrk7K4DMPJ4V08Jygem2%2F6QlQXXyEAU0Eabo%2BPi2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38952e78b9199d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2244&min_rtt=1877&rtt_var=966&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=963&delivery_rate=1555673&cwnd=223&unsent_bytes=0&cid=417d139f7a572733&ts=466&x=0"
2024-12-17 17:20:15 UTC	465	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 02 00 00 01 c6 30 4e 53 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR0NStEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-12-17 17:20:15 UTC	1369	IN	Data Raw: 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 62 61 37 64 61 36 35 63 2d 31 39 36 63 2d 34 36 36 35 2d 39 31 36 63 2d 34 63 30 31 64 39 33 31 33 37 64 63 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 38 32 31 36 36 45 36 39 43 39 42 31 31 45 39 41 44 45 44 43 33 35 35 34 46 43 45 37 32 44 44 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 38 32 31 36 36 45 35 39 43 39 42 31 31 45 39 41 44 45 44 43 33 35 35 34 46 43 45 37 32 44 44 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f Data Ascii: " xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ba7da65c-196c-4665-916c-4c01d93137dc" xmpMM:DocumentID="xmp.did:982166E69C9B11E9ADEDC3554FCE72DD" xmpMM:InstanceID="xmp.iid:982166E59C9B11E9ADEDC3554FCE72DD" xmp:CreatorTool="Ado
2024-12-17 17:20:15 UTC	1369	IN	Data Raw: f5 09 64 e2 02 d8 23 84 3b 17 5a 39 33 32 13 69 2f be d1 4e 62 42 1a d8 89 84 75 f3 20 16 33 c2 9d 0e ef b2 fd f9 f3 67 e1 8d c4 ff 0c ff f0 74 8c f7 cd f3 f8 f6 5e 09 a8 9f b6 21 8d 36 b3 c4 00 9e 54 01 7a 00 e8 56 a0 d3 6b 67 2c 41 9d 5e b0 fb f3 fb b7 be d7 51 60 39 81 e6 62 05 0e eb 49 2d da 4c 4c ac c4 17 21 e4 87 34 c1 49 09 78 6f 18 a3 dc fb 0f 11 67 04 03 20 23 20 e9 18 0d 1b 4c c4 f7 aa 89 01 c4 74 72 a9 e9 68 0a a7 7f e8 da 34 85 03 62 66 da 88 0c 69 ac 49 88 9a 69 9a 85 99 71 d1 44 7d 38 f7 d3 a7 4f 94 07 5b 46 d5 3d da 86 f4 9f bf ff a3 72 2e 0c 78 83 89 89 61 08 82 11 e0 68 ac 53 88 70 71 f8 3c 24 04 40 b8 d3 3b 2c d0 c4 21 82 74 72 f4 9a d9 8e 6b 36 de 02 ba 0f 32 2b 0a 71 56 76 9c 0a 90 e1 18 bc 0d 28 18 97 7f 04 48 c2 07 9d 64 65 f8 80 64 Data Ascii: d#;Z932i/NbBu 3gt^!6TzVkg,A^Q`9bI-LL!4Ixog # Ltrh4bfiIiqD}8O[F=r.xahSpq<$@;,!trk62+qVv(Hded
2024-12-17 17:20:15 UTC	1369	IN	Data Raw: d9 a2 81 58 d1 f1 f1 3a ec a0 b5 ed c5 a2 20 08 a1 95 cd bb 0b 4c 63 13 dd 79 c5 c6 af 10 ee a0 7f c6 b8 ac 59 f6 59 df 0c 30 d3 34 65 51 e4 f9 f0 0d e7 cb 9f a6 41 b9 bc 68 91 84 fb fe 86 7d 82 10 54 1f cb 34 01 8f c6 c7 f7 f9 a6 f9 ce 87 67 13 c0 1c 0e 87 03 81 c0 27 7d 4f a7 81 78 ed c2 37 21 21 e9 e4 5b cb af 3a 96 b9 fe 38 5c a3 63 0b b2 eb d7 18 df 47 93 a1 0c 37 3e 00 dd 3d b8 23 43 c4 f2 b6 fb 54 d7 62 b8 3d ea 74 9c 36 40 a7 b4 5d 07 da fd d7 63 fd 81 e2 e9 e6 0d ce fa f4 40 43 db 7c 26 70 24 73 c4 b2 63 0a b9 f2 ae 23 73 53 04 4d f9 6f 8c 40 8e 42 08 35 de b6 bc b7 7d 38 a0 0c 4a 12 f8 f0 9d d5 85 45 65 d7 a5 4c 14 77 87 f4 52 27 84 58 ea 65 e7 0f e8 64 ee 89 14 50 93 e1 56 50 66 c6 23 a7 58 56 df ef 72 54 39 8f 4b 99 28 b4 11 70 23 79 da 8e 81 Data Ascii: X: LcyYY04eQAh}T4g'}Ox7!![:8\cG7>=#CTb=t6@]c@C\|&p$sc#sSMo@B5}8JEeLwR'XedPVPf#XVrT9K(p#y
2024-12-17 17:20:15 UTC	1369	IN	Data Raw: f3 64 14 b9 fe f6 2e 90 29 f3 8c ed 36 8b d5 fa b0 ff 84 bd e1 2d 8a 6b 6d 70 64 5d b2 be 28 92 e3 94 62 67 71 92 07 17 65 9b cd 6a 56 69 8a 58 a6 20 4f 34 70 52 6a 69 81 f6 d8 fa 51 9c 2c 84 93 c8 c5 63 cd 05 8d c7 70 60 ae 6c dc ea a6 e7 94 99 b4 11 a5 23 66 6d b2 59 4c 36 bb 85 cf 16 27 36 e8 80 f7 cb 36 8b aa fe fd 3e 63 8f 79 d1 5a a6 b0 0e fb 68 2b 8c 06 b8 6c 8a c4 9a 0b 96 18 83 cf 48 96 34 75 b7 d7 bb 50 aa cc 9d 06 a6 c3 98 b0 db 45 03 1d e8 f1 32 73 1a fd 27 ee f1 ae b9 90 94 ac 4d 7c 26 6f d4 76 51 8c 5a 2e 1e 65 85 9c 3b f0 db 10 4e fc 28 d5 6c 36 eb 74 ba f5 d7 d6 79 d1 f6 c3 5e 3b 42 e4 aa 5f ff fd f4 ae fe 3c ac 26 4c 48 3d b9 65 a4 44 2a f7 79 b0 c7 89 67 cb 87 b6 25 23 50 b6 f1 19 f6 2c a7 f3 37 7b 4d 19 0a 8c 32 a8 51 54 11 f8 7a 31 72 Data Ascii: d.)6-kmpd](bgqejViX O4pRjiQ,cp`l#fmYL6'66>cyZh+lH4uPE2s'M\|&ovQZ.e;N(l6ty^;B_<&LH=eD*yg%#P,7{M2QTz1r
2024-12-17 17:20:15 UTC	1369	IN	Data Raw: 05 68 05 36 c8 ca 60 c8 d0 0a ca f7 8b f9 7f 26 4c e8 1d 99 96 71 67 eb ce ff 6e df d1 0b 96 0e f5 99 bd c3 99 83 32 3b 04 94 db c7 85 c3 77 80 73 53 3f 4c a9 56 2b 98 69 0b 15 d8 99 60 5b aa 0c 97 3a 0d 1a 3a 06 94 a7 ce 3d 39 63 4a 57 d6 7f 30 ba 69 9f 9c 5e 34 37 3e a6 95 86 19 2c 00 3a 91 91 ef 6c b9 40 8d 75 7b e8 a0 98 25 ab af ee dd 34 d8 60 a8 fc ec 9b 7f b6 af 1d 0c 1b a1 e1 3b e3 3b 9e 3c c3 bf 1e 03 6a ce 87 63 ab c0 71 ec e8 38 38 4a ef f8 66 b0 3a 7a e8 0b 50 66 04 d9 59 5c b5 21 eb f0 a9 fb f5 d5 72 f6 1d 60 b7 cb d7 5c ca ca d6 b1 ef 00 3b f9 e2 e3 1e 70 38 38 8a 18 4c 44 79 95 f5 c3 b2 fe 3f 6f b9 d2 b5 a3 96 19 0e f4 7c c5 ea 0b 50 86 e5 98 11 ad 59 9d 25 0b 5f a9 d2 6a c1 d2 8b d0 e7 c6 0d af 56 18 2b 61 35 54 a5 80 61 01 1f a1 c2 8e 5d Data Ascii: h6`&Lqgn2;wsS?LV+i`[::=9cJW0i^47>,:l@u{%4`;;<jcq88Jf:zPfY\!r`\;p88LDy?o\|PY%_jV+a5Ta]
2024-12-17 17:20:15 UTC	1369	IN	Data Raw: 29 47 ca 76 7c 6d fc 57 50 b1 43 1f 2e 6a 33 a7 b1 ac c0 28 21 f7 e0 15 67 33 44 e5 7f 6c 9a c3 b2 f4 5c df 92 12 67 c8 33 dc 6e 97 cb 75 b8 66 53 e4 a8 4c c8 7d e6 c8 fe f7 97 fa 18 96 f1 91 ab 8c ca ec e5 88 58 d6 af 9e 4a 9f cd 1e 3f 57 cd 07 ed 1e 4b e4 a8 4c 50 eb ed 23 26 5f bf 5d 32 5e ba 30 49 ae 99 47 b0 d4 ca 13 7a 58 46 3c 65 a7 82 c4 69 48 39 ca db ce 46 94 ca 77 97 cd a9 ac b8 90 e3 8b e1 22 3f 48 f3 31 51 89 c7 eb bd 56 5e 75 b3 b2 c6 64 6e b6 3b 5d 6a 55 6c 5a 72 e2 e8 61 19 39 59 99 1c cb f6 bf d3 20 34 bc 36 bb aa 22 4d 65 42 52 86 d9 7f e3 93 2f f2 fb ee a2 4e e8 ba c6 e6 82 43 c7 45 f1 9e 4b 15 e0 74 45 ad 09 86 83 67 8a 79 8e 5b f2 44 ee 90 d4 94 fe d7 5a f4 39 ba 3b f4 f3 49 f3 b3 5e 2a 2c df 62 17 9b fa 4d 65 02 cb 79 bb be 33 15 85 Data Ascii: )Gv\|mWPC.j3(!g3Dl\g3nufSL}XJ?WKLP#&_]2^0IGzXF<eiH9Fw"?H1QV^udn;]jUlZra9Y 46"MeBR/NCEKtEgy[DZ9;I^*,bMey3
2024-12-17 17:20:15 UTC	1160	IN	Data Raw: 06 7b 39 82 c0 5e 8e c8 45 14 c5 07 3e c6 87 bd 1c 3d dd a5 18 a1 07 8c fa 7a 73 48 59 23 f6 72 84 4c 9d c9 8c 42 0f 18 fb 0a eb 8c 46 a3 d3 e9 7c 60 49 ec e5 78 20 b0 1b 4d 26 d3 b1 b3 16 6a b6 48 79 29 c7 8e 82 1a 9e 63 16 ce 95 6e e8 81 dc 03 7c 55 a9 54 1c c7 75 65 2d d1 3a c4 ef c7 a0 1e f2 40 97 cb e5 b2 5a ad 30 02 53 8e 9e 69 dd f5 5f 7a 22 b4 f2 9e 29 ec 68 88 1c f3 dc d2 8c 85 73 52 7a 14 7c 21 59 b4 db ed a8 b5 df ec 98 13 45 ad bb f6 98 dd 6e aa f6 86 52 85 46 10 4a 72 68 04 41 a1 11 14 1a 41 50 68 04 41 a1 11 04 85 46 10 14 1a 41 a1 11 04 85 46 10 14 1a 41 50 68 04 41 a1 11 14 1a 41 14 81 f2 ee 87 4e 49 14 26 8f 93 be 7c f1 fc 15 4b 63 b3 3b ec f5 8f 19 a1 1d 9e 21 fd 2e f2 c1 93 0d 9d ce 6a 69 73 17 95 f4 f8 8e f8 c2 02 e9 97 34 56 bf 71 4a Data Ascii: {9^E>=zsHY#rLBF\|`Ix M&jHy)cn\|UTue-:@Z0Si_z")hsRz\|!YEnRFJrhAAPhAFAFAPhAANI&\|Kc;!.jis4VqJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.16	49987	108.158.75.53	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:15 UTC	517	OUT	GET /v3/ HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://get-luxsheets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:16 UTC	714	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 708136 Connection: close Date: Tue, 17 Dec 2024 17:20:16 GMT Last-Modified: Mon, 16 Dec 2024 21:48:41 GMT Etag: "ca1b515bc2c70af44016acc4baeb1ee7" Cache-Control: max-age=60 Accept-Ranges: bytes Server: Cloudfront Via: 1.1 5458c60b7ed4b21525f22a590d80f730.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Access-Control-Allow-Origin: * Timing-Allow-Origin: * Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Cache: Miss from cloudfront X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: KpM_6x7EZB-y8RMzB6tXw3jgYASuCEZFXEy_BkM81AHU6PgzjYBpDw==
2024-12-17 17:20:16 UTC	15670	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 6f 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6f 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 74 5d 28 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 3d 7b 37 32 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 6c 2e 6c 65 6e 67 74 68 7c 7c 28 61 28 29 2c 21 30 29 2c 6c 5b 6c 2e 6c 65 6e 67 74 68 5d 3d 65 7d 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function
2024-12-17 17:20:16 UTC	320	IN	Data Raw: 6f 75 74 20 73 65 73 73 69 6f 6e 73 20 77 69 74 68 20 75 69 5f 6d 6f 64 65 3d 65 6d 62 65 64 64 65 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 65 6d 62 65 64 64 65 64 20 43 68 65 63 6b 6f 75 74 2e 22 29 3b 69 66 28 74 26 26 2d 31 3d 3d 3d 5b 22 68 6f 73 74 65 64 22 2c 22 65 6d 62 65 64 64 65 64 22 5d 2e 69 6e 64 65 78 4f 66 28 6e 29 29 74 68 72 6f 77 20 6e 65 77 20 72 2e 4e 6f 28 22 49 6e 76 61 6c 69 64 20 75 69 5f 6d 6f 64 65 2e 22 29 7d 7d 2c 38 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 6d 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 72 3d 5b 22 73 68 6f 70 70 69 6e 67 22 2c 22 70 72 69 63 65 22 2c 22 72 65 74 75 72 6e 22 Data Ascii: out sessions with ui_mode=embedded can be used with embedded Checkout.");if(t&&-1===["hosted","embedded"].indexOf(n))throw new r.No("Invalid ui_mode.")}},8229:function(e,t,n){"use strict";n.d(t,{mY:function(){return r}});var r=["shopping","price","return"
2024-12-17 17:20:16 UTC	695	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 5a 56 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 2c 65 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 67 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 6d 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 6d 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 71 46 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 74 30 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 74 58 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 75 51 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 31 38 37 33 29 2c 6f 3d 28 30 2c 72 2e 6d 43 29 Data Ascii: (){return d},ZV:function(){return _},ef:function(){return p},gC:function(){return c},mZ:function(){return o},mm:function(){return s},qF:function(){return a},t0:function(){return l},tX:function(){return u},uQ:function(){return f}});var r=n(1873),o=(0,r.mC)
2024-12-17 17:20:16 UTC	16384	IN	Data Raw: 29 28 22 66 75 6c 6c 22 2c 22 73 70 6c 69 74 22 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 29 29 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 6c 69 6e 65 31 3a 28 30 2c 72 2e 6a 74 29 28 72 2e 5a 5f 29 2c 6c 69 6e 65 32 3a 28 30 2c 72 2e 6a 74 29 28 72 2e 5a 5f 29 2c 63 69 74 79 3a 28 30 2c 72 2e 6a 74 29 28 72 2e 5a 5f 29 2c 73 74 61 74 65 3a 28 30 2c 72 2e 6a 74 29 28 72 2e 5a 5f 29 2c 63 6f 75 6e 74 72 79 3a 28 30 2c 72 2e 6a 74 29 28 72 2e 5a 5f 29 2c 70 6f 73 74 61 6c 5f 63 6f 64 65 3a 28 30 2c 72 2e 6a 74 29 28 72 2e 5a 5f 29 7d 29 2c 66 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 6e 61 6d 65 3a 28 30 2c 72 2e 6a 74 29 28 72 2e 5a 5f 29 2c 61 64 64 72 65 73 73 3a 28 30 2c 72 2e 6a 74 29 28 28 30 2c 72 2e 6d 43 29 28 6d 29 29 2c Data Ascii: )("full","split","organization"))}),m=Object.freeze({line1:(0,r.jt)(r.Z_),line2:(0,r.jt)(r.Z_),city:(0,r.jt)(r.Z_),state:(0,r.jt)(r.Z_),country:(0,r.jt)(r.Z_),postal_code:(0,r.jt)(r.Z_)}),f=Object.freeze({name:(0,r.jt)(r.Z_),address:(0,r.jt)((0,r.mC)(m)),
2024-12-17 17:20:16 UTC	16384	IN	Data Raw: 6f 5f 70 61 79 22 2c 75 29 2c 28 30 2c 6f 2e 5a 29 28 72 2c 22 61 6d 61 7a 6f 6e 5f 70 61 79 22 2c 73 29 2c 72 29 7d 2c 33 35 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 72 34 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 7d 2c 6c 4b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 65 7d 2c 50 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 65 7d 2c 6c 48 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 65 7d 2c 6f 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 65 7d 2c 61 31 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 7d 2c 75 55 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 65 7d 7d Data Ascii: o_pay",u),(0,o.Z)(r,"amazon_pay",s),r)},3514:function(e,t,n){"use strict";n.d(t,{r4:function(){return H},lK:function(){return se},PY:function(){return ce},lH:function(){return ue},oN:function(){return te},a1:function(){return ne},uU:function(){return re}}
2024-12-17 17:20:16 UTC	12778	IN	Data Raw: 41 52 44 2c 73 2e 72 4d 2e 56 49 53 41 2c 73 2e 72 4d 2e 56 49 53 41 2c 73 2e 72 4d 2e 4d 41 53 54 45 52 43 41 52 44 2c 73 2e 72 4d 2e 55 4e 49 4f 4e 50 41 59 2c 73 2e 72 4d 2e 56 49 53 41 2c 73 2e 72 4d 2e 4d 41 53 54 45 52 43 41 52 44 2c 73 2e 72 4d 2e 4d 41 53 54 45 52 43 41 52 44 2c 73 2e 72 4d 2e 56 49 53 41 2c 73 2e 72 4d 2e 56 49 53 41 2c 73 2e 72 4d 2e 4d 41 53 54 45 52 43 41 52 44 2c 73 2e 72 4d 2e 41 4d 45 58 2c 73 2e 72 4d 2e 56 49 53 41 2c 73 2e 72 4d 2e 4d 41 53 54 45 52 43 41 52 44 2c 73 2e 72 4d 2e 56 49 53 41 2c 73 2e 72 4d 2e 4d 41 53 54 45 52 43 41 52 44 2c 73 2e 72 4d 2e 41 4d 45 58 2c 73 2e 72 4d 2e 4d 41 53 54 45 52 43 41 52 44 2c 73 2e 72 4d 2e 56 49 53 41 2c 73 2e 72 4d 2e 41 4d 45 58 2c 73 2e 72 4d 2e 56 49 53 41 2c 73 2e 72 4d 2e Data Ascii: ARD,s.rM.VISA,s.rM.VISA,s.rM.MASTERCARD,s.rM.UNIONPAY,s.rM.VISA,s.rM.MASTERCARD,s.rM.MASTERCARD,s.rM.VISA,s.rM.VISA,s.rM.MASTERCARD,s.rM.AMEX,s.rM.VISA,s.rM.MASTERCARD,s.rM.VISA,s.rM.MASTERCARD,s.rM.AMEX,s.rM.MASTERCARD,s.rM.VISA,s.rM.AMEX,s.rM.VISA,s.rM.
2024-12-17 17:20:16 UTC	16384	IN	Data Raw: 3a 76 6f 69 64 20 30 2c 6e 3d 65 2e 77 61 6c 6c 65 74 73 3b 69 66 28 21 6e 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 72 3d 28 30 2c 63 2e 6d 43 29 28 7b 77 61 6c 6c 65 74 73 3a 69 2e 6e 34 7d 29 2c 6f 3d 28 30 2c 63 2e 47 75 29 28 72 2c 7b 77 61 6c 6c 65 74 73 3a 6e 7d 2c 74 29 2c 61 3d 6f 2e 77 61 72 6e 69 6e 67 73 3b 72 65 74 75 72 6e 20 61 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3c 3d 74 3f 65 3a 22 22 2e 63 6f 6e 63 61 74 28 65 2e 73 6c 69 63 65 28 30 2c 74 29 2e 74 72 69 6d 28 29 2c 22 2e 2e 2e 22 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 Data Ascii: :void 0,n=e.wallets;if(!n\|\|"string"==typeof n)return[];var r=(0,c.mC)({wallets:i.n4}),o=(0,c.Gu)(r,{wallets:n},t),a=o.warnings;return a},y=function(e,t){return e.length<=t?e:"".concat(e.slice(0,t).trim(),"...")},v=function(){var e,t,n,o=arguments.length>0
2024-12-17 17:20:16 UTC	16384	IN	Data Raw: 2e 64 6f 6d 45 6c 65 6d 65 6e 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 74 68 69 73 2e 5f 72 75 6e 4f 6e 48 69 64 65 3d 5b 5d 2c 74 68 69 73 2e 6d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 61 2e 58 71 29 28 29 3b 6e 2e 64 6f 6d 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 65 2e 63 6f 6e 74 61 69 6e 73 28 6e 2e 64 6f 6d 45 6c 65 6d 65 6e 74 29 7c 7c 28 6e 2e 5f 61 70 70 65 6e 64 45 6c 65 6d 65 6e 74 3f 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 2e 64 6f 6d 45 6c 65 6d 65 6e 74 29 3a 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2e 64 6f 6d 45 6c 65 6d 65 6e 74 2c 65 2e 66 69 72 73 74 43 68 69 6c 64 29 29 7d 2c 74 68 69 73 2e Data Ascii: .domElement=document.createElement("div"),this._runOnHide=[],this.mount=function(){var e=(0,a.Xq)();n.domElement.style.display="none",e.contains(n.domElement)\|\|(n._appendElement?e.appendChild(n.domElement):e.insertBefore(n.domElement,e.firstChild))},this.
2024-12-17 17:20:16 UTC	2048	IN	Data Raw: 6f 6c 69 63 79 7c 7c 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 72 26 26 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 73 29 7d 29 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 72 61 6d 65 62 6f 72 64 65 72 22 2c 22 30 22 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 22 2c 22 74 72 75 65 22 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 6e 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: olicy\|\|"no-referrer",s=document.createElement("iframe");r&&s.addEventListener("load",(function(){r(s)})),s.setAttribute("frameborder","0"),s.setAttribute("allowTransparency","true"),s.setAttribute("scrolling","no"),s.setAttribute("name",n),s.setAttribute(
2024-12-17 17:20:16 UTC	16384	IN	Data Raw: 7d 28 29 3b 6e 28 36 32 37 34 29 2e 50 72 6f 6d 69 73 65 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 69 6e 64 65 78 4f 66 28 22 64 65 62 75 67 4d 6f 64 65 3d 74 72 75 65 22 29 2c 6e 28 36 32 37 34 29 2e 50 72 6f 6d 69 73 65 7d 2c 34 37 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 75 52 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 7b 61 63 63 65 6c 3a 21 30 2c 61 6d 65 78 3a 21 30 2c 63 61 72 6e 65 74 3a 21 30 2c 63 61 72 74 65 73 5f 62 61 6e 63 61 69 72 65 73 3a 21 30 2c 64 69 6e 65 72 73 3a 21 30 2c 64 69 73 63 6f 76 65 72 3a 21 30 2c 65 66 74 70 6f 73 5f 61 75 3a 21 30 2c 65 6c 6f Data Ascii: }();n(6274).Promise,window.location.hash.indexOf("debugMode=true"),n(6274).Promise},4775:function(e,t,n){"use strict";n.d(t,{uR:function(){return r}});var r=Object.keys({accel:!0,amex:!0,carnet:!0,cartes_bancaires:!0,diners:!0,discover:!0,eftpos_au:!0,elo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.16	49991	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:15 UTC	1286	OUT	GET /age-verification?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185 HTTP/1.1 Host: won.quandral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:15 UTC	1199	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 17 Dec 2024 17:20:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: http://won.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EPzF3YF8WF7WmR0%2F5O72Ruw6Xns0Fh%2F5L%2B4BqY3%2Fw5TKntzoS91Lh%2FYNFrSl1ysiCkpw%2BMNnzV%2F6D%2FA1QCph1dQ46Vld4ig8h4rBPEfJYVTh75URrXIgHkVx%2FIDSceOw8gFS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38952f380cc34a-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 17:20:15 UTC	216	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 35 39 37 26 6d 69 6e 5f 72 74 74 3d 31 35 32 37 26 72 74 74 5f 76 61 72 3d 36 32 32 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 38 38 36 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 39 31 32 32 34 36 26 63 77 6e 64 3d 31 35 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 30 39 38 63 62 38 36 35 64 37 34 64 63 36 33 30 26 74 73 3d 34 37 38 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1597&min_rtt=1527&rtt_var=622&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1886&delivery_rate=1912246&cwnd=155&unsent_bytes=0&cid=098cb865d74dc630&ts=478&x=0"
2024-12-17 17:20:15 UTC	200	IN	Data Raw: 63 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: c2<html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>
2024-12-17 17:20:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.16	49992	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:15 UTC	1135	OUT	GET /favicon.ico HTTP/1.1 Host: ally.quandral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:15 UTC	818	IN	HTTP/1.1 404 Not Found Date: Tue, 17 Dec 2024 17:20:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mSDQG7RQhVeCGTjCX8C1akihv3dA03qQKNPMZp%2BoLTZFJXwGXv%2FDTLqSMuesgF2NsmsIMT9ciJ9%2BmEAHviSsToQgsJK41KcIb89zRLRUURg%2BQxSMeY2ZUEE0vfvtFBt89favKw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f38952fec5f0f49-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1511&min_rtt=1495&rtt_var=593&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1713&delivery_rate=1798029&cwnd=215&unsent_bytes=0&cid=d4a8bad007e1a73a&ts=501&x=0"
2024-12-17 17:20:15 UTC	551	IN	Data Raw: 32 34 34 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 Data Ascii: 244<html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->...
2024-12-17 17:20:15 UTC	36	IN	Data Raw: 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 0d 0a Data Ascii: d Chrome friendly error page -->
2024-12-17 17:20:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.16	49993	172.67.167.163	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:15 UTC	393	OUT	GET /scripts/push/script/57dkr26ew8?url=ally.quandral.com HTTP/1.1 Host: trk-synovetra.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:15 UTC	1346	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:15 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: 0 Cache-Control: max-age=14400, must-revalidate X-XSS-Protection: 1; mode=block Pragma: no-cache X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 5349 Last-Modified: Tue, 17 Dec 2024 15:51:06 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AU3WET9RV%2BgEfjACMLyMPF%2FTluGJBWu8Asgk58bpJD3YBFTZCmUan7qs7LWy%2F42ST9M2MEJAKvW9skMtnc4G1ZH7YContvg5L90WFX7JOT31pAFKm8aiOpWtgs2qyN5Ve4EmNw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-17 17:20:15 UTC	275	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 33 38 39 35 33 30 63 61 31 31 64 65 39 38 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 35 35 26 6d 69 6e 5f 72 74 74 3d 31 34 34 32 26 72 74 74 5f 76 61 72 3d 35 36 37 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 36 26 72 65 63 76 5f 62 79 74 65 73 3d 39 37 31 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 38 38 35 30 38 37 26 63 77 6e 64 3d 32 31 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 36 62 33 36 61 62 61 39 32 63 64 35 Data Ascii: CF-RAY: 8f389530ca11de98-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1455&min_rtt=1442&rtt_var=567&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=971&delivery_rate=1885087&cwnd=212&unsent_bytes=0&cid=6b36aba92cd5
2024-12-17 17:20:15 UTC	1369	IN	Data Raw: 31 66 63 63 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 73 6d 50 75 73 68 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 6c 69 63 4b 65 79 3d 22 42 50 58 62 6f 59 45 4c 70 35 53 7a 63 50 41 58 32 38 52 48 68 32 79 43 64 4c 65 78 50 6e 32 30 31 63 6c 58 49 31 5a 54 56 6a 42 7a 41 41 36 78 70 78 32 75 67 44 6b 37 72 56 69 74 76 35 5f 42 2d 6f 4e 47 71 70 6d 58 43 70 2d 45 70 59 72 48 35 34 52 71 64 6a 49 3d 22 2c 73 6d 50 75 73 68 53 69 74 65 49 64 3d 22 6f 37 67 39 31 7a 6b 6e 64 33 22 2c 73 6d 43 6c 69 65 6e 74 49 64 3d 22 35 37 64 6b 72 32 36 65 77 38 22 2c 73 65 72 76 69 63 65 57 6f 72 6b 65 72 3d 22 2f 73 65 72 76 69 63 65 2d 77 6f 72 6b 65 72 2e 6a 73 22 3b 6c 65 74 20 73 6d 50 75 73 68 44 6f 6d 61 69 6e 3d 22 70 75 73 Data Ascii: 1fcc'use strict';const smPushApplicationServerPublicKey="BPXboYELp5SzcPAX28RHh2yCdLexPn201clXI1ZTVjBzAA6xpx2ugDk7rVitv5_B-oNGqpmXCp-EpYrH54RqdjI=",smPushSiteId="o7g91zknd3",smClientId="57dkr26ew8",serviceWorker="/service-worker.js";let smPushDomain="pus
2024-12-17 17:20:15 UTC	1369	IN	Data Raw: 2e 73 6f 75 72 63 65 4f 6e 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 6f 6e 65 2c 62 2e 73 6f 75 72 63 65 5f 6f 6e 65 29 2c 61 2e 73 6f 75 72 63 65 54 77 6f 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 74 77 6f 2c 62 2e 73 6f 75 72 63 65 5f 74 77 6f 29 2c 61 2e 73 6f 75 72 63 65 54 68 72 65 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 2c 62 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 29 2c 61 2e 73 6f 75 72 63 65 46 6f 75 72 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 66 6f 75 72 2c 62 2e 73 6f 75 72 63 65 5f 66 6f 75 72 29 2c 61 2e 73 6f 75 72 63 65 46 69 76 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 Data Ascii: .sourceOne=setIfNull(utmObj.source_one,b.source_one),a.sourceTwo=setIfNull(utmObj.source_two,b.source_two),a.sourceThree=setIfNull(utmObj.source_three,b.source_three),a.sourceFour=setIfNull(utmObj.source_four,b.source_four),a.sourceFive=setIfNull(utmObj.s
2024-12-17 17:20:15 UTC	1369	IN	Data Raw: 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 2c 22 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 2c 76 65 72 73 69 6f 6e 29 2c 61 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 73 75 62 73 63 72 69 62 65 28 7b 75 73 65 72 56 69 73 69 62 6c 65 4f 6e 6c 79 3a 21 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 3a 62 7d 29 7d 22 64 65 6e 69 65 64 22 3d 3d 3d 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 70 65 72 6d 69 73 73 69 6f 6e 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 64 65 6e 69 65 64 5f 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 64 65 6e 69 65 64 5f 69 6d 70 72 65 73 73 69 6f 6e 22 2c 76 65 72 73 69 6f 6e 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 Data Ascii: subscribe_prompt","subscribe_prompt",version),a.pushManager.subscribe({userVisibleOnly:!0,applicationServerKey:b})}"denied"===Notification.permission&&logPushEvent("denied_impression","denied_impression",version)}).catch(function(a){console.error("Service
2024-12-17 17:20:15 UTC	1369	IN	Data Raw: 2e 6c 6f 67 28 22 74 61 62 6f 6f 6c 61 55 72 6c 20 66 65 74 63 68 20 65 72 72 6f 72 22 2c 61 29 2c 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 74 61 62 6f 6f 6c 61 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 20 57 6f 72 6b 65 72 20 45 72 72 6f 72 22 2c 61 29 2c 70 75 73 68 4c 6f 67 67 69 6e 67 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 73 75 62 73 63 72 69 62 69 6e 67 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 75 73 68 5f 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 69 73 65 28 29 7b 72 65 74 75 72 6e 20 6e 61 76 69 67 61 74 Data Ascii: .log("taboolaUrl fetch error",a),logPushEvent("taboola_request_error",a,version)})})}).catch(function(a){console.error("Service Worker Error",a),pushLogging&&logPushEvent("error_subscribing",a,version)})}})}function push_subscribe_promise(){return navigat
2024-12-17 17:20:15 UTC	1369	IN	Data Raw: 68 4c 6f 67 67 69 6e 67 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 73 75 62 73 63 72 69 62 69 6e 67 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 49 66 4e 75 6c 6c 28 63 2c 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 6e 75 6c 6c 3d 3d 3d 63 7c 7c 22 22 3d 3d 3d 63 3f 61 3a 63 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 61 2c 62 2c 63 29 7b 6c 65 74 20 64 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 3b 22 7b 7d 22 21 3d 3d 64 26 26 28 62 3d 64 29 3b 6c 65 74 20 65 3d 7b 7d 3b 70 75 6c 6c 55 72 6c 50 61 72 61 6d 73 28 65 29 2c 65 2e 6d 65 73 73 61 67 65 3d 62 2c 65 2e 76 65 72 73 69 6f 6e 3d 63 2c 65 2e 65 76 65 6e 74 3d 22 70 5f 22 2b 61 3b 66 Data Ascii: hLogging&&logPushEvent("error_subscribing",a,version)})}function setIfNull(c,a){return void 0===c\|\|null===c\|\|""===c?a:c}function logPushEvent(a,b,c){let d=JSON.stringify(b);"{}"!==d&&(b=d);let e={};pullUrlParams(e),e.message=b,e.version=c,e.event="p_"+a;f
2024-12-17 17:20:15 UTC	1303	IN	Data Raw: 76 69 63 65 57 6f 72 6b 65 72 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 22 50 75 73 68 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 28 73 65 73 73 69 6f 6e 49 64 3d 61 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 55 74 6d 28 61 29 7b 22 73 65 72 76 69 63 65 57 6f 72 6b 65 72 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 22 50 75 73 68 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 6e 75 6c 6c 21 3d 61 26 26 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 75 74 6d 4f 62 6a 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 53 65 73 73 69 6f 6e 49 64 28 29 7b 72 65 74 75 72 6e 20 73 65 73 73 69 6f 6e 49 64 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 72 6c 56 61 72 73 28 29 7b 6c 65 74 20 61 3d 7b 7d 2c 62 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 Data Ascii: viceWorker"in navigator&&"PushManager"in window&&(sessionId=a)}function setUtm(a){"serviceWorker"in navigator&&"PushManager"in window&&null!=a&&Object.assign(utmObj,a)}function getSessionId(){return sessionId}function getUrlVars(){let a={},b=window.locati
2024-12-17 17:20:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.16	49990	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:15 UTC	1246	OUT	GET /age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185 HTTP/1.1 Host: won.quandral.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:16 UTC	839	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 25 Jul 2024 20:36:31 GMT cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e4eQHsfmDB02FkbTmyIJVytG8d4N1mnfJEK64PYJ9RaUh%2FEd37UKeIw1akesVVUtfnETRfNPyGR0xZMUrJ7wR0%2F8O89VhARJ59I6G6AGe8M4ls4ezojWG5FC3twbCN4Ub6kL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389532fa0619cb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1897&min_rtt=1878&rtt_var=743&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1846&delivery_rate=1435594&cwnd=247&unsent_bytes=0&cid=39f7e5a249296f3e&ts=1159&x=0"
2024-12-17 17:20:16 UTC	530	IN	Data Raw: 39 36 37 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 09 3c 74 69 74 6c 65 3e 41 67 65 20 56 65 72 69 66 69 63 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0d 0a 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 61 72 63 68 69 Data Ascii: 967<!doctype html><html lang="en"><head> <meta charset="utf-8"><title>Age Verification</title><meta content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no" name="viewport"><meta content="noindex, nofollow, noarchi
2024-12-17 17:20:16 UTC	1369	IN	Data Raw: 63 72 69 70 74 20 73 72 63 3d 22 2e 2e 2f 62 61 63 6b 62 75 74 74 6f 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 2d 2d 3e 0d 0a 09 0d 0a 09 3c 21 2d 2d 0d 0a 09 3c 73 63 72 69 70 74 3e 0d 0a 09 09 77 69 6e 64 6f 77 2e 70 75 73 68 53 63 72 69 70 74 4c 6f 61 64 65 64 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 20 20 2f 2f 20 4c 6f 61 64 20 70 65 72 6d 69 73 73 69 6f 6e 73 2d 72 65 64 69 72 65 63 74 2d 73 63 72 69 70 74 2e 6a 73 20 6f 6e 6c 79 20 61 66 74 65 72 20 70 75 73 68 2d 73 63 72 69 70 74 2e 6a 73 20 68 61 73 20 66 69 6e 69 73 68 65 64 20 65 78 65 63 75 74 69 6e 67 0d 0a 09 09 20 20 76 61 72 20 73 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 Data Ascii: cript src="../backbutton.js"></script>-->...<script>window.pushScriptLoadedCallback = function() { // Load permissions-redirect-script.js only after push-script.js has finished executing var script = document.createElement('script'
2024-12-17 17:20:16 UTC	515	IN	Data Raw: 69 63 61 74 69 6f 6e 2e 70 6e 67 22 3e 3c 2f 69 6d 67 3e 0d 0a 20 20 09 09 3c 2f 61 3e 0d 0a 20 20 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 66 66 65 72 2d 73 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 74 69 74 6c 65 22 3e 56 65 72 69 66 79 20 79 6f 75 72 20 41 67 65 3c 2f 73 70 61 6e 3e 0d 0a 20 20 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 75 62 74 69 74 6c 65 22 3e 3c 70 3e 43 6f 6e 74 69 6e 75 65 20 62 65 6c 6f 77 20 69 66 20 79 6f 75 20 61 72 65 20 6f 76 65 72 20 74 68 65 20 61 67 65 20 6f 66 20 31 38 3c 2f 70 3e 3c 2f 73 70 61 6e 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 66 66 65 72 2d 73 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0d 0a 09 20 20 09 3c 61 20 Data Ascii: ication.png"></img> </a> <div class="offer-spacer"></div> <span class="page-title">Verify your Age</span> <span class="page-subtitle"><p>Continue below if you are over the age of 18</p></span><div class="offer-spacer"></div> <a
2024-12-17 17:20:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.16	49994	18.184.182.95	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:16 UTC	907	OUT	GET /0b799de6-47be-4e34-8e0d-638110360f29?source=10443&Siteid=76100&psid=450741448&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQ HTTP/1.1 Host: turapport-strience.icu Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:16 UTC	652	IN	HTTP/1.1 307 Server: nginx Date: Tue, 17 Dec 2024 17:20:16 GMT Content-Length: 0 Connection: close Accept-CH: sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-full-version-list,sec-ch-ua-full-version,sec-ch-ua-model,sec-ch-ua-platform-version,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform Cache-Control: no-store, no-cache, pre-check=0, post-check=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://turapport-strience.icu/0b799de6-47be-4e34-8e0d-638110360f29/2?source=10443&Siteid=76100&psid=450741448&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQ Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.16	49995	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:16 UTC	1012	OUT	GET /service-worker.js HTTP/1.1 Host: ally.quandral.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://ally.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzRV8irii4G5muWZJa-gQuZaPG6ZVbaGCrp3Ew7-dnQikr2RQSng124WzVgXzFjDL_QWdPzFb1tqzYvJ1J4Hm5DzlYbXX00UfJvLtowHoaF5Gi0cB26o1rj5SQ8FKXEaRM75fxUeqc7_KC20fXaDoa9K3OJtvXuvfuS8sJVEi11sJbalcB0afjY0w0YxSm4tam1Aohg47FLqWTAATpNZfctdJVDxh1PHzlkDQyY8tPMMmfCO29ZGHrrGVJGfjek4bX6Jc_VfDncVbp7RGdsxzXkkqULgb65hebnMM8hxAd8_Cbyp78sVUJ18nCnSSh2SuZ4EJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrAiXtL4G87Zl-DqiYeZAA2A%3D%3D&h=&v=185 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:16 UTC	915	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:16 GMT Content-Type: application/javascript Content-Length: 265 Connection: close Last-Modified: Tue, 25 Jun 2024 16:41:51 GMT ETag: "667af34f-109" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 210 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CmqbCcY54Z87C%2BnTPZ4lTaM9S0Vft20aLAxsLeb2tDs2xOSLQiN1h2wxg6G5fPTYKbHnTfV705HQLGo8gy%2FqpSPYspj7kHi1%2FRPuWA2oJIuWva%2FGxY%2FWQBZN6SGtz4K53CJCfg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389538ae8f0f5f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1507&min_rtt=1503&rtt_var=573&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1612&delivery_rate=1896103&cwnd=234&unsent_bytes=0&cid=36c9d8af831cd775&ts=456&x=0"
2024-12-17 17:20:16 UTC	265	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0a 20 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 74 72 6b 2d 73 79 6e 6f 76 65 74 72 61 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 65 78 74 2f 73 63 72 69 70 74 2f 35 37 64 6b 72 32 36 65 77 38 3f 75 72 6c 3d 27 2b 65 6e 63 6f 64 65 55 52 49 28 73 65 6c 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 29 3b 0a 7d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 22 68 74 74 70 73 3a 2f 2f 74 72 6b 2d 73 79 6e 6f 76 65 74 72 61 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 73 77 2f 73 63 72 69 70 74 2f 35 37 64 6b 72 32 36 65 77 38 3f 75 72 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 28 73 65 6c 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f Data Ascii: if (typeof window === "undefined") { importScripts('https://trk-synovetra.com/scripts/ext/script/57dkr26ew8?url='+encodeURI(self.location.hostname));}importScripts("https://trk-synovetra.com/scripts/sw/script/57dkr26ew8?url="+encodeURI(self.location.ho

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.16	49997	35.190.80.1	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:16 UTC	546	OUT	OPTIONS /report/v4?s=mSDQG7RQhVeCGTjCX8C1akihv3dA03qQKNPMZp%2BoLTZFJXwGXv%2FDTLqSMuesgF2NsmsIMT9ciJ9%2BmEAHviSsToQgsJK41KcIb89zRLRUURg%2BQxSMeY2ZUEE0vfvtFBt89favKw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ally.quandral.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:17 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 17 Dec 2024 17:20:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.16	50003	18.184.182.95	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:18 UTC	1181	OUT	GET /0b799de6-47be-4e34-8e0d-638110360f29/2?source=10443&Siteid=76100&psid=450741448&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQ HTTP/1.1 Host: turapport-strience.icu Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Referer: https://majorleagueprices.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:18 UTC	2118	IN	HTTP/1.1 302 Server: nginx Date: Tue, 17 Dec 2024 17:20:18 GMT Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, pre-check=0, post-check=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://verify.twivoria.com/pr12nolb2/?brand=hmg-evictionnotice&utm_source=cdabac55-be6f-451f-9464-58984d081e2e&utm_medium=10443&source_one=wjsc57ti7rscghc63j83i6om&offer_id=10596&psid=450741448&cep=nL48YG3D2qmYqKD_KPkvQlnE7WTOKGl2mwEFFaiYnWnCNUs8qndb9jf3qd1-jCrr1yqQi7Ndh75bAvsAAyvrd5DIHOVwklIjO6hKIwQa0IOVLpYCXbMDJjFs1nyme_UP7wzWzMtUspszgdmBOWnNJAa_R7j4Bnf1cQtNlfeYUv6XC12KqpoKJhLmp-3G1DsEISnLCk9UUrkLuHGNuFkvVMKi2Z200_ca0UgIfX_oSNsZKFOeS8yYF7N-O7aNIiJC0NAoKMrSVzEw84aZMlahgLCbhu8wsdoC5DHfd2DTbOR-87D8gmG9M94d14BZ9qbNf0C9GmWp8Vvdr8S7yIvGeMDNY_AwL_YVqBHH3nDOJ-_9H0eh58cmb_hP4HAK9eVde6dJzcCotkMLom8RECvq_cmnl6RPBHNSA-W4pr-OqbWm5aiSvijQnf6SGcyFqATJ7AqUyhGsZI55ZfPmpZK2231YjBxUpFqbFZcMVfDQLjcDjA-3uo0TBA6DQ1aEuxn7HZs_M9RCkxEB206qs8AeqyNPmmmnuGqUTKLOQ6cCfjXPlrg3nPArjg8p4s7UwEAD&lptoken=17af344945e778b8186b&Siteid=76100&offerid=10596&subdomain=talk.&firstname=&lastname=&email=&zip_code=&creative_id=31452&click_id=UlPKGwv8T-eCTXoLrn98oQ Pragma: no-cache Set-Cookie: 0b799de6-47be-4e34-8e0d-638110360f29-v4=KFDLsPFhO0q7aGkvhPNOKjc6qN9PcIiLOB63accBBSY; Max-Age=86400; Expires=Wed, 18 Dec 2024 17:20:18 GMT; Domain=turapport-strience.icu; Path=/; Secure; HttpOnly;SameSite=None Set-Cookie: cep-v4=Lo13zq4b7Dd-_Cu0R0FmzdIgHSq8Gbk50Ts8wm3MeIDXOQL5kdYlPO0nTdRqoD_5tNXOic_TGJapR1eH4gl7VAQpEOIqwC0e5ImCGcJQo8gW18c_h0xUNmMlQYo_fkROl6SJqo3VQg1Y6SMTHccCg4if6pKep4n_YSJpUNMHjoMiyhXcsJXJQBL7PutoNzFKg1trp5pzNnMti4MR8lMuam1-PL6Nz-CrTQFV4nrEGHWYvjT9ByIYWe-tUWwIrcV4N8XBnreEPDs5rH_kwMLlUcC0uqxtdVR6reob8LzbkzWHM8rh4ko3mYbSjB1RwLGol799EJ8fR3VjToMtPwW9ITokYL-J1WEPR6RSBhc02AChZBh0lsEV74GI5LXZ3PbZaETFhqSmT1PD_oY-X0aZTkNbB88WEH6a2q8xqepvNcjMElZ7HCFM0Mmu2bGBz9Z--4Vm-ErFhaF3k3fKMA4sZRMYVc6G3m06yEBBW9HWZUx0x-fAMeu0EC-IwWn5O28SuM6wTzNSVgNo_OQztDLMBxnJ2H-bKq4RvN7GWFP5EvAq7n5fBD_1mYXYmQr488rm; Max-Age=86400; Expires=Wed, 18 Dec 2024 17:20:18 GMT; Domain=turapport-strience.icu; Path=/; Secure; HttpOnly;SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.16	50004	104.21.81.125	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 17:20:18 UTC	1145	OUT	GET /age-verification/assets/style.css HTTP/1.1 Host: won.quandral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://won.quandral.com/age-verification/?utm_medium=10443&psid={pushsubscription_id}&offer_id={offer_id}&sub3=https%3A%2F%2Fpushclk.com%2Ftr%2Ft%2FJDvPdy1sMN2uSAhlhv6ZzeX5El6AmI6lD1cZs-dJiK05dOJutH989wYA8gnVokGEFVEvRSN_9vuGvNPTXVRqiDnw6VzjDRCxfo4vwCjs_GGnv6ah6bbbUIDpR77FwiTgZk6GPyVkQhY84Jp8zio6bpqga9dI77Hohb9UDaJ0pFdOnkQiVUXgbVTTc7sFNPAhe-JNMgwrbmK2XufoM7IV4Si_fSkXvo3-PSDAOyKwyfK1n2IqwByZxC_7_mycUL0kjfD95Bot4fjDN4SLOHrXXwVCQnX63rmH3e06C2J20LuZnD3HFBHYWLdHn8xSVQzqtv3-DS2ixCRQwqCRRW9ShIEJMe1SaGOhxiigtkxvwRhqNdLW9hftB8fHTeMQjUOrolz9V8OdxVuntEZ2zHNeSSpQuBvrmF5ucwzyHEB3z8JBxxz0Z7VzbjKMV3Vvs1KK&h=&v=185 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 17:20:18 UTC	897	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 17:20:18 GMT Content-Type: text/css Content-Length: 3243 Connection: close Last-Modified: Wed, 15 May 2024 19:37:59 GMT ETag: "66450f17-cab" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2624 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5lJILcky%2FPiOThj%2B207PF0PMVnLSnJ8y2%2FLdOsCApq6e3lGiNLnyyiceKlplqWPNAQkyTjsgGEJuCJL2d3YyAs7te%2BXHI%2FWD8waJ215i0W8tGKRqiHh8Uq3SQiPaV12cGe1W"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f389544ba9d4295-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=11687&min_rtt=1703&rtt_var=6708&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1723&delivery_rate=1714621&cwnd=252&unsent_bytes=0&cid=e8be88d6aee885e7&ts=714&x=0"
2024-12-17 17:20:18 UTC	472	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 6c 61 74 6f 2d 72 65 67 75 6c 61 72 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 66 6f 6e 74 2f 6c 61 74 6f 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 29 3b 0d 0a 7d 0d 0a 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 6c 61 74 6f 2d 62 6f 6c 64 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 66 6f 6e 74 2f 6c 61 74 6f 2d 62 6f 6c 64 2e 77 6f 66 66 29 3b 0d 0a 7d 0d 0a 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 6c 61 74 6f 2d 62 6c 61 63 6b 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 66 6f 6e 74 2f 6c 61 74 6f 2d 62 6c 61 63 6b 2e 77 6f 66 66 29 3b 0d 0a 7d 0d 0a 0d 0a 61 20 7b 0d 0a 09 63 Data Ascii: @font-face { font-family: lato-regular; src: url(font/lato-regular.woff);}@font-face { font-family: lato-bold; src: url(font/lato-bold.woff);}@font-face { font-family: lato-black; src: url(font/lato-black.woff);}a {c
2024-12-17 17:20:18 UTC	1369	IN	Data Raw: 72 2d 62 67 2e 6a 70 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 20 66 69 78 65 64 3b 2a 2f 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 66 65 66 65 66 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 2d 6d 6f 7a 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 2d 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 30 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 67 6f 20 7b 0d 0a 09 66 Data Ascii: r-bg.jpg) no-repeat center center fixed;*/ background-color:#efefef; -webkit-background-size: cover; -moz-background-size: cover; -o-background-size: cover; background-size: cover;}body {margin:0px;padding:0px;}.logo {f
2024-12-17 17:20:18 UTC	1369	IN	Data Raw: 37 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 31 30 70 78 20 30 20 31 30 70 78 20 30 3b 0d 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 61 69 6e 20 7b 0d 0a 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 63 6f 6e 74 65 6e 74 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 35 35 70 78 20 33 30 70 78 20 35 35 70 78 20 33 30 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0d 0a 09 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0d 0a 09 77 69 64 74 68 3a 34 34 25 3b 0d 0a 09 6d 61 78 2d 77 69 64 74 68 3a 35 34 34 70 78 3b 0d 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 33 30 30 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 Data Ascii: 7;padding:10px 0 10px 0;width:100%;margin-bottom:50px;}.container-main {}.container-content {padding:55px 30px 55px 30px;display:block;margin:0 auto;width:44%;max-width:544px;min-width:300px;background-color:#ff
2024-12-17 17:20:18 UTC	33	IN	Data Raw: 66 66 65 72 2d 74 69 74 6c 65 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 7d 0d 0a 0d 0a 7d Data Ascii: ffer-title {font-size:13px;}}

Target ID:	0
Start time:	12:18:16
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	12:18:16
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1984,i,3675047681052149283,17492376251998043679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:18:17
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.kukaj-to.chat/sedo"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.kukaj-to.chat/sedo

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Windows Analysis Report
http://www.kukaj-to.chat/sedo