Edit tour

Windows Analysis Report
http://www.oneroguereporter.com/gks

Overview

General Information

Sample URL:	http://www.oneroguereporter.com/gks
Analysis ID:	1587042
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

HTML page contains hidden URLs

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body with high number of embedded SVGs detected

HTML page contains hidden javascript code

HTML title does not match URL

No HTML title found

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7044 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1924,i,7523114714375834015,5707204102508674468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4104 --field-trial-handle=1924,i,7523114714375834015,5707204102508674468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5508 --field-trial-handle=1924,i,7523114714375834015,5707204102508674468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6604 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.oneroguereporter.com/gks" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-09T21:56:23.053562+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50066	172.66.40.143	443	TCP
2025-01-09T21:56:25.544380+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50155	142.250.74.194	443	TCP
2025-01-09T21:56:25.596490+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50156	172.217.16.194	443	TCP
2025-01-09T21:56:25.596805+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50159	172.217.16.194	443	TCP
2025-01-09T21:56:25.700043+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50162	172.217.16.194	443	TCP
2025-01-09T21:56:25.700834+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50163	172.217.16.194	443	TCP
2025-01-09T21:56:25.842552+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50164	172.217.16.194	443	TCP
2025-01-09T21:56:25.989651+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50169	172.217.16.194	443	TCP
2025-01-09T21:56:26.077183+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50178	151.101.195.1	443	TCP
2025-01-09T21:56:26.379583+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50189	142.250.74.194	443	TCP
2025-01-09T21:56:26.381562+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50191	142.250.74.194	443	TCP
2025-01-09T21:56:26.455455+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50197	172.217.16.194	443	TCP
2025-01-09T21:56:26.473068+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50196	172.217.16.194	443	TCP
2025-01-09T21:56:26.573586+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.17	50203	172.217.16.194	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected landing page (webpage, office document or email)

Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802

Joe Sandbox AI: Page contains button: 'CLICK TO PLAY SOUND' Source: '1.8.pages.csv'

AI detected suspicious Javascript

Source: 0.82.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://pay.buygoods.com/vault/v1/formframe-checko... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscated nature of the code further increase the risk. While the script may have a legitimate purpose, such as implementing a security challenge, the overall behavior is highly suspicious and indicative of a potential attack vector.

HTML page contains hidden URLs

Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5

HTTP Parser: https://visi-sharp.net/upgrade-1

Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Number of links: 0
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Number of links: 0

Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802

HTTP Parser: Total embedded SVG size: 158377

HTTP Parser: Base64 decoded: 1736456178.000000

Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802

HTTP Parser: Title: Eyesight Breakthrough does not match URL

HTTP Parser: HTML title missing

Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-53H4JQQ
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://visi-sharp.net/pixels/e71ec514527769916ab2b5748eef670b?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802&key=66taBl5rn79UTO5JGFaAqZivQP7PL3UU
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-53H4JQQ
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://www.youtube.com/embed/i8Q-3qdT6jk?mute=1&controls=0&modestbranding=1&rel=0&playsinline=1&start=0&autoplay=1&enablejsapi=1&origin=https%3A%2F%2Fvisi-sharp.net&widgetid=1
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://visi-sharp.net/pixels/e71ec514527769916ab2b5748eef670b?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802&key=66taBl5rn79UTO5JGFaAqZivQP7PL3UU
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-53H4JQQ
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://www.youtube.com/embed/i8Q-3qdT6jk?mute=1&controls=0&modestbranding=1&rel=0&playsinline=1&start=0&autoplay=1&enablejsapi=1&origin=https%3A%2F%2Fvisi-sharp.net&widgetid=1
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://visi-sharp.net/pixels/e71ec514527769916ab2b5748eef670b?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802&key=66taBl5rn79UTO5JGFaAqZivQP7PL3UU
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-53H4JQQ
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://www.youtube.com/embed/i8Q-3qdT6jk?mute=1&controls=0&modestbranding=1&rel=0&playsinline=1&start=0&autoplay=1&enablejsapi=1&origin=https%3A%2F%2Fvisi-sharp.net&widgetid=1
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://visi-sharp.net/pixels/e71ec514527769916ab2b5748eef670b?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802&key=66taBl5rn79UTO5JGFaAqZivQP7PL3UU
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-53H4JQQ
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://www.youtube.com/embed/i8Q-3qdT6jk?mute=1&controls=0&modestbranding=1&rel=0&playsinline=1&start=0&autoplay=1&enablejsapi=1&origin=https%3A%2F%2Fvisi-sharp.net&widgetid=1
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://visi-sharp.net/pixels/e71ec514527769916ab2b5748eef670b?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802&key=66taBl5rn79UTO5JGFaAqZivQP7PL3UU
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-53H4JQQ
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://www.youtube.com/embed/i8Q-3qdT6jk?mute=1&controls=0&modestbranding=1&rel=0&playsinline=1&start=0&autoplay=1&enablejsapi=1&origin=https%3A%2F%2Fvisi-sharp.net&widgetid=1
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: Iframe src: https://visi-sharp.net/pixels/e71ec514527769916ab2b5748eef670b?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802&key=66taBl5rn79UTO5JGFaAqZivQP7PL3UU
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://buygoods.com/affiliates/go/conversion/iframe/bg?a=6797&t=7febff6eb4188829241aea58b12110cf&checkout=1&s=sessid2025010920547110
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://buygoods.com/secure/k/logo.php?m=153600&s=sessid2025010920547110
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://buygoods.com/secure/checkout/iframe?a=6797&s=sessid2025010920547110
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://go.maxweb.com/conversion/iframe?a=6812&token=4df97f99b03e60bc03420f175bd3f509&checkout=1&sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://assets.braintreegateway.com/data/logo.htm?m=null&s=9e5a8d4c3b5fdad7146d23b99f3c2d46
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://checkout.paypal.com/web/3.97.2/html/dispatch-frame.min.html
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://buygoods.com/affiliates/go/conversion/iframe/bg?a=6797&t=7febff6eb4188829241aea58b12110cf&checkout=1&s=sessid2025010920547110
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://buygoods.com/secure/k/logo.php?m=153600&s=sessid2025010920547110
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://buygoods.com/secure/checkout/iframe?a=6797&s=sessid2025010920547110
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://go.maxweb.com/conversion/iframe?a=6812&token=4df97f99b03e60bc03420f175bd3f509&checkout=1&sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://assets.braintreegateway.com/data/logo.htm?m=null&s=9e5a8d4c3b5fdad7146d23b99f3c2d46
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://checkout.paypal.com/web/3.97.2/html/dispatch-frame.min.html
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: Iframe src: https://www.paypalobjects.com/muse/analytics/index.html#frameId=553c6bb9-a871-4b01-84eb-8a36ef266549&propertyId=8T2VCMX6GD4SG-1&flow=visitor-info&variant=analytics&mrid=8T2VCMX6GD4SG&isMobileEnabled=true&isDesktopEnabled=true&shouldCheckCountry=true&mobileVariant=analytics&mobileFlow=visitor-info&disableSetCookie=true

Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No favicon
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No favicon
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No favicon
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No favicon

Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No <meta name="author".. found
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No <meta name="author".. found
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No <meta name="author".. found
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No <meta name="author".. found
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No <meta name="author".. found
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No <meta name="author".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No <meta name="author".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No <meta name="author".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No <meta name="author".. found

Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No <meta name="copyright".. found
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No <meta name="copyright".. found
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No <meta name="copyright".. found
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No <meta name="copyright".. found
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No <meta name="copyright".. found
Source: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802	HTTP Parser: No <meta name="copyright".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No <meta name="copyright".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No <meta name="copyright".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: mwebexplorerpro.com to https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid2025010920545836&subid=8802
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: mwebexplorerpro.com to https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50066 -> 172.66.40.143:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50155 -> 142.250.74.194:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50159 -> 172.217.16.194:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50156 -> 172.217.16.194:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50162 -> 172.217.16.194:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50163 -> 172.217.16.194:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50164 -> 172.217.16.194:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50169 -> 172.217.16.194:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50178 -> 151.101.195.1:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50189 -> 142.250.74.194:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50196 -> 172.217.16.194:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50203 -> 172.217.16.194:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50191 -> 142.250.74.194:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.17:50197 -> 172.217.16.194:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /gks HTTP/1.1Host: www.oneroguereporter.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6812/8802/2/? HTTP/1.1Host: mwebexplorerpro.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gks HTTP/1.1Host: www.oneroguereporter.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6812/8802/2/? HTTP/1.1Host: mwebexplorerpro.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuDvnJbjKdBkxKLVBqBrQP8wYzWkbVKEE9vgjXsHRe
Source: global traffic	HTTP traffic detected: GET /report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802 HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/app-19.css?id=9cf94c61215466bf367f HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /images/V3.png HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /images/V3.png HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /images/best_value_v2.png HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /j.php?a=791563&u=https%3A%2F%2Fvisi-sharp.net%2Freport%3Faff_id%3D326%26subid2%3D6812_sessid20250109205426977%26subid%3D8802&vn=2.1&x=true HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://visi-sharp.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://visi-sharp.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /j.php?a=791563&u=https%3A%2F%2Fvisi-sharp.net%2Freport%3Faff_id%3D326%26subid2%3D6812_sessid20250109205426977%26subid%3D8802&vn=2.1&x=true HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixels/e71ec514527769916ab2b5748eef670b?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802&key=66taBl5rn79UTO5JGFaAqZivQP7PL3UU HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /js/app.js?id=11d7149dd52495db050a HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /conversions.js?siteId=567 HTTP/1.1Host: dashboard.heatmap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://visi-sharp.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/best_value_v2.png HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /images/Delaware.png HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /images/most_popular_v2.png HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /images/app/buygoods.png HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /images/male/40-60/t-0.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /event/1YahHTWvLs8kmboN?page=https:%2F%2Fvisi-sharp.net%2Freport%3Faff_id%3D326%26subid2%3D6812_sessid20250109205426977%26subid%3D8802&event=page:load HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-XSRF-TOKEN: eyJpdiI6ImdMbDIvQUU0VTZSRzNWSmZjdWxlTUE9PSIsInZhbHVlIjoieHlvRzhmZW1sSlBXWW9TTkQvZC9uMzRDNHZXY0xzdzJyUVNVTGNzQTFtQ1ppQmoxMDVGalBETUROK1pqc1Z5aFU1aXVEVlBmWmp3cDVVeG9mczdDTFA0alA5L0hJVjVyckE1Vm5BMllyc28ySy9SM1ZZV1ltZzRaRFZVdWJlMmUiLCJtYWMiOiIxNzJiYmFlYTQ4ZmYzMzZiZDBlODUwY2QyN2IzZWI5YzNkMjhhODU0ZDc4NzVhMWNiNmRiMjE4NDZhMmM2Y2ZkIn0=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6ImdMbDIvQUU0VTZSRzNWSmZjdWxlTUE9PSIsInZhbHVlIjoieHlvRzhmZW1sSlBXWW9TTkQvZC9uMzRDNHZXY0xzdzJyUVNVTGNzQTFtQ1ppQmoxMDVGalBETUROK1pqc1Z5aFU1aXVEVlBmWmp3cDVVeG9mczdDTFA0alA5L0hJVjVyckE1Vm5BMllyc28ySy9SM1ZZV1ltZzRaRFZVdWJlMmUiLCJtYWMiOiIxNzJiYmFlYTQ4ZmYzMzZiZDBlODUwY2QyN2IzZWI5YzNkMjhhODU0ZDc4NzVhMWNiNmRiMjE4NDZhMmM2Y2ZkIn0%3D; _=eyJpdiI6IjNHT1RhWG1LWjZwaTZpclJyYmZCb3c9PSIsInZhbHVlIjoiTkJOYmV2bmVoL2JwYWRMb1cyOTZQdDduU2UxaC8yVFNSemVwTGVtbmtFaHhBQTU0d3hJdC9pNzRRQnVRdWNRbnV4TXpuUFl5azY0STJxM2krZFBVUjVDcHhRc01Dckt4aGRaZG85djM4emFKQjB0RnhJdGJIbHptYTRtYng2ZGoiLCJtYWMiOiJmYzQyNzgzMmQyODUzOWUzY2U0OTBmODM5N2ZmN2Y1MTdkYjliYTU2OWQ4NWFmZDMwMmU2ZjAyMWVlNjczYTMwIn0%3D; referrer=eyJpdiI6IkNuSG15TEsxcnNqcVoxZEszdG1vZ0E9PSIsInZhbHVlIjoiUDZRQTIwWldPVUhoWkI3MjRscE9wY1d5OHJEVERUSjNWa0lmdTA1RnZUeVRxSzV4UElZVzRvNmYwc0ZWQkx0cmNCZ0tuS0g1VHhxQnBoM2IrZnc1d1E9PSIsIm1hYyI6IjYyOThmN2ExYjBkNWZlZjlhOGY2NThhOTIxZjY3OTE2ZDc0NTIwYzlmMjEzZGQ5ODNiMGI4MTE0NGUwNzdiOGIifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXh
Source: global traffic	HTTP traffic detected: GET /conversions.js?siteId=567 HTTP/1.1Host: dashboard.heatmap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/Delaware.png HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6ImdMbDIvQUU0VTZSRzNWSmZjdWxlTUE9PSIsInZhbHVlIjoieHlvRzhmZW1sSlBXWW9TTkQvZC9uMzRDNHZXY0xzdzJyUVNVTGNzQTFtQ1ppQmoxMDVGalBETUROK1pqc1Z5aFU1aXVEVlBmWmp3cDVVeG9mczdDTFA0alA5L0hJVjVyckE1Vm5BMllyc28ySy9SM1ZZV1ltZzRaRFZVdWJlMmUiLCJtYWMiOiIxNzJiYmFlYTQ4ZmYzMzZiZDBlODUwY2QyN2IzZWI5YzNkMjhhODU0ZDc4NzVhMWNiNmRiMjE4NDZhMmM2Y2ZkIn0%3D; _=eyJpdiI6IjNHT1RhWG1LWjZwaTZpclJyYmZCb3c9PSIsInZhbHVlIjoiTkJOYmV2bmVoL2JwYWRMb1cyOTZQdDduU2UxaC8yVFNSemVwTGVtbmtFaHhBQTU0d3hJdC9pNzRRQnVRdWNRbnV4TXpuUFl5azY0STJxM2krZFBVUjVDcHhRc01Dckt4aGRaZG85djM4emFKQjB0RnhJdGJIbHptYTRtYng2ZGoiLCJtYWMiOiJmYzQyNzgzMmQyODUzOWUzY2U0OTBmODM5N2ZmN2Y1MTdkYjliYTU2OWQ4NWFmZDMwMmU2ZjAyMWVlNjczYTMwIn0%3D; referrer=eyJpdiI6IkNuSG15TEsxcnNqcVoxZEszdG1vZ0E9PSIsInZhbHVlIjoiUDZRQTIwWldPVUhoWkI3MjRscE9wY1d5OHJEVERUSjNWa0lmdTA1RnZUeVRxSzV4UElZVzRvNmYwc0ZWQkx0cmNCZ0tuS0g1VHhxQnBoM2IrZnc1d1E9PSIsIm1hYyI6IjYyOThmN2ExYjBkNWZlZjlhOGY2NThhOTIxZjY3OTE2ZDc0NTIwYzlmMjEzZGQ5ODNiMGI4MTE0NGUwNzdiOGIifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D
Source: global traffic	HTTP traffic detected: GET /images/app/buygoods.png HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6ImdMbDIvQUU0VTZSRzNWSmZjdWxlTUE9PSIsInZhbHVlIjoieHlvRzhmZW1sSlBXWW9TTkQvZC9uMzRDNHZXY0xzdzJyUVNVTGNzQTFtQ1ppQmoxMDVGalBETUROK1pqc1Z5aFU1aXVEVlBmWmp3cDVVeG9mczdDTFA0alA5L0hJVjVyckE1Vm5BMllyc28ySy9SM1ZZV1ltZzRaRFZVdWJlMmUiLCJtYWMiOiIxNzJiYmFlYTQ4ZmYzMzZiZDBlODUwY2QyN2IzZWI5YzNkMjhhODU0ZDc4NzVhMWNiNmRiMjE4NDZhMmM2Y2ZkIn0%3D; _=eyJpdiI6IjNHT1RhWG1LWjZwaTZpclJyYmZCb3c9PSIsInZhbHVlIjoiTkJOYmV2bmVoL2JwYWRMb1cyOTZQdDduU2UxaC8yVFNSemVwTGVtbmtFaHhBQTU0d3hJdC9pNzRRQnVRdWNRbnV4TXpuUFl5azY0STJxM2krZFBVUjVDcHhRc01Dckt4aGRaZG85djM4emFKQjB0RnhJdGJIbHptYTRtYng2ZGoiLCJtYWMiOiJmYzQyNzgzMmQyODUzOWUzY2U0OTBmODM5N2ZmN2Y1MTdkYjliYTU2OWQ4NWFmZDMwMmU2ZjAyMWVlNjczYTMwIn0%3D; referrer=eyJpdiI6IkNuSG15TEsxcnNqcVoxZEszdG1vZ0E9PSIsInZhbHVlIjoiUDZRQTIwWldPVUhoWkI3MjRscE9wY1d5OHJEVERUSjNWa0lmdTA1RnZUeVRxSzV4UElZVzRvNmYwc0ZWQkx0cmNCZ0tuS0g1VHhxQnBoM2IrZnc1d1E9PSIsIm1hYyI6IjYyOThmN2ExYjBkNWZlZjlhOGY2NThhOTIxZjY3OTE2ZDc0NTIwYzlmMjEzZGQ5ODNiMGI4MTE0NGUwNzdiOGIifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D
Source: global traffic	HTTP traffic detected: GET /images/female/40-60/t-1.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JIVmM2RlZ5WDNzaThCWTlLZHk5b2dDOFpmaGhKR3JiUzExQSt2VDlsWjFFcXN6UytIV29hODkrOHJ5IiwibWFjIjoiYTBiOTQ4OTg4MjEyZWFmMjlhMWIyZTBjMTI4YjYxOWI1ZDZhMmU1M2E5ZmYxOWU4NTViYjRhOWQ1Y2EzNmI4YiJ9
Source: global traffic	HTTP traffic detected: GET /images/male/30-40/t-2.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6ImdMbDIvQUU0VTZSRzNWSmZjdWxlTUE9PSIsInZhbHVlIjoieHlvRzhmZW1sSlBXWW9TTkQvZC9uMzRDNHZXY0xzdzJyUVNVTGNzQTFtQ1ppQmoxMDVGalBETUROK1pqc1Z5aFU1aXVEVlBmWmp3cDVVeG9mczdDTFA0alA5L0hJVjVyckE1Vm5BMllyc28ySy9SM1ZZV1ltZzRaRFZVdWJlMmUiLCJtYWMiOiIxNzJiYmFlYTQ4ZmYzMzZiZDBlODUwY2QyN2IzZWI5YzNkMjhhODU0ZDc4NzVhMWNiNmRiMjE4NDZhMmM2Y2ZkIn0%3D; _=eyJpdiI6IjNHT1RhWG1LWjZwaTZpclJyYmZCb3c9PSIsInZhbHVlIjoiTkJOYmV2bmVoL2JwYWRMb1cyOTZQdDduU2UxaC8yVFNSemVwTGVtbmtFaHhBQTU0d3hJdC9pNzRRQnVRdWNRbnV4TXpuUFl5azY0STJxM2krZFBVUjVDcHhRc01Dckt4aGRaZG85djM4emFKQjB0RnhJdGJIbHptYTRtYng2ZGoiLCJtYWMiOiJmYzQyNzgzMmQyODUzOWUzY2U0OTBmODM5N2ZmN2Y1MTdkYjliYTU2OWQ4NWFmZDMwMmU2ZjAyMWVlNjczYTMwIn0%3D; referrer=eyJpdiI6IkNuSG15TEsxcnNqcVoxZEszdG1vZ0E9PSIsInZhbHVlIjoiUDZRQTIwWldPVUhoWkI3MjRscE9wY1d5OHJEVERUSjNWa0lmdTA1RnZUeVRxSzV4UElZVzRvNmYwc0ZWQkx0cmNCZ0tuS0g1VHhxQnBoM2IrZnc1d1E9PSIsIm1hYyI6IjYyOThmN2ExYjBkNWZlZjlhOGY2NThhOTIxZjY3OTE2ZDc0NTIwYzlmMjEzZGQ5ODNiMGI4MTE0NGUwNzdiOGIifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D
Source: global traffic	HTTP traffic detected: GET /images/most_popular_v2.png HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6ImdMbDIvQUU0VTZSRzNWSmZjdWxlTUE9PSIsInZhbHVlIjoieHlvRzhmZW1sSlBXWW9TTkQvZC9uMzRDNHZXY0xzdzJyUVNVTGNzQTFtQ1ppQmoxMDVGalBETUROK1pqc1Z5aFU1aXVEVlBmWmp3cDVVeG9mczdDTFA0alA5L0hJVjVyckE1Vm5BMllyc28ySy9SM1ZZV1ltZzRaRFZVdWJlMmUiLCJtYWMiOiIxNzJiYmFlYTQ4ZmYzMzZiZDBlODUwY2QyN2IzZWI5YzNkMjhhODU0ZDc4NzVhMWNiNmRiMjE4NDZhMmM2Y2ZkIn0%3D; _=eyJpdiI6IjNHT1RhWG1LWjZwaTZpclJyYmZCb3c9PSIsInZhbHVlIjoiTkJOYmV2bmVoL2JwYWRMb1cyOTZQdDduU2UxaC8yVFNSemVwTGVtbmtFaHhBQTU0d3hJdC9pNzRRQnVRdWNRbnV4TXpuUFl5azY0STJxM2krZFBVUjVDcHhRc01Dckt4aGRaZG85djM4emFKQjB0RnhJdGJIbHptYTRtYng2ZGoiLCJtYWMiOiJmYzQyNzgzMmQyODUzOWUzY2U0OTBmODM5N2ZmN2Y1MTdkYjliYTU2OWQ4NWFmZDMwMmU2ZjAyMWVlNjczYTMwIn0%3D; referrer=eyJpdiI6IkNuSG15TEsxcnNqcVoxZEszdG1vZ0E9PSIsInZhbHVlIjoiUDZRQTIwWldPVUhoWkI3MjRscE9wY1d5OHJEVERUSjNWa0lmdTA1RnZUeVRxSzV4UElZVzRvNmYwc0ZWQkx0cmNCZ0tuS0g1VHhxQnBoM2IrZnc1d1E9PSIsIm1hYyI6IjYyOThmN2ExYjBkNWZlZjlhOGY2NThhOTIxZjY3OTE2ZDc0NTIwYzlmMjEzZGQ5ODNiMGI4MTE0NGUwNzdiOGIifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D
Source: global traffic	HTTP traffic detected: GET /images/female/30-40/t-3.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6ImdMbDIvQUU0VTZSRzNWSmZjdWxlTUE9PSIsInZhbHVlIjoieHlvRzhmZW1sSlBXWW9TTkQvZC9uMzRDNHZXY0xzdzJyUVNVTGNzQTFtQ1ppQmoxMDVGalBETUROK1pqc1Z5aFU1aXVEVlBmWmp3cDVVeG9mczdDTFA0alA5L0hJVjVyckE1Vm5BMllyc28ySy9SM1ZZV1ltZzRaRFZVdWJlMmUiLCJtYWMiOiIxNzJiYmFlYTQ4ZmYzMzZiZDBlODUwY2QyN2IzZWI5YzNkMjhhODU0ZDc4NzVhMWNiNmRiMjE4NDZhMmM2Y2ZkIn0%3D; _=eyJpdiI6IjNHT1RhWG1LWjZwaTZpclJyYmZCb3c9PSIsInZhbHVlIjoiTkJOYmV2bmVoL2JwYWRMb1cyOTZQdDduU2UxaC8yVFNSemVwTGVtbmtFaHhBQTU0d3hJdC9pNzRRQnVRdWNRbnV4TXpuUFl5azY0STJxM2krZFBVUjVDcHhRc01Dckt4aGRaZG85djM4emFKQjB0RnhJdGJIbHptYTRtYng2ZGoiLCJtYWMiOiJmYzQyNzgzMmQyODUzOWUzY2U0OTBmODM5N2ZmN2Y1MTdkYjliYTU2OWQ4NWFmZDMwMmU2ZjAyMWVlNjczYTMwIn0%3D; referrer=eyJpdiI6IkNuSG15TEsxcnNqcVoxZEszdG1vZ0E9PSIsInZhbHVlIjoiUDZRQTIwWldPVUhoWkI3MjRscE9wY1d5OHJEVERUSjNWa0lmdTA1RnZUeVRxSzV4UElZVzRvNmYwc0ZWQkx0cmNCZ0tuS0g1VHhxQnBoM2IrZnc1d1E9PSIsIm1hYyI6IjYyOThmN2ExYjBkNWZlZjlhOGY2NThhOTIxZjY3OTE2ZDc0NTIwYzlmMjEzZGQ5ODNiMGI4MTE0NGUwNzdiOGIifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D
Source: global traffic	HTTP traffic detected: GET /images/male/40-60/t-4.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6ImdMbDIvQUU0VTZSRzNWSmZjdWxlTUE9PSIsInZhbHVlIjoieHlvRzhmZW1sSlBXWW9TTkQvZC9uMzRDNHZXY0xzdzJyUVNVTGNzQTFtQ1ppQmoxMDVGalBETUROK1pqc1Z5aFU1aXVEVlBmWmp3cDVVeG9mczdDTFA0alA5L0hJVjVyckE1Vm5BMllyc28ySy9SM1ZZV1ltZzRaRFZVdWJlMmUiLCJtYWMiOiIxNzJiYmFlYTQ4ZmYzMzZiZDBlODUwY2QyN2IzZWI5YzNkMjhhODU0ZDc4NzVhMWNiNmRiMjE4NDZhMmM2Y2ZkIn0%3D; _=eyJpdiI6IjNHT1RhWG1LWjZwaTZpclJyYmZCb3c9PSIsInZhbHVlIjoiTkJOYmV2bmVoL2JwYWRMb1cyOTZQdDduU2UxaC8yVFNSemVwTGVtbmtFaHhBQTU0d3hJdC9pNzRRQnVRdWNRbnV4TXpuUFl5azY0STJxM2krZFBVUjVDcHhRc01Dckt4aGRaZG85djM4emFKQjB0RnhJdGJIbHptYTRtYng2ZGoiLCJtYWMiOiJmYzQyNzgzMmQyODUzOWUzY2U0OTBmODM5N2ZmN2Y1MTdkYjliYTU2OWQ4NWFmZDMwMmU2ZjAyMWVlNjczYTMwIn0%3D; referrer=eyJpdiI6IkNuSG15TEsxcnNqcVoxZEszdG1vZ0E9PSIsInZhbHVlIjoiUDZRQTIwWldPVUhoWkI3MjRscE9wY1d5OHJEVERUSjNWa0lmdTA1RnZUeVRxSzV4UElZVzRvNmYwc0ZWQkx0cmNCZ0tuS0g1VHhxQnBoM2IrZnc1d1E9PSIsIm1hYyI6IjYyOThmN2ExYjBkNWZlZjlhOGY2NThhOTIxZjY3OTE2ZDc0NTIwYzlmMjEzZGQ5ODNiMGI4MTE0NGUwNzdiOGIifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D
Source: global traffic	HTTP traffic detected: GET /js/app.js?id=11d7149dd52495db050a HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6ImdMbDIvQUU0VTZSRzNWSmZjdWxlTUE9PSIsInZhbHVlIjoieHlvRzhmZW1sSlBXWW9TTkQvZC9uMzRDNHZXY0xzdzJyUVNVTGNzQTFtQ1ppQmoxMDVGalBETUROK1pqc1Z5aFU1aXVEVlBmWmp3cDVVeG9mczdDTFA0alA5L0hJVjVyckE1Vm5BMllyc28ySy9SM1ZZV1ltZzRaRFZVdWJlMmUiLCJtYWMiOiIxNzJiYmFlYTQ4ZmYzMzZiZDBlODUwY2QyN2IzZWI5YzNkMjhhODU0ZDc4NzVhMWNiNmRiMjE4NDZhMmM2Y2ZkIn0%3D; _=eyJpdiI6IjNHT1RhWG1LWjZwaTZpclJyYmZCb3c9PSIsInZhbHVlIjoiTkJOYmV2bmVoL2JwYWRMb1cyOTZQdDduU2UxaC8yVFNSemVwTGVtbmtFaHhBQTU0d3hJdC9pNzRRQnVRdWNRbnV4TXpuUFl5azY0STJxM2krZFBVUjVDcHhRc01Dckt4aGRaZG85djM4emFKQjB0RnhJdGJIbHptYTRtYng2ZGoiLCJtYWMiOiJmYzQyNzgzMmQyODUzOWUzY2U0OTBmODM5N2ZmN2Y1MTdkYjliYTU2OWQ4NWFmZDMwMmU2ZjAyMWVlNjczYTMwIn0%3D; referrer=eyJpdiI6IkNuSG15TEsxcnNqcVoxZEszdG1vZ0E9PSIsInZhbHVlIjoiUDZRQTIwWldPVUhoWkI3MjRscE9wY1d5OHJEVERUSjNWa0lmdTA1RnZUeVRxSzV4UElZVzRvNmYwc0ZWQkx0cmNCZ0tuS0g1VHhxQnBoM2IrZnc1d1E9PSIsIm1hYyI6IjYyOThmN2ExYjBkNWZlZjlhOGY2NThhOTIxZjY3OTE2ZDc0NTIwYzlmMjEzZGQ5ODNiMGI4MTE0NGUwNzdiOGIifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D
Source: global traffic	HTTP traffic detected: GET /images/male/40-60/t-5.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6ImdMbDIvQUU0VTZSRzNWSmZjdWxlTUE9PSIsInZhbHVlIjoieHlvRzhmZW1sSlBXWW9TTkQvZC9uMzRDNHZXY0xzdzJyUVNVTGNzQTFtQ1ppQmoxMDVGalBETUROK1pqc1Z5aFU1aXVEVlBmWmp3cDVVeG9mczdDTFA0alA5L0hJVjVyckE1Vm5BMllyc28ySy9SM1ZZV1ltZzRaRFZVdWJlMmUiLCJtYWMiOiIxNzJiYmFlYTQ4ZmYzMzZiZDBlODUwY2QyN2IzZWI5YzNkMjhhODU0ZDc4NzVhMWNiNmRiMjE4NDZhMmM2Y2ZkIn0%3D; _=eyJpdiI6IjNHT1RhWG1LWjZwaTZpclJyYmZCb3c9PSIsInZhbHVlIjoiTkJOYmV2bmVoL2JwYWRMb1cyOTZQdDduU2UxaC8yVFNSemVwTGVtbmtFaHhBQTU0d3hJdC9pNzRRQnVRdWNRbnV4TXpuUFl5azY0STJxM2krZFBVUjVDcHhRc01Dckt4aGRaZG85djM4emFKQjB0RnhJdGJIbHptYTRtYng2ZGoiLCJtYWMiOiJmYzQyNzgzMmQyODUzOWUzY2U0OTBmODM5N2ZmN2Y1MTdkYjliYTU2OWQ4NWFmZDMwMmU2ZjAyMWVlNjczYTMwIn0%3D; referrer=eyJpdiI6IkNuSG15TEsxcnNqcVoxZEszdG1vZ0E9PSIsInZhbHVlIjoiUDZRQTIwWldPVUhoWkI3MjRscE9wY1d5OHJEVERUSjNWa0lmdTA1RnZUeVRxSzV4UElZVzRvNmYwc0ZWQkx0cmNCZ0tuS0g1VHhxQnBoM2IrZnc1d1E9PSIsIm1hYyI6IjYyOThmN2ExYjBkNWZlZjlhOGY2NThhOTIxZjY3OTE2ZDc0NTIwYzlmMjEzZGQ5ODNiMGI4MTE0NGUwNzdiOGIifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D
Source: global traffic	HTTP traffic detected: GET /images/male/40-60/t-0.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6ImdMbDIvQUU0VTZSRzNWSmZjdWxlTUE9PSIsInZhbHVlIjoieHlvRzhmZW1sSlBXWW9TTkQvZC9uMzRDNHZXY0xzdzJyUVNVTGNzQTFtQ1ppQmoxMDVGalBETUROK1pqc1Z5aFU1aXVEVlBmWmp3cDVVeG9mczdDTFA0alA5L0hJVjVyckE1Vm5BMllyc28ySy9SM1ZZV1ltZzRaRFZVdWJlMmUiLCJtYWMiOiIxNzJiYmFlYTQ4ZmYzMzZiZDBlODUwY2QyN2IzZWI5YzNkMjhhODU0ZDc4NzVhMWNiNmRiMjE4NDZhMmM2Y2ZkIn0%3D; _=eyJpdiI6IjNHT1RhWG1LWjZwaTZpclJyYmZCb3c9PSIsInZhbHVlIjoiTkJOYmV2bmVoL2JwYWRMb1cyOTZQdDduU2UxaC8yVFNSemVwTGVtbmtFaHhBQTU0d3hJdC9pNzRRQnVRdWNRbnV4TXpuUFl5azY0STJxM2krZFBVUjVDcHhRc01Dckt4aGRaZG85djM4emFKQjB0RnhJdGJIbHptYTRtYng2ZGoiLCJtYWMiOiJmYzQyNzgzMmQyODUzOWUzY2U0OTBmODM5N2ZmN2Y1MTdkYjliYTU2OWQ4NWFmZDMwMmU2ZjAyMWVlNjczYTMwIn0%3D; referrer=eyJpdiI6IkNuSG15TEsxcnNqcVoxZEszdG1vZ0E9PSIsInZhbHVlIjoiUDZRQTIwWldPVUhoWkI3MjRscE9wY1d5OHJEVERUSjNWa0lmdTA1RnZUeVRxSzV4UElZVzRvNmYwc0ZWQkx0cmNCZ0tuS0g1VHhxQnBoM2IrZnc1d1E9PSIsIm1hYyI6IjYyOThmN2ExYjBkNWZlZjlhOGY2NThhOTIxZjY3OTE2ZDc0NTIwYzlmMjEzZGQ5ODNiMGI4MTE0NGUwNzdiOGIifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN
Source: global traffic	HTTP traffic detected: GET /event/1YahHTWvLs8kmboN?page=https:%2F%2Fvisi-sharp.net%2Freport%3Faff_id%3D326%26subid2%3D6812_sessid20250109205426977%26subid%3D8802&event=page:load HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6IitWM0Z6bjVKL1l4enk3Mlg3ZjlLTEE9PSIsInZhbHVlIjoiVzMyVWwxdmdTU2NMcmlLblozemxETWRoUDNNcTJaNktjL1Y2K3ZnVHFIbTR6Q0lYVmZZdHF0bkJENVFwTmNTZFF0UStyamNUVHV1ZkNxQ21mVkJKRUpjMlJWQ1JtRFU4ZDdFMFUrMVpXeUlwMVJiQmpLZnA0Vzh6cDZWaFU1T2wiLCJtYWMiOiI2YzEwN2E2Y2I1MzFiMTViYmU3ZTM3M2Q0NjZkOGY1YzE2ZTllMzA4ZDdiYWNmNmVmY2E2Yzc1ZjVkZGI3ZGJiIn0%3D; _=eyJpdiI6IkY3UHNXa0kwSytkSGpoRlZwL090ZVE9PSIsInZhbHVlIjoib29JalVoZUJjbUU3WmtwL1ByZElidi9NYlhMK1FtalZRU255dXJ5VDhpMHRTVGFHT0UxQXFNQWZ1NWRVNGFUVjZncWVzdWNjcy9WajQ3YjRLdHU4ZjRtdGY5U0pNTTF1WHVaMGJQQlBZOUd2SVBHWVlobzdCb1YvVzJKOXlNbGsiLCJtYWMiOiIxMzFhNjIyMTdlNGE4NTRjZjkxNGIzOWZmMmViNjM4M2FjZmVmYTUzOGM5ODc0YmZkNmFiMzQ3MmZiZDBhMjM5In0%3D; referrer=eyJpdiI6IlVPOHFaWEV0cFlGSVJ5TU5Hd3h0Smc9PSIsInZhbHVlIjoiRURjQTFXcWNJRGJoWkVXS3MrR3NkQ0hXSnR0TDZYQVJLcXJYckZ1bGUrSUNoOW5JN1dKYjI5K0JtT2l3VTdRU1VWMkN1aGllUFBkcVZaOXN3WHJQaDB6M0hUWWMrZEdTL2pJUjhJcXYvVUpyNWd4OUxQbzdHV01iNXkvYmk3cDVKZnNqWTFacWp1dUwrSVNaRDR3ZXlpUHpqQmhUWnFCZXZhYzNRUldDSkI2SmRGbmpWWFcyWkE1OCtqeUxncENFIiwibWFjIjoiNjk1ZjE3YjVkYzE4ODIwODUxMmFjYzA3MTk3YmQ0ZGVjYWEzZGU0NjExMmU1ZmU3ZTFhOGE4ZTJiYjI1YjBkYiJ9
Source: global traffic	HTTP traffic detected: GET /images/male/30-40/t-6.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6IitWM0Z6bjVKL1l4enk3Mlg3ZjlLTEE9PSIsInZhbHVlIjoiVzMyVWwxdmdTU2NMcmlLblozemxETWRoUDNNcTJaNktjL1Y2K3ZnVHFIbTR6Q0lYVmZZdHF0bkJENVFwTmNTZFF0UStyamNUVHV1ZkNxQ21mVkJKRUpjMlJWQ1JtRFU4ZDdFMFUrMVpXeUlwMVJiQmpLZnA0Vzh6cDZWaFU1T2wiLCJtYWMiOiI2YzEwN2E2Y2I1MzFiMTViYmU3ZTM3M2Q0NjZkOGY1YzE2ZTllMzA4ZDdiYWNmNmVmY2E2Yzc1ZjVkZGI3ZGJiIn0%3D; _=eyJpdiI6IkY3UHNXa0kwSytkSGpoRlZwL090ZVE9PSIsInZhbHVlIjoib29JalVoZUJjbUU3WmtwL1ByZElidi9NYlhMK1FtalZRU255dXJ5VDhpMHRTVGFHT0UxQXFNQWZ1NWRVNGFUVjZncWVzdWNjcy9WajQ3YjRLdHU4ZjRtdGY5U0pNTTF1WHVaMGJQQlBZOUd2SVBHWVlobzdCb1YvVzJKOXlNbGsiLCJtYWMiOiIxMzFhNjIyMTdlNGE4NTRjZjkxNGIzOWZmMmViNjM4M2FjZmVmYTUzOGM5ODc0YmZkNmFiMzQ3MmZiZDBhMjM5In0%3D; referrer=eyJpdiI6IlVPOHFaWEV0cFlGSVJ5TU5Hd3h0Smc9PSIsInZhbHVlIjoiRURjQTFXcWNJRGJoWkVXS3MrR3NkQ0hXSnR0TDZYQVJLcXJYckZ1bGUrSUNoOW5JN1dKYjI5K0JtT2l3VTdRU1VWMkN1aGllUFBkcVZaOXN3WHJQaDB6M0hUWWMrZEdTL2pJUjhJcXYvVUpyNWd4OUxQbzdHV01iNXkvYmk3cDVKZnNqWTFacWp1dUwrSVNaRDR3ZXlpUHpqQmhUWnFCZXZhYzNRUldDSkI2SmRGbmpWWFcyWkE1OCtqeUxncENFIiwibWFjIjoiNjk1ZjE3YjVkYzE4ODIwODUxMmFjYzA3MTk3YmQ0ZGVjYWEzZGU0NjExMmU1ZmU3ZTFhOGE4ZTJiYjI1YjBkYiJ9
Source: global traffic	HTTP traffic detected: GET /images/male/30-40/t-2.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6IitWM0Z6bjVKL1l4enk3Mlg3ZjlLTEE9PSIsInZhbHVlIjoiVzMyVWwxdmdTU2NMcmlLblozemxETWRoUDNNcTJaNktjL1Y2K3ZnVHFIbTR6Q0lYVmZZdHF0bkJENVFwTmNTZFF0UStyamNUVHV1ZkNxQ21mVkJKRUpjMlJWQ1JtRFU4ZDdFMFUrMVpXeUlwMVJiQmpLZnA0Vzh6cDZWaFU1T2wiLCJtYWMiOiI2YzEwN2E2Y2I1MzFiMTViYmU3ZTM3M2Q0NjZkOGY1YzE2ZTllMzA4ZDdiYWNmNmVmY2E2Yzc1ZjVkZGI3ZGJiIn0%3D; _=eyJpdiI6IkY3UHNXa0kwSytkSGpoRlZwL090ZVE9PSIsInZhbHVlIjoib29JalVoZUJjbUU3WmtwL1ByZElidi9NYlhMK1FtalZRU255dXJ5VDhpMHRTVGFHT0UxQXFNQWZ1NWRVNGFUVjZncWVzdWNjcy9WajQ3YjRLdHU4ZjRtdGY5U0pNTTF1WHVaMGJQQlBZOUd2SVBHWVlobzdCb1YvVzJKOXlNbGsiLCJtYWMiOiIxMzFhNjIyMTdlNGE4NTRjZjkxNGIzOWZmMmViNjM4M2FjZmVmYTUzOGM5ODc0YmZkNmFiMzQ3MmZiZDBhMjM5In0%3D; referrer=eyJpdiI6IlVPOHFaWEV0cFlGSVJ5TU5Hd3h0Smc9PSIsInZhbHVlIjoiRURjQTFXcWNJRGJoWkVXS3MrR3NkQ0hXSnR0TDZYQVJLcXJYckZ1bGUrSUNoOW5JN1dKYjI5K0JtT2l3VTdRU1VWMkN1aGllUFBkcVZaOXN3WHJQaDB6M0hUWWMrZEdTL2pJUjhJcXYvVUpyNWd4OUxQbzdHV01iNXkvYmk3cDVKZnNqWTFacWp1dUwrSVNaRDR3ZXlpUHpqQmhUWnFCZXZhYzNRUldDSkI2SmRGbmpWWFcyWkE1OCtqeUxncENFIiwibWFjIjoiNjk1ZjE3YjVkYzE4ODIwODUxMmFjYzA3MTk3YmQ0ZGVjYWEzZGU0NjExMmU1ZmU3ZTFhOGE4ZTJiYjI1YjBkYiJ9
Source: global traffic	HTTP traffic detected: GET /images/female/30-40/t-7.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6IitWM0Z6bjVKL1l4enk3Mlg3ZjlLTEE9PSIsInZhbHVlIjoiVzMyVWwxdmdTU2NMcmlLblozemxETWRoUDNNcTJaNktjL1Y2K3ZnVHFIbTR6Q0lYVmZZdHF0bkJENVFwTmNTZFF0UStyamNUVHV1ZkNxQ21mVkJKRUpjMlJWQ1JtRFU4ZDdFMFUrMVpXeUlwMVJiQmpLZnA0Vzh6cDZWaFU1T2wiLCJtYWMiOiI2YzEwN2E2Y2I1MzFiMTViYmU3ZTM3M2Q0NjZkOGY1YzE2ZTllMzA4ZDdiYWNmNmVmY2E2Yzc1ZjVkZGI3ZGJiIn0%3D; _=eyJpdiI6IkY3UHNXa0kwSytkSGpoRlZwL090ZVE9PSIsInZhbHVlIjoib29JalVoZUJjbUU3WmtwL1ByZElidi9NYlhMK1FtalZRU255dXJ5VDhpMHRTVGFHT0UxQXFNQWZ1NWRVNGFUVjZncWVzdWNjcy9WajQ3YjRLdHU4ZjRtdGY5U0pNTTF1WHVaMGJQQlBZOUd2SVBHWVlobzdCb1YvVzJKOXlNbGsiLCJtYWMiOiIxMzFhNjIyMTdlNGE4NTRjZjkxNGIzOWZmMmViNjM4M2FjZmVmYTUzOGM5ODc0YmZkNmFiMzQ3MmZiZDBhMjM5In0%3D; referrer=eyJpdiI6IlVPOHFaWEV0cFlGSVJ5TU5Hd3h0Smc9PSIsInZhbHVlIjoiRURjQTFXcWNJRGJoWkVXS3MrR3NkQ0hXSnR0TDZYQVJLcXJYckZ1bGUrSUNoOW5JN1dKYjI5K0JtT2l3VTdRU1VWMkN1aGllUFBkcVZaOXN3WHJQaDB6M0hUWWMrZEdTL2pJUjhJcXYvVUpyNWd4OUxQbzdHV01iNXkvYmk3cDVKZnNqWTFacWp1dUwrSVNaRDR3ZXlpUHpqQmhUWnFCZXZhYzNRUldDSkI2SmRGbmpWWFcyWkE1OCtqeUxncENFIiwibWFjIjoiNjk1ZjE3YjVkYzE4ODIwODUxMmFjYzA3MTk3YmQ0ZGVjYWEzZGU0NjExMmU1ZmU3ZTFhOGE4ZTJiYjI1YjBkYiJ9
Source: global traffic	HTTP traffic detected: GET /images/female/40-60/t-1.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6IitWM0Z6bjVKL1l4enk3Mlg3ZjlLTEE9PSIsInZhbHVlIjoiVzMyVWwxdmdTU2NMcmlLblozemxETWRoUDNNcTJaNktjL1Y2K3ZnVHFIbTR6Q0lYVmZZdHF0bkJENVFwTmNTZFF0UStyamNUVHV1ZkNxQ21mVkJKRUpjMlJWQ1JtRFU4ZDdFMFUrMVpXeUlwMVJiQmpLZnA0Vzh6cDZWaFU1T2wiLCJtYWMiOiI2YzEwN2E2Y2I1MzFiMTViYmU3ZTM3M2Q0NjZkOGY1YzE2ZTllMzA4ZDdiYWNmNmVmY2E2Yzc1ZjVkZGI3ZGJiIn0%3D; _=eyJpdiI6IkY3UHNXa0kwSytkSGpoRlZwL090ZVE9PSIsInZhbHVlIjoib29JalVoZUJjbUU3WmtwL1ByZElidi9NYlhMK1FtalZRU255dXJ5VDhpMHRTVGFHT0UxQXFNQWZ1NWRVNGFUVjZncWVzdWNjcy9WajQ3YjRLdHU4ZjRtdGY5U0pNTTF1WHVaMGJQQlBZOUd2SVBHWVlobzdCb1YvVzJKOXlNbGsiLCJtYWMiOiIxMzFhNjIyMTdlNGE4NTRjZjkxNGIzOWZmMmViNjM4M2FjZmVmYTUzOGM5ODc0YmZkNmFiMzQ3MmZiZDBhMjM5In0%3D; referrer=eyJpdiI6IlVPOHFaWEV0cFlGSVJ5TU5Hd3h0Smc9PSIsInZhbHVlIjoiRURjQTFXcWNJRGJoWkVXS3MrR3NkQ0hXSnR0TDZYQVJLcXJYckZ1bGUrSUNoOW5JN1dKYjI5K0JtT2l3VTdRU1VWMkN1aGllUFBkcVZaOXN3WHJQaDB6M0hUWWMrZEdTL2pJUjhJcXYvVUpyNWd4OUxQbzdHV01iNXkvYmk3cDVKZnNqWTFacWp1dUwrSVNaRDR3ZXlpUHpqQmhUWnFCZXZhYzNRUldDSkI2SmRGbmpWWFcyWkE1OCtqeUxncENFIiwibWFjIjoiNjk1ZjE3YjVkYzE4ODIwODUxMmFjYzA3MTk3YmQ0ZGVjYWEzZGU0NjExMmU1ZmU3ZTFhOGE4ZTJiYjI1YjBkYiJ9
Source: global traffic	HTTP traffic detected: GET /images/100-natural.svg HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6IitWM0Z6bjVKL1l4enk3Mlg3ZjlLTEE9PSIsInZhbHVlIjoiVzMyVWwxdmdTU2NMcmlLblozemxETWRoUDNNcTJaNktjL1Y2K3ZnVHFIbTR6Q0lYVmZZdHF0bkJENVFwTmNTZFF0UStyamNUVHV1ZkNxQ21mVkJKRUpjMlJWQ1JtRFU4ZDdFMFUrMVpXeUlwMVJiQmpLZnA0Vzh6cDZWaFU1T2wiLCJtYWMiOiI2YzEwN2E2Y2I1MzFiMTViYmU3ZTM3M2Q0NjZkOGY1YzE2ZTllMzA4ZDdiYWNmNmVmY2E2Yzc1ZjVkZGI3ZGJiIn0%3D; _=eyJpdiI6IkY3UHNXa0kwSytkSGpoRlZwL090ZVE9PSIsInZhbHVlIjoib29JalVoZUJjbUU3WmtwL1ByZElidi9NYlhMK1FtalZRU255dXJ5VDhpMHRTVGFHT0UxQXFNQWZ1NWRVNGFUVjZncWVzdWNjcy9WajQ3YjRLdHU4ZjRtdGY5U0pNTTF1WHVaMGJQQlBZOUd2SVBHWVlobzdCb1YvVzJKOXlNbGsiLCJtYWMiOiIxMzFhNjIyMTdlNGE4NTRjZjkxNGIzOWZmMmViNjM4M2FjZmVmYTUzOGM5ODc0YmZkNmFiMzQ3MmZiZDBhMjM5In0%3D; referrer=eyJpdiI6IlVPOHFaWEV0cFlGSVJ5TU5Hd3h0Smc9PSIsInZhbHVlIjoiRURjQTFXcWNJRGJoWkVXS3MrR3NkQ0hXSnR0TDZYQVJLcXJYckZ1bGUrSUNoOW5JN1dKYjI5K0JtT2l3VTdRU1VWMkN1aGllUFBkcVZaOXN3WHJQaDB6M0hUWWMrZEdTL2pJUjhJcXYvVUpyNWd4OUxQbzdHV01iNXkvYmk3cDVKZnNqWTFacWp1dUwrSVNaRDR3ZXlpUHpqQmhUWnFCZXZhYzNRUldDSkI2SmRGbmpWWFcyWkE1OCtqeUxncENFIiwibWFjIjoiNjk1ZjE3YjVkYzE4ODIwODUxMmFjYzA3MTk3YmQ0ZGVjYWEzZGU0NjExMmU1ZmU3ZTFhOGE4ZTJiYjI1YjBkYiJ9
Source: global traffic	HTTP traffic detected: GET /images/female/30-40/t-3.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/FDA_2.svg HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/GMP_stars.svg HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/male/40-60/t-4.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://visi-sharp.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/male/40-60/t-5.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/USA.svg HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /track/?a=6797&firstcookie=0&tracking_redirect=&referrer=&sessid2=&product=prod7,prod8,prod9,prod11&caller_url=https%3A%2F%2Fvisi-sharp.net%2Freport%3Faff_id%3D326%26subid2%3D6812_sessid20250109205426977%26subid%3D8802 HTTP/1.1Host: tracking.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://visi-sharp.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/male/30-40/t-6.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/verified_purchase.png HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /conversions.php?siteId=567&dataLayer=populate HTTP/1.1Host: dashboard.heatmap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://visi-sharp.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?a=6797&firstcookie=0&tracking_redirect=&referrer=&sessid2=&product=prod7,prod8,prod9,prod11&caller_url=https%3A%2F%2Fvisi-sharp.net%2Freport%3Faff_id%3D326%26subid2%3D6812_sessid20250109205426977%26subid%3D8802 HTTP/1.1Host: tracking.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/100-natural.svg HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/FDA_2.svg HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D; _ga_PL0H41SBF9=GS1.1.1736456088.1.0.1736456088.0.0.0; _ga=GA1.2.1941801668.1736456088; _gid=GA1.2.992191435.1736456088; _gat_gtag_UA_62785402_66=1
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/789222289013177?v=2.9.179&r=stable&domain=visi-sharp.net&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://visi-sharp.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/GMP_stars.svg HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D; _ga_PL0H41SBF9=GS1.1.1736456088.1.0.1736456088.0.0.0; _ga=GA1.2.1941801668.1736456088; _gid=GA1.2.992191435.1736456088; _gat_gtag_UA_62785402_66=1
Source: global traffic	HTTP traffic detected: GET /images/female/30-40/t-7.jpg HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D; _ga_PL0H41SBF9=GS1.1.1736456088.1.0.1736456088.0.0.0; _ga=GA1.2.1941801668.1736456088; _gid=GA1.2.992191435.1736456088; _gat_gtag_UA_62785402_66=1
Source: global traffic	HTTP traffic detected: GET /iframe_api HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/USA.svg HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D; _ga_PL0H41SBF9=GS1.1.1736456088.1.0.1736456088.0.0.0; _ga=GA1.2.1941801668.1736456088; _gid=GA1.2.992191435.1736456088; _gat_gtag_UA_62785402_66=1; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; campaign_id=; referrer=8.46.123.189::visi-sharp.net%2Freport
Source: global traffic	HTTP traffic detected: GET /conversions.php?siteId=567&dataLayer=populate HTTP/1.1Host: dashboard.heatmap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/verified_purchase.png HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D; _ga_PL0H41SBF9=GS1.1.1736456088.1.0.1736456088.0.0.0; _ga=GA1.2.1941801668.1736456088; _gid=GA1.2.992191435.1736456088; _gat_gtag_UA_62785402_66=1; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; campaign_id=; referrer=8.46.123.189::visi-sharp.net%2Freport
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=ai9MQ_IsTqk; VISITOR_INFO1_LIVE=rtLrPOSmvLs; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbg%3D%3D
Source: global traffic	HTTP traffic detected: GET /track/?verbose=1&ip=1&_=1736456090572 HTTP/1.1Host: api-js.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=ai9MQ_IsTqk; VISITOR_INFO1_LIVE=rtLrPOSmvLs; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=ai9MQ_IsTqk; VISITOR_INFO1_LIVE=rtLrPOSmvLs; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbg%3D%3D
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/bTS-krGMW8fDflzgOBqs4RfQ289v88xjeZzvxqf94UM.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_kXPpC91hWBfq9kR4J1VteYD5pZC7CaWzeH_gaYjVNe4rdWPt3VI-qtFVO3abjvzqNChQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_kXPpC91hWBfq9kR4J1VteYD5pZC7CaWzeH_gaYjVNe4rdWPt3VI-qtFVO3abjvzqNChQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=ai9MQ_IsTqk; VISITOR_INFO1_LIVE=rtLrPOSmvLs; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbg%3D%3D
Source: global traffic	HTTP traffic detected: GET /js/th/bTS-krGMW8fDflzgOBqs4RfQ289v88xjeZzvxqf94UM.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/player?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=ai9MQ_IsTqk; VISITOR_INFO1_LIVE=rtLrPOSmvLs; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbg%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=53761950&dur=3162.121&lmt=1736210078379414&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIga6oJUHFntcixSjzFhaGFhzelwZPA2umB8Vss3GLjf3ACIQCLvrER5hnqt9prZMjWn4QhPR8Pza3Oj3mHWeIWAJHCWw%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=0-71408&rn=2&rbuf=0&pot=IjihUKFTxtCWz-I31SbsPc0k7wXZCe4HxSHwA8gzlmTiaOM66BviN-sG9CjoFeY34DfAAYRj5XWSFA==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&mime=video%2Fmp4&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=30618074&dur=3162.080&lmt=1736215533919687&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIhAI_rwFllGszfC6Kw1hjuFkUNp8WXhyBqQQKnD-9PSY0hAiApeosoQv0Ed0T0YWUxzjvfzAH3RGr1AN1KY05xWXbW5A%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=0-154594&rn=1&rbuf=0&pot=IjgHswewYDMwLETUc8VK3mvHSeZ_6kjkY8JW4G7QMIdEi0XZTvhE1E3lUstO9kDURtRm4iKAQ5Y09w==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/next?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=ai9MQ_IsTqk; VISITOR_INFO1_LIVE=rtLrPOSmvLs; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbg%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=53761950&dur=3162.121&lmt=1736210078379414&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIga6oJUHFntcixSjzFhaGFhzelwZPA2umB8Vss3GLjf3ACIQCLvrER5hnqt9prZMjWn4QhPR8Pza3Oj3mHWeIWAJHCWw%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=71409-140449&rn=4&rbuf=3842&pot=IjhcpFyiOyRrBB_DKNIRyTDQEvEk_RPzONUN9zXHa5AfnB7OFe8fwxbyCdwV4RvDHcM99XmXGIFv4A==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&mime=video%2Fmp4&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=30618074&dur=3162.080&lmt=1736215533919687&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIhAI_rwFllGszfC6Kw1hjuFkUNp8WXhyBqQQKnD-9PSY0hAiApeosoQv0Ed0T0YWUxzjvfzAH3RGr1AN1KY05xWXbW5A%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=154595-294178&rn=3&rbuf=3830&pot=IjgDLAMqZKw0jEBLd1pOQW9YTXl7dUx7Z11Sf2pPNBhAFEFGSmdAS0l6VlRKaURLQktifSYfRwkwaA==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/player_ias.vflset/en_US/captions.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=ai9MQ_IsTqk; VISITOR_INFO1_LIVE=rtLrPOSmvLs; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbg%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=53761950&dur=3162.121&lmt=1736210078379414&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIga6oJUHFntcixSjzFhaGFhzelwZPA2umB8Vss3GLjf3ACIQCLvrER5hnqt9prZMjWn4QhPR8Pza3Oj3mHWeIWAJHCWw%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=140450-307330&rn=5&rbuf=7766&pot=IjhZAlkEPoJuohplLXQUbzV2F1chWxZVPXMIUTBhbjYaOhtoEEkaZRNUDHoQRx5lGGU4U3wxHSdqRg==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/player_ias.vflset/en_US/endscreen.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=ai9MQ_IsTqk; VISITOR_INFO1_LIVE=rtLrPOSmvLs; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbg%3D%3D
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_kXPpC91hWBfq9kR4J1VteYD5pZC7CaWzeH_gaYjVNe4rdWPt3VI-qtFVO3abjvzqNChQ=s88-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&mime=video%2Fmp4&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=30618074&dur=3162.080&lmt=1736215533919687&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIhAI_rwFllGszfC6Kw1hjuFkUNp8WXhyBqQQKnD-9PSY0hAiApeosoQv0Ed0T0YWUxzjvfzAH3RGr1AN1KY05xWXbW5A%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=294179-867497&rn=6&rbuf=9952&pot=IjjGJ8YhoafxhoVAslGLSqpTiHK-folwolaXdK9E8ROFH4RNj2yFQIxxk1-PYoFAh0CnduMUggL1Yw==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=m0Zu1_GrK9QwLAE5OcCZdC0qoRCznfa8EYUarUwutpfX211D_Qx8bZdHcYIh7Zyu7xV_o4_YSa5g6bwnUp3rwpYcBwP06xiB1Brn7g5wlNI8_7OLQa37O12Ka5GiZNFkob2VJrzireBkSsJ-J7ZeqWm8wHsbnsyOCOazKsuraHPAytM-j8Nsapn3ohF9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=ai9MQ_IsTqk; VISITOR_INFO1_LIVE=rtLrPOSmvLs; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbg%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=53761950&dur=3162.121&lmt=1736210078379414&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIga6oJUHFntcixSjzFhaGFhzelwZPA2umB8Vss3GLjf3ACIQCLvrER5hnqt9prZMjWn4QhPR8Pza3Oj3mHWeIWAJHCWw%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=307331-522882&rn=7&rbuf=16543&pot=IjizobOn1CGEA_DGx9f-zN_V_fTL-Pz219Di8trChJXwmfHL-urwxvn35tn65PTG8sbS8JaS94SA5Q==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_kXPpC91hWBfq9kR4J1VteYD5pZC7CaWzeH_gaYjVNe4rdWPt3VI-qtFVO3abjvzqNChQ=s88-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=m0Zu1_GrK9QwLAE5OcCZdC0qoRCznfa8EYUarUwutpfX211D_Qx8bZdHcYIh7Zyu7xV_o4_YSa5g6bwnUp3rwpYcBwP06xiB1Brn7g5wlNI8_7OLQa37O12Ka5GiZNFkob2VJrzireBkSsJ-J7ZeqWm8wHsbnsyOCOazKsuraHPAytM-j8Nsapn3ohF9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=ai9MQ_IsTqk; VISITOR_INFO1_LIVE=rtLrPOSmvLs; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbg%3D%3D
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=iEQt66g_a3YZoX5RAKt25TG_mJWE9wso6IcXpLlSqRsNi6a76p9pk7gHZyelwNrVeEgL4S2XsmvRokGyx7PvpF2JGBGXvYJRRMijNedm_PnaxGtAIGb_0yez7eh4fRD_u9xcTp1KY_rAu4tMA7hhGFV73Fcn3YEyiL9Enp-w5RpWJTHB2sSBUr8
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=53761950&dur=3162.121&lmt=1736210078379414&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIga6oJUHFntcixSjzFhaGFhzelwZPA2umB8Vss3GLjf3ACIQCLvrER5hnqt9prZMjWn4QhPR8Pza3Oj3mHWeIWAJHCWw%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=522883-930949&rn=8&rbuf=22827&pot=MnRVUFcU02mb1lVo7Z7SSGuhIjkijW2NOXIe1qTwwvI-sjBmeM01ox1Lem1cDkd2xg24MILS1YW3tBTPGSB5dKyHzO_Hiec1qSLqNcg8h7RoghHABUUy000X84tZrvpFRJLeEVZL1llS3aRL-wnc2WHE9bh6Ag==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&mime=video%2Fmp4&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=30618074&dur=3162.080&lmt=1736215533919687&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIhAI_rwFllGszfC6Kw1hjuFkUNp8WXhyBqQQKnD-9PSY0hAiApeosoQv0Ed0T0YWUxzjvfzAH3RGr1AN1KY05xWXbW5A%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=867498-2649207&rn=9&rbuf=24682&pot=MnRVUFcU02mb1lVo7Z7SSGuhIjkijW2NOXIe1qTwwvI-sjBmeM01ox1Lem1cDkd2xg24MILS1YW3tBTPGSB5dKyHzO_Hiec1qSLqNcg8h7RoghHABUUy000X84tZrvpFRJLeEVZL1llS3aRL-wnc2WHE9bh6Ag==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=ai9MQ_IsTqk; VISITOR_INFO1_LIVE=rtLrPOSmvLs; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbg%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=53761950&dur=3162.121&lmt=1736210078379414&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIga6oJUHFntcixSjzFhaGFhzelwZPA2umB8Vss3GLjf3ACIQCLvrER5hnqt9prZMjWn4QhPR8Pza3Oj3mHWeIWAJHCWw%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=930950-1534326&rn=10&rbuf=32724&pot=MnRVUFcU02mb1lVo7Z7SSGuhIjkijW2NOXIe1qTwwvI-sjBmeM01ox1Lem1cDkd2xg24MILS1YW3tBTPGSB5dKyHzO_Hiec1qSLqNcg8h7RoghHABUUy000X84tZrvpFRJLeEVZL1llS3aRL-wnc2WHE9bh6Ag==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=53761950&dur=3162.121&lmt=1736210078379414&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIga6oJUHFntcixSjzFhaGFhzelwZPA2umB8Vss3GLjf3ACIQCLvrER5hnqt9prZMjWn4QhPR8Pza3Oj3mHWeIWAJHCWw%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=1534327-2152745&rn=11&rbuf=47948&pot=MnRVUFcU02mb1lVo7Z7SSGuhIjkijW2NOXIe1qTwwvI-sjBmeM01ox1Lem1cDkd2xg24MILS1YW3tBTPGSB5dKyHzO_Hiec1qSLqNcg8h7RoghHABUUy000X84tZrvpFRJLeEVZL1llS3aRL-wnc2WHE9bh6Ag==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event/1YahHTWvLs8kmboN?event=transcript:open HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-XSRF-TOKEN: eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9
Source: global traffic	HTTP traffic detected: GET /images/0.png HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/css/app-19.css?id=9cf94c61215466bf367fAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D; _ga_PL0H41SBF9=GS1.1.1736456088.1.0.1736456088.0.0.0; _gid=GA1.2.992191435.1736456088; _gat_gtag_UA_62785402_66=1; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6
Source: global traffic	HTTP traffic detected: GET /images/5.png HTTP/1.1Host: visi-sharp.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visi-sharp.net/css/app-19.css?id=9cf94c61215466bf367fAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D; _ga_PL0H41SBF9=GS1.1.1736456088.1.0.1736456088.0.0.0; _gid=GA1.2.992191435.1736456088; _gat_gtag_UA_62785402_66=1; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&mime=video%2Fmp4&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=30618074&dur=3162.080&lmt=1736215533919687&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIhAI_rwFllGszfC6Kw1hjuFkUNp8WXhyBqQQKnD-9PSY0hAiApeosoQv0Ed0T0YWUxzjvfzAH3RGr1AN1KY05xWXbW5A%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=2649208-4534709&rn=12&rbuf=50645&pot=MnRVUFcU02mb1lVo7Z7SSGuhIjkijW2NOXIe1qTwwvI-sjBmeM01ox1Lem1cDkd2xg24MILS1YW3tBTPGSB5dKyHzO_Hiec1qSLqNcg8h7RoghHABUUy000X84tZrvpFRJLeEVZL1llS3aRL-wnc2WHE9bh6Ag==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/0.png HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; XSRF-TOKEN=eyJpdiI6Ii96bVU3djUwZXZSRXAwaWJ6UG9MakE9PSIsInZhbHVlIjoiYWFkUis1am4vbFZiY0xBd3B6bkNsaEhZMk5sdGg1UlNhcFhHcVdXR1BDN081dGtrRXRGa3JNWlNWaXBHUStsMlF4Rm5WdnlOQUhLMTBBZklWaVpPSXVEaFlqZm5yZDl0SENtYlcxbmhHWUdhbFNWdFZXOG9ZZkxEN21ROXg5RGYiLCJtYWMiOiI3ZDA2YjZmMmY2MTgyYWNmNjljMjE4NDY0MTI0MzkxNzA3NzhmY2NlOGU3MGY2ZGMyZDY5NGU4NTY0ZDYzOGViIn0%3D; _=eyJpdiI6ImI3VUsydmtPd0p3MWJOUW5kUTU2bEE9PSIsInZhbHVlIjoiR09EYzEyeWUxdlllVXNTKzhrUklneXc4WnE2YUlnWGpsUWNWQjkxSWU0dUo1TUFwRTlPUTE3UHdKbTBFTDZrYm1iNDA5dXJuZW1XVzlKRElJdVdCelBnQkFob1J0bmY1cUV0UllDMlZUdUF4NFowRmxGSGNuSzYrY1BjdkpqeVQiLCJtYWMiOiJjZmQ0OWMzNGQyOThiNGM4N2Y1NTkxZWI4ZWRmNGQxYjRkOGY0NjYzZjNlMmRhMTMwZDQ1MjMxZTI2M2VmMzZmIn0%3D; referrer=eyJpdiI6IlNsVFpsclB6c0phOHV0dE5kRjNKWmc9PSIsInZhbHVlIjoiRzBTR3c4Zi8xYUlqdTl6eVVGSmMrMm5FOUIwaEF0L2VrZWkzVm9DM2ZNK2lSOHU3TndyTzZ0NmxyYjN1RHlOemdtbDNoVlVtVUltUVJnKzkvQXpuQ2c9PSIsIm1hYyI6IjNjZGU2MTc2MDU4MTk4NzQzNWYxNTZiOWRjYjYzZDdjNzVmYWMxNzdmMzYxM2ZiYmExYWE2YTczZTMyNWU1NWMifQ%3D%3D; _ga_PL0H41SBF9=GS1.1.1736456088.1.0.1736456088.0.0.0; _gid=GA1.2.992191435.1736456088; _gat_gtag_UA_62785402_66=1; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; campaign_id=; referrer=8.46.123.189::visi-sharp.net%2Freport; _ga=GA1.1.1941801668.1736456088; _ga_61SXPRGS4Y=GS1.1.1736456088.1.0.1736456096.0.0.0; transcript=true
Source: global traffic	HTTP traffic detected: GET /event/1YahHTWvLs8kmboN?event=transcript:open HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; _ga_PL0H41SBF9=GS1.1.1736456088.1.0.1736456088.0.0.0; _gid=GA1.2.992191435.1736456088; _gat_gtag_UA_62785402_66=1; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; campaign_id=; referrer=8.46.123.189::visi-sharp.net%2Freport; _ga=GA1.1.1941801668.1736456088; _ga_61SXPRGS4Y=GS1.1.1736456088.1.0.1736456096.0.0.0; transcript=true; XSRF-TOKEN=eyJpdiI6IjRaeTRVWWdYaW5ZZm1VdnlXVFVES3c9PSIsInZhbHVlIjoiQ25ndFZWSnV2OHpuVm94ZlZGY21vMkdQb3A3R0w5OVZaM3hDM0s5UEQyenZZcEVxUCtFZ280Sy9LelZlaFZDY0orNDROM0NHYmRhRkpaUUR4QXg2cVpISWdodDFlTzdOUmhMbFMrcXU2ZFJ3a0R0QW0vN1dTWE9ITno0bi9QUXkiLCJtYWMiOiIzYWJjNzkzMDMzMTMxMzU1ZTFiNzA4YzI3NjE0MjVjMDQ2NDU1ODUyMjUyODhlY2UxOTQxZTc0MTQxNjllZWYyIn0%3D; _=eyJpdiI6InZpU1E5ejB0Tk5OYStmaU53V2VMMHc9PSIsInZhbHVlIjoiRGFCU2hUTTdhZk54MlRVWjI1RmF2S01NVEN3WFlLWm5TOUlnZDJlWjI5ZC91MFBjck1qSmJvbkhGc05BRERmVERxM3puY3c2OTZ6OHZTZ2RVTldEZHN2blVjalFuWlBMV3FzNUlWMDBZS2praUhjODY0REdEdDR4MFZWY3BiUlAiLCJtYWMiOiIzMzIwMTI5Mjc5NTI0Y2IwNzE3ODMwYTEzYWM5MjUxODZlMDcyODIxOTVjOWMxNzBhZjQ2NTc0MmE4NGQ3YTNiIn0%3D; referrer=eyJpdiI6IlZIblp0M1B6RUEzUnNidEd0Y1k3elE9PSIsInZhbHVlIjoicEZCN0JXam1uVjd2Y0tpbnFKRWRNS2NIcXlsMjRsZkxWY0VBclpSS1poZFhkeXdiM2tnWkVWZnM4alozbjJITTJtRmluQ3lUTGt3bUJQeFZ0T0ZrTXlIcjYreXhZM1J0cGxlOUVYMGlQVnpoME9pUTB2Um5BT1dDR1NodmZuRnVPbnpUQklSNXY0UXhhVlo3Z2YwSHNBU2JkZW1LVk1CdWdPc1NRYmVIMHpha3ZSYitWVTdjd1lDWnk1QzFuVlNQIiwibWFjIjoiNTg3
Source: global traffic	HTTP traffic detected: GET /images/5.png HTTP/1.1Host: visi-sharp.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVGc9PSIsInZhbHVlIjoic1RSSVpxTVBrU21BSnZjc0t4QVZSZlQ5azZobTA0QVI3ZnNPODRKalpQQmtHRWVmemhZV3AyakNaUEdhWWJ0K2dyYVJRM3JKdFBQRWR5L1crQ3FkcVE9PSIsIm1hYyI6ImRlYTFhZWMxMDRkMzUwYWM3N2FhY2NkMjcxNTkxNjBjNzYyYjE1MzBkM2YyZWYyMzg3NDQzODM4MjFkMTk1ZmMifQ%3D%3D; tracking_cookie=eyJpdiI6IjZxY3g5YUxDZ2o3MVZCZGJBSWVIc1E9PSIsInZhbHVlIjoiOHMwYkVTN0I4ZWxRYnNOSm9qZUE1dDBWUFY0dGYvdjFZWGJnd1FIQUJVU25sZk9OeitlSzZ1M1ZGSW9kdXk0TCIsIm1hYyI6IjBjYmU3MDdiMzU5NjBjMTVlOTNlMzQwZGRiZGNhZjliYWE5YzIzYjQ3YzkwMWU3NzQ1MzI0YTA4ZDE0ODUxYjgifQ%3D%3D; variant=eyJpdiI6IlJtUEY3ZC81amxTTmIxSmFwVUdMT3c9PSIsInZhbHVlIjoiMVRwaDN2ODBaSGlLYThCNmN2eERjYUJpNVpyN2J1cUF4WmhNLytwc2VMcXhCMnlWS3cvYm9JM2huczVmOVZrNCIsIm1hYyI6ImJiZDEyMDk2M2IxMmJhNWNjYmM0YTIwMjkxOTg2ZjQ0YmQyODAxZTM1ZmUzZGQ0NmM4YTYwMjJjMDAzMDZkMmYifQ%3D%3D; pixels=eyJpdiI6InBUckFuZGc3dUNhN0tJOERXd290a2c9PSIsInZhbHVlIjoiQmVwNlA5MGtISFB1STF1M2tpbDRwTDRoQW92QXN2bGpzM1ZSeXhxaWlSUTJkejQyWW9nM3QyWHdXZFBOMi9VdC9WTlZuM3F1ZTdoWkJ4bTJCTGVjMWNhZGEyeGVnYy9Fck85QVBMN0RxMmJGK3pIRlJXeGFGcDdjWnRMV2FoeXdnSGFXcFh3Z25ub2cwb3p2bnB2dklBPT0iLCJtYWMiOiJiMWNkZDIwZDRmM2I1N2MyOWIwMzk2OTljOTE1MzM0NTUwMDA2MmUxMzg5ZTgyZjI4YzBlZWVmM2E2YTUzMmY5In0%3D; user=1YahHTWvLs8kmboN; _ga_PL0H41SBF9=GS1.1.1736456088.1.0.1736456088.0.0.0; _gid=GA1.2.992191435.1736456088; _gat_gtag_UA_62785402_66=1; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; campaign_id=; referrer=8.46.123.189::visi-sharp.net%2Freport; _ga=GA1.1.1941801668.1736456088; _ga_61SXPRGS4Y=GS1.1.1736456088.1.0.1736456096.0.0.0; transcript=true; XSRF-TOKEN=eyJpdiI6IjRaeTRVWWdYaW5ZZm1VdnlXVFVES3c9PSIsInZhbHVlIjoiQ25ndFZWSnV2OHpuVm94ZlZGY21vMkdQb3A3R0w5OVZaM3hDM0s5UEQyenZZcEVxUCtFZ280Sy9LelZlaFZDY0orNDROM0NHYmRhRkpaUUR4QXg2cVpISWdodDFlTzdOUmhMbFMrcXU2ZFJ3a0R0QW0vN1dTWE9ITno0bi9QUXkiLCJtYWMiOiIzYWJjNzkzMDMzMTMxMzU1ZTFiNzA4YzI3NjE0MjVjMDQ2NDU1ODUyMjUyODhlY2UxOTQxZTc0MTQxNjllZWYyIn0%3D; _=eyJpdiI6InZpU1E5ejB0Tk5OYStmaU53V2VMMHc9PSIsInZhbHVlIjoiRGFCU2hUTTdhZk54MlRVWjI1RmF2S01NVEN3WFlLWm5TOUlnZDJlWjI5ZC91MFBjck1qSmJvbkhGc05BRERmVERxM3puY3c2OTZ6OHZTZ2RVTldEZHN2blVjalFuWlBMV3FzNUlWMDBZS2praUhjODY0REdEdDR4MFZWY3BiUlAiLCJtYWMiOiIzMzIwMTI5Mjc5NTI0Y2IwNzE3ODMwYTEzYWM5MjUxODZlMDcyODIxOTVjOWMxNzBhZjQ2NTc0MmE4NGQ3YTNiIn0%3D; referrer=eyJpdiI6IlZIblp0M1B6RUEzUnNidEd0Y1k3elE9PSIsInZhbHVlIjoicEZCN0JXam1uVjd2Y0tpbnFKRWRNS2NIcXlsMjRsZkxWY0VBclpSS1poZFhkeXdiM2tnWkVWZnM4alozbjJITTJtRmluQ3lUTGt3bUJQeFZ0T0ZrTXlIcjYreXhZM1J0cGxlOUVYMGlQVnpoME9pUTB2Um5BT1dDR1NodmZuRnVPbnpUQklSNXY0UXhhVlo3Z2YwSHNBU2JkZW1LVk1CdWdPc1NRYmVIMHpha3ZSYitWVTdjd1lDWnk1QzFuVlNQIiwibWFjIjoiNTg3OTczNTYxMDc3MmQ3Y2YxMjQ1MjkxZTZh
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=53761950&dur=3162.121&lmt=1736210078379414&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIga6oJUHFntcixSjzFhaGFhzelwZPA2umB8Vss3GLjf3ACIQCLvrER5hnqt9prZMjWn4QhPR8Pza3Oj3mHWeIWAJHCWw%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=2152746-2758556&rn=13&rbuf=73606&pot=MnRVUFcU02mb1lVo7Z7SSGuhIjkijW2NOXIe1qTwwvI-sjBmeM01ox1Lem1cDkd2xg24MILS1YW3tBTPGSB5dKyHzO_Hiec1qSLqNcg8h7RoghHABUUy000X84tZrvpFRJLeEVZL1llS3aRL-wnc2WHE9bh6Ag==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&mime=video%2Fmp4&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=19149109&dur=3162.080&lmt=1736214191480824&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIgcLp4-VK-_D_B2jQpxlwXEYLJAK-_pYxJCeYqu1DdqUoCIQCBhtm60dCWWEBxDoW0xGPIfTFq-DYsFmEyp2N4EKWwaA%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=0-8147&rn=14&rbuf=0&pot=MnRVUFcU02mb1lVo7Z7SSGuhIjkijW2NOXIe1qTwwvI-sjBmeM01ox1Lem1cDkd2xg24MILS1YW3tBTPGSB5dKyHzO_Hiec1qSLqNcg8h7RoghHABUUy000X84tZrvpFRJLeEVZL1llS3aRL-wnc2WHE9bh6Ag==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5 HTTP/1.1Host: www.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://visi-sharp.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5 HTTP/1.1Host: buygoods.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://visi-sharp.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/css/chk.css?v=4 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /images/buygoodslogonew.png HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /assets/checkout/css/bootstrap.min.css HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/visa-cvv.jpg HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/js/client.min.js HTTP/1.1Host: js.braintreegateway.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/js/data-collector.min.js HTTP/1.1Host: js.braintreegateway.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/js/paypal-checkout.min.js HTTP/1.1Host: js.braintreegateway.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&mime=video%2Fmp4&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=19149109&dur=3162.080&lmt=1736214191480824&keepalive=yes&fexp=24350590,24350737,24350787,24350796,24350816,24350827,24350851,51326932,51335594,51353497,51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AJfQdSswRQIgcLp4-VK-_D_B2jQpxlwXEYLJAK-_pYxJCeYqu1DdqUoCIQCBhtm60dCWWEBxDoW0xGPIfTFq-DYsFmEyp2N4EKWwaA%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&redirect_counter=1&cm2rm=sn-t0as7s&rrc=80&cms_redirect=yes&cmsv=e&met=1736456176,&mh=Zv&mm=34&mn=sn-a5mekn6k&ms=ltu&mt=1736454705&mv=u&mvi=3&pl=23&rms=ltu,au&lsparams=met,mh,mm,mn,ms,mv,mvi,pl,rms&lsig=AGluJ3MwRQIhAL2FLQj-OXUHQ09J8A4C93TpHsD1IbBSNoAPmWSX_UHUAiAscarB2ka1b3l28sSRgffmEoROYF8_YI5ssGrESM26ng%3D%3D&range=0-8147&rn=15&rbuf=0&pot=MnRVUFcU02mb1lVo7Z7SSGuhIjkijW2NOXIe1qTwwvI-sjBmeM01ox1Lem1cDkd2xg24MILS1YW3tBTPGSB5dKyHzO_Hiec1qSLqNcg8h7RoghHABUUy000X84tZrvpFRJLeEVZL1llS3aRL-wnc2WHE9bh6Ag==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-a5mekn6k.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/amex-cvv.jpg HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /images/buygoodslogonew.png HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/trust-guard.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/visa-cvv.jpg HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/fontawesome.js HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/md5.min.js HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/dictionary.js?v=29 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/mcafee.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/paypal-cs-conversion.js?v=7 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/app.js?v=1.0.12 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/js/client.min.js HTTP/1.1Host: js.braintreegateway.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/badge-60-day.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /lib/v1/js/vaultFrame.js?v=65 HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/js/data-collector.min.js HTTP/1.1Host: js.braintreegateway.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/js/paypal-checkout.min.js HTTP/1.1Host: js.braintreegateway.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/places.js?v=2 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/amex-cvv.jpg HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/trust-guard.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /cardinalcruise/v1/songbird.js HTTP/1.1Host: songbird.cardinalcommerce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/address?id=corporateaddress HTTP/1.1Host: display.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/mcafee.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://buygoods.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/md5.min.js HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/fontawesome.js HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/dictionary.js?v=29 HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/paypal-cs-conversion.js?v=7 HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/badge-60-day.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543
Source: global traffic	HTTP traffic detected: GET /lib/v1/js/vaultFrame.js?v=65 HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/places.js?v=2 HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /us1/v5/datadog-rum.js HTTP/1.1Host: www.datadoghq-browser-agent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/app.js?v=1.0.12 HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr
Source: global traffic	HTTP traffic detected: GET /track/?a=6797&firstcookie=0&tracking_redirect=&referrer=https%3A%2F%2Fvisi-sharp.net%2F&sessid2=sessid2025010920547110&product=prod11&is_checkout=1&caller_url=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5 HTTP/1.1Host: tracking.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEJgUPmnkKW5JETNtVJGZX1NbzGS7gkYar8NAE5eU
Source: global traffic	HTTP traffic detected: GET /v1/address?id=corporateaddress HTTP/1.1Host: display.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189::visi-sharp.net%2Freport; spisessid2_6797=sessid20250109205417543; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFrcLwBSnkWnK6
Source: global traffic	HTTP traffic detected: GET /cardinalcruise/v1/songbird.js HTTP/1.1Host: songbird.cardinalcommerce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?a=6797&firstcookie=0&tracking_redirect=&referrer=https%3A%2F%2Fvisi-sharp.net%2F&sessid2=sessid2025010920547110&product=prod11&is_checkout=1&caller_url=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5 HTTP/1.1Host: tracking.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuEJgUPmnkKW5JETNtVJGZX1NbzGS7gkYar8NAE5eU; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110
Source: global traffic	HTTP traffic detected: GET /secure/checkout/init HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110
Source: global traffic	HTTP traffic detected: GET /v1/terms?id=terms HTTP/1.1Host: display.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFrcLwBSnkWnK6; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110
Source: global traffic	HTTP traffic detected: GET /productimages/6797/42/6_bo_les_1_g0pjc_p_g_resized333.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110
Source: global traffic	HTTP traffic detected: GET /vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055 HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110
Source: global traffic	HTTP traffic detected: GET /cardinalcruise/v1/b109e0c6fd2a5b6b93b2/1.b109e0c6fd2a5b6b93b2.songbird.js HTTP/1.1Host: includes.ccdc02.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://buygoods.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: yomali.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us1/v5/datadog-rum.js HTTP/1.1Host: www.datadoghq-browser-agent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /affiliates/go/conversion/iframe/bg?a=6797&t=7febff6eb4188829241aea58b12110cf&checkout=1&s=sessid2025010920547110 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; _dd_s=rum=1&id=5f6b158d-0c63-46f6-b297-0b17901ad71f&created=1736456180128&expire=1736457080129
Source: global traffic	HTTP traffic detected: GET /v1/terms?id=terms HTTP/1.1Host: display.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFrcLwBSnkWnK6; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /productimages/6797/42/6_bo_les_1_g0pjc_p_g_resized333.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /css/bootstrap.min.css HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /css/v1/formframe-checkout.css HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/visa.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/mastercard.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/amex.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/discover.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /secure/k/logo.php?m=153600&s=sessid2025010920547110 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; _dd_s=rum=1&id=5f6b158d-0c63-46f6-b297-0b17901ad71f&created=1736456180128&expire=1736457080129
Source: global traffic	HTTP traffic detected: GET /secure/checkout/iframe?a=6797&s=sessid2025010920547110 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; _dd_s=rum=1&id=5f6b158d-0c63-46f6-b297-0b17901ad71f&created=1736456180128&expire=1736457080129
Source: global traffic	HTTP traffic detected: GET /conversion/iframe?a=6812&token=4df97f99b03e60bc03420f175bd3f509&checkout=1&sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5 HTTP/1.1Host: go.maxweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js? HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; _dd_s=rum=1&id=5f6b158d-0c63-46f6-b297-0b17901ad71f&created=1736456180128&expire=1736457080129
Source: global traffic	HTTP traffic detected: GET /cardinalcruise/v1/b109e0c6fd2a5b6b93b2/1.b109e0c6fd2a5b6b93b2.songbird.js HTTP/1.1Host: includes.ccdc02.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/jcb.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /js/v1/formframe-checkout.js?v=7 HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /js/fontawesome.js HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/visa.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/mastercard.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /js/cleave.min.js HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/discover.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.7.1.min.js HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js? HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; _dd_s=rum=1&id=5f6b158d-0c63-46f6-b297-0b17901ad71f&created=1736456180128&expire=1736457080129
Source: global traffic	HTTP traffic detected: GET /img/amex.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /logo.htm?s=sessid2025010920547110&m=153600 HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /da/r/fb.js HTTP/1.1Host: c.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/js?components=buttons&currency=USD&intent=authorize&client-id=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq HTTP/1.1Host: www.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bootstrap.bundle.min.js HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6797&s=sessid2025010920547110&lang=en&t=1736456180055Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/html/dispatch-frame.min.html HTTP/1.1Host: checkout.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/logo.htm?m=null&s=9e5a8d4c3b5fdad7146d23b99f3c2d46 HTTP/1.1Host: assets.braintreegateway.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql HTTP/1.1Host: payments.braintree-api.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /conv.php?t=VwumnwEbwiuW1LnCjrTK6W5n8XbpE%2FrQ0YECP9k22IftgTbRA7TlUs0XBr0%2FTIb4 HTTP/1.1Host: trends.revcontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /conv.php?t=UHosPivC2%2BcgsgzKtGW1xhQrpvXnbcriAs6vNSyHf%2BTkKQHzGQF0q0sESBeaH3K9 HTTP/1.1Host: trends.revcontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /conv.php?t=vbK2mTY%2FYmXvXtqlJ42HeM4mxYEnICdrkVEh1JhJgAOAmyt98m%2FLKaiRDQQIcGbu HTTP/1.1Host: trends.revcontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/fontawesome.js HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/jcb.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/8ff755483e3a4408 HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFpPtNakqshnqr; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; _dd_s=rum=1&id=5f6b158d-0c63-46f6-b297-0b17901ad71f&created=1736456180128&expire=1736457080129
Source: global traffic	HTTP traffic detected: GET /tracking/attribute?callback={SUBID4}&event_type=conversion_event HTTP/1.1Host: business.newsbreak.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/v1/formframe-checkout.js?v=7 HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /js/cleave.min.js HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.7.1.min.js HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /images/transp.gif HTTP/1.1Host: www.softwareprojects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssl.kaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/r/d/b/p3?f=f90ace7de996d798d0419f2ab4a0d6dd&s=BRAINTREE_SIGNIN HTTP/1.1Host: c6.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js HTTP/1.1Host: c.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /da/r/fb.js HTTP/1.1Host: c.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.htm?m=null&s=9e5a8d4c3b5fdad7146d23b99f3c2d46 HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: k=5a5777f320d8433faaa2e91bb331e368
Source: global traffic	HTTP traffic detected: GET /js/bootstrap.bundle.min.js HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; cf_clearance=4xdrG6Mcn4532JavguZPhRDadlux5aKeJsUIKChu00w-1736456183-1.2.1.1-VVD4n5k4xK7BPCYSL1aKRL8mZ.euy_ZSzviwZDtJoRXbFP1W_PBi3Emmy.yRc_BxLWSRWmL7gjhC9aCNyXvrlo7ShYIgE8KEqG82bue_4xUow23NJgmt3rJY1rhxA.1t_faDopiDYbUt1JeWbHagRvco6MipYLru6dGmkBTQ8IdUaLJ7OhSCVyyOR2kJkheQltIhJVFKR8QE0vYFqni3rOnkKILlTR5PtGydD_62JEu3M9l1RXIYRtBYSEoyM94_uKVrtiYrOCGhxtr9vcCf.YHb3QFaJRe2q1mhYxbYf9JbC7FimVm0PKHEGuKjLpWzZIjuSe9HWsSPBcgJKoenLM7ez.fqpMF.57akL0551bNs8WTnj1ImB6eB7DEsNBW8
Source: global traffic	HTTP traffic detected: GET /counter.cgi?i=127.0.0.1&p=f90ace7de996d798d0419f2ab4a0d6dd&t=1736456181.951&a=14 HTTP/1.1Host: b.stats.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/js?components=buttons&currency=USD&intent=authorize&client-id=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js? HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; cf_clearance=4xdrG6Mcn4532JavguZPhRDadlux5aKeJsUIKChu00w-1736456183-1.2.1.1-VVD4n5k4xK7BPCYSL1aKRL8mZ.euy_ZSzviwZDtJoRXbFP1W_PBi3Emmy.yRc_BxLWSRWmL7gjhC9aCNyXvrlo7ShYIgE8KEqG82bue_4xUow23NJgmt3rJY1rhxA.1t_faDopiDYbUt1JeWbHagRvco6MipYLru6dGmkBTQ8IdUaLJ7OhSCVyyOR2kJkheQltIhJVFKR8QE0vYFqni3rOnkKILlTR5PtGydD_62JEu3M9l1RXIYRtBYSEoyM94_uKVrtiYrOCGhxtr9vcCf.YHb3QFaJRe2q1mhYxbYf9JbC7FimVm0PKHEGuKjLpWzZIjuSe9HWsSPBcgJKoenLM7ez.fqpMF.57akL0551bNs8WTnj1ImB6eB7DEsNBW8
Source: global traffic	HTTP traffic detected: GET /tagmanager/pptm.js?id=buygoods.com&t=xo&v=5.0.465&source=payments_sdk&client_id=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq&comp=buttons&disableSetCookie=true&vault=false HTTP/1.1Host: www.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/r/d/b/p3?f=f90ace7de996d798d0419f2ab4a0d6dd&s=BRAINTREE_SIGNIN HTTP/1.1Host: c6.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/transp.gif HTTP/1.1Host: www.softwareprojects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /da/r/fb.js HTTP/1.1Host: c.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11101953222/?random=1736456183528&cv=11&fst=1736456183528&bg=ffffff&guid=ON&async=1&gtm=45be5170v9103334271za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11101953222?random=1736456183528&cv=11&fst=1736456183528&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5170v9103334271za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11101953222?random=1736456183580&cv=11&fst=1736456183580&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5170v9103334271za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=ZtTmCKbbnI4YEMa56a0p&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/601533754?random=1736456183664&cv=11&fst=1736456183664&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/601533754?random=1736456183706&cv=11&fst=1736456183706&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=BLRdCKaU-YsCELra6p4C&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js? HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /td/rul/388275037?random=1736456183756&cv=11&fst=1736456183756&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /md HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: k=5a5777f320d8433faaa2e91bb331e368
Source: global traffic	HTTP traffic detected: GET /counter2.cgi?i=127.0.0.1&p=f90ace7de996d798d0419f2ab4a0d6dd&t=1736456181.951&a=14 HTTP/1.1Host: lhr.stats.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/388275037?random=1736456183859&cv=11&fst=1736456183859&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=FCqNCNvFgJMCEN22krkB&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3A8T2VCMX6GD4SG-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3A8T2VCMX6GD4SG-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a76c98f4-6469-4316-9f25-c961ba7f91b9&fltp=analytics&mrid=8T2VCMX6GD4SG&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=BuyGoods%20-%20Secure%20Checkout&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1736456184265&g=300&completeurl=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ru=https%3A%2F%2Fvisi-sharp.net%2F&disableSetCookie=true HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /muse/muse.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js-sdk-logos/2.2.7/paypal-white.svg HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tagmanager/pptm.js?id=buygoods.com&t=xo&v=5.0.465&source=payments_sdk&client_id=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq&comp=buttons&disableSetCookie=true&vault=false HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&mime=video%2Fmp4&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=30618074&dur=3162.080&lmt=1736215533919687&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIhAI_rwFllGszfC6Kw1hjuFkUNp8WXhyBqQQKnD-9PSY0hAiApeosoQv0Ed0T0YWUxzjvfzAH3RGr1AN1KY05xWXbW5A%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=4534710-6616791&rn=16&rbuf=101845&pot=MnRVUFcU02mb1lVo7Z7SSGuhIjkijW2NOXIe1qTwwvI-sjBmeM01ox1Lem1cDkd2xg24MILS1YW3tBTPGSB5dKyHzO_Hiec1qSLqNcg8h7RoghHABUUy000X84tZrvpFRJLeEVZL1llS3aRL-wnc2WHE9bh6Ag==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /smart/buttons?fundingSource=paypal&style.label=pay&style.layout=horizontal&style.color=blue&style.shape=rect&style.tagline=false&style.menuPlacement=below&onShippingChange=true&allowBillingPayments=true&applePaySupport=false&buttonSessionID=uid_418f4016f2_mja6nty6mjq&customerId=&clientID=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq&clientMetadataID=uid_7087b81da0_mja6nty6mjq&commit=true&components.0=buttons&currency=USD&debug=false&disableSetCookie=true&env=production&experiment.enableVenmo=false&experiment.venmoVaultWithoutPurchase=false&experiment.venmoWebEnabled=false&flow=purchase&fundingEligibility=eyJwYXlwYWwiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sInBheWxhdGVyIjp7ImVsaWdpYmxlIjp0cnVlLCJ2YXVsdGFibGUiOmZhbHNlLCJwcm9kdWN0cyI6eyJwYXlJbjMiOnsiZWxpZ2libGUiOmZhbHNlLCJ2YXJpYW50IjpudWxsfSwicGF5SW40Ijp7ImVsaWdpYmxlIjpmYWxzZSwidmFyaWFudCI6bnVsbH0sInBheWxhdGVyIjp7ImVsaWdpYmxlIjp0cnVlLCJ2YXJpYW50IjpudWxsfX19LCJjYXJkIjp7ImVsaWdpYmxlIjp0cnVlLCJicmFuZGVkIjp0cnVlLCJpbnN0YWxsbWVudHMiOmZhbHNlLCJ2ZW5kb3JzIjp7InZpc2EiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sIm1hc3RlcmNhcmQiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sImFtZXgiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sImRpc2NvdmVyIjp7ImVsaWdpYmxlIjp0cnVlLCJ2YXVsdGFibGUiOnRydWV9LCJoaXBlciI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhdWx0YWJsZSI6ZmFsc2V9LCJlbG8iOnsiZWxpZ2libGUiOmZhbHNlLCJ2YXVsdGFibGUiOnRydWV9LCJqY2IiOnsiZWxpZ2libGUiOmZhbHNlLCJ2YXVsdGFibGUiOnRydWV9LCJtYWVzdHJvIjp7ImVsaWdpYmxlIjp0cnVlLCJ2YXVsdGFibGUiOnRydWV9LCJkaW5lcnMiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sImN1cCI6eyJlbGlnaWJsZSI6dHJ1ZSwidmF1bHRhYmxlIjp0cnVlfX0sImd1ZXN0RW5hYmxlZCI6ZmFsc2V9LCJ2ZW5tbyI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhdWx0YWJsZSI6ZmFsc2V9LCJpdGF1Ijp7ImVsaWdpYmxlIjpmYWxzZX0sImNyZWRpdCI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJhcHBsZXBheSI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJzZXBhIjp7ImVsaWdpYmxlIjpmYWxzZX0sImlkZWFsIjp7ImVsaWdpYmxlIjpmYWxzZX0sImJhbmNvbnRhY3QiOnsiZWxpZ2libGUiOmZhbHNlfSwiZ2lyb3BheSI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJlcHMiOnsiZWxpZ2libGUiOmZhbHNlfSwic29mb3J0Ijp7ImVsaWdpYmxlIjpmYWxzZX0sIm15YmFuayI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJwMjQiOnsiZWxpZ2libGUiOmZhbHNlfSwid2VjaGF0cGF5Ijp7ImVsaWdpYmxlIjpmYWxzZX0sInBheXUiOnsiZWxpZ2libGUiOmZhbHNlfSwiYmxpayI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJ0cnVzdGx5Ijp7ImVsaWdpYmxlIjpmYWxzZX0sIm94eG8iOnsiZWxpZ2libGUiOmZhbHNlfSwiYm9sZXRvIjp7ImVsaWdpYmxlIjpmYWxzZX0sImJvbGV0b2JhbmNhcmlvIjp7ImVsaWdpYmxlIjpmYWxzZX0sIm1lcmNhZG9wYWdvIjp7ImVsaWdpYmxlIjpmYWxzZX0sIm11bHRpYmFuY28iOnsiZWxpZ2libGUiOmZhbHNlfSwic2F0aXNwYXkiOnsiZWxpZ2libGUiOmZhbHNlfSwicGFpZHkiOnsiZWxpZ2libGUiOmZhbHNlfX0&intent=authorize&locale.country=US&locale.lang=en&hasShippingCallback=true&platform=desktop&renderedButtons.0=paypal&sessionID=uid_7087b81da0_mja6nty6mjq&sdkCorrelationID=prebuild&sdkMeta=eyJ1cmwiOiJodHRwczovL3d3dy5wYXlwYWwuY29tL3Nkay9qcz9jb21wb25lbnRzPWJ1dHRvbnMmY3VycmVuY3k9VVNEJmludGVudD1hdXRob3JpemUmY2xpZW50LWlkPUFXU2ZaRFdWZmVhV194UEh6dmNJU1I3VU5IcnlvWVNkUnd3ZTFxOEs0VjRMX3FqSGdUVl9CVERfVnN3dDFJel81aEhweTEzYzVEcEV3OXRxIiwi
Source: global traffic	HTTP traffic detected: GET /8xnhgfcmq7d3k99b HTTP/1.1Host: client-analytics.braintreegateway.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/601533754/?random=1736456183664&cv=11&fst=1736456183664&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/388275037/?random=1736456183756&cv=11&fst=1736456183756&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /da/r/fb.js HTTP/1.1Host: c.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/10780050324?random=1736456184032&cv=11&fst=1736456184032&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/388644778?random=1736456184074&cv=11&fst=1736456184074&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190h2za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/10780050324/?random=1736456184032&cv=11&fst=1736456184032&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /td/rul/388644778?random=1736456184093&cv=11&fst=1736456184093&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190h2za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=4N6-CLaYgZMCEKr_qLkB&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fin HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: k=5a5777f320d8433faaa2e91bb331e368
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11101953222/?random=1736456183528&cv=11&fst=1736456183528&bg=ffffff&guid=ON&async=1&gtm=45be5170v9103334271za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /md HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: k=5a5777f320d8433faaa2e91bb331e368
Source: global traffic	HTTP traffic detected: GET /js-sdk-logos/2.2.7/paypal-white.svg HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/8ff755600b5243c9 HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15oex7CK4kFmZ4yi; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3A8T2VCMX6GD4SG-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3A8T2VCMX6GD4SG-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a76c98f4-6469-4316-9f25-c961ba7f91b9&fltp=analytics&mrid=8T2VCMX6GD4SG&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=BuyGoods%20-%20Secure%20Checkout&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1736456184265&g=300&completeurl=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ru=https%3A%2F%2Fvisi-sharp.net%2F&disableSetCookie=true HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736477696&ei=oDeAZ4C1Hra16dsPva6GiQQ&ip=8.46.123.189&id=o-AFNUZ2D2_Dd_aic2yntfv7c15wny2z3sWT93BgYqBaOw&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736456096%2C&mh=Zv&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5uaeznsl&ms=au%2Conr&mv=m&mvi=3&pl=23&rms=au%2Cau&initcwndbps=5993750&bui=AfMhrI_v1nI-oQK3g-PuPjzASs-2436ao-H8NaxGpHcpJL3u0kJOy4wnfenkEkNpKUJe8MWKfUyv1X_U&spc=x-caUO_ZvH2nKgc11lFsonvpfIbWW35N7uSENW84_44Wpmic6daKejAei2CW&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=SHRIcJg-iUfzqflgmOmkUd0Q&rqh=1&gir=yes&clen=53761950&dur=3162.121&lmt=1736210078379414&mt=1736455748&fvip=5&keepalive=yes&fexp=51326932%2C51335594%2C51353497%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=0zUwPYFa0-F9Ww&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms%2Cinitcwndbps&lsig=AGluJ3MwRAIgd6E0Yp0En6DgIrRYNed7XLkmQUXtz7JNPI8g7GpSkUcCIDQYCwRMjs3SpmghCvcjjoGUD2dtN_9W-pVz4m6ztJDe&alr=yes&sig=AJfQdSswRQIga6oJUHFntcixSjzFhaGFhzelwZPA2umB8Vss3GLjf3ACIQCLvrER5hnqt9prZMjWn4QhPR8Pza3Oj3mHWeIWAJHCWw%3D%3D&cpn=KBmVCHNtDNYL6zM0&cver=1.20250107.01.00-canary_control_1.20250108.01.00&range=2758557-3367501&rn=17&rbuf=103606&pot=MnRVUFcU02mb1lVo7Z7SSGuhIjkijW2NOXIe1qTwwvI-sjBmeM01ox1Lem1cDkd2xg24MILS1YW3tBTPGSB5dKyHzO_Hiec1qSLqNcg8h7RoghHABUUy000X84tZrvpFRJLeEVZL1llS3aRL-wnc2WHE9bh6Ag==&ump=1&srfvp=1 HTTP/1.1Host: rr3---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /muse/analytics/index.html HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /muse/muse.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/r/d/b/p1 HTTP/1.1Host: c.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg01.phx
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/388644778/?random=1736456184074&cv=11&fst=1736456184074&bg=ffffff&guid=ON&async=1&gtm=45be5190h2za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /counter2.cgi?i=127.0.0.1&p=f90ace7de996d798d0419f2ab4a0d6dd&t=1736456181.951&a=14 HTTP/1.1Host: lhr.stats.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8xnhgfcmq7d3k99b HTTP/1.1Host: client-analytics.braintreegateway.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/r/d/b/p2 HTTP/1.1Host: c.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg01.phx
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11101953222/?random=1736456183528&cv=11&fst=1736452800000&bg=ffffff&guid=ON&async=1&gtm=45be5170v9103334271za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dqxg-TTBVkaGn1FQ3vyqd9ODmmtYKrg&random=2140124334&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11101953222/?random=2125437952&cv=11&fst=1736456183580&bg=ffffff&guid=ON&async=1&gtm=45be5170v9103334271za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=ZtTmCKbbnI4YEMa56a0p&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkMmxAgjTxbECIgEBQAFKJ3RyaWdnZXIsIGV2ZW50LXNvdXJjZTtuYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CKih-7Gi1PGryQEiEwimrouxw-mKAxWAnYMHHZ5aPTUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6Fmh0dHBzOi8vZ28ubWF4d2ViLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /sdk/js?components=buttons&currency=USD&intent=authorize&client-id=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq HTTP/1.1Host: www.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/smart/buttons?fundingSource=paypal&style.label=pay&style.layout=horizontal&style.color=blue&style.shape=rect&style.tagline=false&style.menuPlacement=below&onShippingChange=true&allowBillingPayments=true&applePaySupport=false&buttonSessionID=uid_418f4016f2_mja6nty6mjq&customerId=&clientID=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq&clientMetadataID=uid_7087b81da0_mja6nty6mjq&commit=true&components.0=buttons&currency=USD&debug=false&disableSetCookie=true&env=production&experiment.enableVenmo=false&experiment.venmoVaultWithoutPurchase=false&experiment.venmoWebEnabled=false&flow=purchase&fundingEligibility=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
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/601533754/?random=1736456183664&cv=11&fst=1736452800000&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dPiuw8mUmfh6zNzWrKyRp9xYjJQLN3Q&random=1512842882&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/601533754/?random=1736456183664&cv=11&fst=1736456183664&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlwASRMwIlFtDI15v9S7FZPBOM1E56oW4z1NUizoQAIpjtKBziyHsgHg3nz
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/388275037/?random=1736456183756&cv=11&fst=1736456183756&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlwASRMwIlFtDI15v9S7FZPBOM1E56oW4z1NUizoQAIpjtKBziyHsgHg3nz
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/10780050324/?random=1736456184032&cv=11&fst=1736456184032&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkVe6uxQ3ZbU_YbCA6bB5Lo01CEY9XpbyKHyqxOacHx07tAT1vqDO7fPABi
Source: global traffic	HTTP traffic detected: GET /ts?pgrp=muse%3Aoffer%3A%3A%3A8T2VCMX6GD4SG-1&page=muse%3Aoffer%3A%3A%3A8T2VCMX6GD4SG-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a76c98f4-6469-4316-9f25-c961ba7f91b9&es=visitorInfoFlowStarted&mrid=8T2VCMX6GD4SG&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=BuyGoods%20-%20Secure%20Checkout&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1736456185794&g=300&completeurl=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&disableSetCookie=true HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KHcl0EuY7AKSMgfvHl7J5E7hPtK=5yb3e7kLMljlp__GfoHY0QUWSqKtasQgBbjSlTaiKK38vQpZgCjVpEqkEvtZnzZ7YLoi-6aCZ5s4u9qh; l7_az=dcg01.phx; sc_f=R9c23A35etfgK6ZUlPyk-MzS1SVEIW1zOS1qXIkm9wJ2eneD7XPrzei51K_GbEt4Q-bHX5Mzn7elZ604joCIHxqm5j7jgu_SE8JSQm
Source: global traffic	HTTP traffic detected: GET /muse/noop.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.paypalobjects.com/muse/analytics/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /md HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: k=5a5777f320d8433faaa2e91bb331e368
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/601533754/?random=1613111877&cv=11&fst=1736456183706&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=BLRdCKaU-YsCELra6p4C&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CKK4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCOvGsQIIo8WxAgiQybECCNPFsQIiAQFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyPW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CMCQ6sTH-vymOSITCLHXm7HD6YoDFeOpgwcdBEQjWjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoWaHR0cHM6Ly9nby5tYXh3ZWIuY29tLw HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkVe6uxQ3ZbU_YbCA6bB5Lo01CEY9XpbyKHyqxOacHx07tAT1vqDO7fPABi
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/388275037/?random=1736456183756&cv=11&fst=1736452800000&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dvlFcmYATCJvj7FRQHJlqt9sG-MMYdg&random=4189524081&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/388275037/?random=1843449611&cv=11&fst=1736456183859&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=FCqNCNvFgJMCEN22krkB&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkcmxAgjTxbECIgEBQAFKJ3RyaWdnZXI9bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CIajl53k-vHlbyITCNDlm7HD6YoDFcmNgwcdHysHDzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoWaHR0cHM6Ly9nby5tYXh3ZWIuY29tLw HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkVe6uxQ3ZbU_YbCA6bB5Lo01CEY9XpbyKHyqxOacHx07tAT1vqDO7fPABi
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/388644778/?random=1736456184074&cv=11&fst=1736456184074&bg=ffffff&guid=ON&async=1&gtm=45be5190h2za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUktSJDZrrRfyRx_n0KbopMLRz3STZ-pe43OIvy5OQl7dyCDF3IaYraKAPdq
Source: global traffic	HTTP traffic detected: GET /8xnhgfcmq7d3k99b HTTP/1.1Host: client-analytics.braintreegateway.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/11101953222/?random=2125437952&cv=11&fst=1736456183580&bg=ffffff&guid=ON&async=1&gtm=45be5170v9103334271za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=ZtTmCKbbnI4YEMa56a0p&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkMmxAgjTxbECIgEBQAFKJ3RyaWdnZXIsIGV2ZW50LXNvdXJjZTtuYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CKih-7Gi1PGryQEiEwimrouxw-mKAxWAnYMHHZ5aPTUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6Fmh0dHBzOi8vZ28ubWF4d2ViLmNvbS8&is_vtc=1&cid=CAQSKQCa7L7dhAPjry3P8DCk9xjJTYGXw-KXVwRDVe1usltVmmfIUPxmWlhl&random=120483673 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11101953222/?random=1736456183528&cv=11&fst=1736452800000&bg=ffffff&guid=ON&async=1&gtm=45be5170v9103334271za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dqxg-TTBVkaGn1FQ3vyqd9ODmmtYKrg&random=2140124334&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/10780050324/?random=1736456184032&cv=11&fst=1736452800000&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dxllOxqtTJEmskZsGUf_ARa2IBkrjn5f_CzM2fai4gMh2U-sD&random=3800009752&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/388644778/?random=1597635802&cv=11&fst=1736456184093&bg=ffffff&guid=ON&async=1&gtm=45be5190h2za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=4N6-CLaYgZMCEKr_qLkB&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkMmxAgjTxbECIgEBOAFAAUoVZXZlbnQtc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CJfl2ZuIoLffyQEiEwiz8c2xw-mKAxU8i4MHHX7hKfwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6Fmh0dHBzOi8vZ28ubWF4d2ViLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnHZ9y62HJTed9ucHmsOHChF7s_rJJbm1Ip5wiMR83bH6qWT7PxRbdIXNml
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/388644778/?random=1736456184074&cv=11&fst=1736452800000&bg=ffffff&guid=ON&async=1&gtm=45be5190h2za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7d4HZw8yhkAoDn1jHRm_d7DrQP611z8sdeHOuyKih4afklLB2J&random=4231047368&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /muse/noop.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?pgrp=muse%3Aoffer%3A%3A%3A8T2VCMX6GD4SG-1&page=muse%3Aoffer%3A%3A%3A8T2VCMX6GD4SG-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a76c98f4-6469-4316-9f25-c961ba7f91b9&es=visitorInfoFlowStarted&mrid=8T2VCMX6GD4SG&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=BuyGoods%20-%20Secure%20Checkout&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1736456185794&g=300&completeurl=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&disableSetCookie=true HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg01.phx
Source: global traffic	HTTP traffic detected: GET /md HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: k=5a5777f320d8433faaa2e91bb331e368
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/601533754/?random=1736456183664&cv=11&fst=1736452800000&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dPiuw8mUmfh6zNzWrKyRp9xYjJQLN3Q&random=1512842882&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/601533754/?random=1613111877&cv=11&fst=1736456183706&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=BLRdCKaU-YsCELra6p4C&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CKK4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCOvGsQIIo8WxAgiQybECCNPFsQIiAQFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyPW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CMCQ6sTH-vymOSITCLHXm7HD6YoDFeOpgwcdBEQjWjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoWaHR0cHM6Ly9nby5tYXh3ZWIuY29tLw&is_vtc=1&cid=CAQSKQCa7L7d5JD94r-2AAWPd62avDul84N9BhhfYgwQLOrJ4c4sR3gzTPMP&random=1733251338 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/388275037/?random=1736456183756&cv=11&fst=1736452800000&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dvlFcmYATCJvj7FRQHJlqt9sG-MMYdg&random=4189524081&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/388275037/?random=1843449611&cv=11&fst=1736456183859&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=FCqNCNvFgJMCEN22krkB&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkcmxAgjTxbECIgEBQAFKJ3RyaWdnZXI9bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CIajl53k-vHlbyITCNDlm7HD6YoDFcmNgwcdHysHDzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoWaHR0cHM6Ly9nby5tYXh3ZWIuY29tLw&is_vtc=1&cid=CAQSKQCa7L7dhuW-RVJAv-tQLFDYii4VrqMIHwRTEWsgtkp7B-86lA6rSJ0V&random=3115250042 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /8xnhgfcmq7d3k99b HTTP/1.1Host: client-analytics.braintreegateway.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/11101953222/?random=2125437952&cv=11&fst=1736456183580&bg=ffffff&guid=ON&async=1&gtm=45be5170v9103334271za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=ZtTmCKbbnI4YEMa56a0p&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkMmxAgjTxbECIgEBQAFKJ3RyaWdnZXIsIGV2ZW50LXNvdXJjZTtuYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CKih-7Gi1PGryQEiEwimrouxw-mKAxWAnYMHHZ5aPTUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6Fmh0dHBzOi8vZ28ubWF4d2ViLmNvbS8&is_vtc=1&cid=CAQSKQCa7L7dhAPjry3P8DCk9xjJTYGXw-KXVwRDVe1usltVmmfIUPxmWlhl&random=120483673 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/388644778/?random=1597635802&cv=11&fst=1736456184093&bg=ffffff&guid=ON&async=1&gtm=45be5190h2za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=4N6-CLaYgZMCEKr_qLkB&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkMmxAgjTxbECIgEBOAFAAUoVZXZlbnQtc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CJfl2ZuIoLffyQEiEwiz8c2xw-mKAxU8i4MHHX7hKfwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6Fmh0dHBzOi8vZ28ubWF4d2ViLmNvbS8&is_vtc=1&cid=CAQSKQCa7L7dlg1z8sTVNQUYK5wt-v_0w2RHrwPXEVY8rWgEn0_IHo3SSbO4&random=951731852 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://go.maxweb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/10780050324/?random=1736456184032&cv=11&fst=1736452800000&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dxllOxqtTJEmskZsGUf_ARa2IBkrjn5f_CzM2fai4gMh2U-sD&random=3800009752&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/388644778/?random=1736456184074&cv=11&fst=1736452800000&bg=ffffff&guid=ON&async=1&gtm=45be5190h2za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&hn=www.googleadservices.com&frm=2&tiba=Pixels&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7d4HZw8yhkAoDn1jHRm_d7DrQP611z8sdeHOuyKih4afklLB2J&random=4231047368&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/601533754/?random=1613111877&cv=11&fst=1736456183706&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=BLRdCKaU-YsCELra6p4C&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CKK4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCOvGsQIIo8WxAgiQybECCNPFsQIiAQFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyPW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CMCQ6sTH-vymOSITCLHXm7HD6YoDFeOpgwcdBEQjWjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoWaHR0cHM6Ly9nby5tYXh3ZWIuY29tLw&is_vtc=1&cid=CAQSKQCa7L7d5JD94r-2AAWPd62avDul84N9BhhfYgwQLOrJ4c4sR3gzTPMP&random=1733251338 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/388275037/?random=1843449611&cv=11&fst=1736456183859&bg=ffffff&guid=ON&async=1&gtm=45be5170za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=FCqNCNvFgJMCEN22krkB&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkcmxAgjTxbECIgEBQAFKJ3RyaWdnZXI9bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CIajl53k-vHlbyITCNDlm7HD6YoDFcmNgwcdHysHDzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoWaHR0cHM6Ly9nby5tYXh3ZWIuY29tLw&is_vtc=1&cid=CAQSKQCa7L7dhuW-RVJAv-tQLFDYii4VrqMIHwRTEWsgtkp7B-86lA6rSJ0V&random=3115250042 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg01.phx
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/favicon.ico HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; cf_clearance=gSz48_oIDtFsEiO7npQnPYsU2clvq4qgypXFbjTTe5U-1736456185-1.2.1.1-6fBqpjq6zT1Y753JKIliEiVpqgyzqwnHDmbtD.cEo7dEYNSEtXCjaNa4D4iKT.X7NuXO6618_DUJeOlhSSxeo3m0mwZlywCPYP4LQgbvll1RSSbbkOewCjJ_B_lDBGX5.4ZKVxxIKdzbNnIixq3TKnlru2F14XbWN2luonCKtScITQzPJWCn4W2U6cHwKV_vXAlHTzShA1jdpe0AsLkfiEz5.ayrRsUr8RqQbFEJhGBjaB6G9B_RDaFjv0RpOox3FozAWlnG09m2GhpkCydR.qio_Ikb4YV_OfistORTwxolFQ7_3n9tGDSZ8e96S523PwKe2bY4T_.7gBqhsRjlBI4B3XpuduqU0wcpT7UK9AAda9Ez_R3VrXve7WdXuyvv
Source: global traffic	HTTP traffic detected: GET /targeting/graphql?disableSetCookie=true HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg01.phx
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/388644778/?random=1597635802&cv=11&fst=1736456184093&bg=ffffff&guid=ON&async=1&gtm=45be5190h2za200zb9103334271&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%3Fa%3D6812%26token%3D4df97f99b03e60bc03420f175bd3f509%26checkout%3D1%26sessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5&ref=https%3A%2F%2Fbuygoods.com%2F&top=https%3A%2F%2Fbuygoods.com%2F&label=4N6-CLaYgZMCEKr_qLkB&hn=www.googleadservices.com&frm=2&tiba=Pixels&gtm_ee=1&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgjrxrECCKPFsQIIkMmxAgjTxbECIgEBOAFAAUoVZXZlbnQtc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CJfl2ZuIoLffyQEiEwiz8c2xw-mKAxU8i4MHHX7hKfwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6Fmh0dHBzOi8vZ28ubWF4d2ViLmNvbS8&is_vtc=1&cid=CAQSKQCa7L7dlg1z8sTVNQUYK5wt-v_0w2RHrwPXEVY8rWgEn0_IHo3SSbO4&random=951731852 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=PG722sbfvqV6KlnsNvt4kckHWxljIqmQAhvMZlsAlgxqeh-8Wm13XoliLu3G25e9Wz86t1KY5j3-ZGu9u9BPyCVOa82KW9U9aPxZ6SbGW9CqF64MPmvWQ36GmWGXeuG072J1Ie6_25YbYOzx7OlQSDm1qXiAZjeV9WfuHuh_fzRMniyrCGN0GHbolFbMZw8
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/favicon.ico HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6797=326; spisubid_6797=8802%7C6812_sessid20250109205426977; spireferrer_6797=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6797=sessid2025010920547110; sessid2=sessid2025010920547110; spi_funnel_codename=; aff_id=326; sid=8802%7C6812_sessid20250109205426977; referrer=8.46.123.189:visi-sharp.net:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg01.phx
Source: global traffic	HTTP traffic detected: GET /v1/r/d/b/w?f=f90ace7de996d798d0419f2ab4a0d6dd&s=BRAINTREE_SIGNIN&d=%7B%22rDT%22%3A%2242033%2C41621%2C41832%3A21052%2C20493%2C24630%3A41523%2C41019%2C41006%3A41501%2C41045%2C41002%3A5619%2C5205%2C5142%3A41463%2C41083%2C41003%3A41444%2C41094%2C40999%3A10693%2C10365%2C10285%3A20936%2C20613%2C20508%3A15811%2C15490%2C15501%3A36290%2C35982%2C35882%3A10648%2C10365%2C10280%3A31108%2C30856%2C30754%3A51567%2C51348%2C51246%3A31022%2C30857%2C30757%3A36130%2C35986%2C35875%3A10509%2C10373%2C10262%3A20737%2C20625%2C20518%3A15602%2C15505%2C15377%3A41208%2C41122%2C41002%3A18168%2C21%22%7D HTTP/1.1Host: c.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KHcl0EuY7AKSMgfvHl7J5E7hPtK=5yb3e7kLMljlp__GfoHY0QUWSqKtasQgBbjSlTaiKK38vQpZgCjVpEqkEvtZnzZ7YLoi-6aCZ5s4u9qh; l7_az=dcg01.phx; sc_f=R9c23A35etfgK6ZUlPyk-MzS1SVEIW1zOS1qXIkm9wJ2eneD7XPrzei51K_GbEt4Q-bHX5Mzn7elZ604joCIHxqm5j7jgu_SE8JSQm
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=ai9MQ_IsTqk; VISITOR_INFO1_LIVE=rtLrPOSmvLs; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbg%3D%3D
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: yomali.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_514.1.dr	String found in binary or memory: <a class="u-icon-v3 u-icon-size--xs g-bg-white-opacity-0_1 g-bg-white-opacity-0_2--hover g-color-white-opacity-0_6 rounded" href="https://www.facebook.com/YomaliCo/"> equals www.facebook.com (Facebook)
Source: chromecache_481.1.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=789222289013177&ev=PageView&noscript=1" equals www.facebook.com (Facebook)
Source: chromecache_481.1.dr	String found in binary or memory: <p>(i) How do we use General Information?  General Information gives us insights on how people use the Service, and helps us to maintain, modify, and enhance it. We use cookies to help us customize your experience when using the Service. We also use services provided by <a href="https://www.google.com/url?q=https://www.hotjar.com/&sa=D&ust=1585933040236000" target="_blank">Hotjar</a>, <a href="https://www.google.com/url?q=https://developers.google.com/analytics/devguides/collection/analyticsjs/cookies-user-id&sa=D&ust=1585933040237000" target="_blank">Google Analytics</a>, <a href="https://www.google.com/url?q=http://www.facebook.com/&sa=D&ust=1585933040237000" target=")blank">Facebook</a>, and <a href="https://www.google.com/url?q=https://www.zendesk.com/company/policies-procedures/&sa=D&ust=1585933040237000" target="_blank">ZenDesk</a>, which set cookies for each User when they visit our site or use our Service.  </p> equals www.facebook.com (Facebook)
Source: chromecache_329.1.dr	String found in binary or memory: (g.JE(V,"redirector.googlevideo.com"),N=V.toString()):V.T.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.JE(V,"www.youtube.com"),N=V.toString()):(V=pQL(N),BU(V)&&(N=V));V=new g.l5(N);V.set("cmo=pf","1");H&&V.set("cmo=td","a1.googlevideo.com");return V}; equals www.youtube.com (Youtube)
Source: chromecache_329.1.dr	String found in binary or memory: 0?"http":"https";this.Vn=rt((C?C.customBaseYoutubeUrl:p.BASE_YT_URL)\|\|"")\|\|rt(this.iW)\|\|this.protocol+"://www.youtube.com/";d=C?C.eventLabel:p.el;N="detailpage";d==="adunit"?N=this.S?"embedded":"detailpage":d==="embedded"\|\|this.D?N=N5(N,d,eO1):d&&(N="embedded");this.Wr=N;Odj();d=null;N=C?C.playerStyle:p.ps;X=g.W5(Pnj,N);!N\|\|X&&!this.D\|\|(d=N);this.playerStyle=d;this.Y=g.W5(Pnj,this.playerStyle);this.houseBrandUserStatus=C==null?void 0:C.houseBrandUserStatus;this.b_=this.Y&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_406.1.dr, chromecache_538.1.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Mk:function(){e=nb()},Kd:function(){d()}}};var Vb=wa(["data-gtm-yt-inspected-"]),LE=["www.youtube.com","www.youtube-nocookie.com"],ME,NE=!1; equals www.youtube.com (Youtube)
Source: chromecache_329.1.dr	String found in binary or memory: bu.prototype.If=function(){return this.w7.l()};var rxH=(new Date).getTime();var CZe="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),joQ=/\bocr\b/;var NTY=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var vcy=0,mke=0,FgV=0;var xI=null,YI=!1,t1a=1,nX=Symbol("SIGNAL"),e0={version:0,Qn$:0,mL:!1,TU:void 0,W9:void 0,Y$:void 0,G5:0,GS:void 0,vn:void 0,Qq:!1,Oa:!1,kind:"unknown",i9_:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_406.1.dr, chromecache_538.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=qC(a,c,e);T(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return T(122),!0;if(d&&f){for(var m=yb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},tC=function(){var a=[],b=function(c){return bb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_575.1.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=qa(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&tb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?mb(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_575.1.dr	String found in binary or memory: function tb(){var a=new rb,b=["https://www.youtube.com"];b=b===void 0?qb:b;oa(function(c){switch(c.g){case 1:return C(c,sb(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return oa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_329.1.dr	String found in binary or memory: g.LI=function(p){var C=g.bL(p);p0V.includes(C)&&(C="www.youtube.com");return p.protocol+"://"+C}; equals www.youtube.com (Youtube)
Source: chromecache_329.1.dr	String found in binary or memory: g.bL=function(p){p=fI(p.Vn);return p==="www.youtube-nocookie.com"?"www.youtube.com":p}; equals www.youtube.com (Youtube)
Source: chromecache_329.1.dr	String found in binary or memory: g.h.getVideoUrl=function(p,C,V,N,H,X,d){C={list:C};V&&(H?C.time_continue=V:C.t=V);V=d?"music.youtube.com":g.bL(this);H=V==="www.youtube.com";!X&&N&&H?X="https://youtu.be/"+p:g.DW(this)?(X="https://"+V+"/fire",C.v=p):(X&&H?(X=this.protocol+"://"+V+"/shorts/"+p,N&&(C.feature="share")):(X=this.protocol+"://"+V+"/watch",C.v=p),L3&&(p=RUQ())&&(C.ebc=p));return g.LJ(X,C)}; equals www.youtube.com (Youtube)
Source: chromecache_329.1.dr	String found in binary or memory: gP9=function(p,C){if(!p.T["0"]){var V=new Rr("0","fakesb",{video:new kZ(0,0,0,void 0,void 0,"auto")});p.T["0"]=C?new bw(new g.l5("http://www.youtube.com/videoplayback"),V,"fake"):new rz(new g.l5("http://www.youtube.com/videoplayback"),V,new JW(0,0),new JW(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_406.1.dr, chromecache_538.1.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Lh:e,Jh:f,Kh:g,si:k,ui:m,af:n,Kb:b},q=A.YT;if(q)return q.ready&&q.ready(d),b;var r=A.onYouTubeIframeAPIReady;A.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(WE(w,"iframe_api")\|\|WE(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!NE&&UE(x[B],p.af))return lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_329.1.dr	String found in binary or memory: new Set;this.deviceIsAudioOnly=!(C==null\|\|!C.deviceIsAudioOnly);this.xt=Hw(this.xt,p.ismb);this.uL?(M=p.vss_host\|\|"s.youtube.com",M==="s.youtube.com"&&(M=fI(this.Vn)\|\|"www.youtube.com")):M="video.google.com";this.kz=M;Oe(this,p,!0);this.vr=new Wb;g.R(this,this.vr);T=C?C.innertubeApiKey:XW("",p.innertube_api_key);c=C?C.innertubeApiVersion:XW("",p.innertube_api_version);M=C?C.innertubeContextClientVersion:XW("",p.innertube_context_client_version);T=g.W6("INNERTUBE_API_KEY")\|\|T;c=g.W6("INNERTUBE_API_VERSION")\|\| equals www.youtube.com (Youtube)
Source: chromecache_408.1.dr, chromecache_328.1.dr, chromecache_411.1.dr, chromecache_550.1.dr, chromecache_412.1.dr, chromecache_288.1.dr, chromecache_587.1.dr, chromecache_416.1.dr, chromecache_302.1.dr, chromecache_530.1.dr, chromecache_571.1.dr	String found in binary or memory: return b}JE.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),LE=["www.youtube.com","www.youtube-nocookie.com"],ME,NE=!1; equals www.youtube.com (Youtube)
Source: chromecache_367.1.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(b){var c=typeof a.URL==="function"?a.URL:a.webkitURL;c=new c(b);c=c.hostname.endsWith(".facebook.com")&&c.pathname=="/signals/iwl.js";if(!c)throw new Error("Disallowed script URL");return b}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_367.1.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_367.1.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_329.1.dr	String found in binary or memory: this.yn.sY&&(p.authuser=this.yn.sY);this.yn.pageId&&(p.pageid=this.yn.pageId);isNaN(this.cryptoPeriodIndex)\|\|(p.cpi=this.cryptoPeriodIndex.toString());var H=(H=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.f0()))?H[1]:"";H==="ATV"&&(p.cdt=H);this.W=p;this.W.session_id=N;this.a$=!0;this.C.flavor==="widevine"&&(this.W.hdr="1");this.C.flavor==="playready"&&(C=Number(eO(C.experiments,"playready_first_play_expiration")),!isNaN(C)&&C>=0&&(this.W.mfpe=""+C),this.a$=!1);C="";g.O6(this.C)?fb(this.C)?(N=V.C)&&(C="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_406.1.dr, chromecache_538.1.dr	String found in binary or memory: var YD=function(a,b,c,d,e){var f=OB("fsl",c?"nv.mwt":"mwt",0),g;g=c?OB("fsl","nv.ids",[]):OB("fsl","ids",[]);if(!g.length)return!0;var k=TB(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);T(121);if(m==="https://www.facebook.com/tr/")return T(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!xA(k,zA(b, equals www.facebook.com (Facebook)
Source: chromecache_531.1.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/3ede36f2\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.oneroguereporter.com
Source: global traffic	DNS traffic detected: DNS query: mwebexplorerpro.com
Source: global traffic	DNS traffic detected: DNS query: visi-sharp.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: dev.visualwebsiteoptimizer.com
Source: global traffic	DNS traffic detected: DNS query: dashboard.heatmap.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: tracking.buygoods.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: api-js.mixpanel.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: rr3---sn-t0aedn7l.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: www.buygoods.com
Source: global traffic	DNS traffic detected: DNS query: rr3---sn-a5mekn6k.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: buygoods.com
Source: global traffic	DNS traffic detected: DNS query: cdn.buygoods.com
Source: global traffic	DNS traffic detected: DNS query: js.braintreegateway.com
Source: global traffic	DNS traffic detected: DNS query: display.buygoods.com
Source: global traffic	DNS traffic detected: DNS query: pay.buygoods.com
Source: global traffic	DNS traffic detected: DNS query: songbird.cardinalcommerce.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: ka-f.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: www.datadoghq-browser-agent.com
Source: global traffic	DNS traffic detected: DNS query: yomali.com
Source: global traffic	DNS traffic detected: DNS query: includes.ccdc02.com
Source: global traffic	DNS traffic detected: DNS query: payments.braintree-api.com
Source: global traffic	DNS traffic detected: DNS query: browser-intake-datadoghq.com
Source: global traffic	DNS traffic detected: DNS query: go.maxweb.com
Source: global traffic	DNS traffic detected: DNS query: ssl.kaptcha.com
Source: global traffic	DNS traffic detected: DNS query: client-analytics.braintreegateway.com
Source: global traffic	DNS traffic detected: DNS query: checkout.paypal.com
Source: global traffic	DNS traffic detected: DNS query: c.paypal.com
Source: global traffic	DNS traffic detected: DNS query: www.paypal.com
Source: global traffic	DNS traffic detected: DNS query: assets.braintreegateway.com
Source: global traffic	DNS traffic detected: DNS query: trends.revcontent.com
Source: global traffic	DNS traffic detected: DNS query: golink.fun
Source: global traffic	DNS traffic detected: DNS query: business.newsbreak.com
Source: global traffic	DNS traffic detected: DNS query: www.softwareprojects.com
Source: global traffic	DNS traffic detected: DNS query: stun.kaptcha.com
Source: global traffic	DNS traffic detected: DNS query: stun1.l.google.com
Source: global traffic	DNS traffic detected: DNS query: c6.paypal.com
Source: global traffic	DNS traffic detected: DNS query: b.stats.paypal.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: lhr.stats.paypal.com
Source: global traffic	DNS traffic detected: DNS query: www.paypalobjects.com
Source: global traffic	DNS traffic detected: DNS query: t.paypal.com

Source: unknown

HTTP traffic detected: POST /track/?verbose=1&ip=1&_=1736456090572 HTTP/1.1Host: api-js.mixpanel.comConnection: keep-aliveContent-Length: 1304sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://visi-sharp.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://visi-sharp.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 27Accept-Ch: Sec-CH-UA-FullCache-Control: max-age=0, no-cache, no-store, must-revalidateContent-Type: text/html; charset=utf-8Etag: W/"1b-t3Pfl4FRsGq0mO4t1UhagLO9mUw"Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==Paypal-Debug-Id: f892426788d42Traceparent: 00-0000000000000000000f892426788d42-040c2acd7f70cdda-01DC: ccg11-origin-www-1.paypal.comAccept-Ranges: bytesVia: 1.1 varnish, 1.1 varnish, 1.1 varnishDate: Thu, 09 Jan 2025 20:56:29 GMTStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kcgs7200032-IAD, cache-nyc-kteb1890032-NYC, cache-nyc-kteb1890032-NYCX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1736456190.721126,VS0,VE113Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1924,i,7523114714375834015,5707204102508674468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.oneroguereporter.com/gks"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4104 --field-trial-handle=1924,i,7523114714375834015,5707204102508674468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5508 --field-trial-handle=1924,i,7523114714375834015,5707204102508674468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1924,i,7523114714375834015,5707204102508674468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5508 --field-trial-handle=1924,i,7523114714375834015,5707204102508674468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4104 --field-trial-handle=1924,i,7523114714375834015,5707204102508674468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5508 --field-trial-handle=1924,i,7523114714375834015,5707204102508674468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://visi-sharp.net/pixels/e71ec514527769916ab2b5748eef670b?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802&key=66taBl5rn79UTO5JGFaAqZivQP7PL3UU	0%	Avira URL Cloud	safe
https://yomali.com/	0%	Avira URL Cloud	safe
https://visi-sharp.net/images/most_popular_v2.png	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/buygoods/checkout/9103/pd-form-banner.jpeg	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/buygoods/checkout/8117/header-desktop-es.png	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/productimages/6797/42/6_bo_les_1_g0pjc_p_g_resized333.png	0%	Avira URL Cloud	safe
https://cdn.yomali.com/assets/img/500x600/partnerlogos.png	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/assets/checkout/img/trust-guard.png	0%	Avira URL Cloud	safe
https://visi-sharp.net/images/male/40-60/t-4.jpg	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/assets/checkout/img/badge-365-day.png	0%	Avira URL Cloud	safe
https://visi-sharp.net/form/affiliates	0%	Avira URL Cloud	safe
http://yomali.com/	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/buygoods/checkout/9410/ps-Desktop-Header-2.jpg	0%	Avira URL Cloud	safe
https://pay.buygoods.com/lib/v1/js/vaultFrame.js?v=65	0%	Avira URL Cloud	safe
https://cdn.yomali.com/assets/img/200x100/img12.png	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/buygoods/checkout/7533/sc-desktop-header.png	0%	Avira URL Cloud	safe
https://visi-sharp.net/images/USA.svg	0%	Avira URL Cloud	safe
https://pay.buygoods.com/js/cleave.min.js	0%	Avira URL Cloud	safe
https://cdn.yomali.com/assets/img/200x100/img7.png	0%	Avira URL Cloud	safe
https://visi-sharp.net/images/male/40-60/t-0.jpg	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/buygoods/checkout/8117/fs-6-Bottle-With-Guaranteee-Recovered.jpg	0%	Avira URL Cloud	safe
https://cdn.yomali.com/assets/img/200x100/img3.png	0%	Avira URL Cloud	safe
https://visi-sharp.net/images/0.png	0%	Avira URL Cloud	safe
https://pay.buygoods.com/img/jcb.svg	0%	Avira URL Cloud	safe
https://pay.buygoods.com/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/assets/checkout/img/visa-cvv.jpg	0%	Avira URL Cloud	safe
https://visi-sharp.net/images/app/buygoods.png	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/assets/checkout/img/badge-30-day.png	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/buygoods/checkout/9348/nb-OTP-banner.png	0%	Avira URL Cloud	safe
https://visi-sharp.net/images/female/40-60/t-1.jpg	0%	Avira URL Cloud	safe
https://www.cera.org.au/research/uveitis-research/	0%	Avira URL Cloud	safe
https://pay.buygoods.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/assets/checkout/img/badge-90-day.png	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
paypal.map.fastly.net	151.101.2.133	true	false	high
static.cloudflareinsights.com	104.16.79.73	true	false	high
dualstack.paypal-dynamic-2.map.fastly.net	151.101.65.35	true	false	high
buygoodslb.clickcrm.com	172.66.40.234	true	false	unknown
cdn.buygoods.com	172.66.40.141	true	false	high
paypal-dynamic.map.fastly.net	151.101.1.21	true	false	high
i.ytimg.com	216.58.206.86	true	false	high
dev.visualwebsiteoptimizer.com	34.107.218.251	true	false	high
stun1.l.google.com	74.125.250.129	true	false	high
colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com	35.81.31.24	true	false	high
www.softwareprojects.com	172.66.40.147	true	false	high
gateway-prod-eu-central-1.production.braintree-api.com	35.156.167.229	true	false	high
scontent.xx.fbcdn.net	157.240.0.6	true	false	high
yomali.com	172.66.40.234	true	false	high
www.oneroguereporter.com	104.21.62.118	true	false	high
photos-ugc.l.googleusercontent.com	172.217.16.193	true	false	high
www.google.com	142.250.185.68	true	false	high
origin-analytics-prod.production.braintree-api.com	35.156.78.69	true	false	high
stats.glb.paypal.com	34.147.177.40	true	false	high
browser-intake-datadoghq.com	3.233.158.25	true	false	high
includes.ccdc02.com	198.217.251.238	true	false	high
mwebexplorerpro.com	188.114.97.3	true	false	high
business.newsbreak.com	52.42.49.72	true	false	high
paypal-dynamic-cdn.map.fastly.net	151.101.67.1	true	false	high
api-js.mixpanel.com	35.186.241.51	true	false	high
buygoods.com	172.66.40.234	true	false	high
trends.revcontent.com	52.209.42.67	true	false	high
dashboard.heatmap.com	18.245.86.64	true	false	high
visi-sharp.net	104.21.80.1	true	false	high
lhr.stats.paypal.com	34.147.177.40	true	false	high
static.doubleclick.net	142.250.185.102	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
tracking.buygoods.com	172.66.40.141	true	false	high
youtube-ui.l.google.com	216.58.206.46	true	false	high
rr3.sn-t0aedn7l.googlevideo.com	74.125.174.168	true	false	unknown
googleads.g.doubleclick.net	142.250.185.194	true	false	high
play.google.com	142.250.185.238	true	false	high
devic-elast-1eoivwyi136bb-007d6743299a5175.elb.us-west-2.amazonaws.com	100.20.121.79	true	false	unknown
pay.buygoods.com	172.66.40.141	true	false	high
www.datadoghq-browser-agent.com	13.33.219.205	true	false	high
go.maxweb.com	172.66.40.143	true	false	high
td.doubleclick.net	172.217.16.194	true	false	high
songbird.cardinalcommerce.com	198.217.251.251	true	false	high
rr3.sn-a5mekn6k.googlevideo.com	173.194.8.232	true	false	high
ka-f.fontawesome.com	unknown	unknown	false	high
display.buygoods.com	unknown	unknown	false	high
ssl.kaptcha.com	unknown	unknown	false	high
rr3---sn-a5mekn6k.googlevideo.com	unknown	unknown	false	high
checkout.paypal.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
t.paypal.com	unknown	unknown	false	high
c6.paypal.com	unknown	unknown	false	high
b.stats.paypal.com	unknown	unknown	false	high
rr3---sn-t0aedn7l.googlevideo.com	unknown	unknown	false	high
www.buygoods.com	unknown	unknown	false	high
golink.fun	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	high
js.braintreegateway.com	unknown	unknown	false	high
stun.kaptcha.com	unknown	unknown	false	high
payments.braintree-api.com	unknown	unknown	false	high
www.paypalobjects.com	unknown	unknown	false	high
yt3.ggpht.com	unknown	unknown	false	high
www.paypal.com	unknown	unknown	false	high
assets.braintreegateway.com	unknown	unknown	false	high
c.paypal.com	unknown	unknown	false	high
client-analytics.braintreegateway.com	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://cdn.buygoods.com/assets/checkout/img/trust-guard.png	false	Avira URL Cloud: safe	unknown
https://buygoods.com/secure/checkout/assets/js/places.js?v=2	false		high
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false		high
https://yomali.com/	false	Avira URL Cloud: safe	unknown
https://www.paypalobjects.com/muse/muse.js	false		high
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Afetch%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=972f92f1-8c88-45f7-a4d6-761e63d6fdb5&batch_time=1736456184285	false		high
https://visi-sharp.net/pixels/e71ec514527769916ab2b5748eef670b?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802&key=66taBl5rn79UTO5JGFaAqZivQP7PL3UU	false	Avira URL Cloud: safe	unknown
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Abeacon%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=8bd23123-56c4-4d7b-bf6b-a0482b5449ce&batch_time=1736456183229	false		high
https://cdn.buygoods.com/productimages/6797/42/6_bo_les_1_g0pjc_p_g_resized333.png	false	Avira URL Cloud: safe	unknown
https://client-analytics.braintreegateway.com/8xnhgfcmq7d3k99b	false		high
https://lhr.stats.paypal.com/counter2.cgi?i=127.0.0.1&p=f90ace7de996d798d0419f2ab4a0d6dd&t=1736456181.951&a=14	false		high
https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/endscreen.js	false		high
https://js.braintreegateway.com/web/3.97.2/js/paypal-checkout.min.js	false		high
https://www.youtube.com/s/player/3ede36f2/www-embed-player.vflset/www-embed-player.js	false		high
https://display.buygoods.com/v1/terms?id=terms	false		high
https://checkout.paypal.com/web/3.97.2/html/dispatch-frame.min.html	false		high
https://www.google.com/js/th/bTS-krGMW8fDflzgOBqs4RfQ289v88xjeZzvxqf94UM.js	false		high
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false		high
https://connect.facebook.net/signals/config/789222289013177?v=2.9.179&r=stable&domain=visi-sharp.net&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113	false		high
https://c.paypal.com/v1/r/d/b/p1	false		high
https://c.paypal.com/v1/r/d/b/p2	false		high
https://visi-sharp.net/images/most_popular_v2.png	false	Avira URL Cloud: safe	unknown
https://visi-sharp.net/images/male/40-60/t-4.jpg	false	Avira URL Cloud: safe	unknown
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Afetch%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=dcb0b81b-40e2-4402-9f52-e546e08a365f&batch_time=1736456181858	false		high
https://pay.buygoods.com/lib/v1/js/vaultFrame.js?v=65	false	Avira URL Cloud: safe	unknown
http://yomali.com/	false	Avira URL Cloud: safe	unknown
https://buygoods.com/secure/checkout/assets/js/paypal-cs-conversion.js?v=7	false		high
https://js.braintreegateway.com/web/3.97.2/js/client.min.js	false		high
https://visi-sharp.net/images/USA.svg	false	Avira URL Cloud: safe	unknown
https://pay.buygoods.com/js/cleave.min.js	false	Avira URL Cloud: safe	unknown
https://buygoods.com/secure/checkout.html?sessid2=sessid2025010920547110&aff_id=326&sid=8802&sid2=6812_sessid20250109205426977&account_id=6797&product_codename=prod11&redirect=aHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%3D&lang=en&subid5=%24device%3A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	false		high
https://songbird.cardinalcommerce.com/cardinalcruise/v1/songbird.js	false		high
https://visi-sharp.net/images/male/40-60/t-0.jpg	false	Avira URL Cloud: safe	unknown
https://pay.buygoods.com/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://browser-intake-datadoghq.com/api/v2/replay?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Abeacon%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=b49314ba-8841-4a4d-92f7-d85785c952ad	false		high
https://pay.buygoods.com/img/jcb.svg	false	Avira URL Cloud: safe	unknown
https://browser-intake-datadoghq.com/api/v2/replay?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Abeacon%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=72d77647-ac73-44fc-8775-5626369f2951	false		high
https://visi-sharp.net/images/0.png	false	Avira URL Cloud: safe	unknown
https://cdn.buygoods.com/assets/checkout/img/visa-cvv.jpg	false	Avira URL Cloud: safe	unknown
https://visi-sharp.net/images/app/buygoods.png	false	Avira URL Cloud: safe	unknown
https://visi-sharp.net/images/female/40-60/t-1.jpg	false	Avira URL Cloud: safe	unknown
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Abeacon%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=3687b13f-d10d-4c32-9627-8ae9a890df10&batch_time=1736456184409	false		high
https://buygoods.com/secure/checkout/assets/js/dictionary.js?v=29	false		high
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Abeacon%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=de12fdb2-faaa-46c8-88ed-ee87dd0b3bbe&batch_time=1736456185170	false		high
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Abeacon%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=b39c9596-9e71-4298-853a-e44cf9ffb62c&batch_time=1736456184548	false		high
https://tracking.buygoods.com/track/?a=6797&firstcookie=0&tracking_redirect=&referrer=https%3A%2F%2Fvisi-sharp.net%2F&sessid2=sessid2025010920547110&product=prod11&is_checkout=1&caller_url=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid2025010920547110%26aff_id%3D326%26sid%3D8802%26sid2%3D6812_sessid20250109205426977%26account_id%3D6797%26product_codename%3Dprod11%26redirect%3DaHR0cHM6Ly92aXNpLXNoYXJwLm5ldC91cGdyYWRlLTE%253D%26lang%3Den%26subid5%3D%2524device%253A1944cd9204625e5-00b6992a5f1275-26031e51-140000-1944cd9204625e5	false		high
https://dashboard.heatmap.com/conversions.php?siteId=567&dataLayer=populate	false		high
https://pay.buygoods.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	false	Avira URL Cloud: safe	unknown
https://www.paypal.com/targeting/graphql?disableSetCookie=true	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_406.1.dr, chromecache_412.1.dr, chromecache_288.1.dr, chromecache_538.1.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_329.1.dr	false		high
https://www.google.com/url?q=https://developers.google.com/analytics/devguides/collection/analyticsj	chromecache_481.1.dr	false		high
http://g.co/dev/maps-no-account	chromecache_345.1.dr, chromecache_532.1.dr	false		high
https://cdn.yomali.com/assets/img/500x600/partnerlogos.png	chromecache_514.1.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/url?q=https://aws.amazon.com/privacy/&sa=D&ust=1585933040239000	chromecache_481.1.dr	false		high
https://sci-hub.se/10.1016/j.biopha.2018.08.031	chromecache_481.1.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_583.1.dr	false		high
https://cdn.buygoods.com/buygoods/checkout/8117/header-desktop-es.png	chromecache_441.1.dr, chromecache_393.1.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com	chromecache_575.1.dr	false		high
https://fontawesome.com	chromecache_450.1.dr	false		high
https://cdn.buygoods.com/buygoods/checkout/9103/pd-form-banner.jpeg	chromecache_441.1.dr, chromecache_393.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_320.1.dr, chromecache_455.1.dr	false		high
https://admin.youtube.com	chromecache_329.1.dr	false		high
https://goo.gle/js-api-loading	chromecache_345.1.dr, chromecache_532.1.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_329.1.dr	false		high
https://support.google.com/maps/answer/3092445	chromecache_316.1.dr	false		high
https://www.google.com/url?q=https://aws.amazon.com/privacy/&sa=D&ust=1585933040240000	chromecache_481.1.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_583.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_532.1.dr	false		high
https://yurt.corp.google.com	chromecache_329.1.dr	false		high
https://support.google.com/fusiontables/answer/9185417).	chromecache_345.1.dr, chromecache_532.1.dr	false		high
https://developers.google.com/maps/deprecations	chromecache_345.1.dr, chromecache_532.1.dr	false		high
https://cdn.buygoods.com/assets/checkout/img/badge-365-day.png	chromecache_441.1.dr, chromecache_393.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.buygoods.com/buygoods/checkout/9410/ps-Desktop-Header-2.jpg	chromecache_441.1.dr, chromecache_393.1.dr	false	Avira URL Cloud: safe	unknown
https://visi-sharp.net/form/affiliates	chromecache_481.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.yomali.com/assets/img/200x100/img12.png	chromecache_514.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.buygoods.com/buygoods/checkout/7533/sc-desktop-header.png	chromecache_441.1.dr, chromecache_393.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.yomali.com/assets/img/200x100/img7.png	chromecache_514.1.dr	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/	chromecache_367.1.dr	false		high
https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js	chromecache_514.1.dr	false		high
https://cdn.yomali.com/assets/img/200x100/img3.png	chromecache_514.1.dr	false	Avira URL Cloud: safe	unknown
http://tools.ietf.org/html/rfc1950	chromecache_389.1.dr, chromecache_521.1.dr, chromecache_329.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	chromecache_316.1.dr	false		high
https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7941169/	chromecache_481.1.dr	false		high
https://cdn.buygoods.com/buygoods/checkout/8117/fs-6-Bottle-With-Guaranteee-Recovered.jpg	chromecache_441.1.dr, chromecache_393.1.dr	false	Avira URL Cloud: safe	unknown
https://code.google.com/p/crypto-js/issues/detail?id=84	chromecache_595.1.dr, chromecache_473.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	chromecache_345.1.dr, chromecache_532.1.dr	false		high
https://www.google.com/url?q=https://www.hotjar.com/legal/policies/privacy&sa=D&ust=15859330	chromecache_481.1.dr	false		high
https://cdn.buygoods.com/buygoods/checkout/9348/nb-OTP-banner.png	chromecache_441.1.dr, chromecache_393.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.buygoods.com/assets/checkout/img/badge-30-day.png	chromecache_441.1.dr, chromecache_393.1.dr	false	Avira URL Cloud: safe	unknown
https://display.buygoods.com/v1/terms?id=terms&lang=de	chromecache_441.1.dr, chromecache_393.1.dr	false		high
https://ka-f.fontawesome.com	chromecache_561.1.dr, chromecache_373.1.dr	false		high
https://sketch.com	chromecache_560.1.dr, chromecache_350.1.dr, chromecache_552.1.dr, chromecache_540.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_532.1.dr	false		high
https://tracking.buygoods.com/track/?a=6797&firstcookie=0	chromecache_481.1.dr	false		high
https://angular.dev/license	chromecache_329.1.dr	false		high
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_575.1.dr	false		high
https://cdn.buygoods.com/assets/checkout/img/badge-90-day.png	chromecache_441.1.dr, chromecache_393.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cera.org.au/research/uveitis-research/	chromecache_481.1.dr	false	Avira URL Cloud: safe	unknown
http://youtube.com/streaming/metadata/segment/102015	chromecache_329.1.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
18.245.86.64	dashboard.heatmap.com	United States	16509	AMAZON-02US	false
35.186.241.51	api-js.mixpanel.com	United States	15169	GOOGLEUS	false
74.125.174.168	rr3.sn-t0aedn7l.googlevideo.com	United States	15169	GOOGLEUS	false
3.233.158.25	browser-intake-datadoghq.com	United States	14618	AMAZON-AESUS	false
142.250.185.102	static.doubleclick.net	United States	15169	GOOGLEUS	false
198.217.251.238	includes.ccdc02.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
52.42.49.72	business.newsbreak.com	United States	16509	AMAZON-02US	false
104.21.80.1	visi-sharp.net	United States	13335	CLOUDFLARENETUS	false
198.217.251.239	unknown	United States	13335	CLOUDFLARENETUS	false
104.16.80.73	unknown	United States	13335	CLOUDFLARENETUS	false
172.66.40.147	www.softwareprojects.com	United States	13335	CLOUDFLARENETUS	false
151.101.65.35	dualstack.paypal-dynamic-2.map.fastly.net	United States	54113	FASTLYUS	false
142.250.185.142	unknown	United States	15169	GOOGLEUS	false
172.66.40.143	go.maxweb.com	United States	13335	CLOUDFLARENETUS	false
172.66.40.141	cdn.buygoods.com	United States	13335	CLOUDFLARENETUS	false
34.147.177.40	stats.glb.paypal.com	United States	2686	ATGS-MMD-ASUS	false
34.107.218.251	dev.visualwebsiteoptimizer.com	United States	15169	GOOGLEUS	false
151.101.193.21	unknown	United States	54113	FASTLYUS	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
104.21.32.1	unknown	United States	13335	CLOUDFLARENETUS	false
18.245.86.96	unknown	United States	16509	AMAZON-02US	false
216.58.206.86	i.ytimg.com	United States	15169	GOOGLEUS	false
198.217.251.251	songbird.cardinalcommerce.com	United States	13335	CLOUDFLARENETUS	false
172.66.40.234	buygoodslb.clickcrm.com	United States	13335	CLOUDFLARENETUS	false
173.194.8.232	rr3.sn-a5mekn6k.googlevideo.com	United States	15169	GOOGLEUS	false
151.101.129.21	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	mwebexplorerpro.com	European Union	13335	CLOUDFLARENETUS	false
151.101.131.1	unknown	United States	54113	FASTLYUS	false
142.250.185.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.67.1	paypal-dynamic-cdn.map.fastly.net	United States	54113	FASTLYUS	false
35.156.167.229	gateway-prod-eu-central-1.production.braintree-api.com	United States	16509	AMAZON-02US	false
172.217.16.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.16.193	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.185.129	unknown	United States	15169	GOOGLEUS	false
151.101.193.35	unknown	United States	54113	FASTLYUS	false
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.74.194	unknown	United States	15169	GOOGLEUS	false
216.58.212.130	unknown	United States	15169	GOOGLEUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
52.209.42.67	trends.revcontent.com	United States	16509	AMAZON-02US	false
74.125.250.129	stun1.l.google.com	United States	15169	GOOGLEUS	false
35.156.78.69	origin-analytics-prod.production.braintree-api.com	United States	16509	AMAZON-02US	false
216.58.212.132	unknown	United States	15169	GOOGLEUS	false
18.158.52.92	unknown	United States	16509	AMAZON-02US	false
104.21.62.118	www.oneroguereporter.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.21	paypal-dynamic.map.fastly.net	United States	54113	FASTLYUS	false
35.81.31.24	colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com	United States	237	MERIT-AS-14US	false
151.101.195.1	unknown	United States	54113	FASTLYUS	false
151.101.2.133	paypal.map.fastly.net	United States	54113	FASTLYUS	false
142.250.185.130	unknown	United States	15169	GOOGLEUS	false
13.33.219.205	www.datadoghq-browser-agent.com	United States	16509	AMAZON-02US	false
54.148.115.137	unknown	United States	16509	AMAZON-02US	false
151.101.65.21	unknown	United States	54113	FASTLYUS	false

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1587042
Start date and time:	2025-01-09 21:54:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://www.oneroguereporter.com/gks
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@31/514@195/59
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 19:54:37 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.995672247876004
Encrypted:	false
SSDEEP:	48:8qgdp4TIQ78FHMidAKZdA1JehwiZUklqehwy+3:8qtEELy
MD5:	C23B6C3A0A06B6E85B65CCAC11858994
SHA1:	83EA8C55BD1A745EA9A606FA07E761672F6A987D
SHA-256:	FF9A893AADBDA2F4D602CA35E54F0E91ABEBEBE8061243583972185E7E34D3BA
SHA-512:	95688AD8F8C06AA06675530B38376CC562D1195FF7108B90848DF05A9778E4CE589199C4729BE291235745721EF60AAD0A341DCA21D637842DB02631E44B1CA7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....h..b......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I)Z.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V)Z.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V)Z............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V)Z............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........n..R.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Bytes transferred	Direction	Data
Jan 9, 2025 21:56:20.929658890 CET	263	OUT	GET / HTTP/1.1 Host: yomali.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 9, 2025 21:56:21.407275915 CET	829	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 09 Jan 2025 20:56:21 GMT Content-Length: 0 Connection: keep-alive location: https://yomali.com/ Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 984 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YB5d5ptLOakmwl3Wf%2FICqGhyvSYzgVOZ5XXdiPSNeYoFr7v9RyyRXqnO%2BiW6ipAGm4SrCWhHcbyjXY9%2BJEgRYaGelHlU%2BhjYtsyQGs1NRLQWeQI3g3C9mCooc1ka"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ff7555d490c8ca5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1791&min_rtt=1791&rtt_var=895&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=263&delivery_rate=0&cwnd=235&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:38 UTC	670	OUT	GET /gks HTTP/1.1 Host: www.oneroguereporter.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 20:54:38 UTC	961	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 09 Jan 2025 20:54:38 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://mwebexplorerpro.com/6812/8802/2/? Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=42X%2BMNv0loYhBn5yoRH2k8rFM0ao%2BC8b9Rs7ncs9%2BA4b0YgMLvXuYasGo3Fy1d3iNY4dq3QOEBG%2BHVNM8z3cYpQyO3zWY7LfWpbVkxJAcO5q3dVpPyoNjpVN0O6LpP0QYdWmzGkRJ2ZXeXo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff752d8090d42e4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1597&min_rtt=1588&rtt_var=602&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2850&recv_bytes=1248&delivery_rate=1838790&cwnd=228&unsent_bytes=0&cid=fd9e46efe74556bc&ts=145&x=0"
2025-01-09 20:54:38 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:39 UTC	675	OUT	GET /6812/8802/2/? HTTP/1.1 Host: mwebexplorerpro.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 20:54:39 UTC	884	IN	HTTP/1.1 302 Found Date: Thu, 09 Jan 2025 20:54:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: max-age=3600 cache-control: private pragma: no-cache location: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid2025010920545836&subid=8802 expires: Thu, 09 Jan 2025 21:54:39 GMT access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type x-server: WEB_6 strict-transport-security: max-age=31536000; CF-Cache-Status: DYNAMIC Set-Cookie: __cflb=02DiuDvnJbjKdBkxKLVBqBrQP8wYzWkbVKEE9vgjXsHRe; SameSite=Lax; path=/; expires=Fri, 10-Jan-25 19:54:39 GMT; HttpOnly Server: cloudflare CF-RAY: 8ff752e06d4a15c3-EWR
2025-01-09 20:54:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:41 UTC	670	OUT	GET /gks HTTP/1.1 Host: www.oneroguereporter.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 20:54:41 UTC	959	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 09 Jan 2025 20:54:41 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://mwebexplorerpro.com/6812/8802/2/? Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tjY8gsfhRvOhB0wdfcnywH4hPyMdI4K715JllSBTjrynl%2F2sijQUwB15Vmmp%2FvxZwu4IP7e2zhsfTWfgnexLcSs3axVPpQRCPNsH6%2FlqLSLWC7UFGVjGcbCrtrYGcZchhh7UIH0bF07kgWU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff752eaca024373-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1706&min_rtt=1696&rtt_var=657&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2851&recv_bytes=1248&delivery_rate=1639528&cwnd=238&unsent_bytes=0&cid=1e1ac5df3e6980b0&ts=143&x=0"
2025-01-09 20:54:41 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:42 UTC	737	OUT	GET /6812/8802/2/? HTTP/1.1 Host: mwebexplorerpro.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuDvnJbjKdBkxKLVBqBrQP8wYzWkbVKEE9vgjXsHRe
2025-01-09 20:54:42 UTC	750	IN	HTTP/1.1 302 Found Date: Thu, 09 Jan 2025 20:54:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: max-age=3600 cache-control: private pragma: no-cache location: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802 expires: Thu, 09 Jan 2025 21:54:42 GMT access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type x-server: WEB_6 strict-transport-security: max-age=31536000; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ff752f17e8742c6-EWR
2025-01-09 20:54:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:42 UTC	721	OUT	GET /report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802 HTTP/1.1 Host: visi-sharp.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 20:54:42 UTC	1063	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 20:54:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; expires=Sun, 19-Jan-2025 20:54:42 GMT; Max-Age=864000; path=/; samesite=lax Set-Cookie: _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; expires=Sun, 19-Jan-2025 20:54:42 GMT; Max-Age=864000; path=/; httponly; samesite=lax
2025-01-09 20:54:42 UTC	1506	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 72 65 66 65 72 72 65 72 3d 65 79 4a 70 64 69 49 36 49 6b 55 30 62 55 39 36 4d 58 5a 5a 52 6d 74 6e 62 56 46 79 61 58 5a 4a 52 32 4a 34 52 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 46 42 35 57 46 42 70 57 58 68 46 65 57 68 6f 61 6e 6f 31 65 6b 39 42 64 6d 39 52 4f 45 31 36 62 32 39 6c 59 54 41 7a 51 54 52 78 4e 44 6c 44 55 45 68 70 65 45 63 32 62 48 51 77 59 6c 68 6a 65 44 52 43 53 6c 42 51 65 57 31 79 65 44 6b 34 52 6a 6b 30 55 33 68 6e 62 46 6c 77 65 6d 6f 76 53 6d 64 42 65 47 67 79 62 45 52 52 5a 54 68 71 56 48 63 39 50 53 49 73 49 6d 31 68 59 79 49 36 49 6d 55 32 4e 6d 49 7a 4d 54 59 31 59 7a 64 6a 4e 44 5a 6c 4d 6d 51 78 5a 6a 63 31 4d 6a 68 6b 5a 6a 49 35 4d 6a 59 34 4e 6a 4a 6c 5a 54 41 32 4d 6d Data Ascii: Set-Cookie: referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2Mm
2025-01-09 20:54:42 UTC	1261	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 69 78 65 6c 73 3d 65 79 4a 70 64 69 49 36 49 6c 42 76 63 55 63 76 5a 30 59 33 4f 48 42 6d 63 6b 30 30 56 47 68 69 52 6e 46 4c 51 6d 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 48 5a 77 63 31 46 6b 54 43 39 4a 56 6d 31 4d 63 56 64 74 53 55 68 6d 4e 6b 6c 48 65 55 64 6d 55 30 4a 44 62 58 4e 6d 4e 6b 46 74 51 30 4a 43 5a 79 74 68 52 31 52 70 63 55 4a 46 4e 6d 46 57 4d 55 74 53 63 57 35 6e 61 32 35 51 53 32 52 35 4d 57 68 73 62 31 4d 79 63 46 42 56 52 31 70 53 62 55 59 7a 5a 55 4e 47 63 48 5a 74 65 6e 52 6c 4f 47 46 55 64 44 6b 76 55 47 52 49 56 33 45 76 61 7a 6b 72 53 7a 68 6d 54 58 5a 5a 54 53 39 50 52 45 64 44 61 45 64 49 63 57 64 7a 55 45 4e 44 53 6c 46 43 4e 6c 4e 57 4f 45 35 6b 4e 55 30 33 51 31 4a 49 Data Ascii: Set-Cookie: pixels=eyJpdiI6IlBvcUcvZ0Y3OHBmck00VGhiRnFLQmc9PSIsInZhbHVlIjoidHZwc1FkTC9JVm1McVdtSUhmNklHeUdmU0JDbXNmNkFtQ0JCZythR1RpcUJFNmFWMUtScW5na25QS2R5MWhsb1MycFBVR1pSbUYzZUNGcHZtenRlOGFUdDkvUGRIV3EvazkrSzhmTXZZTS9PREdDaEdIcWdzUENDSlFCNlNWOE5kNU03Q1JI
2025-01-09 20:54:42 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 3c 21 2d 2d 20 68 65 61 74 6d 61 70 2e 63 6f 6d 20 73 6e 69 70 70 65 74 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 68 65 61 74 6d 61 70 4c 6f 61 64 43 6f 6e 76 65 72 73 69 6f 6e 73 53 44 4b 28 75 72 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 20 73 63 72 69 70 74 2e 74 79 70 65 20 3d 20 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3b 0a 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 73 72 63 20 3d 20 75 72 6c 3b 20 73 63 72 69 70 74 2e 61 73 79 6e 63 20 3d 20 66 61 6c 73 65 3b 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 63 72 Data Ascii: 7ffa... heatmap.com snippet --><script> function heatmapLoadConversionsSDK(url) { var script = document.createElement('script'); script.type = 'text/javascript'; script.src = url; script.async = false; document.head.appendChild(scr
2025-01-09 20:54:42 UTC	1369	IN	Data Raw: 3a 2f 2f 64 65 76 2e 76 69 73 75 61 6c 77 65 62 73 69 74 65 6f 70 74 69 6d 69 7a 65 72 2e 63 6f 6d 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 69 64 3d 27 76 77 6f 43 6f 64 65 27 3e 0a 77 69 6e 64 6f 77 2e 5f 76 77 6f 5f 63 6f 64 65 20 7c 7c 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 76 61 72 20 61 63 63 6f 75 6e 74 5f 69 64 3d 37 39 31 35 36 33 2c 0a 76 65 72 73 69 6f 6e 3d 32 2e 31 2c 0a 73 65 74 74 69 6e 67 73 5f 74 6f 6c 65 72 61 6e 63 65 3d 32 30 30 30 2c 0a 68 69 64 65 5f 65 6c 65 6d 65 6e 74 3d 27 62 6f 64 79 27 2c 0a 68 69 64 65 5f 65 6c 65 6d 65 6e 74 5f 73 74 79 6c 65 20 3d 20 27 6f 70 61 63 69 74 79 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 69 6c 74 65 72 3a 61 6c 70 68 61 28 Data Ascii: ://dev.visualwebsiteoptimizer.com" /><script type='text/javascript' id='vwoCode'>window._vwo_code \|\| (function() {var account_id=791563,version=2.1,settings_tolerance=2000,hide_element='body',hide_element_style = 'opacity:0 !important;filter:alpha(
2025-01-09 20:54:42 UTC	1369	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 61 64 64 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 74 2e 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3b 69 66 28 65 2e 73 72 63 29 7b 74 2e 73 72 63 3d 65 2e 73 72 63 7d 65 6c 73 65 7b 74 2e 74 65 78 74 3d 65 2e 74 65 78 74 7d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 2c 6c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 29 2c 6e 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 2c Data Ascii: (){return f},addScript:function(e){var t=d.createElement('script');t.type='text/javascript';if(e.src){t.src=e.src}else{t.text=e.text}d.getElementsByTagName('head')[0].appendChild(t)},load:function(e,t){var i=this.getSettings(),n=d.createElement('script'),
2025-01-09 20:54:42 UTC	1369	IN	Data Raw: 72 69 62 75 74 65 28 27 74 79 70 65 27 2c 27 74 65 78 74 2f 63 73 73 27 29 3b 69 66 28 74 2e 73 74 79 6c 65 53 68 65 65 74 29 74 2e 73 74 79 6c 65 53 68 65 65 74 2e 63 73 73 54 65 78 74 3d 6e 3b 65 6c 73 65 20 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6e 29 29 3b 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 65 6c 73 65 7b 74 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 3b 76 61 72 20 6e 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 6e 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 27 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 Data Ascii: ribute('type','text/css');if(t.styleSheet)t.styleSheet.cssText=n;else t.appendChild(d.createTextNode(n));r.appendChild(t)}else{t=d.getElementsByTagName('head')[0];var n=d.createElement('div');n.style.cssText='z-index: 2147483647 !important;position: fixed
2025-01-09 20:54:42 UTC	1369	IN	Data Raw: 74 27 2c 20 27 64 6f 6d 61 69 6e 27 2c 20 27 76 69 73 69 2d 73 68 61 72 70 2e 6e 65 74 27 29 3b 0a 20 20 20 20 67 74 61 67 28 27 65 76 65 6e 74 27 2c 20 27 61 66 66 69 6c 69 61 74 65 5f 69 64 27 2c 20 27 33 32 36 27 29 3b 0a 20 20 20 20 67 74 61 67 28 27 65 76 65 6e 74 27 2c 20 27 73 75 62 69 64 27 2c 20 27 38 38 30 32 27 29 3b 0a 20 20 20 20 67 74 61 67 28 27 65 76 65 6e 74 27 2c 20 27 6d 65 72 63 68 61 6e 74 27 2c 20 27 62 75 79 67 6f 6f 64 73 27 29 3b 0a 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 22 3e 0a 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 28 6e 6f 73 63 72 69 70 74 29 20 2d 2d 3e 0a 3c 6e 6f 73 63 72 69 70 Data Ascii: t', 'domain', 'visi-sharp.net'); gtag('event', 'affiliate_id', '326'); gtag('event', 'subid', '8802'); gtag('event', 'merchant', 'buygoods'); </script> </head><body class="">... Google Tag Manager (noscript) --><noscrip
2025-01-09 20:54:42 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 37 56 36 43 31 32 20 34 2e 33 34 33 31 35 20 31 30 2e 36 35 36 39 20 33 20 39 20 33 56 33 43 37 2e 33 34 33 31 35 20 33 20 36 20 34 2e 33 34 33 31 35 20 36 20 36 56 37 22 20 73 74 72 6f 6b 65 3d 22 23 32 66 62 33 63 35 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 20 31 34 4c 31 33 20 31 35 43 31 33 20 31 36 2e 31 30 34 36 20 31 33 2e 38 39 35 34 20 31 37 20 31 35 20 31 37 56 31 37 43 31 36 2e 31 30 34 36 20 31 37 20 31 37 20 31 36 2e 31 30 34 36 20 31 37 20 31 Data Ascii: <path d="M12 7V6C12 4.34315 10.6569 3 9 3V3C7.34315 3 6 4.34315 6 6V7" stroke="#2fb3c5" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/> <path d="M13 14L13 15C13 16.1046 13.8954 17 15 17V17C16.1046 17 17 16.1046 17 1
2025-01-09 20:54:42 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 57 46 45 72 66 65 37 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 4c 50 67 35 30 55 48 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 69 73 69 6f 6e 20 52 65 6d 65 64 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 4c 50 67 35 30 55 48 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4a 61 6e 75 61 72 79 20 32 30 32 35 0a 20 20 20 20 20 20 20 20 Data Ascii: <div class="_WFErfe7y"> <div class="_LPg50UHr"> Vision Remedy </div> <div class="_LPg50UHr"> January 2025
2025-01-09 20:54:42 UTC	1369	IN	Data Raw: 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 70 6c 61 79 65 72 2d 73 75 62 74 69 74 6c 65 73 20 63 6c 61 73 73 3d 22 5f 6c 79 39 4c 72 58 43 4f 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 70 6c 61 79 65 72 2d 70 6c 61 79 20 63 6c 61 73 73 3d 22 5f 33 36 4d 76 73 37 58 55 20 5f 7a 68 7a 48 6b 49 6c 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 41 57 4e 56 33 6b 70 53 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 6a 39 67 52 66 77 Data Ascii: <div data-player-subtitles class="_ly9LrXCO"></div> </div> <div data-player-play class="_36Mvs7XU _zhzHkIl1"> <div class="_AWNV3kpS"> <div class="_j9gRfw

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:43 UTC	2842	OUT	GET /css/app-19.css?id=9cf94c61215466bf367f HTTP/1.1 Host: visi-sharp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVG [TRUNCATED]
2025-01-09 20:54:43 UTC	998	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 20:54:43 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 21 May 2024 12:01:14 GMT Vary: Accept-Encoding ETag: W/"664c8d0a-e2af" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6784 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YAiO47NhaJCFfRinusa6481vQ2oDylxwO3IJEptAqDSWXJ%2F1nh6RJPL5%2FX2d5itEH808Yaj13dWZbel65TQvfdW5upRnsvKBSk9BSCjzACUx503g4SxuBh43a8RRt1SgRA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff752fb3f8243ee-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1744&min_rtt=1743&rtt_var=657&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2833&recv_bytes=3420&delivery_rate=1660978&cwnd=225&unsent_bytes=0&cid=c96d157763b847af&ts=116&x=0"
2025-01-09 20:54:43 UTC	371	IN	Data Raw: 37 63 39 32 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4d 6f 6e 74 73 65 72 72 61 74 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 3b 39 30 30 22 29 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4f 73 77 61 6c 64 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 3b 38 30 30 22 29 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 53 61 63 72 61 6d 65 6e 74 6f 22 29 3b 40 69 Data Ascii: 7c92@import url("https://fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700;900");@import url("https://fonts.googleapis.com/css2?family=Oswald:wght@400;500;600;700;800");@import url("https://fonts.googleapis.com/css2?family=Sacramento");@i
2025-01-09 20:54:43 UTC	1369	IN	Data Raw: 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 72 2c 68 74 6d 6c 2c 69 66 72 61 6d 65 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6d 65 6e 75 2c 6f 6c 2c 70 72 65 2c 74 65 78 74 61 72 65 61 2c 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 3b 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 7d 62 75 74 74 6f 6e 2c 68 74 6d 6c 2c 69 6e 70 75 74 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 Data Ascii: ,h1,h2,h3,h4,h5,h6,hr,html,iframe,legend,li,menu,ol,pre,textarea,ul{margin:0;padding:0;}p{margin-top:0;padding:0;}ul{list-style-type:none;}button,input,select,textarea{margin:0;outline:none;}button,html,input{box-sizing:border-box;}*,:after,:before{box-si
2025-01-09 20:54:43 UTC	1369	IN	Data Raw: 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 5f 33 34 6d 6c 5a 35 53 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 7d 2e 5f 70 76 37 54 4b 6a 52 35 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 2e 5f 70 76 37 54 4b 6a 52 35 3a 61 66 74 65 72 7b 68 65 69 67 68 74 3a 33 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 35 29 3b 7d 2e 5f 78 67 5a 54 6b 59 50 55 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 7d 40 Data Ascii: een and (max-width:600px){._34mlZ5Sr{font-size:24px !important;}}._pv7TKjR5{position:relative;}._pv7TKjR5:after{height:3px;position:absolute;bottom:0;left:0;right:0;content:"";background:hsla(0,0%,100%,.75);}._xgZTkYPU{margin-top:24px;text-align:center;}@
2025-01-09 20:54:43 UTC	1369	IN	Data Raw: 2e 5f 51 52 32 75 54 63 6a 55 7b 70 61 64 64 69 6e 67 3a 31 36 30 70 78 3b 7d 2e 5f 7a 65 34 51 52 67 62 73 7b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 34 30 70 78 3b 63 6f 6c 6f 72 3a 23 31 35 32 31 33 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 67 6f 6c 64 3b 7d 2e 5f 68 4a 56 57 75 61 4b 5a 7b 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 78 3b 7d 2e 5f 68 4a 56 57 75 61 4b 5a 2c 2e 5f 6a 45 62 6a 74 57 48 39 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b Data Ascii: ._QR2uTcjU{padding:160px;}._ze4QRgbs{width:100%;display:flex;justify-content:center;align-items:center;padding:40px;color:#152131;background:gold;}._hJVWuaKZ{max-width:900px;}._hJVWuaKZ,._jEbjtWH9{display:flex;flex-direction:column;justify-content:center;
2025-01-09 20:54:43 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 34 70 78 3b 7d 2e 5f 67 48 76 38 44 33 32 59 20 2e 5f 65 6f 45 59 49 66 52 36 20 2e 5f 46 46 31 73 4c 46 50 4b 7b 63 6f 6c 6f 72 3a 23 31 36 35 36 34 62 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 7d 2e 5f 71 7a 32 70 43 67 45 63 2c 2e 5f 55 34 68 56 4c 30 32 4b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 63 6f 6c 6f 72 3a 23 31 35 32 31 33 31 3b 7d 2e 5f 71 7a 32 70 43 67 45 63 2e 5f 6b 51 70 71 61 30 70 47 2c 2e 5f 55 34 68 56 4c 30 32 4b 2e 5f 6b 51 70 71 61 30 70 47 7b 77 69 64 74 68 3a 32 Data Ascii: splay:flex;flex-direction:column;justify-content:center;margin-left:14px;}._gHv8D32Y ._eoEYIfR6 ._FF1sLFPK{color:#16564b;font-weight:600;}._qz2pCgEc,._U4hVL02K{position:absolute;top:0;left:0;color:#152131;}._qz2pCgEc._kQpqa0pG,._U4hVL02K._kQpqa0pG{width:2
2025-01-09 20:54:43 UTC	1369	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 5f 4b 34 4e 6b 31 78 4f 66 2c 2e 5f 59 30 6f 35 33 37 6b 58 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 7d 2e 5f 59 30 6f 35 33 37 6b 58 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 2e 2e 2f 69 6d 61 67 65 73 2f 35 2e 70 6e 67 22 29 3b 77 69 64 74 68 3a 38 30 25 3b 7d 2e 5f 37 47 31 33 57 66 58 73 20 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 5f 67 48 76 38 44 33 32 59 7b 61 6c 69 67 6e 2d 69 Data Ascii: ckground-size:cover;width:100%;}._K4Nk1xOf,._Y0o537kX{height:100%;position:absolute;top:0;left:0;}._Y0o537kX{background-image:url("../images/5.png");width:80%;}._7G13WfXs p{margin-bottom:0 !important;}@media screen and (max-width:600px){._gHv8D32Y{align-i
2025-01-09 20:54:43 UTC	1369	IN	Data Raw: 65 72 3b 7d 2e 5f 47 4b 55 44 30 49 63 76 7b 70 61 64 64 69 6e 67 3a 36 34 70 78 3b 63 6f 6c 6f 72 3a 23 31 35 32 31 33 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 7d 2e 5f 47 4b 55 44 30 49 63 76 20 2e 5f 6b 51 70 71 61 30 70 47 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 38 2c 2d 2e 35 35 2c 2e 32 37 2c 31 2e 35 35 29 2c 73 63 61 6c 65 20 2e 36 73 20 65 61 73 65 3b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 7d 5b 64 61 74 61 2d 61 63 74 69 76 65 5d 20 2e 5f 6b 51 70 71 61 30 70 47 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 Data Ascii: er;}._GKUD0Icv{padding:64px;color:#152131;background:#fff;}._GKUD0Icv ._kQpqa0pG{transform:rotate(90deg);transition:transform .6s cubic-bezier(.68,-.55,.27,1.55),scale .6s ease;width:40px;height:40px;}[data-active] ._kQpqa0pG{transform:rotate(0deg) scale(
2025-01-09 20:54:43 UTC	1369	IN	Data Raw: 77 69 64 74 68 3a 39 30 30 70 78 3b 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 73 65 63 74 69 6f 6e 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 3b 7d 2e 5f 37 63 6a 4f 38 31 67 5a 7b 77 69 64 74 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 3b 66 6c 65 78 2d 62 61 73 69 73 3a 35 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 5f 37 63 6a 4f 38 31 67 5a 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 3b 7d 7d 2e 5f 37 63 6a Data Ascii: width:900px;counter-reset:section;display:flex;flex-wrap:wrap;margin-top:15px;}._7cjO81gZ{width:100%;font-size:14px;padding:0 10px;flex-basis:50%;overflow:hidden;box-sizing:border-box;}@media screen and (max-width:768px){._7cjO81gZ{flex-basis:100%;}}._7cj
2025-01-09 20:54:43 UTC	1369	IN	Data Raw: 49 44 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 62 66 30 34 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 7d 2e 5f 4b 66 62 38 4d 36 46 54 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 2d 6d 6f 7a 2d 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 70 61 64 64 69 6e 67 3a 35 30 70 78 20 32 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 34 70 78 3b 7d 2e 5f 4b 66 62 38 4d 36 46 54 20 2e 5f 66 71 4d 4c 39 68 32 51 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 30 70 78 3b 7d 2e 5f 4b Data Ascii: ID4{font-size:25px;margin-left:5px;color:#ffbf04;font-weight:600;}._Kfb8M6FT{background-color:#fff;width:-moz-fit-content;width:fit-content;padding:50px 20px;margin:0 auto;border-radius:24px;}._Kfb8M6FT ._fqML9h2Q{text-align:center;margin-bottom:40px;}._K
2025-01-09 20:54:43 UTC	1369	IN	Data Raw: 30 70 78 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 33 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 3a 6d 61 74 72 69 78 28 31 2c 30 2c 30 2c 31 2c 30 2c 30 29 3b 7d 2e 5f 4b 66 62 38 4d 36 46 54 20 2e 5f 49 51 41 74 6e 41 4c 76 20 2e 5f 4a 66 44 46 42 7a 56 6d 20 2e 5f 51 6c 72 70 68 53 67 53 7b 70 61 64 64 69 6e 67 3a 39 70 78 20 31 36 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 34 70 78 3b 62 6f 72 64 65 72 3a 33 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 7d 2e 5f 4b 66 62 38 4d 36 46 54 20 2e 5f 49 51 41 74 6e 41 4c 76 20 2e 5f 4a 66 44 46 42 7a 56 6d 20 2e 5f 72 54 55 5a 54 4d 33 62 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 7d 2e 5f 4b 66 62 38 4d 36 46 54 20 2e 5f Data Ascii: 0px;border-right:3px solid #fff;transform:matrix(1,0,0,1,0,0);}._Kfb8M6FT ._IQAtnALv ._JfDFBzVm ._QlrphSgS{padding:9px 16px;border-radius:24px;border:3px solid #fff;}._Kfb8M6FT ._IQAtnALv ._JfDFBzVm ._rTUZTM3b{font-size:20px;font-weight:600;}._Kfb8M6FT ._

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:43 UTC	2863	OUT	GET /images/V3.png HTTP/1.1 Host: visi-sharp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVG [TRUNCATED]
2025-01-09 20:54:43 UTC	992	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 20:54:43 GMT Content-Type: image/png Content-Length: 5665 Connection: close Last-Modified: Tue, 21 May 2024 12:01:13 GMT ETag: "664c8d09-1621" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4671 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dgu2oVsXe4%2Bso1YbDm5UGfLntx%2FKlT7DM%2B3oqXN9S2fgS8szQnNysmQbpzcbWpLJBIUf67I0tAcmiSvDoZ0s1aVKEFMnL2oRkPtOR2X8xpFcxEBP3D5JaS5btMSOP50Xbw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff752fb3b078c0f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1992&min_rtt=1938&rtt_var=835&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2832&recv_bytes=3441&delivery_rate=1230509&cwnd=223&unsent_bytes=0&cid=3c8b20ac7846cdd6&ts=122&x=0"
2025-01-09 20:54:43 UTC	377	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 20 00 00 00 df 08 06 00 00 00 56 30 0e f8 00 00 15 e8 49 44 41 54 78 9c ed 9d 4b 6c 5c d7 79 c7 8f 15 a7 b6 60 50 1c 1b 46 8c c4 21 34 06 b8 a0 bb 11 15 20 4e 90 20 d1 08 76 97 86 46 ed 2e 01 cc 61 bb 6a 93 d8 e3 4d 90 17 a0 11 1a 24 8e 37 22 f3 40 ba 28 2a 32 40 57 45 a3 21 ba 8c 0d 0f 77 96 bb 30 b9 a9 b8 20 90 19 d0 72 22 c5 88 39 64 02 3f 14 4b c5 99 fc 0f 75 35 9e c7 7d 9c f7 fd ff 80 01 15 44 a6 ee bc 7e f7 7b 9c f3 9d fb ee dc b9 23 88 73 aa 43 8f 8a 10 62 31 71 51 f2 cf b3 39 2e 72 5b 08 b1 8f 3f 77 f1 90 74 86 7e 12 e2 04 0a c8 2e 8b 78 48 c9 d4 f0 f3 a4 e3 6b ea 0b 21 b6 20 a7 ad c4 63 3f c5 7f 4b 48 21 28 20 73 28 c9 28 e9 9c 09 ec fa 7b 90 51 27 f1 93 10 ad 50 40 fa 50 c2 51 0f d7 91 8d Data Ascii: PNGIHDR V0IDATxKl\y`PF!4 N vF.ajM$7"@(*2@WE!w0 r"9d?Ku5}D~{#sCb1qQ9.r[?wt~.xHk! c?KH!( s(({Q'P@PQ
2025-01-09 20:54:43 UTC	1369	IN	Data Raw: 69 96 5b d6 85 10 2d 8a a8 bc 94 55 40 15 48 a7 c9 a2 b2 17 50 44 25 a5 8c 02 6a 51 3c de 42 11 95 8c 32 09 a8 81 0f 37 53 2d ff 59 c7 4d 82 c5 ea c8 29 83 80 6a 28 7a b2 b8 1c 16 aa 58 dd 2a fb 0b 11 33 31 0b a8 8a 0f f0 39 0f ae 85 e4 a7 87 68 a8 cd d7 30 3e 8e 45 fa bc 9a 58 f8 46 f9 84 8f 4c 99 af 40 40 d5 b2 bf 18 b1 11 5b 04 b4 88 f5 25 4c b7 e2 a4 8f 94 6c a5 ec 2f 44 2c c4 14 01 c9 0f e6 9b 94 4f d4 c8 ce e5 25 ec c0 67 34 14 01 31 08 68 11 e9 d6 05 0f ae 85 d8 e1 0c de f3 26 5f ef b0 09 3d 05 6b e2 8e 48 ca cb 26 a6 14 b0 65 1f 20 a1 0a a8 82 a2 64 68 63 4e 89 19 fa 58 e7 c5 4e 59 60 84 98 82 d5 b0 52 96 f2 21 8a 59 74 ca 58 9c 0e 8c d0 22 20 a6 5c 64 1a db b8 49 31 25 0b 80 50 22 a0 0a da eb 94 0f 99 c6 29 44 c8 8b 7c a5 fc 27 04 01 55 d1 76 e5 Data Ascii: i[-U@HPD%jQ<B27S-YM)j(zX*319h0>EXFL@@[%Ll/D,O%g41h&_=kH&e dhcNXNY`R!YtX" \dI1%P")D\|'Uv
2025-01-09 20:54:43 UTC	1369	IN	Data Raw: 67 7d 48 a8 e5 f2 85 1b 27 20 79 47 bd 6c ff 72 82 c1 47 01 29 aa f8 a0 33 7a f5 8b 6d 6c 42 fe 18 48 8b ea f8 de d9 5e 6e 21 3b ab ad b9 9d 5d 27 83 f5 c7 09 88 e9 d7 64 7c 16 90 82 63 3f fc e3 61 d4 ef c6 e2 30 2a 92 22 6a d8 9e 55 34 4e 40 5c 7c 38 99 10 04 a4 68 40 44 7c 3f dd b3 9c f6 08 1f 44 45 0d 07 b5 22 f9 d9 6e da da 85 3f 4a 40 f2 8b f5 9a 8d 7f 3c 60 42 12 90 e0 d8 0f 6f 58 cf 73 7c cf de c2 bc 2a 5a db 4c cf d6 21 22 a3 85 ea 51 6d 78 9e f2 18 1f c9 b1 1f 6c db bb 23 d7 d2 16 b9 bd 62 6e 67 57 1d 82 69 6b 6c cb 92 6a dd 9b fc 47 46 45 40 1c bd 31 9d d0 22 a0 61 38 f6 c3 1d a7 31 8a 35 37 68 e5 db 9c 2f 6e ac 3e 34 2a 02 a2 7c e2 47 9d e6 fa 22 b7 75 58 a7 f0 8d 6b 6e 67 b7 3b b7 b3 db 40 44 6b e3 20 4c 79 a3 7a 6d 6f 61 be 0d f9 69 63 58 40 Data Ascii: g}H' yGlrG)3zmlBH^n!;]'d\|c?a0"jU4N@\\|8h@D\|?DE"n?J@<`BoXs\|ZL!"Qmxl#bngWikljGFE@1"a8157h/n>4*\|G"uXkng;@Dk LyzmoaicX@
2025-01-09 20:54:43 UTC	1369	IN	Data Raw: 3d b5 7c 8e 3f fd 8c 89 f5 3f 5e 0b 08 29 97 ce ee 78 7f d4 ba a1 e4 56 8c 2e cf 88 27 29 08 7a 4c 86 ac f7 c8 b4 6b 52 bd 67 98 99 a5 65 13 97 92 7b 94 a9 49 50 68 6e 19 78 7f 5b c9 da 8f 22 29 a0 ad 90 d6 6a 10 eb 04 3f 26 23 cf fa 1e d9 fd 32 90 7e e5 1d e4 6e 0c ec eb 32 55 c7 93 a9 d7 c8 d6 7d 52 40 9d 90 d6 6c 10 ab 04 b3 7d 62 14 c3 5b 2a b2 f0 c8 4b 2f 9b b8 24 6f 0a d0 86 c5 23 50 da 19 bb 67 6c 38 02 22 24 49 0d bb d5 83 1d 93 91 27 e5 52 3c f0 f9 a7 4c 44 3f c2 87 ef 1a 16 14 36 0d 47 b4 b2 ee 53 97 63 37 c6 fd 85 a4 80 f6 11 1a 72 26 0b 09 7e 4c 46 d6 2e d7 28 0c 45 3f c2 65 fd c7 60 8d 67 18 29 9f da a8 ba 4f 92 e1 79 40 5b 14 50 a9 a9 e0 c3 59 64 9f 8f 73 de 7b e5 37 03 f9 e4 89 7a 14 27 be f9 bc c9 9d ef 56 23 20 b4 d3 eb 16 87 fb 2b f9 4c Data Ascii: =\|??^)xV.')zLkRge{IPhnx[")j?&#2~n2U}R@l}b[*K/$o#Pgl8"$I'R<LD?6GSc7r&~LF.(E?e`g)Oy@[PYds{7z'V# +L
2025-01-09 20:54:43 UTC	1181	IN	Data Raw: 66 fb 84 2d e4 d9 5e 72 b1 a2 fc e9 fb 94 41 59 68 7e ac fd 3f d3 22 a0 b3 3c d2 2a 3b 45 04 54 e6 89 89 4a 40 51 9c 32 ea 1a 59 ac 56 32 f2 75 05 b5 1c 60 ff f0 f7 7e 30 ae f0 ec cb 84 cc e0 28 22 20 01 e3 97 ae bb 83 0f dc 5a e8 63 32 7c 45 c9 48 9e 28 71 cb b3 15 d5 32 85 3c f1 ad e7 87 cf 8f 7f 22 ef 89 a7 65 a7 a8 80 e4 56 82 37 cb fe 22 12 73 c8 4d ad ef bd fa 1b f1 c1 d5 ab 03 31 f9 92 ae 25 44 b4 8a 28 98 e4 a0 a8 80 04 a2 80 d2 77 7b 88 1d 64 5b ff fd 37 5e ff 6b 94 f4 ea 2b ce 5f f5 63 33 33 3f b9 7d 78 f8 52 6c 9b 44 6d a1 43 40 15 84 9f 4c 45 88 75 3c 49 d7 fa 38 2b 9d 5d b0 8c e8 10 90 c0 38 09 6e d1 20 4e 91 e9 9a 14 92 c3 ee da 26 44 54 ca 8d a5 79 d0 25 20 51 e2 82 34 f1 14 d5 5d 73 50 3f 5a 87 88 98 96 4d 41 a7 80 aa 18 2d c0 54 8c 78 89 Data Ascii: f-^rAYh~?"<*;ETJ@Q2YV2u`~0(" Zc2\|EH(q2<"eV7"sM1%D(w{d[7^k+_c33?}xRlDmC@LEu<I8+]8n N&DTy% Q4]sP?ZMA-Tx

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:44 UTC	2564	OUT	GET /images/V3.png HTTP/1.1 Host: visi-sharp.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVG [TRUNCATED]
2025-01-09 20:54:44 UTC	996	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 20:54:44 GMT Content-Type: image/png Content-Length: 5665 Connection: close Last-Modified: Tue, 21 May 2024 12:01:13 GMT ETag: "664c8d09-1621" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4672 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VmcvbM%2BLwPjv9DEwSlpkDQsMmPLY46hWOW7r7f7d6T1JD0u%2Bd9DalPA%2FFInKOdTdmtjyB%2BavuiMeLhJ3iQGCKxfb%2FXdRQIptyikceVYKD72N03R3ATQVHPoGTa7v5vt9TA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff753022b188cda-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1823&min_rtt=1823&rtt_var=683&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=3142&delivery_rate=1601755&cwnd=242&unsent_bytes=0&cid=2c6c428ba01abf69&ts=129&x=0"
2025-01-09 20:54:44 UTC	373	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 20 00 00 00 df 08 06 00 00 00 56 30 0e f8 00 00 15 e8 49 44 41 54 78 9c ed 9d 4b 6c 5c d7 79 c7 8f 15 a7 b6 60 50 1c 1b 46 8c c4 21 34 06 b8 a0 bb 11 15 20 4e 90 20 d1 08 76 97 86 46 ed 2e 01 cc 61 bb 6a 93 d8 e3 4d 90 17 a0 11 1a 24 8e 37 22 f3 40 ba 28 2a 32 40 57 45 a3 21 ba 8c 0d 0f 77 96 bb 30 b9 a9 b8 20 90 19 d0 72 22 c5 88 39 64 02 3f 14 4b c5 99 fc 0f 75 35 9e c7 7d 9c f7 fd ff 80 01 15 44 a6 ee bc 7e f7 7b 9c f3 9d fb ee dc b9 23 88 73 aa 43 8f 8a 10 62 31 71 51 f2 cf b3 39 2e 72 5b 08 b1 8f 3f 77 f1 90 74 86 7e 12 e2 04 0a c8 2e 8b 78 48 c9 d4 f0 f3 a4 e3 6b ea 0b 21 b6 20 a7 ad c4 63 3f c5 7f 4b 48 21 28 20 73 28 c9 28 e9 9c 09 ec fa 7b 90 51 27 f1 93 10 ad 50 40 fa 50 c2 51 0f d7 91 8d Data Ascii: PNGIHDR V0IDATxKl\y`PF!4 N vF.ajM$7"@(*2@WE!w0 r"9d?Ku5}D~{#sCb1qQ9.r[?wt~.xHk! c?KH!( s(({Q'P@PQ
2025-01-09 20:54:44 UTC	1369	IN	Data Raw: 94 b2 0b 88 69 96 5b d6 85 10 2d 8a a8 bc 94 55 40 15 48 a7 c9 a2 b2 17 50 44 25 a5 8c 02 6a 51 3c de 42 11 95 8c 32 09 a8 81 0f 37 53 2d ff 59 c7 4d 82 c5 ea c8 29 83 80 6a 28 7a b2 b8 1c 16 aa 58 dd 2a fb 0b 11 33 31 0b a8 8a 0f f0 39 0f ae 85 e4 a7 87 68 a8 cd d7 30 3e 8e 45 fa bc 9a 58 f8 46 f9 84 8f 4c 99 af 40 40 d5 b2 bf 18 b1 11 5b 04 b4 88 f5 25 4c b7 e2 a4 8f 94 6c a5 ec 2f 44 2c c4 14 01 c9 0f e6 9b 94 4f d4 c8 ce e5 25 ec c0 67 34 14 01 31 08 68 11 e9 d6 05 0f ae 85 d8 e1 0c de f3 26 5f ef b0 09 3d 05 6b e2 8e 48 ca cb 26 a6 14 b0 65 1f 20 a1 0a a8 82 a2 64 68 63 4e 89 19 fa 58 e7 c5 4e 59 60 84 98 82 d5 b0 52 96 f2 21 8a 59 74 ca 58 9c 0e 8c d0 22 20 a6 5c 64 1a db b8 49 31 25 0b 80 50 22 a0 0a da eb 94 0f 99 c6 29 44 c8 8b 7c a5 fc 27 04 01 Data Ascii: i[-U@HPD%jQ<B27S-YM)j(zX*319h0>EXFL@@[%Ll/D,O%g41h&_=kH&e dhcNXNY`R!YtX" \dI1%P")D\|'
2025-01-09 20:54:44 UTC	1369	IN	Data Raw: 84 90 6c bf 67 7d 48 a8 e5 f2 85 1b 27 20 79 47 bd 6c ff 72 82 c1 47 01 29 aa f8 a0 33 7a f5 8b 6d 6c 42 fe 18 48 8b ea f8 de d9 5e 6e 21 3b ab ad b9 9d 5d 27 83 f5 c7 09 88 e9 d7 64 7c 16 90 82 63 3f fc e3 61 d4 ef c6 e2 30 2a 92 22 6a d8 9e 55 34 4e 40 5c 7c 38 99 10 04 a4 68 40 44 7c 3f dd b3 9c f6 08 1f 44 45 0d 07 b5 22 f9 d9 6e da da 85 3f 4a 40 f2 8b f5 9a 8d 7f 3c 60 42 12 90 e0 d8 0f 6f 58 cf 73 7c cf de c2 bc 2a 5a db 4c cf d6 21 22 a3 85 ea 51 6d 78 9e f2 18 1f c9 b1 1f 6c db bb 23 d7 d2 16 b9 bd 62 6e 67 57 1d 82 69 6b 6c cb 92 6a dd 9b fc 47 46 45 40 1c bd 31 9d d0 22 a0 61 38 f6 c3 1d a7 31 8a 35 37 68 e5 db 9c 2f 6e ac 3e 34 2a 02 a2 7c e2 47 9d e6 fa 22 b7 75 58 a7 f0 8d 6b 6e 67 b7 3b b7 b3 db 40 44 6b e3 20 4c 79 a3 7a 6d 6f 61 be 0d f9 Data Ascii: lg}H' yGlrG)3zmlBH^n!;]'d\|c?a0"jU4N@\\|8h@D\|?DE"n?J@<`BoXs\|ZL!"Qmxl#bngWikljGFE@1"a8157h/n>4*\|G"uXkng;@Dk Lyzmoa
2025-01-09 20:54:44 UTC	1369	IN	Data Raw: 7f ad f7 7c 3d b5 7c 8e 3f fd 8c 89 f5 3f 5e 0b 08 29 97 ce ee 78 7f d4 ba a1 e4 56 8c 2e cf 88 27 29 08 7a 4c 86 ac f7 c8 b4 6b 52 bd 67 98 99 a5 65 13 97 92 7b 94 a9 49 50 68 6e 19 78 7f 5b c9 da 8f 22 29 a0 ad 90 d6 6a 10 eb 04 3f 26 23 cf fa 1e d9 fd 32 90 7e e5 1d e4 6e 0c ec eb 32 55 c7 93 a9 d7 c8 d6 7d 52 40 9d 90 d6 6c 10 ab 04 b3 7d 62 14 c3 5b 2a b2 f0 c8 4b 2f 9b b8 24 6f 0a d0 86 c5 23 50 da 19 bb 67 6c 38 02 22 24 49 0d bb d5 83 1d 93 91 27 e5 52 3c f0 f9 a7 4c 44 3f c2 87 ef 1a 16 14 36 0d 47 b4 b2 ee 53 97 63 37 c6 fd 85 a4 80 f6 11 1a 72 26 0b 09 7e 4c 46 d6 2e d7 28 0c 45 3f c2 65 fd c7 60 8d 67 18 29 9f da a8 ba 4f 92 e1 79 40 5b 14 50 a9 a9 e0 c3 59 64 9f 8f 73 de 7b e5 37 03 f9 e4 89 7a 14 27 be f9 bc c9 9d ef 56 23 20 b4 d3 eb 16 87 Data Ascii: \|=\|??^)xV.')zLkRge{IPhnx[")j?&#2~n2U}R@l}b[*K/$o#Pgl8"$I'R<LD?6GSc7r&~LF.(E?e`g)Oy@[PYds{7z'V#
2025-01-09 20:54:44 UTC	1185	IN	Data Raw: 68 38 05 8b 66 fb 84 2d e4 d9 5e 72 b1 a2 fc e9 fb 94 41 59 68 7e ac fd 3f d3 22 a0 b3 3c d2 2a 3b 45 04 54 e6 89 89 4a 40 51 9c 32 ea 1a 59 ac 56 32 f2 75 05 b5 1c 60 ff f0 f7 7e 30 ae f0 ec cb 84 cc e0 28 22 20 01 e3 97 ae bb 83 0f dc 5a e8 63 32 7c 45 c9 48 9e 28 71 cb b3 15 d5 32 85 3c f1 ad e7 87 cf 8f 7f 22 ef 89 a7 65 a7 a8 80 e4 56 82 37 cb fe 22 12 73 c8 4d ad ef bd fa 1b f1 c1 d5 ab 03 31 f9 92 ae 25 44 b4 8a 28 98 e4 a0 a8 80 04 a2 80 d2 77 7b 88 1d 64 5b ff fd 37 5e ff 6b 94 f4 ea 2b ce 5f f5 63 33 33 3f b9 7d 78 f8 52 6c 9b 44 6d a1 43 40 15 84 9f 4c 45 88 75 3c 49 d7 fa 38 2b 9d 5d b0 8c e8 10 90 c0 38 09 6e d1 20 4e 91 e9 9a 14 92 c3 ee da 26 44 54 ca 8d a5 79 d0 25 20 51 e2 82 34 f1 14 d5 5d 73 50 3f 5a 87 88 98 96 4d 41 a7 80 aa 18 2d c0 Data Ascii: h8f-^rAYh~?"<*;ETJ@Q2YV2u`~0(" Zc2\|EH(q2<"eV7"sM1%D(w{d[7^k+_c33?}xRlDmC@LEu<I8+]8n N&DTy% Q4]sP?ZMA-

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.oneroguereporter.com/gks

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Windows Analysis Report
http://www.oneroguereporter.com/gks

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:44 UTC	2874	OUT	GET /images/best_value_v2.png HTTP/1.1 Host: visi-sharp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVG [TRUNCATED]
2025-01-09 20:54:44 UTC	995	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 20:54:44 GMT Content-Type: image/png Content-Length: 155991 Connection: close Last-Modified: Tue, 21 May 2024 12:01:13 GMT ETag: "664c8d09-26157" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2268 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TntBqGhJcy36TEVhA4V07clqWEey5WMDqUXNrOmBb0yZxHJY%2BPcQHPOQQDUXZfKHEbVr9AGa2JUcS8eomE2eLymxGYJZKWHK1h%2FxtC7geYsnuUbH4VCv%2FHafQc233P3X6g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff753022a0e43ee-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1754&min_rtt=1754&rtt_var=659&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2832&recv_bytes=3452&delivery_rate=1658148&cwnd=225&unsent_bytes=0&cid=db0897a87da23f37&ts=134&x=0"
2025-01-09 20:54:44 UTC	374	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ee 00 00 01 ab 08 06 00 00 00 06 82 74 89 00 00 20 00 49 44 41 54 78 9c ec 5d 05 9c 1c d5 fd ff be 99 dd bd 3d 97 e4 2e 76 f1 60 21 40 20 02 c4 f0 a0 81 e2 d2 02 29 12 20 58 5b 68 71 77 f7 e0 94 e2 10 a4 68 21 48 20 6e 24 90 d0 04 8d dc c5 fd ee 72 ba bb f3 fe 9f 99 79 f2 7b 33 7b 38 ed 3f e9 fc e0 b2 b3 33 cf e6 cd ec fb be 9f 33 ce 39 22 8a 28 a2 ff 2e 2d 1a 7f c6 a9 1c dc 86 fb 73 64 00 63 ac b9 fb 9e 0f ff e3 bf 39 a8 e5 d3 46 ef e9 70 de 1e ee a0 18 b8 65 c5 d2 1d 07 de ff 4a f4 aa 44 14 d1 7f 97 22 e0 8e 28 a2 ff 12 2d 1a 7f c6 3d 56 cc 3e 80 d9 6c eb 58 2c 06 3b 27 0e ef f7 e8 00 99 4c 0a 4e 2a 0d 27 e3 2c e0 0e 7f ab db 1e 0f ff ed 3f 31 ca a5 53 ce ba 02 0c 87 5a b6 d5 df 76 c7 14 b3 61 59 Data Ascii: PNGIHDRt IDATx]=.v`!@ ) X[hqwh!H n$ry{3{8?339"(.-sdc9FpeJD"(-=V>lX,;'LN*',?1SZvaY
2025-01-09 20:54:44 UTC	1369	IN	Data Raw: 09 2d 8d 2d 6b 19 70 59 87 81 0f 3c 12 bd 43 11 45 f4 9f a3 08 b8 23 8a e8 3f 48 8b 27 9c 35 27 96 13 eb 9b 2c 2a 82 1d 8b fb c0 88 ec bf 41 26 cf 33 20 dd 9c 46 63 6d 2d 32 a9 f4 ab dd 86 3d 7c e4 af 39 e2 ea 49 67 3c 6d c7 63 7f c8 2d 29 44 3c 1e 53 28 cd 68 21 26 be 33 80 73 e6 8d 2d 93 c9 a0 a1 a6 1e 4e 3a fd 5e 87 81 0f 1c 10 bd 47 11 45 f4 9f a1 08 b8 23 8a e8 3f 44 4b 26 9c f5 59 3c 3f b9 53 4e 41 21 2c 26 90 d0 65 68 19 07 e3 41 a4 f4 7f 97 8c 7e e3 1c f5 1b 36 20 d3 92 99 d1 75 e8 43 bb fe 1a a3 ae 9a 7c c6 27 b1 44 7c 58 61 59 31 c0 2c c1 f9 4b 94 e6 d0 10 ee b3 dd fe 11 17 32 01 17 be 1d 34 d6 35 20 d5 d8 1c 81 77 44 11 fd 87 c8 8a 26 3a a2 88 7e 7b 5a 3c e1 cc 89 f1 fc dc 9d 92 85 45 1e 43 2b b7 cb 5c 88 a2 c5 17 f1 e9 e8 f1 d0 7d 35 03 f2 4b Data Ascii: --kpY<CE#?H'5',*A&3 Fcm-2=\|9Ig<mc-)D<S(h!&3s-N:^GE#?DK&Y<?SNA!,&ehA~6 uC\|'D\|XaY1,K245 wD&:~{Z<EC+\}5K
2025-01-09 20:54:44 UTC	1369	IN	Data Raw: 2d d3 92 42 43 5d bd 1b fd ed df 0c b8 b7 fd 80 ef 0f d4 b2 72 e6 39 17 c1 b2 7e 1f 4b 24 76 c8 2d cc 83 65 d9 86 f4 5e 6d 18 a4 8e 9d cc 91 3f 66 df 49 c6 c9 64 d0 5c df 88 a6 4d 0d 97 55 ee 76 6f 14 dd 2d a2 2d 8e 22 e0 8e 68 8b a3 85 e3 cf 39 29 bf 24 f1 0f 3b b7 ad d0 63 f3 00 70 53 a0 96 dc ae 43 30 4d ba 46 f9 60 e0 a4 9b 91 69 69 44 a6 b9 d9 d5 ab ae 71 32 7c ae 07 ec a2 86 65 b1 5e cc 66 95 76 3c 1e 73 c5 d2 b1 44 ae 10 37 3b 84 2d a6 80 6d 69 97 2f c2 1c 7b 46 60 06 db ab c7 42 34 cd da d7 1a 3c 80 5f 12 84 83 fa 6a ea 9f 1d f8 bd 2b 7d 39 42 7e da fe ff 94 73 97 f7 42 ad cc c9 a6 c0 62 c4 07 1c 0a fc 53 8d 2d 48 b5 b4 20 d5 dc d2 c8 81 cf c0 f9 bf 2d c6 84 2c 81 b9 12 f7 dd 60 5b 7d 5c 51 7e 22 37 07 76 3c ae 74 f8 3c b4 e5 60 64 6f a3 6f 5e 97 Data Ascii: -BC]r9~K$v-e^m?fId\MUvo--"h9)$;cpSC0MF`iiDq2\|e^fv<sD7;-mi/{F`B4<_j+}9B~sBbS-H -,`[}\Q~"7v<t<`doo^
2025-01-09 20:54:44 UTC	1369	IN	Data Raw: 81 76 39 d1 63 93 53 ea 32 05 ae 80 65 37 11 bf cb b2 fa 7c 00 f8 04 08 1b 63 cb d6 5f 96 6b ad 73 fe a6 a8 9b 93 b1 84 8d e5 78 e8 5e 7c e6 5a 6e 3a 98 aa af fd bf b9 e6 a6 59 2b e3 24 dc 36 cd 8e 66 14 65 96 06 71 c5 5d 53 6b 73 29 0a 97 80 1e 34 50 23 58 2f ca e5 e4 17 22 a7 a0 e8 da a5 d3 fe 72 65 b6 51 45 14 d1 e6 42 91 1f 77 44 bf 29 55 4f bd f8 f4 dc 82 f8 c5 f1 04 eb cc 2c 27 0e c4 05 06 64 c0 78 0b d2 69 ab be b9 31 35 b3 a1 a6 f9 d4 9e fb dc bb f0 c7 8e e5 db 0f ce ed 5e 58 96 33 dd 4e d8 e5 3c 56 a0 38 2b e9 83 cc 39 13 01 50 cc c4 99 2e d0 30 e5 2f cc 15 97 28 ff 95 f1 45 74 9c 70 17 b8 6c 30 69 8d ae 02 a0 70 c2 69 32 22 5a 0f 3a 4a 67 47 da b0 97 35 42 a0 c7 42 d2 65 e9 73 ee e8 00 24 0c 64 2c dc 14 2d ab 60 29 90 5e cf ea 82 bc 0b 95 05 4c Data Ascii: v9cS2e7\|c_ksx^\|Zn:Y+$6feq]Sks)4P#X/"reQEBwD)UO,'dxi15^X3N<V8+9P.0/(Etpl0ipi2"Z:JgG5BBes$d,-`)^L
2025-01-09 20:54:44 UTC	1369	IN	Data Raw: c1 8c 7f 9d 8a 6e de 58 20 c4 d2 c1 b6 18 ca 77 b8 c3 eb 3b 16 f3 c1 ad 5d db 7c e4 e7 25 d0 b7 4f 3b 5c 76 fe 10 74 ab 2c d1 1c b7 05 b3 be c5 74 9a 4f c9 99 0b 71 b8 e4 be 35 77 6e 1e 1b 81 57 18 11 99 ab c7 6a ea af e5 9d 73 02 e4 fe 86 51 c4 88 57 cf c8 d2 1b 3a 8f 44 79 ce 94 9a a5 35 ee d9 fc 1e b8 c6 2c f1 10 6d b1 07 14 dc bc ac c7 63 48 37 37 62 d3 da 45 cf 77 ea ff d7 13 42 0f 25 a2 88 7e 06 c5 a2 49 8b e8 d7 a0 95 b3 2f bf a1 b8 2c d1 a7 d9 ee 0e 78 1c 87 a3 b8 58 16 12 5b c2 5b fc 38 5a c4 b1 09 da 12 f4 7d 0c 0e 72 8e 50 75 20 8c c7 34 98 73 a5 ff 0c ba 7d f9 8c b6 8e e9 6d 1a 97 f9 6d f8 98 ae fd b1 19 a8 a8 56 8e de 31 b4 bd c1 02 55 4b 37 60 e9 8a 3a 3c fb ca 5c 2c aa da 80 15 ab 37 61 f5 da 7a 64 32 1c a3 4e dc 05 d7 fe 6d 4f df 70 8e 4a Data Ascii: nX w;]\|%O;\vt,tOq5wnWjsQW:Dy5,mcH77bEwB%~I/,xX[[8Z}rPu 4s}mmV1UK7`:<\,7azd2NmOpJ
2025-01-09 20:54:44 UTC	1369	IN	Data Raw: 6b 8c 9f bc 18 d5 cb 36 90 b6 48 48 54 4e c6 4c 9a 1d d4 af d2 33 ea 5a f0 cd 1a 03 98 01 13 f8 4c ab 77 a0 63 bb 42 f3 3e 69 be 6b 23 a4 a9 a3 ae 1b 1b 81 10 78 07 b2 80 d1 b9 0b cd a7 aa e1 e9 b2 5b 2f ca f4 bf 1c 78 fc 8e 43 d0 d8 94 c6 3d 8f 4e 27 1b 01 a9 22 11 06 69 fa 26 f4 b8 89 9c df 00 ef e0 98 a8 8a 82 e8 c9 19 e1 c2 19 03 31 2c b3 0c 0b 78 ad 83 d6 d7 35 17 2e 23 b2 41 59 8e 4b c0 f5 eb db 81 d0 a9 02 84 85 c8 9c 29 cb 74 b1 61 55 f5 2c c1 b1 4b 1d b9 df b7 6b a5 9e 53 d0 7e 87 e0 ac 47 14 d1 4f a5 08 b8 23 fa 45 b4 6c c6 a5 a7 3a ac 90 70 c7 8e 5a b8 25 67 0c e1 5f ab 45 c3 10 a2 6b ae 74 dd 3a 51 86 65 8a b4 95 68 bb 15 b0 52 e4 a8 76 25 28 2a c0 57 ed 04 39 4e 75 d9 07 71 63 1c c0 a9 27 ec ec 7d 3e f6 dc 6c 91 78 83 86 27 75 02 f5 29 78 3b Data Ascii: k6HHTNL3ZLwcB>ik#x[/xC=N'"i&1,x5.#AYK)taU,KkS~GO#El:pZ%g_Ekt:QehRv%(*W9Nuqc'}>lx'u)x;
2025-01-09 20:54:44 UTC	1369	IN	Data Raw: 24 a9 c3 96 a4 16 bd 6c 16 eb 04 38 79 46 e9 b6 a5 c8 5d 6f 20 b8 91 b2 72 c4 f0 6d bc cf bd 87 76 47 db 36 f9 38 76 d4 58 cf 82 9c 4b 63 37 69 b9 ce 81 23 0f de ce e3 7c 5f 7d fb cb 70 bf ea 5e 82 3e e9 1c 03 fb 76 f4 16 f6 f7 3e fe 56 83 6a 50 57 8c b0 ce bd a2 4d 1e aa 57 d4 62 50 ff 4a 71 ca 21 65 78 96 fa 4e eb 00 1a e4 f6 b3 14 e2 9c ce 36 c7 e4 99 4b bd e0 2b fb 0c e9 4a fa 91 fc bd e3 db 17 06 c6 b0 70 c9 06 74 71 a3 b9 79 20 6c ea e0 95 0c 24 64 91 4f c4 c8 59 ac df 5f 78 f5 33 0f b4 f7 db 73 6b 7c 3b eb 52 0c 1b d4 33 24 6d e9 d6 a5 0d de 78 fe 2c 8c 7b f5 5c 7c 38 e1 2b 1c 7a fc 18 e2 fa 05 a1 e3 b6 08 30 53 70 b6 b5 65 b8 6a 59 96 b5 cd f7 8d 69 f1 b8 34 34 33 75 e6 fa 4f bd ee c2 60 4e 59 a2 4b a3 39 cf ba 3c 17 b9 a5 dd 6f c9 f2 c4 22 8a e8 Data Ascii: $l8yF]o rmvG68vXKc7i#\|_}p^>v>VjPWMWbPJq!exN6K+Jptqy l$dOY_x3sk\|;R3$mx,{\\|8+z0SpejYi443uO`NYK9<o"
2025-01-09 20:54:44 UTC	1369	IN	Data Raw: 57 ad f5 db fa ad f4 ad c2 8f fb e3 3d 38 e9 cc 07 c8 fb 6a 9b 00 cd 44 1a 4f 15 74 85 11 8e 9c a6 f8 84 01 ca ea 3b fd 64 94 2b f7 ff 2c 2b 86 44 5e 31 0a da f5 39 65 cd 82 67 16 54 4f bf a9 7f 2b 37 1d 51 44 06 45 56 e5 ff 23 b4 6c fa d5 27 5a f1 d8 c1 96 6d 77 d3 2b 9e c3 32 a9 d4 eb e9 96 d4 b3 5d 06 df b0 38 db 4c 2c 9d 7e f9 c8 64 7e f2 ba a2 36 79 95 2c 51 09 c4 cb 45 60 13 26 38 6b 6e 84 12 d5 82 cc 80 3e 5a 1a ad 41 0a a2 b9 06 57 a3 76 e0 ab 30 67 f6 d7 7e df e2 5c 72 6a 6e 58 4e 37 d0 c9 71 a3 5e c2 0b 8f 1c 8d 41 d2 0a 9b 70 de 46 16 30 22 a2 65 c8 60 bb ad da 60 ea a7 4b 49 87 dc b3 00 7f e1 a1 c3 71 de 65 ef a1 df fe 8f e1 be 1b f6 c7 a0 7e 9d b0 73 9f 76 98 38 bd 9a 80 1e 0f 8f d7 00 37 07 c7 1f be 9d e7 93 ed 1a 9b 75 16 69 34 8d cc 59 d2 Data Ascii: W=8jDOt;d+,+D^19egTO+7QDEV#l'Zmw+2]8L,~d~6y,QE`&8kn>ZAWv0g~\rjnXN7q^ApF0"e``KIqe~sv87ui4Y
2025-01-09 20:54:44 UTC	1369	IN	Data Raw: a2 78 8e d3 b6 92 73 54 02 6c 17 5f b4 6e 7b 65 38 6d 57 8c 45 49 a1 62 6d f3 e2 c9 b2 13 33 a9 c6 e3 57 ce 7d fc 9a f6 3b 9e 7a 3d 22 da e2 28 d2 71 6f 81 b4 6a ee ad f3 92 25 e5 e7 e7 94 ee 62 c5 0b b6 01 b3 72 0c 6e 06 06 ec f9 9f cc 4a c2 8a 95 80 c5 8a c0 62 85 02 b4 1d 9f 6b 96 b1 b9 b9 00 52 e5 82 e5 08 9d 9f 04 63 c9 7d 8b 70 a7 74 f1 87 a3 ad cf 55 3b 34 48 0b cb 92 ac 01 66 ca 45 45 01 71 a5 0b b2 ef 9d 86 82 fc 04 0e 3f 65 6c 40 af 4b 75 b9 da 12 dc 3d 76 c5 d7 ed 5d b7 30 25 2e e7 44 2f ee 97 7d e6 fe 11 d8 73 50 57 dc 78 ef 54 0f 84 e7 7c b1 ca d0 cf ca 6c 65 fa 3e 64 4b 7e 99 8f c7 1e 8f 9b 2e de 83 f4 8b 80 ae 9f 0e 8f 3c 15 1e bc 68 3e 35 1d c3 9d 82 9c 19 97 5c 57 71 0c 7d b9 fa d7 88 53 1e 98 2e 0e c3 8f 9b 07 1a a6 3e d9 c1 5c e5 46 ff Data Ascii: xsTl_n{e8mWEIbm3W};z="(qoj%brnJbkRc}ptU;4HfEEq?el@Ku=v]0%.D/}sPWxT\|le>dK~.<h>5\Wq}S.>\F
2025-01-09 20:54:44 UTC	1369	IN	Data Raw: 84 cd 34 91 90 1b 7f 5a d0 2d 0d a6 58 48 7f ad 39 6c 4b d7 f5 aa 49 37 ad 20 c7 0d 83 1b bf ef 91 f7 d1 79 c7 8b 71 ed 6d 6f 63 f6 e7 d5 de f9 87 9e 9c 84 ae 7d af c4 94 19 8b c8 d0 24 47 cf 48 7d b1 fe 2b bd 39 cc 3e 18 c3 b4 59 4b f1 c0 93 b3 3d ff e9 39 f3 56 e1 c4 73 5e 57 a0 a1 43 b1 d2 fb cf 60 db ad da 60 ce bf 57 07 c2 88 9a 63 97 e5 69 1e 6d 7f 6e a9 98 9b 72 bd 81 a8 66 82 63 54 3b 01 1e d6 77 1b 5c 6b 36 ae 97 7e 55 21 4d 49 7d 52 cc 0c e0 42 c1 3f a0 ef 56 e3 d2 1b 94 70 7f 92 3b 46 80 eb a5 a2 f2 2c 3b 05 43 ec ef 98 55 d4 3f e4 85 24 11 e0 1e bb fb 68 1c 7b f8 4e b8 ff b1 c9 d8 79 af 3b f1 c2 ab 9f 9a cd 73 e0 ce 07 3e 40 c7 ed 2e c2 ca d5 75 78 67 ec 79 c2 28 4d d8 65 04 72 79 bb ef eb 35 37 8f f5 8e ee bd f5 74 e2 da 65 13 e0 d4 46 69 8b Data Ascii: 4Z-XH9lKI7 yqmoc}$GH}+9>YK=9Vs^WC``WcimnrfcT;w\k6~U!MI}RB?Vp;F,;CU?$h{Ny;s>@.uxgy(Mery57teFi

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:44 UTC	694	OUT	GET /j.php?a=791563&u=https%3A%2F%2Fvisi-sharp.net%2Freport%3Faff_id%3D326%26subid2%3D6812_sessid20250109205426977%26subid%3D8802&vn=2.1&x=true HTTP/1.1 Host: dev.visualwebsiteoptimizer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://visi-sharp.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://visi-sharp.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 20:54:45 UTC	434	IN	HTTP/1.1 200 OK date: Thu, 09 Jan 2025 20:54:44 GMT content-type: application/javascript; charset=UTF-8 access-control-allow-origin: https://visi-sharp.net access-control-allow-credentials: true server: gnv2 timing-allow-origin: * via: 1.1 google Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-09 20:54:45 UTC	30	IN	Data Raw: 31 33 0d 0a 5f 76 77 6f 5f 63 6f 64 65 2e 66 69 6e 69 73 68 28 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 13_vwo_code.finish();0

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:45 UTC	2852	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: visi-sharp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVG [TRUNCATED]
2025-01-09 20:54:45 UTC	762	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 20:54:45 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Tue, 07 Jan 2025 11:11:01 GMT ETag: "677d0bc5-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GmTohuiEls3nyy%2FeaP7ypj0FFMnrFsJ88cJHlRktbbcjy%2F%2BUA3KB%2FOoZQ1sNr2Dfzn%2FuQWgGwfRV0wZcOpaWjB7TuC8yihAkoo%2BJ1CJIz9NP%2BDn%2BtuFfqoA8wu4tuG151A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff7530408858c0f-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sat, 11 Jan 2025 20:54:45 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2025-01-09 20:54:45 UTC	607	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2025-01-09 20:54:45 UTC	632	IN	Data Raw: 3a 22 2b 6e 28 6f 2e 68 72 65 66 2c 61 2b 6c 2e 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6c 29 3b 61 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 64 2c 6f 29 7d 7d 63 61 74 63 68 28 68 29 7b 65 28 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 66 6f Data Ascii: :"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){fo

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:45 UTC	2989	OUT	GET /pixels/e71ec514527769916ab2b5748eef670b?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802&key=66taBl5rn79UTO5JGFaAqZivQP7PL3UU HTTP/1.1 Host: visi-sharp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVG [TRUNCATED]
2025-01-09 20:54:45 UTC	1063	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 20:54:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6ImdMbDIvQUU0VTZSRzNWSmZjdWxlTUE9PSIsInZhbHVlIjoieHlvRzhmZW1sSlBXWW9TTkQvZC9uMzRDNHZXY0xzdzJyUVNVTGNzQTFtQ1ppQmoxMDVGalBETUROK1pqc1Z5aFU1aXVEVlBmWmp3cDVVeG9mczdDTFA0alA5L0hJVjVyckE1Vm5BMllyc28ySy9SM1ZZV1ltZzRaRFZVdWJlMmUiLCJtYWMiOiIxNzJiYmFlYTQ4ZmYzMzZiZDBlODUwY2QyN2IzZWI5YzNkMjhhODU0ZDc4NzVhMWNiNmRiMjE4NDZhMmM2Y2ZkIn0%3D; expires=Sun, 19-Jan-2025 20:54:45 GMT; Max-Age=864000; path=/; samesite=lax Set-Cookie: _=eyJpdiI6IjNHT1RhWG1LWjZwaTZpclJyYmZCb3c9PSIsInZhbHVlIjoiTkJOYmV2bmVoL2JwYWRMb1cyOTZQdDduU2UxaC8yVFNSemVwTGVtbmtFaHhBQTU0d3hJdC9pNzRRQnVRdWNRbnV4TXpuUFl5azY0STJxM2krZFBVUjVDcHhRc01Dckt4aGRaZG85djM4emFKQjB0RnhJdGJIbHptYTRtYng2ZGoiLCJtYWMiOiJmYzQyNzgzMmQyODUzOWUzY2U0OTBmODM5N2ZmN2Y1MTdkYjliYTU2OWQ4NWFmZDMwMmU2ZjAyMWVlNjczYTMwIn0%3D; expires=Sun, 19-Jan-2025 20:54:45 GMT; Max-Age=864000; path=/; httponly; samesite=lax
2025-01-09 20:54:45 UTC	1606	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 72 65 66 65 72 72 65 72 3d 65 79 4a 70 64 69 49 36 49 6b 4e 75 53 47 31 35 54 45 73 78 63 6e 4e 71 63 56 6f 78 5a 45 73 7a 64 47 31 76 5a 30 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 55 44 5a 52 51 54 49 77 57 6c 64 50 56 55 68 6f 57 6b 49 33 4d 6a 52 73 63 45 39 77 59 31 64 35 4f 48 4a 45 56 45 52 55 53 6a 4e 57 61 30 6c 6d 64 54 41 31 52 6e 5a 55 65 56 52 78 53 7a 56 34 55 45 6c 5a 56 7a 52 76 4e 6d 59 77 63 30 5a 57 51 6b 78 30 63 6d 4e 43 5a 30 74 75 53 30 67 31 56 48 68 78 51 6e 42 6f 4d 32 49 72 5a 6e 63 31 64 31 45 39 50 53 49 73 49 6d 31 68 59 79 49 36 49 6a 59 79 4f 54 68 6d 4e 32 45 78 59 6a 42 6b 4e 57 5a 6c 5a 6a 6c 68 4f 47 59 32 4e 54 68 68 4f 54 49 78 5a 6a 59 33 4f 54 45 32 5a 44 63 30 4e 54 Data Ascii: Set-Cookie: referrer=eyJpdiI6IkNuSG15TEsxcnNqcVoxZEszdG1vZ0E9PSIsInZhbHVlIjoiUDZRQTIwWldPVUhoWkI3MjRscE9wY1d5OHJEVERUSjNWa0lmdTA1RnZUeVRxSzV4UElZVzRvNmYwc0ZWQkx0cmNCZ0tuS0g1VHhxQnBoM2IrZnc1d1E9PSIsIm1hYyI6IjYyOThmN2ExYjBkNWZlZjlhOGY2NThhOTIxZjY3OTE2ZDc0NT
2025-01-09 20:54:45 UTC	20	IN	Data Raw: 66 0d 0a 37 38 39 32 32 32 32 38 39 30 31 33 31 37 37 0d 0a Data Ascii: f789222289013177
2025-01-09 20:54:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:45 UTC	2823	OUT	GET /js/app.js?id=11d7149dd52495db050a HTTP/1.1 Host: visi-sharp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVG [TRUNCATED]
2025-01-09 20:54:45 UTC	1026	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 20:54:45 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 21 May 2024 12:01:13 GMT Vary: Accept-Encoding ETag: W/"664c8d09-c29c2" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4773 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ax2tfAnHuRpksj4nKUf5JOVuiOzPFziF7855F9OUf72u3zYe1e6LtPy1pqlbQdHEwnyNYcOgag6o6%2BlQRyGzWBtPVpX10PGPdIcusWfPKRjqxIptBVXdYonFK42DqaLY9Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff75308eb6c43ee-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1721&min_rtt=1721&rtt_var=647&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2833&recv_bytes=3401&delivery_rate=1690793&cwnd=225&unsent_bytes=0&cid=ebf0171a9de13998&ts=122&x=0"
2025-01-09 20:54:45 UTC	343	IN	Data Raw: 37 63 37 35 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b Data Ascii: 7c75/! For license information please see app.js.LICENSE.txt /!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){
2025-01-09 20:54:45 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 6e 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 31 26 74 26 26 28 65 3d 6e 28 65 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 4f Data Ascii: =typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=O
2025-01-09 20:54:45 UTC	1369	IN	Data Raw: 29 2c 6e 28 22 33 55 44 2b 22 29 28 65 29 29 7d 2c 22 2b 4b 69 62 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 29 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 29 3b 76 61 72 20 72 2c 69 3d 6e 28 22 33 6d 62 58 22 29 2c 61 3d 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 37 39 2c 31 31 32 2c 31 31 37 2c 31 31 35 2c 37 32 2c 31 30 31 2c 39 37 2c 31 30 30 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 4f 62 6a 65 63 74 28 69 2e 68 29 28 65 29 3a 65 7d 29 2c 73 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ),n("3UD+")(e))},"+Kib":function(e,t,n){"use strict";n.d(t,"a",(function(){return E})),n.d(t,"b",(function(){return k}));var r,i=n("3mbX"),a=(new Uint8Array([79,112,117,115,72,101,97,100]),function(e){return"string"==typeof e?Object(i.h)(e):e}),s=function
2025-01-09 20:54:45 UTC	1369	IN	Data Raw: 6e 67 74 68 29 72 65 74 75 72 6e 20 73 3b 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 75 3d 28 74 5b 6f 5d 3c 3c 32 34 7c 74 5b 6f 2b 31 5d 3c 3c 31 36 7c 74 5b 6f 2b 32 5d 3c 3c 38 7c 74 5b 6f 2b 33 5d 29 3e 3e 3e 30 2c 6c 3d 74 2e 73 75 62 61 72 72 61 79 28 6f 2b 34 2c 6f 2b 38 29 3b 69 66 28 30 3d 3d 3d 75 29 62 72 65 61 6b 3b 76 61 72 20 63 3d 6f 2b 75 3b 69 66 28 63 3e 74 2e 6c 65 6e 67 74 68 29 7b 69 66 28 72 29 62 72 65 61 6b 3b 63 3d 74 2e 6c 65 6e 67 74 68 7d 76 61 72 20 64 3d 74 2e 73 75 62 61 72 72 61 79 28 6f 2b 38 2c 63 29 3b 4f 62 6a 65 63 74 28 69 2e 61 29 28 6c 2c 6e 5b 30 5d 29 26 26 28 31 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 3f 73 2e 70 75 73 68 28 64 29 3a 73 2e 70 75 73 68 2e 61 70 70 6c 79 28 73 Data Ascii: ngth)return s;for(var o=0;o<t.length;){var u=(t[o]<<24\|t[o+1]<<16\|t[o+2]<<8\|t[o+3])>>>0,l=t.subarray(o+4,o+8);if(0===u)break;var c=o+u;if(c>t.length){if(r)break;c=t.length}var d=t.subarray(o+8,c);Object(i.a)(l,n[0])&&(1===n.length?s.push(d):s.push.apply(s
2025-01-09 20:54:45 UTC	1369	IN	Data Raw: 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 29 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 3f 4f 62 6a 65 63 74 28 69 2e 66 29 28 74 29 3a 74 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 69 66 28 72 3e 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3b 76 61 72 20 61 3d 63 28 6e 2c 72 2c 21 31 29 3b 69 66 28 4f 62 6a 65 63 74 28 69 2e 61 29 28 74 2e 62 79 74 65 73 2c 61 2e 62 79 74 65 73 29 29 72 65 74 75 72 6e 20 72 3b 76 61 72 20 73 3d 63 28 6e 2c 72 2b 61 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 65 28 74 2c 6e 2c 72 2b 73 2e 6c 65 6e 67 74 68 2b 73 2e 76 61 6c 75 65 2b 61 2e 6c 65 6e 67 74 68 29 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e Data Ascii: ((function(t){return e(t)})):"number"==typeof t?Object(i.f)(t):t},h=function e(t,n,r){if(r>=n.length)return n.length;var a=c(n,r,!1);if(Object(i.a)(t.bytes,a.bytes))return r;var s=c(n,r+a.length);return e(t,n,r+s.length+s.value+a.length)},p=function e(t,n
2025-01-09 20:54:45 UTC	1369	IN	Data Raw: 73 2b 3d 75 2b 28 22 68 32 36 34 22 3d 3d 3d 74 3f 31 3a 32 29 7d 65 6c 73 65 20 73 2b 2b 7d 72 65 74 75 72 6e 20 65 2e 73 75 62 61 72 72 61 79 28 30 2c 30 29 7d 2c 62 3d 7b 77 65 62 6d 3a 4f 62 6a 65 63 74 28 69 2e 6b 29 28 5b 31 31 39 2c 31 30 31 2c 39 38 2c 31 30 39 5d 29 2c 6d 61 74 72 6f 73 6b 61 3a 4f 62 6a 65 63 74 28 69 2e 6b 29 28 5b 31 30 39 2c 39 37 2c 31 31 36 2c 31 31 34 2c 31 31 31 2c 31 31 35 2c 31 30 37 2c 39 37 5d 29 2c 66 6c 61 63 3a 4f 62 6a 65 63 74 28 69 2e 6b 29 28 5b 31 30 32 2c 37 36 2c 39 37 2c 36 37 5d 29 2c 6f 67 67 3a 4f 62 6a 65 63 74 28 69 2e 6b 29 28 5b 37 39 2c 31 30 33 2c 31 30 33 2c 38 33 5d 29 2c 61 63 33 3a 4f 62 6a 65 63 74 28 69 2e 6b 29 28 5b 31 31 2c 31 31 39 5d 29 2c 72 69 66 66 3a 4f 62 6a 65 63 74 28 69 2e 6b 29 Data Ascii: s+=u+("h264"===t?1:2)}else s++}return e.subarray(0,0)},b={webm:Object(i.k)([119,101,98,109]),matroska:Object(i.k)([109,97,116,114,111,115,107,97]),flac:Object(i.k)([102,76,97,67]),ogg:Object(i.k)([79,103,103,83]),ac3:Object(i.k)([11,119]),riff:Object(i.k)
2025-01-09 20:54:45 UTC	1369	IN	Data Raw: 30 5d 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 2b 31 38 38 3c 65 2e 6c 65 6e 67 74 68 26 26 74 3c 31 38 38 3b 29 7b 69 66 28 37 31 3d 3d 3d 65 5b 74 5d 26 26 37 31 3d 3d 3d 65 5b 74 2b 31 38 38 5d 29 72 65 74 75 72 6e 21 30 3b 74 2b 3d 31 7d 72 65 74 75 72 6e 21 31 7d 2c 66 6c 61 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 66 2e 61 29 28 65 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 69 2e 61 29 28 65 2c 62 2e 66 6c 61 63 2c 7b 6f 66 66 73 65 74 3a 74 7d 29 7d 2c 6f 67 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 69 2e 61 29 28 65 2c 62 2e 6f 67 67 29 7d 2c 61 76 69 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 69 2e 61 29 28 65 2c 62 2e 72 Data Ascii: 0];for(var t=0;t+188<e.length&&t<188;){if(71===e[t]&&71===e[t+188])return!0;t+=1}return!1},flac:function(e){var t=Object(f.a)(e);return Object(i.a)(e,b.flac,{offset:t})},ogg:function(e){return Object(i.a)(e,b.ogg)},avi:function(e){return Object(i.a)(e,b.r
2025-01-09 20:54:45 UTC	1369	IN	Data Raw: 72 70 65 72 22 2c 22 43 68 61 72 6c 6f 74 74 65 22 2c 22 41 6d 65 6c 69 61 22 2c 22 42 65 6e 6a 61 6d 69 6e 22 2c 22 57 69 6c 6c 69 61 6d 22 2c 22 4a 61 6d 65 73 22 2c 22 45 76 65 6c 79 6e 22 2c 22 41 62 69 67 61 69 6c 22 5d 2c 75 3d 5b 22 41 6c 61 62 61 6d 61 22 2c 22 41 6c 61 73 6b 61 22 2c 22 41 72 69 7a 6f 6e 61 22 2c 22 41 72 6b 61 6e 73 61 73 22 2c 22 43 61 6c 69 66 6f 72 6e 69 61 22 2c 22 43 6f 6c 6f 72 61 64 6f 22 2c 22 43 6f 6e 6e 65 63 74 69 63 75 74 22 2c 22 44 65 6c 61 77 61 72 65 22 2c 22 46 6c 6f 72 69 64 61 22 2c 22 47 65 6f 72 67 69 61 22 2c 22 48 61 77 61 69 69 22 2c 22 49 64 61 68 6f 22 2c 22 49 6c 6c 69 6e 6f 69 73 22 2c 22 49 6e 64 69 61 6e 61 22 2c 22 49 6f 77 61 22 2c 22 4b 61 6e 73 61 73 22 2c 22 4b 65 6e 74 75 63 6b 79 22 2c 22 4c Data Ascii: rper","Charlotte","Amelia","Benjamin","William","James","Evelyn","Abigail"],u=["Alabama","Alaska","Arizona","Arkansas","California","Colorado","Connecticut","Delaware","Florida","Georgia","Hawaii","Idaho","Illinois","Indiana","Iowa","Kansas","Kentucky","L
2025-01-09 20:54:45 UTC	1369	IN	Data Raw: 69 73 2c 7b 77 69 64 74 68 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 72 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 57 69 64 74 68 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 30 20 61 6e 64 20 31 30 30 2e 22 29 3b 65 3d 74 7d 7d 2c 6c 69 6e 65 73 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4c 69 6e 65 73 20 6d 75 73 74 20 62 65 20 73 65 74 Data Ascii: is,{width:{enumerable:!0,get:function(){return e},set:function(t){if(!r(t))throw new Error("Width must be between 0 and 100.");e=t}},lines:{enumerable:!0,get:function(){return t},set:function(e){if("number"!=typeof e)throw new TypeError("Lines must be set
2025-01-09 20:54:45 UTC	1369	IN	Data Raw: 74 75 72 6e 20 61 7d 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 28 22 74 6a 6c 41 22 29 2e 42 75 66 66 65 72 29 7d 2c 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 22 62 55 43 35 22 29 2c 6e 28 22 58 45 58 6b 22 29 2c 6e 28 22 4f 31 6e 2b 22 29 2c 6e 28 22 69 57 4b 58 22 29 2c 6e 28 22 58 61 69 55 22 29 2c 65 2e 65 78 70 6f 72 74 73 3d 6e 28 22 67 71 41 69 22 29 7d 2c 22 30 43 78 4f 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 37 7a 52 6a 22 29 2c 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 31 21 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 74 68 72 Data Ascii: turn a}}).call(this,n("tjlA").Buffer)},0:function(e,t,n){n("bUC5"),n("XEXk"),n("O1n+"),n("iWKX"),n("XaiU"),e.exports=n("gqAi")},"0CxO":function(e,t,n){var r=n("7zRj"),i=Object.create\|\|function(){function e(){}return function(t){if(1!==arguments.length)thr

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:46 UTC	544	OUT	GET /conversions.js?siteId=567 HTTP/1.1 Host: dashboard.heatmap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://visi-sharp.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 20:54:46 UTC	564	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 33727 Connection: close Date: Thu, 09 Jan 2025 12:04:45 GMT Last-Modified: Thu, 19 Dec 2024 07:50:44 GMT ETag: "872b3f697ea7735c21ebfe6e56704e41" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 57bc54093a2e2c99ca194f2955ba3d1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: uFe5Ze1e6NE5n9HZ5VdbD8tavvl5cruiAV8kjoWTvL279upWgtwJjA== Age: 31802 X-XSS-Protection: 1; mode=block Referrer-Policy: origin X-Content-Type-Options: nosniff
2025-01-09 20:54:46 UTC	16384	IN	Data Raw: 63 6c 61 73 73 20 43 6f 6e 76 65 72 73 69 6f 6e 73 48 61 6e 64 6c 65 72 7b 73 69 74 65 49 64 3d 30 3b 75 72 6c 50 61 72 61 6d 73 3d 6e 75 6c 6c 3b 68 65 61 74 6d 61 70 53 65 6e 74 54 72 61 6e 73 61 63 74 69 6f 6e 3d 21 31 3b 68 65 61 74 6d 61 70 54 68 61 6e 6b 59 6f 75 48 61 73 53 65 6e 74 54 72 78 3d 21 31 3b 68 65 61 74 6d 61 70 45 78 65 63 75 74 65 47 54 4d 44 61 74 61 4c 61 79 65 72 53 74 61 74 65 3d 21 31 3b 73 65 6e 64 4c 61 6d 62 64 61 44 61 74 61 4c 61 79 65 72 4f 62 6a 65 63 74 3d 21 31 3b 68 65 61 74 6d 61 70 55 70 53 65 6c 6c 43 6f 75 6e 74 3d 30 3b 74 65 6d 70 48 65 61 74 6d 61 70 53 69 74 65 49 64 3d 30 3b 74 65 6d 70 48 65 61 74 6d 61 70 54 72 61 63 6b 65 72 55 52 4c 3b 68 65 61 74 6d 61 70 4e 65 77 56 69 73 69 74 6f 72 3d 30 3b 68 65 61 74 Data Ascii: class ConversionsHandler{siteId=0;urlParams=null;heatmapSentTransaction=!1;heatmapThankYouHasSentTrx=!1;heatmapExecuteGTMDataLayerState=!1;sendLambdaDataLayerObject=!1;heatmapUpSellCount=0;tempHeatmapSiteId=0;tempHeatmapTrackerURL;heatmapNewVisitor=0;heat
2025-01-09 20:54:46 UTC	16384	IN	Data Raw: 3d 24 7b 74 68 69 73 2e 73 69 74 65 49 64 7d 26 69 64 6f 72 64 65 72 3d 24 7b 65 5a 2e 69 64 6f 72 64 65 72 7d 60 2c 65 5a 2c 74 68 69 73 2e 73 69 74 65 49 64 2c 65 5a 2e 69 64 6f 72 64 65 72 29 7d 7d 63 61 74 63 68 28 74 65 29 7b 7d 7d 23 42 28 29 7b 69 66 28 42 6f 6f 6c 65 61 6e 28 74 68 69 73 2e 68 65 61 74 6d 61 70 54 68 61 6e 6b 59 6f 75 48 61 73 53 65 6e 74 54 72 78 29 29 72 65 74 75 72 6e 3b 6c 65 74 20 74 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 63 61 72 74 5f 5f 73 75 62 6d 69 74 2d 63 6f 6e 74 72 6f 6c 73 20 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 63 68 65 63 6b 6f 75 74 22 5d 27 29 3b 76 61 72 20 74 72 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6d 6f 64 69 66 79 48 65 61 6c 74 68 4f Data Ascii: =${this.siteId}&idorder=${eZ.idorder}`,eZ,this.siteId,eZ.idorder)}}catch(te){}}#B(){if(Boolean(this.heatmapThankYouHasSentTrx))return;let tt=document.querySelector('.cart__submit-controls input[name="checkout"]');var tr=localStorage.getItem("modifyHealthO
2025-01-09 20:54:46 UTC	959	IN	Data Raw: 6a 2e 61 70 69 50 61 74 68 73 29 7c 7c 28 63 6f 6e 76 4f 62 6a 3d 6e 65 77 20 43 6f 6e 76 65 72 73 69 6f 6e 73 48 61 6e 64 6c 65 72 29 2e 69 6e 69 74 28 29 3b 63 6f 6e 73 74 20 68 65 61 74 6d 61 70 52 61 77 43 6f 6e 76 65 72 73 69 6f 6e 54 72 61 6e 73 61 63 74 69 6f 6e 3d 28 65 2c 74 2c 72 29 3d 3e 7b 63 6f 6e 76 4f 62 6a 2e 68 65 61 74 6d 61 70 52 61 77 43 6f 6e 76 65 72 73 69 6f 6e 54 72 61 6e 73 61 63 74 69 6f 6e 28 72 29 7d 2c 70 72 6f 63 65 73 73 53 6b 69 6e 6e 79 72 78 3d 65 3d 3e 7b 63 6f 6e 76 4f 62 6a 2e 70 72 6f 63 65 73 73 53 6b 69 6e 6e 79 72 78 28 65 29 7d 2c 76 65 74 72 69 6e 65 78 6c 61 62 73 43 6f 6e 76 65 72 73 69 6f 6e 3d 65 3d 3e 7b 63 6f 6e 76 4f 62 6a 2e 76 65 74 72 69 6e 65 78 6c 61 62 73 43 6f 6e 76 65 72 73 69 6f 6e 28 65 29 7d 2c Data Ascii: j.apiPaths)\|\|(convObj=new ConversionsHandler).init();const heatmapRawConversionTransaction=(e,t,r)=>{convObj.heatmapRawConversionTransaction(r)},processSkinnyrx=e=>{convObj.processSkinnyrx(e)},vetrinexlabsConversion=e=>{convObj.vetrinexlabsConversion(e)},

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:46 UTC	2575	OUT	GET /images/best_value_v2.png HTTP/1.1 Host: visi-sharp.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVG [TRUNCATED]
2025-01-09 20:54:46 UTC	998	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 20:54:46 GMT Content-Type: image/png Content-Length: 155991 Connection: close Last-Modified: Tue, 21 May 2024 12:01:13 GMT ETag: "664c8d09-26157" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2270 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5aQs6I0F6sjeZD%2B5WRqyu3%2FT0vWUS2%2Bvx0WQV5VkcdcNk8%2FUfz6ADL632ksNdXvvCB0i0OcKQAXq5V4Awcjntk9ZWng6CyILCDycRvortAC1GeKIrCtktEAka5X7QfZUJQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff7530a7e948cda-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=5571&min_rtt=1823&rtt_var=3091&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2832&recv_bytes=3153&delivery_rate=1601755&cwnd=242&unsent_bytes=0&cid=7abf52087299c585&ts=114&x=0"
2025-01-09 20:54:46 UTC	371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ee 00 00 01 ab 08 06 00 00 00 06 82 74 89 00 00 20 00 49 44 41 54 78 9c ec 5d 05 9c 1c d5 fd ff be 99 dd bd 3d 97 e4 2e 76 f1 60 21 40 20 02 c4 f0 a0 81 e2 d2 02 29 12 20 58 5b 68 71 77 f7 e0 94 e2 10 a4 68 21 48 20 6e 24 90 d0 04 8d dc c5 fd ee 72 ba bb f3 fe 9f 99 79 f2 7b 33 7b 38 ed 3f e9 fc e0 b2 b3 33 cf e6 cd ec fb be 9f 33 ce 39 22 8a 28 a2 ff 2e 2d 1a 7f c6 a9 1c dc 86 fb 73 64 00 63 ac b9 fb 9e 0f ff e3 bf 39 a8 e5 d3 46 ef e9 70 de 1e ee a0 18 b8 65 c5 d2 1d 07 de ff 4a f4 aa 44 14 d1 7f 97 22 e0 8e 28 a2 ff 12 2d 1a 7f c6 3d 56 cc 3e 80 d9 6c eb 58 2c 06 3b 27 0e ef f7 e8 00 99 4c 0a 4e 2a 0d 27 e3 2c e0 0e 7f ab db 1e 0f ff ed 3f 31 ca a5 53 ce ba 02 0c 87 5a b6 d5 df 76 c7 14 b3 61 59 Data Ascii: PNGIHDRt IDATx]=.v`!@ ) X[hqwh!H n$ry{3{8?339"(.-sdc9FpeJD"(-=V>lX,;'LN*',?1SZvaY
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: a1 a5 b9 09 2d 8d 2d 6b 19 70 59 87 81 0f 3c 12 bd 43 11 45 f4 9f a3 08 b8 23 8a e8 3f 48 8b 27 9c 35 27 96 13 eb 9b 2c 2a 82 1d 8b fb c0 88 ec bf 41 26 cf 33 20 dd 9c 46 63 6d 2d 32 a9 f4 ab dd 86 3d 7c e4 af 39 e2 ea 49 67 3c 6d c7 63 7f c8 2d 29 44 3c 1e 53 28 cd 68 21 26 be 33 80 73 e6 8d 2d 93 c9 a0 a1 a6 1e 4e 3a fd 5e 87 81 0f 1c 10 bd 47 11 45 f4 9f a1 08 b8 23 8a e8 3f 44 4b 26 9c f5 59 3c 3f b9 53 4e 41 21 2c 26 90 d0 65 68 19 07 e3 41 a4 f4 7f 97 8c 7e e3 1c f5 1b 36 20 d3 92 99 d1 75 e8 43 bb fe 1a a3 ae 9a 7c c6 27 b1 44 7c 58 61 59 31 c0 2c c1 f9 4b 94 e6 d0 10 ee b3 dd fe 11 17 32 01 17 be 1d 34 d6 35 20 d5 d8 1c 81 77 44 11 fd 87 c8 8a 26 3a a2 88 7e 7b 5a 3c e1 cc 89 f1 fc dc 9d 92 85 45 1e 43 2b b7 cb 5c 88 a2 c5 17 f1 e9 e8 f1 d0 7d 35 Data Ascii: --kpY<CE#?H'5',*A&3 Fcm-2=\|9Ig<mc-)D<S(h!&3s-N:^GE#?DK&Y<?SNA!,&ehA~6 uC\|'D\|XaY1,K245 wD&:~{Z<EC+\}5
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: 2d c3 a8 2d d3 92 42 43 5d bd 1b fd ed df 0c b8 b7 fd 80 ef 0f d4 b2 72 e6 39 17 c1 b2 7e 1f 4b 24 76 c8 2d cc 83 65 d9 86 f4 5e 6d 18 a4 8e 9d cc 91 3f 66 df 49 c6 c9 64 d0 5c df 88 a6 4d 0d 97 55 ee 76 6f 14 dd 2d a2 2d 8e 22 e0 8e 68 8b a3 85 e3 cf 39 29 bf 24 f1 0f 3b b7 ad d0 63 f3 00 70 53 a0 96 dc ae 43 30 4d ba 46 f9 60 e0 a4 9b 91 69 69 44 a6 b9 d9 d5 ab ae 71 32 7c ae 07 ec a2 86 65 b1 5e cc 66 95 76 3c 1e 73 c5 d2 b1 44 ae 10 37 3b 84 2d a6 80 6d 69 97 2f c2 1c 7b 46 60 06 db ab c7 42 34 cd da d7 1a 3c 80 5f 12 84 83 fa 6a ea 9f 1d f8 bd 2b 7d 39 42 7e da fe ff 94 73 97 f7 42 ad cc c9 a6 c0 62 c4 07 1c 0a fc 53 8d 2d 48 b5 b4 20 d5 dc d2 c8 81 cf c0 f9 bf 2d c6 84 2c 81 b9 12 f7 dd 60 5b 7d 5c 51 7e 22 37 07 76 3c ae 74 f8 3c b4 e5 60 64 6f a3 Data Ascii: --BC]r9~K$v-e^m?fId\MUvo--"h9)$;cpSC0MF`iiDq2\|e^fv<sD7;-mi/{F`B4<_j+}9B~sBbS-H -,`[}\Q~"7v<t<`do
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: c0 97 1b 81 76 39 d1 63 93 53 ea 32 05 ae 80 65 37 11 bf cb b2 fa 7c 00 f8 04 08 1b 63 cb d6 5f 96 6b ad 73 fe a6 a8 9b 93 b1 84 8d e5 78 e8 5e 7c e6 5a 6e 3a 98 aa af fd bf b9 e6 a6 59 2b e3 24 dc 36 cd 8e 66 14 65 96 06 71 c5 5d 53 6b 73 29 0a 97 80 1e 34 50 23 58 2f ca e5 e4 17 22 a7 a0 e8 da a5 d3 fe 72 65 b6 51 45 14 d1 e6 42 91 1f 77 44 bf 29 55 4f bd f8 f4 dc 82 f8 c5 f1 04 eb cc 2c 27 0e c4 05 06 64 c0 78 0b d2 69 ab be b9 31 35 b3 a1 a6 f9 d4 9e fb dc bb f0 c7 8e e5 db 0f ce ed 5e 58 96 33 dd 4e d8 e5 3c 56 a0 38 2b e9 83 cc 39 13 01 50 cc c4 99 2e d0 30 e5 2f cc 15 97 28 ff 95 f1 45 74 9c 70 17 b8 6c 30 69 8d ae 02 a0 70 c2 69 32 22 5a 0f 3a 4a 67 47 da b0 97 35 42 a0 c7 42 d2 65 e9 73 ee e8 00 24 0c 64 2c dc 14 2d ab 60 29 90 5e cf ea 82 bc 0b Data Ascii: v9cS2e7\|c_ksx^\|Zn:Y+$6feq]Sks)4P#X/"reQEBwD)UO,'dxi15^X3N<V8+9P.0/(Etpl0ipi2"Z:JgG5BBes$d,-`)^
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: a8 ab 6f c1 8c 7f 9d 8a 6e de 58 20 c4 d2 c1 b6 18 ca 77 b8 c3 eb 3b 16 f3 c1 ad 5d db 7c e4 e7 25 d0 b7 4f 3b 5c 76 fe 10 74 ab 2c d1 1c b7 05 b3 be c5 74 9a 4f c9 99 0b 71 b8 e4 be 35 77 6e 1e 1b 81 57 18 11 99 ab c7 6a ea af e5 9d 73 02 e4 fe 86 51 c4 88 57 cf c8 d2 1b 3a 8f 44 79 ce 94 9a a5 35 ee d9 fc 1e b8 c6 2c f1 10 6d b1 07 14 dc bc ac c7 63 48 37 37 62 d3 da 45 cf 77 ea ff d7 13 42 0f 25 a2 88 7e 06 c5 a2 49 8b e8 d7 a0 95 b3 2f bf a1 b8 2c d1 a7 d9 ee 0e 78 1c 87 a3 b8 58 16 12 5b c2 5b fc 38 5a c4 b1 09 da 12 f4 7d 0c 0e 72 8e 50 75 20 8c c7 34 98 73 a5 ff 0c ba 7d f9 8c b6 8e e9 6d 1a 97 f9 6d f8 98 ae fd b1 19 a8 a8 56 8e de 31 b4 bd c1 02 55 4b 37 60 e9 8a 3a 3c fb ca 5c 2c aa da 80 15 ab 37 61 f5 da 7a 64 32 1c a3 4e dc 05 d7 fe 6d 4f df Data Ascii: onX w;]\|%O;\vt,tOq5wnWjsQW:Dy5,mcH77bEwB%~I/,xX[[8Z}rPu 4s}mmV1UK7`:<\,7azd2NmO
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: bc 37 fe 6b 8c 9f bc 18 d5 cb 36 90 b6 48 48 54 4e c6 4c 9a 1d d4 af d2 33 ea 5a f0 cd 1a 03 98 01 13 f8 4c ab 77 a0 63 bb 42 f3 3e 69 be 6b 23 a4 a9 a3 ae 1b 1b 81 10 78 07 b2 80 d1 b9 0b cd a7 aa e1 e9 b2 5b 2f ca f4 bf 1c 78 fc 8e 43 d0 d8 94 c6 3d 8f 4e 27 1b 01 a9 22 11 06 69 fa 26 f4 b8 89 9c df 00 ef e0 98 a8 8a 82 e8 c9 19 e1 c2 19 03 31 2c b3 0c 0b 78 ad 83 d6 d7 35 17 2e 23 b2 41 59 8e 4b c0 f5 eb db 81 d0 a9 02 84 85 c8 9c 29 cb 74 b1 61 55 f5 2c c1 b1 4b 1d b9 df b7 6b a5 9e 53 d0 7e 87 e0 ac 47 14 d1 4f a5 08 b8 23 fa 45 b4 6c c6 a5 a7 3a ac 90 70 c7 8e 5a b8 25 67 0c e1 5f ab 45 c3 10 a2 6b ae 74 dd 3a 51 86 65 8a b4 95 68 bb 15 b0 52 e4 a8 76 25 28 2a c0 57 ed 04 39 4e 75 d9 07 71 63 1c c0 a9 27 ec ec 7d 3e f6 dc 6c 91 78 83 86 27 75 02 f5 Data Ascii: 7k6HHTNL3ZLwcB>ik#x[/xC=N'"i&1,x5.#AYK)taU,KkS~GO#El:pZ%g_Ekt:QehRv%(*W9Nuqc'}>lx'u
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: 0d 13 a3 24 a9 c3 96 a4 16 bd 6c 16 eb 04 38 79 46 e9 b6 a5 c8 5d 6f 20 b8 91 b2 72 c4 f0 6d bc cf bd 87 76 47 db 36 f9 38 76 d4 58 cf 82 9c 4b 63 37 69 b9 ce 81 23 0f de ce e3 7c 5f 7d fb cb 70 bf ea 5e 82 3e e9 1c 03 fb 76 f4 16 f6 f7 3e fe 56 83 6a 50 57 8c b0 ce bd a2 4d 1e aa 57 d4 62 50 ff 4a 71 ca 21 65 78 96 fa 4e eb 00 1a e4 f6 b3 14 e2 9c ce 36 c7 e4 99 4b bd e0 2b fb 0c e9 4a fa 91 fc bd e3 db 17 06 c6 b0 70 c9 06 74 71 a3 b9 79 20 6c ea e0 95 0c 24 64 91 4f c4 c8 59 ac df 5f 78 f5 33 0f b4 f7 db 73 6b 7c 3b eb 52 0c 1b d4 33 24 6d e9 d6 a5 0d de 78 fe 2c 8c 7b f5 5c 7c 38 e1 2b 1c 7a fc 18 e2 fa 05 a1 e3 b6 08 30 53 70 b6 b5 65 b8 6a 59 96 b5 cd f7 8d 69 f1 b8 34 34 33 75 e6 fa 4f bd ee c2 60 4e 59 a2 4b a3 39 cf ba 3c 17 b9 a5 dd 6f c9 f2 c4 Data Ascii: $l8yF]o rmvG68vXKc7i#\|_}p^>v>VjPWMWbPJq!exN6K+Jptqy l$dOY_x3sk\|;R3$mx,{\\|8+z0SpejYi443uO`NYK9<o
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: ca d7 44 57 ad f5 db fa ad f4 ad c2 8f fb e3 3d 38 e9 cc 07 c8 fb 6a 9b 00 cd 44 1a 4f 15 74 85 11 8e 9c a6 f8 84 01 ca ea 3b fd 64 94 2b f7 ff 2c 2b 86 44 5e 31 0a da f5 39 65 cd 82 67 16 54 4f bf a9 7f 2b 37 1d 51 44 06 45 56 e5 ff 23 b4 6c fa d5 27 5a f1 d8 c1 96 6d 77 d3 2b 9e c3 32 a9 d4 eb e9 96 d4 b3 5d 06 df b0 38 db 4c 2c 9d 7e f9 c8 64 7e f2 ba a2 36 79 95 2c 51 09 c4 cb 45 60 13 26 38 6b 6e 84 12 d5 82 cc 80 3e 5a 1a ad 41 0a a2 b9 06 57 a3 76 e0 ab 30 67 f6 d7 7e df e2 5c 72 6a 6e 58 4e 37 d0 c9 71 a3 5e c2 0b 8f 1c 8d 41 d2 0a 9b 70 de 46 16 30 22 a2 65 c8 60 bb ad da 60 ea a7 4b 49 87 dc b3 00 7f e1 a1 c3 71 de 65 ef a1 df fe 8f e1 be 1b f6 c7 a0 7e 9d b0 73 9f 76 98 38 bd 9a 80 1e 0f 8f d7 00 37 07 c7 1f be 9d e7 93 ed 1a 9b 75 16 69 34 8d Data Ascii: DW=8jDOt;d+,+D^19egTO+7QDEV#l'Zmw+2]8L,~d~6y,QE`&8kn>ZAWv0g~\rjnXN7q^ApF0"e``KIqe~sv87ui4
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: 17 f1 dc a2 78 8e d3 b6 92 73 54 02 6c 17 5f b4 6e 7b 65 38 6d 57 8c 45 49 a1 62 6d f3 e2 c9 b2 13 33 a9 c6 e3 57 ce 7d fc 9a f6 3b 9e 7a 3d 22 da e2 28 d2 71 6f 81 b4 6a ee ad f3 92 25 e5 e7 e7 94 ee 62 c5 0b b6 01 b3 72 0c 6e 06 06 ec f9 9f cc 4a c2 8a 95 80 c5 8a c0 62 85 02 b4 1d 9f 6b 96 b1 b9 b9 00 52 e5 82 e5 08 9d 9f 04 63 c9 7d 8b 70 a7 74 f1 87 a3 ad cf 55 3b 34 48 0b cb 92 ac 01 66 ca 45 45 01 71 a5 0b b2 ef 9d 86 82 fc 04 0e 3f 65 6c 40 af 4b 75 b9 da 12 dc 3d 76 c5 d7 ed 5d b7 30 25 2e e7 44 2f ee 97 7d e6 fe 11 d8 73 50 57 dc 78 ef 54 0f 84 e7 7c b1 ca d0 cf ca 6c 65 fa 3e 64 4b 7e 99 8f c7 1e 8f 9b 2e de 83 f4 8b 80 ae 9f 0e 8f 3c 15 1e bc 68 3e 35 1d c3 9d 82 9c 19 97 5c 57 71 0c 7d b9 fa d7 88 53 1e 98 2e 0e c3 8f 9b 07 1a a6 3e d9 c1 5c Data Ascii: xsTl_n{e8mWEIbm3W};z="(qoj%brnJbkRc}ptU;4HfEEq?el@Ku=v]0%.D/}sPWxT\|le>dK~.<h>5\Wq}S.>\
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: cc 1b 0a 84 cd 34 91 90 1b 7f 5a d0 2d 0d a6 58 48 7f ad 39 6c 4b d7 f5 aa 49 37 ad 20 c7 0d 83 1b bf ef 91 f7 d1 79 c7 8b 71 ed 6d 6f 63 f6 e7 d5 de f9 87 9e 9c 84 ae 7d af c4 94 19 8b c8 d0 24 47 cf 48 7d b1 fe 2b bd 39 cc 3e 18 c3 b4 59 4b f1 c0 93 b3 3d ff e9 39 f3 56 e1 c4 73 5e 57 a0 a1 43 b1 d2 fb cf 60 db ad da 60 ce bf 57 07 c2 88 9a 63 97 e5 69 1e 6d 7f 6e a9 98 9b 72 bd 81 a8 66 82 63 54 3b 01 1e d6 77 1b 5c 6b 36 ae 97 7e 55 21 4d 49 7d 52 cc 0c e0 42 c1 3f a0 ef 56 e3 d2 1b 94 70 7f 92 3b 46 80 eb a5 a2 f2 2c 3b 05 43 ec ef 98 55 d4 3f e4 85 24 11 e0 1e bb fb 68 1c 7b f8 4e b8 ff b1 c9 d8 79 af 3b f1 c2 ab 9f 9a cd 73 e0 ce 07 3e 40 c7 ed 2e c2 ca d5 75 78 67 ec 79 c2 28 4d d8 65 04 72 79 bb ef eb 35 37 8f f5 8e ee bd f5 74 e2 da 65 13 e0 d4 Data Ascii: 4Z-XH9lKI7 yqmoc}$GH}+9>YK=9Vs^WC``WcimnrfcT;w\k6~U!MI}RB?Vp;F,;CU?$h{Ny;s>@.uxgy(Mery57te

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:46 UTC	2869	OUT	GET /images/Delaware.png HTTP/1.1 Host: visi-sharp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVG [TRUNCATED]
2025-01-09 20:54:46 UTC	994	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 20:54:46 GMT Content-Type: image/png Content-Length: 4565 Connection: close Last-Modified: Tue, 21 May 2024 12:01:13 GMT ETag: "664c8d09-11d5" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1236 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UoiU4bBe63s%2Bap4dqU8Bs9hoPsCMfXCEJIjg%2FhTgjiNIFyHfCkMnTwXHa9jp9Wkzz1I%2BTQnzfYkXIZhvHxn5p3QVyA5P3rY3YbdsCHixj8AM7XQX4A46zt%2F2V9tAhbpiYA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff7530acbd142d2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1568&min_rtt=1555&rtt_var=610&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2833&recv_bytes=3447&delivery_rate=1754807&cwnd=229&unsent_bytes=0&cid=8e4db57bf5cb655a&ts=119&x=0"
2025-01-09 20:54:46 UTC	375	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3f 00 00 00 3d 08 06 00 00 00 1a 97 b1 d4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 11 6a 49 44 41 54 68 43 d5 9b 7b 70 5c 57 7d c7 7f bb ab 7d 4b fb 92 b4 7a bf ac 87 1f 8a 1f 91 e3 34 4e 30 0e cf 0c 4d c0 10 02 81 02 cd 04 18 1e 2d b4 cc 94 fe 41 a6 74 98 52 a6 7f 94 4e a1 9d 14 02 04 08 99 b6 0e 81 40 18 20 31 30 0d ce 24 b1 1d bf e2 87 6c 47 96 f5 5e ad 64 69 1f 5a 69 5f da 95 b6 e7 fb bb f7 ec de bd bb 2b cb 21 b1 9d 8f e6 cc de 7b f6 6a f7 fe ce f9 9d df eb dc 35 7c f6 1f bf 9e eb ee d9 40 60 db ae ad d4 d5 d4 4e 4f ff ea 37 14 4f 24 e8 95 a3 af d0 47 3f 79 3f 3d 77 e0 20 e1 9a 7d Data Ascii: PNGIHDR?=sRGBgAMAapHYsodjIDAThC{p\W}}Kz4N0M-AtRN@ 10$lG^diZi_+!{j5\|@`NO7O$G?y?=w }
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: 1d 0e 7a ff 7d f7 d0 b3 bf 3c a0 f6 10 99 8c 85 cb 3f f2 89 0f d3 89 97 4f 50 28 14 e6 f3 e5 d5 2c bf 56 c2 67 75 51 8b a3 81 5c e2 66 24 56 a3 95 9b cb 62 e7 66 36 9a 08 7f 72 80 f0 2a 91 ff 07 c1 4d 06 03 3d f6 d3 47 b9 e1 f8 cc 93 c7 a9 a3 ee 22 35 b6 0c 52 ab db 4e dd ae 76 1e 28 bf bd 36 2f 38 b0 55 59 d5 23 05 23 66 f4 ad 77 ed e1 e6 f1 79 8a 04 dc 3c d0 4f 56 bb 8d 46 87 47 d5 9e 02 5e 9f 97 06 6e 1d a0 93 47 4f aa 3d 95 81 10 5e ab 87 bf bc c6 ec a4 2a 31 23 ce 2a 07 f9 ec 6e 72 98 ed 14 9d 8e f0 20 74 99 5a c4 b9 2d af 19 78 c5 60 00 bb 49 b9 71 cc f8 a7 bf f0 49 b2 88 cf 40 c3 f1 e1 17 5f 26 9f b8 77 f9 1d 7a 56 73 ab ac 51 c3 a1 a8 da a3 60 c4 ec fd e8 e1 c7 b8 9d 3f 31 a8 76 17 f8 c0 47 f7 91 dd 6e e7 e3 95 d5 55 ca e4 56 f8 18 bc e7 9e 77 53 Data Ascii: z}<?OP(,VguQ\f$Vbf6rM=G"5RNv(6/8UY##fwy<OVFG^nGO=^1#*nr tZ-x`IqI@_&wzVsQ`?1vGnUVwS
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: b3 da 49 9d 5d bd 22 ef 2f cc b7 e1 cb fb 1f ce 99 ab ad f9 9b d2 22 93 98 d9 d1 20 35 74 35 e5 d3 d6 98 98 f1 f9 f1 39 aa eb a8 a7 06 87 8f 66 13 61 3e 07 5e e4 d5 a2 e1 9a 8b d1 71 5e df e0 d2 d9 11 1a 18 d8 c1 df 01 83 05 6b 5d 4e 70 00 6d 0a 26 2e 17 55 72 24 e5 04 07 fa f0 f6 dc f4 2a c5 12 b9 fc a0 00 7d 78 6b ba fb 2b 0f 7c 6d 79 69 59 ac e5 1a 32 5b 95 50 53 e2 11 01 47 48 08 f5 f0 7f 3c 42 8d fe 7a 6a 6b 6b 23 93 30 7c 07 9f 7d 9e 9e fc 9f 9f d3 e6 8d 9b c8 5f 5f 27 72 e5 09 7a fc 07 ff 4d 97 67 e7 e8 a5 83 87 84 8a a5 c5 7b 7d 42 c5 4d ac 05 c0 28 ec 94 cf ab dc 74 60 6a 88 dc 36 91 11 3a 8b cb 59 98 f1 09 c4 ec c2 ab 5c 8d e0 20 2d c6 58 89 e7 95 86 73 a0 ed 9b 5b cc d1 ae 0d ba d8 7e 73 4f 2f 07 15 c8 98 b4 c8 74 15 3e f2 e8 e1 e3 94 11 41 0a Data Ascii: I]"/" 5t59fa>^q^k]Npm&.Ur$*}xk+\|myiY2[PSGH<Bzjkk#0\|}__'rzMg{}BM(t`j6:Y\ -Xs[~sO/t>A
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: 24 24 92 3a ec 85 99 3d e7 a8 ca 39 ca ae 0a 35 39 b8 ad d5 94 9f e6 82 a7 28 b9 92 a6 e6 86 46 de e4 84 16 00 18 4f 78 83 78 aa 50 b3 43 f6 05 a1 d6 33 7b 57 8b 76 d3 a2 ec cc 23 22 83 e0 10 16 46 4d 6e 17 5d fa e3 10 c7 e8 30 66 52 f0 cb e1 5a ce d3 57 96 95 f2 57 26 ba 85 e3 70 c9 f3 67 6a 45 0c 7d 99 bd 43 67 4f 27 1b 3d b8 31 78 03 78 05 80 f7 36 6c 76 f3 ec c9 19 7d 23 04 d7 53 32 f3 d8 28 40 4d 1c 82 4f c7 95 e0 07 b3 87 58 1c 15 94 6a 97 18 0c 35 02 44 04 16 0a 6e 23 7b dd cb c2 c7 b6 b3 e0 5a ba 3a 46 8a 52 57 d8 8a 4a 55 59 7c fe e8 78 a1 76 f7 46 51 71 e6 61 e4 b4 82 a3 6a 62 10 1a 80 98 5b de 98 36 e3 4a 64 52 64 b4 cf b0 e0 5a 4b ef 6d ff 3d 6d d9 74 8a 8f b5 39 fb f8 a0 b2 fb 5b 0e a7 a3 38 a6 bf 16 14 09 bf d1 d2 ce 2a 2d 05 07 a8 a1 0d 1f Data Ascii: $$:=959(FOxxPC3{Wv#"FMn]0fRZWW&pgjE}CgO'=1xx6lv}#S2(@MOXj5Dn#{Z:FRWJUY\|xvFQqajb[6JdRdZKm=mt9[8*-
2025-01-09 20:54:46 UTC	83	IN	Data Raw: 77 a3 44 74 a0 e8 37 36 17 c2 23 39 ed af a4 b4 60 ef 1d c0 f7 03 fc 82 0a 3e 7b bd 3f 3a c0 1e c0 c5 b1 8e 1b 57 f8 68 34 fa 9a 36 c5 8e 4e 2c d1 53 67 c2 74 62 52 79 ec f4 cd 07 d1 ff 03 b5 cc 6b d4 de a9 2d 87 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: wDt76#9`>{?:Wh46N,SgtbRyk-IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:46 UTC	2613	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: visi-sharp.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVG [TRUNCATED]
2025-01-09 20:54:46 UTC	754	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 20:54:46 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Tue, 07 Jan 2025 11:11:01 GMT ETag: "677d0bc5-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8S1QKPxdRRffSUBVSKfM8zd6cu%2BUu0Zs%2FM%2Fxrm3qmHAyEAxhC%2Bt7cOXkHuO5d1jTpiB024NiO0pmSSitWf7pmfBzP5Ztgwt2ZXASgOs1pkLHcuv6k1dYFSbgdkm2ricwyg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff7530ac8e5c327-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sat, 11 Jan 2025 20:54:46 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2025-01-09 20:54:46 UTC	615	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2025-01-09 20:54:46 UTC	624	IN	Data Raw: 72 65 66 2c 61 2b 6c 2e 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6c 29 3b 61 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 64 2c 6f 29 7d 7d 63 61 74 63 68 28 68 29 7b 65 28 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d Data Ascii: ref,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=

Timestamp	Bytes transferred	Direction	Data
2025-01-09 20:54:46 UTC	2876	OUT	GET /images/most_popular_v2.png HTTP/1.1 Host: visi-sharp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visi-sharp.net/report?aff_id=326&subid2=6812_sessid20250109205426977&subid=8802 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVUVTdBNzV3cldodk16cHVhTEgwQmc9PSIsInZhbHVlIjoiRVVnUkhlTEY1MCtoZFYzTGx4ZzlrOXVJb2c5Q0dVM1ZxRTJpdEhpRVFyREZrOU9KZWhGT2NWdXJrUE5UUkhLOHZ0QUpaRVkzS25ySHB0a1ovcGdweU9JQXRUY28zaEpxOGJUTXE0ZEZaV2ZyRi9zZ3VlenJxaU9rQTQwOEZEakoiLCJtYWMiOiI0N2ZmNWFjMmMzYTdkODkzNGRjYTM1MDhkMWQyZmFkYzVjNTU3MWI4NGM0MWM2ZmRjMWQ0Y2FlMjQ4NzkyM2Q2In0%3D; _=eyJpdiI6IjBpT3R0dHRYalFDWXMxRFhTZVo4Nmc9PSIsInZhbHVlIjoiMEZDdHozdHFRcGdEMWZMOHpYdG9qSGJ5VWRsb1B5bVplSVA3SVUrY1ZVd3p1WWVNY0ZzZW1SWkZRZkRHK0N0c3ZuL05CRi9TcXhETkc2YVR2a2lPRmo3VFdSUnpabkN4ajJQOW5PbU13Vit5NVJSU1VQMVordm41bStmVElKdmoiLCJtYWMiOiJjZGNlNDk4Yzc0NjczOTAxM2MyYTY3OTFjNjExOGJmMGUxNzViMTRiMGY5ODJkNTU5NWEyYjRmMmI2MTVhZmEwIn0%3D; referrer=eyJpdiI6IkU0bU96MXZZRmtnbVFyaXZJR2J4R3c9PSIsInZhbHVlIjoibFB5WFBpWXhFeWhoano1ek9Bdm9ROE16b29lYTAzQTRxNDlDUEhpeEc2bHQwYlhjeDRCSlBQeW1yeDk4Rjk0U3hnbFlwemovSmdBeGgybERRZThqVHc9PSIsIm1hYyI6ImU2NmIzMTY1YzdjNDZlMmQxZjc1MjhkZjI5MjY4NjJlZTA2MmNlZDY3NGRhNWRkNjYyNjIxYzhkODdiZWYwNTQifQ%3D%3D; affiliate=eyJpdiI6IjJCWTF0Nzdlb0wwS1pZMisvNzJjVG [TRUNCATED]
2025-01-09 20:54:46 UTC	995	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 20:54:46 GMT Content-Type: image/png Content-Length: 157266 Connection: close Last-Modified: Tue, 21 May 2024 12:01:13 GMT ETag: "664c8d09-26652" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6641 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZUwDbf4kc40%2FWdOvGNHbFuMu1zD2M9wKOlaGGTpWgkR3tNQZ8O6f1b2n6KuBXPnj%2FYY0YN9SiQXWES7%2FhnqB2LAgYcUC7WwHdA23WGRnw7QzVESZWkICAjPQueRyodFUdw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff7530ae92ec443-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1660&min_rtt=1648&rtt_var=643&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2833&recv_bytes=3454&delivery_rate=1668571&cwnd=244&unsent_bytes=0&cid=eb07e98503fccac7&ts=129&x=0"
2025-01-09 20:54:46 UTC	374	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ee 00 00 01 ab 08 06 00 00 00 06 82 74 89 00 00 20 00 49 44 41 54 78 9c ec 5d 05 9c 1c d5 fd ff be 99 dd bd 3d 97 e4 2e 76 f1 60 21 40 20 02 c4 f0 a0 81 e2 d2 02 29 12 20 58 5b 68 71 77 f7 e0 94 e2 10 a4 68 21 48 20 6e 24 90 d0 04 8d dc c5 fd ee 72 ba bb f3 fe 9f 99 79 f2 7b 33 7b 38 ed 3f e9 fc e0 b2 b3 33 cf e6 cd ec fb be 9f 33 ce 39 22 8a 28 a2 ff 2e 2d 1a 7f c6 a9 1c dc 86 fb 73 64 00 63 ac b9 fb 9e 0f ff e3 bf 39 a8 e5 d3 46 ef e9 70 de 1e ee a0 18 b8 65 c5 d2 1d 07 de ff 4a f4 aa 44 14 d1 7f 97 22 e0 8e 28 a2 ff 12 2d 1a 7f c6 3d 56 cc 3e 80 d9 6c eb 58 2c 06 3b 27 0e ef f7 e8 00 99 4c 0a 4e 2a 0d 27 e3 2c e0 0e 7f ab db 1e 0f ff ed 3f 31 ca a5 53 ce ba 02 0c 87 5a b6 d5 df 76 c7 14 b3 61 59 Data Ascii: PNGIHDRt IDATx]=.v`!@ ) X[hqwh!H n$ry{3{8?339"(.-sdc9FpeJD"(-=V>lX,;'LN*',?1SZvaY
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: 09 2d 8d 2d 6b 19 70 59 87 81 0f 3c 12 bd 43 11 45 f4 9f a3 08 b8 23 8a e8 3f 48 8b 27 9c 35 27 96 13 eb 9b 2c 2a 82 1d 8b fb c0 88 ec bf 41 26 cf 33 20 dd 9c 46 63 6d 2d 32 a9 f4 ab dd 86 3d 7c e4 af 39 e2 ea 49 67 3c 6d c7 63 7f c8 2d 29 44 3c 1e 53 28 cd 68 21 26 be 33 80 73 e6 8d 2d 93 c9 a0 a1 a6 1e 4e 3a fd 5e 87 81 0f 1c 10 bd 47 11 45 f4 9f a1 08 b8 23 8a e8 3f 44 4b 26 9c f5 59 3c 3f b9 53 4e 41 21 2c 26 90 d0 65 68 19 07 e3 41 a4 f4 7f 97 8c 7e e3 1c f5 1b 36 20 d3 92 99 d1 75 e8 43 bb fe 1a a3 ae 9a 7c c6 27 b1 44 7c 58 61 59 31 c0 2c c1 f9 4b 94 e6 d0 10 ee b3 dd fe 11 17 32 01 17 be 1d 34 d6 35 20 d5 d8 1c 81 77 44 11 fd 87 c8 8a 26 3a a2 88 7e 7b 5a 3c e1 cc 89 f1 fc dc 9d 92 85 45 1e 43 2b b7 cb 5c 88 a2 c5 17 f1 e9 e8 f1 d0 7d 35 03 f2 4b Data Ascii: --kpY<CE#?H'5',*A&3 Fcm-2=\|9Ig<mc-)D<S(h!&3s-N:^GE#?DK&Y<?SNA!,&ehA~6 uC\|'D\|XaY1,K245 wD&:~{Z<EC+\}5K
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: 2d d3 92 42 43 5d bd 1b fd ed df 0c b8 b7 fd 80 ef 0f d4 b2 72 e6 39 17 c1 b2 7e 1f 4b 24 76 c8 2d cc 83 65 d9 86 f4 5e 6d 18 a4 8e 9d cc 91 3f 66 df 49 c6 c9 64 d0 5c df 88 a6 4d 0d 97 55 ee 76 6f 14 dd 2d a2 2d 8e 22 e0 8e 68 8b a3 85 e3 cf 39 29 bf 24 f1 0f 3b b7 ad d0 63 f3 00 70 53 a0 96 dc ae 43 30 4d ba 46 f9 60 e0 a4 9b 91 69 69 44 a6 b9 d9 d5 ab ae 71 32 7c ae 07 ec a2 86 65 b1 5e cc 66 95 76 3c 1e 73 c5 d2 b1 44 ae 10 37 3b 84 2d a6 80 6d 69 97 2f c2 1c 7b 46 60 06 db ab c7 42 34 cd da d7 1a 3c 80 5f 12 84 83 fa 6a ea 9f 1d f8 bd 2b 7d 39 42 7e da fe ff 94 73 97 f7 42 ad cc c9 a6 c0 62 c4 07 1c 0a fc 53 8d 2d 48 b5 b4 20 d5 dc d2 c8 81 cf c0 f9 bf 2d c6 84 2c 81 b9 12 f7 dd 60 5b 7d 5c 51 7e 22 37 07 76 3c ae 74 f8 3c b4 e5 60 64 6f a3 6f 5e 97 Data Ascii: -BC]r9~K$v-e^m?fId\MUvo--"h9)$;cpSC0MF`iiDq2\|e^fv<sD7;-mi/{F`B4<_j+}9B~sBbS-H -,`[}\Q~"7v<t<`doo^
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: 81 76 39 d1 63 93 53 ea 32 05 ae 80 65 37 11 bf cb b2 fa 7c 00 f8 04 08 1b 63 cb d6 5f 96 6b ad 73 fe a6 a8 9b 93 b1 84 8d e5 78 e8 5e 7c e6 5a 6e 3a 98 aa af fd bf b9 e6 a6 59 2b e3 24 dc 36 cd 8e 66 14 65 96 06 71 c5 5d 53 6b 73 29 0a 97 80 1e 34 50 23 58 2f ca e5 e4 17 22 a7 a0 e8 da a5 d3 fe 72 65 b6 51 45 14 d1 e6 42 91 1f 77 44 bf 29 55 4f bd f8 f4 dc 82 f8 c5 f1 04 eb cc 2c 27 0e c4 05 06 64 c0 78 0b d2 69 ab be b9 31 35 b3 a1 a6 f9 d4 9e fb dc bb f0 c7 8e e5 db 0f ce ed 5e 58 96 33 dd 4e d8 e5 3c 56 a0 38 2b e9 83 cc 39 13 01 50 cc c4 99 2e d0 30 e5 2f cc 15 97 28 ff 95 f1 45 74 9c 70 17 b8 6c 30 69 8d ae 02 a0 70 c2 69 32 22 5a 0f 3a 4a 67 47 da b0 97 35 42 a0 c7 42 d2 65 e9 73 ee e8 00 24 0c 64 2c dc 14 2d ab 60 29 90 5e cf ea 82 bc 0b 95 05 4c Data Ascii: v9cS2e7\|c_ksx^\|Zn:Y+$6feq]Sks)4P#X/"reQEBwD)UO,'dxi15^X3N<V8+9P.0/(Etpl0ipi2"Z:JgG5BBes$d,-`)^L
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: c1 8c 7f 9d 8a 6e de 58 20 c4 d2 c1 b6 18 ca 77 b8 c3 eb 3b 16 f3 c1 ad 5d db 7c e4 e7 25 d0 b7 4f 3b 5c 76 fe 10 74 ab 2c d1 1c b7 05 b3 be c5 74 9a 4f c9 99 0b 71 b8 e4 be 35 77 6e 1e 1b 81 57 18 11 99 ab c7 6a ea af e5 9d 73 02 e4 fe 86 51 c4 88 57 cf c8 d2 1b 3a 8f 44 79 ce 94 9a a5 35 ee d9 fc 1e b8 c6 2c f1 10 6d b1 07 14 dc bc ac c7 63 48 37 37 62 d3 da 45 cf 77 ea ff d7 13 42 0f 25 a2 88 7e 06 c5 a2 49 8b e8 d7 a0 95 b3 2f bf a1 b8 2c d1 a7 d9 ee 0e 78 1c 87 a3 b8 58 16 12 5b c2 5b fc 38 5a c4 b1 09 da 12 f4 7d 0c 0e 72 8e 50 75 20 8c c7 34 98 73 a5 ff 0c ba 7d f9 8c b6 8e e9 6d 1a 97 f9 6d f8 98 ae fd b1 19 a8 a8 56 8e de 31 b4 bd c1 02 55 4b 37 60 e9 8a 3a 3c fb ca 5c 2c aa da 80 15 ab 37 61 f5 da 7a 64 32 1c a3 4e dc 05 d7 fe 6d 4f df 70 8e 4a Data Ascii: nX w;]\|%O;\vt,tOq5wnWjsQW:Dy5,mcH77bEwB%~I/,xX[[8Z}rPu 4s}mmV1UK7`:<\,7azd2NmOpJ
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: 6b 8c 9f bc 18 d5 cb 36 90 b6 48 48 54 4e c6 4c 9a 1d d4 af d2 33 ea 5a f0 cd 1a 03 98 01 13 f8 4c ab 77 a0 63 bb 42 f3 3e 69 be 6b 23 a4 a9 a3 ae 1b 1b 81 10 78 07 b2 80 d1 b9 0b cd a7 aa e1 e9 b2 5b 2f ca f4 bf 1c 78 fc 8e 43 d0 d8 94 c6 3d 8f 4e 27 1b 01 a9 22 11 06 69 fa 26 f4 b8 89 9c df 00 ef e0 98 a8 8a 82 e8 c9 19 e1 c2 19 03 31 2c b3 0c 0b 78 ad 83 d6 d7 35 17 2e 23 b2 41 59 8e 4b c0 f5 eb db 81 d0 a9 02 84 85 c8 9c 29 cb 74 b1 61 55 f5 2c c1 b1 4b 1d b9 df b7 6b a5 9e 53 d0 7e 87 e0 ac 47 14 d1 4f a5 08 b8 23 fa 45 b4 6c c6 a5 a7 3a ac 90 70 c7 8e 5a b8 25 67 0c e1 5f ab 45 c3 10 a2 6b ae 74 dd 3a 51 86 65 8a b4 95 68 bb 15 b0 52 e4 a8 76 25 28 2a c0 57 ed 04 39 4e 75 d9 07 71 63 1c c0 a9 27 ec ec 7d 3e f6 dc 6c 91 78 83 86 27 75 02 f5 29 78 3b Data Ascii: k6HHTNL3ZLwcB>ik#x[/xC=N'"i&1,x5.#AYK)taU,KkS~GO#El:pZ%g_Ekt:QehRv%(*W9Nuqc'}>lx'u)x;
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: 24 a9 c3 96 a4 16 bd 6c 16 eb 04 38 79 46 e9 b6 a5 c8 5d 6f 20 b8 91 b2 72 c4 f0 6d bc cf bd 87 76 47 db 36 f9 38 76 d4 58 cf 82 9c 4b 63 37 69 b9 ce 81 23 0f de ce e3 7c 5f 7d fb cb 70 bf ea 5e 82 3e e9 1c 03 fb 76 f4 16 f6 f7 3e fe 56 83 6a 50 57 8c b0 ce bd a2 4d 1e aa 57 d4 62 50 ff 4a 71 ca 21 65 78 96 fa 4e eb 00 1a e4 f6 b3 14 e2 9c ce 36 c7 e4 99 4b bd e0 2b fb 0c e9 4a fa 91 fc bd e3 db 17 06 c6 b0 70 c9 06 74 71 a3 b9 79 20 6c ea e0 95 0c 24 64 91 4f c4 c8 59 ac df 5f 78 f5 33 0f b4 f7 db 73 6b 7c 3b eb 52 0c 1b d4 33 24 6d e9 d6 a5 0d de 78 fe 2c 8c 7b f5 5c 7c 38 e1 2b 1c 7a fc 18 e2 fa 05 a1 e3 b6 08 30 53 70 b6 b5 65 b8 6a 59 96 b5 cd f7 8d 69 f1 b8 34 34 33 75 e6 fa 4f bd ee c2 60 4e 59 a2 4b a3 39 cf ba 3c 17 b9 a5 dd 6f c9 f2 c4 22 8a e8 Data Ascii: $l8yF]o rmvG68vXKc7i#\|_}p^>v>VjPWMWbPJq!exN6K+Jptqy l$dOY_x3sk\|;R3$mx,{\\|8+z0SpejYi443uO`NYK9<o"
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: 57 ad f5 db fa ad f4 ad c2 8f fb e3 3d 38 e9 cc 07 c8 fb 6a 9b 00 cd 44 1a 4f 15 74 85 11 8e 9c a6 f8 84 01 ca ea 3b fd 64 94 2b f7 ff 2c 2b 86 44 5e 31 0a da f5 39 65 cd 82 67 16 54 4f bf a9 7f 2b 37 1d 51 44 06 45 56 e5 ff 23 b4 6c fa d5 27 5a f1 d8 c1 96 6d 77 d3 2b 9e c3 32 a9 d4 eb e9 96 d4 b3 5d 06 df b0 38 db 4c 2c 9d 7e f9 c8 64 7e f2 ba a2 36 79 95 2c 51 09 c4 cb 45 60 13 26 38 6b 6e 84 12 d5 82 cc 80 3e 5a 1a ad 41 0a a2 b9 06 57 a3 76 e0 ab 30 67 f6 d7 7e df e2 5c 72 6a 6e 58 4e 37 d0 c9 71 a3 5e c2 0b 8f 1c 8d 41 d2 0a 9b 70 de 46 16 30 22 a2 65 c8 60 bb ad da 60 ea a7 4b 49 87 dc b3 00 7f e1 a1 c3 71 de 65 ef a1 df fe 8f e1 be 1b f6 c7 a0 7e 9d b0 73 9f 76 98 38 bd 9a 80 1e 0f 8f d7 00 37 07 c7 1f be 9d e7 93 ed 1a 9b 75 16 69 34 8d cc 59 d2 Data Ascii: W=8jDOt;d+,+D^19egTO+7QDEV#l'Zmw+2]8L,~d~6y,QE`&8kn>ZAWv0g~\rjnXN7q^ApF0"e``KIqe~sv87ui4Y
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: a2 78 8e d3 b6 92 73 54 02 6c 17 5f b4 6e 7b 65 38 6d 57 8c 45 49 a1 62 6d f3 e2 c9 b2 13 33 a9 c6 e3 57 ce 7d fc 9a f6 3b 9e 7a 3d 22 da e2 28 d2 71 6f 81 b4 6a ee ad f3 92 25 e5 e7 e7 94 ee 62 c5 0b b6 01 b3 72 0c 6e 06 06 ec f9 9f cc 4a c2 8a 95 80 c5 8a c0 62 85 02 b4 1d 9f 6b 96 b1 b9 b9 00 52 e5 82 e5 08 9d 9f 04 63 c9 7d 8b 70 a7 74 f1 87 a3 ad cf 55 3b 34 48 0b cb 92 ac 01 66 ca 45 45 01 71 a5 0b b2 ef 9d 86 82 fc 04 0e 3f 65 6c 40 af 4b 75 b9 da 12 dc 3d 76 c5 d7 ed 5d b7 30 25 2e e7 44 2f ee 97 7d e6 fe 11 d8 73 50 57 dc 78 ef 54 0f 84 e7 7c b1 ca d0 cf ca 6c 65 fa 3e 64 4b 7e 99 8f c7 1e 8f 9b 2e de 83 f4 8b 80 ae 9f 0e 8f 3c 15 1e bc 68 3e 35 1d c3 9d 82 9c 19 97 5c 57 71 0c 7d b9 fa d7 88 53 1e 98 2e 0e c3 8f 9b 07 1a a6 3e d9 c1 5c e5 46 ff Data Ascii: xsTl_n{e8mWEIbm3W};z="(qoj%brnJbkRc}ptU;4HfEEq?el@Ku=v]0%.D/}sPWxT\|le>dK~.<h>5\Wq}S.>\F
2025-01-09 20:54:46 UTC	1369	IN	Data Raw: 84 cd 34 91 90 1b 7f 5a d0 2d 0d a6 58 48 7f ad 39 6c 4b d7 f5 aa 49 37 ad 20 c7 0d 83 1b bf ef 91 f7 d1 79 c7 8b 71 ed 6d 6f 63 f6 e7 d5 de f9 87 9e 9c 84 ae 7d af c4 94 19 8b c8 d0 24 47 cf 48 7d b1 fe 2b bd 39 cc 3e 18 c3 b4 59 4b f1 c0 93 b3 3d ff e9 39 f3 56 e1 c4 73 5e 57 a0 a1 43 b1 d2 fb cf 60 db ad da 60 ce bf 57 07 c2 88 9a 63 97 e5 69 1e 6d 7f 6e a9 98 9b 72 bd 81 a8 66 82 63 54 3b 01 1e d6 77 1b 5c 6b 36 ae 97 7e 55 21 4d 49 7d 52 cc 0c e0 42 c1 3f a0 ef 56 e3 d2 1b 94 70 7f 92 3b 46 80 eb a5 a2 f2 2c 3b 05 43 ec ef 98 55 d4 3f e4 85 24 11 e0 1e bb fb 68 1c 7b f8 4e b8 ff b1 c9 d8 79 af 3b f1 c2 ab 9f 9a cd 73 e0 ce 07 3e 40 c7 ed 2e c2 ca d5 75 78 67 ec 79 c2 28 4d d8 65 04 72 79 bb ef eb 35 37 8f f5 8e ee bd f5 74 e2 da 65 13 e0 d4 46 69 8b Data Ascii: 4Z-XH9lKI7 yqmoc}$GH}+9>YK=9Vs^WC``WcimnrfcT;w\k6~U!MI}RB?Vp;F,;CU?$h{Ny;s>@.uxgy(Mery57teFi