Edit tour

Windows Analysis Report
https://www.shinsengumiusa.com/mrloskie

Overview

General Information

Sample URL:	https://www.shinsengumiusa.com/mrloskie
Analysis ID:	1587844
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious Javascript

HTML page contains hidden URLs

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

No HTML title found

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1888,i,15600538889269617292,16567569674908108909,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4160 --field-trial-handle=1888,i,15600538889269617292,16567569674908108909,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4152 --field-trial-handle=1888,i,15600538889269617292,16567569674908108909,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.shinsengumiusa.com/mrloskie" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-10T17:49:29.419515+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50039	172.66.40.143	443	TCP
2025-01-10T17:49:32.785776+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50124	151.101.195.1	443	TCP
2025-01-10T17:49:33.686847+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50133	151.101.195.1	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 0.60.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://pay.buygoods.com/vault/v1/formframe-checko... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscated nature of the code further increase the risk. While the script may have a legitimate purpose, such as a challenge platform, the overall behavior is highly suspicious and indicative of malicious intent.

HTML page contains hidden URLs

Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x

HTTP Parser: https://nervedefend.com/upgrade-1

Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: Number of links: 0
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Number of links: 0

HTTP Parser: Base64 decoded: 1736527764.000000

HTTP Parser: HTML title missing

Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: Iframe src: https://nervedefend.com/pixels/maxweb-click?key=n9p3OB1R7PyQJqSfT9ZNPLkvMDVT7ZpR
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: Iframe src: https://www.youtube.com/embed/QZ5xuqBJH_s?mute=true&controls=0&modestbranding=1&rel=0&playsinline=1&start=0&enablejsapi=1&origin=https%3A%2F%2Fnervedefend.com&widgetid=1
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: Iframe src: https://nervedefend.com/pixels/maxweb-click?key=n9p3OB1R7PyQJqSfT9ZNPLkvMDVT7ZpR
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: Iframe src: https://www.youtube.com/embed/QZ5xuqBJH_s?mute=true&controls=0&modestbranding=1&rel=0&playsinline=1&start=0&enablejsapi=1&origin=https%3A%2F%2Fnervedefend.com&widgetid=1
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: Iframe src: https://nervedefend.com/pixels/maxweb-click?key=n9p3OB1R7PyQJqSfT9ZNPLkvMDVT7ZpR
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: Iframe src: https://www.youtube.com/embed/QZ5xuqBJH_s?mute=true&controls=0&modestbranding=1&rel=0&playsinline=1&start=0&enablejsapi=1&origin=https%3A%2F%2Fnervedefend.com&widgetid=1
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: Iframe src: https://nervedefend.com/pixels/maxweb-click?key=n9p3OB1R7PyQJqSfT9ZNPLkvMDVT7ZpR
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: Iframe src: https://www.youtube.com/embed/QZ5xuqBJH_s?mute=true&controls=0&modestbranding=1&rel=0&playsinline=1&start=0&enablejsapi=1&origin=https%3A%2F%2Fnervedefend.com&widgetid=1
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: Iframe src: https://nervedefend.com/pixels/maxweb-click?key=n9p3OB1R7PyQJqSfT9ZNPLkvMDVT7ZpR
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: Iframe src: https://www.youtube.com/embed/QZ5xuqBJH_s?mute=true&controls=0&modestbranding=1&rel=0&playsinline=1&start=0&enablejsapi=1&origin=https%3A%2F%2Fnervedefend.com&widgetid=1
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: Iframe src: https://nervedefend.com/pixels/maxweb-click?key=n9p3OB1R7PyQJqSfT9ZNPLkvMDVT7ZpR
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://buygoods.com/affiliates/go/conversion/iframe/bg?a=6802&t=1df5ed17281f7f57cd6afec32e271fa5&checkout=1&s=sessid20250110164829858
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://buygoods.com/secure/k/logo.php?m=153600&s=sessid20250110164829858
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://buygoods.com/secure/checkout/iframe?a=6802&s=sessid20250110164829858
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://go.maxweb.com/conversion/iframe?a=6988&token=e2e306dffc4e053c57e785d8331894dc&checkout=1&sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://assets.braintreegateway.com/data/logo.htm?m=null&s=2ccbe8cd1eca4fffbe1fe54953f44797
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://checkout.paypal.com/web/3.97.2/html/dispatch-frame.min.html
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://buygoods.com/affiliates/go/conversion/iframe/bg?a=6802&t=1df5ed17281f7f57cd6afec32e271fa5&checkout=1&s=sessid20250110164829858
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://buygoods.com/secure/k/logo.php?m=153600&s=sessid20250110164829858
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://buygoods.com/secure/checkout/iframe?a=6802&s=sessid20250110164829858
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://go.maxweb.com/conversion/iframe?a=6988&token=e2e306dffc4e053c57e785d8331894dc&checkout=1&sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://assets.braintreegateway.com/data/logo.htm?m=null&s=2ccbe8cd1eca4fffbe1fe54953f44797
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://checkout.paypal.com/web/3.97.2/html/dispatch-frame.min.html
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://www.paypalobjects.com/muse/analytics/index.html#frameId=9bba85e5-1b15-4dd2-9733-748c8fd35682&propertyId=8T2VCMX6GD4SG-1&flow=visitor-info&variant=analytics&mrid=8T2VCMX6GD4SG&isMobileEnabled=true&isDesktopEnabled=true&shouldCheckCountry=true&mobileVariant=analytics&mobileFlow=visitor-info&disableSetCookie=true
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://buygoods.com/affiliates/go/conversion/iframe/bg?a=6802&t=1df5ed17281f7f57cd6afec32e271fa5&checkout=1&s=sessid20250110164829858
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://buygoods.com/secure/k/logo.php?m=153600&s=sessid20250110164829858
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://buygoods.com/secure/checkout/iframe?a=6802&s=sessid20250110164829858
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://go.maxweb.com/conversion/iframe?a=6988&token=e2e306dffc4e053c57e785d8331894dc&checkout=1&sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://assets.braintreegateway.com/data/logo.htm?m=null&s=2ccbe8cd1eca4fffbe1fe54953f44797
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://checkout.paypal.com/web/3.97.2/html/dispatch-frame.min.html
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: Iframe src: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js

Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No favicon
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No favicon
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No favicon
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No favicon
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No favicon
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No favicon
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No favicon

Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No <meta name="author".. found
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No <meta name="author".. found
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No <meta name="author".. found
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No <meta name="author".. found
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No <meta name="author".. found
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No <meta name="author".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No <meta name="author".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No <meta name="author".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No <meta name="author".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No <meta name="author".. found

Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No <meta name="copyright".. found
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No <meta name="copyright".. found
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No <meta name="copyright".. found
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No <meta name="copyright".. found
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No <meta name="copyright".. found
Source: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	HTTP Parser: No <meta name="copyright".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No <meta name="copyright".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No <meta name="copyright".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No <meta name="copyright".. found
Source: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: mwebexplorerpro.com to https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50039 -> 172.66.40.143:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50124 -> 151.101.195.1:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50133 -> 151.101.195.1:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.138
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.138
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.138
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.138
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.138
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.138
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /mrloskie HTTP/1.1Host: www.shinsengumiusa.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6988/2566/2/? HTTP/1.1Host: mwebexplorerpro.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 HTTP/1.1Host: nervedefend.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/app.css?id=409e9c6c9baad5c9b446 HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/custom/image15.jpg HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/custom/image13.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/custom/image3.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/custom/image2.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/custom/image15.jpg HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/custom/image13.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/custom/bg.jpg HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/css/app.css?id=409e9c6c9baad5c9b446Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/products/prod1/1-bottle.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /js/app.js?id=a5d2a03ff186afa79e79 HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /pixels/maxweb-click?key=n9p3OB1R7PyQJqSfT9ZNPLkvMDVT7ZpR HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/custom/image10.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /track/?a=6802&firstcookie=0&tracking_redirect=&referrer=&sessid2=&product=prod7,prod8,prod9,prod11&caller_url=https%3A%2F%2Fnervedefend.com%2Freport%3Faff_id%3D1270%26subid2%3D6988_sessid20250110164723474%26subid%3D2566 HTTP/1.1Host: tracking.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nervedefend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/custom/image6.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/custom/image2.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/custom/image7.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/custom/image14.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /conversion/iframe/?a=6988&token=e2e306dffc4e053c57e785d8331894dc HTTP/1.1Host: go.maxweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nervedefend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/custom/image12.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/custom/bg.jpg HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tObUZ0Y3dKMGZoS24wb2xJQjBlaHFLeWJ1eXFxWHo5SDVJanN3NWZ0U1c1VVl1dC8yWkovRnVlUVNTTGozT0MvMmRTSHdpUEFzM1grMWs9IiwibWFjIjoiZmE1OTc4NjRlYTgwYzVhM2FjOTMyYTUyYzRlZWY2MzE4OTI5NmJkYzI1MjVhZWUyMGQ3MDc0ZmJjYzNmNTE0ZiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /track/?a=6802&firstcookie=0&tracking_redirect=&referrer=&sessid2=&product=prod7,prod8,prod9,prod11&caller_url=https%3A%2F%2Fnervedefend.com%2Freport%3Faff_id%3D1270%26subid2%3D6988_sessid20250110164723474%26subid%3D2566 HTTP/1.1Host: tracking.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/products/prod1/1-bottle.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /iframe_api HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nervedefend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/app.js?id=a5d2a03ff186afa79e79 HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273
Source: global traffic	HTTP traffic detected: GET /images/custom/image8.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/image11.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/image5.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/image6.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/image10.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/prod7/1-bottle.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/image14.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/prod9/6-bottles.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/prod8/3-bottles.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/image3.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/image7.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/image9.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/app/buygoods.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/image12.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/prod11/6-bottles.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/image8.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/exit-popup.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/image5.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /s/player/3ede36f2/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nervedefend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Rctl5ZNC77k; VISITOR_INFO1_LIVE=dEH-6bbwSQ4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSw%3D%3D; __Secure-ROLLOUT_TOKEN=CMyU3feu7vzFGBDG1ozezeuKAxjG1ozezeuKAw%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/products/prod7/1-bottle.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/prod9/6-bottles.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/image9.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/app/buygoods.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/prod11/6-bottles.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/exit-popup.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /vi/QZ5xuqBJH_s/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGDwgVihlMA8=&rs=AOn4CLC0SO246uCSmQDlqeODAlq3F_5aGw HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/8p-ZUt2O_r6IumY5TzUY2RZ4QvEtVfvf_MYYDjqPK3M.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_m9vnpvLDuCjN3benUeTYbdwWWXR-SG2Q9WZSq15GVI1DuDYBub2lf4hmef0g1yidFIrw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/QZ5xuqBJH_s/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGDwgVihlMA8=&rs=AOn4CLC0SO246uCSmQDlqeODAlq3F_5aGw HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/8p-ZUt2O_r6IumY5TzUY2RZ4QvEtVfvf_MYYDjqPK3M.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_m9vnpvLDuCjN3benUeTYbdwWWXR-SG2Q9WZSq15GVI1DuDYBub2lf4hmef0g1yidFIrw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/custom/shortcut-icon.png HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8Jofg%3D&alr=yes&sig=AJfQdSswRgIhAMsw4iCfnTUoW99LmFd1TsZMwZeHmDcP3Zfp7T31mxktAiEA0jZZXLu6t03wmKdGb1ZC9ul1-LTkhV2KWIaCV2OQMnA%3D&cpn=2NFxj4Y_Q_IWVnts&cver=1.20250107.01.00&range=0-70904&rn=2&rbuf=0&pot=IjgqmyqYTRpl12n8XvB4zk3vZPZg8k6qZMlk2EDSRPR9o2jxY9Bp_GDNf-Nj3m38a_x57A-obr4Z3w==&ump=1&srfvp=1 HTTP/1.1Host: rr1---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/custom/image11.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&mime=video%2Fmp4&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=27145031&dur=2881.399&lmt=1736405030972049&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8Jofg%3D&alr=yes&sig=AJfQdSswRgIhAK50UKcTq-xaCumNUDrTOIbkZFfrnjaiwxte0gh95wyAAiEAvNeEyX7ZIjVfroDBmG5aRcuSflidIjJHY2hL-o5SCr4%3D&cpn=2NFxj4Y_Q_IWVnts&cver=1.20250107.01.00&range=0-227244&rn=1&rbuf=0&pot=IjiG84bw4XLJv8WU8pjUpuGHyJ7MmuLCyKHIsOy66JzRy8SZz7jFlMyl04vPtsGUx5TVhKPAwta1tw==&ump=1&srfvp=1 HTTP/1.1Host: rr1---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8Jofg%3D&alr=yes&sig=AJfQdSswRgIhAMsw4iCfnTUoW99LmFd1TsZMwZeHmDcP3Zfp7T31mxktAiEA0jZZXLu6t03wmKdGb1ZC9ul1-LTkhV2KWIaCV2OQMnA%3D&cpn=2NFxj4Y_Q_IWVnts&cver=1.20250107.01.00&range=70905-136440&rn=3&rbuf=3593&pot=IjislKySyxXj2e_z2P_-wcvg4vnm_cil4sbi18bdwvv7rO7-5d_v8-bC-ezl0evz7fP_44mn6LGf0A==&ump=1&srfvp=1 HTTP/1.1Host: rr1---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8Jofg%3D&alr=yes&sig=AJfQdSswRgIhAMsw4iCfnTUoW99LmFd1TsZMwZeHmDcP3Zfp7T31mxktAiEA0jZZXLu6t03wmKdGb1ZC9ul1-LTkhV2KWIaCV2OQMnA%3D&cpn=2NFxj4Y_Q_IWVnts&cver=1.20250107.01.00&range=136441-285679&rn=4&rbuf=7123&pot=Ijjf2t_cuFuQl5y9q7GNj7iukbeVs7vrkYiRmbWTsbWI4p2wlpGcvZWMiqKWn5i9nr2Mrfrpm__sng==&ump=1&srfvp=1 HTTP/1.1Host: rr1---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8Jofg%3D&alr=yes&sig=AJfQdSswRgIhAMsw4iCfnTUoW99LmFd1TsZMwZeHmDcP3Zfp7T31mxktAiEA0jZZXLu6t03wmKdGb1ZC9ul1-LTkhV2KWIaCV2OQMnA%3D&cpn=2NFxj4Y_Q_IWVnts&cver=1.20250107.01.00&range=285680-584897&rn=5&rbuf=14437&pot=Iji7C7sN3Ir0Rvhsz2DpXtx_9WbxYt869Vn1SNFC1WTsM_lh8kD4bPFd7nPyTvxs-mzofJ44_y6ITw==&ump=1&srfvp=1 HTTP/1.1Host: rr1---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/custom/shortcut-icon.png HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_m9vnpvLDuCjN3benUeTYbdwWWXR-SG2Q9WZSq15GVI1DuDYBub2lf4hmef0g1yidFIrw=s88-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&mime=video%2Fmp4&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=27145031&dur=2881.399&lmt=1736405030972049&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8Jofg%3D&alr=yes&sig=AJfQdSswRgIhAK50UKcTq-xaCumNUDrTOIbkZFfrnjaiwxte0gh95wyAAiEAvNeEyX7ZIjVfroDBmG5aRcuSflidIjJHY2hL-o5SCr4%3D&cpn=2NFxj4Y_Q_IWVnts&cver=1.20250107.01.00&range=227245-1901313&rn=6&rbuf=15398&pot=Ijh81nzQG1czmD-xCL0ugxuiMrs2vxjnMoQylRafErkr7j68NZ0_sTaAKa41kzuxPbEvoVnlOPNPkg==&ump=1&srfvp=1 HTTP/1.1Host: rr1---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_m9vnpvLDuCjN3benUeTYbdwWWXR-SG2Q9WZSq15GVI1DuDYBub2lf4hmef0g1yidFIrw=s88-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8Jofg%3D&alr=yes&sig=AJfQdSswRgIhAMsw4iCfnTUoW99LmFd1TsZMwZeHmDcP3Zfp7T31mxktAiEA0jZZXLu6t03wmKdGb1ZC9ul1-LTkhV2KWIaCV2OQMnA%3D&cpn=2NFxj4Y_Q_IWVnts&cver=1.20250107.01.00&range=584898-984853&rn=7&rbuf=22509&pot=MnR4Ip6TwWZ7oXgaU07DD7dbgtm6GJjA3Pa0uXyugLlhZMdov7rq7XbYIHYbMT3-0z85FdUq8hA5_hmx6xZD4GpbkYMcoYjfHSReg58_J_XeVR1bvCd57BMpvEJKDc2EaeuzJIcaoidmNTc2OFB0OqtvO8yHSA==&ump=1&srfvp=1 HTTP/1.1Host: rr1---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/QZ5xuqBJH_s/mqdefault.jpg?sqp=-oaymwEmCMACELQB8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGDwgVihlMA8=&rs=AOn4CLCqf0M8zQlGVdPdvj1JueShXokisQ HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/QZ5xuqBJH_s/mqdefault.jpg?sqp=-oaymwEmCMACELQB8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGDwgVihlMA8=&rs=AOn4CLCqf0M8zQlGVdPdvj1JueShXokisQ HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8Jofg%3D&alr=yes&sig=AJfQdSswRgIhAMsw4iCfnTUoW99LmFd1TsZMwZeHmDcP3Zfp7T31mxktAiEA0jZZXLu6t03wmKdGb1ZC9ul1-LTkhV2KWIaCV2OQMnA%3D&cpn=2NFxj4Y_Q_IWVnts&cver=1.20250107.01.00&range=984854-1535580&rn=8&rbuf=33019&pot=MnR4Ip6TwWZ7oXgaU07DD7dbgtm6GJjA3Pa0uXyugLlhZMdov7rq7XbYIHYbMT3-0z85FdUq8hA5_hmx6xZD4GpbkYMcoYjfHSReg58_J_XeVR1bvCd57BMpvEJKDc2EaeuzJIcaoidmNTc2OFB0OqtvO8yHSA==&ump=1&srfvp=1 HTTP/1.1Host: rr1---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/custom/bg-alt.jpg HTTP/1.1Host: nervedefend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nervedefend.com/css/app.css?id=409e9c6c9baad5c9b446Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/custom/bg-alt.jpg HTTP/1.1Host: nervedefend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcxMTMifQ%3D%3D; visited=1736527682273; _gid=GA1.2.765227619.1736527682; _gat_gtag_UA_62785402_67=1; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; campaign_id=; referrer=8.46.123.189::nervedefend.com%2Freport; _gat_gtag_UA_62785402_76=1; _ga=GA1.1.1460441912.1736527682; _ga_YYYMFT7FN8=GS1.1.1736527682.1.0.1736527682.0.0.0
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8Jofg%3D&alr=yes&sig=AJfQdSswRgIhAMsw4iCfnTUoW99LmFd1TsZMwZeHmDcP3Zfp7T31mxktAiEA0jZZXLu6t03wmKdGb1ZC9ul1-LTkhV2KWIaCV2OQMnA%3D&cpn=2NFxj4Y_Q_IWVnts&cver=1.20250107.01.00&range=1535581-2101350&rn=9&rbuf=51070&pot=MnR4Ip6TwWZ7oXgaU07DD7dbgtm6GJjA3Pa0uXyugLlhZMdov7rq7XbYIHYbMT3-0z85FdUq8hA5_hmx6xZD4GpbkYMcoYjfHSReg58_J_XeVR1bvCd57BMpvEJKDc2EaeuzJIcaoidmNTc2OFB0OqtvO8yHSA==&ump=1&srfvp=1 HTTP/1.1Host: rr1---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&mime=video%2Fmp4&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=27145031&dur=2881.399&lmt=1736405030972049&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8Jofg%3D&alr=yes&sig=AJfQdSswRgIhAK50UKcTq-xaCumNUDrTOIbkZFfrnjaiwxte0gh95wyAAiEAvNeEyX7ZIjVfroDBmG5aRcuSflidIjJHY2hL-o5SCr4%3D&cpn=2NFxj4Y_Q_IWVnts&cver=1.20250107.01.00&range=1901314-3945052&rn=10&rbuf=61736&pot=MnR4Ip6TwWZ7oXgaU07DD7dbgtm6GJjA3Pa0uXyugLlhZMdov7rq7XbYIHYbMT3-0z85FdUq8hA5_hmx6xZD4GpbkYMcoYjfHSReg58_J_XeVR1bvCd57BMpvEJKDc2EaeuzJIcaoidmNTc2OFB0OqtvO8yHSA==&ump=1&srfvp=1 HTTP/1.1Host: rr1---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&mime=video%2Fmp4&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=17089996&dur=2881.399&lmt=1736403020488492&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8Jofg%3D&alr=yes&sig=AJfQdSswRQIhAOl7O3LN4rsIX_gBlmkBnOlLSiQ5p7sPA1fH_qt1XBSTAiA7PsAIC90OWjd3es6Eiz-E5ikqtRQk7P4VUPi_J4Eb6A%3D%3D&cpn=2NFxj4Y_Q_IWVnts&cver=1.20250107.01.00&range=0-7223&rn=11&rbuf=0&pot=MnR4Ip6TwWZ7oXgaU07DD7dbgtm6GJjA3Pa0uXyugLlhZMdov7rq7XbYIHYbMT3-0z85FdUq8hA5_hmx6xZD4GpbkYMcoYjfHSReg58_J_XeVR1bvCd57BMpvEJKDc2EaeuzJIcaoidmNTc2OFB0OqtvO8yHSA==&ump=1&srfvp=1 HTTP/1.1Host: rr1---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x HTTP/1.1Host: www.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://nervedefend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8Jofg%3D&alr=yes&sig=AJfQdSswRgIhAMsw4iCfnTUoW99LmFd1TsZMwZeHmDcP3Zfp7T31mxktAiEA0jZZXLu6t03wmKdGb1ZC9ul1-LTkhV2KWIaCV2OQMnA%3D&cpn=2NFxj4Y_Q_IWVnts&cver=1.20250107.01.00&range=2101351-2657719&rn=12&rbuf=81070&pot=MnR4Ip6TwWZ7oXgaU07DD7dbgtm6GJjA3Pa0uXyugLlhZMdov7rq7XbYIHYbMT3-0z85FdUq8hA5_hmx6xZD4GpbkYMcoYjfHSReg58_J_XeVR1bvCd57BMpvEJKDc2EaeuzJIcaoidmNTc2OFB0OqtvO8yHSA==&ump=1&srfvp=1 HTTP/1.1Host: rr1---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x HTTP/1.1Host: buygoods.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://nervedefend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x HTTP/1.1Host: buygoods.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://nervedefend.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/css/chk.css?v=4 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /assets/checkout/css/bootstrap.min.css HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /images/buygoodslogonew.png HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/visa-cvv.jpg HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/js/client.min.js HTTP/1.1Host: js.braintreegateway.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/js/data-collector.min.js HTTP/1.1Host: js.braintreegateway.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/js/paypal-checkout.min.js HTTP/1.1Host: js.braintreegateway.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/buygoodslogonew.png HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/amex-cvv.jpg HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/trust-guard.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/visa-cvv.jpg HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/js/client.min.js HTTP/1.1Host: js.braintreegateway.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/js/data-collector.min.js HTTP/1.1Host: js.braintreegateway.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/fontawesome.js HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/mcafee.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/md5.min.js HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /lib/v1/js/vaultFrame.js?v=65 HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/dictionary.js?v=29 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/badge-60-day.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/app.js?v=1.0.12 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/js/paypal-checkout.min.js HTTP/1.1Host: js.braintreegateway.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/paypal-cs-conversion.js?v=7 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/places.js?v=2 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/amex-cvv.jpg HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/trust-guard.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /cardinalcruise/v1/songbird.js HTTP/1.1Host: songbird.cardinalcommerce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/md5.min.js HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /v1/address?id=corporateaddress HTTP/1.1Host: display.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/mcafee.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/fontawesome.js HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://buygoods.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/dictionary.js?v=29 HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/badge-60-day.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/paypal-cs-conversion.js?v=7 HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /lib/v1/js/vaultFrame.js?v=65 HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse
Source: global traffic	HTTP traffic detected: GET /track/?a=6802&firstcookie=0&tracking_redirect=&referrer=https%3A%2F%2Fnervedefend.com%2F&sessid2=sessid20250110164829858&product=prod9&is_checkout=1&caller_url=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid20250110164829858%26aff_id%3D1270%26sid%3D2566%26sid2%3D6988_sessid20250110164723474%26account_id%3D6802%26product_codename%3Dprod9%26redirect%3DaHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x HTTP/1.1Host: tracking.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEJgUPmnkKW5JETNtVJGZX1NbzGS8DXQqj3aVkHKS
Source: global traffic	HTTP traffic detected: GET /us1/v5/datadog-rum.js HTTP/1.1Host: www.datadoghq-browser-agent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/places.js?v=2 HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /secure/checkout/assets/js/app.js?v=1.0.12 HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
Source: global traffic	HTTP traffic detected: GET /cardinalcruise/v1/songbird.js HTTP/1.1Host: songbird.cardinalcommerce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/address?id=corporateaddress HTTP/1.1Host: display.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEeyx5cparoLdJ
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?a=6802&firstcookie=0&tracking_redirect=&referrer=https%3A%2F%2Fnervedefend.com%2F&sessid2=sessid20250110164829858&product=prod9&is_checkout=1&caller_url=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid20250110164829858%26aff_id%3D1270%26sid%3D2566%26sid2%3D6988_sessid20250110164723474%26account_id%3D6802%26product_codename%3Dprod9%26redirect%3DaHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x HTTP/1.1Host: tracking.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEJgUPmnkKW5JETNtVJGZX1NbzGS8DXQqj3aVkHKS; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858
Source: global traffic	HTTP traffic detected: GET /productimages/6802/34/6_bo_lesecfs0k_p_g_resized333.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858
Source: global traffic	HTTP traffic detected: GET /v1/terms?id=terms HTTP/1.1Host: display.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEeyx5cparoLdJ; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858
Source: global traffic	HTTP traffic detected: GET /secure/checkout/init HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858
Source: global traffic	HTTP traffic detected: GET /vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561 HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858
Source: global traffic	HTTP traffic detected: GET /cardinalcruise/v1/b109e0c6fd2a5b6b93b2/1.b109e0c6fd2a5b6b93b2.songbird.js HTTP/1.1Host: includes.ccdc02.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://buygoods.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /affiliates/go/conversion/iframe/bg?a=6802&t=1df5ed17281f7f57cd6afec32e271fa5&checkout=1&s=sessid20250110164829858 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; _dd_s=rum=1&id=4a68f3de-05b8-4dc3-92f1-e171ff820f1f&created=1736527766939&expire=1736528666940
Source: global traffic	HTTP traffic detected: GET /v1/terms?id=terms HTTP/1.1Host: display.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEeyx5cparoLdJ; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: yomali.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=02DiuDQJEcNyeUjVzptTfY3gThbRJjaqEebNXvXSB78Sp
Source: global traffic	HTTP traffic detected: GET /us1/v5/datadog-rum.js HTTP/1.1Host: www.datadoghq-browser-agent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /productimages/6802/34/6_bo_lesecfs0k_p_g_resized333.png HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /css/bootstrap.min.css HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /css/v1/formframe-checkout.css HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/visa.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/mastercard.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/amex.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/discover.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /secure/k/logo.php?m=153600&s=sessid20250110164829858 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; _dd_s=rum=1&id=4a68f3de-05b8-4dc3-92f1-e171ff820f1f&created=1736527766939&expire=1736528666940
Source: global traffic	HTTP traffic detected: GET /secure/checkout/iframe?a=6802&s=sessid20250110164829858 HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; _dd_s=rum=1&id=4a68f3de-05b8-4dc3-92f1-e171ff820f1f&created=1736527766939&expire=1736528666940
Source: global traffic	HTTP traffic detected: GET /conversion/iframe?a=6988&token=e2e306dffc4e053c57e785d8331894dc&checkout=1&sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x HTTP/1.1Host: go.maxweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js? HTTP/1.1Host: buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; _dd_s=rum=1&id=4a68f3de-05b8-4dc3-92f1-e171ff820f1f&created=1736527766939&expire=1736528666940
Source: global traffic	HTTP traffic detected: GET /cardinalcruise/v1/b109e0c6fd2a5b6b93b2/1.b109e0c6fd2a5b6b93b2.songbird.js HTTP/1.1Host: includes.ccdc02.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js? HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; _dd_s=rum=1&id=4a68f3de-05b8-4dc3-92f1-e171ff820f1f&created=1736527766939&expire=1736528666940
Source: global traffic	HTTP traffic detected: GET /img/amex.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/jcb.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /js/v1/formframe-checkout.js?v=7 HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /js/fontawesome.js HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/mastercard.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/visa.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /js/cleave.min.js HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /img/discover.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /logo.htm?s=sessid20250110164829858&m=153600 HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.7.1.min.js HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /da/r/fb.js HTTP/1.1Host: c.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bootstrap.bundle.min.js HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /sdk/js?components=buttons&currency=USD&intent=authorize&client-id=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq HTTP/1.1Host: www.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/3.97.2/html/dispatch-frame.min.html HTTP/1.1Host: checkout.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/logo.htm?m=null&s=2ccbe8cd1eca4fffbe1fe54953f44797 HTTP/1.1Host: assets.braintreegateway.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql HTTP/1.1Host: payments.braintree-api.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/jcb.svg HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/8ffe2900dc024304 HTTP/1.1Host: buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; _dd_s=rum=1&id=4a68f3de-05b8-4dc3-92f1-e171ff820f1f&created=1736527766939&expire=1736528666940
Source: global traffic	HTTP traffic detected: GET /js/fontawesome.js HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /js/v1/formframe-checkout.js?v=7 HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /js/cleave.min.js HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /images/transp.gif HTTP/1.1Host: www.softwareprojects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssl.kaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /da/r/fb.js HTTP/1.1Host: c.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js HTTP/1.1Host: c.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; cf_clearance=LaivmPGmFFrL9MmOjnV.Th4Cpon711Fw.K8i0jmgU2M-1736527769-1.2.1.1-NjsROI.PYJFgyoKYiW8DZdE8WMwo2u2LG2fi2LxqaVVjLTuq797xGsIaUcr3R3H6GjOeiB4FeFBw25cWdjItfymXtpX0uA426iQwcpfyaJl10imnefx3g3x_dayXJ2rr.k9N6Avi4.qElpUqm63jG3rY51jNXTGWmisxnZ9TC1k1DKAMAEzamkfhzBXS.lcM4Yc4ajfzpEZAE0B3uLMF.ylCcu.T8LHPqgB5hlhUgpOTeygG_WksT9Oi9ZoA8aeLFWMAaH121oM4Yf_LBH.nT_9fCtZb5Dyfm19cFsL_fdcUaZ99GvGfYRCv4uo2GxcT36LNXRYehWAINrjWnif.jiu65MEgBSbY8BrXtfkhtvzldWWBoyfPpQKg1v9Wftk2
Source: global traffic	HTTP traffic detected: GET /sdk/js?components=buttons&currency=USD&intent=authorize&client-id=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.7.1.min.js HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /v1/r/d/b/p3?f=098ed052bf3e3a35536a73f4ffde6325&s=BRAINTREE_SIGNIN HTTP/1.1Host: c6.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bootstrap.bundle.min.js HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /logo.htm?m=null&s=2ccbe8cd1eca4fffbe1fe54953f44797 HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: k=c5db6720f30a4112ae0d263443e70561
Source: global traffic	HTTP traffic detected: GET /tagmanager/pptm.js?id=buygoods.com&t=xo&v=5.0.465&source=payments_sdk&client_id=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq&comp=buttons&disableSetCookie=true&vault=false HTTP/1.1Host: www.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /counter.cgi?i=127.0.0.1&p=098ed052bf3e3a35536a73f4ffde6325&t=1736527768.526&a=14 HTTP/1.1Host: b.stats.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/r/d/b/w?f=098ed052bf3e3a35536a73f4ffde6325&s=BRAINTREE_SIGNIN&d=%7B%22rDT%22%3A%2251831%2C51595%2C51253%3A51829%2C51593%2C51246%3A21090%2C20853%2C20508%3A36458%2C36219%2C35878%3A15964%2C15721%2C15397%3A21084%2C20840%2C20508%3A26207%2C25960%2C25631%3A31326%2C31073%2C30804%3A51818%2C51550%2C51256%3A21080%2C20806%2C20510%3A46695%2C46411%2C46177%3A26199%2C25912%2C25650%3A26185%2C25887%2C25663%3A10807%2C10501%2C10262%3A26168%2C25850%2C25632%3A51772%2C51440%2C51244%3A41516%2C41163%2C41000%3A15882%2C15506%2C15383%3A26114%2C25722%2C25630%3A10709%2C10305%2C10263%3A18411%2C22%22%7D HTTP/1.1Host: c.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js? HTTP/1.1Host: pay.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; cf_clearance=LaivmPGmFFrL9MmOjnV.Th4Cpon711Fw.K8i0jmgU2M-1736527769-1.2.1.1-NjsROI.PYJFgyoKYiW8DZdE8WMwo2u2LG2fi2LxqaVVjLTuq797xGsIaUcr3R3H6GjOeiB4FeFBw25cWdjItfymXtpX0uA426iQwcpfyaJl10imnefx3g3x_dayXJ2rr.k9N6Avi4.qElpUqm63jG3rY51jNXTGWmisxnZ9TC1k1DKAMAEzamkfhzBXS.lcM4Yc4ajfzpEZAE0B3uLMF.ylCcu.T8LHPqgB5hlhUgpOTeygG_WksT9Oi9ZoA8aeLFWMAaH121oM4Yf_LBH.nT_9fCtZb5Dyfm19cFsL_fdcUaZ99GvGfYRCv4uo2GxcT36LNXRYehWAINrjWnif.jiu65MEgBSbY8BrXtfkhtvzldWWBoyfPpQKg1v9Wftk2
Source: global traffic	HTTP traffic detected: GET /smart/buttons?fundingSource=paypal&style.label=pay&style.layout=horizontal&style.color=blue&style.shape=rect&style.tagline=false&style.menuPlacement=below&onShippingChange=true&allowBillingPayments=true&applePaySupport=false&buttonSessionID=uid_6ed38f3ec1_mty6ndk6mjk&customerId=&clientID=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq&clientMetadataID=uid_6ce8a16bbf_mty6ndk6mjk&commit=true&components.0=buttons&currency=USD&debug=false&disableSetCookie=true&env=production&experiment.enableVenmo=false&experiment.venmoVaultWithoutPurchase=false&experiment.venmoWebEnabled=false&flow=purchase&fundingEligibility=eyJwYXlwYWwiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sInBheWxhdGVyIjp7ImVsaWdpYmxlIjp0cnVlLCJ2YXVsdGFibGUiOmZhbHNlLCJwcm9kdWN0cyI6eyJwYXlJbjMiOnsiZWxpZ2libGUiOmZhbHNlLCJ2YXJpYW50IjpudWxsfSwicGF5SW40Ijp7ImVsaWdpYmxlIjpmYWxzZSwidmFyaWFudCI6bnVsbH0sInBheWxhdGVyIjp7ImVsaWdpYmxlIjp0cnVlLCJ2YXJpYW50IjpudWxsfX19LCJjYXJkIjp7ImVsaWdpYmxlIjp0cnVlLCJicmFuZGVkIjp0cnVlLCJpbnN0YWxsbWVudHMiOmZhbHNlLCJ2ZW5kb3JzIjp7InZpc2EiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sIm1hc3RlcmNhcmQiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sImFtZXgiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sImRpc2NvdmVyIjp7ImVsaWdpYmxlIjp0cnVlLCJ2YXVsdGFibGUiOnRydWV9LCJoaXBlciI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhdWx0YWJsZSI6ZmFsc2V9LCJlbG8iOnsiZWxpZ2libGUiOmZhbHNlLCJ2YXVsdGFibGUiOnRydWV9LCJqY2IiOnsiZWxpZ2libGUiOmZhbHNlLCJ2YXVsdGFibGUiOnRydWV9LCJtYWVzdHJvIjp7ImVsaWdpYmxlIjp0cnVlLCJ2YXVsdGFibGUiOnRydWV9LCJkaW5lcnMiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sImN1cCI6eyJlbGlnaWJsZSI6dHJ1ZSwidmF1bHRhYmxlIjp0cnVlfX0sImd1ZXN0RW5hYmxlZCI6ZmFsc2V9LCJ2ZW5tbyI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhdWx0YWJsZSI6ZmFsc2V9LCJpdGF1Ijp7ImVsaWdpYmxlIjpmYWxzZX0sImNyZWRpdCI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJhcHBsZXBheSI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJzZXBhIjp7ImVsaWdpYmxlIjpmYWxzZX0sImlkZWFsIjp7ImVsaWdpYmxlIjpmYWxzZX0sImJhbmNvbnRhY3QiOnsiZWxpZ2libGUiOmZhbHNlfSwiZ2lyb3BheSI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJlcHMiOnsiZWxpZ2libGUiOmZhbHNlfSwic29mb3J0Ijp7ImVsaWdpYmxlIjpmYWxzZX0sIm15YmFuayI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJwMjQiOnsiZWxpZ2libGUiOmZhbHNlfSwid2VjaGF0cGF5Ijp7ImVsaWdpYmxlIjpmYWxzZX0sInBheXUiOnsiZWxpZ2libGUiOmZhbHNlfSwiYmxpayI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJ0cnVzdGx5Ijp7ImVsaWdpYmxlIjpmYWxzZX0sIm94eG8iOnsiZWxpZ2libGUiOmZhbHNlfSwiYm9sZXRvIjp7ImVsaWdpYmxlIjpmYWxzZX0sImJvbGV0b2JhbmNhcmlvIjp7ImVsaWdpYmxlIjpmYWxzZX0sIm1lcmNhZG9wYWdvIjp7ImVsaWdpYmxlIjpmYWxzZX0sIm11bHRpYmFuY28iOnsiZWxpZ2libGUiOmZhbHNlfSwic2F0aXNwYXkiOnsiZWxpZ2libGUiOmZhbHNlfSwicGFpZHkiOnsiZWxpZ2libGUiOmZhbHNlfX0&intent=authorize&locale.country=US&locale.lang=en&hasShippingCallback=true&platform=desktop&renderedButtons.0=paypal&sessionID=uid_6ce8a16bbf_mty6ndk6mjk&sdkCorrelationID=prebuild&sdkMeta=eyJ1cmwiOiJodHRwczovL3d3dy5wYXlwYWwuY29tL3Nkay9qcz9jb21wb25lbnRzPWJ1dHRvbnMmY3VycmVuY3k9VVNEJmludGVudD1hdXRob3JpemUmY2xpZW50LWlkPUFXU2ZaRFdWZmVhV194UEh6dmNJU1I3VU5IcnlvWVNkUnd3ZTFxOEs0VjRMX3FqSGdUVl9CVERfVnN3dDFJel81aEhweTEzYzVEcEV3OXRxIiwi
Source: global traffic	HTTP traffic detected: GET /js-sdk-logos/2.2.7/paypal-white.svg HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/transp.gif HTTP/1.1Host: www.softwareprojects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tagmanager/pptm.js?id=buygoods.com&t=xo&v=5.0.465&source=payments_sdk&client_id=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq&comp=buttons&disableSetCookie=true&vault=false HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /da/r/fb.js HTTP/1.1Host: c.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/r/d/b/p3?f=098ed052bf3e3a35536a73f4ffde6325&s=BRAINTREE_SIGNIN HTTP/1.1Host: c6.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /muse/muse.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3A8T2VCMX6GD4SG-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3A8T2VCMX6GD4SG-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a76c98f4-6469-4316-9f25-c961ba7f91b9&fltp=analytics&mrid=8T2VCMX6GD4SG&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=BuyGoods%20-%20Secure%20Checkout&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1736527770891&g=300&completeurl=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid20250110164829858%26aff_id%3D1270%26sid%3D2566%26sid2%3D6988_sessid20250110164723474%26account_id%3D6802%26product_codename%3Dprod9%26redirect%3DaHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x&ru=https%3A%2F%2Fnervedefend.com%2F&disableSetCookie=true HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /md HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: k=c5db6720f30a4112ae0d263443e70561
Source: global traffic	HTTP traffic detected: GET /counter2.cgi?i=127.0.0.1&p=098ed052bf3e3a35536a73f4ffde6325&t=1736527768.526&a=14 HTTP/1.1Host: lhr.stats.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8xnhgfcmq7d3k99b HTTP/1.1Host: client-analytics.braintreegateway.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js? HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /js-sdk-logos/2.2.7/paypal-white.svg HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /da/r/fb.js HTTP/1.1Host: c.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3A8T2VCMX6GD4SG-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3A8T2VCMX6GD4SG-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a76c98f4-6469-4316-9f25-c961ba7f91b9&fltp=analytics&mrid=8T2VCMX6GD4SG&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=BuyGoods%20-%20Secure%20Checkout&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1736527770891&g=300&completeurl=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid20250110164829858%26aff_id%3D1270%26sid%3D2566%26sid2%3D6988_sessid20250110164723474%26account_id%3D6802%26product_codename%3Dprod9%26redirect%3DaHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x&ru=https%3A%2F%2Fnervedefend.com%2F&disableSetCookie=true HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fin HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: k=c5db6720f30a4112ae0d263443e70561
Source: global traffic	HTTP traffic detected: GET /sdk/js?components=buttons&currency=USD&intent=authorize&client-id=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq HTTP/1.1Host: www.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/smart/buttons?fundingSource=paypal&style.label=pay&style.layout=horizontal&style.color=blue&style.shape=rect&style.tagline=false&style.menuPlacement=below&onShippingChange=true&allowBillingPayments=true&applePaySupport=false&buttonSessionID=uid_6ed38f3ec1_mty6ndk6mjk&customerId=&clientID=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq&clientMetadataID=uid_6ce8a16bbf_mty6ndk6mjk&commit=true&components.0=buttons&currency=USD&debug=false&disableSetCookie=true&env=production&experiment.enableVenmo=false&experiment.venmoVaultWithoutPurchase=false&experiment.venmoWebEnabled=false&flow=purchase&fundingEligibility=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
Source: global traffic	HTTP traffic detected: GET /muse/muse.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /md HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: k=c5db6720f30a4112ae0d263443e70561
Source: global traffic	HTTP traffic detected: GET /muse/analytics/index.html HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/8ffe2916d9208cee HTTP/1.1Host: pay.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /8xnhgfcmq7d3k99b HTTP/1.1Host: client-analytics.braintreegateway.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /counter2.cgi?i=127.0.0.1&p=098ed052bf3e3a35536a73f4ffde6325&t=1736527768.526&a=14 HTTP/1.1Host: lhr.stats.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/r/d/b/p2 HTTP/1.1Host: c.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg01.phx
Source: global traffic	HTTP traffic detected: GET /v1/r/d/b/p1 HTTP/1.1Host: c.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg01.phx
Source: global traffic	HTTP traffic detected: GET /ts?pgrp=muse%3Aoffer%3A%3A%3A8T2VCMX6GD4SG-1&page=muse%3Aoffer%3A%3A%3A8T2VCMX6GD4SG-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a76c98f4-6469-4316-9f25-c961ba7f91b9&es=visitorInfoFlowStarted&mrid=8T2VCMX6GD4SG&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=BuyGoods%20-%20Secure%20Checkout&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1736527772897&g=300&completeurl=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid20250110164829858%26aff_id%3D1270%26sid%3D2566%26sid2%3D6988_sessid20250110164723474%26account_id%3D6802%26product_codename%3Dprod9%26redirect%3DaHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x&disableSetCookie=true HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_f=rHZjJoDR3I14mKuoFSg84m4EYqyasYSX_ZOVyElttkmyCQeHZOOwb_o0osa0jJOA5vkODu27_N9ygipVrUXbBkdC0rPN2gTpkCHmf0; KHcl0EuY7AKSMgfvHl7J5E7hPtK=IL0QHf_kdSJW5hvcP4b6aUgIAT86essU0Mr9kqvArOSifiR4HbzSJFA-3DbVuzRPXGkqLHJNeW8z3-x4; l7_az=dcg01.phx
Source: global traffic	HTTP traffic detected: GET /muse/noop.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.paypalobjects.com/muse/analytics/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /md HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: k=c5db6720f30a4112ae0d263443e70561
Source: global traffic	HTTP traffic detected: GET /8xnhgfcmq7d3k99b HTTP/1.1Host: client-analytics.braintreegateway.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /muse/noop.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?pgrp=muse%3Aoffer%3A%3A%3A8T2VCMX6GD4SG-1&page=muse%3Aoffer%3A%3A%3A8T2VCMX6GD4SG-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a76c98f4-6469-4316-9f25-c961ba7f91b9&es=visitorInfoFlowStarted&mrid=8T2VCMX6GD4SG&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=BuyGoods%20-%20Secure%20Checkout&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1736527772897&g=300&completeurl=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid20250110164829858%26aff_id%3D1270%26sid%3D2566%26sid2%3D6988_sessid20250110164723474%26account_id%3D6802%26product_codename%3Dprod9%26redirect%3DaHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x&disableSetCookie=true HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg01.phx
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/favicon.ico HTTP/1.1Host: cdn.buygoods.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buygoods.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; cf_clearance=uAeIF.d3f8EM8RFNkQUmBgpfns9z7N70RJmd1AQYnis-1736527773-1.2.1.1-kID6MhIB9DEHItuHCwSvDRNIQv6NkFmr5d_78EC7ELgtq8WoNFEJibkj0Z0BRjhpFQX_pjJdDznQi2xhg.siQl4aWgNUBT96hJSPP7jQUhj1Y1l9Za9n0GS.Z5jQVhjW6qLj6N69i.WsTotX4VQUb9VDOUOxWMrcmegaCYHauGJ0btnIi9f.yEmZgs1K9p696kcL3_0RGoNep83D6ZK_DOQ3C9zWvuOTO71nDLgpex61V0cvSda7IVvaxoQnItzfpbXkh4x7bD9orvh8jsmXMtd2To6gk1ObO0.Kga8zaR1WAbTc2X1UD5sa5ZUl8znCgngmd.Xcb4A2PUb1ShK31MjViWfj11LeBw.yo6f0pLn8SFboQSAnN7aLDiBjwRPD
Source: global traffic	HTTP traffic detected: GET /md HTTP/1.1Host: ssl.kaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: k=c5db6720f30a4112ae0d263443e70561
Source: global traffic	HTTP traffic detected: GET /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg01.phx
Source: global traffic	HTTP traffic detected: GET /assets/checkout/img/favicon.ico HTTP/1.1Host: cdn.buygoods.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
Source: global traffic	HTTP traffic detected: GET /targeting/graphql?disableSetCookie=true HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg01.phx
Source: global traffic	HTTP traffic detected: GET /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg01.phx
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8Jofg%3D&alr=yes&sig=AJfQdSswRgIhAMsw4iCfnTUoW99LmFd1TsZMwZeHmDcP3Zfp7T31mxktAiEA0jZZXLu6t03wmKdGb1ZC9ul1-LTkhV2KWIaCV2OQMnA%3D&cpn=2NFxj4Y_Q_IWVnts&cver=1.20250107.01.00&range=2657720-3241105&rn=13&rbuf=111070&pot=MnR4Ip6TwWZ7oXgaU07DD7dbgtm6GJjA3Pa0uXyugLlhZMdov7rq7XbYIHYbMT3-0z85FdUq8hA5_hmx6xZD4GpbkYMcoYjfHSReg58_J_XeVR1bvCd57BMpvEJKDc2EaeuzJIcaoidmNTc2OFB0OqtvO8yHSA==&ump=1&srfvp=1 HTTP/1.1Host: rr1---sn-t0aedn7l.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: yomali.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_267.1.dr	String found in binary or memory: (g.JE(V,"redirector.googlevideo.com"),N=V.toString()):V.T.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.JE(V,"www.youtube.com"),N=V.toString()):(V=pQL(N),BU(V)&&(N=V));V=new g.l5(N);V.set("cmo=pf","1");H&&V.set("cmo=td","a1.googlevideo.com");return V}; equals www.youtube.com (Youtube)
Source: chromecache_267.1.dr	String found in binary or memory: 0?"http":"https";this.Vn=rt((C?C.customBaseYoutubeUrl:p.BASE_YT_URL)\|\|"")\|\|rt(this.iW)\|\|this.protocol+"://www.youtube.com/";d=C?C.eventLabel:p.el;N="detailpage";d==="adunit"?N=this.S?"embedded":"detailpage":d==="embedded"\|\|this.D?N=N5(N,d,eO1):d&&(N="embedded");this.Wr=N;Odj();d=null;N=C?C.playerStyle:p.ps;X=g.W5(Pnj,N);!N\|\|X&&!this.D\|\|(d=N);this.playerStyle=d;this.Y=g.W5(Pnj,this.playerStyle);this.houseBrandUserStatus=C==null?void 0:C.houseBrandUserStatus;this.b_=this.Y&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_267.1.dr	String found in binary or memory: C=this.api.K();p=this.api.getVideoData();var V="";C.V\|\|(C=g.bL(C),C.indexOf("www.")===0&&(C=C.substring(4)),V=g.h_(p)?"Watch on YouTube Music":C==="youtube.com"?"Watch on YouTube":g.c8("Watch on $WEBSITE",{WEBSITE:C}));this.updateValue("title",V)}; equals www.youtube.com (Youtube)
Source: chromecache_267.1.dr	String found in binary or memory: bu.prototype.If=function(){return this.w7.l()};var rxH=(new Date).getTime();var CZe="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),joQ=/\bocr\b/;var NTY=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var vcy=0,mke=0,FgV=0;var xI=null,YI=!1,t1a=1,nX=Symbol("SIGNAL"),e0={version:0,Qn$:0,mL:!1,TU:void 0,W9:void 0,Y$:void 0,G5:0,GS:void 0,vn:void 0,Qq:!1,Oa:!1,kind:"unknown",i9_:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_267.1.dr	String found in binary or memory: g.LI=function(p){var C=g.bL(p);p0V.includes(C)&&(C="www.youtube.com");return p.protocol+"://"+C}; equals www.youtube.com (Youtube)
Source: chromecache_267.1.dr	String found in binary or memory: g.bL=function(p){p=fI(p.Vn);return p==="www.youtube-nocookie.com"?"www.youtube.com":p}; equals www.youtube.com (Youtube)
Source: chromecache_267.1.dr	String found in binary or memory: g.h.getVideoUrl=function(p,C,V,N,H,X,d){C={list:C};V&&(H?C.time_continue=V:C.t=V);V=d?"music.youtube.com":g.bL(this);H=V==="www.youtube.com";!X&&N&&H?X="https://youtu.be/"+p:g.DW(this)?(X="https://"+V+"/fire",C.v=p):(X&&H?(X=this.protocol+"://"+V+"/shorts/"+p,N&&(C.feature="share")):(X=this.protocol+"://"+V+"/watch",C.v=p),L3&&(p=RUQ())&&(C.ebc=p));return g.LJ(X,C)}; equals www.youtube.com (Youtube)
Source: chromecache_267.1.dr	String found in binary or memory: gP9=function(p,C){if(!p.T["0"]){var V=new Rr("0","fakesb",{video:new kZ(0,0,0,void 0,void 0,"auto")});p.T["0"]=C?new bw(new g.l5("http://www.youtube.com/videoplayback"),V,"fake"):new rz(new g.l5("http://www.youtube.com/videoplayback"),V,new JW(0,0),new JW(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_267.1.dr	String found in binary or memory: new Set;this.deviceIsAudioOnly=!(C==null\|\|!C.deviceIsAudioOnly);this.xt=Hw(this.xt,p.ismb);this.uL?(M=p.vss_host\|\|"s.youtube.com",M==="s.youtube.com"&&(M=fI(this.Vn)\|\|"www.youtube.com")):M="video.google.com";this.kz=M;Oe(this,p,!0);this.vr=new Wb;g.R(this,this.vr);T=C?C.innertubeApiKey:XW("",p.innertube_api_key);c=C?C.innertubeApiVersion:XW("",p.innertube_api_version);M=C?C.innertubeContextClientVersion:XW("",p.innertube_context_client_version);T=g.W6("INNERTUBE_API_KEY")\|\|T;c=g.W6("INNERTUBE_API_VERSION")\|\| equals www.youtube.com (Youtube)
Source: chromecache_267.1.dr	String found in binary or memory: p))):this.api.K().G("enable_adb_handling_in_sabr")&&V==="BROWSER_OR_EXTENSION_ERROR"&&!N.Y?(N=N.hostLanguage,p="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",N&&(p=g.LJ(p,{hl:N})),this.Jc(j4(this,"BROWSER_OR_EXTENSION_ERROR",p))):this.Jc(g.pZ(p.errorMessage)):this.Jc(j4(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(p=N.hostLanguage,V="//support.google.com/youtube/?p=player_error1",p&&(V=g.LJ(V, equals www.youtube.com (Youtube)
Source: chromecache_267.1.dr	String found in binary or memory: p.details.rc!=="429"?p.errorCode==="ump.spsrejectfailure"&&(H="HTML5_SPS_UMP_STATUS_REJECTED"):(H="TOO_MANY_REQUESTS",X="6");this.Ta.GM(p.errorCode,p.severity,H,S9(p.details),X)}else this.Ta.publish("nonfatalerror",p),N=/^pp/.test(this.videoData.clientPlaybackNonce),this.DE(p.errorCode,p.details),N&&p.errorCode==="manifest.net.connect"&&(p="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.U2)(),Ah(p,"manifest",function(d){C.Y=!0;C.k_("pathprobe",d)},function(d){C.DE(d.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_267.1.dr	String found in binary or memory: this.yn.sY&&(p.authuser=this.yn.sY);this.yn.pageId&&(p.pageid=this.yn.pageId);isNaN(this.cryptoPeriodIndex)\|\|(p.cpi=this.cryptoPeriodIndex.toString());var H=(H=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.f0()))?H[1]:"";H==="ATV"&&(p.cdt=H);this.W=p;this.W.session_id=N;this.a$=!0;this.C.flavor==="widevine"&&(this.W.hdr="1");this.C.flavor==="playready"&&(C=Number(eO(C.experiments,"playready_first_play_expiration")),!isNaN(C)&&C>=0&&(this.W.mfpe=""+C),this.a$=!1);C="";g.O6(this.C)?fb(this.C)?(N=V.C)&&(C="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_382.1.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/3ede36f2\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_267.1.dr	String found in binary or memory: var uk={};var QOP={FU:[{XU:/Unable to load player module/,weight:20},{XU:/Failed to fetch/,weight:500},{XU:/XHR API fetch failed/,weight:10},{XU:/JSON parsing failed after XHR fetch/,weight:10},{XU:/Retrying OnePlatform request/,weight:10},{XU:/CSN Missing or undefined during playback association/,weight:100},{XU:/Non-recoverable error. Do not retry./,weight:0},{XU:/Internal Error. Retry with an exponential backoff./,weight:0},{XU:/API disabled by application./,weight:0}],uq:[{callback:AZv,weight:500}]};var ghv=/[&\?]action_proxy=1/,LFs=/[&\?]token=([\w-])/,WFy=/[&\?]video_id=([\w-])/,Qya=/[&\?]index=([\d-])/,rZe=/[&\?]m_pos_ms=([\d-])/,G3u=/[&\?]vvt=([\w-]*)/,Yx1="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Bi1="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),nha={android:"ANDROID", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.shinsengumiusa.com
Source: global traffic	DNS traffic detected: DNS query: mwebexplorerpro.com
Source: global traffic	DNS traffic detected: DNS query: nervedefend.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 0coitns4.embtrk.com
Source: global traffic	DNS traffic detected: DNS query: tracking.buygoods.com
Source: global traffic	DNS traffic detected: DNS query: go.maxweb.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: rr1---sn-t0aedn7l.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: www.buygoods.com
Source: global traffic	DNS traffic detected: DNS query: buygoods.com
Source: global traffic	DNS traffic detected: DNS query: cdn.buygoods.com
Source: global traffic	DNS traffic detected: DNS query: js.braintreegateway.com
Source: global traffic	DNS traffic detected: DNS query: display.buygoods.com
Source: global traffic	DNS traffic detected: DNS query: pay.buygoods.com
Source: global traffic	DNS traffic detected: DNS query: songbird.cardinalcommerce.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: ka-f.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: www.datadoghq-browser-agent.com
Source: global traffic	DNS traffic detected: DNS query: payments.braintree-api.com
Source: global traffic	DNS traffic detected: DNS query: yomali.com
Source: global traffic	DNS traffic detected: DNS query: includes.ccdc02.com
Source: global traffic	DNS traffic detected: DNS query: browser-intake-datadoghq.com
Source: global traffic	DNS traffic detected: DNS query: ssl.kaptcha.com
Source: global traffic	DNS traffic detected: DNS query: client-analytics.braintreegateway.com
Source: global traffic	DNS traffic detected: DNS query: checkout.paypal.com
Source: global traffic	DNS traffic detected: DNS query: c.paypal.com
Source: global traffic	DNS traffic detected: DNS query: www.paypal.com
Source: global traffic	DNS traffic detected: DNS query: assets.braintreegateway.com
Source: global traffic	DNS traffic detected: DNS query: www.softwareprojects.com
Source: global traffic	DNS traffic detected: DNS query: stun.kaptcha.com
Source: global traffic	DNS traffic detected: DNS query: stun1.l.google.com
Source: global traffic	DNS traffic detected: DNS query: c6.paypal.com
Source: global traffic	DNS traffic detected: DNS query: b.stats.paypal.com
Source: global traffic	DNS traffic detected: DNS query: www.paypalobjects.com
Source: global traffic	DNS traffic detected: DNS query: lhr.stats.paypal.com
Source: global traffic	DNS traffic detected: DNS query: t.paypal.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=FHiR9bvlUNxCArvC%2B6ALfanaX3xLpbGrHs3AacM2sVUHcVEOYf%2FBfqq%2BQFn4jdDkkSmbmy0Slo4sYXwyLK9Vh%2FJUURCvyo7cBp%2FqAYltI0rgNJPwUKQ5i%2FQY8D7QDxBGqCE%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 545Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 27Accept-Ch: Sec-CH-UA-FullCache-Control: max-age=0, no-cache, no-store, must-revalidateContent-Type: text/html; charset=utf-8Etag: W/"1b-t3Pfl4FRsGq0mO4t1UhagLO9mUw"Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==Paypal-Debug-Id: f576538d4dbc3Traceparent: 00-0000000000000000000f576538d4dbc3-3de941428db5c4b4-01DC: ccg11-origin-www-1.paypal.comAccept-Ranges: bytesVia: 1.1 varnish, 1.1 varnish, 1.1 varnishDate: Fri, 10 Jan 2025 16:49:36 GMTStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kiad7000165-IAD, cache-ewr-kewr1740061-EWR, cache-ewr-kewr1740061-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1736527776.447531,VS0,VE103Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"

Source: chromecache_276.1.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_459.1.dr, chromecache_267.1.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_276.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_267.1.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_267.1.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_267.1.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_267.1.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_267.1.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_267.1.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_407.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_267.1.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_276.1.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_276.1.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_276.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_414.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_276.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_276.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_276.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_253.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/versions#beta-channel
Source: chromecache_267.1.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_358.1.dr, chromecache_355.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_358.1.dr, chromecache_355.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_459.1.dr, chromecache_267.1.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_276.1.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_253.1.dr	String found in binary or memory: https://goo.gle/js-open-now
Source: chromecache_253.1.dr	String found in binary or memory: https://goo.gle/js-open-now.
Source: chromecache_267.1.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_281.1.dr	String found in binary or memory: https://includes.ccdc02.com/cardinalcruise/v1/b109e0c6fd2a5b6b93b2/
Source: chromecache_267.1.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_442.1.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: chromecache_442.1.dr	String found in binary or memory: https://kit.fontawesome.com
Source: chromecache_253.1.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/staticmap
Source: chromecache_267.1.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_253.1.dr	String found in binary or memory: https://places.googleapis.com/v1/places/$
Source: chromecache_267.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_267.1.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_267.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_267.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_267.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_274.1.dr	String found in binary or memory: https://sketch.com
Source: chromecache_407.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_253.1.dr	String found in binary or memory: https://support.google.com/contributionpolicy/answer/7422880
Source: chromecache_276.1.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_253.1.dr	String found in binary or memory: https://support.google.com/maps/answer/3092445
Source: chromecache_267.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_267.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_267.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_267.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_267.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_407.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_267.1.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_340.1.dr	String found in binary or memory: https://www.ebanx.com/pt-br/legal/
Source: chromecache_407.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_407.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_407.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_407.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_253.1.dr	String found in binary or memory: https://www.google.com/maps/dir/
Source: chromecache_267.1.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_407.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_267.1.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_382.1.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_267.1.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_267.1.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_267.1.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_267.1.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_267.1.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_267.1.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152

Source: classification engine

Classification label: mal48.phis.win@29/389@177/49

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1888,i,15600538889269617292,16567569674908108909,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.shinsengumiusa.com/mrloskie"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4160 --field-trial-handle=1888,i,15600538889269617292,16567569674908108909,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4152 --field-trial-handle=1888,i,15600538889269617292,16567569674908108909,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1888,i,15600538889269617292,16567569674908108909,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4160 --field-trial-handle=1888,i,15600538889269617292,16567569674908108909,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4152 --field-trial-handle=1888,i,15600538889269617292,16567569674908108909,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.shinsengumiusa.com/mrloskie	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://nervedefend.com/js/app.js?id=a5d2a03ff186afa79e79	0%	Avira URL Cloud	safe
https://nervedefend.com/images/products/prod8/3-bottles.png	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/assets/checkout/img/trust-guard.png	0%	Avira URL Cloud	safe
https://nervedefend.com/pixels/maxweb-click?key=n9p3OB1R7PyQJqSfT9ZNPLkvMDVT7ZpR	0%	Avira URL Cloud	safe
https://yomali.com/	0%	Avira URL Cloud	safe
https://nervedefend.com/images/custom/image12.png	0%	Avira URL Cloud	safe
http://yomali.com/	0%	Avira URL Cloud	safe
https://pay.buygoods.com/js/cleave.min.js	0%	Avira URL Cloud	safe
https://pay.buygoods.com/lib/v1/js/vaultFrame.js?v=65	0%	Avira URL Cloud	safe
https://nervedefend.com/images/custom/image8.png	0%	Avira URL Cloud	safe
https://nervedefend.com/images/custom/image15.jpg	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/productimages/6802/34/6_bo_lesecfs0k_p_g_resized333.png	0%	Avira URL Cloud	safe
https://nervedefend.com/images/custom/image5.png	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/assets/checkout/img/visa-cvv.jpg	0%	Avira URL Cloud	safe
https://pay.buygoods.com/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://pay.buygoods.com/img/jcb.svg	0%	Avira URL Cloud	safe
https://nervedefend.com/images/custom/image13.png	0%	Avira URL Cloud	safe
https://pay.buygoods.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	0%	Avira URL Cloud	safe
https://nervedefend.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	0%	Avira URL Cloud	safe
https://cdn.buygoods.com/assets/checkout/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://pay.buygoods.com/img/visa.svg	0%	Avira URL Cloud	safe
https://www.ebanx.com/pt-br/legal/	0%	Avira URL Cloud	safe
https://pay.buygoods.com/cdn-cgi/rum?	0%	Avira URL Cloud	safe
https://pay.buygoods.com/css/v1/formframe-checkout.css	0%	Avira URL Cloud	safe
https://pay.buygoods.com/img/amex.svg	0%	Avira URL Cloud	safe
https://nervedefend.com/images/custom/image9.png	0%	Avira URL Cloud	safe
https://nervedefend.com/images/app/buygoods.png	0%	Avira URL Cloud	safe
https://nervedefend.com/images/products/prod7/1-bottle.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.shinsengumiusa.com	104.21.48.1	true	false	unknown
paypal.map.fastly.net	151.101.194.133	true	false	high
static.cloudflareinsights.com	104.16.80.73	true	false	high
dualstack.paypal-dynamic-2.map.fastly.net	151.101.65.35	true	false	high
buygoodslb.clickcrm.com	172.66.40.234	true	false	unknown
cdn.buygoods.com	172.66.40.141	true	false	high
paypal-dynamic.map.fastly.net	151.101.1.21	true	false	high
i.ytimg.com	142.250.186.118	true	false	high
stun1.l.google.com	74.125.250.129	true	false	high
colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com	35.81.31.24	true	false	high
www.softwareprojects.com	172.66.40.147	true	false	high
gateway-prod-eu-central-1.production.braintree-api.com	3.122.176.248	true	false	high
yomali.com	172.66.40.234	true	false	high
nervedefend.com	104.21.47.251	true	false	high
rr1.sn-t0aedn7l.googlevideo.com	74.125.174.166	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.184.193	true	false	high
www.google.com	172.217.18.100	true	false	high
origin-analytics-prod.production.braintree-api.com	3.78.171.103	true	false	high
stats.glb.paypal.com	34.147.177.40	true	false	high
browser-intake-datadoghq.com	3.233.158.25	true	false	high
includes.ccdc02.com	198.217.251.238	true	false	high
mwebexplorerpro.com	188.114.97.3	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
paypal-dynamic-cdn.map.fastly.net	151.101.195.1	true	false	high
buygoods.com	172.66.40.234	true	false	high
lhr.stats.paypal.com	34.147.177.40	true	false	high
static.doubleclick.net	142.250.184.198	true	false	high
tracking.buygoods.com	172.66.40.141	true	false	high
youtube-ui.l.google.com	142.250.186.78	true	false	high
googleads.g.doubleclick.net	142.250.186.98	true	false	high
play.google.com	142.250.185.142	true	false	high
devic-elast-1eoivwyi136bb-007d6743299a5175.elb.us-west-2.amazonaws.com	54.203.171.68	true	false	unknown
pay.buygoods.com	172.66.40.141	true	false	high
www.datadoghq-browser-agent.com	13.33.219.205	true	false	high
go.maxweb.com	172.66.40.143	true	false	high
songbird.cardinalcommerce.com	198.217.251.250	true	false	high
yt3.ggpht.com	unknown	unknown	false	high
ka-f.fontawesome.com	unknown	unknown	false	high
display.buygoods.com	unknown	unknown	false	high
ssl.kaptcha.com	unknown	unknown	false	high
0coitns4.embtrk.com	unknown	unknown	false	unknown
www.paypal.com	unknown	unknown	false	high
assets.braintreegateway.com	unknown	unknown	false	high
checkout.paypal.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
t.paypal.com	unknown	unknown	false	high
c.paypal.com	unknown	unknown	false	high
c6.paypal.com	unknown	unknown	false	high
b.stats.paypal.com	unknown	unknown	false	high
www.buygoods.com	unknown	unknown	false	high
client-analytics.braintreegateway.com	unknown	unknown	false	high
js.braintreegateway.com	unknown	unknown	false	high
rr1---sn-t0aedn7l.googlevideo.com	unknown	unknown	false	high
stun.kaptcha.com	unknown	unknown	false	high
payments.braintree-api.com	unknown	unknown	false	high
www.paypalobjects.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.buygoods.com/assets/checkout/img/trust-guard.png	false	Avira URL Cloud: safe	unknown
https://buygoods.com/secure/checkout/assets/js/places.js?v=2	false		high
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false		high
https://yomali.com/	false	Avira URL Cloud: safe	unknown
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Abeacon%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=3fc36e0b-6761-476c-b062-fa61ff82a226&batch_time=1736527772407	false		high
https://www.paypalobjects.com/muse/muse.js	false		high
https://nervedefend.com/images/products/prod8/3-bottles.png	false	Avira URL Cloud: safe	unknown
https://client-analytics.braintreegateway.com/8xnhgfcmq7d3k99b	false		high
https://nervedefend.com/images/custom/image8.png	false	Avira URL Cloud: safe	unknown
https://browser-intake-datadoghq.com/api/v2/replay?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Abeacon%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=a834cb14-738c-4539-b575-5f2486f6df73	false		high
https://js.braintreegateway.com/web/3.97.2/js/paypal-checkout.min.js	false		high
https://nervedefend.com/js/app.js?id=a5d2a03ff186afa79e79	false	Avira URL Cloud: safe	unknown
https://display.buygoods.com/v1/terms?id=terms	false		high
https://checkout.paypal.com/web/3.97.2/html/dispatch-frame.min.html	false		high
https://buygoods.com/secure/checkout/iframe?a=6802&s=sessid20250110164829858	false		high
https://c.paypal.com/v1/r/d/b/w?f=098ed052bf3e3a35536a73f4ffde6325&s=BRAINTREE_SIGNIN&d=%7B%22rDT%22%3A%2251831%2C51595%2C51253%3A51829%2C51593%2C51246%3A21090%2C20853%2C20508%3A36458%2C36219%2C35878%3A15964%2C15721%2C15397%3A21084%2C20840%2C20508%3A26207%2C25960%2C25631%3A31326%2C31073%2C30804%3A51818%2C51550%2C51256%3A21080%2C20806%2C20510%3A46695%2C46411%2C46177%3A26199%2C25912%2C25650%3A26185%2C25887%2C25663%3A10807%2C10501%2C10262%3A26168%2C25850%2C25632%3A51772%2C51440%2C51244%3A41516%2C41163%2C41000%3A15882%2C15506%2C15383%3A26114%2C25722%2C25630%3A10709%2C10305%2C10263%3A18411%2C22%22%7D	false		high
https://nervedefend.com/images/custom/image12.png	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false		high
https://www.buygoods.com/secure/?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	false		high
https://c.paypal.com/v1/r/d/b/p1	false		high
https://c.paypal.com/v1/r/d/b/p2	false		high
https://nervedefend.com/pixels/maxweb-click?key=n9p3OB1R7PyQJqSfT9ZNPLkvMDVT7ZpR	false	Avira URL Cloud: safe	unknown
https://buygoods.com/secure/k/logo.php?m=153600&s=sessid20250110164829858	false		high
https://pay.buygoods.com/lib/v1/js/vaultFrame.js?v=65	false	Avira URL Cloud: safe	unknown
http://yomali.com/	false	Avira URL Cloud: safe	unknown
https://buygoods.com/secure/checkout/assets/js/paypal-cs-conversion.js?v=7	false		high
https://js.braintreegateway.com/web/3.97.2/js/client.min.js	false		high
https://browser-intake-datadoghq.com/api/v2/replay?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Abeacon%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=4cb4d50e-a1b7-424c-8623-1ef22b49dfe0	false		high
https://browser-intake-datadoghq.com/api/v2/replay?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Abeacon%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=a8b8515a-1a8d-46c4-b126-82f0226dabe2	false		high
https://tracking.buygoods.com/track/?a=6802&firstcookie=0&tracking_redirect=&referrer=&sessid2=&product=prod7,prod8,prod9,prod11&caller_url=https%3A%2F%2Fnervedefend.com%2Freport%3Faff_id%3D1270%26subid2%3D6988_sessid20250110164723474%26subid%3D2566	false		high
https://pay.buygoods.com/js/cleave.min.js	false	Avira URL Cloud: safe	unknown
https://nervedefend.com/images/custom/image15.jpg	false	Avira URL Cloud: safe	unknown
https://songbird.cardinalcommerce.com/cardinalcruise/v1/songbird.js	false		high
https://b.stats.paypal.com/counter.cgi?i=127.0.0.1&p=098ed052bf3e3a35536a73f4ffde6325&t=1736527768.526&a=14	false		high
https://pay.buygoods.com/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://cdn.buygoods.com/productimages/6802/34/6_bo_lesecfs0k_p_g_resized333.png	false	Avira URL Cloud: safe	unknown
https://pay.buygoods.com/img/jcb.svg	false	Avira URL Cloud: safe	unknown
https://cdn.buygoods.com/assets/checkout/img/visa-cvv.jpg	false	Avira URL Cloud: safe	unknown
https://nervedefend.com/images/custom/image5.png	false	Avira URL Cloud: safe	unknown
https://buygoods.com/secure/checkout/assets/js/dictionary.js?v=29	false		high
https://buygoods.com/affiliates/go/conversion/iframe/bg?a=6802&t=1df5ed17281f7f57cd6afec32e271fa5&checkout=1&s=sessid20250110164829858	false		high
https://yt3.ggpht.com/ytc/AIdro_m9vnpvLDuCjN3benUeTYbdwWWXR-SG2Q9WZSq15GVI1DuDYBub2lf4hmef0g1yidFIrw=s68-c-k-c0x00ffffff-no-rj	false		high
https://nervedefend.com/images/custom/image13.png	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=FHiR9bvlUNxCArvC%2B6ALfanaX3xLpbGrHs3AacM2sVUHcVEOYf%2FBfqq%2BQFn4jdDkkSmbmy0Slo4sYXwyLK9Vh%2FJUURCvyo7cBp%2FqAYltI0rgNJPwUKQ5i%2FQY8D7QDxBGqCE%3D	false		high
https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566	false		unknown
https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x	false		high
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Abeacon%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=30104634-9c23-4dcb-8e15-813f7a732f20&batch_time=1736527804308	false		high
https://nervedefend.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	false	Avira URL Cloud: safe	unknown
https://ssl.kaptcha.com/logo.htm?s=sessid20250110164829858&m=153600	false		high
https://pay.buygoods.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	false	Avira URL Cloud: safe	unknown
https://www.paypal.com/targeting/graphql?disableSetCookie=true	false		high
https://cdn.buygoods.com/assets/checkout/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://t.paypal.com/ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3A8T2VCMX6GD4SG-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3A8T2VCMX6GD4SG-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a76c98f4-6469-4316-9f25-c961ba7f91b9&fltp=analytics&mrid=8T2VCMX6GD4SG&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=BuyGoods%20-%20Secure%20Checkout&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1736527770891&g=300&completeurl=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid20250110164829858%26aff_id%3D1270%26sid%3D2566%26sid2%3D6988_sessid20250110164723474%26account_id%3D6802%26product_codename%3Dprod9%26redirect%3DaHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x&ru=https%3A%2F%2Fnervedefend.com%2F&disableSetCookie=true	false		high
https://pay.buygoods.com/img/visa.svg	false	Avira URL Cloud: safe	unknown
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Afetch%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=38b00fc3-59ef-48cb-908d-5bc54ff71c90&batch_time=1736527768837	false		high
https://pay.buygoods.com/css/v1/formframe-checkout.css	false	Avira URL Cloud: safe	unknown
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Afetch%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=394cee19-b750-4519-b924-96ec051dc8b3&batch_time=1736527766993	false		high
https://pay.buygoods.com/cdn-cgi/rum?	false	Avira URL Cloud: safe	unknown
https://nervedefend.com/images/custom/image9.png	false	Avira URL Cloud: safe	unknown
https://go.maxweb.com/conversion/iframe/?a=6988&token=e2e306dffc4e053c57e785d8331894dc	false		high
https://nervedefend.com/images/products/prod7/1-bottle.png	false	Avira URL Cloud: safe	unknown
https://buygoods.com/cdn-cgi/challenge-platform/h/b/jsd/r/8ffe2900dc024304	false		high
https://pay.buygoods.com/img/amex.svg	false	Avira URL Cloud: safe	unknown
https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js	false		high
https://www.datadoghq-browser-agent.com/us1/v5/datadog-rum.js	false		high
https://play.google.com/log?format=json&hasfast=true&authuser=0	false		high
https://www.youtube.com/s/player/3ede36f2/www-widgetapi.vflset/www-widgetapi.js	false		high
https://nervedefend.com/images/app/buygoods.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_267.1.dr	false		high
http://g.co/dev/maps-no-account	chromecache_276.1.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_407.1.dr	false		high
https://www.youtube.com	chromecache_382.1.dr	false		high
https://fontawesome.com	chromecache_358.1.dr, chromecache_355.1.dr	false		high
https://admin.youtube.com	chromecache_267.1.dr	false		high
https://goo.gle/js-api-loading	chromecache_276.1.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_267.1.dr	false		high
https://support.google.com/maps/answer/3092445	chromecache_253.1.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_407.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_276.1.dr	false		high
https://yurt.corp.google.com	chromecache_267.1.dr	false		high
https://support.google.com/fusiontables/answer/9185417).	chromecache_276.1.dr	false		high
https://developers.google.com/maps/deprecations	chromecache_276.1.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_267.1.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_459.1.dr, chromecache_267.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	chromecache_253.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	chromecache_276.1.dr	false		high
https://ka-f.fontawesome.com	chromecache_442.1.dr	false		high
https://sketch.com	chromecache_274.1.dr	false		high
https://support.google.com/youtube/?p=report_playback	chromecache_267.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_276.1.dr	false		high
https://angular.dev/license	chromecache_267.1.dr	false		high
http://youtube.com/streaming/metadata/segment/102015	chromecache_267.1.dr	false		high
https://fontawesome.com/license/free	chromecache_358.1.dr, chromecache_355.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_276.1.dr	false		high
https://youtu.be/	chromecache_267.1.dr	false		high
https://support.google.com/contributionpolicy/answer/7422880	chromecache_253.1.dr	false		high
https://www.ebanx.com/pt-br/legal/	chromecache_340.1.dr	false	Avira URL Cloud: safe	unknown
https://youtube.com/api/drm/fps?ek=uninitialized	chromecache_267.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/error-messages#	chromecache_414.1.dr	false		high
https://docs.google.com/get_video_info	chromecache_267.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.48.1	www.shinsengumiusa.com	United States	13335	CLOUDFLARENETUS	false
104.21.47.251	nervedefend.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.228	unknown	United States	15169	GOOGLEUS	false
151.101.130.133	unknown	United States	54113	FASTLYUS	false
3.233.158.25	browser-intake-datadoghq.com	United States	14618	AMAZON-AESUS	false
198.217.251.238	includes.ccdc02.com	United States	13335	CLOUDFLARENETUS	false
74.125.174.166	rr1.sn-t0aedn7l.googlevideo.com	United States	15169	GOOGLEUS	false
198.217.251.239	unknown	United States	13335	CLOUDFLARENETUS	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.118	i.ytimg.com	United States	15169	GOOGLEUS	false
172.66.40.147	www.softwareprojects.com	United States	13335	CLOUDFLARENETUS	false
151.101.65.35	dualstack.paypal-dynamic-2.map.fastly.net	United States	54113	FASTLYUS	false
172.66.40.143	go.maxweb.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.142	play.google.com	United States	15169	GOOGLEUS	false
151.101.3.1	unknown	United States	54113	FASTLYUS	false
172.66.40.141	cdn.buygoods.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
34.147.177.40	stats.glb.paypal.com	United States	2686	ATGS-MMD-ASUS	false
151.101.193.21	unknown	United States	54113	FASTLYUS	false
142.250.186.78	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.184.198	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.193	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
172.66.40.234	buygoodslb.clickcrm.com	United States	13335	CLOUDFLARENETUS	false
198.217.251.250	songbird.cardinalcommerce.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	mwebexplorerpro.com	European Union	13335	CLOUDFLARENETUS	false
151.101.131.1	unknown	United States	54113	FASTLYUS	false
3.78.171.103	origin-analytics-prod.production.braintree-api.com	United States	16509	AMAZON-02US	false
35.156.167.229	unknown	United States	16509	AMAZON-02US	false
172.217.18.100	www.google.com	United States	15169	GOOGLEUS	false
3.122.176.248	gateway-prod-eu-central-1.production.braintree-api.com	United States	16509	AMAZON-02US	false
151.101.129.35	unknown	United States	54113	FASTLYUS	false
142.250.185.164	unknown	United States	15169	GOOGLEUS	false
142.250.185.162	unknown	United States	15169	GOOGLEUS	false
104.16.79.73	unknown	United States	13335	CLOUDFLARENETUS	false
74.125.250.129	stun1.l.google.com	United States	15169	GOOGLEUS	false
151.101.194.133	paypal.map.fastly.net	United States	54113	FASTLYUS	false
142.250.186.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.54	unknown	United States	15169	GOOGLEUS	false
151.101.1.21	paypal-dynamic.map.fastly.net	United States	54113	FASTLYUS	false
35.81.31.24	colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com	United States	237	MERIT-AS-14US	false
151.101.195.1	paypal-dynamic-cdn.map.fastly.net	United States	54113	FASTLYUS	false
13.33.219.205	www.datadoghq-browser-agent.com	United States	16509	AMAZON-02US	false
151.101.65.21	unknown	United States	54113	FASTLYUS	false
54.148.115.137	unknown	United States	16509	AMAZON-02US	false
142.250.186.166	unknown	United States	15169	GOOGLEUS	false
172.217.18.22	unknown	United States	15169	GOOGLEUS	false
3.120.85.61	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1587844
Start date and time:	2025-01-10 17:47:21 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://www.shinsengumiusa.com/mrloskie
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@29/389@177/49
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, audiodg.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 142.250.186.46, 66.102.1.84, 142.250.186.110, 142.250.181.238, 142.250.181.232, 216.58.206.74, 172.217.16.131, 142.250.185.78, 142.250.185.106, 142.250.181.234, 172.217.18.106, 142.250.186.74, 142.250.185.138, 142.250.186.42, 142.250.186.170, 142.250.186.138, 142.250.185.234, 172.217.18.10, 216.58.206.42, 142.250.184.202, 216.58.212.170, 142.250.186.106, 142.250.185.202, 172.217.16.202, 142.250.185.195, 216.58.212.138, 172.217.16.138, 172.217.23.106, 142.250.74.202, 142.250.185.74, 142.250.74.206, 142.250.185.206, 172.217.23.110, 142.250.186.142, 216.58.206.46, 172.217.18.14, 142.250.186.174, 172.217.23.99, 142.250.185.174, 142.250.184.234, 142.250.185.170, 104.21.26.223, 172.67.139.119, 172.217.16.142, 172.217.16.195, 142.250.184.195, 2.23.242.162, 4.175.87.197
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ka-f.fontawesome.com.cdn.cloudflare.net, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, jnn-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, maps.googleapis.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, maps.gstatic.com, www.google-analytics.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.shinsengumiusa.com/mrloskie

Input	Output
URL: https://www.shinsengumiusa.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.shinsengumiusa.com
URL: https://nervedefend.com/report?aff_id=1270&subid2=... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a simple initialization of an 'App' object with a 'start' property set to the current performance timestamp. This behavior is benign and does not exhibit any high-risk indicators, such as dynamic code execution, data exfiltration, or suspicious redirects. The code is straightforward and does not raise any significant security concerns." }
window.App = { start: performance.now() };
URL: https://nervedefend.com/report?aff_id=1270&subid2=... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script sets the `src` attribute of an HTML element to a URL that appears to be tracking user interactions. This behavior is considered a moderate risk, as it involves sending user data to an external domain without clear transparency. However, the script does not exhibit any high-risk indicators like dynamic code execution or data exfiltration, so the overall risk score is in the medium range." }
setTimeout(function () { document.getElementById('pixelmaxweb-click').src = 'https://nervedefend.com/pixels/maxweb-click?key=n9p3OB1R7PyQJqSfT9ZNPLkvMDVT7ZpR'; }, 0);
URL: https://nervedefend.com/report?aff_id=1270&subid2=... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a part of a video player implementation, with no obvious malicious behaviors. It sets up some basic video player properties like the video ID, autoplay, and muted state, as well as providing subtitles data. While the content of the subtitles may be disturbing, the JavaScript itself does not demonstrate any high-risk indicators like dynamic code execution, data exfiltration, or suspicious redirects. The script seems to be focused on providing a video player experience, which is a common and legitimate use case." }
window.App.videoId = 'QZ5xuqBJH_s'; window.App.autoplay = true; window.App.muted = true; window.App.subtitlesData = [{"startTime":7.36,"endTime":12.88,"text":"Never in my wildest dreams did I ever think my\u00a0\nmother\u2019s leg pain could become so unbearable,\u00a0\u00a0"},{"startTime":12.88,"endTime":16.24,"text":"that she would be willing to\u00a0\ntake her own life because of it."},{"startTime":16.24,"endTime":20.24,"text":"I can still hear her scream, echoing\u00a0\nbetween the four walls of our home:"},{"startTime":21.12,"endTime":26.16,"text":"\u201cI am going to end it all! If this is what it\u00a0\ntakes for the pain to stop, then so be it!\u201d"},{"startTime":27.28,"endTime":29.76,"text":"I remember rushing to the bathroom, only to find\u00a0\u00a0"},{"startTime":29.76,"endTime":33.84,"text":"my mother in the center of what seemed to\u00a0\nbe a bloodbath scene from a horror movie."},{"startTime":34.8,"endTime":39.36,"text":"My mother, having fainted on what\u00a0\nused to be white, now scarlet floor,\u00a0\u00a0"},{"startTime":39.36,"endTime":44.8,"text":"holding a stained chainsaw in her right hand,\u00a0\nand blood gushing out of her almost severed leg."},{"startTime":45.84,"endTime":48.24,"text":"Needless to say, I was petrified."},{"startTime":49.12,"endTime":53.04,"text":"I started acting on instinct,\u00a0\nand covered her open wound,\u00a0\u00a0"},{"startTime":53.04,"endTime":56,"text":"hoping and praying the ambulance\u00a0\nwould get here in time..."},{"startTime":56.96,"endTime":61.36,"text":"She was barely breathing, but she\u00a0\nmanaged to place a hand on my cheek,\u00a0\u00a0"},{"startTime":61.36,"endTime":64.4,"text":"and she mumbled a few words\u00a0\nthat marked my life forever:"},{"startTime":65.36,"endTime":69.52,"text":"\u201cLet me die, son... It\u2019s the\u00a0\nonly way for the pain to go away\u201d"},{"startTime":70.88,"endTime":75.44,"text":"As I looked into her empty, desperate\u00a0\neyes, I could not help but ask myself:"},{"startTime":76.24,"endTime":78.72,"text":"Just what kind of pain was she going through,\u00a0\u00a0"},{"startTime":79.36,"endTime":82.88,"text":"if she felt that the only way to\u00a0\nrid herself of it was to end it all?"},{"startTime":83.76,"endTime":84.96,"text":"And most importantly...."},{"startTime":85.52,"endTime":90.4,"text":"Why wasn\u2019t modern medicine and their so-called\u00a0\nmedical advancements not able to help her?"},{"startTime":91.36,"endTime":96.56,"text":"The following story is very painful for me\u00a0\npersonally, but I know I have to tell it."},{"startTime":97.2,"endTime":101.52,"text":"You see, a little less than 2 years ago,\u00a0\nwhat started as a tingling sensation\u00a0\u00a0"},{"startTime":101.52,"endTime":105.84,"text":"on my mother\u2019s legs turned into a\u00a0\nnightmare that almost took her life."},{"startTime":106.88,"endTime":111.76,"text":"Fortunately the doctors were able to save\u00a0\nher and amazingly enough, her leg as well."},{"startTime":112.96,"endTime":116.72,"text":"However, at that moment I swore I\u00a0\nwould do anything in my power to\u00a0\u00a0"},{"startTime":116.72,"endTime":122.16,"text":"help her escape this terrible disease even\u00a0\nif it was going to cost me everything I had."},{"startTime":123.12,"endTime":127.68,"text":"It took 18 months and an incredible\u00a0\nyet scary journey through the dark\u00a0\u00a0"},{"startTime":127.68,"endTime":131.68,"text":"underbelly of the Big Pharma\u00a0\nconglomerates, but I eventually did it!"},{"startTime":132.56,"endTime":135.2,"text":"I found a way to help my mother rid herself of the\u00a0\u00a0"},{"startTime":135.2,"endTime":139.12,"text":"debilitating nerve pain that has been\u00a0\nplaguing her for more than 6 years."},{"startTime":140.16,"endTime":145.04,"text":"Then, as I shared my method with the rest\u00a0\nof the world, things really went crazy,\u00a0\u00a0"},{"startTime":145.04,"endTime":149.44,"text":"as in just a few short months, t
URL: https://pay.buygoods.com/vault/v1/formframe-checko... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscated nature of the code further increase the risk. While the script may have a legitimate purpose, such as a challenge platform, the overall behavior is highly suspicious and indicative of malicious intent." }
(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8ffe2916d9208cee',t:'MTczNjUyNzc2OC4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange\|\|function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();
URL: https://nervedefend.com/report?aff_id=1270&subid2=... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script exhibits moderate-risk behaviors, including external data transmission to a third-party domain 'tracking.buygoods.com' and the use of cookies. While the script appears to be related to e-commerce tracking, the extensive data collection and lack of transparency raise some concerns. Further review may be necessary to determine the legitimacy of the script's purpose and the trustworthiness of the third-party domain." }
var mysrc = 'https://tracking.buygoods.com/track/?a=6802&firstcookie=0' + '&tracking_redirect=&referrer=' + encodeURIComponent(document.referrer) + '&sessid2=' + ReadCookie('sessid2') + '&product=prod7,prod8,prod9,prod11&caller_url=' + encodeURIComponent(window.location.href); if (typeof add_to_cart !== 'undefined') { mysrc = mysrc + '&add_to_cart=' + add_to_cart; } var newScript = document.createElement('script'); newScript.type = 'text/javascript'; newScript.defer = true; newScript.src = mysrc; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(newScript, s); function ReadCookie(name) { name += '='; var parts = document.cookie.split(/;s*/); for (var i = 0; i < parts.length; i++) { var part = parts[i]; if (part.indexOf(name) == 0) { return part.substring(name.length); } } return ''; }
URL: https://nervedefend.com/cdn-cgi/scripts/5c5dd728/c... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script appears to be a common email obfuscation technique, which is a moderate-risk indicator. It decodes email addresses embedded in the HTML and replaces them with obfuscated versions. While this is a common practice to protect email addresses from spam, the script also performs aggressive DOM manipulation, which is another moderate-risk indicator. Overall, the script exhibits some potentially concerning behaviors, but it does not appear to be inherently malicious." }
!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r)}}var l="/cdn-cgi/l/email-protection#",u=".__cf_email__",f="data-cfemail",d=document.createElement("div");i(document),function(){var e=document.currentScript\|\|document.scripts[document.scripts.length-1];e.parentNode.removeChild(e)}()}();
URL: https://pay.buygoods.com/js/v1/formframe-checkout.... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate payment form management module with no clear indicators of malicious behavior. It includes common functionality for handling user input, validation, and communication with a parent window. While it uses some legacy APIs like `XDomainRequest`, the overall intent and implementation seem benign. The module is focused on providing a secure payment experience and does not exhibit any high-risk behaviors like dynamic code execution, data exfiltration, or redirects to suspicious domains. Some moderate-risk indicators, such as external data transmission and aggressive DOM manipulation, are present, but the context suggests these are part of the module's intended functionality. Overall, the risk score is low, and the module appears to be a well-intentioned payment processing component." }
/** * The `cardsecure` object represents a JavaScript module designed to manage and interact with payment form elements on a web page. * It provides a set of functions and properties for handling user input, validation, and communication with a parent window. * * This object facilitates the management of various form elements commonly found in payment processing, * including credit card number, expiration date, and CVV (Card Verification Value). * It offers client-side validation, input handling, and communication with the parent window through postMessage. * * @namespace cardsecure * @property {Element} formElement - The form element containing credit card input fields. * @property {Element} expiryElement - The input element for the card's expiration date. * @property {Element} monthElement - The input element for the card's expiration month. * @property {Element} yearElement - The input element for the card's expiration year. * @property {Element} cardElement - The input element for the credit card number. * @property {Element} cvvElement - The input element for the CVV number. * @property {Object} eleMap - A mapping of input field IDs to their corresponding elements. * @property {function} handleKeyUp - Handles key-up events on input fields for navigation. * @property {function} handleOnBlur - Handles blur events on input fields. * @property {function} validateForm - Validates the entire form and returns true if it's valid. * @property {function} validateElement - Validates a specific form element. * @property {function} splitCard - Processes and validates the card's expiration date. * @property {function} resetExpiryFields - Resets the expiration date fields. * @property {function} handleErrors - Handles and displays validation errors. * @property {function} showElementsErrors - Displays validation errors for specific form elements. * @property {function} handleSubmit - Handles form submission, validation, and data submission. * @property {function} setFormAsValid - Sets specific form elements as valid. * @property {function} sendMessageToParent - Sends messages to the parent window. * @property {function} notifyHeightChanged - Notifies the parent window of changes in height and width. * @property {function} adjustToParentWidth - Adjusts the layout based on the parent window's width. / const cardsecure = { formElement: document.getElementById('vf-payment-elements'), expiryElement: document.getElementById('expiry'), monthElement: document.getElementById('creditcards_month'), yearElement: document.getElementById('creditcards_year'), cardElement: document.getElementById('creditcards_cardnumber'), cvvElement: document.getElementById('cvv'), lang: (new URL(document.location.href)).searchParams.get('lang') \|\| 'en', eleMap: { creditcards_cardnumber: document.getElementById('creditcards_cardnumber'), creditcards_month: document.getElementById('expiry'), creditcards_year: document.getElementById('expiry'), creditcards_ccv: document.getElementById('cvv'), }, errorsMap: { creditcards_cardnumber: { en: 'Credit Card number is invalid', 'es': 'Nmero de tarjeta no vlido', 'fr': 'Numro de carte non valide', 'de': 'Ungltige Kartennummer', 'po': 'Nmero de carto invlido' }, expiry: { 'en': 'Invalid Expiry Date', 'es': 'Fecha de vencimiento no vlida', 'fr': 'Date d\'expiration non valide', 'de': 'Ungltiges Ablaufdatum', 'po': 'Data de vencimento invlida' }, cvv: { 'en': 'Security code is required', 'es': 'Se requiere cdigo de seguridad', 'fr': 'Le code de scurit est requis', 'ge': 'Sicherheitscode ist erforderlich', 'po': 'O cdigo de segurana obrigatrio' }, generic: { 'en': 'Security code is required', 'es': 'Se requiere cdigo de seguridad', 'fr': 'Le code de scurit est requis', 'ge': 'Sicherheitscode ist erforderlich', 'po': 'O cdigo de segurana obrigatrio' }, }, /* * Handles key-up e
URL: https://pay.buygoods.com/lib/v1/js/vaultFrame.js?v... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet appears to be a part of a payment processing system, which is a common and legitimate use case. However, it contains some moderate-risk indicators that warrant further review. The script extracts the current domain, which could potentially be used for data exfiltration, and it creates and interacts with an iframe for payment processing. While the intent seems legitimate, the use of an iframe and the ability to send messages to it introduces a moderate risk of potential abuse. Additionally, the script creates several form fields, which could be used to collect sensitive user data. Overall, the script requires further review to ensure that the payment processing functionality is implemented securely and without any unintended consequences." }
/** * Extract where we are hosting this.... / const currentDomainVF = ( new URL( document.currentScript.src ) ); /* * Represents an object for managing and interacting with an iframe used for payment processing. * It provides methods for initialization, error handling, styling, and communication with the iframe. * * @property {Object} options - Configuration options for the VaultFrame object. * @property {Object} elements - References to DOM elements used by the VaultFrame object. * @property {function} init - Initialization function. * @property {function} showErrors - Function to show validation errors in the iframe. * @property {function} addStylesheet - Function to add a stylesheet link to the document's head. * @property {function} createIframe - Function to create and append an iframe element. * @property {function} createTokenFieldIfNotExists - Function to create the token field if it doesn't exist. * @property {function} createCardNumberIfNotExists - Function to create the card number field if it doesn't exist. * @property {function} getScreenWidth - Function to get the screen width. * @property {function} sendMessageToIframe - Function to send messages to the iframe. * @property {function} listenForMessages - Function to listen for messages from the iframe. / function VaultFrame( options ) { const vaultFrame = { options: { elePaymentId: 'cardsecure-element', eleTokenId: 'cardsecure-token', eleCardNumberId: 'creditcards_number', eleCardMonthId: 'creditcards_month', eleCardYearId: 'creditcards_year', eleCardHashId: 'creditcards_fraudHash', eleCardKHashId: 'creditcards_khash', eleTokenName: 'payment_token', frameType: 'checkout', accountId: '', sessionId: '', lang: 'en', origin: currentDomainVF.origin, iframeCommunicationStatus: '', validationResult: false, // DOM elements to populate with unencrypted credit card information // To not position these within the checkout form // Use at your own risk. unencryptedCardElements: { cardnumber: null, month: null, year: null, cvv: null } }, elements: { iframe: null, payment: null, token: null, cardnumber: null, cardmonth: null, cardyear: null, cardhash: null, cardkhash: null, cvvTooltip: null }, /* * Initializes the VaultFrame object with the provided options, * sets up event listeners, creates the iframe, and ensures required form fields exist. * * @param {Object} options - The options object containing configuration parameters. */ init: ( options ) => { // Override default options Object.assign( vaultFrame.options, options ); if ( !vaultFrame.options.accountId ) { throw Error( 'No Account ID' ); } // Get the elements, so we can use them later vaultFrame.elements.payment = document.getElementById( vaultFrame.options.elePaymentId ); vaultFrame.elements.token = document.getElementById( vaultFrame.options.eleTokenId ); vaultFrame.initFrameType(); // Attach an event listener to the messages of the window window.addEventListener( 'message', vaultFrame.listenForMessages, false ); window.addEventListener( 'resize', ( event ) => { vaultFrame.sendMessageToIframe( { type: 'window-resize', width: vaultFrame.getScreenWidth() } ); }, false ); // Attach the stylesheet to the current document // vaultFrame.addStylesheet(); // Create the iframe vaultFrame.createIframe(); // Create the token field if we didn't find it vaultFrame.createTokenFieldIfNotExists(); // Create the card number field if we didn't find it vaultFrame.createCardElementIfNotExists( 'cardnumber', vaultFrame.options.eleCardNumberId ); vaultFrame.createCardElementIfNotExists( 'cardmonth', vaultFrame.options.eleCardMonthId ); vaultFrame.createCardElementIfNotExists( 'cardyear', vaultFrame.options.eleCardYearId ); vaultFrame.createCardElementIfNotExists( 'cardhas
URL: https://nervedefend.com/js/app.js?id=a5d2a03ff186a... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The script appears to be a bundled JavaScript module with no high-risk behaviors such as dynamic code execution or data exfiltration. It primarily involves module definitions and utility functions, with no indication of malicious intent or interaction with external domains. The presence of legacy practices or tracking behavior is not evident, resulting in a low-risk score." }
/! For license information please see app.js.LICENSE.txt / !function(e){var t={};function i(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)i.d(n,r,function(t){return e[t]}.bind(null,r));return n},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="/",i(i.s=0)}({"+924":function(e,t,i){"use strict";i.d(t,"b",(function(){return n})),i.d(t,"a",(function(){return r}));i("9AQC");function n(e,t){return void 0===t&&(t=0),"string"!=typeof e\|\|0===t\|\|e.length<=t?e:e.substr(0,t)+"..."}function r(e,t){var i=e,n=i.length;if(n<=150)return i;t>n&&(t=n);var r=Math.max(t-60,0);r<5&&(r=0);var a=Math.min(r+140,n);return a>n-5&&(a=n),a===n&&(r=Math.max(a-140,0)),i=i.slice(r,a),r>0&&(i="'{snip} "+i),a<n&&(i+=" {snip}"),i}},"+9CB":function(e,t,i){"use strict";var n=[96e3,88200,64e3,48e3,44100,32e3,24e3,22050,16e3,12e3,11025,8e3,7350],r=function(e){return e[0]<<21\|e[1]<<14\|e[2]<<7\|e[3]};e.exports={isLikelyAacData:function(e){return e[0]==="I".charCodeAt(0)&&e[1]==="D".charCodeAt(0)&&e[2]==="3".charCodeAt(0)},parseId3TagSize:function(e,t){var i=e[t+6]<<21\|e[t+7]<<14\|e[t+8]<<7\|e[t+9];return(16&e[t+5])>>4?i+20:i+10},parseAdtsSize:function(e,t){var i=(224&e[t+5])>>5,n=e[t+4]<<3;return 6144&e[t+3]\|n\|i},parseType:function(e,t){return e[t]==="I".charCodeAt(0)&&e[t+1]==="D".charCodeAt(0)&&e[t+2]==="3".charCodeAt(0)?"timed-metadata":!0&e[t]&&240==(240&e[t+1])?"audio":null},parseSampleRate:function(e){for(var t=0;t+5<e.length;){if(255===e[t]&&240==(246&e[t+1]))return n[(60&e[t+2])>>>2];t++}return null},parseAacTimestamp:function(e){var t,i,n;t=10,64&e[5]&&(t+=4,t+=r(e.subarray(10,14)));do{if((i=r(e.subarray(t+4,t+8)))<1)return null;if("PRIV"===String.fromCharCode(e[t],e[t+1],e[t+2],e[t+3])){n=e.subarray(t+10,t+i+10);for(var a=0;a<n.byteLength;a++)if(0===n[a]){if("com.apple.streaming.transportStreamTimestamp"===unescape(function(e,t,i){var n,r="";for(n=t;n<i;n++)r+="%"+("00"+e[n].toString(16)).slice(-2);return r}(n,0,a))){var s=n.subarray(a+1),o=(1&s[3])<<30\|s[4]<<22\|s[5]<<14\|s[6]<<6\|s[7]>>>2;return o*=4,o+=3&s[7]}break}}t+=10,t+=i}while(t<e.byteLength);return null}}},"+A1k":function(e,t,i){"use strict";(function(e,n){i.d(t,"b",(function(){return r})),i.d(t,"a",(function(){return a}));i("9AQC"),i("6PXS");function r(){return"[object process]"===Object.prototype.toString.call(void 0!==e?e:0)}function a(e,t){return e.require(t)}}).call(this,i("8oxB"),i("3UD+")(e))},"+X0y":function(e,t){var i={"":!0,up:!0};function n(e){return"number"==typeof e&&e>=0&&e<=100}e.exports=function(){var e=100,t=3,r=0,a=100,s=0,o=100,u="";Object.defineProperties(this,{width:{enumerable:!0,get:function(){return e},set:function(t){if(!n(t))throw new Error("Width must be between 0 and 100.");e=t}},lines:{enumerable:!0,get:function(){return t},set:function(e){if("number"!=typeof e)throw new TypeError("Lines must be set to a number.");t=e}},regionAnchorY:{enumerable:!0,get:function(){return a},set:function(e){if(!n(e))throw new Error("RegionAnchorX must be between 0 and 100.");a=e}},regionAnchorX:{enumerable:!0,get:function(){return r},set:function(e){if(!n(e))throw new Error("RegionAnchorY must be between 0 and 100.");r=e}},viewportAnchorY:{enumerable:!0,get:function(){return o},set:function(e){if(!n(e))throw new Error("ViewportAnchorY must be between 0 and 100.");o=e}},viewportAnchorX:{enumerabl
URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Use 1/2 Teaspoon Of THIS Before Lunch And Fix Nerve Pain", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://pay.buygoods.com/js/bootstrap.bundle.min.j... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The script is a part of the Bootstrap library, a well-known and widely used front-end framework. It does not exhibit any high-risk behaviors such as dynamic code execution or data exfiltration. The script primarily involves DOM manipulation and utility functions typical of a UI framework. There are no interactions with external domains or suspicious behaviors present." }
/! Bootstrap v5.0.2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) / !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t={find:(t,e=document.documentElement)=>[].concat(...Element.prototype.querySelectorAll.call(e,t)),findOne:(t,e=document.documentElement)=>Element.prototype.querySelector.call(e,t),children:(t,e)=>[].concat(...t.children).filter(t=>t.matches(e)),parents(t,e){const i=[];let n=t.parentNode;for(;n&&n.nodeType===Node.ELEMENT_NODE&&3!==n.nodeType;)n.matches(e)&&i.push(n),n=n.parentNode;return i},prev(t,e){let i=t.previousElementSibling;for(;i;){if(i.matches(e))return[i];i=i.previousElementSibling}return[]},next(t,e){let i=t.nextElementSibling;for(;i;){if(i.matches(e))return[i];i=i.nextElementSibling}return[]}},e=t=>{do{t+=Math.floor(1e6Math.random())}while(document.getElementById(t));return t},i=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i="#"+i.split("#")[1]),e=i&&"#"!==i?i.trim():null}return e},n=t=>{const e=i(t);return e&&document.querySelector(e)?e:null},s=t=>{const e=i(t);return e?document.querySelector(e):null},o=t=>{t.dispatchEvent(new Event("transitionend"))},r=t=>!(!t\|\|"object"!=typeof t)&&(void 0!==t.jquery&&(t=t[0]),void 0!==t.nodeType),a=e=>r(e)?e.jquery?e[0]:e:"string"==typeof e&&e.length>0?t.findOne(e):null,l=(t,e,i)=>{Object.keys(i).forEach(n=>{const s=i[n],o=e[n],a=o&&r(o)?"element":null==(l=o)?""+l:{}.toString.call(l).match(/\s([a-z]+)/i)[1].toLowerCase();var l;if(!new RegExp(s).test(a))throw new TypeError(`${t.toUpperCase()}: Option "${n}" provided type "${a}" but expected type "${s}".`)})},c=t=>!(!r(t)\|\|0===t.getClientRects().length)&&"visible"===getComputedStyle(t).getPropertyValue("visibility"),h=t=>!t\|\|t.nodeType!==Node.ELEMENT_NODE\|\|!!t.classList.contains("disabled")\|\|(void 0!==t.disabled?t.disabled:t.hasAttribute("disabled")&&"false"!==t.getAttribute("disabled")),d=t=>{if(!document.documentElement.attachShadow)return null;if("function"==typeof t.getRootNode){const e=t.getRootNode();return e instanceof ShadowRoot?e:null}return t instanceof ShadowRoot?t:t.parentNode?d(t.parentNode):null},u=()=>{},f=t=>t.offsetHeight,p=()=>{const{jQuery:t}=window;return t&&!document.body.hasAttribute("data-bs-no-jquery")?t:null},m=[],g=()=>"rtl"===document.documentElement.dir,_=t=>{var e;e=()=>{const e=p();if(e){const i=t.NAME,n=e.fn[i];e.fn[i]=t.jQueryInterface,e.fn[i].Constructor=t,e.fn[i].noConflict=()=>(e.fn[i]=n,t.jQueryInterface)}},"loading"===document.readyState?(m.length\|\|document.addEventListener("DOMContentLoaded",()=>{m.forEach(t=>t())}),m.push(e)):e()},b=t=>{"function"==typeof t&&t()},v=(t,e,i=!0)=>{if(!i)return void b(t);const n=(t=>{if(!t)return 0;let{transitionDuration:e,transitionDelay:i}=window.getComputedStyle(t);const n=Number.parseFloat(e),s=Number.parseFloat(i);return n\|\|s?(e=e.split(",")[0],i=i.split(",")[0],1e3(Number.parseFloat(e)+Number.parseFloat(i))):0})(e)+5;let s=!1;const r=({target:i})=>{i===e&&(s=!0,e.removeEventListener("transitionend",r),b(t))};e.addEventListener("transitionend",r),setTimeout(()=>{s\|\|o(e)},n)},y=(t,e,i,n)=>{let s=t.indexOf(e);if(-1===s)return t[!i&&n?t.length-1:0];const o=t.length;return s+=i?1:-1,n&&(s=(s+o)%o),t[Math.max(0,Math.min(s,o-1))]},w=/[^.](?=\..)\.\|./,E=/\..*/,A=/::\d+$/,T={};let O=1;const C={mouseenter:"mouseover",mouseleave:"mouseout"},k=/^(mouseenter\|mouseleave)/i,L=new Set(["click","dblclick","mouseup","mousedown","contextmenu","mousewheel","DOMMouseScroll","mouseover","mouseout","mousemove","selectstart","selectend","keydown","keypress","keyup","orientation
URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Prefer To Read? Click Here", "prominent_button_name": "Prefer To Read? Click Here", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Neuropathic Pain", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "brands": [ "BuyGoods" ] }
	{ "brands": [ "BuyGoods" ] }
URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Prefer To Read? Click Here", "prominent_button_name": "Prefer To Read? Click Here", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "brands": [ "BuyGoods" ] }
	{ "brands": [ "BuyGoods" ] }
URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Never in my wildest dreams did I ever think my mother's leg pain could become so unbearable", "prominent_button_name": "Prefer To Read? Click Here", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "I am going to end it all! If this is what it takes for the pain to stop, then so be it!", "prominent_button_name": "Click to play", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "I am going to end it all! If this is what it takes for the pain to stop, then so be it!", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Not worth living for...", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "you're in excruciating physical pain", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Buy Now", "text_input_field_labels": [ "Your Full Name", "Phone", "Email address", "Your billing address", "Zip Code", "City" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Buy Now", "text_input_field_labels": [ "Your Full Name", "Phone", "Email address", "Your billing address", "Zip Code", "City" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Model: Joe Sandbox AI	{ "brands": [ "Buygoods" ] }
	{ "brands": [ "Buygoods" ] }
URL: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Model: Joe Sandbox AI	{ "brands": [ "Buygoods" ] }
	{ "brands": [ "Buygoods" ] }
URL: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Buy Now", "text_input_field_labels": [ "Your Full Name", "Phone", "Email address", "Your billing address", "Zip Code", "City", "Credit Card Number", "Expiry Date (MM/YYYY)", "Security Code" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Nerve Defend", "prominent_button_name": "Buy Now", "text_input_field_labels": [ "Your Full Name", "Phone", "Email address", "Your billing address", "Zip Code", "City", "Credit Card Number", "Expiry Date (MM/YYYY)", "Security Code" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Model: Joe Sandbox AI	{ "brands": [ "Buygoods" ] }
	{ "brands": [ "Buygoods" ] }
URL: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Model: Joe Sandbox AI	{ "brands": [ "Buygoods" ] }
	{ "brands": [ "Buygoods" ] }
URL: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Model: Joe Sandbox AI	```json{ "legit_domain": "buygoods.com", "classification": "unknown", "reasons": [ "The URL 'buygoods.com' matches the brand name 'Buygoods' exactly, which is a good indicator of legitimacy.", "The brand 'Buygoods' is not widely recognized or associated with a well-known brand, hence classified as 'unknown'.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The presence of input fields for sensitive information like credit card details is common for e-commerce sites, but it requires caution." ], "riskscore": 3}
URL: buygoods.com Brands: Buygoods Input Fields: Your Full Name, Phone, Email address, Your billing address, Zip Code, City, Credit Card Number, Expiry Date (MM/YYYY), Security Code

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 15:47:57 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9891388424585177
Encrypted:	false
SSDEEP:	48:8od43TYPcjsyHYidAKZdA1FehwiZUklqehvty+3:8F7jSGy
MD5:	37DEB9226ED4CC3BAA3CFD54A5C2C4B1
SHA1:	4F8E3681B8490E35344B2A8936084DE59963B181
SHA-256:	04C858EB0589CF5F5E67EB876678DACA97DDFD25B94764C8E75783E99D49E4D7
SHA-512:	5F4B0321AB23BC20BEFB0811DAE08D2D30C4E936962C8632838AF9A338B9C0E4FFA4E20CD4C1F8FEE041A46A55762CDB0F23009D0BEBE75146D8E062B6F11135
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....p..g.c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IZ.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........43Iq.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 15:47:57 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.006201239449603
Encrypted:	false
SSDEEP:	48:8ud43TYPcjsyHYidAKZdA1seh/iZUkAQkqehwty+2:877jM9Qby
MD5:	42A4043FC3B182BF786AA2820AC2138A
SHA1:	16A2A0FA811CBA2E49C5085C65F7B79FD638A54A
SHA-256:	7D5FDFDF41FB858C50964AEB3352656AAC61F26BB34CE9A0347529A395C7D471
SHA-512:	6D23CB8177DA7212BF7B7941C524E48FBE59EA829B1A32A72901FCA658E83B0BBF365DBD295E6A4FFA7859379BD8B51D84CD2EACB32CC29C70810216526A78B5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......g.c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IZ.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........43Iq.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.014335740223483
Encrypted:	false
SSDEEP:	48:8xd43TYPcjAHYidAKZdA14meh7sFiZUkmgqeh7s6ty+BX:827jtnqy
MD5:	AF904B74C987AA7E3381A3596B3F782A
SHA1:	135D3FCBEEE64AB86936A32E373B07398685B951
SHA-256:	EABD993A6A388AC35A172B1A2501AEC11AF07760121E568F498A629E423BADF8
SHA-512:	110C6F369AF2636516A53C9376213F6C26C6BEA1F2F86E1FE95EA888A26594F223D59B23AAB7B0DE0E7A1EFDF0755565D8B0F37FA409282844FA91A5DE1A227E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IZ.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........43Iq.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 15:47:57 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.0037896013800855
Encrypted:	false
SSDEEP:	48:8Xdd43TYPcjsyHYidAKZdA1TehDiZUkwqeh8ty+R:8C7jH8y
MD5:	20E9E02E48C450557C1997C0DDB23B09
SHA1:	2C9D5615262208E78B13B5F66B3AC77BD5B14012
SHA-256:	E05A3B8122C223FA319FF62F5B7A4F68A46CDABC31B1E87A0000CDF31828E61E
SHA-512:	CF1E00E01DDA2A24A7B4D91FBAD21317657273BB6AE642D31FF21EAB69620C51D5B41B32A2D8013C83348176F80A3F9CB780F84EE8ED9585D447BD0865C47652
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....-.f.c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IZ.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........43Iq.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 15:47:57 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.992144444131387
Encrypted:	false
SSDEEP:	48:8Kd43TYPcjsyHYidAKZdA1dehBiZUk1W1qeh+ty+C:8X7jX94y
MD5:	28B66E0FD42A86CCD542993C70237208
SHA1:	12DC12AC5ED637D38FC4FF59E3F70DE7140F8818
SHA-256:	AA5935FB6CD76D367E07355A8106584E5B95F76070DEAA558F5E7350FF7A542D
SHA-512:	E8DBE84573D1532CF379B4602DDE1D2689F7C7E1CC6DE50709F6372CD9A40D4976EEA1B94544558EDD44B6D17310B8EAD4E25A2B644E093ECBD4374EB554B2E0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......g.c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IZ.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........43Iq.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 15:47:57 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.004211569249666
Encrypted:	false
SSDEEP:	48:8Jd43TYPcjsyHYidAKZdA1duTeehOuTbbiZUk5OjqehOuTbUty+yT+:8u7jbTfTbxWOvTbqy7T
MD5:	D3CF97D519348FB6BE2B0060A46442C3
SHA1:	9A54798F23315CFCFA212FA6801450DD8F4CA0E4
SHA-256:	B5DD368B1C6ABAB1B6B69412D127D937B4F7F38D5AAE978E3C87BF7F09ACEC7D
SHA-512:	369FCB51848A7A6951E148337624544DCDD32D8A0CBFFFF560852AF22F2762B112F7485B5E1C4FEE06C8A7D310FF33E96BE1B17DA0E7D04D5BB7282DB1576AB2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......f.c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IZ.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........43Iq.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 230x142, components 3
Category:	downloaded
Size (bytes):	3404
Entropy (8bit):	7.749529584234211
Encrypted:	false
SSDEEP:	96:aZh8Eoz0JDddpqjoUflkoUD9Ml8KHKp61:ajPoz07qjoUqj9WG61
MD5:	8D439902F93B6DB2381248929142407F
SHA1:	BD2CAAB4252C351B19CA72FBFF4E6538C753BEF8
SHA-256:	CCE52690F8F9FAEC7E259571EB0CB62D940A16482B3952793C6078C8B7DD70AC
SHA-512:	17F0A8F0C8D80C3C3105363E8192A5E37AB2AE3F7AD0CE7C7D103C2D54548ACE1E9CB411B94E1DC1C60DFD3517675E7DC29D89F8698D5A50A39A9B31A3121D63
Malicious:	false
Reputation:	low
URL:	https://cdn.buygoods.com/assets/checkout/img/visa-cvv.jpg
Preview:	......JFIF..........................................................................................................................................................."..........8.....................................................................?N\|...[............P...aHi...Hb.....Hb.....Hb.....Hb.....Hb.....Hb.....Hb...>k._Y.............:..^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@.9.._5.1.j..................{U....2.Y.r.XJX..F.).Y,..;F.........:.ak.Q.\|.>..s.....>.\|....K.8}.....B...K ^..R.y..!G.....xHQ.!G....z.S..9...t...o.C3J.z..42.M.._B&.............?..{..9APo.Q:AD.....N.Q:AD.....N.Q:AD.......X.7.7...-................................ 8@..5D..Pp...........?.<U4...m..~.C.6.Zo`.....I..2;Q&Gj$..D....#..dv.L..I..2;Q&Gj$..D....#..dv.L..I..2;Q&Gj$..D....#..dv.L..I..2;Q&Gj$..D....$n....!q..8.......B.\q..!q..8.......B.\5w+`.V.G......C..AE.....R....:...>..~.....U..^.xa....#..-.,....-.,....-.D0.T.....z ?...W..xA....A..E..p..J.\...r....f.....".0....`?...W..xA..

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	849972
Entropy (8bit):	7.97860489596154
Encrypted:	false
SSDEEP:	12288:nRGbATku+yB3MaiOsBe8HGlabA7SfgO75fb2+e+8NET4jbpmdZOexRXznow8vbt0:ngM5M/OsZTfgORbteNRbcd3rYDtsD
MD5:	288AD1D07706D9293026B65952B4C992
SHA1:	5888E69264E239B5296E8F88E6D036EC0548FDA2
SHA-256:	682A119A0AC45747C18ABD49B2BB561297818AEAE646E2D7FAE0D3E772B5A380
SHA-512:	B2463F277187B6B59708785D4BB01DED18A07183619BC56616166B2525B599BC65149E9ECEEC9576A6CF492B433913ED33EDE67AF67AB9EB2CC0F3F5C54124B3
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/image10.png
Preview:	.PNG........IHDR..............(.-.. .IDATx..w..W..{r..'gI..F9.Q.e.f49..1.6../..,\|..........5....6N.,..V.3......t...5.%Kx.8.u..[.U..w..:...p-Kpp0.#z.ZGHH.(aaa}.-?P...th..CC.....p.E.#8..q.NN@\|Z........#"L.C.".......0..uQ.z.....&..y.....Fob...@.%2R$:%......Jxz&..n...!17.q.Y.q..IT..1.n.h.S..KLBPD4B....%....JHH.D.Qm.'88......n.%...HpX.(!.!"........n.s.B.$,"...0..I).....Q..p9%..wd..R2...ty.g...-.ZPT.(..X...tD&&#$6N..<.G. $:V$<:."......r.1.......K.<..\|...Y.<..q...Gxt.GbR......T8....W..1pU....v.,Z..E..^...E...`.2./D..E"...Cd.../^..EK,I_....%."...p/[....r...j.(.5.D..n.%{.F....P\...~F..k..l..)..7aT]...k.1....[;Q.].e.u.].i[vbbc....m.."LW..YT..I.\_...k1.....[P......d.&......Xr....FLk.1..1...#.l.M.....S.:1.m;.;0...3Z.bBm3..l...([..ck..p._J..4u`..f... ....C......1=...S....5Mrn.O.u.{.el]3.ln..]..J........U..ZK.Wo@....&...U.r.H.5._....V..,]..E+\|$k.r........p5...F...._.1KW.h.l...D....t...tP.G.Dtf&.Q.pDF.;....).1\|.=.RXT...<..G.7....r....#$\.%..%.'..

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1844 x 610, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	390018
Entropy (8bit):	7.963867765534303
Encrypted:	false
SSDEEP:	6144:HkW1nbfHS6fpZxJ2OGtrgg3J8dr1EB0NH4G7Su1X8Ny10rfGo0eu20hSarLLaxSS:EsrVZz2Jr0drH7SuJ0rfXu20war6x8Ts
MD5:	BA0EF0C9F783C14B051DCDA67712A90C
SHA1:	ABF30574F9FF65A960EC741D05D00E52241E332B
SHA-256:	6F6CF63EDF5A290790C17418C58AAB1A9F07C391CF3153DF498C492D1E0AB357
SHA-512:	60C65440F7D835E63846ACA7B56F32AE620B244DB029822AD410E748048C1315CE65385C5037269690BDDAD4BC26000F0F4FD9AAAF96E7D9469289C26551D653
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...b........... .IDATx..g.T............'y.".6@E.....l1...c.F...X...Xc4jb..(b.w.A..wDi......w.5g....9{.\|.u.n.....g..........@...3g..m.O.....\|......\|..H..U........ ...@...... ..<.;.q...@... h"."f....>.....@:...W<L... ...@...... .....@..E...@ ...4..`2../\|......\|....{.vA...... ...@........@.LB.4..@.. h2(..<>......>....L..a.. ...@...... ...@ %....H...4>...t...........\|......... ...@...... ...@....@.,..9!..F"...,....>......>.....j!...@...... ...@..%!..Y......T...f..L.\|......>.....\|W...@...... ...@....@.. h..(.A..e'...,....>......>......F..... ...@...... ..2.@.,#\.....C.A3..&.......\|.......Q*. ...@...... ...@.2..4+.Z ....@.dP..y\|......\|..H..%\|..(.@...... ...@....@.. hV.9.B...%...n..._x....>.....@C.....@...... ...@...hL....I..!.... h2(..<>......>....^.....@...... ...@........t.f@.... h...d..^..>......>..M...... ...@...... ....@..^.`.. .C.A.AY....\|......\| ...^q...... ...@...... .i..........\..4..`2../\|......\|..p.Sq...... ...@...... P-..4.........@.dP

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (600), with no line terminators
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	5.2878412708890865
Encrypted:	false
SSDEEP:	12:S8mBsMHXOo5gHnyu2eJhGjT4OjnRXuzBp5GawVzH3ACyc3:ZmBsMHkIUxOjR2p6VXALG
MD5:	259516AB888A285735E41AC92997D007
SHA1:	209AA3F1233734A7E88E27CEEC31996E90235DB8
SHA-256:	BB58397EA9D0AEEB9362368282E23162F74D5D8D9ECDA474EE9FB528C566FC96
SHA-512:	784A521EAA7DD0FFD9340EEE95FAF47079202C7C6ABA8FC0F2439A7F094B55A436877868F211CC84DEC4E5585BF37833624DBD08A09A1A42151645E2073A7191
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISgAEJRYYoXJKuKHwSBQ1FINWMEgUNU_J1YRIFDTZBFGsSBQ1UV5_XEgUNMfITIxIFDatTbyISBQ1WZyCgEgUNn-u-jBIFDYemRVMSBQ30Q02-EgUNIkwOFRIFDZJ4-p8SBQ1LRIZgEgUN0zsaXBIFDYWoV20SBQ3rZl0cEgUNRZWEqxJrCQZyhNn41jGXEgUNRSDVjBIFDVPydWESBQ02QRRrEgUNVFef1xIFDTHyEyMSBQ2rU28iEgUNVmcgoBIFDZ_rvowSBQ2HpkVTEgUN9ENNvhIFDSJMDhUSBQ2SePqfEgUNS0SGYBIFDdM7GlwSHgkiAOEn-DbQfxIFDYWoV20SBQ3rZl0cEgUNRZWEqxIQCeAJZ7XK7ZWAEgUNL4BngQ==?alt=proto
Preview:	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

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 444 x 333, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	128534
Entropy (8bit):	7.99622526026367
Encrypted:	true
SSDEEP:	3072:SrC0KY/VgTWm7gk8oBp0pMrw7bXU5yxxeNy7JzHm3wIP:yeTW/80OObUy7VSJP
MD5:	5D5DB8A3676DFB3D2A0B57488FC1D32A
SHA1:	8414DE84F0AB191310DC7F1121F4260B19BE9D4C
SHA-256:	9AE0EE76476B65BB577ED1C6D679DBB3A2276360AE2C568F20E7C287CBB46FAE
SHA-512:	AAA090A42916E4CD18B02789BD59AEB7C8B01CC692CD924928396116D7E675456FCC7172C295C345BF4439EB8F1ECECCA069D20DA038ECFD9674672B1780400D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......M.....{~.c....IDATx...Aj.@..P..-......\|.RL...av.....!.............................................................................1...;......7..>.m[..$..d..&..}..[.QUKw..>..d..5.-..g.I>.,3..F.+g.t..3y..VU.3.w.c.#s..$?U..>..1....../... .gf......PJ..{.........TaL0k...l.o0.a.D....g..v}..'.f..G.Q...EAeY../.d2...Q..`.j...Tt.6s..K.l...m]..<vn.......y.Y...h,.a.1.\|.....Z!7.:CN..f.d.3...J.T'k....S'?#3.y..w.S .b.\|.q.....f.'y.4.="Vu]/..e..v..".!......NW...s..[...Q#......x..~..v.u....v.1!..-....r.q.}....Wf...........&...7...9....Ddr....+.4"..f{..{...^.s.A.....D.......oc.w!...l.p.^.N..<.P#u.7...X.{0.Nu.#......a......gth.S..E..j.B..4./...of.ID.M...A...s8.....`!..\z.g.......]M.U....\.....m+...A.D.&.Q. ..d....$+.n....Bp!Y.m. Lt#.CBD.a0.t..3..l..m..G...t...zw....Sun.....NU..(..'...&.:@S..{4....Lz...@....+.............+t...,xFDz..<....~.....n.z\|...M..d.V.A..9.<.m......#m-.....TV..\..!-l...s.Lf2...X.m9....<i... .!.....p....l..%H....m07n....

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	dropped
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.122191481864228
Encrypted:	false
SSDEEP:	3:CUnaaat0lllpllHh/:B1/
MD5:	22EDB6617E829A61262A0835D85572F7
SHA1:	4FFEBFC1255C0DA73AAB342450A9EE09FCACCB86
SHA-256:	46D11334D5DE0F7347F38CC87FE4F65D9BFBAE29D2FD722CE5952C238A46F077
SHA-512:	7106BFA2254364EF59EF74666E59C28C69355448C36DF9BE19B6ADCA9B6E33C48A10486947E10F50C442AF0D9C48AA0D27E691AB13C16D844D88BE225E22922B
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31196
Category:	downloaded
Size (bytes):	76736
Entropy (8bit):	7.997251565954726
Encrypted:	true
SSDEEP:	1536:H+PBHf887u/cbftitvX4pbcY3EF7kh8cw7BTY1QVOG8v35:EUm/4pX4htGHcw7BfSJ
MD5:	4F5EC865A8274AB291B6A42B5F70639E
SHA1:	6F00F8C75208B96E585646824C4011093446ACD2
SHA-256:	B5BE0732AB1CC16692E165A7950810F0C772E400F6A2F63E1026A0B938016813
SHA-512:	B0B51FEEDC480EEFDC72418FE08AB97E61AC4CBFBE73A7E3851E543E88314053845F46FAE04FD7AA16F04EB910625C7E5DBDD9C7D5A6247616CCCA6D31E739D5
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-brands-400.woff2
Preview:	wOF2......+........`..+e.K.$....................?FFTM....`..z.....<..".6.$..,..... .....][.q..".~$.n"..{;Ucb...F.n...g1^p\.8..[=....W$.......m..@.+.,....RC..Q"@KD..S.V....p....jI.u^.k..`.8...... .jk.n..V...K.1.a..M...Y"Z....}.p.>.T...w..9u..R.G..%[.<8Mg...j]..~+..._E...I...h.jh.X.V.4..hA?./.v\|E2..C...4EK..m.e.g..n......gEC.)2.......(...B....r.0.^..at.......m>...O.....N..Z.i.P}\|...T}..._...2.K4:..!>..w..^............,L].........g?....X..&..HF.i.<.....FI....ys..9....63I&.7%."3..)..I!.).....m...k(.._......V.u../.-M].R....@'v..:.......G.Du.....g.i.....F..S...L5'_..\|G. .....r........tu.05e.)Q..f$..d....DGt.........W....Uk.L.g...V..K...7!.D.....d.r.......3u&].%..T .."...O.x..y!O>..!Z[..]D^.}M...)......RF'F.[o.............5G].y.Q&WD....")X......).X.):.)X5+.....d.f.}.Y@......\|.....i...^.>..H1...U....`.b...u.}...9...=?.~~.fZ.]....A.!..;aC2..PI...[..q.p..V]?.J..I%h....0...E...w.(.]9...??..W.....i}U.bUr3..w:`....I..8.3Y.t.H.......x..?....y...m..o..Vd4.m..

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13900)
Category:	downloaded
Size (bytes):	13942
Entropy (8bit):	5.229867335336104
Encrypted:	false
SSDEEP:	192:jEVwrixboFI2gI51neUo51np8lMs+6L/GkqwrGOi6k1051a6CYFgwze8ry:NDw6f+6TG+GOi6ka51fV68ry
MD5:	8853D1C9ECA698986DABD0A124662813
SHA1:	25A7A016CC9EEF27AD246DF99AD2F8CED8AF10CB
SHA-256:	871228A64882F469E28D4CD70B7F8A67D2EF284C0F8FD63984CBF59D0B9C3879
SHA-512:	54A613D386FCC5D75F9B2C2D44DE599868BC47F45FCA716BF192257DE543FE3C59AE9FDC11E6883C5B5D84C0F0BFDDD1216C8F6A7CB88F240E3F1C6577667996
Malicious:	false
Reputation:	low
URL:	https://www.paypal.com/tagmanager/pptm.js?id=buygoods.com&t=xo&v=5.0.465&source=payments_sdk&client_id=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq&comp=buttons&disableSetCookie=true&vault=false
Preview:	(e=>{var i={},t=[{id:"analytics-xo",triggers:[],run:function(r,o){t.q=[],t.pptmTrack=function(e,t,n){try{n=n\|\|{},delete(t=t\|\|{}).userType,o.track(e,o.objectAssign(t,{pageType:o.get("analytics-id"),sub_component:"smartincentive",item:o.get("pptm:containerId"),mrid:o.get("pptm:merchantId"),context:o.get("pptm:context")}),o.objectAssign({disableSetCookie:o.get("pptm:context").disableSetCookie},n))}catch(e){o.log({t:"error",msg:"Messaging track failed",stack:e.stack})}},t.log=o.log;var e={PaypalOffersObject:"ppq",ppq:t};function t(){t.q.push(arguments)}r.PaypalOffersObject=r.PaypalOffersObject\|\|e.PaypalOffersObject,r.ppq=r.ppq\|\|e.ppq;var e="production"===(e=o.get("pptm:env"))?"https://www.paypalobjects.com/muse":"development"===e?"https://localhost.paypal.com/muse":"https://www.paypalobjects.com/muse/stage",n=e+"/muse.js",i=(e=e,o.get("pptm:env"),e+"/analytics/index.html");function a(){var e=o.get("pptm:merchantId"),t=o.get("analytics-id");r.ppq("init",t),r.ppq("showExperience",i,"body",{f

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8885
Entropy (8bit):	5.432730638501317
Encrypted:	false
SSDEEP:	192:q9aDhdCsdm99Du6CXd/94DnjCedU9DD8YCRda9ZDyGCrdw:KKUtA8AHFxT
MD5:	711B8D5A1F25EBD978E6A987501EF7ED
SHA1:	0D3CDFF886C207DDDD386DDBA36796CDD9BF73C0
SHA-256:	D7CEBC9CFD32750F8C4680A522EBF3D673F7DB3A50D5DE6DF3A4D4225F15634E
SHA-512:	540BE6601F6EC279C6A13E16FE3FF36D4627D8F3BC37D636974BE13EE94D76099F64BBE8A006AFA94DFE8544AD5E862CC99BAD8788ADE707BBDAA31C0A5041D0
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700;900
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-f

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	32
Entropy (8bit):	4.375
Encrypted:	false
SSDEEP:	3:YGNZQR38JR/cGp4:YGsRsf/Np4
MD5:	66317843A547F6249F6C9CF8F29CB0E8
SHA1:	3B246114AEFFB6BEF51D5D30BE4A175A1C6CD24F
SHA-256:	BAFD1D4A4B9710213877B631442C4E84C4FD1B625D0AAE22F9A3F77D25DD9AA4
SHA-512:	04B548A182FD947DC646EA288215B6315A39A3A2B7CD515F8A4DD6E12F4858332150BD43D1C2CA14BDCDD27337B475F4262CE3A45B569B718E3092E5C9B64392
Malicious:	false
Reputation:	low
Preview:	{"checkoutResult":"Invalid URL"}

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 42, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11016
Entropy (8bit):	7.96771333173349
Encrypted:	false
SSDEEP:	192:cGYCuHQY8gC2cFstnbBN+nZCSXmtTXnPXKdr7YEl553ORtj:tBSQY8gChFybBNnLNSBzl7ORt
MD5:	F8CEEEAD5762B13C0006BD7E87B58303
SHA1:	F1D3B1CD44210675BBD091B377AA1C9AE4113959
SHA-256:	F963522C3847EEECF8358C314F6293AA0D314FE539968DF7A55C617538D5309C
SHA-512:	25224779B033B450D7EE79657FB228723E946CF95806FABB4584C62ACD46EF97D4034BF0590CB9AC148391D3E4CA8CEF8C21AF8CF75B51F0077DE3AF92F7B83E
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/app/buygoods.png
Preview:	.PNG........IHDR..............q.....sRGB........DeXIfMM........i.......................................................8.....rIDATx....]E...v..}K'...I .$@..B" .":b.g...((.dD..y6..!......).4.....".$..YM.l.t.N/.N..{.9.....9}ow.23..^..:U...WU_}..Wu.....z.f.b.%.X.c{...'v..j..]...=.<..Q...k..8S..Mf3.....6.4....%..z...U../7....aZ......k.c....j.?..D.D...<.[..Gm...}.....;w~o...L.>..X...S.o.rl{.eY.<..\|...........y9.'^N..=.q..B4.L...........`..8..-.m;.L.*.....w,.4Y..?.......L.q.o%.:X..j1]......w.e&.....1\|..7.J...'}2y......#b.D.....I..(.....t:m .}...t..."...h~~.5R.<.........?i.ihhH...N......w.Z..3U....'...F...D..d.Sd%...E..G.hq.....6.m./..T..].c..>7?..oK..M..].]k..f..+.....\|...v...SZ[.....7...e.......#......o...g.n..h..0%..~w............._.5.o.....%..~c\|.7..%.V....u...c1x&...>\|.=..3.o......z....c..C'...$..l.........S./0.x.b..?z.h>..h..........w_O8.C.y.w.....U`:.F`m..J.[.N.... .......G.C)@..br.GK..pa.e.xiii1........{..SO=...aHk.8.Uw~...c....!.,.

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 780 x 405, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	455922
Entropy (8bit):	7.994062842791454
Encrypted:	true
SSDEEP:	12288:GEokhpPqBc8FsiXyEQ+oWXZOa0YUQzyM4F:jlduF++oy0YUSTI
MD5:	6F544D8B5FEB626B84AEDDD0AFE8E829
SHA1:	DEBD6FA108CC96CE75BD4FC943DC54B9D26074E4
SHA-256:	481C410EC1C7E6E812F4FD53B1F5C1002F0427028F3A269D81600BAFB46BF27B
SHA-512:	7179C1CC37E7050754FAB84CBB6670B085892D3EBFE1D67550E81031C071ED75AAA3F25B40F36736A3511C922CD9DDB135009BAD016AE6F2B084EA27F5C9B780
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............S.v... .IDATx.....W..{...~x3..7w.{.g.{..&...$.d.$.,Y..3.JR...........+3+.s.>YQ p.L.$9r..N$Tf....9......{@........b..8.o....g....x`...l.ff..,.y... &...ffff....y..i.......j..j..j.db....Z..Jhm..>...L..S)/I....d.-ceY.z..2....z....\e...t6...Q.`_=cCmL.t0=.e...y...`...).5..cV....uL.Y3f,....}1.V...3.o..fgg.m...M.....@...'..C.=.{@.._.{'...-y...X.~....sw..L....6..[.An2i...bjjB..Xl.q..i..aFF:.........K.))N..8...x..........0/....8....y.....M..,.....+.4....TLGK.....w70....H7.......1....Xe.....2......U!.v..`A.a.t`x./q}.u.\|K...[r..6..t.<y.......L.,..J.^:>.#..}F....&4.A.AA.......L.g.Xg..........j..(+.$7;...h2."l..F.1BYnV$by.Q....4Px.,.. VS.:o..i.V........BZ.J.<.t.1....`.....>L.C.Z&.U.mR.>k....65...:..l.u.H.6}.t.....<....J..t...x.<.pX. B&T:0<i.];..E...-..Yq7Y...L..OM....A}}9.....D...H.!.......$%....DzZ(..!dg.+`.@A A..Q.D}.B.....4..%.We.YCu....\....0.. ...ZAWG...}=....0....H/S...L.a5O......<XA.V....%.<.(}.=.{......O...K.....m...q.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8777), with no line terminators
Category:	dropped
Size (bytes):	8777
Entropy (8bit):	5.74592493850625
Encrypted:	false
SSDEEP:	192:dzcsuFPZ45bMR15F8cuvhv/9cTl8HUBxiJx4b+lW6F73ou/3cyd:dcLG5AH5J0l/WWJeb+leO1d
MD5:	808F3CD4D9192E604DAA9C8FADCF8C20
SHA1:	26E95B91625D1332E65E6B6709E883A0ECE5A404
SHA-256:	13681AB3191AE5DE11FD99579DD8DDCFF9B1EF84F6E7EFB924814D930FDBAF22
SHA-512:	92F2327BCAFD8E78AA28DE3C8A4966BFA0B43EC7F0B50C6ED1D7B5C219C97C623376A3450E599A687E0C61E391253D6727C57E858043179D2790E43013ECD396
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(W,h,i,n,o,s,z,A){W=b,function(c,d,V,e,f){for(V=b,e=c();!![];)try{if(f=parseInt(V(477))/1+-parseInt(V(465))/2(-parseInt(V(443))/3)+-parseInt(V(476))/4(-parseInt(V(428))/5)+-parseInt(V(484))/6(-parseInt(V(447))/7)+parseInt(V(472))/8(-parseInt(V(384))/9)+-parseInt(V(419))/10+-parseInt(V(415))/11,d===f)break;else e.push(e.shift())}catch(E){e.push(e.shift())}}(a,122045),h=this\|\|self,i=h[W(474)],n=function(a4,d,e,f){return a4=W,d=String[a4(427)],e={'h':function(E){return E==null?'':e.g(E,6,function(F,a5){return a5=b,a5(478)[a5(432)](F)})},'g':function(E,F,G,a6,H,I,J,K,L,M,N,O,P,Q,R,S,T,U){if(a6=a4,null==E)return'';for(I={},J={},K='',L=2,M=3,N=2,O=[],P=0,Q=0,R=0;R<E[a6(378)];R+=1)if(S=E[a6(432)](R),Object[a6(467)][a6(479)][a6(416)](I,S)\|\|(I[S]=M++,J[S]=!0),T=K+S,Object[a6(467)][a6(479)][a6(416)](I,T))K=T;else{if(Object[a6(467)][a6(479)][a6(416)](J,K)){if(256>K[a6(458)](0)){for(H=0;H<N;P<<=1,Q==F-1?(Q=0,O[a6(424)](G(P)),P=0):Q++,H++);for(U=K[a6(458)

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8747), with no line terminators
Category:	downloaded
Size (bytes):	8747
Entropy (8bit):	5.731664381883961
Encrypted:	false
SSDEEP:	192:PfbSJO9C0IFcL60fNfOOnbrIEqE+S4yl2a69e217:Pz0fBf8OOnbrbU/1e217
MD5:	773FC22F7B089584ADDD70DBB28380D1
SHA1:	ECA5447B1E761A0D13D509FA5D265ABF7543613D
SHA-256:	9179841E039E90D4BCE930137BF40F1CB9B5C014EDB6EFDEB114003FDD899C3D
SHA-512:	703BFA2708DD3DAAE791F3F3709C28827641D1B7B6CC268639A534D3EC6B5ABBCB74B2569C39161B8A3736BC4A98CB174890A6FF9A5747B63CF6485A41B326E9
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js?
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(W,h,i,j,k,o,s,x){W=b,function(d,e,V,f,g){for(V=b,f=d();!![];)try{if(g=parseInt(V(247))/1(-parseInt(V(319))/2)+-parseInt(V(255))/3(parseInt(V(233))/4)+parseInt(V(314))/5+-parseInt(V(236))/6+-parseInt(V(316))/7+parseInt(V(308))/8*(parseInt(V(287))/9)+parseInt(V(227))/10,e===g)break;else f.push(f.shift())}catch(E){f.push(f.shift())}}(a,175649),h=this\|\|self,i=h[W(235)],j={},j[W(218)]='o',j[W(206)]='s',j[W(210)]='u',j[W(262)]='z',j[W(263)]='n',j[W(248)]='I',j[W(320)]='b',k=j,h[W(292)]=function(g,E,F,G,a1,I,J,K,L,M,N){if(a1=W,E===null\|\|E===void 0)return G;for(I=n(E),g[a1(306)][a1(211)]&&(I=I[a1(312)](g[a1(306)][a1(211)](E))),I=g[a1(291)][a1(212)]&&g[a1(297)]?g[a1(291)][a1(212)](new g[(a1(297))](I)):function(O,a2,P){for(a2=a1,O[a2(305)](),P=0;P<O[a2(307)];O[P]===O[P+1]?O[a2(280)](P+1,1):P+=1);return O}(I),J='nAsAaAb'.split('A'),J=J[a1(260)][a1(240)](J),K=0;K<I[a1(307)];L=I[K],M=m(g,E,L),J(M)?(N=M==='s'&&!g[a1(271)](E[L]),a1(226)===F+L?H(F+L,M):N\|\|H(F

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 780 x 405, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	455922
Entropy (8bit):	7.994062842791454
Encrypted:	true
SSDEEP:	12288:GEokhpPqBc8FsiXyEQ+oWXZOa0YUQzyM4F:jlduF++oy0YUSTI
MD5:	6F544D8B5FEB626B84AEDDD0AFE8E829
SHA1:	DEBD6FA108CC96CE75BD4FC943DC54B9D26074E4
SHA-256:	481C410EC1C7E6E812F4FD53B1F5C1002F0427028F3A269D81600BAFB46BF27B
SHA-512:	7179C1CC37E7050754FAB84CBB6670B085892D3EBFE1D67550E81031C071ED75AAA3F25B40F36736A3511C922CD9DDB135009BAD016AE6F2B084EA27F5C9B780
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/image6.png
Preview:	.PNG........IHDR.............S.v... .IDATx.....W..{...~x3..7w.{.g.{..&...$.d.$.,Y..3.JR...........+3+.s.>YQ p.L.$9r..N$Tf....9......{@........b..8.o....g....x`...l.ff..,.y... &...ffff....y..i.......j..j..j.db....Z..Jhm..>...L..S)/I....d.-ceY.z..2....z....\e...t6...Q.`_=cCmL.t0=.e...y...`...).5..cV....uL.Y3f,....}1.V...3.o..fgg.m...M.....@...'..C.=.{@.._.{'...-y...X.~....sw..L....6..[.An2i...bjjB..Xl.q..i..aFF:.........K.))N..8...x..........0/....8....y.....M..,.....+.4....TLGK.....w70....H7.......1....Xe.....2......U!.v..`A.a.t`x./q}.u.\|K...[r..6..t.<y.......L.,..J.^:>.#..}F....&4.A.AA.......L.g.Xg..........j..(+.$7;...h2."l..F.1BYnV$by.Q....4Px.,.. VS.:o..i.V........BZ.J.<.t.1....`.....>L.C.Z&.U.mR.>k....65...:..l.u.H.6}.t.....<....J..t...x.<.pX. B&T:0<i.];..E...-..Yq7Y...L..OM....A}}9.....D...H.!.......$%....DzZ(..!dg.+`.@A A..Q.D}.B.....4..%.We.YCu....\....0.. ...ZAWG...}=....0....H/S...L.a5O......<XA.V....%.<.(}.=.{......O...K.....m...q.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 500, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	849972
Entropy (8bit):	7.97860489596154
Encrypted:	false
SSDEEP:	12288:nRGbATku+yB3MaiOsBe8HGlabA7SfgO75fb2+e+8NET4jbpmdZOexRXznow8vbt0:ngM5M/OsZTfgORbteNRbcd3rYDtsD
MD5:	288AD1D07706D9293026B65952B4C992
SHA1:	5888E69264E239B5296E8F88E6D036EC0548FDA2
SHA-256:	682A119A0AC45747C18ABD49B2BB561297818AEAE646E2D7FAE0D3E772B5A380
SHA-512:	B2463F277187B6B59708785D4BB01DED18A07183619BC56616166B2525B599BC65149E9ECEEC9576A6CF492B433913ED33EDE67AF67AB9EB2CC0F3F5C54124B3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............(.-.. .IDATx..w..W..{r..'gI..F9.Q.e.f49..1.6../..,\|..........5....6N.,..V.3......t...5.%Kx.8.u..[.U..w..:...p-Kpp0.#z.ZGHH.(aaa}.-?P...th..CC.....p.E.#8..q.NN@\|Z........#"L.C.".......0..uQ.z.....&..y.....Fob...@.%2R$:%......Jxz&..n...!17.q.Y.q..IT..1.n.h.S..KLBPD4B....%....JHH.D.Qm.'88......n.%...HpX.(!.!"........n.s.B.$,"...0..I).....Q..p9%..wd..R2...ty.g...-.ZPT.(..X...tD&&#$6N..<.G. $:V$<:."......r.1.......K.<..\|...Y.<..q...Gxt.GbR......T8....W..1pU....v.,Z..E..^...E...`.2./D..E"...Cd.../^..EK,I_....%."...p/[....r...j.(.5.D..n.%{.F....P\...~F..k..l..)..7aT]...k.1....[;Q.].e.u.].i[vbbc....m.."LW..YT..I.\_...k1.....[P......d.&......Xr....FLk.1..1...#.l.M.....S.:1.m;.;0...3Z.bBm3..l...([..ck..p._J..4u`..f... ....C......1=...S....5Mrn.O.u.{.el]3.ln..]..J........U..ZK.Wo@....&...U.r.H.5._....V..,]..E+\|$k.r........p5...F...._.1KW.h.l...D....t...tP.G.Dtf&.Q.pDF.;....).1\|.=.RXT...<..G.7....r....#$\.%..%.'..

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1999x1194, components 3
Category:	dropped
Size (bytes):	183630
Entropy (8bit):	7.917191650769488
Encrypted:	false
SSDEEP:	3072:tTLXk00exS1ylQVPrK+ZjtJokVLPjBKyeU5w796c9PR75G2BqsuVeZl:tTLXjOY+jPjBKypwJ6cXkuZl
MD5:	85D865BBF236DEB2677C0FD0072C6D78
SHA1:	64400D9BEE82F33CD2ED2EB5614585749694988F
SHA-256:	3D4D5FB22B0B6EA947A73623F97CE99B40ACA4C513F0D15CFE7D542CD0FE3C11
SHA-512:	A1B8A0429C630CBE9EB806344C59B92E35F2E07FCDFF44A137A508DACD4845590E345D000229905B3330CA659EF99E3C257265043E14EEDD43111A7E93007617
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..`..h.Es.{...V...&.o...CU.5=ga.&.T.L....V..,9.t...MFSh.2.L#....jJ...I.......r2MK.3...+J.<..5i.G.S......f.E.Gl..kF ......(h...i..f..fN..............4..#.Pp......q[...w.\...9.i.0.[&.9.n...F........L=ii.....S..jd...4....FlcTDsS...9.b"U..LD.(.,.9..U.-J..)..QJ.57ni.P.3..U4.U.".....P...&..]&.-FEZd4GA.O...T.EEVb..D....i.R.P.qR.RG.Z.hh\|I.U..*.}j....=..b.....g

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 104 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20114
Entropy (8bit):	7.9850253659974735
Encrypted:	false
SSDEEP:	384:MCoFME1gBlZjWKqCDfRxReEucTw2H9GFmwv/qxd7Aqu8P0ySmh+w1I9a:uFrQjKKqY4zcTwSc0mwdc38Pow1II
MD5:	95E2D4CCC24CDB636C60AB8F8401EEB5
SHA1:	703C2E8130DA332E87E732E3AB6DC89EB1AAA7FE
SHA-256:	0FF2946303D8D8ADA87EE85E43754925FB417B037BDE005A9B94612AD660F26A
SHA-512:	DE58FFA8B6F6AFF19F2CB02E59498A2AD762B265A09E6383695E8DB5601451ED0BBA681C27511DC53515F759A0B918AC2D927BD396010BD14F8998DE1BEC5F77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...h...d.....j.u.....sRGB.......NLIDATx..ZitTU..~.h.".......A:@.S..H..H.0O..).L...E.E.....D..0..C0..aJ.I..se.TIU5.{...Y.........^k.s.P....o......=...7@r.....T..g..HIQwKK..V.......=.r..}n.{......o.e0U.....bc..?.}.`....A.y.=b=.P...0.{..]5...%...-[.z..........z$'?.C........}....4.Q.>.k.Gx...'7..J..?..<.w.{<J..22.NG.j....U....s.$%..c.._.....!.q..g...........{..n......#.=..`Ph.zt....=......z..:.'.i....C.!.....4-...h.9.....a}.....Fxu.............U=..w.....]....P..cl...........m.k.ef.0.A.yJ..#_......6..X...X'l.h.Zq..."...fE&.K.T.w.b..}.../.. }.;bjG.......K....0g.G...}.....+3.jr.....:...?.S...+/...;zv....J...-.&....V....s...c....v..2.m9...v..{..4KRKr..!.....j..4OF...+..2.Fo4j..~...('.#]......W.....?..[s]}.%.@...<..G..q...].'.zq..r6A/......T.'.v.....h...u.l^...."fjK..c...X..c...(.]$.9.h..*..J.\|.\|.P6.(.%.4...G...FI....$.N.$..M.]{)5...Q&.........03r..(..~.M&a.-y..Bl0..T..3G..!....5.."a....~nz!.}...@.1...j(..N.,...\...I...

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.452819531114783
Encrypted:	false
SSDEEP:	3:HLVRn:r3
MD5:	7F95CD4B8FDD56B09C175454B3A36FCD
SHA1:	E96D3E5AD6AF9734FD49FC15F0F25D4AB5CE2263
SHA-256:	C00F3F31464F1896C99C6084DE8BDECD3BDF874E4BED6631AE2F782C3E5A4412
SHA-512:	6A13AB6087D3B9D8D53BB59C03E2A8EB74A6C8739640D7E5B6F82431BD055A420A91E80768D74C1C940A7E918706C9C948DF4E8A93D790419E170113E3707CB0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAngCWe1yu2VgBIFDS-AZ4E=?alt=proto
Preview:	CgkKBw0vgGeBGgA=

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.122191481864228
Encrypted:	false
SSDEEP:	3:CUnaaat0lllpllHh/:B1/
MD5:	22EDB6617E829A61262A0835D85572F7
SHA1:	4FFEBFC1255C0DA73AAB342450A9EE09FCACCB86
SHA-256:	46D11334D5DE0F7347F38CC87FE4F65D9BFBAE29D2FD722CE5952C238A46F077
SHA-512:	7106BFA2254364EF59EF74666E59C28C69355448C36DF9BE19B6ADCA9B6E33C48A10486947E10F50C442AF0D9C48AA0D27E691AB13C16D844D88BE225E22922B
Malicious:	false
Reputation:	low
URL:	https://www.softwareprojects.com/images/transp.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53624)
Category:	dropped
Size (bytes):	54903
Entropy (8bit):	5.710715163123397
Encrypted:	false
SSDEEP:	768:jrBpR5A/yvsBpUrgmgGVbddlDCIAJBWFrevESaeOJV24Lcc6pXQUpncsunF:jrLAnC8m13dwIACrKYJVVT6pH2F
MD5:	812113DB16365B6B4783F3425982B6F4
SHA1:	C6A80834B26E7E52053C588EF27DFBE61754D628
SHA-256:	F29F9952DD8EFEBE88BA66394F3518D9167842F12D55FBDFFCC6180E3A8F2B73
SHA-512:	DFA937F76AF9919AC36B9FEB6EC2FF9F0565810909967F38380A7E332FBE35B9381A46E6FD1AE46AE026F2FAF15E4F1D658C8D0DBF73A99997EE55E837DE86CB
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function X(w){return w}var D=function(w,l,W,b,z,r,A,Y,c,Q,U,t){for(t=47,U=12;;)try{if(t==87)break;else{if(t==l)return U=12,c;if(t==47)c=A,Y=J.trustedTypes,t=37;else if(t==11)U=12,t=b;else{if(t==31)return c;t==b?t=J.console?w:l:t==W?(U=33,c=Y.createPolicy(r,{createHTML:k,createScript:k,createScriptURL:k}),t=l):t==37?t=Y&&Y.createPolicy?W:31:t==w&&(J.console[z](Q.message),t=l)}}}catch(E){if(U==12)throw E;U==33&&(Q=E,t=11)}},k=function(w){return X.call(this,w)},J=this\|\|self;(0,eval)(function(w,l){return(l=D(29,24,41,25,"error","ad",null))&&w.eval(l.createScript("1"))===1?function(W){return l.createScript(W)}:function(W){return""+W}}(J)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 392 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	124410
Entropy (8bit):	7.99584820773321
Encrypted:	true
SSDEEP:	3072:4dM4WfdLXUQsmJBCsnBQ4bkMo3gAoJYH0+FAB8:TvLXUQsmJBCqBQkkMowAo1+p
MD5:	7665192FA309984204650B1CA6BF7D34
SHA1:	14D781BDDB92CD7E79BC8611DC063A32F1E9F4C1
SHA-256:	7F40C29221ECF0C48B05A363BAF4FAE151D130F96FE5AB43F1E8DE1CBDCA1CCA
SHA-512:	6B714613561083C1836E1484CF599DBF8AD2C7112BDDD170135F284A6FAE7780ED0E8EE5A9D76A5E7D96EE391504F4CA447C721137D806863BE29C968212B61B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............P.....sRGB....... .IDATx^.W.d.y%...o.Tf.6....`.!.%b....P..k..a...4ZCr.)af..D.$.``..A.....62..Wk.sndd.i40 .X.......s>......7..o+.....H.......F...i. ....@..../....?..>..6.....o\|....n............K...-..p....8..o..x.\|_...ev..].........#....S$.)B...y(.../....!'D.p.^.."CQ.p..A..s..[j%=.B.....Z.6.2EZ.p+ p=..o..,.8.n.Jd..m..N.0;~..)2.G......N.@Qy(..8.4...s...{>..<....s..N..n...4..:.x.I.~.{"h4..~.~...@....v..s...[...TY.....up.&...5P9....p\.iV.......:..y.O......Xbr>..v.]=.7O.OR......O~./..W.{.3...ef..k...1......uR._\|r..{........n..*.9.2..E.7...GR.......NF.........N1....m..K...iQb.......E..u;.Xr!....=.......d...!.].....q..X.. =......).f....8....\.{".2T.P{.J3.E.F...........B{.q\|.E....A...9..6.fKD..Y..h.t.D..h\...\......R.-.x...{.9.e.t6...>..SDA....FM4...k..Hc...E...#Ta....d9.<..f.Z..&r.B.T.g....9.P.g.1"..(..Y......1..B......I.D....P.-T...a.....$....!.5..k..PY.(rdE....hv.......+Q.gy.x.".A.f..(.T6`..Q....f.G.3D.4Yb.,.4...-..

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1078 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	668416
Entropy (8bit):	7.996595782602283
Encrypted:	true
SSDEEP:	12288:CnIC7J4iwzLFz/Wt5qrEnbPuGG+scs9XZIkrFn25Sd+0CkUXC5S/:c7J4iwhiwrEnjuGG5caWkr9Zbqb
MD5:	FC39BF86D0770FB9F5C15A85DA770838
SHA1:	76A7F6628DEB6D3C8A229C958FBDA6A1EE67893A
SHA-256:	D64E3B9C7C89BAFDA4D4BBD373E1DD1983A1364E2D13C99F58D97EE5D34EE7F6
SHA-512:	23D8A2DFC012ECE50B9DB52B8F5792D05FF964324A8D5E1982E881A64714C796FE9C692D7F51DCEE16D693089F9F09C8EE73FACD8BA42C13D2F23441276C2266
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...X.......f\.. .IDATx..i.m.u.......\|....A.DS.HS.M(.....3."X?,.H... ...HH.Dp...,..D....b.@..1....J.h..H..HJ..{\|.{W...u...~..>..O...8...]s.]..WU.;$j..M.....H..k.mT.r..c..~...kxo.w....~s....p~....G..fv.....9...?....\23..gf.....%..sf......5...Q........Er..Z..`f7.{..~w..w......QL......e3.Zk.9..Z.R...ryS.<....7....b.....&...n....{{..>.x7n.s......{~.............y.u.....?.~...../^\|.[=...]....._.z.VYvvv...w.....=.....^N..e.\|.{..../....o.K.....~..c.....a".......<..'..GGGG...q.aME.......qn$.l$..1.G......D..f...=4....ZJ.8....\....p......>.M..$..Zf7.'py.\Y...,..g..Q......W......q..=.X,<.e.w..U~.............Nlttttt.%.u.W...c..f.&3....u\Jq...#Q..x..D...3..u.E.....k....9e...x..'.o....Z..O..DH......=j.....wF.....r......\|a.X.2^.+.\|~.Z}n.\~..J)....b..C3{.................:........t....}......R...o.?.Fb..qI.>.!...Pq.:..hl+.......a.....S.r...<....R.lyP.=,..h.+..5...a...:...yk\........KK"-_...e.Q....Tk}.....+[[[.t.d\.sc.Z...../....

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4923), with no line terminators
Category:	dropped
Size (bytes):	4923
Entropy (8bit):	5.229165665959288
Encrypted:	false
SSDEEP:	96:EtuyUFcyrdZkFcF9roji4z0w3S0pmfLGMTlvsxzGtcQNbob:9yIrkFcF9rei4z0w3S0Yf9hkz9QNbob
MD5:	44AA39C05CA1C928A374A58D23468E2D
SHA1:	BCDDDCDB1905DE30CD8006873D18C6925A57103B
SHA-256:	E44133CF24BC0B3ACE873A5719E5DA1ACD8B0B0414899A21F4A9E7A3C09E2223
SHA-512:	1477465D9CFE34F5B3A66FB05A594FED57DE150BFDD8FACE7EB18DD9DD724D6D4C9192EEBA2DAFD786BCF5C52D57E6F404E76BCD0F956F71E9DE138461F6B91E
Malicious:	false
Reputation:	low
Preview:	!function(e){function n(i){if(t[i])return t[i].exports;var o=t[i]={exports:{},id:i,loaded:!1};return e[i].call(o.exports,o,o.exports,n),o.loaded=!0,o.exports}var i=window.songbirdLoader;window.songbirdLoader=function(t,r){for(var s,u,a=0,l=[];a<t.length;a++)u=t[a],o[u]&&l.push.apply(l,o[u]),o[u]=0;for(s in r)Object.prototype.hasOwnProperty.call(r,s)&&(e[s]=r[s]);for(i&&i(t,r);l.length;)l.shift().call(null,n)};var t={},o={8:0};return n.e=function(e,i){if(0===o[e])return i.call(null,n);if(void 0!==o[e])o[e].push(i);else{o[e]=[i];var t=document.getElementsByTagName("head")[0],r=document.createElement("script");r.type="text/javascript",r.charset="utf-8",r.async=!0,r.crossOrigin="anonymous",r.src=n.p+""+e+".b109e0c6fd2a5b6b93b2.songbird.js",t.appendChild(r)}},n.m=e,n.c=t,n.p="https://includes.ccdc02.com/cardinalcruise/v1/b109e0c6fd2a5b6b93b2/",n(0)}({0:function(e,n,i){e.exports=i(76)},5:function(e,n){var i;try{i=window}catch(e){i=this}e.exports={apiId:void 0,bin:void 0,deviceFingerprinting:

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1674132
Entropy (8bit):	7.980882273640555
Encrypted:	false
SSDEEP:	24576:dvNZFdUDvWBXEr4GPFhoHR7UE+ba/SIVALvmpL1HgaJgW63p6UzLFyHqyOtEIGLU:dVZLc3PIHRATIVzA33p6UvgIcU
MD5:	C193F4FB5A2822E1C02C7A36F84EA4B1
SHA1:	B34E1766C932448DCF9658F338B6C9E316139DFF
SHA-256:	FAB5D7D80A17A226221FE74D5A94F8A8EF7D8C6025FDB9DF684623487BB3BD60
SHA-512:	FE4419950FF8A54CAC3ADFB3AE10B7CB6CEC26159D2694FE91657411976711D689173438D11C5DF9018F9F3B034889B8BD88233FCCE992C4765EDADAF7D9E8CF
Malicious:	false
Reputation:	low
Preview:	:....1....QZ5xuqBJH_s... .....0...j..........p.f..Z...>.i......C..hl..V...1l/.y......[....&mOZ.c.(Y4L.:.5. qZ...(N3.Yt...E2....af....1..:.=..NHB3........K....0m...2X.g..:..9......f.........M.:..1.B.....:.....i...R.Sz.../e+..\|.w.']...>.v.[.?.b.~M......5k.<..~D...v....4.A..Cl.5.......U.z...uy.C...h,"dPz..\|.r3.jh1.e;.YC:.8MQ...k.}..t....I....vw...#..r>G.@.).n'.~..+...h.....V=..)...nJ^{V.,.L...$.5.-.D......U....N_b..c0..1.brv.~Q.E/=.....).F.......5....Y.....O_...ur..z.[.I..<LY.q.`.........8...../.Rr..c&.g.t!..H$.M...W...S.I.SG.%X_......:5...L......!v.Au.B.L,P<.t.^...\|.!....V.7...&.,,........_...."}...NX.K.Lx.r....C...3...)<...n..n..P......78..iy]."....v.....zU.j>...%....~.;s..E.y.F.nW...C..Q...M@.N1....c\S..S..:....,....[.?...$.+.'rK.c.e...r....n...p...N...mnG......9..a..:8..... ....$..-.l.w.....K,.=...2...1.(..RC..,.:.2.<.L..we.W....m.......t/-.\.8.S..1....T.%Dg.}.1u.h.....O.?_B..%...[-.?...,...Gdt.#....Z..r..3.U. .V6.......G]u\...@.o../..t

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1560
Entropy (8bit):	5.008545586736689
Encrypted:	false
SSDEEP:	24:2dqNPWLjAnXJEdeaxM2mlmRhNNnHMhHuY7mdcL0O8HiLBk0Sw1DM8azF0uMt8DhR:cqtijORYHAX7mdcLX8CoqqF+qR
MD5:	370E7689A57D1643CA133C4FB6596622
SHA1:	3E8CB256403BEFB01B1D4FDFDF2307DC0E495FC8
SHA-256:	F740E798E89FA4F02E462670AA719EA72CC7A15E3930CA4986C22E1A765E67DB
SHA-512:	34D920D126C03DCD2BA7224F6C18F7CE9E4C5B89B96FA71A2F457C7465D58108C66C75CAE3D1AF7500A9F1B607110B3EE56147FF5B83FF9D90A91CCFE08D5B6F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="30px" viewBox="0 0 42 30" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>American Express</title>. <desc>Created with Sketch.</desc>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Add-To-Cart" transform="translate(-284.000000, -120.000000)" fill-rule="nonzero">. <g id="American-Express">. <g transform="translate(284.000000, 120.000000)">. <path d="M42,26 C42,28.209 40.209,30 38,30 L4,30 C1.791,30 0,28.209 0,26 L0,4 C0,1.791 1.791,0 4,0 L38,0 C40.209,0 42,1.791 42,4 L42,26 Z" id="Path" fill="#1976D2"></path>. <path d="M19.255,11 L17.142,15.683 L15.039,11 L12.344,11 L12.344,17.726 L9.341,11 L7.067,11 L4,17.981 L5.815,17.981 L6.486,16.423 L9.918,16.423 L10.6,17.981 L14.065,17.981 L14.065,12

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1092 x 603, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1685997
Entropy (8bit):	7.985189530964064
Encrypted:	false
SSDEEP:	49152:8wuMs9575rVdU/9lrcM8EIOEa3pGaqYqM/:8wEL5rVCVyKfqY1/
MD5:	BD268A1F2337D1AF2E05D04B2CD1FD46
SHA1:	9D1237ADFD36CE81D75C03AA1A0306EA3C3D3320
SHA-256:	C49FB5EA748456015DD4FAEB6822072E9E12DD34A4AFE7A74F40371DF8003DC0
SHA-512:	ABFD6DC3D55B321269D4917AE5FB6F4C0F7EF0743F4C70BFC203673FA10E8C03DB04ADF5ECE54F1B2EF3551F2737F797B4779D47FF49C8BC0DF4352D025102D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D...[.......AW.. .IDATx.\..{.Y....I..d......X233S...8...u...y.i.9..G=..,.r..?.......Wm.u.%... ....X.Dz...e.D..#;.qE.....BD\| ..J$.Z$L9z...P$.".P...#.9.R#`...ZhA.-.....S.H.AYK.:.....F.H.z&.0.P..r.L.........s..,@KW&Z.Q.....d...3b."`L.G\......S....@T...l.b350$.C.....1.."...%c.Q...}B.......D..$.5.P.A..@.!P..:.h...X.....y!.......n..3..O.9..y<_\|N,"..r,.s..^%c..P.F..6^..L.lC....D.b...1.)..$-.S..X#..(...Er..)..X.....FL.N...IH+..........]....d$.a.6.XA]...&."a.4 ....8Xr..........d.%!.;.jk8...27!.,.q.&^.c......yQ)j9...\<..x.....aLS..Bb..y.)(lHGNu......(.OCfE<.*.P....<... .>..5.(s...mCaK.2...U......4g"...b....d..-.y...K.~.....6p.s....~IK..L...&.....Y...jtM..>T...J8...7...N..9..o..b.F..1..A....vt..14...atO910..A.l.IL..ah..}.n.=.3..+.`.?.;...!..`j...N.^.;....y7v..`..S..9e..~..M7.....(.{...."4.e..-...V.7...^..<....n..B7.V.0....d+..k....c..M..p.....4......T.$".=.%..(r.".)..Mf.'.y....2Tu..s...a...xf\.}...X.E......h.n.{...>..5.

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	4.477284161274567
Encrypted:	false
SSDEEP:	192:oyX0GNiZvsjkBRWyD9VyNBeWR0rInKbNcLP1aC:oyEGcBdBRWyD90zf0G1
MD5:	0BE6449723FFD588AD6E670299B4C7DF
SHA1:	3D38D94E8432350A4A5A4619760F375EA065AD9E
SHA-256:	17B044EAF63DE9B618748537221BEC19CC5A26FF8A072D78ABE670F1322EDF49
SHA-512:	3A0C7D6FE58BD577167674F2F36BCA1B155B35802E487526358482018E700E0022E5420F461910DC6B7221ADA66F2B0FF8CF30902AE9E3714D1108611691198E
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... .............................................................m..R..e.............................................P......&..O..2......9...............................................................8..................z..C..@..l..........Z..?..Q..............................[..b..*......p..a..c..J.......,......h.........^..................y......................1......Z...J.../.........................b...'......................\......\|.................................................@...^.........................................................F...a.......>..........................p.../...................!...c... ... ...q...............R...1.....................M... ...f...#...E...&...:...w...}......I...'...c......p.../...9...<...h...'..........\|...P...L...r..........`...I...[................)............................................................~.+......

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5960)
Category:	downloaded
Size (bytes):	292328
Entropy (8bit):	5.587765265978994
Encrypted:	false
SSDEEP:	6144:lls9yIJDtxaPZGaUsUhNlxciE3OPoKZU/72jAYqmjF:LuJZ4PPyNlgeA7vmx
MD5:	0D2F2395C7F082D032F839A5232DF534
SHA1:	9429595D4199769479B5C048F9562B9CE03D6BC0
SHA-256:	8CE4EF2EF5D963C3644B28CC8B94D4C8E400A4519BBEB0CCE79D02660DB06B69
SHA-512:	07FFBE37B97ACB4C16CFD202458E9EB3E65B9B517E494500A7AC8A69D582E6563BA157A3406E3128E779DE238070F0AF2B3DED0AF9EC57C97A740EF515EE9BB9
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-YYYMFT7FN8&l=dataLayer&cx=c&gtm=457e5190za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","nervedefend\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELEC

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/js/jquery-3.7.1.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.122714743434665
Encrypted:	false
SSDEEP:	3:CUXPQE/xlIle:1QEn
MD5:	ACCBA0B69F352B4C9440F05891B015C5
SHA1:	9D01CC5DC8E042C0D4AD6CFB8B3AC38E84A5EF9F
SHA-256:	47043E4823A6C21A8881DE789B4185355330B5804629D23F6B43DD93F5265292
SHA-512:	D3C4A5427BF645CC226106B0E8C28A76B0B91F50FA6D77E962A3B59B85BE2A0CFDB94EC0F40742F10C18025573D8FBFADECDDF60F4652BAE671F6031C02A7CB5
Malicious:	false
Reputation:	low
URL:	https://lhr.stats.paypal.com/counter2.cgi?i=127.0.0.1&p=098ed052bf3e3a35536a73f4ffde6325&t=1736527768.526&a=14
Preview:	GIF89a.............!.......,........@..D.;

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	227306
Entropy (8bit):	7.870804468109246
Encrypted:	false
SSDEEP:	6144:pvyEQhye2lUnb1PZkdzaB0fLhxdgsDW0T3vUlOB/3ppIbqwG4y:pvTQhWUnQeQbT3vU8xNr
MD5:	21175D2B398227B5DE9ACAA75044ABBF
SHA1:	20A0953BC4C4DF35A654270AAB20B4E1A0232171
SHA-256:	C99B961B8F6B36FB2B3154D826CA0D4328C6BD0A3AEBF244D41289CB886A92D0
SHA-512:	3FA0AE5D7DA82303E5B322A8D2C9B42050CD6BE1453A376E06CD3B1B82D7E6AF5F9241D3DCC82B0EDE392DAB4DBD2A8C80827E2D1CFBFBB9A79F065CF74A26D0
Malicious:	false
Reputation:	low
Preview:	:..../....QZ5xuqBJH_s... .....0.j..........p...........ftypdash....iso6av01mp41....moov...lmvhd..........<...T.................................................@..................................(mvex... trex............................trak...\tkhd..................T.................................................@....V..........mdia... mdhd..........<...T.U......Ghdlr........vide............ISO Media file produced by Google Inc.....1minf...$dinf....dref............url ........stbl....stsd............av01.........................V...H...H..........AOM Coding............................av1C.........$..>.$........colrnclx...........stts............stsc............stco............stsz................stss............vmhd...............\|sidx..........<...................@...........@.......5...@...........@........M..@.......HW..@...........@...........@......./...@.......0...@.......TV..@...........@........1..@........O..@...........@.......(...@........z..@...........

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1004)
Category:	downloaded
Size (bytes):	156349
Entropy (8bit):	5.577769733306636
Encrypted:	false
SSDEEP:	3072:hKp2fAMsAtH3bJQmH3W30FASENpGTRvU9Vxjizttq8d3mYcY3rTdVmD8uycf3Fel:hKpEfH3bOmH3W30FASENpGTRvU9Vxji7
MD5:	8D09972392315E3867A240438D2B992E
SHA1:	F9B1114442879BA62FBD06A358C8AD3277B987F5
SHA-256:	47389E1E244B6C5236CC293158720A06871841F9BA039F9344CF230B02D26506
SHA-512:	0D8964010E5C4FCEF472AEF3AE27A6FB6EA0D0498FADA509E00820ED172211D03B728FD569C277FD5ED984724EFE2E5806AC4C4DBC067B6C96CE40C7B0043E3D
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/59/4a/places.js
Preview:	google.maps.__gjsload__('places', function(_){var Hra=function(a){const b={notation:"standard",minimumIntegerDigits:1};a.Jg?(b.minimumSignificantDigits=1,b.maximumSignificantDigits=1):a.Ig&&(b.minimumFractionDigits=Math.max(0,a.Fg),b.maximumFractionDigits=3);b.style="decimal";try{let c;(c="en".replace("_","-"))&&c in Fra&&(b.numberingSystem=Fra[c]);a.Eg=new Intl.NumberFormat(c,b)}catch(c){throw a.Eg=null,Error("ECMAScript NumberFormat error: "+c);}Gra=a.Kg=a.Jg=a.Ig=!1},tz=function(a,b){if(!a\|\|!isFinite(a)\|\|b==0)return a;a=String(a).split("e");.return parseFloat(a[0]+"e"+(parseInt(a[1]\|\|0,10)+b))},Ira=function(a,b){return a&&isFinite(a)?tz(Math.round(tz(a,b)),-b):a},Jra=function(){this.Eg=null;this.Kg=this.Ig=this.Jg=!1;this.Fg=0;this.Lg=uz.TF;this.Hg=[];Hra(this)},Kra=function(a,b){const c=a.Jg,d=(0,_.Fa)(a.Ig,a);b=b.replace(_.pha,function(){c.push("'");return d(c)});return b=b.replace(_.oha,function(e,f){c.push(f);return d(c)})},vz=function(a,b,c,d,e){for(let t=0;t<b.length;t++){var

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10332)
Category:	dropped
Size (bytes):	274173
Entropy (8bit):	5.40457286808602
Encrypted:	false
SSDEEP:	6144:SMcycTv/5RZINgYCsGsRtFYuvrNfEyLqs5rIh/FMNm0hYNg:SMcycTv/5RZDYxYuvrNMyLqs5rIh/FMT
MD5:	55A8A46C4801610793153D26FC193399
SHA1:	2DBAE169215E532CA3A0E204B582FC8E5A954D1D
SHA-256:	546566046F001EA550C863185FE9E236C5E2A8CA834D0AF50CF54DBA8AA453C4
SHA-512:	2D8AF7AA1BE105DE4101033425A64DC58B3E4B70137A9357D70CFC774A36D44BA5A74C2FB8B7911A097CC357D22AB29C78D32C291E71A791785425F33F7BC5E9
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('common', function(_){var Xja,Wja,Zja,eka,mka,nka,qka,Nr,rka,Or,ska,Pr,tka,Qr,Tr,Vr,vka,wka,zka,Aka,Cka,Es,Eka,Gka,Hka,Ps,Lka,ut,Tka,Vka,Uka,Zka,$ka,cla,dla,ela,Zt,eu,jla,fu,iu,kla,ju,lla,mu,rla,sla,uu,tla,ula,lma,mma,Kma,Oma,Pma,Qma,Rma,Sma,Ww,Wma,Xw,Xma,Yma,$ma,bna,ana,dna,cna,Zma,ena,gna,ina,qna,una,vna,Ena,Cna,rx,sx,Gna,Hna,Ina,Jna,Lna,Mna,$w,ax,fna,Zw,sw,bka,Nna,dka,cka,jna,Sna,Tna,Una,Vna,Wna,zx,Iv,Zna,$na,aoa,Ika,Js;.Xja=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.$g(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=Wja(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=Wja(f,a,d+1));e&&b.push(e);return b};Wja=function(a,b,c){a instanceof _.rh&&(a=a.Nl(b,+c));return Array.isArray(a)?Xja(a):typeof a==="boolean"?a?1:0:typeof a==="number"?isNaN(a)\|\|a===Infinity\|\|a===-Infinity?String(a):a:a instanceof Uint8Array?_.zc(a):a instanceof _.Ic?_.Uc(a):a instanceof _.sf?a.Lh():a};._.Yq=function(a){return!!a.handled};_.Yja=func

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 392 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	124410
Entropy (8bit):	7.99584820773321
Encrypted:	true
SSDEEP:	3072:4dM4WfdLXUQsmJBCsnBQ4bkMo3gAoJYH0+FAB8:TvLXUQsmJBCqBQkkMowAo1+p
MD5:	7665192FA309984204650B1CA6BF7D34
SHA1:	14D781BDDB92CD7E79BC8611DC063A32F1E9F4C1
SHA-256:	7F40C29221ECF0C48B05A363BAF4FAE151D130F96FE5AB43F1E8DE1CBDCA1CCA
SHA-512:	6B714613561083C1836E1484CF599DBF8AD2C7112BDDD170135F284A6FAE7780ED0E8EE5A9D76A5E7D96EE391504F4CA447C721137D806863BE29C968212B61B
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/image13.png
Preview:	.PNG........IHDR..............P.....sRGB....... .IDATx^.W.d.y%...o.Tf.6....`.!.%b....P..k..a...4ZCr.)af..D.$.``..A.....62..Wk.sndd.i40 .X.......s>......7..o+.....H.......F...i. ....@..../....?..>..6.....o\|....n............K...-..p....8..o..x.\|_...ev..].........#....S$.)B...y(.../....!'D.p.^.."CQ.p..A..s..[j%=.B.....Z.6.2EZ.p+ p=..o..,.8.n.Jd..m..N.0;~..)2.G......N.@Qy(..8.4...s...{>..<....s..N..n...4..:.x.I.~.{"h4..~.~...@....v..s...[...TY.....up.&...5P9....p\.iV.......:..y.O......Xbr>..v.]=.7O.OR......O~./..W.{.3...ef..k...1......uR._\|r..{........n..*.9.2..E.7...GR.......NF.........N1....m..K...iQb.......E..u;.Xr!....=.......d...!.].....q..X.. =......).f....8....\.{".2T.P{.J3.E.F...........B{.q\|.E....A...9..6.fKD..Y..h.t.D..h\...\......R.-.x...{.9.e.t6...>..SDA....FM4...k..Hc...E...#Ta....d9.<..f.Z..&r.B.T.g....9.P.g.1"..(..Y......1..B......I.D....P.-T...a.....$....!.5..k..PY.(rdE....hv.......+Q.gy.x.".A.f..(.T6`..Q....f.G.3D.4Yb.,.4...-..

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58028)
Category:	dropped
Size (bytes):	58090
Entropy (8bit):	5.177609334324191
Encrypted:	false
SSDEEP:	768:p6N2iZT6Pt+CoA5j0J6YUgw/G1NAjB7XHLcUj7oUTX6XshDe86UYiqYr2IkJYu1A:pgA5jy6YyX97nPJKsQ8Blq0XkJP1/iT
MD5:	2399A4BC9AD51ABC6953F078C14A37BE
SHA1:	D9D782FF309AABEE107121530D3F1E432453260C
SHA-256:	79DA320C6FB87E096C737F174D81EEDA39902923945C8B7A90BDC4B7D934734F
SHA-512:	E0990444A2857644A3FEE340CC51B3B52D36BEC3BC7C5F35099066C9AE74C22AA0E9BF0A03E7CC8051ADE9E0828170DBD179A414F4A8C04ED525405E0095C5C9
Malicious:	false
Reputation:	low
Preview:	/! For license information please see muse.js.LICENSE.txt /.!function(){var e={215:function(e,n,t){var r,o;!function(i){if(void 0===(o="function"==typeof(r=i)?r.call(n,t,n,e):r)\|\|(e.exports=o),e.exports=i(),!!0){var a=window.Cookies,c=window.Cookies=i();c.noConflict=function(){return window.Cookies=a,c}}}((function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var r in t)n[r]=t[r]}return n}function n(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(r){function o(){}function i(n,t,i){if("undefined"!=typeof document){"number"==typeof(i=e({path:"/"},o.defaults,i)).expires&&(i.expires=new Date(1new Date+864e5i.expires)),i.expires=i.expires?i.expires.toUTCString():"";try{var a=JSON.stringify(t);/^[\{\[]/.test(a)&&(t=a)}catch(e){}t=r.write?r.write(t,n):encodeURIComponent(String(t)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|5B\|5D\|5E\|60\|7B\|7D\|7C)/g,decodeURIComponent),n=encodeURIComponent(String(n)).replace(/%(23\|24\|26\|2B\|5E\|60

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	dropped
Size (bytes):	78743
Entropy (8bit):	5.178440533196338
Encrypted:	false
SSDEEP:	1536:tp+1ZTPR2t4tXbih05ve8/pwgrEpc9t0vSAIAxCs:MFRIpk0vSAV
MD5:	0AA8D64E726C4A57ADB5C88F9115996B
SHA1:	901169527507FF9E662CF64D8E361F359308970D
SHA-256:	7E1F1503DF765CCA5E099891B94E318A2EF95081BA2AF1EB6D417CC884BFDBFE
SHA-512:	EF6583F7684BB3B4F91405E7DEF90D65F9561BAA609540C3A66F3B4DE4267D283C2A7AF298BD86DF447B6ACE05993C2182EF47EDE4B30C25F79A38AD49E70A9F
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v5.0.2 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t={find:(t,e=document.documentElement)=>[].concat(...Element.prototype.querySelectorAll.call(e,t)),findOne:(t,e=document.documentElement)=>Element.prototype.querySelector.call(e,t),children:(t,e)=>[].concat(...t.children).filter(t=>t.matches(e)),parents(t,e){const i=[];let n=t.parentNode;for(;n&&n.nodeType===Node.ELEMENT_NODE&&3!==n.nodeType;)n.matches(e)&&i.push(n),n=n.parentNode;return i},prev(t,e){let i=t.previousElementSibling;for(;i;){if(i.matches(e))return[i];i=i.previousElementSibling}return[]},next(t,e){let i=

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	dropped
Size (bytes):	231468
Entropy (8bit):	5.55025488613649
Encrypted:	false
SSDEEP:	3072:nt3a4IwyIJ/rcapI0LNGzlwvOfyk3pBSJiO9xxc+E3OPoKZxTNYaF2i:t9yIJDcarGpUseiGxc+E3OPoKZlmK
MD5:	5688669ED9EC13D9EBFEB6D608AA507D
SHA1:	D5C7E154F8AE8B262274B5212BFEFCBAF7B399BC
SHA-256:	5A1F7D3E9A76D640A8A0A428B6497F92F75FBCEBEBD5CC6D43EE522E0CC6BEF3
SHA-512:	CE36CB3EF47423EF26895E9BE248FD9A0BB88CE9779A4FED0E9B58233A427B78E8050F4BBAA53DBB1C6815DDF4AB3F533946B254014440D56AC15C5A32F3E504
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_regionValue":"","vtp_countryValue":"","vtp_autoEmailEnabled":true,"tag_id":10},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-627854

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1999 x 1125, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3785982
Entropy (8bit):	7.989848379634906
Encrypted:	false
SSDEEP:	98304:DrR2TQoyp6UC2GQKX3uC3LvHlLfZ0635MMvXGwf1Nup25Q1f9oXYLF:DYEtpnC2f3C3Lv/MMv2wtgM4uILF
MD5:	8EDD084365917CCB4120EEA1711FDC08
SHA1:	832C19D69AA8513EE33B25192387E9802DECC970
SHA-256:	123BBCB807F00E78D70DC30574AD944BB47F24598B1607E951D4D0720000335D
SHA-512:	DCC9ADE2CD302B931E6BCD337955B6F74F49EF71BDD804E36FCD9FAF0D89516C5295D080C3AFF2F188BA4D1FD8649FEBA5640B74A3032526B1A036D710262531
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......e.....7r.G....IDATx^.....y+3.........Hx...$A..4.....o..I..(......$z.I......n.7kM.^k......y2....7z=..W..[@UF./......C..!...s...j9....'.3.u..so0!...:.VR...C..m.....K:O.s.F..RF.y.G.R..9Zf.T\..M..e.../......ab..=...D7K.R....P]r..:....UU^\|[....6......E"...w...I.iHo.$.^....]....i.2...#.I...v..0"...M.w6.{..9.}G...].......&..l..s.P\.<I...+.........6....+C..;Cq.].N..+..~...5.\u......5.T(#-......./.;.J......#...j..P^.V..V..I.....N....{..6.G.....;........kZ./T7...I;36$.7.........Bq.}.B;......u.G.6...Du.:.....Co.P..fm..fU9s.i.P....9.C5w....[B5g[...i9{...-..m............:r=.....H...........\|...U.]..i...m....G.]4W...)..b.{.TF.Z.[.io...........@..v(.7O...C...G.~Z..w.WT.Z\s.P._.}..uB....H.-<y.=,..B....G...UU.................Z\|"t......j..R_.9..I.+.S.L....=.V....4-....T.\|R....G...Y\|R..xB..=.....'.O..P!_.ny.j..Bw..U...i]...M.(.x\U,{2.....=%m..5w>...\|5....._...K..C...J....P..r.$..Z.J.R..6...Co.7..

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1960 x 1080, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	875993
Entropy (8bit):	7.99273026393617
Encrypted:	true
SSDEEP:	24576:iZwBc3fnC81f+eAk9+nGrs/YY25DAYllGHc:iZf/bAkJ4/h25fuc
MD5:	5B44796B212BBCA32F52F69D7A395D54
SHA1:	ADDF36869E43FE16755813A59051DD9DA8BF7E5B
SHA-256:	DF7650DB6E54F47D8C702DA1E53A05EC8AE45F0FF5F417CF74F7785548271370
SHA-512:	CB50B6E94F92DC180BED0DF74FAA45AE21E82E490BF84CBB338ABB208B4BEFB6B23D87FDC84F2431780864EDDD4805914C912B36D238C336BBCE98B0CA3B8FE6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8......Y.g.. .IDATx.....d.u.....:N... ........%..$.dY\Y.L.kYY^+.x-{.#+q..U..HQ"M.Q..A0...1....&.t......UWWWu......C....._.{.,.2............0..............@@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	149334
Entropy (8bit):	7.993459345806458
Encrypted:	true
SSDEEP:	3072:mCk6RHQUw3XIrbfJOvM/8KusThbXBhR1v7Q8o6IoAJ6o7kvAJl:nPWV3X4wchlhR1087eh9Jl
MD5:	DEBBAD7C3D0E9B958599AF63AC4D50BC
SHA1:	D5F9EB0BFEBECCA9F2BE576E405A2572E264BA6A
SHA-256:	8F04463BF162BB4135BD12FFDFA093C8DC075B5660C571133B127CE1048E519B
SHA-512:	FD7684ED1B1F7A39C1DAB066748B10E5146C6CC2D28CF846F567BC371D28346C6C7E2BDC94E8E0F7D4648F1FD91BD13B0AC5C6CAAF61ACBC7CB5AB025930F4F0
Malicious:	false
Reputation:	low
Preview:	:....Q....QZ5xuqBJH_s... .......CggKA2RyYxIBMQ0...j.............CggKA2RyYxIBMQp.....7...g.6......<.......@..E.c.7.=).)..7+x.1>.'..).&.`...=;.0.#.i\|6..).......?..........x.y....4.....8..c...L.4...`l....fg..0.B.\.\$M.R-..O7..8.....-.{....?..5..P...cC]..#n..i...r.r......m.w..Q.?g..;.V/.......ht.....J........L..A.....z.n}....Jo.p.#..8.V^..[O.=.2....'..X<..5..x....K.....y..3H......!S..}j...wXS...ec........#y#...oG..7.\..BJ....lq...I.o.H....4.0.....2....PO[....j.%.n."^Fh..L~..........qK*P..U....p.P.c.u^{.K....l..xPG\|....L....!.)...\|)3.O...t.y.#i...$L%..\...L.5...f??.e.:.&0.P....`G...%pl..k...6..J.......(:.\|Eb.`6.......awz}..P..h.-.Y.@..:-.'9q.."L6.(..../...%.a0c\....Kl.M.ZO.x.p..]{>.0x..-5&.I.....cb3.u.n...G....j5..L.%;61...vZ8y?.lo~c.....E].r..:./PdvR.A......{.ZI..<....?....[Je....C.,.(..?.q.~....Z.&.+.@....o^.W:...aI. ...P....<..g..).z....;....}.<.H.4..G.U...r........n...X'X........h..8,..Ha7;..GOF...3/..ZN"h.v......T.]...F..wPQ.q..B.(.a..

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3865), with no line terminators
Category:	dropped
Size (bytes):	3865
Entropy (8bit):	4.844662423588397
Encrypted:	false
SSDEEP:	48:GbQ+/+q++PaKbrXP1uSntQhYtnhIWOk9ix8U3IzgVVVgkeOxwO0LP3/gOomosbux:GF/13X9uStzJYV3xh2zVvhw
MD5:	1891C0B34E4B1B8CD6442511D26ACEFB
SHA1:	7D107D20F7B736E32633FC8402B80A177DB8EAB1
SHA-256:	A08D4F0D8039179C7B1614D1837E909690323A1A64BEA3249DD6FEC7A9AFBB78
SHA-512:	9203C7F754D2559D753606433B81A065D83B5999345D64BDEC1852F6631F73CBC341291897C4571C56F4437A330C5311670BEB84C8166287F51049D6F67C411F
Malicious:	false
Reputation:	low
Preview:	var geolocation,autocomplete,autocompleteUpdated,place,placeUpdated,country,address=document.querySelector("#creditcards_address"),addressUpdated=document.querySelector("#addresses_address"),componentForm={administrative_area_level_1:"long_name",louserty:"long_name",country:"long_name",postal_code:"short_name",postal_code_prefix:"long_name",administrative_area_level_2:"long_name",administrative_area_level_3:"long_name"};function geolocate(){var e=new google.maps.Circle({center:geolocation,radius:120});autocomplete.setBounds(e.getBounds()),autocompleteUpdated.setBounds(e.getBounds())}function initAutocomplete(){(autocomplete=new google.maps.places.Autocomplete(address,{types:["address"]})).setFields(["address_component"]),autocomplete.addListener("place_changed",fillInAddress),(autocompleteUpdated=new google.maps.places.Autocomplete(addressUpdated,{types:["address"]})).setFields(["address_component"]),autocompleteUpdated.addListener("place_changed",fillInAddressUpdated)}function fillInA

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	65587
Entropy (8bit):	7.950251407697571
Encrypted:	false
SSDEEP:	1536:ZGrdKAETPusymEWTkzD8bmPsJvqquqndZMJ253jBwVExqR:ZedKAAym5Tkv8qRq4wjeZ
MD5:	E362D633E265B48BB1AA907D23BA03FF
SHA1:	633412CDD07CED9A7FF64CEAAC539AB4CC2205F2
SHA-256:	22ECF44817693E2026C9102DA2EE394DDBF3D39CC496DF62075910F258D18145
SHA-512:	941DBDEB9DDA938793BA776DA9E9BC2E5B87051E9A44D020332D4086E1851CA8AB6A18C156E1C19AC8536F262BA204BCA559377D227E06957AF36CEF7F65BB7E
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................&%." #...5% 0+000..9=5<%0+...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&2&&222&&2&&2&22&&&&&&&&2..........."........................................Z.........................!...1AQaq."2r.....#bst....$%35BR...46...&c.....CSTd.....U...7.................................+.......................!1.2AQ."Rq.aB.3..#............?..p.^.KB.../..........C.h......h4=..Z..A...C.h......h4=..Z..A...C.h......h4=..Z..A...C.h......h4=..Z..A...C.h......h4=..Z..A...C.h......h4=..Z..A...C.h......h4=..Z..A...C.h......h4=..Z..A.................-.G3..M...yu4.a.Vlz3aU.....&M..K...F.)y..Q..e.4.[a.&t.9g..2..H.F.A.!.".Q\|bW._.4.D.!.4.i.@13A..4.Z".6E.....4...$H..".1E.E.i...H4H..$..`.............b.L..T.E7!.ue.DU.E..I..R(.sE3@S$CE.4EA"I.D..:...B.cbh......L.E.er2.2#lDP1!.M.D.$.E.&W.h.!..$.lP...."....d.D.$...E...A."qD.l@4Sb/......&.c... `"*.D.Q2.+......d.A..-....2z#?'..p.:.J./....J./.......4......@........h..4............@........h..4............

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4248
Entropy (8bit):	7.927426366208146
Encrypted:	false
SSDEEP:	96:XkqBuI+gquH18UECXfA/Lq/Z/ENhUbHvWDh7u0e3QP41s34o:XlB628/CPAehMNhUbHvWN7x/
MD5:	983B791A276BE82756EEAC308426D25E
SHA1:	A4054449EE1E0CC92ADF19DC9F5420102585B3DB
SHA-256:	947BCD110EE8AB0DEA58607FBD866CC11C87AA8C025CD2E2830D953E897F8DFD
SHA-512:	80B9161EF87D858BA8979D64C5AA36BD67ECA6622487665E9570D6DF0317CDD72EEA2D4E20195A75DFEC079880325BC1952E55E5E2B82B8D19B60AEA5453BF62
Malicious:	false
Reputation:	low
URL:	https://buygoods.com/images/buygoodslogonew.png
Preview:	RIFF....WEBPVP8L..../........m..?..2..............7%......Rswe..C...........:.7333..033333@.l[.........>...3&...H.#.i58.{wW..2..$.....m.m.m.m...m..@.........'..Yu..^.1.W.]........1<...mW...y....y..9..y..13S.m[....../.........Z....6.$I.5Z.......>.....,....m.m.m...m.?....7..I.c....yB.x.....[.^.....;.."...a.....^U...0=.....ax..t....e............ .\|8Z..G...]......Z!.]4I.D...............'.`<..F...# 3.....@Uk...._..?ydH-.,>....k....P...........?.............sA.;D...!..}.).X....9.[%.:.......^...".1......jV..;$.b-.U.."..V`.....u.9I..Q.E...q\,..P.B...y........mI:.T..Bwy...o.E..P....@k..\..$).#.G..a....0...0{%k.q.C.....@..".0$...B.HH.c..D..A...p.PK.}..w.B.K.6...r..g.$2..B.L..x....\|.'... ]..P.[.f.N..0.>%@.....'[...wa.2.a.......=................Xx..E.......B..s.J.7.<..$+B..\.Lp../.3R..<3......(i.s..).X.".k."..L...C......@.r.\.../.S@........!.........^..g....j..r.........r.C..4e.}....D.s..^O...U.iH....%..b.h..E.........m..72. ....\|....q.! F.(<[

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 397 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	237735
Entropy (8bit):	7.99747829844365
Encrypted:	true
SSDEEP:	6144:Tl8AaG2SF5cU+zsEeD7i+1ntVvd5SNJgGLTef:T53XgU+7eDVLVSYGLTef
MD5:	DF5E4D8434639EF9456AFB940D32D6DC
SHA1:	8305F5B44E5C5B837B0A27BF2BCC4985FD4D053F
SHA-256:	39EE8C0DD8DB1D1ECA3822CC8E7CDF76282D39568A0CBE84D9E3502D9030A836
SHA-512:	4C11657DB265F848863C6AB89C96B5977F47336F3D697CD5F69445CE4DC2FD294E9CFFE44CE99D613C947728D23B2EB76BBADDE616FBC7AFCEB0E823F0D0741D
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/products/prod7/1-bottle.png
Preview:	.PNG........IHDR.......X........... .IDATx....m.U...s._...k.....n..n.........0e.................T.\`..bB9...T1.@...f2.,#h.....V....t.s.Z..u........{....S..y......a'...qc.I.KR.].s...../.e..5.....az../...C.}.....a.EdID.Ed....w...K)...uX..J.[..O.......RJ....=.b.H.....0.<..[....}..~...K...M.Y..upl.....Z.y...nv..o.:.-.......P......I......{{{..........z...T.....Y}/--..A.....k........U8....!....G.......b......U.....Sn..e.x..........4......]..i=.......v.~[.Y.v...[...-.<.C....H./IojK6....d..}ID...="r.C.]...../..\I..g.g.&...e....#r.D.M..`....<..RJ.l:....n.{+..w.^.O...R..%!"..JJ..+5.I..a@.]..LPf.q.D5..E.r...-"...Cv-.....51.k}....X...4.g Y.. m.........r.....H..x...s.gv......Y9Tc..}+.j.J.f5.d......9.....t....".LJi...D..>W.Q%...z..........%..W...{....f..RZ.-.....Y..PF....`.<.?...<...IK.]}>O.....V.'..............h..........M....SJo6w......rTz.^...~^.E.w.......v...<......N....=.d.`....L...H.hE}._P......*.E.6u.....(...@;..h.C...k........Gm..40.^]

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	dropped
Size (bytes):	2517525
Entropy (8bit):	5.690974226342676
Encrypted:	false
SSDEEP:	24576:NqB3uhOPREBiqOBbXAum6UrGoeIoHIGfNnznE1oOM6dPUVETY:NqB3uhmVq0TY0oeIoH1fNnuP/TY
MD5:	024B23A8B08CC3328B495440038A9AFC
SHA1:	FDDC0A6A8DEDF81BD8F1C9A901EB0B23CD37B38C
SHA-256:	39C616373C47E2774B7212F5C66A6EBDB91A27A6AA35D037D0FF604F919B81E4
SHA-512:	DC27C531C9D77ACBB02B137764507DBC183E8E9CF009A08BB08F9CDCE487BA7B1BC91F1DE5B0018AD7663BE18374BD724C2C26C2C3E6371F367557E20A2BB8C9
Malicious:	false
Reputation:	low
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (369)
Category:	downloaded
Size (bytes):	31103
Entropy (8bit):	4.944174492322494
Encrypted:	false
SSDEEP:	768:N6q9Aj++VU5DGHn6n5AbPevX4GICTivEFKgfh:p9WLmFnAoGE0Ah
MD5:	482E6F2089EB52219B30A6E1B3DADA4B
SHA1:	8DC09387EF950D31B74211E2F32681198A786C30
SHA-256:	C30BFA6CE25A890899DC6B7FE208ED14EB03F4792C28C0F6A7516D7C2910FDCC
SHA-512:	ED5BEC3E1267E3AD951A80165EE149873722006BAD1BF682F96E239190AB871AE1F0C7A213773299357771E7F0BD88648CF966C5B571DF04E8C86A099661845B
Malicious:	false
Reputation:	low
URL:	https://buygoods.com/secure/checkout/assets/js/dictionary.js?v=29
Preview:	const dictionary = {. "title": {. en: "BuyGoods - Secure Checkout",. es: "BuyGoods - Pago Seguro",. fr: "BuyGoods - Paiement S.curis.",. de: "BuyGoods - Sichere Zahlung",. pt: "BuyGoods - Checkout Seguro",. ar: "BuyGoods - ..... ..... ..... .....". },. "having-trouble": {. en: "Having trouble?",. es: ".Tienes Alg.n Problema?",. fr: "Vous avez des probl.mes ?",. de: "Du hast Probleme ?",. pt: "Est. com problemas?",. ar: "..... ......". },. "contact-us": {. en: "Contact us",. es: "Cont.ctanos",. fr: "Contactez-nous",. de: "Kontaktiere uns",. pt: "Contate-nos",. ar: ".... ...". },. "popup-wait": {. en: "WAIT!",. es: ".Espera!",. fr: "Attendez !",. de: "Warte!",. pt: "Espera!",. ar: ".....!". },. "popup-special": {. en: "This Special Offer i

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20612, version 1.0
Category:	downloaded
Size (bytes):	20612
Entropy (8bit):	7.987601598791172
Encrypted:	false
SSDEEP:	384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq
MD5:	B07DA7AA3E4F363C5CDBC11312239E8C
SHA1:	47BF5B2F24EA4A4CAAFCCC89B9D2A6677EF9E3B8
SHA-256:	E44C11F4834BDD4D6B6DA7B8EE5EAEBC8ACB41250CD6BCE5CC82EA8262140EAA
SHA-512:	420729406B315D8AF34B62B78F39E763F5CF33CBF94467457B393FDE0573DD7FFC6A23F25680988F9B82A4A3B719876FF76F3E1DB047CE82615F544FC3A82532
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2
Preview:	wOF2......P........P..P..............................6..t.`?STAT^..B..~........`..i..X..6.$..,. ..x. ..N.F.%...q.6...@n.%.....BYG......7...G.....8...l'D&.0..9.....%.d.p..f-.2JE."I...N.`.....M.R.....9...6iO.^.....<.3.>.....qQ9..f...+4.L...2z..i......6..m....Qs.%.l....7.I:&..$b..4R.5....h..Y5.<...........,..X....q.6...7b.8GTO F.Eb.....].!@.:.4..$...5.Fu.2R.i.0w.....6m.c...NTd...-.@.......FMs.&...6.]..1.k]...n.......`.\|..(fO.hKE$/s!...~....e..UM..Zr....r.C..&J......S@..../.rH..a..h..<..?...1.v....y..+d1.:1...U....$...Vd....L......:.=...l.U.y..M..)..A.J.x/O.q....t...[{..Y.=.D...WU.P.j.2I.d........o.._-yZ^..ul-z.0H.....g.A.......R.e..dyA..${H.8.....9".=.e<`....BN9Nv7;. .....P5...4..-cL.1-.&..Z.h..W-`.w...eG....X.X..Xju...\.BV....jNU....<\|-...r.!Y.d....O....2..ovP....B2H....N(.>t...:IJ.;..r....p'...!..{dt,.8..J.._.;.[.....L...P..B.,F....k._c......(qg.....c.Gq........\|Z.V.5.=....X.....2\|.>...7D&..+...bH.<H.\|H.BH..H.rH.jH.zH...!Ga......(&."K5......`c

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 14, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1616
Entropy (8bit):	7.821219532830218
Encrypted:	false
SSDEEP:	24:l/G8w7mPxHQLXmDXvM8uZCDcG8SPQ0QNwnvtc/hVO/74xm3O55d4TIDQWznFE:lG37mPy7ivM8ugtHPOwvOhV4TUDQWZE
MD5:	F28A13545CA7BE5CD9EA31BDD9EA7F8E
SHA1:	F4F45A59720B9D637B1E7E0ED5783EE84887287F
SHA-256:	CD80D0DCB2A44BD30C11FCDF13D4C280F336DAD9442EE7DA79146F2BB77381A4
SHA-512:	9CA538FA15BB54A36A149EF63E1CC24608F022BFCF667A9C5656AF99E144306A171FC7EDB8C12D093433C3D532A8090085BC6EFEB26180505F0833360C689B37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x.................IDATx....x.[.........@.0C...ww..Z......4....P......{.u....O.y.;..JN<.`.......T.$...?...p..P..{.....j6..@.a.&.@.N+....V$....H.R..N}.....C..@(..u..?T...@.f#o.......m..i.B..a+.j..m\|...3....#i..p...'...N.n..I..c..4s...:.r..dr).~.sI..(...L...x1...&\..........h...3p..A...`!..1DQ.y.l..F.O.".#..J0G+...P....nF.b...l@......GR..B...}+.N.@.[7....?...7....x..l#;....t..H\|..p...#.9UP6..j+....Xl...l...1..!..>`z..ozF.-.{...yPB....%..VC..}x".".=X.E.5..E.../n...X.N.B....x..hA=V....Ab..O.bXx........i....Alr..OP.n(....7..J...`...`....2>'..X..()s.oN.h<...z.o.....%`r.\.)6....M5...+.....D.V.6..Hn.......g.?>.j..O.0-..><.v..Y+..[1./........<..(@.N..vV....z...!..=.3...=&.!.B.$.z...H....B......._......_p...'..L.O).P.q./.w...}.....C(n.......Y.,......?....]:.0.(.....0E_...I..Bm.bx,.. O[^....c!.X..Vc-^.".L..\.....b.L....\|...J.y.....c)z'.VbF.\'...'o..(S..L...61.....T.~.t.bj...*(...I...N.......p..S..4.....I...%.iO.>...p.6

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 88x88, components 3
Category:	dropped
Size (bytes):	1228
Entropy (8bit):	7.035253532151294
Encrypted:	false
SSDEEP:	24:pAoTNhUlLOTrD9/wmiha1b1lvlrGF7H2JtZSIDg+FkrjNK:pNTNGKbeNulW7esIUIaBK
MD5:	AC7B5519201F4F4956A48C3D22F0A3FB
SHA1:	33A9F0092115644FB5004301EF78BDD30938512D
SHA-256:	B5DD3B089D57934FA2D07C93F9C4B07F0B9FF5BBFC6E60F6954104BB054CBE51
SHA-512:	0504B141C085BB4172222F02FCF6F9DA243F656F020C8256AD040502677A10F5F64D54EF4DCD34C012BC600DBB1A2AE7FB2FA76B4E1E1B5D63C2548AA29400CE
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................X.X..................................................................!..."1AQ.2#3BRar.........................................................!1."2AQ....aq..................?..k...............................................Qt.......rMA....v.o.o..L.\|8.\|6.TJ...S.3...9.K.Ze^zjj....=.+......p.R...x._....>..q_..Y...{..U....>_...\|..5...q.q...#Bm].{..z.v]=5t....#c..J+2XQ.k..2.....I+Z....&U..pm;Q$.ko9q.TL..~..;K.v.5.U..z..=..F0.dzY.&......3.)..`.$F.U..8i.....[...3.p...=...........o.Hq^.=>.JVUZ.P...K:mB]z.).....y.N...4=.[..3^..z.....uV.~........7.3..V......f...o.K.i....f..\|j...})_.Sz..X>5viz.....mv..#.8di.I[8:......9j/.s)G9I.>...N.X.M.[..Y...`eX....~.-....u ..IF........i}..Rz=T'&.v...u.*r^\|\|.x..xR_...~j]Z...~]r96....V..b.~]r.K{.....i...Q...~....E..N.~"I....f....O.z"J,....~.{.7y>..f.N..Zm.h...F2

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1092 x 603, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1685997
Entropy (8bit):	7.985189530964064
Encrypted:	false
SSDEEP:	49152:8wuMs9575rVdU/9lrcM8EIOEa3pGaqYqM/:8wEL5rVCVyKfqY1/
MD5:	BD268A1F2337D1AF2E05D04B2CD1FD46
SHA1:	9D1237ADFD36CE81D75C03AA1A0306EA3C3D3320
SHA-256:	C49FB5EA748456015DD4FAEB6822072E9E12DD34A4AFE7A74F40371DF8003DC0
SHA-512:	ABFD6DC3D55B321269D4917AE5FB6F4C0F7EF0743F4C70BFC203673FA10E8C03DB04ADF5ECE54F1B2EF3551F2737F797B4779D47FF49C8BC0DF4352D025102D9
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/image7.png
Preview:	.PNG........IHDR...D...[.......AW.. .IDATx.\..{.Y....I..d......X233S...8...u...y.i.9..G=..,.r..?.......Wm.u.%... ....X.Dz...e.D..#;.qE.....BD\| ..J$.Z$L9z...P$.".P...#.9.R#`...ZhA.-.....S.H.AYK.:.....F.H.z&.0.P..r.L.........s..,@KW&Z.Q.....d...3b."`L.G\......S....@T...l.b350$.C.....1.."...%c.Q...}B.......D..$.5.P.A..@.!P..:.h...X.....y!.......n..3..O.9..y<_\|N,"..r,.s..^%c..P.F..6^..L.lC....D.b...1.)..$-.S..X#..(...Er..)..X.....FL.N...IH+..........]....d$.a.6.XA]...&."a.4 ....8Xr..........d.%!.;.jk8...27!.,.q.&^.c......yQ)j9...\<..x.....aLS..Bb..y.)(lHGNu......(.OCfE<.*.P....<... .>..5.(s...mCaK.2...U......4g"...b....d..-.y...K.~.....6p.s....~IK..L...&.....Y...jtM..>T...J8...7...N..9..o..b.F..1..A....vt..14...atO910..A.l.IL..ah..}.n.=.3..+.`.?.;...!..`j...N.^.;....y7v..`..S..9e..~..M7.....(.{...."4.e..-...V.7...^..<....n..B7.V.0....d+..k....c..M..p.....4......T.$".=.%..(r.".)..Mf.'.y....2Tu..s...a...xf\.}...X.E......h.n.{...>..5.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 311909
Category:	downloaded
Size (bytes):	84175
Entropy (8bit):	7.997180529574413
Encrypted:	true
SSDEEP:	1536:VZaiO3MFf2fiSW61iEC0MfMt7nuA0RCHzVDv3oVqfHQ2dKJbfOwRikLZB/LqupVk:VZai5x2fiSW68E0finuA0R4ZT3UqPXdZ
MD5:	E166DBF7D812AC940E1646D638229B20
SHA1:	29AA9A4BDE3006FFFEAAA99045554D810DCFE807
SHA-256:	103014F7317310BEACF0926C28D6E713E514B387632A6B5ABEB3D83F7839EF7F
SHA-512:	7282F3D5CF7D2435503979B5D83841E4F26519A1D6CC4C6762BEFC72DA237DF4CA1ACFE163F99DE54271F74BAE1CEFD4C3B8D753C84E93F907ABB7C5D8D1E443
Malicious:	false
Reputation:	low
URL:	https://www.paypal.com/sdk/js?components=buttons&currency=USD&intent=authorize&client-id=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq
Preview:	...........}k{.....D;..;.@..\D{.......H..4....62#.L.OI.......=s.4.u-.J....M..1.e29k...I..=m.'..f..iv....O&g...V.\|.l..['.vk.I..4...9\|9o_....dc..G.P(..9(.y..:S.\|Zp...K..+.\j...SZ....D.w..n5..A.,.D......c../s...6/.....d#1..H.7..f.#N../P.Z/.Z.. .n.8s.....T....w.>.<...T.,xe.8.c..Tq...l6....JS.u./..=...&..uPI.m.......E.(.,}.../.....Ww..(...a.....Y.{.,XRn...T.=..o...en..@.S.g....+..............;.~h....z..._.l7..u.Y.R.1..h2.~X,.vPQ..Vz}..Q-.b.`.0.i.4Z(Vs.....y.+dEsb.".....T.%.V8.).....\..D..\|..9F3:..W.,..,...o.\|.....0..Le.(.....?......o.w...qa.4#4..#fm#uf..q...r8.....#2..bd#LML.;/.$.......G.AGa?..J+.!,.Q.........Z.&.N...Tc...h.....fm.@,....W..CT.....;.g.Qu.^#.........8..x..K..N..Nx.j..a...0.O..5(.z3z.o5...c.....[V.....4M.s..^...c.V.....-lb.V.3....w.c....>.V .kw.O......cS[.............#d.8....#....MVUe`.q#Q......}`a..)G.8....F..,..9.@_.27IQ.A1.Q....../.....[../...F.d..1.........,.pF.P....F#...Fh<6C........u.J.y/...^,j..a...z.G.q..:..b..F..:.......

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1568
Entropy (8bit):	4.979151858936181
Encrypted:	false
SSDEEP:	24:2dqNPWLjIEdeaxM2mumRhEKnHMhHuVUbrVm5RcdTER40/QHS84MGddEHwMFP6R6B:cqtijIRZwAAbZqbQyXrd8P4ySCuy
MD5:	0F3D8B4CC71133DC656F74F683E9AFBA
SHA1:	33D6FBE842A88B0137C20E3D2D0B72D4140FFBA7
SHA-256:	0E193C4DBBDF7B8BF0D41C4B6D781A79A1FDB3FB75CD1D96EB33F72AE92E5490
SHA-512:	E92702DCC90B4691333B78CC96ECD00DB0529267BFF83AA68C837CC9760FDB978D210223BD587D103BD85B054ABC1F6895BD6012B713ED30AB2F3B02FCC73889
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="30px" viewBox="0 0 42 30" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>MasterCard</title>. <desc>Created with Sketch.</desc>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Add-To-Cart" transform="translate(-234.000000, -120.000000)" fill-rule="nonzero">. <g id="MasterCard">. <g transform="translate(234.000000, 120.000000)">. <path d="M42,26 C42,28.209 40.209,30 38,30 L4,30 C1.791,30 0,28.209 0,26 L0,4 C0,1.791 1.791,0 4,0 L38,0 C40.209,0 42,1.791 42,4 L42,26 Z" id="Path" fill="#3F51B5"></path>. <path d="M27,5 C21.4771525,5 17,9.4771525 17,15 C17,20.5228475 21.4771525,25 27,25 C32.5228475,25 37,20.5228475 37,15 C37,9.4771525 32.5228475,5 27,5 Z" id="Path" fill="#FFC107"></path>.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 768, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1762184
Entropy (8bit):	7.994564016149837
Encrypted:	true
SSDEEP:	49152:oZeeuzjK3nD3KE+l/K+V4A/sGmbIeX+K5r:oZeeuze3nDB+dV4A/NeOs
MD5:	24E39C978E10A45B60185A807B0E591F
SHA1:	0C2B2F0C7118D7B640221D65E86BF98682549072
SHA-256:	6309D6433E95A9BC71A0DE06449710D2670200E4628730DFB28945098A9605F8
SHA-512:	CC6CF99A6D2102AD2478F6A188558271C29A3CD06D34B1C817696FACAB3909E859C06220D4E084D5CDD5DC609782A89A7B58B770C2A23603D7C5EFB8907DC4E2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................... .IDATx.l.uxT....9........)E...$..x.k..B[(T..[p-P..w.I..{....&6..$.7.s.Yl..u~.?.....5...Z..y.7..l_.....[...b....K~.B./.V..t..._...._.v....v..-_..X...s..Z....c.w......k.WxmY.....n...sf.Z;~...k...;=....MS.y........^...k....{l:......i..<......k.G....'.J...._.+...y.d.. ;.....u (..p.."ED.Z..gD\.1....&.HK...oCR.=..9..nCZ.=..6.e.S]`....U.>.....Q..S>....t.M..e4..1.U..j...m2...6..X7...iT.M..b.U.z..L..H..B...(.2. C..t}.R..M1!7..dk...I..&%J..8[b.D.?5'$....G..z...Nr..%Y6...".......;....(z4...m.;m..#.~HM..j.?.F:..i.......B>....hlz.... .MU.x..SU.....l+..-.~nB.sc...II1!)...$......TS.S.O6'6....1.a...X..%..[p.....r....p...N.3..uS..Ys..-~Q..$K..u"...21I..<.2'SjIn.%...dW..YfJF.n. ...J1...UX.ZaAJ...f.T..RkAz.%......QXiJa.1.5F..O'.a:.....M#Uj@J.)).".+..zR....E.5..n&IE.......0'...y.kCb.-.....D45.#k2..y.ur..rc...Q.b@U.)e2C....[.O^..y...T..UeF.TDV..L.....$U..WfNh...i".S.<J..7...H.w#.....$8}......MA.....)ot..U.....bj.8:U...}

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	dropped
Size (bytes):	241591
Entropy (8bit):	5.572901990457829
Encrypted:	false
SSDEEP:	6144:T7UieFbbPgaICntmNVJ4Th0wIaIk5g64HuMLoRqCncYZHf/qxglDA0SLk8zJW8G:T7UieFbbPgaICntml4Th0w/Ik5g64HuV
MD5:	A1DC9E39AAF3CF9375EE86DFF06BA5D1
SHA1:	B98DB09C5F52E6FC884CDEDBE148639803383CFC
SHA-256:	0FC948C6B0D0E71AD3442EB917E39F1864AC81D799AEC29186CC347C42672650
SHA-512:	90941804306FD1C72F66E09385EF3D026B094D6B6017F0D224F729CD417CFA7F3964B8C55B79F228920B241AD52C9ABC507F67D6A7D90F15F7FBE3B5320A7A83
Malicious:	false
Reputation:	low
Preview:	(function(_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2019 Google LLC. SPDX-License-Identifier: BSD-3-Clause././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././..Math.uuid.js (v1.4).http://www.broofa.com.mailto:robert@broofa.com.Copyright (c) 2010 Robert Kieffer.Dual licensed under the MIT and GPL licenses../.var aaa,na,pa,oa,caa,daa,Ia,Oa,Ra,Qb,Rb,faa,Cc,Gc,gaa,Xc,Vc,$c,ad,iaa,maa,hd,kd,ld,md,od,saa,vaa,waa,Caa,Aaa,Baa,yaa,zaa,Eaa,Faa,Haa,Iaa,pe,oe,Kaa,Jaa,Maa,Laa,Naa,Oaa,re,Paa,Qaa,Uaa,df,Yaa,aba,Vaa,$aa,Zaa,Xaa,Waa,bba,jf,cba,kba,nba,iba,jba,pba,Af,tba,Jf,uba,yba,zba,Vf,Uf,Qba,kg,lg,mg,ng,Sba,Tba,Xba,Uba,Wba,qg,yg,Yba,Zba,Ag,aca,$ba,bca,Eg,dca,eca,fca,gca,hca,jca,lca,oca,Ig,Kg,Lg,mca,nca,rca,Mg,Qg,Rg,sca,Vg,Ug,tca,vca,xca,Bca,Dca,Cca,Eca,Gca,Ki,Nca,Mca,Rca,Sca,lj,Uca,Vca,Wca,Zca,Yca,$ca,ada,uj,Xca,.bda,Rj,Xj,hda,pk,jda,rk,lda,zk,oda,

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	dropped
Size (bytes):	30890
Entropy (8bit):	5.396932157292168
Encrypted:	false
SSDEEP:	384:4o63kjilKDknpjTqty5qTWZhuHjiyBMAtmN4u4SYCG3EzZYBFS/+0O/txrncOnk5:Utlrpgy5GZHm4u4N10kv0O/zrYe1M
MD5:	98B9165C656FE6F97795C201CEE846FF
SHA1:	64025C3AF6409B69EFDE90FE7BCF5F4EBE041D87
SHA-256:	59A9D57AF366253D0FE1C99B747BDC9D8B4D1B1E5152A6BE96681E3D2C25C1D6
SHA-512:	D84C30A07C961FEB909741F386CA8B627DD078366441EFD73E506238FBEA3A4F5B7BD8E17297896D396C1A9F705B8CCB08C1071F91E7BC8318F7655CFF286EEC
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2393
Entropy (8bit):	4.694052561447081
Encrypted:	false
SSDEEP:	48:cqtij5R0aLzzvk5TRAdz4lWVg66D7OI2dE+hoqkBCEBrlo:olR0aL3CzWVpkfeE9qkBCEK
MD5:	CE88B79FAC940FB758E173D25945418C
SHA1:	4338E9D824295498FB94929AE461AA7D9AD1296F
SHA-256:	A0C0B245C3B09E2B12789D126A1EDB08B2E53C0FA5FA1A98CFD4CEE9A5BCF12E
SHA-512:	CC281E1B57B0189AD791B5E3BDFEF9A828FDBC54DFEF95B0BF1B58DD420B8C927431C9126084444606079DF0B8C0BB739F3DF9836A408BB753DA592B25F87339
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/img/discover.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="30px" viewBox="0 0 42 30" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>Discover</title>. <desc>Created with Sketch.</desc>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Add-To-Cart" transform="translate(-334.000000, -120.000000)" fill-rule="nonzero">. <g id="Discover">. <g transform="translate(334.000000, 120.000000)">. <path d="M42,26 C42,28.2 40.2,30 38,30 L4,30 C1.8,30 0,28.2 0,26 L0,4 C0,1.8 1.8,0 4,0 L38,0 C40.2,0 42,1.8 42,4 L42,26 Z" id="Path" fill="#E1E7EA"></path>. <path d="M42,26 C42,28.2 40.2,30 38,30 L13,30 C13,30 36.6,26.2 42,15 L42,26 Z M19,15 C19,16.7 20.3,18 22,18 C23.7,18 25,16.7 25,15 C25,13.3 23.7,12 22,12 C20.3,12 19,13.3 19,15 Z" id="Shape" fill="#FF6D00"></path>.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2700
Entropy (8bit):	7.907892267031715
Encrypted:	false
SSDEEP:	48:leI47Jm+LqtpIbK8n0aknWlsFp3DNCXQUfLG95zAnuC6ldc4N7ICAQncZM:Mtm+LWSk1HNCX5fVucYkAf
MD5:	B028423D18145B660D1DE14F46CC253B
SHA1:	E46E554CD1E504ADB03214F17048FE9FA8BFCE65
SHA-256:	03E6631C4B6989F852ABD7522ED7E0F51F70DDEDDFEFA07D0142D90C66C1C44E
SHA-512:	1572E32D72CEC7BF8B349B299FFAA9DE506F64133AD455EC083136DFEB33AB11A57CC6741D522D4CAD5ADD3005648D7C5A50E9488BB1B090911DC4418FE301A4
Malicious:	false
Reputation:	low
URL:	https://cdn.buygoods.com/assets/checkout/img/mcafee.png
Preview:	RIFF....WEBPVP8Lx.../Y...5...m..?....1......G....o.ww.................e..9..>{.c....M.X.].......4.....Z..."..t~... &%%\|2..Rz......b. .`.I.....m.f.g......6...$....M...m....}..l..)%.m.m{&.m.m....=de.2.7.:...F., Y~q..6kn.Z......6`6.......4..f....J...F..I...c)<....Y..m.I...o..m...<....V=.3..Z.....`Zes.......h....+.../...6o...9...K]'5].G.Mv...'.^..q..~........6{../5.O._.....[W..b..=..!<.]....f$..Q.....7?p.D.....G.........-^.fK.a...~..ezU...E.....z.l.#.....`.EPt.v.."...$).W.k...7..C.k..^..G2...},......H.E...$.2.d_G%.ja$.....F..........:!t......5........s.Vr...(..u!.pV...G.0&8....YY_6'67n.\|i6.T......!F1./4..{.II....I%..N...%.. ).=.o..-`bZ.s.d.......9t.6.K....g4.~........^..4..Q(..M.s.9...t.D?.-..._..'>.~....P...OR]....4....%.z...Gs)..I....t.{.>g~...K...{B~...X-..E....Y...LhBz..$.ycU...Vgpw.+..!.=./...N.Y....{.e..'4..J'...B.Gc.N...EE....F.:.'....Q..vN......Cv.."cO...ld.^.A.~..._..c..>.?oZJi>tS.gMKnaT.&v.........x.9H.#+~..T..

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.5097192368053465
Encrypted:	false
SSDEEP:	3:j4QcpdzRNERzfBBFeBKDbtR6VcssgJv:3cpd9KfBBFeBCR6Vcss6v
MD5:	71932776AA87807E56805483D6D22741
SHA1:	A6C26C656149F60B40489A21785176BF3DC30FDD
SHA-256:	91EA3589481776711613334A732456DC2CB2631C6838A8D339262FE77E47490C
SHA-512:	E3CA973DEACF2A677055979B68D386CA41B1559947993585724039E7BCC0442910CA21341BFEF0BCD08FD87CFB08FA65D8D65AF4993CDB00930A8BF016B87736
Malicious:	false
Reputation:	low
URL:	https://buygoods.com/secure/checkout/iframe?a=6802&s=sessid20250110164829858
Preview:	BuyGoods Iframe that loads vendor pixels added under the Cart->checkout_pixel screen -->..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4923), with no line terminators
Category:	downloaded
Size (bytes):	4923
Entropy (8bit):	5.229165665959288
Encrypted:	false
SSDEEP:	96:EtuyUFcyrdZkFcF9roji4z0w3S0pmfLGMTlvsxzGtcQNbob:9yIrkFcF9rei4z0w3S0Yf9hkz9QNbob
MD5:	44AA39C05CA1C928A374A58D23468E2D
SHA1:	BCDDDCDB1905DE30CD8006873D18C6925A57103B
SHA-256:	E44133CF24BC0B3ACE873A5719E5DA1ACD8B0B0414899A21F4A9E7A3C09E2223
SHA-512:	1477465D9CFE34F5B3A66FB05A594FED57DE150BFDD8FACE7EB18DD9DD724D6D4C9192EEBA2DAFD786BCF5C52D57E6F404E76BCD0F956F71E9DE138461F6B91E
Malicious:	false
Reputation:	low
URL:	https://songbird.cardinalcommerce.com/cardinalcruise/v1/songbird.js
Preview:	!function(e){function n(i){if(t[i])return t[i].exports;var o=t[i]={exports:{},id:i,loaded:!1};return e[i].call(o.exports,o,o.exports,n),o.loaded=!0,o.exports}var i=window.songbirdLoader;window.songbirdLoader=function(t,r){for(var s,u,a=0,l=[];a<t.length;a++)u=t[a],o[u]&&l.push.apply(l,o[u]),o[u]=0;for(s in r)Object.prototype.hasOwnProperty.call(r,s)&&(e[s]=r[s]);for(i&&i(t,r);l.length;)l.shift().call(null,n)};var t={},o={8:0};return n.e=function(e,i){if(0===o[e])return i.call(null,n);if(void 0!==o[e])o[e].push(i);else{o[e]=[i];var t=document.getElementsByTagName("head")[0],r=document.createElement("script");r.type="text/javascript",r.charset="utf-8",r.async=!0,r.crossOrigin="anonymous",r.src=n.p+""+e+".b109e0c6fd2a5b6b93b2.songbird.js",t.appendChild(r)}},n.m=e,n.c=t,n.p="https://includes.ccdc02.com/cardinalcruise/v1/b109e0c6fd2a5b6b93b2/",n(0)}({0:function(e,n,i){e.exports=i(76)},5:function(e,n){var i;try{i=window}catch(e){i=this}e.exports={apiId:void 0,bin:void 0,deviceFingerprinting:

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5121)
Category:	downloaded
Size (bytes):	46329
Entropy (8bit):	5.560959912734566
Encrypted:	false
SSDEEP:	768:rnDV3yboZyyqjottsaqJ8u/RbhR5oq2a3+8u/0zN9GJeM/I66bA0ZWW63janosox:tHaaqb3u/WlgTKIurwM0i5Rc
MD5:	9048BACF7C813D243CEC5FDD38FFE246
SHA1:	B57CDD0C279B52EB5A95CCA49401AAE8FA1AE887
SHA-256:	32610694FCD8F5640DE0596F86A82A0CB6A1D74ADCEEB43A9A6342D15E74BFA1
SHA-512:	B3F5D8D63A0BAB6FB74C43B5D095F32C460031D4668CC4F13014AD032624A916EF0AEE5CC13553DAD08AE36EFA48DEA9FF9DE66FA6509412AC8E19BC2961720D
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/59/4a/places_impl.js
Preview:	google.maps.__gjsload__('places_impl', function(_){var Gxb=function(a){try{return new URL(a,window.document.baseURI)}catch(b){return new URL("about:invalid")}},Hxb=function(a,b){const c=b.createRange();c.selectNode(b.body);a=_.Lf(a);return c.createContextualFragment(_.Mf(a))},Ixb=function(a){a=a.nodeName;return typeof a==="string"?a:"FORM"},Jxb=function(a){a=a.nodeType;return a===1\|\|typeof a!=="number"},w9=function(a,b,c){a.setAttribute(b,c)},Kxb=function(a){return a.Cv.map(b=>{const c=b.eh;return`${b.url}${c?` ${c}`:""}`}).join(" , ")},Mxb=function(a,.b,c){const d=Ixb(b);c=c.createElement(d);b=b.attributes;for(const {name:h,value:k}of b){var e=a.Fg;var f=e.Eg.get(d);e=f?.has(h)?f.get(h):e.Hg.has(h)?{Zk:1}:(e=e.Ig.get(h))?e:{Zk:0};a:{if(f=e.conditions)for(const [m,p]of f){f=p;var g=b.getNamedItem(m)?.value;if(g&&!f.has(g)){f=!1;break a}}f=!0}if(f)switch(e.Zk){case 1:w9(c,h,k);break;case 2:a:if(e=void 0,_.$ga){try{e=new URL(k)}catch(m){e="https:";break a}e=e.protocol}else b:{e=document.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 397 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	237735
Entropy (8bit):	7.99747829844365
Encrypted:	true
SSDEEP:	6144:Tl8AaG2SF5cU+zsEeD7i+1ntVvd5SNJgGLTef:T53XgU+7eDVLVSYGLTef
MD5:	DF5E4D8434639EF9456AFB940D32D6DC
SHA1:	8305F5B44E5C5B837B0A27BF2BCC4985FD4D053F
SHA-256:	39EE8C0DD8DB1D1ECA3822CC8E7CDF76282D39568A0CBE84D9E3502D9030A836
SHA-512:	4C11657DB265F848863C6AB89C96B5977F47336F3D697CD5F69445CE4DC2FD294E9CFFE44CE99D613C947728D23B2EB76BBADDE616FBC7AFCEB0E823F0D0741D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X........... .IDATx....m.U...s._...k.....n..n.........0e.................T.\`..bB9...T1.@...f2.,#h.....V....t.s.Z..u........{....S..y......a'...qc.I.KR.].s...../.e..5.....az../...C.}.....a.EdID.Ed....w...K)...uX..J.[..O.......RJ....=.b.H.....0.<..[....}..~...K...M.Y..upl.....Z.y...nv..o.:.-.......P......I......{{{..........z...T.....Y}/--..A.....k........U8....!....G.......b......U.....Sn..e.x..........4......]..i=.......v.~[.Y.v...[...-.<.C....H./IojK6....d..}ID...="r.C.]...../..\I..g.g.&...e....#r.D.M..`....<..RJ.l:....n.{+..w.^.O...R..%!"..JJ..+5.I..a@.]..LPf.q.D5..E.r...-"...Cv-.....51.k}....X...4.g Y.. m.........r.....H..x...s.gv......Y9Tc..}+.j.J.f5.d......9.....t....".LJi...D..>W.Q%...z..........%..W...{....f..RZ.-.....Y..PF....`.<.?...<...IK.]}>O.....V.'..............h..........M....SJo6w......rTz.^...~^.E.w.......v...<......N....=.d.`....L...H.hE}._P......*.E.6u.....(...@;..h.C...k........Gm..40.^]

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	downloaded
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=1dd5876648
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10332)
Category:	downloaded
Size (bytes):	274173
Entropy (8bit):	5.40457286808602
Encrypted:	false
SSDEEP:	6144:SMcycTv/5RZINgYCsGsRtFYuvrNfEyLqs5rIh/FMNm0hYNg:SMcycTv/5RZDYxYuvrNMyLqs5rIh/FMT
MD5:	55A8A46C4801610793153D26FC193399
SHA1:	2DBAE169215E532CA3A0E204B582FC8E5A954D1D
SHA-256:	546566046F001EA550C863185FE9E236C5E2A8CA834D0AF50CF54DBA8AA453C4
SHA-512:	2D8AF7AA1BE105DE4101033425A64DC58B3E4B70137A9357D70CFC774A36D44BA5A74C2FB8B7911A097CC357D22AB29C78D32C291E71A791785425F33F7BC5E9
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/59/4a/common.js
Preview:	google.maps.__gjsload__('common', function(_){var Xja,Wja,Zja,eka,mka,nka,qka,Nr,rka,Or,ska,Pr,tka,Qr,Tr,Vr,vka,wka,zka,Aka,Cka,Es,Eka,Gka,Hka,Ps,Lka,ut,Tka,Vka,Uka,Zka,$ka,cla,dla,ela,Zt,eu,jla,fu,iu,kla,ju,lla,mu,rla,sla,uu,tla,ula,lma,mma,Kma,Oma,Pma,Qma,Rma,Sma,Ww,Wma,Xw,Xma,Yma,$ma,bna,ana,dna,cna,Zma,ena,gna,ina,qna,una,vna,Ena,Cna,rx,sx,Gna,Hna,Ina,Jna,Lna,Mna,$w,ax,fna,Zw,sw,bka,Nna,dka,cka,jna,Sna,Tna,Una,Vna,Wna,zx,Iv,Zna,$na,aoa,Ika,Js;.Xja=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.$g(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=Wja(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=Wja(f,a,d+1));e&&b.push(e);return b};Wja=function(a,b,c){a instanceof _.rh&&(a=a.Nl(b,+c));return Array.isArray(a)?Xja(a):typeof a==="boolean"?a?1:0:typeof a==="number"?isNaN(a)\|\|a===Infinity\|\|a===-Infinity?String(a):a:a instanceof Uint8Array?_.zc(a):a instanceof _.Ic?_.Uc(a):a instanceof _.sf?a.Lh():a};._.Yq=function(a){return!!a.handled};_.Yja=func

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 751 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	457281
Entropy (8bit):	7.996804500851309
Encrypted:	true
SSDEEP:	12288:k8Hijp9YOR6IUQqrso/6I3UPwpmoVsaaUOSFE:3CP9XlqrgwguabS2
MD5:	90BB62CA0F71EE62EF85E91DA576E5DA
SHA1:	06E70F7472A75BB0F8CE2A8FEA3D6CEA3BEEA2AF
SHA-256:	03F996D4335424B05F5A0FD2327C50B39F3B0F850D0985194A80E79736F83615
SHA-512:	06B544D7A0F37686DBD8D74D7EE1F3CE3DCED5D0CD673A836567782020ABAE91DF6DAF5E756D0D01490270AA0BDB9F33CD7310477FB351735FD77032489655F9
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/products/prod8/3-bottles.png
Preview:	.PNG........IHDR.......X......L.... .IDATx..k.m.U&6.>.[....S.O......v.J..D..H..Dj.i.?Q.H..4R..)"-..R.(..u$:i.R..(.iK-.b..0.1...]6Ue....u.g....5....7..<....5.}.z..c.o.9.\6.L3.4.L3.4.L3..Q.q....i..].\|yg.(.p)...$yp..........Y...@>..i...f.`).a3.......o....g..A3.8.Y%3..{......._.Mq.YSOi.Oa....4N....~c%_.......fv..q\|}..+......L.jf/{.a.^........w.X,.._7K)/.......W...k..........7n.a.........7...../.....;<<....U..............x.{..{..k..z..=.O..EZ.g\/..[a<O......{.1.=......<..q."..{...?..p8w.....^.U#.y..c.z.....i.]...gf.i.;......=. ..f...s.}TJYL.o2.G..).c.R..)...P].....W...R.8.q.CI.[..l.A.....Lb}.........e.9&.F..ff/...<;.......R....{{{.6..3....G....f...o...4.L3....}..f.5r...d.u...7.M..-..4.wM..h..o1.....x.......'M...."...../..ai.M...u...,....(..e0.y...DOq../.R...q=.....e.),......<WJyq...R...b......;.%J).-.......g....g.i.m...g.i.MQXu.af.u ^Jq...3{.c.R.[..,..R.=X..+4R..Z.._...........W..zZ.....X..,N...Y.ky).nS..V..}.G....V.x..<.f.h'.t.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	4.477284161274567
Encrypted:	false
SSDEEP:	192:oyX0GNiZvsjkBRWyD9VyNBeWR0rInKbNcLP1aC:oyEGcBdBRWyD90zf0G1
MD5:	0BE6449723FFD588AD6E670299B4C7DF
SHA1:	3D38D94E8432350A4A5A4619760F375EA065AD9E
SHA-256:	17B044EAF63DE9B618748537221BEC19CC5A26FF8A072D78ABE670F1322EDF49
SHA-512:	3A0C7D6FE58BD577167674F2F36BCA1B155B35802E487526358482018E700E0022E5420F461910DC6B7221ADA66F2B0FF8CF30902AE9E3714D1108611691198E
Malicious:	false
Reputation:	low
URL:	https://cdn.buygoods.com/assets/checkout/img/favicon.ico
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... .............................................................m..R..e.............................................P......&..O..2......9...............................................................8..................z..C..@..l..........Z..?..Q..............................[..b..*......p..a..c..J.......,......h.........^..................y......................1......Z...J.../.........................b...'......................\......\|.................................................@...^.........................................................F...a.......>..........................p.../...................!...c... ... ...q...............R...1.....................M... ...f...#...E...&...:...w...}......I...'...c......p.../...9...<...h...'..........\|...P...L...r..........`...I...[................)............................................................~.+......

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3714), with no line terminators
Category:	dropped
Size (bytes):	3714
Entropy (8bit):	5.075874869450303
Encrypted:	false
SSDEEP:	96:DUxgNGO97rPlmLMjLnwDLhSl4ZclACxrV:YxgoerdmL4nwDLMlsUAwrV
MD5:	A24E827C082BBCF53D524C97D8EB6907
SHA1:	E92001EC0945688F34DD4E1D39BC8C7BD00EFFFA
SHA-256:	421972A7152A8BDD1F19286372636AAEF09BB036071E09046E706AE3B3E04511
SHA-512:	5DF126AE7880D6A192AFFD0AAEFFACDEF7D8B64BAF14B53272CEEE19553C4C57EFF59191717CD79DB9F41B2E7E231B7B77F9A50300BB6A8D32CE5C9F20326266
Malicious:	false
Reputation:	low
Preview:	!function(n){"use strict";function d(n,t){var r=(65535&n)+(65535&t);return(n>>16)+(t>>16)+(r>>16)<<16\|65535&r}function f(n,t,r,e,o,u){return d((u=d(d(t,n),d(e,u)))<<o\|u>>>32-o,r)}function l(n,t,r,e,o,u,c){return f(t&r\|~t&e,n,t,o,u,c)}function g(n,t,r,e,o,u,c){return f(t&e\|r&~e,n,t,o,u,c)}function v(n,t,r,e,o,u,c){return f(t^r^e,n,t,o,u,c)}function m(n,t,r,e,o,u,c){return f(r^(t\|~e),n,t,o,u,c)}function c(n,t){var r,e,o,u;n[t>>5]\|=128<<t%32,n[14+(t+64>>>9<<4)]=t;for(var c=1732584193,f=-271733879,i=-1732584194,a=271733878,h=0;h<n.length;h+=16)c=l(r=c,e=f,o=i,u=a,n[h],7,-680876936),a=l(a,c,f,i,n[h+1],12,-389564586),i=l(i,a,c,f,n[h+2],17,606105819),f=l(f,i,a,c,n[h+3],22,-1044525330),c=l(c,f,i,a,n[h+4],7,-176418897),a=l(a,c,f,i,n[h+5],12,1200080426),i=l(i,a,c,f,n[h+6],17,-1473231341),f=l(f,i,a,c,n[h+7],22,-45705983),c=l(c,f,i,a,n[h+8],7,1770035416),a=l(a,c,f,i,n[h+9],12,-1958414417),i=l(i,a,c,f,n[h+10],17,-42063),f=l(f,i,a,c,n[h+11],22,-1990404162),c=l(c,f,i,a,n[h+12],7,1804603682),a=l(a,c,f

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11461)
Category:	downloaded
Size (bytes):	11890
Entropy (8bit):	5.1977429133822834
Encrypted:	false
SSDEEP:	192:4O3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjCK:4dRCchzzYfnqejah3e1Q5l8h6vbK
MD5:	008F0232DA95A3E68A29C0EDA6177429
SHA1:	35479914A1C2844899C75809987FDD83C27834E4
SHA-256:	EF34F22362C2FF3F9CD440047BFB16D7D59148B296B7B64E68D8C262EE67E9F8
SHA-512:	A0A248A6E0C490635648A2C220BB497A10F638E183568334182AAFCE5AB2786F717AF10032AAA33F854395A45E7AE5F48DE254B76C155C630D8A638BEE0F8144
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/js/fontawesome.js
Preview:	window.FontAwesomeKitConfig = {"id":58743174,"version":"5.15.4","token":"1dd5876648","method":"css","baseUrl":"https://ka-f.fontawesome.com","license":"free","asyncLoading":{"enabled":true},"autoA11y":{"enabled":true},"baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"minify":{"enabled":true},"v4FontFaceShim":{"enabled":true},"v4shim":{"enabled":true},"v5FontFaceShim":{"enabled":false}};.!function(t){"function"==typeof define&&define.amd?define("kit-loader",t):t()}((function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var o=null!=arguments[n]?arguments[n]:{};n%2?t(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):t(

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 678, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1280521
Entropy (8bit):	7.982319956856446
Encrypted:	false
SSDEEP:	24576:O4nA5/xBtaxfasiH6rBg4ATM6P0KV/LOMeIa9yBbQvnx0vBj1:42asiH6rBptUL/vDCyBCxCj1
MD5:	136F3743B1E20C19A52B788F4702E332
SHA1:	AA1A6AC82C81A90C8DF11D6001FBE2B3D3DD3AFF
SHA-256:	6B1F28A1C4961597002343E3BA09E479F5CF50867DA57BD12CDC2D223D0C109A
SHA-512:	FA110A5D64C8FB415ABE38263C4416B3F72DA26568EA7614D55616406F30CF94A0CB1B51D63D7822C2F1D873D82BFAC2BD239ACD2D6F550D4CB8CDC5E7053158
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/image8.png
Preview:	.PNG........IHDR..............]P... .IDATx..u.....s..8I..$[.-hff...?hFu....bF.........;qx&..d&..<w....O..d.g.?~kW..T_....w..V../..~.r....7.h..Rd..Th.CI.......;..b..b....$....$.RV...#).E.g.#...I..X.rL!d.._..r..H.$_.c..7.y..r..r._i..\+pDitFS..T,..k.'.bw4E%Q..]..8#.w.....a.rm.m.>...T......J].s.).L...7x).S.$...V..B.).4S?M...Z...n.K..7..>d.....$..L.;..O(..0.}..Jc..I.}....1....qD.i.%..D......CRAo...H..MJQ.R...nhU.5D....a..]...#1..b.H.^...2.KY&Fo.:w".....i.!..L...:O....&-...X.'......._...R..w.....;-.......G.U.eK)....02.wu.Fw8fO..O2.k4VW..x.%..l.XZ...........E...iv.Q......CVQ.r.....]W..S...b~x..wnLf...f.+f..jgG.k..bF..sS...@..x./Na..tj..c..4O{"r.w...3......zE.#=c......W..9.n...RX....-kGaMG..QP.....U.P\.\|_.2..Hsu ..3..yvI{rJ.ey...HLy....HNmGt.[$.>.<0....._....i._...-..lIa..F..e..X.-Md.D.NO.iR....8\|r<......q.>6...'0nj1.......D..#".=b.? ..C..3;"J..LFA......1..R...&..7.bk.:[0VO..\|s8.....NLz7"S:...>.#.G..t...=#.g.....aI......Y..Q...5..'..'

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	550822
Entropy (8bit):	7.9936774213307515
Encrypted:	true
SSDEEP:	12288:E2KbSNjAIQJASqUQRNYBvoGzLUjMSMtsYG+Xh4y19rRbV5I:E18jAIHSqUQR21JYMDpl9jRe
MD5:	2794B6C6418E0FD398E0CB9EFA543E03
SHA1:	0149D71FC84378D24EDF809857346488C1D3FBB3
SHA-256:	51C76448A1B0932D515C5CD8752E10C314430DBDF82F624B07504C295BA3A67A
SHA-512:	73039FBA1AE7167CF42C189EE108801D5D5DDEBC9E551B60A5F985BAC293E08589AC331A69572B1C4B0CC33FF1F5B895AF86915B2086D3F7A61B6B10B80C0B4E
Malicious:	false
Reputation:	low
Preview:	:....Q....QZ5xuqBJH_s... .......CggKA2RyYxIBMQ0..<j.............CggKA2RyYxIBMQp..!..:C..C.u"...Q.AX........-\|...R,..(.l ).KA...4..$.$k............".)_..a2`....g6..I.c.V.Q....C.GW"0jn....... ...53d<F.z@...dR....e'..xp.9&i...H."y.~w.K'.=j._.... ....).U...v\|..7..5....V.`5....e....a+...\..;RY.w....~...\l9..H..`..K.......a2RK.X.3.#_4~.i.j.b...s.KX.q....J]V.M.r..2^a......(.U.9...4<../..[...H(YA...7..............S......&].........B1.......<.4,<5Go....t8...`...*,QPo.n..J..@.}..........Qp...oj2V;..C.../.C'.I.t..`.z...dC.Q.......E.`}...@..=H.[..n....+..;.#.....JS#r^....N.......R..._.?.\.....().^...7.8^..#....EGI.}/C..X(..>0F....G.^.K.F.Zbbd..O.N...C....7...s...~........dRh7.~.r.{)....v.}..5...N......./2..p.........7).Bh.3<..f....C..._.J..(%ej..2.. [.o.-...v..]}.......f..vU.l.I..h..H..0._.2.....qs..3...O?lD..[..GJd.....e....g..4a1.o..w.Ua@_......O..RF........s..c..E......i.......;>....:.X.6.\..a_...._}Sf......%}V.?%...q-<...v.'..W)1...

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1999x1194, components 3
Category:	downloaded
Size (bytes):	183630
Entropy (8bit):	7.917191650769488
Encrypted:	false
SSDEEP:	3072:tTLXk00exS1ylQVPrK+ZjtJokVLPjBKyeU5w796c9PR75G2BqsuVeZl:tTLXjOY+jPjBKypwJ6cXkuZl
MD5:	85D865BBF236DEB2677C0FD0072C6D78
SHA1:	64400D9BEE82F33CD2ED2EB5614585749694988F
SHA-256:	3D4D5FB22B0B6EA947A73623F97CE99B40ACA4C513F0D15CFE7D542CD0FE3C11
SHA-512:	A1B8A0429C630CBE9EB806344C59B92E35F2E07FCDFF44A137A508DACD4845590E345D000229905B3330CA659EF99E3C257265043E14EEDD43111A7E93007617
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/image15.jpg
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..`..h.Es.{...V...&.o...CU.5=ga.&.T.L....V..,9.t...MFSh.2.L#....jJ...I.......r2MK.3...+J.<..5i.G.S......f.E.Gl..kF ......(h...i..f..fN..............4..#.Pp......q[...w.\...9.i.0.[&.9.n...F........L=ii.....S..jd...4....FlcTDsS...9.b"U..LD.(.,.9..U.-J..)..QJ.57ni.P.3..U4.U.".....P...&..]&.-FEZd4GA.O...T.EEVb..D....i.R.P.qR.RG.Z.hh\|I.U..*.}j....=..b.....g

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	965
Entropy (8bit):	7.074832980192663
Encrypted:	false
SSDEEP:	24:kdLdo7U8Wln2HveCdV/EA/ooj6cbqRgPTzX:yLd1gPfV8c2RATzX
MD5:	D9E4AF6D2F3884D173632FB85899F176
SHA1:	2844918E6B7368CB99145C25003FE36F2C539FC8
SHA-256:	19A1A7AA225DF93AA8518422F904CBAADE50DEA44F23FBA30EAE9AAC32C90ECE
SHA-512:	60317091D701AF1FC17320FF9D04107D02D9E536F0A76F02CC990E1BF0EB3EDBEB07A077D8C7200CDA6D42BC3603F23438B0388BDAF7C4268E26E2A5F91AF525
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................D.D.......................................+...........................!Q."12ARqs...3...............................0........................!12qQ..A.........3..".............?..N.v..@....@....@....@....@....L5^.0U..JH...V..Af.\..Y.dj..N..ff8.PB.}..2W...]i.@\/5\.jg... ..C.eO._.:.Uj').3..i.WJ.M.o..........f..Y.....RI..$.I^...W.{....i.n...s..D}.N..%q..PO.@.......R.....Dm%..(....r+.&I.... ......:MJd...[q.{..k}.Q.....B...h......x.E.}..Q....'........b..*.(Ya....z..p....0N.Z..R.......\.I[n..HR......x...\|R:..z..B.i....S'...n. .I#e..-<0.O....S~..Zu....L....%...@..........[.'.X.+.3.]V.\|znW..p....UT.B.,a..."".U4.B.,a...#H...SOL..on...Z........q...L}....K.LUu.l.z........k.LUu.l.z...\..zt3..... ......~J_..#..<G..jO._.~+....\|5.n..\|9.n.....\...@....@....@....@....@....@....@......

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21444, version 1.0
Category:	downloaded
Size (bytes):	21444
Entropy (8bit):	7.990871977021031
Encrypted:	true
SSDEEP:	384:8cEHB0MPPblbQ3jOYVdSj2WvnrFnimhmA4sC1ad7RNwAwEMwdz12N/:LEv5QKYanrFtm8d7Rbwyo/
MD5:	FFD3D57638A7899D80BCC108713C271C
SHA1:	D186409EE24FC3D1CC8194434DD707181EAD20EC
SHA-256:	99027D866818F716D208569108A962AC72200197CAE503EFE5B6BF002BF4915B
SHA-512:	7305C344CD8F954929314F3B5C9B996638E57D5F142A327DDC9F42F592880EA30B5102C73EE0E296BB3C4FC21D9FCE5D862A492B4BC1127BA2C79C4DEF527C62
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2
Preview:	wOF2......S........P..ST..........................q..f..b?HVAR...`?STATX'..../D....(.N..d.0...6.$..D. ...........%..............B....6.@3....IND&..H...=.10.]....>.A,a.a8,\.K.0..+.....V..n...\.E...C._(T8..-1..n]....g;1.D.r.0.$3.adra)..<.r.#..YX.;....C(.....#a1.g.8Q......v.\|.d'O......tF..@;.KKig1...?.rSM#...)..!@.-"`dcd#R..1.!T;...u.\|.....K...NY.........q..YW...Q..`<..h...........^...'...4..~(..J\.z.....}?.f.C.....~ hB.TB.}.{.Vm..8....m/C..L.......`PH..M1....5m........R.nH.$GYX `.&...9.WY...%&~..]..$X!..-..E&U.B.....Z'n......K...,.......h/.].4m^o8.P.....-.k.....l.z. .(.%K.P....0.].Y].9M@Y.na.Yt...wJ.+.oy$J.......=%'\|..$IT.%H.Bt......\|H#...j..G...@p...B..../u...d............Y.......C..G..M.....6....X..VT..'W.2.6[.R...Z{._L1;.!~.......xZ\..-.L._....JG;W..L........8-.i.....\|.%E..PX......CH....A.%y....9..E..ukWv.+]........t.3..d\|..m>...L..e7.fUU.+kd.....W;.o`.x..!.1{Ld...U.../D..T..u.B6Y..H..r.U...3s.....&.F.my@......T.~...y...4D<..5.o.f/..

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1999 x 1999, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12361818
Entropy (8bit):	7.9832664760660785
Encrypted:	false
SSDEEP:	196608:+zgExwHJ9l8InLRfyeU+virD6wbZlv8kz3Su2jK63aQghhQ9nvtF86yAkrHoz4mI:+zJOJ9l8InLR69+e4kDSuBcghhJZ0dlc
MD5:	E884C81704CD4914461AA615215159C7
SHA1:	A15E827C21A0B2C8E5BD9568E4148667CFD90033
SHA-256:	D1973D984A02FDEBB4CFE155F43B221BE4C0B6D043DDAA505D8AFD0BE09D99C4
SHA-512:	CD57236E177FB2B9FDDBACA5547C21EA08E7BFDE9F18E797C29D08293026977DE915566EF4AA4717A26BDB1F7BAC85798F64D52DB1B584AE239C391AC71EA07D
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/image11.png
Preview:	.PNG........IHDR................R....IDATx^..u\|W..k.E.K..!.$$$......(.......w....Xq.HiK[........>..2{..3.f-....>p..C{[>.....=.X.....&f.04...1}.L...~..\|f`N.)f..7..dcz...W......f..-....c..(k7.;z...=......F......RP.j!)L..bRX.z..L..G..)..o!.E...c.Q.e.....qH..9.........].Cj.6..X..c.U.Ud!..X..c.....-....\|..... ...2.)..va...`..;..\.o......M,Q14`..]FL.b..M>..(.c.t-..k...#...3.`......k.....B .6.(;......W$c<...D....Vt..q.h%...\.....b..I-fbJ1.y...`dt2.b.....rl:.qY.Gg....8.h.;...2....V.31......d...._...K.J....O.=}..N.3.]Ey..1....leI.k...Z.........sgXx..?.q.O.e\B4#."..........Q+.abE>.eyL,.D'/...4.....>..c`d....$8...C.($..d...hz.../"..Q...NC)2....C.......0oo>..c....9....>...q...X..9.1.%..n!.u..s.pF...&.O....`Tx.....C..@z;{.......!..3....t...&Y..Ds>.h*..m..>........$m>....$A..y.F2WL..`e..;K....L_.G....L...&}..\|.....c.-sP......zk..KS...U.1A..j..6n....).R.?P....XE.....B.O...DU.n..#e..)...XU...S...:...J..MO5]zi..{..;&..G.>.V.\|..\|.2....@.).b..L..

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	5.008545586736689
Encrypted:	false
SSDEEP:	24:2dqNPWLjAnXJEdeaxM2mlmRhNNnHMhHuY7mdcL0O8HiLBk0Sw1DM8azF0uMt8DhR:cqtijORYHAX7mdcLX8CoqqF+qR
MD5:	370E7689A57D1643CA133C4FB6596622
SHA1:	3E8CB256403BEFB01B1D4FDFDF2307DC0E495FC8
SHA-256:	F740E798E89FA4F02E462670AA719EA72CC7A15E3930CA4986C22E1A765E67DB
SHA-512:	34D920D126C03DCD2BA7224F6C18F7CE9E4C5B89B96FA71A2F457C7465D58108C66C75CAE3D1AF7500A9F1B607110B3EE56147FF5B83FF9D90A91CCFE08D5B6F
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/img/amex.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="30px" viewBox="0 0 42 30" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>American Express</title>. <desc>Created with Sketch.</desc>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Add-To-Cart" transform="translate(-284.000000, -120.000000)" fill-rule="nonzero">. <g id="American-Express">. <g transform="translate(284.000000, 120.000000)">. <path d="M42,26 C42,28.209 40.209,30 38,30 L4,30 C1.791,30 0,28.209 0,26 L0,4 C0,1.791 1.791,0 4,0 L38,0 C40.209,0 42,1.791 42,4 L42,26 Z" id="Path" fill="#1976D2"></path>. <path d="M19.255,11 L17.142,15.683 L15.039,11 L12.344,11 L12.344,17.726 L9.341,11 L7.067,11 L4,17.981 L5.815,17.981 L6.486,16.423 L9.918,16.423 L10.6,17.981 L14.065,17.981 L14.065,12

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 70768, version 1.0
Category:	downloaded
Size (bytes):	70768
Entropy (8bit):	7.997043536824611
Encrypted:	true
SSDEEP:	1536:sjOS2w8wCuZrejV4AJDml0kgrkoPRb4Ah4Z1U0BtBI2oZmDI:ujCXTiaFrRxVh4XXNoOI
MD5:	539CD6E8DBC6BE67F8A5DE9E485FAA7A
SHA1:	E8DD43824F648B3B0DBD051B91926E6DC11684D7
SHA-256:	516507425D7F314A4731DB8A6848B8D584326BAD9CC47DBFFA4052FAF90DE11B
SHA-512:	54B2284DEFC18D92BA6F82F3B56E37FCF79AC3305FF59606AFB179C30582C0594874B173950AB41882BD1B6838893BA561ABEA8CF73590CD4F1577739396E067
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2
Preview:	wOF2.......p.............................................h?HVAR..?MVARF.`?STAT.8'2..6+..\|.../~..... ..b..P.0..2.6.$.... .....a..([...5.....d).n.Bs..._IYx.7.\u...e.\<7.a.u0....K..`......J&1...o...H.P.R--P%MDF.].\...F.D.Uu...v...m@.T;..:...4A...)?.8U!.....c....W.:..J.....`..J.1.G....^..W4Izq.=b..>6...:..J.....>P5./a.J..F0t..;qEi..{...x<.R.sY..;..XW.#j.[.a.m.....#Ly.iW3.e.-f...k7..%.8.r....qti....Wp...c..Y....Tx..Ze.TI.T.".h..\|....d .R...8..0.R..C....Jg.5..7.LD.['....j.^t.f...Q~....#C..%.Q.2c..t..L.g......yF..$.a$C..^..yD...[..z5.....$O....H.......{.{..".....!.H..Y.E.Q.mP.,.......\|....o..07sc0X.....Qy.F...A.b.5"M..G.8.&......0.Jn....l..).R.+/~9.*~..T....HP)R."B...U...".;k.+"V.)""EDD...)2'"ED.....E......H)...)""RD..H.....""E.H.ED.H.".X.P.M.Zh6..3....._.{n.f.H.U.....8....._......{.}....."\JQ.(O!)$2:.FS....9.......K...^+.5.[...Q...Bp.g...^..;W].......7...d...R.B......Y.n..."...#f.X.#.c.._.._.VH...o.\|a.n.~7...;...9d5.nj..r.z.......^.P...fk..

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1078 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	668416
Entropy (8bit):	7.996595782602283
Encrypted:	true
SSDEEP:	12288:CnIC7J4iwzLFz/Wt5qrEnbPuGG+scs9XZIkrFn25Sd+0CkUXC5S/:c7J4iwhiwrEnjuGG5caWkr9Zbqb
MD5:	FC39BF86D0770FB9F5C15A85DA770838
SHA1:	76A7F6628DEB6D3C8A229C958FBDA6A1EE67893A
SHA-256:	D64E3B9C7C89BAFDA4D4BBD373E1DD1983A1364E2D13C99F58D97EE5D34EE7F6
SHA-512:	23D8A2DFC012ECE50B9DB52B8F5792D05FF964324A8D5E1982E881A64714C796FE9C692D7F51DCEE16D693089F9F09C8EE73FACD8BA42C13D2F23441276C2266
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/products/prod9/6-bottles.png
Preview:	.PNG........IHDR...6...X.......f\.. .IDATx..i.m.u.......\|....A.DS.HS.M(.....3."X?,.H... ...HH.Dp...,..D....b.@..1....J.h..H..HJ..{\|.{W...u...~..>..O...8...]s.]..WU.;$j..M.....H..k.mT.r..c..~...kxo.w....~s....p~....G..fv.....9...?....\23..gf.....%..sf......5...Q........Er..Z..`f7.{..~w..w......QL......e3.Zk.9..Z.R...ryS.<....7....b.....&...n....{{..>.x7n.s......{~.............y.u.....?.~...../^\|.[=...]....._.z.VYvvv...w.....=.....^N..e.\|.{..../....o.K.....~..c.....a".......<..'..GGGG...q.aME.......qn$.l$..1.G......D..f...=4....ZJ.8....\....p......>.M..$..Zf7.'py.\Y...,..g..Q......W......q..=.X,<.e.w..U~.............Nlttttt.%.u.W...c..f.&3....u\Jq...#Q..x..D...3..u.E.....k....9e...x..'.o....Z..O..DH......=j.....wF.....r......\|a.X.2^.+.\|~.Z}n.\~..J)....b..C3{.................:........t....}......R...o.?.Fb..qI.>.!...Pq.:..hl+.......a.....S.r...<....R.lyP.=,..h.+..5...a...:...yk\........KK"-_...e.Q....Tk}.....+[[[.t.d\.sc.Z...../....

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	791204
Entropy (8bit):	7.992209814144656
Encrypted:	true
SSDEEP:	12288:POO+n8z4C38b0OOqDJ+nU7I5uRYjLSDKvpNvOo/OpVq4eyMA5P4KOEAsGz6:2Vn8rUEq/7yj26/Oo/oDeyp5PHAsj
MD5:	BCCE8374B85BEDD32E84F480ED502103
SHA1:	7A6C42FE4FD3CB52EF347585C6A482C26684355B
SHA-256:	5886893921B294D3974632E26155F9AA2EEBDCA22F0B9D847FD246D68C5F220F
SHA-512:	D9E5C0A314109DC92DBDF677021BF5E4931493D4708C2F93957BD6CB748AEFF5BB73DB7B81959B457B68326ED1644DE7A30DAC7672E08887D8E5320EF834284D
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/image14.png
Preview:	.PNG........IHDR.................. .IDATx.d.gt..a..a...I.D%..... ......A.`.uH.9...I#.h$.F.%[.l.,.5.];.&.:m..n..n6..l..e.^?...s.=.....\|......+...g..O..}..\|.......y.....?.?2MnI..E..T.QZ_A^U...Y...&.N\..Y.L....o*..\|.k./M6....T4..S.AZ..r.r...A... -......id.._\B^Q1.9..dd&.U.C....&1%...I.0y<<x.-.~...\....#M.H.TAnI.y.HZ..Mz....6..&.uz.Z.0....&......P.........m....h..)..J....XK.....z.....C.&..].>..ya...,-.3h..4.#4....z..i..c..cC.uP.eC.a...........McO.e6.).%.J29Q......:!.Mu..D.%..(...%....\|Ndf~.;MI%5;.....j..R4Q..Q...YN.FN.VA...a.....Z..:.:).^.\|....Gd.R...........fw;..vZ.N4n.Z.;..N<.a.o...9...'[/.q.~..Ox.}.".....a....l..X.X.[...WY........Zc..m&.m.v.....VqL...r..Z!..z...x....8?.G.?.A......W.?...~.3.?.q......_5.....w........#=O.PV....F.......?:f...#....Y6o.0...s:.{&.gz....f..J....Rr...5g.n.#....>.e]b.]b...T.D.G5X"z..z..:.8p/....$p.a......L..&\|y....O.3~...I7.s..Z.S2.'D.=.q..K8.bzG[h1J.....p.?)'.ga.n....y#..n\.n.k>.O....#k...T@^y......(.;.xbmL...wm...q\;.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38602), with no line terminators
Category:	downloaded
Size (bytes):	38602
Entropy (8bit):	5.432933734373714
Encrypted:	false
SSDEEP:	768:E7gXReL4RDwCAbkl9nDxu7de90OUsTGn2IL4a2s:9GEDiG9nlGK7UsTIL4Xs
MD5:	D9DCF1CBD42751AB39CB51FC64E6E133
SHA1:	34997EAD7E4438F012EBC98E153F6FBA08BD11B4
SHA-256:	7CC8D713A18B57F6816EBF31B137904FEB0C02DACEE6991D932F58C3F8B41CE9
SHA-512:	C9E9C0ECB041A1AE0323AA31826B15593114B4D014EA10F7930BB76A1B8BD8F5589E73BBF37FB93CF7CF5E51F88F5E543179AF240BFA61054A402D8D4B02B345
Malicious:	false
Reputation:	low
URL:	https://js.braintreegateway.com/web/3.97.2/js/client.min.js
Preview:	!function(e){var t;"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):((t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).braintree\|\|(t.braintree={})).client=e()}(function(){return function n(o,i,a){function s(t,e){if(!i[t]){if(!o[t]){var r="function"==typeof require&&require;if(!e&&r)return r(t,!0);if(c)return c(t,!0);throw(e=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",e}r=i[t]={exports:{}},o[t][0].call(r.exports,function(e){return s(o[t][1][e]\|\|e)},r,r.exports,n,o,i,a)}return i[t].exports}for(var c="function"==typeof require&&require,e=0;e<a.length;e++)s(a[e]);return s}({1:[function(e,t,r){"use strict";var n=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}},n=(Object.defineProperty(r,"__esModule",{value:!0}),r.PromiseGlobal=void 0,n(e("promise-polyfill"))),e="undefined"!=typeof Promise?Promise:n.default;r.Prom

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (626)
Category:	downloaded
Size (bytes):	6864
Entropy (8bit):	5.266379222178208
Encrypted:	false
SSDEEP:	96:266yg0GJ/FijlL9krRGFGQYJGQcGxG/VnGpmMmUmzcmEm8mpR3/vybaX0f/:l6yrOE5KRmfYJ5c0s0lJVZpDSQ
MD5:	9CEC29542622AF88853E9B5BB2F34E33
SHA1:	29758D31C4E90A32BFB7E05E99F9E5E146A8DBBA
SHA-256:	F8B4D80E0BEFED6F39D8DDD4C70D891C5C5760AE5FC722DC63C76B1413DBBB9D
SHA-512:	A9759DFE2FECAADD8E6347C9C929423C6123872F7DDF5009C4E56AC267960718833454770AEE477D28B0939893071229C2E6664554F2FC9F34CE7FF2C337170E
Malicious:	false
Reputation:	low
URL:	https://tracking.buygoods.com/track/?a=6802&firstcookie=0&tracking_redirect=&referrer=https%3A%2F%2Fnervedefend.com%2F&sessid2=sessid20250110164829858&product=prod9&is_checkout=1&caller_url=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid20250110164829858%26aff_id%3D1270%26sid%3D2566%26sid2%3D6988_sessid20250110164723474%26account_id%3D6802%26product_codename%3Dprod9%26redirect%3DaHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x
Preview:	.var spitoday = new Date();.var spiexpire = new Date();.spiexpire.setTime(spitoday.getTime() + 36000002490);..// Get hostname without the subdomain.//.// The method looks at the second-level domain for common ones, to determine if we need the.// last 2 or the last 3 parts.//.// Parameters:.// Fully qualified hostname (potentially including subdomain).//.// Returns:.// Domain name without the subdomain.//.function SPIGetDomainName(domain) .{..var parts = domain.split('.').reverse();..var cnt = parts.length;..if (cnt >= 3) {...// see if the second level domain is a common SLD....if (parts[1].match(/^(com\|edu\|gov\|net\|mil\|org\|nom\|co\|name\|info\|biz)$/i) && !parts[0].match(/^(com\|edu\|gov\|net\|mil\|org\|nom\|co\|name\|info\|biz)$/i)) {....return parts[2] + '.' + parts[1] + '.' + parts[0];...}..}..return parts[1]+'.'+parts[0];.}..// Get hostname without the subdomain.var hostname = SPIGetDomainName(window.location.hostname);..// Save sessid2 cookie.document.cookie = "sessid2="+escape("sessid202501

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	dropped
Size (bytes):	339582
Entropy (8bit):	5.620224928082496
Encrypted:	false
SSDEEP:	3072:avUSCmK9i0H108liQNie0rw5RMTu7Vj6GvBoNJyMf:a8SStH108lNNt0rSRMy7VjXvu6+
MD5:	9965EC042D533FB56BAFC3BEA2135437
SHA1:	6F8297E0E9B924B271F511AC2039D0A9C2788904
SHA-256:	13A9629223335969B254D033D51FB9D5115DB4F22E2163488C6FCC2E7E6EBD39
SHA-512:	E37649EF89A72B0487711AEE18D3D0B02B843C63722B72D2C0DE5D561835BA5D9E2EAC6ACA92CDF9707918C202DF6AD5CC17BF8745DEAB5B32B3406C7F674CEC
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var fa=da(this);function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	565869
Entropy (8bit):	7.994014058658393
Encrypted:	true
SSDEEP:	12288:ZKMriNvFo9wVFWh5Zh7w8PFgognJYzfusiBBeQPBnYId/GAaWF:ZKuiNNo9MFWzZ2+SYxeoQPBnzNF
MD5:	BF595EEE603AD80AE2CA64D66770A1B8
SHA1:	FA0B25ABD904FC293782EAB73FA044EF14EBB471
SHA-256:	85815F4A54C0BB3DC78E68B67C438E526FCCF0EDA1A013B99D5D1044F9684266
SHA-512:	2EA8D37471EE2BBF44E5B9FA5E980308E3BB84C0F9DFD0AEFE09A4C2571C563ECDFEDB56005152CC4838AC4F0D5F01984B87FED1B390BCC1EB5DB8BD33D368B2
Malicious:	false
Reputation:	low
Preview:	:....Q....QZ5xuqBJH_s... .......CggKA2RyYxIBMQ0..]j.............CggKA2RyYxIBMQp.."..D..C.u"....8..A........&..3.G...lK...RT.....H>..RJ,.{...L.>.i......K...\|...QD..<.j..`!..U_.G..pT..l.........B..L.. ...2.h....Pg..tV...D4<kF...r.V.Y=.7.j.....b.\|DIo..D..,.....Hgi6..o\|.l...4...b..ex...~=........$..`z....&.......Y...\|..]...%1}.c9..wKX..)d.5.S.ktH.'n..e.p..X.p......?7.+.0..GQ...\.(.;.y4....sdZ.T,.RlQ...&.k...)...1W...)J.I.z...m.l......[a.G.6.#z~v.?.q.w+.l.C.....{...lN...L.._/...A........N.7_.M.......7....i..&O.L..:9..$CO..D..K..,vR....{-..g..eA..+...O.x...w.....Zd..M2w.(.c...M+......~..L"..>.....-L..G..Kd...w@+..0}._y..e=.{.../......0}.\..l.~J.r.}.......uJy._...H.]..................\|...u;\>.J#..;...Y.&.9V..w....-. .].B........Y..Vx..b..&.f.....7I..W....n..U.....!H.\.y...K.k....t.r...`.Wl.o..$s.....[......2;...y...V...... +.Rh....[.)..o6D..Z6.D..f....5...y.U.bJL....AN..(..B4.+.R.e.....X.... ....2...2..k...)nu..03m=...`....^.M..{.2...pV.H

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (58249)
Category:	downloaded
Size (bytes):	58608
Entropy (8bit):	5.15973435522322
Encrypted:	false
SSDEEP:	768:P3e9inhA6VKxf2HyYPHrpITykdzOmU8MXWC1lQ+goF1FG+tp9xuk+5C4:PPhih8HrpKUl3dKl
MD5:	78E66C32F9DC8EF218F97C1DE285CE9E
SHA1:	4C860C6E98AB1849365892DE37CCC0F2A99F053A
SHA-256:	0C10EE2E7F092A8DE55246ED10477B2FCCE8810453AE14B38D4FC569F0744659
SHA-512:	386728E4BF585E3F081E593E6D5B28B5C145E5A30E70A15AD7C58F2B5460E3F058CA2627D092FC7E217F24C399CA378070C6C0A4A1DB973DFBF2DD5F9609FC4A
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/muse/analytics/index.html
Preview:	<html><head data-date="Mon Dec 16 2024 16:31:04 GMT-0500 (Eastern Standard Time)"><meta http-equiv="content-type" content="text/html; charset=utf-8" /></head><body><div id="ie-check"> [if lte IE 9]><div id="is-ie-lte-9"></div><![endif]--></div><div id="app-container"></div><script>/! For license information please see iframe.js.LICENSE.txt /.!function(){var n={454:function(n){"use strict";var e="%[a-f0-9]{2}",t=new RegExp("("+e+")\|([^%]+?)","gi"),r=new RegExp("("+e+")+","gi");function o(n,e){try{return[decodeURIComponent(n.join(""))]}catch(n){}if(1===n.length)return n;e=e\|\|1;var t=n.slice(0,e),r=n.slice(e);return Array.prototype.concat.call([],o(t),o(r))}function i(n){try{return decodeURIComponent(n)}catch(i){for(var e=n.match(t)\|\|[],r=1;r<e.length;r++)e=(n=o(e,r).join("")).match(t)\|\|[];return n}}n.exports=function(n){if("string"!=typeof n)throw new TypeError("Expected `encodedURI` to be of type `string`, got `"+typeof n+"`");try{return n=n.replace(/\+/g," "),decodeURIComponent(n)

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1073)
Category:	downloaded
Size (bytes):	236476
Entropy (8bit):	4.985454539486383
Encrypted:	false
SSDEEP:	1536:eWZ9/c3SZ9voLTplNhfjzZPs7zvAgDw6RdeJmvdHBumka+kPt1diPTHDtsJUX72J:elup22Ys3N23c+iv0rfcCkmJe1
MD5:	F83940672A9D0C0AFFE98D5AE6F7C9FE
SHA1:	9E78066D8E3D96A1E1C234182493D4FD83DB28A8
SHA-256:	E976C10DC14AFAF1DA9D225C3E824642F75D13003ED38721E681D5A4AE2D586E
SHA-512:	4AB618CBB5D5C47BA48A2E948DCF254C8431B324097B4BA36186CF06475E18D87D7BF978158E56CB51DC15379ED51B78B7C7181C54B3697618AF0892B084B9F8
Malicious:	false
Reputation:	low
URL:	https://buygoods.com/secure/checkout/assets/js/app.js?v=1.0.12
Preview:	// Initialize URL components.let domain = window.location.host,. pathname = window.location.pathname,. checkoutParams = window.location.search.slice( 1 ),. checkoutUrl = domain + window.location.pathname + window.location.search, //sent to LogCardinalResponse. . // Set the values for the form hidden inputs. urlParams = new URLSearchParams( window.location.search ),. accountID = /^\d{4,5}$/.test( urlParams.get( "account_id" ) ) == true ? urlParams.get( "account_id" ) : "",. codename = ( urlParams.get( "product_codename" ) !== "" \|\| urlParams.get( "product_codename" ) !== null ) ? urlParams.get( "product_codename" ) : "bad_codename",. sessid2 = ( urlParams.get("sessid2") && urlParams.get("sessid2") !== "undefined") ? urlParams.get( "sessid2" ) : ReadCookie( "sessid2" ),. . // result_str = ( urlParams.get( "result_str" ) == null ) ? "" : urlParams.get( "result_str" ),. . // Initialize form helpers. sameShipping = document.getElementById( "same-shi

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	4.963813031347751
Encrypted:	false
SSDEEP:	3:yLR20gJYRnd7HUWBhzpGLIsRgrErYFuIV1acmOw6:yLbDRd7H7hzM8eg+YHQOw6
MD5:	94D0214C89CA9AFC7346F93FFB3ECE20
SHA1:	667D69A03AB5437804C53BD5272BFC7EB0C5F4A8
SHA-256:	DFF30086BFE621ECE1A52C54DB89E1C54EF4FFB79294EDE1E4EED07A3D3B94D0
SHA-512:	E2F0380C5B92645416C08F532C096035F0FF5BEEF7EC164D638BDB63C5FC42DD38EB3ED7E0A9AF93036D4B540527438F92A47F12E49196B4D82507EBDB8045D3
Malicious:	false
Reputation:	low
URL:	https://display.buygoods.com/v1/address?id=corporateaddress
Preview:	document.getElementById("corporateaddress").innerHTML = "BuyGoods Inc, 1000 North West st. Suite #1200, Wilmington, DE, 19801, USA";

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	dropped
Size (bytes):	193100
Entropy (8bit):	5.6424255921791255
Encrypted:	false
SSDEEP:	3072:wiG7vXLG0MugjfNTCO+jbbDRrqxnh/+FpaT1YoFQdl0htk/Xu8HLYFkflD045/Yt:wiG7vbWugjfZCOsbbDRrq5h/+FpaZYot
MD5:	4A63388C015E03EE91D8B5396333BAEF
SHA1:	3B4E85DF8C2F2BB5612D37F000D9A8FA01AE9B0C
SHA-256:	F4A6918B9A8A40CE6F81C6A630E424C6BFA72E054B714EB01A3C316CC5D9E6D5
SHA-512:	D715174C4C4FFF77318103A60A6DA60EDA8C1558205B6650FDE24F839E31A7E721A90B86CD997B9FCF1B122CF090E1B71B099FDDEF6AAD4DAE690C6C476E8782
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Cya,QB,Dya,Eya,Fya,Gya,Hya,Jya,YB,ZB,$B,aC,bC,dC,eC,Kya,fC,Lya,iC,kC,lC,mC,Nya,Oya,Pya,pC,rC,tC,uC,Rya,Sya,Tya,Vya,AC,Xya,BC,Zya,CC,aza,$ya,bza,cza,dza,eza,fza,gza,hza,iza,jza,kza,lza,mza,nza,oza,pza,qza,rza,sza,tza,GC,wza,IC,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Gza,Hza,Jza,Lza,Nza,Pza,Rza,Tza,Vza,Xza,Zza,aAa,bAa,cAa,dAa,eAa,fAa,gAa,hAa,JC,iAa,jAa,kAa,lAa,mAa,nAa,pAa,LC,MC,qAa,rAa,sAa,tAa,uAa,vAa,wAa,xAa,yAa,zAa,AAa,NC,BAa,OC,CAa,DAa,EAa,FAa,GAa,HAa,IAa,PC,JAa,QC,KAa,LAa,MAa,NAa,OAa,PAa,QAa,RAa,.SAa,TAa,UAa,VAa,WAa,XAa,YAa,ZAa,$Aa,aBa,bBa,dBa,eBa,fBa,hBa,SC,iBa,jBa,kBa,lBa,mBa,nBa,pBa,sBa,tBa,vBa,yBa,zBa,ABa,BBa,CBa,nD,oD,EBa,qD,rD,sD,GBa,HBa,IBa,vD,wD,yD,zD,JBa,AD,CD,KBa,MBa,NBa,PBa,TBa,UBa,ID,YBa,bCa,cCa,dCa,LD,eCa,gCa,hCa,iCa,jCa,OD,lCa,qCa,WD,tCa,sCa,XD,uCa,ZD,wCa,rE,xCa,zCa,BCa,xE,CCa,yE,DCa,ECa,FCa,GCa,AE,ICa,HCa,JCa,LCa,NCa,PCa,TCa,RCa,UCa,SCa,BE,CE,XCa,YCa,DE,EE,FE,HE

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	256
Entropy (8bit):	5.200002063676857
Encrypted:	false
SSDEEP:	6:hEskymZnpKMHiQ427iKgmPoo5kD1lvCGrbhSs:C8mBsMHXOo5gHnSs
MD5:	149D3758ABACE82D4AE922868924DE24
SHA1:	7967F09B371C3CBCCF880B489C097B97860B003D
SHA-256:	7B4EB5392CB3AD99F6A97C02415EE5D15C73F825431BD8B0C133F207A4E4C9CB
SHA-512:	02EE38E8852C5F4A7B93D0ACE90F886D931214B9BBCB2E3747E8937ED46B1999C1286E0E00B2D4E47A92D0F1524C487799AA202A926743291B8464A8E7A9A1D0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISawkGcoTZ-NYxlxIFDUUg1YwSBQ1T8nVhEgUNNkEUaxIFDVRXn9cSBQ0x8hMjEgUNq1NvIhIFDVZnIKASBQ2f676MEgUNh6ZFUxIFDfRDTb4SBQ0iTA4VEgUNknj6nxIFDUtEhmASBQ3TOxpcEhAJ4AlntcrtlYASBQ0vgGeB?alt=proto
Preview:	CrABCgsNRSDVjBoECAcYAQoLDVPydWEaBAgNGAEKCw02QRRrGgQICRgBCgsNVFef1xoECB4YAQoLDTHyEyMaBAgkGAEKDQ2rU28iGgQIIhgBIAEKCw1WZyCgGgQIIxgBCgsNn+u+jBoECCEYAQoLDYemRVMaBAgHGAEKCw30Q02+GgQIHhgBCgcNIkwOFRoACgcNknj6nxoACgsNS0SGYBoECCMYAQoLDdM7GlwaBAghGAEKCQoHDS+AZ4EaAA==

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (612)
Category:	dropped
Size (bytes):	34430
Entropy (8bit):	5.410361721219071
Encrypted:	false
SSDEEP:	384:IwmJSf5lT4TmulJgyJxCOecEP4SPZuAr/9yRJstmKhWEseER6Z4ZBbNjUs6/CSd:IwzlT4T53C6oJoRJDQPE8Z
MD5:	E4DE82256BB1D92FE0FF0C4505695568
SHA1:	3AFED1A7019FDBE2FFA59DCD198DBD3F6F0C4F1B
SHA-256:	263060790676953B348347B4927CDF0D8633216557E6C26A91E79623E4FF2470
SHA-512:	D3CF1177AE9333FCA18AA6C93B7F4D9216D7D45B3B5F1F30504F356B7D27273907578ED6410966519C32F4C6CDFC131F70B9CCE28861D45339D01B80E9527723
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var TAv=function(p,C){p.Jk("onAutonavCoundownStarted",C)},MSE=function(p){var C,V,N;.return p==null?void 0:(C=p.playerOverlays)==null?void 0:(V=C.playerOverlayRenderer)==null?void 0:(N=V.autoplay)==null?void 0:N.playerOverlayAutoplayRenderer},H9=function(p,C,V){g.aL(p.element,"ytp-suggestion-set",!!C.videoId);.var N=C.playlistId;V=C.b8(V?V:"mqdefault.jpg");var H=null,X=null;C instanceof g.ls&&(C.lengthText?(H=C.lengthText\|\|null,X=C.uN\|\|null):C.lengthSeconds&&(H=g.u$(C.lengthSeconds),X=g.u$(C.lengthSeconds,!0)));var d=!!N;N=d&&g.aI(N).type==="RD";var a=C instanceof g.ls?C.isLivePlayback:null,E=C instanceof g.ls?C.isUpcoming:null,l=C.author,t=C.shortViewCount,c=C.publishedTimeText,T=[],M=[];l&&T.push(l);t&&(T.push(t),M.push(t));c&&M.push(c);V={title:C.title,author:l,author_and_views:T.join(" \u2022 "),aria_label:C.ariaLabel\|\|.g.c8("Watch $TITLE",{TITLE:C.title}),duration:H,timestamp:X,url:C.uT(),is_live:a,is_upcoming:E,is_list:d,is_mix:N,backgrou

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8035)
Category:	downloaded
Size (bytes):	330482
Entropy (8bit):	4.942660752266068
Encrypted:	false
SSDEEP:	3072:ly589g99P84s1hThCll4r0RiEGTBmYz28e/RiEGTamw:Yp/C1hThNh3tmYzjP32mw
MD5:	9412AB8CB0D2BA2F3BBE849E2B3D1014
SHA1:	16278DFBDF5035CBE31E8605E4A6E16AC28F0A86
SHA-256:	336938CB58B9E3795C1AAD881C91D3104A1A5195904ED7495219C2B8655686FF
SHA-512:	722E8624C95B8C3979246124B6CADD65E7C7B6B9CB505A2A86C4CAB623D18BA504CD9A6EE99E6C40ABC2039861B169B825D1C483F582819C228E874B27EF5FC8
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta name="robots" content="noindex, nofollow">. <link rel="icon" href="/images/custom/shortcut-icon.png" type="image/png">.. <title>. Nerve Pain Relief. </title>.. <link rel="stylesheet" href="/css/app.css?id=409e9c6c9baad5c9b446">.. <script>. window.App = {. start: performance.now(). };. </script>.. <script async src="https://www.googletagmanager.com/gtag/js?id=UA-62785402-67"></script>..<script>. window.dataLayer = window.dataLayer \|\| [];.. function gtag() {. dataLayer.push(arguments);. }.. gtag('js', new Date());.. gtag('config', 'UA-62785402-67', {. custom_map: {. dimension1: 'domain',. dimension2: 'affiliate_id',. dimension3: 'subid',. dimension4: 'merchant',. },. });.. gta

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.844456935241198
Encrypted:	false
SSDEEP:	3:OgGunS6winPPzi2pWnt5T/AUH6Yn:O6SWPWzbH6Y
MD5:	0EDABEA07E6DFEA00CA9799BBAF87AB1
SHA1:	5F40C76A11965818E58A5851B28AAC364A0D234E
SHA-256:	972F1A26FF50446E6504DBCDB9334170EEB49C6E0955C9FBEFC5C09DD9CC9E75
SHA-512:	F3E11B15C026F689C440929D472806619BC6DAE6F3848EB053FCD858A7EE04A451EF8998DED3109D578F30FF881D7A5BAA785A2667E0EAD2D462A7175FEB9A41
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQmF6Lk0uFKu6xIFDZRU-s8SBQ14bxIZEgUNg99olRIFDcZosPwSHgnRUEi2Zjsy9BIFDZRU-s8SBQ14bxIZEgUNxmiw_A==?alt=proto
Preview:	CiQKBw2UVPrPGgAKBw14bxIZGgAKBw2D32iVGgAKBw3GaLD8GgAKGwoHDZRU+s8aAAoHDXhvEhkaAAoHDcZosPwaAA==

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3714), with no line terminators
Category:	downloaded
Size (bytes):	3714
Entropy (8bit):	5.075874869450303
Encrypted:	false
SSDEEP:	96:DUxgNGO97rPlmLMjLnwDLhSl4ZclACxrV:YxgoerdmL4nwDLMlsUAwrV
MD5:	A24E827C082BBCF53D524C97D8EB6907
SHA1:	E92001EC0945688F34DD4E1D39BC8C7BD00EFFFA
SHA-256:	421972A7152A8BDD1F19286372636AAEF09BB036071E09046E706AE3B3E04511
SHA-512:	5DF126AE7880D6A192AFFD0AAEFFACDEF7D8B64BAF14B53272CEEE19553C4C57EFF59191717CD79DB9F41B2E7E231B7B77F9A50300BB6A8D32CE5C9F20326266
Malicious:	false
Reputation:	low
URL:	https://buygoods.com/secure/checkout/assets/js/md5.min.js
Preview:	!function(n){"use strict";function d(n,t){var r=(65535&n)+(65535&t);return(n>>16)+(t>>16)+(r>>16)<<16\|65535&r}function f(n,t,r,e,o,u){return d((u=d(d(t,n),d(e,u)))<<o\|u>>>32-o,r)}function l(n,t,r,e,o,u,c){return f(t&r\|~t&e,n,t,o,u,c)}function g(n,t,r,e,o,u,c){return f(t&e\|r&~e,n,t,o,u,c)}function v(n,t,r,e,o,u,c){return f(t^r^e,n,t,o,u,c)}function m(n,t,r,e,o,u,c){return f(r^(t\|~e),n,t,o,u,c)}function c(n,t){var r,e,o,u;n[t>>5]\|=128<<t%32,n[14+(t+64>>>9<<4)]=t;for(var c=1732584193,f=-271733879,i=-1732584194,a=271733878,h=0;h<n.length;h+=16)c=l(r=c,e=f,o=i,u=a,n[h],7,-680876936),a=l(a,c,f,i,n[h+1],12,-389564586),i=l(i,a,c,f,n[h+2],17,606105819),f=l(f,i,a,c,n[h+3],22,-1044525330),c=l(c,f,i,a,n[h+4],7,-176418897),a=l(a,c,f,i,n[h+5],12,1200080426),i=l(i,a,c,f,n[h+6],17,-1473231341),f=l(f,i,a,c,n[h+7],22,-45705983),c=l(c,f,i,a,n[h+8],7,1770035416),a=l(a,c,f,i,n[h+9],12,-1958414417),i=l(i,a,c,f,n[h+10],17,-42063),f=l(f,i,a,c,n[h+11],22,-1990404162),c=l(c,f,i,a,n[h+12],7,1804603682),a=l(a,c,f

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (629)
Category:	downloaded
Size (bytes):	77857
Entropy (8bit):	5.68117644944374
Encrypted:	false
SSDEEP:	1536:S0drYyaFClyrTeocn66VHt8OZ3sfg0XwIG:jDI8pDx0AIG
MD5:	1ED501A79A366E60AD63793CE5BFE60C
SHA1:	1020022BEF28670D55B21E28E39D7A03DEBCFE40
SHA-256:	162FBCA3A582D1016E37F2E9850A736D072B242204191E1A16E4F58281297442
SHA-512:	F3D0F9436D5C19075E6AAE607C8719DEECC31A4A89477BD3C7E11848D2C591470F4FD8A76620D8507E551B7B309F30E9F45475DB58A379425EA728F9B49EE837
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/captions.js
Preview:	(function(g){var window=this;'use strict';var XGy=function(p,C,V){g.I(function(N){p.C=g.Zr(C,V);g.JQ(N)})},iJ=function(p){p.isActive()\|\|p.start()},d$r=function(p,C){return C?p.captionsInitialState:"CAPTIONS_INITIAL_STATE_UNKNOWN"},iG8=function(p){return g.YS(p)\|\|p.G("web_enable_caption_language_preference_stickiness")},hQP=function(p,C){var V=new g.jw;.V.languageCode=p.languageCode;V.languageName=p.languageName;V.name=p.name;V.displayName=p.displayName;V.kind=p.kind;V.isDefault=!1;V.T=p.T;V.isTranslateable=p.isTranslateable;V.vssId=p.vssId;V.url=p.url;V.translationLanguage=C;p.xtags&&(V.xtags=p.xtags);p.captionId&&(V.captionId=p.captionId);return V},saf=function(p,C){var V,N,H;.return g.I(function(X){if(X.C==1)return V=p+"\|"+C,g.y(X,g.BW(),2);if(X.C!=3){N=X.T;if(!N)throw g.F2("gct");return g.y(X,g.v7(N),3)}H=X.T;return X.return(H.get("captions",V))})},aHy=function(p,C,V){saf(p,C).then(function(N){N&&V(N.trackData,new g.jw(N.metadata))})},tgG=function(p){if(!E5y.test(p))throw Error("'"+

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.122714743434665
Encrypted:	false
SSDEEP:	3:CUXPQE/xlIle:1QEn
MD5:	ACCBA0B69F352B4C9440F05891B015C5
SHA1:	9D01CC5DC8E042C0D4AD6CFB8B3AC38E84A5EF9F
SHA-256:	47043E4823A6C21A8881DE789B4185355330B5804629D23F6B43DD93F5265292
SHA-512:	D3C4A5427BF645CC226106B0E8C28A76B0B91F50FA6D77E962A3B59B85BE2A0CFDB94EC0F40742F10C18025573D8FBFADECDDF60F4652BAE671F6031C02A7CB5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,........@..D.;

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	165619
Entropy (8bit):	5.291167602276955
Encrypted:	false
SSDEEP:	1536:s5aCr26R5149t+FMXw+/LBkYIXgcQiAytIZ7LAelWMYPvHAFq4gzqGBjrmdy6sDA:4NR5y9tXFkbbXelAAg4gzNkr
MD5:	ED8DC464FBD29476D2D886D74CD136AF
SHA1:	E0F1026E2E2FAC72E582F28E52AE944089DDAEFD
SHA-256:	5AE654F97A917AD7366A8466329647DF036A526D5881A1A017F480E468DA5314
SHA-512:	61E4378F875557CD1A93174C2E32DFF80ED26CD38500B6E11BDA5DA47100D3702A2C467994D617A9685E5AC3DB9D1BAB1710CD8714C3398F76D532D2EB12B3FC
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r),warn:n.warn.bind(e,r),error:n.error.bind(e,r)},o="https://docs.datadoghq.com",a="".concat(o,"/real_user_monitoring/browser/troubleshooting"),s="More details:";function u(t,e){return function(){for(var n=[],r=0;r<arguments.length;r++)n[r]=arguments[r];try{return t.apply(void 0,n)}catch(t){i.error(e,t)}}}var c,l=function(t,e,n){if(n\|\|2===arguments.length)for(var r,i=0,o=e.length;i<o;i++)!r&&i in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,i)),r[i]=e[i]);return t.concat(r\|\|Array.prototype.slice.call(e))},d=!1;function f(t){d=t}function p(t){return function(){return v(t,this,arguments)}}function v(t,e,n){try{return t.apply(e,n)}catch(t){if(h(t),c)try{c(t)}catch(t){h(t)}}}function h(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e]

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	299313
Entropy (8bit):	7.993688791713962
Encrypted:	true
SSDEEP:	6144:X52VjubfCZPOok71jyb4DW1yz5owT+ckoe4cQKgPBP4MZZwijXi/mYnf:WjkfaWxhjyRyz5owXcfgP94ywijy/mef
MD5:	26F678E726E40991E295E8561441BE91
SHA1:	E792CD47D225442A41BDF9E0882EAB442407A033
SHA-256:	FB909615518DDA44FEE09FD2CE4076AB0A98B0D0EFFE2D6FD7469D6E1EE8335C
SHA-512:	1C4F759225970D426EC06B81936CEC7A337B78F2A1222BB1F1B3636D494C05D379003A1A905FFDCC8CC873F288D7008152F940050C98EC5647A53BEF7FEA83AA
Malicious:	false
Reputation:	low
Preview:	:....Q....QZ5xuqBJH_s... .......CggKA2RyYxIBMQ0..j.............CggKA2RyYxIBMQp....$.o.d.s...3..j.t..-.........DL..-.HD..A@..p....W...c..j?!.^..j....n..RR.K&..I...[.P..8B..X.....>.~..mzD..oU...v>...US.....'Ps.A...u.......:.Z..5...n...Xh.&...I.....[..(..G.;/.=.R..g......p1.Nf..2.&S....V.. ...y.bi^.........Aj....p'..?VS....`.../$.k..W&.y.h.t.?N..b...K..l..{h..&.O?c.J..\YH..\|..u..`s.Wf....'O.1\|..DwdZ......J_..r.../W.Q.Ds.A..........?\|.....8.]....,[K.Y..(..f............Du...9{.!~-PBX...S....u/..b....qw7.f...&~w. 1.N....V.r...&R.&[H...C...)kpb....a....5.L....H.........6\..N..9@..:?.n4T........{..".> ..x.&.......@ao..J...M.gW..24..5o.hyT.b..^....w..6.....W...U.8.}..T$.......".4.XxE'&.}..1/..H.Y6@XQ.(.q.<s..[.'....).62.....d......`.....P..{g..:..((......d.......[X..i...qg9pX._o.6kGY..T........x.>./(y....t.77..(...o.A;...........-.y..e...u...R'.sL}.. .f..Z...\|..k.........*h5.P.....:.(......d..\..i.....7;..8y.../f.........c..F.v.M.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 14, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1616
Entropy (8bit):	7.821219532830218
Encrypted:	false
SSDEEP:	24:l/G8w7mPxHQLXmDXvM8uZCDcG8SPQ0QNwnvtc/hVO/74xm3O55d4TIDQWznFE:lG37mPy7ivM8ugtHPOwvOhV4TUDQWZE
MD5:	F28A13545CA7BE5CD9EA31BDD9EA7F8E
SHA1:	F4F45A59720B9D637B1E7E0ED5783EE84887287F
SHA-256:	CD80D0DCB2A44BD30C11FCDF13D4C280F336DAD9442EE7DA79146F2BB77381A4
SHA-512:	9CA538FA15BB54A36A149EF63E1CC24608F022BFCF667A9C5656AF99E144306A171FC7EDB8C12D093433C3D532A8090085BC6EFEB26180505F0833360C689B37
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/mapfiles/api-3/images/powered-by-google-on-white3.png
Preview:	.PNG........IHDR...x.................IDATx....x.[.........@.0C...ww..Z......4....P......{.u....O.y.;..JN<.`.......T.$...?...p..P..{.....j6..@.a.&.@.N+....V$....H.R..N}.....C..@(..u..?T...@.f#o.......m..i.B..a+.j..m\|...3....#i..p...'...N.n..I..c..4s...:.r..dr).~.sI..(...L...x1...&\..........h...3p..A...`!..1DQ.y.l..F.O.".#..J0G+...P....nF.b...l@......GR..B...}+.N.@.[7....?...7....x..l#;....t..H\|..p...#.9UP6..j+....Xl...l...1..!..>`z..ozF.-.{...yPB....%..VC..}x".".=X.E.5..E.../n...X.N.B....x..hA=V....Ab..O.bXx........i....Alr..OP.n(....7..J...`...`....2>'..X..()s.oN.h<...z.o.....%`r.\.)6....M5...+.....D.V.6..Hn.......g.?>.j..O.0-..><.v..Y+..[1./........<..(@.N..vV....z...!..=.3...=&.!.B.$.z...H....B......._......_p...'..L.O).P.q./.w...}.....C(n.......Y.,......?....]:.0.(.....0E_...I..Bm.bx,.. O[^....c!.X..Vc-^.".L..\.....b.L....\|...J.y.....c)z'.VbF.\'...'o..(S..L...61.....T.~.t.bj...*(...I...N.......p..S..4.....I...%.iO.>...p.6

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35432), with no line terminators
Category:	downloaded
Size (bytes):	35434
Entropy (8bit):	5.619484590865644
Encrypted:	false
SSDEEP:	768:MTEct0xPLEfVSjyRjd2mbVdJE9+Y/2XUA:4CjGF
MD5:	C04CB3C4B58450A9FF60D271049311C7
SHA1:	F0EB9A1664F65DDE5DEBEC7238F37C26DBC0C112
SHA-256:	FF3DCB3E702A69156633776B9AFDB79AE8FA16801A730CC29284E781E007547B
SHA-512:	CD9191FB0A16A2FA93653FD825DD9C8D3EE7685EA5F2E6369DBC5E97CE2D87065DFEF0024137E9CC51EDBDF79E7857CD9D7176287EA551C1091E1FA6D79581D5
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/css/app.css?id=409e9c6c9baad5c9b446
Preview:	@import url("https://fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700;900");@import url("https://fonts.googleapis.com/css2?family=Oswald:wght@400;500;600;700;800");@import url("https://fonts.googleapis.com/css2?family=Sacramento");@import url("https://fonts.googleapis.com/css2?family=Roboto:wght@400");aside,blockquote,body,dd,dl,dt,fieldset,figure,h1,h2,h3,h4,h5,h6,hr,html,iframe,legend,li,menu,ol,pre,textarea,ul{margin:0;padding:0;}p{margin-top:0;padding:0;}ul{list-style-type:none;}button,input,select,textarea{margin:0;outline:none;}button,html,input{box-sizing:border-box;}*,:after,:before{box-sizing:inherit;}audio,img,video{height:auto;max-width:100%;}iframe{border:0;}table{border-collapse:collapse;border-spacing:0;border-style:none !important;}td,th{padding:0;text-align:left;}article,aside,figure,footer,header,hgroup,section{display:block;}body,button,input,select,textarea{font-family:Montserrat,sans-serif;}input[type=checkbox],input[type=radio]{vertical-align:baseli

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5960)
Category:	dropped
Size (bytes):	285697
Entropy (8bit):	5.586102904363355
Encrypted:	false
SSDEEP:	6144:lls9yIJDtxa9UGaUsUhNuxc+E3OPoKOU/72jAYqmjx:LuJZ49yyNu0eR7vmF
MD5:	C3F3A1A70E042A72DB956275E65DC2D8
SHA1:	C6C0005E8FA87CEA38E5F1BEDD07543489E768B9
SHA-256:	003E5EFC1705A5CA90D409241E2E5C76D67FD5FA7761EAD20839CB3D8E3803CD
SHA-512:	540A4599D979FCC4EBDFD9886B6B5CC8BC754101354FD6692E8B01DD3CCECF1E17FA72CB5AF9A21564D2A338FD053037C8878FE4BFCC93B37124BD4863B30F8C
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","nervedefend\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELEC

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 230x142, components 3
Category:	dropped
Size (bytes):	3404
Entropy (8bit):	7.749529584234211
Encrypted:	false
SSDEEP:	96:aZh8Eoz0JDddpqjoUflkoUD9Ml8KHKp61:ajPoz07qjoUqj9WG61
MD5:	8D439902F93B6DB2381248929142407F
SHA1:	BD2CAAB4252C351B19CA72FBFF4E6538C753BEF8
SHA-256:	CCE52690F8F9FAEC7E259571EB0CB62D940A16482B3952793C6078C8B7DD70AC
SHA-512:	17F0A8F0C8D80C3C3105363E8192A5E37AB2AE3F7AD0CE7C7D103C2D54548ACE1E9CB411B94E1DC1C60DFD3517675E7DC29D89F8698D5A50A39A9B31A3121D63
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................................................................................................................."..........8.....................................................................?N\|...[............P...aHi...Hb.....Hb.....Hb.....Hb.....Hb.....Hb.....Hb...>k._Y.............:..^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@s^.@.9.._5.1.j..................{U....2.Y.r.XJX..F.).Y,..;F.........:.ak.Q.\|.>..s.....>.\|....K.8}.....B...K ^..R.y..!G.....xHQ.!G....z.S..9...t...o.C3J.z..42.M.._B&.............?..{..9APo.Q:AD.....N.Q:AD.....N.Q:AD.......X.7.7...-................................ 8@..5D..Pp...........?.<U4...m..~.C.6.Zo`.....I..2;Q&Gj$..D....#..dv.L..I..2;Q&Gj$..D....#..dv.L..I..2;Q&Gj$..D....#..dv.L..I..2;Q&Gj$..D....$n....!q..8.......B.\q..!q..8.......B.\5w+`.V.G......C..AE.....R....:...>..~.....U..^.xa....#..-.,....-.,....-.D0.T.....z ?...W..xA....A..E..p..J.\...r....f.....".0....`?...W..xA..

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11461)
Category:	dropped
Size (bytes):	11891
Entropy (8bit):	5.198397397772906
Encrypted:	false
SSDEEP:	192:4O3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjC0:4dRCchzzYfnqejah3e1Q5l8h6vb0
MD5:	C211CF6052A2C03A72781AE5CB31EF6D
SHA1:	1C66B543F488FE112ECD35B21C888763D6251ED8
SHA-256:	B2540FC024034328B658470F8B5AAF08EB7EEB36D7E989E3D2B76C6DAB9998DD
SHA-512:	27B37135A9F00D7DA3DADBB4CC07C24A7972F3DF0A4004AACB6296A04C01E59AC2E97E1CA5631A408D9998A17EEB0D26A89C39D70A0182AFBD9AB7F0A559C03B
Malicious:	false
Reputation:	low
Preview:	window.FontAwesomeKitConfig = {"id":58743174,"version":"5.15.4","token":"1dd5876648","method":"css","baseUrl":"https://ka-f.fontawesome.com","license":"free","asyncLoading":{"enabled":true},"autoA11y":{"enabled":true},"baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"minify":{"enabled":true},"v4FontFaceShim":{"enabled":true},"v4shim":{"enabled":true},"v5FontFaceShim":{"enabled":false}};.!function(t){"function"==typeof define&&define.amd?define("kit-loader",t):t()}((function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var o=null!=arguments[n]?arguments[n]:{};n%2?t(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):t(

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.6416041678685938
Encrypted:	false
SSDEEP:	3:TMQ+Ogn:AQg
MD5:	1228A5187B0617B0A4E95505F01DAE39
SHA1:	B66ED48843044830C12570F5A843786A3FC368FB
SHA-256:	0739B17B1053DE387D55795753300A79626787634F8C909277EFFF94D0E3F154
SHA-512:	0DDE42E5007CE4840DCDB356400347011DCD4C5E3FBC1FF04B66B173CE7BF3D88077B584FC97BCFE664706C8F6FB76410ABF8D6145394C45778D46FAC343DC7D
Malicious:	false
Reputation:	low
Preview:	function noop(){}.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x540, components 3
Category:	downloaded
Size (bytes):	42797
Entropy (8bit):	7.780854915935267
Encrypted:	false
SSDEEP:	768:kYEXIRHlRLirEy1CAgDhzrpNR0lpLGLo+5eJcM0sLV3O+fc3OubL6JJqwgDc:kYpHlMQy1VgDBrWlp4ouePNpOOc+w0qe
MD5:	E6DA62B45ED017BC0239A45033674358
SHA1:	490AB69617953E9426A65E7264370B5A5312D020
SHA-256:	0393532C3DC9EF875735878C5E2AF8D3401F82CC94BE2642771DB92619E4C417
SHA-512:	08DA9A10722A6A6321448FB2CA59F9A69E503312B744572ACDB9B2EB13CD013B6A43E30DCA4E11217F04444BF6B8A49C72F1003BF7F4804202BF4D1ABD4377B0
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/bg-alt.jpg
Preview:	......JFIF.............(ICC_PROFILE...............mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;...........".....................................5.....................!.1Q.A"2aq...BR...3b#Cr......................................................!1A............?..`.."qMg~.l%.o......#]h,S.../J...H:....z".:3Q.Ru.d........K.m.[.T.Z.,`.5.n.f..<..k[%o.L.r....E....$.T:R.j...n..M..`..<

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1078 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	668416
Entropy (8bit):	7.996595782602283
Encrypted:	true
SSDEEP:	12288:CnIC7J4iwzLFz/Wt5qrEnbPuGG+scs9XZIkrFn25Sd+0CkUXC5S/:c7J4iwhiwrEnjuGG5caWkr9Zbqb
MD5:	FC39BF86D0770FB9F5C15A85DA770838
SHA1:	76A7F6628DEB6D3C8A229C958FBDA6A1EE67893A
SHA-256:	D64E3B9C7C89BAFDA4D4BBD373E1DD1983A1364E2D13C99F58D97EE5D34EE7F6
SHA-512:	23D8A2DFC012ECE50B9DB52B8F5792D05FF964324A8D5E1982E881A64714C796FE9C692D7F51DCEE16D693089F9F09C8EE73FACD8BA42C13D2F23441276C2266
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/products/prod11/6-bottles.png
Preview:	.PNG........IHDR...6...X.......f\.. .IDATx..i.m.u.......\|....A.DS.HS.M(.....3."X?,.H... ...HH.Dp...,..D....b.@..1....J.h..H..HJ..{\|.{W...u...~..>..O...8...]s.]..WU.;$j..M.....H..k.mT.r..c..~...kxo.w....~s....p~....G..fv.....9...?....\23..gf.....%..sf......5...Q........Er..Z..`f7.{..~w..w......QL......e3.Zk.9..Z.R...ryS.<....7....b.....&...n....{{..>.x7n.s......{~.............y.u.....?.~...../^\|.[=...]....._.z.VYvvv...w.....=.....^N..e.\|.{..../....o.K.....~..c.....a".......<..'..GGGG...q.aME.......qn$.l$..1.G......D..f...=4....ZJ.8....\....p......>.M..$..Zf7.'py.\Y...,..g..Q......W......q..=.X,<.e.w..U~.............Nlttttt.%.u.W...c..f.&3....u\Jq...#Q..x..D...3..u.E.....k....9e...x..'.o....Z..O..DH......=j.....wF.....r......\|a.X.2^.+.\|~.Z}n.\~..J)....b..C3{.................:........t....}......R...o.?.Fb..qI.>.!...Pq.:..hl+.......a.....S.r...<....R.lyP.=,..h.+..5...a...:...yk\........KK"-_...e.Q....Tk}.....+[[[.t.d\.sc.Z...../....

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1205
Entropy (8bit):	4.76774901321019
Encrypted:	false
SSDEEP:	24:GRRdsw/ctHXNBHwJL1gcmegKLTR8U8qdFxhCj3R3QBd83VLPWJTY2C+h:GxspPutXRoYFS9qJTjPh
MD5:	30BEF87CD5F18E6CE0EA2A6A1211669C
SHA1:	FF4F3E364262631B9E1680323E0BAB663B8BBDB6
SHA-256:	7CB86052FB69DC3612F5A6B1F4CF41B3458794B7F0BCAFEDF4FC29A0CF71AA9D
SHA-512:	ABDA0292196FB06BD75B3DC086B6381EA207995F04658518BA0DD437E960EA1191B73AC6B3F8D2721E3C73D79BFECE82EE9914025ACE9155A63A5CEFFACDD157
Malicious:	false
Reputation:	low
Preview:	document.getElementById("terms").innerHTML = `.......<p>Terms of purchase:</p>.......<ul class="small">........<li>By placing an order, you acknowledge that you have read and accept our <a href="/terms" target="_blank">terms and conditions</a> and <a href="/refund_policy" target="_blank">refund policy</a> <input type="checkbox" value="1" class="form-check-input" checked></li>........<li>By entering your contact details on this form, you are giving us consent to contact you about this order</li>........<li>You are buying from (Customer Support: ).</li>........<li>Your purchase will appear on your bank statement under the name "<strong></strong>".</li>........<li>The geographic location of your computer has been determined and recorded. All attempts at fraud will be prosecuted.</li>........<li>Information submitted by this payment process is handled within the constraints of our <a href="/privacy.php" target="_new">privacy policy</a>.</li>........<li> is not a payment processor or bank.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4619
Entropy (8bit):	7.945116173418398
Encrypted:	false
SSDEEP:	96:QKn1XIanYfY1xh603bsrZNeFG8NOXa3msk1DhIU4Z:QKtYfGe0I+XOmcmU4Z
MD5:	841F0DA6ABAD61B6C39789607D45BD66
SHA1:	8B708832ECE4F314AD84EB94C4E35AFA0C4B7A2E
SHA-256:	E64239157AC4453D10CBD456E9F95286AA50F1773FEADFCB3D4FF57A8481AD6A
SHA-512:	469001734F34D8750CF5F90BFE03CEF0368CB5A88DBD171CBDF4024D0493107F32031A2631427BB01893DABA6B5BF827E838E3B44C5E7F735ACAE5A7E8AF95CF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Y... .....y&.....sRGB.........IDATx..YyX...?-..T'....N.T2C.2...6d.3....L.~..2.:mJ..K..$K..;Y.l)....:.....~..z.u_.9..}..s.....^.!.q.R.S.\.....I..\|.....\|...;..=..r.hn..J5&a....09k2.=.....9..a.l..."...3.s'gH....%...3,.Z@8_.-c[Bv9.3...9.v:t..`.h.7O7x9{.K...Dm.)......d.).B...........h..>......O......R.8.:.....-..R..f4...#<k.7.i.q..i..X......W....F.d..V.G..0.m...B.y.1...m!. . J.A$Q..TCTa6.6........C..>. Y.SdId.o.oR.!...e.K0.P.. ..l.9...........C..4.g...g../c9."...hc........Iy.....e0.(...L..!.._._+.,....xP..@&@.$..Z..A6.....J.....0..4.....h..{,.Q.....]...p8...A........M...pM.....i...D..}....o.]..o..4wP.`x.l./....'............g.D5.....IV.Xc...=.....@..z{k....^.\|.;8'..(....4'...{.....0....Af..6.A.#.@g..Tej.Y....M..%L...p.!.g...!Z&...;.(...CG...".0Mz)?.*........_....b.......o PL.....<0...9.N.@...I....q}':..........E..G....&...,G[.?r..a....Y..'f.......2._..{.1..\..[...2.._.E'.a...Q$...I.H. ..X%T......R.)l;......R).t.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (584), with no line terminators
Category:	downloaded
Size (bytes):	584
Entropy (8bit):	5.282147831951486
Encrypted:	false
SSDEEP:	12:S8mBsMHXOo5gHnyu2eJhGjT4OjnRXuzBp5GawVzH3ACn:ZmBsMHkIUxOjR2p6VXAC
MD5:	F66B1C4BAC65634A38C0AC0642BEBFBE
SHA1:	A1492C7C2FE1E0CFA2E9207B92D9A10C70168DCE
SHA-256:	F9F2C99E211CC6D849ED71E690225EBB0A248EFE91107E50075E1A2CA29100C5
SHA-512:	2C534703583CAC16D26BB174EFEC6C2DC7491FFAD3D5DF8BE4476F5990A501ABCABADE01780E3B72686663F688AB94A1342A55E9F3C42EB3232DA78A0B214758
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISgAEJRYYoXJKuKHwSBQ1FINWMEgUNU_J1YRIFDTZBFGsSBQ1UV5_XEgUNMfITIxIFDatTbyISBQ1WZyCgEgUNn-u-jBIFDYemRVMSBQ30Q02-EgUNIkwOFRIFDZJ4-p8SBQ1LRIZgEgUN0zsaXBIFDYWoV20SBQ3rZl0cEgUNRZWEqxJrCQZyhNn41jGXEgUNRSDVjBIFDVPydWESBQ02QRRrEgUNVFef1xIFDTHyEyMSBQ2rU28iEgUNVmcgoBIFDZ_rvowSBQ2HpkVTEgUN9ENNvhIFDSJMDhUSBQ2SePqfEgUNS0SGYBIFDdM7GlwSHgkiAOEn-DbQfxIFDYWoV20SBQ3rZl0cEgUNRZWEqw==?alt=proto
Preview:	CtcBCgsNRSDVjBoECAcYAQoLDVPydWEaBAgNGAEKCw02QRRrGgQICRgBCgsNVFef1xoECB4YAQoLDTHyEyMaBAgkGAEKDQ2rU28iGgQIIhgBIAEKCw1WZyCgGgQIIxgBCgsNn+u+jBoECCEYAQoLDYemRVMaBAgHGAEKCw30Q02+GgQIHhgBCgcNIkwOFRoACgcNknj6nxoACgsNS0SGYBoECCMYAQoLDdM7GlwaBAghGAEKCw2FqFdtGgQINBgBCgsN62ZdHBoECDkYAQoLDUWVhKsaBAg7GAEKsAEKCw1FINWMGgQIBxgBCgsNU/J1YRoECA0YAQoLDTZBFGsaBAgJGAEKCw1UV5/XGgQIHhgBCgsNMfITIxoECCQYAQoNDatTbyIaBAgiGAEgAQoLDVZnIKAaBAgjGAEKCw2f676MGgQIIRgBCgsNh6ZFUxoECAcYAQoLDfRDTb4aBAgeGAEKBw0iTA4VGgAKBw2SePqfGgAKCw1LRIZgGgQIIxgBCgsN0zsaXBoECCEYAQonCgsNhahXbRoECDQYAQoLDetmXRwaBAg5GAEKCw1FlYSrGgQIOxgB

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 42, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11016
Entropy (8bit):	7.96771333173349
Encrypted:	false
SSDEEP:	192:cGYCuHQY8gC2cFstnbBN+nZCSXmtTXnPXKdr7YEl553ORtj:tBSQY8gChFybBNnLNSBzl7ORt
MD5:	F8CEEEAD5762B13C0006BD7E87B58303
SHA1:	F1D3B1CD44210675BBD091B377AA1C9AE4113959
SHA-256:	F963522C3847EEECF8358C314F6293AA0D314FE539968DF7A55C617538D5309C
SHA-512:	25224779B033B450D7EE79657FB228723E946CF95806FABB4584C62ACD46EF97D4034BF0590CB9AC148391D3E4CA8CEF8C21AF8CF75B51F0077DE3AF92F7B83E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............q.....sRGB........DeXIfMM........i.......................................................8.....rIDATx....]E...v..}K'...I .$@..B" .":b.g...((.dD..y6..!......).4.....".$..YM.l.t.N/.N..{.9.....9}ow.23..^..:U...WU_}..Wu.....z.f.b.%.X.c{...'v..j..]...=.<..Q...k..8S..Mf3.....6.4....%..z...U../7....aZ......k.c....j.?..D.D...<.[..Gm...}.....;w~o...L.>..X...S.o.rl{.eY.<..\|...........y9.'^N..=.q..B4.L...........`..8..-.m;.L.*.....w,.4Y..?.......L.q.o%.:X..j1]......w.e&.....1\|..7.J...'}2y......#b.D.....I..(.....t:m .}...t..."...h~~.5R.<.........?i.ihhH...N......w.Z..3U....'...F...D..d.Sd%...E..G.hq.....6.m./..T..].c..>7?..oK..M..].]k..f..+.....\|...v...SZ[.....7...e.......#......o...g.n..h..0%..~w............._.5.o.....%..~c\|.7..%.V....u...c1x&...>\|.=..3.o......z....c..C'...$..l.........S./0.x.b..?z.h>..h..........w_O8.C.y.w.....U`:.F`m..J.[.N.... .......G.C)@..br.GK..pa.e.xiii1........{..SO=...aHk.8.Uw~...c....!.,.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2113
Entropy (8bit):	7.87535424576112
Encrypted:	false
SSDEEP:	48:JMrXNsC36DF/YHizQBlnJR2CCupgsh6WLW+TttnJhJ:JMrt6DF3Uz2CPnQWLPlJj
MD5:	6A31FDE58ADBACB8B7AD7A2C9D14F9C3
SHA1:	481F7EFC79F454C7CD5C312218E47F219D739A3C
SHA-256:	384D6F3CD83852812FD7678F77EC73619CD81A96EB2389C33E88D8C3EBFD1C24
SHA-512:	E365E57A5A678FB3A48BFBDCCB5677055D3138450A353C9A0EEAA56BBF879FCD6C41E21A21CEDCA0C7C28E236BB22E49CD32F430EE1055D6887FB01A2F26FEB8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......bKGD..............IDATh...kp........B..D`A....j[T.V..Q[g.;L.. ..N.N.q.J.^....l.bm..i..z..U...hQ.tPH.... ......$.........{..<....9.y.y.._.A.uo.u.../..8Wy.v.>GLH... 0G".n..w.........w.......+.0.X..6.EK:..c....'..1..WB.m..%..._S...HZ.&.^>...i......U..~.%..U.).,..]v..G.8..d%..g?..`...IJ].k.1.l.m.}.V.`.>,..v.T.g.\|e.\)......>.y(X{.igc.^.\.z..(.5!...DA..E...f`$..)..... .:^.;..j..v....V..3..v.-.]..=_(.>O.P.y....0....B.........IV;....b..1mEL......Q.i.bZ.u~..}.B......Ap...........Ft..SeJwz.b..b..0.p..sm+8.:#D..D...-.fmF.H...\..a...J..........p.....u...e...M.L.T.....!...xY.4...8W...1.3....g.r.5...r.F..X...4..d......z..xS0+T..G.(H[ ..<.U.......L..\|..d.u..J.Y..'..z..fX"..h~..n..P...iJ...Y....C..... ...n.M;...90GB..31.S...g.x...a..A.w.....7....`M.{.a.k...Tr.l...,.G.MtbO..X.@..f.jwt..%..6A..Od......]..8.\._1.qgR>.,...>l8....r..F/..\|.\|....I.}..Y...w...l....l.@.....P.#.I>^.u...f..$.c...Y.i..+..-.v.5.y..W!.G

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1249
Entropy (8bit):	4.853328832340583
Encrypted:	false
SSDEEP:	24:GRRdsw/ctHXNBHwJL17y/egKLTR8dc8qdFxhCj3R3QB783VFPWJTY2C+h:GxspPulXR4XYFS9+JTjPh
MD5:	26803DB1F27C4635AE17D2AE0928BA3D
SHA1:	88BA90D96C7E0F8D4437E1770FAE15420363C560
SHA-256:	7D256FE60932EF700560171C722594CC63C1584184A543359F1470D2E10A04F3
SHA-512:	73858EF9897DE58DA6531BE20A2290573233485E68BFC0B9D263E3FD8350D556CED1CA766A656618C5723E2040BC7D4CF0D223EF2FF8756AB7D80E2BBF6822D7
Malicious:	false
Reputation:	low
URL:	https://display.buygoods.com/v1/terms?id=terms
Preview:	document.getElementById("terms").innerHTML = `.......<p>Terms of purchase:</p>.......<ul class="small">........<li>By placing an order, you acknowledge that you have read and accept our <a href="/terms" target="_blank">terms and conditions</a> and <a href="/refund_policy" target="_blank">refund policy</a> <input type="checkbox" value="1" class="form-check-input" checked></li>........<li>By entering your contact details on this form, you are giving us consent to contact you about this order</li>........<li>You are buying from BuyGoods (Customer Support: 302-404-2568).</li>........<li>Your purchase will appear on your bank statement under the name "<strong>BuyGoods</strong>".</li>........<li>The geographic location of your computer has been determined and recorded. All attempts at fraud will be prosecuted.</li>........<li>Information submitted by this payment process is handled within the constraints of our <a href="/privacy.php" target="_new">privacy policy</a>.</li>........<li>BuyGoods

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10709)
Category:	dropped
Size (bytes):	11781
Entropy (8bit):	5.911959258347575
Encrypted:	false
SSDEEP:	192:2IGIsmhP0zK1+UdjNFa2I5z585PwcqewMoM/SuU05454wpwhaRLkoqUoRU6PzUTl:lVsml+EjNFa2IR29DLwzAfniC+7RLr1d
MD5:	13BA524290395B96E3E5E5F9CCEA3799
SHA1:	5953815CAA63EE90A20F30709DE1473BF62F3DF3
SHA-256:	22B4CB20950C2F4617CAEF16396460821D8E92B3BF31FCD057023426EAB70E63
SHA-512:	FB7BCF52D029C9793B207EFECFFE65090951EA8D709EE2AE4F11B22691602E3FC0492697E46A54172D49A934818B92E31CEF3B0C2B15180E5D26BD37108D58E5
Malicious:	false
Reputation:	low
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. var rules = {. createHTML: function(src) {. return src;. },. createScriptURL: function(src) {. return src;. }. };. var ttPolicy;. . try {. ttPolicy = window.trustedTypes.createPolicy('google-maps-api-loader', rules);. } catch(e) {. ttPolicy = rules;. }. . function getScript(src) {. var a, nonce = ((a = document.querySelector("script[nonce]")) == null ? void 0 : a.nonce) \|\| "";. var s = document.createElement('script');. . s.src = ttPolicy.createScriptURL(src);. s.nonce = nonce;. document.head.appendChild(s);. }. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=992\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=992\

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (369)
Category:	dropped
Size (bytes):	31103
Entropy (8bit):	4.944174492322494
Encrypted:	false
SSDEEP:	768:N6q9Aj++VU5DGHn6n5AbPevX4GICTivEFKgfh:p9WLmFnAoGE0Ah
MD5:	482E6F2089EB52219B30A6E1B3DADA4B
SHA1:	8DC09387EF950D31B74211E2F32681198A786C30
SHA-256:	C30BFA6CE25A890899DC6B7FE208ED14EB03F4792C28C0F6A7516D7C2910FDCC
SHA-512:	ED5BEC3E1267E3AD951A80165EE149873722006BAD1BF682F96E239190AB871AE1F0C7A213773299357771E7F0BD88648CF966C5B571DF04E8C86A099661845B
Malicious:	false
Reputation:	low
Preview:	const dictionary = {. "title": {. en: "BuyGoods - Secure Checkout",. es: "BuyGoods - Pago Seguro",. fr: "BuyGoods - Paiement S.curis.",. de: "BuyGoods - Sichere Zahlung",. pt: "BuyGoods - Checkout Seguro",. ar: "BuyGoods - ..... ..... ..... .....". },. "having-trouble": {. en: "Having trouble?",. es: ".Tienes Alg.n Problema?",. fr: "Vous avez des probl.mes ?",. de: "Du hast Probleme ?",. pt: "Est. com problemas?",. ar: "..... ......". },. "contact-us": {. en: "Contact us",. es: "Cont.ctanos",. fr: "Contactez-nous",. de: "Kontaktiere uns",. pt: "Contate-nos",. ar: ".... ...". },. "popup-wait": {. en: "WAIT!",. es: ".Espera!",. fr: "Attendez !",. de: "Warte!",. pt: "Espera!",. ar: ".....!". },. "popup-special": {. en: "This Special Offer i

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	814
Entropy (8bit):	5.313577997985369
Encrypted:	false
SSDEEP:	12:UNmFWwSO6ZRoT6pDoeKa+zb77kYYtJcb65wCgDrqAFWwSO6ZRoT6pDo3VhKayVVs:3jSOYs6tJc+u/rjSOYsqwy96cGSSf7
MD5:	097F4F7F9C5E560653453D64366E6998
SHA1:	901281C49DFEF817527AECB4231C81548228FBA2
SHA-256:	A1686573549A79D3A99CABD8F67BB8E07F2F16785FC4F206B9DE330B6BB4344C
SHA-512:	15445183AFE27C499CF1E2D37DC6F8C44873F1458E1152565F40D67285F2D43D9F149AB560115B4E80C2C605F03A54893237B271679E7A93CB54DA0815B88D8A
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Sacramento
Preview:	/* latin-ext /.@font-face {. font-family: 'Sacramento';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sacramento/v15/buEzpo6gcdjy0EiZMBUG4CMf_exL.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Sacramento';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sacramento/v15/buEzpo6gcdjy0EiZMBUG4C0f_Q.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59638), with no line terminators
Category:	downloaded
Size (bytes):	59638
Entropy (8bit):	5.384268710012802
Encrypted:	false
SSDEEP:	768:gsv3147DmBGFiC43zcUSHDGn8ILxwPRiag3WGJXubDLvSiWUeLNGIs:vZK43zcTILxMRiag3WGJXubDLZWUQ2
MD5:	87F1785A06A7B9B22C36C9ADFD6FA060
SHA1:	3088E49555CFED24D1418C5BC618B26D3CB6393D
SHA-256:	8B37337F74B6289BEF481BADFEB67C0778BA97592141300E25B3900CCFA88A68
SHA-512:	643D63EAD5B3C024BF693E275B3148B1D5112AB9378CA86A2686ADBF69D7B843DC54FE5FAEE51C1AA856FBA99A6FC0324A9049405CD1E1557B6683B3A1D855D7
Malicious:	false
Reputation:	low
URL:	https://js.braintreegateway.com/web/3.97.2/js/paypal-checkout.min.js
Preview:	!function(e){var t;"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):((t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).braintree\|\|(t.braintree={})).paypalCheckout=e()}(function(){return function n(i,o,s){function a(t,e){if(!o[t]){if(!i[t]){var r="function"==typeof require&&require;if(!e&&r)return r(t,!0);if(c)return c(t,!0);throw(e=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",e}r=o[t]={exports:{}},i[t][0].call(r.exports,function(e){return a(i[t][1][e]\|\|e)},r,r.exports,n,i,o,s)}return o[t].exports}for(var c="function"==typeof require&&require,e=0;e<s.length;e++)a(s[e]);return a}({1:[function(e,t,r){"use strict";var n=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}},n=(Object.defineProperty(r,"__esModule",{value:!0}),r.PromiseGlobal=void 0,n(e("promise-polyfill"))),e="undefined"!=typeof Promise?Promise:n.defaul

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	556465
Entropy (8bit):	7.993976897850282
Encrypted:	true
SSDEEP:	12288:a+d+PVeCtiRgocbcityyGSML9LUDiO1ZtXW/ll7kMQ:d+PtBFGLUDbZtXWN23
MD5:	957ABAFB91C58E919095B45C9E60594D
SHA1:	7B1E99448B0AA2B25195B8C54BF94A0B23E82084
SHA-256:	0251F621C14C49A22DF15C658A5217E054E50A1E1B19BEBBA299B20B928EEFD3
SHA-512:	324414FAC6449ED3FBB53E0AC7B11A7A75BAAF8D8DB8E45F42E1DB3B63546CB394F4A4A87DAE86904D32A7F57994F066D57211E2728D32419EEBA58705115825
Malicious:	false
Reputation:	low
Preview:	:....R....QZ5xuqBJH_s... .......CggKA2RyYxIBMQ0..j.............CggKA2RyYxIBMQp..!...C..C.u".......AJ.........L.^gb5)s..F...U./..&WP...."\.p.v1oa.W==Q'.O.O.Il.y....+L.,,.%..[.7.]AD...... z....._.c..jk.3..E.m.......U....hs.l.y.S.6.9R..........C..l&F..2VO.vF."..O+....\i........:7......l........1".W..P......f.%.......>............e..6...p..&:..B...r).X...{...>....2.?:..A.`....#..V.0:F..B./.2J..$.K...$W..n....#.K_.AQ......\.H...P2..F.K.'.sA.....#]...*......Bmc..F.c.W...j'..h.M..{wv....B...d.........._W4....p.i`.)...n.'...Z.M....f..0YA-kg....:.hd..F.<Y?..w.........e..!......_..M.DT.:~p~..Mm..M{OE..%......!B........xJ..E..o...e_...b..Y.9..^.Z....zp7..g./.X.>....I(V$v..u1...w.o.l....Ep.bl...V..JMg..Ns......._....I?........"....[W.A"..(..K..s..U...7(..n.qe...}x.....-.s....rv....lI.4s....C..Q;}.....).MU.....Q7..d....h9...S.o...joZ.Z....~.Ef..q0......$;..W...W....,cj!F........O....C..>......A..;.../.q.;.P..z.....@.^I@%...:.....9...W..r."../S..C

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	18
Entropy (8bit):	3.6416041678685938
Encrypted:	false
SSDEEP:	3:TMQ+Ogn:AQg
MD5:	1228A5187B0617B0A4E95505F01DAE39
SHA1:	B66ED48843044830C12570F5A843786A3FC368FB
SHA-256:	0739B17B1053DE387D55795753300A79626787634F8C909277EFFF94D0E3F154
SHA-512:	0DDE42E5007CE4840DCDB356400347011DCD4C5E3FBC1FF04B66B173CE7BF3D88077B584FC97BCFE664706C8F6FB76410ABF8D6145394C45778D46FAC343DC7D
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/muse/noop.js
Preview:	function noop(){}.

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	405468
Entropy (8bit):	5.175645713324672
Encrypted:	false
SSDEEP:	1536:hIzoaFUgMnTthFgVMMMg7UDBcpILvPptpm8p7M6oya+MOn4yBOx5juDEnXrDJc7M:ioaFU5FgqMMg7UDBcMpoyAufNwcb8o3m
MD5:	E94AFCD9E618B8EFDE7CADF9B0A20EB8
SHA1:	3C4C5D48600AA0EDB8C26ADA3AA546F9436FE867
SHA-256:	A66DB85A1D0CD32D4E2D98A9AE6E5AE21761FFD0341CAF706C2DAD434C1A3DD2
SHA-512:	F2E2896007E2F8D2C87CCE1F864B39A9941DEE809B2E13E9F02E88B2F857E34414078F7F82270C555AB6BE3C1F825F61DD986BBA9D1E26FA82A2C51D3149C2FE
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37828, version 1.0
Category:	downloaded
Size (bytes):	37828
Entropy (8bit):	7.994199601770781
Encrypted:	true
SSDEEP:	768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk
MD5:	50B140B1E97D859D6D0603414F4298EE
SHA1:	500E4872EE1BA9CF89F1BA626D64987B0F9AB5C9
SHA-256:	FDC9964050BFA24C27A3C76C6791B3674292A5F352CBC83D7A4DC49595BC3FB1
SHA-512:	55EF84E956A7943E3FC61A8A349E64E9F35B7DFC63402AB52B995F43A7CD4B1D2ACD300126DCDD610D0B106AF426848F998CCF154F712034422D242D6AD9130D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2..............~....C..........................^...V..D?HVAR.'?MVARF.`?STAT.8'2..L+..\|.../~.....$.u....0..x.6.$.... .....e..([.lq...{En.0..I..h...[....-y2..)..@(.....T...K....$E.U.uA.b...AO..CU"O.W.]7..'............a.@...kF9.3.....xV..7.tg4#Ol.x}o.M...w...Q..))..-.i.R..&.P.......N..[F.C...x..9.\|.;......d$..L.<......=.M.S..HlLHr.#+.S}..+..C....D..'^..~.}..TeT`%.......^..$....0....1 A.. ...bm..]T.E...n;._Qqm....RK.....=....\{.h.O&.D$.U......YS U..i...@.:W........p..pS....-.w.EQwp@.....},.G.@,....0IAV....P...~..0.....8..f...5..Os...5..P...n&wS+.P:.7.e.$t~.s_...z..3..Z.....}.A..2Uj...@{.:Ln.}.t.....i.>Kl.."RQ..h.;.........%...eY.E?...W..00(.z.ml.J.TPP...........G...6.=.Z%...\T....W..q...9D.m...)6..1..\.....v7......U..jr..-i.c.3iL..,\..!...b.d.A...d..C.....Ra:Q.!.M,.e.SMC$$M.w..c.151=.m..o@.G$.X..P'..\|.E."..Z.k......i"......S8..@.d.....2..t..........{..X.]SN..$....K....j5..e..,.%...T..)+.";@.v...9.R..]......,...W.iY...f..r...Q.FY.P.#...X...S

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1604
Entropy (8bit):	5.268027136303121
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUeh3:3q3+pUAew85zvc/h3
MD5:	DC116BFBFD7B5EF441DA8062F5C02169
SHA1:	0AE353B9604CF429F5C69530333E0C44B5E837DE
SHA-256:	295EB26CB69D6F217D4323D4492C2668123E325A3F47403E38294913FD7A206D
SHA-512:	56D00FD44F67A5B62D914926EE8254F391F8BB3FA90D380632492B14F0ECF43331EEB22405667A5BED05A665AB8219534C0F2CEB62FFB711C433C5BA982FBAD8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (629)
Category:	dropped
Size (bytes):	77857
Entropy (8bit):	5.68117644944374
Encrypted:	false
SSDEEP:	1536:S0drYyaFClyrTeocn66VHt8OZ3sfg0XwIG:jDI8pDx0AIG
MD5:	1ED501A79A366E60AD63793CE5BFE60C
SHA1:	1020022BEF28670D55B21E28E39D7A03DEBCFE40
SHA-256:	162FBCA3A582D1016E37F2E9850A736D072B242204191E1A16E4F58281297442
SHA-512:	F3D0F9436D5C19075E6AAE607C8719DEECC31A4A89477BD3C7E11848D2C591470F4FD8A76620D8507E551B7B309F30E9F45475DB58A379425EA728F9B49EE837
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var XGy=function(p,C,V){g.I(function(N){p.C=g.Zr(C,V);g.JQ(N)})},iJ=function(p){p.isActive()\|\|p.start()},d$r=function(p,C){return C?p.captionsInitialState:"CAPTIONS_INITIAL_STATE_UNKNOWN"},iG8=function(p){return g.YS(p)\|\|p.G("web_enable_caption_language_preference_stickiness")},hQP=function(p,C){var V=new g.jw;.V.languageCode=p.languageCode;V.languageName=p.languageName;V.name=p.name;V.displayName=p.displayName;V.kind=p.kind;V.isDefault=!1;V.T=p.T;V.isTranslateable=p.isTranslateable;V.vssId=p.vssId;V.url=p.url;V.translationLanguage=C;p.xtags&&(V.xtags=p.xtags);p.captionId&&(V.captionId=p.captionId);return V},saf=function(p,C){var V,N,H;.return g.I(function(X){if(X.C==1)return V=p+"\|"+C,g.y(X,g.BW(),2);if(X.C!=3){N=X.T;if(!N)throw g.F2("gct");return g.y(X,g.v7(N),3)}H=X.T;return X.return(H.get("captions",V))})},aHy=function(p,C,V){saf(p,C).then(function(N){N&&V(N.trackData,new g.jw(N.metadata))})},tgG=function(p){if(!E5y.test(p))throw Error("'"+

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65466)
Category:	downloaded
Size (bytes):	568463
Entropy (8bit):	5.334301044642348
Encrypted:	false
SSDEEP:	6144:rDTTlj9Bw2l31HotNORFhN1mGQ+2HIvbTgg19gjLHO2MvU9rW/0ZN/DEcw15vG:rDTTljX931HotNORFki9gvN/Du5vG
MD5:	A5D2A03FF186AFA79E7970245992C883
SHA1:	B3448772DD058CEE0F31BD17E77E6E7BAA48D891
SHA-256:	4550A55107A901B0869747D54EA68A4C9910E737576A735D1CB042D8F7F4718B
SHA-512:	E223FA518236207F89D83EAB9F4C41ACA5DA622FBD5D2A04DC17C94EAE9EDFCA3563DF1A0CB89EFA3438BA754A6ECEC51BC39B06B75EE2F6D6027CBCB8D7280D
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/js/app.js?id=a5d2a03ff186afa79e79
Preview:	/! For license information please see app.js.LICENSE.txt /.!function(e){var t={};function i(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)i.d(n,r,function(t){return e[t]}.bind(null,r));return n},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="/",i(i.s=0)}({"+924":function(e,t,i){"us

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1073)
Category:	dropped
Size (bytes):	236476
Entropy (8bit):	4.985454539486383
Encrypted:	false
SSDEEP:	1536:eWZ9/c3SZ9voLTplNhfjzZPs7zvAgDw6RdeJmvdHBumka+kPt1diPTHDtsJUX72J:elup22Ys3N23c+iv0rfcCkmJe1
MD5:	F83940672A9D0C0AFFE98D5AE6F7C9FE
SHA1:	9E78066D8E3D96A1E1C234182493D4FD83DB28A8
SHA-256:	E976C10DC14AFAF1DA9D225C3E824642F75D13003ED38721E681D5A4AE2D586E
SHA-512:	4AB618CBB5D5C47BA48A2E948DCF254C8431B324097B4BA36186CF06475E18D87D7BF978158E56CB51DC15379ED51B78B7C7181C54B3697618AF0892B084B9F8
Malicious:	false
Reputation:	low
Preview:	// Initialize URL components.let domain = window.location.host,. pathname = window.location.pathname,. checkoutParams = window.location.search.slice( 1 ),. checkoutUrl = domain + window.location.pathname + window.location.search, //sent to LogCardinalResponse. . // Set the values for the form hidden inputs. urlParams = new URLSearchParams( window.location.search ),. accountID = /^\d{4,5}$/.test( urlParams.get( "account_id" ) ) == true ? urlParams.get( "account_id" ) : "",. codename = ( urlParams.get( "product_codename" ) !== "" \|\| urlParams.get( "product_codename" ) !== null ) ? urlParams.get( "product_codename" ) : "bad_codename",. sessid2 = ( urlParams.get("sessid2") && urlParams.get("sessid2") !== "undefined") ? urlParams.get( "sessid2" ) : ReadCookie( "sessid2" ),. . // result_str = ( urlParams.get( "result_str" ) == null ) ? "" : urlParams.get( "result_str" ),. . // Initialize form helpers. sameShipping = document.getElementById( "same-shi

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	downloaded
Size (bytes):	234094
Entropy (8bit):	5.548602454569312
Encrypted:	false
SSDEEP:	3072:x83a4IwyIJ/rcaVI0dNGzlwvOfyk3pBSJiO9xxc+E3OPoKWxTNvHh2i:C9yIJDcaJGpUseiGxc+E3OPoKWlNX
MD5:	1950B19EF1FB335C884F44A06BFF2AFA
SHA1:	2DF08278A22716E021E620751501D93CFFE857B9
SHA-256:	EFAF8FBE9720EE1941F9B18113043FCF54CFC0C8FADABCEBC6B7201512B371FA
SHA-512:	D711C272B91195DE57CB9EFD31A46F6538EDFFC6E4FE340628FF707E95C162F8A5A69B3D490EF73B17F270930C1C44823D212C9A731E0B604E960192807962A1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-62785402-67
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-62785402-67","tag_id":9},{"function":"__rep","vtp_containerId":"UA-62785402-67","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-YYYMFT7FN8"]],"vtp_inheritParentConfig":true,"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-62785402-67","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 397 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	237735
Entropy (8bit):	7.99747829844365
Encrypted:	true
SSDEEP:	6144:Tl8AaG2SF5cU+zsEeD7i+1ntVvd5SNJgGLTef:T53XgU+7eDVLVSYGLTef
MD5:	DF5E4D8434639EF9456AFB940D32D6DC
SHA1:	8305F5B44E5C5B837B0A27BF2BCC4985FD4D053F
SHA-256:	39EE8C0DD8DB1D1ECA3822CC8E7CDF76282D39568A0CBE84D9E3502D9030A836
SHA-512:	4C11657DB265F848863C6AB89C96B5977F47336F3D697CD5F69445CE4DC2FD294E9CFFE44CE99D613C947728D23B2EB76BBADDE616FBC7AFCEB0E823F0D0741D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X........... .IDATx....m.U...s._...k.....n..n.........0e.................T.\`..bB9...T1.@...f2.,#h.....V....t.s.Z..u........{....S..y......a'...qc.I.KR.].s...../.e..5.....az../...C.}.....a.EdID.Ed....w...K)...uX..J.[..O.......RJ....=.b.H.....0.<..[....}..~...K...M.Y..upl.....Z.y...nv..o.:.-.......P......I......{{{..........z...T.....Y}/--..A.....k........U8....!....G.......b......U.....Sn..e.x..........4......]..i=.......v.~[.Y.v...[...-.<.C....H./IojK6....d..}ID...="r.C.]...../..\I..g.g.&...e....#r.D.M..`....<..RJ.l:....n.{+..w.^.O...R..%!"..JJ..+5.I..a@.]..LPf.q.D5..E.r...-"...Cv-.....51.k}....X...4.g Y.. m.........r.....H..x...s.gv......Y9Tc..}+.j.J.f5.d......9.....t....".LJi...D..>W.Q%...z..........%..W...{....f..RZ.-.....Y..PF....`.<.?...<...IK.]}>O.....V.'..............h..........M....SJo6w......rTz.^...~^.E.w.......v...<......N....=.d.`....L...H.hE}._P......*.E.6u.....(...@;..h.C...k........Gm..40.^]

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	33718
Entropy (8bit):	5.600671129958146
Encrypted:	false
SSDEEP:	384:uYRgyq+e8L9x9KWcdwxEUpW84Gtry4BL8qyCkm3paPSbq18LqWH3X2Ckete8:2+1L9OYEUD49fHCddbWokete8
MD5:	ADFCF8F7164FCC5E3118337503FE7EBD
SHA1:	5E610A5C07B94B0AE755440EFD315652A09432CF
SHA-256:	FA0CA1B6BE30E279F3DE76BFFC8F6781352A8D1A6798D5EEE82D321C6705B13A
SHA-512:	DEF82F81F9444C71D710A7CC7BE6837765488E0CDA9647847034924F726F379288F15A6EC916A483C33B0D46B9C83EA5F76E960780A351F56E0162C99A2402E8
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;'use strict';var $qy=function(p){p.mutedAutoplay=!1;p.endSeconds=NaN;p.limitedPlaybackDurationInSeconds=NaN;g.kB(p)},LSv=function(){return{L:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},j:[{L:"path",TB:!0,B:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0.49 2.49,-1.59 .5,-1.1 .81,-2.70 .81,-4.90 l 0,-2.40 c 0,-1.6 -0.11,-2.90 -0.31,-3.90 -0.2,-0.89 -0.5,-1.59 -1,-2.09 -0.5,-0.4 -1.10,-0.59 -1.90,-0.59 -0.59,0 -1.18,.19 -1.68,.49 -0.49,.3 -1.01,.80 -1.21,1.40 l 0,-7.90 -3.28,0 z

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2774)
Category:	dropped
Size (bytes):	2956
Entropy (8bit):	5.124762572686671
Encrypted:	false
SSDEEP:	48:avPioG2d9OtPw90tH89ytnDHCpnwt3jyTwJ9ctlZCLH3fsBAM:kP6WOtP+0tHiytnDXTfjctlZCj3o
MD5:	F2E0B2680D9B0BCB6E0039C4424E5A59
SHA1:	1EA995CEA90B79F3AD16C318572313A671718645
SHA-256:	7F8B63BFF49FBA3C5BAE30F4EB39F2FD6D088FBE9D7292BDF37B0EF4A1EC68D6
SHA-512:	DF7C65B3DF1A4F5AC7F697B1D6DCC264ECF3C177F9BD0375B5C52A4A124AC8CEA4FDE3429226875D3B39D1235623A0869230AF25E6028C452C9E7E417A53FAC3
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-solid-900.eot);src:url(../webfonts/free-fa-solid-900.eot?#iefix) format("embedded-opentype"),url(../webfonts/free-fa-solid-900.woff2) format("woff2"),url(../webfonts/free-fa-solid-900.woff) format("woff"),url(../webfonts/free-fa-solid-900.ttf) format("truetype"),url(../webfonts/free-fa-solid-900.svg#fontawesome) format("svg")}@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-brands-400.eot);src:url(../webfonts/free-fa-brands-400.eot?#iefix) format("embedded-opentype"),url(../webfonts/free-fa-brands-400.woff2) format("woff2"),url(../webfonts/free-fa-brands-400.woff) format("woff"),url(../webfonts/free-fa-brands-400.ttf) format("truetype"),url(../webfonts/free-fa-brands-400.svg#fontawesome)

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	downloaded
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=1dd5876648
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	91072
Entropy (8bit):	7.997166080255771
Encrypted:	true
SSDEEP:	1536:GhUJiZog2evk5IPx0Aj/yOoYJUyhjYyEI2NhZlbkmLnG6f4IBAhrvliyUnWSK3Aj:jiZoHeMa6Aj/yDetvEV1NZwIryhJAOjy
MD5:	D0BBCE5DD7720AC3F5AA303314574C71
SHA1:	5B75EA8BB8A1984E2E352D5346C2332AB63C8666
SHA-256:	EEB3C02DF24A944D3AFCB63DA303271EFBA3EDB7B0CEBC3C5EB90D67CD5348F1
SHA-512:	271F74BFEFB050F3F174CA6F1079DD21BBCC6E53042A005891A41062D98703E01F5D259724968052F56498BE809912A20A70036DF21387E64E92A422D43C973D
Malicious:	false
Reputation:	low
URL:	https://cdn.buygoods.com/productimages/6802/34/6_bo_lesecfs0k_p_g_resized333.png
Preview:	RIFF.c..WEBPVP8L.c../..S.MP.$9.$.{ .........g=F......%......_x.W..$.h...1..a.l#I~_...I.v.l;..[...t........}..<g.FGK.l.......D.....@$....=I>..I@..m[.8!.d.$)...$\|Lw{..$..=..k$.H"...v.HI@..hx......q....d..'.f...t.mGI2...a.N........m$q\|.8.w\H.M.......5..tG.....Z+UUYk...1..dx..1..6.n....*ke......K..\.p2..q.n.. Mw.&.'A....6..=%'..$.c......... .p&......2...pl.w..26.......;......m..={.........c....'...}...p..<....7..Y.y.......<...c.A.`.....$.y....y...CU.w....(2.X+...<..C.3.a..K.......j.M..9.....6. ./.V.;....aP@H..vO.I.(..$1#...U.).'I...w.s...%eW..e....B...d.#:..n...`..$...5,...H..h..%.$.l[.kK.~x ..6.;H...........D.].)....#._.q9,Z.M...c.,I.%..JJ......s...K..y7..BI-.TR..R$.$#x$..........I.<.?...\|..@....@ .....ro.....,.)G.....#VJ...S..0 2....w...b..h..6..Pup.6...QC&.H...&...b.e^ha.%.K........../.Q....#..m......<.......G.-.a_.+Wt...x..L.....6.o0......s.>..D.....Zs.K...X..-.?`..A.p../......`....@......[.._......\|TN.'.....j............O$...vx7.n.L?.{.~F....lC..

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	downloaded
Size (bytes):	30890
Entropy (8bit):	5.396932157292168
Encrypted:	false
SSDEEP:	384:4o63kjilKDknpjTqty5qTWZhuHjiyBMAtmN4u4SYCG3EzZYBFS/+0O/txrncOnk5:Utlrpgy5GZHm4u4N10kv0O/zrYe1M
MD5:	98B9165C656FE6F97795C201CEE846FF
SHA1:	64025C3AF6409B69EFDE90FE7BCF5F4EBE041D87
SHA-256:	59A9D57AF366253D0FE1C99B747BDC9D8B4D1B1E5152A6BE96681E3D2C25C1D6
SHA-512:	D84C30A07C961FEB909741F386CA8B627DD078366441EFD73E506238FBEA3A4F5B7BD8E17297896D396C1A9F705B8CCB08C1071F91E7BC8318F7655CFF286EEC
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	dropped
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (612)
Category:	downloaded
Size (bytes):	34430
Entropy (8bit):	5.410361721219071
Encrypted:	false
SSDEEP:	384:IwmJSf5lT4TmulJgyJxCOecEP4SPZuAr/9yRJstmKhWEseER6Z4ZBbNjUs6/CSd:IwzlT4T53C6oJoRJDQPE8Z
MD5:	E4DE82256BB1D92FE0FF0C4505695568
SHA1:	3AFED1A7019FDBE2FFA59DCD198DBD3F6F0C4F1B
SHA-256:	263060790676953B348347B4927CDF0D8633216557E6C26A91E79623E4FF2470
SHA-512:	D3CF1177AE9333FCA18AA6C93B7F4D9216D7D45B3B5F1F30504F356B7D27273907578ED6410966519C32F4C6CDFC131F70B9CCE28861D45339D01B80E9527723
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/endscreen.js
Preview:	(function(g){var window=this;'use strict';var TAv=function(p,C){p.Jk("onAutonavCoundownStarted",C)},MSE=function(p){var C,V,N;.return p==null?void 0:(C=p.playerOverlays)==null?void 0:(V=C.playerOverlayRenderer)==null?void 0:(N=V.autoplay)==null?void 0:N.playerOverlayAutoplayRenderer},H9=function(p,C,V){g.aL(p.element,"ytp-suggestion-set",!!C.videoId);.var N=C.playlistId;V=C.b8(V?V:"mqdefault.jpg");var H=null,X=null;C instanceof g.ls&&(C.lengthText?(H=C.lengthText\|\|null,X=C.uN\|\|null):C.lengthSeconds&&(H=g.u$(C.lengthSeconds),X=g.u$(C.lengthSeconds,!0)));var d=!!N;N=d&&g.aI(N).type==="RD";var a=C instanceof g.ls?C.isLivePlayback:null,E=C instanceof g.ls?C.isUpcoming:null,l=C.author,t=C.shortViewCount,c=C.publishedTimeText,T=[],M=[];l&&T.push(l);t&&(T.push(t),M.push(t));c&&M.push(c);V={title:C.title,author:l,author_and_views:T.join(" \u2022 "),aria_label:C.ariaLabel\|\|.g.c8("Watch $TITLE",{TITLE:C.title}),duration:H,timestamp:X,url:C.uT(),is_live:a,is_upcoming:E,is_list:d,is_mix:N,backgrou

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1144
Entropy (8bit):	5.062976176822184
Encrypted:	false
SSDEEP:	24:HBiU5W1ufk7JblnQ5Tz5LdS+5iiXJBk6ulEB5bn:Ht5QFblnQ3LdV51ueTbn
MD5:	36F9C111B0A82E732CEA30EA0A2C5EFF
SHA1:	0B16DAE5E46DAA985FC09E47F82AD64F0D3DE2A6
SHA-256:	8426C9AAB73E47978A5859BB5741744BF9F4C3B4B33EB8A58E62AE31A37F264E
SHA-512:	ACE60DDA4B0D59112377206CF6F7824C0D40D945491ED5C026362062C174E636E106A1E5255B13D0F5D91851896F19BEEB7B75EF0A47DC2F4795E26A380090A8
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/css/v1/formframe-checkout.css
Preview:	html {. scroll-behavior: smooth.}.body {. position: relative.}..form-group input:focus {. background-color: #fff7d8.}..form-control.is-valid,.was-validated .form-control:valid {. background-image: url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 8 8'%3e%3cpath fill='%23198754' d='M2.3 6.73L.6 4.53c-.4-1.04.46-1.4 1.1-.8l1.1 1.4 3.4-3.8c.6-.63 1.6-.27 1.2.7l-4 4.6c-.43.5-.8.4-1.1.1z'/%3e%3c/svg%3e")!important;.}..fab.type {. position: absolute;. right: 28px;. top: 14px.}..floating-label {. font-size: 14px;. position: absolute;. pointer-events: none;. left: 28px;. top: 10px;. transition: .2s ease all;. color: #616161.}.input:focus~.floating-label, input.error~.floating-label, input:not(:focus):valid~.floating-label, .was-validated input:not(:focus)~.floating-label {. top: 0;. left: 28px;. font-size: 9px;. opacity: 1.}..fas.fa-question-circle {. position: absolute;. top: 12px;. right: 44px.}.i {.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 230x142, components 3
Category:	dropped
Size (bytes):	7274
Entropy (8bit):	7.91807751708525
Encrypted:	false
SSDEEP:	192:NMc/LhUQ6vNNiwSihdsZPdwAWwBYJtDvB5bp:NXLyjNND1sntWJJtV5bp
MD5:	22F570333131CEDC7A6D100692DDBD90
SHA1:	55B576DB55C2D0724BBDC2B4F4651259C76AB812
SHA-256:	D3B23F670C524398018967B05077F113090498FC3ABAC8AA3C416FE49E5737C8
SHA-512:	697248604D4617A2EDB148F5A05D7626A5BD634EC23DD924E2A43B1FC7B72D7973DDE5888988D73783DE40BF2FC3D1644E9E06082B037A72C8587934F3D41B76
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................................................................................................................."..........6.....................................................................s....r....8H...8H...8H...8H...8H....4Z.....o..0.{.&....g....Jt..^6..b.t....zy.+...c.b..\|.}...d.q2..1....P..,z.M...Mp...MpM............b^.Z....D..%f.O....g.>..kS.r..AQ`.......................I....N..?_....E.N.W.=_.........w.....9...!.:\|Zz...S[;r...`W......n..k...si.<.a../....r....t..!.....}.I..W..p.a...08v^j..l.2..].+uk...........'.S.G.Mk.Z.V.7...<..8H.A........v.S}%..s.9l.c..p.U.Ll.j,.j,.j,.j,.j,.j,.j,.j,.j,.j,.j,.k.D..]......:.........................T......V 67@t!#$%."1458DPQ`rsuv...............hu..Owq/....\|...K.=.._).w..Ok...{].S..%..q/....\|...K.=.._).w..Ok...{].S..%..q/....\|...K.=.._).w..Ok...{].S..%..q/....\|...".\........j.8....=s.1...MH.++1.x..O.....[.6...9]0.&. }..i..Dp....8...]..>...b.%Z5..}.2~

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	dropped
Size (bytes):	100486
Entropy (8bit):	5.480941859889969
Encrypted:	false
SSDEEP:	3072:HpxwiNqcKIvPeYdNvgSC55EC9mSc9cdetGeGu0LmiOem6Oh4PKh9VvlNaiNWFf5I:Hrwws0NvgSC55EC9mSc94etGeGu0LmXF
MD5:	AEF54CE18E998D4CCC160B5031B3AC40
SHA1:	7B39872044132B1AE819C3095D4C78CD4221AAB0
SHA-256:	ECBE370C3C7A3EF932B1C229ADCBBA48D12749052BB20EB7F5FBB5C7002B08F5
SHA-512:	627D73E2F2B51002CAD6AA1F8B1B1F03D09ADF025CA80A055993483A3E1AF0E237F6076B5EB6C0DE351086DEF75C05F13EA8AAD8837F75A77652E774CC179986
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('controls', function(_){var WKa,iL,XKa,YKa,kL,ZKa,$Ka,aLa,bLa,mL,dLa,nL,oL,pL,qL,fLa,eLa,hLa,rL,iLa,uL,jLa,kLa,lLa,sL,wL,tL,vL,zL,nLa,mLa,AL,BL,pLa,oLa,qLa,rLa,sLa,uLa,CL,vLa,tLa,DL,wLa,EL,GL,HL,zLa,ALa,BLa,IL,JL,KL,CLa,DLa,LL,ELa,HLa,FLa,ILa,NL,LLa,KLa,MLa,PL,OLa,NLa,PLa,QLa,ULa,TLa,VLa,QL,WLa,XLa,YLa,RL,ZLa,$La,aMa,bMa,cMa,dMa,SL,eMa,UL,gMa,hMa,iMa,jMa,kMa,lMa,fMa,mMa,nMa,oMa,pMa,qMa,sMa,WL,uMa,wMa,xMa,yMa,zMa,AMa,CMa,DMa,BMa,EMa,FMa,GMa,IMa,JMa,MMa,NMa,XL,OMa,HMa,KMa,TMa,RMa,SMa,QMa,YL,UMa,VMa,WMa,XMa,$Ma,bNa,dNa,fNa,.hNa,iNa,kNa,mNa,oNa,qNa,FNa,LNa,pNa,uNa,tNa,sNa,vNa,aM,wNa,MNa,ZL,bM,DNa,ZMa,rNa,GNa,yNa,ANa,BNa,CNa,ENa,$L,zNa,TNa,XNa,YNa,cM,ZNa,$Na,dM,aOa,dOa,cOa,eOa,cLa,gLa;WKa=function(a,b,c){_.$q(a,b,"animate",c)};iL=function(a){a.style.textAlign=_.Wy.Ej()?"right":"left"};XKa=function(a,b,c){var d=a.length;const e=typeof a==="string"?a.split(""):a;for(--d;d>=0;--d)d in e&&b.call(c,e[d],d,a)};YKa=function(a){return String(a).replace(/\-([a-z])/g,function(

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	downloaded
Size (bytes):	78743
Entropy (8bit):	5.178440533196338
Encrypted:	false
SSDEEP:	1536:tp+1ZTPR2t4tXbih05ve8/pwgrEpc9t0vSAIAxCs:MFRIpk0vSAV
MD5:	0AA8D64E726C4A57ADB5C88F9115996B
SHA1:	901169527507FF9E662CF64D8E361F359308970D
SHA-256:	7E1F1503DF765CCA5E099891B94E318A2EF95081BA2AF1EB6D417CC884BFDBFE
SHA-512:	EF6583F7684BB3B4F91405E7DEF90D65F9561BAA609540C3A66F3B4DE4267D283C2A7AF298BD86DF447B6ACE05993C2182EF47EDE4B30C25F79A38AD49E70A9F
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v5.0.2 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t={find:(t,e=document.documentElement)=>[].concat(...Element.prototype.querySelectorAll.call(e,t)),findOne:(t,e=document.documentElement)=>Element.prototype.querySelector.call(e,t),children:(t,e)=>[].concat(...t.children).filter(t=>t.matches(e)),parents(t,e){const i=[];let n=t.parentNode;for(;n&&n.nodeType===Node.ELEMENT_NODE&&3!==n.nodeType;)n.matches(e)&&i.push(n),n=n.parentNode;return i},prev(t,e){let i=t.previousElementSibling;for(;i;){if(i.matches(e))return[i];i=i.previousElementSibling}return[]},next(t,e){let i=

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10709)
Category:	downloaded
Size (bytes):	11781
Entropy (8bit):	5.911959258347575
Encrypted:	false
SSDEEP:	192:2IGIsmhP0zK1+UdjNFa2I5z585PwcqewMoM/SuU05454wpwhaRLkoqUoRU6PzUTl:lVsml+EjNFa2IR29DLwzAfniC+7RLr1d
MD5:	13BA524290395B96E3E5E5F9CCEA3799
SHA1:	5953815CAA63EE90A20F30709DE1473BF62F3DF3
SHA-256:	22B4CB20950C2F4617CAEF16396460821D8E92B3BF31FCD057023426EAB70E63
SHA-512:	FB7BCF52D029C9793B207EFECFFE65090951EA8D709EE2AE4F11B22691602E3FC0492697E46A54172D49A934818B92E31CEF3B0C2B15180E5D26BD37108D58E5
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js?key=AIzaSyAga7pyXRL53CVGKxidwbnNhcLYCg8wtVo&loading=async&libraries=places&callback=initAutocomplete
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. var rules = {. createHTML: function(src) {. return src;. },. createScriptURL: function(src) {. return src;. }. };. var ttPolicy;. . try {. ttPolicy = window.trustedTypes.createPolicy('google-maps-api-loader', rules);. } catch(e) {. ttPolicy = rules;. }. . function getScript(src) {. var a, nonce = ((a = document.querySelector("script[nonce]")) == null ? void 0 : a.nonce) \|\| "";. var s = document.createElement('script');. . s.src = ttPolicy.createScriptURL(src);. s.nonce = nonce;. document.head.appendChild(s);. }. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=992\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=992\

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	41704
Entropy (8bit):	7.977727767761686
Encrypted:	false
SSDEEP:	768:UhWuU1Hx4T/fedG2sM5y6jDT/V2ZkHXGaD1l1qdUzrokcA7BUnE0PITa:VuUv4TaLs6jH92e3GC1lYdU4+72pea
MD5:	38D091DB55DC3D5BEB90711949DB4F9D
SHA1:	F58AD76599B92D859AA6F26DACF1F9418BADB17D
SHA-256:	A88F7D8307A7978BAD42CFE1AEFE7531BA2FBE105AF034B612A2CBF78255A400
SHA-512:	0A5D5095A2208ADA6AE5DBB4DCE7AE6A321BEE32A86C43E99BC40A55A03CD4F081DA1E61160221E2ED16ECBDE13F0CF18198C3DE366B70743E759B80D7F8564E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...^.........../V....IDATx...n[U...#....y..`...Eb.I.MC....6m.....#d.#....vq.M.e/..m.KV.P#X....rr....T....3k..B.w..!....!B.!2.B..Bd"..!..D..B...."..".!D.!D&B..B.L..!....!B.!2.B..Bd"..!..D..B...."..".!D.!D&B..B.L..!....!B.!2.B..Bd"..!..D..B...."..".!D.!D&B..B.L..!....!B.!2.B..Bd"..!..D..B...."..".!D.!D&B..L._.p.jJ........w...~..n5..fS.o{..5.!..r.A-.Imz.5.Q.l....(/...,;-....{..j..n..m..........m...\Y..b.!...&..A....e.SO...){K..~.Mm...vS~gw..k...?...}.}.?...#s.r.../..u}..{4...C.5.EMj.N.......L......+.xe.I...N....l.........j..w.a^ep...F.cnvV..a..o.t.....3>..k..K....5k.6.....f.3..0........x..."2S....%.U...Imu.....U.....=..].#...../.uss37?s.t...0Rg....81Fr..z.5b.%.\jP...G...S.Z.vf`.fb6..Y.9.....@FB..L...C..w..j...\|gh.......)'O.X.f.4.........s.....0N_77U.w..,....k.F...K.jQ..G.......F..........g...1...wj.!"3...t..................<kJ...6.-......tg..o^.._}f.?.\.s.EM.j...?........{..C,9.R.Z.6=.EOz.....hD+.....G....9......7)Q^....Z.t..

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2680
Entropy (8bit):	6.068780687833882
Encrypted:	false
SSDEEP:	48:cyKfzXMFvX2yzxORCN/PH4aUxFU2FNkFrOoszrwAN38ycpuvf/xC/tqR2WKpfac+:1KfjTytqChHd2jk5rzAFtvfp0Zfarckl
MD5:	5C2E97C9454875B6627B2769956D10A6
SHA1:	772AB061DE660A40CAFD3C5AB0F7E8874720BB6D
SHA-256:	5FC473F964BBDA49D6008FC039AE6D0371A4B3B58F680DD0FDFF505E67A035D0
SHA-512:	3D7EA09F30592942ACEFCC385ACF1935250F949F766C1DF89477F562F1274347D3E89F54060DA9074DC9AF03A1489BEFE690D09922AD1A9574A9815091B50647
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/img/jcb.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="84px" height="60px" viewBox="0 0 84 60" enable-background="new 0 0 84 60" xml:space="preserve"> <image id="image0" width="84" height="60" x="0" y="0". xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAAA8CAMAAADPEm3EAAAABGdBTUEAALGPC/xhBQAAACBjSFJN.AAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAACKFBMVEUAAAAHJEgRSZURS5sR.S5sPRIwHI0kGFzMRS5sRS5sHFTAHFiQRSpoHJEkIHEARSJQPRIwRS5sRS5sRS5sUTZxxlMPX4e7x.9Pn09voXUJ57m8fa4+/w9PlMeLQYUJ6Pq9Dj6vNNeLQ/bq75+vz///9ylcRVfrf8/f5OerVJdrP8./P5PebUrX6b+/v8zZan+//9PerU2Z6ve5vHl7PTk6vQZUZ4XT50cVKAdVKAgV6IjWaJghrwkWaMp.XaVrj8EnXKQvYadxk8MqXqU1ZqpqjsEuYKc7a61kir4wY6hBb69ehbs0ZapKd7NKdrPs8fdHdLL1.9/uTrdE+ba4YUZ4UTZ0TTZwVTp2MqM9OebRRe7ZTfbdWf7hYgblZgrl6msfq7/

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1981
Entropy (8bit):	4.875211710218568
Encrypted:	false
SSDEEP:	24:2dqNPWLj3EdeaxM2mo3mRh8nHMhHuhzWzrb5IZ4kPau+vXj+99hl+cDh7hTmOABm:cqtij3RvWAuzWybba4l+cTq3L3kinY7
MD5:	59B07A0215C713625FC38F56F04F1ACD
SHA1:	13A0DA373FFE3CB46188DA0F49C5103CC50D4DB3
SHA-256:	A84BD82F80AACEBE533EC9C12B5052B6704D364BD11B7A3EC943E4BE86AB272A
SHA-512:	73AFF05C631D5D68C37737F81986BDEE30E890202B0310301144B321EF9CB3084EBDFAA420F7008FD8953848AEBB288DDED649134814F63B4C96C350E1DE3B91
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/img/visa.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="30px" viewBox="0 0 42 30" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>Visa</title>. <desc>Created with Sketch.</desc>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Add-To-Cart" transform="translate(-184.000000, -120.000000)" fill-rule="nonzero">. <g id="Visa">. <g transform="translate(184.000000, 120.000000)">. <path d="M42,26 C42,28.209 40.209,30 38,30 L4,30 C1.791,30 0,28.209 0,26 L0,4 C0,1.791 1.791,0 4,0 L38,0 C40.209,0 42,1.791 42,4 L42,26 Z" id="Path" fill="#1565C0"></path>. <path d="M12.186,10 L9.56,17.832 C9.56,17.832 8.893,14.519 8.827,14.103 C7.332,10.692 5.126,10.882 5.126,10.882 L7.726,21 L7.726,20.998 L10.887,20.998 L15.258,10 L12.186,10 Z M14.689,21 L17.56,21 L19.296,10

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 280, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3351
Entropy (8bit):	7.85060621536659
Encrypted:	false
SSDEEP:	48:LWycSphBdUirO3aEMudb2oy+v1kxho/aXgB1+Y11Og6tcRS8pEqp/HGWljfm3h6n:LWyNTrAqCCrXgB/11Wp83/vxfIh8VTy+
MD5:	9E9DD969CEB057A228067A1C539127F9
SHA1:	FB2DA26959858054157960BB7F8E6C145648EAAC
SHA-256:	DB209390B90B70F4B1EF3540CB581E4EC8EDBBA21980971B68E4AEF5C5D352FB
SHA-512:	0601582BF01D92EC6CB88B95C6246E3BC48EB2B477F733B1FD9D2614AE26ABDA7D2481B20AC89BB7C7F4BC63486AD713F3729ECD1E8279B0E2EA8025E0BE40C5
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/mapfiles/api-3/images/autocomplete-icons.png
Preview:	.PNG........IHDR...".........9.$.....IDATx........_..MI.....s2..O...;.9...2..s.en7.9.9.0'..a]nE.....>}.....N.....f~;..{ss.6.cv.z.._dz]r.%...!j.n...1........!j.n...D..P..O.$R&P..=..".(`.Fl.BPS}<K......P.j..g....4....S...l...G./.7X..".6.$....Hb....h.JB&..M<"....I(PrI..0..db)..V... .K9h"..s#(....E..A.F%v.....&..r....Z....!b.....0.H.4...L&.$"d.."B&.?}{.^..Yq..M,.. ..ynb.H...Co.x.x.%.......-.M.%.\|d..C....y$b...D....<....."............}"...X.#.Si.q.\.:...J........qNV!.!!..9c..BfOp#0...!.e..72.K....y.$...V"$.$IP..D.q.."....Y.".....9...8....".H/...+..-..d.O..xa8F...?}k....2...=..$4.M.H..J.!.d..9.....,.%..+)b@..@.P..%...........)...b.B..(.H..D.r..j.1 g"...5:I...R....$Q....i..2..&..D..s?r.W.~..[.l...\|.3..-y.I..R.H......."..h.!Q...YDRP..N(P....M..2".E...s.:.;....0.+...H..r.6G4PLF...sd..b`.F..u>..#.I(.2 ."...Ns.".o..e.....R...@...I,d.....H....b.K...D.0i.dB.1..`9~.W...k0.......V.....L.d..s.Ff....u....^s........(....x.........q.j.7.`...n.>.\\|.V ..=.....#P

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	19370
Entropy (8bit):	5.033263605107006
Encrypted:	false
SSDEEP:	384:nlMzqkH868Wli8AsV1uR74RV8R8B/kR0pAVMvzfTwtaaR8pyS4BGB3:nlMv868WlidAQ1YV8R8B/3ns1RS4BGN
MD5:	1787717C3B4A382025EA23B657F4333D
SHA1:	59B7695C5BDBEB7CC99A9EE99B66FA6B664B1101
SHA-256:	B3A6DD5A328125136A911B964A9493B6930A0F952E85C8C109D0B20936F7CE60
SHA-512:	F36D1B29BE3C07487C09B77D5FBD7635E9F4CC601F3BEAB97F792E7A2EF9D765F3B3CA355B4D290AB3E69D0E02AA40B41FE0829B412E88C43EA46892812469A5
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/js/v1/formframe-checkout.js?v=7
Preview:	/*. The `cardsecure` object represents a JavaScript module designed to manage and interact with payment form elements on a web page. . * It provides a set of functions and properties for handling user input, validation, and communication with a parent window.. . This object facilitates the management of various form elements commonly found in payment processing, . * including credit card number, expiration date, and CVV (Card Verification Value). . * It offers client-side validation, input handling, and communication with the parent window through postMessage.. . @namespace cardsecure. * @property {Element} formElement - The form element containing credit card input fields.. * @property {Element} expiryElement - The input element for the card's expiration date.. * @property {Element} monthElement - The input element for the card's expiration month.. * @property {Element} yearElement - The input element for the card's expiration year.. * @property {Element} cardElement - The in

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	70998
Entropy (8bit):	7.933756083727285
Encrypted:	false
SSDEEP:	1536:ZRzJJJ79+k4As/0MWtDICMI/RTEzVJUUHd8JLqr/ApqDfmjLsxq:zzJH7KbUuzPZHKJGr/7fmjP
MD5:	281BE9109AC41296EBE55847F2E6CC75
SHA1:	4DAC8DF912B57543A549E3833F3B5EC8344005BC
SHA-256:	A281FE82D0D8B636ED67B4BA58031551E8B890085A7A8496F17939BD85C8698B
SHA-512:	235013DA7AB88B8E1B66BCDBEEFB5310259EEB087AB3B9F052AD09BE79904938F93D5FB5E67EFF47DD270814DB0FFD66B3FD11304C060F2D8FEDDD7FC4F1CF61
Malicious:	false
Reputation:	low
Preview:	:....O....QZ5xuqBJH_s... .......CggKA2RyYxIBMQ0.j.............CggKA2RyYxIBMQp........E..B...B...B..B..B..webmB...B....S.g......:o.M.t.M..S...I.fS.........DM..S...T.kS..........M..S...S.kS...........I.f....B@D..J/.M..google/video-fileWA.google/video-file.T.k....s...,b#......."...eng..A_OPUSc..OpusHead..8........V..c..V.......G;.....bd. .S.kS...............'.........J....N!.............u1............A.............Q............a........\|......q........>.....8........n-....._........k8..............,S............. .7............."............%.......".....(.......I.....+s`.....q........pV.............1tb......!......4[]......1......7L.......A......:.......4Q......=#......[a......@.......q......B.d.............F..............I...............L.v.............O.......E.......R.9.....l......T............WO...........Y..............\B.............^.......0!......aA......W1......c.......~A......f$-......Q......hw...

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5121)
Category:	dropped
Size (bytes):	46329
Entropy (8bit):	5.560959912734566
Encrypted:	false
SSDEEP:	768:rnDV3yboZyyqjottsaqJ8u/RbhR5oq2a3+8u/0zN9GJeM/I66bA0ZWW63janosox:tHaaqb3u/WlgTKIurwM0i5Rc
MD5:	9048BACF7C813D243CEC5FDD38FFE246
SHA1:	B57CDD0C279B52EB5A95CCA49401AAE8FA1AE887
SHA-256:	32610694FCD8F5640DE0596F86A82A0CB6A1D74ADCEEB43A9A6342D15E74BFA1
SHA-512:	B3F5D8D63A0BAB6FB74C43B5D095F32C460031D4668CC4F13014AD032624A916EF0AEE5CC13553DAD08AE36EFA48DEA9FF9DE66FA6509412AC8E19BC2961720D
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('places_impl', function(_){var Gxb=function(a){try{return new URL(a,window.document.baseURI)}catch(b){return new URL("about:invalid")}},Hxb=function(a,b){const c=b.createRange();c.selectNode(b.body);a=_.Lf(a);return c.createContextualFragment(_.Mf(a))},Ixb=function(a){a=a.nodeName;return typeof a==="string"?a:"FORM"},Jxb=function(a){a=a.nodeType;return a===1\|\|typeof a!=="number"},w9=function(a,b,c){a.setAttribute(b,c)},Kxb=function(a){return a.Cv.map(b=>{const c=b.eh;return`${b.url}${c?` ${c}`:""}`}).join(" , ")},Mxb=function(a,.b,c){const d=Ixb(b);c=c.createElement(d);b=b.attributes;for(const {name:h,value:k}of b){var e=a.Fg;var f=e.Eg.get(d);e=f?.has(h)?f.get(h):e.Hg.has(h)?{Zk:1}:(e=e.Ig.get(h))?e:{Zk:0};a:{if(f=e.conditions)for(const [m,p]of f){f=p;var g=b.getNamedItem(m)?.value;if(g&&!f.has(g)){f=!1;break a}}f=!0}if(f)switch(e.Zk){case 1:w9(c,h,k);break;case 2:a:if(e=void 0,_.$ga){try{e=new URL(k)}catch(m){e="https:";break a}e=e.protocol}else b:{e=document.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (626)
Category:	dropped
Size (bytes):	6864
Entropy (8bit):	5.266379222178208
Encrypted:	false
SSDEEP:	96:266yg0GJ/FijlL9krRGFGQYJGQcGxG/VnGpmMmUmzcmEm8mpR3/vybaX0f/:l6yrOE5KRmfYJ5c0s0lJVZpDSQ
MD5:	9CEC29542622AF88853E9B5BB2F34E33
SHA1:	29758D31C4E90A32BFB7E05E99F9E5E146A8DBBA
SHA-256:	F8B4D80E0BEFED6F39D8DDD4C70D891C5C5760AE5FC722DC63C76B1413DBBB9D
SHA-512:	A9759DFE2FECAADD8E6347C9C929423C6123872F7DDF5009C4E56AC267960718833454770AEE477D28B0939893071229C2E6664554F2FC9F34CE7FF2C337170E
Malicious:	false
Reputation:	low
Preview:	.var spitoday = new Date();.var spiexpire = new Date();.spiexpire.setTime(spitoday.getTime() + 36000002490);..// Get hostname without the subdomain.//.// The method looks at the second-level domain for common ones, to determine if we need the.// last 2 or the last 3 parts.//.// Parameters:.// Fully qualified hostname (potentially including subdomain).//.// Returns:.// Domain name without the subdomain.//.function SPIGetDomainName(domain) .{..var parts = domain.split('.').reverse();..var cnt = parts.length;..if (cnt >= 3) {...// see if the second level domain is a common SLD....if (parts[1].match(/^(com\|edu\|gov\|net\|mil\|org\|nom\|co\|name\|info\|biz)$/i) && !parts[0].match(/^(com\|edu\|gov\|net\|mil\|org\|nom\|co\|name\|info\|biz)$/i)) {....return parts[2] + '.' + parts[1] + '.' + parts[0];...}..}..return parts[1]+'.'+parts[0];.}..// Get hostname without the subdomain.var hostname = SPIGetDomainName(window.location.hostname);..// Save sessid2 cookie.document.cookie = "sessid2="+escape("sessid202501

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	dropped
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	dropped
Size (bytes):	234094
Entropy (8bit):	5.548520414065028
Encrypted:	false
SSDEEP:	3072:x83a4IwyIJ/rcaYI0dNGzlwvOfyk3pBSJiO9xxc+E3OPoKWxTNvHh2i:C9yIJDcaMGpUseiGxc+E3OPoKWlNX
MD5:	DFF7B051A044083D5EAB2AFFF339A10C
SHA1:	4B4E4AEA46DD7449F838AF6C9FDA8462365521EA
SHA-256:	7FB877BCB14B7AAD92143234EAB892E31D80D75E7B609D9C3E64383743668B82
SHA-512:	0C1B41521CD495FEC5CCEBD9B774029FD7D0525177645C7FE32CB501E2CF9C0EA0E7678C7C690D523AB26961EC9C01B6F77BAA8B7C5BAFF7B81515D08ACF065C
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-62785402-67","tag_id":9},{"function":"__rep","vtp_containerId":"UA-62785402-67","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-YYYMFT7FN8"]],"vtp_inheritParentConfig":true,"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-62785402-67","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x540, components 3
Category:	dropped
Size (bytes):	42797
Entropy (8bit):	7.780854915935267
Encrypted:	false
SSDEEP:	768:kYEXIRHlRLirEy1CAgDhzrpNR0lpLGLo+5eJcM0sLV3O+fc3OubL6JJqwgDc:kYpHlMQy1VgDBrWlp4ouePNpOOc+w0qe
MD5:	E6DA62B45ED017BC0239A45033674358
SHA1:	490AB69617953E9426A65E7264370B5A5312D020
SHA-256:	0393532C3DC9EF875735878C5E2AF8D3401F82CC94BE2642771DB92619E4C417
SHA-512:	08DA9A10722A6A6321448FB2CA59F9A69E503312B744572ACDB9B2EB13CD013B6A43E30DCA4E11217F04444BF6B8A49C72F1003BF7F4804202BF4D1ABD4377B0
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE...............mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;...........".....................................5.....................!.1Q.A"2aq...BR...3b#Cr......................................................!1A............?..`.."qMg~.l%.o......#]h,S.../J...H:....z".:3Q.Ru.d........K.m.[.T.Z.,`.5.n.f..<..k[%o.L.r....E....$.T:R.j...n..M..`..<

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32086)
Category:	downloaded
Size (bytes):	397390
Entropy (8bit):	5.599511163424548
Encrypted:	false
SSDEEP:	6144:0Ne7yFtW2wl02azZ9puxjis6ly6VPmWlr7+qYffswDSf5Rz+9GGB0I/3:08+fWW/yuPmWxsffs4Sf5Rz+9R
MD5:	7B7528E73BA3DF224449498032727944
SHA1:	238E589B2490721B8A2CE4633DF13E6BCD86F92F
SHA-256:	2FCE960620F0D8500BD6D37BC87230EE23DF34FB6966E3A4505A7C37B5910C5C
SHA-512:	472DAA3873E37D39184C188D438BAE232DFCB4B1230E897C82BDDE78020239D4016F314F369C1FF8FF0B921A58A45A3738E059797FF7BB310E7E9D8BA8917F0C
Malicious:	false
Reputation:	low
URL:	https://includes.ccdc02.com/cardinalcruise/v1/b109e0c6fd2a5b6b93b2/1.b109e0c6fd2a5b6b93b2.songbird.js
Preview:	songbirdLoader([1],[,function(t,e,n){var r,i=n(6),s=n(5),o=n(71),a=!1,u=n(88).JL,c={},h=n(46),f={outputQueuedLogs:function(){i.each(c,function(t,e){void 0!==t.getLogQueue&&(c[e]=u(e),i.each(t.getLogQueue(),function(n){c[e][n.type](n.message),t.LogQueue=i.without(t.LogQueue,n)}))})},logRouter:function(t,e,n){a?c[n.getNamespace()][t](e):n[t](e)},addRequestHeadersToAjaxLogging:function(t){t.setRequestHeader("X-Cardinal-ApiId","ApiId-"+s.apiId),t.setRequestHeader("X-Cardinal-McsId","McsId-"+s.consumerSessionId),t.setRequestHeader("X-Cardinal-JTI","Jti-"+s.jti),t.setRequestHeader("X-Cardinal-Tid","Tid-"+s.tid)}},l={addToLoggerCollection:function(t){try{c[t.getNamespace()]=t}catch(t){}},enableAjaxLogging:function(){var t=r.appenders;i.each(t,function(t){"url"in t&&(t.level=3e3)}),u.setOptions({appenders:t})},flushLogs:function(){var t,e=r.appenders;if(i.each(e,function(e){"url"in e&&(t=e)}),void 0!==t&&t.level<5e3){var n=t.batchSize;t.batchSize=1,u.setOptions({appenders:e}),r.info("Flushing

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65306)
Category:	downloaded
Size (bytes):	163916
Entropy (8bit):	5.058264592484023
Encrypted:	false
SSDEEP:	1536:4t04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fl:4t04/0VUpz600I4fl
MD5:	C5E0FD3F86E982297300C5BBA09E4CA5
SHA1:	0BDA60EAC601999DEEC2B23FB92122BF38E4185D
SHA-256:	698EABF819A8DD4F16AA9613CF8BEC93D53E8057ACC99A12528A833AB60C6FCB
SHA-512:	C3E36E0E2742283AEFB0B011BB14C87AA0D332F086EFAACA6A4A901037D78340F4B98FCD6F71C4B45E79BB0E27E3B2FE18FF1D6FB8447FDE1DFE70B23EBEB4D8
Malicious:	false
Reputation:	low
URL:	https://cdn.buygoods.com/assets/checkout/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.1.3 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,53

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	9744
Entropy (8bit):	7.947784996073673
Encrypted:	false
SSDEEP:	192:dxJRh1EqKt3+YZNUCAAsaNgz7cdb40pl5XTaAJK6z720hOfft:x1Eh394CW/cb1TdKAwfl
MD5:	943D6DA26996076F058E54FB1AB9078F
SHA1:	3B078F0F475BD4AD000239EF08E5A66042C9D1D0
SHA-256:	637F08815BA691906F94A8EB0FBBDA82DEF012FEB85BBF2980E62795550D0032
SHA-512:	CA22B1D32AF60D0EA876EFB92858F9DC91C52BD8845E189DD032FAB785656C2BE26986D15B7FC38B07E9A2155C5A55ED0B92CA01E6F312340964335461C2CC25
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....7. %)()(..01,'0"'(&...........&...&&&&&&&&&&&&&&&&&&&&&&&22&&&&&&22&&222&22&&2&&2&22........@..".......................................@........................!...1"AQ.2aq..#Rr.B.....3Ss...$bCDc..................................'.....................!...."1QAa.2.Bq3............?..lca..../.\|....H.o .S.].4S.X,T..EM.PX,T..EM.PX,T..EM.PX,T..EM.PX,T..EM.PX,T..EM.PX,V..s.[.+6..QAg.x..5a.\U...~.s....R........4I.k.A.(.. ...(.(...y..1V.^..Q.....j_...#j.....{Vm...Q..##..)....t.z.4.4h..Q..E.j.j..,.....;.....j....Y\.)..?#[...r....fSE!_......@<+.G...,......h...t..MM4\T....MM4\T....MM4\T....MM4\T....MM4\T....MM4\T....Mz.z&+.7.Ac;I.....sT..F..B,.W.^.Q.P.cz8.P.qA$.\|..+.....\|B\.n.].).\|.<..QY..o..-x.D...H..l....k.N...r-.4HM....o=.L.xd..U..8...\..a#..F.Z.,WA..o.~.y....u.I.Ve.._....Q4..c.'._...].a.\|.Y.Mxq...Dn.#.)I...:...>...=...R.....~../...........V'\|yP...9~...z?/....}E/.\|.y..Q.....1.....G.......:..9~..{..._QC...

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	downloaded
Size (bytes):	231468
Entropy (8bit):	5.550108493083315
Encrypted:	false
SSDEEP:	3072:nt3a4IwyIJ/rcaWI0LNGzlwvOfyk3pBSJiO9xxc+E3OPoKZxTNYaF2i:t9yIJDcakGpUseiGxc+E3OPoKZlmK
MD5:	8E43A0F1FD32D340D5E3A7578241F3CB
SHA1:	CBD1BCD1F60F1BD5EDA67973981EE15A4A2344F8
SHA-256:	69AF9121D724B9C85BA3C4F381CBE0CECDA24A48C6F0A4DEAC1D09BB204904ED
SHA-512:	36F996A6D6ACD439A573E874BCC390E41E60E7DF2ADD592AEEB3F9870161D3390AB6C6F9CD76F18226A7FEC4D9314B55513050167AEE7E2B4BA912676CA77D10
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-62785402-76&l=dataLayer&cx=c&gtm=457e5190za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_regionValue":"","vtp_countryValue":"","vtp_autoEmailEnabled":true,"tag_id":10},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-627854

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	dropped
Size (bytes):	993
Entropy (8bit):	5.290277891359698
Encrypted:	false
SSDEEP:	24:E1MCXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1MCXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	5A13A6ACEA2053F0803A679994BF95A4
SHA1:	8B085792E5A6B6496CCFEE8939B262097791A9C5
SHA-256:	5039D00D6C216E14B323E0B0934940FC29123FDB861750AC29F95D46C24D60EE
SHA-512:	9162E9DCB913B47C188F445C5034BDA3232B2E6AD5E839F0ADFAE1CFE255E4F14AF1AB8CDA5301D58ABBBD8008824270A46D88F8BA8B71D6E9C6B292F822DD9A
Malicious:	false
Reputation:	low
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/3ede36f2\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3865), with no line terminators
Category:	downloaded
Size (bytes):	3865
Entropy (8bit):	4.844662423588397
Encrypted:	false
SSDEEP:	48:GbQ+/+q++PaKbrXP1uSntQhYtnhIWOk9ix8U3IzgVVVgkeOxwO0LP3/gOomosbux:GF/13X9uStzJYV3xh2zVvhw
MD5:	1891C0B34E4B1B8CD6442511D26ACEFB
SHA1:	7D107D20F7B736E32633FC8402B80A177DB8EAB1
SHA-256:	A08D4F0D8039179C7B1614D1837E909690323A1A64BEA3249DD6FEC7A9AFBB78
SHA-512:	9203C7F754D2559D753606433B81A065D83B5999345D64BDEC1852F6631F73CBC341291897C4571C56F4437A330C5311670BEB84C8166287F51049D6F67C411F
Malicious:	false
Reputation:	low
URL:	https://buygoods.com/secure/checkout/assets/js/places.js?v=2
Preview:	var geolocation,autocomplete,autocompleteUpdated,place,placeUpdated,country,address=document.querySelector("#creditcards_address"),addressUpdated=document.querySelector("#addresses_address"),componentForm={administrative_area_level_1:"long_name",louserty:"long_name",country:"long_name",postal_code:"short_name",postal_code_prefix:"long_name",administrative_area_level_2:"long_name",administrative_area_level_3:"long_name"};function geolocate(){var e=new google.maps.Circle({center:geolocation,radius:120});autocomplete.setBounds(e.getBounds()),autocompleteUpdated.setBounds(e.getBounds())}function initAutocomplete(){(autocomplete=new google.maps.places.Autocomplete(address,{types:["address"]})).setFields(["address_component"]),autocomplete.addListener("place_changed",fillInAddress),(autocompleteUpdated=new google.maps.places.Autocomplete(addressUpdated,{types:["address"]})).setFields(["address_component"]),autocompleteUpdated.addListener("place_changed",fillInAddressUpdated)}function fillInA

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7544
Entropy (8bit):	5.600445076313233
Encrypted:	false
SSDEEP:	192:tC9manAHaCam98AcDCDm4hAB4C4mDuAOX:o0hX/6FVa
MD5:	128D2490318B644089090BD366C07702
SHA1:	884BEFEECA288CBB650AA90C10895AF44B35FAB9
SHA-256:	0A89A567C216762984B83C513CC14B056602789C317EFA74574AB32E82BF6EAC
SHA-512:	F0D80AE0084F0BBDD9FE2C5FE04A1042D918A0ACD226BF3554769D1C070A3CFFD611C07C4652558DC69922DD95CA361CC0987D66EB28813F623426FB506B4B6E
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Oswald:wght@400;500;600;700;800
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Oswald';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlbHYjedg.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Oswald';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlSHYjedg.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Oswald';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlZHYjedg.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30015), with no line terminators
Category:	dropped
Size (bytes):	30015
Entropy (8bit):	5.478585822973082
Encrypted:	false
SSDEEP:	768:rAJsGbugMPnl5cPJMQ5r4PM8tzizyzMz5iqYkmnwFIGUILwILwKLNlZ:G3bBMPnl5chMQN4PM8m12nILjZ
MD5:	4ABE6BD8C1EB31CAF609ED1A61DA278F
SHA1:	D8FD5B79E4B14CE42DDC91F3337B3867329151AE
SHA-256:	F32D05F83039B9CC66E733C2BC0B25FE8B9D50253B861252821B44BCAAE9346F
SHA-512:	8FFA9C08B18133055A5897EAB0FC5FEEF02E6A6F08EE259722EF3AED2688B6E2E310D8E18A46C204BE1AAC05C7D8D0EACE804F95200E9EBC1EFA5A9CEACF32DD
Malicious:	false
Reputation:	low
Preview:	!function(t){var e;"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):((e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).braintree\|\|(e.braintree={})).dataCollector=t()}(function(){return function r(i,o,s){function a(e,t){if(!o[e]){if(!i[e]){var n="function"==typeof require&&require;if(!t&&n)return n(e,!0);if(c)return c(e,!0);throw(t=new Error("Cannot find module '"+e+"'")).code="MODULE_NOT_FOUND",t}n=o[e]={exports:{}},i[e][0].call(n.exports,function(t){return a(i[e][1][t]\|\|t)},n,n.exports,r,i,o,s)}return o[e].exports}for(var c="function"==typeof require&&require,t=0;t<s.length;t++)a(s[t]);return a}({1:[function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}},r=(Object.defineProperty(n,"__esModule",{value:!0}),n.PromiseGlobal=void 0,r(t("promise-polyfill"))),t="undefined"!=typeof Promise?Promise:r.default

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1004)
Category:	dropped
Size (bytes):	156349
Entropy (8bit):	5.577769733306636
Encrypted:	false
SSDEEP:	3072:hKp2fAMsAtH3bJQmH3W30FASENpGTRvU9Vxjizttq8d3mYcY3rTdVmD8uycf3Fel:hKpEfH3bOmH3W30FASENpGTRvU9Vxji7
MD5:	8D09972392315E3867A240438D2B992E
SHA1:	F9B1114442879BA62FBD06A358C8AD3277B987F5
SHA-256:	47389E1E244B6C5236CC293158720A06871841F9BA039F9344CF230B02D26506
SHA-512:	0D8964010E5C4FCEF472AEF3AE27A6FB6EA0D0498FADA509E00820ED172211D03B728FD569C277FD5ED984724EFE2E5806AC4C4DBC067B6C96CE40C7B0043E3D
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('places', function(_){var Hra=function(a){const b={notation:"standard",minimumIntegerDigits:1};a.Jg?(b.minimumSignificantDigits=1,b.maximumSignificantDigits=1):a.Ig&&(b.minimumFractionDigits=Math.max(0,a.Fg),b.maximumFractionDigits=3);b.style="decimal";try{let c;(c="en".replace("_","-"))&&c in Fra&&(b.numberingSystem=Fra[c]);a.Eg=new Intl.NumberFormat(c,b)}catch(c){throw a.Eg=null,Error("ECMAScript NumberFormat error: "+c);}Gra=a.Kg=a.Jg=a.Ig=!1},tz=function(a,b){if(!a\|\|!isFinite(a)\|\|b==0)return a;a=String(a).split("e");.return parseFloat(a[0]+"e"+(parseInt(a[1]\|\|0,10)+b))},Ira=function(a,b){return a&&isFinite(a)?tz(Math.round(tz(a,b)),-b):a},Jra=function(){this.Eg=null;this.Kg=this.Ig=this.Jg=!1;this.Fg=0;this.Lg=uz.TF;this.Hg=[];Hra(this)},Kra=function(a,b){const c=a.Jg,d=(0,_.Fa)(a.Ig,a);b=b.replace(_.pha,function(){c.push("'");return d(c)});return b=b.replace(_.oha,function(e,f){c.push(f);return d(c)})},vz=function(a,b,c,d,e){for(let t=0;t<b.length;t++){var

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1408)
Category:	downloaded
Size (bytes):	6007
Entropy (8bit):	5.057296180479387
Encrypted:	false
SSDEEP:	96:Kf4OtoAN5hoPyCTfqrfOZWmXUMVyXISnx/IIL6RUhqOSHM:zOpN5hoo5nx/30zOT
MD5:	10022AF8D9E06968B61828A472999BFF
SHA1:	1A3BB57BF4B9EA5CE6C13CDA05AEB7754094A713
SHA-256:	56D03E483C206D18B7E39B46438D869D783EA61F4E65694E0D4332B70056C1F4
SHA-512:	944AB452AB15F6AA1DBCD6B352A8B5F8FD093EDA3FE687045FC5237D7BA7F660FBA533F2EFD505D8CF3C21B93EBF789E7CB83E087D42E85071B78B90F2E8035D
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta name="Classification" content="business">. <meta name="Language" content="en-us">. <meta name="robots" content="noindex,nofollow">. <meta http-equiv="content-type" content="text/html; charset=utf-8">. <meta http-equiv="X-UA-Compatible" content="ie=edge"> . <link rel="stylesheet" href="/css/bootstrap.min.css" /> . </head>.. <body>. <div class=""> . . <link rel="stylesheet" href="/css/v1/formframe-checkout.css" />.<form id="vf-payment-elements" action="/vault/v1/formframe?a=6802&s=sessid20250110164829858&lang=en" method="post" class="form" novalidate>. <input type="hidden" name="token" value="z+HnNtHVsbSTK9/IDKtPklzHJk2slhmMj1x9SXKT9rnnHlIkqohLJaXTqaD/nYG1k+FeMb3Ygl9P4slO2lucmFCcYFHGRO2HQyOIECcMqk0IgCrWh4WnKeOhn8kymO

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	5548
Entropy (8bit):	5.339259567209906
Encrypted:	false
SSDEEP:	96:1OEMNMclOEMNMHFZKOEMNMjOEMNM4TOEMNMUy+aZjzBrgOEMNMPubqGIFuV4yOEu:cNMcsNMDNMGNM4WNMUq5NMGbqGIwV4DZ
MD5:	4BC672C05C21882D2A3BCEFF73DC6BF9
SHA1:	E174C25A2513D0F6F8DBA7284BA34E40BA77AA3E
SHA-256:	E9B0FFD113504BAE48AB96BFB28583B11DB871DC76DBCBF04FE3EB229B48BCD9
SHA-512:	5676BD5F7FDF5A3112CB5A9B5199B23E7D1D0DE00D16D09E0D789950CF06AA7E5068494C73017E3157A369CAAFC568B39A2CABD91E6789C48633594184B63907
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Roboto:wght@400
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmZiArmlw.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmQiArmlw.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmYiArmlw.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65306)
Category:	downloaded
Size (bytes):	155845
Entropy (8bit):	5.0596333050371385
Encrypted:	false
SSDEEP:	1536:d0bwW83RipVVsEBpy0cuJcf22RWb5CyVUpz600I4fM:d0bwlyVUpz600I4fM
MD5:	ABE91756D18B7CD60871A2F47C1E8192
SHA1:	7C1C9E0573E5CEA8BAD3733BE2FC63AA8C68EA8D
SHA-256:	7633B7C0C97D19E682FEEE8AFA2738523FCB2A14544A550572CAEECD2EEFE66B
SHA-512:	BAC54101DEBAFCDA5535F0607B5F60C2CDA3E896629E771AD76AC07B697E77E4242D4F5F886D363B55FC43A85EA48A6BFC460A66F2B1FC8F56B27BA326E3A604
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.0.2 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-font-sans-serif:system-ui,-apple-system,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--bs-font-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255, 255,

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	9744
Entropy (8bit):	7.947784996073673
Encrypted:	false
SSDEEP:	192:dxJRh1EqKt3+YZNUCAAsaNgz7cdb40pl5XTaAJK6z720hOfft:x1Eh394CW/cb1TdKAwfl
MD5:	943D6DA26996076F058E54FB1AB9078F
SHA1:	3B078F0F475BD4AD000239EF08E5A66042C9D1D0
SHA-256:	637F08815BA691906F94A8EB0FBBDA82DEF012FEB85BBF2980E62795550D0032
SHA-512:	CA22B1D32AF60D0EA876EFB92858F9DC91C52BD8845E189DD032FAB785656C2BE26986D15B7FC38B07E9A2155C5A55ED0B92CA01E6F312340964335461C2CC25
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/QZ5xuqBJH_s/mqdefault.jpg?sqp=-oaymwEmCMACELQB8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGDwgVihlMA8=&rs=AOn4CLCqf0M8zQlGVdPdvj1JueShXokisQ
Preview:	......JFIF..................................................."... ....7. %)()(..01,'0"'(&...........&...&&&&&&&&&&&&&&&&&&&&&&&22&&&&&&22&&222&22&&2&&2&22........@..".......................................@........................!...1"AQ.2aq..#Rr.B.....3Ss...$bCDc..................................'.....................!...."1QAa.2.Bq3............?..lca..../.\|....H.o .S.].4S.X,T..EM.PX,T..EM.PX,T..EM.PX,T..EM.PX,T..EM.PX,T..EM.PX,V..s.[.+6..QAg.x..5a.\U...~.s....R........4I.k.A.(.. ...(.(...y..1V.^..Q.....j_...#j.....{Vm...Q..##..)....t.z.4.4h..Q..E.j.j..,.....;.....j....Y\.)..?#[...r....fSE!_......@<+.G...,......h...t..MM4\T....MM4\T....MM4\T....MM4\T....MM4\T....MM4\T....Mz.z&+.7.Ac;I.....sT..F..B,.W.^.Q.P.cz8.P.qA$.\|..+.....\|B\.n.].).\|.<..QY..o..-x.D...H..l....k.N...r-.4HM....o=.L.xd..U..8...\..a#..F.Z.,WA..o.~.y....u.I.Ve.._....Q4..c.'._...].a.\|.Y.Mxq...Dn.#.)I...:...>...=...R.....~../...........V'\|yP...9~...z?/....}E/.\|.y..Q.....1.....G.......:..9~..{..._QC...

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	dropped
Size (bytes):	33718
Entropy (8bit):	5.600671129958146
Encrypted:	false
SSDEEP:	384:uYRgyq+e8L9x9KWcdwxEUpW84Gtry4BL8qyCkm3paPSbq18LqWH3X2Ckete8:2+1L9OYEUD49fHCddbWokete8
MD5:	ADFCF8F7164FCC5E3118337503FE7EBD
SHA1:	5E610A5C07B94B0AE755440EFD315652A09432CF
SHA-256:	FA0CA1B6BE30E279F3DE76BFFC8F6781352A8D1A6798D5EEE82D321C6705B13A
SHA-512:	DEF82F81F9444C71D710A7CC7BE6837765488E0CDA9647847034924F726F379288F15A6EC916A483C33B0D46B9C83EA5F76E960780A351F56E0162C99A2402E8
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var $qy=function(p){p.mutedAutoplay=!1;p.endSeconds=NaN;p.limitedPlaybackDurationInSeconds=NaN;g.kB(p)},LSv=function(){return{L:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},j:[{L:"path",TB:!0,B:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0.49 2.49,-1.59 .5,-1.1 .81,-2.70 .81,-4.90 l 0,-2.40 c 0,-1.6 -0.11,-2.90 -0.31,-3.90 -0.2,-0.89 -0.5,-1.59 -1,-2.09 -0.5,-0.4 -1.10,-0.59 -1.90,-0.59 -0.59,0 -1.18,.19 -1.68,.49 -0.49,.3 -1.01,.80 -1.21,1.40 l 0,-7.90 -3.28,0 z

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3266
Entropy (8bit):	3.998588979681478
Encrypted:	false
SSDEEP:	96:xhvZR7GXTcI1TZagxthDk5l9CFKgRBqnMbNFXn8NjEVCvE:TPuzbkD+zqOj4AVCvE
MD5:	387E86C389666FAE52146858CA65DF6B
SHA1:	E11C568FA705B9E1D994FE494A2A9544F57E3EDF
SHA-256:	3F8C62B36198124E39FE0D48535FEF486D0EB6174159C5C72B0FCAEDE72222F2
SHA-512:	4E06F1384F26FBF3E61A9514EF80852A82292F813561C52C248B2C22F16B3829C8E96D31D5C79EEFC3C7F9E537950B8852DC0C4FA40EF721BE075EA28672F9E1
Malicious:	false
Reputation:	low
Preview:	<svg width="101px" height="32" viewBox="0 0 101 32" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg"><path fill="#ffffff" d="M 12.237 2.8 L 4.437 2.8 C 3.937 2.8 3.437 3.2 3.337 3.7 L 0.237 23.7 C 0.137 24.1 0.437 24.4 0.837 24.4 L 4.537 24.4 C 5.037 24.4 5.537 24 5.637 23.5 L 6.437 18.1 C 6.537 17.6 6.937 17.2 7.537 17.2 L 10.037 17.2 C 15.137 17.2 18.137 14.7 18.937 9.8 C 19.237 7.7 18.937 6 17.937 4.8 C 16.837 3.5 14.837 2.8 12.237 2.8 Z M 13.137 10.1 C 12.737 12.9 10.537 12.9 8.537 12.9 L 7.337 12.9 L 8.137 7.7 C 8.137 7.4 8.437 7.2 8.737 7.2 L 9.237 7.2 C 10.637 7.2 11.937 7.2 12.637 8 C 13.137 8.4 13.337 9.1 13.137 10.1 Z"></path><path fill="#ffffff" d="M 35.437 10 L 31.737 10 C 31.437 10 31.137 10.2 31.137 10.5 L 30.937 11.5 L 30.637 11.1 C 29.837 9.9 28.037 9.5 26.237 9.5 C 22.137 9.5 18.637 12.6 17.937 17 C 17.537 19.2 18.037 21.3 19.337 22.7 C 20.437 24 22.137 24.6 24.037 24.6 C 27.337 24.6 29.237 22.5 29.237 22.5 L 29.037 23.5 C 28.9

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11687), with no line terminators
Category:	downloaded
Size (bytes):	11687
Entropy (8bit):	5.352374446256529
Encrypted:	false
SSDEEP:	192:00YvH0yVvplBrsO804YQAIxrvENmaPmhO9uBnfzBuFv+:1YvH0yVlV804YtArIhPiO9uB45+
MD5:	6748DEF9013320BA8D18362C5D3993A0
SHA1:	F146FDECCDE10B760860E4B7F2B16DD26C30303C
SHA-256:	99EA092340EE8EE641A1FA07B1894FBF440A05DF971E7297FEE1758C508677DA
SHA-512:	63D8594D15DB200C62DBD8B5AF2F14141127738FDA0B3F471CA2AD481735A6FF2C01D0D3E63076A86B3D3D20E895730961CAA89695B0E581B854443B631BB673
Malicious:	false
Reputation:	low
URL:	https://checkout.paypal.com/web/3.97.2/html/dispatch-frame.min.html
Preview:	<!doctype html><html><head><meta charset="UTF-8"/></head><body><script>!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).frameService=e()}}((function(){return function e(t,r,n){function i(o,a){if(!r[o]){if(!t[o]){var c="function"==typeof require&&require;if(!a&&c)return c(o,!0);if(s)return s(o,!0);var u=new Error("Cannot find module '"+o+"'");throw u.code="MODULE_NOT_FOUND",u}var d=r[o]={exports:{}};t[o][0].call(d.exports,(function(e){return i(t[o][1][e]\|\|e)}),d,d.exports,e,t,r,n)}return r[o].exports}for(var s="function"==typeof require&&require,o=0;o<n.length;o++)i(n[o]);return i}({1:[function(e,t,r){"use strict";t.exports=function(){return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(e){var t=16*Math.random()\|0;return("x"===e?t:3&t\|8).toString(16)}))}},{}],2:[fu

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11461)
Category:	dropped
Size (bytes):	11890
Entropy (8bit):	5.1977429133822834
Encrypted:	false
SSDEEP:	192:4O3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjCK:4dRCchzzYfnqejah3e1Q5l8h6vbK
MD5:	008F0232DA95A3E68A29C0EDA6177429
SHA1:	35479914A1C2844899C75809987FDD83C27834E4
SHA-256:	EF34F22362C2FF3F9CD440047BFB16D7D59148B296B7B64E68D8C262EE67E9F8
SHA-512:	A0A248A6E0C490635648A2C220BB497A10F638E183568334182AAFCE5AB2786F717AF10032AAA33F854395A45E7AE5F48DE254B76C155C630D8A638BEE0F8144
Malicious:	false
Reputation:	low
Preview:	window.FontAwesomeKitConfig = {"id":58743174,"version":"5.15.4","token":"1dd5876648","method":"css","baseUrl":"https://ka-f.fontawesome.com","license":"free","asyncLoading":{"enabled":true},"autoA11y":{"enabled":true},"baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"minify":{"enabled":true},"v4FontFaceShim":{"enabled":true},"v4shim":{"enabled":true},"v5FontFaceShim":{"enabled":false}};.!function(t){"function"==typeof define&&define.amd?define("kit-loader",t):t()}((function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var o=null!=arguments[n]?arguments[n]:{};n%2?t(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):t(

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1960 x 1080, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	875993
Entropy (8bit):	7.99273026393617
Encrypted:	true
SSDEEP:	24576:iZwBc3fnC81f+eAk9+nGrs/YY25DAYllGHc:iZf/bAkJ4/h25fuc
MD5:	5B44796B212BBCA32F52F69D7A395D54
SHA1:	ADDF36869E43FE16755813A59051DD9DA8BF7E5B
SHA-256:	DF7650DB6E54F47D8C702DA1E53A05EC8AE45F0FF5F417CF74F7785548271370
SHA-512:	CB50B6E94F92DC180BED0DF74FAA45AE21E82E490BF84CBB338ABB208B4BEFB6B23D87FDC84F2431780864EDDD4805914C912B36D238C336BBCE98B0CA3B8FE6
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/image5.png
Preview:	.PNG........IHDR.......8......Y.g.. .IDATx.....d.u.....:N... ........%..$.dY\Y.L.kYY^+.x-{.#+q..U..HQ"M.Q..A0...1....&.t......UWWWu......C....._.{.,.2............0..............@@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@..........................MA@.

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3376
Entropy (8bit):	7.938835039207941
Encrypted:	false
SSDEEP:	96:mwVjCEWiC5OidOZc1ZLCh9xw+n4h5fuRjC82ZsQbNU:zV/j2OyZWnxw4W2wJzba
MD5:	ACD75CCB7F896551E91AADAEDF5E4748
SHA1:	596687F79962781C81E88C85BF6199C12C47C90F
SHA-256:	85D1E370BDE8FA0A914EAB759E859C7B1CA85A9DD1E58B5A8F675037B7AD9A51
SHA-512:	C19F364EF87FA98689046E38C1FC777B7F97BFE31329BB486FCB11F34D37152627B7DB3183D4889B2679961EAD2AC58A48510348BB07F10D23D16C5419F45171
Malicious:	false
Reputation:	low
URL:	https://cdn.buygoods.com/assets/checkout/img/trust-guard.png
Preview:	RIFF(...WEBPVP8L..../X...M(h..Q..>..r.... F.K.$YB@..pA.mS..<...5.$E...>....'..AQ.'....c8...p..'b.............)..b34K.8..m:.....1.....eW........b.9...fff.......\|...efff.<....Xj..3.c../2...:..1j...l....t..vd..U.'s......yc3T....$.""....V.g.l.m...l.m....3]U..~k.Vm...K..5f6h...r.5f....VrL.b.VhAO!..v.....<..m.e...]]....k.....Yfm...@e.TS....{%..j...&.1}....v'..Lu`/.:.t... ..g......ls.Q6.~.......O..K....Y...z..#..4.Ua.-4..2..+{.A........<.c....J..K.F..(...Ft..y7....SDC.\|.%.6..8....?..G.....`8.<..p.u...s.C...u.....&g.y.U...I..z..U=.........PB.).,.D.....i.&P)UJ........iTJ.R..Q.....s.a...\.q..S0...z.....J`..XJY...7\.<.4.D.7....Kw!<../&Z?.7..[..d..5_..}..g.J.#..].z.t....Gwy.^.n....x.'..}...:'=..Zqx..o...x....[b.C..s.~ .e..zv3..}.../0..E3N..UN2Vi...$rA[_.R..?%..%S...".nT.FJz.S.....'...?z.9&.j-H..X....qIi.$e.#-j....E{.....p.d........5...../dz.S.sG.&UdJ...;dO*'?.+ikLTK....:r.ca.Q$!z.Y.s...#k..<..U......Y...O....l..rF..JH$..7....C..h"I...t...<..&.~..6..m9...

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8756), with no line terminators
Category:	downloaded
Size (bytes):	8756
Entropy (8bit):	5.743391582619129
Encrypted:	false
SSDEEP:	192:+7G2VO9Fhp0o0/FklEH4jXBmjOF0eGbI5Mz/O+pvsm3gfa8RC:+fVeXL22Xq5dbISzG+dm10
MD5:	ECDCD5826592375693B8FE2C417F22DB
SHA1:	E548FA9412D3FFA10D41CC236A5D4B8A95BABA8A
SHA-256:	B90500F7AA186358B7D45C2CE3AF04ED79381668AE009C754447168E8B00C8BA
SHA-512:	AA7961487D7D9043DAE26586B0E1FB93BC37D9754B0294B17DD097BCC955CADFCD6AFC0922641FE142724D84E0607ECD4789CF385023A7B1D91B3A8ADF3BFD44
Malicious:	false
Reputation:	low
URL:	https://buygoods.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js?
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(W,h,i,j,k,o,s,x){W=b,function(d,e,V,f,g){for(V=b,f=d();!![];)try{if(g=parseInt(V(492))/1+-parseInt(V(494))/2(-parseInt(V(551))/3)+-parseInt(V(483))/4+-parseInt(V(564))/5(-parseInt(V(493))/6)+parseInt(V(476))/7+parseInt(V(471))/8+-parseInt(V(482))/9*(parseInt(V(515))/10),e===g)break;else f.push(f.shift())}catch(E){f.push(f.shift())}}(a,673243),h=this\|\|self,i=h[W(522)],j={},j[W(574)]='o',j[W(519)]='s',j[W(580)]='u',j[W(570)]='z',j[W(513)]='n',j[W(477)]='I',j[W(587)]='b',k=j,h[W(512)]=function(g,E,F,G,a1,I,J,K,L,M,N){if(a1=W,null===E\|\|void 0===E)return G;for(I=n(E),g[a1(556)][a1(488)]&&(I=I[a1(550)](g[a1(556)][a1(488)](E))),I=g[a1(508)][a1(520)]&&g[a1(491)]?g[a1(508)][a1(520)](new g[(a1(491))](I)):function(O,a2,P){for(a2=a1,O[a2(563)](),P=0;P<O[a2(542)];O[P]===O[P+1]?O[a2(528)](P+1,1):P+=1);return O}(I),J='nAsAaAb'.split('A'),J=J[a1(507)][a1(533)](J),K=0;K<I[a1(542)];L=I[K],M=m(g,E,L),J(M)?(N=M==='s'&&!g[a1(490)](E[L]),a1(470)===F+L?H(F+L,M):N\|\|H

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	19370
Entropy (8bit):	5.033263605107006
Encrypted:	false
SSDEEP:	384:nlMzqkH868Wli8AsV1uR74RV8R8B/kR0pAVMvzfTwtaaR8pyS4BGB3:nlMv868WlidAQ1YV8R8B/3ns1RS4BGN
MD5:	1787717C3B4A382025EA23B657F4333D
SHA1:	59B7695C5BDBEB7CC99A9EE99B66FA6B664B1101
SHA-256:	B3A6DD5A328125136A911B964A9493B6930A0F952E85C8C109D0B20936F7CE60
SHA-512:	F36D1B29BE3C07487C09B77D5FBD7635E9F4CC601F3BEAB97F792E7A2EF9D765F3B3CA355B4D290AB3E69D0E02AA40B41FE0829B412E88C43EA46892812469A5
Malicious:	false
Reputation:	low
Preview:	/*. The `cardsecure` object represents a JavaScript module designed to manage and interact with payment form elements on a web page. . * It provides a set of functions and properties for handling user input, validation, and communication with a parent window.. . This object facilitates the management of various form elements commonly found in payment processing, . * including credit card number, expiration date, and CVV (Card Verification Value). . * It offers client-side validation, input handling, and communication with the parent window through postMessage.. . @namespace cardsecure. * @property {Element} formElement - The form element containing credit card input fields.. * @property {Element} expiryElement - The input element for the card's expiration date.. * @property {Element} monthElement - The input element for the card's expiration month.. * @property {Element} yearElement - The input element for the card's expiration year.. * @property {Element} cardElement - The in

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 88x88, components 3
Category:	downloaded
Size (bytes):	1228
Entropy (8bit):	7.035253532151294
Encrypted:	false
SSDEEP:	24:pAoTNhUlLOTrD9/wmiha1b1lvlrGF7H2JtZSIDg+FkrjNK:pNTNGKbeNulW7esIUIaBK
MD5:	AC7B5519201F4F4956A48C3D22F0A3FB
SHA1:	33A9F0092115644FB5004301EF78BDD30938512D
SHA-256:	B5DD3B089D57934FA2D07C93F9C4B07F0B9FF5BBFC6E60F6954104BB054CBE51
SHA-512:	0504B141C085BB4172222F02FCF6F9DA243F656F020C8256AD040502677A10F5F64D54EF4DCD34C012BC600DBB1A2AE7FB2FA76B4E1E1B5D63C2548AA29400CE
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/ytc/AIdro_m9vnpvLDuCjN3benUeTYbdwWWXR-SG2Q9WZSq15GVI1DuDYBub2lf4hmef0g1yidFIrw=s88-c-k-c0x00ffffff-no-rj
Preview:	......JFIF......................................................................................................................................................X.X..................................................................!..."1AQ.2#3BRar.........................................................!1."2AQ....aq..................?..k...............................................Qt.......rMA....v.o.o..L.\|8.\|6.TJ...S.3...9.K.Ze^zjj....=.+......p.R...x._....>..q_..Y...{..U....>_...\|..5...q.q...#Bm].{..z.v]=5t....#c..J+2XQ.k..2.....I+Z....&U..pm;Q$.ko9q.TL..~..;K.v.5.U..z..=..F0.dzY.&......3.)..`.$F.U..8i.....[...3.p...=...........o.Hq^.=>.JVUZ.P...K:mB]z.).....y.N...4=.[..3^..z.....uV.~........7.3..V......f...o.K.i....f..\|j...})_.Sz..X>5viz.....mv..#.8di.I[8:......9j/.s)G9I.>...N.X.M.[..Y...`eX....~.-....u ..IF........i}..Rz=T'&.v...u.*r^\|\|.x..xR_...~j]Z...~]r96....V..b.~]r.K{.....i...Q...~....E..N.~"I....f....O.z"J,....~.{.7y>..f.N..Zm.h...F2

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2113
Entropy (8bit):	7.87535424576112
Encrypted:	false
SSDEEP:	48:JMrXNsC36DF/YHizQBlnJR2CCupgsh6WLW+TttnJhJ:JMrt6DF3Uz2CPnQWLPlJj
MD5:	6A31FDE58ADBACB8B7AD7A2C9D14F9C3
SHA1:	481F7EFC79F454C7CD5C312218E47F219D739A3C
SHA-256:	384D6F3CD83852812FD7678F77EC73619CD81A96EB2389C33E88D8C3EBFD1C24
SHA-512:	E365E57A5A678FB3A48BFBDCCB5677055D3138450A353C9A0EEAA56BBF879FCD6C41E21A21CEDCA0C7C28E236BB22E49CD32F430EE1055D6887FB01A2F26FEB8
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/shortcut-icon.png
Preview:	.PNG........IHDR...0...0.....W.......bKGD..............IDATh...kp........B..D`A....j[T.V..Q[g.;L.. ..N.N.q.J.^....l.bm..i..z..U...hQ.tPH.... ......$.........{..<....9.y.y.._.A.uo.u.../..8Wy.v.>GLH... 0G".n..w.........w.......+.0.X..6.EK:..c....'..1..WB.m..%..._S...HZ.&.^>...i......U..~.%..U.).,..]v..G.8..d%..g?..`...IJ].k.1.l.m.}.V.`.>,..v.T.g.\|e.\)......>.y(X{.igc.^.\.z..(.5!...DA..E...f`$..)..... .:^.;..j..v....V..3..v.-.]..=_(.>O.P.y....0....B.........IV;....b..1mEL......Q.i.bZ.u~..}.B......Ap...........Ft..SeJwz.b..b..0.p..sm+8.:#D..D...-.fmF.H...\..a...J..........p.....u...e...M.L.T.....!...xY.4...8W...1.3....g.r.5...r.F..X...4..d......z..xS0+T..G.(H[ ..<.U.......L..\|..d.u..J.Y..'..z..fX"..h~..n..P...iJ...Y....C..... ...n.M;...90GB..31.S...g.x...a..A.w.....7....`M.{.a.k...Tr.l...,.G.MtbO..X.@..f.jwt..%..6A..Od......]..8.\._1.qgR>.,...>l8....r..F/..\|.\|....I.}..Y...w...l....l.@.....P.#.I>^.u...f..$.c...Y.i..+..-.v.5.y..W!.G

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53624)
Category:	downloaded
Size (bytes):	54903
Entropy (8bit):	5.710715163123397
Encrypted:	false
SSDEEP:	768:jrBpR5A/yvsBpUrgmgGVbddlDCIAJBWFrevESaeOJV24Lcc6pXQUpncsunF:jrLAnC8m13dwIACrKYJVVT6pH2F
MD5:	812113DB16365B6B4783F3425982B6F4
SHA1:	C6A80834B26E7E52053C588EF27DFBE61754D628
SHA-256:	F29F9952DD8EFEBE88BA66394F3518D9167842F12D55FBDFFCC6180E3A8F2B73
SHA-512:	DFA937F76AF9919AC36B9FEB6EC2FF9F0565810909967F38380A7E332FBE35B9381A46E6FD1AE46AE026F2FAF15E4F1D658C8D0DBF73A99997EE55E837DE86CB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/8p-ZUt2O_r6IumY5TzUY2RZ4QvEtVfvf_MYYDjqPK3M.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function X(w){return w}var D=function(w,l,W,b,z,r,A,Y,c,Q,U,t){for(t=47,U=12;;)try{if(t==87)break;else{if(t==l)return U=12,c;if(t==47)c=A,Y=J.trustedTypes,t=37;else if(t==11)U=12,t=b;else{if(t==31)return c;t==b?t=J.console?w:l:t==W?(U=33,c=Y.createPolicy(r,{createHTML:k,createScript:k,createScriptURL:k}),t=l):t==37?t=Y&&Y.createPolicy?W:31:t==w&&(J.console[z](Q.message),t=l)}}}catch(E){if(U==12)throw E;U==33&&(Q=E,t=11)}},k=function(w){return X.call(this,w)},J=this\|\|self;(0,eval)(function(w,l){return(l=D(29,24,41,25,"error","ad",null))&&w.eval(l.createScript("1"))===1?function(W){return l.createScript(W)}:function(W){return""+W}}(J)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (460), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	22339
Entropy (8bit):	4.747515364686921
Encrypted:	false
SSDEEP:	384:Ir5U7+pa54eR06CC6hXoNwrjPivt6LUx6f4VujvKlIeSPL8Dr0zaUbYKjCuqIDx:Iuka54e+6CC6hXs2Pivt6LUx6f4Vujv7
MD5:	6FF9D9F8391D82ADD012F27F73855ADB
SHA1:	25FA3039502CBB4F35DB5CA2B45DA449E960EE5F
SHA-256:	AE891FD97800C5D6323007152EB75DD2BADEB1D9D57CC1FBBDC08623D4D43731
SHA-512:	B2833F17A807D6C0F044FC850B2C5930520754D06FCAFF1BF6D25257F57EB23FD8A9A572D9BF9E54B8E147EBEB6E7AC1BF7BAE9359B771C1C92660E9418A2A73
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. Title -->. <title>Sell More Online \| Yomali group</title>.. Meta Tags -->. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta http-equiv="x-ua-compatible" content="ie=edge">.. Favicon -->. <link rel="shortcut icon" href="https://cdn.yomali.com/images/yomali_favicon.ico">.. Sylesheets --> . <link rel="stylesheet" href="/assets/css/yomali.min.css">.</head>..<body onresize="if (!window.__cfRLUnblockHandlers) return false; OnResize();" data-cf-modified-88ec49cc75965872b41f7392-="">.. <main>.. Header -->. <header id="js-header" class="u-header u-header--static">. <div class="u-header__section u-header__section--light g-bg-white g-transition-0_3 g-py-10">. <nav class="js-mega-menu navbar navbar-expand-lg hs-menu-initialized hs-menu-horizontal">. <div class="container">. Responsive Toggle Button -->.

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	791204
Entropy (8bit):	7.992209814144656
Encrypted:	true
SSDEEP:	12288:POO+n8z4C38b0OOqDJ+nU7I5uRYjLSDKvpNvOo/OpVq4eyMA5P4KOEAsGz6:2Vn8rUEq/7yj26/Oo/oDeyp5PHAsj
MD5:	BCCE8374B85BEDD32E84F480ED502103
SHA1:	7A6C42FE4FD3CB52EF347585C6A482C26684355B
SHA-256:	5886893921B294D3974632E26155F9AA2EEBDCA22F0B9D847FD246D68C5F220F
SHA-512:	D9E5C0A314109DC92DBDF677021BF5E4931493D4708C2F93957BD6CB748AEFF5BB73DB7B81959B457B68326ED1644DE7A30DAC7672E08887D8E5320EF834284D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.................. .IDATx.d.gt..a..a...I.D%..... ......A.`.uH.9...I#.h$.F.%[.l.,.5.];.&.:m..n..n6..l..e.^?...s.=.....\|......+...g..O..}..\|.......y.....?.?2MnI..E..T.QZ_A^U...Y...&.N\..Y.L....o*..\|.k./M6....T4..S.AZ..r.r...A... -......id.._\B^Q1.9..dd&.U.C....&1%...I.0y<<x.-.~...\....#M.H.TAnI.y.HZ..Mz....6..&.uz.Z.0....&......P.........m....h..)..J....XK.....z.....C.&..].>..ya...,-.3h..4.#4....z..i..c..cC.uP.eC.a...........McO.e6.).%.J29Q......:!.Mu..D.%..(...%....\|Ndf~.;MI%5;.....j..R4Q..Q...YN.FN.VA...a.....Z..:.:).^.\|....Gd.R...........fw;..vZ.N4n.Z.;..N<.a.o...9...'[/.q.~..Ox.}.".....a....l..X.X.[...WY........Zc..m&.m.v.....VqL...r..Z!..z...x....8?.G.?.A......W.?...~.3.?.q......_5.....w........#=O.PV....F.......?:f...#....Y6o.0...s:.{&.gz....f..J....Rr...5g.n.#....>.e]b.]b...T.D.G5X"z..z..:.8p/....$p.a......L..&\|y....O.3~...I7.s..Z.S2.'D.=.q..K8.bzG[h1J.....p.?)'.ga.n....y#..n\.n.k>.O....#k...T@^y......(.;.xbmL...wm...q\;.

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	43487
Entropy (8bit):	4.6872398982449095
Encrypted:	false
SSDEEP:	768:vmG0KfYDSZ3Vt5QZBPB0O0pWH1VyL5tc1n2XoMt:iKfYDSta09SSF
MD5:	C6F2FE4B799E5B5CE4EB0DFF12C2F546
SHA1:	AC26849BD8609085691971EF6F74EDF9AB13A21B
SHA-256:	A80967BF5D833B3C872F80E7D08335B52F75753E1A4572F5DFA5497B52E1FA7C
SHA-512:	EAFE325F02F4FF577DEBE99A273D263EF799765987BBBE8B5093921CFFFC350048B2565593E0E8E25D872903E9C6F8666BBFE4A4B2AEDF49DE9745ACB1BE2A81
Malicious:	false
Reputation:	low
Preview:	function countryConversion(input).{. const paypalToCountry = {. 'AL': 'Albania',. 'DZ': 'Algeria',. 'AD': 'Andorra',. 'AO': 'Angola',. 'AI': 'Anguilla',. 'AG': 'Antigua & Barbuda',. 'AR': 'Argentina',. 'AM': 'Armenia',. 'AW': 'Aruba',. 'AU': 'Australia',. 'AT': 'Austria',. 'AZ': 'Azerbaijan',. 'BS': 'Bahamas',. 'BH': 'Bahrain',. 'BB': 'Barbados',. 'BY': 'Belarus',. 'BE': 'Belgium',. 'BZ': 'Belize',. 'BJ': 'Benin',. 'BM': 'Bermuda',. 'BT': 'Bhutan',. 'BO': 'Bolivia',. 'BA': 'Bosnia & Herzegovina',. 'BW': 'Botswana',. 'BR': 'Brazil',. 'VG': 'British Virgin Islands',. 'BN': 'Brunei',. 'BG': 'Bulgaria',. 'BF': 'Burkina Faso',. 'BI': 'Burundi',. 'KH': 'Cambodia',. 'CM': 'Cameroon',. 'CA': 'Canada',. 'CV': 'Cape Verde',. 'KY': 'Cayman Islands',. 'TD': 'Chad',. 'CL': 'Chile',. 'C2': 'China',. 'CO': 'Colombia',. 'KM': 'Comoros',. 'CG': 'Congo - Brazzaville',. 'CD': 'Co

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2043807
Entropy (8bit):	7.990580029825027
Encrypted:	true
SSDEEP:	49152:cWmbU4g1/sU8P+p1GdCuF/GvHM1MrrI4bkQcLKPFTUp:cWaN2spWp1uCuF4HXLbxcKUp
MD5:	ED4D4DAD66923BBFD148D30BEE380FAC
SHA1:	D52EB8DF86699E732575D154026D340C6FDE2B1B
SHA-256:	5A71C6EF80F6BC0D8EC0C93F60DD8C1285FF85F90E553498E982DA1A5F664476
SHA-512:	AD96082E3528B031F9FE37CAF3A770EF186F7CF347A5BA84546A715349A7C79E2B3FD66BA2DACD86E4A11A51496041E7BA640DD44752DF93BAA7150C9FA97483
Malicious:	false
Reputation:	low
Preview:	:....1....QZ5xuqBJH_s... .....0..tj..........p..\|........\moof....mfhd...........Dtraf....tfhd....................tfdt......@.....trun...........d..n........................ .............................../...............5...............4...............................!...............................1...............~...............'...............}...............$...............................6...............................+...............>.......................+...............................................................;...............t...............+.............................../...............k...............;...............................................................I...............................:...............................%...............................4...............s...............2.......$......._...............................................1...............................7...............m..............."...............S...............>............

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 768, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1762184
Entropy (8bit):	7.994564016149837
Encrypted:	true
SSDEEP:	49152:oZeeuzjK3nD3KE+l/K+V4A/sGmbIeX+K5r:oZeeuze3nDB+dV4A/NeOs
MD5:	24E39C978E10A45B60185A807B0E591F
SHA1:	0C2B2F0C7118D7B640221D65E86BF98682549072
SHA-256:	6309D6433E95A9BC71A0DE06449710D2670200E4628730DFB28945098A9605F8
SHA-512:	CC6CF99A6D2102AD2478F6A188558271C29A3CD06D34B1C817696FACAB3909E859C06220D4E084D5CDD5DC609782A89A7B58B770C2A23603D7C5EFB8907DC4E2
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/image12.png
Preview:	.PNG........IHDR................... .IDATx.l.uxT....9........)E...$..x.k..B[(T..[p-P..w.I..{....&6..$.7.s.Yl..u~.?.....5...Z..y.7..l_.....[...b....K~.B./.V..t..._...._.v....v..-_..X...s..Z....c.w......k.WxmY.....n...sf.Z;~...k...;=....MS.y........^...k....{l:......i..<......k.G....'.J...._.+...y.d.. ;.....u (..p.."ED.Z..gD\.1....&.HK...oCR.=..9..nCZ.=..6.e.S]`....U.>.....Q..S>....t.M..e4..1.U..j...m2...6..X7...iT.M..b.U.z..L..H..B...(.2. C..t}.R..M1!7..dk...I..&%J..8[b.D.?5'$....G..z...Nr..%Y6...".......;....(z4...m.;m..#.~HM..j.?.F:..i.......B>....hlz.... .MU.x..SU.....l+..-.~nB.sc...II1!)...$......TS.S.O6'6....1.a...X..%..[p.....r....p...N.3..uS..Ys..-~Q..$K..u"...21I..<.2'SjIn.%...dW..YfJF.n. ...J1...UX.ZaAJ...f.T..RkAz.%......QXiJa.1.5F..O'.a:.....M#Uj@J.)).".+..zR....E.5..n&IE.......0'...y.kCb.-.....D45.#k2..y.ur..rc...Q.b@U.)e2C....[.O^..y...T..UeF.TDV..L.....$U..WfNh...i".S.<J..7...H.w#.....$8}......MA.....)ot..U.....bj.8:U...}

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 311909
Category:	dropped
Size (bytes):	84175
Entropy (8bit):	7.997180529574413
Encrypted:	true
SSDEEP:	1536:VZaiO3MFf2fiSW61iEC0MfMt7nuA0RCHzVDv3oVqfHQ2dKJbfOwRikLZB/LqupVk:VZai5x2fiSW68E0finuA0R4ZT3UqPXdZ
MD5:	E166DBF7D812AC940E1646D638229B20
SHA1:	29AA9A4BDE3006FFFEAAA99045554D810DCFE807
SHA-256:	103014F7317310BEACF0926C28D6E713E514B387632A6B5ABEB3D83F7839EF7F
SHA-512:	7282F3D5CF7D2435503979B5D83841E4F26519A1D6CC4C6762BEFC72DA237DF4CA1ACFE163F99DE54271F74BAE1CEFD4C3B8D753C84E93F907ABB7C5D8D1E443
Malicious:	false
Reputation:	low
Preview:	...........}k{.....D;..;.@..\D{.......H..4....62#.L.OI.......=s.4.u-.J....M..1.e29k...I..=m.'..f..iv....O&g...V.\|.l..['.vk.I..4...9\|9o_....dc..G.P(..9(.y..:S.\|Zp...K..+.\j...SZ....D.w..n5..A.,.D......c../s...6/.....d#1..H.7..f.#N../P.Z/.Z.. .n.8s.....T....w.>.<...T.,xe.8.c..Tq...l6....JS.u./..=...&..uPI.m.......E.(.,}.../.....Ww..(...a.....Y.{.,XRn...T.=..o...en..@.S.g....+..............;.~h....z..._.l7..u.Y.R.1..h2.~X,.vPQ..Vz}..Q-.b.`.0.i.4Z(Vs.....y.+dEsb.".....T.%.V8.).....\..D..\|..9F3:..W.,..,...o.\|.....0..Le.(.....?......o.w...qa.4#4..#fm#uf..q...r8.....#2..bd#LML.;/.$.......G.AGa?..J+.!,.Q.........Z.&.N...Tc...h.....fm.@,....W..CT.....;.g.Qu.^#.........8..x..K..N..Nx.j..a...0.O..5(.z3z.o5...c.....[V.....4M.s..^...c.V.....-lb.V.3....w.c....>.V .kw.O......cS[.............#d.8....#....MVUe`.q#Q......}`a..)G.8....F..,..9.@_.27IQ.A1.Q....../.....[../...F.d..1.........,.pF.P....F#...Fh<6C........u.J.y/...^,j..a...z.G.q..:..b..F..:.......

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x540, components 3
Category:	downloaded
Size (bytes):	44805
Entropy (8bit):	7.809168133937819
Encrypted:	false
SSDEEP:	768:AVEWjmDVrj29r4Vb1CAgrhzrpQJ0de56SBuXSR96EOryKP125U0zFXE:AV+Cr4x1VgrBrBdS6SBlOlPsGAVE
MD5:	3D56057323D4BED5A603D90AA0922924
SHA1:	E21C5F76B10065D47CC08879ED3DE37096275F5A
SHA-256:	EBF3C3262D6309BA0FA5380E3E60F61CA917F7AD52A6E4599C897DEC0CF24238
SHA-512:	228CE270CFDF17F8732837B29EE3534AED25270168B96E9761347AEF336C2CCDA85153B19F53BB51E5DC5B248732B384648F82E6B5EF85C81C57120C4D94CAC6
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/bg.jpg
Preview:	......JFIF.............(ICC_PROFILE...............mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;...........".....................................5.....................!.1Q.A"2aq...BR...3b.#r.C....................................................!A1............?..`.."qMg~.l%.o......#]h,S.../J...H:....z".:3Q.Ru.d........K.m.[.T.Z.,`.5.n.f..<..k[%o.L.r....E....$.T:R.j...n..M..`..<

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	165619
Entropy (8bit):	5.291167602276955
Encrypted:	false
SSDEEP:	1536:s5aCr26R5149t+FMXw+/LBkYIXgcQiAytIZ7LAelWMYPvHAFq4gzqGBjrmdy6sDA:4NR5y9tXFkbbXelAAg4gzNkr
MD5:	ED8DC464FBD29476D2D886D74CD136AF
SHA1:	E0F1026E2E2FAC72E582F28E52AE944089DDAEFD
SHA-256:	5AE654F97A917AD7366A8466329647DF036A526D5881A1A017F480E468DA5314
SHA-512:	61E4378F875557CD1A93174C2E32DFF80ED26CD38500B6E11BDA5DA47100D3702A2C467994D617A9685E5AC3DB9D1BAB1710CD8714C3398F76D532D2EB12B3FC
Malicious:	false
Reputation:	low
URL:	https://www.datadoghq-browser-agent.com/us1/v5/datadog-rum.js
Preview:	!function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r),warn:n.warn.bind(e,r),error:n.error.bind(e,r)},o="https://docs.datadoghq.com",a="".concat(o,"/real_user_monitoring/browser/troubleshooting"),s="More details:";function u(t,e){return function(){for(var n=[],r=0;r<arguments.length;r++)n[r]=arguments[r];try{return t.apply(void 0,n)}catch(t){i.error(e,t)}}}var c,l=function(t,e,n){if(n\|\|2===arguments.length)for(var r,i=0,o=e.length;i<o;i++)!r&&i in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,i)),r[i]=e[i]);return t.concat(r\|\|Array.prototype.slice.call(e))},d=!1;function f(t){d=t}function p(t){return function(){return v(t,this,arguments)}}function v(t,e,n){try{return t.apply(e,n)}catch(t){if(h(t),c)try{c(t)}catch(t){h(t)}}}function h(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e]

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1606
Entropy (8bit):	5.268388270264093
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehG0:3q3+pUAew85zvc/hG0
MD5:	010AC21CFFBF2E910B2D0C66A924E377
SHA1:	3427A3E7C925D1B7B2B85CFE7B7FE27DE71258FA
SHA-256:	E6A2AE9B4E1A304837C40C31C647C66F66611946FCFA9E4C4D1AF8BDF509FC0B
SHA-512:	AB224CF32B402A86EDC557F3CD48B345FD34BB7E0168FBAF3A4152FDBF039F62FF8E17428420AF20F5F89BD5C4E1C986AE977479DAD96C82C9D59AA1FB36196A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	2517525
Entropy (8bit):	5.690974226342676
Encrypted:	false
SSDEEP:	24576:NqB3uhOPREBiqOBbXAum6UrGoeIoHIGfNnznE1oOM6dPUVETY:NqB3uhmVq0TY0oeIoH1fNnuP/TY
MD5:	024B23A8B08CC3328B495440038A9AFC
SHA1:	FDDC0A6A8DEDF81BD8F1C9A901EB0B23CD37B38C
SHA-256:	39C616373C47E2774B7212F5C66A6EBDB91A27A6AA35D037D0FF604F919B81E4
SHA-512:	DC27C531C9D77ACBB02B137764507DBC183E8E9CF009A08BB08F9CDCE487BA7B1BC91F1DE5B0018AD7663BE18374BD724C2C26C2C3E6371F367557E20A2BB8C9
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	193100
Entropy (8bit):	5.6424255921791255
Encrypted:	false
SSDEEP:	3072:wiG7vXLG0MugjfNTCO+jbbDRrqxnh/+FpaT1YoFQdl0htk/Xu8HLYFkflD045/Yt:wiG7vbWugjfZCOsbbDRrq5h/+FpaZYot
MD5:	4A63388C015E03EE91D8B5396333BAEF
SHA1:	3B4E85DF8C2F2BB5612D37F000D9A8FA01AE9B0C
SHA-256:	F4A6918B9A8A40CE6F81C6A630E424C6BFA72E054B714EB01A3C316CC5D9E6D5
SHA-512:	D715174C4C4FFF77318103A60A6DA60EDA8C1558205B6650FDE24F839E31A7E721A90B86CD997B9FCF1B122CF090E1B71B099FDDEF6AAD4DAE690C6C476E8782
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/59/4a/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Cya,QB,Dya,Eya,Fya,Gya,Hya,Jya,YB,ZB,$B,aC,bC,dC,eC,Kya,fC,Lya,iC,kC,lC,mC,Nya,Oya,Pya,pC,rC,tC,uC,Rya,Sya,Tya,Vya,AC,Xya,BC,Zya,CC,aza,$ya,bza,cza,dza,eza,fza,gza,hza,iza,jza,kza,lza,mza,nza,oza,pza,qza,rza,sza,tza,GC,wza,IC,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Gza,Hza,Jza,Lza,Nza,Pza,Rza,Tza,Vza,Xza,Zza,aAa,bAa,cAa,dAa,eAa,fAa,gAa,hAa,JC,iAa,jAa,kAa,lAa,mAa,nAa,pAa,LC,MC,qAa,rAa,sAa,tAa,uAa,vAa,wAa,xAa,yAa,zAa,AAa,NC,BAa,OC,CAa,DAa,EAa,FAa,GAa,HAa,IAa,PC,JAa,QC,KAa,LAa,MAa,NAa,OAa,PAa,QAa,RAa,.SAa,TAa,UAa,VAa,WAa,XAa,YAa,ZAa,$Aa,aBa,bBa,dBa,eBa,fBa,hBa,SC,iBa,jBa,kBa,lBa,mBa,nBa,pBa,sBa,tBa,vBa,yBa,zBa,ABa,BBa,CBa,nD,oD,EBa,qD,rD,sD,GBa,HBa,IBa,vD,wD,yD,zD,JBa,AD,CD,KBa,MBa,NBa,PBa,TBa,UBa,ID,YBa,bCa,cCa,dCa,LD,eCa,gCa,hCa,iCa,jCa,OD,lCa,qCa,WD,tCa,sCa,XD,uCa,ZD,wCa,rE,xCa,zCa,BCa,xE,CCa,yE,DCa,ECa,FCa,GCa,AE,ICa,HCa,JCa,LCa,NCa,PCa,TCa,RCa,UCa,SCa,BE,CE,XCa,YCa,DE,EE,FE,HE

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	241591
Entropy (8bit):	5.572901990457829
Encrypted:	false
SSDEEP:	6144:T7UieFbbPgaICntmNVJ4Th0wIaIk5g64HuMLoRqCncYZHf/qxglDA0SLk8zJW8G:T7UieFbbPgaICntml4Th0w/Ik5g64HuV
MD5:	A1DC9E39AAF3CF9375EE86DFF06BA5D1
SHA1:	B98DB09C5F52E6FC884CDEDBE148639803383CFC
SHA-256:	0FC948C6B0D0E71AD3442EB917E39F1864AC81D799AEC29186CC347C42672650
SHA-512:	90941804306FD1C72F66E09385EF3D026B094D6B6017F0D224F729CD417CFA7F3964B8C55B79F228920B241AD52C9ABC507F67D6A7D90F15F7FBE3B5320A7A83
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/59/4a/main.js
Preview:	(function(_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2019 Google LLC. SPDX-License-Identifier: BSD-3-Clause././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././..Math.uuid.js (v1.4).http://www.broofa.com.mailto:robert@broofa.com.Copyright (c) 2010 Robert Kieffer.Dual licensed under the MIT and GPL licenses../.var aaa,na,pa,oa,caa,daa,Ia,Oa,Ra,Qb,Rb,faa,Cc,Gc,gaa,Xc,Vc,$c,ad,iaa,maa,hd,kd,ld,md,od,saa,vaa,waa,Caa,Aaa,Baa,yaa,zaa,Eaa,Faa,Haa,Iaa,pe,oe,Kaa,Jaa,Maa,Laa,Naa,Oaa,re,Paa,Qaa,Uaa,df,Yaa,aba,Vaa,$aa,Zaa,Xaa,Waa,bba,jf,cba,kba,nba,iba,jba,pba,Af,tba,Jf,uba,yba,zba,Vf,Uf,Qba,kg,lg,mg,ng,Sba,Tba,Xba,Uba,Wba,qg,yg,Yba,Zba,Ag,aca,$ba,bca,Eg,dca,eca,fca,gca,hca,jca,lca,oca,Ig,Kg,Lg,mca,nca,rca,Mg,Qg,Rg,sca,Vg,Ug,tca,vca,xca,Bca,Dca,Cca,Eca,Gca,Ki,Nca,Mca,Rca,Sca,lj,Uca,Vca,Wca,Zca,Yca,$ca,ada,uj,Xca,.bda,Rj,Xj,hda,pk,jda,rk,lda,zk,oda,

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8692), with no line terminators
Category:	dropped
Size (bytes):	8692
Entropy (8bit):	5.742827947961693
Encrypted:	false
SSDEEP:	192:/HJpmrpVS2Oa4WSb+AS8ETjlidPUqE89i+ZMvJGQKrskD7EZn7OI:/H8sKnL8ETpixm89i+ZMvJGxrs1xN
MD5:	1EB3871CAA2E51C9FBD4B65553E96CC9
SHA1:	72B8D788093F374379906FA61A1638EDDE3866FB
SHA-256:	994375B845387F69771190D7C18D009C87719179CD991BF46A0E363158AB4A70
SHA-512:	5DC9E6854A4C50EBAED7C287ECDEFAD57B39B0C17656503B0C651688FC5A3456C008B5D883ED68F7990D7AC16DFA2B06AFE8E503481BEAA48AD7C42218DDBA09
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(W,h,i,n,o,y,z,B){W=b,function(c,d,V,e,f){for(V=b,e=c();!![];)try{if(f=-parseInt(V(375))/1+parseInt(V(370))/2+-parseInt(V(360))/3+-parseInt(V(411))/4+parseInt(V(417))/5+parseInt(V(393))/6*(parseInt(V(454))/7)+parseInt(V(358))/8,f===d)break;else e.push(e.shift())}catch(E){e.push(e.shift())}}(a,894425),h=this\|\|self,i=h[W(412)],n={},n[W(371)]='o',n[W(460)]='s',n[W(435)]='u',n[W(421)]='z',n[W(463)]='n',n[W(443)]='I',n[W(429)]='b',o=n,h[W(364)]=function(E,F,G,H,a8,J,K,L,M,N,O){if(a8=W,F===null\|\|void 0===F)return H;for(J=x(F),E[a8(457)][a8(384)]&&(J=J[a8(398)](E[a8(457)][a8(384)](F))),J=E[a8(439)][a8(418)]&&E[a8(377)]?E[a8(439)][a8(418)](new E[(a8(377))](J)):function(P,a9,Q){for(a9=a8,P[a9(451)](),Q=0;Q<P[a9(381)];P[Q+1]===P[Q]?P[a9(385)](Q+1,1):Q+=1);return P}(J),K='nAsAaAb'.split('A'),K=K[a8(444)][a8(438)](K),L=0;L<J[a8(381)];M=J[L],N=v(E,F,M),K(N)?(O=N==='s'&&!E[a8(458)](F[M]),a8(402)===G+M?I(G+M,N):O\|\|I(G+M,F[M])):I(G+M,N),L++);return H;function I(

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 311909
Category:	downloaded
Size (bytes):	84175
Entropy (8bit):	7.997180529574413
Encrypted:	true
SSDEEP:	1536:VZaiO3MFf2fiSW61iEC0MfMt7nuA0RCHzVDv3oVqfHQ2dKJbfOwRikLZB/LqupVk:VZai5x2fiSW68E0finuA0R4ZT3UqPXdZ
MD5:	E166DBF7D812AC940E1646D638229B20
SHA1:	29AA9A4BDE3006FFFEAAA99045554D810DCFE807
SHA-256:	103014F7317310BEACF0926C28D6E713E514B387632A6B5ABEB3D83F7839EF7F
SHA-512:	7282F3D5CF7D2435503979B5D83841E4F26519A1D6CC4C6762BEFC72DA237DF4CA1ACFE163F99DE54271F74BAE1CEFD4C3B8D753C84E93F907ABB7C5D8D1E443
Malicious:	false
Reputation:	low
URL:	https://www.paypal.com/sdk/js?components=buttons&currency=USD&intent=authorize&client-id=AWSfZDWVfeaW_xPHzvcISR7UNHryoYSdRwwe1q8K4V4L_qjHgTV_BTD_Vswt1Iz_5hHpy13c5DpEw9tq
Preview:	...........}k{.....D;..;.@..\D{.......H..4....62#.L.OI.......=s.4.u-.J....M..1.e29k...I..=m.'..f..iv....O&g...V.\|.l..['.vk.I..4...9\|9o_....dc..G.P(..9(.y..:S.\|Zp...K..+.\j...SZ....D.w..n5..A.,.D......c../s...6/.....d#1..H.7..f.#N../P.Z/.Z.. .n.8s.....T....w.>.<...T.,xe.8.c..Tq...l6....JS.u./..=...&..uPI.m.......E.(.,}.../.....Ww..(...a.....Y.{.,XRn...T.=..o...en..@.S.g....+..............;.~h....z..._.l7..u.Y.R.1..h2.~X,.vPQ..Vz}..Q-.b.`.0.i.4Z(Vs.....y.+dEsb.".....T.%.V8.).....\..D..\|..9F3:..W.,..,...o.\|.....0..Le.(.....?......o.w...qa.4#4..#fm#uf..q...r8.....#2..bd#LML.;/.$.......G.AGa?..J+.!,.Q.........Z.&.N...Tc...h.....fm.@,....W..CT.....;.g.Qu.^#.........8..x..K..N..Nx.j..a...0.O..5(.z3z.o5...c.....[V.....4M.s..^...c.V.....-lb.V.3....w.c....>.V .kw.O......cS[.............#d.8....#....MVUe`.q#Q......}`a..)G.8....F..,..9.@_.27IQ.A1.Q....../.....[../...F.d..1.........,.pF.P....F#...Fh<6C........u.J.y/...^,j..a...z.G.q..:..b..F..:.......

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 90 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3736
Entropy (8bit):	7.946153199074108
Encrypted:	false
SSDEEP:	96:ZzMXZu3hAbl1loWQ9ZruzjWuTDMIFQ74FYKYYdbh:ZwFbyZruXW6DLO74FYKYC
MD5:	4B878DFDC1A0E6F210ADA885580471B5
SHA1:	EEF16184CFFCC087E02B73A8E13D672F7B82633B
SHA-256:	5A3D0DB5A831F4F2B7E33D3BF8A76ADA1459C33322455097CDF944A74B2D2CF0
SHA-512:	C450258A650000FCB4618A5379EA697860622BF8E746A49A00B5FE688548CAFB883A1B04655F725A53F3E425527F038A5031C3FB5996ADA5A0CDF7B72B6A8E5C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Z... .......o.....sRGB........RIDATx...T.W....4q5k.5..5....d...l.......16.D. .X..[Ll`..P.[.]....a..`.2.a.:t.....#M.6.d.x.y.......{..~..>..a...V..~.~.EU~>...,-E...Y...^.....V..hDua!PU...AE.....n!..w.b.>....Q.M..a..yP.....?......wPYVZ.rYl,..>.H.)+..C...(...;4..1...~...Y...q..8h........(.....?.t..F.tmSw...n.Q.R..FvU(HKC...{..x..yl...m.\|T.4.84..g."...a<..NG@yb.......\|.....%....E.n....J......#....m.B..W.....w.t....U....c....f.......>.A....!.5..-@.\..H.+.....u.PUP...SH $.A..G.....Q...._..$<.UEE.A....A...........2...A....~............l.O.E.c....ZEf..N.F...HJ..j......[ ..... ..K.....\.....bi.....=.........4.B..._....4......~.Z.<...cG.....k....P..c....-...M...e.T.zC....\|..\??.>.."...N.!}.7...XU5........03.\.3......tc..m..I.2q.jS..t.....].. ...p.vG..h...=z.?e..\..u......O..@...5'.....o.@...&P..iS.FUa...ak...."...p..]Q@.Cy..O.#...2'.a)9....y;.....Q.;!u...M.....M.."I3.w#".x.Q.=.....T.w.6Y.^rM.A7.........m.....p.AG=.8t...a...2..&N

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	5.290277891359698
Encrypted:	false
SSDEEP:	24:E1MCXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1MCXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	5A13A6ACEA2053F0803A679994BF95A4
SHA1:	8B085792E5A6B6496CCFEE8939B262097791A9C5
SHA-256:	5039D00D6C216E14B323E0B0934940FC29123FDB861750AC29F95D46C24D60EE
SHA-512:	9162E9DCB913B47C188F445C5034BDA3232B2E6AD5E839F0ADFAE1CFE255E4F14AF1AB8CDA5301D58ABBBD8008824270A46D88F8BA8B71D6E9C6B292F822DD9A
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/3ede36f2\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	16834
Entropy (8bit):	7.9798371174785085
Encrypted:	false
SSDEEP:	384:62UYrYtmoMLRVERe9IhXcJsaKXFnkN+uE5kWGUJ/TUfhHx0j:dhloMLgRtGJsaKX1k7E3dZqR0j
MD5:	B4B0E982509A58E4EBFFFD9AC97442F5
SHA1:	190E155758B4CBD7924E8B522B2AB363F135DF4E
SHA-256:	9DD530D336D68498901154CA605C237F55E67E19DA92D9727DFD1DB4834A456F
SHA-512:	3AD5C41B0DD188F6ECD813B5890666FE9412B3BAC07E6F875F6E5CCC3EF2C2890C1834A5F6552AA3201A200AEA4B91E4FB3BA27A23A30F8F87E75963E0D15EC3
Malicious:	false
Reputation:	low
URL:	https://cdn.buygoods.com/assets/checkout/img/badge-60-day.png
Preview:	RIFF.A..WEBPVP8L.A../g...U...m...Y.^..1...\.0.DB.....\.m.i.."....W%).$Fpw..;w..............v..m...q;..!...xD.....@..-...W.#.I.0.!...`.....;.....U.E...{I.7.$.V'...pX.......PQ.....my..w.x.?.\|q.`."...=;....-...u...dk."'/3.....6..-0s-...TW..I.+..-...nqw\.d.. I6m+.^.....m..o.m.m.6....F..\|.7..<....-.7.=sx.=>....k..{l...l........[k..^7..us..l....x....k..].Jmg.....g...;'Fi..N.2.5F?.:.Y..Ju....'.u..Z...Ne..S:9.\.l[..R.O..6.U.....<.g.j.J..Q....y..vXN...m.....mk#...vDF.af[...1. ..Hh...z?.~.......+9.B....U;.5....P.^....~.......k.3K.>..$<....--n......@..Hr...M.mkq..=m,.m.m.ml..ek..{k...@.$C..qx.....Kr....u........................z..B...".8..).O.........(..8..m.UJ...P...*......aff&..I-.N.,.....V....-..j..'jd...{.fY>.......2...\|.a.Q..K...K.O,].T.l...9.&..0x..>..T..R\|d.m.V.k.{.......O....k.i.}.k.7..}.^f}...~k...O i.x....a....<...8....g...."......D..#.{f....'..OS......{..B..`....0...b.^-k.G..J.kh.%.$.(.o......k..J.o...a......@.2.oH...........

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38602), with no line terminators
Category:	dropped
Size (bytes):	38602
Entropy (8bit):	5.432933734373714
Encrypted:	false
SSDEEP:	768:E7gXReL4RDwCAbkl9nDxu7de90OUsTGn2IL4a2s:9GEDiG9nlGK7UsTIL4Xs
MD5:	D9DCF1CBD42751AB39CB51FC64E6E133
SHA1:	34997EAD7E4438F012EBC98E153F6FBA08BD11B4
SHA-256:	7CC8D713A18B57F6816EBF31B137904FEB0C02DACEE6991D932F58C3F8B41CE9
SHA-512:	C9E9C0ECB041A1AE0323AA31826B15593114B4D014EA10F7930BB76A1B8BD8F5589E73BBF37FB93CF7CF5E51F88F5E543179AF240BFA61054A402D8D4B02B345
Malicious:	false
Reputation:	low
Preview:	!function(e){var t;"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):((t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).braintree\|\|(t.braintree={})).client=e()}(function(){return function n(o,i,a){function s(t,e){if(!i[t]){if(!o[t]){var r="function"==typeof require&&require;if(!e&&r)return r(t,!0);if(c)return c(t,!0);throw(e=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",e}r=i[t]={exports:{}},o[t][0].call(r.exports,function(e){return s(o[t][1][e]\|\|e)},r,r.exports,n,o,i,a)}return i[t].exports}for(var c="function"==typeof require&&require,e=0;e<a.length;e++)s(a[e]);return s}({1:[function(e,t,r){"use strict";var n=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}},n=(Object.defineProperty(r,"__esModule",{value:!0}),r.PromiseGlobal=void 0,n(e("promise-polyfill"))),e="undefined"!=typeof Promise?Promise:n.default;r.Prom

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1981
Entropy (8bit):	4.875211710218568
Encrypted:	false
SSDEEP:	24:2dqNPWLj3EdeaxM2mo3mRh8nHMhHuhzWzrb5IZ4kPau+vXj+99hl+cDh7hTmOABm:cqtij3RvWAuzWybba4l+cTq3L3kinY7
MD5:	59B07A0215C713625FC38F56F04F1ACD
SHA1:	13A0DA373FFE3CB46188DA0F49C5103CC50D4DB3
SHA-256:	A84BD82F80AACEBE533EC9C12B5052B6704D364BD11B7A3EC943E4BE86AB272A
SHA-512:	73AFF05C631D5D68C37737F81986BDEE30E890202B0310301144B321EF9CB3084EBDFAA420F7008FD8953848AEBB288DDED649134814F63B4C96C350E1DE3B91
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="30px" viewBox="0 0 42 30" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>Visa</title>. <desc>Created with Sketch.</desc>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Add-To-Cart" transform="translate(-184.000000, -120.000000)" fill-rule="nonzero">. <g id="Visa">. <g transform="translate(184.000000, 120.000000)">. <path d="M42,26 C42,28.209 40.209,30 38,30 L4,30 C1.791,30 0,28.209 0,26 L0,4 C0,1.791 1.791,0 4,0 L38,0 C40.209,0 42,1.791 42,4 L42,26 Z" id="Path" fill="#1565C0"></path>. <path d="M12.186,10 L9.56,17.832 C9.56,17.832 8.893,14.519 8.827,14.103 C7.332,10.692 5.126,10.882 5.126,10.882 L7.726,21 L7.726,20.998 L10.887,20.998 L15.258,10 L12.186,10 Z M14.689,21 L17.56,21 L19.296,10

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (626)
Category:	dropped
Size (bytes):	6960
Entropy (8bit):	5.265163410569329
Encrypted:	false
SSDEEP:	96:266yg0GI/FijlL0LQnRGMGNYJGXcGyGsVnGmmMmUmzcmEm8mpR3/vybaX0f/:l6yr7E5MKRHaYJ6czrXlJVZpDSQ
MD5:	FB3C77203E012894EF09D212433B6BEE
SHA1:	AE66306B33D5AFEA1823DE6A5B34D54E1A60E44F
SHA-256:	05FF8D57CCA7189E64971AEFA026C74CA2B53A0538878DBA7266160457E91731
SHA-512:	6E6D58BE7EA5CC7BA4070C8AF1B75143799C2B1DE610C08A16642C81AD8D32D0303F75EDB94F63F0B54BA1885E7FAE8615DD068577B5F73EFE1A141E81EC628F
Malicious:	false
Reputation:	low
Preview:	.var spitoday = new Date();.var spiexpire = new Date();.spiexpire.setTime(spitoday.getTime() + 36000002490);..// Get hostname without the subdomain.//.// The method looks at the second-level domain for common ones, to determine if we need the.// last 2 or the last 3 parts.//.// Parameters:.// Fully qualified hostname (potentially including subdomain).//.// Returns:.// Domain name without the subdomain.//.function SPIGetDomainName(domain) .{..var parts = domain.split('.').reverse();..var cnt = parts.length;..if (cnt >= 3) {...// see if the second level domain is a common SLD....if (parts[1].match(/^(com\|edu\|gov\|net\|mil\|org\|nom\|co\|name\|info\|biz)$/i) && !parts[0].match(/^(com\|edu\|gov\|net\|mil\|org\|nom\|co\|name\|info\|biz)$/i)) {....return parts[2] + '.' + parts[1] + '.' + parts[0];...}..}..return parts[1]+'.'+parts[0];.}..// Get hostname without the subdomain.var hostname = SPIGetDomainName(window.location.hostname);..// Save sessid2 cookie.document.cookie = "sessid2="+escape("sessid202501

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 669 x 272, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	215779
Entropy (8bit):	7.96040669391808
Encrypted:	false
SSDEEP:	3072:o9zdhtGT+wfvET0UTi6rE4N3tDeQwWtwOCC/yo1GxleRh0MLuJTX5t6:obgfvEoUOL4NBe2XyCm1dXb6
MD5:	F3AD86B655505D721EFFD1A88C674D70
SHA1:	B6CBBFEAFA9687E11FC5D7E62FDF82F2F9A50BC7
SHA-256:	46D4961F8A7A5FC04E5C994361D1315422EBC4E1F231E56975BDBAFFD5C1F9F0
SHA-512:	4380EA2716664206E0194ACAA211CD43E14BA7AE634C012D7D7DF61321D4433B9C15331A1B3D65BDA815DCB1FA1539F2CA007A783CA7F8F90DBB500DB0B0EA44
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/exit-popup.png
Preview:	.PNG........IHDR.................. .IDATx...w.eYU.q...Q.(..u....&..*&...... f.........F..h@1`.Q.nP.6CP1.J......[.....[..c...\s.5..}..\.:.Y.fz.7y...7..J...-.wy.w9O....D..N.lI.........f.;..;.7....6.XC.X<.5n....wx.wX..i.>g.]..}.g...n......Z...~..=..=..x..X..9..../'N.XI...`m;u..rxx..>}z-.E..>...m......G}.G-.....\|..\|.r.;.i]oooo........X>..>n..O....>..w{.w[.Y.Y.....\|..}......^..^...m.d/..~..qQ.{.w.....?.>h............?......X>..?z.......?....'..'...'.)..).=...\|..,w....y....y..^.?.3>c.......?..{....\s..../.{.....[...,.\|.#.G?...c.....~..........\|..,_.E_.\|.W\|.r.{.s......nw[.z.........9......^.....I.l,..3"'..sQf'.....^>..?.\|..6.n..Y..Y.<....w..B..d.S..l....s?.s....>..V.../../]....,_.5_..}.~.j...>./.R.-v.<.".......,Ox.......X........W_.<..O^.w....J.......vo.v..y....>t......Gc.."}.w.n\s.z..x.....g>.o..&79...O.'.0I.sw.t..f.}..ev..oy.[.Dw.....\|..9{>.<..;w....wg...;.a/.).A...n....:C.f.$s.i\|s....u...W\q...fo........[......J..G...K......j6.]..+.C

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	downloaded
Size (bytes):	100486
Entropy (8bit):	5.480941859889969
Encrypted:	false
SSDEEP:	3072:HpxwiNqcKIvPeYdNvgSC55EC9mSc9cdetGeGu0LmiOem6Oh4PKh9VvlNaiNWFf5I:Hrwws0NvgSC55EC9mSc94etGeGu0LmXF
MD5:	AEF54CE18E998D4CCC160B5031B3AC40
SHA1:	7B39872044132B1AE819C3095D4C78CD4221AAB0
SHA-256:	ECBE370C3C7A3EF932B1C229ADCBBA48D12749052BB20EB7F5FBB5C7002B08F5
SHA-512:	627D73E2F2B51002CAD6AA1F8B1B1F03D09ADF025CA80A055993483A3E1AF0E237F6076B5EB6C0DE351086DEF75C05F13EA8AAD8837F75A77652E774CC179986
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/59/4a/controls.js
Preview:	google.maps.__gjsload__('controls', function(_){var WKa,iL,XKa,YKa,kL,ZKa,$Ka,aLa,bLa,mL,dLa,nL,oL,pL,qL,fLa,eLa,hLa,rL,iLa,uL,jLa,kLa,lLa,sL,wL,tL,vL,zL,nLa,mLa,AL,BL,pLa,oLa,qLa,rLa,sLa,uLa,CL,vLa,tLa,DL,wLa,EL,GL,HL,zLa,ALa,BLa,IL,JL,KL,CLa,DLa,LL,ELa,HLa,FLa,ILa,NL,LLa,KLa,MLa,PL,OLa,NLa,PLa,QLa,ULa,TLa,VLa,QL,WLa,XLa,YLa,RL,ZLa,$La,aMa,bMa,cMa,dMa,SL,eMa,UL,gMa,hMa,iMa,jMa,kMa,lMa,fMa,mMa,nMa,oMa,pMa,qMa,sMa,WL,uMa,wMa,xMa,yMa,zMa,AMa,CMa,DMa,BMa,EMa,FMa,GMa,IMa,JMa,MMa,NMa,XL,OMa,HMa,KMa,TMa,RMa,SMa,QMa,YL,UMa,VMa,WMa,XMa,$Ma,bNa,dNa,fNa,.hNa,iNa,kNa,mNa,oNa,qNa,FNa,LNa,pNa,uNa,tNa,sNa,vNa,aM,wNa,MNa,ZL,bM,DNa,ZMa,rNa,GNa,yNa,ANa,BNa,CNa,ENa,$L,zNa,TNa,XNa,YNa,cM,ZNa,$Na,dM,aOa,dOa,cOa,eOa,cLa,gLa;WKa=function(a,b,c){_.$q(a,b,"animate",c)};iL=function(a){a.style.textAlign=_.Wy.Ej()?"right":"left"};XKa=function(a,b,c){var d=a.length;const e=typeof a==="string"?a.split(""):a;for(--d;d>=0;--d)d in e&&b.call(c,e[d],d,a)};YKa=function(a){return String(a).replace(/\-([a-z])/g,function(

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30015), with no line terminators
Category:	downloaded
Size (bytes):	30015
Entropy (8bit):	5.478585822973082
Encrypted:	false
SSDEEP:	768:rAJsGbugMPnl5cPJMQ5r4PM8tzizyzMz5iqYkmnwFIGUILwILwKLNlZ:G3bBMPnl5chMQN4PM8m12nILjZ
MD5:	4ABE6BD8C1EB31CAF609ED1A61DA278F
SHA1:	D8FD5B79E4B14CE42DDC91F3337B3867329151AE
SHA-256:	F32D05F83039B9CC66E733C2BC0B25FE8B9D50253B861252821B44BCAAE9346F
SHA-512:	8FFA9C08B18133055A5897EAB0FC5FEEF02E6A6F08EE259722EF3AED2688B6E2E310D8E18A46C204BE1AAC05C7D8D0EACE804F95200E9EBC1EFA5A9CEACF32DD
Malicious:	false
Reputation:	low
URL:	https://js.braintreegateway.com/web/3.97.2/js/data-collector.min.js
Preview:	!function(t){var e;"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):((e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).braintree\|\|(e.braintree={})).dataCollector=t()}(function(){return function r(i,o,s){function a(e,t){if(!o[e]){if(!i[e]){var n="function"==typeof require&&require;if(!t&&n)return n(e,!0);if(c)return c(e,!0);throw(t=new Error("Cannot find module '"+e+"'")).code="MODULE_NOT_FOUND",t}n=o[e]={exports:{}},i[e][0].call(n.exports,function(t){return a(i[e][1][t]\|\|t)},n,n.exports,r,i,o,s)}return o[e].exports}for(var c="function"==typeof require&&require,t=0;t<s.length;t++)a(s[t]);return a}({1:[function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}},r=(Object.defineProperty(n,"__esModule",{value:!0}),n.PromiseGlobal=void 0,r(t("promise-polyfill"))),t="undefined"!=typeof Promise?Promise:r.default

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 669 x 272, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	171526
Entropy (8bit):	7.962831756662693
Encrypted:	false
SSDEEP:	3072:o9zdhtGT+wfvET0UTi6rE4N3tDeQwWtwOCC/yo1GxP:obgfvEoUOL4NBe2XyV
MD5:	EEC589DE883F6D0F5B962EEB4F843FDE
SHA1:	433C9402108C3A08F22854A1F736353089B44B20
SHA-256:	D867422AE9D40B5C65D0CD60AB16EF57F9A8F38AEF72D61604A2F04FC3A8C24D
SHA-512:	7AC2F0090C7DAB0B43825E059D3E03393BE7C7CA6E05467F5E29D87E91C677C2203ED4F8FAFEA600D97EE45B210CB20E3BBF22B9804C5D5F91D04F442517416D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.................. .IDATx...w.eYU.q...Q.(..u....&..*&...... f.........F..h@1`.Q.nP.6CP1.J......[.....[..c...\s.5..}..\.:.Y.fz.7y...7..J...-.wy.w9O....D..N.lI.........f.;..;.7....6.XC.X<.5n....wx.wX..i.>g.]..}.g...n......Z...~..=..=..x..X..9..../'N.XI...`m;u..rxx..>}z-.E..>...m......G}.G-.....\|..\|.r.;.i]oooo........X>..>n..O....>..w{.w[.Y.Y.....\|..}......^..^...m.d/..~..qQ.{.w.....?.>h............?......X>..?z.......?....'..'...'.)..).=...\|..,w....y....y..^.?.3>c.......?..{....\s..../.{.....[...,.\|.#.G?...c.....~..........\|..,_.E_.\|.W\|.r.{.s......nw[.z.........9......^.....I.l,..3"'..sQf'.....^>..?.\|..6.n..Y..Y.<....w..B..d.S..l....s?.s....>..V.../../]....,_.5_..}.~.j...>./.R.-v.<.".......,Ox.......X........W_.<..O^.w....J.......vo.v..y....>t......Gc.."}.w.n\s.z..x.....g>.o..&79...O.'.0I.sw.t..f.}..ev..oy.[.Dw.....\|..9{>.<..;w....wg...;.a/.).A...n....:C.f.$s.i\|s....u...W\q...fo........[......J..G...K......j6.]..+.C

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20970)
Category:	dropped
Size (bytes):	21133
Entropy (8bit):	5.241126550213599
Encrypted:	false
SSDEEP:	384:yep7yiq/ApivD5RIjdMVV6qsPHzdhPQzOmSKt4ZIfUugRdEWS+1igMr:yQOIHHZBYjbNqEWegMr
MD5:	9D800C462D0440E0E0791DF6BDB2745F
SHA1:	C93AF0D1B19051513BC6751936C5C015B59F9980
SHA-256:	7EB194C2648DE022CB8F29399B9F4409D5EC0CC5314D6E4EEA175C78D1D5089A
SHA-512:	29A2321DBDF48974D77C6C88F5CC8A154211492B9E909B7AFEFA97B7240A8503FAA33644198F273AD452E9F131A84E3E45B607BACDB21B2620D41AEAC7357A60
Malicious:	false
Reputation:	low
Preview:	/!. cleave.js - 1.6.0. * https://github.com/nosir/cleave.js. * Apache License Version 2.0. . Copyright (C) 2012-2020 Max Huang https://github.com/nosir/. */.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.Cleave=t():e.Cleave=t()}(this,function(){return function(e){function t(i){if(r[i])return r[i].exports;var n=r[i]={exports:{},id:i,loaded:!1};return e[i].call(n.exports,n,n.exports,t),n.loaded=!0,n.exports}var r={};return t.m=e,t.c=r,t.p="",t(0)}([function(e,t,r){(function(t){"use strict";var i=function(e,t){var r=this,n=!1;if("string"==typeof e?(r.element=document.querySelector(e),n=document.querySelectorAll(e).length>1):"undefined"!=typeof e.length&&e.length>0?(r.element=e[0],n=e.length>1):r.element=e,!r.element)throw new Error("[cleave.js] Please check the element");if(n)try{console.warn("[cleave.js] Multiple input fields matched, cleave.js will only take the

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1568
Entropy (8bit):	4.979151858936181
Encrypted:	false
SSDEEP:	24:2dqNPWLjIEdeaxM2mumRhEKnHMhHuVUbrVm5RcdTER40/QHS84MGddEHwMFP6R6B:cqtijIRZwAAbZqbQyXrd8P4ySCuy
MD5:	0F3D8B4CC71133DC656F74F683E9AFBA
SHA1:	33D6FBE842A88B0137C20E3D2D0B72D4140FFBA7
SHA-256:	0E193C4DBBDF7B8BF0D41C4B6D781A79A1FDB3FB75CD1D96EB33F72AE92E5490
SHA-512:	E92702DCC90B4691333B78CC96ECD00DB0529267BFF83AA68C837CC9760FDB978D210223BD587D103BD85B054ABC1F6895BD6012B713ED30AB2F3B02FCC73889
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/img/mastercard.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="30px" viewBox="0 0 42 30" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>MasterCard</title>. <desc>Created with Sketch.</desc>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Add-To-Cart" transform="translate(-234.000000, -120.000000)" fill-rule="nonzero">. <g id="MasterCard">. <g transform="translate(234.000000, 120.000000)">. <path d="M42,26 C42,28.209 40.209,30 38,30 L4,30 C1.791,30 0,28.209 0,26 L0,4 C0,1.791 1.791,0 4,0 L38,0 C40.209,0 42,1.791 42,4 L42,26 Z" id="Path" fill="#3F51B5"></path>. <path d="M27,5 C21.4771525,5 17,9.4771525 17,15 C17,20.5228475 21.4771525,25 27,25 C32.5228475,25 37,20.5228475 37,15 C37,9.4771525 32.5228475,5 27,5 Z" id="Path" fill="#FFC107"></path>.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13900)
Category:	dropped
Size (bytes):	13942
Entropy (8bit):	5.229867335336104
Encrypted:	false
SSDEEP:	192:jEVwrixboFI2gI51neUo51np8lMs+6L/GkqwrGOi6k1051a6CYFgwze8ry:NDw6f+6TG+GOi6ka51fV68ry
MD5:	8853D1C9ECA698986DABD0A124662813
SHA1:	25A7A016CC9EEF27AD246DF99AD2F8CED8AF10CB
SHA-256:	871228A64882F469E28D4CD70B7F8A67D2EF284C0F8FD63984CBF59D0B9C3879
SHA-512:	54A613D386FCC5D75F9B2C2D44DE599868BC47F45FCA716BF192257DE543FE3C59AE9FDC11E6883C5B5D84C0F0BFDDD1216C8F6A7CB88F240E3F1C6577667996
Malicious:	false
Reputation:	low
Preview:	(e=>{var i={},t=[{id:"analytics-xo",triggers:[],run:function(r,o){t.q=[],t.pptmTrack=function(e,t,n){try{n=n\|\|{},delete(t=t\|\|{}).userType,o.track(e,o.objectAssign(t,{pageType:o.get("analytics-id"),sub_component:"smartincentive",item:o.get("pptm:containerId"),mrid:o.get("pptm:merchantId"),context:o.get("pptm:context")}),o.objectAssign({disableSetCookie:o.get("pptm:context").disableSetCookie},n))}catch(e){o.log({t:"error",msg:"Messaging track failed",stack:e.stack})}},t.log=o.log;var e={PaypalOffersObject:"ppq",ppq:t};function t(){t.q.push(arguments)}r.PaypalOffersObject=r.PaypalOffersObject\|\|e.PaypalOffersObject,r.ppq=r.ppq\|\|e.ppq;var e="production"===(e=o.get("pptm:env"))?"https://www.paypalobjects.com/muse":"development"===e?"https://localhost.paypal.com/muse":"https://www.paypalobjects.com/muse/stage",n=e+"/muse.js",i=(e=e,o.get("pptm:env"),e+"/analytics/index.html");function a(){var e=o.get("pptm:merchantId"),t=o.get("analytics-id");r.ppq("init",t),r.ppq("showExperience",i,"body",{f

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1999 x 1999, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12361818
Entropy (8bit):	7.9832664760660785
Encrypted:	false
SSDEEP:	196608:+zgExwHJ9l8InLRfyeU+virD6wbZlv8kz3Su2jK63aQghhQ9nvtF86yAkrHoz4mI:+zJOJ9l8InLR69+e4kDSuBcghhJZ0dlc
MD5:	E884C81704CD4914461AA615215159C7
SHA1:	A15E827C21A0B2C8E5BD9568E4148667CFD90033
SHA-256:	D1973D984A02FDEBB4CFE155F43B221BE4C0B6D043DDAA505D8AFD0BE09D99C4
SHA-512:	CD57236E177FB2B9FDDBACA5547C21EA08E7BFDE9F18E797C29D08293026977DE915566EF4AA4717A26BDB1F7BAC85798F64D52DB1B584AE239C391AC71EA07D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................R....IDATx^..u\|W..k.E.K..!.$$$......(.......w....Xq.HiK[........>..2{..3.f-....>p..C{[>.....=.X.....&f.04...1}.L...~..\|f`N.)f..7..dcz...W......f..-....c..(k7.;z...=......F......RP.j!)L..bRX.z..L..G..)..o!.E...c.Q.e.....qH..9.........].Cj.6..X..c.U.Ud!..X..c.....-....\|..... ...2.)..va...`..;..\.o......M,Q14`..]FL.b..M>..(.c.t-..k...#...3.`......k.....B .6.(;......W$c<...D....Vt..q.h%...\.....b..I-fbJ1.y...`dt2.b.....rl:.qY.Gg....8.h.;...2....V.31......d...._...K.J....O.=}..N.3.]Ey..1....leI.k...Z.........sgXx..?.q.O.e\B4#."..........Q+.abE>.eyL,.D'/...4.....>..c`d....$8...C.($..d...hz.../"..Q...NC)2....C.......0oo>..c....9....>...q...X..9.1.%..n!.u..s.pF...&.O....`Tx.....C..@z;{.......!..3....t...&Y..Ds>.h*..m..>........$m>....$A..y.F2WL..`e..;K....L_.G....L...&}..\|.....c.-sP......zk..KS...U.1A..j..6n....).R.?P....XE.....B.O...DU.n..#e..)...XU...S...:...J..MO5]zi..{..;&..G.>.V.\|..\|.2....@.).b..L..

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x540, components 3
Category:	dropped
Size (bytes):	44805
Entropy (8bit):	7.809168133937819
Encrypted:	false
SSDEEP:	768:AVEWjmDVrj29r4Vb1CAgrhzrpQJ0de56SBuXSR96EOryKP125U0zFXE:AV+Cr4x1VgrBrBdS6SBlOlPsGAVE
MD5:	3D56057323D4BED5A603D90AA0922924
SHA1:	E21C5F76B10065D47CC08879ED3DE37096275F5A
SHA-256:	EBF3C3262D6309BA0FA5380E3E60F61CA917F7AD52A6E4599C897DEC0CF24238
SHA-512:	228CE270CFDF17F8732837B29EE3534AED25270168B96E9761347AEF336C2CCDA85153B19F53BB51E5DC5B248732B384648F82E6B5EF85C81C57120C4D94CAC6
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE...............mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;...........".....................................5.....................!.1Q.A"2aq...BR...3b.#r.C....................................................!A1............?..`.."qMg~.l%.o......#]h,S.../J...H:....z".:3Q.Ru.d........K.m.[.T.Z.,`.5.n.f..<..k[%o.L.r....E....$.T:R.j...n..M..`..<

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (626)
Category:	downloaded
Size (bytes):	6960
Entropy (8bit):	5.2663284904649945
Encrypted:	false
SSDEEP:	96:266yg0GJ/FijlL0LQnRGFGQYJGQcGxG/VnGpmMmUmzcmEm8mpR3/vybaX0f/:l6yrOE5MKRmfYJ5c0s0lJVZpDSQ
MD5:	71EF8A7A5025DC4CC2C80482FBE44250
SHA1:	DF9C1F31FC68C378F1BD4B0471670E9177F2D81A
SHA-256:	AD2B69DE09E3DCF8D344E0D5B5311F9039769FB2ADDD5583DA47EF663B9670EF
SHA-512:	2E14AC4B37E7CE0EACC61C6267CFD0783202ADACACFC58E19D28A3116A943230D11EE92A49D531D9DEA2D1E77B1CFAA261F7C50352A583AA92051850548CA5F3
Malicious:	false
Reputation:	low
URL:	"https://tracking.buygoods.com/track/?a=6802&firstcookie=0&tracking_redirect=&referrer=&sessid2=&product=prod7,prod8,prod9,prod11&caller_url=https%3A%2F%2Fnervedefend.com%2Freport%3Faff_id%3D1270%26subid2%3D6988_sessid20250110164723474%26subid%3D2566"
Preview:	.var spitoday = new Date();.var spiexpire = new Date();.spiexpire.setTime(spitoday.getTime() + 36000002490);..// Get hostname without the subdomain.//.// The method looks at the second-level domain for common ones, to determine if we need the.// last 2 or the last 3 parts.//.// Parameters:.// Fully qualified hostname (potentially including subdomain).//.// Returns:.// Domain name without the subdomain.//.function SPIGetDomainName(domain) .{..var parts = domain.split('.').reverse();..var cnt = parts.length;..if (cnt >= 3) {...// see if the second level domain is a common SLD....if (parts[1].match(/^(com\|edu\|gov\|net\|mil\|org\|nom\|co\|name\|info\|biz)$/i) && !parts[0].match(/^(com\|edu\|gov\|net\|mil\|org\|nom\|co\|name\|info\|biz)$/i)) {....return parts[2] + '.' + parts[1] + '.' + parts[0];...}..}..return parts[1]+'.'+parts[0];.}..// Get hostname without the subdomain.var hostname = SPIGetDomainName(window.location.hostname);..// Save sessid2 cookie.document.cookie = "sessid2="+escape("sessid202501

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	400051
Entropy (8bit):	7.994108888478995
Encrypted:	true
SSDEEP:	6144:Ki2wXXSfXINpU5jUZLML325Zg3oVAKWmwI+wWnITxXtMLsqHi2UJy0Kw/f1EYLOn:9SfX0S2zDuI37Tn/H/f12u8
MD5:	1131C8AE5FA68E185A7F618B8E10D16F
SHA1:	BDB66E7DBA979C5C665B6670B1666C2629843988
SHA-256:	4A7B031EA800218407D15F28C2DA56BAC8DA3808C2A89AC8AA2A478B79FC05BA
SHA-512:	C1BB1B49ADAD823FE83FB4D3605CC6DADA0FB56D3C256427C87FD4688A1B05716BCE93A8819DF7E2DB7215BDD076BD58E1EEAF4734BFDC646C9578E5AFB0AFB6
Malicious:	false
Reputation:	low
Preview:	:....Q....QZ5xuqBJH_s... .......CggKA2RyYxIBMQ0..#j.............CggKA2RyYxIBMQp.....0..C.u#.;.u1.A......@..+..M.`.~..B..#....O.v..=.Bi..a..zV.....k....O.f.K.u@3fS...3b..%.[..Ka..e.AU4T.iOs......aT.f.).....+.+..D...H1..8.L..a.?s...\|.......t..s..U.w../..3.3....h]U.Q......#..r:\9]...j..r%6:...E..x.Q4.#....R.f...c......Y...f..U...............uj..3...D.w..Y..%......6.'.0T.oi.T.\...=W#^.,s..3{E+u.M........6OR..P..J./[D.l>'.3 ...{Dw.{............E@.,N....7...tx(...v....I..C.O.E..L..........A.K@k.8......._I.w..Z.....xE.\|.%m.....f.....~....A......O&...E.....9...!D.../nV..m..0......l2.-...;S.=..%..7)=.?...~..C...T?w.D;y....y[."...hhC.....Z9..1:7.....VY.m.i...gg......2..?T....%..JE..(.....;.i....x....w....rP.Hc.4].. ...^..-........o..HC.0..2..$fwf.uCI...A.S..+?"..5......%..s.5.&o..2t..n..D.sw.......O....."7....Z.0...T<&.a\|.q9.2.x)....\D.LQ..0..+(....@.jLiMV.....^....A...Y..S.(H.."W[R..1Xf`...I#.[q$A..pi.%..*...\|.D...~...P.p....g...%.....Z .0.....C...b

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 230x142, components 3
Category:	downloaded
Size (bytes):	7274
Entropy (8bit):	7.91807751708525
Encrypted:	false
SSDEEP:	192:NMc/LhUQ6vNNiwSihdsZPdwAWwBYJtDvB5bp:NXLyjNND1sntWJJtV5bp
MD5:	22F570333131CEDC7A6D100692DDBD90
SHA1:	55B576DB55C2D0724BBDC2B4F4651259C76AB812
SHA-256:	D3B23F670C524398018967B05077F113090498FC3ABAC8AA3C416FE49E5737C8
SHA-512:	697248604D4617A2EDB148F5A05D7626A5BD634EC23DD924E2A43B1FC7B72D7973DDE5888988D73783DE40BF2FC3D1644E9E06082B037A72C8587934F3D41B76
Malicious:	false
Reputation:	low
URL:	https://cdn.buygoods.com/assets/checkout/img/amex-cvv.jpg
Preview:	......JFIF..........................................................................................................................................................."..........6.....................................................................s....r....8H...8H...8H...8H...8H....4Z.....o..0.{.&....g....Jt..^6..b.t....zy.+...c.b..\|.}...d.q2..1....P..,z.M...Mp...MpM............b^.Z....D..%f.O....g.>..kS.r..AQ`.......................I....N..?_....E.N.W.=_.........w.....9...!.:\|Zz...S[;r...`W......n..k...si.<.a../....r....t..!.....}.I..W..p.a...08v^j..l.2..].+uk...........'.S.G.Mk.Z.V.7...<..8H.A........v.S}%..s.9l.c..p.U.Ll.j,.j,.j,.j,.j,.j,.j,.j,.j,.j,.j,.k.D..]......:.........................T......V 67@t!#$%."1458DPQ`rsuv...............hu..Owq/....\|...K.=.._).w..Ok...{].S..%..q/....\|...K.=.._).w..Ok...{].S..%..q/....\|...K.=.._).w..Ok...{].S..%..q/....\|...".\........j.8....=s.1...MH.++1.x..O.....[.6...9]0.&. }..i..Dp....8...]..>...b.%Z5..}.2~

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2393
Entropy (8bit):	4.694052561447081
Encrypted:	false
SSDEEP:	48:cqtij5R0aLzzvk5TRAdz4lWVg66D7OI2dE+hoqkBCEBrlo:olR0aL3CzWVpkfeE9qkBCEK
MD5:	CE88B79FAC940FB758E173D25945418C
SHA1:	4338E9D824295498FB94929AE461AA7D9AD1296F
SHA-256:	A0C0B245C3B09E2B12789D126A1EDB08B2E53C0FA5FA1A98CFD4CEE9A5BCF12E
SHA-512:	CC281E1B57B0189AD791B5E3BDFEF9A828FDBC54DFEF95B0BF1B58DD420B8C927431C9126084444606079DF0B8C0BB739F3DF9836A408BB753DA592B25F87339
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="30px" viewBox="0 0 42 30" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>Discover</title>. <desc>Created with Sketch.</desc>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Add-To-Cart" transform="translate(-334.000000, -120.000000)" fill-rule="nonzero">. <g id="Discover">. <g transform="translate(334.000000, 120.000000)">. <path d="M42,26 C42,28.2 40.2,30 38,30 L4,30 C1.8,30 0,28.2 0,26 L0,4 C0,1.8 1.8,0 4,0 L38,0 C40.2,0 42,1.8 42,4 L42,26 Z" id="Path" fill="#E1E7EA"></path>. <path d="M42,26 C42,28.2 40.2,30 38,30 L13,30 C13,30 36.6,26.2 42,15 L42,26 Z M19,15 C19,16.7 20.3,18 22,18 C23.7,18 25,16.7 25,15 C25,13.3 23.7,12 22,12 C20.3,12 19,13.3 19,15 Z" id="Shape" fill="#FF6D00"></path>.

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	41704
Entropy (8bit):	7.977727767761686
Encrypted:	false
SSDEEP:	768:UhWuU1Hx4T/fedG2sM5y6jDT/V2ZkHXGaD1l1qdUzrokcA7BUnE0PITa:VuUv4TaLs6jH92e3GC1lYdU4+72pea
MD5:	38D091DB55DC3D5BEB90711949DB4F9D
SHA1:	F58AD76599B92D859AA6F26DACF1F9418BADB17D
SHA-256:	A88F7D8307A7978BAD42CFE1AEFE7531BA2FBE105AF034B612A2CBF78255A400
SHA-512:	0A5D5095A2208ADA6AE5DBB4DCE7AE6A321BEE32A86C43E99BC40A55A03CD4F081DA1E61160221E2ED16ECBDE13F0CF18198C3DE366B70743E759B80D7F8564E
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/image9.png
Preview:	.PNG........IHDR...^.........../V....IDATx...n[U...#....y..`...Eb.I.MC....6m.....#d.#....vq.M.e/..m.KV.P#X....rr....T....3k..B.w..!....!B.!2.B..Bd"..!..D..B...."..".!D.!D&B..B.L..!....!B.!2.B..Bd"..!..D..B...."..".!D.!D&B..B.L..!....!B.!2.B..Bd"..!..D..B...."..".!D.!D&B..B.L..!....!B.!2.B..Bd"..!..D..B...."..".!D.!D&B..L._.p.jJ........w...~..n5..fS.o{..5.!..r.A-.Imz.5.Q.l....(/...,;-....{..j..n..m..........m...\Y..b.!...&..A....e.SO...){K..~.Mm...vS~gw..k...?...}.}.?...#s.r.../..u}..{4...C.5.EMj.N.......L......+.xe.I...N....l.........j..w.a^ep...F.cnvV..a..o.t.....3>..k..K....5k.6.....f.3..0........x..."2S....%.U...Imu.....U.....=..].#...../.uss37?s.t...0Rg....81Fr..z.5b.%.\jP...G...S.Z.vf`.fb6..Y.9.....@FB..L...C..w..j...\|gh.......)'O.X.f.4.........s.....0N_77U.w..,....k.F...K.jQ..G.......F..........g...1...wj.!"3...t..................<kJ...6.-......tg..o^.._}f.?.\.s.EM.j...?........{..C,9.R.Z.6=.EOz.....hD+.....G....9......7)Q^....Z.t..

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1078 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	668416
Entropy (8bit):	7.996595782602283
Encrypted:	true
SSDEEP:	12288:CnIC7J4iwzLFz/Wt5qrEnbPuGG+scs9XZIkrFn25Sd+0CkUXC5S/:c7J4iwhiwrEnjuGG5caWkr9Zbqb
MD5:	FC39BF86D0770FB9F5C15A85DA770838
SHA1:	76A7F6628DEB6D3C8A229C958FBDA6A1EE67893A
SHA-256:	D64E3B9C7C89BAFDA4D4BBD373E1DD1983A1364E2D13C99F58D97EE5D34EE7F6
SHA-512:	23D8A2DFC012ECE50B9DB52B8F5792D05FF964324A8D5E1982E881A64714C796FE9C692D7F51DCEE16D693089F9F09C8EE73FACD8BA42C13D2F23441276C2266
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...X.......f\.. .IDATx..i.m.u.......\|....A.DS.HS.M(.....3."X?,.H... ...HH.Dp...,..D....b.@..1....J.h..H..HJ..{\|.{W...u...~..>..O...8...]s.]..WU.;$j..M.....H..k.mT.r..c..~...kxo.w....~s....p~....G..fv.....9...?....\23..gf.....%..sf......5...Q........Er..Z..`f7.{..~w..w......QL......e3.Zk.9..Z.R...ryS.<....7....b.....&...n....{{..>.x7n.s......{~.............y.u.....?.~...../^\|.[=...]....._.z.VYvvv...w.....=.....^N..e.\|.{..../....o.K.....~..c.....a".......<..'..GGGG...q.aME.......qn$.l$..1.G......D..f...=4....ZJ.8....\....p......>.M..$..Zf7.'py.\Y...,..g..Q......W......q..=.X,<.e.w..U~.............Nlttttt.%.u.W...c..f.&3....u\Jq...#Q..x..D...3..u.E.....k....9e...x..'.o....Z..O..DH......=j.....wF.....r......\|a.X.2^.+.\|~.Z}n.\~..J)....b..C3{.................:........t....}......R...o.?.Fb..qI.>.!...Pq.:..hl+.......a.....S.r...<....R.lyP.=,..h.+..5...a...:...yk\........KK"-_...e.Q....Tk}.....+[[[.t.d\.sc.Z...../....

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11461)
Category:	downloaded
Size (bytes):	11891
Entropy (8bit):	5.198397397772906
Encrypted:	false
SSDEEP:	192:4O3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjC0:4dRCchzzYfnqejah3e1Q5l8h6vb0
MD5:	C211CF6052A2C03A72781AE5CB31EF6D
SHA1:	1C66B543F488FE112ECD35B21C888763D6251ED8
SHA-256:	B2540FC024034328B658470F8B5AAF08EB7EEB36D7E989E3D2B76C6DAB9998DD
SHA-512:	27B37135A9F00D7DA3DADBB4CC07C24A7972F3DF0A4004AACB6296A04C01E59AC2E97E1CA5631A408D9998A17EEB0D26A89C39D70A0182AFBD9AB7F0A559C03B
Malicious:	false
Reputation:	low
URL:	https://buygoods.com/secure/checkout/assets/js/fontawesome.js
Preview:	window.FontAwesomeKitConfig = {"id":58743174,"version":"5.15.4","token":"1dd5876648","method":"css","baseUrl":"https://ka-f.fontawesome.com","license":"free","asyncLoading":{"enabled":true},"autoA11y":{"enabled":true},"baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"minify":{"enabled":true},"v4FontFaceShim":{"enabled":true},"v4shim":{"enabled":true},"v5FontFaceShim":{"enabled":false}};.!function(t){"function"==typeof define&&define.amd?define("kit-loader",t):t()}((function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var o=null!=arguments[n]?arguments[n]:{};n%2?t(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):t(

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 397 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	237735
Entropy (8bit):	7.99747829844365
Encrypted:	true
SSDEEP:	6144:Tl8AaG2SF5cU+zsEeD7i+1ntVvd5SNJgGLTef:T53XgU+7eDVLVSYGLTef
MD5:	DF5E4D8434639EF9456AFB940D32D6DC
SHA1:	8305F5B44E5C5B837B0A27BF2BCC4985FD4D053F
SHA-256:	39EE8C0DD8DB1D1ECA3822CC8E7CDF76282D39568A0CBE84D9E3502D9030A836
SHA-512:	4C11657DB265F848863C6AB89C96B5977F47336F3D697CD5F69445CE4DC2FD294E9CFFE44CE99D613C947728D23B2EB76BBADDE616FBC7AFCEB0E823F0D0741D
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/products/prod1/1-bottle.png
Preview:	.PNG........IHDR.......X........... .IDATx....m.U...s._...k.....n..n.........0e.................T.\`..bB9...T1.@...f2.,#h.....V....t.s.Z..u........{....S..y......a'...qc.I.KR.].s...../.e..5.....az../...C.}.....a.EdID.Ed....w...K)...uX..J.[..O.......RJ....=.b.H.....0.<..[....}..~...K...M.Y..upl.....Z.y...nv..o.:.-.......P......I......{{{..........z...T.....Y}/--..A.....k........U8....!....G.......b......U.....Sn..e.x..........4......]..i=.......v.~[.Y.v...[...-.<.C....H./IojK6....d..}ID...="r.C.]...../..\I..g.g.&...e....#r.D.M..`....<..RJ.l:....n.{+..w.^.O...R..%!"..JJ..+5.I..a@.]..LPf.q.D5..E.r...-"...Cv-.....51.k}....X...4.g Y.. m.........r.....H..x...s.gv......Y9Tc..}+.j.J.f5.d......9.....t....".LJi...D..>W.Q%...z..........%..W...{....f..RZ.-.....Y..PF....`.<.?...<...IK.]}>O.....V.'..............h..........M....SJo6w......rTz.^...~^.E.w.......v...<......N....=.d.`....L...H.hE}._P......*.E.6u.....(...@;..h.C...k........Gm..40.^]

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2774)
Category:	downloaded
Size (bytes):	2956
Entropy (8bit):	5.124762572686671
Encrypted:	false
SSDEEP:	48:avPioG2d9OtPw90tH89ytnDHCpnwt3jyTwJ9ctlZCLH3fsBAM:kP6WOtP+0tHiytnDXTfjctlZCj3o
MD5:	F2E0B2680D9B0BCB6E0039C4424E5A59
SHA1:	1EA995CEA90B79F3AD16C318572313A671718645
SHA-256:	7F8B63BFF49FBA3C5BAE30F4EB39F2FD6D088FBE9D7292BDF37B0EF4A1EC68D6
SHA-512:	DF7C65B3DF1A4F5AC7F697B1D6DCC264ECF3C177F9BD0375B5C52A4A124AC8CEA4FDE3429226875D3B39D1235623A0869230AF25E6028C452C9E7E417A53FAC3
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=1dd5876648
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-solid-900.eot);src:url(../webfonts/free-fa-solid-900.eot?#iefix) format("embedded-opentype"),url(../webfonts/free-fa-solid-900.woff2) format("woff2"),url(../webfonts/free-fa-solid-900.woff) format("woff"),url(../webfonts/free-fa-solid-900.ttf) format("truetype"),url(../webfonts/free-fa-solid-900.svg#fontawesome) format("svg")}@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-brands-400.eot);src:url(../webfonts/free-fa-brands-400.eot?#iefix) format("embedded-opentype"),url(../webfonts/free-fa-brands-400.woff2) format("woff2"),url(../webfonts/free-fa-brands-400.woff) format("woff"),url(../webfonts/free-fa-brands-400.ttf) format("truetype"),url(../webfonts/free-fa-brands-400.svg#fontawesome)

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59638), with no line terminators
Category:	dropped
Size (bytes):	59638
Entropy (8bit):	5.384268710012802
Encrypted:	false
SSDEEP:	768:gsv3147DmBGFiC43zcUSHDGn8ILxwPRiag3WGJXubDLvSiWUeLNGIs:vZK43zcTILxMRiag3WGJXubDLZWUQ2
MD5:	87F1785A06A7B9B22C36C9ADFD6FA060
SHA1:	3088E49555CFED24D1418C5BC618B26D3CB6393D
SHA-256:	8B37337F74B6289BEF481BADFEB67C0778BA97592141300E25B3900CCFA88A68
SHA-512:	643D63EAD5B3C024BF693E275B3148B1D5112AB9378CA86A2686ADBF69D7B843DC54FE5FAEE51C1AA856FBA99A6FC0324A9049405CD1E1557B6683B3A1D855D7
Malicious:	false
Reputation:	low
Preview:	!function(e){var t;"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):((t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).braintree\|\|(t.braintree={})).paypalCheckout=e()}(function(){return function n(i,o,s){function a(t,e){if(!o[t]){if(!i[t]){var r="function"==typeof require&&require;if(!e&&r)return r(t,!0);if(c)return c(t,!0);throw(e=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",e}r=o[t]={exports:{}},i[t][0].call(r.exports,function(e){return a(i[t][1][e]\|\|e)},r,r.exports,n,i,o,s)}return o[t].exports}for(var c="function"==typeof require&&require,e=0;e<s.length;e++)a(s[e]);return a}({1:[function(e,t,r){"use strict";var n=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}},n=(Object.defineProperty(r,"__esModule",{value:!0}),r.PromiseGlobal=void 0,n(e("promise-polyfill"))),e="undefined"!=typeof Promise?Promise:n.defaul

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2680
Entropy (8bit):	6.068780687833882
Encrypted:	false
SSDEEP:	48:cyKfzXMFvX2yzxORCN/PH4aUxFU2FNkFrOoszrwAN38ycpuvf/xC/tqR2WKpfac+:1KfjTytqChHd2jk5rzAFtvfp0Zfarckl
MD5:	5C2E97C9454875B6627B2769956D10A6
SHA1:	772AB061DE660A40CAFD3C5AB0F7E8874720BB6D
SHA-256:	5FC473F964BBDA49D6008FC039AE6D0371A4B3B58F680DD0FDFF505E67A035D0
SHA-512:	3D7EA09F30592942ACEFCC385ACF1935250F949F766C1DF89477F562F1274347D3E89F54060DA9074DC9AF03A1489BEFE690D09922AD1A9574A9815091B50647
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="84px" height="60px" viewBox="0 0 84 60" enable-background="new 0 0 84 60" xml:space="preserve"> <image id="image0" width="84" height="60" x="0" y="0". xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAAA8CAMAAADPEm3EAAAABGdBTUEAALGPC/xhBQAAACBjSFJN.AAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAACKFBMVEUAAAAHJEgRSZURS5sR.S5sPRIwHI0kGFzMRS5sRS5sHFTAHFiQRSpoHJEkIHEARSJQPRIwRS5sRS5sRS5sUTZxxlMPX4e7x.9Pn09voXUJ57m8fa4+/w9PlMeLQYUJ6Pq9Dj6vNNeLQ/bq75+vz///9ylcRVfrf8/f5OerVJdrP8./P5PebUrX6b+/v8zZan+//9PerU2Z6ve5vHl7PTk6vQZUZ4XT50cVKAdVKAgV6IjWaJghrwkWaMp.XaVrj8EnXKQvYadxk8MqXqU1ZqpqjsEuYKc7a61kir4wY6hBb69ehbs0ZapKd7NKdrPs8fdHdLL1.9/uTrdE+ba4YUZ4UTZ0TTZwVTp2MqM9OebRRe7ZTfbdWf7hYgblZgrl6msfq7/

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	43487
Entropy (8bit):	4.6872398982449095
Encrypted:	false
SSDEEP:	768:vmG0KfYDSZ3Vt5QZBPB0O0pWH1VyL5tc1n2XoMt:iKfYDSta09SSF
MD5:	C6F2FE4B799E5B5CE4EB0DFF12C2F546
SHA1:	AC26849BD8609085691971EF6F74EDF9AB13A21B
SHA-256:	A80967BF5D833B3C872F80E7D08335B52F75753E1A4572F5DFA5497B52E1FA7C
SHA-512:	EAFE325F02F4FF577DEBE99A273D263EF799765987BBBE8B5093921CFFFC350048B2565593E0E8E25D872903E9C6F8666BBFE4A4B2AEDF49DE9745ACB1BE2A81
Malicious:	false
Reputation:	low
URL:	https://buygoods.com/secure/checkout/assets/js/paypal-cs-conversion.js?v=7
Preview:	function countryConversion(input).{. const paypalToCountry = {. 'AL': 'Albania',. 'DZ': 'Algeria',. 'AD': 'Andorra',. 'AO': 'Angola',. 'AI': 'Anguilla',. 'AG': 'Antigua & Barbuda',. 'AR': 'Argentina',. 'AM': 'Armenia',. 'AW': 'Aruba',. 'AU': 'Australia',. 'AT': 'Austria',. 'AZ': 'Azerbaijan',. 'BS': 'Bahamas',. 'BH': 'Bahrain',. 'BB': 'Barbados',. 'BY': 'Belarus',. 'BE': 'Belgium',. 'BZ': 'Belize',. 'BJ': 'Benin',. 'BM': 'Bermuda',. 'BT': 'Bhutan',. 'BO': 'Bolivia',. 'BA': 'Bosnia & Herzegovina',. 'BW': 'Botswana',. 'BR': 'Brazil',. 'VG': 'British Virgin Islands',. 'BN': 'Brunei',. 'BG': 'Bulgaria',. 'BF': 'Burkina Faso',. 'BI': 'Burundi',. 'KH': 'Cambodia',. 'CM': 'Cameroon',. 'CA': 'Canada',. 'CV': 'Cape Verde',. 'KY': 'Cayman Islands',. 'TD': 'Chad',. 'CL': 'Chile',. 'C2': 'China',. 'CO': 'Colombia',. 'KM': 'Comoros',. 'CG': 'Congo - Brazzaville',. 'CD': 'Co

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1408)
Category:	downloaded
Size (bytes):	36446
Entropy (8bit):	4.039639849080958
Encrypted:	false
SSDEEP:	384:GYSz44Ku8qJKE6p4JGTSArnwUOGVOMrJWBnx/3ri:GYSz44Ku8qJK5aJGThrAG00JWBx/3O
MD5:	E697B753DAFE2A4E291C3834619FBB17
SHA1:	009394BE4FE90828142F93C63897311107E71E83
SHA-256:	C13E67AECA441418D11B82ED72BD35DA1B1A4AD2B9FA81CCF9FF4E12A1208D38
SHA-512:	DA450457A0ADAB14F76C24A732FE2D2BB366589B09FE45F1988997C791FA7D0547FAD39226D89CB190978E45A03F7C514E2CDC2000E79A00A5655996FE53B702
Malicious:	false
Reputation:	low
URL:	https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta name="Classification" content="business">. <meta name="Language" content="en-us">. <meta name="robots" content="noindex,nofollow">. <meta http-equiv="content-type" content="text/html; charset=utf-8">. <meta http-equiv="X-UA-Compatible" content="ie=edge"> . <title data-translate="title">BuyGoods - Secure Checkout</title>. <link href="https://tracking.buygoods.com" rel="preconnect" crossorigin>. <link href="https://display.buygoods.com" rel="preconnect" crossorigin>. <link href="https://cdn.buygoods.com" rel="preconnect" crossorigin>. <link href="https://js.braintreegateway.com" rel="preconnect" crossorigin>. <link rel="icon" href="https://cdn.buygoods.com/assets/checkout/img/favicon.ico">. <link rel="apple-touch-icon" sizes="180x180" href="h

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 678, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1280521
Entropy (8bit):	7.982319956856446
Encrypted:	false
SSDEEP:	24576:O4nA5/xBtaxfasiH6rBg4ATM6P0KV/LOMeIa9yBbQvnx0vBj1:42asiH6rBptUL/vDCyBCxCj1
MD5:	136F3743B1E20C19A52B788F4702E332
SHA1:	AA1A6AC82C81A90C8DF11D6001FBE2B3D3DD3AFF
SHA-256:	6B1F28A1C4961597002343E3BA09E479F5CF50867DA57BD12CDC2D223D0C109A
SHA-512:	FA110A5D64C8FB415ABE38263C4416B3F72DA26568EA7614D55616406F30CF94A0CB1B51D63D7822C2F1D873D82BFAC2BD239ACD2D6F550D4CB8CDC5E7053158
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............]P... .IDATx..u.....s..8I..$[.-hff...?hFu....bF.........;qx&..d&..<w....O..d.g.?~kW..T_....w..V../..~.r....7.h..Rd..Th.CI.......;..b..b....$....$.RV...#).E.g.#...I..X.rL!d.._..r..H.$_.c..7.y..r..r._i..\+pDitFS..T,..k.'.bw4E%Q..]..8#.w.....a.rm.m.>...T......J].s.).L...7x).S.$...V..B.).4S?M...Z...n.K..7..>d.....$..L.;..O(..0.}..Jc..I.}....1....qD.i.%..D......CRAo...H..MJQ.R...nhU.5D....a..]...#1..b.H.^...2.KY&Fo.:w".....i.!..L...:O....&-...X.'......._...R..w.....;-.......G.U.eK)....02.wu.Fw8fO..O2.k4VW..x.%..l.XZ...........E...iv.Q......CVQ.r.....]W..S...b~x..wnLf...f.+f..jgG.k..bF..sS...@..x./Na..tj..c..4O{"r.w...3......zE.#=c......W..9.n...RX....-kGaMG..QP.....U.P\.\|_.2..Hsu ..3..yvI{rJ.ey...HLy....HNmGt.[$.>.<0....._....i._...-..lIa..F..e..X.-Md.D.NO.iR....8\|r<......q.>6...'0nj1.......D..#".=b.? ..C..3;"J..LFA......1..R...&..7.bk.:[0VO..\|s8.....NLz7"S:...>.#.G..t...=#.g.....aI......Y..Q...5..'..'

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1999 x 1125, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3785982
Entropy (8bit):	7.989848379634906
Encrypted:	false
SSDEEP:	98304:DrR2TQoyp6UC2GQKX3uC3LvHlLfZ0635MMvXGwf1Nup25Q1f9oXYLF:DYEtpnC2f3C3Lv/MMv2wtgM4uILF
MD5:	8EDD084365917CCB4120EEA1711FDC08
SHA1:	832C19D69AA8513EE33B25192387E9802DECC970
SHA-256:	123BBCB807F00E78D70DC30574AD944BB47F24598B1607E951D4D0720000335D
SHA-512:	DCC9ADE2CD302B931E6BCD337955B6F74F49EF71BDD804E36FCD9FAF0D89516C5295D080C3AFF2F188BA4D1FD8649FEBA5640B74A3032526B1A036D710262531
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/image3.png
Preview:	.PNG........IHDR.......e.....7r.G....IDATx^.....y+3.........Hx...$A..4.....o..I..(......$z.I......n.7kM.^k......y2....7z=..W..[@UF./......C..!...s...j9....'.3.u..so0!...:.VR...C..m.....K:O.s.F..RF.y.G.R..9Zf.T\..M..e.../......ab..=...D7K.R....P]r..:....UU^\|[....6......E"...w...I.iHo.$.^....]....i.2...#.I...v..0"...M.w6.{..9.}G...].......&..l..s.P\.<I...+.........6....+C..;Cq.].N..+..~...5.\u......5.T(#-......./.;.J......#...j..P^.V..V..I.....N....{..6.G.....;........kZ./T7...I;36$.7.........Bq.}.B;......u.G.6...Du.:.....Co.P..fm..fU9s.i.P....9.C5w....[B5g[...i9{...-..m............:r=.....H...........\|...U.]..i...m....G.]4W...)..b.{.TF.Z.[.io...........@..v(.7O...C...G.~Z..w.WT.Z\s.P._.}..uB....H.-<y.=,..B....G...UU.................Z\|"t......j..R_.9..I.+.S.L....=.V....4-....T.\|R....G...Y\|R..xB..=.....'.O..P!_.ny.j..Bw..U...i]...M.(.x\U,{2.....=%m..5w>...\|5....._...K..C...J....P..r.$..Z.J.R..6...Co.7..

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3266
Entropy (8bit):	3.998588979681478
Encrypted:	false
SSDEEP:	96:xhvZR7GXTcI1TZagxthDk5l9CFKgRBqnMbNFXn8NjEVCvE:TPuzbkD+zqOj4AVCvE
MD5:	387E86C389666FAE52146858CA65DF6B
SHA1:	E11C568FA705B9E1D994FE494A2A9544F57E3EDF
SHA-256:	3F8C62B36198124E39FE0D48535FEF486D0EB6174159C5C72B0FCAEDE72222F2
SHA-512:	4E06F1384F26FBF3E61A9514EF80852A82292F813561C52C248B2C22F16B3829C8E96D31D5C79EEFC3C7F9E537950B8852DC0C4FA40EF721BE075EA28672F9E1
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/js-sdk-logos/2.2.7/paypal-white.svg
Preview:	<svg width="101px" height="32" viewBox="0 0 101 32" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg"><path fill="#ffffff" d="M 12.237 2.8 L 4.437 2.8 C 3.937 2.8 3.437 3.2 3.337 3.7 L 0.237 23.7 C 0.137 24.1 0.437 24.4 0.837 24.4 L 4.537 24.4 C 5.037 24.4 5.537 24 5.637 23.5 L 6.437 18.1 C 6.537 17.6 6.937 17.2 7.537 17.2 L 10.037 17.2 C 15.137 17.2 18.137 14.7 18.937 9.8 C 19.237 7.7 18.937 6 17.937 4.8 C 16.837 3.5 14.837 2.8 12.237 2.8 Z M 13.137 10.1 C 12.737 12.9 10.537 12.9 8.537 12.9 L 7.337 12.9 L 8.137 7.7 C 8.137 7.4 8.437 7.2 8.737 7.2 L 9.237 7.2 C 10.637 7.2 11.937 7.2 12.637 8 C 13.137 8.4 13.337 9.1 13.137 10.1 Z"></path><path fill="#ffffff" d="M 35.437 10 L 31.737 10 C 31.437 10 31.137 10.2 31.137 10.5 L 30.937 11.5 L 30.637 11.1 C 29.837 9.9 28.037 9.5 26.237 9.5 C 22.137 9.5 18.637 12.6 17.937 17 C 17.537 19.2 18.037 21.3 19.337 22.7 C 20.437 24 22.137 24.6 24.037 24.6 C 27.337 24.6 29.237 22.5 29.237 22.5 L 29.037 23.5 C 28.9

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	15935
Entropy (8bit):	5.026114673760996
Encrypted:	false
SSDEEP:	384:juKSU3zqCnKS1gGD7SNlJ+9zbrxfdO1IFgu27Udty1kBgaYnUdrIpTcUnxXUImrk:juKD3zqCnKJrw9zbrxfd4IKu2QdtUkG3
MD5:	04CC7441E91F1D37BF16CC6F8750C1B8
SHA1:	2314426BAC702CA57D7A523BF3F6B920E874A522
SHA-256:	6621893E1255C19F7D76F3F4AB37CDED3EC23D7DF4854138E86F444582F10CFE
SHA-512:	B252B3A4726AF704141CDD7E7AE146296B16873FCE5E84190122586B9AE6578C35371A819A7D2EBE8E4CEE5589D212DF86495C273D3BF7EC2756DB5441C55279
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/lib/v1/js/vaultFrame.js?v=65
Preview:	/*. Extract where we are hosting this..... /.const currentDomainVF = ( new URL( document.currentScript.src ) );../. Represents an object for managing and interacting with an iframe used for payment processing. . * It provides methods for initialization, error handling, styling, and communication with the iframe.. . @property {Object} options - Configuration options for the VaultFrame object.. * @property {Object} elements - References to DOM elements used by the VaultFrame object.. * @property {function} init - Initialization function.. * @property {function} showErrors - Function to show validation errors in the iframe.. * @property {function} addStylesheet - Function to add a stylesheet link to the document's head.. * @property {function} createIframe - Function to create and append an iframe element.. * @property {function} createTokenFieldIfNotExists - Function to create the token field if it doesn't exist.. * @property {function} createCardNumberIfNotExists - Function t

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	583482
Entropy (8bit):	7.994298796826186
Encrypted:	true
SSDEEP:	12288:99G9iw6h40L7ZDKJLjDvwwKgq1YLsbaWUanLaXIO1s:944woFHWLwwNPjW7wG
MD5:	24309D38E87557DC83275C1433AD9EAE
SHA1:	69956E1CCDA5912803CAF219B005DFEE266CE2C6
SHA-256:	865177196D86E4D4ECAAA7BAEF493119049832846D0771783546B2A8595EFF15
SHA-512:	4E04C0DF32CE9418490D7E43E7B252E99837000B78136CAEBE1A7812E2DCE837D8F001B57DFEC594E6874AA9D2422034E405CD0940BDD4FBB83C1F4551FDB515
Malicious:	false
Reputation:	low
Preview:	:....R....QZ5xuqBJH_s... .......CggKA2RyYxIBMQ0....j.............CggKA2RyYxIBMQp..#..6G..C.u"....".AA............"n....x.I.@......v\|....g..i...'9..8.H._..x/@..#.....(G...9..%.H...9.i..v\.xGP._(Y.?.ID....#GA.....J..'\L.RX..]..b.B..IBbn..v.)..X~_AX.l..,.-.+}...F..'"-=..p.w"!..c15x..z</Y....4.K.o....L..\..CO0j.C. I..x.%. .j.`.G.P..N..i...2...R.9Q..Lz..x..!N.h.96...Io..\|.;QaSll.c.....a.lQ.{(.../g..'.a.%..Z..A9........Y...0j.....oG..8....5<..V.h....\|..d.x.^.R...Cz.0.g4H?}G..4...N-..k.+v.1.....^.:u.T.`....E.......f@.;E..02.b....Z..P...G.S.`u........HQnTF[.O......q..XW~Q.....L7..4qM........b.l.8-:n.P...9..j....JM.....l<ex..?Pk..IW..\|.3.p+.X).....[._P..-./...4.k..?......<.!.B/e},..L ~....7.M.y~........P.Q.A5...A1..(........<.%$Vx.&/]...?e......G.h.....};...EL..g..V.t...,.N{..........Z...:.gm.d..l.q...s...X..Y)B:c.....I...5T;(.`}r.F..j.&..... ..kTJ&.7....b...*V...1...o..a..4vcuce..iJ...f/.{.Ie.9.......iiR.}.X.^.,$..n.....E..]>...........d...lO.m

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58028)
Category:	downloaded
Size (bytes):	58090
Entropy (8bit):	5.177609334324191
Encrypted:	false
SSDEEP:	768:p6N2iZT6Pt+CoA5j0J6YUgw/G1NAjB7XHLcUj7oUTX6XshDe86UYiqYr2IkJYu1A:pgA5jy6YyX97nPJKsQ8Blq0XkJP1/iT
MD5:	2399A4BC9AD51ABC6953F078C14A37BE
SHA1:	D9D782FF309AABEE107121530D3F1E432453260C
SHA-256:	79DA320C6FB87E096C737F174D81EEDA39902923945C8B7A90BDC4B7D934734F
SHA-512:	E0990444A2857644A3FEE340CC51B3B52D36BEC3BC7C5F35099066C9AE74C22AA0E9BF0A03E7CC8051ADE9E0828170DBD179A414F4A8C04ED525405E0095C5C9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/muse/muse.js
Preview:	/! For license information please see muse.js.LICENSE.txt /.!function(){var e={215:function(e,n,t){var r,o;!function(i){if(void 0===(o="function"==typeof(r=i)?r.call(n,t,n,e):r)\|\|(e.exports=o),e.exports=i(),!!0){var a=window.Cookies,c=window.Cookies=i();c.noConflict=function(){return window.Cookies=a,c}}}((function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var r in t)n[r]=t[r]}return n}function n(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(r){function o(){}function i(n,t,i){if("undefined"!=typeof document){"number"==typeof(i=e({path:"/"},o.defaults,i)).expires&&(i.expires=new Date(1new Date+864e5i.expires)),i.expires=i.expires?i.expires.toUTCString():"";try{var a=JSON.stringify(t);/^[\{\[]/.test(a)&&(t=a)}catch(e){}t=r.write?r.write(t,n):encodeURIComponent(String(t)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|5B\|5D\|5E\|60\|7B\|7D\|7C)/g,decodeURIComponent),n=encodeURIComponent(String(n)).replace(/%(23\|24\|26\|2B\|5E\|60

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65466)
Category:	dropped
Size (bytes):	568463
Entropy (8bit):	5.334301044642348
Encrypted:	false
SSDEEP:	6144:rDTTlj9Bw2l31HotNORFhN1mGQ+2HIvbTgg19gjLHO2MvU9rW/0ZN/DEcw15vG:rDTTljX931HotNORFki9gvN/Du5vG
MD5:	A5D2A03FF186AFA79E7970245992C883
SHA1:	B3448772DD058CEE0F31BD17E77E6E7BAA48D891
SHA-256:	4550A55107A901B0869747D54EA68A4C9910E737576A735D1CB042D8F7F4718B
SHA-512:	E223FA518236207F89D83EAB9F4C41ACA5DA622FBD5D2A04DC17C94EAE9EDFCA3563DF1A0CB89EFA3438BA754A6ECEC51BC39B06B75EE2F6D6027CBCB8D7280D
Malicious:	false
Reputation:	low
Preview:	/! For license information please see app.js.LICENSE.txt /.!function(e){var t={};function i(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)i.d(n,r,function(t){return e[t]}.bind(null,r));return n},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="/",i(i.s=0)}({"+924":function(e,t,i){"us

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1844 x 610, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	390018
Entropy (8bit):	7.963867765534303
Encrypted:	false
SSDEEP:	6144:HkW1nbfHS6fpZxJ2OGtrgg3J8dr1EB0NH4G7Su1X8Ny10rfGo0eu20hSarLLaxSS:EsrVZz2Jr0drH7SuJ0rfXu20war6x8Ts
MD5:	BA0EF0C9F783C14B051DCDA67712A90C
SHA1:	ABF30574F9FF65A960EC741D05D00E52241E332B
SHA-256:	6F6CF63EDF5A290790C17418C58AAB1A9F07C391CF3153DF498C492D1E0AB357
SHA-512:	60C65440F7D835E63846ACA7B56F32AE620B244DB029822AD410E748048C1315CE65385C5037269690BDDAD4BC26000F0F4FD9AAAF96E7D9469289C26551D653
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/images/custom/image2.png
Preview:	.PNG........IHDR...4...b........... .IDATx..g.T............'y.".6@E.....l1...c.F...X...Xc4jb..(b.w.A..wDi......w.5g....9{.\|.u.n.....g..........@...3g..m.O.....\|......\|..H..U........ ...@...... ..<.;.q...@... h"."f....>.....@:...W<L... ...@...... .....@..E...@ ...4..`2../\|......\|....{.vA...... ...@........@.LB.4..@.. h2(..<>......>....L..a.. ...@...... ...@ %....H...4>...t...........\|......... ...@...... ...@....@.,..9!..F"...,....>......>.....j!...@...... ...@..%!..Y......T...f..L.\|......>.....\|W...@...... ...@....@.. h..(.A..e'...,....>......>......F..... ...@...... ..2.@.,#\.....C.A3..&.......\|.......Q*. ...@...... ...@.2..4+.Z ....@.dP..y\|......\|..H..%\|..(.@...... ...@....@.. hV.9.B...%...n..._x....>.....@C.....@...... ...@...hL....I..!.... h2(..<>......>....^.....@...... ...@........t.f@.... h...d..^..>......>..M...... ...@...... ....@..^.`.. .C.A.AY....\|......\| ...^q...... ...@...... .i..........\..4..`2../\|......\|..p.Sq...... ...@...... P-..4.........@.dP

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	5.0336754555843015
Encrypted:	false
SSDEEP:	3:QXEWXGx8eZ2KLx+AfYTYaVRDGMGQSASyPUdcRbDN+6SRaDwALh:QtDi2QLf2rDGnisObo5k1
MD5:	030759B144F839F69F0038164DD892C4
SHA1:	9C616ABAD59D7AB53CF164B77F2705034A807EF5
SHA-256:	9E4A442938E2245A853A0FE3BE8509C34650C40C79342FB5E7A5BD98EC646FB2
SHA-512:	3FAB299FF44911860C173D3D47DFE691530E2D9A5786979B3ABB5B1A7BBC340B8F1D5945ABFC4ABA17085A18AF517937E5B318856CF6C4A2C907ED3AA32B110F
Malicious:	false
Reputation:	low
URL:	https://nervedefend.com/pixels/maxweb-click?key=n9p3OB1R7PyQJqSfT9ZNPLkvMDVT7ZpR
Preview:	<iframe src="https://go.maxweb.com/conversion/iframe/?a=6988&token=e2e306dffc4e053c57e785d8331894dc" height="1" width="1" frameborder="0">.

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	downloaded
Size (bytes):	339582
Entropy (8bit):	5.620224928082496
Encrypted:	false
SSDEEP:	3072:avUSCmK9i0H108liQNie0rw5RMTu7Vj6GvBoNJyMf:a8SStH108lNNt0rSRMy7VjXvu6+
MD5:	9965EC042D533FB56BAFC3BEA2135437
SHA1:	6F8297E0E9B924B271F511AC2039D0A9C2788904
SHA-256:	13A9629223335969B254D033D51FB9D5115DB4F22E2163488C6FCC2E7E6EBD39
SHA-512:	E37649EF89A72B0487711AEE18D3D0B02B843C63722B72D2C0DE5D561835BA5D9E2EAC6ACA92CDF9707918C202DF6AD5CC17BF8745DEAB5B32B3406C7F674CEC
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var fa=da(this);function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5198
Entropy (8bit):	7.945825075921642
Encrypted:	false
SSDEEP:	96:ZO5iVycMs/Q31ZFHY6Xf3SUfxETzveq2UpHezPKs+4NxXp1k/M5YJF5GZyVmasgC:RT4KO3SUf2zmq2Px/GdXSyDsgxL0
MD5:	07CDB57DDE194B778AD7D83EA07E4012
SHA1:	949EF26C92A452C9F7DBFACE49E0E0E3A91719DE
SHA-256:	A26DA429D6B98691C07FFC17964AD1F82DE59E0B7C24A4099CD6F69089E53DE5
SHA-512:	9AB2660B9C47E25774FDF03CAC84B29266AE56939A8A813D37C18618232E320BCE001C99E48C0ABB3DBDB3A3DC91861229A70274521032C4086645BA1DEB3605
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<............ cHRM..z%..............u0...`..:....o._.F....IDATx...xS...O[h.R(...\|.K..) .eo.;z.dGYJ.....-..(..W..P6...% .+..^...e..........s....IZ......{&...&..w&Q.3.0..3.0..3.0..3.0..3.0..3.0..3.0.<[......sZ./Z.....u.cBxdBf.b.a...W..[.N.......K....u.B_...e.[S.G:.y.Q.mRs.Z.....b....+...Yp...S.3..G.).i.]..TU.$e..msZT..3&%. TW...[...a.......a`.S.4..TEC.u`985l.j.a.zC.O.S..9....D..v.....)...nmX#..C..fM....A.Q.....m..h....S..1_.C.W.....nmne.xw..)<.w...G%f.K.~..Iw....${.k............................os...J...&%..:...M.N.....jA$$..p'...B....I...^...=O4.uL7O..D...x....-...4m.P..Ms7M../...i\.........2........f.....5.......8:Q.f\.......S..w....S..pj8.A.^.f.g...M.....$.y?...8....ULZ.r......,gLb......../.spZ.kpX........o....qsqE.>..0.6.>8.........x..y!<.....w1......A..{./.l.....#f...........`"l.3ncrq...D.m.\.D..n.n.\|p..p.....\|..A...s5.#..F...W['.<.y@Q.Mj..Kp....>...n.N.]...0.,\|..y.$../.>.?s/[(..1m?....:....j.i.'x....K>.l.....

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	965
Entropy (8bit):	7.074832980192663
Encrypted:	false
SSDEEP:	24:kdLdo7U8Wln2HveCdV/EA/ooj6cbqRgPTzX:yLd1gPfV8c2RATzX
MD5:	D9E4AF6D2F3884D173632FB85899F176
SHA1:	2844918E6B7368CB99145C25003FE36F2C539FC8
SHA-256:	19A1A7AA225DF93AA8518422F904CBAADE50DEA44F23FBA30EAE9AAC32C90ECE
SHA-512:	60317091D701AF1FC17320FF9D04107D02D9E536F0A76F02CC990E1BF0EB3EDBEB07A077D8C7200CDA6D42BC3603F23438B0388BDAF7C4268E26E2A5F91AF525
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/ytc/AIdro_m9vnpvLDuCjN3benUeTYbdwWWXR-SG2Q9WZSq15GVI1DuDYBub2lf4hmef0g1yidFIrw=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF......................................................................................................................................................D.D.......................................+...........................!Q."12ARqs...3...............................0........................!12qQ..A.........3..".............?..N.v..@....@....@....@....@....L5^.0U..JH...V..Af.\..Y.dj..N..ff8.PB.}..2W...]i.@\/5\.jg... ..C.eO._.:.Uj').3..i.WJ.M.o..........f..Y.....RI..$.I^...W.{....i.n...s..D}.N..%q..PO.@.......R.....Dm%..(....r+.&I.... ......:MJd...[q.{..k}.Q.....B...h......x.E.}..Q....'........b..*.(Ya....z..p....0N.Z..R.......\.I[n..HR......x...\|R:..z..B.i....S'...n. .I#e..-<0.O....S~..Zu....L....%...@..........[.'.X.+.3.]V.\|znW..p....UT.B.,a..."".U4.B.,a...#H...SOL..on...Z........q...L}....K.LUu.l.z........k.LUu.l.z...\..zt3..... ......~J_..#..<G..jO._.~+....\|5.n..\|9.n.....\...@....@....@....@....@....@....@......

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20970)
Category:	downloaded
Size (bytes):	21133
Entropy (8bit):	5.241126550213599
Encrypted:	false
SSDEEP:	384:yep7yiq/ApivD5RIjdMVV6qsPHzdhPQzOmSKt4ZIfUugRdEWS+1igMr:yQOIHHZBYjbNqEWegMr
MD5:	9D800C462D0440E0E0791DF6BDB2745F
SHA1:	C93AF0D1B19051513BC6751936C5C015B59F9980
SHA-256:	7EB194C2648DE022CB8F29399B9F4409D5EC0CC5314D6E4EEA175C78D1D5089A
SHA-512:	29A2321DBDF48974D77C6C88F5CC8A154211492B9E909B7AFEFA97B7240A8503FAA33644198F273AD452E9F131A84E3E45B607BACDB21B2620D41AEAC7357A60
Malicious:	false
Reputation:	low
URL:	https://pay.buygoods.com/js/cleave.min.js
Preview:	/!. cleave.js - 1.6.0. * https://github.com/nosir/cleave.js. * Apache License Version 2.0. . Copyright (C) 2012-2020 Max Huang https://github.com/nosir/. */.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.Cleave=t():e.Cleave=t()}(this,function(){return function(e){function t(i){if(r[i])return r[i].exports;var n=r[i]={exports:{},id:i,loaded:!1};return e[i].call(n.exports,n,n.exports,t),n.loaded=!0,n.exports}var r={};return t.m=e,t.c=r,t.p="",t(0)}([function(e,t,r){(function(t){"use strict";var i=function(e,t){var r=this,n=!1;if("string"==typeof e?(r.element=document.querySelector(e),n=document.querySelectorAll(e).length>1):"undefined"!=typeof e.length&&e.length>0?(r.element=e[0],n=e.length>1):r.element=e,!r.element)throw new Error("[cleave.js] Please check the element");if(n)try{console.warn("[cleave.js] Multiple input fields matched, cleave.js will only take the

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	65587
Entropy (8bit):	7.950251407697571
Encrypted:	false
SSDEEP:	1536:ZGrdKAETPusymEWTkzD8bmPsJvqquqndZMJ253jBwVExqR:ZedKAAym5Tkv8qRq4wjeZ
MD5:	E362D633E265B48BB1AA907D23BA03FF
SHA1:	633412CDD07CED9A7FF64CEAAC539AB4CC2205F2
SHA-256:	22ECF44817693E2026C9102DA2EE394DDBF3D39CC496DF62075910F258D18145
SHA-512:	941DBDEB9DDA938793BA776DA9E9BC2E5B87051E9A44D020332D4086E1851CA8AB6A18C156E1C19AC8536F262BA204BCA559377D227E06957AF36CEF7F65BB7E
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/QZ5xuqBJH_s/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGDwgVihlMA8=&rs=AOn4CLC0SO246uCSmQDlqeODAlq3F_5aGw
Preview:	......JFIF...................................................&%." #...5% 0+000..9=5<%0+...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&2&&222&&2&&2&22&&&&&&&&2..........."........................................Z.........................!...1AQaq."2r.....#bst....$%35BR...46...&c.....CSTd.....U...7.................................+.......................!1.2AQ."Rq.aB.3..#............?..p.^.KB.../..........C.h......h4=..Z..A...C.h......h4=..Z..A...C.h......h4=..Z..A...C.h......h4=..Z..A...C.h......h4=..Z..A...C.h......h4=..Z..A...C.h......h4=..Z..A...C.h......h4=..Z..A.................-.G3..M...yu4.a.Vlz3aU.....&M..K...F.)y..Q..e.4.[a.&t.9g..2..H.F.A.!.".Q\|bW._.4.D.!.4.i.@13A..4.Z".6E.....4...$H..".1E.E.i...H4H..$..`.............b.L..T.E7!.ue.DU.E..I..R(.sE3@S$CE.4EA"I.D..:...B.cbh......L.E.er2.2#lDP1!.M.D.$.E.&W.h.!..$.lP...."....d.D.$...E...A."qD.l@4Sb/......&.c... `"*.D.Q2.+......d.A..-....2z#?'..p.:.J./....J./.......4......@........h..4............@........h..4............

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3351
Entropy (8bit):	7.85060621536659
Encrypted:	false
SSDEEP:	48:LWycSphBdUirO3aEMudb2oy+v1kxho/aXgB1+Y11Og6tcRS8pEqp/HGWljfm3h6n:LWyNTrAqCCrXgB/11Wp83/vxfIh8VTy+
MD5:	9E9DD969CEB057A228067A1C539127F9
SHA1:	FB2DA26959858054157960BB7F8E6C145648EAAC
SHA-256:	DB209390B90B70F4B1EF3540CB581E4EC8EDBBA21980971B68E4AEF5C5D352FB
SHA-512:	0601582BF01D92EC6CB88B95C6246E3BC48EB2B477F733B1FD9D2614AE26ABDA7D2481B20AC89BB7C7F4BC63486AD713F3729ECD1E8279B0E2EA8025E0BE40C5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...".........9.$.....IDATx........_..MI.....s2..O...;.9...2..s.en7.9.9.0'..a]nE.....>}.....N.....f~;..{ss.6.cv.z.._dz]r.%...!j.n...1........!j.n...D..P..O.$R&P..=..".(`.Fl.BPS}<K......P.j..g....4....S...l...G./.7X..".6.$....Hb....h.JB&..M<"....I(PrI..0..db)..V... .K9h"..s#(....E..A.F%v.....&..r....Z....!b.....0.H.4...L&.$"d.."B&.?}{.^..Yq..M,.. ..ynb.H...Co.x.x.%.......-.M.%.\|d..C....y$b...D....<....."............}"...X.#.Si.q.\.:...J........qNV!.!!..9c..BfOp#0...!.e..72.K....y.$...V"$.$IP..D.q.."....Y.".....9...8....".H/...+..-..d.O..xa8F...?}k....2...=..$4.M.H..J.!.d..9.....,.%..+)b@..@.P..%...........)...b.B..(.H..D.r..j.1 g"...5:I...R....$Q....i..2..&..D..s?r.W.~..[.l...\|.3..-y.I..R.H......."..h.!Q...YDRP..N(P....M..2".E...s.:.;....0.+...H..r.6G4PLF...sd..b`.F..u>..#.I(.2 ."...Ns.".o..e.....R...@...I,d.....H....b.K...D.0i.dB.1..`9~.W...k0.......V.....L.d..s.Ff....u....^s........(....x.........q.j.7.`...n.>.\\|.V ..=.....#P

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	65631
Entropy (8bit):	7.989588885887563
Encrypted:	false
SSDEEP:	1536:hzk+VrqMa3cYzvtouGn1cH/1D0+8qlOpPUAVLAtb+x2ikAFihxJ1rPxr/7re1O3:dkUAzvtouG1c14DURAt1xhFExJ1rPxrl
MD5:	B9F35ED4854987992578C06630E18FDE
SHA1:	E52DE27A00E3153D130A4FD0DBA7763453C5A3A4
SHA-256:	A378DFD0F442835ABE001BB682DA547B88824D7CACFB099C2C3B759549638D4B
SHA-512:	88EEC496B4F4BE18631655CE927470DBA7749F43DB1A7454119088D1C29FDCBF69F71AEEC0D430A214727636CEA03FDAE7E048DDD21E4DA7B6DB253B9F5CE05E
Malicious:	false
Reputation:	low
Preview:	:....Q....QZ5xuqBJH_s... .......CggKA2RyYxIBMQ0...j.............CggKA2RyYxIBMQp..........c........:?..7...-...-.?8.P.k,..,;..'.CU..~...C..8...E...c,..N..D.S...jY.K...v.m.`.m(..D..\|..h...t....xF..........N%<....$&'q.d&....t.S.>.1...v_...]1...^nWc.}.m.}.oy.. %.N.1C\|....YF...I.<....z.a>@x.e.M.[..@.i.....Y..3...a3.1...fA.1;....w.....R.4,1...^.n.......c+}..`..t.d...&.uY...7........5.\|(....i......u...!....".%%...U.......M`.....S..7CgT#$.r....$.~.....C.R.....`Z....M..A...%.....T".O.v?..\=.\M..\......LAmE.n.....2.(P....s..(.}i.8..:.6...Wy.i_.N.5:7e....F../-......,Jz..^X..U .2.5.]........Q..{.o.!<R.[<w..D.b......A.R....B.Z...^&..W...B.M...w....!b.C.tPy#....\|#.@.;CI.......v.l.\.s..4_..>\|.}.......p..Y0...<. ...m...5.19Z.Y. ..gSP...&+it....s....g-.J..z...w..1d..:...D.V..'..T.>..@.[...HC......<\.`.eVx4.F.:...,F{....Y_.. t...K.&(.l...Vz..fI..HByr3.....Y.....2..R.#r..>..59..A...9...l3.?A.^....B.0.L.X.N....9wf........ ..U.@..8..b.m-&.....b.XJ....B\|

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	7283
Entropy (8bit):	3.225010776202413
Encrypted:	false
SSDEEP:	96:5VVD1UOSxR9U7liHjP9zb1wziynhcqhirTD6v:5VF2OS3V9zb1wzJeqUrTD6v
MD5:	5BDA22BA770AE25C57ADC8FA782B46DB
SHA1:	F02F92D31D69F6EE11ED9662D8826DF59F73E243
SHA-256:	F7550916AD553EA9231CE2349B14E06FEC49C7D9BECFFE6181B0BCDA4C641A10
SHA-512:	B0E94C4CBB138FC1837DC984EDBBF556D68C41B00CBBD29D15313F8472A3F75A92BE550C536BCA1A5B111A1800E87BC9A13831D5C52173EE4F73E0D35618ACA2
Malicious:	false
Reputation:	low
Preview:	:.........QZ5xuqBJH_s... ......0.j...........p.8..p.....ftypdash....iso6av01mp41....moov...lmvhd..........<...T.................................................@..................................(mvex... trex............................trak...\tkhd..................T.................................................@........h......mdia... mdhd..........<...T.U......Ghdlr........vide............ISO Media file produced by Google Inc.....1minf...$dinf....dref............url ........stbl....stsd............av01...........................h.H...H..........AOM Coding............................av1C............g6.$........colrnclx...........stts............stsc............stco............stsz................stss............vmhd...............\|sidx..........<................?..@...........@........^..@...........@...........@..........@...........@........3..@...........@..........@...........@..........@...........@........I..@...........@...........@.......V)..@...........@.

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1148)
Category:	downloaded
Size (bytes):	4200
Entropy (8bit):	5.09288415035251
Encrypted:	false
SSDEEP:	48:8TvzwZuPZMqKQPsSUKu+/1erNjDASlS10mT3tEnGhMfiGyf:8TbU4ej8SlSKm3tEisS
MD5:	9CC7BA207B4D63FD0C9CBCBA011535FF
SHA1:	A546E0E1A9D03DA0BBADF7875A26DEC5097474FA
SHA-256:	A969F42A9C4C25B078508674C6E9841138DAEC911B04EBDD48C5572518DC4A56
SHA-512:	70F36BB7961B712EA4FAD22EAD04F92495F9DA97492E0BBF0ADC30E670C78713304D5CBAA95B1A4F328DFD5BFA4EB67C431E32A99C18158C22A6E3E5FFDBF043
Malicious:	false
Reputation:	low
URL:	https://buygoods.com/secure/checkout/assets/css/chk.css?v=4
Preview:	html{scroll-behavior:smooth}body{position:relative}@media (min-width:1200px){.container,.container-lg,.container-md,.container-sm,.container-xl{max-width:960px!important}}.contact a,#terms li a{color:#2986b8!important}.tooltip{max-width:100%;display:flex;position:absolute;bottom:65px;right:0;background-color:#fff;border-radius:5px;box-shadow:0 1px 5px rgb(0 0 0/25%);opacity:unset;display:none}#billing-checked{line-height:18px;font-size:14px}#billing-checked label{float:left;margin-left:15px}#recurring-terms{font-size:14px}#recurring-check{float:left;width:18px;height:18px}.form-group input:focus{background-color:#fff7d8}.form-group select{font-size:.9rem!important;height:42px!important}.form-group .custom-select{display:block;width:100%;padding:.375rem .75rem;font-size:1rem;font-weight:400;line-height:1.5;color:#212529;background-color:#fff;background-clip:padding-box;border:1px solid #ced4da;-webkit-appearance:none;-moz-appearance:none;appearance:none;border-radius:.25rem;transition:b

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 78168, version 331.-31196
Category:	downloaded
Size (bytes):	78168
Entropy (8bit):	7.996980715595138
Encrypted:	true
SSDEEP:	1536:F9ht+In45PAr81N7kP5kBLz+1Lo3hJLld77YO6R5K0l:F7kISPSDxkBsk3hJllB66k
MD5:	A9FD1225FB2CD32320E2B931DCA01089
SHA1:	44EC5C6A868B4CE62350D9F040ED8E18F7A1D128
SHA-256:	C5DD43F53F3AF822CBF17B1FB75F46192CDBD51724F277ACF6CF0DACB3FD57E7
SHA-512:	58F45066D5738B1EF1F431EB9FC911FC9E6F61F60538F1577CD2EBE651BD8E7B87124DAE36C4E66FB303FD249EBA333BF41D316774201948CAD056BB0E4B4F2E
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
Preview:	wOF2......1X..........0..K.$....................?FFTM....`..N.....h..B.6.$..0..4.. ..+...[.u...m......6.........f%...N\!7.....w!......K..~.....DP)..V.u].5a..dQT1..#.bIIL&L=.....z....}4E.8..`..-..8..?....Xk.C..mV..`&...D."...V.c'.)......"/ .AD.4...i..S)e.72..@D "....~.Jj...~...so7r.....TK...P6..m5.>....1...=x...~.....mD...&.....4/.#[...v.U.,.3.O[aoy......f\|.gKL..d.....e...P......c.j........H..../+d..Z....@.._....8.yk.0p.._~..g.C.:{..u.......h..n...I..%..#aD..$@....... ......'..G.89.n...._q.~....+]..uvX.r..!~n...7r.7*.9..6..7...`....=..j..~.:.......y..P.[.Q.7.../....J..j..B[`KliY.-m,.i..6.eW..^u]W7..qu.r..K.N..O..i9`H..0.!0.6............d..f......e.!,..oK....N:..-..X}..."....]..........j2....8.f5/b..n5..V.......d.C.....a.d!..,.../00).{y9V.W!..o.S.<..B>...mhH..%...X.....m~&....&.i.)`rS...."l..d......I.....B....;2Cb.SD........F..s.Z.S.Acb-.C.@..vj....=..Si...... .........i}._m..v.L..x..K.j_.v........]y...WV.B-{}1..E.9.{...9\.. .H..:svr..E_..q....._w...

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	15935
Entropy (8bit):	5.026114673760996
Encrypted:	false
SSDEEP:	384:juKSU3zqCnKS1gGD7SNlJ+9zbrxfdO1IFgu27Udty1kBgaYnUdrIpTcUnxXUImrk:juKD3zqCnKJrw9zbrxfd4IKu2QdtUkG3
MD5:	04CC7441E91F1D37BF16CC6F8750C1B8
SHA1:	2314426BAC702CA57D7A523BF3F6B920E874A522
SHA-256:	6621893E1255C19F7D76F3F4AB37CDED3EC23D7DF4854138E86F444582F10CFE
SHA-512:	B252B3A4726AF704141CDD7E7AE146296B16873FCE5E84190122586B9AE6578C35371A819A7D2EBE8E4CEE5589D212DF86495C273D3BF7EC2756DB5441C55279
Malicious:	false
Reputation:	low
Preview:	/*. Extract where we are hosting this..... /.const currentDomainVF = ( new URL( document.currentScript.src ) );../. Represents an object for managing and interacting with an iframe used for payment processing. . * It provides methods for initialization, error handling, styling, and communication with the iframe.. . @property {Object} options - Configuration options for the VaultFrame object.. * @property {Object} elements - References to DOM elements used by the VaultFrame object.. * @property {function} init - Initialization function.. * @property {function} showErrors - Function to show validation errors in the iframe.. * @property {function} addStylesheet - Function to add a stylesheet link to the document's head.. * @property {function} createIframe - Function to create and append an iframe element.. * @property {function} createTokenFieldIfNotExists - Function to create the token field if it doesn't exist.. * @property {function} createCardNumberIfNotExists - Function t

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32086)
Category:	dropped
Size (bytes):	397390
Entropy (8bit):	5.599511163424548
Encrypted:	false
SSDEEP:	6144:0Ne7yFtW2wl02azZ9puxjis6ly6VPmWlr7+qYffswDSf5Rz+9GGB0I/3:08+fWW/yuPmWxsffs4Sf5Rz+9R
MD5:	7B7528E73BA3DF224449498032727944
SHA1:	238E589B2490721B8A2CE4633DF13E6BCD86F92F
SHA-256:	2FCE960620F0D8500BD6D37BC87230EE23DF34FB6966E3A4505A7C37B5910C5C
SHA-512:	472DAA3873E37D39184C188D438BAE232DFCB4B1230E897C82BDDE78020239D4016F314F369C1FF8FF0B921A58A45A3738E059797FF7BB310E7E9D8BA8917F0C
Malicious:	false
Reputation:	low
Preview:	songbirdLoader([1],[,function(t,e,n){var r,i=n(6),s=n(5),o=n(71),a=!1,u=n(88).JL,c={},h=n(46),f={outputQueuedLogs:function(){i.each(c,function(t,e){void 0!==t.getLogQueue&&(c[e]=u(e),i.each(t.getLogQueue(),function(n){c[e][n.type](n.message),t.LogQueue=i.without(t.LogQueue,n)}))})},logRouter:function(t,e,n){a?c[n.getNamespace()][t](e):n[t](e)},addRequestHeadersToAjaxLogging:function(t){t.setRequestHeader("X-Cardinal-ApiId","ApiId-"+s.apiId),t.setRequestHeader("X-Cardinal-McsId","McsId-"+s.consumerSessionId),t.setRequestHeader("X-Cardinal-JTI","Jti-"+s.jti),t.setRequestHeader("X-Cardinal-Tid","Tid-"+s.tid)}},l={addToLoggerCollection:function(t){try{c[t.getNamespace()]=t}catch(t){}},enableAjaxLogging:function(){var t=r.appenders;i.each(t,function(t){"url"in t&&(t.level=3e3)}),u.setOptions({appenders:t})},flushLogs:function(){var t,e=r.appenders;if(i.each(e,function(e){"url"in e&&(t=e)}),void 0!==t&&t.level<5e3){var n=t.batchSize;t.batchSize=1,u.setOptions({appenders:e}),r.info("Flushing

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 17:47:57.354912996 CET	192.168.2.16	1.1.1.1	0xd185	Standard query (0)	www.shinsengumiusa.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:57.355060101 CET	192.168.2.16	1.1.1.1	0xd498	Standard query (0)	www.shinsengumiusa.com	65	IN (0x0001)	false
Jan 10, 2025 17:47:58.436002970 CET	192.168.2.16	1.1.1.1	0x2b11	Standard query (0)	mwebexplorerpro.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:58.436296940 CET	192.168.2.16	1.1.1.1	0x30a3	Standard query (0)	mwebexplorerpro.com	65	IN (0x0001)	false
Jan 10, 2025 17:47:59.719973087 CET	192.168.2.16	1.1.1.1	0x6537	Standard query (0)	nervedefend.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:59.720118046 CET	192.168.2.16	1.1.1.1	0x6da9	Standard query (0)	nervedefend.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:01.281934023 CET	192.168.2.16	1.1.1.1	0x4d4a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:01.282164097 CET	192.168.2.16	1.1.1.1	0x7e4d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:01.374456882 CET	192.168.2.16	1.1.1.1	0xc49e	Standard query (0)	nervedefend.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:01.374579906 CET	192.168.2.16	1.1.1.1	0x8da6	Standard query (0)	nervedefend.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:02.093597889 CET	192.168.2.16	1.1.1.1	0xfaf	Standard query (0)	0coitns4.embtrk.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:02.093852043 CET	192.168.2.16	1.1.1.1	0x789f	Standard query (0)	0coitns4.embtrk.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:02.135588884 CET	192.168.2.16	1.1.1.1	0xd04d	Standard query (0)	0coitns4.embtrk.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:02.716682911 CET	192.168.2.16	1.1.1.1	0x1c0c	Standard query (0)	tracking.buygoods.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:02.716850042 CET	192.168.2.16	1.1.1.1	0x800e	Standard query (0)	tracking.buygoods.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:03.067872047 CET	192.168.2.16	1.1.1.1	0x22aa	Standard query (0)	go.maxweb.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.089416027 CET	192.168.2.16	1.1.1.1	0x5186	Standard query (0)	go.maxweb.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:03.300853968 CET	192.168.2.16	1.1.1.1	0x108c	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.301068068 CET	192.168.2.16	1.1.1.1	0x8fd7	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:03.401649952 CET	192.168.2.16	1.1.1.1	0xf8d1	Standard query (0)	tracking.buygoods.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.401787043 CET	192.168.2.16	1.1.1.1	0x358d	Standard query (0)	tracking.buygoods.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:04.419303894 CET	192.168.2.16	1.1.1.1	0x203e	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.419686079 CET	192.168.2.16	1.1.1.1	0x9e80	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:06.463453054 CET	192.168.2.16	1.1.1.1	0xb70f	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:06.463604927 CET	192.168.2.16	1.1.1.1	0xe68b	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:07.487112999 CET	192.168.2.16	1.1.1.1	0xf163	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.487612009 CET	192.168.2.16	1.1.1.1	0x46c8	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:08.748550892 CET	192.168.2.16	1.1.1.1	0x8004	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.748744965 CET	192.168.2.16	1.1.1.1	0x11d3	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:11.790822983 CET	192.168.2.16	1.1.1.1	0x199f	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:11.790975094 CET	192.168.2.16	1.1.1.1	0x7788	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:48:11.801151991 CET	192.168.2.16	1.1.1.1	0xdb05	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:11.801429033 CET	192.168.2.16	1.1.1.1	0xa0cf	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:48:11.881731033 CET	192.168.2.16	1.1.1.1	0x165b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:11.881911039 CET	192.168.2.16	1.1.1.1	0xe466	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:11.944344044 CET	192.168.2.16	1.1.1.1	0x5dcb	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:11.944538116 CET	192.168.2.16	1.1.1.1	0x95bb	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:12.289772987 CET	192.168.2.16	1.1.1.1	0x4587	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.289906025 CET	192.168.2.16	1.1.1.1	0x7d5a	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:12.736855030 CET	192.168.2.16	1.1.1.1	0xd16	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.737003088 CET	192.168.2.16	1.1.1.1	0x8ab9	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:48:12.972675085 CET	192.168.2.16	1.1.1.1	0xd724	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.972877979 CET	192.168.2.16	1.1.1.1	0x2ecd	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:13.003696918 CET	192.168.2.16	1.1.1.1	0xec3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:13.003829002 CET	192.168.2.16	1.1.1.1	0xfc64	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:13.176435947 CET	192.168.2.16	1.1.1.1	0x91e1	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:13.176584005 CET	192.168.2.16	1.1.1.1	0x18b4	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:13.402065992 CET	192.168.2.16	1.1.1.1	0x6498	Standard query (0)	rr1---sn-t0aedn7l.googlevideo.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:13.402196884 CET	192.168.2.16	1.1.1.1	0xf46c	Standard query (0)	rr1---sn-t0aedn7l.googlevideo.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:13.712374926 CET	192.168.2.16	1.1.1.1	0x1733	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:13.712555885 CET	192.168.2.16	1.1.1.1	0xc6e3	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 17:48:14.262506008 CET	192.168.2.16	1.1.1.1	0x9083	Standard query (0)	rr1---sn-t0aedn7l.googlevideo.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:14.262733936 CET	192.168.2.16	1.1.1.1	0x4686	Standard query (0)	rr1---sn-t0aedn7l.googlevideo.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:15.380654097 CET	192.168.2.16	1.1.1.1	0xe2d	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:15.380804062 CET	192.168.2.16	1.1.1.1	0xcb6a	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jan 10, 2025 17:48:26.669656992 CET	192.168.2.16	1.1.1.1	0x3563	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.669877052 CET	192.168.2.16	1.1.1.1	0xf10e	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:06.463650942 CET	192.168.2.16	1.1.1.1	0x8fb3	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:06.463769913 CET	192.168.2.16	1.1.1.1	0xf906	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:22.062232018 CET	192.168.2.16	1.1.1.1	0xd701	Standard query (0)	www.buygoods.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:22.062335968 CET	192.168.2.16	1.1.1.1	0x9135	Standard query (0)	www.buygoods.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:22.761210918 CET	192.168.2.16	1.1.1.1	0xcf3f	Standard query (0)	buygoods.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:22.761332989 CET	192.168.2.16	1.1.1.1	0xda3f	Standard query (0)	buygoods.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:24.737894058 CET	192.168.2.16	1.1.1.1	0x7cc	Standard query (0)	cdn.buygoods.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.738074064 CET	192.168.2.16	1.1.1.1	0x6c00	Standard query (0)	cdn.buygoods.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:24.740140915 CET	192.168.2.16	1.1.1.1	0xc457	Standard query (0)	js.braintreegateway.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.740305901 CET	192.168.2.16	1.1.1.1	0x530a	Standard query (0)	js.braintreegateway.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:24.741974115 CET	192.168.2.16	1.1.1.1	0x53d0	Standard query (0)	tracking.buygoods.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.742253065 CET	192.168.2.16	1.1.1.1	0x674e	Standard query (0)	tracking.buygoods.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:24.743097067 CET	192.168.2.16	1.1.1.1	0xf67	Standard query (0)	display.buygoods.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.743290901 CET	192.168.2.16	1.1.1.1	0x1ea4	Standard query (0)	display.buygoods.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:25.382106066 CET	192.168.2.16	1.1.1.1	0xaed3	Standard query (0)	buygoods.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.382247925 CET	192.168.2.16	1.1.1.1	0xaf1f	Standard query (0)	buygoods.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:25.478984118 CET	192.168.2.16	1.1.1.1	0x3104	Standard query (0)	cdn.buygoods.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.479157925 CET	192.168.2.16	1.1.1.1	0xba5a	Standard query (0)	cdn.buygoods.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:25.502696037 CET	192.168.2.16	1.1.1.1	0x502c	Standard query (0)	js.braintreegateway.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.502865076 CET	192.168.2.16	1.1.1.1	0x50cb	Standard query (0)	js.braintreegateway.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:25.663218975 CET	192.168.2.16	1.1.1.1	0x2b53	Standard query (0)	pay.buygoods.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.663372993 CET	192.168.2.16	1.1.1.1	0xae97	Standard query (0)	pay.buygoods.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:26.094372034 CET	192.168.2.16	1.1.1.1	0x47b0	Standard query (0)	songbird.cardinalcommerce.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.096230030 CET	192.168.2.16	1.1.1.1	0x5d82	Standard query (0)	songbird.cardinalcommerce.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:26.284795046 CET	192.168.2.16	1.1.1.1	0x6142	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.284995079 CET	192.168.2.16	1.1.1.1	0x548d	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:26.320660114 CET	192.168.2.16	1.1.1.1	0x3a52	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.320955038 CET	192.168.2.16	1.1.1.1	0x9d59	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:26.384783030 CET	192.168.2.16	1.1.1.1	0x4ae	Standard query (0)	www.datadoghq-browser-agent.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.385090113 CET	192.168.2.16	1.1.1.1	0x40fd	Standard query (0)	www.datadoghq-browser-agent.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:26.476485014 CET	192.168.2.16	1.1.1.1	0x3ac9	Standard query (0)	pay.buygoods.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.476712942 CET	192.168.2.16	1.1.1.1	0x52f5	Standard query (0)	pay.buygoods.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:26.793045998 CET	192.168.2.16	1.1.1.1	0xe3bc	Standard query (0)	songbird.cardinalcommerce.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.793270111 CET	192.168.2.16	1.1.1.1	0x503d	Standard query (0)	songbird.cardinalcommerce.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:26.924731970 CET	192.168.2.16	1.1.1.1	0xf79a	Standard query (0)	display.buygoods.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.924879074 CET	192.168.2.16	1.1.1.1	0x4330	Standard query (0)	display.buygoods.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:26.951168060 CET	192.168.2.16	1.1.1.1	0xdf41	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.951394081 CET	192.168.2.16	1.1.1.1	0x3c3d	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:27.024902105 CET	192.168.2.16	1.1.1.1	0x4510	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.025080919 CET	192.168.2.16	1.1.1.1	0x6dd9	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:27.594937086 CET	192.168.2.16	1.1.1.1	0x2375	Standard query (0)	payments.braintree-api.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.595124960 CET	192.168.2.16	1.1.1.1	0xbf81	Standard query (0)	payments.braintree-api.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:27.596051931 CET	192.168.2.16	1.1.1.1	0xa454	Standard query (0)	yomali.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.596177101 CET	192.168.2.16	1.1.1.1	0x2e5f	Standard query (0)	yomali.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:27.631716967 CET	192.168.2.16	1.1.1.1	0xb843	Standard query (0)	includes.ccdc02.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.631901979 CET	192.168.2.16	1.1.1.1	0xd886	Standard query (0)	includes.ccdc02.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:27.958446026 CET	192.168.2.16	1.1.1.1	0x76c0	Standard query (0)	www.datadoghq-browser-agent.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.958651066 CET	192.168.2.16	1.1.1.1	0x185b	Standard query (0)	www.datadoghq-browser-agent.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:28.021178961 CET	192.168.2.16	1.1.1.1	0xdd80	Standard query (0)	browser-intake-datadoghq.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:28.021436930 CET	192.168.2.16	1.1.1.1	0x9f25	Standard query (0)	browser-intake-datadoghq.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:28.156013966 CET	192.168.2.16	1.1.1.1	0x8e84	Standard query (0)	yomali.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:28.156176090 CET	192.168.2.16	1.1.1.1	0xa2c0	Standard query (0)	yomali.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:28.631443977 CET	192.168.2.16	1.1.1.1	0x346c	Standard query (0)	go.maxweb.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:28.631586075 CET	192.168.2.16	1.1.1.1	0x7306	Standard query (0)	go.maxweb.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:28.777626038 CET	192.168.2.16	1.1.1.1	0x47f9	Standard query (0)	includes.ccdc02.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:28.777811050 CET	192.168.2.16	1.1.1.1	0x9b1e	Standard query (0)	includes.ccdc02.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:29.241195917 CET	192.168.2.16	1.1.1.1	0x47c3	Standard query (0)	ssl.kaptcha.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.241405010 CET	192.168.2.16	1.1.1.1	0x7346	Standard query (0)	ssl.kaptcha.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:29.537044048 CET	192.168.2.16	1.1.1.1	0xfbb2	Standard query (0)	payments.braintree-api.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.537417889 CET	192.168.2.16	1.1.1.1	0xcb11	Standard query (0)	payments.braintree-api.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:29.538050890 CET	192.168.2.16	1.1.1.1	0x12d1	Standard query (0)	client-analytics.braintreegateway.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.538228989 CET	192.168.2.16	1.1.1.1	0xd586	Standard query (0)	client-analytics.braintreegateway.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:29.558429956 CET	192.168.2.16	1.1.1.1	0x36e5	Standard query (0)	checkout.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.558628082 CET	192.168.2.16	1.1.1.1	0x5990	Standard query (0)	checkout.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:29.559117079 CET	192.168.2.16	1.1.1.1	0x3d8c	Standard query (0)	c.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.559293032 CET	192.168.2.16	1.1.1.1	0x8706	Standard query (0)	c.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:29.569681883 CET	192.168.2.16	1.1.1.1	0xf4a	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.569828033 CET	192.168.2.16	1.1.1.1	0x19	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:29.570127964 CET	192.168.2.16	1.1.1.1	0x3093	Standard query (0)	assets.braintreegateway.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.570250988 CET	192.168.2.16	1.1.1.1	0x33f1	Standard query (0)	assets.braintreegateway.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:30.163968086 CET	192.168.2.16	1.1.1.1	0x668c	Standard query (0)	www.softwareprojects.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.164289951 CET	192.168.2.16	1.1.1.1	0x10c2	Standard query (0)	www.softwareprojects.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:30.264224052 CET	192.168.2.16	1.1.1.1	0x34c7	Standard query (0)	stun.kaptcha.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.264425039 CET	192.168.2.16	1.1.1.1	0x99f2	Standard query (0)	stun.kaptcha.com	28	IN (0x0001)	false
Jan 10, 2025 17:49:30.264652967 CET	192.168.2.16	1.1.1.1	0x4721	Standard query (0)	stun1.l.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.264831066 CET	192.168.2.16	1.1.1.1	0xe42c	Standard query (0)	stun1.l.google.com	28	IN (0x0001)	false
Jan 10, 2025 17:49:30.272455931 CET	192.168.2.16	1.1.1.1	0x979f	Standard query (0)	stun.kaptcha.com	28	IN (0x0001)	false
Jan 10, 2025 17:49:30.273442984 CET	192.168.2.16	1.1.1.1	0x576c	Standard query (0)	stun1.l.google.com	28	IN (0x0001)	false
Jan 10, 2025 17:49:30.303713083 CET	192.168.2.16	1.1.1.1	0x5ee0	Standard query (0)	c.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.303879976 CET	192.168.2.16	1.1.1.1	0xd28c	Standard query (0)	c.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:30.316080093 CET	192.168.2.16	1.1.1.1	0x6ae2	Standard query (0)	c6.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.316306114 CET	192.168.2.16	1.1.1.1	0xa0dd	Standard query (0)	c6.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:30.316801071 CET	192.168.2.16	1.1.1.1	0x17cc	Standard query (0)	c.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.316963911 CET	192.168.2.16	1.1.1.1	0xca02	Standard query (0)	c.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:30.331639051 CET	192.168.2.16	1.1.1.1	0x7e98	Standard query (0)	b.stats.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.331830025 CET	192.168.2.16	1.1.1.1	0xc9eb	Standard query (0)	b.stats.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:30.703341007 CET	192.168.2.16	1.1.1.1	0x429e	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.703491926 CET	192.168.2.16	1.1.1.1	0x6b7	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:30.783988953 CET	192.168.2.16	1.1.1.1	0xe883	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.784137011 CET	192.168.2.16	1.1.1.1	0x54d0	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:30.785676956 CET	192.168.2.16	1.1.1.1	0xe3ee	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.785882950 CET	192.168.2.16	1.1.1.1	0x83e7	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:30.959629059 CET	192.168.2.16	1.1.1.1	0xfd33	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.959795952 CET	192.168.2.16	1.1.1.1	0x4b0f	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:30.964585066 CET	192.168.2.16	1.1.1.1	0xe34b	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.964745998 CET	192.168.2.16	1.1.1.1	0xbec3	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:31.320794106 CET	192.168.2.16	1.1.1.1	0x3df2	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.320926905 CET	192.168.2.16	1.1.1.1	0xa986	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.790457964 CET	192.168.2.16	1.1.1.1	0x3c7c	Standard query (0)	www.softwareprojects.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.790608883 CET	192.168.2.16	1.1.1.1	0x4b7f	Standard query (0)	www.softwareprojects.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:31.972453117 CET	192.168.2.16	1.1.1.1	0x3024	Standard query (0)	client-analytics.braintreegateway.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.972981930 CET	192.168.2.16	1.1.1.1	0xf302	Standard query (0)	client-analytics.braintreegateway.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:31.980942011 CET	192.168.2.16	1.1.1.1	0xf7b2	Standard query (0)	ssl.kaptcha.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.981093884 CET	192.168.2.16	1.1.1.1	0xfc0c	Standard query (0)	ssl.kaptcha.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:32.060911894 CET	192.168.2.16	1.1.1.1	0x2ccb	Standard query (0)	lhr.stats.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.061089993 CET	192.168.2.16	1.1.1.1	0x5d16	Standard query (0)	lhr.stats.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:32.062273979 CET	192.168.2.16	1.1.1.1	0xdaf1	Standard query (0)	c6.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.062410116 CET	192.168.2.16	1.1.1.1	0xfec3	Standard query (0)	c6.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:32.130523920 CET	192.168.2.16	1.1.1.1	0x5a77	Standard query (0)	t.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.130846977 CET	192.168.2.16	1.1.1.1	0x67dd	Standard query (0)	t.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:32.375545025 CET	192.168.2.16	1.1.1.1	0x4538	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.376000881 CET	192.168.2.16	1.1.1.1	0xda20	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:32.788940907 CET	192.168.2.16	1.1.1.1	0x3a59	Standard query (0)	t.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.789156914 CET	192.168.2.16	1.1.1.1	0x1c6b	Standard query (0)	t.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:32.860682011 CET	192.168.2.16	1.1.1.1	0x56e6	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.861011028 CET	192.168.2.16	1.1.1.1	0x9e8e	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Jan 10, 2025 17:49:33.028573036 CET	192.168.2.16	1.1.1.1	0xa26c	Standard query (0)	lhr.stats.paypal.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:33.028739929 CET	192.168.2.16	1.1.1.1	0xd6b6	Standard query (0)	lhr.stats.paypal.com	65	IN (0x0001)	false
Jan 10, 2025 17:50:05.336344957 CET	192.168.2.16	1.1.1.1	0xfcdb	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 10, 2025 17:50:05.336344957 CET	192.168.2.16	1.1.1.1	0x5680	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2025 17:47:57.363297939 CET	1.1.1.1	192.168.2.16	0xd185	No error (0)	www.shinsengumiusa.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:57.363297939 CET	1.1.1.1	192.168.2.16	0xd185	No error (0)	www.shinsengumiusa.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:57.363297939 CET	1.1.1.1	192.168.2.16	0xd185	No error (0)	www.shinsengumiusa.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:57.363297939 CET	1.1.1.1	192.168.2.16	0xd185	No error (0)	www.shinsengumiusa.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:57.363297939 CET	1.1.1.1	192.168.2.16	0xd185	No error (0)	www.shinsengumiusa.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:57.363297939 CET	1.1.1.1	192.168.2.16	0xd185	No error (0)	www.shinsengumiusa.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:57.363297939 CET	1.1.1.1	192.168.2.16	0xd185	No error (0)	www.shinsengumiusa.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:57.364295959 CET	1.1.1.1	192.168.2.16	0xd498	No error (0)	www.shinsengumiusa.com			65	IN (0x0001)	false
Jan 10, 2025 17:47:58.447962046 CET	1.1.1.1	192.168.2.16	0x2b11	No error (0)	mwebexplorerpro.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:58.447962046 CET	1.1.1.1	192.168.2.16	0x2b11	No error (0)	mwebexplorerpro.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:58.448239088 CET	1.1.1.1	192.168.2.16	0x30a3	No error (0)	mwebexplorerpro.com			65	IN (0x0001)	false
Jan 10, 2025 17:47:59.732733011 CET	1.1.1.1	192.168.2.16	0x6537	No error (0)	nervedefend.com		104.21.47.251	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:59.732733011 CET	1.1.1.1	192.168.2.16	0x6537	No error (0)	nervedefend.com		172.67.174.218	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:47:59.756231070 CET	1.1.1.1	192.168.2.16	0x6da9	No error (0)	nervedefend.com			65	IN (0x0001)	false
Jan 10, 2025 17:48:01.289843082 CET	1.1.1.1	192.168.2.16	0x7e4d	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:48:01.290201902 CET	1.1.1.1	192.168.2.16	0x4d4a	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:01.391204119 CET	1.1.1.1	192.168.2.16	0x8da6	No error (0)	nervedefend.com			65	IN (0x0001)	false
Jan 10, 2025 17:48:01.544874907 CET	1.1.1.1	192.168.2.16	0xc49e	No error (0)	nervedefend.com		104.21.47.251	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:01.544874907 CET	1.1.1.1	192.168.2.16	0xc49e	No error (0)	nervedefend.com		172.67.174.218	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:02.124824047 CET	1.1.1.1	192.168.2.16	0xfaf	Name error (3)	0coitns4.embtrk.com	none	none	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:02.146548033 CET	1.1.1.1	192.168.2.16	0x789f	Name error (3)	0coitns4.embtrk.com	none	none	65	IN (0x0001)	false
Jan 10, 2025 17:48:02.189753056 CET	1.1.1.1	192.168.2.16	0xd04d	Name error (3)	0coitns4.embtrk.com	none	none	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:02.726672888 CET	1.1.1.1	192.168.2.16	0x800e	No error (0)	tracking.buygoods.com			65	IN (0x0001)	false
Jan 10, 2025 17:48:02.730043888 CET	1.1.1.1	192.168.2.16	0x1c0c	No error (0)	tracking.buygoods.com		172.66.40.141	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:02.730043888 CET	1.1.1.1	192.168.2.16	0x1c0c	No error (0)	tracking.buygoods.com		172.66.43.115	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.077569008 CET	1.1.1.1	192.168.2.16	0x22aa	No error (0)	go.maxweb.com		172.66.40.143	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.077569008 CET	1.1.1.1	192.168.2.16	0x22aa	No error (0)	go.maxweb.com		172.66.43.113	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.101365089 CET	1.1.1.1	192.168.2.16	0x5186	No error (0)	go.maxweb.com			65	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307786942 CET	1.1.1.1	192.168.2.16	0x108c	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307943106 CET	1.1.1.1	192.168.2.16	0x8fd7	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:03.307943106 CET	1.1.1.1	192.168.2.16	0x8fd7	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:48:03.410128117 CET	1.1.1.1	192.168.2.16	0xf8d1	No error (0)	tracking.buygoods.com		172.66.40.141	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.410128117 CET	1.1.1.1	192.168.2.16	0xf8d1	No error (0)	tracking.buygoods.com		172.66.43.115	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:03.411500931 CET	1.1.1.1	192.168.2.16	0x358d	No error (0)	tracking.buygoods.com			65	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426486015 CET	1.1.1.1	192.168.2.16	0x203e	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426778078 CET	1.1.1.1	192.168.2.16	0x9e80	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:04.426778078 CET	1.1.1.1	192.168.2.16	0x9e80	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:48:06.470062017 CET	1.1.1.1	192.168.2.16	0xb70f	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494343996 CET	1.1.1.1	192.168.2.16	0xf163	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494911909 CET	1.1.1.1	192.168.2.16	0x46c8	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:07.494911909 CET	1.1.1.1	192.168.2.16	0x46c8	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:08.755192995 CET	1.1.1.1	192.168.2.16	0x8004	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:11.797933102 CET	1.1.1.1	192.168.2.16	0x7788	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 10, 2025 17:48:11.798284054 CET	1.1.1.1	192.168.2.16	0x199f	No error (0)	googleads.g.doubleclick.net		142.250.186.98	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:11.808648109 CET	1.1.1.1	192.168.2.16	0xdb05	No error (0)	static.doubleclick.net		142.250.184.198	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:11.888530016 CET	1.1.1.1	192.168.2.16	0xe466	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:48:11.889889002 CET	1.1.1.1	192.168.2.16	0x165b	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:11.951467037 CET	1.1.1.1	192.168.2.16	0x5dcb	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:11.951467037 CET	1.1.1.1	192.168.2.16	0x5dcb	No error (0)	photos-ugc.l.googleusercontent.com		142.250.184.193	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:11.951488018 CET	1.1.1.1	192.168.2.16	0x95bb	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.297629118 CET	1.1.1.1	192.168.2.16	0x4587	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.743741035 CET	1.1.1.1	192.168.2.16	0xd16	No error (0)	static.doubleclick.net		142.250.186.166	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.979681015 CET	1.1.1.1	192.168.2.16	0xd724	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:12.979681015 CET	1.1.1.1	192.168.2.16	0xd724	No error (0)	photos-ugc.l.googleusercontent.com		142.250.184.193	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:12.980416059 CET	1.1.1.1	192.168.2.16	0x2ecd	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:13.010693073 CET	1.1.1.1	192.168.2.16	0xec3	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:13.010977030 CET	1.1.1.1	192.168.2.16	0xfc64	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:48:13.211177111 CET	1.1.1.1	192.168.2.16	0x91e1	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:13.409466028 CET	1.1.1.1	192.168.2.16	0x6498	No error (0)	rr1---sn-t0aedn7l.googlevideo.com	rr1.sn-t0aedn7l.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:13.409466028 CET	1.1.1.1	192.168.2.16	0x6498	No error (0)	rr1.sn-t0aedn7l.googlevideo.com		74.125.174.166	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:13.420393944 CET	1.1.1.1	192.168.2.16	0xf46c	No error (0)	rr1---sn-t0aedn7l.googlevideo.com	rr1.sn-t0aedn7l.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:13.420393944 CET	1.1.1.1	192.168.2.16	0xf46c	No error (0)	rr1.sn-t0aedn7l.googlevideo.com			65	IN (0x0001)	false
Jan 10, 2025 17:48:13.719300985 CET	1.1.1.1	192.168.2.16	0x1733	No error (0)	googleads.g.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:13.719358921 CET	1.1.1.1	192.168.2.16	0xc6e3	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 10, 2025 17:48:14.270509958 CET	1.1.1.1	192.168.2.16	0x9083	No error (0)	rr1---sn-t0aedn7l.googlevideo.com	rr1.sn-t0aedn7l.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:14.270509958 CET	1.1.1.1	192.168.2.16	0x9083	No error (0)	rr1.sn-t0aedn7l.googlevideo.com		74.125.174.166	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:14.294210911 CET	1.1.1.1	192.168.2.16	0x4686	No error (0)	rr1---sn-t0aedn7l.googlevideo.com	rr1.sn-t0aedn7l.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:48:14.294210911 CET	1.1.1.1	192.168.2.16	0x4686	No error (0)	rr1.sn-t0aedn7l.googlevideo.com			65	IN (0x0001)	false
Jan 10, 2025 17:48:15.387379885 CET	1.1.1.1	192.168.2.16	0xe2d	No error (0)	play.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:48:26.676503897 CET	1.1.1.1	192.168.2.16	0x3563	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:06.470531940 CET	1.1.1.1	192.168.2.16	0x8fb3	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:22.075865984 CET	1.1.1.1	192.168.2.16	0xd701	No error (0)	www.buygoods.com	buygoodslb.clickcrm.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:22.075865984 CET	1.1.1.1	192.168.2.16	0xd701	No error (0)	buygoodslb.clickcrm.com		172.66.40.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:22.075865984 CET	1.1.1.1	192.168.2.16	0xd701	No error (0)	buygoodslb.clickcrm.com		172.66.43.22	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:22.077445030 CET	1.1.1.1	192.168.2.16	0x9135	No error (0)	www.buygoods.com	buygoodslb.clickcrm.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:22.077445030 CET	1.1.1.1	192.168.2.16	0x9135	No error (0)	buygoodslb.clickcrm.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:22.769710064 CET	1.1.1.1	192.168.2.16	0xcf3f	No error (0)	buygoods.com		172.66.40.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:22.769710064 CET	1.1.1.1	192.168.2.16	0xcf3f	No error (0)	buygoods.com		172.66.43.22	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.747931004 CET	1.1.1.1	192.168.2.16	0x530a	No error (0)	js.braintreegateway.com	js.glb.braintreegateway.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:24.747931004 CET	1.1.1.1	192.168.2.16	0x530a	No error (0)	js.glb.braintreegateway.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:24.748153925 CET	1.1.1.1	192.168.2.16	0x7cc	No error (0)	cdn.buygoods.com		172.66.40.141	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.748153925 CET	1.1.1.1	192.168.2.16	0x7cc	No error (0)	cdn.buygoods.com		172.66.43.115	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.748424053 CET	1.1.1.1	192.168.2.16	0xc457	No error (0)	js.braintreegateway.com	js.glb.braintreegateway.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:24.748424053 CET	1.1.1.1	192.168.2.16	0xc457	No error (0)	js.glb.braintreegateway.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:24.748424053 CET	1.1.1.1	192.168.2.16	0xc457	No error (0)	paypal.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.748424053 CET	1.1.1.1	192.168.2.16	0xc457	No error (0)	paypal.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.748424053 CET	1.1.1.1	192.168.2.16	0xc457	No error (0)	paypal.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.748424053 CET	1.1.1.1	192.168.2.16	0xc457	No error (0)	paypal.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.748651028 CET	1.1.1.1	192.168.2.16	0x6c00	No error (0)	cdn.buygoods.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:24.750960112 CET	1.1.1.1	192.168.2.16	0x674e	No error (0)	tracking.buygoods.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:24.751019955 CET	1.1.1.1	192.168.2.16	0x53d0	No error (0)	tracking.buygoods.com		172.66.40.141	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.751019955 CET	1.1.1.1	192.168.2.16	0x53d0	No error (0)	tracking.buygoods.com		172.66.43.115	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.753846884 CET	1.1.1.1	192.168.2.16	0x1ea4	No error (0)	display.buygoods.com	buygoodslb.clickcrm.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:24.753846884 CET	1.1.1.1	192.168.2.16	0x1ea4	No error (0)	buygoodslb.clickcrm.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:24.758023977 CET	1.1.1.1	192.168.2.16	0xf67	No error (0)	display.buygoods.com	buygoodslb.clickcrm.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:24.758023977 CET	1.1.1.1	192.168.2.16	0xf67	No error (0)	buygoodslb.clickcrm.com		172.66.40.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:24.758023977 CET	1.1.1.1	192.168.2.16	0xf67	No error (0)	buygoodslb.clickcrm.com		172.66.43.22	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.391527891 CET	1.1.1.1	192.168.2.16	0xaed3	No error (0)	buygoods.com		172.66.40.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.391527891 CET	1.1.1.1	192.168.2.16	0xaed3	No error (0)	buygoods.com		172.66.43.22	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.491162062 CET	1.1.1.1	192.168.2.16	0xba5a	No error (0)	cdn.buygoods.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:25.493127108 CET	1.1.1.1	192.168.2.16	0x3104	No error (0)	cdn.buygoods.com		172.66.40.141	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.493127108 CET	1.1.1.1	192.168.2.16	0x3104	No error (0)	cdn.buygoods.com		172.66.43.115	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.509459972 CET	1.1.1.1	192.168.2.16	0x502c	No error (0)	js.braintreegateway.com	js.glb.braintreegateway.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:25.509459972 CET	1.1.1.1	192.168.2.16	0x502c	No error (0)	js.glb.braintreegateway.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:25.509459972 CET	1.1.1.1	192.168.2.16	0x502c	No error (0)	paypal.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.509459972 CET	1.1.1.1	192.168.2.16	0x502c	No error (0)	paypal.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.509459972 CET	1.1.1.1	192.168.2.16	0x502c	No error (0)	paypal.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.509459972 CET	1.1.1.1	192.168.2.16	0x502c	No error (0)	paypal.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.511349916 CET	1.1.1.1	192.168.2.16	0x50cb	No error (0)	js.braintreegateway.com	js.glb.braintreegateway.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:25.511349916 CET	1.1.1.1	192.168.2.16	0x50cb	No error (0)	js.glb.braintreegateway.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:25.674459934 CET	1.1.1.1	192.168.2.16	0xae97	No error (0)	pay.buygoods.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:25.680649996 CET	1.1.1.1	192.168.2.16	0x2b53	No error (0)	pay.buygoods.com		172.66.40.141	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:25.680649996 CET	1.1.1.1	192.168.2.16	0x2b53	No error (0)	pay.buygoods.com		172.66.43.115	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.101960897 CET	1.1.1.1	192.168.2.16	0x47b0	No error (0)	songbird.cardinalcommerce.com		198.217.251.250	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.101960897 CET	1.1.1.1	192.168.2.16	0x47b0	No error (0)	songbird.cardinalcommerce.com		198.217.251.251	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.291522980 CET	1.1.1.1	192.168.2.16	0x6142	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.291522980 CET	1.1.1.1	192.168.2.16	0x6142	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.292146921 CET	1.1.1.1	192.168.2.16	0x548d	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:26.328085899 CET	1.1.1.1	192.168.2.16	0x3a52	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:26.328362942 CET	1.1.1.1	192.168.2.16	0x9d59	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:26.391408920 CET	1.1.1.1	192.168.2.16	0x4ae	No error (0)	www.datadoghq-browser-agent.com		13.33.219.205	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.487792969 CET	1.1.1.1	192.168.2.16	0x52f5	No error (0)	pay.buygoods.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:26.488753080 CET	1.1.1.1	192.168.2.16	0x3ac9	No error (0)	pay.buygoods.com		172.66.40.141	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.488753080 CET	1.1.1.1	192.168.2.16	0x3ac9	No error (0)	pay.buygoods.com		172.66.43.115	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.801417112 CET	1.1.1.1	192.168.2.16	0xe3bc	No error (0)	songbird.cardinalcommerce.com		198.217.251.250	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.801417112 CET	1.1.1.1	192.168.2.16	0xe3bc	No error (0)	songbird.cardinalcommerce.com		198.217.251.251	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.936259985 CET	1.1.1.1	192.168.2.16	0xf79a	No error (0)	display.buygoods.com	buygoodslb.clickcrm.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:26.936259985 CET	1.1.1.1	192.168.2.16	0xf79a	No error (0)	buygoodslb.clickcrm.com		172.66.40.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.936259985 CET	1.1.1.1	192.168.2.16	0xf79a	No error (0)	buygoodslb.clickcrm.com		172.66.43.22	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:26.957937956 CET	1.1.1.1	192.168.2.16	0xdf41	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:26.959099054 CET	1.1.1.1	192.168.2.16	0x3c3d	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:26.969289064 CET	1.1.1.1	192.168.2.16	0x4330	No error (0)	display.buygoods.com	buygoodslb.clickcrm.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:26.969289064 CET	1.1.1.1	192.168.2.16	0x4330	No error (0)	buygoodslb.clickcrm.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:27.031740904 CET	1.1.1.1	192.168.2.16	0x4510	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.031740904 CET	1.1.1.1	192.168.2.16	0x4510	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.031754971 CET	1.1.1.1	192.168.2.16	0x6dd9	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:27.602550983 CET	1.1.1.1	192.168.2.16	0x2375	No error (0)	payments.braintree-api.com	gateway-lb-prod.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:27.602550983 CET	1.1.1.1	192.168.2.16	0x2375	No error (0)	gateway-lb-prod.production.braintree-api.com	origin-cloud-ingress.gateway-prod.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:27.602550983 CET	1.1.1.1	192.168.2.16	0x2375	No error (0)	origin-cloud-ingress.gateway-prod.production.braintree-api.com	gateway-prod-eu-central-1.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:27.602550983 CET	1.1.1.1	192.168.2.16	0x2375	No error (0)	gateway-prod-eu-central-1.production.braintree-api.com		3.122.176.248	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.602550983 CET	1.1.1.1	192.168.2.16	0x2375	No error (0)	gateway-prod-eu-central-1.production.braintree-api.com		52.29.159.59	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.602550983 CET	1.1.1.1	192.168.2.16	0x2375	No error (0)	gateway-prod-eu-central-1.production.braintree-api.com		35.156.167.229	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.610838890 CET	1.1.1.1	192.168.2.16	0xa454	No error (0)	yomali.com		172.66.40.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.610838890 CET	1.1.1.1	192.168.2.16	0xa454	No error (0)	yomali.com		172.66.43.22	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.613043070 CET	1.1.1.1	192.168.2.16	0xbf81	No error (0)	payments.braintree-api.com	gateway-lb-prod.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:27.613043070 CET	1.1.1.1	192.168.2.16	0xbf81	No error (0)	gateway-lb-prod.production.braintree-api.com	origin-cloud-ingress.gateway-prod.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:27.613043070 CET	1.1.1.1	192.168.2.16	0xbf81	No error (0)	origin-cloud-ingress.gateway-prod.production.braintree-api.com	gateway-prod-eu-central-1.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:27.639105082 CET	1.1.1.1	192.168.2.16	0xb843	No error (0)	includes.ccdc02.com		198.217.251.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.639105082 CET	1.1.1.1	192.168.2.16	0xb843	No error (0)	includes.ccdc02.com		198.217.251.239	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:27.641675949 CET	1.1.1.1	192.168.2.16	0xd886	No error (0)	includes.ccdc02.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:27.965493917 CET	1.1.1.1	192.168.2.16	0x76c0	No error (0)	www.datadoghq-browser-agent.com		13.33.219.205	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:28.028098106 CET	1.1.1.1	192.168.2.16	0xdd80	No error (0)	browser-intake-datadoghq.com		3.233.158.25	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:28.028098106 CET	1.1.1.1	192.168.2.16	0xdd80	No error (0)	browser-intake-datadoghq.com		3.233.158.26	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:28.028098106 CET	1.1.1.1	192.168.2.16	0xdd80	No error (0)	browser-intake-datadoghq.com		3.233.158.24	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:28.195394039 CET	1.1.1.1	192.168.2.16	0x8e84	No error (0)	yomali.com		172.66.40.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:28.195394039 CET	1.1.1.1	192.168.2.16	0x8e84	No error (0)	yomali.com		172.66.43.22	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:28.644001961 CET	1.1.1.1	192.168.2.16	0x7306	No error (0)	go.maxweb.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:28.644254923 CET	1.1.1.1	192.168.2.16	0x346c	No error (0)	go.maxweb.com		172.66.40.143	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:28.644254923 CET	1.1.1.1	192.168.2.16	0x346c	No error (0)	go.maxweb.com		172.66.43.113	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:28.786281109 CET	1.1.1.1	192.168.2.16	0x9b1e	No error (0)	includes.ccdc02.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:28.786485910 CET	1.1.1.1	192.168.2.16	0x47f9	No error (0)	includes.ccdc02.com		198.217.251.239	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:28.786485910 CET	1.1.1.1	192.168.2.16	0x47f9	No error (0)	includes.ccdc02.com		198.217.251.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.250085115 CET	1.1.1.1	192.168.2.16	0x47c3	No error (0)	ssl.kaptcha.com	colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.250085115 CET	1.1.1.1	192.168.2.16	0x47c3	No error (0)	colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com		35.81.31.24	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.250085115 CET	1.1.1.1	192.168.2.16	0x47c3	No error (0)	colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com		35.80.101.90	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.250085115 CET	1.1.1.1	192.168.2.16	0x47c3	No error (0)	colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com		54.148.115.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.262217999 CET	1.1.1.1	192.168.2.16	0x7346	No error (0)	ssl.kaptcha.com	colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.546881914 CET	1.1.1.1	192.168.2.16	0x12d1	No error (0)	client-analytics.braintreegateway.com	origin-analytics-prod.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.546881914 CET	1.1.1.1	192.168.2.16	0x12d1	No error (0)	origin-analytics-prod.production.braintree-api.com		3.78.171.103	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.546881914 CET	1.1.1.1	192.168.2.16	0x12d1	No error (0)	origin-analytics-prod.production.braintree-api.com		18.193.189.65	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.546881914 CET	1.1.1.1	192.168.2.16	0x12d1	No error (0)	origin-analytics-prod.production.braintree-api.com		3.120.85.61	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.546900034 CET	1.1.1.1	192.168.2.16	0xfbb2	No error (0)	payments.braintree-api.com	gateway-lb-prod.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.546900034 CET	1.1.1.1	192.168.2.16	0xfbb2	No error (0)	gateway-lb-prod.production.braintree-api.com	origin-cloud-ingress.gateway-prod.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.546900034 CET	1.1.1.1	192.168.2.16	0xfbb2	No error (0)	origin-cloud-ingress.gateway-prod.production.braintree-api.com	gateway-prod-eu-central-1.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.546900034 CET	1.1.1.1	192.168.2.16	0xfbb2	No error (0)	gateway-prod-eu-central-1.production.braintree-api.com		35.156.167.229	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.546900034 CET	1.1.1.1	192.168.2.16	0xfbb2	No error (0)	gateway-prod-eu-central-1.production.braintree-api.com		3.122.176.248	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.546900034 CET	1.1.1.1	192.168.2.16	0xfbb2	No error (0)	gateway-prod-eu-central-1.production.braintree-api.com		52.29.159.59	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.546911955 CET	1.1.1.1	192.168.2.16	0xd586	No error (0)	client-analytics.braintreegateway.com	origin-analytics-prod.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.552134991 CET	1.1.1.1	192.168.2.16	0xcb11	No error (0)	payments.braintree-api.com	gateway-lb-prod.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.552134991 CET	1.1.1.1	192.168.2.16	0xcb11	No error (0)	gateway-lb-prod.production.braintree-api.com	origin-cloud-ingress.gateway-prod.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.552134991 CET	1.1.1.1	192.168.2.16	0xcb11	No error (0)	origin-cloud-ingress.gateway-prod.production.braintree-api.com	gateway-prod-eu-central-1.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566910982 CET	1.1.1.1	192.168.2.16	0x5990	No error (0)	checkout.paypal.com	checkout.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566910982 CET	1.1.1.1	192.168.2.16	0x5990	No error (0)	checkout.glb.paypal.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566924095 CET	1.1.1.1	192.168.2.16	0x36e5	No error (0)	checkout.paypal.com	checkout.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566924095 CET	1.1.1.1	192.168.2.16	0x36e5	No error (0)	checkout.glb.paypal.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566924095 CET	1.1.1.1	192.168.2.16	0x36e5	No error (0)	paypal.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566924095 CET	1.1.1.1	192.168.2.16	0x36e5	No error (0)	paypal.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566924095 CET	1.1.1.1	192.168.2.16	0x36e5	No error (0)	paypal.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566924095 CET	1.1.1.1	192.168.2.16	0x36e5	No error (0)	paypal.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566935062 CET	1.1.1.1	192.168.2.16	0x3d8c	No error (0)	c.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566935062 CET	1.1.1.1	192.168.2.16	0x3d8c	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566935062 CET	1.1.1.1	192.168.2.16	0x3d8c	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566935062 CET	1.1.1.1	192.168.2.16	0x3d8c	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566935062 CET	1.1.1.1	192.168.2.16	0x3d8c	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.566935062 CET	1.1.1.1	192.168.2.16	0x3d8c	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.567992926 CET	1.1.1.1	192.168.2.16	0x8706	No error (0)	c.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.567992926 CET	1.1.1.1	192.168.2.16	0x8706	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.577058077 CET	1.1.1.1	192.168.2.16	0xf4a	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.577058077 CET	1.1.1.1	192.168.2.16	0xf4a	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.577058077 CET	1.1.1.1	192.168.2.16	0xf4a	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.577058077 CET	1.1.1.1	192.168.2.16	0xf4a	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.577058077 CET	1.1.1.1	192.168.2.16	0xf4a	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.577058077 CET	1.1.1.1	192.168.2.16	0xf4a	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.579010010 CET	1.1.1.1	192.168.2.16	0x3093	No error (0)	assets.braintreegateway.com	assets.glb.braintreegateway.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.579010010 CET	1.1.1.1	192.168.2.16	0x3093	No error (0)	assets.glb.braintreegateway.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.579010010 CET	1.1.1.1	192.168.2.16	0x3093	No error (0)	paypal.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.579010010 CET	1.1.1.1	192.168.2.16	0x3093	No error (0)	paypal.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.579010010 CET	1.1.1.1	192.168.2.16	0x3093	No error (0)	paypal.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.579010010 CET	1.1.1.1	192.168.2.16	0x3093	No error (0)	paypal.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:29.579140902 CET	1.1.1.1	192.168.2.16	0x19	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.579140902 CET	1.1.1.1	192.168.2.16	0x19	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.579153061 CET	1.1.1.1	192.168.2.16	0x33f1	No error (0)	assets.braintreegateway.com	assets.glb.braintreegateway.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:29.579153061 CET	1.1.1.1	192.168.2.16	0x33f1	No error (0)	assets.glb.braintreegateway.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.177756071 CET	1.1.1.1	192.168.2.16	0x668c	No error (0)	www.softwareprojects.com		172.66.40.147	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.177756071 CET	1.1.1.1	192.168.2.16	0x668c	No error (0)	www.softwareprojects.com		172.66.43.109	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.206753016 CET	1.1.1.1	192.168.2.16	0x10c2	No error (0)	www.softwareprojects.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:30.271454096 CET	1.1.1.1	192.168.2.16	0x99f2	No error (0)	stun.kaptcha.com	devic-elast-1eoivwyi136bb-007d6743299a5175.elb.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.272145033 CET	1.1.1.1	192.168.2.16	0x4721	No error (0)	stun1.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.272413015 CET	1.1.1.1	192.168.2.16	0xe42c	No error (0)	stun1.l.google.com			28	IN (0x0001)	false
Jan 10, 2025 17:49:30.281136036 CET	1.1.1.1	192.168.2.16	0x576c	No error (0)	stun1.l.google.com			28	IN (0x0001)	false
Jan 10, 2025 17:49:30.282813072 CET	1.1.1.1	192.168.2.16	0x34c7	No error (0)	stun.kaptcha.com	devic-elast-1eoivwyi136bb-007d6743299a5175.elb.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.282813072 CET	1.1.1.1	192.168.2.16	0x34c7	No error (0)	devic-elast-1eoivwyi136bb-007d6743299a5175.elb.us-west-2.amazonaws.com		54.203.171.68	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.282813072 CET	1.1.1.1	192.168.2.16	0x34c7	No error (0)	devic-elast-1eoivwyi136bb-007d6743299a5175.elb.us-west-2.amazonaws.com		44.228.224.62	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.282813072 CET	1.1.1.1	192.168.2.16	0x34c7	No error (0)	devic-elast-1eoivwyi136bb-007d6743299a5175.elb.us-west-2.amazonaws.com		100.20.121.79	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.293675900 CET	1.1.1.1	192.168.2.16	0x979f	No error (0)	stun.kaptcha.com	devic-elast-1eoivwyi136bb-007d6743299a5175.elb.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.310456991 CET	1.1.1.1	192.168.2.16	0x5ee0	No error (0)	c.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.310456991 CET	1.1.1.1	192.168.2.16	0x5ee0	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.310456991 CET	1.1.1.1	192.168.2.16	0x5ee0	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.310456991 CET	1.1.1.1	192.168.2.16	0x5ee0	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.310456991 CET	1.1.1.1	192.168.2.16	0x5ee0	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.310456991 CET	1.1.1.1	192.168.2.16	0x5ee0	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.310884953 CET	1.1.1.1	192.168.2.16	0xd28c	No error (0)	c.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.310884953 CET	1.1.1.1	192.168.2.16	0xd28c	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.323183060 CET	1.1.1.1	192.168.2.16	0xa0dd	No error (0)	c6.paypal.com	c6.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.323183060 CET	1.1.1.1	192.168.2.16	0xa0dd	No error (0)	c6.glb.paypal.com	dualstack.paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324099064 CET	1.1.1.1	192.168.2.16	0x17cc	No error (0)	c.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324099064 CET	1.1.1.1	192.168.2.16	0x17cc	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324099064 CET	1.1.1.1	192.168.2.16	0x17cc	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324099064 CET	1.1.1.1	192.168.2.16	0x17cc	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324099064 CET	1.1.1.1	192.168.2.16	0x17cc	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324099064 CET	1.1.1.1	192.168.2.16	0x17cc	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324230909 CET	1.1.1.1	192.168.2.16	0xca02	No error (0)	c.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324230909 CET	1.1.1.1	192.168.2.16	0xca02	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324393034 CET	1.1.1.1	192.168.2.16	0x6ae2	No error (0)	c6.paypal.com	c6.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324393034 CET	1.1.1.1	192.168.2.16	0x6ae2	No error (0)	c6.glb.paypal.com	dualstack.paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324393034 CET	1.1.1.1	192.168.2.16	0x6ae2	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.65.35	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324393034 CET	1.1.1.1	192.168.2.16	0x6ae2	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.1.35	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324393034 CET	1.1.1.1	192.168.2.16	0x6ae2	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.193.35	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.324393034 CET	1.1.1.1	192.168.2.16	0x6ae2	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.129.35	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.338761091 CET	1.1.1.1	192.168.2.16	0x7e98	No error (0)	b.stats.paypal.com	stats.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.338761091 CET	1.1.1.1	192.168.2.16	0x7e98	No error (0)	stats.glb.paypal.com		34.147.177.40	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.339138985 CET	1.1.1.1	192.168.2.16	0xc9eb	No error (0)	b.stats.paypal.com	stats.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.710377932 CET	1.1.1.1	192.168.2.16	0x429e	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.710377932 CET	1.1.1.1	192.168.2.16	0x429e	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.710377932 CET	1.1.1.1	192.168.2.16	0x429e	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.710377932 CET	1.1.1.1	192.168.2.16	0x429e	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.710377932 CET	1.1.1.1	192.168.2.16	0x429e	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.710377932 CET	1.1.1.1	192.168.2.16	0x429e	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:30.710985899 CET	1.1.1.1	192.168.2.16	0x6b7	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:30.710985899 CET	1.1.1.1	192.168.2.16	0x6b7	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776074886 CET	1.1.1.1	192.168.2.16	0xe34b	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776074886 CET	1.1.1.1	192.168.2.16	0xe34b	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776074886 CET	1.1.1.1	192.168.2.16	0xe34b	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776074886 CET	1.1.1.1	192.168.2.16	0xe34b	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776074886 CET	1.1.1.1	192.168.2.16	0xe34b	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776074886 CET	1.1.1.1	192.168.2.16	0xe34b	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776097059 CET	1.1.1.1	192.168.2.16	0xe883	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776097059 CET	1.1.1.1	192.168.2.16	0xe883	No error (0)	ppo.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776097059 CET	1.1.1.1	192.168.2.16	0xe883	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776097059 CET	1.1.1.1	192.168.2.16	0xe883	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776097059 CET	1.1.1.1	192.168.2.16	0xe883	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776097059 CET	1.1.1.1	192.168.2.16	0xe883	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776281118 CET	1.1.1.1	192.168.2.16	0x54d0	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.776281118 CET	1.1.1.1	192.168.2.16	0x54d0	No error (0)	ppo.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777112007 CET	1.1.1.1	192.168.2.16	0xbec3	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777112007 CET	1.1.1.1	192.168.2.16	0xbec3	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777122021 CET	1.1.1.1	192.168.2.16	0xa986	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777122021 CET	1.1.1.1	192.168.2.16	0xa986	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777122021 CET	1.1.1.1	192.168.2.16	0xa986	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777122021 CET	1.1.1.1	192.168.2.16	0xa986	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777122021 CET	1.1.1.1	192.168.2.16	0xa986	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777122021 CET	1.1.1.1	192.168.2.16	0xa986	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777134895 CET	1.1.1.1	192.168.2.16	0x83e7	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777134895 CET	1.1.1.1	192.168.2.16	0x83e7	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777146101 CET	1.1.1.1	192.168.2.16	0x3df2	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777146101 CET	1.1.1.1	192.168.2.16	0x3df2	No error (0)	ppo.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777146101 CET	1.1.1.1	192.168.2.16	0x3df2	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777146101 CET	1.1.1.1	192.168.2.16	0x3df2	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777146101 CET	1.1.1.1	192.168.2.16	0x3df2	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777146101 CET	1.1.1.1	192.168.2.16	0x3df2	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777158976 CET	1.1.1.1	192.168.2.16	0x4b0f	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777158976 CET	1.1.1.1	192.168.2.16	0x4b0f	No error (0)	ppo.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777205944 CET	1.1.1.1	192.168.2.16	0xfd33	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777205944 CET	1.1.1.1	192.168.2.16	0xfd33	No error (0)	ppo.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777205944 CET	1.1.1.1	192.168.2.16	0xfd33	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777205944 CET	1.1.1.1	192.168.2.16	0xfd33	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777205944 CET	1.1.1.1	192.168.2.16	0xfd33	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.777205944 CET	1.1.1.1	192.168.2.16	0xfd33	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.797787905 CET	1.1.1.1	192.168.2.16	0x3c7c	No error (0)	www.softwareprojects.com		172.66.40.147	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.797787905 CET	1.1.1.1	192.168.2.16	0x3c7c	No error (0)	www.softwareprojects.com		172.66.43.109	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.806129932 CET	1.1.1.1	192.168.2.16	0x4b7f	No error (0)	www.softwareprojects.com			65	IN (0x0001)	false
Jan 10, 2025 17:49:31.979228973 CET	1.1.1.1	192.168.2.16	0x3024	No error (0)	client-analytics.braintreegateway.com	origin-analytics-prod.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.979228973 CET	1.1.1.1	192.168.2.16	0x3024	No error (0)	origin-analytics-prod.production.braintree-api.com		3.120.85.61	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.979228973 CET	1.1.1.1	192.168.2.16	0x3024	No error (0)	origin-analytics-prod.production.braintree-api.com		3.78.171.103	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.979228973 CET	1.1.1.1	192.168.2.16	0x3024	No error (0)	origin-analytics-prod.production.braintree-api.com		18.193.189.65	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.980612040 CET	1.1.1.1	192.168.2.16	0xf302	No error (0)	client-analytics.braintreegateway.com	origin-analytics-prod.production.braintree-api.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.987947941 CET	1.1.1.1	192.168.2.16	0xf7b2	No error (0)	ssl.kaptcha.com	colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:31.987947941 CET	1.1.1.1	192.168.2.16	0xf7b2	No error (0)	colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com		54.148.115.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.987947941 CET	1.1.1.1	192.168.2.16	0xf7b2	No error (0)	colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com		35.81.31.24	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:31.987947941 CET	1.1.1.1	192.168.2.16	0xf7b2	No error (0)	colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com		35.80.101.90	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.011893034 CET	1.1.1.1	192.168.2.16	0xfc0c	No error (0)	ssl.kaptcha.com	colle-elast-1xnsxgci0b78j-8180b06a6c06d9d4.elb.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.067687988 CET	1.1.1.1	192.168.2.16	0x2ccb	No error (0)	lhr.stats.paypal.com		34.147.177.40	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.069160938 CET	1.1.1.1	192.168.2.16	0xdaf1	No error (0)	c6.paypal.com	c6.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.069160938 CET	1.1.1.1	192.168.2.16	0xdaf1	No error (0)	c6.glb.paypal.com	dualstack.paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.069160938 CET	1.1.1.1	192.168.2.16	0xdaf1	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.129.35	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.069160938 CET	1.1.1.1	192.168.2.16	0xdaf1	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.193.35	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.069160938 CET	1.1.1.1	192.168.2.16	0xdaf1	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.65.35	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.069160938 CET	1.1.1.1	192.168.2.16	0xdaf1	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.1.35	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.070468903 CET	1.1.1.1	192.168.2.16	0xfec3	No error (0)	c6.paypal.com	c6.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.070468903 CET	1.1.1.1	192.168.2.16	0xfec3	No error (0)	c6.glb.paypal.com	dualstack.paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.137294054 CET	1.1.1.1	192.168.2.16	0x5a77	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.137294054 CET	1.1.1.1	192.168.2.16	0x5a77	No error (0)	t.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.137294054 CET	1.1.1.1	192.168.2.16	0x5a77	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.137294054 CET	1.1.1.1	192.168.2.16	0x5a77	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.137294054 CET	1.1.1.1	192.168.2.16	0x5a77	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.137294054 CET	1.1.1.1	192.168.2.16	0x5a77	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.140132904 CET	1.1.1.1	192.168.2.16	0x67dd	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.140132904 CET	1.1.1.1	192.168.2.16	0x67dd	No error (0)	t.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.382077932 CET	1.1.1.1	192.168.2.16	0x4538	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.382077932 CET	1.1.1.1	192.168.2.16	0x4538	No error (0)	ppo.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.382077932 CET	1.1.1.1	192.168.2.16	0x4538	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.382077932 CET	1.1.1.1	192.168.2.16	0x4538	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.382077932 CET	1.1.1.1	192.168.2.16	0x4538	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.382077932 CET	1.1.1.1	192.168.2.16	0x4538	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.383519888 CET	1.1.1.1	192.168.2.16	0xda20	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.383519888 CET	1.1.1.1	192.168.2.16	0xda20	No error (0)	ppo.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.795561075 CET	1.1.1.1	192.168.2.16	0x3a59	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.795561075 CET	1.1.1.1	192.168.2.16	0x3a59	No error (0)	t.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.795561075 CET	1.1.1.1	192.168.2.16	0x3a59	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.795561075 CET	1.1.1.1	192.168.2.16	0x3a59	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.795561075 CET	1.1.1.1	192.168.2.16	0x3a59	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.795561075 CET	1.1.1.1	192.168.2.16	0x3a59	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.796509027 CET	1.1.1.1	192.168.2.16	0x1c6b	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.796509027 CET	1.1.1.1	192.168.2.16	0x1c6b	No error (0)	t.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.867609024 CET	1.1.1.1	192.168.2.16	0x56e6	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.867609024 CET	1.1.1.1	192.168.2.16	0x56e6	No error (0)	ppo.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.867609024 CET	1.1.1.1	192.168.2.16	0x56e6	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.3.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.867609024 CET	1.1.1.1	192.168.2.16	0x56e6	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.195.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.867609024 CET	1.1.1.1	192.168.2.16	0x56e6	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.131.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.867609024 CET	1.1.1.1	192.168.2.16	0x56e6	No error (0)	paypal-dynamic-cdn.map.fastly.net		151.101.67.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:49:32.868316889 CET	1.1.1.1	192.168.2.16	0x9e8e	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:32.868316889 CET	1.1.1.1	192.168.2.16	0x9e8e	No error (0)	ppo.glb.paypal.com	paypal-dynamic-cdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:49:33.035820007 CET	1.1.1.1	192.168.2.16	0xa26c	No error (0)	lhr.stats.paypal.com		34.147.177.40	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343197107 CET	1.1.1.1	192.168.2.16	0xfcdb	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343197107 CET	1.1.1.1	192.168.2.16	0xfcdb	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 10, 2025 17:50:05.343343019 CET	1.1.1.1	192.168.2.16	0x5680	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	50016	172.66.40.234	80	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2025 17:49:27.616316080 CET	263	OUT	GET / HTTP/1.1 Host: yomali.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 10, 2025 17:49:28.152954102 CET	953	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 10 Jan 2025 16:49:28 GMT Content-Length: 0 Connection: keep-alive location: https://yomali.com/ Cache-Control: max-age=14400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nw%2F03ZkgjPw5Kbe87a%2FDPmIownei3i8hT9DsnsSNvCvKvC0ZJiYHqXXNbMMO90SnJEOvrClOoyIuvfEdBv93%2BCpGLG4MAyzCe4HhzXWiBUYLbrGfjfK6iW2KUmRP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cflb=02DiuDQJEcNyeUjVzptTfY3gThbRJjaqEebNXvXSB78Sp; SameSite=Lax; path=/; expires=Sat, 11-Jan-25 15:49:28 GMT; HttpOnly Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ffe29164e917d0b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2075&min_rtt=2075&rtt_var=1037&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=263&delivery_rate=0&cwnd=225&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49716	104.21.48.1	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:47:58 UTC	673	OUT	GET /mrloskie HTTP/1.1 Host: www.shinsengumiusa.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:47:58 UTC	955	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 10 Jan 2025 16:47:58 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://mwebexplorerpro.com/6988/2566/2/? Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RK7MBUesdCK%2FdiNvf02BYPXHFheM6Wb%2FGHB94fGuzJ4FblCB3J5tECOTg%2B0C88SEvHLFsI2VOX36qbHxqesLhZYD0TxnahYVhT48T2Kxo9KHvSqTP7G65hWsUIQquT3A%2Fpp1poHpDkwG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe26e5ef6d43be-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1612&min_rtt=1611&rtt_var=608&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1251&delivery_rate=1795817&cwnd=226&unsent_bytes=0&cid=8e990647c24a21c7&ts=132&x=0"
2025-01-10 16:47:58 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49719	188.114.97.3	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:47:59 UTC	675	OUT	GET /6988/2566/2/? HTTP/1.1 Host: mwebexplorerpro.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:47:59 UTC	887	IN	HTTP/1.1 302 Found Date: Fri, 10 Jan 2025 16:47:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: max-age=3600 cache-control: private pragma: no-cache location: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 expires: Fri, 10 Jan 2025 17:47:59 GMT access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type x-server: WEB_6 strict-transport-security: max-age=31536000; CF-Cache-Status: DYNAMIC Set-Cookie: __cflb=02DiuDvnJbjKdBkxKLVBqBrQP8wYzWkbUHwJb9wcPw8be; SameSite=Lax; path=/; expires=Sat, 11-Jan-25 15:47:59 GMT; HttpOnly Server: cloudflare CF-RAY: 8ffe26ecedc9c47a-EWR
2025-01-10 16:47:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49720	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:00 UTC	723	OUT	GET /report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 HTTP/1.1 Host: nervedefend.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:00 UTC	1174	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; expires=Mon, 20-Jan-2025 16:48:00 GMT; Max-Age=864000; path=/; samesite=lax Set-Cookie: _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; expires=Mon, 20-Jan-2025 16:48:00 GMT; Max-Age=864000; path=/; httponly; samesite=lax Set-Cookie: referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; expires=Wed, 15-Jan-2025 16:48:00 GMT; Max-Age=432000; path=/; httponly; samesite=lax
2025-01-10 16:48:00 UTC	1515	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 61 66 66 69 6c 69 61 74 65 3d 65 79 4a 70 64 69 49 36 49 6d 4e 76 64 48 68 77 62 6d 64 30 63 79 39 54 53 79 73 32 56 54 4a 35 61 58 52 54 61 45 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 31 70 68 5a 48 4e 47 63 6a 4d 35 4e 46 4e 6a 65 56 59 77 61 44 52 4c 4e 57 4a 52 51 54 30 39 49 69 77 69 62 57 46 6a 49 6a 6f 69 4d 6d 46 6c 4d 7a 6c 6d 5a 6a 5a 68 4e 6d 45 34 4f 44 67 32 4d 6d 49 30 4f 47 55 35 4e 44 55 34 4d 6a 41 31 59 57 5a 6b 5a 57 4e 6a 5a 6a 4d 77 4e 32 4a 6c 59 32 45 30 4d 54 63 79 59 6a 6c 6c 59 32 4a 68 4d 44 51 33 59 7a 41 31 4d 44 49 31 4f 54 59 32 4e 69 4a 39 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 31 35 2d 4a 61 6e 2d 32 30 32 35 20 31 36 3a 34 38 3a 30 30 20 47 4d 54 3b 20 4d 61 78 2d Data Ascii: Set-Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; expires=Wed, 15-Jan-2025 16:48:00 GMT; Max-
2025-01-10 16:48:00 UTC	216	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 35 39 26 6d 69 6e 5f 72 74 74 3d 31 37 35 33 26 72 74 74 5f 76 61 72 3d 36 36 39 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 30 31 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 32 30 34 32 31 26 63 77 6e 64 3d 32 33 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 33 63 31 33 62 33 64 65 37 62 35 33 33 35 64 35 26 74 73 3d 32 30 39 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1759&min_rtt=1753&rtt_var=669&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1301&delivery_rate=1620421&cwnd=235&unsent_bytes=0&cid=3c13b3de7b5335d5&ts=209&x=0"
2025-01-10 16:48:00 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 63 75 73 74 6f 6d 2f 73 68 6f 72 74 63 75 74 2d 69 63 6f 6e 2e Data Ascii: 7ffa<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="robots" content="noindex, nofollow"> <link rel="icon" href="/images/custom/shortcut-icon.
2025-01-10 16:48:00 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 64 69 6d 65 6e 73 69 6f 6e 32 3a 20 27 67 6c 6f 62 61 6c 5f 61 66 66 69 6c 69 61 74 65 5f 69 64 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 6d 65 6e 73 69 6f 6e 33 3a 20 27 67 6c 6f 62 61 6c 5f 73 75 62 69 64 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 6d 65 6e 73 69 6f 6e 34 3a 20 27 67 6c 6f 62 61 6c 5f 61 63 63 6f 75 6e 74 5f 69 64 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 6d 65 6e 73 69 6f 6e 35 3a 20 27 67 6c 6f 62 61 6c 5f 6d 65 72 63 68 61 6e 74 27 2c 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 0a 20 20 20 20 67 74 61 67 28 27 65 76 65 6e 74 27 2c 20 27 67 6c 6f 62 61 6c 5f 64 6f 6d 61 69 6e 5f 64 69 6d 65 6e 73 69 6f 6e 27 2c 20 7b 27 67 6c 6f 62 61 6c 5f 64 6f 6d Data Ascii: dimension2: 'global_affiliate_id', dimension3: 'global_subid', dimension4: 'global_account_id', dimension5: 'global_merchant', }, }); gtag('event', 'global_domain_dimension', {'global_dom
2025-01-10 16:48:00 UTC	1369	IN	Data Raw: 20 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 73 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 20 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 70 6c 61 79 65 72 2d 74 68 75 6d 62 6e 61 69 6c 20 63 6c 61 73 73 3d 22 5f 4e 46 73 4d 77 34 61 54 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 30 4b 45 71 64 52 39 55 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 20 21 69 Data Ascii: </h1> <div class="vsl-container "> <div data-player-thumbnail class="_NFsMw4aT"> <div class="_0KEqdR9U" style="display: flex !i
2025-01-10 16:48:00 UTC	1369	IN	Data Raw: 30 2e 38 30 32 2c 30 2e 30 33 2d 31 2e 30 31 37 2d 30 2e 33 31 34 43 32 32 2e 33 33 2c 31 35 2e 34 32 32 2c 32 31 2e 38 34 2c 31 35 2c 32 31 2c 31 35 63 2d 30 2e 35 2c 30 2d 30 2e 38 38 36 2c 30 2e 31 34 32 2d 31 2e 31 37 34 2c 30 2e 33 32 31 63 2d 30 2e 33 35 36 2c 30 2e 32 32 32 2d 30 2e 38 30 35 2c 30 2e 30 36 33 2d 31 2e 30 31 2d 30 2e 33 30 34 43 31 38 2e 35 33 33 2c 31 34 2e 35 30 38 2c 31 38 2c 31 34 2c 31 37 2c 31 34 63 2d 30 2e 36 32 31 2c 30 2d 31 2e 30 36 37 2c 30 2e 32 30 35 2d 31 2e 33 37 38 2c 30 2e 34 35 43 31 35 2e 33 37 2c 31 34 2e 36 34 38 2c 31 35 2c 31 34 2e 34 35 2c 31 35 2c 31 34 2e 31 32 39 6c 30 2d 37 2e 30 32 32 63 30 2d 30 2e 39 39 36 2d 30 2e 36 38 31 2d 31 2e 39 32 2d 31 2e 36 36 34 2d 32 2e 30 38 43 31 32 2e 30 38 33 2c 34 2e Data Ascii: 0.802,0.03-1.017-0.314C22.33,15.422,21.84,15,21,15c-0.5,0-0.886,0.142-1.174,0.321c-0.356,0.222-0.805,0.063-1.01-0.304C18.533,14.508,18,14,17,14c-0.621,0-1.067,0.205-1.378,0.45C15.37,14.648,15,14.45,15,14.129l0-7.022c0-0.996-0.681-1.92-1.664-2.08C12.083,4.
2025-01-10 16:48:00 UTC	1369	IN	Data Raw: 32 2d 31 2e 32 39 39 2d 33 2e 35 39 35 2d 32 2d 35 2e 37 39 33 2d 32 43 34 2e 32 30 37 2c 32 30 2c 33 2c 32 30 2e 34 34 33 2c 33 2c 32 31 2e 35 37 32 56 32 32 6c 35 2c 33 6c 33 2e 33 35 37 2c 32 2e 36 38 35 43 31 32 2e 34 32 31 2c 32 38 2e 35 33 36 2c 31 33 2e 37 34 32 2c 32 39 2c 31 35 2e 31 30 35 2c 32 39 48 32 32 63 32 2e 32 30 39 2c 30 2c 34 2d 31 2e 37 39 31 2c 34 2d 34 76 2d 32 4c 32 36 2c 31 37 2e 35 7a 22 2f 3e 3c 2f 67 3e 0a 20 20 20 20 3c 2f 73 76 67 3e 0a 3c 2f 73 70 61 6e 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 54 61 70 20 74 6f 20 70 6c 61 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a Data Ascii: 2-1.299-3.595-2-5.793-2C4.207,20,3,20.443,3,21.572V22l5,3l3.357,2.685C12.421,28.536,13.742,29,15.105,29H22c2.209,0,4-1.791,4-4v-2L26,17.5z"/></g> </svg></span> Tap to play </div> </div> </div>
2025-01-10 16:48:00 UTC	1369	IN	Data Raw: 70 2e 70 6c 61 79 65 72 54 79 70 65 20 3d 20 27 79 6f 75 74 75 62 65 27 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 41 70 70 2e 76 69 64 65 6f 49 64 20 3d 20 27 51 5a 35 78 75 71 42 4a 48 5f 73 27 3b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 41 70 70 2e 61 75 74 6f 70 6c 61 79 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 41 70 70 2e 6d 75 74 65 64 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 41 70 70 2e 73 75 62 74 69 74 6c 65 73 44 61 74 61 20 3d 20 5b 7b 22 73 74 61 72 74 54 69 6d 65 22 3a 37 2e 33 36 2c 22 65 6e 64 54 69 6d 65 22 3a 31 32 2e 38 38 2c 22 74 65 78 74 22 3a 22 4e 65 76 65 72 20 69 6e 20 6d 79 20 77 69 6c 64 65 73 74 20 64 72 65 61 6d 73 20 64 69 64 20 49 20 65 Data Ascii: p.playerType = 'youtube';</script><script> window.App.videoId = 'QZ5xuqBJH_s'; window.App.autoplay = true; window.App.muted = true; window.App.subtitlesData = [{"startTime":7.36,"endTime":12.88,"text":"Never in my wildest dreams did I e
2025-01-10 16:48:00 UTC	1369	IN	Data Raw: 65 78 74 22 3a 22 49 20 73 74 61 72 74 65 64 20 61 63 74 69 6e 67 20 6f 6e 20 69 6e 73 74 69 6e 63 74 2c 5c 75 30 30 61 30 5c 6e 61 6e 64 20 63 6f 76 65 72 65 64 20 68 65 72 20 6f 70 65 6e 20 77 6f 75 6e 64 2c 5c 75 30 30 61 30 5c 75 30 30 61 30 22 7d 2c 7b 22 73 74 61 72 74 54 69 6d 65 22 3a 35 33 2e 30 34 2c 22 65 6e 64 54 69 6d 65 22 3a 35 36 2c 22 74 65 78 74 22 3a 22 68 6f 70 69 6e 67 20 61 6e 64 20 70 72 61 79 69 6e 67 20 74 68 65 20 61 6d 62 75 6c 61 6e 63 65 5c 75 30 30 61 30 5c 6e 77 6f 75 6c 64 20 67 65 74 20 68 65 72 65 20 69 6e 20 74 69 6d 65 2e 2e 2e 22 7d 2c 7b 22 73 74 61 72 74 54 69 6d 65 22 3a 35 36 2e 39 36 2c 22 65 6e 64 54 69 6d 65 22 3a 36 31 2e 33 36 2c 22 74 65 78 74 22 3a 22 53 68 65 20 77 61 73 20 62 61 72 65 6c 79 20 62 72 65 61 Data Ascii: ext":"I started acting on instinct,\u00a0\nand covered her open wound,\u00a0\u00a0"},{"startTime":53.04,"endTime":56,"text":"hoping and praying the ambulance\u00a0\nwould get here in time..."},{"startTime":56.96,"endTime":61.36,"text":"She was barely brea
2025-01-10 16:48:00 UTC	1369	IN	Data Raw: 73 74 61 72 74 65 64 20 61 73 20 61 20 74 69 6e 67 6c 69 6e 67 20 73 65 6e 73 61 74 69 6f 6e 5c 75 30 30 61 30 5c 75 30 30 61 30 22 7d 2c 7b 22 73 74 61 72 74 54 69 6d 65 22 3a 31 30 31 2e 35 32 2c 22 65 6e 64 54 69 6d 65 22 3a 31 30 35 2e 38 34 2c 22 74 65 78 74 22 3a 22 6f 6e 20 6d 79 20 6d 6f 74 68 65 72 5c 75 32 30 31 39 73 20 6c 65 67 73 20 74 75 72 6e 65 64 20 69 6e 74 6f 20 61 5c 75 30 30 61 30 5c 6e 6e 69 67 68 74 6d 61 72 65 20 74 68 61 74 20 61 6c 6d 6f 73 74 20 74 6f 6f 6b 20 68 65 72 20 6c 69 66 65 2e 22 7d 2c 7b 22 73 74 61 72 74 54 69 6d 65 22 3a 31 30 36 2e 38 38 2c 22 65 6e 64 54 69 6d 65 22 3a 31 31 31 2e 37 36 2c 22 74 65 78 74 22 3a 22 46 6f 72 74 75 6e 61 74 65 6c 79 20 74 68 65 20 64 6f 63 74 6f 72 73 20 77 65 72 65 20 61 62 6c 65 20 Data Ascii: started as a tingling sensation\u00a0\u00a0"},{"startTime":101.52,"endTime":105.84,"text":"on my mother\u2019s legs turned into a\u00a0\nnightmare that almost took her life."},{"startTime":106.88,"endTime":111.76,"text":"Fortunately the doctors were able

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49721	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:00 UTC	2111	OUT	GET /css/app.css?id=409e9c6c9baad5c9b446 HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:01 UTC	900	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:01 GMT Content-Type: text/css Content-Length: 35434 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:56 GMT ETag: "610d46b0-8a6a" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 668 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m6EXy%2BLUM18vRBkQikFF8Bt8%2Bb9BR40x5qDXwfiz0%2FiVioqa8%2Fzl5PQkxsP9I6s0pO8kQ3PulsaWXKpBYYVDG2l94QXCp5JKw4mD1%2FvtAZ41e41kfQJqdvFEj%2BWFQXpxr44%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe26f62f4f8c96-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1923&min_rtt=1916&rtt_var=732&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=2689&delivery_rate=1479979&cwnd=188&unsent_bytes=0&cid=f33d4f0e2a650cb1&ts=128&x=0"
2025-01-10 16:48:01 UTC	469	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4d 6f 6e 74 73 65 72 72 61 74 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 3b 39 30 30 22 29 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4f 73 77 61 6c 64 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 3b 38 30 30 22 29 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 53 61 63 72 61 6d 65 6e 74 6f 22 29 3b 40 69 6d 70 6f 72 74 20 Data Ascii: @import url("https://fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700;900");@import url("https://fonts.googleapis.com/css2?family=Oswald:wght@400;500;600;700;800");@import url("https://fonts.googleapis.com/css2?family=Sacramento");@import
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 61 64 64 69 6e 67 3a 30 3b 7d 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 3b 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 7d 62 75 74 74 6f 6e 2c 68 74 6d 6c 2c 69 6e 70 75 74 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 3b 7d 61 75 64 69 6f 2c 69 6d 67 2c 76 69 64 65 6f 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 69 66 72 61 6d 65 7b 62 6f 72 64 65 72 3a 30 3b 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 Data Ascii: adding:0;}ul{list-style-type:none;}button,input,select,textarea{margin:0;outline:none;}button,html,input{box-sizing:border-box;}*,:after,:before{box-sizing:inherit;}audio,img,video{height:auto;max-width:100%;}iframe{border:0;}table{border-collapse:collaps
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 38 2c 31 37 30 2c 32 35 33 2c 2e 37 35 29 3b 7d 2e 5f 53 34 73 75 72 74 42 51 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 78 29 7b 2e 5f 41 73 4c 4d 45 65 76 62 20 62 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 7d 2e 5f 58 58 6a 77 49 37 61 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 74 65 78 74 Data Ascii: ackground:rgba(28,170,253,.75);}._S4surtBQ{margin-top:24px;text-align:center;}@media screen and (max-width:900px){._AsLMEevb br{display:none;}}._XXjwI7a2{width:100%;min-height:32px;display:flex;align-items:center;justify-content:center;font-size:14px;text
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7d 2e 5f 4e 77 31 74 6e 4c 6d 48 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 7d 2e 5f 4e 77 31 74 6e 4c 6d 48 20 2e 5f 48 77 45 30 5a 4c 67 55 7b 77 69 64 74 68 3a 36 34 70 78 3b 68 65 69 67 68 74 3a 36 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 7d 2e 5f 7a 4a 56 6f 37 4b 43 46 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 7d 2e 5f 50 32 4f 74 73 61 4e 36 7b 70 61 64 64 69 6e 67 3a 36 34 70 78 3b 63 6f 6c 6f 72 3a 23 31 35 32 31 33 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 7d 2e 5f 72 68 33 32 61 78 52 50 2c 2e 5f Data Ascii: ustify-content:center;align-items:center;}._Nw1tnLmH{text-transform:uppercase;}._Nw1tnLmH ._HwE0ZLgU{width:64px;height:64px;margin-bottom:24px;}._zJVo7KCF{margin-top:16px;font-size:20px;}._P2OtsaN6{padding:64px;color:#152131;background:#fff;}._rh32axRP,._
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 74 3a 37 30 30 3b 7d 2e 5f 55 4f 49 69 6a 59 63 41 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 63 6f 6c 6f 72 3a 23 61 61 61 3b 7d 2e 5f 41 68 59 4b 45 4e 47 37 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 32 34 70 78 20 30 3b 7d 2e 5f 30 46 45 42 67 44 70 71 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 36 34 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 62 Data Ascii: t:700;}._UOIijYcA{font-size:14px;font-weight:500;color:#aaa;}._AhYKENG7{width:100%;max-width:900px;font-size:14px;padding:24px 0;}._0FEBgDpq{width:100%;position:relative;justify-content:center;align-items:center;padding:64px;text-align:center;color:#222;b
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7d 2e 5f 71 43 32 41 63 5a 4a 37 7b 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 78 3b 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 73 65 63 74 69 6f 6e 3b 7d 2e 5f 70 34 70 48 30 4b 55 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 2e 5f 70 34 70 48 30 4b 55 6c 3a 62 65 66 6f 72 65 7b 63 6f 75 6e 74 65 72 2d 69 6e 63 72 65 6d 65 6e 74 3a 73 65 63 74 69 6f 6e 3b 63 6f 6e 74 65 6e 74 3a 63 6f 75 6e 74 65 72 28 73 65 63 74 69 6f 6e 29 20 22 2e 20 22 3b 7d 2e 5f 70 34 70 48 30 4b Data Ascii: :100%;display:flex;flex-direction:column;justify-content:center;align-items:center;}._qC2AcZJ7{max-width:900px;counter-reset:section;}._p4pH0KUl{width:100%;font-size:14px;}._p4pH0KUl:before{counter-increment:section;content:counter(section) ". ";}._p4pH0K
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 7d 2e 5f 78 54 47 53 52 58 72 57 2e 5f 61 34 6a 6c 61 37 39 36 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 35 36 2e 32 35 25 20 2b 20 31 32 32 70 78 29 3b 7d 2e 5f 78 54 47 53 52 58 72 57 2e 5f 61 34 6a 6c 61 37 39 36 3e 69 66 72 61 6d 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 36 31 70 78 3b 6c 65 66 74 3a 30 3b 7d 2e 5f 78 54 47 53 52 58 72 57 2e 5f 79 4a 62 57 71 39 39 46 20 2e 5f 6c 34 65 33 50 6f 76 30 7b 62 6f 74 Data Ascii: linear infinite;}._xTGSRXrW._a4jla796{max-width:100%;height:0;position:relative;overflow:hidden;padding-bottom:calc(56.25% + 122px);}._xTGSRXrW._a4jla796>iframe{width:100%;height:100%;position:absolute;top:-61px;left:0;}._xTGSRXrW._yJbWq99F ._l4e3Pov0{bot
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 7d 2e 5f 32 4f 73 66 53 45 68 59 7b 70 61 64 64 69 6e 67 3a 32 70 78 20 31 30 70 78 20 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 36 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 7d 2e 76 73 6c 2d 63 6f 6e 74 61 69 6e 65 72 2e 5f 4c 47 4e 76 31 54 4d 5a 2e 5f 52 33 50 77 54 4b 65 57 20 2e 5f 4e 46 73 4d 77 34 61 54 7b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 7d 2e 76 73 6c 2d 63 6f 6e 74 61 69 6e 65 72 2e 5f 4c 47 4e 76 31 54 4d 5a 20 2e 5f 78 54 47 53 52 58 72 57 2e 5f 61 34 6a 6c 61 37 39 36 7b 70 61 64 64 69 Data Ascii: 30px;line-height:1.3;font-weight:500;text-align:center;}._2OsfSEhY{padding:2px 10px 4px;color:#fff;background:rgba(0,0,0,.6);border-radius:2px;}.vsl-container._LGNv1TMZ._R3PwTKeW ._NFsMw4aT{height:100vh;}.vsl-container._LGNv1TMZ ._xTGSRXrW._a4jla796{paddi
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 69 6e 2d 72 69 67 68 74 3a 2d 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 62 62 30 66 64 3b 7d 2e 5f 66 4f 7a 61 6e 31 4c 4e 3a 61 66 74 65 72 2c 2e 5f 66 4f 7a 61 6e 31 4c 4e 3a 62 65 66 6f 72 65 7b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 2d 31 30 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 30 70 78 20 73 6f 6c 69 64 20 23 30 32 39 62 66 33 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 30 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 7d 2e 5f 66 4f 7a 61 6e 31 4c 4e 3a 61 66 74 65 72 7b 72 69 67 68 74 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 Data Ascii: in-right:-10px;font-size:14px;color:#fff;background:#2bb0fd;}._fOzan1LN:after,._fOzan1LN:before{width:0;height:0;position:absolute;bottom:-10px;content:"";border-top:10px solid #029bf3;border-left:10px solid transparent;}._fOzan1LN:after{right:0;border-le
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 32 58 4e 36 6d 69 44 73 2c 2e 5f 70 45 37 75 47 67 38 4c 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 7d 2e 5f 70 45 37 75 47 67 38 4c 2c 2e 5f 64 42 32 4a 64 39 4a 31 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 7d 2e 5f 64 42 32 4a 64 39 4a 31 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 3a 6e 6f 6e 65 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 66 6f 6e Data Ascii: 2XN6miDs,._pE7uGg8L{display:flex;justify-content:center;align-items:center;text-transform:uppercase;}._pE7uGg8L,._dB2Jd9J1{margin-bottom:24px;}._dB2Jd9J1{position:relative;display:flex;flex:none;justify-content:center;align-items:center;flex-wrap:wrap;fon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49723	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:00 UTC	2147	OUT	GET /images/custom/image15.jpg HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:01 UTC	907	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:01 GMT Content-Type: image/jpeg Content-Length: 183630 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-2cd4e" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4965 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fgd%2FwFl4rVTTns0nn%2F6vzn5X4FNpaKFmzQ5iOGX7OC9Iumz0lQ%2F%2BBbz39PbKHfvNwPUnEdPCzITk2zzWQDcbeh9dlXyR6GZBYwHVWWXA7k4TkQeO%2BdfUiNogPr2atf%2BAJ4Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe26f69e03c35f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1495&min_rtt=1486&rtt_var=576&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2725&delivery_rate=1870595&cwnd=177&unsent_bytes=0&cid=e1a01202d32c2541&ts=128&x=0"
2025-01-10 16:48:01 UTC	462	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 04 aa 07 cf 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 b7 60 f5 bf 68 fb 45 73 1a 7b f4 ad eb 56 ad 9e a6 26 e4 6f f2 d3 cf 43 55 a1 35 3d 67 61 95 26 eb 54 a6 4c 9c d5 e9 bb d5 56 19 e2 82 8a 2c 39 a0 74 ab 0d 16 4d 46 53 68 a6 32 13 4c 23 9a 91 ba d3 6a 4a 18 d1 e5 49 ac cb 98 fa d6 b9 fb b5 9b 72 32 4d 4b 1a 33 95 06 fe 2b 4a d6 3c Data Ascii: q"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?`hEs{V&oCU5=ga&TLV,9tMFSh2L#jJIr2MK3+J<
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 6d 4d de 44 4d 97 91 78 a9 40 a8 d2 a5 15 e9 c2 d6 39 65 b8 98 a6 49 c2 d3 cd 47 2f 4a b9 12 8a 17 3d 0d 73 da 89 18 6a de b9 38 ae 6f 53 7c 06 ac 96 e6 f0 39 6b a6 ff 00 48 35 35 b7 51 55 27 6c ca 7e b5 24 12 60 81 5b c9 68 68 6e 41 da af c1 d6 b1 e0 97 a5 68 45 36 31 5e 7c ef cc 33 7e df a0 ab ca 38 ac cb 39 32 05 69 ab 71 5d 14 4c a4 32 55 ac 3d 55 3f 76 d5 bc f5 8f a9 2e 51 ab a4 11 e6 ba ba 7c ec 2b 2a 08 be 61 5b da c4 5f bd 35 9d 04 20 1a dd 3f 74 76 d4 bd 63 16 5a ba 2b 68 82 ad 64 58 a5 6d c1 58 c9 ea 59 63 cb a6 34 55 65 28 65 a9 b0 ca 5e 55 46 61 ad 05 8b 75 3b ec f4 d2 25 b3 33 ca cf 15 56 e2 db e4 35 b6 6d 88 35 0c b0 fc 94 c5 73 90 bb 83 19 ac 69 13 6b fe 35 d5 ea 31 e0 1a e7 a6 4e 6a e2 c5 21 d6 e7 18 35 71 64 00 55 05 3b 45 29 9b 14 d8 93 Data Ascii: mMDMx@9eIG/J=sj8oS\|9kH55QU'l~$`[hhnAhE61^\|3~892iq]L2U=U?v.Q\|+*a[_5 ?tvcZ+hdXmXYc4Ue(e^UFau;%3V5m5sik51Nj!5qdU;E)
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: b4 92 00 3b 52 bc 5c 57 24 a6 6d 13 21 e0 e2 a2 f2 b3 c5 6a 3c 47 d2 a3 fb 3d 11 90 33 38 5b fc d5 72 28 3d aa cc 76 d5 71 2d eb 57 2b 88 ad 14 35 6d 21 a7 79 7b 6a 44 a8 18 c6 8a a3 65 35 64 d3 76 66 9a 26 e5 6f 27 75 4a 91 85 ab 02 3a 70 4e 6b 54 89 24 81 30 2a dc 75 59 0e 29 fe 70 14 b9 40 be 87 02 9c 66 03 8a a4 b3 f1 d6 98 f3 73 4d 20 2e b4 fe b5 5e 4b a0 b9 c5 52 96 73 83 59 b7 17 85 33 cd 68 98 58 d0 9e f3 a8 cd 55 6b b0 7b d6 0d c6 a3 f3 9c 35 32 3b d2 4f 26 ad c5 b4 4b 66 cb be f3 55 99 79 34 90 c9 bc 54 db 38 cd 4d ec 4d ca 4e 99 35 62 df 81 8a 42 99 6a 9a 34 db cd 64 d8 22 f4 07 04 55 d4 6a cf 8d b0 2a d4 52 13 59 b6 32 e8 3c 50 46 45 45 1b 82 bd 7a 54 b9 1e b9 fa 54 8c 8d 96 99 b6 a6 24 9e d8 a6 f9 64 9a 4c 64 7b 33 4b e5 8c 54 c1 0d 05 70 2a Data Ascii: ;R\W$m!j<G=38[r(=vq-W+5m!y{jDe5dvf&o'uJ:pNkT$0uY)p@fsM .^KRsY3hXUk{52;O&KfUy4T8MMN5bBj4d"UjRY2<PFEEzTT$dLd{3KTp*
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: b3 73 8e 28 fb 5f bd 55 c9 e5 2f 34 94 df 36 a9 fd a4 1a 5f b4 0c 54 4a 37 65 a6 17 57 18 06 b9 fb b9 cf 35 a3 77 2e 45 62 dc b5 54 29 a0 94 9a 46 6d cb 16 cd 51 df 56 e7 71 59 ec 7e 63 5b d8 e7 2e c4 d5 7a d2 46 56 15 9b 09 ad 0b 65 2c c2 a1 b1 a5 a9 d1 5b 1d ea 2a 76 84 b5 45 60 bc 56 b2 c5 95 ae 77 2d 4e bd 91 85 3c 05 6b 26 e2 3f 9a ba d9 ed b7 a1 18 35 87 7b 6a 63 6a a8 4a e4 4d 5d 1b da 6f dd 15 d2 da fd d1 5c fe 9c 9d 2b a1 b6 15 ea c5 e8 79 72 5a 9a 51 55 e8 f9 02 a9 44 2a f4 22 86 40 fd b9 a8 25 8e ad ed a8 e4 5c 83 52 98 ec 52 c5 31 aa cb 25 40 e2 a8 11 52 5a a7 21 00 f5 ab b2 d6 74 c7 e6 ac a4 cd a2 34 b7 34 84 e4 54 61 b2 6a 45 19 ac 67 7b 1a 25 a8 c3 d6 9c 0e 29 4a f3 46 31 5e 75 49 38 b3 78 ab 93 2c d8 14 86 71 50 b7 4a ae ec 47 7a 54 f1 0d Data Ascii: s(_U/46_TJ7eW5w.EbT)FmQVqY~c[.zFVe,[vE`Vw-N<k&?5{jcjJM]o\+yrZQUD"@%\RR1%@RZ!t44TajEg{%)JF1^uI8x,qPJGzT
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: ba 29 6c 87 a5 50 9a cf 07 a5 6a a5 71 ad 06 5b 0e 95 a7 08 c0 ac f8 50 c6 7d aa fc 6d c5 65 55 68 4d cb 23 a5 38 26 69 23 19 ab 2a 9c 57 8b 55 5d 95 72 24 8f 0d d2 a7 54 e2 9c a9 52 05 c0 a5 18 58 2e 42 c3 8a 82 4e 86 ad b0 e2 aa 48 0f 34 a4 52 20 a4 3d 29 69 af d2 8a 70 e6 1b 65 59 c6 45 61 6a 2b d6 b7 65 e9 59 37 6b b8 9c 8a ee a7 40 8b 9c df 9a f1 ca 46 09 15 a7 6d 7b b4 0a 89 ad 83 3e 71 4f 16 d8 5e 2b d1 8c 12 56 04 8d 38 b5 30 71 f3 55 e8 2f b7 75 35 cc 32 32 1c 8a 7c 77 cd 1f 07 34 a7 4d 35 a0 58 ed a3 ba f9 07 34 3d cf bd 73 56 fa a2 ba 8f 98 67 eb 52 b5 f8 fe f5 73 7b 27 70 35 67 b8 e0 d7 35 a9 49 be 4a b3 35 fa e3 af eb 58 f7 17 1e 63 67 35 d7 4a 16 02 a4 e7 19 aa 32 3f bd 4d 75 26 0d 67 c9 26 45 76 45 19 b6 23 c8 46 48 35 2d ac c4 b8 15 45 e4 Data Ascii: )lPjq[P}meUhM#8&i#*WU]r$TRX.BNH4R =)ipeYEaj+eY7k@Fm{>qO^+V80qU/u522\|w4M5X4=sVgRs{'p5g5IJ5Xcg5J2?Mu&g&EvE#FH5-E
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 22 95 ca 44 c8 45 2b 37 1c 54 6a 45 2e 45 05 88 72 69 08 a7 8a 43 d6 80 18 13 da 9d b2 a4 51 4e db 50 d0 d0 44 79 ad 2b 73 c8 ac d0 08 35 72 dd f0 45 65 38 94 99 bd 6a 72 2b 4a 3e 82 b1 ed a5 18 eb 5a 50 c9 9c 57 1c e3 a9 aa 2f 63 02 98 68 dd 91 48 c7 35 95 8a 44 6d 8a af 22 02 0d 4e e7 15 11 39 a6 80 a1 24 39 3d 29 62 b6 25 c7 ca 6a ea a0 cf 4a b3 0c 40 b8 ad 62 c9 68 75 ad a7 1d 3b d6 a4 36 b8 c7 14 90 45 80 2a fa 29 03 a5 74 46 26 4c 6a 42 05 4c 23 02 81 d2 82 7b 55 f2 a2 08 9d 05 40 eb 8a b0 79 a6 3a fc b5 94 e1 a0 d3 2a f7 a7 ee e2 9a c3 06 9a 4f 15 c7 24 6f 11 e5 f8 a8 1d e9 ae f5 1e 72 7a d6 4c d0 7a b1 c8 ad 1b 77 1e b5 9a 83 9a bd 00 e9 49 26 06 98 c1 02 8a 89 09 f5 a9 6b 50 b8 86 a1 95 84 68 58 d3 a7 99 62 5d cc 40 5f 53 5c a6 b7 e2 1d 87 62 3e Data Ascii: "DE+7TjE.EriCQNPDy+s5rEe8jr+J>ZPW/chH5Dm"N9$9=)b%jJ@bhu;6E)tF&LjBL#{U@y:O$orzLzwI&kPhXb]@_S\b>
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 89 59 f7 53 90 f3 55 5a 50 0e 33 53 c2 e1 aa 46 5d 8c 54 c0 62 a2 8c 8a 9b 70 f5 a0 0a f3 56 4d e0 39 35 af 29 1e b5 97 75 c9 34 98 8c 3b 88 b7 13 55 52 df 0d cd 69 c8 a3 34 d0 80 d4 a6 36 45 1c 23 1d 2a c7 94 31 d2 90 00 b4 fd e3 15 40 56 96 3c 03 59 b3 63 71 ad 79 9d 7c b2 6b 16 e2 41 93 55 11 b7 a1 4a 6e 4d 55 61 83 56 9f e6 a8 59 38 ad 51 93 65 76 a8 98 55 86 43 51 94 3e 94 c4 42 41 c5 46 41 e6 ac 15 a8 dc 55 21 15 58 66 a2 29 9e b5 60 f5 a6 62 93 11 55 a3 f6 a4 09 8a b4 57 35 13 0c 54 d8 06 0a 78 6c 0a 85 9b 1d 29 04 94 f9 40 b2 1a a5 52 0d 55 8c ee 3d 6a ec 51 af 19 34 72 05 c5 02 97 66 6a ca c2 a4 53 9a db 3c 8a 9e 50 b9 4f cb 04 d2 3d b8 23 a5 58 68 ca 1c 63 9a 40 dc e0 8a d2 28 4c cc 96 02 09 18 35 0e cc 71 8a d8 91 15 d7 de aa 34 18 34 35 61 14 Data Ascii: YSUZP3SF]TbpVM95)u4;URi46E#*1@V<Ycqy\|kAUJnMUaVY8QevUCQ>BAFAU!Xf)`bUW5Txl)@RU=jQ4rfjS<PO=#Xhc@(L5q445a
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: e4 38 71 4e dd ce 29 0a 9c 67 b5 52 be d4 6d ec 20 32 48 c0 bf f0 8a da 30 e6 76 44 5c a9 ae ce b0 d8 bb 4a df 2f f7 41 ea 7d eb cb 35 2b d7 b8 b8 72 a4 9e 78 6a d2 d7 b5 b9 ef e5 65 67 c4 47 3c 66 b9 d6 6d c3 0a 30 3e b5 eb 50 a3 c8 b5 30 9c af b1 5e 57 95 81 00 ed 07 ae 3b d3 23 87 60 fb dc 1e a2 ac 34 64 0c 95 c5 02 24 20 16 72 05 74 99 10 e4 7a e6 85 40 c3 af 5a ba 21 42 bf 2c 4c 40 fe 26 e2 8f 2a 34 6e 4a f3 d8 03 40 15 f6 c6 38 20 63 d6 9e b1 46 06 46 d6 1e 95 38 82 42 a7 6c 47 f1 14 e5 b6 24 fc c5 01 c7 41 52 d0 c8 5d d0 e0 2a 63 14 79 de 58 ce c5 27 da a4 7b 6d 80 ed e4 9a 8b ca 20 8c 80 0d 00 34 5d ed 24 98 87 34 ff 00 b5 42 d1 e3 61 43 52 7d 98 b8 c9 c0 1d ce 45 37 c9 da 48 8e 35 3e e4 e6 a8 04 ea 80 ab 71 8f 5a 40 48 3c 12 7d aa 27 89 c6 08 4d Data Ascii: 8qN)gRm 2H0vD\J/A}5+rxjegG<fm0>P0^W;#`4d$ rtz@Z!B,L@&4nJ@8 cFF8BlG$AR]cyX'{m 4]$4BaCR}E7H5>qZ@H<}'M
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 15 cc 98 3d 69 0b 06 c1 cd 45 29 c3 52 21 cf 7a cd c8 39 4b 01 72 29 eb 1e 7b 52 c4 9b 85 5d 8e 10 05 45 cb 50 b9 41 a3 3e 95 04 88 47 6a d9 6b 50 57 22 a9 5c 43 b7 3c 55 a6 0e 16 32 99 32 71 4d 58 2a d8 8f 2d c0 ab 11 5b e7 a8 a5 37 60 8c 6e 50 16 e4 f4 14 1b 63 e9 5a e9 6c 3d 2a 4f b2 0f 4a c3 98 dd 51 39 c7 b7 2b 52 42 19 6b 5a 6b 41 e9 55 9a dc af 6a d2 32 b9 9c a9 d9 92 db c8 6a d6 ea a4 89 b6 ac a1 27 ad 58 e2 8b d0 37 15 67 39 aa 31 92 b5 3a ca 32 39 a4 cb 2d a6 2a 09 8f 3c 53 5a 7e 0e 2a 16 97 27 9a cc a2 39 07 35 52 45 f9 aa d3 9c d3 16 3c b0 aa b9 9b 43 62 80 b6 38 ad 18 22 2a 46 6a 6b 6b 61 b0 1c 54 ae b8 38 02 9b 21 68 c9 a3 02 a4 22 a3 88 13 56 56 2e e6 b9 e4 8d 14 ac 40 46 45 2c 71 e4 8a b4 b0 13 da a5 8e db 1d ab 1f 66 db 2b da 2b 10 84 c7 Data Ascii: =iE)R!z9Kr){R]EPA>GjkPW"\C<U22qMX-[7`nPcZl=OJQ9+RBkZkAUj2j'X7g91:29-<SZ~'95RE<Cb8"*FjkkaT8!h"VV.@FE,qf++

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49724	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:00 UTC	2147	OUT	GET /images/custom/image13.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:01 UTC	900	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:01 GMT Content-Type: image/png Content-Length: 124410 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-1e5fa" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4964 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fxz6xiD8n3rZDydHL4XdLIOz2eMDbJAt9jzkK0BvOCziaHtivt3SzKXMtU7QxF6L3qWGgzxhv%2FmgXe2RHAkIzigQC9%2Fl%2B%2BbttuCVn59rcM0D4qs36Um8wuatSzR5uWT4BXI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe26f69df75e78-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1738&min_rtt=1728&rtt_var=655&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=2725&delivery_rate=1689814&cwnd=252&unsent_bytes=0&cid=6526fb2ceb41f092&ts=123&x=0"
2025-01-10 16:48:01 UTC	469	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 88 00 00 00 aa 08 06 00 00 00 b7 50 d8 af 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e cc bd 57 97 64 d9 79 25 b6 af 0f 6f d2 54 66 b9 36 d5 be 1b a6 09 60 80 21 c8 25 62 86 94 06 c0 50 0f fa 6b d2 e8 61 c4 f7 d1 83 34 5a 43 72 0d 29 61 66 ad 81 44 02 24 08 60 60 08 b4 41 bb aa 2e 93 95 36 32 fc f5 57 6b ef 73 6e 64 64 94 69 34 30 20 10 58 8d aa cc ca 8c b8 f7 dc 73 3e b3 bf fd ed cf f9 37 7f f6 6f 2b ac bd 1c c7 81 eb ba 48 92 04 d3 d9 14 cd a8 85 46 b3 a9 ef a5 69 8a 20 08 d6 7f 1c 40 b9 f1 f5 e5 2f 1f 1e 1f e1 87 3f fc 01 3e fa e8 36 b6 b7 b7 f0 8d 6f 7c 13 be e7 a1 d5 6e a3 aa 2a f8 8e fb c4 df d7 b5 d8 7f ad ca 4b 97 a9 df 2d ab 0a 70 2e 7f be eb 38 97 df 6f e3 f7 78 1f Data Ascii: PNGIHDRPsRGB IDATx^Wdy%oTf6`!%bPka4ZCr)afD$``A.62Wksnddi40 Xs>7o+HFi @/?>6o\|n*K-p.8ox
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: e1 82 f7 ce 75 70 b5 26 bc 16 f3 35 50 39 2e 2a d7 81 e3 06 70 5c 07 69 56 98 f7 b1 fb c6 e7 d2 3a 2e 1e 79 ee 4f dd 95 e6 1f 9d 8a 9f 58 62 72 3e d6 fa 76 07 5d 3d 07 37 4f d0 4f 52 dc f9 d9 cf f0 ce 4f 7e 82 2f fc c1 57 d1 7b fd 33 88 dd 10 65 66 f7 8e 6b d6 af 2a ea eb 31 ef e9 b9 17 e7 83 cf c5 75 52 bd 5f 7c 72 82 d3 7b f7 80 b2 c0 95 fd ab e8 6e ef a0 f2 2a e4 b3 39 aa 32 d1 ba b8 45 05 37 ab 80 ca 47 52 f9 88 8b 1c fd ad 16 4e 46 87 18 0c b6 10 fa 01 ce cf 4e 31 9b 9c a1 d7 6d c0 c9 4b c4 f3 02 69 51 62 b0 b7 87 d1 e9 09 1a 45 aa 9f 75 3b db 58 72 21 dd 0a 05 0a 3d 8f aa cc e0 96 19 82 64 81 f8 f0 21 ae 5d bd 8e b2 bb 83 71 cc e7 58 a0 03 20 3d f8 18 d3 87 07 c8 16 29 a2 66 03 9d fd 1d 38 8d 00 8b e9 5c e7 86 7b 22 2e 32 54 cd 50 7b bc 4a 33 14 45 Data Ascii: up&5P9.p\iV:.yOXbr>v]=7OORO~/W{3efk1uR_\|r{n*92E7GRNFN1mKiQbEu;Xr!=d!]qX =)f8\{".2TP{J3E
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 9d e2 eb df f8 3a 5e 7d e5 55 65 25 8c 8a 5c 46 0c 9e af af 37 df 9f 9b 8e df 2b ca e2 92 61 a7 d3 30 3b f3 d3 65 10 fc 15 1e 4c 79 e7 80 5e fc 72 66 c2 ef d7 ce 81 9f 2b 03 ce 8f b1 0e 6c f3 fa 94 11 c4 73 54 c9 02 a1 ef 29 62 61 74 4b 67 11 44 0d a4 a5 0b d7 f5 e1 d1 c0 78 95 b2 a7 24 5d 2a ea 32 8e f7 22 63 e1 83 ce 79 6d 55 a1 48 a6 48 13 e3 00 3d 17 ae 6f 5c 69 db 0b 15 f9 4e 66 53 c4 8b a5 22 8a 61 b7 25 43 e3 14 31 aa e5 14 d9 e4 0c f1 f1 11 e2 bc c4 e0 a5 cf 22 dc b9 8a d2 0d 90 16 90 11 af 1d 84 36 08 3f 67 2d 83 e0 6e e2 e1 96 53 aa a0 28 ce 64 3e b9 36 27 1d 62 59 e5 8a 58 14 34 a4 a9 79 76 7e 00 78 3e 1c 2f 30 5b 8d 19 97 32 0d bb 53 9e e2 20 cc 23 30 87 c2 f3 cc f5 f1 ef 3c 28 cc 64 b8 46 8c 56 f9 a7 0c f1 ca 49 fc ea 8e a1 fe cd 92 d7 55 56 Data Ascii: :^}Ue%\F7+a0;eLy^rf+lsT)batKgDx$]*2"cymUHH=o\iNfS"a%C1"6?g-nS(d>6'bYX4yv~x>/0[2S #0<(dFVIUV
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 8e 10 d2 21 7b 0d f8 51 43 19 09 ff f4 bd 26 66 e7 63 39 88 74 39 43 5c 26 d6 b6 fa 70 19 f0 54 95 d6 91 7b 7b 99 24 17 d9 b1 35 4b b2 3d 65 05 97 76 87 70 ae e7 29 db 1a cf a6 fa bd 76 a3 89 a3 93 63 2c 92 18 5b 57 af c1 e5 f5 06 11 bc a4 14 74 17 27 33 41 a7 a5 1f 22 e7 59 26 2c cd 2d 56 07 38 d6 a6 d3 39 d0 2e 7a 44 75 3c 13 dc 69 0f 3f 2e 83 b8 64 7f 9d cb d8 fb 86 77 f8 c4 1a 04 23 0c 42 53 79 9e 21 cf 0b 7c e7 3b 7f 8b bf f9 9b bf c5 4b 2f bf 84 37 3f ff a6 d2 5c 61 87 32 c2 cc 20 2e 3b 9c cd 00 7f d3 49 84 a1 79 78 fc 0c 3a 31 cf af 31 6f 73 a5 84 0f 18 21 eb ef 3e 9d 9d f1 a0 f5 8b a9 db 3a bc 55 3b c2 fa df 19 b5 1a c3 65 20 2e 7a 6b 61 82 84 5d 94 4d 15 f0 aa 1c d9 64 8a e9 e4 4c 70 4f 2b 6a 00 05 3d 30 00 d6 19 18 01 bb ae 16 dd 44 d7 74 1e 8e Data Ascii: !{QC&fc9t9C\&pT{{$5K=evp)vc,[Wt'3A"Y&,-V89.zDu<i?.dw#BSy!\|;K/7?\a2 .;Iyx:11os!>:U;e .zka]MdLpO+j=0Dt
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 94 45 89 78 3a 53 20 e7 86 01 72 06 32 2c 18 3b c0 a2 4a d1 ea f5 11 85 4d 24 85 0b bf 3b c4 95 bd ab 72 50 d3 f3 11 dc 3c c5 72 32 c6 72 3e 43 bb d7 21 3c 00 97 81 1a f7 0a 43 1d 66 a1 2c 6d f0 4c 16 99 9c 36 4f d6 f8 de c7 08 1c a8 80 5e a4 39 ca 65 82 c9 f1 a9 8c 72 6f 7b 0b 41 bf ab ec 48 b5 36 cf c3 62 66 8a f5 3e b3 12 22 1f c3 3e 10 86 70 03 5f 85 79 66 d4 61 a3 89 dc 73 d1 ea 74 81 ac 10 d4 33 7a 70 0f dd 46 88 66 bf 25 44 85 8e 23 60 81 dd 0b 55 7f e0 b9 63 7d 75 65 8f 78 fe 05 ef b3 06 e8 a8 e0 ce 20 95 6b 22 e7 dc 6a 09 95 68 35 23 a4 ac 63 38 ae 48 22 2c f4 d3 01 44 59 81 93 c3 23 41 64 ac 6d 10 c9 30 96 d1 45 c6 6c 4f 70 ae 67 9c 30 d1 09 5b 77 e6 3d 08 25 b2 64 9e df a8 83 90 01 59 2b 0a d7 b5 84 f3 d1 39 fe fd ff f5 ef 75 a3 4c 2b bf f6 b5 Data Ascii: Ex:S r2,;JM$;rP<r2r>C!<Cf,mL6O^9ero{AH6bf>">p_yfast3zpFf%D#`Uc}uex k"jh5#c8H",DY#Adm0ElOpg0[w=%dY+9uL+
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 1a 36 d9 d0 7c ac 59 ae 3a 09 9d 07 03 86 cc b2 da a2 28 d0 be 24 64 5a 12 c3 f7 3c 34 88 d9 2f 96 68 37 09 3f 75 30 3a 3d 15 7d b6 d1 0c 75 4e 68 b0 e2 f1 4c 10 4a 77 67 a8 ba c1 b3 2f be 82 56 77 88 eb 2f dd c2 5b ef bc 0d da 0d 9e 87 4e 8f 67 ab 2b 96 20 59 38 cc 20 c6 a3 53 64 d6 d8 c7 f5 59 2b 3c 65 c1 7c 7e 2e b3 7f 91 1c 52 64 c9 1c f9 62 86 e5 f1 a1 8a de 8d 5e 07 21 f7 ec 22 13 93 69 3e 31 ac ab e1 fe 3e 12 66 1c 80 60 36 66 13 a4 cd fa ad 86 a8 e3 8e cb 2c cf 15 8b 70 3c 1e 29 78 1b 6e ef a2 6a 76 95 45 17 64 6b 1d dc 17 9d 9b ac 2b 37 60 8e c9 97 21 5f 30 70 e3 f9 24 f1 83 cf 96 c1 20 d7 de 98 1d c2 3e 6d d9 11 66 43 7c 1e 8b 34 53 11 99 c6 9e 41 29 f2 58 f6 8d 59 12 d7 41 90 66 5e 60 74 7c 8c 4e a7 2d f4 82 35 18 d7 35 b5 54 92 65 98 8d 34 5b Data Ascii: 6\|Y:($dZ<4/h7?u0:=}uNhLJwg/Vw/[Ng+ Y8 SdY+<e\|~.Rdb^!"i>1>f`6f,p<)xnjvEdk+7`!_0p$ >mfC\|4SA)XYAf^`t\|N-55Te4[
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 78 ac 82 f2 f5 bd 7d c4 27 67 38 bc 7b 1f f0 5b 6a b2 6b ec 0d 91 7b 8e 9a c0 fc 12 88 67 0b ed c7 f6 f6 b6 9c 01 83 0b d6 96 e8 2c 98 61 32 9b d0 3e cc 0b d5 54 3e fc c7 1f a3 d1 69 e3 e6 6b 6f 6a 7f 4f 0e ef 0b 56 a1 43 bc f6 fc 0b 88 ae 5f 17 3f 7f 7e 7a 06 08 d3 37 4d b2 a3 d3 63 ec ee 6c 61 31 9b a8 96 a0 06 da 20 c0 d6 f3 cf a8 7e 37 19 cf f4 ac 77 ae ec 9a ac e3 7c 24 58 eb e8 e1 a1 ea 39 dc 79 b4 25 dc fb b5 d1 33 19 aa 1a 5b 56 8d 6f 64 5d e5 da 6f 86 f9 45 23 18 56 05 f2 b3 33 41 c4 41 a7 a9 73 73 fc e0 00 cb 39 1d 88 8f 7e 7f a0 3a 02 21 a6 46 a7 83 59 92 0a ee 62 01 9e 91 39 0b bc 3a 9f b9 a9 09 69 7f 30 5b 67 86 d1 e8 0a fd 4c e6 e7 86 f0 c0 b3 cc 1e 06 1b f4 a6 a5 69 8e 6b b4 7b 88 5a 6d 43 2d 65 1d c0 d6 ee 58 50 56 9f 84 ea 85 8f 0f 84 94 Data Ascii: x}'g8{[jk{g,a2>T>ikojOVC_?~z7Mcla1 ~7w\|$X9y%3[Vod]oE#V3AAss9~:!FYb9:i0[gLik{ZmC-eXPV
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 14 00 f5 af de d0 f5 04 55 81 e9 f1 09 66 67 a7 18 ee 5f 45 b5 bd a5 9a 42 c9 ee e3 c5 02 0d bf 81 f3 f1 18 51 27 42 8b 1d d9 55 86 b3 7b 0f 50 cd 62 45 ba e1 ee 16 b2 20 c2 bc 2c 64 94 d5 dc ca 8c 94 fd 52 b6 2e 66 d0 02 06 ed 2c ce 13 3e 31 3d 48 dc 67 64 1d c9 89 59 e3 c8 22 33 03 1c 3a 0d f6 0f 25 8b 39 9c 24 81 33 67 4d 24 12 eb 89 cd a7 34 96 44 f4 59 5c 66 1d 85 f0 cc c1 e8 0c 8d 76 1f fd dd 7d c1 47 6a 22 25 33 d1 73 11 a7 e6 0c 29 d0 b1 46 b8 62 f3 6f d0 d2 fa 24 d3 33 9d 11 75 86 73 0d 1d 08 7e 76 a3 40 0d 7c e4 52 71 5f b3 ff c6 ac 67 5d e3 aa cf 26 a1 57 ab e6 40 73 60 f7 98 b5 f0 26 bb e3 7f 3c f3 45 ae 82 38 25 7a c2 ce 40 f7 94 b1 bc 67 4d 94 a1 88 1b ba 78 fd 52 4d cb 32 f3 b8 76 74 9c 44 34 98 39 2b fb ff 75 1d c4 aa a3 f4 92 19 ff 14 5f Data Ascii: Ufg_EBQ'BU{PbE ,dR.f,>1=HgdY"3:%9$3gM$4DY\fv}Gj"%3s)Fbo$3us~v@\|Rq_g]&W@s`&<E8%z@gMxRM2vtD49+u_
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 28 d2 f7 90 75 92 29 82 de 16 3a 83 6d 24 65 0e bf ca 71 7e f7 36 c6 a7 a7 d8 bd 7e 05 7e ab 8d 68 70 45 7d 28 ac 3b 30 5b 38 3b 3a d0 fa 0e f7 6e 98 7a 9f 44 38 09 cb 98 1a 04 fc a6 a9 89 64 4b 31 cd d8 0b c1 c0 89 36 8c 46 9b d7 c9 2c 5c fa 68 eb 20 44 4d 0e 11 ea 50 2a 00 e3 4b d4 71 06 96 be 91 d6 e0 d7 ea ce e7 bd d3 e6 a0 52 97 f9 f2 fc 5c 0e 82 dd f0 2c 76 e7 ec a7 b0 ef 6f 32 3f 47 4d b8 6c c0 64 bf 0c ff cd 88 86 fa d2 db 22 ef 23 9f 4f 10 9f 9f a8 91 f3 b7 96 41 ac ce 8d 54 4e 6d 8a 0b e0 de c1 03 fc ed df 7d 17 cb 38 56 da f8 cd 7f f5 75 31 14 18 39 d7 ff fd 53 3a 88 4f ea 93 50 24 62 3d 3a 13 89 1a 46 2a c8 b9 26 05 94 9b 81 0f c6 80 d4 ba f4 ba 2e c0 fa 81 69 3a bb ac 33 b5 7e 7f 35 06 79 11 e1 d3 c8 9a c2 14 d3 6d 39 06 bb 79 d6 23 d9 8b 86 Data Ascii: (u):m$eq~6~~hpE}(;0[8;:nzD8dK16F,\h DMPKqR\,vo2?GMld"#OATNm}8Vu19S:OP$b=:F&.i:3~5ym9y#
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: d1 c1 7d 74 1b 11 a5 36 9e de 07 b1 a9 85 c4 02 69 cd 2e 32 4d 6f c4 ca 4c 44 ba 69 dc 2e 1f 98 5f ee b8 c6 59 a6 8d fa c1 07 1f e0 1f 7e f8 03 bc fb de 7b ea b4 fe ec 1b 6f a0 1b 35 65 74 78 78 4c 2a 79 21 7d fd 24 07 b1 d9 87 b1 79 15 17 07 fa 09 d7 f7 04 8a d9 93 0c 52 4d 95 35 42 7c b5 52 eb 85 07 a7 ee 50 c1 e2 60 66 74 e0 0d 26 6d 63 ff 47 84 10 1f bd 26 4a 8a d0 41 d4 bc 7c 71 c3 6d 06 c3 26 b5 fa 19 d4 bd 08 12 86 93 e3 30 ec aa 55 f1 bc 6e 7c 63 43 97 65 45 08 f3 dc 60 8d 19 e8 aa bc 30 fa 82 03 0d 7f 5b 45 2d 66 4a 94 10 56 33 1b 65 42 98 45 d0 e9 5b 2d a7 d2 34 d1 19 aa 1d 61 26 e3 b4 d8 75 ac ec 81 ea 9c fc 7c d1 5b d9 79 cd 1a 49 a2 34 57 8d 7c 7e 88 84 b6 d7 6f 88 45 e2 b7 bb 06 42 61 57 b8 1a ff 0c 43 ca 3c 67 76 5d d7 0e b1 16 cc fb 65 c2 Data Ascii: }t6i.2MoLDi._Y~{o5etxxL*y!}$yRM5B\|RP`ft&mcG&JA\|qm&0Un\|cCeE`0[E-fJV3eBE[-4a&u\|[yI4W\|~oEBaWC<gv]e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49730	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:01 UTC	2146	OUT	GET /images/custom/image3.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:01 UTC	897	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:01 GMT Content-Type: image/png Content-Length: 3785982 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-39c4fe" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4964 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dTcTTRXE6d4zXz2lXU2NL0TPoUGmTMElqHInb9M8dUOxn4womtpcwf1nrfvToUBpBLTpPcSRuFUMsLYg%2F%2FahcuNbPlrbIHc0Z6mxDFton2rQenjKanI7wmuMUBnXXij7FbA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe26fbe95c42a9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1779&min_rtt=1766&rtt_var=688&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=2724&delivery_rate=1561497&cwnd=32&unsent_bytes=0&cid=b5cb4881814d6e0d&ts=128&x=0"
2025-01-10 16:48:01 UTC	472	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 cf 00 00 04 65 08 06 00 00 00 37 72 86 47 00 00 80 00 49 44 41 54 78 5e ec bd e7 b7 1c c7 b5 e5 79 2b 33 ab ea de 0b 92 a0 05 bd 03 48 78 d0 c2 03 24 41 c2 11 34 b0 04 09 8f 0b 6f 08 1a 49 94 97 28 89 a2 ec 93 a5 f4 f4 f4 24 7a ef 49 e9 d9 ee 9e e9 e9 d5 6e ad 37 6b 4d cf 97 5e 6b fe 9c 98 b3 cf 89 1d 79 32 2a eb 02 a0 a8 37 7a 3d fc b0 57 d8 cc aa 5b 40 55 46 c4 2f f6 89 91 91 a9 d3 43 ab ce 9b 21 e9 0d a1 73 fe 8d 9a 6a 39 d6 a5 fc b9 e8 27 e5 a9 33 db 75 de 8d a6 73 6f 30 21 9f f7 f1 3a 7f 56 52 e7 82 d9 83 ed 43 84 be 6d 2a 2e 9c 13 ca 8b e6 4b 3a 4f ca 73 93 46 ce 9f d3 52 46 9f 79 92 47 1d 52 d1 d4 39 5a 66 1d 54 5c 88 fb 4d 2e f6 65 ff 11 dc 2f aa 83 f6 a8 fc ba 61 62 ff e6 3d 16 84 e2 a2 9b Data Ascii: PNGIHDRe7rGIDATx^y+3Hx$A4oI($zIn7kM^ky27z=W[@UF/C!sj9'3uso0!:VRCm.K:OsFRFyGR9ZfT\M.e/ab=
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 5e bf 56 fa ad 56 15 d7 ad 49 e5 91 ab ef d6 b4 9a be 4e eb ca eb 91 ae 97 7b ac 95 36 f4 47 dd fa a1 2a a6 df 3b a0 ce f5 f7 86 91 eb d6 6b 5a ce b8 2f 54 37 dc 1f 0a 49 3b 33 36 24 95 37 de 1f ba b3 1e 0c d5 cc 07 42 71 c3 7d 03 42 3b f3 e8 03 a1 ce 0b 75 b8 47 89 36 dc 07 d7 44 75 e4 3a 08 f5 dd d9 1b 43 6f ce a6 50 e1 f5 66 6d 94 f2 66 55 39 73 a3 69 d6 a6 50 cc de 14 ca 39 9b 43 35 77 8b a6 aa d9 5b 42 35 67 5b e8 cd db ae 69 39 7b ab a6 c5 ac 2d 2a 96 b5 6d ae a4 f3 1e 0a c5 9c ad 9a ef cc da 1c 3a 72 3d f2 a8 eb ce df ae ed 48 cb f9 0f 87 91 b9 0f 85 8e dc b7 90 7c b9 e0 11 55 ef 96 5d a1 ba 69 87 d6 e5 6d 10 cb c5 fc 47 a4 5d 34 57 fa ce db 29 f7 db a5 62 be 7b d3 9e 54 46 de ab 5a b0 5b d5 bb 69 6f e8 2e 98 90 fb ed 0f 85 a8 ba e5 40 e8 de 76 28 Data Ascii: ^VVIN{6G;kZ/T7I;36$7Bq}B;uG6Du:CoPfmfU9siP9C5w[B5g[i9{-m:r=H\|U]imG]4W)b{TFZ[io.@v(
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 8e 1d fb 48 da 3f 90 fe 52 7f dc d2 ae bc a7 d1 13 1f 6a de d7 53 15 ee 23 75 ec 83 fe 10 ea a0 12 ef 3f 96 91 a2 0f fa 8e 3f fa b1 a6 95 b4 8f 1f 97 d7 96 bc 5e 8b fb 9e 90 d7 38 29 d7 3f f6 51 a8 e4 fd 43 c8 f7 4e 7d a8 42 1e 1a 7d fc e3 54 df 7d f4 03 4d 7d 1d ae 43 3d 54 41 f1 5e bc 87 de 4f d2 f2 c4 7b da 07 d7 f2 35 20 d6 43 7c bd b1 27 e4 b3 46 3f 29 77 f1 ba f2 3e 7b 27 e4 9e c7 9b 9f 09 ff 4e 7e 0e 14 fe 6e a8 8f bf 5d fa e1 ef 1f 3d 8a 7f 7b b9 f6 08 fe 6d de d2 7f 23 fb 77 7a cb ca f2 6f d9 3b f8 a6 fc bf 78 43 fa e1 ff cd 9b 56 e7 52 d6 17 f2 7f 1a fd 90 47 0a a1 0f da c7 8f bd 2b ff a7 f0 ff eb 0d f9 bf f9 ba f6 41 19 ed bc 0f ea 71 8f 72 e2 35 cd a7 7b ed 7f 4d be 3f af 37 d4 95 ef 0e be 27 fd fd 6f c6 3a 79 ed fd f8 fe e2 fb f9 9a 0a 79 aa Data Ascii: H?RjS#u??^8)?QCN}B}T}M}C=TA^O{5 C\|'F?)w>{'N~n]={m#wzo;xCVRG+Aqr5{M?7'o:yy
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 22 13 ea f2 7e c3 fa e6 ea 8c 5f 99 94 b7 e5 ed c3 34 32 76 45 d4 e5 a2 cb ce 4c fd 4b cf 5c a3 97 86 ce d8 b4 01 8d 8c 5e a2 f2 75 c5 f8 e4 7d 1b ea 4f 1b 7c 2d 7d bd 96 be 78 9d 7e 9b 2e 16 5d d4 a2 bc df 64 b2 6b 46 7a 17 7e ba ea 5f 70 c6 ea 88 8a de a0 3a dd 36 9d ff 27 6b 64 00 9a ab 1c 24 57 40 de 52 4e c2 97 38 ff 41 98 59 43 73 02 74 2a ef e7 d5 f2 43 36 54 ee 1a 05 ed 79 bb 0a 3f 82 4d 60 8e 1f d8 76 78 de fc b1 6d fe f0 d6 62 7d 0e b8 1b b0 db f5 47 b9 0d 9e a3 be 94 07 42 ae fc 5e aa ec c1 a1 d7 eb 03 a5 1d 9e 7b e8 4d fd 25 c0 f3 f4 60 cf ca 09 6e 3b 38 3e 00 b7 3f a1 fc bd 72 b0 de d0 65 4b 54 0a cd 63 de 34 08 cf 47 54 4b 14 88 27 49 19 d0 9c c0 9c 10 bd b8 62 d9 00 3c 57 80 7e e5 1d 09 8c 43 39 30 f7 22 2c 27 68 d7 fe 57 d5 f0 3b c1 f2 08 Data Ascii: "~_42vELK\^u}O\|-}x~.]dkFz~_p:6'kd$W@RN8AYCst*C6Ty?M`vxmb}GB^{M%`n;8>?reKTc4GTK'Ib<W~C90",'hW;
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: b5 da 55 3f 4b b8 49 4b e1 78 7c 36 00 9e 27 80 ee 9e 47 e9 b9 b4 cb a0 39 84 67 17 9e 61 dc 10 c6 72 82 e4 6e d3 18 52 f4 d3 be d8 5c e6 9e c9 09 a2 6f c3 f3 7f 10 a8 e7 cf 71 3e e3 bb db 30 6e 00 3c 37 80 de dd 6a e3 19 c2 73 02 74 c0 73 08 30 7c 74 a3 41 f0 f1 cd d8 4c 88 31 11 c6 4f 18 9b d5 02 30 07 64 27 54 57 90 1e c7 6a b9 00 cd 3b 6b bf 1f 08 d0 4d 35 20 e7 78 d0 03 74 0a 63 c3 ea 3e 69 bb 0f d7 cb 38 72 ed 33 3a fe ac 90 ae c7 f8 f3 bb 0a d0 a9 fe bd cf 24 80 5e ac fe 66 84 e5 00 e7 d8 04 ca 71 ac 8d 77 bb 22 8c 85 ab 7b be 1e b0 c1 14 c2 78 79 54 c6 c8 48 21 80 73 8c a3 39 de a6 30 e6 f6 f2 f5 80 e2 8d f1 fa 5d 5f d6 ba 22 6e 7e 45 9e 40 bd 2f 63 f3 ae d4 13 90 97 32 3f 18 0a cf d3 5c 42 e6 09 cb 0d a0 9b 0c a0 9b d0 26 f3 0e 08 73 90 a5 8f 27 Data Ascii: U?KIKx\|6'G9garnR\oq>0n<7jsts0\|tAL1O0d'TWj;kM5 xtc>i8r3:$^fqw"{xyTH!s90]_"n~E@/c2?\B&s'
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 40 74 a4 53 b6 fe 3a 8c 6f f9 55 02 e6 ec e7 e1 39 01 ba 4f 0d 9a 5b 19 f9 d1 6d 04 e3 bf 4a 0e 74 68 ec a1 bf 4e 75 70 a1 43 5d 79 0f e3 db 7f ab 00 1d ee 73 05 e9 f2 1e 08 c9 09 cd 3d 44 f7 f0 1c ce f3 d1 87 7f a3 ea 6f 97 f6 2d bf 0c 7d 05 e9 bf 0a 23 f2 3a 1d 38 d6 9d 1b 1c 29 17 d8 3d 48 e7 02 fb 30 e5 00 dd 03 73 82 f0 bc 5f 7e df c9 20 3a 04 48 00 78 00 c8 30 0e d7 f5 ce df 19 28 77 00 3d 01 f5 08 c7 09 35 3c b0 f0 80 9c ed 80 1d 6c a7 03 dd 43 77 f6 55 87 3a 80 ac b4 fb 94 8e 74 ef 34 57 47 22 00 cb 2e 73 9d 1b 4c 07 68 b7 94 10 1c 50 5c 5d e4 d1 51 ee c1 b8 77 99 b3 9f bf b6 71 af 7d 06 89 01 8b 09 77 0a bc 17 40 ef 3d bf 0f e5 ee df 69 aa 30 9d f0 7b ff 8b f2 b7 02 a0 bf 12 66 1d 7a 3f dc 7e ec 1f e5 33 7d 31 9c bb fb 15 f9 8c 5f 96 f6 97 e5 fa Data Ascii: @tS:oU9O[mJthNupC]ys=Do-}#:8)=H0s_~ :Hx0(w=5<lCwU:t4WG".sLhP\]Qwq}w@=i0{fz?~3}1_
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 67 f0 fc 33 78 de aa 16 48 3e 4c 7f 39 f0 9c c0 dc 7f 69 fd 8e 97 4f 13 9e e7 ed 2d 3f 68 c3 c4 f0 ec 5a ce ef 3b 04 9e 33 df 84 e7 e8 63 3f 96 7f 69 f0 3c 7f 78 4c 06 cf e9 1a cf f5 97 00 cf 01 ca 3d 34 4f e5 1c 70 13 92 e7 e0 fc 93 00 74 af 49 00 3a 1c e7 00 e6 e5 15 80 de 00 e0 4b 62 dd 20 3c cf c3 b6 23 0f b5 c1 f3 ce e5 2d ae 73 85 e9 2b 9a 30 fc 34 10 9d ed e5 d5 ab 52 f8 f6 d6 b0 ed ae 8e 30 3c 87 ec 1e 96 e7 80 3d 95 9d f3 fc 74 f0 3c b9 d0 a3 3b bd 88 6e 73 75 9e 47 87 39 cb 6d 1a 04 e7 32 08 57 07 3a 76 d7 c6 dd b3 33 64 b0 3f a3 09 c7 db e0 79 0e d0 bd eb 9c 20 dd 0b 6d bd d9 80 e1 08 bf 6e 8e f3 11 dc 23 c2 73 e4 0d a0 4b 7f e9 8b 7e 3e 6c 3b 9d e7 a5 d4 15 22 40 73 a8 76 9e 6f 4a b0 3c 07 e7 29 5c 7b 6c ab e6 1a 28 07 1c 1f 99 b5 d9 20 39 34 Data Ascii: g3xH>L9iO-?hZ;3c?i<xL=4OptI:Kb <#-s+04R0<=t<;nsuG9m2W:v3d?y mn#sK~>l;"@svoJ<)\{l( 94
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 2d 63 7e 0b dd 0e a7 f9 e7 cc 65 1e 5d e7 6c 53 a0 ae 21 db 3f a7 f0 bc 03 17 f9 72 1c 0f f5 c5 78 f4 93 c1 73 3d 32 0a f3 0f cc 29 70 9f e8 40 af 96 e5 f0 fc 89 04 cf cb 15 32 d7 d1 88 5c a7 12 3c ef 2e c1 35 e6 32 4f 51 b9 38 37 02 44 8f a1 db 09 cb 7d 68 76 42 f5 dc 79 6e fd a0 08 c9 5b c2 b6 ab 33 3d 0b db 3e 4c c3 c2 b6 73 be a9 73 ce 16 68 9e 20 79 9c d3 b2 cc f9 2d a3 b3 a9 f3 1b 47 9e 29 fc c6 3c 19 73 e3 83 56 16 e5 21 db 21 3a ce 6b 68 7e c0 1c e8 bc e7 2d 83 e0 dc e7 75 83 3b 5e 37 a6 80 db 0a ba 45 ea 36 97 7b 42 16 96 fd 40 0a db 5e c3 72 83 e4 1e 94 27 58 2e 75 f5 b5 76 4d 57 d7 07 d0 df 60 39 1c e7 04 e5 48 09 d0 99 2f 10 ae 3d b9 ce 77 19 48 6f 71 9e 0f 0b db ae e0 1c 70 3d f6 9d 0c 9e 27 87 f9 10 98 8e b0 ed d5 8d 0f 85 ea 06 00 72 3a cd Data Ascii: -c~e]lS!?rxs=2)p@2\<.52OQ87D}hvByn[3=>Lssh y-G)<sV!!:kh~-u;^7E6{B@^r'X.uvMW`9H/=wHoqp='r:
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 87 39 d4 15 ac 2b 3c 97 fb e1 de 13 af d5 6e f2 e8 34 07 34 27 48 07 14 04 38 1f 3d fc 86 86 6d ef 1f 32 78 ce 50 ed 29 5c bb a4 5a 17 81 37 e1 37 45 28 ee dd e4 b9 bb dc 5f 97 e7 c7 50 16 55 47 df 0d e5 71 c0 f0 18 da fd e8 7b e1 dc c3 1f 84 f1 03 1f 84 b9 27 ff 53 58 73 f2 ff 0c 97 4c 7c 14 c6 0f bf 1f ce 45 88 70 84 65 3f 1e 01 f7 11 0b d5 6e 67 9c 03 94 7f 1c f5 51 1d ae 3d 9e 7f 0e d0 eb cf ed 26 24 67 e8 71 02 60 b8 cf 09 85 7d 28 f2 1c a0 7b 37 36 fb 78 90 3c e5 e4 c7 7a e6 39 fa 8d 9f 82 93 fb e3 d0 7f b4 76 9c 23 05 d4 a6 bc c3 dc f7 49 40 fb 54 33 84 bb 77 9b e7 67 9e 27 47 79 84 e4 1e b6 e7 7d d9 a6 e7 a7 43 b8 0e 7d 4e bc 6f d0 3f fe ad fc 3c f8 77 f3 f3 6c fb 8c f4 ef c6 79 e7 f8 7f 05 c8 ed ce 3c 37 e7 b9 81 6f 3a c7 79 b6 b9 0f bd 0e 01 94 Data Ascii: 9+<n44'H8=m2xP)\Z77E(_PUGq{'SXsL\|Epe?ngQ=&$gq`}({76x<z9v#I@T3wg'Gy}C}No?<wly<7o:y
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 30 6e 95 49 64 bc 26 3a d0 79 e6 39 00 7b 0e cf 09 c9 3b 00 ef 08 d9 9e a9 94 3e d5 02 99 4c ce 8f 2e 74 5c 37 4f ae 9b 2b 93 ce 79 3b 32 28 5e 43 72 7f ce f9 20 3c df ad 93 e9 0a e0 9c a1 e2 74 07 bd 85 87 d3 09 7a 5c 2c a8 6e b3 c9 7d db c4 de 87 b7 23 3c af 70 d6 f9 6d 68 9b 48 67 c5 d9 f9 71 58 8c 40 18 77 2c 48 60 c1 e2 48 c0 ee ff 0e da 71 ef 85 47 42 3f 03 e7 80 ea 5c f8 f0 ae 74 eb 73 dc 52 38 13 16 c3 d5 70 2c 01 74 94 91 76 9d eb dc bb cd b5 0c 70 be e8 98 41 75 ad 7f 34 f4 70 ce 1f ce 48 57 78 0e a0 7e 2a 42 74 d4 63 a1 c9 94 60 7a 2c f7 96 03 98 3f 99 1c e8 08 db 5e 21 1c 23 42 1c c2 dd 91 c2 b3 63 21 cb 16 ba 74 31 2b b9 d2 9f 50 70 5e ad 34 a0 8e be e9 9c 42 2c 76 21 14 a4 5c ab ce 73 80 72 b8 52 ee fc b2 41 73 02 74 15 20 ba b9 ce b1 58 87 Data Ascii: 0nId&:y9{;>L.t\7O+y;2(^Cr <tz\,n}#<pmhHgqX@w,H`HqGB?\tsR8p,tvpAu4pHWx~*Btc`z,?^!#Bc!t1+Pp^4B,v!\srRAst X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49731	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:01 UTC	2146	OUT	GET /images/custom/image2.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:01 UTC	896	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:01 GMT Content-Type: image/png Content-Length: 390018 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-5f382" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4964 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HFXoAjSAYGeH7OtZ5Bz8tWKKaMNRSC2A1SeUgFp8S8csI4iMXXo%2Fuy02Uei6M%2FJ3XToRRfQsUu88ch6dskyMEmjh5LbjLBvSJmscNXPFil9j7nAKJdioh1I5ep0yNNArvQg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe26fbfb8e42b5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1923&min_rtt=1898&rtt_var=730&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2724&delivery_rate=1538461&cwnd=221&unsent_bytes=0&cid=93043fa40fd6d920&ts=123&x=0"
2025-01-10 16:48:01 UTC	473	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 34 00 00 02 62 08 06 00 00 00 a1 0b f4 ab 00 00 20 00 49 44 41 54 78 01 ec bd 67 b8 54 d5 d9 ff ef 9b e7 c5 ef f7 e2 f9 fd af 27 79 ec 8a 22 02 36 40 45 05 1b 8a 8a 05 6c 31 f6 92 18 63 a2 46 8d b1 c4 58 12 bb c6 58 63 34 6a 62 17 ec 28 62 a1 77 10 41 04 a4 77 44 69 d2 a4 83 94 b3 fe d7 77 9b 35 67 cf 9e b5 db 9c 99 39 7b e6 7c f6 75 c1 6e ab dc eb b3 ee d9 67 cf fa ce bd d6 0e 86 0d 02 10 80 40 95 11 98 33 67 8e d1 bf 6d 0b 4f e7 1f 0c f0 01 7c 00 1f c0 07 f0 01 7c 00 1f 48 e0 03 55 f6 ba 87 b9 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 20 00 81 3c 02 3b e4 9d 71 02 01 08 40 a0 0a 08 20 68 22 e4 22 66 e3 03 f8 00 3e 80 0f e0 03 f8 40 3a 1f a8 82 57 3c 4c 84 00 04 20 00 01 08 40 00 02 10 80 00 04 Data Ascii: PNGIHDR4b IDATxgT'y"6@El1cFXXc4jb(bwAwDiw5g9{\|ung@3gmO\|\|HU @ <;q@ h""f>@:W<L @
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 04 20 00 01 08 40 00 02 25 21 80 a0 59 12 8c 14 02 01 08 54 92 00 82 66 ba 01 4c 06 7c e1 85 0f e0 03 f8 00 3e 80 0f e0 03 95 7c 57 a3 2e 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 40 a9 09 20 68 96 9a 28 e5 41 00 02 65 27 80 a0 c9 a0 2c 03 f3 f8 00 3e 80 0f e0 03 f8 00 3e 90 ce 07 ca fe 82 46 05 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 20 00 81 32 12 40 d0 2c 23 5c 8a 86 00 04 ca 43 00 41 33 dd 00 26 03 be f0 c2 07 f0 01 7c 00 1f c0 07 f0 81 f2 bc 95 51 2a 04 20 00 01 08 40 00 02 10 80 00 04 20 00 01 08 40 a0 32 04 10 34 2b c3 99 5a 20 00 81 12 12 40 d0 64 50 96 81 79 7c 00 1f c0 07 f0 01 7c 00 1f 48 e7 03 25 7c 15 a3 28 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 40 c5 09 20 68 56 1c 39 15 42 00 02 0d 25 80 a0 99 6e 00 93 01 5f 78 e1 Data Ascii: @%!YTfL\|>\|W.@ @@ h(Ae',>>F @ 2@,#\CA3&\|Q* @ @24+Z @dPy\|\|H%\|(@ @@ hV9B%n_x
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: d3 10 34 1d f0 4a 7c 69 d2 9f 6e 30 fd db ec 1d d9 0f 08 9a 25 86 5e 05 c5 d5 a2 a0 39 a4 e7 b1 e6 be 3f b5 69 d0 bf c7 ee 3e 38 6f 10 b4 94 82 e6 73 7f 6b 6f 76 df ed a7 de bf 93 8e 6b 96 57 4f d8 c0 69 53 bd 5e 09 56 59 13 34 27 0e ec 9c f3 0f f9 89 06 ff 9b 6a ff d3 ee 1f c5 2d 04 cd 7c 91 6f ed ec ae e6 95 bf 1f 6e 6e ba e6 80 dc bf 4d f3 89 ae ae 96 cf 0b 82 66 15 bc 1c 62 22 04 20 00 01 08 40 00 02 10 80 00 04 20 00 01 08 d4 3c 01 04 cd 88 2e de fc dd 52 6f ba 59 57 74 26 11 9a 11 e0 4a 7c 6b cb 9a d5 de d4 bf 61 fd 80 a0 59 62 e0 55 50 5c 2d 0a 9a 12 33 fd 51 1f c5 1c ef b3 f7 8e 79 22 52 29 05 cd 7f 3c 70 48 ce be 63 3a ee 91 57 4f b5 0c 48 57 ca ce 4a b0 ca 9a a0 39 be 7f e7 9c 7f c8 77 57 22 68 36 f9 cf 08 82 e6 8f 82 e6 f4 e1 27 9a 5b 7e 77 80 Data Ascii: 4J\|in0%^9?i>8oskovkWOiS^VY4'j-\|onnMfb" @ <.RoYWt&J\|kaYbUP\-3Qy"R)<pHc:WOHWJ9wW"h6'[~w
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: fc 23 ac 6f 35 15 ae 7c fd d5 a7 0e 37 2f 3c d6 de 8c f9 e4 38 a7 9f 68 cd c3 19 23 4e f4 d6 3d 7c ea fe 43 cc 3b ff ee e0 f5 47 d0 f6 b8 73 ad b7 fa 69 f7 a3 8c d6 51 b5 65 6c 98 17 ed 97 2a 53 69 2c bf a0 cf e8 de 88 5e c7 9a 3e 3d 8e 32 b2 33 cc 86 72 f4 ed bc cf 4f ca d9 d5 e9 c8 3d 73 9f 83 e7 1f 69 9f bb 6e ed 16 6b bf 6d 61 53 ce ca df 86 7f d0 c9 c8 07 c5 a9 d7 cb 47 9a d9 9f 45 fb 8c 2d 57 a2 92 3e 17 fa cc 3f f3 d0 a1 e6 e9 07 0f f5 f2 4f 18 d0 d9 6c fd 36 5a 48 53 bd d6 56 7d de 6c 99 df cf 38 cd 8c eb 7b bc 57 66 d2 e7 a1 cd eb da df 7d 4b 1b d3 e6 80 5d 4c b7 2e 7b 9b ab 2f 6f 6d 1e ba a3 9d f1 47 cb fb a7 9d 4d 13 a1 f9 d1 6b 47 99 ab 7e d1 2a ef 9f a6 23 77 d9 60 af 3d 76 f7 c1 79 e9 95 ff bb c9 a7 14 e4 d1 67 e4 81 db db 9a cb ce db d7 1c Data Ascii: #o5\|7/<8h#N=\|C;GsiQelSi,^>=23rO=sinkmaSGE-W>?Ol6ZHSV}l8{Wf}K]L.{/omGMkG~#w`=vyg
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 3e da fc b0 6a 65 28 ed 72 09 9a 8a 1a 74 09 8f 43 8e 3d c4 48 70 0d da 3c e6 92 73 bc a8 4d 97 a1 51 bc 5d 65 f9 cb 96 98 e8 62 fa c5 e5 e7 17 d8 e0 cf a7 63 d9 a4 6d e1 07 ef 14 a4 95 a0 19 14 a3 83 f9 a3 ce 97 8f 1c 96 d7 d4 38 41 73 d3 92 c5 66 e2 ef 7f 5b 60 87 ab 8e 2f af ba 2c af 6c 4e aa 8f 40 39 05 cd b8 e8 4b 2b 68 36 db fd ff 44 46 69 4a e8 9c 3b da 2d 0e da 41 d6 a4 fb 52 08 9a 8a ba 49 32 e8 2c 01 43 51 90 41 db 92 88 74 8a 38 09 0e cc ba ce fb bf 75 74 41 f9 c1 fa 82 e7 8a 5a 73 95 e5 ba f6 f0 9d ee b5 4c fd a2 97 a2 a8 24 ee 06 f3 57 52 d0 54 bf 2a 42 28 68 83 eb 5c d1 a3 7e 26 69 04 4d f1 96 d8 eb 2a d7 7f 4d e2 87 fa d9 5f 4f d2 e3 24 82 66 39 fd c3 df b7 12 98 77 df ad 50 c8 f4 b7 55 42 d0 f5 57 ee e7 45 4b f9 af bb 8e 2f bf f0 c7 1f 31 Data Ascii: >je(rtC=Hp<sMQ]ebcm8Asf[`/,lN@9K+h6DFiJ;-ARI2,CQAt8utAZsL$WRTB(h\~&iMM_O$f9wPUBWEK/1
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: e9 94 56 ff 82 eb b3 46 45 68 aa 0c f9 eb d8 4b 7f 6e 54 ef e7 17 9e 19 2a de da 36 cb 6e b6 ea 25 50 2e 41 f3 f1 bb 0f 88 15 29 ad a0 a9 7d 98 90 e9 bf ae 29 6c 1b 32 f8 a8 bc a5 10 34 25 04 da f5 c8 82 f6 6c f9 a6 9b 39 a1 53 fd fa 78 76 3a 56 7f ba 38 91 ce 3f 78 ae 75 20 fd 79 83 c7 aa 2f 78 ad a1 e7 9a ba 55 62 9c 1d 34 56 44 57 b0 4c bf e8 a5 c1 6c 45 1b 85 4d d7 e8 cf 2b 01 d0 96 2b 41 d6 7f cf 75 1c c7 4a 11 b0 fe 88 35 4d 85 a8 75 d6 5c 65 e9 9a fa 2d 28 32 26 8d d0 d4 da 70 d6 76 0d d0 07 45 04 95 2f 91 cc 2f 5e 48 74 0a b3 25 ec 7a 9c a0 59 6e ff f0 f7 ad 04 ea 20 2f 6b b7 ff b3 24 31 41 a2 bb bd e7 df 6b 2a ce d6 2d eb fd 49 eb 17 fa ef eb 58 62 9a 65 7b d0 fe bb 84 4e d9 ab f5 fe 14 11 68 d3 4a 98 0b 96 e5 17 34 25 78 48 8c 9d 3e 3c 7a 0a e0 Data Ascii: VFEhKnT6n%P.A)})l24%l9Sxv:V8?xu y/xUb4VDWLlEM++AuJ5Mu\e-(2&pvE//^Ht%zYn /k$1Ak-IXbe{NhJ4%xH><z
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 19 2a 27 28 5c bb 04 cd b0 f5 50 83 e5 bb ce 37 7f dd cd ec b4 53 e1 5a ba 12 58 5d e9 5f 7c bc fe 47 1d 96 99 7e d4 60 d3 a6 11 34 cf 38 a5 de 17 6d 59 dd 9f 29 9c 35 40 65 23 68 56 c9 8b 27 66 42 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 40 26 08 b8 05 cd 96 bb 1a ad f5 18 dc aa 41 d0 1c 7e f2 d1 41 b3 73 e7 df bc d3 23 54 e0 d2 3a 92 ae ad 54 82 e6 d2 01 7d 42 eb d6 b4 bf ae 6d ca 9f 6f 71 e6 51 44 a7 7f cb 13 34 5b ee 6a 36 2f 5b ea bf 9d 3b d6 14 c2 41 e1 d1 7f be 76 e6 b4 5c 5a 7b 10 27 68 4e ba f5 f7 66 d1 87 ef 99 35 d3 a6 98 8d 8b be 35 5b d7 ae 31 9b 96 2e 31 9b 97 7f 67 8b f0 f6 e5 8c d0 0c 13 34 25 aa fa db e7 3f 46 d0 cc eb 9e aa 3b 29 97 a0 e9 9f 2a 36 ec d8 2f 50 fe bf ff fe af 58 51 d3 9f de 0e 8c a6 dd 57 83 a0 29 01 d1 0e dc 6a ea 42 Data Ascii: '(\P7SZX]_\|G~`48mY)5@e#hV'fB @@&A~As#T:T}BmoqQD4[j6/[;Av\Z{'hNf55[1.1g4%?F;)6/PXQW)jB
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: fb 89 03 3b 1b 09 3d 76 30 dc ee 25 6c 68 1a 41 ad 09 77 88 6f 9a bf 6a 11 34 17 4f 2c 2e 72 35 89 a0 e9 5f 27 6f ff 56 3b 9b c3 0f dd 2d f1 bf a1 3d 8f 4d d5 47 49 04 4d f5 75 b9 fc a3 31 05 cd 3f 5c b5 7f 22 56 7e 1b b5 c6 9e df f7 d3 0a 9a 95 ec 5b 6b 67 63 0a 9a 8a fa db 73 8f c2 1f 4b ec b8 e3 4f 8c a2 11 4f ec d4 cc b4 68 be 53 ee f9 50 eb 82 a6 44 b6 bd 9b ed 98 6b af 9e 87 36 ea f7 83 80 d8 a9 29 ae 6d 1f 6a 5f 6a 41 f3 d3 ee 47 85 0a cc fb ec bd a3 91 88 a8 75 66 ed 33 db ee cb 2d 68 aa 7c 5b 97 dd fb a7 90 f5 33 d1 b1 fe c6 d8 74 76 af a8 75 ad c5 a9 fb 61 42 65 b0 9c b0 74 61 d1 f8 08 9a 19 7e d9 c4 34 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 c8 1c 01 a7 a0 39 e6 92 73 9c 86 66 5e d0 ac ab 33 ab be 1c 6b a6 dd 73 bb 19 79 7a 67 d3 b7 f5 Data Ascii: ;=v0%lhAwoj4O,.r5_'oV;-=MGIMu1?\"V~[kgcsKOOhSPDk6)mj_jAGuf3-h\|[3tvuaBeta~4@ @9sf^3ksyzg
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 3c 3b d3 9c 6c 5d bf ce 0c 3e ba 9d b3 6c ad c9 e9 df 10 34 11 34 fd fe 50 cd c7 e5 14 34 35 c8 98 64 2d cd b8 88 cd 52 ac 9d 69 07 3c 6b 41 d0 54 5b fc 82 ce 8c 11 27 e6 06 8a 6d 3b c3 f6 fe e8 ce f3 cf 6a 11 9a af 5c 82 e6 b0 f7 eb 23 a1 14 d9 14 66 a7 bd fe ce bf eb d7 6e 93 70 60 af db fd 13 f7 1e 9c 1b 38 97 18 e6 9f 9a d1 a6 89 db fb 05 cd b0 f5 2e 35 55 a7 7f ea c3 f7 5e ec 58 60 4b 5c 3d 49 ef 37 54 d0 54 3d c5 fa 87 f2 56 5a d0 94 80 a9 b5 5b ad f0 f1 fc 23 ed 23 d9 f6 7d e3 e8 5c 5a f5 f9 f2 a9 3f 4e d9 69 f9 a6 15 34 2b d9 b7 d6 c6 ae 27 d5 0b 8b 2f 3f 79 58 64 7b 95 67 8f dd eb d7 bc 0c 8b aa b6 65 5f 78 76 8b 1c 9f 37 9f eb 90 57 f6 71 47 d7 47 34 3f 75 ff 21 79 f7 6c 7e ed 9b 9a a0 a9 36 df 7d 4b 7d 14 b6 7c f1 96 df e5 8b 72 4f 3f 78 a8 93 Data Ascii: <;l]>l44P45d-Ri<kAT['m;j\#fnp`8.5U^X`K\=I7TT=VZ[##}\Z?Ni4+'/?yXd{ge_xv7WqGG4?u!yl~6}K}\|rO?x
2025-01-10 16:48:01 UTC	1369	IN	Data Raw: 8f 2a 43 f7 2a 21 68 8a a1 2b 02 32 ce 36 89 94 5a 83 33 d8 07 9a c2 37 2a af 3f 7d 31 f5 da b2 11 34 ab e3 5d 14 2b 21 00 01 08 40 00 02 10 80 00 04 20 00 01 08 40 a0 f2 04 42 05 cd 89 37 fc b6 c0 9a 62 04 cd d1 e7 76 0d 15 95 5c 6b 47 d6 6d dd 12 9a 5e 42 eb f7 13 c6 e5 ec da b2 66 4d 64 da 1f 56 ae c8 a5 d5 41 63 0a 9a 62 37 ec 84 0e a1 f6 2a 4a 73 fd d7 f3 f2 ec 4d 72 32 f2 8c 13 42 cb 5c d2 a7 77 5e 11 8d 29 68 8e b9 f8 ec 50 3b e7 3c f3 78 9e 9d ae 13 04 4d 17 95 a6 7b ad 52 82 a6 06 27 e7 8e 3e c1 9c d1 65 e7 48 61 b3 d9 ee ff c7 fc e5 c6 96 25 5b 33 d3 3f 28 aa 63 ff 80 7e d8 9a 68 c1 3c 3a 2f e5 00 7e 9c 48 e7 8a 5c b1 83 b3 fe bd 84 07 89 4a 2e 7b a3 ae 49 38 f4 97 13 3c 56 f4 90 7f 6d ca 52 0a 9a b2 4b d3 60 06 eb f4 9f fb a7 d0 8d 63 65 db a9 Data Ascii: C!h+26Z37?}14]+!@ @B7bv\kGm^BfMdVAcb7JsMr2B\w^)hP;<xM{R'>eHa%[3?(c~h<:/~H\J.{I8<VmRK`ce

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49735	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:02 UTC	1846	OUT	GET /images/custom/image15.jpg HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:02 UTC	901	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:02 GMT Content-Type: image/jpeg Content-Length: 183630 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-2cd4e" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4966 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZciDU%2BU4vp4HeHh1j7JWMe4GQG7S0Xsl4qtNiqgzNrUjBlIOT28pTh959Nrq6wHB4RpEvwh1EAj6OLP6nY9V1r181Y7u3%2F%2Fppwe8j%2BqtWce880igN2HoC9ovOa9ocxVo3Qw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe26ffcc9c32e4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2120&min_rtt=2104&rtt_var=822&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2424&delivery_rate=1304153&cwnd=162&unsent_bytes=0&cid=ce26225824efcc3e&ts=128&x=0"
2025-01-10 16:48:02 UTC	468	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 04 aa 07 cf 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 b7 60 f5 bf 68 fb 45 73 1a 7b f4 ad eb 56 ad 9e a6 26 e4 6f f2 d3 cf 43 55 a1 35 3d 67 61 95 26 eb 54 a6 4c 9c d5 e9 bb d5 56 19 e2 82 8a 2c 39 a0 74 ab 0d 16 4d 46 53 68 a6 32 13 4c 23 9a 91 ba d3 6a 4a 18 d1 e5 49 ac cb 98 fa d6 b9 fb b5 9b 72 32 4d 4b 1a 33 95 06 fe 2b 4a d6 3c e2 aa a4 7f 35 69 Data Ascii: B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?`hEs{V&oCU5=ga&TLV,9tMFSh2L#jJIr2MK3+J<5i
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 91 78 a9 40 a8 d2 a5 15 e9 c2 d6 39 65 b8 98 a6 49 c2 d3 cd 47 2f 4a b9 12 8a 17 3d 0d 73 da 89 18 6a de b9 38 ae 6f 53 7c 06 ac 96 e6 f0 39 6b a6 ff 00 48 35 35 b7 51 55 27 6c ca 7e b5 24 12 60 81 5b c9 68 68 6e 41 da af c1 d6 b1 e0 97 a5 68 45 36 31 5e 7c ef cc 33 7e df a0 ab ca 38 ac cb 39 32 05 69 ab 71 5d 14 4c a4 32 55 ac 3d 55 3f 76 d5 bc f5 8f a9 2e 51 ab a4 11 e6 ba ba 7c ec 2b 2a 08 be 61 5b da c4 5f bd 35 9d 04 20 1a dd 3f 74 76 d4 bd 63 16 5a ba 2b 68 82 ad 64 58 a5 6d c1 58 c9 ea 59 63 cb a6 34 55 65 28 65 a9 b0 ca 5e 55 46 61 ad 05 8b 75 3b ec f4 d2 25 b3 33 ca cf 15 56 e2 db e4 35 b6 6d 88 35 0c b0 fc 94 c5 73 90 bb 83 19 ac 69 13 6b fe 35 d5 ea 31 e0 1a e7 a6 4e 6a e2 c5 21 d6 e7 18 35 71 64 00 55 05 3b 45 29 9b 14 d8 93 b1 a5 e7 8c 55 6b Data Ascii: x@9eIG/J=sj8oS\|9kH55QU'l~$`[hhnAhE61^\|3~892iq]L2U=U?v.Q\|+*a[_5 ?tvcZ+hdXmXYc4Ue(e^UFau;%3V5m5sik51Nj!5qdU;E)Uk
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 5c 57 24 a6 6d 13 21 e0 e2 a2 f2 b3 c5 6a 3c 47 d2 a3 fb 3d 11 90 33 38 5b fc d5 72 28 3d aa cc 76 d5 71 2d eb 57 2b 88 ad 14 35 6d 21 a7 79 7b 6a 44 a8 18 c6 8a a3 65 35 64 d3 76 66 9a 26 e5 6f 27 75 4a 91 85 ab 02 3a 70 4e 6b 54 89 24 81 30 2a dc 75 59 0e 29 fe 70 14 b9 40 be 87 02 9c 66 03 8a a4 b3 f1 d6 98 f3 73 4d 20 2e b4 fe b5 5e 4b a0 b9 c5 52 96 73 83 59 b7 17 85 33 cd 68 98 58 d0 9e f3 a8 cd 55 6b b0 7b d6 0d c6 a3 f3 9c 35 32 3b d2 4f 26 ad c5 b4 4b 66 cb be f3 55 99 79 34 90 c9 bc 54 db 38 cd 4d ec 4d ca 4e 99 35 62 df 81 8a 42 99 6a 9a 34 db cd 64 d8 22 f4 07 04 55 d4 6a cf 8d b0 2a d4 52 13 59 b6 32 e8 3c 50 46 45 45 1b 82 bd 7a 54 b9 1e b9 fa 54 8c 8d 96 99 b6 a6 24 9e d8 a6 f9 64 9a 4c 64 7b 33 4b e5 8c 54 c1 0d 05 70 2a 39 75 19 52 44 18 Data Ascii: \W$m!j<G=38[r(=vq-W+5m!y{jDe5dvf&o'uJ:pNkT$0uY)p@fsM .^KRsY3hXUk{52;O&KfUy4T8MMN5bBj4d"UjRY2<PFEEzTT$dLd{3KTp*9uRD
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: bd 55 c9 e5 2f 34 94 df 36 a9 fd a4 1a 5f b4 0c 54 4a 37 65 a6 17 57 18 06 b9 fb b9 cf 35 a3 77 2e 45 62 dc b5 54 29 a0 94 9a 46 6d cb 16 cd 51 df 56 e7 71 59 ec 7e 63 5b d8 e7 2e c4 d5 7a d2 46 56 15 9b 09 ad 0b 65 2c c2 a1 b1 a5 a9 d1 5b 1d ea 2a 76 84 b5 45 60 bc 56 b2 c5 95 ae 77 2d 4e bd 91 85 3c 05 6b 26 e2 3f 9a ba d9 ed b7 a1 18 35 87 7b 6a 63 6a a8 4a e4 4d 5d 1b da 6f dd 15 d2 da fd d1 5c fe 9c 9d 2b a1 b6 15 ea c5 e8 79 72 5a 9a 51 55 e8 f9 02 a9 44 2a f4 22 86 40 fd b9 a8 25 8e ad ed a8 e4 5c 83 52 98 ec 52 c5 31 aa cb 25 40 e2 a8 11 52 5a a7 21 00 f5 ab b2 d6 74 c7 e6 ac a4 cd a2 34 b7 34 84 e4 54 61 b2 6a 45 19 ac 67 7b 1a 25 a8 c3 d6 9c 0e 29 4a f3 46 31 5e 75 49 38 b3 78 ab 93 2c d8 14 86 71 50 b7 4a ae ec 47 7a 54 f1 0d 68 0e 95 cb bf 69 Data Ascii: U/46_TJ7eW5w.EbT)FmQVqY~c[.zFVe,[vE`Vw-N<k&?5{jcjJM]o\+yrZQUD"@%\RR1%@RZ!t44TajEg{%)JF1^uI8x,qPJGzThi
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 9a cf 07 a5 6a a5 71 ad 06 5b 0e 95 a7 08 c0 ac f8 50 c6 7d aa fc 6d c5 65 55 68 4d cb 23 a5 38 26 69 23 19 ab 2a 9c 57 8b 55 5d 95 72 24 8f 0d d2 a7 54 e2 9c a9 52 05 c0 a5 18 58 2e 42 c3 8a 82 4e 86 ad b0 e2 aa 48 0f 34 a4 52 20 a4 3d 29 69 af d2 8a 70 e6 1b 65 59 c6 45 61 6a 2b d6 b7 65 e9 59 37 6b b8 9c 8a ee a7 40 8b 9c df 9a f1 ca 46 09 15 a7 6d 7b b4 0a 89 ad 83 3e 71 4f 16 d8 5e 2b d1 8c 12 56 04 8d 38 b5 30 71 f3 55 e8 2f b7 75 35 cc 32 32 1c 8a 7c 77 cd 1f 07 34 a7 4d 35 a0 58 ed a3 ba f9 07 34 3d cf bd 73 56 fa a2 ba 8f 98 67 eb 52 b5 f8 fe f5 73 7b 27 70 35 67 b8 e0 d7 35 a9 49 be 4a b3 35 fa e3 af eb 58 f7 17 1e 63 67 35 d7 4a 16 02 a4 e7 19 aa 32 3f bd 4d 75 26 0d 67 c9 26 45 76 45 19 b6 23 c8 46 48 35 2d ac c4 b8 15 45 e4 a5 86 6d 8c 0d 5f Data Ascii: jq[P}meUhM#8&i#*WU]r$TRX.BNH4R =)ipeYEaj+eY7k@Fm{>qO^+V80qU/u522\|w4M5X4=sVgRs{'p5g5IJ5Xcg5J2?Mu&g&EvE#FH5-Em_
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 2b 37 1c 54 6a 45 2e 45 05 88 72 69 08 a7 8a 43 d6 80 18 13 da 9d b2 a4 51 4e db 50 d0 d0 44 79 ad 2b 73 c8 ac d0 08 35 72 dd f0 45 65 38 94 99 bd 6a 72 2b 4a 3e 82 b1 ed a5 18 eb 5a 50 c9 9c 57 1c e3 a9 aa 2f 63 02 98 68 dd 91 48 c7 35 95 8a 44 6d 8a af 22 02 0d 4e e7 15 11 39 a6 80 a1 24 39 3d 29 62 b6 25 c7 ca 6a ea a0 cf 4a b3 0c 40 b8 ad 62 c9 68 75 ad a7 1d 3b d6 a4 36 b8 c7 14 90 45 80 2a fa 29 03 a5 74 46 26 4c 6a 42 05 4c 23 02 81 d2 82 7b 55 f2 a2 08 9d 05 40 eb 8a b0 79 a6 3a fc b5 94 e1 a0 d3 2a f7 a7 ee e2 9a c3 06 9a 4f 15 c7 24 6f 11 e5 f8 a8 1d e9 ae f5 1e 72 7a d6 4c d0 7a b1 c8 ad 1b 77 1e b5 9a 83 9a bd 00 e9 49 26 06 98 c1 02 8a 89 09 f5 a9 6b 50 b8 86 a1 95 84 68 58 d3 a7 99 62 5d cc 40 5f 53 5c a6 b7 e2 1d 87 62 3e d4 3d 1c 0f e5 5b Data Ascii: +7TjE.EriCQNPDy+s5rEe8jr+J>ZPW/chH5Dm"N9$9=)b%jJ@bhu;6E)tF&LjBL#{U@y:O$orzLzwI&kPhXb]@_S\b>=[
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 55 5a 50 0e 33 53 c2 e1 aa 46 5d 8c 54 c0 62 a2 8c 8a 9b 70 f5 a0 0a f3 56 4d e0 39 35 af 29 1e b5 97 75 c9 34 98 8c 3b 88 b7 13 55 52 df 0d cd 69 c8 a3 34 d0 80 d4 a6 36 45 1c 23 1d 2a c7 94 31 d2 90 00 b4 fd e3 15 40 56 96 3c 03 59 b3 63 71 ad 79 9d 7c b2 6b 16 e2 41 93 55 11 b7 a1 4a 6e 4d 55 61 83 56 9f e6 a8 59 38 ad 51 93 65 76 a8 98 55 86 43 51 94 3e 94 c4 42 41 c5 46 41 e6 ac 15 a8 dc 55 21 15 58 66 a2 29 9e b5 60 f5 a6 62 93 11 55 a3 f6 a4 09 8a b4 57 35 13 0c 54 d8 06 0a 78 6c 0a 85 9b 1d 29 04 94 f9 40 b2 1a a5 52 0d 55 8c ee 3d 6a ec 51 af 19 34 72 05 c5 02 97 66 6a ca c2 a4 53 9a db 3c 8a 9e 50 b9 4f cb 04 d2 3d b8 23 a5 58 68 ca 1c 63 9a 40 dc e0 8a d2 28 4c cc 96 02 09 18 35 0e cc 71 8a d8 91 15 d7 de aa 34 18 34 35 61 14 b6 d3 82 f1 56 3c Data Ascii: UZP3SF]TbpVM95)u4;URi46E#*1@V<Ycqy\|kAUJnMUaVY8QevUCQ>BAFAU!Xf)`bUW5Txl)@RU=jQ4rfjS<PO=#Xhc@(L5q445aV<
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 29 0a 9c 67 b5 52 be d4 6d ec 20 32 48 c0 bf f0 8a da 30 e6 76 44 5c a9 ae ce b0 d8 bb 4a df 2f f7 41 ea 7d eb cb 35 2b d7 b8 b8 72 a4 9e 78 6a d2 d7 b5 b9 ef e5 65 67 c4 47 3c 66 b9 d6 6d c3 0a 30 3e b5 eb 50 a3 c8 b5 30 9c af b1 5e 57 95 81 00 ed 07 ae 3b d3 23 87 60 fb dc 1e a2 ac 34 64 0c 95 c5 02 24 20 16 72 05 74 99 10 e4 7a e6 85 40 c3 af 5a ba 21 42 bf 2c 4c 40 fe 26 e2 8f 2a 34 6e 4a f3 d8 03 40 15 f6 c6 38 20 63 d6 9e b1 46 06 46 d6 1e 95 38 82 42 a7 6c 47 f1 14 e5 b6 24 fc c5 01 c7 41 52 d0 c8 5d d0 e0 2a 63 14 79 de 58 ce c5 27 da a4 7b 6d 80 ed e4 9a 8b ca 20 8c 80 0d 00 34 5d ed 24 98 87 34 ff 00 b5 42 d1 e3 61 43 52 7d 98 b8 c9 c0 1d ce 45 37 c9 da 48 8e 35 3e e4 e6 a8 04 ea 80 ab 71 8f 5a 40 48 3c 12 7d aa 27 89 c6 08 4d a7 da 9a 19 c1 c3 Data Ascii: )gRm 2H0vD\J/A}5+rxjegG<fm0>P0^W;#`4d$ rtz@Z!B,L@&4nJ@8 cFF8BlG$AR]cyX'{m 4]$4BaCR}E7H5>qZ@H<}'M
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 06 c1 cd 45 29 c3 52 21 cf 7a cd c8 39 4b 01 72 29 eb 1e 7b 52 c4 9b 85 5d 8e 10 05 45 cb 50 b9 41 a3 3e 95 04 88 47 6a d9 6b 50 57 22 a9 5c 43 b7 3c 55 a6 0e 16 32 99 32 71 4d 58 2a d8 8f 2d c0 ab 11 5b e7 a8 a5 37 60 8c 6e 50 16 e4 f4 14 1b 63 e9 5a e9 6c 3d 2a 4f b2 0f 4a c3 98 dd 51 39 c7 b7 2b 52 42 19 6b 5a 6b 41 e9 55 9a dc af 6a d2 32 b9 9c a9 d9 92 db c8 6a d6 ea a4 89 b6 ac a1 27 ad 58 e2 8b d0 37 15 67 39 aa 31 92 b5 3a ca 32 39 a4 cb 2d a6 2a 09 8f 3c 53 5a 7e 0e 2a 16 97 27 9a cc a2 39 07 35 52 45 f9 aa d3 9c d3 16 3c b0 aa b9 9b 43 62 80 b6 38 ad 18 22 2a 46 6a 6b 6b 61 b0 1c 54 ae b8 38 02 9b 21 68 c9 a3 02 a4 22 a3 88 13 56 56 2e e6 b9 e4 8d 14 ac 40 46 45 2c 71 e4 8a b4 b0 13 da a5 8e db 1d ab 1f 66 db 2b da 2b 10 84 c7 6a 99 62 56 5a 99 Data Ascii: E)R!z9Kr){R]EPA>GjkPW"\C<U22qMX-[7`nPcZl=OJQ9+RBkZkAUj2j'X7g91:29-<SZ~'95RE<Cb8"*FjkkaT8!h"VV.@FE,qf++jbVZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49736	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:02 UTC	1846	OUT	GET /images/custom/image13.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:02 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:02 GMT Content-Type: image/png Content-Length: 124410 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-1e5fa" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4965 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0kMamEwQqabXTEwXBdzLg%2BW4liUIYUhkK3AigKEwo0mMdKre32Jf9Zq2fUMS%2BDVjNgy00sLTsCw%2F%2F5KUioz8aYQAJD%2B6Jy3AsEvJZNn7LnZQMqobJzq6FZoQiyVpuOeSSHc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe26ffd8c672a4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2009&min_rtt=1991&rtt_var=784&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=2424&delivery_rate=1363848&cwnd=212&unsent_bytes=0&cid=4510069244cc91dc&ts=121&x=0"
2025-01-10 16:48:02 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 88 00 00 00 aa 08 06 00 00 00 b7 50 d8 af 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e cc bd 57 97 64 d9 79 25 b6 af 0f 6f d2 54 66 b9 36 d5 be 1b a6 09 60 80 21 c8 25 62 86 94 06 c0 50 0f fa 6b d2 e8 61 c4 f7 d1 83 34 5a 43 72 0d 29 61 66 ad 81 44 02 24 08 60 60 08 b4 41 bb aa 2e 93 95 36 32 fc f5 57 6b ef 73 6e 64 64 94 69 34 30 20 10 58 8d aa cc ca 8c b8 f7 dc 73 3e b3 bf fd ed cf f9 37 7f f6 6f 2b ac bd 1c c7 81 eb ba 48 92 04 d3 d9 14 cd a8 85 46 b3 a9 ef a5 69 8a 20 08 d6 7f 1c 40 b9 f1 f5 e5 2f 1f 1e 1f e1 87 3f fc 01 3e fa e8 36 b6 b7 b7 f0 8d 6f 7c 13 be e7 a1 d5 6e a3 aa 2a f8 8e fb c4 df d7 b5 d8 7f ad ca 4b 97 a9 df 2d ab 0a 70 2e 7f be eb 38 97 df 6f e3 f7 78 1f Data Ascii: PNGIHDRPsRGB IDATx^Wdy%oTf6`!%bPka4ZCr)afD$``A.62Wksnddi40 Xs>7o+HFi @/?>6o\|n*K-p.8ox
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 2a 8e e1 82 f7 ce 75 70 b5 26 bc 16 f3 35 50 39 2e 2a d7 81 e3 06 70 5c 07 69 56 98 f7 b1 fb c6 e7 d2 3a 2e 1e 79 ee 4f dd 95 e6 1f 9d 8a 9f 58 62 72 3e d6 fa 76 07 5d 3d 07 37 4f d0 4f 52 dc f9 d9 cf f0 ce 4f 7e 82 2f fc c1 57 d1 7b fd 33 88 dd 10 65 66 f7 8e 6b d6 af 2a ea eb 31 ef e9 b9 17 e7 83 cf c5 75 52 bd 5f 7c 72 82 d3 7b f7 80 b2 c0 95 fd ab e8 6e ef a0 f2 2a e4 b3 39 aa 32 d1 ba b8 45 05 37 ab 80 ca 47 52 f9 88 8b 1c fd ad 16 4e 46 87 18 0c b6 10 fa 01 ce cf 4e 31 9b 9c a1 d7 6d c0 c9 4b c4 f3 02 69 51 62 b0 b7 87 d1 e9 09 1a 45 aa 9f 75 3b db 58 72 21 dd 0a 05 0a 3d 8f aa cc e0 96 19 82 64 81 f8 f0 21 ae 5d bd 8e b2 bb 83 71 cc e7 58 a0 03 20 3d f8 18 d3 87 07 c8 16 29 a2 66 03 9d fd 1d 38 8d 00 8b e9 5c e7 86 7b 22 2e 32 54 cd 50 7b bc 4a 33 Data Ascii: up&5P9.p\iV:.yOXbr>v]=7OORO~/W{3efk1uR_\|r{n92E7GRNFN1mKiQbEu;Xr!=d!]qX =)f8\{".2TP{J3
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 61 3a 9d e2 eb df f8 3a 5e 7d e5 55 65 25 8c 8a 5c 46 0c 9e af af 37 df 9f 9b 8e df 2b ca e2 92 61 a7 d3 30 3b f3 d3 65 10 fc 15 1e 4c 79 e7 80 5e fc 72 66 c2 ef d7 ce 81 9f 2b 03 ce 8f b1 0e 6c f3 fa 94 11 c4 73 54 c9 02 a1 ef 29 62 61 74 4b 67 11 44 0d a4 a5 0b d7 f5 e1 d1 c0 78 95 b2 a7 24 5d 2a ea 32 8e f7 22 63 e1 83 ce 79 6d 55 a1 48 a6 48 13 e3 00 3d 17 ae 6f 5c 69 db 0b 15 f9 4e 66 53 c4 8b a5 22 8a 61 b7 25 43 e3 14 31 aa e5 14 d9 e4 0c f1 f1 11 e2 bc c4 e0 a5 cf 22 dc b9 8a d2 0d 90 16 90 11 af 1d 84 36 08 3f 67 2d 83 e0 6e e2 e1 96 53 aa a0 28 ce 64 3e b9 36 27 1d 62 59 e5 8a 58 14 34 a4 a9 79 76 7e 00 78 3e 1c 2f 30 5b 8d 19 97 32 0d bb 53 9e e2 20 cc 23 30 87 c2 f3 cc f5 f1 ef 3c 28 cc 64 b8 46 8c 56 f9 a7 0c f1 ca 49 fc ea 8e a1 fe cd 92 d7 Data Ascii: a::^}Ue%\F7+a0;eLy^rf+lsT)batKgDx$]*2"cymUHH=o\iNfS"a%C1"6?g-nS(d>6'bYX4yv~x>/0[2S #0<(dFVI
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: c0 f7 8e 10 d2 21 7b 0d f8 51 43 19 09 ff f4 bd 26 66 e7 63 39 88 74 39 43 5c 26 d6 b6 fa 70 19 f0 54 95 d6 91 7b 7b 99 24 17 d9 b1 35 4b b2 3d 65 05 97 76 87 70 ae e7 29 db 1a cf a6 fa bd 76 a3 89 a3 93 63 2c 92 18 5b 57 af c1 e5 f5 06 11 bc a4 14 74 17 27 33 41 a7 a5 1f 22 e7 59 26 2c cd 2d 56 07 38 d6 a6 d3 39 d0 2e 7a 44 75 3c 13 dc 69 0f 3f 2e 83 b8 64 7f 9d cb d8 fb 86 77 f8 c4 1a 04 23 0c 42 53 79 9e 21 cf 0b 7c e7 3b 7f 8b bf f9 9b bf c5 4b 2f bf 84 37 3f ff a6 d2 5c 61 87 32 c2 cc 20 2e 3b 9c cd 00 7f d3 49 84 a1 79 78 fc 0c 3a 31 cf af 31 6f 73 a5 84 0f 18 21 eb ef 3e 9d 9d f1 a0 f5 8b a9 db 3a bc 55 3b c2 fa df 19 b5 1a c3 65 20 2e 7a 6b 61 82 84 5d 94 4d 15 f0 aa 1c d9 64 8a e9 e4 4c 70 4f 2b 6a 00 05 3d 30 00 d6 19 18 01 bb ae 16 dd 44 d7 74 Data Ascii: !{QC&fc9t9C\&pT{{$5K=evp)vc,[Wt'3A"Y&,-V89.zDu<i?.dw#BSy!\|;K/7?\a2 .;Iyx:11os!>:U;e .zka]MdLpO+j=0Dt
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 99 39 94 45 89 78 3a 53 20 e7 86 01 72 06 32 2c 18 3b c0 a2 4a d1 ea f5 11 85 4d 24 85 0b bf 3b c4 95 bd ab 72 50 d3 f3 11 dc 3c c5 72 32 c6 72 3e 43 bb d7 21 3c 00 97 81 1a f7 0a 43 1d 66 a1 2c 6d f0 4c 16 99 9c 36 4f d6 f8 de c7 08 1c a8 80 5e a4 39 ca 65 82 c9 f1 a9 8c 72 6f 7b 0b 41 bf ab ec 48 b5 36 cf c3 62 66 8a f5 3e b3 12 22 1f c3 3e 10 86 70 03 5f 85 79 66 d4 61 a3 89 dc 73 d1 ea 74 81 ac 10 d4 33 7a 70 0f dd 46 88 66 bf 25 44 85 8e 23 60 81 dd 0b 55 7f e0 b9 63 7d 75 65 8f 78 fe 05 ef b3 06 e8 a8 e0 ce 20 95 6b 22 e7 dc 6a 09 95 68 35 23 a4 ac 63 38 ae 48 22 2c f4 d3 01 44 59 81 93 c3 23 41 64 ac 6d 10 c9 30 96 d1 45 c6 6c 4f 70 ae 67 9c 30 d1 09 5b 77 e6 3d 08 25 b2 64 9e df a8 83 90 01 59 2b 0a d7 b5 84 f3 d1 39 fe fd ff f5 ef 75 a3 4c 2b bf Data Ascii: 9Ex:S r2,;JM$;rP<r2r>C!<Cf,mL6O^9ero{AH6bf>">p_yfast3zpFf%D#`Uc}uex k"jh5#c8H",DY#Adm0ElOpg0[w=%dY+9uL+
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: f4 2b 1a 36 d9 d0 7c ac 59 ae 3a 09 9d 07 03 86 cc b2 da a2 28 d0 be 24 64 5a 12 c3 f7 3c 34 88 d9 2f 96 68 37 09 3f 75 30 3a 3d 15 7d b6 d1 0c 75 4e 68 b0 e2 f1 4c 10 4a 77 67 a8 ba c1 b3 2f be 82 56 77 88 eb 2f dd c2 5b ef bc 0d da 0d 9e 87 4e 8f 67 ab 2b 96 20 59 38 cc 20 c6 a3 53 64 d6 d8 c7 f5 59 2b 3c 65 c1 7c 7e 2e b3 7f 91 1c 52 64 c9 1c f9 62 86 e5 f1 a1 8a de 8d 5e 07 21 f7 ec 22 13 93 69 3e 31 ac ab e1 fe 3e 12 66 1c 80 60 36 66 13 a4 cd fa ad 86 a8 e3 8e cb 2c cf 15 8b 70 3c 1e 29 78 1b 6e ef a2 6a 76 95 45 17 64 6b 1d dc 17 9d 9b ac 2b 37 60 8e c9 97 21 5f 30 70 e3 f9 24 f1 83 cf 96 c1 20 d7 de 98 1d c2 3e 6d d9 11 66 43 7c 1e 8b 34 53 11 99 c6 9e 41 29 f2 58 f6 8d 59 12 d7 41 90 66 5e 60 74 7c 8c 4e a7 2d f4 82 35 18 d7 35 b5 54 92 65 98 8d Data Ascii: +6\|Y:($dZ<4/h7?u0:=}uNhLJwg/Vw/[Ng+ Y8 SdY+<e\|~.Rdb^!"i>1>f`6f,p<)xnjvEdk+7`!_0p$ >mfC\|4SA)XYAf^`t\|N-55Te
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 87 e9 78 ac 82 f2 f5 bd 7d c4 27 67 38 bc 7b 1f f0 5b 6a b2 6b ec 0d 91 7b 8e 9a c0 fc 12 88 67 0b ed c7 f6 f6 b6 9c 01 83 0b d6 96 e8 2c 98 61 32 9b d0 3e cc 0b d5 54 3e fc c7 1f a3 d1 69 e3 e6 6b 6f 6a 7f 4f 0e ef 0b 56 a1 43 bc f6 fc 0b 88 ae 5f 17 3f 7f 7e 7a 06 08 d3 37 4d b2 a3 d3 63 ec ee 6c 61 31 9b a8 96 a0 06 da 20 c0 d6 f3 cf a8 7e 37 19 cf f4 ac 77 ae ec 9a ac e3 7c 24 58 eb e8 e1 a1 ea 39 dc 79 b4 25 dc fb b5 d1 33 19 aa 1a 5b 56 8d 6f 64 5d e5 da 6f 86 f9 45 23 18 56 05 f2 b3 33 41 c4 41 a7 a9 73 73 fc e0 00 cb 39 1d 88 8f 7e 7f a0 3a 02 21 a6 46 a7 83 59 92 0a ee 62 01 9e 91 39 0b bc 3a 9f b9 a9 09 69 7f 30 5b 67 86 d1 e8 0a fd 4c e6 e7 86 f0 c0 b3 cc 1e 06 1b f4 a6 a5 69 8e 6b b4 7b 88 5a 6d 43 2d 65 1d c0 d6 ee 58 50 56 9f 84 ea 85 8f 0f Data Ascii: x}'g8{[jk{g,a2>T>ikojOVC_?~z7Mcla1 ~7w\|$X9y%3[Vod]oE#V3AAss9~:!FYb9:i0[gLik{ZmC-eXPV
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 0f 0f 14 00 f5 af de d0 f5 04 55 81 e9 f1 09 66 67 a7 18 ee 5f 45 b5 bd a5 9a 42 c9 ee e3 c5 02 0d bf 81 f3 f1 18 51 27 42 8b 1d d9 55 86 b3 7b 0f 50 cd 62 45 ba e1 ee 16 b2 20 c2 bc 2c 64 94 d5 dc ca 8c 94 fd 52 b6 2e 66 d0 02 06 ed 2c ce 13 3e 31 3d 48 dc 67 64 1d c9 89 59 e3 c8 22 33 03 1c 3a 0d f6 0f 25 8b 39 9c 24 81 33 67 4d 24 12 eb 89 cd a7 34 96 44 f4 59 5c 66 1d 85 f0 cc c1 e8 0c 8d 76 1f fd dd 7d c1 47 6a 22 25 33 d1 73 11 a7 e6 0c 29 d0 b1 46 b8 62 f3 6f d0 d2 fa 24 d3 33 9d 11 75 86 73 0d 1d 08 7e 76 a3 40 0d 7c e4 52 71 5f b3 ff c6 ac 67 5d e3 aa cf 26 a1 57 ab e6 40 73 60 f7 98 b5 f0 26 bb e3 7f 3c f3 45 ae 82 38 25 7a c2 ce 40 f7 94 b1 bc 67 4d 94 a1 88 1b ba 78 fd 52 4d cb 32 f3 b8 76 74 9c 44 34 98 39 2b fb ff 75 1d c4 aa a3 f4 92 19 ff Data Ascii: Ufg_EBQ'BU{PbE ,dR.f,>1=HgdY"3:%9$3gM$4DY\fv}Gj"%3s)Fbo$3us~v@\|Rq_g]&W@s`&<E8%z@gMxRM2vtD49+u
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 43 b4 28 d2 f7 90 75 92 29 82 de 16 3a 83 6d 24 65 0e bf ca 71 7e f7 36 c6 a7 a7 d8 bd 7e 05 7e ab 8d 68 70 45 7d 28 ac 3b 30 5b 38 3b 3a d0 fa 0e f7 6e 98 7a 9f 44 38 09 cb 98 1a 04 fc a6 a9 89 64 4b 31 cd d8 0b c1 c0 89 36 8c 46 9b d7 c9 2c 5c fa 68 eb 20 44 4d 0e 11 ea 50 2a 00 e3 4b d4 71 06 96 be 91 d6 e0 d7 ea ce e7 bd d3 e6 a0 52 97 f9 f2 fc 5c 0e 82 dd f0 2c 76 e7 ec a7 b0 ef 6f 32 3f 47 4d b8 6c c0 64 bf 0c ff cd 88 86 fa d2 db 22 ef 23 9f 4f 10 9f 9f a8 91 f3 b7 96 41 ac ce 8d 54 4e 6d 8a 0b e0 de c1 03 fc ed df 7d 17 cb 38 56 da f8 cd 7f f5 75 31 14 18 39 d7 ff fd 53 3a 88 4f ea 93 50 24 62 3d 3a 13 89 1a 46 2a c8 b9 26 05 94 9b 81 0f c6 80 d4 ba f4 ba 2e c0 fa 81 69 3a bb ac 33 b5 7e 7f 35 06 79 11 e1 d3 c8 9a c2 14 d3 6d 39 06 bb 79 d6 23 d9 Data Ascii: C(u):m$eq~6~~hpE}(;0[8;:nzD8dK16F,\h DMPKqR\,vo2?GMld"#OATNm}8Vu19S:OP$b=:F&.i:3~5ym9y#
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 72 80 d1 c1 7d 74 1b 11 a5 36 9e de 07 b1 a9 85 c4 02 69 cd 2e 32 4d 6f c4 ca 4c 44 ba 69 dc 2e 1f 98 5f ee b8 c6 59 a6 8d fa c1 07 1f e0 1f 7e f8 03 bc fb de 7b ea b4 fe ec 1b 6f a0 1b 35 65 74 78 78 4c 2a 79 21 7d fd 24 07 b1 d9 87 b1 79 15 17 07 fa 09 d7 f7 04 8a d9 93 0c 52 4d 95 35 42 7c b5 52 eb 85 07 a7 ee 50 c1 e2 60 66 74 e0 0d 26 6d 63 ff 47 84 10 1f bd 26 4a 8a d0 41 d4 bc 7c 71 c3 6d 06 c3 26 b5 fa 19 d4 bd 08 12 86 93 e3 30 ec aa 55 f1 bc 6e 7c 63 43 97 65 45 08 f3 dc 60 8d 19 e8 aa bc 30 fa 82 03 0d 7f 5b 45 2d 66 4a 94 10 56 33 1b 65 42 98 45 d0 e9 5b 2d a7 d2 34 d1 19 aa 1d 61 26 e3 b4 d8 75 ac ec 81 ea 9c fc 7c d1 5b d9 79 cd 1a 49 a2 34 57 8d 7c 7e 88 84 b6 d7 6f 88 45 e2 b7 bb 06 42 61 57 b8 1a ff 0c 43 ca 3c 67 76 5d d7 0e b1 16 cc fb Data Ascii: r}t6i.2MoLDi._Y~{o5etxxL*y!}$yRM5B\|RP`ft&mcG&JA\|qm&0Un\|cCeE`0[E-fJV3eBE[-4a&u\|[yI4W\|~oEBaWC<gv]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49741	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:02 UTC	2112	OUT	GET /images/custom/bg.jpg HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/css/app.css?id=409e9c6c9baad5c9b446 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:02 UTC	892	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:02 GMT Content-Type: image/jpeg Content-Length: 44805 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-af05" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 669 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NH9vD9NRe5on6Zls0y3t59u8ZXmgd8zi9Y0Crf4MaygXIl6wEs4a5KwvNn1Toa6t03ToFl%2Fwa8x0wa8wxJOYu9a8zluWNjU2GaULd1U88E6AXYvkUDmmNmOrU9hWjYMlfcw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe270068aa41ba-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2060&min_rtt=2048&rtt_var=793&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=2690&delivery_rate=1358771&cwnd=192&unsent_bytes=0&cid=0b302d11e09e547a&ts=147&x=0"
2025-01-10 16:48:02 UTC	477	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 Data Ascii: JFIF(ICC_PROFILEmntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(w
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c0 00 11 08 02 1c 07 80 03 01 22 00 02 11 01 03 11 01 ff Data Ascii: Y[XYZ -mlucenUS Google Inc. 2016C#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: b7 97 9e 4b d9 52 31 ff 00 1d e5 c7 e4 dc ca 00 00 00 00 00 02 27 8d 32 e1 95 a9 72 4c bc 51 69 27 94 05 89 c5 32 62 dc a2 9e 32 3a 7d db 02 24 f3 ec 21 c9 53 f4 11 43 8e f5 c9 a5 51 10 56 ef 83 42 08 97 86 5a bb 3c 32 c9 ea 49 46 0d bc 9c ff 00 96 6a a9 ec 5c 1d 32 92 8a b6 4c 62 db d5 2d fb 2e 09 e9 4b f2 3d 52 dd 76 35 20 00 00 00 99 6d 43 6e bd c1 2e ef 70 32 69 ad d0 41 a8 4a a5 8e 0d 4e 36 db 76 f7 2c e8 ea 7e 37 a5 6d dd 94 61 d1 9b 49 aa 6d 7a 1a fe 48 f2 d7 ba 20 b0 25 4e 2f 69 2f b0 94 94 62 db d9 00 a3 e7 9f c0 d2 cb 31 5d 7f 1b 7a 77 36 8b 52 76 bb a2 8a 00 02 00 c6 50 69 b7 05 8e 0d 1b ec 86 95 20 31 5d 48 c5 db cb e1 15 f9 17 53 c2 ad 5e e6 12 b7 27 7b d8 45 d4 93 5c 9a c5 75 a5 4a 90 c9 53 8b ee 8a 32 80 00 00 4d d2 b1 69 bc b0 5e 27 7d bb Data Ascii: KR1'2rLQi'2b2:}$!SCQVBZ<2IFj\2Lb-.K=Rv5 mCn.p2iAJN6v,~7maImzH %N/i/b1]zw6RvPi 1]HS^'{E\uJS2Mi^'}
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 0a bc bf a2 80 00 08 93 7e 58 ee ff 00 80 14 97 e4 7a 7b 2d d9 30 e9 45 4d f7 ad 8d 52 51 54 89 5f ec 97 aa 40 53 57 b8 b6 df 2b 92 80 09 70 83 fd 2b e8 c3 ab d3 71 95 a5 83 7a 71 db 6e 06 9d ec 51 cf d2 83 6d be c8 e8 5b 22 25 e1 9d f6 96 19 71 f2 a1 43 27 cc fd 10 3c ba 5f 23 d8 81 99 cf c6 f4 2f 97 c0 e7 26 bc 31 f3 31 c6 2a 2a 80 c5 f4 2a 69 6a df d0 da 09 28 d2 42 97 9e 1f 23 d9 fa 32 81 c2 2f b6 79 42 d3 25 b4 df ce 4b 16 c4 12 e5 38 ef 14 fd 98 29 c5 79 ad 3f 54 35 97 6f e0 a0 32 9f 59 45 d2 c8 43 ac a5 ba 77 c2 33 eb 41 a9 b6 96 18 fa 11 6e 7a bb 22 f8 ad 6a 52 f3 3a 5c 21 a4 a2 e9 6c ca 14 ab 4e 48 86 06 7f 91 f0 5a 76 ac 06 29 45 49 53 18 01 16 e1 e6 ca e4 ad c6 46 97 1c c3 6e 00 6f 0d 32 8c a5 d5 8a 55 4e f8 e0 ae 9f 51 4d 7a a0 2c 00 00 00 09 Data Ascii: ~Xz{-0EMRQT_@SW+p+qzqnQm["%qC'<_#/&11***ij(B#2/yB%K8)y?T5o2YECw3Anz"jR:\!lNHZv)EISFno2UNQMz,
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: e4 95 2f 2a df d4 24 dc 9e 88 fc be 0b 49 45 52 d8 81 80 00 11 0d 9f bb 13 96 70 35 fa d7 af fd 10 50 d4 9a ee 5c 1d af 5e e6 65 f4 fb 81 60 00 41 32 5a a2 d0 45 ea 8a 65 11 7a 66 d7 39 40 56 c6 72 4e ee b0 5d 5e 5f d1 40 67 14 ee e8 bd 4b d8 62 ab dc 06 04 d3 5b 3f 86 1a ab 7c 01 46 7d 6c c3 4f 7e 07 a9 cb 10 db 91 c6 2a 3e fd d8 1c 87 44 1c a3 04 b4 df b3 2a 29 7e 49 3a 5d 86 b0 da f9 2d a1 7e 48 f7 b5 ee 8a 4d 3d 9d 8c 89 42 3d 96 5f 04 0f 77 e8 8a 23 43 5e 59 bf 9c 85 ce 3b a4 fd 98 16 4c a5 a7 0b 2d ec 8e 67 39 49 db 6c d7 a0 f5 26 de 5f 25 c1 7a 74 f8 9e 5f 76 58 9a b4 d0 27 69 32 06 4c d6 2d 6e b2 8a 00 12 76 ad 77 06 ad 51 30 f0 b7 1e 32 bd 8b 01 27 8f 54 32 5e 25 7c 94 00 00 00 26 93 54 ce 36 a9 d3 ec 76 99 cf a2 a6 ef 66 59 47 31 d1 d0 55 d3 be Data Ascii: /$IERp5P\^e`A2ZEezf9@VrN]^_@gKb[?\|F}lO~>D*)~I:]-~HM=B=_w#C^Y;L-g9Il&_%zt_vX'i2L-nvwQ02'T2^%\|&T6vfYG1U
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 89 46 5e b4 c2 51 b9 60 05 06 ee 8d 09 8a a6 f9 28 00 99 2b 89 40 06 20 95 ba 34 92 4d ac 0d 24 b6 40 14 b8 30 7d 5d 17 18 a4 d7 66 6b d4 75 d3 93 47 29 64 1a af f2 1f 78 af 83 58 2f 0d dd b7 96 ce 53 6e 8e a7 1a 4d 24 9f 02 c5 6e 22 74 37 bc df c6 03 f1 c7 ba bf 7c 91 11 d6 ea 52 4a 2f 7d e8 c6 33 70 76 99 d1 d5 84 74 6d 55 b5 19 fe 17 1f 13 ca 5d 8b 15 b8 c4 9d ab 43 22 02 26 af 3d cb 25 65 df d0 19 ca d2 78 d8 c2 dd dd 9d 75 7a af be 0c 5f 47 c6 92 96 e5 8a be 83 b8 7a de 4d 4c d7 4d c1 78 1f df 71 eb ac 49 69 fe 88 8b 00 00 22 3e 79 7c 0a 51 a7 8e e3 5f ed 7e c8 7b cb d8 08 d0 f8 2e 3e 1c 3f b2 84 d5 a0 18 19 eb 7c 8d 37 2d c0 77 78 5f 62 94 69 6a 5b ac 95 b0 c0 49 da b1 91 0c 5c 78 db d8 b0 00 02 35 39 62 1f 60 39 49 47 df b2 16 97 2c cf 6f da 38 c5 Data Ascii: F^Q`(+@ 4M$@0}]fkuG)dxX/SnM$n"t7\|RJ/}3pvtmU]C"&=%exuz_GzMLMxqIi">y\|Q_~{.>?\|7-wx_bij[I\x59b`9IG,o8
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: de fe 8c a2 74 b7 d8 d1 34 d6 08 d3 2d 5e 7d fd 01 c6 6b 2a 7f c0 1a 18 75 ba 8e f4 2f 93 44 a4 d7 9f f8 39 e6 9a 9b be 4b 04 9a f4 fa b2 bd 37 be cd f6 32 1c 7c ca b9 34 ae a8 c5 2c ee f9 65 11 f9 12 dd 35 ee 86 a5 17 b3 4c c2 28 00 00 08 9f e9 ff 00 d8 a2 24 f5 4a 35 85 7b 81 52 ca ae e6 66 a9 25 b0 a9 39 3f 40 22 2a d9 a5 00 c0 54 82 86 00 44 f0 93 e1 95 42 92 b8 b5 ca 08 bd 51 4f 94 04 35 4e 89 71 d5 83 5d e5 e8 82 92 92 f5 02 56 a8 2c e5 72 8b 4d 35 69 da 19 0e 19 b8 ba 7f d8 14 d5 a6 9f 72 62 db 5a 7b ac 36 1a f3 a5 aa 91 12 9c 7a 73 e6 d6 40 d5 2a 54 27 87 7f 64 2e bc 5b ca 68 d3 0d 00 c0 95 c7 05 00 01 2e 51 5b b4 85 f9 13 d9 37 ec 80 73 ad 0e dd 11 0e ac 64 f2 e9 b2 7a ce 4e 2a e3 48 c4 b8 ae b7 86 99 44 c6 4a 4a af 3d d0 e3 b5 70 44 30 00 02 5f Data Ascii: t4-^}ku/D9K72\|4,e5L($J5{Rf%9?@"TDBQO5Nq]V,rM5irbZ{6zs@T'd.[h.Q[7sdzNHDJJ=pD0_
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: a3 8f fb 34 d2 ab 61 c7 60 12 9d ba 6a 9f 05 09 a5 25 4d 13 e2 87 fc a3 fc a0 09 78 64 a5 db 66 34 ad db f8 25 b8 ce 2d b7 e1 25 75 d2 4a d3 b0 35 6a c1 3e cf 74 4c 3a 91 9e df 43 78 c8 14 00 20 18 13 f9 23 cd fb 64 5a db da 0f e7 00 4c e7 18 cd ab dd 64 b4 e3 35 87 68 e5 95 ea 77 bf 73 4e 84 b4 dd ec 5c 56 d1 e3 82 89 7b a9 22 88 80 43 14 bc ac 02 3e 54 31 2d 85 29 28 ab fa 40 67 d7 85 b4 d6 fc 18 6c 75 c6 35 97 e6 63 2e 86 47 4f c8 8b 23 a7 e4 5f 24 16 00 00 06 1d 4e 8d 5c a2 f1 c1 b9 1d 5f 2b 5e 96 06 51 e8 37 4d ba 46 e9 28 aa 5b 02 d9 0c 00 00 00 97 d9 fa 94 29 79 58 2c a0 13 5d d1 94 e3 f9 5d c7 15 df 93 46 dc 9e 95 b7 76 3d 35 e5 c0 1c ff 00 86 7f b4 d7 a5 d2 d0 ed e5 9a 27 63 2e 80 97 18 bd d2 65 01 04 7e 34 b6 6d 7c 83 d7 1d a4 9f a3 43 b6 f6 fb Data Ascii: 4a`j%Mxdf4%-%uJ5j>tL:Cx #dZLd5hwsN\V{"C>T1-)(@glu5c.GO#_$N\_+^Q7MF([)yX,]]Fv=5'c.e~4m\|C
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: bf 40 1b 75 b8 9b 72 54 90 d4 50 c0 c2 49 ee b7 46 bd 3f 22 60 bc cc 4f c1 2b fd 2f 7f 46 03 96 c5 10 e6 9b 45 01 32 f3 c7 e4 b2 25 e7 87 c9 60 00 00 04 4f a6 a6 a9 ef d9 98 7e 19 6a d2 a8 e9 22 3f ec 7e c8 ba 0e 9f 49 43 2f 2c d0 00 80 00 00 26 3d d7 0c 6d 58 bf 53 f5 1c a4 a2 ad 81 32 74 b4 b5 77 b7 a9 8b e8 4d 6d 93 68 c6 fc 52 dd ff 00 03 ba 74 fe ca 30 8f 42 4d e7 08 e8 8c 54 55 2d 86 04 d0 aa c9 fc 71 e2 bd b0 58 9b a0 27 4b 5b 4d fc e4 57 d4 7b 24 fd 76 2a af 7f a2 80 e7 ea 4d af 0a 4e 3c 93 d3 ea 38 c9 5b c1 af 56 1a e4 92 dc 5d 3e 83 52 b9 35 8e 0b cc 55 3e a4 5b 59 1f e4 87 23 5b b6 51 11 1f 92 1c 87 e4 87 25 80 11 f9 21 c8 7e 48 72 58 9b a5 6c 0e 69 f5 1c a5 87 49 6c 69 d1 9b 9b a6 ee b2 4b e9 39 5c 96 13 ec cb e8 c7 4b 69 ee 5e 62 b5 25 61 b5 Data Ascii: @urTPIF?"`O+/FE2%`O~j"?~IC/,&=mXS2twMmhRt0BMTU-qX'K[MW{$v*MN<8[V]>R5U>[Y#[Q%!~HrXliIliK9\Ki^b%a
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 85 28 a9 2a 60 0d 5a f5 04 ed 12 a4 e2 f4 cb e1 f2 3d 9f a3 01 b7 4a c2 2a 90 9b 4e 91 40 00 00 00 4b c4 af 92 88 93 72 f0 c7 e5 f0 01 29 5d c5 65 f7 f4 31 fc 39 8a d5 b9 aa 71 8c 69 6e 16 9c e1 5e a5 15 18 a8 46 91 40 26 d2 20 62 d8 59 7e 83 d2 bd c0 57 7b 2b 07 84 dc 9e 11 44 4f 35 1e 5e 7d 80 3a 6a a3 ea f2 cb 00 00 03 39 f5 a3 07 5b b1 c3 a8 a6 b0 03 5d fd c2 6a e2 d0 47 60 79 74 be 40 c6 2e bc 2c d6 2e 95 3c 04 a0 9a c2 a6 b6 1c 5a 94 7f b4 02 97 9e 1e ff 00 f4 59 9c 95 4a 35 cf fd 15 75 ba a0 28 04 30 26 5b 57 22 8f fb 25 f0 3d e5 ec 28 f9 a7 ef ff 00 40 58 00 00 00 0a c0 52 6a 34 d8 a2 9c 9e a9 7c 2e 04 ee 7e 2f d2 b6 5c 9a 00 0b 71 80 13 7a 70 f6 e4 35 a1 4f ca 40 1a 5d ed f6 34 a8 49 d2 56 98 ed 3e e0 31 49 e9 56 c6 47 9e 77 da 3f d8 0e 09 a5 6f Data Ascii: (`Z=JN@Kr)]e19qin^F@& bY~W{+DO5^}:j9[]jG`yt@.,.<ZYJ5u(0&[W"%=(@XRj4\|.~/\qzp5O@]4IV>1IVGw?o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49738	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:02 UTC	2156	OUT	GET /images/products/prod1/1-bottle.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:02 UTC	896	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:02 GMT Content-Type: image/png Content-Length: 237735 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-3a0a7" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4965 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3f8yySIJLnmfyNawg8uMSDm7JaAKz7yEn1tFPyc4jM37583YbNRTV%2Bx2LhleCR92vIl%2BjTXKeFDrZL0tqcZzVyfxtUGDM54HnDLjUM0OzT80bRIVpwyguhDjZDXYnl5z4To%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27006f7b17ad-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1613&min_rtt=1609&rtt_var=613&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2734&delivery_rate=1771844&cwnd=172&unsent_bytes=0&cid=110bc12273f267ce&ts=135&x=0"
2025-01-10 16:48:02 UTC	473	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8d 00 00 02 58 08 06 00 00 00 9e bc ba d0 00 00 20 00 49 44 41 54 78 9c ec bd 09 b0 6d e9 55 1e b6 fe 73 ce 9d 5f bf a1 df 6b f5 a0 d7 ad 06 8d 6e d1 c2 6e 01 92 ac 81 c1 b2 02 82 04 30 65 a3 d8 01 ca 15 0a 02 15 88 8b aa c4 a9 90 04 92 8a a7 54 aa 5c 60 b0 ab 62 42 39 09 0e d8 54 31 b8 40 80 19 0c 66 32 08 2c 23 68 a9 a5 b6 a4 ee 56 8f ea d7 af df 74 e7 73 ce 9f 5a fb ec 75 df ba df fb d6 bf f7 b9 f7 dc 7b cf bd f7 ac aa 53 e7 9c bd ff 79 ff ff f7 ad b5 fe 61 27 99 b0 dc b8 71 63 d2 49 ee 4b 52 da 5d c5 9c 73 f5 8d d7 db 8a c6 2f c5 65 f7 fd 35 f6 1b af f9 f2 61 7a e3 fe 2f 95 89 b5 43 a9 7d 9a da ce ee d7 61 e6 45 64 49 44 96 45 64 9e 84 d5 eb 77 89 c8 82 86 4b 29 e9 ff b3 75 58 8b 1b 4a ce b9 5b Data Ascii: PNGIHDRX IDATxmUs_knn0eT\`bB9T1@f2,#hVtsZu{Sya'qcIKR]s/e5az/C}aEdIDEdwK)uXJ[
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 8f 0f ff d1 b8 76 dd 7e 5b fb 59 df b5 76 b0 f4 f4 5b af d9 7f 2d 0b 3c 8f 43 97 fb ee bb ef 48 f3 2f 49 6f 6a 4b 36 93 c3 94 a5 1a 64 a5 fe 7d 49 44 2e 88 c8 3d 22 72 ce 95 43 ef 5d 14 91 d7 d4 d7 2f d5 c0 5c 49 0d cc 67 dd 67 a5 26 86 0e d6 65 af a4 8d f1 23 72 9d 44 da 4d b2 17 60 d1 b4 0d b8 a2 3c 95 b4 52 4a d7 95 6c 3a 9d ce cd 94 d2 8d 6e b7 7b 2b a5 d4 77 e1 95 ac 5e d6 4f b7 db bd 9a 52 d2 cf a6 25 21 22 1a ff 4a 4a e9 a5 94 d2 2b 35 d1 49 fd bd 61 40 eb 85 5d 9b c9 4c 50 66 a4 71 f2 44 35 e9 07 45 e4 72 ad e5 ab dc 2d 22 0f 8b c8 43 76 2d a5 a4 1a f9 03 35 31 dc 6b 7d a1 b6 10 e6 58 ab 94 c0 34 ba 67 20 59 92 b6 20 6d 1a a7 09 03 bd 92 b0 fb a5 72 b3 bc 91 ac da 48 a9 cc 78 bd ce a3 9b 73 d6 67 76 b7 b5 9f e5 ef c3 59 39 54 63 17 00 7d 2b 9f 6a Data Ascii: v~[Yv[-<CH/IojK6d}ID.="rC]/\Igg&e#rDM`<RJl:n{+w^OR%!"JJ+5Ia@]LPfqD5Er-"Cv-51k}X4g Y mrHxsgvY9Tc}+j
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 33 99 8c cc 36 f7 dd 29 4a a4 5f 26 22 ef 13 91 af 11 91 b7 d7 2e a7 3b 06 9a 69 fc a6 a1 db c7 5f 33 e0 30 53 5f 07 04 0e 44 01 30 61 e5 3f 28 93 5c cb f0 d2 4b 2f 55 83 d8 ac 9e a3 10 3f a1 dc e4 9e 32 89 2c 8d 92 8b a9 e4 5a c2 a5 a4 51 da 51 fc a6 6f 69 20 70 16 9f 91 0e 5e 13 e8 3f 68 b1 08 58 23 48 c4 4c 39 40 0b 47 bf cf 9e 3d 2b 2b 2b d5 50 b8 63 15 98 df 54 c8 ac 20 66 7d 9b 78 a5 c9 94 2e 6f a1 18 81 e8 84 bb 8d 9d e4 16 06 a0 95 36 1c 0e 75 39 f1 1f 0e 87 c3 5f c9 39 ff e6 70 38 fc 84 11 ae 91 61 9e 6d ee db b3 cc 2c 8d 91 e8 7c c4 07 45 e4 1b eb f9 88 07 ec 06 76 78 b3 1a ec 63 e4 e0 b5 41 73 3d a9 15 61 3b 65 0d 90 6d 70 59 a7 6d 22 b1 83 ec bc e6 9e b0 f2 1e 15 61 30 d7 4c 54 6f 4f 2c 91 cb 07 d3 2c b9 85 24 00 b2 88 20 4a 79 b1 b4 bc 6b 8b Data Ascii: 36)J_&".;i_30S_D0a?(\K/U?2,ZQQoi p^?hX#HL9@G=+++PcT f}x.o6u9_9p8am,\|EvxcAs=a;empYm"a0LToO,,$ Jyk
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 4d 81 c6 75 21 9c 14 31 d2 d0 55 5e 47 b9 ec b0 e4 bb f6 ff 99 fb a7 24 cc 02 60 d6 25 e6 17 ed 98 ce 64 f7 38 82 1f 86 17 20 c0 48 0b 2f d5 09 b5 75 96 57 a9 3e cc b5 c5 ea 80 bf 4b d6 9e 3f 3a bd a9 bc c9 cd 1d e0 f3 63 cf 07 35 7f 6c 4b 2c 27 96 6d dc eb 58 57 7b 56 bd 5e ef 47 73 ce 78 a4 fc a9 17 39 08 4b 63 8a 40 f8 7b db 6a 09 4d 03 b7 6d 1a 72 0c 27 d0 c6 01 e2 83 90 c8 8d c3 ca 88 61 98 ab a2 c9 72 88 c0 9d 5d 67 ee 2b 2f 08 c2 11 b9 f9 bd 09 a9 61 42 9a b9 ae 4a f5 c2 b8 18 16 27 a6 b1 9e a5 89 67 74 3d a5 fa 98 19 7f 0f 09 08 89 d5 d7 d9 da c1 7e 97 9e 1d de f7 47 b2 20 69 44 cf d6 c7 65 e2 f3 c2 f4 3a 9d 4e af d3 e9 7c 70 30 18 fc cc cc da d8 2d 27 76 4e 23 a5 f4 96 c3 ce d3 1f 51 30 ed 92 ea a3 d1 a3 01 7c 98 82 60 e9 25 02 51 29 4c 6a 7b 69 Data Ascii: Mu!1U^G$`%d8 H/uW>K?:c5lK,'mXW{V^Gsx9Kc@{jMmr'ar]g+/aBJ'gt=~G iDe:N\|p0-'vN#Q0\|`%Q)Lj{i
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 9d 16 39 ca ba 96 b4 c4 b6 ff 19 e8 f9 7b cc 85 c4 c0 98 fd 67 e4 23 00 fe 08 44 ec 54 de 68 a9 2d 6a df 19 5c 61 4c d3 66 c7 62 b4 11 96 5f e9 b9 60 3b b0 36 51 d2 f0 6e 26 b4 36 84 ec a9 c8 c4 9d e5 09 04 df 9d 11 b5 1b 96 13 9f 0d 9b 03 69 aa 2b 12 98 7b 7e 0b fa 22 a7 e3 a4 0c 1e 86 cc 2c 8d 5a da 6a 2d 27 45 4a 27 95 1e 96 44 20 ce b4 7b 69 58 ca 89 71 11 00 04 ce 84 8a 40 3d c1 e4 69 94 17 e6 cb ca 57 b2 84 10 c0 31 7d af 9d 7b 40 c3 23 53 98 e5 12 bd af 22 6a 2b 0c 1f b5 5f e4 c2 41 6b 21 b2 c0 b0 fc c9 1d 64 88 cb 70 91 48 30 2f ac 1f 23 62 d6 ae 19 dc 7a a5 ba ea 2a 4c 5c c5 35 93 93 7d 34 7a 51 50 d3 38 2d 84 61 83 51 8f 44 3f 2a 6b a3 0d 10 63 58 01 90 40 41 4d b1 24 4d 6e 9d 36 d7 4a e1 4d a2 72 7a cb 82 b9 78 98 ab d4 13 59 c9 bd c3 2c 97 e8 Data Ascii: 9{g#DTh-j\aLfb_`;6Qn&6i+{~",Zj-'EJ'D {iXq@=iW1}{@#S"j+_Ak!dpH0/#bzL\5}4zQP8-aQD?kcX@AM$Mn6JMrzxY,
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 35 68 74 3f 60 bc d2 f3 62 c4 82 00 5b 6a c3 a6 f2 a0 a5 c0 ca 19 b9 5a ec bf 07 e6 a8 dc a8 a1 97 80 17 81 bd 64 0d 31 37 8f 00 c0 47 00 8d 75 f6 4b 6a bd 95 61 2b a7 a2 39 99 44 5c 6e 58 6f 5f 56 36 e7 82 f5 8b 96 0f cf 2c 8d dd 72 aa 97 dc ee 97 28 50 8e 0b 69 b0 e3 2d 0e 4b 22 4b 82 91 03 02 29 0a bb de 74 74 47 13 51 30 97 0f b3 5c a2 f2 23 21 22 71 44 da bb 10 f0 8e ae 49 e1 34 58 04 39 2c 43 82 49 73 56 0e 9f 1e d3 e0 3d 39 e1 61 83 98 3e 23 12 66 b5 61 3c b6 bb 1c d3 2a 59 82 fe bf 9d 16 5c 6a 0b 16 cf ee cf 48 63 b7 9c 5a 4b 03 07 ef 24 3a c6 ac 73 b5 13 04 95 d2 f1 19 26 a5 53 79 19 c9 30 ad 9b 11 07 02 68 e9 25 5a 18 b7 c9 da f0 bf 31 ff 88 68 4c 70 f7 b3 d7 c6 a5 61 27 33 82 2e a6 9d c1 ad 85 e5 f4 82 ef f1 f0 ab a0 22 f7 16 12 86 14 c8 cc 5b Data Ascii: 5ht?`b[jZd17GuKja+9D\nXo_V6,r(Pi-K"K)ttGQ0\#!"qDI4X9,CIsV=9a>#fa<*Y\jHcZK$:s&Sy0h%Z1hLpa'3."[
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 2b a1 29 4c 1b 6b 86 95 85 85 6b 72 e9 44 96 50 09 8c db 48 db 76 29 01 a9 07 7d 66 ad a0 85 8a 24 ce 2c 2c b6 c4 d6 a7 19 59 25 a5 39 9e e8 b9 30 97 58 f4 bc d8 3d 7c c6 f8 ec 66 72 5b 4e aa a5 71 64 2f 82 9f 75 b2 f6 e2 81 84 69 e3 6d 2c 07 69 b1 13 5b e0 b9 b4 39 c8 90 c5 6f 6b 25 09 80 6a e4 d6 61 75 43 d7 88 07 2f 04 66 3c aa 83 c5 89 a4 c9 cd d4 a6 0d b0 6e 48 42 d1 31 22 d1 7f 21 44 c0 88 98 b5 ab bf e6 d3 57 62 6a 6a 6f d6 5e e8 16 9b c9 6d 39 a9 a4 11 1f 89 5a 4b c9 cd 31 93 c3 11 a6 d9 45 cf 02 41 d3 83 8b 27 8c 88 64 18 68 a1 44 9a 6b 82 15 3d 6d 5c 55 42 c0 31 2a 0f b3 3c 58 ba 08 d0 91 46 8d e5 64 fb 21 18 39 b1 6b cc 3d 84 e1 30 fd 68 ff 05 e6 81 2f 6b 62 79 65 58 d6 9b e0 54 5c 6c 53 66 69 d9 ff 36 2f a4 c2 ba cd b0 e1 4e 39 a9 ee a9 46 4b Data Ascii: +)LkkrDPHv)}f$,,Y%90X=\|fr[Nqd/uim,i[9ok%jauC/f<nHB1"!DWbjjo^m9ZK1EA'dhDk=m\UB1*<XFd!9k=0h/kbyeXT\lSfi6/N9FK
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 5a 1c b7 3e c8 6d 34 a7 53 26 33 f7 94 93 93 4c 1c 06 12 73 73 73 72 e1 c2 85 9d 81 69 e2 37 46 e1 ab 39 a5 a5 fb a7 04 e2 b8 61 cb 03 29 de 8f c2 e3 37 c6 f1 e9 e2 7d 21 9b c6 58 39 11 b0 d1 1d 83 84 16 b9 fc a2 49 e7 c8 25 62 40 cb de 93 61 e9 a0 36 ce 2c 82 68 97 74 09 3c 19 a9 b4 79 b6 3e 6f 3c 01 97 b9 e6 da 94 a7 e4 02 24 96 c0 1d e1 98 0b ce a7 59 b2 b4 04 2c a4 7a c9 ed 1d e1 4f bb cc 0e 2c 6c b8 36 8d 82 26 3e d6 21 12 1d 10 f3 f3 f3 b2 b4 b4 54 04 76 fd b6 fd 1c fe 9e 5d b3 eb fa df 5f 63 e1 11 90 2d 1e fb 1d 85 41 40 8f c8 02 ad 15 96 2e 6a df cc 35 e4 ef 25 72 58 61 64 09 d8 7d db 9b 81 80 e9 f7 23 20 00 22 18 b2 a5 a8 16 d7 fe 2b f1 23 d1 fb 23 38 f4 a3 71 2c 9e 9d f8 8a 4a 81 bf 1e bd ab 02 5d 58 02 84 e9 f3 f7 e2 ad 1e 5b fd 14 b9 c3 32 b8 Data Ascii: Z>m4S&3Lsssri7F9a)7}!X9I%b@a6,ht<y>o<$Y,zO,l6&>!Tv]_c-A@.j5%rXad}# "+##8q,J]X[2
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 2c 7f fb 36 02 d0 ff 1e 20 2c 1d af e5 a1 1f d9 06 8c 69 71 7e 80 d8 ff e4 e6 6c c4 4d 70 e2 c0 44 f0 67 ed e9 89 82 cd 35 f8 b2 23 29 5a 5a 7e 5e 89 b9 ce 98 85 23 c4 da f1 04 8c e9 f8 32 fa 72 98 b5 e7 b5 4e b4 62 2c 0e 92 88 90 b9 14 3c ee c2 1f 73 8e 75 f2 e2 c9 51 9c c5 c2 ea ea 2d 21 6f f1 44 04 68 c4 84 0a 8d ef 97 d8 47 ed 1a 92 3a 5a 0d 38 ef 60 5a bf f6 5d bb 6f c2 26 ea f1 3f ae 10 c3 3e 89 73 26 de 85 e5 fb bb f5 6f 2b 8f fd f6 1f 75 73 d9 ff ba 1e 83 92 25 78 5a e5 a4 92 c6 ce 53 46 73 db c0 57 3f 5b 5b 5b 3b bf 3d 48 1b 78 e0 1c c4 10 56 2c 79 8d 16 35 66 4b 43 d3 54 13 59 3f 9a 9f 7e f4 37 ba b0 bc 06 66 1d 5d 3b f1 e2 e2 e2 ae 01 a0 d7 74 f2 4f bf ed bf 5d 4b b5 0f d7 06 86 0d 34 af e5 21 c8 a3 ab 87 69 c7 08 6c 0c 7c 85 cc 6b 94 f2 c1 b6 Data Ascii: ,6 ,iq~lMpDg5#)ZZ~^#2rNb,<suQ-!oDhG:Z8`Z]o&?>s&o+us%xZSFsW?[[[;=HxV,y5fKCTY?~7f];tO]K4!il\|k
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: dc c9 e0 7b 4d c1 0a 24 2c 13 03 d7 92 c6 79 d0 ed d4 e6 5e f4 7b 2f 82 20 c8 b4 74 ef 76 13 42 36 1e 84 50 33 cf 64 03 1e fa f1 91 4c 50 e3 8d 48 03 5d 39 fa ac 87 b0 74 d6 87 f7 cf 1f eb d1 f4 5c 2c 6c e4 c6 62 84 e1 ef f9 e7 c6 fe 97 9e 29 b3 66 7d 9b 96 2c 13 01 85 47 dc 42 0c 7f 0d c3 7b cb c5 93 bf bf e6 e7 95 f4 b7 02 bd 5a 13 3e 3d 1d db 6a 81 28 69 a8 02 f8 99 cf 7c 46 3e f6 b1 8f 55 ee ab cb 97 2f 57 e3 b9 9e e4 ae f2 55 2f 84 f5 8f 7e bf 3f 98 9b 9b fb 7b 9d 4e e7 7f 62 75 9c c9 48 4e f4 92 db ba 33 3e 35 1c 0e bf 6e 73 73 f3 cb fb fd fe f7 6f 6e 6e fe 65 1b 94 4a 04 1f ff f8 c7 e5 13 9f f8 44 e5 86 fa d0 87 3e 24 df fa ad df 5a 11 87 92 83 6a 30 6a 0a fb d5 26 3a 00 d4 04 ee c0 91 09 d2 60 15 30 4d f5 30 ea 8f 82 e0 1b 11 56 a4 e1 e2 7f 03 cc Data Ascii: {M$,y^{/ tvB6P3dLPH]9t\,lb)f},GB{Z>=j(i\|F>U/WU/~?{NbuHN3>5nssonneJD>$Zj0j&:`0M0V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49739	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:02 UTC	2124	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:02 UTC	756	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:02 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Tue, 07 Jan 2025 14:32:14 GMT ETag: "677d3aee-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rO5WY0T3MPnGy%2BL8WQ94SmuKcEximUIXK5o4HJeBt6E9gMiskNNrrEH6Z8ZVLA4TcZlesEBcAaWqddzQVqEq%2Fo%2BQnYO%2Bwjf5onP7m49C%2FeKX9Dk3ZM5N%2BUiXcWBwo4eYNe0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27007fd34303-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 12 Jan 2025 16:48:02 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2025-01-10 16:48:02 UTC	613	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2025-01-10 16:48:02 UTC	626	IN	Data Raw: 2e 68 72 65 66 2c 61 2b 6c 2e 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6c 29 3b 61 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 64 2c 6f 29 7d 7d 63 61 74 63 68 28 68 29 7b 65 28 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 66 6f 72 28 76 61 72 20 Data Ascii: .href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49740	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:02 UTC	2095	OUT	GET /js/app.js?id=a5d2a03ff186afa79e79 HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:02 UTC	910	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:02 GMT Content-Type: application/javascript Content-Length: 568463 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:56 GMT ETag: "610d46b0-8ac8f" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 669 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kupX4RtbHXMn%2BNywOimAPWRdv7hwpC8lYLjzj%2FzC2jnICnkpShwJPqEOy3oq4wu73r49XrBD8wLKTVkLsK5qfg0tPNonP%2FXR2GTK13E410g2sW76nm6fBCGwI9sgJS42rlM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27008a5442b2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1858&min_rtt=1852&rtt_var=706&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2673&delivery_rate=1536033&cwnd=236&unsent_bytes=0&cid=47e228e6f93cb39e&ts=135&x=0"
2025-01-10 16:48:02 UTC	459	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 69 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 65 2c 69 2e 63 3d 74 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 2e 6f 28 65 2c Data Ascii: /! For license information please see app.js.LICENSE.txt /!function(e){var t={};function i(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 69 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 31 26 74 26 26 28 65 3d 69 28 65 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 69 2e 72 28 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 32 26 74 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 72 20 Data Ascii: __esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 53 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 28 32 32 34 26 65 5b 74 2b 35 5d 29 3e 3e 35 2c 6e 3d 65 5b 74 2b 34 5d 3c 3c 33 3b 72 65 74 75 72 6e 20 36 31 34 34 26 65 5b 74 2b 33 5d 7c 6e 7c 69 7d 2c 70 61 72 73 65 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 3d 3d 22 49 22 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 26 26 65 5b 74 2b 31 5d 3d 3d 3d 22 44 22 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 26 26 65 5b 74 2b 32 5d 3d 3d 3d 22 33 22 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3f 22 74 69 6d 65 64 2d 6d 65 74 61 64 61 74 61 22 3a 21 30 26 65 5b 74 5d 26 26 32 34 30 3d 3d 28 32 34 30 26 65 5b 74 2b 31 5d 29 3f 22 61 75 64 69 6f 22 3a 6e 75 6c 6c 7d 2c 70 61 72 73 65 53 61 6d Data Ascii: Size:function(e,t){var i=(224&e[t+5])>>5,n=e[t+4]<<3;return 6144&e[t+3]\|n\|i},parseType:function(e,t){return e[t]==="I".charCodeAt(0)&&e[t+1]==="D".charCodeAt(0)&&e[t+2]==="3".charCodeAt(0)?"timed-metadata":!0&e[t]&&240==(240&e[t+1])?"audio":null},parseSam
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 76 61 72 20 65 3d 31 30 30 2c 74 3d 33 2c 72 3d 30 2c 61 3d 31 30 30 2c 73 3d 30 2c 6f 3d 31 30 30 2c 75 3d 22 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 68 69 73 2c 7b 77 69 64 74 68 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 6e 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 57 69 64 74 68 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 30 20 61 6e 64 20 31 30 30 2e 22 29 3b 65 3d 74 7d 7d 2c 6c 69 6e 65 73 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f Data Ascii: var e=100,t=3,r=0,a=100,s=0,o=100,u="";Object.defineProperties(this,{width:{enumerable:!0,get:function(){return e},set:function(t){if(!n(t))throw new Error("Width must be between 0 and 100.");e=t}},lines:{enumerable:!0,get:function(){return t},set:functio
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 65 63 74 2e 63 72 65 61 74 65 20 73 68 69 6d 20 6f 6e 6c 79 20 61 63 63 65 70 74 73 20 6f 6e 65 20 70 61 72 61 6d 65 74 65 72 2e 22 29 3b 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2c 6e 65 77 20 65 7d 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 22 50 61 72 73 69 6e 67 45 72 72 6f 72 22 2c 74 68 69 73 2e 63 6f 64 65 3d 65 2e 63 6f 64 65 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 74 7c 7c 65 2e 6d 65 73 73 61 67 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 69 2c 6e 29 7b 72 65 74 75 72 6e 20 33 36 30 30 2a 28 30 7c 65 29 2b 36 30 2a 28 30 7c 74 29 2b 28 30 7c 69 29 2b 28 30 7c 6e 29 2f 31 65 33 7d 76 61 72 20 69 3d 65 2e 6d 61 74 63 68 28 2f 5e 28 Data Ascii: ect.create shim only accepts one parameter.");return e.prototype=t,new e}}();function a(e,t){this.name="ParsingError",this.code=e.code,this.message=t\|\|e.message}function s(e){function t(e,t,i,n){return 3600(0\|e)+60(0\|t)+(0\|i)+(0\|n)/1e3}var i=e.match(/^(
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 6e 74 28 65 2c 61 5b 30 5d 29 2c 32 3d 3d 3d 61 2e 6c 65 6e 67 74 68 26 26 6e 2e 61 6c 74 28 22 70 6f 73 69 74 69 6f 6e 41 6c 69 67 6e 22 2c 61 5b 31 5d 2c 5b 22 73 74 61 72 74 22 2c 22 63 65 6e 74 65 72 22 2c 22 65 6e 64 22 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 69 7a 65 22 3a 6e 2e 70 65 72 63 65 6e 74 28 65 2c 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 6c 69 67 6e 22 3a 6e 2e 61 6c 74 28 65 2c 74 2c 5b 22 73 74 61 72 74 22 2c 22 63 65 6e 74 65 72 22 2c 22 65 6e 64 22 2c 22 6c 65 66 74 22 2c 22 72 69 67 68 74 22 5d 29 7d 7d 29 2c 2f 3a 2f 2c 2f 5c 73 2f 29 2c 74 2e 72 65 67 69 6f 6e 3d 6e 2e 67 65 74 28 22 72 65 67 69 6f 6e 22 2c 6e 75 6c 6c 29 2c 74 2e 76 65 72 74 69 63 61 6c 3d 6e 2e 67 65 74 28 22 76 65 72 74 69 63 61 6c 22 2c 22 22 29 3b 74 Data Ascii: nt(e,a[0]),2===a.length&&n.alt("positionAlign",a[1],["start","center","end"]);break;case"size":n.percent(e,t);break;case"align":n.alt(e,t,["start","center","end","left","right"])}}),/:/,/\s/),t.region=n.get("region",null),t.vertical=n.get("vertical","");t
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 74 28 74 29 29 3e 3d 30 26 26 74 3c 3d 31 30 30 29 26 26 28 74 68 69 73 2e 73 65 74 28 65 2c 74 29 2c 21 30 29 7d 7d 3b 76 61 72 20 63 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 65 78 74 61 72 65 61 22 29 2c 68 3d 7b 63 3a 22 73 70 61 6e 22 2c 69 3a 22 69 22 2c 62 3a 22 62 22 2c 75 3a 22 75 22 2c 72 75 62 79 3a 22 72 75 62 79 22 2c 72 74 3a 22 72 74 22 2c 76 3a 22 73 70 61 6e 22 2c 6c 61 6e 67 3a 22 73 70 61 6e 22 7d 2c 64 3d 7b 77 68 69 74 65 3a 22 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 22 2c 6c 69 6d 65 3a 22 72 67 62 61 28 30 2c 32 35 35 2c 30 2c 31 29 22 2c 63 79 61 6e 3a 22 72 67 62 61 28 30 2c 32 35 35 2c 32 35 35 2c 31 29 22 2c 72 65 64 3a 22 72 67 62 61 28 32 35 35 2c 30 2c 30 2c 31 29 22 2c 79 65 6c 6c 6f 77 3a 22 Data Ascii: t(t))>=0&&t<=100)&&(this.set(e,t),!0)}};var c=n.createElement("textarea"),h={c:"span",i:"i",b:"b",u:"u",ruby:"ruby",rt:"rt",v:"span",lang:"span"},d={white:"rgba(255,255,255,1)",lime:"rgba(0,255,0,1)",cyan:"rgba(0,255,255,1)",red:"rgba(255,0,0,1)",yellow:"
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 20 6e 3d 74 3f 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 3a 22 63 6f 6c 6f 72 22 2c 72 3d 64 5b 69 5d 3b 67 2e 73 74 79 6c 65 5b 6e 5d 3d 72 7d 7d 29 29 2c 67 2e 63 6c 61 73 73 4e 61 6d 65 3d 5f 2e 6a 6f 69 6e 28 22 20 22 29 7d 6d 2e 70 75 73 68 28 79 5b 31 5d 29 2c 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 67 29 2c 6c 3d 67 7d 72 65 74 75 72 6e 20 75 7d 76 61 72 20 67 3d 5b 5b 31 34 37 30 2c 31 34 37 30 5d 2c 5b 31 34 37 32 2c 31 34 37 32 5d 2c 5b 31 34 37 35 2c 31 34 37 35 5d 2c 5b 31 34 37 38 2c 31 34 37 38 5d 2c 5b 31 34 38 38 2c 31 35 31 34 5d 2c 5b 31 35 32 30 2c 31 35 32 34 5d 2c 5b 31 35 34 34 2c 31 35 34 34 5d 2c 5b 31 35 34 37 2c 31 35 34 37 5d 2c 5b 31 35 34 39 2c 31 35 34 39 5d 2c 5b 31 35 36 33 2c 31 35 36 33 5d 2c 5b 31 35 36 36 Data Ascii: n=t?"background-color":"color",r=d[i];g.style[n]=r}})),g.className=_.join(" ")}m.push(y[1]),l.appendChild(g),l=g}return u}var g=[[1470,1470],[1472,1472],[1475,1475],[1478,1478],[1488,1514],[1520,1524],[1544,1544],[1547,1547],[1549,1549],[1563,1563],[1566
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 2c 31 32 36 35 35 37 5d 2c 5b 31 32 36 35 35 39 2c 31 32 36 35 35 39 5d 2c 5b 31 32 36 35 36 31 2c 31 32 36 35 36 32 5d 2c 5b 31 32 36 35 36 34 2c 31 32 36 35 36 34 5d 2c 5b 31 32 36 35 36 37 2c 31 32 36 35 37 30 5d 2c 5b 31 32 36 35 37 32 2c 31 32 36 35 37 38 5d 2c 5b 31 32 36 35 38 30 2c 31 32 36 35 38 33 5d 2c 5b 31 32 36 35 38 35 2c 31 32 36 35 38 38 5d 2c 5b 31 32 36 35 39 30 2c 31 32 36 35 39 30 5d 2c 5b 31 32 36 35 39 32 2c 31 32 36 36 30 31 5d 2c 5b 31 32 36 36 30 33 2c 31 32 36 36 31 39 5d 2c 5b 31 32 36 36 32 35 2c 31 32 36 36 32 37 5d 2c 5b 31 32 36 36 32 39 2c 31 32 36 36 33 33 5d 2c 5b 31 32 36 36 33 35 2c 31 32 36 36 35 31 5d 2c 5b 31 31 31 34 31 30 39 2c 31 31 31 34 31 30 39 5d 5d 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 66 6f 72 28 76 Data Ascii: ,126557],[126559,126559],[126561,126562],[126564,126564],[126567,126570],[126572,126578],[126580,126583],[126585,126588],[126590,126590],[126592,126601],[126603,126619],[126625,126627],[126629,126633],[126635,126651],[1114109,1114109]];function v(e){for(v
2025-01-10 16:48:02 UTC	1369	IN	Data Raw: 67 6e 2c 66 6f 6e 74 3a 69 2e 66 6f 6e 74 2c 77 68 69 74 65 53 70 61 63 65 3a 22 70 72 65 2d 6c 69 6e 65 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 2c 74 68 69 73 2e 61 70 70 6c 79 53 74 79 6c 65 73 28 6e 29 2c 74 68 69 73 2e 64 69 76 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 63 75 65 44 69 76 29 3b 76 61 72 20 72 3d 30 3b 73 77 69 74 63 68 28 74 2e 70 6f 73 69 74 69 6f 6e 41 6c 69 67 6e 29 7b 63 61 73 65 22 73 74 61 72 74 22 3a 72 3d 74 2e 70 6f 73 69 74 69 6f 6e 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 65 6e 74 65 72 22 3a 72 3d 74 2e 70 6f 73 69 74 69 6f 6e 2d 74 2e 73 69 7a 65 2f 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 65 6e 64 22 3a 72 3d 74 2e 70 6f 73 69 74 69 6f 6e 2d 74 2e 73 69 7a 65 7d 22 22 3d 3d 3d 74 2e 76 65 Data Ascii: gn,font:i.font,whiteSpace:"pre-line",position:"absolute"},this.applyStyles(n),this.div.appendChild(this.cueDiv);var r=0;switch(t.positionAlign){case"start":r=t.position;break;case"center":r=t.position-t.size/2;break;case"end":r=t.position-t.size}""===t.ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49745	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:02 UTC	2281	OUT	GET /pixels/maxweb-click?key=n9p3OB1R7PyQJqSfT9ZNPLkvMDVT7ZpR HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:03 UTC	1348	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; expires=Mon, 20-Jan-2025 16:48:02 GMT; Max-Age=864000; path=/; samesite=lax Set-Cookie: _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; expires=Mon, 20-Jan-2025 16:48:02 GMT; Max-Age=864000; path=/; httponly; samesite=lax Set-Cookie: referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9PSIsInZhbHVlIjoidC9sMHQxaGhyV1BiYUFsSnZmd2tBUWUwcHlVS0p0N0NocGcwMmJud2h4a1JaeTVhS21sTFhoV3ZncDhuZXF0TDJab2FTTDJhWThocGRPMDlDd2RvaVhPcWR0K0xJYkFUWVNuK3JlQkpSRGtHM0RmeU1RS1QxZXVHRjJJN3k5Znp5SkVyR09wSVhROXFpc3lSVlVPZEJRPT0iLCJtYWMiOiI0OTRkOTFhOTNiM2YzYzQ2ZTBlMWM4YTFjMTU4YTBlODUwMTRiMWFkYzJiY2Q4Y2RkZTk2ZDU2ZGFlYmM5ZmZkIn0%3D; expires=Wed, 15-Jan-2025 16:48:02 GMT; Max-Age=432000; path=/; httponly; samesite=lax
2025-01-10 16:48:03 UTC	1024	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 69 78 65 6c 73 3d 65 79 4a 70 64 69 49 36 49 6a 68 52 64 44 4a 58 64 58 4a 73 55 6e 68 6c 65 46 42 33 63 6d 35 4e 63 47 78 34 4d 32 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 32 38 76 62 54 42 31 55 55 56 59 62 57 31 49 55 32 31 73 65 48 56 74 65 45 5a 54 4c 33 4e 42 54 58 5a 53 62 6c 6f 79 52 6d 64 50 57 6c 5a 70 54 30 4d 77 52 7a 56 58 56 44 64 6d 51 57 39 71 61 46 68 79 53 48 6c 73 51 6a 46 68 52 6c 56 74 59 6e 4e 52 63 69 49 73 49 6d 31 68 59 79 49 36 49 6d 46 69 4f 54 63 34 4e 7a 56 6c 4e 7a 41 32 4e 54 45 31 4d 44 45 7a 4d 54 63 35 5a 57 49 31 4e 6d 55 7a 4d 44 64 6b 4e 6d 55 30 4f 54 6b 79 4e 6d 51 31 4d 32 49 34 5a 54 6c 69 5a 47 4d 79 4e 7a 49 79 4d 57 55 31 59 32 49 32 5a 44 51 32 4d 44 63 78 Data Ascii: Set-Cookie: pixels=eyJpdiI6IjhRdDJXdXJsUnhleFB3cm5NcGx4M2c9PSIsInZhbHVlIjoib28vbTB1UUVYbW1IU21seHVteEZTL3NBTXZSbloyRmdPWlZpT0MwRzVXVDdmQW9qaFhySHlsQjFhRlVtYnNRciIsIm1hYyI6ImFiOTc4NzVlNzA2NTE1MDEzMTc5ZWI1NmUzMDdkNmU0OTkyNmQ1M2I4ZTliZGMyNzIyMWU1Y2I2ZDQ2MDcx
2025-01-10 16:48:03 UTC	145	IN	Data Raw: 38 62 0d 0a 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 2e 6d 61 78 77 65 62 2e 63 6f 6d 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 69 66 72 61 6d 65 2f 3f 61 3d 36 39 38 38 26 74 6f 6b 65 6e 3d 65 32 65 33 30 36 64 66 66 63 34 65 30 35 33 63 35 37 65 37 38 35 64 38 33 33 31 38 39 34 64 63 22 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 3e 0a 0d 0a Data Ascii: 8b<iframe src="https://go.maxweb.com/conversion/iframe/?a=6988&token=e2e306dffc4e053c57e785d8331894dc" height="1" width="1" frameborder="0">
2025-01-10 16:48:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49747	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:03 UTC	2147	OUT	GET /images/custom/image10.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:03 UTC	898	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:03 GMT Content-Type: image/png Content-Length: 849972 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-cf834" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4967 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zJ3z6hWeJz59bHi25njLT%2FqfKupVpf65BLsSyWJzMlCq%2FMg5lxUqbGtHZw9NBMkeMYlJFUWNVtaJqWZalJOdyFhFYjl7MlXgkBtaFaeFsQl9cqONMjhO%2Bk1kFC5N4VdY8II%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27044f4742e7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2184&min_rtt=2171&rtt_var=823&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2725&delivery_rate=1345002&cwnd=242&unsent_bytes=0&cid=2d042f682af8fc0c&ts=147&x=0"
2025-01-10 16:48:03 UTC	471	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 01 f4 08 06 00 00 00 ae 28 07 2d 00 00 20 00 49 44 41 54 78 01 ec 9d 77 98 1c 57 95 f6 7b 72 ce b1 bb 27 67 49 a3 1c 46 39 a7 51 18 65 8d 66 34 39 2a db 96 b3 31 c6 36 c9 06 2f 0b 0b 2c 7c ec c7 b7 0b bb cb c2 02 0b cb b2 89 35 d8 18 9b c5 36 4e b2 2c cb 0a 56 ce 92 33 0e d8 e6 fd 9e f7 74 9f 9a db 35 dd 93 25 4b 78 fe 38 cf b9 75 eb d6 ad 5b d5 55 d5 f7 77 cf b9 e7 3a 82 82 82 70 2d 4b 70 70 30 06 23 7a ed 5a 47 48 48 08 28 61 61 61 7d 12 2d 3f 50 ad e7 bd ea 74 68 08 82 43 43 10 14 1e e6 91 c8 70 04 45 86 23 38 2a 02 e1 71 d1 88 4e 4e 40 7c 5a 0a 92 9c e9 08 8b 8d 82 23 22 4c f2 43 a3 22 a0 12 12 11 8e 90 b0 30 a9 87 75 51 06 7a 9f 02 1e 17 16 26 e7 e0 79 ec a2 e7 0c 0a 09 46 6f 62 95 0d Data Ascii: PNGIHDR(- IDATxwW{r'gIF9Qef4916/,\|56N,V3t5%Kx8u[Uw:p-Kpp0#zZGHH(aaa}-?PthCCpE#8qNN@\|Z#"LC"0uQz&yFob
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 7c 1e c7 e3 59 8f 3c db 11 71 08 8b 8a 47 78 74 82 47 62 52 10 1a 9b 82 d0 f8 54 38 12 d2 11 9b 57 8a c4 b2 31 70 55 cc c0 bc 96 76 e4 2c 5a 84 ac 45 8b e0 5e bc 08 ae 45 0b 91 b9 60 11 32 e6 2f 44 c6 c2 45 22 99 8b 16 43 64 c9 12 a4 2f 5e 8c b4 45 4b 2c 49 5f bc 14 94 cc 25 95 22 ae ca 15 70 2f 5b 85 ac e5 ab 91 b5 72 8d 88 ab 6a 0d 28 ee 35 eb 44 b2 d6 6e 00 25 7b fd 46 91 bc 8d 9b 50 5c d7 80 15 f7 7e 46 b6 f3 ab 6b d0 93 14 6c ac 81 29 85 eb 37 61 54 5d 93 88 a4 6b 1b 31 a6 be 19 13 5b 3b 51 d1 b1 5d d2 65 d5 75 18 5d d7 84 69 5b 76 62 62 63 bb 8f 8c ab 6d c2 b4 d6 ad 22 4c 57 df f5 59 54 dd f2 49 8c 5c 5f 8b 82 15 6b 31 a1 a1 0d e3 ea 5b 50 b8 b6 1a 93 db b6 a0 64 dd 26 1f 99 d1 b1 03 15 cd 9d 58 72 c3 ad 98 bf f3 46 4c 6b de 82 31 1b eb 31 b9 be 0d Data Ascii: \|Y<qGxtGbRT8W1pUv,ZE^E`2/DE"Cd/^EK,I_%"p/[rj(5Dn%{FP\~Fkl)7aT]k1[;Q]eu]i[vbbcm"LWYTI\_k1[Pd&XrFLk11
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 2c e8 b4 d0 ab 65 5d 2d e8 bc 16 5a d0 4d 2b 3a ad e9 6a 45 ff a8 2d e8 a5 f3 96 22 6b c2 14 c4 e4 16 c0 91 9c 82 28 a7 07 d2 15 d0 69 41 a7 c5 58 2d bf 43 0d e8 a6 e5 9c e9 cb 6d 41 cf 29 2d 13 e0 8d 4a 4e 41 6c 5a 06 a2 d2 d2 fb 25 84 6e 67 69 29 8a 27 4e 94 fb 92 90 9d 05 42 3b 2d ea ee b2 32 d9 97 3b 7a b4 a4 09 f0 76 20 8f cb 74 82 a2 03 03 1c 2c a0 d0 9a 4f 51 08 57 30 67 9e 96 f1 a7 cb c6 4f 04 07 1d 58 8e c7 d8 25 ab a0 18 99 b9 f9 48 75 65 21 91 e7 48 cb f4 11 82 f5 60 84 70 cf c1 58 42 f6 d8 89 53 2c 2b b8 5a c3 7b d3 04 79 82 38 db 90 9d 5f 0c 02 7f 74 7c 92 58 cf a9 bb c0 dc 63 31 b5 00 5d 2d e8 c3 80 ee 03 e4 76 ab f8 b5 06 e8 61 31 31 88 4d 4e 46 4a 56 16 5c 85 85 c3 16 74 9b c7 82 3f ab f3 50 e6 0d 03 fa 30 a0 0f ca 45 7f a0 03 13 bd 1e 37 Data Ascii: ,e]-ZM+:jE-"k(iAX-CmA)-JNAlZ%ngi)'NB;-2;zv t,OQW0gOX%Hue!H`pXBS,+Z{y8_t\|Xc1]-va11MNFJV\t?P0E7
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: ba 7d c0 a0 bf db fe 06 05 cc bc e1 39 e8 de 01 02 b5 28 2b 38 0e cf 41 f7 cc 41 ff 38 03 3a 21 3d 2a 31 59 46 e4 69 fd 16 49 49 13 2b 7a bc 3b 5b 20 9d 50 ae 20 2e c1 e2 9c 4e 09 22 44 d7 48 82 39 85 1d 3c 1e 4b a8 61 c7 21 38 b4 cb 62 3e 6c 41 f7 04 95 eb f3 08 7d b7 0e 81 ef 1f fc 30 a0 5f 7d 80 1e 1e 93 82 b0 b8 54 04 27 a4 22 d2 95 0b 5a d1 23 b2 0b 31 61 d5 ba 3f 7b 40 9f dc d2 29 ee db 04 f4 29 ad 5b 7c e0 5c 83 af 99 80 5e 7b ef fd 58 7b c7 3d 12 90 ad 78 d5 46 f0 78 42 3e 03 a7 11 f8 ed 80 ae ae e3 4b 77 df 2e 81 e2 ec 16 74 5a b2 2f 27 a0 4f de dc 02 0a 01 9d 70 4e e1 b6 06 a7 1b 6a 40 57 30 b7 f4 d2 55 60 70 38 09 10 37 20 0b 7a 95 04 88 2b 9a bf 42 00 3d b7 62 0e 12 0a 4a 11 9a 96 89 90 e4 54 71 db d6 ef 37 01 9d e0 49 8b 31 61 91 f0 a8 d0 38 Data Ascii: }9(+8AA8:!=*1YFiII+z;[ P .N"DH9<Ka!8b>lA}0_}T'"Z#1a?{@))[\|\^{X{=xFxB>Kw.tZ/'OpNj@W0U`p87 z+B=bJTq7I1a8
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: a0 13 d6 69 c9 ef 0d d0 09 e3 74 e7 57 a1 8b 3b 81 bd 2f 80 4e 48 57 38 ef 1d d0 3d f3 d5 73 17 ad 40 fe fc e5 28 9a bf 0c 0c 10 97 54 32 1a 11 ae 5c 84 a5 66 22 22 35 5d a6 33 71 e0 55 96 c8 8c 8b 43 46 61 a1 c0 27 21 51 e1 9c ba bf 80 ae 96 72 bb be d2 80 9e 91 93 27 cb 8e b1 fd b4 a4 73 fa 4b 7f 84 f7 81 c1 da 18 6c 8e 73 bf f9 3f c8 ff 45 46 64 67 c4 76 c2 ba 06 82 e3 3d 54 b1 ac e9 de e9 32 e6 bd 34 d3 fc a6 a8 28 ac f7 04 e8 bc 9e 88 b8 44 38 42 c3 65 3a 99 82 bb e9 d6 6e a6 75 f0 23 d0 40 67 7f f3 39 90 cb 65 d2 86 ca c5 9d 41 e3 d8 06 7a 4d 78 06 6b bc 86 83 61 40 ef 97 a5 5b 2d df 04 60 5a 2a 39 58 91 57 50 34 a0 3a b4 2e ea fe 5a 4c fd 95 ef 09 d0 af b4 05 3d 81 fd d8 b0 08 6b a9 33 7f ed bd 9c 79 c3 cb ac d9 a3 c8 7f 44 60 ae 10 a9 40 a8 db fd Data Ascii: itW;/NHW8=s@(T2\f""5]3qUCFa'!Qr'sKls?EFdgv=T24(D8Be:nu#@g9eAzMxka@[-`Z*9XWP4:.ZL=k3yD`@
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: f4 6b 14 5c 76 28 a4 e3 61 b9 f1 79 97 de ba 4c 80 ee 70 84 7e e4 80 1e 15 1b 29 80 4e 30 77 04 0f 03 3a 3b 5c ec 0c 7f 9c 00 9d cf 3c 3b 92 ec dc 13 d0 23 63 93 11 19 ef 05 74 76 9e 13 52 10 9c ee 42 d1 ac b9 48 9f 32 05 e9 33 a6 c3 39 77 ae 0d d0 2b 3f 72 40 a7 e5 5c e1 7c 64 53 0b 7a 03 f4 31 f5 cd 18 55 5d 2f ee da 0c ec 46 eb 39 01 9d 69 02 3a a1 bc 0b d0 b7 61 42 f3 36 8c 67 00 b6 26 02 fb 36 4c 6a d8 8a 4d 9f fa 22 6a ee fa 22 a6 d6 6e 43 c9 b2 1a 1f 40 1f d7 b4 5d 00 3d 77 75 8d 00 7a d1 ba 3a 10 ce 2b 3a 76 0a 9c af b8 fd 6e 54 b4 ed 40 f9 a6 26 4c 6c ec 14 37 78 42 7f 45 d3 76 cc 68 bf 1e 73 3b 6f b4 00 9d a0 3e ad 7e 1b a6 37 6e b5 00 9d 69 02 7a e9 ca 0d 18 28 a0 13 c8 c7 ac af b3 e6 a5 2b a0 33 60 1c a3 ba 2b 9c 07 02 74 82 79 e1 da 6a 4b 08 Data Ascii: k\v(ayLp~)N0w:;\<;#ctvRBH239w+?r@\\|dSz1U]/F9i:aB6g&6LjM"j"nC@]=wuz:+:vnT@&Ll7xBEvhs;o>~7niz(+3`+tyjK
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: c2 35 61 22 32 27 4f 41 e6 74 8f 05 3d 7b c9 62 f8 07 74 0f 9c f7 05 d0 09 e7 43 0d e8 84 f3 31 6d 1d a0 15 dd 84 73 a6 09 e8 85 eb 37 49 90 38 2e af 46 40 1f 5b d3 e8 17 d0 cd f9 e7 92 f6 ba bb 13 da 09 e7 d3 1a b6 a0 fe 93 f7 a3 f9 ce 2f 60 6e 4d 27 ca 97 6e c0 94 8d 2d a0 eb f9 d8 f5 8d 98 5a df 89 59 4d 5b 50 b6 7c 1d c6 ae ad 45 f9 aa 4d 98 df ba 0d f3 5a b6 62 e3 ad 77 61 fd cd 77 62 5e 53 27 26 af af c3 cc cd ad 18 bb ba 1a 33 36 b7 cb 31 f3 da 76 62 d1 96 eb 05 c2 67 34 10 c6 3d 22 80 de bc d5 02 f4 91 2b bd 16 74 03 d0 a7 d6 b7 0a a0 d3 6d 9d 03 00 84 6e 82 38 21 bc 37 40 57 0b 3a 21 5e 97 5d 23 9c ab cb 3b 21 5d 03 c4 f5 07 d0 09 e4 26 98 f7 07 d0 09 eb 0a e8 85 95 cb 50 b8 68 09 dc 53 a7 23 71 44 b9 04 88 a3 05 3d 22 35 13 b1 e9 59 88 4a cd 44 Data Ascii: 5a"2'OAt={btC1ms7I8.F@[/`nM'n-ZYM[P\|EMZbwawb^S'&361vbg4="+tmn8!7@W:!^]#;!]&PhS#qD="5YJD
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 99 0e 04 e8 6a e1 d6 3a cc 3f 1a eb 1a 42 fc 7f 5c cc 0f 8e 96 55 ad f5 68 5b 55 eb 07 d1 d4 fa 71 14 4d 20 57 09 09 97 8e 8f cc 87 f3 a6 d9 69 f0 e9 38 7c c4 16 74 f3 1e 48 3a d4 21 c1 dd d4 22 de 5f cd 39 e8 57 d2 c5 fd 5a 01 74 76 84 f9 5c d8 3b 94 7d ed 18 2a 98 ab 56 30 57 6d 07 73 dd ee 09 d0 b9 8f e5 14 16 4c ad 1d 6a cb f2 d5 07 40 27 a4 ab 9b bb 09 e8 02 1d b1 b4 8c 25 75 01 7a 52 12 5c e3 26 20 3c 27 1f 71 23 cb 91 39 7d 26 72 17 2f 96 79 c1 3d 01 ba c2 79 c6 b2 d5 a0 d8 5d dc ed 80 ee 5a bd 16 94 ac b5 1b 7c 24 7b fd 46 50 b8 8c 1a 2d e3 ab 3f 7f 3f b8 c4 9a 82 b9 6a 42 f9 f8 f6 2d 22 4c 2b c0 53 8b 05 bd a6 4e 74 79 43 b3 00 ba 58 83 37 35 60 46 c7 0e 54 34 77 c2 17 d0 eb 30 b5 b9 d5 23 0a ea f5 ad a8 d8 dc 80 99 f5 2d 58 dc ba 15 cd b7 dd 8d Data Ascii: j:?B\Uh[UqM Wi8\|tH:!"_9WZtv\;}*V0WmsLj@'%uzR\& <'q#9}&r/y=y]Z\|${FP-??jB-"L+SNtyCX75`FT4w0#-X
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 73 20 40 37 bf 51 b4 a0 73 0e bb 04 de 8b 8c b6 00 5d 21 5d 41 5d 06 48 e8 f2 1e c0 82 ae df 51 a7 3b 17 51 0c 12 17 44 ef 3d cf 8a 29 56 bc 17 c3 8a 7e b9 2c e8 6c 87 b9 cc 9a 35 58 af 83 f6 36 ad ed a6 e6 ef cc fb cc e3 99 a6 3b 38 23 c1 f3 3e f3 9e 12 d0 f9 bc f1 d9 23 74 d3 82 6e 07 74 05 f5 64 77 2e 28 04 74 fe 0f 12 d0 e5 be 7b 97 67 b3 e6 38 f7 3a a7 dc 37 56 8f 6f bf 28 30 a0 2b 90 fb e8 88 18 c4 a6 39 e1 88 a4 c7 46 84 67 39 4e 5e 73 78 a4 25 0a a8 97 53 cb fc df ab 24 8a 3b 61 53 01 9d 69 bd 6e ed 5f da 5d dc 15 d0 2d ed f5 88 d0 7e a8 09 af 7d 49 9b 00 c9 73 13 d0 a9 19 c5 dd dc d7 ad 9f e8 ed 43 f7 e5 1c 9e 32 fd b7 a0 5f 0d 80 ce 7b a0 80 ee 7b 3f 7c a3 ad 5f ae 7d c3 80 3e 0c e8 7e a7 38 28 a8 06 02 74 ce 41 67 d4 f6 81 00 3a c1 3c 32 3a 4a Data Ascii: s @7Qs]!]A]HQ;QD=)V~,l5X6;8#>#tntdw.(t{g8:7Vo(0+9Fg9N^sx%S$;aSin_]-~}IsC2_{{?\|_}>~8(tAg:<2:J
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: f3 17 2f e2 12 80 27 8f 1e c5 53 c7 8e e1 d0 2b af e2 e8 6b af e3 c5 93 67 70 f8 fc 25 1c 3a 77 01 47 5f 79 0d 2f 1c 3f 8e 3d 47 8f e2 f0 85 0b f8 d9 c3 0f e1 57 4f 3e 89 67 5f 7e 19 ff fb c2 5e 3c fc f4 53 f8 cf 47 1f c5 ef 9e df 87 9f fd f2 61 3c fa cc 1e fc e8 bf 1f c4 6f 9e df 8b 87 9e db 83 97 5f 7f 1d 07 5f 7d 1d 7b cf 9e c7 ff 1e 3c 2c b2 f7 cc 45 ec 3b ff 0a 9e 78 f9 04 0e bc f6 16 4e fc f1 43 1c 7e fb 3d fc e8 d1 27 70 fb 57 bf 89 a6 4f de 83 ca 2d bb 30 bf 75 8b b8 e1 2f df 75 13 aa 6e b8 4d 82 cd cd 69 d9 8e 8a da 16 b1 98 d3 6a 3e a7 65 27 e6 b6 ee 92 88 f0 53 37 77 58 80 ae c1 e8 4c ad 11 e4 a7 36 6d 15 0b 3a a7 05 d0 82 ae 6b 9f 9b 9a 96 74 2e 5f b7 f0 c6 5b c5 1a ae 51 dc 4d 28 37 d7 46 37 f3 75 3e 3a ad e8 9a f6 e8 95 e0 f3 c5 81 20 ce 41 Data Ascii: /'S+kgp%:wG_y/?=GWO>g_~^<SGa<o__}{<,E;xNC~='pWO-0u/unMij>e'S7wXL6m:kt._[QM(7F7u>: A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49749	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:03 UTC	739	OUT	GET /track/?a=6802&firstcookie=0&tracking_redirect=&referrer=&sessid2=&product=prod7,prod8,prod9,prod11&caller_url=https%3A%2F%2Fnervedefend.com%2Freport%3Faff_id%3D1270%26subid2%3D6988_sessid20250110164723474%26subid%3D2566 HTTP/1.1 Host: tracking.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nervedefend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:03 UTC	1326	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-credentials: true p3p: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE" cache-control: no-cache, must-revalidate pragma: no-cache expires: Tue, Jan 12 1999 01:01:01 GMT set-cookie: spiaffid_6802=1270; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:48:03 GMT; Secure vary: Accept-Encoding x-server: WEB_6 strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: DYNAMIC Set-Cookie: spisubid_6802=2566%7C6988_sessid20250110164723474; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:48:03 GMT; Secure Set-Cookie: spicampaign_id_6802=; Domain=.buygoods.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure Set-Cookie: spireferrer_6802=; Domain=.buygoods.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure Set-Cookie: spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:48:03 GMT; Secure Set-Cookie: spisessid2_6802=sessid20250110164829858; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:48:03 GMT; Secure
2025-01-10 16:48:03 UTC	333	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 70 69 5f 66 75 6e 6e 65 6c 5f 63 6f 64 65 6e 61 6d 65 5f 36 38 30 32 3d 3b 20 44 6f 6d 61 69 6e 3d 2e 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 6c 62 3d 30 32 44 69 75 45 4a 67 55 50 6d 6e 6b 4b 57 35 4a 45 54 4e 74 56 4a 47 5a 58 31 4e 62 7a 47 53 38 43 6e 62 4b 58 55 76 73 55 63 71 32 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 53 61 74 2c 20 31 31 2d 4a 61 6e 2d 32 35 20 31 35 3a 34 38 3a 30 33 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 72 76 Data Ascii: Set-Cookie: spi_funnel_codename_6802=; Domain=.buygoods.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SecureSet-Cookie: __cflb=02DiuEJgUPmnkKW5JETNtVJGZX1NbzGS8CnbKXUvsUcq2; SameSite=Lax; path=/; expires=Sat, 11-Jan-25 15:48:03 GMT; HttpOnlyServ
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 31 62 33 30 0d 0a 0a 76 61 72 20 73 70 69 74 6f 64 61 79 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 76 61 72 20 73 70 69 65 78 70 69 72 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 73 70 69 65 78 70 69 72 65 2e 73 65 74 54 69 6d 65 28 73 70 69 74 6f 64 61 79 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 33 36 30 30 30 30 30 2a 32 34 2a 39 30 29 3b 0a 0a 2f 2f 20 47 65 74 20 68 6f 73 74 6e 61 6d 65 20 77 69 74 68 6f 75 74 20 74 68 65 20 73 75 62 64 6f 6d 61 69 6e 0a 2f 2f 0a 2f 2f 20 54 68 65 20 6d 65 74 68 6f 64 20 6c 6f 6f 6b 73 20 61 74 20 74 68 65 20 73 65 63 6f 6e 64 2d 6c 65 76 65 6c 20 64 6f 6d 61 69 6e 20 66 6f 72 20 63 6f 6d 6d 6f 6e 20 6f 6e 65 73 2c 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 69 66 20 77 65 20 6e 65 65 64 20 74 68 65 0a 2f 2f 20 6c Data Ascii: 1b30var spitoday = new Date();var spiexpire = new Date();spiexpire.setTime(spitoday.getTime() + 36000002490);// Get hostname without the subdomain//// The method looks at the second-level domain for common ones, to determine if we need the// l
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 73 69 64 3d 22 2b 65 73 63 61 70 65 28 22 32 35 36 36 7c 36 39 38 38 5f 73 65 73 73 69 64 32 30 32 35 30 31 31 30 31 36 34 37 32 33 34 37 34 22 29 2b 22 3b 65 78 70 69 72 65 73 3d 22 2b 73 70 69 65 78 70 69 72 65 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 22 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 22 2b 68 6f 73 74 6e 61 6d 65 3b 0a 09 09 09 09 09 0a 09 09 09 09 09 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 63 61 6d 70 61 69 67 6e 5f 69 64 3d 22 2b 65 73 63 61 70 65 28 22 22 29 2b 22 3b 65 78 70 69 72 65 73 3d 22 2b 73 70 69 65 78 70 69 72 65 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 22 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 22 2b 68 6f 73 74 6e 61 6d 65 3b 0a 09 09 09 Data Ascii: document.cookie = "sid="+escape("2566\|6988_sessid20250110164723474")+";expires="+spiexpire.toGMTString()+";path=/;domain="+hostname;document.cookie = "campaign_id="+escape("")+";expires="+spiexpire.toGMTString()+";path=/;domain="+hostname;
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 36 34 38 32 39 38 35 38 22 29 2b 22 26 22 3b 0a 0a 76 61 72 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 63 62 64 20 3d 20 22 62 75 79 67 6f 6f 64 73 68 6f 6d 65 6f 69 6c 73 2e 63 6f 6d 25 32 46 73 65 63 75 72 65 25 32 46 25 33 46 22 3b 0a 76 61 72 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 63 62 64 20 3d 20 22 62 75 79 67 6f 6f 64 73 68 6f 6d 65 6f 69 6c 73 2e 63 6f 6d 2f 73 65 63 75 72 65 2f 3f 22 3b 0a 76 61 72 20 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 63 62 64 20 3d 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 63 62 64 2b 22 73 65 73 73 69 64 32 3d 22 2b 65 73 63 61 70 65 28 22 73 65 73 73 69 64 32 30 32 35 30 31 31 30 31 36 34 38 32 39 38 35 38 22 29 2b 22 26 22 3b 0a 0a 76 61 72 20 73 70 69 5f 70 61 74 74 65 72 6e Data Ascii: 64829858")+"&";var spi_pattern_enc_cbd = "buygoodshomeoils.com%2Fsecure%2F%3F";var spi_pattern_base_cbd = "buygoodshomeoils.com/secure/?";var spi_replace_str_cbd = spi_pattern_base_cbd+"sessid2="+escape("sessid20250110164829858")+"&";var spi_pattern
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 62 67 5f 68 74 6d 6c 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 62 67 5f 68 74 6d 6c 29 3b 0a 76 61 72 20 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 32 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 62 67 5f 68 74 6d 6c 32 29 3b 0a 76 61 72 20 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 73 70 69 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 73 70 69 29 3b 0a 0a 66 6f 72 20 28 73 70 69 5f 69 20 3d 20 30 3b 20 73 70 69 5f 69 20 3c 20 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 2e 6c 65 6e 67 74 68 3b 20 73 70 69 5f 69 2b 2b 29 Data Ascii: bg_html = encodeURIComponent(spi_replace_str_bg_html);var spi_replace_enc_bg_html2 = encodeURIComponent(spi_replace_str_bg_html2);var spi_replace_enc_spi = encodeURIComponent(spi_replace_str_spi);for (spi_i = 0; spi_i < spi_myNodelist.length; spi_i++)
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 3b 0a 09 7d 65 6c 73 65 20 69 66 28 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 2e 69 6e 64 65 78 4f 66 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 29 20 3e 20 2d 31 29 0a 09 7b 0a 09 09 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 2e 72 65 70 6c 61 63 65 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 2c 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 29 3b 0a 09 09 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 5b 73 70 69 5f 69 5d 2e 68 72 65 66 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 3b 0a 09 7d 0a 0a 09 2f 2f 20 42 75 79 47 6f 6f 64 73 20 48 54 4d 4c 32 20 2d 20 6f 72 64 65 72 2e 68 74 6d 6c Data Ascii: i_track_link;}else if(spi_track_link.indexOf(spi_pattern_enc_bg_html) > -1){spi_track_link = spi_track_link.replace(spi_pattern_enc_bg_html,spi_replace_enc_bg_html);spi_myNodelist[spi_i].href = spi_track_link;}// BuyGoods HTML2 - order.html
2025-01-10 16:48:03 UTC	123	IN	Data Raw: 63 6b 5f 6c 69 6e 6b 2e 72 65 70 6c 61 63 65 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 73 70 69 2c 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 73 70 69 29 3b 0a 09 09 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 5b 73 70 69 5f 69 5d 2e 68 72 65 66 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 3b 0a 09 7d 0a 7d 20 20 20 20 20 20 20 20 0a 09 09 09 0d 0a Data Ascii: ck_link.replace(spi_pattern_enc_spi,spi_replace_enc_spi);spi_myNodelist[spi_i].href = spi_track_link;}}
2025-01-10 16:48:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49750	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:03 UTC	2146	OUT	GET /images/custom/image6.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:03 UTC	898	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:03 GMT Content-Type: image/png Content-Length: 455922 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-6f4f2" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4967 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Djh9nImxvWO%2BfIWRP17sCTRf%2BNlcJxk88ZXrIiIsJJR0n9VuGXq9uJ1Gn96A5cXrOz11ji8ZuRaglpUhROxCTnKHiHJdgHyw9cxn8twlqVAr8O%2BZjmZ0E7fYVDWfGxHOqJ0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2704a85542f4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1749&min_rtt=1708&rtt_var=670&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2724&delivery_rate=1709601&cwnd=233&unsent_bytes=0&cid=ad60adce8e972ddb&ts=137&x=0"
2025-01-10 16:48:03 UTC	471	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 0c 00 00 01 95 08 06 00 00 00 53 89 76 d9 00 00 20 00 49 44 41 54 78 01 ec bd f5 97 1c 57 96 ef 7b ff 8c fb 7e 78 33 ef de 37 77 a8 7b ba 67 ba 7b ba ed 26 b7 a1 cd 24 93 64 19 24 cb b2 2c 59 8c 16 33 b3 4a 52 09 8a 99 19 b3 18 b3 98 99 99 99 2b 33 2b eb 73 d7 3e 59 51 20 70 f7 4c 1b 24 39 72 ad bd 4e 24 54 66 c4 8e c8 ca f3 39 df 0d ff 03 fd a6 7b 40 f7 80 ee 81 1f ad 07 ac c0 62 fb ef 38 e2 6f fd fb ff ce 67 ea 7f f3 ed 78 60 f1 b9 bb 7f db 6c 9e 66 66 c6 cc 2c d6 79 9b 99 b5 20 26 8f 99 cd 66 66 66 66 16 ed 8a 15 93 79 02 b3 69 02 90 e7 c6 99 99 19 c5 6a 1d c3 6a 1d c1 6a 19 64 62 ac 93 be 9e 5a da db 4a 68 6d 2a a4 a9 3e 87 ba ea 4c aa ca 53 29 2f 49 9a b7 8a d2 64 b5 2d 63 65 59 8a 7a be a6 32 Data Ascii: PNGIHDRSv IDATxW{~x37w{g{&$d$,Y3JR+3+s>YQ pL$9rN$Tf9{@b8ogx`lff,y &ffffyijjjdbZJhm*>LS)/Id-ceYz2
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: e4 b9 e2 82 38 f5 ba d2 a2 84 79 88 10 90 a8 2e 4d a3 a6 2c 9d da f2 0c ea 2b 8d 34 d6 e5 d3 da 54 4c 47 4b 05 dd ed d5 f4 77 37 30 dc df c2 f8 48 37 d3 13 fd 98 a7 86 99 31 8d c2 cc 04 58 65 ff cc d8 f6 d7 32 0f 0d 16 ab 00 82 55 21 92 76 bc da a8 60 41 80 61 de 74 60 78 e4 2f 71 7d 07 75 0f 7c 4b 1e d0 81 e1 5b 72 a4 fe 36 ba 07 74 0f 3c 79 1e 98 9d 95 09 e1 c3 4c 9b 2c c9 04 4a db 5e 3a 3e d4 23 b3 0f 7d 46 7f e2 91 f4 80 0d 26 34 a5 41 80 41 41 c3 ec 8c 02 0a 8b c5 c4 8c 4c c0 67 cd 58 67 a6 18 1b 1d a0 bb bb 99 d6 d6 6a ea ea 8a 28 2b c9 24 37 3b 9e cc f4 68 32 d2 22 6c 96 1e 46 8e 31 42 59 6e 56 24 62 79 d9 51 0a 1c 04 16 34 50 78 10 2c 88 e2 20 56 53 9e 3a 6f b5 15 69 d4 56 19 a9 af c9 a6 a9 be 80 e6 86 42 5a 1a 4a 14 3c f4 74 d5 31 d0 d7 c4 c8 60 Data Ascii: 8y.M,+4TLGKw70H71Xe2U!v`Aat`x/q}u\|K[r6t<yL,J^:>#}F&4AAALgXgj(+$7;h2"lF1BYnV$byQ4Px, VS:oiVBZJ<t1`
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 02 0d be 0a 1a 04 1c b2 d2 82 e7 c1 21 cf 18 fe 17 a1 a1 a2 38 41 81 43 75 69 02 02 0d 35 e5 49 d4 55 a6 28 68 68 a8 4e a3 b1 26 53 59 53 43 36 2d 4d b9 b4 35 17 d0 de 52 48 47 6b 11 5d ed 25 74 77 95 29 68 e8 eb ad 66 a0 b7 86 a1 fe 3a 46 fb eb 19 ef 6f 62 72 b0 0d cb 48 37 33 63 fd 30 25 4a c3 38 b3 d3 d3 cc 9a 2d 58 2d b3 f3 c0 20 d7 b1 0e 0c 4f f8 f7 43 3f 3c dd 03 8b 3c a0 03 c3 22 67 e8 9b ba 07 74 0f 3c 59 1e 90 a4 55 2d ac e4 41 47 26 73 c4 c5 61 49 8b e7 8f 52 5a d2 66 16 a4 d4 a4 ad dc a4 94 9f d4 ea f2 5b 30 cf 98 98 99 35 d9 2a e6 20 a5 28 6d d5 73 b4 b2 9b 8b df 6f f1 b6 54 f5 b7 58 17 92 a5 1f b4 6f fa 63 df bd 07 2c 66 30 4d 2f 24 f7 ca ca b9 45 42 70 b4 93 65 9d b5 81 82 c5 8c d5 34 49 6f 67 1b a9 49 06 ec ed ae 70 70 df 0e f6 7d fd 15 a7 Data Ascii: !8ACui5IU(hhN&SYSC6-M5RHGk]%tw)hf:FobrH73c0%J8-X- OC?<<"gt<YU-AG&saIRZf[05* (msoTXoc,f0M/$EBpe4IogIpp}
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 0d f4 97 25 33 56 9f 8f a5 bb 06 46 db c0 d4 07 e6 11 d5 af 61 de 97 73 61 48 7f cd b5 bc e0 6d 7d 4b f7 80 ee 81 c7 c5 03 3a 30 3c 2e 67 4a df 4f dd 03 ba 07 ee f3 c0 e2 c9 ca 83 b6 b5 3f 10 68 10 58 d0 4c e0 c1 64 b2 55 bd b1 98 27 99 1c 1d 62 78 a8 8f 91 81 5e 06 fa bb d4 44 b1 ab ab 89 96 c6 2a 1a 1b cb 69 aa 2f a3 be be 98 86 ba 22 d5 b9 57 1b 9b 1a 4a 68 6c 2c a5 b9 a1 5c bd ae a5 b1 82 96 96 2a ba da 1b 54 a7 df e1 81 4e 86 87 bb 19 1b 16 c8 e8 63 72 6c 90 a9 29 5b 87 5d 55 76 46 29 0e 36 60 b8 77 ff b5 7d 97 f1 9b 9e 5b fc 3a 7d fb 9b 3d 70 af 1f 05 18 24 97 44 e5 93 cc 35 1a 10 75 68 64 b8 9f ba da 0a 42 02 bd d8 b3 f3 2b de 7c f5 59 3e 78 e7 25 36 ae 5d c9 b6 af 3e 65 cf b6 b5 9c 3a b2 9d a3 fb bf e2 c4 e1 8d 9c 3d b1 8d 2b e7 bf e6 96 dd 11 5c Data Ascii: %3VFasaHm}K:0<.gJO?hXLdU'bx^Di/"WJhl,\TNcrl)[]UvF)6`w}[:}=p$D5uhdB+\|Y>x%6]>e:=+\
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 57 e4 d1 5c 5f 46 4b 73 3d ed ed ad f4 f5 f5 30 3a 3a cc d4 d4 84 ca a5 b0 25 5f 6b c9 d8 36 d5 44 4a bc aa e3 95 ca 4e 7f 45 ce c3 37 7b ee c7 f7 ec bd c0 20 30 29 ea c2 b4 79 4a 29 0c b3 58 18 9f 18 26 25 35 9e 9d 3b 36 f3 1f ff f1 2f fc e2 e7 ff c8 b3 cf fc 92 f7 97 bd c8 67 9f 2c 63 ed 67 ef f0 d5 da 0f d8 b1 e9 63 0e ec fe 82 83 7b d6 71 ec e0 06 ce 1c df ca c5 33 bb b0 bb b0 8f db d7 8e e1 76 f7 3c 3e ae 57 95 89 ca 10 e2 6b 4f 44 e0 1c 30 84 3a db 80 21 c2 15 43 84 d3 7c e5 a4 94 38 4f d2 a4 3f c3 1c 34 08 38 08 34 2c 06 07 09 4f 9a 0f 4b ca 89 a6 38 e7 af 03 86 ce a6 7c ba 5b 0a e9 69 2d a2 a7 ad c0 06 0b 4d f9 f4 95 a7 d1 99 13 43 73 72 20 8d 06 6f da 62 bd e8 4d f0 62 28 de 83 11 83 2b 63 71 2e 4c 26 ba 33 9d ec c9 58 a2 1b fd 06 47 fa e3 9d 18 Data Ascii: W\_FKs=0::%_k6DJNE7{ 0)yJ)X&%5;6/g,cgc{q3v<>WkOD0:!C\|8O?484,OK8\|[i-MCsr obMb(+cq.L&3XG
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: bf cd 94 e1 06 23 86 1b f4 67 b8 31 51 15 0f fd 55 30 d5 0b 96 29 66 66 66 31 5b 51 36 0f 0c 0a 16 a4 3a 98 f4 2f 31 ab d6 87 3a 30 3c ec aa d4 1f d7 3d f0 68 7a 40 07 86 47 f3 bc e8 7b f5 c8 78 60 f1 64 eb 41 db df bc a3 0b 13 5e e9 ea 7b bf cd 65 5d aa 37 b1 4d 88 97 26 ed 2e 16 2c 64 82 a8 26 89 52 3b 5e 6d 49 1d ff 7b 27 d1 f7 fc fd a2 24 e0 6f de d3 47 f3 d9 05 ff 69 c7 b5 f4 78 65 af 65 d2 67 32 4d 31 3d 3d a9 a8 6b d6 6a a2 b5 b1 8e e4 84 18 bc 3d 1c 71 75 ba 81 d3 9d ab b8 38 5c c5 df f3 36 51 21 1e 24 44 fb 93 14 eb 4f 5a bc 1f 19 89 fe 18 93 03 e7 81 21 3f 33 9c a2 ec 28 4a 25 f4 28 37 86 b2 7c c3 3c 30 08 2c 48 ed 7b 55 c2 b2 2c 71 1e 18 9a ca 93 10 9b 87 87 8a 94 79 58 68 ab 33 aa 38 72 09 0b e9 6a 2e 50 a1 21 bd 6d 52 d2 b2 94 d6 a6 62 5a 9b Data Ascii: #g1QU0)fff1[Q6:/1:0<=hz@G{x`dA^{e]7M&.,d&R;^mI{'$oGixeeg2M1==kj=qu8\6Q!$DOZ!?3(J%(7\|<0,H{U,qyXh38rj.P!mRbZ
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: f7 5f e1 d3 95 6f b2 6e cd 07 6c da b0 52 e5 31 7c bd fd 33 95 c7 70 6c 0e 18 ce 1e df c5 a5 33 fb b8 7e e9 18 b7 ed 4e 73 f7 c6 69 9c 6f 9f c7 d3 f9 f2 7d c0 10 e4 6b 47 58 a0 3d e1 41 b7 88 0c b9 83 0d 1a 9c 88 8d 70 c1 10 ed 41 7c ac 97 b2 a4 78 7f 32 b4 1c 9b f4 08 f2 32 a3 28 c8 32 50 94 63 50 c0 a0 4a ab 4a e8 9c a8 61 79 b1 54 e6 19 94 55 e4 46 53 5b 10 47 55 6e 0c d5 79 b1 d4 16 c6 52 9e 1d 4e 56 bc 17 49 e1 8e a4 07 df a1 2e c6 8d de 44 6f 9a c3 9c a8 f0 b9 4a 4b 98 13 fd 06 4f 06 e2 bc 18 4f 09 60 3c c5 9f e9 34 7f 2c e9 62 be 98 d2 3c 99 4e 76 63 3a c5 85 a9 34 77 c6 33 7d 18 c8 0c 60 a8 28 0e 4b 87 84 25 0d aa 26 85 e6 59 2b 92 5d 64 cb 55 90 e5 8d b9 ac 05 05 0e 72 ed 4a 02 d7 43 2f d2 07 5f ba fa a3 ba 07 74 0f fc a0 1e d0 81 e1 07 75 bf fe Data Ascii: _onlR1\|3pl3~Nsio}kGX=ApA\|x22(2PcPJJayTUFS[GUnyRNVI.DoJKOO`<4,b<Nvc:4w3}`(K%&Y+]dUrJC/_tu
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: b2 88 ad 66 bc 04 2b 2d a9 98 f4 00 48 58 0c 28 8f 3b 30 2c 3e 16 05 08 16 5b 92 aa d9 3c 8d d9 32 89 94 24 0d 0f f7 e7 c2 d9 63 1c dc b7 8d 03 7b b7 72 70 ff 16 4e 1e dd c5 a5 f3 02 0c 47 71 be 73 1a 5f b7 cb f3 b0 10 19 6c 4f 4c d8 2d 0c 11 0e 24 1b 3c 48 8d f3 59 92 c7 70 6f b5 24 09 4f 92 e4 67 cd b4 9c 86 8a 22 03 35 85 71 d4 16 19 e6 4d e0 41 42 94 a4 42 92 84 23 49 1e 43 ab a8 0c d2 3c 6b 4e 65 d0 80 a1 af ad 90 fe d6 2c 7a 5b 32 e8 69 ca a0 b7 31 83 fe e6 6c 86 9a 73 18 6c ca a5 bf 21 97 a1 c6 7c ba 2a 8d d4 e7 26 50 91 1e 45 b5 31 8e f6 52 23 13 2d 95 cc 0c 76 c0 cc f4 1c 90 da 7a 34 2c 56 19 04 1a 74 60 b0 7d 2d 45 61 10 93 ef 83 c0 82 34 cb 1b 1e 1e 24 3b 2b 9d af 36 ac e5 67 ff f6 cf fc fc e7 ff c4 2f 7e f1 af ca fe f8 bb 5f 28 58 90 2e cf 2f Data Ascii: f+-HX(;0,>[<2$c{rpNGqs_lOL-$<HYpo$Og"5qMABB#IC<kNe,z[2i1lsl!\|*&PE1R#-vz4,Vt`}-Ea4$;+6g/~_(X./
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: b3 84 24 69 e5 55 17 03 83 c0 c2 bd c0 50 95 1f ad a0 41 53 17 16 e7 30 48 fe 42 67 63 8e ca 5d 90 4e bb 5a b7 5d 05 0d 6d 85 f4 34 19 e9 69 4c a3 b7 3e 8d ee da 14 ba aa 92 e8 ae 4e a6 bf 36 83 e1 3a 23 d3 6d c5 4c 35 17 32 d1 98 cf 50 45 06 4d 99 d1 54 18 02 a8 4f 09 a7 ab 24 03 53 7f 3b b3 53 23 73 55 68 2c 48 57 6b 81 58 75 7e 35 70 b8 4f 69 58 0c 0d 8f d6 79 ff b6 f7 46 03 04 ed 3b 2c 7e 91 5b 6f 6f 2f 7e 7e 3e ac 58 fe 0e 3f fb d9 3f f2 4f ff f0 ff f2 9b 5f fd 1b 4f fd e7 4f f9 ed 6f 7e c6 9f 9f 7b 5a d9 2b 7f fe 2d af bf fc 07 de 79 f3 79 34 60 90 8e cf 1b 3e 5f ce a6 75 2b d8 f6 d5 c7 4a 61 d0 80 e1 d8 81 cd f3 c0 70 e3 f2 71 6e 5e 39 b6 04 18 bc dd 2e e3 e7 79 95 00 6f 3b 75 3d 06 7b 5f c3 66 02 0c 37 54 af 06 01 86 90 20 67 1b 34 84 b8 12 1d ea Data Ascii: $iUPAS0HBgc]NZ]m4iL>N6:#mL52PEMTO$S;S#sUh,HWkXu~5pOiXyF;,~[oo/~~>X??O_OOo~{Z+-yy4`>_u+Japqn^9.yo;u={_f7T g4
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 24 48 09 cb 28 2a 72 23 11 a5 41 2a 26 a9 12 ab d5 e9 2a 87 41 d4 05 05 0d cd 05 48 19 55 e9 bd a0 4a a9 76 96 a9 ca 48 fd 4d f9 f4 d6 19 e9 ac 4a a3 a3 32 95 de ea 0c 06 ea b2 18 a9 cf 61 b4 3e 8b b1 5a 23 d3 0d b9 58 5b 8b 98 6d 29 62 bc 22 5d 75 e7 ad 89 f3 a5 dc e0 4b 53 7e 22 43 4d a5 30 d2 09 a6 61 30 8d 82 79 12 15 2b ae 03 83 ba c4 35 75 41 bb de 47 47 47 09 0b 0b e3 9d 77 de e6 5f fe f1 ef f9 d7 7f fa 3b 7e f3 ab 9f f0 a7 3f fc 0a 81 05 c9 5f 78 f9 85 a7 15 30 48 38 92 06 0c 2a e9 79 0e 18 d6 af f9 60 1e 18 76 6e fe 44 25 3e 1f dc b3 8e a3 fb a5 81 9b 74 7c de cf d5 f3 92 f8 6c 03 06 09 49 92 c4 67 2f d7 4b f8 b8 db 54 06 7f cf cb f8 b9 5d c6 df fd 0a 81 1e 76 f3 0a 43 a0 df 6d 02 fc ee 22 63 88 df 1d a2 fd ef 12 ef 7f 97 04 af eb c4 3a 9c 23 e2 Data Ascii: $H(r#A&AHUJvHMJ2a>Z#X[m)b"]uKS~"CM0a0y+5uAGGGw_;~?_x0H8y`vnD%>t\|lIg/KT]vCm"c:#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49752	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:03 UTC	1845	OUT	GET /images/custom/image2.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:03 UTC	896	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:03 GMT Content-Type: image/png Content-Length: 390018 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-5f382" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4966 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XZ8iqmOyylGdtdM9epA9imySYli8j5olTwORz4PEkjQ2H7Ug%2FgBqygtXeFhjHCPqQmElJy63vg3MQ2hmLgZTT7N4F5UfPpfLa1uqioVJLzwWZ%2Bj7uPOW4DaF3GIRFut3MHI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27057b527285-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2039&min_rtt=2033&rtt_var=774&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2423&delivery_rate=1403171&cwnd=249&unsent_bytes=0&cid=dd25de61f23b1c0f&ts=124&x=0"
2025-01-10 16:48:03 UTC	473	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 34 00 00 02 62 08 06 00 00 00 a1 0b f4 ab 00 00 20 00 49 44 41 54 78 01 ec bd 67 b8 54 d5 d9 ff ef 9b e7 c5 ef f7 e2 f9 fd af 27 79 ec 8a 22 02 36 40 45 05 1b 8a 8a 05 6c 31 f6 92 18 63 a2 46 8d b1 c4 58 12 bb c6 58 63 34 6a 62 17 ec 28 62 a1 77 10 41 04 a4 77 44 69 d2 a4 83 94 b3 fe d7 77 9b 35 67 cf 9e b5 db 9c 99 39 7b e6 7c f6 75 c1 6e ab dc eb b3 ee d9 67 cf fa ce bd d6 0e 86 0d 02 10 80 40 95 11 98 33 67 8e d1 bf 6d 0b 4f e7 1f 0c f0 01 7c 00 1f c0 07 f0 01 7c 00 1f 48 e0 03 55 f6 ba 87 b9 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 20 00 81 3c 02 3b e4 9d 71 02 01 08 40 a0 0a 08 20 68 22 e4 22 66 e3 03 f8 00 3e 80 0f e0 03 f8 40 3a 1f a8 82 57 3c 4c 84 00 04 20 00 01 08 40 00 02 10 80 00 04 Data Ascii: PNGIHDR4b IDATxgT'y"6@El1cFXXc4jb(bwAwDiw5g9{\|ung@3gmO\|\|HU @ <;q@ h""f>@:W<L @
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 04 20 00 01 08 40 00 02 25 21 80 a0 59 12 8c 14 02 01 08 54 92 00 82 66 ba 01 4c 06 7c e1 85 0f e0 03 f8 00 3e 80 0f e0 03 95 7c 57 a3 2e 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 40 a9 09 20 68 96 9a 28 e5 41 00 02 65 27 80 a0 c9 a0 2c 03 f3 f8 00 3e 80 0f e0 03 f8 00 3e 90 ce 07 ca fe 82 46 05 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 20 00 81 32 12 40 d0 2c 23 5c 8a 86 00 04 ca 43 00 41 33 dd 00 26 03 be f0 c2 07 f0 01 7c 00 1f c0 07 f0 81 f2 bc 95 51 2a 04 20 00 01 08 40 00 02 10 80 00 04 20 00 01 08 40 a0 32 04 10 34 2b c3 99 5a 20 00 81 12 12 40 d0 64 50 96 81 79 7c 00 1f c0 07 f0 01 7c 00 1f 48 e7 03 25 7c 15 a3 28 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 40 c5 09 20 68 56 1c 39 15 42 00 02 0d 25 80 a0 99 6e 00 93 01 5f 78 e1 Data Ascii: @%!YTfL\|>\|W.@ @@ h(Ae',>>F @ 2@,#\CA3&\|Q* @ @24+Z @dPy\|\|H%\|(@ @@ hV9B%n_x
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: d3 10 34 1d f0 4a 7c 69 d2 9f 6e 30 fd db ec 1d d9 0f 08 9a 25 86 5e 05 c5 d5 a2 a0 39 a4 e7 b1 e6 be 3f b5 69 d0 bf c7 ee 3e 38 6f 10 b4 94 82 e6 73 7f 6b 6f 76 df ed a7 de bf 93 8e 6b 96 57 4f d8 c0 69 53 bd 5e 09 56 59 13 34 27 0e ec 9c f3 0f f9 89 06 ff 9b 6a ff d3 ee 1f c5 2d 04 cd 7c 91 6f ed ec ae e6 95 bf 1f 6e 6e ba e6 80 dc bf 4d f3 89 ae ae 96 cf 0b 82 66 15 bc 1c 62 22 04 20 00 01 08 40 00 02 10 80 00 04 20 00 01 08 d4 3c 01 04 cd 88 2e de fc dd 52 6f ba 59 57 74 26 11 9a 11 e0 4a 7c 6b cb 9a d5 de d4 bf 61 fd 80 a0 59 62 e0 55 50 5c 2d 0a 9a 12 33 fd 51 1f c5 1c ef b3 f7 8e 79 22 52 29 05 cd 7f 3c 70 48 ce be 63 3a ee 91 57 4f b5 0c 48 57 ca ce 4a b0 ca 9a a0 39 be 7f e7 9c 7f c8 77 57 22 68 36 f9 cf 08 82 e6 8f 82 e6 f4 e1 27 9a 5b 7e 77 80 Data Ascii: 4J\|in0%^9?i>8oskovkWOiS^VY4'j-\|onnMfb" @ <.RoYWt&J\|kaYbUP\-3Qy"R)<pHc:WOHWJ9wW"h6'[~w
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: fc 23 ac 6f 35 15 ae 7c fd d5 a7 0e 37 2f 3c d6 de 8c f9 e4 38 a7 9f 68 cd c3 19 23 4e f4 d6 3d 7c ea fe 43 cc 3b ff ee e0 f5 47 d0 f6 b8 73 ad b7 fa 69 f7 a3 8c d6 51 b5 65 6c 98 17 ed 97 2a 53 69 2c bf a0 cf e8 de 88 5e c7 9a 3e 3d 8e 32 b2 33 cc 86 72 f4 ed bc cf 4f ca d9 d5 e9 c8 3d 73 9f 83 e7 1f 69 9f bb 6e ed 16 6b bf 6d 61 53 ce ca df 86 7f d0 c9 c8 07 c5 a9 d7 cb 47 9a d9 9f 45 fb 8c 2d 57 a2 92 3e 17 fa cc 3f f3 d0 a1 e6 e9 07 0f f5 f2 4f 18 d0 d9 6c fd 36 5a 48 53 bd d6 56 7d de 6c 99 df cf 38 cd 8c eb 7b bc 57 66 d2 e7 a1 cd eb da df 7d 4b 1b d3 e6 80 5d 4c b7 2e 7b 9b ab 2f 6f 6d 1e ba a3 9d f1 47 cb fb a7 9d 4d 13 a1 f9 d1 6b 47 99 ab 7e d1 2a ef 9f a6 23 77 d9 60 af 3d 76 f7 c1 79 e9 95 ff bb c9 a7 14 e4 d1 67 e4 81 db db 9a cb ce db d7 1c Data Ascii: #o5\|7/<8h#N=\|C;GsiQelSi,^>=23rO=sinkmaSGE-W>?Ol6ZHSV}l8{Wf}K]L.{/omGMkG~#w`=vyg
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 3e da fc b0 6a 65 28 ed 72 09 9a 8a 1a 74 09 8f 43 8e 3d c4 48 70 0d da 3c e6 92 73 bc a8 4d 97 a1 51 bc 5d 65 f9 cb 96 98 e8 62 fa c5 e5 e7 17 d8 e0 cf a7 63 d9 a4 6d e1 07 ef 14 a4 95 a0 19 14 a3 83 f9 a3 ce 97 8f 1c 96 d7 d4 38 41 73 d3 92 c5 66 e2 ef 7f 5b 60 87 ab 8e 2f af ba 2c af 6c 4e aa 8f 40 39 05 cd b8 e8 4b 2b 68 36 db fd ff 44 46 69 4a e8 9c 3b da 2d 0e da 41 d6 a4 fb 52 08 9a 8a ba 49 32 e8 2c 01 43 51 90 41 db 92 88 74 8a 38 09 0e cc ba ce fb bf 75 74 41 f9 c1 fa 82 e7 8a 5a 73 95 e5 ba f6 f0 9d ee b5 4c fd a2 97 a2 a8 24 ee 06 f3 57 52 d0 54 bf 2a 42 28 68 83 eb 5c d1 a3 7e 26 69 04 4d f1 96 d8 eb 2a d7 7f 4d e2 87 fa d9 5f 4f d2 e3 24 82 66 39 fd c3 df b7 12 98 77 df ad 50 c8 f4 b7 55 42 d0 f5 57 ee e7 45 4b f9 af bb 8e 2f bf f0 c7 1f 31 Data Ascii: >je(rtC=Hp<sMQ]ebcm8Asf[`/,lN@9K+h6DFiJ;-ARI2,CQAt8utAZsL$WRTB(h\~&iMM_O$f9wPUBWEK/1
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: e9 94 56 ff 82 eb b3 46 45 68 aa 0c f9 eb d8 4b 7f 6e 54 ef e7 17 9e 19 2a de da 36 cb 6e b6 ea 25 50 2e 41 f3 f1 bb 0f 88 15 29 ad a0 a9 7d 98 90 e9 bf ae 29 6c 1b 32 f8 a8 bc a5 10 34 25 04 da f5 c8 82 f6 6c f9 a6 9b 39 a1 53 fd fa 78 76 3a 56 7f ba 38 91 ce 3f 78 ae 75 20 fd 79 83 c7 aa 2f 78 ad a1 e7 9a ba 55 62 9c 1d 34 56 44 57 b0 4c bf e8 a5 c1 6c 45 1b 85 4d d7 e8 cf 2b 01 d0 96 2b 41 d6 7f cf 75 1c c7 4a 11 b0 fe 88 35 4d 85 a8 75 d6 5c 65 e9 9a fa 2d 28 32 26 8d d0 d4 da 70 d6 76 0d d0 07 45 04 95 2f 91 cc 2f 5e 48 74 0a b3 25 ec 7a 9c a0 59 6e ff f0 f7 ad 04 ea 20 2f 6b b7 ff b3 24 31 41 a2 bb bd e7 df 6b 2a ce d6 2d eb fd 49 eb 17 fa ef eb 58 62 9a 65 7b d0 fe bb 84 4e d9 ab f5 fe 14 11 68 d3 4a 98 0b 96 e5 17 34 25 78 48 8c 9d 3e 3c 7a 0a e0 Data Ascii: VFEhKnT6n%P.A)})l24%l9Sxv:V8?xu y/xUb4VDWLlEM++AuJ5Mu\e-(2&pvE//^Ht%zYn /k$1Ak-IXbe{NhJ4%xH><z
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 19 2a 27 28 5c bb 04 cd b0 f5 50 83 e5 bb ce 37 7f dd cd ec b4 53 e1 5a ba 12 58 5d e9 5f 7c bc fe 47 1d 96 99 7e d4 60 d3 a6 11 34 cf 38 a5 de 17 6d 59 dd 9f 29 9c 35 40 65 23 68 56 c9 8b 27 66 42 00 02 10 80 00 04 20 00 01 08 40 00 02 10 80 40 26 08 b8 05 cd 96 bb 1a ad f5 18 dc aa 41 d0 1c 7e f2 d1 41 b3 73 e7 df bc d3 23 54 e0 d2 3a 92 ae ad 54 82 e6 d2 01 7d 42 eb d6 b4 bf ae 6d ca 9f 6f 71 e6 51 44 a7 7f cb 13 34 5b ee 6a 36 2f 5b ea bf 9d 3b d6 14 c2 41 e1 d1 7f be 76 e6 b4 5c 5a 7b 10 27 68 4e ba f5 f7 66 d1 87 ef 99 35 d3 a6 98 8d 8b be 35 5b d7 ae 31 9b 96 2e 31 9b 97 7f 67 8b f0 f6 e5 8c d0 0c 13 34 25 aa fa db e7 3f 46 d0 cc eb 9e aa 3b 29 97 a0 e9 9f 2a 36 ec d8 2f 50 fe bf ff fe af 58 51 d3 9f de 0e 8c a6 dd 57 83 a0 29 01 d1 0e dc 6a ea 42 Data Ascii: '(\P7SZX]_\|G~`48mY)5@e#hV'fB @@&A~As#T:T}BmoqQD4[j6/[;Av\Z{'hNf55[1.1g4%?F;)6/PXQW)jB
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: fb 89 03 3b 1b 09 3d 76 30 dc ee 25 6c 68 1a 41 ad 09 77 88 6f 9a bf 6a 11 34 17 4f 2c 2e 72 35 89 a0 e9 5f 27 6f ff 56 3b 9b c3 0f dd 2d f1 bf a1 3d 8f 4d d5 47 49 04 4d f5 75 b9 fc a3 31 05 cd 3f 5c b5 7f 22 56 7e 1b b5 c6 9e df f7 d3 0a 9a 95 ec 5b 6b 67 63 0a 9a 8a fa db 73 8f c2 1f 4b ec b8 e3 4f 8c a2 11 4f ec d4 cc b4 68 be 53 ee f9 50 eb 82 a6 44 b6 bd 9b ed 98 6b af 9e 87 36 ea f7 83 80 d8 a9 29 ae 6d 1f 6a 5f 6a 41 f3 d3 ee 47 85 0a cc fb ec bd a3 91 88 a8 75 66 ed 33 db ee cb 2d 68 aa 7c 5b 97 dd fb a7 90 f5 33 d1 b1 fe c6 d8 74 76 af a8 75 ad c5 a9 fb 61 42 65 b0 9c b0 74 61 d1 f8 08 9a 19 7e d9 c4 34 08 40 00 02 10 80 00 04 20 00 01 08 40 00 02 10 c8 1c 01 a7 a0 39 e6 92 73 9c 86 66 5e d0 ac ab 33 ab be 1c 6b a6 dd 73 bb 19 79 7a 67 d3 b7 f5 Data Ascii: ;=v0%lhAwoj4O,.r5_'oV;-=MGIMu1?\"V~[kgcsKOOhSPDk6)mj_jAGuf3-h\|[3tvuaBeta~4@ @9sf^3ksyzg
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 3c 3b d3 9c 6c 5d bf ce 0c 3e ba 9d b3 6c ad c9 e9 df 10 34 11 34 fd fe 50 cd c7 e5 14 34 35 c8 98 64 2d cd b8 88 cd 52 ac 9d 69 07 3c 6b 41 d0 54 5b fc 82 ce 8c 11 27 e6 06 8a 6d 3b c3 f6 fe e8 ce f3 cf 6a 11 9a af 5c 82 e6 b0 f7 eb 23 a1 14 d9 14 66 a7 bd fe ce bf eb d7 6e 93 70 60 af db fd 13 f7 1e 9c 1b 38 97 18 e6 9f 9a d1 a6 89 db fb 05 cd b0 f5 2e 35 55 a7 7f ea c3 f7 5e ec 58 60 4b 5c 3d 49 ef 37 54 d0 54 3d c5 fa 87 f2 56 5a d0 94 80 a9 b5 5b ad f0 f1 fc 23 ed 23 d9 f6 7d e3 e8 5c 5a f5 f9 f2 a9 3f 4e d9 69 f9 a6 15 34 2b d9 b7 d6 c6 ae 27 d5 0b 8b 2f 3f 79 58 64 7b 95 67 8f dd eb d7 bc 0c 8b aa b6 65 5f 78 76 8b 1c 9f 37 9f eb 90 57 f6 71 47 d7 47 34 3f 75 ff 21 79 f7 6c 7e ed 9b 9a a0 a9 36 df 7d 4b 7d 14 b6 7c f1 96 df e5 8b 72 4f 3f 78 a8 93 Data Ascii: <;l]>l44P45d-Ri<kAT['m;j\#fnp`8.5U^X`K\=I7TT=VZ[##}\Z?Ni4+'/?yXd{ge_xv7WqGG4?u!yl~6}K}\|rO?x
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 8f 2a 43 f7 2a 21 68 8a a1 2b 02 32 ce 36 89 94 5a 83 33 d8 07 9a c2 37 2a af 3f 7d 31 f5 da b2 11 34 ab e3 5d 14 2b 21 00 01 08 40 00 02 10 80 00 04 20 00 01 08 40 a0 f2 04 42 05 cd 89 37 fc b6 c0 9a 62 04 cd d1 e7 76 0d 15 95 5c 6b 47 d6 6d dd 12 9a 5e 42 eb f7 13 c6 e5 ec da b2 66 4d 64 da 1f 56 ae c8 a5 d5 41 63 0a 9a 62 37 ec 84 0e a1 f6 2a 4a 73 fd d7 f3 f2 ec 4d 72 32 f2 8c 13 42 cb 5c d2 a7 77 5e 11 8d 29 68 8e b9 f8 ec 50 3b e7 3c f3 78 9e 9d ae 13 04 4d 17 95 a6 7b ad 52 82 a6 06 27 e7 8e 3e c1 9c d1 65 e7 48 61 b3 d9 ee ff c7 fc e5 c6 96 25 5b 33 d3 3f 28 aa 63 ff 80 7e d8 9a 68 c1 3c 3a 2f e5 00 7e 9c 48 e7 8a 5c b1 83 b3 fe bd 84 07 89 4a 2e 7b a3 ae 49 38 f4 97 13 3c 56 f4 90 7f 6d ca 52 0a 9a b2 4b d3 60 06 eb f4 9f fb a7 d0 8d 63 65 db a9 Data Ascii: C!h+26Z37?}14]+!@ @B7bv\kGm^BfMdVAcb7JsMr2B\w^)hP;<xM{R'>eHa%[3?(c~h<:/~H\J.{I8<VmRK`ce

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49753	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:03 UTC	2146	OUT	GET /images/custom/image7.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:03 UTC	896	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:03 GMT Content-Type: image/png Content-Length: 1685997 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-19b9ed" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4967 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HsuWFXyEZLF4yu7qYOCG0AdHX6MFXrEDz355Bg68nT41vOF6WLXFamNomrcOXmsROwky59k2%2BHdBgFoCsnA3AxFirGTJgNinE8V2bUs5rBJi2WEHsUzdzXTlw69oAYl29Lc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2706a9218c18-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2019&min_rtt=2003&rtt_var=784&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2724&delivery_rate=1367681&cwnd=210&unsent_bytes=0&cid=15f516874ee6a9a4&ts=177&x=0"
2025-01-10 16:48:03 UTC	473	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 44 00 00 02 5b 08 06 00 00 00 ed d5 41 57 00 00 20 00 49 44 41 54 78 01 5c bd f5 7b 1b 59 d6 ae ed 0e 9a 49 96 c5 b6 64 d9 92 99 d9 96 99 d9 16 58 32 33 33 53 9c d8 e1 38 cc d0 90 0e 75 d2 98 9e e6 9e 79 a7 69 de 39 f3 9d f3 47 3d df f5 2c b7 72 fa bc 3f ac ab f6 de b5 ab ca 01 57 6d dd 75 af 25 9f 98 82 20 98 0b 83 91 58 ae 44 7a ad 0e 89 65 1a 44 e7 04 23 2a 3b 14 71 45 2a 14 b6 a6 c2 9c af 42 44 7c 20 0c 19 4a 24 95 5a 24 4c 39 7a a8 d3 14 50 24 07 22 ba 50 85 b8 12 23 f4 39 2a a8 52 23 60 c8 d6 c2 5a 68 41 a2 2d 01 d1 e9 06 e8 53 d5 48 c8 8d 41 59 4b 0e 3a fa ab e1 1a ae 46 e7 48 0d 7a 26 aa 30 ba 50 8d f1 85 72 0c 4c 16 c2 d9 97 86 f6 9e 0c b8 06 73 e1 1c 2c 40 4b 57 26 2a 5a 12 51 d6 14 8f d2 Data Ascii: PNGIHDRD[AW IDATx\{YIdX233S8uyi9G=,r?Wmu% XDzeD#;qEBD\| J$Z$L9zP$"P#9R#`ZhA-SHAYK:FHz&0PrLs,@KW&ZQ
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 5d 9e 82 ac b2 64 24 e6 99 61 cd 36 ca 58 41 5d 16 ac b9 26 e8 93 22 61 ce 34 20 a5 d8 8a a4 c2 38 58 72 8c 88 cd 8a 82 ca 12 86 f8 bc 18 64 94 25 21 2e 3b 1a 6a 6b 38 b4 09 11 32 37 21 df 2c c7 71 8e 26 5e 01 63 9a 16 d1 a9 1a 99 c3 79 51 29 6a 39 0f e7 f1 5c 3c 8e f3 78 1d 8e c5 e7 19 61 4c 53 c3 94 a1 42 62 a1 11 79 b5 29 28 6c 48 47 4e 75 92 04 db 15 1d f9 28 a8 4f 43 66 45 3c b2 2a 13 50 dc 94 89 f2 f6 3c 94 b6 e6 20 af 3e 0d d9 35 c9 28 73 14 a0 ca 6d 43 61 4b 16 32 aa 13 91 55 9b 8c fc a6 0c 14 34 67 22 a5 dc 82 f8 62 13 92 cb e2 64 ac b8 2d 07 79 8d e9 c8 ae 4b 91 7e 95 a3 10 b5 9d 36 70 cb 73 db 9a b3 a4 cd 7e 49 4b b6 fc 4c bc 2e 7f 26 ee e7 18 a3 da 59 84 b6 81 6a 74 4d b4 c0 3e 54 8d d6 de 4a 38 86 ea d0 37 d3 81 e1 c5 4e 0c cc 39 e1 19 6f c1 Data Ascii: ]d$a6XA]&"a4 8Xrd%!.;jk827!,q&^cyQ)j9\<xaLSBby)(lHGNu(OCfE<*P< >5(smCaK2U4g"bd-yK~6ps~IKL.&YjtM>TJ87N9o
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 52 82 be ed 72 8c ec d5 62 64 bf 4a 62 f4 5c 39 66 0e ea b0 7c bb 09 f3 d7 eb 30 76 c1 86 f1 8b c5 98 bf 51 89 dd 0f da b1 70 a3 1c eb 77 ea 71 f9 45 2f ae 7f 32 86 dd fb 3d f0 cc 94 20 ad 5c 87 50 fd 31 84 e9 03 10 97 1c 8b 30 75 18 7c 8e fb 20 24 22 08 2a ad 02 d1 31 3a 84 2a 43 70 e4 e4 7b 78 ef a4 0f c2 d5 fe 50 47 07 21 38 f2 3d f8 85 f2 77 f7 24 a2 62 d5 b0 24 1b 61 4e d4 ca ef 57 76 a9 0a 23 8b c5 b8 78 af 13 37 3e ea c3 a3 4f 97 f1 c1 db 4d bc fc f1 0c 3e fb 65 1f 6f 7e d9 c5 d3 9f 97 f1 e8 9b 49 dc 7d 3b 8c 8f 7f 5d c2 ad bf 0d e3 d2 eb 1e 1c 7c 31 88 cb 5f 0c e3 f4 f3 5e ac 3c b0 63 e9 96 0b bb 0f 66 71 e3 e5 1e 9e 7c 7d 80 c7 6f af e0 fe e7 17 f0 f0 cb 4b 78 f2 f5 15 89 eb 2f 4e e1 c6 cb 5d dc 7a bd 8b 7b 9f ef e3 e1 57 e7 f1 e0 cb 73 b8 f3 e9 Data Ascii: RrbdJb\9f\|0vQpwqE/2= \P10u\| $"1:Cp{xPG!8=w$b$aNWv#x7>OM>eo~I};]\|1_^<cfq\|}oKx/N]z{Ws
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 59 91 5a 19 23 fd 78 9b 1e 19 35 71 28 77 e5 20 a5 c2 04 53 ae 52 b6 69 55 66 14 3b d2 91 54 19 0d 4b 99 46 ae c3 eb e5 b6 c6 23 bd 3e 46 82 ed f2 ce 0c 94 3a d3 64 3d 91 5c a6 43 5a 65 14 8a db 92 50 ed ca 44 95 23 1d ad bd c5 70 f4 97 a2 7f aa 01 f3 5b 5d 58 de 1b c0 c2 6e 2f 16 4f f7 61 e3 c2 28 f6 6f 2d 60 ed fc 08 a6 77 ba 30 73 aa 1b 4b 67 07 25 c6 b7 dd e8 5e 6c 44 cb 78 19 fa 36 db 30 b6 e7 86 67 a5 11 0d a3 c5 12 1d b3 55 e8 5c aa 97 76 55 7f 2e aa 07 f2 d0 3c 51 8a 96 c9 32 d4 0e 15 a0 b2 2f 07 35 83 f9 68 9a 28 45 ed 70 21 8a 3a 53 91 da 60 42 5a 63 0c f2 ec 89 c8 77 24 c9 3a 8e 6b 35 ae b7 d2 f9 79 c3 9e 28 6b 36 8e 31 38 b7 ac 27 1b 69 8d 66 58 2a b4 48 aa 8d 86 8f 29 9f 30 44 85 b4 1a 3d 12 ca 22 05 86 18 b2 82 10 5b 18 89 a4 b2 68 c4 e4 45 Data Ascii: YZ#x5q(w SRiUf;TKF#>F:d=\CZePD#p[]Xn/Oa(o-`w0sKg%^lDx60gU\vU.<Q2/5h(Ep!:S`BZcw$:k5y(k618'ifX*H)0D="[hE
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 80 12 80 70 9f 3e 3f 44 1e ae 71 e5 6a 44 17 85 0b ec e0 03 96 fb 78 1e 1e cb 7d dc b2 4f d8 a2 cb 0b 96 b9 1c e3 03 9a c0 c4 90 17 0a 6d 66 b0 bc 78 48 28 37 20 ce a6 91 31 5d 4e 30 4c 85 e1 b0 94 aa 10 5b 18 01 4d 8a 3f 34 89 fe b0 64 a9 90 92 17 05 4b aa 0a 31 56 05 4c 49 e1 48 29 d1 cb 22 2c a9 5c 07 9b 3d 05 25 8e 54 a4 55 47 a3 b1 bf 18 f9 4d 09 48 2b 8b 42 6a 69 34 d2 ca 8c 12 09 05 7a c4 64 2a 61 4c 8d 40 4c 7a a4 80 0f 02 0f 95 35 10 ba a4 50 01 1e 5e 40 12 95 aa 10 18 12 9f 6f 40 8a 2d 06 d6 3c 3d 08 48 08 4e b8 35 67 a9 a1 4d 0c 15 c8 11 69 09 14 18 62 48 51 80 ed 50 e3 09 04 47 1d 83 2e 29 0c 29 36 b3 f4 09 46 bc 50 84 80 39 2e 87 30 24 10 b1 39 61 e0 62 2b b3 c6 84 cc 5a a3 2c fe 09 44 d2 aa a3 90 d7 66 41 6a ad 01 09 95 91 48 6f 30 a0 d0 19 Data Ascii: p>?DqjDx}OmfxH(7 1]N0L[M?4dK1VLIH)",\=%TUGMH+Bji4zd*aL@Lz5P^@o@-<=HN5gMibHQPG.))6FP9.0$9ab+Z,DfAjHo0
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 18 38 55 2d f7 4f 2f 10 e9 98 2f 10 28 cd fb 6c eb 74 a1 c0 8f fa d1 6c 69 13 88 10 90 f0 1e cf 7b 37 41 08 e7 1d 82 8e 5c 81 1f ed b3 85 72 af 26 e0 26 e8 6e 99 ca 93 fd bc 77 b3 4d 98 c2 67 41 c7 6c 19 3a 97 aa 65 4b e0 41 40 d2 3a 65 13 40 42 28 42 40 d2 34 5e 28 d0 84 7d 82 90 ca be 0c 09 fb 64 85 40 0e 02 0e c2 91 aa ae 2c 01 1e cd c3 c5 20 00 21 20 f1 8e 11 86 10 94 10 9c d4 f7 e7 0b 10 69 9b ac 40 65 6f 2e f2 3b 92 24 6c 9d e9 ef 60 48 72 4d 34 18 04 15 85 7c d9 d1 62 15 38 42 48 c2 75 34 8f 21 ec 20 fc 20 14 21 0c c9 6b 4a 42 66 ad 45 3e bb 27 94 18 a4 4d 68 c2 cf f1 04 22 84 26 84 22 65 ce 6c a4 d6 c4 c8 8b 18 02 17 9e 9b c0 25 af 2d 01 99 8d b1 c8 6a 8a 93 36 81 48 7e 4b bc bc ac c8 ae 33 a3 a8 35 11 a5 f6 54 94 b5 a7 a0 ac 2d 59 80 48 df 64 3d Data Ascii: 8U-O//(ltli{7A\r&&nwMgAl:eKA@:e@B(B@4^(}d@, ! i@eo.;$l`HrM4\|b8BHu4! !kJBfE>'Mh"&"el%-j6H~K35T-YHd=
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: fd c5 18 31 c4 04 a0 a0 34 0e e6 84 20 64 15 1b 90 69 d3 a1 b4 39 01 6d 43 85 f0 cc 55 c2 31 57 2e 6f 75 ea 46 73 50 3f 99 27 b6 48 be db 82 6c 47 8c 40 92 b2 81 54 69 13 86 a4 34 eb 50 d2 9d 04 5b 57 22 32 5b a3 61 ad 8a 40 62 ad 0a b9 76 f3 e1 07 ea d6 18 c4 96 2b 05 64 d0 fe 20 10 a1 cd c1 07 a6 17 6a 94 f5 64 09 18 c9 ed 48 90 71 42 0f be 8d d0 e4 04 ca 38 61 07 1f b2 7c db c0 63 69 85 30 f8 30 66 9f 60 84 06 09 83 e7 e5 18 8f 21 54 89 ca 0f 83 a5 44 8b a4 72 03 62 8b d5 d0 65 07 41 9f 1b 72 f8 c6 a6 52 27 6f 0a f9 3c d6 a6 06 c0 9c 1d 81 e4 02 03 2c e9 2a 68 4c fe d0 19 03 11 9b 1a 89 ac aa 58 d9 9f 5d 17 87 a4 52 3d b2 6b ad a8 76 e7 c3 5a a8 95 36 41 48 76 95 15 59 95 16 24 16 1a 04 86 10 88 58 72 35 20 1c a1 f9 41 e3 23 22 d6 0f a6 8c 43 40 42 f0 Data Ascii: 14 di9mCU1W.ouFsP?'HlG@Ti4P[W"2[a@bv+d jdHqB8a\|ci00f`!TDrbeArR'o<,*hLX]R=kvZ6AHvY$Xr5 A#"C@B
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 64 a0 af 00 11 85 3a 1c bc e7 a8 0c 0a f8 87 1e 43 98 ca 0f d6 d4 28 e4 97 25 a0 bc 31 01 d5 1d 56 01 22 fd 8b 36 8c ef 54 62 68 a7 14 dd ab f9 70 2c e5 c2 be 90 8b ee ad 72 74 6f 56 8b 25 42 78 41 d0 e1 59 2b 13 20 d2 34 99 21 db a1 d3 b5 62 8b d0 10 e9 d9 ac 94 fd b4 ed 46 ce 34 cb fd 96 b6 1f 01 06 21 88 63 a1 14 2d 53 87 80 84 b6 08 ef d5 bc 17 ff 15 86 f0 3e ce 7b 35 b7 04 dd 35 43 69 20 20 e1 18 01 09 8d 92 43 b8 52 24 30 84 40 84 30 a4 7a 20 eb 9d 2d c2 31 82 0f da 23 ce 05 7e 40 2f 11 3b 84 a6 08 e7 d1 12 e9 5a a8 17 3b b3 d4 99 8a 4a 4f 26 08 42 08 3e 08 48 08 43 38 46 00 c2 31 02 12 01 21 03 05 32 af 69 d4 86 9a fe 7c b1 a6 09 37 4a dc 19 12 84 13 5e 18 92 d5 6c 11 18 42 58 91 52 6b 04 ed 10 1a d6 ec 33 ac c5 3a 81 22 f9 cd c9 ef 60 08 e1 08 ff Data Ascii: d:C(%1V"6Tbhp,rtoV%BxAY+ 4!bF4!c-S>{55Ci CR$0@0z -1#~@/;Z;JO&B>HC8F1!2i\|7J^lBXRk3:"`
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 42 61 4e 54 43 63 0c 46 50 c4 11 84 44 1e 83 c1 14 0a 0b ad ba e8 00 a8 0d 7e 08 56 f8 20 c6 1a 86 a4 54 0d a2 cc 81 88 8d 0f 81 ce 74 1c e9 05 5a 81 22 39 95 d1 b0 b5 5a 51 df 97 83 f6 a9 32 59 9c 34 4e 14 0a f0 c8 eb 8c 43 61 57 bc a4 c9 d8 7a 93 90 d6 6a 40 7a 5b 14 d8 ae 1c 48 47 81 cb 82 a4 3a b5 00 11 82 91 62 4f 02 0a 9c 71 48 a9 d3 21 b9 de 20 0f 54 da 1f 7c 80 d2 dc 20 cc 48 6d 30 09 28 e1 96 0f 58 42 0e 3e 70 f9 36 82 fb d9 67 0a cc 5f 61 88 c9 16 f1 ce 02 f1 da 22 34 48 bc e7 e4 03 99 ed 77 a9 33 b4 4a aa 4d b0 da 34 02 43 b4 59 81 88 a5 0e 5d 67 42 42 85 16 86 dc 60 88 ad 99 af 14 78 11 9b a1 82 c6 1c 00 85 ee 84 fc fd 25 64 e8 05 f4 ab 12 83 c1 48 29 8b 45 7a a5 15 51 19 4a 98 b2 d5 d0 a6 84 09 cc c8 ac 88 43 72 71 34 8c e9 0a 18 52 42 11 9b Data Ascii: BaNTCcFPD~V TtZ"9ZQ2Y4NCaWzj@z[HG:bOqH! T\| Hm0(XB>p6g_a"4Hw3JM4CY]gBB`x%dH)EzQJCrq4RB
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 24 2d d2 0b 2c c8 2d b3 a2 b0 ca 24 86 48 f7 44 21 06 97 4b 31 b0 5a 8c ae 95 3c 01 22 dd 9b 36 74 ad db c4 10 69 9f 2f 42 f3 74 9e 00 8a ae f5 72 01 1e 4c 99 a1 21 d2 b7 5d 29 76 88 67 ad 44 52 65 78 0f a5 6d 47 38 c2 7b 2c ef cb 87 e0 a3 04 ee 95 4a 81 22 bc 7f 33 7d c6 3e 7f 68 ea f1 3e cd fb 35 c1 07 81 07 c1 07 83 63 bc 97 73 cc 0b b9 09 48 78 1f a7 1d e8 58 28 13 33 84 06 08 53 61 68 80 30 6d 86 c1 36 6d 11 1a 24 0c 02 10 3e 73 08 49 08 4f c4 1a 19 b1 49 8a 0c d3 64 bc a9 33 84 22 b4 45 08 49 d8 e6 38 b7 34 45 18 de 74 1a 02 91 62 67 2a 68 85 30 65 a6 d4 93 29 a6 06 0d 10 c2 0f 02 0a a6 98 d3 a6 e6 9a c0 6b 8b 70 3e 8d 11 5a 22 34 44 0a 5a 52 24 08 41 98 d5 41 43 84 80 84 c1 36 01 09 c1 19 fb 25 f6 4c 81 25 1c e7 cb 98 ec a6 f8 43 33 a4 3d 51 ae 91 Data Ascii: $-,-$HD!K1Z<"6ti/BtrL!])vgDRexmG8{,J"3}>h>5csHxX(3Sah0m6m$>sIOId3"EI84Etbg*h0e)kp>Z"4DZR$AAC6%L%C3=Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49754	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:03 UTC	2147	OUT	GET /images/custom/image14.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:03 UTC	894	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:03 GMT Content-Type: image/png Content-Length: 791204 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-c12a4" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4966 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JAAt0P3KGAI6HdSCE12gpoEtwrdTxwjYKzN4sgTjMcsrabHxhielmjRBheCmllof%2FreJkI5vD5whX2g1yWuzmMY4WjGtDbIazm182vh9A4xaO6kNR0o1ibQ8BvpOcTKIBR8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2706a8c72363-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1983&min_rtt=1974&rtt_var=758&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=2725&delivery_rate=1427174&cwnd=252&unsent_bytes=0&cid=75975c660486de4d&ts=177&x=0"
2025-01-10 16:48:03 UTC	475	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 06 00 00 00 cb d6 df 8a 00 00 20 00 49 44 41 54 78 01 64 bb 67 74 e3 e7 61 a7 8b 61 ef bd 03 04 49 10 44 25 00 a2 11 8d 05 20 0a c1 06 12 04 d8 41 80 60 ef 75 48 0e 39 bd f7 19 49 23 cd 68 24 8d 46 92 25 5b b2 6c c9 b6 2c c7 35 f6 5d 3b c9 26 f1 3a 6d 93 ec 6e da e6 6e 36 f7 a6 6c 1c c7 b1 65 c7 5e 3f f7 00 b2 73 cf 3d f7 c3 ef fc 09 7c c0 07 1e 12 cf fb 2b af e0 f9 67 9e e5 9d 4f bd cd af 7d f9 ab 7c f9 d7 7f 9d cf fe da 97 79 ff 1b bf ce 93 f7 3f 8f 3f 32 4d 6e 49 0e 19 45 99 e4 54 e4 51 5a 5f 41 5e 55 01 99 c5 59 14 94 e6 91 9a 26 a0 4e 5c 83 aa 59 8e 4c a7 a2 d9 d1 8a 6f 2a cc e0 7c 0c 6b 7f 2f 4d 36 0b 85 0d b9 54 34 95 90 53 99 41 5a de 09 72 8b 72 c8 cc cd 41 90 92 8a 20 2d Data Ascii: PNGIHDR IDATxdgtaaID% A`uH9I#h$F%[l,5];&:mnn6le^?s=\|+gO}\|y??2MnIETQZ_A^UY&N\YLo*\|k/M6T4SAZrrA -
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 32 39 51 9c 89 a0 bc 84 8c 3a 21 19 4d 75 a4 c8 44 e4 a8 25 94 ea 95 94 28 1b c8 aa 2e 25 a3 a4 88 f4 82 7c 4e 64 66 7e fc 3b 4d 49 25 35 3b 9b ec d2 12 0a 6a aa a8 52 34 51 a9 92 51 dd ac a0 b2 59 4e 85 46 4e b9 56 41 b5 a1 19 61 ab 8e 1a 9d 8c 5a 83 92 3a 93 3a 29 91 5e 91 7c dd d0 aa a1 c9 ae 47 64 d7 52 df d6 82 b4 b3 15 b5 b7 0d ad b7 9d 66 77 3b 9a ae 76 5a bc 4e 34 6e 0b 5a 7f 3b ba be 4e 3c 0b 61 e6 6f ae 12 bf 39 c6 d4 15 27 5b 2f f5 71 f8 7e 98 d5 4f 78 99 7d e2 22 fe a8 8f 89 1b 61 82 a7 a6 09 6c c6 18 58 fe 58 e3 5b e7 f1 c5 57 59 bd b3 c3 d6 0b 9b 0c 9f 5a 63 e5 ee 6d 26 2e 6d d3 76 7f 0f df a5 cb 98 c6 56 71 4c 0d b1 f5 72 04 fb 5a 21 91 8b 7a a6 b6 da 78 f2 b4 9e 1f fc f3 38 3f fc 47 1b 3f fb 41 0b fc d0 c8 ff fe 57 0b 3f fe d7 16 7e fc 33 Data Ascii: 29Q:!MuD%(.%\|Ndf~;MI%5;jR4QQYNFNVAaZ::)^\|GdRfw;vZN4nZ;N<ao9'[/q~Ox}"alXX[WYZcm&.mvVqLrZ!zx8?G?AW?~3
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 41 5a 56 26 19 bf 54 76 6e 0e 79 05 f9 e4 e6 e7 25 df 4b cb 48 27 3d 33 83 ec c2 5c 2a eb 85 94 88 6b 28 91 d4 51 a3 51 53 df d2 c2 ee c5 2b bc fb 95 af 73 e6 d5 a7 d8 a3 11 b2 95 0a f2 ea 1a c9 af 10 52 54 59 9b 04 ba c8 6c a0 de 64 a6 d6 d2 4a 99 c9 f8 ff 03 ba 21 34 8e 32 18 4a 02 bd dc d1 46 75 7b 3b 35 6d 0e 4a 8d 2d e4 aa 9a c8 6a aa 27 5b 29 26 a3 a1 8a 8c da 4a 8a a5 12 24 26 13 06 6f 0f f6 e1 51 da 27 22 d8 e3 8b 58 e6 16 31 cc cf a1 5d 98 a1 79 6e 1a d5 f4 38 8a b1 20 b2 a1 fe 24 cc 4b 3c 56 8a 9c 26 ca 9d ad 54 ba 2c 54 77 b4 26 61 9e 80 ba b4 dd 95 04 ba a2 cf 43 9d d7 4a 41 4b 3d 02 61 3e 82 d2 4c d2 ca 72 38 51 59 46 5a 5d 4d 12 e8 59 4a 09 85 5a 19 15 3a 25 c5 52 31 19 e5 45 08 32 33 10 64 65 92 92 95 45 7a 76 0e 59 05 05 e4 95 97 51 22 16 Data Ascii: AZV&Tvny%KH'=3\*k(QQS+sRTYldJ!42JFu{;5mJ-j'[)&J$&oQ'"X1]yn8 $K<V&T,Tw&aCJAK=a>Lr8QYFZ]MYJZ:%R1E23deEzvYQ"
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 22 2c de 1a 20 74 d1 4d f0 66 2f ab b7 a6 98 b9 10 c0 b5 a0 a0 7b 4b c9 cc 2d 27 a1 b3 46 7c 3b 4a 42 e7 2c 2c de ec 61 f5 f6 30 be 45 33 e1 53 fd ac de 9f 63 e6 c2 20 2b 67 fd 4c 2f b7 30 ba 6a 26 32 a5 61 22 a2 61 ee 66 3f 27 df 5e 64 f3 99 30 2b c7 3e 06 62 6a 7c 33 75 f8 16 1a 08 ec 2a 98 bf ef 44 10 1e 1a e4 93 6f be c5 5b 9f fa 24 5f fa fa d7 49 00 fd 53 1f 7e 89 cf 7e e3 1b 7c e2 c3 0f 19 99 19 a7 52 52 83 20 37 85 fc aa 22 32 4b 72 3e fe c7 4f 17 90 96 71 22 79 3a af 10 96 27 1d ba d4 a8 45 dd 61 c5 37 35 ca e0 c2 2c ae b1 30 e5 b2 84 ab cf 21 a7 24 9d fc 82 0c 32 33 05 a4 a7 09 c8 c9 4d a7 a0 30 9b e2 e2 42 f2 f2 72 c8 ce ce 4c 2a 2b 2b 83 f4 f4 54 d2 d2 52 c8 c8 48 4b 02 bd a6 a9 e1 97 6e 53 8e dc 6e 25 47 24 c2 1d 0a f1 e4 b3 9f e5 85 0f 3e 64 Data Ascii: ", tMf/{K-'F\|;JB,,a0E3Sc +gL/0j&2a"af?'^d0+>bj\|3uDo[$_IS~~\|RR 7"2Kr>Oq"y:'Ea75,0!$23M0BrL++TRHKnSn%G$>d
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 7e 90 98 ae 8a 63 9b 9c 2d a5 9c fe 52 11 a6 e2 4a 46 7d 16 96 e6 9c d8 eb 0a f0 b7 95 71 71 a7 9d 19 5b 09 96 02 01 6b d3 4e 76 76 1c dc bf de c6 b3 8f 3a 39 7c 4e c9 d0 a5 6c e2 af 48 99 7f a4 65 e9 9e 91 83 07 9d 5c 7f 6d 80 33 6f 4e b3 7a b9 8b ad 53 9d ac 9d 72 b2 74 d9 c7 e4 b9 0e 86 b7 0d d8 03 a5 f4 6e 6a 99 b9 e4 65 e7 ce 08 db d7 43 5c 78 14 e7 ee 27 d7 39 f9 dc 30 e7 de 88 f0 f6 87 db 3c fb 72 84 bd 8b 1e a6 f7 1d c4 af f7 32 fb cc 10 9b 2f 4f 32 71 a1 93 8d 73 dd ac 9c f3 12 5e 33 32 b1 eb 60 6c cb 41 cf b4 8a b5 d3 fd c4 37 9d 2c 1f f5 73 f2 ce 24 e7 9e cc 73 f5 cd 65 ee 7c 66 83 cd e7 c2 f4 9d b1 13 7d 3c c2 ce dd 49 22 a7 bb e8 9a 6d 64 fa 9c 8d a5 db 6e ba 96 1a f0 ae 2b 89 df f2 73 78 6f 94 cd 3b a3 f4 9f 72 e3 3f d7 cb f4 73 51 96 1f 4c Data Ascii: ~c-RJF}qq[kNvv:9\|NlHe\m3oNzSrtnjeC\x'90<r2/O2qs^32`lA7,s$se\|f}<I"mdn+sxo;r?sQL
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 95 f4 c9 ea 89 da f4 2c 74 1a 88 59 95 cc 59 f5 4c a8 d5 cc f9 ac f8 03 12 fa 36 1a 58 b9 a4 e5 b9 8b 6d bc b6 d4 c6 0d 57 23 67 2d b5 ec 85 8b b9 b0 de c4 d9 58 03 bb 1d 95 c4 8d 22 46 6d 4a a2 56 0d 47 56 03 41 ad 99 a0 d1 81 5b 5d 87 bb 29 15 5f 75 0a 9d c5 a5 34 17 e5 33 3e 62 e2 ec d1 28 4e 4f 1d 86 56 39 d3 23 b3 1c cf c4 39 13 d4 31 ab c9 27 22 ae 4b 02 38 e1 aa af 4f 69 39 d8 6f 67 24 62 a4 43 56 83 bf b2 86 39 bd 81 21 a3 86 2e 91 1c 7f b5 86 be aa 5a 26 15 c5 2c 5a 72 89 a9 d3 88 2b 8b 98 75 e7 73 3e aa e0 ca 82 85 a8 bf 05 9f dd ce a0 6b 98 49 57 98 45 cf 30 f3 4e 15 c1 86 5c 2e 74 b4 b0 2d 6b 24 58 54 81 bd a8 98 89 5e 33 23 93 06 f4 4d 85 44 a3 2a 8e d6 9a 09 4b 05 f8 4b 73 59 9b f4 13 3f 69 e2 e6 9b 0e 6e bc 63 65 eb 91 94 c8 ed 6a 66 ef cb Data Ascii: ,tYYL6XmW#g-X"FmJVGVA[])_u43>b(NOV9#91'"K8Oi9og$bCV9!.Z&,Zr+us>kIWE0N\.t-k$XT^3#MD*KKsY?incejf
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 27 c6 a8 aa c6 a6 54 32 68 77 13 98 d0 b2 fd a4 8b e8 6d 2b ea b6 2a aa 4a f3 51 35 16 31 3d a3 67 ed be 85 e0 5c 31 e3 bd 27 38 15 ca e7 66 b4 9a ab 73 8d ac 45 9a e8 f3 d7 b2 6c 74 b0 a4 36 32 ab d2 30 6d 6d 61 26 d4 c5 44 d8 49 d8 65 64 c3 e7 62 bb 59 c3 ae ad 85 19 73 13 1d e2 42 4c 95 c5 f4 ab 94 44 4c 26 46 d5 4d 9c 1f f5 70 d8 65 60 d3 d8 c4 9a bb 9e 83 c3 1a ce bd 5a ce fe 0b 32 d6 cf fb 99 9f b4 70 10 50 71 d5 5d 4f bc 21 83 80 42 c8 dc 50 3f 21 87 03 53 41 3e dd cd 02 ec f5 02 8c 95 02 5a 0a d2 31 e5 16 a2 ce ce a1 45 5c 42 74 d2 45 d4 63 a4 4b 56 83 ad aa 98 31 b3 9a f9 4e 0d 63 7a 31 73 36 35 3b be 4e 76 dc 01 06 94 42 66 02 f5 1c 9d 36 70 f2 a2 8e 73 e7 f5 3c 7b a0 e3 e5 65 39 17 b7 72 b9 78 5d c8 f1 79 21 87 53 25 5c 0c 36 70 7a 48 c3 e1 a0 Data Ascii: 'T2hwm+*JQ51=g\1'8fsElt620mma&DIedbYsBLDL&FMpe`Z2pPq]O!BP?!SA>Z1E\BtEcKV1Ncz1s65;NvBf6ps<{e9rx]y!S%\6pzH
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: d8 d5 88 a6 5b 85 c6 a7 c4 31 a9 a7 23 6e c3 3e db 8e 67 b3 97 f1 e3 09 86 e7 dc 74 3a eb e9 30 97 31 e5 33 13 e9 35 d0 65 aa a6 b6 44 40 7e 8a 80 0c 41 3a b9 a9 25 48 6a 94 84 47 86 08 f4 1b 89 0f cb d9 19 92 13 d7 0b 79 6e 36 ca b3 bb 5b cc 8f f6 11 8b f7 30 34 6a c7 62 6b c0 6d 94 71 7e 7c 82 3b 73 71 e2 7d ad 0c f5 cb 08 0e 2b e8 75 2b 39 bd b9 c0 ee 4e 0c cf a0 8e e0 94 0d 8f 45 8e b5 5c c8 dc c4 18 53 73 a3 4c c7 c2 cc f6 f4 33 e3 ed 25 b6 30 c1 cc a5 18 f1 6b 21 8e af 6d 32 1d eb 26 3e e5 60 73 d9 ca ea aa 96 fd 83 76 b6 97 5d f4 d8 24 e8 ab 84 74 a8 1a 18 f2 a8 98 99 b3 12 59 b6 e2 ee 69 a4 a5 a9 14 63 65 29 4e 89 96 1e 4f 0b fb b7 27 19 5c b4 52 29 ca a2 b6 b0 00 45 79 01 1d 2d 15 4c 6f 34 13 59 ac 63 61 be 8c bd d5 7c 8e 77 0b d9 3f 59 c3 f4 52 Data Ascii: [1#n>gt:0135eD@~A:%HjGyn6[04jbkmq~\|;sq}+u+9NE\SsL3%0k!m2&>`sv]$tYice)NO'\R)Ey-Lo4Yca\|w?YR
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: a3 4c 5e 9e 60 eb 4a 2d bf f9 ed 12 7e fc b7 39 fc f0 6f 52 f9 f1 3f 16 f3 6f ff 5c c6 f7 ff 5a c0 6f fd 76 11 9f 79 5d c0 9f 7d 23 9f 1f ff 6e 3e 7c 2f 01 72 01 3f ff 9e 80 8f 7e 37 0b fe a0 90 9f fd 7e 11 ff f6 a7 a9 fc f4 cf 53 f8 8d cf 96 b3 32 23 c7 d0 6b 62 e1 a5 75 1e 7d 78 91 d9 4b 13 cc 5e 5e 44 e5 d2 d1 a8 13 b2 b8 d6 c7 9d 17 16 b9 ff ea 02 67 ee 0d e3 9f d2 60 e8 6b 24 7c d8 c9 ce 27 02 2c be e1 c4 7b 55 8b 6a 5d 42 f6 90 8c 8c 2e 31 42 9f 02 d3 80 05 85 59 4a a9 b0 00 61 63 15 06 9b 1e 9f df 81 d5 d5 42 5b c0 8a 7b c6 43 5b b4 1d 47 cc 86 67 a9 13 df 4a 27 d3 27 c7 98 3c 9c a0 77 3d c8 c0 d6 28 b1 a3 28 e3 71 1f fe f6 06 02 ad 35 9c 1c 35 70 30 aa 61 d6 55 45 77 53 36 ca fc 14 0a 04 02 ca b2 ca e8 6a eb 65 7a 24 c4 d8 64 3b f1 35 1d eb 3b 3a Data Ascii: L^`J-~9oR?o\Zovy]}#n>\|/r?~7~S2#kbu}xK^^Dg`k$\|',{Uj]B.1BYJacB[{C[GgJ''<w=((q55p0aUEwS6jez$d;5;:
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 4d 83 df 4d a1 4e 85 a0 ba 9c d4 d2 22 72 6b 2a 29 10 d7 92 27 a9 27 b7 49 4a a9 a6 99 b2 e6 e6 64 ea 50 a2 90 51 a6 90 53 d5 ac a6 5a f3 b1 12 30 4f c6 ec 3a 65 32 5a ff 55 57 9e e8 c8 13 91 ba 34 71 a8 31 ea a8 33 24 16 ed 3a 24 36 23 12 87 99 c6 b6 56 1a da 3e 1e be a9 9d 96 64 bc fe ab de 3c 01 f2 d6 be 2e da 87 7b f0 c5 22 49 68 7b 63 51 fc b3 71 bc f1 59 dc f1 38 de b9 39 ba 97 16 19 5c 9e 65 60 2d 46 60 2b 8a 73 31 88 3c 60 a3 d4 ae 20 5d 59 8b a0 ba 84 d4 9c 1a 72 45 02 56 af 1b 79 f9 eb 0b 78 66 5a c8 10 15 52 d5 dc 48 ad a1 8e 0a b5 84 3a 4b 1d e2 56 19 a5 6a 1d 15 86 46 86 0e 4d 5c fd 7c 84 83 d7 a2 6c 3c bf cf d2 91 9c ef 7c 59 c6 8f ff 9b 98 9f fd f7 72 7e f4 97 25 fc e8 2f 72 e1 7f e6 f1 f9 6f 14 f3 da 4b 02 7e ff 83 4a 7e f8 6d 21 fc 4e 31 Data Ascii: MMN"rk*)''IJdPQSZ0O:e2ZUW4q13$:$6#V>d<.{"Ih{cQqY89\e`-F`+s1<` ]YrEVyxfZRH:KVjFM\\|l<\|Yr~%/roK~J~m!N1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49756	172.66.40.143	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:03 UTC	739	OUT	GET /conversion/iframe/?a=6988&token=e2e306dffc4e053c57e785d8331894dc HTTP/1.1 Host: go.maxweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nervedefend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:03 UTC	788	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding expires: Fri, 10 Jan 2025 17:48:03 GMT cache-control: max-age=3600 cache-control: private access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type x-server: WEB_6 strict-transport-security: max-age=31536000; CF-Cache-Status: DYNAMIC Set-Cookie: __cflb=02DiuDvnJbjKdBkxKLVBqBrQP8wYzWkbULtafxCCu1nZJ; SameSite=Lax; path=/; expires=Sat, 11-Jan-25 15:48:03 GMT; HttpOnly Server: cloudflare CF-RAY: 8ffe270718124363-EWR
2025-01-10 16:48:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49757	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:03 UTC	1883	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:03 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:03 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Tue, 07 Jan 2025 14:32:14 GMT ETag: "677d3aee-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=75HDm%2Ffwi5md6nJUIE7sOTy1oQCSlkL%2BKXV4yNnOp2VFJ60iuMSLS1G8ook7z%2BEFzKnDGKS3gffWBpbP2FYDhrvdq8u%2F5razk66ZQobY5LnUGWwAD7xue9bLSyNMOt0CWz4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27077c6fefa5-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 12 Jan 2025 16:48:03 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2025-01-10 16:48:03 UTC	617	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2025-01-10 16:48:03 UTC	622	IN	Data Raw: 66 2c 61 2b 6c 2e 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6c 29 3b 61 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 64 2c 6f 29 7d 7d 63 61 74 63 68 28 68 29 7b 65 28 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e Data Ascii: f,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49759	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:03 UTC	2269	OUT	GET /images/custom/image12.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:03 UTC	897	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:03 GMT Content-Type: image/png Content-Length: 1762184 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-1ae388" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4966 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iH6osDY7xMxebb0RY5opJ0Zx8C13i92C0c6OXikK6JLXnnL9iFvoZ3SdYQ8avyhYi9sx%2FLIzINmHa7H8Q9Hpl42C11h1qxnnJUjAdsdtGioUixi9cc2MNbOXrSe4uavybCw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27080b3042f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=6296&min_rtt=2630&rtt_var=3434&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2847&delivery_rate=1110266&cwnd=234&unsent_bytes=0&cid=c6377e079e207325&ts=126&x=0"
2025-01-10 16:48:03 UTC	472	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 00 00 00 03 00 08 06 00 00 00 93 81 00 8e 00 00 20 00 49 44 41 54 78 01 6c bc 75 78 54 e7 fa ee cf 39 fb bb bf d2 dd bd db dd 16 29 45 13 88 cb 24 13 9b 78 82 6b 81 96 42 5b 28 54 a0 82 5b 70 2d 50 0a 14 77 0b 49 d0 84 b8 7b 88 bb db c4 26 36 99 8c 24 13 37 e4 73 ae 59 6c f6 e9 75 7e bf 3f ee eb cd ac f5 ae 35 93 c9 cc 5a f7 e7 79 ee 37 a3 b6 6c 5f cd d6 1d df fc 5b 9b b7 ad 62 d3 d6 af d9 b0 f9 4b 7e de b8 42 d0 2f 9b 56 0a db 74 fb fe bc 5f b7 fd a7 0d 5f f0 76 ff 9f cf f5 76 de c6 2d 5f fd fb 58 dd fe b7 73 b6 ef 5a cb ce dd df b1 63 e7 77 ec dc b1 86 9d db be c1 6b eb 57 78 6d 59 ce ce 0d 8b d9 be 6e 16 9b bf 73 66 e3 5a 3b 7e fa d6 9c f5 6b 8c f8 fe 3b 3d d6 ad 9f c2 fa 4d 53 f8 79 ab 1e 1b b6 Data Ascii: PNGIHDR IDATxluxT9)E$xkB[(T[p-PwI{&6$7sYlu~?5Zy7l_[bK~B/Vt__vv-_XsZcwkWxmYnsfZ;~k;=MSy
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: f2 52 0d c9 4d 31 21 37 d9 92 dc 64 6b b2 13 ac 49 8f b7 26 25 4a c4 f3 38 5b 62 c3 44 04 3f 35 27 24 c0 96 10 7f 47 82 9e 7a 10 15 e2 4e 72 84 1d 25 59 36 d4 16 99 22 ab 9a 80 ba e5 03 ba 3b fe 9b 1e f5 28 7a 34 a3 de 8c ea bf a2 6d fb 3b 6d 8d ef 23 93 7e 48 4d d5 18 6a ab 3f a1 46 3a 91 e6 ba 69 c8 1b a7 d1 2e 9f 84 42 3e 86 96 96 f7 68 6c 7a 87 fa c6 bf d3 20 1b 4d 55 e5 78 aa ca a7 53 55 2a a2 bc c0 86 a2 6c 2b f2 d2 2d c8 7e 6e 42 e6 73 63 d2 d3 cc 49 49 31 21 29 d9 80 c4 a4 e9 24 a6 18 92 f4 dc 88 e4 54 53 92 53 cd 89 4f 36 27 36 c1 92 a8 18 31 a1 61 d6 04 04 58 f1 e8 a1 25 f7 ef 5b 70 e7 9e 15 e7 2e 98 72 e6 bc 05 a7 ce 99 70 e2 0f 03 4e 9e 33 e4 cc 75 53 ae fa 59 73 f7 99 2d 7e 51 0e 04 24 4b 88 c8 75 22 b6 d8 81 c4 32 31 49 15 96 3c af 32 27 53 Data Ascii: RM1!7dkI&%J8[bD?5'$GzNr%Y6";(z4m;m#~HMj?F:i.B>hlz MUxSU*l+-~nBscII1!)$TSSO6'61aX%[p.rpN3uSYs-~Q$Ku"21I<2'S
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 7b 0e dd 93 70 cc 47 c2 d9 c7 ae 9c f3 77 e6 d2 33 57 ae 86 b8 70 23 dc 95 9b 91 ce dc 8a 72 e1 7e a4 0d c1 51 66 e4 e6 59 d3 a2 f4 60 e0 c5 0a 5e be da c1 8b a1 13 bc e8 bb c9 ab c1 9b bc ec 3f ca f0 c0 06 5e 0e 7e cd ab 17 4b 79 d9 bf 90 de 4e 47 3a da a6 a1 6a fb 27 ca f6 ff 4d bb ea 2f c8 e5 a3 69 a8 9f 4a 75 a5 19 d5 e5 62 1a 6b 25 b4 37 db d0 ad 32 a1 5f 3b 95 de ce 31 68 94 1f a0 51 4e a1 bb cb 86 ee ce 39 a8 95 b3 51 77 ba a1 d2 88 51 28 f4 91 37 4d 44 51 3f 0d 55 83 09 9d cd 16 68 db a6 a3 52 7e 80 42 f3 37 5a 55 ff a0 51 3e 96 9a 86 e9 54 d7 1a 21 ad 99 46 5d ed 24 14 8d 93 68 a9 7d 17 8d fc 2f f4 74 ff 05 8d 76 14 9a ce ff e2 55 d7 74 e8 76 e6 45 f3 1c 9a ab 77 73 2f 3c 86 39 fb 23 30 f0 0a c7 fe 4c 0e b3 8f 26 32 ff 60 04 f3 4f c6 b0 f8 42 3a Data Ascii: {pGw3Wp#r~QfY`^?^~KyNG:j'M/iJubk%72_;1hQN9QwQ(7MDQ?UhR~B7ZUQ>T!F]$h}/tvUtvEws/<9#0L&2`OB:
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 19 7f 73 32 6a 2d c8 a9 35 a7 a8 da 9c 12 a9 05 a5 35 e6 94 d6 99 53 2c 33 a3 b0 d1 8c 7c 99 29 b9 32 13 d2 6a 8c 78 5e 65 42 8a 0e 1c 2a ac 49 af 90 08 00 50 54 3f 97 d2 a6 f9 94 cb 66 08 00 90 58 e8 41 40 aa 2b f7 e2 dc b8 1c ec c0 65 1d a8 46 5a 13 9d 61 43 4e b1 35 d2 7a 2b 1a 9a 2c 68 68 36 a5 a1 d5 8c 5a b9 05 35 72 4b ca 9b 4d 29 6f 36 a7 5c 66 4e 51 8d 11 39 65 d3 c8 2a d1 23 b7 dc 80 02 1d 94 d4 58 50 58 67 45 7e 9d 15 79 f5 56 e4 d4 59 0b e0 92 5c 65 4a 62 b9 05 d1 b9 22 22 32 6d 08 4e b5 e1 49 a2 8d 00 00 77 c3 6d b9 15 e6 20 c8 27 da 89 47 f1 8e 04 a5 39 12 97 ef cc f3 62 7b d2 4a ad c8 ab 14 51 5e 6f 46 8d 6c 2a 4d ad 9f a0 54 8c 41 ab 7e 9f 1e f5 5f e9 57 8f 62 48 ad 83 80 bf 32 a2 f8 07 af 95 93 a0 c3 0a ba dc a1 77 16 2f fb e6 30 34 30 83 Data Ascii: s2j-55S,3\|)2jx^eBIPT?fXA@+eFZaCN5z+,hh6Z5rKM)o6\fNQ9e#XPXgE~yVY\eJb""2mNIwm 'G9b{JQ^oFl*MTA~_WbH2w/040
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 99 7d 23 97 a3 b9 52 72 7a eb 51 be 48 66 b0 ef f2 9b f9 c3 07 79 31 70 88 91 a1 33 8c f4 1e 86 91 4d f0 62 3b 5d 03 97 68 ee 79 4e 50 7a 29 3f ec 0e 66 c1 0a 1f 5c 96 78 23 5a e5 27 00 c0 2a 9f 5c a2 3a 40 4b 3f 20 85 91 48 18 ba 43 a7 fc 00 69 09 4b b9 7a de 92 bd 3b f5 d9 be 49 cc 8e ed 12 f6 1f b5 e7 f2 3d 3b 9e c5 9b 90 51 6a 4a b3 d2 83 c1 be 2f a1 6f 17 0c 9e 86 fe f3 f0 c2 9b 17 3d 0f 19 18 8c 44 f3 3a 95 b2 ee 2a 4e 05 94 b0 e5 62 21 01 59 5a 6a 3a e5 f4 be 7a c4 ab 57 bf c2 e0 19 e8 bb 00 2f 6e 31 dc af 83 99 d3 d0 b7 87 97 3d ba ef 86 27 1d ed 26 a8 da f4 84 51 ab b1 44 db 69 83 5a 6d 25 00 80 b4 d5 80 fc 5a 23 52 4a 4c 85 7b 5e 50 b2 13 8f e3 9c f1 09 73 e3 da 43 67 4e 5e 75 64 f7 af f6 fc bc cb 96 6f 36 88 59 b9 5e cc e2 55 a6 cc ff ca 98 59 Data Ascii: }#RrzQHfy1p3Mb;]hyNPz)?f\x#Z'\:@K? HCiKz;I=;QjJ/o=D:Nb!YZj:zW/n1='&QDiZm%Z#RJL{^PsCgN^udo6Y^UY
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: cb b7 0b af b3 7e ce 19 b6 2d 3e c7 af df 9f 22 c6 f7 0a 8d a5 57 e9 52 1e 65 a8 7f 27 fd 3d eb 18 ec fd 86 e1 be 55 0c 76 2f 65 a0 67 2e 83 7d 33 18 e8 9d 49 9f 76 9e 50 81 ed d4 6e a1 a8 e5 08 51 65 37 39 fb ec 29 4b f7 5c c7 61 fd 75 ec 7e f2 c3 f1 e7 40 56 1e 0f e7 6c 78 08 61 a5 17 c9 6b 5f 49 91 c2 92 d2 66 43 4a 6a 8c 29 28 12 91 93 6f 4f 4a a6 35 09 e9 56 c4 a6 5a 11 95 2c 22 2a d9 9a e8 14 31 71 cf c5 c4 a7 89 78 9e 65 45 5a ae 05 59 05 a6 14 96 18 51 5a 31 4d a8 3e ea cc 7e 73 eb 64 9a 5b 47 d3 da 36 96 56 f9 44 9a 9a f5 90 35 9a 51 53 27 a2 b8 cc 8c 8c 5c 23 12 d3 8d 88 4d 35 26 32 d9 94 b0 44 11 a1 89 f6 04 c5 39 e2 1f e3 c2 93 68 77 bc c3 1d b9 1e 24 e1 d2 13 27 ce 3e 74 e3 37 6f 37 8e dc 74 e1 d0 75 09 47 6f d9 72 f6 81 0d 37 02 2d 78 1c 6b Data Ascii: ~->"WRe'=Uv/eg.}3IvPnQe79)K\au~@Vlxak_IfCJj)(oOJ5VZ,"*1qxeEZYQZ1M>~sd[G6VD5QS'\#M5&2D9hw$'>t7o7tuGor7-xk
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 01 00 76 7b bb b1 e7 ae 3b 5e b7 dc d9 71 dd 9d cd 17 5d f8 f9 b4 13 eb 4e da f3 dd 51 31 3f 9d b0 62 fb 79 31 87 ef d9 73 3e d0 89 db 09 8e 3c 4c 77 e0 69 ae 98 c8 32 5b e2 a4 b6 24 d5 8a 49 ac b6 22 41 07 04 95 d6 24 54 88 89 2d 15 31 ea 6d 05 ff ad 99 ff 33 00 bc 35 fb 6f 0d bf 6e ae 4e 6f a3 41 ba f8 cf 5b 43 ff f6 b8 3f 1b 7e 9d e9 7f 7b de ff f7 1c ba c7 ba 63 b6 79 7d c7 8e 3d 3f e0 b5 7b 1d bb 76 ae 65 c7 e6 af d9 be 61 25 7b 36 ad 60 ff f6 e5 1c dc b5 94 83 5e f3 39 b8 7b 06 fb f7 3a b3 ff 80 1d 07 8f da 70 f8 37 6b 8e 9d b6 e1 d4 1f 12 4e 5f 70 e4 cc 15 27 2e de 72 e1 9a af 2b 77 fd dd f1 09 73 e7 41 94 3b 01 f1 1e 04 26 ba 13 9c e4 41 70 bc 1b 81 d1 ce 02 00 e8 aa ff 8f 82 de 98 ff a7 41 0e 04 04 39 f1 2c d8 99 c0 10 17 42 42 9d 09 0b 73 24 3c Data Ascii: v{;^q]NQ1?by1s><Lwi2[$I"A$T-1m35onNoA[C?~{cy}=?{vea%{6`^9{:p7kN_p'.r+wsA;&ApA9,BBs$<
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 2a e7 a1 52 cf 15 aa b2 5a ed a7 74 75 2d a3 4b b3 9c 2e cd 0a ba d4 5f 0a 63 77 e7 72 ba 35 cb e8 ee 58 4c 4f c7 3c e1 66 df a3 72 43 a3 9c 89 bc 7d 29 75 8a 1f c8 6f 3d 46 6c 43 00 4f a4 65 9c 4e 57 b2 2b 4c c9 b6 c0 26 2e a4 d6 12 5b 97 4e 89 f2 2e b2 8e f5 a8 3a 66 d3 dd e9 46 af ca 9e 4e b9 08 65 8b b1 00 00 ad 2d 1f 23 6b f9 90 9a e6 0f a9 6c 9c 48 6e f9 44 52 b2 a6 f2 3c cb 98 fc 22 3b 2a 2a 1d 85 a2 45 61 99 25 a9 45 f6 04 a7 d8 71 eb a9 0d bf 5d 15 b3 ef 37 07 b6 1e 74 60 c3 1e 31 3f 79 99 f2 cb 9e 29 1c bf 62 cc c3 10 3b e2 d2 5d 28 28 9f 4d ad 6c 21 55 d2 39 e4 e6 bb 90 98 e2 44 48 94 88 d0 28 23 d2 72 6c a9 6b 58 88 a6 e3 5b 06 7a b7 f2 6a 68 1f af fa bd 78 d9 b7 89 91 9e 35 0c 77 7d c6 70 f7 12 86 b5 4b e8 53 2e a5 b3 75 16 ed 6d 56 34 b7 e8 Data Ascii: RZtu-K._cwr5XLO<frC})uo=FlCOeNW+L&.[N.:fFNe-#klHnDR<";*Ea%Eq]7t`1?y)b;]((Ml!U9DH(#rlkX[zjhx5w}pKS.umV4
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 17 ef 29 34 34 ea 2e 58 1f d3 d8 3c 9a 96 96 0f 05 35 cb 3e 42 56 3b 96 26 e9 64 9a aa 8c a8 2b 31 a1 2c c7 ec 8d f1 4f b4 21 3d 41 4c 46 a2 dd bf a5 5b a3 a0 8b 2a 25 c5 d9 10 1f 63 2f 44 66 ee df 17 71 e9 8a 15 07 0e 1b b1 69 ab 3e 3b 76 4c e4 fe 6d 03 62 42 a7 53 9c 65 82 bc c1 94 fe 4e 3d fa 3b de a7 5b 35 8a e1 ae 51 0c aa 47 d1 a7 f8 0b bd ad ef d1 d5 f8 31 8a aa 29 d4 e5 4f a6 2a 7b 3a 35 f9 d3 a9 2b d6 55 41 3e 44 dd 32 86 6e d5 68 ba 35 ff 10 aa c0 1d ca bf a1 51 be 4f a7 ea 63 74 6d 57 85 7c 2a 6d ad 53 68 95 4f 16 22 0b ba 1b 6c 7d e3 68 a4 b5 93 a8 aa 9e 46 65 95 3e 95 95 06 54 55 19 53 59 6d 4e 65 b5 25 15 95 6f ba 03 65 95 56 e8 a4 83 02 9d a9 29 28 36 24 af 70 3a 99 45 46 c4 e7 99 10 95 67 41 64 ae 25 91 b9 56 84 e7 5a 13 91 6f 47 64 81 3d Data Ascii: )44.X<5>BV;&d+1,O!=ALF[%c/Dfqi>;vLmbBSeN=;[5QG1)O{:5+UA>D2nh5QOctmW\|*mShO"l}hFe>TUSYmNe%oeV)(6$p:EFgAd%VZoGd=
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: f5 d1 ad 03 70 e1 d0 03 37 61 6d c0 d1 07 ae 9c 78 e4 ca a9 27 2e fc e1 ef ca a5 20 f7 7f c5 7f dc fe 0d 00 ba 35 4e 57 42 1d b9 11 ec c4 dd 47 2e 3c 7e 66 47 44 a2 81 00 98 4d 0a 37 fa fb 97 c3 c8 46 18 f6 7a 93 73 ef 5a cf 2b f5 97 8c a8 16 31 ac 9e c9 b0 ca 9e 91 4e 23 5e f4 18 d3 a7 b6 40 ab 30 43 de 32 99 ba 86 4f 84 bf 55 7e c9 64 a1 fb 95 9a a9 8b 38 4d 25 af 48 9f da 7a 3d e1 de a3 56 4d a1 4b 63 c4 40 a7 0d fd 1d 33 d1 b4 2d a3 bd 75 11 6d 72 5d 65 7a 0a ed aa f1 74 69 f5 19 ee 75 e1 75 ff 62 5e 77 7f c6 ab 9e 05 8c 74 db 08 6b 09 ba 54 ef d3 29 7f 07 6d cb 68 3a 9b 27 31 d0 29 a6 b9 d5 89 e4 e2 99 f8 67 ae e1 6e da 49 ae c6 5f c3 37 c1 9b e4 a2 30 d2 8a 1f 10 90 fe 98 ed be 31 98 ef 7a c8 38 2f 7f 4c 7f cf c4 fa 40 06 e2 9d e9 38 ef cf c5 7d 5f Data Ascii: p7amx'. 5NWBG.<~fGDM7FzsZ+1N#^@0C2OU~d8M%Hz=VMKc@3-umr]eztiuub^wtkT)mh:'1)gnI_701z8/L@8}_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49758	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:03 UTC	1841	OUT	GET /images/custom/bg.jpg HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RUHNyZHJqNVVMeGZxaTRqd0FwV1E9PSIsInZhbHVlIjoidmNFcHVVS2tURUJTLzVtQUdnTEpOZkYydXRZK2QrQWFNdUNiRkQ3Y3hHRFFUaXFTbFlIblZNOWgrcW83WENKMCIsIm1hYyI6IjA2ZTlkYWNjMTE3ZjJmYmMxOTQzM2Q3OWMyNDc3MTBmMTU2ZjdjMDEzOTU1ODc5ODQzNzYzZjRiODk1YWQxNTkifQ%3D%3D; _=eyJpdiI6Im43L0ZwMW1UUWtRajFYNnlWS0hnMWc9PSIsInZhbHVlIjoibklkTThNc2lGc1ZPSUJMOHd3QVZKenVDZDJmMFpnTGttUlY4ZFZPUUQxYkxhZ2hvQkgzTjdlWU1CeU9zSXJRdyIsIm1hYyI6ImI3NmEzNTBhMGYyZTMxNjA1N2YxNWE4NWU2YzNmN2I2NmMwMDBmZWYzMmY2ODdlOTI0MDI3OGQ2ODI3NDBkOTUifQ%3D%3D; referrer=eyJpdiI6IlBYUFhOUm1tRnIrWjBrdytKb25NVVE9PSIsInZhbHVlIjoiZDBIREJTWFkwU0lGM0tkUkNLcTMwZz09IiwibWFjIjoiOTM4NmRkYTkxMTEyNGVjNTIwNTAxNjJmZTViZTFjYjA1OTQwNDAyMzY3YWQ2ZWY0MTkyM2MzMTA4NTNlZjI1MyJ9; affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; pixels=eyJpdiI6Ijd1VjlzeXZWOVhkcXlmR0p3NDRWY1E9PSIsInZhbHVlIjoiWmozZWJZck5hZDZxK3k2c0VFbDdPdmlWUnlML0tOb [TRUNCATED]
2025-01-10 16:48:03 UTC	897	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:03 GMT Content-Type: image/jpeg Content-Length: 44805 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-af05" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 670 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YNfVOmI0tFUIhsYL7BJShw5yGtvx1jJ03mms1u2b6C2UkBzo1lEbanHdTqc3D7wRpqfu%2Baw8K%2BQO5A5AX68FXt06Za1%2FR3iiEiMoC4GTeGLabW4C2WE5ONF9ed2sWH6qKJU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27080803438a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=7929&min_rtt=1706&rtt_var=4493&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2419&delivery_rate=1711606&cwnd=210&unsent_bytes=0&cid=bc9ceabb98d21ebb&ts=128&x=0"
2025-01-10 16:48:03 UTC	472	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 Data Ascii: JFIF(ICC_PROFILEmntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(w
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c0 00 11 08 02 1c 07 80 03 01 22 00 02 11 Data Ascii: Y[XYZ -mlucenUS Google Inc. 2016C#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 0b 8a e9 bf c9 b7 97 9e 4b d9 52 31 ff 00 1d e5 c7 e4 dc ca 00 00 00 00 00 02 27 8d 32 e1 95 a9 72 4c bc 51 69 27 94 05 89 c5 32 62 dc a2 9e 32 3a 7d db 02 24 f3 ec 21 c9 53 f4 11 43 8e f5 c9 a5 51 10 56 ef 83 42 08 97 86 5a bb 3c 32 c9 ea 49 46 0d bc 9c ff 00 96 6a a9 ec 5c 1d 32 92 8a b6 4c 62 db d5 2d fb 2e 09 e9 4b f2 3d 52 dd 76 35 20 00 00 00 99 6d 43 6e bd c1 2e ef 70 32 69 ad d0 41 a8 4a a5 8e 0d 4e 36 db 76 f7 2c e8 ea 7e 37 a5 6d dd 94 61 d1 9b 49 aa 6d 7a 1a fe 48 f2 d7 ba 20 b0 25 4e 2f 69 2f b0 94 94 62 db d9 00 a3 e7 9f c0 d2 cb 31 5d 7f 1b 7a 77 36 8b 52 76 bb a2 8a 00 02 00 c6 50 69 b7 05 8e 0d 1b ec 86 95 20 31 5d 48 c5 db cb e1 15 f9 17 53 c2 ad 5e e6 12 b7 27 7b d8 45 d4 93 5c 9a c5 75 a5 4a 90 c9 53 8b ee 8a 32 80 00 00 4d d2 b1 69 bc Data Ascii: KR1'2rLQi'2b2:}$!SCQVBZ<2IFj\2Lb-.K=Rv5 mCn.p2iAJN6v,~7maImzH %N/i/b1]zw6RvPi 1]HS^'{E\uJS2Mi
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 82 e8 5e 6d f6 0a bc bf a2 80 00 08 93 7e 58 ee ff 00 80 14 97 e4 7a 7b 2d d9 30 e9 45 4d f7 ad 8d 52 51 54 89 5f ec 97 aa 40 53 57 b8 b6 df 2b 92 80 09 70 83 fd 2b e8 c3 ab d3 71 95 a5 83 7a 71 db 6e 06 9d ec 51 cf d2 83 6d be c8 e8 5b 22 25 e1 9d f6 96 19 71 f2 a1 43 27 cc fd 10 3c ba 5f 23 d8 81 99 cf c6 f4 2f 97 c0 e7 26 bc 31 f3 31 c6 2a 2a 80 c5 f4 2a 69 6a df d0 da 09 28 d2 42 97 9e 1f 23 d9 fa 32 81 c2 2f b6 79 42 d3 25 b4 df ce 4b 16 c4 12 e5 38 ef 14 fd 98 29 c5 79 ad 3f 54 35 97 6f e0 a0 32 9f 59 45 d2 c8 43 ac a5 ba 77 c2 33 eb 41 a9 b6 96 18 fa 11 6e 7a bb 22 f8 ad 6a 52 f3 3a 5c 21 a4 a2 e9 6c ca 14 ab 4e 48 86 06 7f 91 f0 5a 76 ac 06 29 45 49 53 18 01 16 e1 e6 ca e4 ad c6 46 97 1c c3 6e 00 6f 0d 32 8c a5 d5 8a 55 4e f8 e0 ae 9f 51 4d 7a a0 Data Ascii: ^m~Xz{-0EMRQT_@SW+p+qzqnQm["%qC'<_#/&11***ij(B#2/yB%K8)y?T5o2YECw3Anz"jR:\!lNHZv)EISFno2UNQMz
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 28 dc cd ff 00 e4 95 2f 2a df d4 24 dc 9e 88 fc be 0b 49 45 52 d8 81 80 00 11 0d 9f bb 13 96 70 35 fa d7 af fd 10 50 d4 9a ee 5c 1d af 5e e6 65 f4 fb 81 60 00 41 32 5a a2 d0 45 ea 8a 65 11 7a 66 d7 39 40 56 c6 72 4e ee b0 5d 5e 5f d1 40 67 14 ee e8 bd 4b d8 62 ab dc 06 04 d3 5b 3f 86 1a ab 7c 01 46 7d 6c c3 4f 7e 07 a9 cb 10 db 91 c6 2a 3e fd d8 1c 87 44 1c a3 04 b4 df b3 2a 29 7e 49 3a 5d 86 b0 da f9 2d a1 7e 48 f7 b5 ee 8a 4d 3d 9d 8c 89 42 3d 96 5f 04 0f 77 e8 8a 23 43 5e 59 bf 9c 85 ce 3b a4 fd 98 16 4c a5 a7 0b 2d ec 8e 67 39 49 db 6c d7 a0 f5 26 de 5f 25 c1 7a 74 f8 9e 5f 76 58 9a b4 d0 27 69 32 06 4c d6 2d 6e b2 8a 00 12 76 ad 77 06 ad 51 30 f0 b7 1e 32 bd 8b 01 27 8f 54 32 5e 25 7c 94 00 00 00 26 93 54 ce 36 a9 d3 ec 76 99 cf a2 a6 ef 66 59 47 31 Data Ascii: (/$IERp5P\^e`A2ZEezf9@VrN]^_@gKb[?\|F}lO~>D*)~I:]-~HM=B=_w#C^Y;L-g9Il&_%zt_vX'i2L-nvwQ02'T2^%\|&T6vfYG1
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: ca 14 9d b2 a7 89 46 5e b4 c2 51 b9 60 05 06 ee 8d 09 8a a6 f9 28 00 99 2b 89 40 06 20 95 ba 34 92 4d ac 0d 24 b6 40 14 b8 30 7d 5d 17 18 a4 d7 66 6b d4 75 d3 93 47 29 64 1a af f2 1f 78 af 83 58 2f 0d dd b7 96 ce 53 6e 8e a7 1a 4d 24 9f 02 c5 6e 22 74 37 bc df c6 03 f1 c7 ba bf 7c 91 11 d6 ea 52 4a 2f 7d e8 c6 33 70 76 99 d1 d5 84 74 6d 55 b5 19 fe 17 1f 13 ca 5d 8b 15 b8 c4 9d ab 43 22 02 26 af 3d cb 25 65 df d0 19 ca d2 78 d8 c2 dd dd 9d 75 7a af be 0c 5f 47 c6 92 96 e5 8a be 83 b8 7a de 4d 4c d7 4d c1 78 1f df 71 eb ac 49 69 fe 88 8b 00 00 22 3e 79 7c 0a 51 a7 8e e3 5f ed 7e c8 7b cb d8 08 d0 f8 2e 3e 1c 3f b2 84 d5 a0 18 19 eb 7c 8d 37 2d c0 77 78 5f 62 94 69 6a 5b ac 95 b0 c0 49 da b1 91 0c 5c 78 db d8 b0 00 02 35 39 62 1f 60 39 49 47 df b2 16 97 2c Data Ascii: F^Q`(+@ 4M$@0}]fkuG)dxX/SnM$n"t7\|RJ/}3pvtmU]C"&=%exuz_GzMLMxqIi">y\|Q_~{.>?\|7-wx_bij[I\x59b`9IG,
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: bd fd 20 d3 2f de fe 8c a2 74 b7 d8 d1 34 d6 08 d3 2d 5e 7d fd 01 c6 6b 2a 7f c0 1a 18 75 ba 8e f4 2f 93 44 a4 d7 9f f8 39 e6 9a 9b be 4b 04 9a f4 fa b2 bd 37 be cd f6 32 1c 7c ca b9 34 ae a8 c5 2c ee f9 65 11 f9 12 dd 35 ee 86 a5 17 b3 4c c2 28 00 00 08 9f e9 ff 00 d8 a2 24 f5 4a 35 85 7b 81 52 ca ae e6 66 a9 25 b0 a9 39 3f 40 22 2a d9 a5 00 c0 54 82 86 00 44 f0 93 e1 95 42 92 b8 b5 ca 08 bd 51 4f 94 04 35 4e 89 71 d5 83 5d e5 e8 82 92 92 f5 02 56 a8 2c e5 72 8b 4d 35 69 da 19 0e 19 b8 ba 7f d8 14 d5 a6 9f 72 62 db 5a 7b ac 36 1a f3 a5 aa 91 12 9c 7a 73 e6 d6 40 d5 2a 54 27 87 7f 64 2e bc 5b ca 68 d3 0d 00 c0 95 c7 05 00 01 2e 51 5b b4 85 f9 13 d9 37 ec 80 73 ad 0e dd 11 0e ac 64 f2 e9 b2 7a ce 4e 2a e3 48 c4 b8 ae b7 86 99 44 c6 4a 4a af 3d d0 e3 b5 70 Data Ascii: /t4-^}ku/D9K72\|4,e5L($J5{Rf%9?@"TDBQO5Nq]V,rM5irbZ{6zs@T'd.[h.Q[7sdzNHDJJ=p
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 80 c8 23 07 7a a3 8f fb 34 d2 ab 61 c7 60 12 9d ba 6a 9f 05 09 a5 25 4d 13 e2 87 fc a3 fc a0 09 78 64 a5 db 66 34 ad db f8 25 b8 ce 2d b7 e1 25 75 d2 4a d3 b0 35 6a c1 3e cf 74 4c 3a 91 9e df 43 78 c8 14 00 20 18 13 f9 23 cd fb 64 5a db da 0f e7 00 4c e7 18 cd ab dd 64 b4 e3 35 87 68 e5 95 ea 77 bf 73 4e 84 b4 dd ec 5c 56 d1 e3 82 89 7b a9 22 88 80 43 14 bc ac 02 3e 54 31 2d 85 29 28 ab fa 40 67 d7 85 b4 d6 fc 18 6c 75 c6 35 97 e6 63 2e 86 47 4f c8 8b 23 a7 e4 5f 24 16 00 00 06 1d 4e 8d 5c a2 f1 c1 b9 1d 5f 2b 5e 96 06 51 e8 37 4d ba 46 e9 28 aa 5b 02 d9 0c 00 00 00 97 d9 fa 94 29 79 58 2c a0 13 5d d1 94 e3 f9 5d c7 15 df 93 46 dc 9e 95 b7 76 3d 35 e5 c0 1c ff 00 86 7f b4 d7 a5 d2 d0 ed e5 9a 27 63 2e 80 97 18 bd d2 65 01 04 7e 34 b6 6d 7c 83 d7 1d a4 9f Data Ascii: #z4a`j%Mxdf4%-%uJ5j>tL:Cx #dZLd5hwsN\V{"C>T1-)(@glu5c.GO#_$N\_+^Q7MF([)yX,]]Fv=5'c.e~4m\|
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: be a7 fe a8 ac bf 40 1b 75 b8 9b 72 54 90 d4 50 c0 c2 49 ee b7 46 bd 3f 22 60 bc cc 4f c1 2b fd 2f 7f 46 03 96 c5 10 e6 9b 45 01 32 f3 c7 e4 b2 25 e7 87 c9 60 00 00 04 4f a6 a6 a9 ef d9 98 7e 19 6a d2 a8 e9 22 3f ec 7e c8 ba 0e 9f 49 43 2f 2c d0 00 80 00 00 26 3d d7 0c 6d 58 bf 53 f5 1c a4 a2 ad 81 32 74 b4 b5 77 b7 a9 8b e8 4d 6d 93 68 c6 fc 52 dd ff 00 03 ba 74 fe ca 30 8f 42 4d e7 08 e8 8c 54 55 2d 86 04 d0 aa c9 fc 71 e2 bd b0 58 9b a0 27 4b 5b 4d fc e4 57 d4 7b 24 fd 76 2a af 7f a2 80 e7 ea 4d af 0a 4e 3c 93 d3 ea 38 c9 5b c1 af 56 1a e4 92 dc 5d 3e 83 52 b9 35 8e 0b cc 55 3e a4 5b 59 1f e4 87 23 5b b6 51 11 1f 92 1c 87 e4 87 25 80 11 f9 21 c8 7e 48 72 58 9b a5 6c 0e 69 f5 1c a5 87 49 6c 69 d1 9b 9b a6 ee b2 4b e9 39 5c 96 13 ec cb e8 c7 4b 69 ee 5e Data Ascii: @urTPIF?"`O+/FE2%`O~j"?~IC/,&=mXS2twMmhRt0BMTU-qX'K[MW{$v*MN<8[V]>R5U>[Y#[Q%!~HrXliIliK9\Ki^
2025-01-10 16:48:03 UTC	1369	IN	Data Raw: 4c b0 ff 00 b2 85 28 a9 2a 60 0d 5a f5 04 ed 12 a4 e2 f4 cb e1 f2 3d 9f a3 01 b7 4a c2 2a 90 9b 4e 91 40 00 00 00 4b c4 af 92 88 93 72 f0 c7 e5 f0 01 29 5d c5 65 f7 f4 31 fc 39 8a d5 b9 aa 71 8c 69 6e 16 9c e1 5e a5 15 18 a8 46 91 40 26 d2 20 62 d8 59 7e 83 d2 bd c0 57 7b 2b 07 84 dc 9e 11 44 4f 35 1e 5e 7d 80 3a 6a a3 ea f2 cb 00 00 03 39 f5 a3 07 5b b1 c3 a8 a6 b0 03 5d fd c2 6a e2 d0 47 60 79 74 be 40 c6 2e bc 2c d6 2e 95 3c 04 a0 9a c2 a6 b6 1c 5a 94 7f b4 02 97 9e 1e ff 00 f4 59 9c 95 4a 35 cf fd 15 75 ba a0 28 04 30 26 5b 57 22 8f fb 25 f0 3d e5 ec 28 f9 a7 ef ff 00 40 58 00 00 00 0a c0 52 6a 34 d8 a2 9c 9e a9 7c 2e 04 ee 7e 2f d2 b6 5c 9a 00 0b 71 80 13 7a 70 f6 e4 35 a1 4f ca 40 1a 5d ed f6 34 a8 49 d2 56 98 ed 3e e0 31 49 e9 56 c6 47 9e 77 da 3f Data Ascii: L(`Z=JN@Kr)]e19qin^F@& bY~W{+DO5^}:j9[]jG`yt@.,.<ZYJ5u(0&[W"%=(@XRj4\|.~/\qzp5O@]4IV>1IVGw?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49767	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:03 UTC	564	OUT	GET /track/?a=6802&firstcookie=0&tracking_redirect=&referrer=&sessid2=&product=prod7,prod8,prod9,prod11&caller_url=https%3A%2F%2Fnervedefend.com%2Freport%3Faff_id%3D1270%26subid2%3D6988_sessid20250110164723474%26subid%3D2566 HTTP/1.1 Host: tracking.buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:04 UTC	1326	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:04 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-credentials: true p3p: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE" cache-control: no-cache, must-revalidate pragma: no-cache expires: Tue, Jan 12 1999 01:01:01 GMT set-cookie: spiaffid_6802=1270; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:48:04 GMT; Secure vary: Accept-Encoding x-server: WEB_6 strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: DYNAMIC Set-Cookie: spisubid_6802=2566%7C6988_sessid20250110164723474; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:48:04 GMT; Secure Set-Cookie: spicampaign_id_6802=; Domain=.buygoods.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure Set-Cookie: spireferrer_6802=; Domain=.buygoods.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure Set-Cookie: spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:48:04 GMT; Secure Set-Cookie: spisessid2_6802=sessid20250110164818194; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:48:04 GMT; Secure
2025-01-10 16:48:04 UTC	333	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 70 69 5f 66 75 6e 6e 65 6c 5f 63 6f 64 65 6e 61 6d 65 5f 36 38 30 32 3d 3b 20 44 6f 6d 61 69 6e 3d 2e 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 6c 62 3d 30 32 44 69 75 45 4a 67 55 50 6d 6e 6b 4b 57 35 4a 45 54 4e 74 56 4a 47 5a 58 31 4e 62 7a 47 53 38 44 58 51 71 6a 33 61 56 6b 48 4b 53 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 53 61 74 2c 20 31 31 2d 4a 61 6e 2d 32 35 20 31 35 3a 34 38 3a 30 34 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 72 76 Data Ascii: Set-Cookie: spi_funnel_codename_6802=; Domain=.buygoods.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SecureSet-Cookie: __cflb=02DiuEJgUPmnkKW5JETNtVJGZX1NbzGS8DXQqj3aVkHKS; SameSite=Lax; path=/; expires=Sat, 11-Jan-25 15:48:04 GMT; HttpOnlyServ
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 31 62 33 30 0d 0a 0a 76 61 72 20 73 70 69 74 6f 64 61 79 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 76 61 72 20 73 70 69 65 78 70 69 72 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 73 70 69 65 78 70 69 72 65 2e 73 65 74 54 69 6d 65 28 73 70 69 74 6f 64 61 79 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 33 36 30 30 30 30 30 2a 32 34 2a 39 30 29 3b 0a 0a 2f 2f 20 47 65 74 20 68 6f 73 74 6e 61 6d 65 20 77 69 74 68 6f 75 74 20 74 68 65 20 73 75 62 64 6f 6d 61 69 6e 0a 2f 2f 0a 2f 2f 20 54 68 65 20 6d 65 74 68 6f 64 20 6c 6f 6f 6b 73 20 61 74 20 74 68 65 20 73 65 63 6f 6e 64 2d 6c 65 76 65 6c 20 64 6f 6d 61 69 6e 20 66 6f 72 20 63 6f 6d 6d 6f 6e 20 6f 6e 65 73 2c 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 69 66 20 77 65 20 6e 65 65 64 20 74 68 65 0a 2f 2f 20 6c Data Ascii: 1b30var spitoday = new Date();var spiexpire = new Date();spiexpire.setTime(spitoday.getTime() + 36000002490);// Get hostname without the subdomain//// The method looks at the second-level domain for common ones, to determine if we need the// l
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 73 69 64 3d 22 2b 65 73 63 61 70 65 28 22 32 35 36 36 7c 36 39 38 38 5f 73 65 73 73 69 64 32 30 32 35 30 31 31 30 31 36 34 37 32 33 34 37 34 22 29 2b 22 3b 65 78 70 69 72 65 73 3d 22 2b 73 70 69 65 78 70 69 72 65 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 22 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 22 2b 68 6f 73 74 6e 61 6d 65 3b 0a 09 09 09 09 09 0a 09 09 09 09 09 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 63 61 6d 70 61 69 67 6e 5f 69 64 3d 22 2b 65 73 63 61 70 65 28 22 22 29 2b 22 3b 65 78 70 69 72 65 73 3d 22 2b 73 70 69 65 78 70 69 72 65 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 22 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 22 2b 68 6f 73 74 6e 61 6d 65 3b 0a 09 09 09 Data Ascii: document.cookie = "sid="+escape("2566\|6988_sessid20250110164723474")+";expires="+spiexpire.toGMTString()+";path=/;domain="+hostname;document.cookie = "campaign_id="+escape("")+";expires="+spiexpire.toGMTString()+";path=/;domain="+hostname;
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 36 34 38 31 38 31 39 34 22 29 2b 22 26 22 3b 0a 0a 76 61 72 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 63 62 64 20 3d 20 22 62 75 79 67 6f 6f 64 73 68 6f 6d 65 6f 69 6c 73 2e 63 6f 6d 25 32 46 73 65 63 75 72 65 25 32 46 25 33 46 22 3b 0a 76 61 72 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 63 62 64 20 3d 20 22 62 75 79 67 6f 6f 64 73 68 6f 6d 65 6f 69 6c 73 2e 63 6f 6d 2f 73 65 63 75 72 65 2f 3f 22 3b 0a 76 61 72 20 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 63 62 64 20 3d 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 63 62 64 2b 22 73 65 73 73 69 64 32 3d 22 2b 65 73 63 61 70 65 28 22 73 65 73 73 69 64 32 30 32 35 30 31 31 30 31 36 34 38 31 38 31 39 34 22 29 2b 22 26 22 3b 0a 0a 76 61 72 20 73 70 69 5f 70 61 74 74 65 72 6e Data Ascii: 64818194")+"&";var spi_pattern_enc_cbd = "buygoodshomeoils.com%2Fsecure%2F%3F";var spi_pattern_base_cbd = "buygoodshomeoils.com/secure/?";var spi_replace_str_cbd = spi_pattern_base_cbd+"sessid2="+escape("sessid20250110164818194")+"&";var spi_pattern
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 62 67 5f 68 74 6d 6c 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 62 67 5f 68 74 6d 6c 29 3b 0a 76 61 72 20 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 32 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 62 67 5f 68 74 6d 6c 32 29 3b 0a 76 61 72 20 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 73 70 69 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 73 70 69 29 3b 0a 0a 66 6f 72 20 28 73 70 69 5f 69 20 3d 20 30 3b 20 73 70 69 5f 69 20 3c 20 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 2e 6c 65 6e 67 74 68 3b 20 73 70 69 5f 69 2b 2b 29 Data Ascii: bg_html = encodeURIComponent(spi_replace_str_bg_html);var spi_replace_enc_bg_html2 = encodeURIComponent(spi_replace_str_bg_html2);var spi_replace_enc_spi = encodeURIComponent(spi_replace_str_spi);for (spi_i = 0; spi_i < spi_myNodelist.length; spi_i++)
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 3b 0a 09 7d 65 6c 73 65 20 69 66 28 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 2e 69 6e 64 65 78 4f 66 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 29 20 3e 20 2d 31 29 0a 09 7b 0a 09 09 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 2e 72 65 70 6c 61 63 65 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 2c 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 29 3b 0a 09 09 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 5b 73 70 69 5f 69 5d 2e 68 72 65 66 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 3b 0a 09 7d 0a 0a 09 2f 2f 20 42 75 79 47 6f 6f 64 73 20 48 54 4d 4c 32 20 2d 20 6f 72 64 65 72 2e 68 74 6d 6c Data Ascii: i_track_link;}else if(spi_track_link.indexOf(spi_pattern_enc_bg_html) > -1){spi_track_link = spi_track_link.replace(spi_pattern_enc_bg_html,spi_replace_enc_bg_html);spi_myNodelist[spi_i].href = spi_track_link;}// BuyGoods HTML2 - order.html
2025-01-10 16:48:04 UTC	123	IN	Data Raw: 63 6b 5f 6c 69 6e 6b 2e 72 65 70 6c 61 63 65 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 73 70 69 2c 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 73 70 69 29 3b 0a 09 09 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 5b 73 70 69 5f 69 5d 2e 68 72 65 66 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 3b 0a 09 7d 0a 7d 20 20 20 20 20 20 20 20 0a 09 09 09 0d 0a Data Ascii: ck_link.replace(spi_pattern_enc_spi,spi_replace_enc_spi);spi_myNodelist[spi_i].href = spi_track_link;}}
2025-01-10 16:48:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49770	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:04 UTC	1977	OUT	GET /images/products/prod1/1-bottle.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:04 UTC	906	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:04 GMT Content-Type: image/png Content-Length: 237735 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-3a0a7" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4967 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fug%2FLQNHCyz5LipdVka1fEGMrO304TBXA8ruy8%2BexYOnvJOjhLBKYg%2BEjotlVwdqpboRjR3vq%2FGYbHrpdW%2F7Si70dxyt%2Fqduono3Mx3ZwgzRLrbgRkqa9OUWe5SREkun%2BdA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2709ac0b5e66-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2042&min_rtt=1975&rtt_var=788&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2555&delivery_rate=1478481&cwnd=182&unsent_bytes=0&cid=53c349e500fa1558&ts=130&x=0"
2025-01-10 16:48:04 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8d 00 00 02 58 08 06 00 00 00 9e bc ba d0 00 00 20 00 49 44 41 54 78 9c ec bd 09 b0 6d e9 55 1e b6 fe 73 ce 9d 5f bf a1 df 6b f5 a0 d7 ad 06 8d 6e d1 c2 6e 01 92 ac 81 c1 b2 02 82 04 30 65 a3 d8 01 ca 15 0a 02 15 88 8b aa c4 a9 90 04 92 8a a7 54 aa 5c 60 b0 ab 62 42 39 09 0e d8 54 31 b8 40 80 19 0c 66 32 08 2c 23 68 a9 a5 b6 a4 ee 56 8f ea d7 af df 74 e7 73 ce 9f 5a fb ec 75 df ba df fb d6 bf f7 b9 f7 dc 7b cf bd f7 ac aa 53 e7 9c bd ff 79 ff ff f7 ad b5 fe 61 27 99 b0 dc b8 71 63 d2 49 ee 4b 52 da 5d c5 9c 73 f5 8d d7 db 8a c6 2f c5 65 f7 fd 35 f6 1b af f9 f2 61 7a e3 fe 2f 95 89 b5 43 a9 7d 9a da ce ee d7 61 e6 45 64 49 44 96 45 64 9e 84 d5 eb 77 89 c8 82 86 4b 29 e9 ff b3 75 58 8b 1b 4a ce b9 5b Data Ascii: PNGIHDRX IDATxmUs_knn0eT\`bB9T1@f2,#hVtsZu{Sya'qcIKR]s/e5az/C}aEdIDEdwK)uXJ[
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 9e 5d d3 f2 69 3d f4 9a 96 cb 8f 0f ff d1 b8 76 dd 7e 5b fb 59 df b5 76 b0 f4 f4 5b af d9 7f 2d 0b 3c 8f 43 97 fb ee bb ef 48 f3 2f 49 6f 6a 4b 36 93 c3 94 a5 1a 64 a5 fe 7d 49 44 2e 88 c8 3d 22 72 ce 95 43 ef 5d 14 91 d7 d4 d7 2f d5 c0 5c 49 0d cc 67 dd 67 a5 26 86 0e d6 65 af a4 8d f1 23 72 9d 44 da 4d b2 17 60 d1 b4 0d b8 a2 3c 95 b4 52 4a d7 95 6c 3a 9d ce cd 94 d2 8d 6e b7 7b 2b a5 d4 77 e1 95 ac 5e d6 4f b7 db bd 9a 52 d2 cf a6 25 21 22 1a ff 4a 4a e9 a5 94 d2 2b 35 d1 49 fd bd 61 40 eb 85 5d 9b c9 4c 50 66 a4 71 f2 44 35 e9 07 45 e4 72 ad e5 ab dc 2d 22 0f 8b c8 43 76 2d a5 a4 1a f9 03 35 31 dc 6b 7d a1 b6 10 e6 58 ab 94 c0 34 ba 67 20 59 92 b6 20 6d 1a a7 09 03 bd 92 b0 fb a5 72 b3 bc 91 ac da 48 a9 cc 78 bd ce a3 9b 73 d6 67 76 b7 b5 9f e5 ef c3 Data Ascii: ]i=v~[Yv[-<CH/IojK6d}ID.="rC]/\Igg&e#rDM`<RJl:n{+w^OR%!"JJ+5Ia@]LPfqD5Er-"Cv-51k}X4g Y mrHxsgv
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: d7 c3 e1 f0 89 9c f3 06 5a 58 33 99 8c cc 36 f7 dd 29 4a a4 5f 26 22 ef 13 91 af 11 91 b7 d7 2e a7 3b 06 9a 69 fc a6 a1 db c7 5f 33 e0 30 53 5f 07 04 0e 44 01 30 61 e5 3f 28 93 5c cb f0 d2 4b 2f 55 83 d8 ac 9e a3 10 3f a1 dc e4 9e 32 89 2c 8d 92 8b a9 e4 5a c2 a5 a4 51 da 51 fc a6 6f 69 20 70 16 9f 91 0e 5e 13 e8 3f 68 b1 08 58 23 48 c4 4c 39 40 0b 47 bf cf 9e 3d 2b 2b 2b d5 50 b8 63 15 98 df 54 c8 ac 20 66 7d 9b 78 a5 c9 94 2e 6f a1 18 81 e8 84 bb 8d 9d e4 16 06 a0 95 36 1c 0e 75 39 f1 1f 0e 87 c3 5f c9 39 ff e6 70 38 fc 84 11 ae 91 61 9e 6d ee db b3 cc 2c 8d 91 e8 7c c4 07 45 e4 1b eb f9 88 07 ec 06 76 78 b3 1a ec 63 e4 e0 b5 41 73 3d a9 15 61 3b 65 0d 90 6d 70 59 a7 6d 22 b1 83 ec bc e6 9e b0 f2 1e 15 61 30 d7 4c 54 6f 4f 2c 91 cb 07 d3 2c b9 85 24 00 Data Ascii: ZX36)J_&".;i_30S_D0a?(\K/U?2,ZQQoi p^?hX#HL9@G=+++PcT f}x.o6u9_9p8am,\|EvxcAs=a;empYm"a0LToO,,$
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 71 a7 9c e4 f5 66 ba 32 ea fd 4d 81 c6 75 21 9c 14 31 d2 d0 55 5e 47 b9 ec b0 e4 bb f6 ff 99 fb a7 24 cc 02 60 d6 25 e6 17 ed 98 ce 64 f7 38 82 1f 86 17 20 c0 48 0b 2f d5 09 b5 75 96 57 a9 3e cc b5 c5 ea 80 bf 4b d6 9e 3f 3a bd a9 bc c9 cd 1d e0 f3 63 cf 07 35 7f 6c 4b 2c 27 96 6d dc eb 58 57 7b 56 bd 5e ef 47 73 ce 78 a4 fc a9 17 39 08 4b 63 8a 40 f8 7b db 6a 09 4d 03 b7 6d 1a 72 0c 27 d0 c6 01 e2 83 90 c8 8d c3 ca 88 61 98 ab a2 c9 72 88 c0 9d 5d 67 ee 2b 2f 08 c2 11 b9 f9 bd 09 a9 61 42 9a b9 ae 4a f5 c2 b8 18 16 27 a6 b1 9e a5 89 67 74 3d a5 fa 98 19 7f 0f 09 08 89 d5 d7 d9 da c1 7e 97 9e 1d de f7 47 b2 20 69 44 cf d6 c7 65 e2 f3 c2 f4 3a 9d 4e af d3 e9 7c 70 30 18 fc cc cc da d8 2d 27 76 4e 23 a5 f4 96 c3 ce d3 1f 51 30 ed 92 ea a3 d1 a3 01 7c 98 82 Data Ascii: qf2Mu!1U^G$`%d8 H/uW>K?:c5lK,'mXW{V^Gsx9Kc@{jMmr'ar]g+/aBJ'gt=~G iDe:N\|p0-'vN#Q0\|
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 79 46 1a bb e5 d4 92 46 a4 e1 9d 16 39 ca ba 96 b4 c4 b6 ff 19 e8 f9 7b cc 85 c4 c0 98 fd 67 e4 23 00 fe 08 44 ec 54 de 68 a9 2d 6a df 19 5c 61 4c d3 66 c7 62 b4 11 96 5f e9 b9 60 3b b0 36 51 d2 f0 6e 26 b4 36 84 ec a9 c8 c4 9d e5 09 04 df 9d 11 b5 1b 96 13 9f 0d 9b 03 69 aa 2b 12 98 7b 7e 0b fa 22 a7 e3 a4 0c 1e 86 cc 2c 8d 5a da 6a 2d 27 45 4a 27 95 1e 96 44 20 ce b4 7b 69 58 ca 89 71 11 00 04 ce 84 8a 40 3d c1 e4 69 94 17 e6 cb ca 57 b2 84 10 c0 31 7d af 9d 7b 40 c3 23 53 98 e5 12 bd af 22 6a 2b 0c 1f b5 5f e4 c2 41 6b 21 b2 c0 b0 fc c9 1d 64 88 cb 70 91 48 30 2f ac 1f 23 62 d6 ae 19 dc 7a a5 ba ea 2a 4c 5c c5 35 93 93 7d 34 7a 51 50 d3 38 2d 84 61 83 51 8f 44 3f 2a 6b a3 0d 10 63 58 01 90 40 41 4d b1 24 4d 6e 9d 36 d7 4a e1 4d a2 72 7a cb 82 b9 78 98 Data Ascii: yFF9{g#DTh-j\aLfb_`;6Qn&6i+{~",Zj-'EJ'D {iXq@=iW1}{@#S"j+_Ak!dpH0/#bzL\5}4zQP8-aQD?kcX@AM$Mn6JMrzx
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: b3 c9 92 88 5c 3d 18 17 c9 02 35 68 74 3f 60 bc d2 f3 62 c4 82 00 5b 6a c3 a6 f2 a0 a5 c0 ca 19 b9 5a ec bf 07 e6 a8 dc a8 a1 97 80 17 81 bd 64 0d 31 37 8f 00 c0 47 00 8d 75 f6 4b 6a bd 95 61 2b a7 a2 39 99 44 5c 6e 58 6f 5f 56 36 e7 82 f5 8b 96 0f cf 2c 8d dd 72 aa 97 dc ee 97 28 50 8e 0b 69 b0 e3 2d 0e 4b 22 4b 82 91 03 02 29 0a bb de 74 74 47 13 51 30 97 0f b3 5c a2 f2 23 21 22 71 44 da bb 10 f0 8e ae 49 e1 34 58 04 39 2c 43 82 49 73 56 0e 9f 1e d3 e0 3d 39 e1 61 83 98 3e 23 12 66 b5 61 3c b6 bb 1c d3 2a 59 82 fe bf 9d 16 5c 6a 0b 16 cf ee cf 48 63 b7 9c 5a 4b 03 07 ef 24 3a c6 ac 73 b5 13 04 95 d2 f1 19 26 a5 53 79 19 c9 30 ad 9b 11 07 02 68 e9 25 5a 18 b7 c9 da f0 bf 31 ff 88 68 4c 70 f7 b3 d7 c6 a5 61 27 33 82 2e a6 9d c1 ad 85 e5 f4 82 ef f1 f0 ab Data Ascii: \=5ht?`b[jZd17GuKja+9D\nXo_V6,r(Pi-K"K)ttGQ0\#!"qDI4X9,CIsV=9a>#fa<*Y\jHcZK$:s&Sy0h%Z1hLpa'3.
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: ff d9 e0 cc 81 2f 1e 81 b5 8d 2b a1 29 4c 1b 6b 86 95 85 85 6b 72 e9 44 96 50 09 8c db 48 db 76 29 01 a9 07 7d 66 ad a0 85 8a 24 ce 2c 2c b6 c4 d6 a7 19 59 25 a5 39 9e e8 b9 30 97 58 f4 bc d8 3d 7c c6 f8 ec 66 72 5b 4e aa a5 71 64 2f 82 9f 75 b2 f6 e2 81 84 69 e3 6d 2c 07 69 b1 13 5b e0 b9 b4 39 c8 90 c5 6f 6b 25 09 80 6a e4 d6 61 75 43 d7 88 07 2f 04 66 3c aa 83 c5 89 a4 c9 cd d4 a6 0d b0 6e 48 42 d1 31 22 d1 7f 21 44 c0 88 98 b5 ab bf e6 d3 57 62 6a 6a 6f d6 5e e8 16 9b c9 6d 39 a9 a4 11 1f 89 5a 4b c9 cd 31 93 c3 11 a6 d9 45 cf 02 41 d3 83 8b 27 8c 88 64 18 68 a1 44 9a 6b 82 15 3d 6d 5c 55 42 c0 31 2a 0f b3 3c 58 ba 08 d0 91 46 8d e5 64 fb 21 18 39 b1 6b cc 3d 84 e1 30 fd 68 ff 05 e6 81 2f 6b 62 79 65 58 d6 9b e0 54 5c 6c 53 66 69 d9 ff 36 2f a4 c2 ba Data Ascii: /+)LkkrDPHv)}f$,,Y%90X=\|fr[Nqd/uim,i[9ok%jauC/f<nHB1"!DWbjjo^m9ZK1EA'dhDk=m\UB1*<XFd!9k=0h/kbyeXT\lSfi6/
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: ab fc 48 66 58 df 36 d7 59 7d 5a 1c b7 3e c8 6d 34 a7 53 26 33 f7 94 93 93 4c 1c 06 12 73 73 73 72 e1 c2 85 9d 81 69 e2 37 46 e1 ab 39 a5 a5 fb a7 04 e2 b8 61 cb 03 29 de 8f c2 e3 37 c6 f1 e9 e2 7d 21 9b c6 58 39 11 b0 d1 1d 83 84 16 b9 fc a2 49 e7 c8 25 62 40 cb de 93 61 e9 a0 36 ce 2c 82 68 97 74 09 3c 19 a9 b4 79 b6 3e 6f 3c 01 97 b9 e6 da 94 a7 e4 02 24 96 c0 1d e1 98 0b ce a7 59 b2 b4 04 2c a4 7a c9 ed 1d e1 4f bb cc 0e 2c 6c b8 36 8d 82 26 3e d6 21 12 1d 10 f3 f3 f3 b2 b4 b4 54 04 76 fd b6 fd 1c fe 9e 5d b3 eb fa df 5f 63 e1 11 90 2d 1e fb 1d 85 41 40 8f c8 02 ad 15 96 2e 6a df cc 35 e4 ef 25 72 58 61 64 09 d8 7d db 9b 81 80 e9 f7 23 20 00 22 18 b2 a5 a8 16 d7 fe 2b f1 23 d1 fb 23 38 f4 a3 71 2c 9e 9d f8 8a 4a 81 bf 1e bd ab 02 5d 58 02 84 e9 f3 f7 Data Ascii: HfX6Y}Z>m4S&3Lsssri7F9a)7}!X9I%b@a6,ht<y>o<$Y,zO,l6&>!Tv]_c-A@.j5%rXad}# "+##8q,J]X
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 2b 97 50 fb f7 60 e4 e3 fb bc 2c 7f fb 36 02 d0 ff 1e 20 2c 1d af e5 a1 1f d9 06 8c 69 71 7e 80 d8 ff e4 e6 6c c4 4d 70 e2 c0 44 f0 67 ed e9 89 82 cd 35 f8 b2 23 29 5a 5a 7e 5e 89 b9 ce 98 85 23 c4 da f1 04 8c e9 f8 32 fa 72 98 b5 e7 b5 4e b4 62 2c 0e 92 88 90 b9 14 3c ee c2 1f 73 8e 75 f2 e2 c9 51 9c c5 c2 ea ea 2d 21 6f f1 44 04 68 c4 84 0a 8d ef 97 d8 47 ed 1a 92 3a 5a 0d 38 ef 60 5a bf f6 5d bb 6f c2 26 ea f1 3f ae 10 c3 3e 89 73 26 de 85 e5 fb bb f5 6f 2b 8f fd f6 1f 75 73 d9 ff ba 1e 83 92 25 78 5a e5 a4 92 c6 ce 53 46 73 db c0 57 3f 5b 5b 5b 3b bf 3d 48 1b 78 e0 1c c4 10 56 2c 79 8d 16 35 66 4b 43 d3 54 13 59 3f 9a 9f 7e f4 37 ba b0 bc 06 66 1d 5d 3b f1 e2 e2 e2 ae 01 a0 d7 74 f2 4f bf ed bf 5d 4b b5 0f d7 06 86 0d 34 af e5 21 c8 a3 ab 87 69 c7 08 Data Ascii: +P`,6 ,iq~lMpDg5#)ZZ~^#2rNb,<suQ-!oDhG:Z8`Z]o&?>s&o+us%xZSFsW?[[[;=HxV,y5fKCTY?~7f];tO]K4!i
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 5f 5f 59 12 a6 8d 98 5f 56 cf dc c9 e0 7b 4d c1 0a 24 2c 13 03 d7 92 c6 79 d0 ed d4 e6 5e f4 7b 2f 82 20 c8 b4 74 ef 76 13 42 36 1e 84 50 33 cf 64 03 1e fa f1 91 4c 50 e3 8d 48 03 5d 39 fa ac 87 b0 74 d6 87 f7 cf 1f eb d1 f4 5c 2c 6c e4 c6 62 84 e1 ef f9 e7 c6 fe 97 9e 29 b3 66 7d 9b 96 2c 13 01 85 47 dc 42 0c 7f 0d c3 7b cb c5 93 bf bf e6 e7 95 f4 b7 02 bd 5a 13 3e 3d 1d db 6a 81 28 69 a8 02 f8 99 cf 7c 46 3e f6 b1 8f 55 ee ab cb 97 2f 57 e3 b9 9e e4 ae f2 55 2f 84 f5 8f 7e bf 3f 98 9b 9b fb 7b 9d 4e e7 7f 62 75 9c c9 48 4e f4 92 db ba 33 3e 35 1c 0e bf 6e 73 73 f3 cb fb fd fe f7 6f 6e 6e fe 65 1b 94 4a 04 1f ff f8 c7 e5 13 9f f8 44 e5 86 fa d0 87 3e 24 df fa ad df 5a 11 87 92 83 6a 30 6a 0a fb d5 26 3a 00 d4 04 ee c0 91 09 d2 60 15 30 4d f5 30 ea 8f 82 Data Ascii: __Y_V{M$,y^{/ tvB6P3dLPH]9t\,lb)f},GB{Z>=j(i\|F>U/WU/~?{NbuHN3>5nssonneJD>$Zj0j&:`0M0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49760	142.250.186.78	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:04 UTC	617	OUT	GET /iframe_api HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nervedefend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:04 UTC	2407	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Fri, 10 Jan 2025 16:48:04 GMT Date: Fri, 10 Jan 2025 16:48:04 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Content-Security-Policy: require-trusted-types-for 'script';report-uri /cspreport Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=Rctl5ZNC77k; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=dEH-6bbwSQ4; Domain=.youtube.com; Expires=Wed, 09-Jul-2025 16:48:04 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSw%3D%3D; Domain=.youtube.com; Expires=Wed, 09-Jul-2025 16:48:04 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: __Secure-ROLLOUT_TOKEN=CMyU3feu7vzFGBDG1ozezeuKAxjG1ozezeuKAw%3D%3D; Domain=youtube.com; Expires=Wed, 09-Jul-2025 16:48:04 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 16:48:04 UTC	1000	IN	Data Raw: 33 65 31 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 33 65 64 65 33 36 66 32 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 7d 7d 29 3b 73 63 72 69 70 74 55 72 6c 3d 74 74 50 6f 6c 69 63 79 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 Data Ascii: 3e1var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/3ede36f2\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptUR
2025-01-10 16:48:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49775	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:04 UTC	1999	OUT	GET /js/app.js?id=a5d2a03ff186afa79e79 HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:04 UTC	915	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:04 GMT Content-Type: application/javascript Content-Length: 568463 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:56 GMT ETag: "610d46b0-8ac8f" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 671 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fc0%2FlqjUGSCevFSgTAGCsNys00hAdWnEuan%2BExolM0scoG3jQSlWwnZH6%2BcxXYQcuLfArZIVJYQSbx6BaXgnuoccjyuRt7TQlCEHtG%2FMIKBCfSyAR2mgoo26eAXv9rAvSVw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe270bbedc7ca0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3420&min_rtt=2034&rtt_var=1753&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=2599&delivery_rate=1435594&cwnd=174&unsent_bytes=0&cid=a659d578c8df0f6b&ts=136&x=0"
2025-01-10 16:48:04 UTC	454	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 69 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 65 2c 69 2e 63 3d 74 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 2e 6f 28 65 2c Data Ascii: /! For license information please see app.js.LICENSE.txt /!function(e){var t={};function i(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 69 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 31 26 74 26 26 28 65 3d 69 28 65 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 69 2e 72 28 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 32 26 74 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 Data Ascii: y(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(v
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 65 41 64 74 73 53 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 28 32 32 34 26 65 5b 74 2b 35 5d 29 3e 3e 35 2c 6e 3d 65 5b 74 2b 34 5d 3c 3c 33 3b 72 65 74 75 72 6e 20 36 31 34 34 26 65 5b 74 2b 33 5d 7c 6e 7c 69 7d 2c 70 61 72 73 65 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 3d 3d 22 49 22 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 26 26 65 5b 74 2b 31 5d 3d 3d 3d 22 44 22 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 26 26 65 5b 74 2b 32 5d 3d 3d 3d 22 33 22 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3f 22 74 69 6d 65 64 2d 6d 65 74 61 64 61 74 61 22 3a 21 30 26 65 5b 74 5d 26 26 32 34 30 3d 3d 28 32 34 30 26 65 5b 74 2b 31 5d 29 3f 22 61 75 64 69 6f 22 3a 6e 75 6c 6c 7d 2c 70 61 72 Data Ascii: eAdtsSize:function(e,t){var i=(224&e[t+5])>>5,n=e[t+4]<<3;return 6144&e[t+3]\|n\|i},parseType:function(e,t){return e[t]==="I".charCodeAt(0)&&e[t+1]==="D".charCodeAt(0)&&e[t+2]==="3".charCodeAt(0)?"timed-metadata":!0&e[t]&&240==(240&e[t+1])?"audio":null},par
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 6f 6e 28 29 7b 76 61 72 20 65 3d 31 30 30 2c 74 3d 33 2c 72 3d 30 2c 61 3d 31 30 30 2c 73 3d 30 2c 6f 3d 31 30 30 2c 75 3d 22 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 68 69 73 2c 7b 77 69 64 74 68 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 6e 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 57 69 64 74 68 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 30 20 61 6e 64 20 31 30 30 2e 22 29 3b 65 3d 74 7d 7d 2c 6c 69 6e 65 73 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 2c 73 65 74 3a 66 75 Data Ascii: on(){var e=100,t=3,r=0,a=100,s=0,o=100,u="";Object.defineProperties(this,{width:{enumerable:!0,get:function(){return e},set:function(t){if(!n(t))throw new Error("Width must be between 0 and 100.");e=t}},lines:{enumerable:!0,get:function(){return t},set:fu
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 28 22 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 20 73 68 69 6d 20 6f 6e 6c 79 20 61 63 63 65 70 74 73 20 6f 6e 65 20 70 61 72 61 6d 65 74 65 72 2e 22 29 3b 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2c 6e 65 77 20 65 7d 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 22 50 61 72 73 69 6e 67 45 72 72 6f 72 22 2c 74 68 69 73 2e 63 6f 64 65 3d 65 2e 63 6f 64 65 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 74 7c 7c 65 2e 6d 65 73 73 61 67 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 69 2c 6e 29 7b 72 65 74 75 72 6e 20 33 36 30 30 2a 28 30 7c 65 29 2b 36 30 2a 28 30 7c 74 29 2b 28 30 7c 69 29 2b 28 30 7c 6e 29 2f 31 65 33 7d 76 61 72 20 69 3d 65 2e 6d 61 74 63 Data Ascii: ("Object.create shim only accepts one parameter.");return e.prototype=t,new e}}();function a(e,t){this.name="ParsingError",this.code=e.code,this.message=t\|\|e.message}function s(e){function t(e,t,i,n){return 3600(0\|e)+60(0\|t)+(0\|i)+(0\|n)/1e3}var i=e.matc
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 70 65 72 63 65 6e 74 28 65 2c 61 5b 30 5d 29 2c 32 3d 3d 3d 61 2e 6c 65 6e 67 74 68 26 26 6e 2e 61 6c 74 28 22 70 6f 73 69 74 69 6f 6e 41 6c 69 67 6e 22 2c 61 5b 31 5d 2c 5b 22 73 74 61 72 74 22 2c 22 63 65 6e 74 65 72 22 2c 22 65 6e 64 22 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 69 7a 65 22 3a 6e 2e 70 65 72 63 65 6e 74 28 65 2c 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 6c 69 67 6e 22 3a 6e 2e 61 6c 74 28 65 2c 74 2c 5b 22 73 74 61 72 74 22 2c 22 63 65 6e 74 65 72 22 2c 22 65 6e 64 22 2c 22 6c 65 66 74 22 2c 22 72 69 67 68 74 22 5d 29 7d 7d 29 2c 2f 3a 2f 2c 2f 5c 73 2f 29 2c 74 2e 72 65 67 69 6f 6e 3d 6e 2e 67 65 74 28 22 72 65 67 69 6f 6e 22 2c 6e 75 6c 6c 29 2c 74 2e 76 65 72 74 69 63 61 6c 3d 6e 2e 67 65 74 28 22 76 65 72 74 69 63 61 6c 22 2c Data Ascii: percent(e,a[0]),2===a.length&&n.alt("positionAlign",a[1],["start","center","end"]);break;case"size":n.percent(e,t);break;case"align":n.alt(e,t,["start","center","end","left","right"])}}),/:/,/\s/),t.region=n.get("region",null),t.vertical=n.get("vertical",
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 65 46 6c 6f 61 74 28 74 29 29 3e 3d 30 26 26 74 3c 3d 31 30 30 29 26 26 28 74 68 69 73 2e 73 65 74 28 65 2c 74 29 2c 21 30 29 7d 7d 3b 76 61 72 20 63 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 65 78 74 61 72 65 61 22 29 2c 68 3d 7b 63 3a 22 73 70 61 6e 22 2c 69 3a 22 69 22 2c 62 3a 22 62 22 2c 75 3a 22 75 22 2c 72 75 62 79 3a 22 72 75 62 79 22 2c 72 74 3a 22 72 74 22 2c 76 3a 22 73 70 61 6e 22 2c 6c 61 6e 67 3a 22 73 70 61 6e 22 7d 2c 64 3d 7b 77 68 69 74 65 3a 22 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 22 2c 6c 69 6d 65 3a 22 72 67 62 61 28 30 2c 32 35 35 2c 30 2c 31 29 22 2c 63 79 61 6e 3a 22 72 67 62 61 28 30 2c 32 35 35 2c 32 35 35 2c 31 29 22 2c 72 65 64 3a 22 72 67 62 61 28 32 35 35 2c 30 2c 30 2c 31 29 22 2c 79 65 6c Data Ascii: eFloat(t))>=0&&t<=100)&&(this.set(e,t),!0)}};var c=n.createElement("textarea"),h={c:"span",i:"i",b:"b",u:"u",ruby:"ruby",rt:"rt",v:"span",lang:"span"},d={white:"rgba(255,255,255,1)",lime:"rgba(0,255,0,1)",cyan:"rgba(0,255,255,1)",red:"rgba(255,0,0,1)",yel
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 6e 3d 74 3f 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 3a 22 63 6f 6c 6f 72 22 2c 72 3d 64 5b 69 5d 3b 67 2e 73 74 79 6c 65 5b 6e 5d 3d 72 7d 7d 29 29 2c 67 2e 63 6c 61 73 73 4e 61 6d 65 3d 5f 2e 6a 6f 69 6e 28 22 20 22 29 7d 6d 2e 70 75 73 68 28 79 5b 31 5d 29 2c 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 67 29 2c 6c 3d 67 7d 72 65 74 75 72 6e 20 75 7d 76 61 72 20 67 3d 5b 5b 31 34 37 30 2c 31 34 37 30 5d 2c 5b 31 34 37 32 2c 31 34 37 32 5d 2c 5b 31 34 37 35 2c 31 34 37 35 5d 2c 5b 31 34 37 38 2c 31 34 37 38 5d 2c 5b 31 34 38 38 2c 31 35 31 34 5d 2c 5b 31 35 32 30 2c 31 35 32 34 5d 2c 5b 31 35 34 34 2c 31 35 34 34 5d 2c 5b 31 35 34 37 2c 31 35 34 37 5d 2c 5b 31 35 34 39 2c 31 35 34 39 5d 2c 5b 31 35 36 33 2c 31 35 36 33 5d 2c Data Ascii: ){var n=t?"background-color":"color",r=d[i];g.style[n]=r}})),g.className=_.join(" ")}m.push(y[1]),l.appendChild(g),l=g}return u}var g=[[1470,1470],[1472,1472],[1475,1475],[1478,1478],[1488,1514],[1520,1524],[1544,1544],[1547,1547],[1549,1549],[1563,1563],
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 32 36 35 35 37 2c 31 32 36 35 35 37 5d 2c 5b 31 32 36 35 35 39 2c 31 32 36 35 35 39 5d 2c 5b 31 32 36 35 36 31 2c 31 32 36 35 36 32 5d 2c 5b 31 32 36 35 36 34 2c 31 32 36 35 36 34 5d 2c 5b 31 32 36 35 36 37 2c 31 32 36 35 37 30 5d 2c 5b 31 32 36 35 37 32 2c 31 32 36 35 37 38 5d 2c 5b 31 32 36 35 38 30 2c 31 32 36 35 38 33 5d 2c 5b 31 32 36 35 38 35 2c 31 32 36 35 38 38 5d 2c 5b 31 32 36 35 39 30 2c 31 32 36 35 39 30 5d 2c 5b 31 32 36 35 39 32 2c 31 32 36 36 30 31 5d 2c 5b 31 32 36 36 30 33 2c 31 32 36 36 31 39 5d 2c 5b 31 32 36 36 32 35 2c 31 32 36 36 32 37 5d 2c 5b 31 32 36 36 32 39 2c 31 32 36 36 33 33 5d 2c 5b 31 32 36 36 33 35 2c 31 32 36 36 35 31 5d 2c 5b 31 31 31 34 31 30 39 2c 31 31 31 34 31 30 39 5d 5d 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b Data Ascii: 26557,126557],[126559,126559],[126561,126562],[126564,126564],[126567,126570],[126572,126578],[126580,126583],[126585,126588],[126590,126590],[126592,126601],[126603,126619],[126625,126627],[126629,126633],[126635,126651],[1114109,1114109]];function v(e){
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 74 2e 61 6c 69 67 6e 2c 66 6f 6e 74 3a 69 2e 66 6f 6e 74 2c 77 68 69 74 65 53 70 61 63 65 3a 22 70 72 65 2d 6c 69 6e 65 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 2c 74 68 69 73 2e 61 70 70 6c 79 53 74 79 6c 65 73 28 6e 29 2c 74 68 69 73 2e 64 69 76 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 63 75 65 44 69 76 29 3b 76 61 72 20 72 3d 30 3b 73 77 69 74 63 68 28 74 2e 70 6f 73 69 74 69 6f 6e 41 6c 69 67 6e 29 7b 63 61 73 65 22 73 74 61 72 74 22 3a 72 3d 74 2e 70 6f 73 69 74 69 6f 6e 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 65 6e 74 65 72 22 3a 72 3d 74 2e 70 6f 73 69 74 69 6f 6e 2d 74 2e 73 69 7a 65 2f 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 65 6e 64 22 3a 72 3d 74 2e 70 6f 73 69 74 69 6f 6e 2d 74 2e 73 69 7a 65 7d 22 22 3d 3d Data Ascii: t.align,font:i.font,whiteSpace:"pre-line",position:"absolute"},this.applyStyles(n),this.div.appendChild(this.cueDiv);var r=0;switch(t.positionAlign){case"start":r=t.position;break;case"center":r=t.position-t.size/2;break;case"end":r=t.position-t.size}""==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49776	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:04 UTC	2639	OUT	GET /images/custom/image8.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:04 UTC	906	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:04 GMT Content-Type: image/png Content-Length: 1280521 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-138a09" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4967 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RZOBAF5qaGDQjDd7PCfH5gR9Ux1qIglPvsCp9j6MsU%2BeZkxoMIYpvsT%2BmqufP%2B%2Bij10Lfs%2BKEL8dtCi4G44GxVZ4Xm38ZzpVk94ARvmcSfgYR%2BG4BDpUwSvMO9xjbe2IUXQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe270c4c3415bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1578&min_rtt=1559&rtt_var=598&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2839&recv_bytes=3217&delivery_rate=1872995&cwnd=113&unsent_bytes=0&cid=5c0a3f049216f589&ts=164&x=0"
2025-01-10 16:48:04 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 02 a6 08 06 00 00 00 15 5d 50 b2 00 00 20 00 49 44 41 54 78 01 c4 bd 75 94 1e d7 99 af 9b 73 cf 19 38 49 ec c4 24 5b 8c 2d 68 66 66 a6 8f b9 3f 68 46 75 8b a9 c5 d0 62 46 8b 99 99 99 c9 b2 98 c1 b2 15 3b 71 78 26 c9 cd 64 26 93 c9 99 3c 77 bd d5 da ed 4f 8a e3 64 ce bd 67 dd 3f 7e 6b 57 ed da 54 5f 95 b4 f6 d3 bf 77 ef fa 56 96 ae 2f d9 fa 7e 9a 72 0c 81 e4 99 82 c9 37 87 68 2a b0 84 52 64 0b d7 54 68 0d 43 49 f2 8a ed 11 e8 1c 91 14 3b a3 d1 b9 62 d0 97 c4 62 f4 c4 ff 99 24 df e0 8e d3 24 c7 52 56 ea 14 da 23 29 b0 45 90 67 09 23 df 1a ae 49 ce e5 58 f2 72 4c 21 64 1b 83 5f 91 e4 89 72 cd a1 af 48 ca 8b 24 5f d5 91 63 d5 ee 37 a5 79 b6 08 72 ad e1 9a 72 a4 5f 69 e7 e5 b9 5c 2b 70 44 69 2a Data Ascii: PNGIHDR]P IDATxus8I$[-hff?hFubF;qx&d&<wOdg?~kWT_wV/~r7hRdThCI;bb$$RV#)Eg#IXrL!d_rH$_c7yrr_i\+pDi
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 81 ad 32 13 4b 59 26 46 6f 1a 3a 77 22 05 8e e8 d6 e7 69 0d 21 d7 16 4c 8e b5 1f 3a 4f 04 ce fa 18 26 2d b1 b2 f1 58 03 27 ee 0e e7 f8 ed 06 8e 5f ab e6 d8 a5 52 0e 1f 77 b1 7f 9f 85 c3 3b 2d 1c dd e5 e2 f8 1e 1f 47 f6 55 b3 65 4b 29 b3 e6 1b 18 30 32 15 77 75 14 46 77 38 66 4f 1c 0e 4f 32 06 6b 34 56 57 02 d6 92 78 ac 25 b1 9a 6c ae 58 5a 15 8d cd 15 8d c9 19 a6 c9 e0 08 45 a4 b7 87 69 2a 76 84 51 e4 88 a0 d0 16 83 c1 1d 43 56 51 07 72 f2 bf c7 a8 c1 89 ec 5d 57 c7 9d 93 53 f9 e2 e6 62 7e 78 7f 09 77 6e 4c 66 c7 e1 1a 66 ae 2b 66 d8 92 0c 6a 67 47 e3 6b 09 a1 62 46 04 0d 73 53 a8 9a 99 40 f5 ec 78 fa 2f 4e 61 d0 f2 74 6a e7 c6 63 1e d6 97 34 4f 7b 22 72 df a0 77 fc df d3 33 fc ef 08 88 fc 07 7a 45 fd 23 3d 63 fe 8e a0 b4 ef 12 57 fc 2e 39 f6 6e 14 b8 bb Data Ascii: 2KY&Fo:w"i!L:O&-X'_Rw;-GUeK)02wuFw8fOO2k4VWx%lXZEi*vQCVQr]WSb~xwnLff+fjgGkbFsS@x/Natjc4O{"rw3zE#=cW.9n
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 58 c6 d9 fe 5e 0e 97 d9 38 59 e7 e1 44 83 97 ad 8e 42 76 38 8a d8 6c ce 65 9d 31 8b 75 a6 6c d6 98 32 58 aa 4f 66 5e 61 1c 73 45 45 49 9a e6 e8 52 99 ab 4f 63 ae 21 9d 39 a6 0c e6 98 b2 98 65 ce 62 a6 29 93 a9 e6 0c 5a 8c 99 4c 31 67 31 c5 9a ad 69 82 29 83 71 86 34 c6 e8 52 19 59 90 c8 e0 dc 18 06 64 45 d2 98 15 46 ff cc 50 6a 33 02 a9 ce e8 47 7d 4e 10 b5 39 81 d4 e4 05 52 57 10 4c 83 2e 84 26 63 38 03 ac 51 0c b6 46 33 be 24 91 11 e6 48 e6 d4 16 33 af d1 c4 c6 96 06 6e 1e 5c c1 9d 13 1b b9 7b 7a 33 37 4f 6e e5 ce 99 1d dc 3f bf 9b 87 17 f7 f2 e8 dc 4e ee 9d da ca ed 43 eb b9 7e 60 0d e7 76 2c e2 c2 9e a5 5c 3d b8 92 1b c7 d6 71 fb e4 46 4d b7 4e 6c 40 24 f9 a2 8f 0e ad e2 e3 23 6b b8 79 7c 3d 77 4e 6d e2 c1 b9 6d 3c 3c bf 9d 87 e7 76 f3 ec f2 01 3e fd Data Ascii: X^8YDBv8le1ul2XOf^asEEIROc!9eb)ZL1g1i)q4RYdEFPj3G}N9RWL.&c8QF3$H3n\{z37On?NC~`v,\=qFMNl@$#ky\|=wNmm<<v>
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 3a d0 23 a0 03 5d fb 7c 40 cf c0 0f e8 d8 e1 ef 18 54 5e c8 a3 63 eb 34 20 bc b5 79 1a 0f b6 cf e0 e9 fe b9 3c df bf 80 17 bb 17 f2 f9 ce 79 fc 70 f7 02 be d8 3d 97 cf 77 cc 6e 03 c2 4f d7 4f e3 f9 9a 16 3e 59 3d 85 17 6b a7 68 40 f8 6c c5 38 3e 59 35 9a c7 2b 47 71 7d 5e 83 06 85 0f d7 37 73 6b eb 54 0d 04 7f 7e 6d 07 87 16 0c 62 94 2d 46 9b a0 4e 76 27 72 76 f1 50 2e 2c 19 ca 99 39 8d 1c 9d 50 c6 a5 19 0d dc 99 37 84 1b 2d 75 dc 9a 54 cb cd 09 d5 5c 1f 55 c9 dd e6 3a 6e 0f a9 e4 de f0 3a ee 0c ad e3 e6 c0 5a 9e 8c 18 c4 f3 a1 83 b8 57 59 c5 0d af 87 9b 55 e5 dc ac af e4 7c 85 80 93 89 2b a5 26 2e bb 4c 7c ec f6 f1 a4 a9 89 9b 03 2a 38 52 55 c0 c9 e1 7a 3e 5b 3b 94 df 9d 98 cf ef ce 7d c8 cf 8e cd e7 c1 b6 89 dc de 3c 96 eb eb 86 23 63 be 39 af 9e 1b 13 Data Ascii: :#]\|@T^c4 y<yp=wnOO>Y=kh@l8>Y5+Gq}^7skT~mb-FNv'rvP.,9P7-uT\U:n:ZWYU\|+&.L\|*8RUz>[;}<#c9
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: c6 cd 37 b1 ee 70 2d 47 6e 0e e1 f0 c7 0d ec bf 50 c9 fe 33 95 ec 3b e2 65 d7 4e 07 3b 37 db d9 b5 c9 c9 ae 8d 5e b6 6d 2c 63 f5 6a 1f 63 26 e5 50 de 10 85 b5 2c 54 03 42 a3 3b 0a 87 37 01 bb 47 c1 60 34 d6 92 af 97 c5 15 85 c8 ec 8c d4 64 72 45 6a 50 28 60 a8 77 46 a1 77 c5 a1 73 45 90 94 ff 0e 41 d1 df 22 29 f5 ef a8 2c eb c7 e4 31 79 cc 99 6a 60 d6 8c 22 16 ad b0 31 77 9d 8d 71 cb 8b 68 9c 93 4e e9 e4 48 dc 63 83 a8 98 12 49 dd f4 04 6a a7 c5 53 37 33 9e 01 0b 53 18 bc 34 95 da 59 b1 08 10 66 f9 3a 12 99 f7 26 41 29 df a1 6f cc b7 bf 02 c2 88 ff 41 bf 94 ef 12 5b f8 1e 39 ce ee e8 cb 7a 63 a9 eb 83 a9 7f 2f 0c fd bb a3 6f ec 81 ae 7f 4f 0a 6b 7b 21 40 58 50 d1 5d 73 07 c5 09 4c 73 b6 7b 09 84 9d c8 2c ed 4c 6e 69 47 f4 d5 5d 71 0f 0a a2 6a 58 14 0d 43 Data Ascii: 7p-GnP3;eN;7^m,cjc&P,TB;7G`4drEjP(`wFwsEA"),1yj`"1wqhNHcIjS73S4Yf:&A)oA[9zc/oOk{!@XP]sLs{,LniG]qjXC
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 26 73 eb 8a 34 20 5c de ec e5 cc c6 e9 3c 3c bd 91 fb a7 b7 68 c0 f6 e0 c2 1e fc 25 40 28 2e e1 e3 33 3b 78 74 7a bb e6 24 8a e3 27 6e a2 48 20 4f 9c 42 01 41 05 81 97 f7 2f e7 e2 de 65 9a 2e ed fb 50 cb 57 00 29 ee 9b 4c 68 fd 27 c6 02 24 0a 04 95 a3 a7 20 51 9c 43 b9 a6 a0 50 4d 98 65 82 2c 20 26 f0 25 a9 82 26 99 24 7f 93 d4 84 fa f5 49 b5 9a 20 ab 7c 19 9f 3f 34 c9 78 94 b3 27 63 51 60 27 93 6b e9 4f 4d e0 25 7d 5d af f7 e9 3f 99 57 93 74 81 02 d5 a6 f4 fb fa c4 5e b5 29 e3 52 63 95 7e a5 2d 7f 7d d3 bd cb 35 05 22 72 0f 0a c0 d5 6f 2f f7 e8 0f 27 52 56 c6 27 52 cf 4b e0 47 01 92 72 f4 14 84 29 f0 11 20 92 32 0a 02 05 e4 94 c4 e9 13 89 eb 26 a0 a7 80 50 ea 08 30 89 a4 1d 7f 38 93 32 0a ba a4 4f 91 02 51 05 68 2a 5f 39 84 0a d6 a4 2d 55 5e 52 d5 f6 eb Data Ascii: &s4 \<<h%@(.3;xtz$'nH OBA/e.PW)Lh'$ QCPMe, &%&$I \|?4x'cQ`'kOM%}]?Wt^)Rc~-}5"ro/'RV'RKGr) 2&P082OQh*_9-U^R
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 47 b3 2a b8 3c c2 c0 c1 fa 74 f6 f7 cf e0 e8 a8 02 3e 5e e8 e3 9f 4e 4d 81 1f 6c 86 df 1e 86 1f 6c e0 c9 be 21 ec 18 9b c3 91 a9 56 ae 2e ac e5 e4 44 37 17 e7 56 f3 6c ef 18 3e 3b 3a 8e 5f 7f 34 07 5e 6c 84 c7 2b f9 ed 85 e9 fc f1 da 62 b8 b3 8e 7f 39 b3 90 4f b7 8c 67 db e0 22 d6 37 64 73 60 8c 8d fd 63 4c 9c 68 71 72 75 51 25 3f dd 3f 9d 5f ee 9b c5 c9 51 76 b6 fb b2 d8 5f 56 c0 6e 5b a6 e6 0e ee 31 65 72 d4 5d c0 09 5f b1 06 85 c7 dc c5 1c f7 18 38 51 6a e7 64 99 93 13 1e 07 47 ec 66 4d 87 1d 66 0e ba 2c 1c f6 da 39 5c ea e4 90 cf c1 01 71 12 bd 2e f6 3b ad ec 71 da d8 53 62 67 9b c3 c8 36 a7 89 4d 2e 23 6b 6c 05 6c f0 1a 59 66 cd 65 a9 23 9f 65 de 62 66 39 72 99 e9 29 60 6d 73 0d 07 17 8f e7 f2 ee 25 6c 5d d4 cc de 95 93 58 36 a9 86 7b c7 d6 72 6b df Data Ascii: G*<t>^NMll!V.D7Vl>;:_4^l+b9Og"7ds`cLhqruQ%??_Qv_Vn[1er]_8QjdGfMf,9\q.;qSbg6M.#kllYfe#ebf9r)`ms%l]X6{rk
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 89 af 39 90 a1 b3 92 99 bd c6 c2 8a 8d e5 cc 9e 63 a1 b6 32 8a 82 9c 76 14 17 75 24 31 eb db c4 eb fe 11 d3 a0 6e 34 2d 88 65 f8 f2 44 46 2c 4f a4 79 79 22 c3 96 c5 33 78 49 ac 96 5f 3d 3d 42 03 5d 7d 43 37 72 3c 1f 90 6e 7e 97 4c c3 fb 18 5d bd b0 79 03 29 b2 74 23 b3 f0 7d b2 8b db 93 a5 6b 4f 72 7e 3b a2 d3 de d5 40 50 9c 41 59 3b 28 30 98 94 db ea 0a ca 9a c1 ec e2 00 f2 8d fd 34 00 17 08 2c ad 4e d3 d6 0f ba bc f1 58 4a 22 b4 30 5e 0d c4 3c 51 14 9a 83 48 cb eb 41 d2 4b 77 30 3e a3 07 11 c9 5d 08 89 ef 40 9f c8 77 e9 19 fa 7d ba 07 7f 57 73 08 7b 45 be 45 ef e8 77 da 80 50 d6 10 0a 10 8a 1b 29 fd 89 23 ac fd c1 c0 19 f3 12 08 7b 93 96 d3 1d 81 d4 ec e2 9e 14 98 fb a0 b3 07 69 00 e8 ae 4a 40 a4 c6 61 f7 c5 51 68 8d 24 29 3b 80 9e 21 6f d3 b5 df 5b 1a Data Ascii: 9c2vu$1n4-eDF,Oyy"3xI_==B]}C7r<n~L]y)t#}kOr~;@PAY;(04,NXJ"0^<QHAKw0>]@w}Ws{EEwP)#{iJ@aQh$);!o[
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 01 30 81 3e 69 4b da 11 b8 52 92 3c 05 84 2a 9c 53 ce 15 9c c9 1f 2b 94 a4 3f 19 83 06 5a 7e 60 26 7d ab ba fe 30 29 6d 88 14 78 ca 35 91 b4 2f 63 96 be d5 38 24 15 d8 94 f6 a5 1f e9 53 a0 50 e4 df bf b6 ce f6 25 1c aa 7b 57 6d 29 10 95 f1 a9 fb 54 ef a3 3f cc cb 7b a9 de c9 d7 df 47 f5 ce aa f4 f5 e7 ab 9e 8b a4 f2 ac e4 f9 c9 73 93 77 41 ea a8 7f 0f 72 2c 7d 4a be 48 bd 33 9a 43 a8 80 50 d6 12 fa 87 8d 2a 18 14 10 f4 97 00 a2 82 42 71 dd fe 1a 10 2a 28 14 20 7c 1d 0a 95 6b a8 d6 17 fa 87 90 2a 20 54 e1 a3 5f 07 87 12 22 aa a0 50 8e ff ab 0e a1 80 9f 48 41 94 82 27 39 57 d7 fc a1 50 01 61 db 06 33 7e 20 a8 20 d0 3f f5 0f 17 fd da f5 84 7f c5 21 94 fe be 49 02 a9 32 4e e5 fe c9 f8 d5 bd fc 2d 40 98 61 0a d6 40 50 d6 f5 b5 ea ab 8d 65 04 0a 53 8d bd bf 0a Data Ascii: 0>iKR<S+?Z~`&}0)mx5/c8$SP%{Wm)T?{GswAr,}JH3CPBq( \|k T_"PHA'9WPa3~ ?!I2N-@a@PeS
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 5f 5a dc 05 4c ad 30 b0 70 78 19 ab a6 0e 60 50 69 0e c6 b4 00 06 97 e5 52 6b 8e a3 28 aa 3d cb 46 57 30 d6 95 c5 64 4b 1a d3 ad 19 9a a6 59 d2 99 6a 4c d7 9c 31 49 65 fd dc 4c 6b ae b6 76 50 42 26 c7 ea 52 34 18 14 28 d2 36 53 d1 a5 68 30 38 a0 20 ee 6b 81 70 be ad 80 a3 b5 65 dc 6c a8 e7 5a 89 97 87 a5 d5 7c 56 df c8 c3 f2 2a 3e a9 6d e0 8b 01 83 f9 d8 e6 e4 92 c1 c8 05 9d 9e 4b 26 13 e2 0e 2a 18 bc 55 55 ce c5 12 07 67 1c 16 ce ba ed 1a 0c 9e f2 d8 39 e9 b5 73 c2 63 63 bf 5d cf 3e a7 81 83 65 36 0e 55 3a d9 5d 66 61 bb cf c4 f6 32 33 eb 65 53 1c 43 3a b3 73 e3 98 99 1d a3 69 96 84 87 e6 c4 30 31 23 9c f1 19 61 4c c8 8e d6 5c c1 c9 05 f1 4c ca 8f 6b 55 41 22 13 8b 92 98 a2 4f d5 d6 0e 0a 0c 4a 78 ac dc bb 84 89 36 17 25 6b e0 3b 38 37 96 01 59 51 6d 30 Data Ascii: _ZL0px`PiRk(=FW0dKYjL1IeLkvPB&R4(6Sh08 kpelZ\|V>mK&UUg9scc]>e6U:]fa23eSC:si01#aL\LkUA"OJx6%k;87YQm0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49778	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:04 UTC	2640	OUT	GET /images/custom/image11.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:04 UTC	901	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:04 GMT Content-Type: image/png Content-Length: 12361818 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-bca05a" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4967 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8nHXHLXOQl%2FPGwouEpMEtuRMTjmAIDCNZ4iIy5kkgTN0E5peK5ydvoxaiXlThQBiWgOWltwft%2Ffj3LU6D%2BKXM6Ois8O7avTaPFLgi1wndFKms7puMurwYxATT1OeqAK35wA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe270d0d808c71-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2003&min_rtt=2003&rtt_var=1001&sent=5&recv=9&lost=0&retrans=1&sent_bytes=4216&recv_bytes=3218&delivery_rate=269149&cwnd=193&unsent_bytes=0&cid=171eb81f0e351e36&ts=131&x=0"
2025-01-10 16:48:04 UTC	468	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 cf 00 00 07 cf 08 06 00 00 00 be 1d ae 52 00 00 80 00 49 44 41 54 78 5e 94 9c 75 7c 57 c7 d6 af 6b b4 45 8b 4b f1 10 21 81 24 24 24 c4 dd dd dd dd dd 8d 28 81 84 84 84 04 82 06 77 97 00 c1 dd a5 58 71 a7 48 69 4b 5b 2a d4 9f bb f2 e3 9c f3 be e7 de bf ee 87 3e ac d9 32 7b cf de 33 b3 66 2d be bf dd f7 3e 70 b0 e5 43 7b 5b 3e b6 b3 a3 bb 83 3d 9f 58 db d0 dd dc 92 ee 26 66 f4 30 34 a6 97 81 31 7d 0c 4c f8 cc d0 94 7e 86 16 7c 66 60 4e 9f 29 66 f4 d6 37 a5 d7 64 63 7a eb 1a d3 57 cf 94 81 fa 16 0c d5 b3 66 84 be 2d a3 8d 1c 18 63 e6 c2 28 6b 37 86 3b 7a f1 b9 ab 1f c3 3d 83 18 e9 1d fa 1f 46 fb 86 a3 14 10 8d 52 50 02 6a 21 29 4c 0c cb 62 52 58 1e 7a a1 f9 4c 0e c8 47 df af 90 29 82 a1 6f 21 c6 be 45 Data Ascii: PNGIHDRRIDATx^u\|WkEK!$$$(wXqHiK[*>2{3f->pC{[>=X&f041}L~\|f`N)f7dczWf-c(k7;z=FRPj!)LbRXzLG)o!E
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 89 cd 60 64 74 32 a3 62 92 18 1b 97 82 72 6c 3a ea 71 59 a8 47 67 a0 16 9a cc 38 df 68 86 3b fb c9 b3 b8 32 c8 da 91 01 e6 56 f4 33 31 a1 8f a1 be f4 e3 64 fa 19 1b d0 5f b6 fb 1b 4b 7f 4a bf f6 9d ac 4f 7f 3d 7d fa ea 4e e6 33 1d 5d 45 79 90 b1 31 83 cd cc 18 6c 65 49 7f 6b 0b fa d8 5a d1 d3 c1 86 1e ee 0e f4 f5 73 67 58 78 80 dc 3f 94 71 f1 91 8c 4f 8a 65 5c 42 34 23 e3 22 19 97 99 c4 f8 82 0c 94 0b d2 51 2b cb 61 62 45 3e 9a 65 79 4c 2c c8 44 27 2f 0b ad cc 34 a9 17 cd 90 88 08 3e 8f 8d 63 60 64 0c bd c3 a2 f9 24 38 8c 8f 02 43 f9 28 24 92 8f 64 fb e3 d0 68 7a 86 c7 d2 2f 22 81 a1 51 a9 8c 8a 4e 43 29 32 15 e5 b0 04 94 43 a4 ef 82 c2 18 e1 eb c7 30 6f 6f 3e f7 f6 63 90 bb 0f 9f 39 b8 d3 cb c6 8d 3e f6 de f4 71 f0 a5 b7 bd 9f 58 7f fa 39 07 31 c0 25 98 Data Ascii: `dt2brl:qYGg8h;2V31d_KJO=}N3]Ey1leIkZsgXx?qOe\B4#"Q+abE>eyL,D'/4>c`d$8C($dhz/"QNC)2C0oo>c9>qX91%
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: ac e6 d1 a5 6a 6e 9f 29 e5 fa f1 02 ae 1f cd e3 cb 63 f9 7c 79 a4 90 2b 07 f2 38 b7 2b 9d d3 db d2 39 b5 59 f6 ef 6f e4 ab 8b 6b a4 ce 66 6e 9d db c6 ed 0b bb b9 79 6e 17 17 8e 6e e6 58 e7 5a 0e 6e 5f c3 91 1d 6b 39 bd 6f 3d 17 0e ad e7 e2 81 d5 9c df bb 82 f3 bb 17 70 62 6d 25 27 96 67 73 b0 3d 9e e3 cb c2 39 b6 c0 97 c3 ad de 1c 5f 10 c4 d9 95 31 1c 5f 19 cd 8e f9 9e 2c ac d2 65 5e 89 1a f3 72 46 33 37 6b 24 6b ca b5 d8 39 c3 84 8e 19 a6 ec a8 32 62 7b 85 a1 82 8d c5 ba ac c9 9d c0 8a 4c 35 96 67 a8 48 59 83 0d 85 5a b2 7f 12 1b 8b 74 59 57 a8 c7 ca fc 29 2c cf 31 62 65 9e 85 58 73 96 e7 9a b1 71 aa 13 3b 6a bd e4 7a 5e 74 36 fa 70 66 71 24 57 57 25 73 76 71 34 bb ea 3c 58 5e 60 ca ec 64 2d 66 c6 8e 67 61 b6 3e f3 33 74 68 8c 53 a3 29 41 9d c5 b9 53 68 Data Ascii: jn)c\|y+8+9YokfnynnXZn_k9o=pbm%'gs=9_1_,e^rF37k$k92b{L5gHYZtYW),1beXsq;jz^t6pfq$WW%svq4<X^`d-fga>3thS)ASh
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 53 91 5f 40 51 56 3e 99 09 79 04 ba 47 e1 2c b1 98 b5 69 10 c6 fa fe 18 4f f1 c5 cc d0 07 73 89 2d cd 0c ed 64 db 00 33 03 5d 6c 8d f5 70 36 35 c4 d1 48 1f 73 5d 4d 0c 34 55 30 d6 1a 83 9d 9e 12 be 16 ea 04 db 6a 11 ea a0 4b aa 9f 39 89 5e fa c4 ba 69 91 e4 ad cf f4 cc 00 16 d6 16 b1 bc a5 85 75 2b 37 b0 63 f7 09 f6 1d bb c6 c9 8b 8f 38 7d e5 15 bb 8e dc 63 d5 d6 d3 cc 5e b0 81 8a 8a 7a 99 df 99 24 07 b8 e3 64 30 11 2b 6d 65 ec 74 35 70 98 3c 01 c7 c9 e3 b1 d7 51 c6 72 e2 48 2c 26 0c c7 61 92 12 ee 7a ea 78 ea 69 e1 31 59 17 2f 03 43 fc cd cc 09 b3 73 90 fb 7b 93 16 10 40 b2 9f 1f 49 3e 3e 94 44 c7 51 95 94 46 79 62 3a f9 11 89 b2 3f 92 18 f7 20 22 9c 02 f0 b3 08 94 7b 85 60 a1 13 8c a9 5e 30 8e 0e 31 84 46 97 12 95 3a 8d c2 ca d9 d4 d6 4c 67 79 5b 33 1d Data Ascii: S_@QV>yG,iOs-d3]lp65Hs]M4U0jK9^iu+7c8}c^z$d0+met5p<QrH,&azxi1Y/Cs{@I>>DQFyb:? "{`^01F:Lgy[3
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 61 9c 54 8b 71 62 2d a6 62 cd 92 a7 61 92 52 8d 51 4a 25 a6 e9 35 58 cb bc b1 4b 99 86 43 52 b5 d8 0a ac 53 ab e4 bc 6a 0c e2 4b 30 89 cd c7 49 62 9c 20 b1 21 01 b1 f8 ba 78 e2 6b 6f 8b 8b a1 1e 4e 93 b4 f0 d1 d7 c1 4f 6f 02 3e 93 55 25 c6 56 25 ce 41 9b 4c 6f 43 0a 82 cc c8 f0 32 22 c9 65 0a f1 8e 7a c4 da 6b 13 65 a3 41 b8 a5 32 41 a6 23 09 34 19 45 98 85 0a 91 36 ea 44 5a ab 12 61 a5 4c b4 ad 1a 89 2e 5a 52 4f 9b bc 00 6d 4a c2 75 a8 cf 30 65 56 9e 19 d3 33 f4 04 5d ea b2 f4 98 99 63 40 7d ae 01 33 b2 27 53 97 a6 4d 4d dc 44 a6 86 ab 91 e7 37 46 50 22 3f 40 99 9a 78 3d e6 14 d9 d2 56 6e 2b 71 a8 3d 8b ea ed 99 5d 63 42 4d 9e 1e 99 91 e3 49 0b 55 a7 34 cd 90 69 c5 56 d4 96 5a 89 75 a0 aa 40 e2 c4 f4 00 19 4f 91 f8 c7 e7 e1 95 56 87 63 da 1c 2c 93 17 a0 Data Ascii: aTqb-baRQJ%5XKCRSjK0Ib !xkoNOo>U%V%ALoC2"ezkeA2A#4E6DZaL.ZROmJu0eV3]c@}3'SMMD7FP"?@x=Vn+q=]cBMIU4iVZu@OVc,
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: dc 8e 61 53 3b 66 2d cb 31 9d bd 04 b3 a6 45 58 36 2f c2 5a 8e d9 b6 2c c3 4e f6 5b 34 2c c2 ac 7e 81 c2 5a 34 2e c2 b0 6e 0e 06 d3 5b d1 9f 36 1b 83 9a d9 98 cd 98 83 55 c3 3c 2c 66 ce c1 74 c6 6c b1 ad d8 ca bd 1c 5a 17 e2 30 bb 0d fb e6 39 0a 6b d7 d4 75 5e 33 56 33 df 61 5e d7 88 71 4d 1d 06 55 b5 e8 57 d6 8a 9d 21 d4 31 b9 72 3a 9a e5 35 a8 95 4e 43 b9 a8 96 71 05 35 28 e7 d7 a0 51 52 87 76 79 23 da 95 b3 e4 78 03 13 a4 6f 34 4a eb 15 8c 2f 9d c1 a4 ca 26 69 4f 2b 86 55 2d 18 57 bc c3 70 6a 33 06 a5 8d 18 16 cf c4 bc b2 19 6b 69 b7 e5 8c 56 ac 67 8a 0f ac 6f c1 b2 be 19 9b 99 2d 38 48 fb 9d 9b 16 e2 32 7b 31 ce 2d 8b 70 9c bd 10 27 b1 2e 73 17 4b bb db b0 a8 6b c6 b4 b6 91 29 15 72 9f e2 2a 26 e4 4e 45 23 af 9c 71 19 05 8c 4d cb 61 58 5c 2a c3 22 53 Data Ascii: aS;f-1EX6/Z,N[4,~Z4.n[6U<,ftlZ09ku^3V3a^qMUW!1r:5NCq5(QRvy#xo4J/&iO+U-Wpj3kiVgo-8H2{1-p'.sKk)r&NE#qMaX\"S
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 10 cc 3f 33 d6 52 88 e6 5d 82 7a 5f 63 5d fa 18 ea d0 6b 8a b6 d4 d7 a4 8f b6 06 3d 27 aa d1 63 82 2a dd 35 54 14 f4 54 57 e3 13 95 2e 01 7d ec bf 50 fa 2f f1 5c 21 98 ff 8b 7f 8b e6 ff e6 ff 47 3c ef 29 b6 a7 c6 14 7a 4d 30 a1 97 a6 05 3d b5 ac e9 ad 10 d0 85 c9 ef 6c ef 49 d6 12 90 5a f2 89 b6 25 9f ca f1 1e da b6 f4 9a 64 43 1f 1d 4b 7a eb 58 28 8e f7 91 79 f2 6f e1 bc 97 9e 23 dd f5 e4 bd 4a 20 db 6d 8a 1b 1f 19 79 f1 91 b1 8f 2c 2a 9e b2 a8 78 f0 e9 14 f7 ff 88 e7 03 35 ed 19 a4 65 cf 60 cd 2e e1 dc 91 21 1a 4e 0c 51 77 15 eb 29 78 31 70 bc 07 fd 54 9c f8 4c d9 86 fe aa 56 0c 54 b7 78 27 9e 2b eb d3 6f 9c be d8 2e 11 5d 50 36 62 a0 aa 39 83 d4 6d 18 3c c1 91 61 93 bc 19 65 20 e3 d8 22 83 09 76 f9 4c 70 28 40 cd 5a 16 21 c7 02 26 ba 97 a2 e9 35 95 09 Data Ascii: ?3R]z_c]k='c5TTW.}P/\!G<)zM0=lIZ%dCKzX(yo#J my,x5e`.!NQw)x1pTLVTx'+o.]P6b9m<ae "vLp(@Z!&5
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: af e1 00 eb 97 5e 64 fb ba 6b ac 59 72 86 b9 0d 7b 98 5e b2 86 e4 e0 5a 5c cd e2 31 d7 0b c2 c5 36 95 c4 e8 d9 54 d6 1c a0 65 d1 6d 66 b7 df 67 ee 92 bb ac 5c fd 88 55 2b ef b0 72 e5 75 d6 6f fc 82 ad 3b ce b2 6d d7 31 3a 76 ee 65 f7 d6 0e 36 2c 5b c3 9a f6 65 6c 5b bb 96 ce 8d 5b d8 b1 62 3d 2b e7 b4 d3 de 38 9f 85 f5 f3 59 30 73 29 cb e7 6c 66 ed e2 bd ac 5b 7a 84 95 ed 47 99 37 a7 93 99 33 b7 2a 84 f3 2e 6a aa d7 51 59 b2 9c f2 ac 56 4a e2 2b c9 08 48 21 ce 3d 92 08 87 10 f2 82 32 a9 cf a8 a5 a9 a0 41 92 e0 36 d6 cd db c8 f1 dd 67 38 b9 f7 12 fb b7 9e 62 dd e2 6d cc 6f 5c 40 63 55 03 95 39 95 4c 2b ac 65 56 c5 2c f2 13 0b 08 f5 8e 22 33 ad 9a a6 d6 2d ac da 2c cf bf ef 0e 9d 47 1e b2 ef c8 03 d6 ac 3b 41 d5 d4 56 72 53 0a 29 cf cc 67 7a 6e 3e b3 8a 0a Data Ascii: ^dkYr{^Z\16Temfg\U+ruo;m1:ve6,[el[[b=+8Y0s)lf[zG73*.jQYVJ+H!=2A6g8bmo\@cU9L+eV,"3-,G;AVrS)gzn>
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: 6b 5d 14 1d eb 23 d9 b2 3c 9c d5 f3 42 98 27 6b 77 5d b9 87 f8 63 17 12 93 7d 09 4f 0e c3 3b 31 01 d7 e4 4c 9c 53 72 b1 49 29 c2 28 b9 04 9d c4 22 54 e2 f2 18 1e 9d 45 ff f0 6c ba 05 66 f1 51 40 36 1f fa 66 f2 81 67 fa ff 88 e7 0e 49 0a e1 fc 03 bb 24 de b7 eb 12 ce 93 79 df 3e 85 f7 1c 92 79 cf 51 b6 9d 13 79 cf 55 b6 3d 32 78 df 2b 87 0f 7c 0a 84 22 de f7 29 e6 43 bf a9 7c 18 f0 4e 3c ff 20 b0 86 0f 64 1d fc 30 68 3a 1f 06 d7 d1 2d ac 51 f2 e6 06 3e 8b 6a 60 60 74 1d fd c2 ca 85 32 fa 47 94 49 8e 5d ca 80 c8 02 06 47 e5 33 28 32 87 01 51 59 0a f1 7c 50 7c 16 83 12 84 c4 4c 06 26 65 31 a0 cb 8a 9f 1e 94 92 2d 64 31 2c 35 97 31 e9 45 8c 4b 2f 65 5c 4a 29 4a 89 25 8c 89 2d 12 8a 85 12 46 c7 14 33 32 a6 88 d1 09 65 8c 4d ad 62 6c 97 78 9e 39 03 e5 ec 99 a8 Data Ascii: k]#<B'kw]c}O;1LSrI)("TElfQ@6fgI$y>yQyU=2x+\|")C\|N< d0h:-Q>j``t2GI]G3(2QY\|P\|L&e1-d1,51EK/e\J)J%-F32eMblx9
2025-01-10 16:48:04 UTC	1369	IN	Data Raw: a7 0e c3 ec 19 4c c9 9e 8e 6e 66 2d 5a 32 fe 26 88 ef 56 4b 94 b9 da f5 03 ab 30 59 c3 42 73 19 1a 9c 4d 5f 9f 64 3e 72 8c e4 23 99 27 7d bc 53 18 e8 9d 41 3f f7 54 b1 99 f4 f3 92 b5 c2 2f 97 cf c3 4a 18 12 28 f3 3a b2 42 e6 c1 4c 0c 32 e7 60 59 34 1f 13 79 4e 63 19 e3 e6 99 75 58 0a d6 92 0b 59 a7 56 63 96 54 89 41 62 25 7a 89 d5 4c 96 35 60 72 6a 03 7a a9 8d 4c 4a ac 63 62 ec 34 34 a2 aa 18 1f 5e 8e 6a 90 f8 0d bf 7c 46 78 65 33 c2 27 07 a5 10 59 87 c2 65 5f 48 3e e3 04 d5 30 59 6f 83 f3 50 0e 4c 15 3f 92 84 5a 88 10 1a 8f 5a 70 34 e3 fc 43 19 ed 1d cc 08 8f 20 86 75 7d 18 d7 25 a2 7b 86 32 cc 23 82 a1 ce 21 0c b1 0b 64 a8 a5 1f 83 4d bd e8 37 c5 8d de ba ce 74 d7 b2 e7 23 75 2b c1 92 6e e3 2d f9 44 cd 82 4f 55 cd e9 ae 66 4e 0f 35 4b fa 6a d8 31 52 cb Data Ascii: Lnf-Z2&VK0YBsM_d>r#'}SA?T/J(:BL2`Y4yNcuXYVcTAb%zL5`rjzLJcb44^j\|Fxe3'Ye_H>0YoPL?ZZp4C u}%{2#!dM7t#u+n-DOUfN5Kj1R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49785	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:04 UTC	2639	OUT	GET /images/custom/image5.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:05 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:05 GMT Content-Type: image/png Content-Length: 875993 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-d5dd9" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4968 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=miRbmc7oOHbY2cxk8vZ%2BHmWGRfxoL6e1Bt7INEb%2F4mYYC2DUR1m9268WwcYLajtUGOB5d77CoQtZKC3B%2BsCgXfbgw0V5xv0uRA9kFuDr84p1Nm7rl%2B618oQ3yrbr%2Fkk8zVc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe270f4f2042b5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1801&min_rtt=1760&rtt_var=743&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2838&recv_bytes=3217&delivery_rate=1393794&cwnd=221&unsent_bytes=0&cid=98e2c3e8aa0dc9f3&ts=118&x=0"
2025-01-10 16:48:05 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 a8 00 00 04 38 08 06 00 00 00 b4 59 82 67 00 00 20 00 49 44 41 54 78 9c ec dd 07 94 64 f7 75 df f9 df 0b 95 3a 4e 0e c0 00 20 00 92 88 04 11 88 c0 1c 25 06 11 24 c5 64 59 5c 59 b2 4c c9 6b 59 59 5e 2b f8 78 2d 7b ed a3 23 2b 71 b5 da 55 a2 a8 48 51 22 4d 8a 51 cc 04 41 30 00 04 c5 9c 31 18 80 18 0c 26 cf 74 aa f8 d2 9e fb 7f ef 55 57 57 57 75 f7 0c 80 16 c2 f7 43 d5 e9 ea aa 97 eb b5 80 83 5f dd 7b bd 2c cb 32 01 00 00 00 00 00 00 00 00 00 00 f0 30 f3 b9 c0 00 00 00 00 00 00 00 00 00 00 80 cd 40 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR8Yg IDATxdu:N %$dY\YLkYY^+x-{#+qUHQ"MQA01&tUWWWuC_{,20@@MA@MA@
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 Data Ascii: MA@MA@MA@MA@MA@MA@MA@MA@MA@
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: c3 5a 8b cf ce ce ba 0a eb 5d bb f3 b0 7a d7 9e 3d da b3 67 af 0b b1 cf 39 e7 1c 9d 7b ee 3e ed 3d e7 1c 17 5a 03 00 00 00 00 00 00 c0 63 11 01 35 00 00 18 cb c2 55 9b fb 6c 41 f4 3d 07 0e e8 c0 81 bb 75 df 7d f7 e9 e8 91 07 5c 08 7d f4 c8 11 9d 38 71 5c a7 4f 9f 76 15 c7 d2 72 85 b3 fd 9e 87 c0 9e 0b a4 97 83 e8 4c 65 ee bb 56 38 ed 5e 2d 02 e4 e1 1c 79 b9 b2 59 ae fa b8 56 ab c8 f3 3d 79 99 e7 aa a8 a3 38 52 64 d5 d3 6b 9c 5b 19 92 0f 5b 1d 64 2f 6f 65 5c a0 3d ee 1c 06 59 35 f7 a9 53 a7 dc e3 ae bb be 9b ef c7 f3 d4 a8 d7 5d 6b f0 5d bb 76 b9 b0 7a d7 ee 3d da 77 de 3e 9d 77 fe 05 ba f8 e2 8b 75 fe 05 4f 70 ef 51 65 0d 00 00 00 00 00 00 e0 b1 80 80 1a 00 00 f4 95 81 f4 5d df fd ae be f1 f5 af e9 9b df fc 86 ee 3d 70 c0 55 4c 9f 3a 75 d2 55 45 db 8c 68 Data Ascii: Z]z=g9{>=Zc5UlA=u}\}8q\OvrLeV8^-yYV=y8Rdk[[d/oe\=Y5S]k]vz=w>wuOpQe]=pUL:uUEh
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 80 87 8a 97 9d 4d df 49 00 00 f0 88 60 61 6a b7 db d5 e2 e2 a2 6e f9 c4 c7 f5 f7 6f fb 5b 37 57 ba dd 6a c9 f3 3d d7 22 7a b9 65 77 36 10 44 97 d5 b7 f9 7b 16 18 0f 06 a0 16 be 5a 05 f4 b0 c1 b0 f4 6c 2b 84 07 0d 57 1d 7b f2 b4 75 6a 42 3f f8 03 2f d2 d5 d7 5e a9 f7 7d e8 63 ba ed 73 5f 52 bb dd 2b 17 50 10 f8 2e 2c f6 c2 50 53 b3 33 ba fa 9a 6b f5 e2 97 bf 42 5e ad a6 4e 9c a8 db e9 a9 1b f5 d4 cd 12 75 d2 58 61 9c ea e4 c9 13 ba ff c0 b7 75 df bd f7 ea d8 f7 ee 57 d6 e9 aa de 98 d6 96 73 ce d7 ce 0b cf d3 b6 ad 5b b4 63 db 76 55 6b 35 1d 3b 76 54 27 1e b8 4f f7 df 7b 40 c7 ee 7f 40 59 bb bb e1 73 19 77 bd d6 5b 67 5c d8 3c d8 0a 7d dc b5 4e 92 74 dd 65 ca cf d2 de f6 fd 50 97 5e 76 99 6e 7e c5 2b 75 f3 2b 5f a5 27 5c 78 a1 ea f5 3a ad Data Ascii: MI`ajno[7Wj="zew6D{Zl+W{ujB?/^}cs_R+P.,PS3kB^NuXauWs[cvUk5;vT'O{@@Ysw[g\<}NteP^vn~+u+_'\x:
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: f9 d2 4d 9d 3a 7d 5a 73 0b f3 2e d8 b7 eb 63 eb d7 2a a1 6a f5 9a e6 e6 52 b7 3f 7b 3d 8a 63 d5 1b 75 d9 2b b5 6a a8 46 10 28 b0 a0 3c 4b 5d 38 1d d8 29 04 9e e2 24 ff 92 c0 dc fc bc 96 7a 91 ea b3 db b4 74 fc 88 d2 4d 6c 3c 53 ce 8e 5e eb ba ae f5 39 9d cd 67 38 78 5f 65 59 aa 93 27 4e e8 83 ff f8 01 7d f2 96 4f e8 c9 97 5c a2 67 3e eb 39 ba fe 86 1b 5c 0b f0 f3 2f b8 40 95 4a e5 8c f7 01 00 00 00 00 00 00 e0 f1 8d 80 1a 00 80 47 80 43 87 0e e9 ce 3b ee d0 e7 3e f7 59 dd 79 c7 e7 f4 95 2f 7f 59 ed 76 67 28 78 1e df 92 bb 0c 33 ad 9a 78 9c 33 09 2c cf b4 7a 5a eb 54 ff ae 0c a9 3d 85 41 4d fb 9e 74 b1 2e bf e9 46 cd 9c ff 04 45 7e a0 fb bf f1 15 dd 75 fb 1d 5a 3c 76 42 b3 5b b6 e8 8a 6b 9e aa 4b ae be 4a 49 75 5a 51 16 c8 d5 ec a6 79 85 b3 e7 e5 2d c8 93 Data Ascii: M:}Zs.c*jR?{=cu+jF(<K]8)$ztMl<S^9g8x_eY'N}O\g>9\/@JGC;>Yy/Yvg(x3x3,zZT=AMt.FE~uZ<vB[kKJIuZQy-
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: d3 59 d1 1f db 7e 8e 6a fd 3c 6c 5c 05 ee a8 b0 72 23 73 a3 c7 ad 6b 95 d2 9e bd 1e fa 9a dd b3 4b cf 79 e9 4b 74 f5 f5 4f d3 74 63 42 5e e6 b9 c0 b9 15 45 9a b7 56 d9 a9 b4 65 66 5a 5b 67 a6 5d 95 f1 d2 52 d7 05 d8 16 e6 56 82 40 33 d5 aa 5a ed b6 e2 5e 4b 71 25 54 6c 81 76 bd ae 46 ad ee ce 37 8a 22 2d 2c b5 f4 bd 43 87 75 f2 f8 09 75 6d a6 74 d4 53 e6 fb ae 5a 77 df de 73 b4 7d db 36 57 fd dc 6a b5 5d 90 6d 73 a9 4f cd 9d 56 dc e9 2a 4d 52 f9 a1 ef da 7f db 17 05 fc 2c 55 d4 5a d2 e2 dc 29 55 bc bc f2 7a 72 2a 9f 33 6d 26 1b 75 4d d4 6b f2 b2 44 9d 6e a4 aa 55 70 5b 40 be b8 e0 5a 87 6f dd ba 45 8d 2d b3 9a 68 4c a9 56 9b d0 a9 a3 87 15 b7 3b d6 84 7c 64 d9 f4 46 66 79 6b 9d 0a e7 8d 7c a7 70 a3 fb d9 c8 fa 6b 85 d5 1a 6e 31 9e 49 9d 76 47 df fc c6 37 Data Ascii: Y~j<l\r#skKyKtOtcB^EVefZ[g]RV@3Z^Kq%TlvF7"-,CuumtSZws}6Wj]msOVMR,UZ)Uzr3m&uMkDnUp[@ZoE-hLV;\|dFfyk\|pkn1IvG7
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 69 a9 e9 82 60 5b b3 13 c7 ea 74 da ae 62 d6 2a 8e 43 0b 5a 8b 10 d4 85 ee 99 a7 6e 37 56 b7 d7 73 61 b2 55 42 67 4a 55 ab 56 14 7a be bc 24 d5 62 ab a5 c5 76 47 8b 4b 4b 3a 3d 3f e7 e6 52 b7 9b 4d 17 4c f7 7a 91 0b 89 9f f8 a4 27 ba 6a 74 9b e3 6d ad bf e3 28 d6 96 a9 69 ed d8 be dd 85 d3 16 ee f7 92 38 7f f4 7a ea 46 91 ab e0 0e 2b 79 cb ee 24 cd d4 e9 45 6e 16 b6 55 79 5b d5 b5 6d 77 62 62 52 be 17 b8 6d 9e 38 7d 5a 27 4e 9d d2 03 0f 3c a0 b9 b9 39 57 f1 6b d5 da 76 d1 4f 1e 3b e1 da 92 5b 05 f5 d4 54 43 8d c9 29 85 d5 9a ab 92 6f 2f 59 58 df d2 e2 91 07 74 e4 bb df 56 dc 6e bb fd b9 cb 35 e2 fb 03 63 e7 7b 0f 04 c5 6b 85 be a3 02 ea c1 6d 8e 9b 31 be 91 fd 8e bc 3f d6 09 a8 87 0d 7f c9 a1 7c 5e ad d6 f4 86 1f f9 11 fd c2 7f f8 8f ee ba 52 51 0d 00 00 Data Ascii: i`[tb*CZn7VsaUBgJUVz$bvGKK:=?RMLz'jtm(i8zF+y$EnUy[mwbbRm8}Z'N<9WkvO;[TC)o/YXtVn5c{km1?\|^RQ
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: b8 42 af ff a9 9f d0 93 2e be 48 0d df 93 9f 78 8a 92 d4 85 ae 79 45 b6 a7 d0 ce 21 49 d4 8b 13 57 4d 6d 21 b0 05 d8 59 71 bc 56 89 1c b8 16 df 81 aa 41 e8 9e db fa 16 42 db 7a b6 9d 30 ac b8 e5 5c a5 73 96 a8 db ed a8 d7 8b 5d f5 74 bb d3 55 92 f9 aa 54 ab 8a b3 d4 05 c6 36 8b 7a 7e 7e de 55 42 db 76 2d c8 b4 70 da 7e da 72 d6 da db 8e ad ac 92 b6 16 e5 b6 9c b5 1e b7 56 d2 b6 0d 3b 8e b0 5a 71 a1 ad 05 da 56 e9 6d 55 dc 0b f3 f3 9a 9f 9b 53 dc ea b8 56 dc bd 24 52 b5 5a 75 21 b2 6b c9 ed 87 f2 ad 25 79 96 a9 d2 a8 bb 80 3d 6f fb ed ab b9 b4 a8 76 ab d9 3f 5f 65 cb 9f 69 c7 cd a2 6e aa d9 6b 6a d2 da 82 a7 a9 e6 4f 9f d4 e2 89 53 8a 5a 2d d7 ea 3c 1b d5 f3 7b 23 d6 59 af 0c ab ed 33 b5 80 3a cd d2 91 f3 af 1f 8a 80 7a 5c 05 f5 7a cb 8d 5b d6 5e db b5 7b Data Ascii: B.HxyE!IWMm!YqVABz0\s]tUT6z~~UBv-p~rV;ZqVmUSV$RZu!k%y=ov?_einkjOSZ-<{#Y3:z\z[^{
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 77 7f a7 4f dd fa 49 cd cf cf 15 99 6a 36 14 a4 95 61 f3 ca 80 7a 75 35 6b 19 b6 ad ae ba 1e 5c 6e ad 70 af 0c b9 cb 60 7b d4 72 1b 35 18 26 96 eb 5a 38 39 3b 3b ab f3 9e 7a 99 9e 78 d9 d5 aa 6f db a1 e9 ed db d4 eb 76 35 55 ab 68 df 8e 2d 9a 69 4c e6 15 c2 51 e4 d6 29 e7 4b 5b ab ec c8 da 58 c7 f9 3c 6a 0b a6 2d a4 76 a1 6f 2f 72 cb d8 4c 68 57 9d 5c 54 a5 bb 4a ec 38 d6 a9 53 a7 dc cf b2 62 36 28 2a b2 5d 28 dd ed ba 87 3d 6f 75 62 37 ef 7a 7a 7a da 1d 67 5a 04 d7 ee 4c 2a 41 de ee db 5a ae 67 72 eb 5b 8b ef 72 1b 6e 36 76 90 07 aa 76 4c bd a2 c2 d9 85 c9 ed b6 9b d1 6c bf db fe 93 a2 35 b7 1d 93 cd bc b6 65 92 28 ce ab 9c 6d fe b6 b5 0e af 54 14 d4 2a 0a 53 37 40 3b 6f 0d 6e 55 db dd ae 3a b6 cd 5e cf ed bb 6c 0d 6e 41 b4 05 d9 bd 5e 57 bd a8 ed 66 4f Data Ascii: wOIj6azu5k\np`{r5&Z89;;zxov5Uh-iLQ)K[X<j-vo/rLhW\TJ8Sb6(](=oub7zzzgZLAZgr[rn6vvLl5e(mT*S7@;onU:^lnA^WfO
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: bb 15 f6 27 63 f7 32 70 87 66 f9 cf 74 8d 56 f3 67 12 70 9f 89 6c c5 1f 61 aa bb ee ba 4b 47 df f2 66 7d f9 4b 5f d4 cf fc dc cf eb c5 2f 7d 19 d5 d4 00 00 00 00 00 00 c0 a3 00 01 35 00 e0 71 c9 aa 6c 3f 7d db 6d fa bd df f9 2d dd 79 c7 ed 5a 5a 5a 1a 98 f5 bc 3c 2b 7a 6d d9 8a e0 ba 0c 99 37 12 26 af 9e 3b bd 1c 78 6f b4 4a 7a 23 ad 98 d7 5a b7 d2 a8 ea 92 2b af d0 0d d7 5f af e9 a0 aa 2c ed a9 db 6d cb ab 4d 6a 7a 6a 46 4f 7c c2 05 8a 33 4f df b9 fb a0 da ad 96 8e 9f 3e 29 cf 9b d6 54 58 d1 e4 44 cd 9d 73 d7 2a a4 93 48 61 e8 bb 6a 68 17 4c 47 81 3b 17 37 87 3a 89 95 c5 49 de f6 db f7 d5 6c b7 5c 6b ee 7a a5 3a d0 42 dd 02 ea 5e bf 3a b9 9c 51 9d ff b4 47 5b dd 4e 53 95 4a c3 25 b8 71 9a a8 65 ed bf cb 0a ee a2 da d9 66 4f 97 01 75 6c 95 ef 16 16 5b 3b Data Ascii: 'c2pftVgplaKGf}K_/}5ql?}m-yZZZ<+zm7&;xoJz#Z+_,mMjzjFO\|3O>)TXDs*HajhLG;7:Il\kz:B^:QG[NSJ%qefOul[;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49784	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:04 UTC	2338	OUT	GET /images/custom/image6.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:05 UTC	898	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:05 GMT Content-Type: image/png Content-Length: 455922 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-6f4f2" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4969 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6yMY5%2Bpanrnsh5Qhy0OARrMwcHXlDk7vkm72Yo%2BAO8nbPJUPG3pvhRDQmfKESrhsYzvPOtLxcCB9AAyWf9DwzGTPyyOE2JI4ktXtefrY%2FPMJLU3deBIiRiZpyreD954lKAs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe270f5e0843b0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1760&min_rtt=1644&rtt_var=849&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=2916&delivery_rate=1133540&cwnd=252&unsent_bytes=0&cid=5091c87ed056f546&ts=126&x=0"
2025-01-10 16:48:05 UTC	471	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 0c 00 00 01 95 08 06 00 00 00 53 89 76 d9 00 00 20 00 49 44 41 54 78 01 ec bd f5 97 1c 57 96 ef 7b ff 8c fb 7e 78 33 ef de 37 77 a8 7b ba 67 ba 7b ba ed 26 b7 a1 cd 24 93 64 19 24 cb b2 2c 59 8c 16 33 b3 4a 52 09 8a 99 19 b3 18 b3 98 99 99 99 2b 33 2b eb 73 d7 3e 59 51 20 70 f7 4c 1b 24 39 72 ad bd 4e 24 54 66 c4 8e c8 ca f3 39 df 0d ff 03 fd a6 7b 40 f7 80 ee 81 1f ad 07 ac c0 62 fb ef 38 e2 6f fd fb ff ce 67 ea 7f f3 ed 78 60 f1 b9 bb 7f db 6c 9e 66 66 c6 cc 2c d6 79 9b 99 b5 20 26 8f 99 cd 66 66 66 66 16 ed 8a 15 93 79 02 b3 69 02 90 e7 c6 99 99 19 c5 6a 1d c3 6a 1d c1 6a 19 64 62 ac 93 be 9e 5a da db 4a 68 6d 2a a4 a9 3e 87 ba ea 4c aa ca 53 29 2f 49 9a b7 8a d2 64 b5 2d 63 65 59 8a 7a be a6 32 Data Ascii: PNGIHDRSv IDATxW{~x37w{g{&$d$,Y3JR+3+s>YQ pL$9rN$Tf9{@b8ogx`lff,y &ffffyijjjdbZJhm*>LS)/Id-ceYz2
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: e4 b9 e2 82 38 f5 ba d2 a2 84 79 88 10 90 a8 2e 4d a3 a6 2c 9d da f2 0c ea 2b 8d 34 d6 e5 d3 da 54 4c 47 4b 05 dd ed d5 f4 77 37 30 dc df c2 f8 48 37 d3 13 fd 98 a7 86 99 31 8d c2 cc 04 58 65 ff cc d8 f6 d7 32 0f 0d 16 ab 00 82 55 21 92 76 bc da a8 60 41 80 61 de 74 60 78 e4 2f 71 7d 07 75 0f 7c 4b 1e d0 81 e1 5b 72 a4 fe 36 ba 07 74 0f 3c 79 1e 98 9d 95 09 e1 c3 4c 9b 2c c9 04 4a db 5e 3a 3e d4 23 b3 0f 7d 46 7f e2 91 f4 80 0d 26 34 a5 41 80 41 41 c3 ec 8c 02 0a 8b c5 c4 8c 4c c0 67 cd 58 67 a6 18 1b 1d a0 bb bb 99 d6 d6 6a ea ea 8a 28 2b c9 24 37 3b 9e cc f4 68 32 d2 22 6c 96 1e 46 8e 31 42 59 6e 56 24 62 79 d9 51 0a 1c 04 16 34 50 78 10 2c 88 e2 20 56 53 9e 3a 6f b5 15 69 d4 56 19 a9 af c9 a6 a9 be 80 e6 86 42 5a 1a 4a 14 3c f4 74 d5 31 d0 d7 c4 c8 60 Data Ascii: 8y.M,+4TLGKw70H71Xe2U!v`Aat`x/q}u\|K[r6t<yL,J^:>#}F&4AAALgXgj(+$7;h2"lF1BYnV$byQ4Px, VS:oiVBZJ<t1`
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 02 0d be 0a 1a 04 1c b2 d2 82 e7 c1 21 cf 18 fe 17 a1 a1 a2 38 41 81 43 75 69 02 02 0d 35 e5 49 d4 55 a6 28 68 68 a8 4e a3 b1 26 53 59 53 43 36 2d 4d b9 b4 35 17 d0 de 52 48 47 6b 11 5d ed 25 74 77 95 29 68 e8 eb ad 66 a0 b7 86 a1 fe 3a 46 fb eb 19 ef 6f 62 72 b0 0d cb 48 37 33 63 fd 30 25 4a c3 38 b3 d3 d3 cc 9a 2d 58 2d b3 f3 c0 20 d7 b1 0e 0c 4f f8 f7 43 3f 3c dd 03 8b 3c a0 03 c3 22 67 e8 9b ba 07 74 0f 3c 59 1e 90 a4 55 2d ac e4 41 47 26 73 c4 c5 61 49 8b e7 8f 52 5a d2 66 16 a4 d4 a4 ad dc a4 94 9f d4 ea f2 5b 30 cf 98 98 99 35 d9 2a e6 20 a5 28 6d d5 73 b4 b2 9b 8b df 6f f1 b6 54 f5 b7 58 17 92 a5 1f b4 6f fa 63 df bd 07 2c 66 30 4d 2f 24 f7 ca ca b9 45 42 70 b4 93 65 9d b5 81 82 c5 8c d5 34 49 6f 67 1b a9 49 06 ec ed ae 70 70 df 0e f6 7d fd 15 a7 Data Ascii: !8ACui5IU(hhN&SYSC6-M5RHGk]%tw)hf:FobrH73c0%J8-X- OC?<<"gt<YU-AG&saIRZf[05* (msoTXoc,f0M/$EBpe4IogIpp}
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 0d f4 97 25 33 56 9f 8f a5 bb 06 46 db c0 d4 07 e6 11 d5 af 61 de 97 73 61 48 7f cd b5 bc e0 6d 7d 4b f7 80 ee 81 c7 c5 03 3a 30 3c 2e 67 4a df 4f dd 03 ba 07 ee f3 c0 e2 c9 ca 83 b6 b5 3f 10 68 10 58 d0 4c e0 c1 64 b2 55 bd b1 98 27 99 1c 1d 62 78 a8 8f 91 81 5e 06 fa bb d4 44 b1 ab ab 89 96 c6 2a 1a 1b cb 69 aa 2f a3 be be 98 86 ba 22 d5 b9 57 1b 9b 1a 4a 68 6c 2c a5 b9 a1 5c bd ae a5 b1 82 96 96 2a ba da 1b 54 a7 df e1 81 4e 86 87 bb 19 1b 16 c8 e8 63 72 6c 90 a9 29 5b 87 5d 55 76 46 29 0e 36 60 b8 77 ff b5 7d 97 f1 9b 9e 5b fc 3a 7d fb 9b 3d 70 af 1f 05 18 24 97 44 e5 93 cc 35 1a 10 75 68 64 b8 9f ba da 0a 42 02 bd d8 b3 f3 2b de 7c f5 59 3e 78 e7 25 36 ae 5d c9 b6 af 3e 65 cf b6 b5 9c 3a b2 9d a3 fb bf e2 c4 e1 8d 9c 3d b1 8d 2b e7 bf e6 96 dd 11 5c Data Ascii: %3VFasaHm}K:0<.gJO?hXLdU'bx^Di/"WJhl,\TNcrl)[]UvF)6`w}[:}=p$D5uhdB+\|Y>x%6]>e:=+\
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 57 e4 d1 5c 5f 46 4b 73 3d ed ed ad f4 f5 f5 30 3a 3a cc d4 d4 84 ca a5 b0 25 5f 6b c9 d8 36 d5 44 4a bc aa e3 95 ca 4e 7f 45 ce c3 37 7b ee c7 f7 ec bd c0 20 30 29 ea c2 b4 79 4a 29 0c b3 58 18 9f 18 26 25 35 9e 9d 3b 36 f3 1f ff f1 2f fc e2 e7 ff c8 b3 cf fc 92 f7 97 bd c8 67 9f 2c 63 ed 67 ef f0 d5 da 0f d8 b1 e9 63 0e ec fe 82 83 7b d6 71 ec e0 06 ce 1c df ca c5 33 bb b0 bb b0 8f db d7 8e e1 76 f7 3c 3e ae 57 95 89 ca 10 e2 6b 4f 44 e0 1c 30 84 3a db 80 21 c2 15 43 84 d3 7c e5 a4 94 38 4f d2 a4 3f c3 1c 34 08 38 08 34 2c 06 07 09 4f 9a 0f 4b ca 89 a6 38 e7 af 03 86 ce a6 7c ba 5b 0a e9 69 2d a2 a7 ad c0 06 0b 4d f9 f4 95 a7 d1 99 13 43 73 72 20 8d 06 6f da 62 bd e8 4d f0 62 28 de 83 11 83 2b 63 71 2e 4c 26 ba 33 9d ec c9 58 a2 1b fd 06 47 fa e3 9d 18 Data Ascii: W\_FKs=0::%_k6DJNE7{ 0)yJ)X&%5;6/g,cgc{q3v<>WkOD0:!C\|8O?484,OK8\|[i-MCsr obMb(+cq.L&3XG
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: bf cd 94 e1 06 23 86 1b f4 67 b8 31 51 15 0f fd 55 30 d5 0b 96 29 66 66 66 31 5b 51 36 0f 0c 0a 16 a4 3a 98 f4 2f 31 ab d6 87 3a 30 3c ec aa d4 1f d7 3d f0 68 7a 40 07 86 47 f3 bc e8 7b f5 c8 78 60 f1 64 eb 41 db df bc a3 0b 13 5e e9 ea 7b bf cd 65 5d aa 37 b1 4d 88 97 26 ed 2e 16 2c 64 82 a8 26 89 52 3b 5e 6d 49 1d ff 7b 27 d1 f7 fc fd a2 24 e0 6f de d3 47 f3 d9 05 ff 69 c7 b5 f4 78 65 af 65 d2 67 32 4d 31 3d 3d a9 a8 6b d6 6a a2 b5 b1 8e e4 84 18 bc 3d 1c 71 75 ba 81 d3 9d ab b8 38 5c c5 df f3 36 51 21 1e 24 44 fb 93 14 eb 4f 5a bc 1f 19 89 fe 18 93 03 e7 81 21 3f 33 9c a2 ec 28 4a 25 f4 28 37 86 b2 7c c3 3c 30 08 2c 48 ed 7b 55 c2 b2 2c 71 1e 18 9a ca 93 10 9b 87 87 8a 94 79 58 68 ab 33 aa 38 72 09 0b e9 6a 2e 50 a1 21 bd 6d 52 d2 b2 94 d6 a6 62 5a 9b Data Ascii: #g1QU0)fff1[Q6:/1:0<=hz@G{x`dA^{e]7M&.,d&R;^mI{'$oGixeeg2M1==kj=qu8\6Q!$DOZ!?3(J%(7\|<0,H{U,qyXh38rj.P!mRbZ
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: f7 5f e1 d3 95 6f b2 6e cd 07 6c da b0 52 e5 31 7c bd fd 33 95 c7 70 6c 0e 18 ce 1e df c5 a5 33 fb b8 7e e9 18 b7 ed 4e 73 f7 c6 69 9c 6f 9f c7 d3 f9 f2 7d c0 10 e4 6b 47 58 a0 3d e1 41 b7 88 0c b9 83 0d 1a 9c 88 8d 70 c1 10 ed 41 7c ac 97 b2 a4 78 7f 32 b4 1c 9b f4 08 f2 32 a3 28 c8 32 50 94 63 50 c0 a0 4a ab 4a e8 9c a8 61 79 b1 54 e6 19 94 55 e4 46 53 5b 10 47 55 6e 0c d5 79 b1 d4 16 c6 52 9e 1d 4e 56 bc 17 49 e1 8e a4 07 df a1 2e c6 8d de 44 6f 9a c3 9c a8 f0 b9 4a 4b 98 13 fd 06 4f 06 e2 bc 18 4f 09 60 3c c5 9f e9 34 7f 2c e9 62 be 98 d2 3c 99 4e 76 63 3a c5 85 a9 34 77 c6 33 7d 18 c8 0c 60 a8 28 0e 4b 87 84 25 0d aa 26 85 e6 59 2b 92 5d 64 cb 55 90 e5 8d b9 ac 05 05 0e 72 ed 4a 02 d7 43 2f d2 07 5f ba fa a3 ba 07 74 0f fc a0 1e d0 81 e1 07 75 bf fe Data Ascii: _onlR1\|3pl3~Nsio}kGX=ApA\|x22(2PcPJJayTUFS[GUnyRNVI.DoJKOO`<4,b<Nvc:4w3}`(K%&Y+]dUrJC/_tu
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: b2 88 ad 66 bc 04 2b 2d a9 98 f4 00 48 58 0c 28 8f 3b 30 2c 3e 16 05 08 16 5b 92 aa d9 3c 8d d9 32 89 94 24 0d 0f f7 e7 c2 d9 63 1c dc b7 8d 03 7b b7 72 70 ff 16 4e 1e dd c5 a5 f3 02 0c 47 71 be 73 1a 5f b7 cb f3 b0 10 19 6c 4f 4c d8 2d 0c 11 0e 24 1b 3c 48 8d f3 59 92 c7 70 6f b5 24 09 4f 92 e4 67 cd b4 9c 86 8a 22 03 35 85 71 d4 16 19 e6 4d e0 41 42 94 a4 42 92 84 23 49 1e 43 ab a8 0c d2 3c 6b 4e 65 d0 80 a1 af ad 90 fe d6 2c 7a 5b 32 e8 69 ca a0 b7 31 83 fe e6 6c 86 9a 73 18 6c ca a5 bf 21 97 a1 c6 7c ba 2a 8d d4 e7 26 50 91 1e 45 b5 31 8e f6 52 23 13 2d 95 cc 0c 76 c0 cc f4 1c 90 da 7a 34 2c 56 19 04 1a 74 60 b0 7d 2d 45 61 10 93 ef 83 c0 82 34 cb 1b 1e 1e 24 3b 2b 9d af 36 ac e5 67 ff f6 cf fc fc e7 ff c4 2f 7e f1 af ca fe f8 bb 5f 28 58 90 2e cf 2f Data Ascii: f+-HX(;0,>[<2$c{rpNGqs_lOL-$<HYpo$Og"5qMABB#IC<kNe,z[2i1lsl!\|*&PE1R#-vz4,Vt`}-Ea4$;+6g/~_(X./
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: b3 84 24 69 e5 55 17 03 83 c0 c2 bd c0 50 95 1f ad a0 41 53 17 16 e7 30 48 fe 42 67 63 8e ca 5d 90 4e bb 5a b7 5d 05 0d 6d 85 f4 34 19 e9 69 4c a3 b7 3e 8d ee da 14 ba aa 92 e8 ae 4e a6 bf 36 83 e1 3a 23 d3 6d c5 4c 35 17 32 d1 98 cf 50 45 06 4d 99 d1 54 18 02 a8 4f 09 a7 ab 24 03 53 7f 3b b3 53 23 73 55 68 2c 48 57 6b 81 58 75 7e 35 70 b8 4f 69 58 0c 0d 8f d6 79 ff b6 f7 46 03 04 ed 3b 2c 7e 91 5b 6f 6f 2f 7e 7e 3e ac 58 fe 0e 3f fb d9 3f f2 4f ff f0 ff f2 9b 5f fd 1b 4f fd e7 4f f9 ed 6f 7e c6 9f 9f 7b 5a d9 2b 7f fe 2d af bf fc 07 de 79 f3 79 34 60 90 8e cf 1b 3e 5f ce a6 75 2b d8 f6 d5 c7 4a 61 d0 80 e1 d8 81 cd f3 c0 70 e3 f2 71 6e 5e 39 b6 04 18 bc dd 2e e3 e7 79 95 00 6f 3b 75 3d 06 7b 5f c3 66 02 0c 37 54 af 06 01 86 90 20 67 1b 34 84 b8 12 1d ea Data Ascii: $iUPAS0HBgc]NZ]m4iL>N6:#mL52PEMTO$S;S#sUh,HWkXu~5pOiXyF;,~[oo/~~>X??O_OOo~{Z+-yy4`>_u+Japqn^9.yo;u={_f7T g4
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 24 48 09 cb 28 2a 72 23 11 a5 41 2a 26 a9 12 ab d5 e9 2a 87 41 d4 05 05 0d cd 05 48 19 55 e9 bd a0 4a a9 76 96 a9 ca 48 fd 4d f9 f4 d6 19 e9 ac 4a a3 a3 32 95 de ea 0c 06 ea b2 18 a9 cf 61 b4 3e 8b b1 5a 23 d3 0d b9 58 5b 8b 98 6d 29 62 bc 22 5d 75 e7 ad 89 f3 a5 dc e0 4b 53 7e 22 43 4d a5 30 d2 09 a6 61 30 8d 82 79 12 15 2b ae 03 83 ba c4 35 75 41 bb de 47 47 47 09 0b 0b e3 9d 77 de e6 5f fe f1 ef f9 d7 7f fa 3b 7e f3 ab 9f f0 a7 3f fc 0a 81 05 c9 5f 78 f9 85 a7 15 30 48 38 92 06 0c 2a e9 79 0e 18 d6 af f9 60 1e 18 76 6e fe 44 25 3e 1f dc b3 8e a3 fb a5 81 9b 74 7c de cf d5 f3 92 f8 6c 03 06 09 49 92 c4 67 2f d7 4b f8 b8 db 54 06 7f cf cb f8 b9 5d c6 df fd 0a 81 1e 76 f3 0a 43 a0 df 6d 02 fc ee 22 63 88 df 1d a2 fd ef 12 ef 7f 97 04 af eb c4 3a 9c 23 e2 Data Ascii: $H(r#A&AHUJvHMJ2a>Z#X[m)b"]uKS~"CM0a0y+5uAGGGw_;~?_x0H8y`vnD%>t\|lIg/KT]vCm"c:#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49795	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:05 UTC	2339	OUT	GET /images/custom/image10.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:05 UTC	900	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:05 GMT Content-Type: image/png Content-Length: 849972 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-cf834" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4969 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4s93rmTRwmPm9hUpDi6QHU5M7Yd3Ojke2Zn0EbH%2BLgazA1btWg2IXBJx2B64oiohp%2Fh0lDOv%2FdKvlj1q6me9EVz1JUQMVFaSFyn1suhzLLfRILc2%2FnCWzX3QIgCvWQE1gM4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2710c85d4234-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1743&min_rtt=1723&rtt_var=687&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2917&delivery_rate=1546610&cwnd=172&unsent_bytes=0&cid=7c2643933820feb6&ts=122&x=0"
2025-01-10 16:48:05 UTC	469	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 01 f4 08 06 00 00 00 ae 28 07 2d 00 00 20 00 49 44 41 54 78 01 ec 9d 77 98 1c 57 95 f6 7b 72 ce b1 bb 27 67 49 a3 1c 46 39 a7 51 18 65 8d 66 34 39 2a db 96 b3 31 c6 36 c9 06 2f 0b 0b 2c 7c ec c7 b7 0b bb cb c2 02 0b cb b2 89 35 d8 18 9b c5 36 4e b2 2c cb 0a 56 ce 92 33 0e d8 e6 fd 9e f7 74 9f 9a db 35 dd 93 25 4b 78 fe 38 cf b9 75 eb d6 ad 5b d5 55 d5 f7 77 cf b9 e7 3a 82 82 82 70 2d 4b 70 70 30 06 23 7a ed 5a 47 48 48 08 28 61 61 61 7d 12 2d 3f 50 ad e7 bd ea 74 68 08 82 43 43 10 14 1e e6 91 c8 70 04 45 86 23 38 2a 02 e1 71 d1 88 4e 4e 40 7c 5a 0a 92 9c e9 08 8b 8d 82 23 22 4c f2 43 a3 22 a0 12 12 11 8e 90 b0 30 a9 87 75 51 06 7a 9f 02 1e 17 16 26 e7 e0 79 ec a2 e7 0c 0a 09 46 6f 62 95 0d Data Ascii: PNGIHDR(- IDATxwW{r'gIF9Qef4916/,\|56N,V3t5%Kx8u[Uw:p-Kpp0#zZGHH(aaa}-?PthCCpE#8qNN@\|Z#"LC"0uQz&yFob
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 1e cf 7c 1e c7 e3 59 8f 3c db 11 71 08 8b 8a 47 78 74 82 47 62 52 10 1a 9b 82 d0 f8 54 38 12 d2 11 9b 57 8a c4 b2 31 70 55 cc c0 bc 96 76 e4 2c 5a 84 ac 45 8b e0 5e bc 08 ae 45 0b 91 b9 60 11 32 e6 2f 44 c6 c2 45 22 99 8b 16 43 64 c9 12 a4 2f 5e 8c b4 45 4b 2c 49 5f bc 14 94 cc 25 95 22 ae ca 15 70 2f 5b 85 ac e5 ab 91 b5 72 8d 88 ab 6a 0d 28 ee 35 eb 44 b2 d6 6e 00 25 7b fd 46 91 bc 8d 9b 50 5c d7 80 15 f7 7e 46 b6 f3 ab 6b d0 93 14 6c ac 81 29 85 eb 37 61 54 5d 93 88 a4 6b 1b 31 a6 be 19 13 5b 3b 51 d1 b1 5d d2 65 d5 75 18 5d d7 84 69 5b 76 62 62 63 bb 8f 8c ab 6d c2 b4 d6 ad 22 4c 57 df f5 59 54 dd f2 49 8c 5c 5f 8b 82 15 6b 31 a1 a1 0d e3 ea 5b 50 b8 b6 1a 93 db b6 a0 64 dd 26 1f 99 d1 b1 03 15 cd 9d 58 72 c3 ad 98 bf f3 46 4c 6b de 82 31 1b eb 31 b9 Data Ascii: \|Y<qGxtGbRT8W1pUv,ZE^E`2/DE"Cd/^EK,I_%"p/[rj(5Dn%{FP\~Fkl)7aT]k1[;Q]eu]i[vbbcm"LWYTI\_k1[Pd&XrFLk11
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 6d b1 2c e8 b4 d0 ab 65 5d 2d e8 bc 16 5a d0 4d 2b 3a ad e9 6a 45 ff a8 2d e8 a5 f3 96 22 6b c2 14 c4 e4 16 c0 91 9c 82 28 a7 07 d2 15 d0 69 41 a7 c5 58 2d bf 43 0d e8 a6 e5 9c e9 cb 6d 41 cf 29 2d 13 e0 8d 4a 4e 41 6c 5a 06 a2 d2 d2 fb 25 84 6e 67 69 29 8a 27 4e 94 fb 92 90 9d 05 42 3b 2d ea ee b2 32 d9 97 3b 7a b4 a4 09 f0 76 20 8f cb 74 82 a2 03 03 1c 2c a0 d0 9a 4f 51 08 57 30 67 9e 96 f1 a7 cb c6 4f 04 07 1d 58 8e c7 d8 25 ab a0 18 99 b9 f9 48 75 65 21 91 e7 48 cb f4 11 82 f5 60 84 70 cf c1 58 42 f6 d8 89 53 2c 2b b8 5a c3 7b d3 04 79 82 38 db 90 9d 5f 0c 02 7f 74 7c 92 58 cf a9 bb c0 dc 63 31 b5 00 5d 2d e8 c3 80 ee 03 e4 76 ab f8 b5 06 e8 61 31 31 88 4d 4e 46 4a 56 16 5c 85 85 c3 16 74 9b c7 82 3f ab f3 50 e6 0d 03 fa 30 a0 0f ca 45 7f a0 03 13 bd Data Ascii: m,e]-ZM+:jE-"k(iAX-CmA)-JNAlZ%ngi)'NB;-2;zv t,OQW0gOX%Hue!H`pXBS,+Z{y8_t\|Xc1]-va11MNFJV\t?P0E
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 32 0b ba 7d c0 a0 bf db fe 06 05 cc bc e1 39 e8 de 01 02 b5 28 2b 38 0e cf 41 f7 cc 41 ff 38 03 3a 21 3d 2a 31 59 46 e4 69 fd 16 49 49 13 2b 7a bc 3b 5b 20 9d 50 ae 20 2e c1 e2 9c 4e 09 22 44 d7 48 82 39 85 1d 3c 1e 4b a8 61 c7 21 38 b4 cb 62 3e 6c 41 f7 04 95 eb f3 08 7d b7 0e 81 ef 1f fc 30 a0 5f 7d 80 1e 1e 93 82 b0 b8 54 04 27 a4 22 d2 95 0b 5a d1 23 b2 0b 31 61 d5 ba 3f 7b 40 9f dc d2 29 ee db 04 f4 29 ad 5b 7c e0 5c 83 af 99 80 5e 7b ef fd 58 7b c7 3d 12 90 ad 78 d5 46 f0 78 42 3e 03 a7 11 f8 ed 80 ae ae e3 4b 77 df 2e 81 e2 ec 16 74 5a b2 2f 27 a0 4f de dc 02 0a 01 9d 70 4e e1 b6 06 a7 1b 6a 40 57 30 b7 f4 d2 55 60 70 38 09 10 37 20 0b 7a 95 04 88 2b 9a bf 42 00 3d b7 62 0e 12 0a 4a 11 9a 96 89 90 e4 54 71 db d6 ef 37 01 9d e0 49 8b 31 61 91 f0 a8 Data Ascii: 2}9(+8AA8:!=*1YFiII+z;[ P .N"DH9<Ka!8b>lA}0_}T'"Z#1a?{@))[\|\^{X{=xFxB>Kw.tZ/'OpNj@W0U`p87 z+B=bJTq7I1a
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: b1 1b a0 13 d6 69 c9 ef 0d d0 09 e3 74 e7 57 a1 8b 3b 81 bd 2f 80 4e 48 57 38 ef 1d d0 3d f3 d5 73 17 ad 40 fe fc e5 28 9a bf 0c 0c 10 97 54 32 1a 11 ae 5c 84 a5 66 22 22 35 5d a6 33 71 e0 55 96 c8 8c 8b 43 46 61 a1 c0 27 21 51 e1 9c ba bf 80 ae 96 72 bb be d2 80 9e 91 93 27 cb 8e b1 fd b4 a4 73 fa 4b 7f 84 f7 81 c1 da 18 6c 8e 73 bf f9 3f c8 ff 45 46 64 67 c4 76 c2 ba 06 82 e3 3d 54 b1 ac e9 de e9 32 e6 bd 34 d3 fc a6 a8 28 ac f7 04 e8 bc 9e 88 b8 44 38 42 c3 65 3a 99 82 bb e9 d6 6e a6 75 f0 23 d0 40 67 7f f3 39 90 cb 65 d2 86 ca c5 9d 41 e3 d8 06 7a 4d 78 06 6b bc 86 83 61 40 ef 97 a5 5b 2d df 04 60 5a 2a 39 58 91 57 50 34 a0 3a b4 2e ea fe 5a 4c fd 95 ef 09 d0 af b4 05 3d 81 fd d8 b0 08 6b a9 33 7f ed bd 9c 79 c3 cb ac d9 a3 c8 7f 44 60 ae 10 a9 40 a8 Data Ascii: itW;/NHW8=s@(T2\f""5]3qUCFa'!Qr'sKls?EFdgv=T24(D8Be:nu#@g9eAzMxka@[-`Z*9XWP4:.ZL=k3yD`@
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: a3 8e f4 6b 14 5c 76 28 a4 e3 61 b9 f1 79 97 de ba 4c 80 ee 70 84 7e e4 80 1e 15 1b 29 80 4e 30 77 04 0f 03 3a 3b 5c ec 0c 7f 9c 00 9d cf 3c 3b 92 ec dc 13 d0 23 63 93 11 19 ef 05 74 76 9e 13 52 10 9c ee 42 d1 ac b9 48 9f 32 05 e9 33 a6 c3 39 77 ae 0d d0 2b 3f 72 40 a7 e5 5c e1 7c 64 53 0b 7a 03 f4 31 f5 cd 18 55 5d 2f ee da 0c ec 46 eb 39 01 9d 69 02 3a a1 bc 0b d0 b7 61 42 f3 36 8c 67 00 b6 26 02 fb 36 4c 6a d8 8a 4d 9f fa 22 6a ee fa 22 a6 d6 6e 43 c9 b2 1a 1f 40 1f d7 b4 5d 00 3d 77 75 8d 00 7a d1 ba 3a 10 ce 2b 3a 76 0a 9c af b8 fd 6e 54 b4 ed 40 f9 a6 26 4c 6c ec 14 37 78 42 7f 45 d3 76 cc 68 bf 1e 73 3b 6f b4 00 9d a0 3e ad 7e 1b a6 37 6e b5 00 9d 69 02 7a e9 ca 0d 18 28 a0 13 c8 c7 ac af b3 e6 a5 2b a0 33 60 1c a3 ba 2b 9c 07 02 74 82 79 e1 da 6a Data Ascii: k\v(ayLp~)N0w:;\<;#ctvRBH239w+?r@\\|dSz1U]/F9i:aB6g&6LjM"j"nC@]=wuz:+:vnT@&Ll7xBEvhs;o>~7niz(+3`+tyj
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 27 a5 c2 35 61 22 32 27 4f 41 e6 74 8f 05 3d 7b c9 62 f8 07 74 0f 9c f7 05 d0 09 e7 43 0d e8 84 f3 31 6d 1d a0 15 dd 84 73 a6 09 e8 85 eb 37 49 90 38 2e af 46 40 1f 5b d3 e8 17 d0 cd f9 e7 92 f6 ba bb 13 da 09 e7 d3 1a b6 a0 fe 93 f7 a3 f9 ce 2f 60 6e 4d 27 ca 97 6e c0 94 8d 2d a0 eb f9 d8 f5 8d 98 5a df 89 59 4d 5b 50 b6 7c 1d c6 ae ad 45 f9 aa 4d 98 df ba 0d f3 5a b6 62 e3 ad 77 61 fd cd 77 62 5e 53 27 26 af af c3 cc cd ad 18 bb ba 1a 33 36 b7 cb 31 f3 da 76 62 d1 96 eb 05 c2 67 34 10 c6 3d 22 80 de bc d5 02 f4 91 2b bd 16 74 03 d0 a7 d6 b7 0a a0 d3 6d 9d 03 00 84 6e 82 38 21 bc 37 40 57 0b 3a 21 5e 97 5d 23 9c ab cb 3b 21 5d 03 c4 f5 07 d0 09 e4 26 98 f7 07 d0 09 eb 0a e8 85 95 cb 50 b8 68 09 dc 53 a7 23 71 44 b9 04 88 a3 05 3d 22 35 13 b1 e9 59 88 4a Data Ascii: '5a"2'OAt={btC1ms7I8.F@[/`nM'n-ZYM[P\|EMZbwawb^S'&361vbg4="+tmn8!7@W:!^]#;!]&PhS#qD="5YJ
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 42 b9 99 0e 04 e8 6a e1 d6 3a cc 3f 1a eb 1a 42 fc 7f 5c cc 0f 8e 96 55 ad f5 68 5b 55 eb 07 d1 d4 fa 71 14 4d 20 57 09 09 97 8e 8f cc 87 f3 a6 d9 69 f0 e9 38 7c c4 16 74 f3 1e 48 3a d4 21 c1 dd d4 22 de 5f cd 39 e8 57 d2 c5 fd 5a 01 74 76 84 f9 5c d8 3b 94 7d ed 18 2a 98 ab 56 30 57 6d 07 73 dd ee 09 d0 b9 8f e5 14 16 4c ad 1d 6a cb f2 d5 07 40 27 a4 ab 9b bb 09 e8 02 1d b1 b4 8c 25 75 01 7a 52 12 5c e3 26 20 3c 27 1f 71 23 cb 91 39 7d 26 72 17 2f 96 79 c1 3d 01 ba c2 79 c6 b2 d5 a0 d8 5d dc ed 80 ee 5a bd 16 94 ac b5 1b 7c 24 7b fd 46 50 b8 8c 1a 2d e3 ab 3f 7f 3f b8 c4 9a 82 b9 6a 42 f9 f8 f6 2d 22 4c 2b c0 53 8b 05 bd a6 4e 74 79 43 b3 00 ba 58 83 37 35 60 46 c7 0e 54 34 77 c2 17 d0 eb 30 b5 b9 d5 23 0a ea f5 ad a8 d8 dc 80 99 f5 2d 58 dc ba 15 cd b7 Data Ascii: Bj:?B\Uh[UqM Wi8\|tH:!"_9WZtv\;}*V0WmsLj@'%uzR\& <'q#9}&r/y=y]Z\|${FP-??jB-"L+SNtyCX75`FT4w0#-X
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 72 de 73 20 40 37 bf 51 b4 a0 73 0e bb 04 de 8b 8c b6 00 5d 21 5d 41 5d 06 48 e8 f2 1e c0 82 ae df 51 a7 3b 17 51 0c 12 17 44 ef 3d cf 8a 29 56 bc 17 c3 8a 7e b9 2c e8 6c 87 b9 cc 9a 35 58 af 83 f6 36 ad ed a6 e6 ef cc fb cc e3 99 a6 3b 38 23 c1 f3 3e f3 9e 12 d0 f9 bc f1 d9 23 74 d3 82 6e 07 74 05 f5 64 77 2e 28 04 74 fe 0f 12 d0 e5 be 7b 97 67 b3 e6 38 f7 3a a7 dc 37 56 8f 6f bf 28 30 a0 2b 90 fb e8 88 18 c4 a6 39 e1 88 a4 c7 46 84 67 39 4e 5e 73 78 a4 25 0a a8 97 53 cb fc df ab 24 8a 3b 61 53 01 9d 69 bd 6e ed 5f da 5d dc 15 d0 2d ed f5 88 d0 7e a8 09 af 7d 49 9b 00 c9 73 13 d0 a9 19 c5 dd dc d7 ad 9f e8 ed 43 f7 e5 1c 9e 32 fd b7 a0 5f 0d 80 ce 7b a0 80 ee 7b 3f 7c a3 ad 5f ae 7d c3 80 3e 0c e8 7e a7 38 28 a8 06 02 74 ce 41 67 d4 f6 81 00 3a c1 3c 32 Data Ascii: rs @7Qs]!]A]HQ;QD=)V~,l5X6;8#>#tntdw.(t{g8:7Vo(0+9Fg9N^sx%S$;aSin_]-~}IsC2_{{?\|_}>~8(tAg:<2
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: ff c0 f3 17 2f e2 12 80 27 8f 1e c5 53 c7 8e e1 d0 2b af e2 e8 6b af e3 c5 93 67 70 f8 fc 25 1c 3a 77 01 47 5f 79 0d 2f 1c 3f 8e 3d 47 8f e2 f0 85 0b f8 d9 c3 0f e1 57 4f 3e 89 67 5f 7e 19 ff fb c2 5e 3c fc f4 53 f8 cf 47 1f c5 ef 9e df 87 9f fd f2 61 3c fa cc 1e fc e8 bf 1f c4 6f 9e df 8b 87 9e db 83 97 5f 7f 1d 07 5f 7d 1d 7b cf 9e c7 ff 1e 3c 2c b2 f7 cc 45 ec 3b ff 0a 9e 78 f9 04 0e bc f6 16 4e fc f1 43 1c 7e fb 3d fc e8 d1 27 70 fb 57 bf 89 a6 4f de 83 ca 2d bb 30 bf 75 8b b8 e1 2f df 75 13 aa 6e b8 4d 82 cd cd 69 d9 8e 8a da 16 b1 98 d3 6a 3e a7 65 27 e6 b6 ee 92 88 f0 53 37 77 58 80 ae c1 e8 4c ad 11 e4 a7 36 6d 15 0b 3a a7 05 d0 82 ae 6b 9f 9b 9a 96 74 2e 5f b7 f0 c6 5b c5 1a ae 51 dc 4d 28 37 d7 46 37 f3 75 3e 3a ad e8 9a f6 e8 95 e0 f3 c5 81 20 Data Ascii: /'S+kgp%:wG_y/?=GWO>g_~^<SGa<o__}{<,E;xNC~='pWO-0u/unMij>e'S7wXL6m:kt._[QM(7F7u>:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49797	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:05 UTC	2649	OUT	GET /images/products/prod7/1-bottle.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:05 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:05 GMT Content-Type: image/png Content-Length: 237735 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-3a0a7" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4968 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j%2FQQeqStEc0GLKefsBhv9zFxPzxcrhGylYANA2DwYdxQ%2Fcyk5YnxPtDJturCsYlSkL%2Fq%2FHS9elA8KAWLUzYA0dku01xKQwETjtRHgFncKkoUMwb83ndWS2aysm%2BUkyzi6fg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2712092578d6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2108&min_rtt=2019&rtt_var=821&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2838&recv_bytes=3227&delivery_rate=1446260&cwnd=147&unsent_bytes=0&cid=caba3cd58ac80255&ts=120&x=0"
2025-01-10 16:48:05 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8d 00 00 02 58 08 06 00 00 00 9e bc ba d0 00 00 20 00 49 44 41 54 78 9c ec bd 09 b0 6d e9 55 1e b6 fe 73 ce 9d 5f bf a1 df 6b f5 a0 d7 ad 06 8d 6e d1 c2 6e 01 92 ac 81 c1 b2 02 82 04 30 65 a3 d8 01 ca 15 0a 02 15 88 8b aa c4 a9 90 04 92 8a a7 54 aa 5c 60 b0 ab 62 42 39 09 0e d8 54 31 b8 40 80 19 0c 66 32 08 2c 23 68 a9 a5 b6 a4 ee 56 8f ea d7 af df 74 e7 73 ce 9f 5a fb ec 75 df ba df fb d6 bf f7 b9 f7 dc 7b cf bd f7 ac aa 53 e7 9c bd ff 79 ff ff f7 ad b5 fe 61 27 99 b0 dc b8 71 63 d2 49 ee 4b 52 da 5d c5 9c 73 f5 8d d7 db 8a c6 2f c5 65 f7 fd 35 f6 1b af f9 f2 61 7a e3 fe 2f 95 89 b5 43 a9 7d 9a da ce ee d7 61 e6 45 64 49 44 96 45 64 9e 84 d5 eb 77 89 c8 82 86 4b 29 e9 ff b3 75 58 8b 1b 4a ce b9 5b Data Ascii: PNGIHDRX IDATxmUs_knn0eT\`bB9T1@f2,#hVtsZu{Sya'qcIKR]s/e5az/C}aEdIDEdwK)uXJ[
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 69 3d f4 9a 96 cb 8f 0f ff d1 b8 76 dd 7e 5b fb 59 df b5 76 b0 f4 f4 5b af d9 7f 2d 0b 3c 8f 43 97 fb ee bb ef 48 f3 2f 49 6f 6a 4b 36 93 c3 94 a5 1a 64 a5 fe 7d 49 44 2e 88 c8 3d 22 72 ce 95 43 ef 5d 14 91 d7 d4 d7 2f d5 c0 5c 49 0d cc 67 dd 67 a5 26 86 0e d6 65 af a4 8d f1 23 72 9d 44 da 4d b2 17 60 d1 b4 0d b8 a2 3c 95 b4 52 4a d7 95 6c 3a 9d ce cd 94 d2 8d 6e b7 7b 2b a5 d4 77 e1 95 ac 5e d6 4f b7 db bd 9a 52 d2 cf a6 25 21 22 1a ff 4a 4a e9 a5 94 d2 2b 35 d1 49 fd bd 61 40 eb 85 5d 9b c9 4c 50 66 a4 71 f2 44 35 e9 07 45 e4 72 ad e5 ab dc 2d 22 0f 8b c8 43 76 2d a5 a4 1a f9 03 35 31 dc 6b 7d a1 b6 10 e6 58 ab 94 c0 34 ba 67 20 59 92 b6 20 6d 1a a7 09 03 bd 92 b0 fb a5 72 b3 bc 91 ac da 48 a9 cc 78 bd ce a3 9b 73 d6 67 76 b7 b5 9f e5 ef c3 59 39 54 63 Data Ascii: i=v~[Yv[-<CH/IojK6d}ID.="rC]/\Igg&e#rDM`<RJl:n{+w^OR%!"JJ+5Ia@]LPfqD5Er-"Cv-51k}X4g Y mrHxsgvY9Tc
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 89 9c f3 06 5a 58 33 99 8c cc 36 f7 dd 29 4a a4 5f 26 22 ef 13 91 af 11 91 b7 d7 2e a7 3b 06 9a 69 fc a6 a1 db c7 5f 33 e0 30 53 5f 07 04 0e 44 01 30 61 e5 3f 28 93 5c cb f0 d2 4b 2f 55 83 d8 ac 9e a3 10 3f a1 dc e4 9e 32 89 2c 8d 92 8b a9 e4 5a c2 a5 a4 51 da 51 fc a6 6f 69 20 70 16 9f 91 0e 5e 13 e8 3f 68 b1 08 58 23 48 c4 4c 39 40 0b 47 bf cf 9e 3d 2b 2b 2b d5 50 b8 63 15 98 df 54 c8 ac 20 66 7d 9b 78 a5 c9 94 2e 6f a1 18 81 e8 84 bb 8d 9d e4 16 06 a0 95 36 1c 0e 75 39 f1 1f 0e 87 c3 5f c9 39 ff e6 70 38 fc 84 11 ae 91 61 9e 6d ee db b3 cc 2c 8d 91 e8 7c c4 07 45 e4 1b eb f9 88 07 ec 06 76 78 b3 1a ec 63 e4 e0 b5 41 73 3d a9 15 61 3b 65 0d 90 6d 70 59 a7 6d 22 b1 83 ec bc e6 9e b0 f2 1e 15 61 30 d7 4c 54 6f 4f 2c 91 cb 07 d3 2c b9 85 24 00 b2 88 20 4a Data Ascii: ZX36)J_&".;i_30S_D0a?(\K/U?2,ZQQoi p^?hX#HL9@G=+++PcT f}x.o6u9_9p8am,\|EvxcAs=a;empYm"a0LToO,,$ J
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: f5 66 ba 32 ea fd 4d 81 c6 75 21 9c 14 31 d2 d0 55 5e 47 b9 ec b0 e4 bb f6 ff 99 fb a7 24 cc 02 60 d6 25 e6 17 ed 98 ce 64 f7 38 82 1f 86 17 20 c0 48 0b 2f d5 09 b5 75 96 57 a9 3e cc b5 c5 ea 80 bf 4b d6 9e 3f 3a bd a9 bc c9 cd 1d e0 f3 63 cf 07 35 7f 6c 4b 2c 27 96 6d dc eb 58 57 7b 56 bd 5e ef 47 73 ce 78 a4 fc a9 17 39 08 4b 63 8a 40 f8 7b db 6a 09 4d 03 b7 6d 1a 72 0c 27 d0 c6 01 e2 83 90 c8 8d c3 ca 88 61 98 ab a2 c9 72 88 c0 9d 5d 67 ee 2b 2f 08 c2 11 b9 f9 bd 09 a9 61 42 9a b9 ae 4a f5 c2 b8 18 16 27 a6 b1 9e a5 89 67 74 3d a5 fa 98 19 7f 0f 09 08 89 d5 d7 d9 da c1 7e 97 9e 1d de f7 47 b2 20 69 44 cf d6 c7 65 e2 f3 c2 f4 3a 9d 4e af d3 e9 7c 70 30 18 fc cc cc da d8 2d 27 76 4e 23 a5 f4 96 c3 ce d3 1f 51 30 ed 92 ea a3 d1 a3 01 7c 98 82 60 e9 25 02 Data Ascii: f2Mu!1U^G$`%d8 H/uW>K?:c5lK,'mXW{V^Gsx9Kc@{jMmr'ar]g+/aBJ'gt=~G iDe:N\|p0-'vN#Q0\|`%
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: e5 d4 92 46 a4 e1 9d 16 39 ca ba 96 b4 c4 b6 ff 19 e8 f9 7b cc 85 c4 c0 98 fd 67 e4 23 00 fe 08 44 ec 54 de 68 a9 2d 6a df 19 5c 61 4c d3 66 c7 62 b4 11 96 5f e9 b9 60 3b b0 36 51 d2 f0 6e 26 b4 36 84 ec a9 c8 c4 9d e5 09 04 df 9d 11 b5 1b 96 13 9f 0d 9b 03 69 aa 2b 12 98 7b 7e 0b fa 22 a7 e3 a4 0c 1e 86 cc 2c 8d 5a da 6a 2d 27 45 4a 27 95 1e 96 44 20 ce b4 7b 69 58 ca 89 71 11 00 04 ce 84 8a 40 3d c1 e4 69 94 17 e6 cb ca 57 b2 84 10 c0 31 7d af 9d 7b 40 c3 23 53 98 e5 12 bd af 22 6a 2b 0c 1f b5 5f e4 c2 41 6b 21 b2 c0 b0 fc c9 1d 64 88 cb 70 91 48 30 2f ac 1f 23 62 d6 ae 19 dc 7a a5 ba ea 2a 4c 5c c5 35 93 93 7d 34 7a 51 50 d3 38 2d 84 61 83 51 8f 44 3f 2a 6b a3 0d 10 63 58 01 90 40 41 4d b1 24 4d 6e 9d 36 d7 4a e1 4d a2 72 7a cb 82 b9 78 98 ab d4 13 59 Data Ascii: F9{g#DTh-j\aLfb_`;6Qn&6i+{~",Zj-'EJ'D {iXq@=iW1}{@#S"j+_Ak!dpH0/#bzL\5}4zQP8-aQD?kcX@AM$Mn6JMrzxY
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 5c 3d 18 17 c9 02 35 68 74 3f 60 bc d2 f3 62 c4 82 00 5b 6a c3 a6 f2 a0 a5 c0 ca 19 b9 5a ec bf 07 e6 a8 dc a8 a1 97 80 17 81 bd 64 0d 31 37 8f 00 c0 47 00 8d 75 f6 4b 6a bd 95 61 2b a7 a2 39 99 44 5c 6e 58 6f 5f 56 36 e7 82 f5 8b 96 0f cf 2c 8d dd 72 aa 97 dc ee 97 28 50 8e 0b 69 b0 e3 2d 0e 4b 22 4b 82 91 03 02 29 0a bb de 74 74 47 13 51 30 97 0f b3 5c a2 f2 23 21 22 71 44 da bb 10 f0 8e ae 49 e1 34 58 04 39 2c 43 82 49 73 56 0e 9f 1e d3 e0 3d 39 e1 61 83 98 3e 23 12 66 b5 61 3c b6 bb 1c d3 2a 59 82 fe bf 9d 16 5c 6a 0b 16 cf ee cf 48 63 b7 9c 5a 4b 03 07 ef 24 3a c6 ac 73 b5 13 04 95 d2 f1 19 26 a5 53 79 19 c9 30 ad 9b 11 07 02 68 e9 25 5a 18 b7 c9 da f0 bf 31 ff 88 68 4c 70 f7 b3 d7 c6 a5 61 27 33 82 2e a6 9d c1 ad 85 e5 f4 82 ef f1 f0 ab a0 22 f7 16 Data Ascii: \=5ht?`b[jZd17GuKja+9D\nXo_V6,r(Pi-K"K)ttGQ0\#!"qDI4X9,CIsV=9a>#fa<*Y\jHcZK$:s&Sy0h%Z1hLpa'3."
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 81 2f 1e 81 b5 8d 2b a1 29 4c 1b 6b 86 95 85 85 6b 72 e9 44 96 50 09 8c db 48 db 76 29 01 a9 07 7d 66 ad a0 85 8a 24 ce 2c 2c b6 c4 d6 a7 19 59 25 a5 39 9e e8 b9 30 97 58 f4 bc d8 3d 7c c6 f8 ec 66 72 5b 4e aa a5 71 64 2f 82 9f 75 b2 f6 e2 81 84 69 e3 6d 2c 07 69 b1 13 5b e0 b9 b4 39 c8 90 c5 6f 6b 25 09 80 6a e4 d6 61 75 43 d7 88 07 2f 04 66 3c aa 83 c5 89 a4 c9 cd d4 a6 0d b0 6e 48 42 d1 31 22 d1 7f 21 44 c0 88 98 b5 ab bf e6 d3 57 62 6a 6a 6f d6 5e e8 16 9b c9 6d 39 a9 a4 11 1f 89 5a 4b c9 cd 31 93 c3 11 a6 d9 45 cf 02 41 d3 83 8b 27 8c 88 64 18 68 a1 44 9a 6b 82 15 3d 6d 5c 55 42 c0 31 2a 0f b3 3c 58 ba 08 d0 91 46 8d e5 64 fb 21 18 39 b1 6b cc 3d 84 e1 30 fd 68 ff 05 e6 81 2f 6b 62 79 65 58 d6 9b e0 54 5c 6c 53 66 69 d9 ff 36 2f a4 c2 ba cd b0 e1 4e Data Ascii: /+)LkkrDPHv)}f$,,Y%90X=\|fr[Nqd/uim,i[9ok%jauC/f<nHB1"!DWbjjo^m9ZK1EA'dhDk=m\UB1*<XFd!9k=0h/kbyeXT\lSfi6/N
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 58 df 36 d7 59 7d 5a 1c b7 3e c8 6d 34 a7 53 26 33 f7 94 93 93 4c 1c 06 12 73 73 73 72 e1 c2 85 9d 81 69 e2 37 46 e1 ab 39 a5 a5 fb a7 04 e2 b8 61 cb 03 29 de 8f c2 e3 37 c6 f1 e9 e2 7d 21 9b c6 58 39 11 b0 d1 1d 83 84 16 b9 fc a2 49 e7 c8 25 62 40 cb de 93 61 e9 a0 36 ce 2c 82 68 97 74 09 3c 19 a9 b4 79 b6 3e 6f 3c 01 97 b9 e6 da 94 a7 e4 02 24 96 c0 1d e1 98 0b ce a7 59 b2 b4 04 2c a4 7a c9 ed 1d e1 4f bb cc 0e 2c 6c b8 36 8d 82 26 3e d6 21 12 1d 10 f3 f3 f3 b2 b4 b4 54 04 76 fd b6 fd 1c fe 9e 5d b3 eb fa df 5f 63 e1 11 90 2d 1e fb 1d 85 41 40 8f c8 02 ad 15 96 2e 6a df cc 35 e4 ef 25 72 58 61 64 09 d8 7d db 9b 81 80 e9 f7 23 20 00 22 18 b2 a5 a8 16 d7 fe 2b f1 23 d1 fb 23 38 f4 a3 71 2c 9e 9d f8 8a 4a 81 bf 1e bd ab 02 5d 58 02 84 e9 f3 f7 e2 ad 1e 5b Data Ascii: X6Y}Z>m4S&3Lsssri7F9a)7}!X9I%b@a6,ht<y>o<$Y,zO,l6&>!Tv]_c-A@.j5%rXad}# "+##8q,J]X[
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: f7 60 e4 e3 fb bc 2c 7f fb 36 02 d0 ff 1e 20 2c 1d af e5 a1 1f d9 06 8c 69 71 7e 80 d8 ff e4 e6 6c c4 4d 70 e2 c0 44 f0 67 ed e9 89 82 cd 35 f8 b2 23 29 5a 5a 7e 5e 89 b9 ce 98 85 23 c4 da f1 04 8c e9 f8 32 fa 72 98 b5 e7 b5 4e b4 62 2c 0e 92 88 90 b9 14 3c ee c2 1f 73 8e 75 f2 e2 c9 51 9c c5 c2 ea ea 2d 21 6f f1 44 04 68 c4 84 0a 8d ef 97 d8 47 ed 1a 92 3a 5a 0d 38 ef 60 5a bf f6 5d bb 6f c2 26 ea f1 3f ae 10 c3 3e 89 73 26 de 85 e5 fb bb f5 6f 2b 8f fd f6 1f 75 73 d9 ff ba 1e 83 92 25 78 5a e5 a4 92 c6 ce 53 46 73 db c0 57 3f 5b 5b 5b 3b bf 3d 48 1b 78 e0 1c c4 10 56 2c 79 8d 16 35 66 4b 43 d3 54 13 59 3f 9a 9f 7e f4 37 ba b0 bc 06 66 1d 5d 3b f1 e2 e2 e2 ae 01 a0 d7 74 f2 4f bf ed bf 5d 4b b5 0f d7 06 86 0d 34 af e5 21 c8 a3 ab 87 69 c7 08 6c 0c 7c 85 Data Ascii: `,6 ,iq~lMpDg5#)ZZ~^#2rNb,<suQ-!oDhG:Z8`Z]o&?>s&o+us%xZSFsW?[[[;=HxV,y5fKCTY?~7f];tO]K4!il\|
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: a6 8d 98 5f 56 cf dc c9 e0 7b 4d c1 0a 24 2c 13 03 d7 92 c6 79 d0 ed d4 e6 5e f4 7b 2f 82 20 c8 b4 74 ef 76 13 42 36 1e 84 50 33 cf 64 03 1e fa f1 91 4c 50 e3 8d 48 03 5d 39 fa ac 87 b0 74 d6 87 f7 cf 1f eb d1 f4 5c 2c 6c e4 c6 62 84 e1 ef f9 e7 c6 fe 97 9e 29 b3 66 7d 9b 96 2c 13 01 85 47 dc 42 0c 7f 0d c3 7b cb c5 93 bf bf e6 e7 95 f4 b7 02 bd 5a 13 3e 3d 1d db 6a 81 28 69 a8 02 f8 99 cf 7c 46 3e f6 b1 8f 55 ee ab cb 97 2f 57 e3 b9 9e e4 ae f2 55 2f 84 f5 8f 7e bf 3f 98 9b 9b fb 7b 9d 4e e7 7f 62 75 9c c9 48 4e f4 92 db ba 33 3e 35 1c 0e bf 6e 73 73 f3 cb fb fd fe f7 6f 6e 6e fe 65 1b 94 4a 04 1f ff f8 c7 e5 13 9f f8 44 e5 86 fa d0 87 3e 24 df fa ad df 5a 11 87 92 83 6a 30 6a 0a fb d5 26 3a 00 d4 04 ee c0 91 09 d2 60 15 30 4d f5 30 ea 8f 82 e0 1b 11 56 Data Ascii: _V{M$,y^{/ tvB6P3dLPH]9t\,lb)f},GB{Z>=j(i\|F>U/WU/~?{NbuHN3>5nssonneJD>$Zj0j&:`0M0V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49799	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:05 UTC	2339	OUT	GET /images/custom/image14.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:05 UTC	898	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:05 GMT Content-Type: image/png Content-Length: 791204 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-c12a4" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4968 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DaclmEAQbZuGsNNJUeiwg5KI5M%2BBnJiyfTWO%2FI7L%2FZdYL3W818rqQDjemdGdm4Ww4guf1OJZFuCXR7N51aAD5GIEepKHsmZfHljPh75tcqCIQgWT2DSFbA03GxFGsMVWKjA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27132b4b4268-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1800&min_rtt=1793&rtt_var=687&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2917&delivery_rate=1576673&cwnd=252&unsent_bytes=0&cid=410b8b79a15e2c51&ts=254&x=0"
2025-01-10 16:48:05 UTC	471	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 06 00 00 00 cb d6 df 8a 00 00 20 00 49 44 41 54 78 01 64 bb 67 74 e3 e7 61 a7 8b 61 ef bd 03 04 49 10 44 25 00 a2 11 8d 05 20 0a c1 06 12 04 d8 41 80 60 ef 75 48 0e 39 bd f7 19 49 23 cd 68 24 8d 46 92 25 5b b2 6c c9 b6 2c c7 35 f6 5d 3b c9 26 f1 3a 6d 93 ec 6e da e6 6e 36 f7 a6 6c 1c c7 b1 65 c7 5e 3f f7 00 b2 73 cf 3d f7 c3 ef fc 09 7c c0 07 1e 12 cf fb 2b af e0 f9 67 9e e5 9d 4f bd cd af 7d f9 ab 7c f9 d7 7f 9d cf fe da 97 79 ff 1b bf ce 93 f7 3f 8f 3f 32 4d 6e 49 0e 19 45 99 e4 54 e4 51 5a 5f 41 5e 55 01 99 c5 59 14 94 e6 91 9a 26 a0 4e 5c 83 aa 59 8e 4c a7 a2 d9 d1 8a 6f 2a cc e0 7c 0c 6b 7f 2f 4d 36 0b 85 0d b9 54 34 95 90 53 99 41 5a de 09 72 8b 72 c8 cc cd 41 90 92 8a 20 2d Data Ascii: PNGIHDR IDATxdgtaaID% A`uH9I#h$F%[l,5];&:mnn6le^?s=\|+gO}\|y??2MnIETQZ_A^UY&N\YLo*\|k/M6T4SAZrrA -
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 0d 25 08 4a 32 39 51 9c 89 a0 bc 84 8c 3a 21 19 4d 75 a4 c8 44 e4 a8 25 94 ea 95 94 28 1b c8 aa 2e 25 a3 a4 88 f4 82 7c 4e 64 66 7e fc 3b 4d 49 25 35 3b 9b ec d2 12 0a 6a aa a8 52 34 51 a9 92 51 dd ac a0 b2 59 4e 85 46 4e b9 56 41 b5 a1 19 61 ab 8e 1a 9d 8c 5a 83 92 3a 93 3a 29 91 5e 91 7c dd d0 aa a1 c9 ae 47 64 d7 52 df d6 82 b4 b3 15 b5 b7 0d ad b7 9d 66 77 3b 9a ae 76 5a bc 4e 34 6e 0b 5a 7f 3b ba be 4e 3c 0b 61 e6 6f ae 12 bf 39 c6 d4 15 27 5b 2f f5 71 f8 7e 98 d5 4f 78 99 7d e2 22 fe a8 8f 89 1b 61 82 a7 a6 09 6c c6 18 58 fe 58 e3 5b e7 f1 c5 57 59 bd b3 c3 d6 0b 9b 0c 9f 5a 63 e5 ee 6d 26 2e 6d d3 76 7f 0f df a5 cb 98 c6 56 71 4c 0d b1 f5 72 04 fb 5a 21 91 8b 7a a6 b6 da 78 f2 b4 9e 1f fc f3 38 3f fc 47 1b 3f fb 41 0b fc d0 c8 ff fe 57 0b 3f fe d7 Data Ascii: %J29Q:!MuD%(.%\|Ndf~;MI%5;jR4QQYNFNVAaZ::)^\|GdRfw;vZN4nZ;N<ao9'[/q~Ox}"alXX[WYZcm&.mvVqLrZ!zx8?G?AW?
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 11 20 48 39 41 5a 56 26 19 bf 54 76 6e 0e 79 05 f9 e4 e6 e7 25 df 4b cb 48 27 3d 33 83 ec c2 5c 2a eb 85 94 88 6b 28 91 d4 51 a3 51 53 df d2 c2 ee c5 2b bc fb 95 af 73 e6 d5 a7 d8 a3 11 b2 95 0a f2 ea 1a c9 af 10 52 54 59 9b 04 ba c8 6c a0 de 64 a6 d6 d2 4a 99 c9 f8 ff 03 ba 21 34 8e 32 18 4a 02 bd dc d1 46 75 7b 3b 35 6d 0e 4a 8d 2d e4 aa 9a c8 6a aa 27 5b 29 26 a3 a1 8a 8c da 4a 8a a5 12 24 26 13 06 6f 0f f6 e1 51 da 27 22 d8 e3 8b 58 e6 16 31 cc cf a1 5d 98 a1 79 6e 1a d5 f4 38 8a b1 20 b2 a1 fe 24 cc 4b 3c 56 8a 9c 26 ca 9d ad 54 ba 2c 54 77 b4 26 61 9e 80 ba b4 dd 95 04 ba a2 cf 43 9d d7 4a 41 4b 3d 02 61 3e 82 d2 4c d2 ca 72 38 51 59 46 5a 5d 4d 12 e8 59 4a 09 85 5a 19 15 3a 25 c5 52 31 19 e5 45 08 32 33 10 64 65 92 92 95 45 7a 76 0e 59 05 05 e4 95 Data Ascii: H9AZV&Tvny%KH'=3\*k(QQS+sRTYldJ!42JFu{;5mJ-j'[)&J$&oQ'"X1]yn8 $K<V&T,Tw&aCJAK=a>Lr8QYFZ]MYJZ:%R1E23deEzvY
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 73 99 53 8f 22 2c de 1a 20 74 d1 4d f0 66 2f ab b7 a6 98 b9 10 c0 b5 a0 a0 7b 4b c9 cc 2d 27 a1 b3 46 7c 3b 4a 42 e7 2c 2c de ec 61 f5 f6 30 be 45 33 e1 53 fd ac de 9f 63 e6 c2 20 2b 67 fd 4c 2f b7 30 ba 6a 26 32 a5 61 22 a2 61 ee 66 3f 27 df 5e 64 f3 99 30 2b c7 3e 06 62 6a 7c 33 75 f8 16 1a 08 ec 2a 98 bf ef 44 10 1e 1a e4 93 6f be c5 5b 9f fa 24 5f fa fa d7 49 00 fd 53 1f 7e 89 cf 7e e3 1b 7c e2 c3 0f 19 99 19 a7 52 52 83 20 37 85 fc aa 22 32 4b 72 3e fe c7 4f 17 90 96 71 22 79 3a af 10 96 27 1d ba d4 a8 45 dd 61 c5 37 35 ca e0 c2 2c ae b1 30 e5 b2 84 ab cf 21 a7 24 9d fc 82 0c 32 33 05 a4 a7 09 c8 c9 4d a7 a0 30 9b e2 e2 42 f2 f2 72 c8 ce ce 4c 2a 2b 2b 83 f4 f4 54 d2 d2 52 c8 c8 48 4b 02 bd a6 a9 e1 97 6e 53 8e dc 6e 25 47 24 c2 1d 0a f1 e4 b3 9f e5 Data Ascii: sS", tMf/{K-'F\|;JB,,a0E3Sc +gL/0j&2a"af?'^d0+>bj\|3uDo[$_IS~~\|RR 7"2Kr>Oq"y:'Ea75,0!$23M0BrL++TRHKnSn%G$
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: f6 b4 70 65 7e 90 98 ae 8a 63 9b 9c 2d a5 9c fe 52 11 a6 e2 4a 46 7d 16 96 e6 9c d8 eb 0a f0 b7 95 71 71 a7 9d 19 5b 09 96 02 01 6b d3 4e 76 76 1c dc bf de c6 b3 8f 3a 39 7c 4e c9 d0 a5 6c e2 af 48 99 7f a4 65 e9 9e 91 83 07 9d 5c 7f 6d 80 33 6f 4e b3 7a b9 8b ad 53 9d ac 9d 72 b2 74 d9 c7 e4 b9 0e 86 b7 0d d8 03 a5 f4 6e 6a 99 b9 e4 65 e7 ce 08 db d7 43 5c 78 14 e7 ee 27 d7 39 f9 dc 30 e7 de 88 f0 f6 87 db 3c fb 72 84 bd 8b 1e a6 f7 1d c4 af f7 32 fb cc 10 9b 2f 4f 32 71 a1 93 8d 73 dd ac 9c f3 12 5e 33 32 b1 eb 60 6c cb 41 cf b4 8a b5 d3 fd c4 37 9d 2c 1f f5 73 f2 ce 24 e7 9e cc 73 f5 cd 65 ee 7c 66 83 cd e7 c2 f4 9d b1 13 7d 3c c2 ce dd 49 22 a7 bb e8 9a 6d 64 fa 9c 8d a5 db 6e ba 96 1a f0 ae 2b 89 df f2 73 78 6f 94 cd 3b a3 f4 9f 72 e3 3f d7 cb f4 73 Data Ascii: pe~c-RJF}qq[kNvv:9\|NlHe\m3oNzSrtnjeC\x'90<r2/O2qs^32`lA7,s$se\|f}<I"mdn+sxo;r?s
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 82 6d 8c 99 95 f4 c9 ea 89 da f4 2c 74 1a 88 59 95 cc 59 f5 4c a8 d5 cc f9 ac f8 03 12 fa 36 1a 58 b9 a4 e5 b9 8b 6d bc b6 d4 c6 0d 57 23 67 2d b5 ec 85 8b b9 b0 de c4 d9 58 03 bb 1d 95 c4 8d 22 46 6d 4a a2 56 0d 47 56 03 41 ad 99 a0 d1 81 5b 5d 87 bb 29 15 5f 75 0a 9d c5 a5 34 17 e5 33 3e 62 e2 ec d1 28 4e 4f 1d 86 56 39 d3 23 b3 1c cf c4 39 13 d4 31 ab c9 27 22 ae 4b 02 38 e1 aa af 4f 69 39 d8 6f 67 24 62 a4 43 56 83 bf b2 86 39 bd 81 21 a3 86 2e 91 1c 7f b5 86 be aa 5a 26 15 c5 2c 5a 72 89 a9 d3 88 2b 8b 98 75 e7 73 3e aa e0 ca 82 85 a8 bf 05 9f dd ce a0 6b 98 49 57 98 45 cf 30 f3 4e 15 c1 86 5c 2e 74 b4 b0 2d 6b 24 58 54 81 bd a8 98 89 5e 33 23 93 06 f4 4d 85 44 a3 2a 8e d6 9a 09 4b 05 f8 4b 73 59 9b f4 13 3f 69 e2 e6 9b 0e 6e bc 63 65 eb 91 94 c8 ed Data Ascii: m,tYYL6XmW#g-X"FmJVGVA[])_u43>b(NOV9#91'"K8Oi9og$bCV9!.Z&,Zr+us>kIWE0N\.t-k$XT^3#MD*KKsY?ince
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 3a a3 a6 cf 27 c6 a8 aa c6 a6 54 32 68 77 13 98 d0 b2 fd a4 8b e8 6d 2b ea b6 2a aa 4a f3 51 35 16 31 3d a3 67 ed be 85 e0 5c 31 e3 bd 27 38 15 ca e7 66 b4 9a ab 73 8d ac 45 9a e8 f3 d7 b2 6c 74 b0 a4 36 32 ab d2 30 6d 6d 61 26 d4 c5 44 d8 49 d8 65 64 c3 e7 62 bb 59 c3 ae ad 85 19 73 13 1d e2 42 4c 95 c5 f4 ab 94 44 4c 26 46 d5 4d 9c 1f f5 70 d8 65 60 d3 d8 c4 9a bb 9e 83 c3 1a ce bd 5a ce fe 0b 32 d6 cf fb 99 9f b4 70 10 50 71 d5 5d 4f bc 21 83 80 42 c8 dc 50 3f 21 87 03 53 41 3e dd cd 02 ec f5 02 8c 95 02 5a 0a d2 31 e5 16 a2 ce ce a1 45 5c 42 74 d2 45 d4 63 a4 4b 56 83 ad aa 98 31 b3 9a f9 4e 0d 63 7a 31 73 36 35 3b be 4e 76 dc 01 06 94 42 66 02 f5 1c 9d 36 70 f2 a2 8e 73 e7 f5 3c 7b a0 e3 e5 65 39 17 b7 72 b9 78 5d c8 f1 79 21 87 53 25 5c 0c 36 70 7a Data Ascii: :'T2hwm+*JQ51=g\1'8fsElt620mma&DIedbYsBLDL&FMpe`Z2pPq]O!BP?!SA>Z1E\BtEcKV1Ncz1s65;NvBf6ps<{e9rx]y!S%\6pz
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 10 b7 d5 d3 d8 d5 88 a6 5b 85 c6 a7 c4 31 a9 a7 23 6e c3 3e db 8e 67 b3 97 f1 e3 09 86 e7 dc 74 3a eb e9 30 97 31 e5 33 13 e9 35 d0 65 aa a6 b6 44 40 7e 8a 80 0c 41 3a b9 a9 25 48 6a 94 84 47 86 08 f4 1b 89 0f cb d9 19 92 13 d7 0b 79 6e 36 ca b3 bb 5b cc 8f f6 11 8b f7 30 34 6a c7 62 6b c0 6d 94 71 7e 7c 82 3b 73 71 e2 7d ad 0c f5 cb 08 0e 2b e8 75 2b 39 bd b9 c0 ee 4e 0c cf a0 8e e0 94 0d 8f 45 8e b5 5c c8 dc c4 18 53 73 a3 4c c7 c2 cc f6 f4 33 e3 ed 25 b6 30 c1 cc a5 18 f1 6b 21 8e af 6d 32 1d eb 26 3e e5 60 73 d9 ca ea aa 96 fd 83 76 b6 97 5d f4 d8 24 e8 ab 84 74 a8 1a 18 f2 a8 98 99 b3 12 59 b6 e2 ee 69 a4 a5 a9 14 63 65 29 4e 89 96 1e 4f 0b fb b7 27 19 5c b4 52 29 ca a2 b6 b0 00 45 79 01 1d 2d 15 4c 6f 34 13 59 ac 63 61 be 8c bd d5 7c 8e 77 0b d9 3f Data Ascii: [1#n>gt:0135eD@~A:%HjGyn6[04jbkmq~\|;sq}+u+9NE\SsL3%0k!m2&>`sv]$tYice)NO'\R)Ey-Lo4Yca\|w?
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 46 84 fd 67 a3 4c 5e 9e 60 eb 4a 2d bf f9 ed 12 7e fc b7 39 fc f0 6f 52 f9 f1 3f 16 f3 6f ff 5c c6 f7 ff 5a c0 6f fd 76 11 9f 79 5d c0 9f 7d 23 9f 1f ff 6e 3e 7c 2f 01 72 01 3f ff 9e 80 8f 7e 37 0b fe a0 90 9f fd 7e 11 ff f6 a7 a9 fc f4 cf 53 f8 8d cf 96 b3 32 23 c7 d0 6b 62 e1 a5 75 1e 7d 78 91 d9 4b 13 cc 5e 5e 44 e5 d2 d1 a8 13 b2 b8 d6 c7 9d 17 16 b9 ff ea 02 67 ee 0d e3 9f d2 60 e8 6b 24 7c d8 c9 ce 27 02 2c be e1 c4 7b 55 8b 6a 5d 42 f6 90 8c 8c 2e 31 42 9f 02 d3 80 05 85 59 4a a9 b0 00 61 63 15 06 9b 1e 9f df 81 d5 d5 42 5b c0 8a 7b c6 43 5b b4 1d 47 cc 86 67 a9 13 df 4a 27 d3 27 c7 98 3c 9c a0 77 3d c8 c0 d6 28 b1 a3 28 e3 71 1f fe f6 06 02 ad 35 9c 1c 35 70 30 aa 61 d6 55 45 77 53 36 ca fc 14 0a 04 02 ca b2 ca e8 6a eb 65 7a 24 c4 d8 64 3b f1 35 Data Ascii: FgL^`J-~9oR?o\Zovy]}#n>\|/r?~7~S2#kbu}xK^^Dg`k$\|',{Uj]B.1BYJacB[{C[GgJ''<w=((q55p0aUEwS6jez$d;5
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: df 8b 26 d0 4d 83 df 4d a1 4e 85 a0 ba 9c d4 d2 22 72 6b 2a 29 10 d7 92 27 a9 27 b7 49 4a a9 a6 99 b2 e6 e6 64 ea 50 a2 90 51 a6 90 53 d5 ac a6 5a f3 b1 12 30 4f c6 ec 3a 65 32 5a ff 55 57 9e e8 c8 13 91 ba 34 71 a8 31 ea a8 33 24 16 ed 3a 24 36 23 12 87 99 c6 b6 56 1a da 3e 1e be a9 9d 96 64 bc fe ab de 3c 01 f2 d6 be 2e da 87 7b f0 c5 22 49 68 7b 63 51 fc b3 71 bc f1 59 dc f1 38 de b9 39 ba 97 16 19 5c 9e 65 60 2d 46 60 2b 8a 73 31 88 3c 60 a3 d4 ae 20 5d 59 8b a0 ba 84 d4 9c 1a 72 45 02 56 af 1b 79 f9 eb 0b 78 66 5a c8 10 15 52 d5 dc 48 ad a1 8e 0a b5 84 3a 4b 1d e2 56 19 a5 6a 1d 15 86 46 86 0e 4d 5c fd 7c 84 83 d7 a2 6c 3c bf cf d2 91 9c ef 7c 59 c6 8f ff 9b 98 9f fd f7 72 7e f4 97 25 fc e8 2f 72 e1 7f e6 f1 f9 6f 14 f3 da 4b 02 7e ff 83 4a 7e f8 6d Data Ascii: &MMN"rk*)''IJdPQSZ0O:e2ZUW4q13$:$6#V>d<.{"Ih{cQqY89\e`-F`+s1<` ]YrEVyxfZRH:KVjFM\\|l<\|Yr~%/roK~J~m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49800	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:05 UTC	2650	OUT	GET /images/products/prod9/6-bottles.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:05 UTC	896	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:05 GMT Content-Type: image/png Content-Length: 668416 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-a3300" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4968 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DmeGKWEjPG4egY16uJv%2BZxmo5L5iYVat1zINVH3lQxTGogONwRkuZrDJUn8PFaaNpUwK3hL2TzxEjkOC0gKUQeBz%2B8W83CJeY2PEsxH9ox2BGLLBGHlzfwHDGS7XUixAbZc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2713698e159f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1675&min_rtt=1543&rtt_var=673&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=3228&delivery_rate=1892417&cwnd=175&unsent_bytes=0&cid=892979a8325c0c36&ts=151&x=0"
2025-01-10 16:48:05 UTC	473	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 36 00 00 02 58 08 06 00 00 00 99 fd 66 5c 00 00 20 00 49 44 41 54 78 9c ec bd 69 8c 6d cb 75 1e b6 ea 9c d3 b7 ef f0 e6 91 7c 8f a2 f4 c4 41 a2 44 53 a2 48 53 b4 4d 28 b2 14 0d 16 12 33 96 22 58 3f 2c c1 48 e2 00 92 20 d8 82 1d e4 8f a1 48 48 fe 44 70 10 18 08 2c c7 88 7f 44 b6 1c 01 09 62 cb 40 10 01 31 ac c1 83 06 4a a6 68 92 96 48 8a a2 48 4a a4 de 7b 7c f3 9d bb 7b 57 b0 fa ed 75 f9 dd ef 7e ab f6 3e dd b7 bb 4f f7 ad 0f 38 dd e7 ec 5d 73 ad 5d b5 d6 b7 57 55 15 3b 24 6a ad 87 4d a2 a3 a3 a3 e3 48 f0 da 6b af 6d 54 c3 96 72 e7 90 eb 63 a8 ba 7e b7 a0 d2 8f 6b 78 6f ee 77 ac 07 a7 ad 7e 73 bd d5 b5 ac 1d 70 7e c9 da 2e bb 47 f7 97 66 76 d1 cc 2e 8c ff 39 dc 96 99 dd 3f de df 2e a5 5c 32 33 ff dc Data Ascii: PNGIHDR6Xf\ IDATximu\|ADSHSM(3"X?,H HHDp,Db@1JhHHJ{\|{Wu~>O8]s]WU;$jMHkmTrc~kxow~sp~.Gfv.9?.\23
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 7c fd 7b dc f3 df 1e 2f e4 cf ff fb 6f 94 4b af 87 ff f7 b0 7e dd 7f 63 9c 08 87 f2 ef 61 22 bc e7 7f 94 e3 c3 1c 3c f9 e4 93 27 9a 7f 47 47 47 47 c7 e9 c5 71 ce 61 4d 45 ad a3 a3 a3 a3 a3 e3 98 71 6e 24 12 6c 24 04 1e 31 b3 47 c7 ff 8f c1 bc e5 44 c0 83 66 f6 84 99 3d 34 de 7f 00 8b 5a 4a b9 38 86 b9 7f fc 5c 1c 09 0b a3 70 87 ae a1 a7 91 11 3e 87 4d b7 05 24 a9 0e 5a 66 37 d4 27 70 79 fc 5c 59 2e 97 af 2c 16 0b 67 0c af 51 d9 fc da b3 a5 94 17 57 ab d5 8b a5 94 d7 80 a8 71 b2 c4 af 3d bf 58 2c 3c cc 65 88 77 d5 89 19 55 7e bf c6 d7 fb cb 94 8e 8e 8e 8e 8e 8e 0e 85 4e 6c 74 74 74 74 74 1c 25 fc 75 ef 57 98 d9 e3 63 1e db 66 f6 26 33 fb aa f1 da be 75 5c 4a 71 d2 e2 0d 23 51 f1 c0 78 ad 8c 44 84 b4 ee 33 a3 bf 75 bd 45 14 1c 96 8c 98 6b 84 b7 8c f3 39 65 Data Ascii: \|{/oK~ca"<'GGGGqaMEqn$l$1GDf=4ZJ8\p>M$Zf7'py\Y.,gQWq=X,<ewU~Nlttttt%uWcf&3u\Jq#QxD3uEk9e
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 89 e2 65 7b e9 a5 97 6e 95 19 37 f2 9c eb 15 70 37 c0 06 bd 22 54 5a 6d 63 c2 3b 01 e3 f1 72 0f f4 2a 68 a5 c7 7b 94 28 6f 0a b5 54 44 dd cb ea d7 22 38 30 3d ee 13 26 4e 42 26 b8 2c 28 ab b1 2c 44 d5 33 64 c9 c3 04 d9 10 c4 83 7f aa d8 e8 d5 7f 3b e1 66 40 a6 61 3c 24 7b a2 6c af bd f6 da fe f3 10 84 48 81 bd 3a 7c b9 4a 78 8a 84 bc 8f 65 71 56 e5 e9 e5 72 f9 74 ad f5 3b 47 ef 0e bf fe fc 30 0c be af c7 bf 18 86 e1 df ef ed ed fd 76 ad f5 13 99 ac 74 74 74 74 74 74 74 dc 1d 1c 5a 43 ec 93 75 47 47 c7 a6 c2 0d 96 4d 82 32 ca 67 78 20 3c 63 66 df 36 7e de 33 9e 42 22 8d c1 20 02 82 b4 70 92 00 c9 8c 30 22 c3 d0 8b 8f 1b 6f 6a 63 47 05 26 3b a6 96 34 ac 03 37 0e bd cf 9e 7b ee b9 db f6 57 38 6e 64 1e 12 06 44 04 7b 43 18 78 51 e0 75 24 2b d4 a6 a6 4c 66 c4 Data Ascii: e{n7p7"TZmc;r*h{(oTD"80=&NB&,(,D3d;f@a<${lH:\|JxeqVrt;G0vtttttttZCuGGM2gx <cf6~3B" p0"ojcG&;47{W8ndD{CxQu$+Lf
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 1c 40 4f 8c cc eb 01 f7 5b 39 88 b7 88 aa 77 b6 34 86 97 98 b4 3c 2c b8 4e aa 5c 8a 14 c9 ea 8b c7 01 e3 3d 26 21 b0 5d 70 a3 4e 3e 62 37 7e 17 71 c2 89 c1 33 c5 ed 83 f1 8d 08 98 02 47 ce c6 be 1c b8 31 2b 9e a8 12 a4 8c 5f 3b 7f fe fc bb 96 cb e5 6f ec ee ee fe d0 de de de 3f 3a e9 e5 59 1d 1d 1d 1d 1d 1d 9b 8e 4e 6c 74 74 74 74 1c 1f fe 97 16 a9 81 06 5a 11 fb 66 9c 75 6c 9a f1 96 91 00 48 44 e0 de 0f 53 1e 12 2d 62 44 ed 67 51 92 13 51 32 a2 05 97 52 30 b9 a1 bc 25 32 a2 c2 84 e7 85 ba 6e e0 55 c1 cb 62 f8 bf 22 77 d8 23 03 d3 34 f2 0c 31 92 8f d8 37 26 88 00 f4 d2 c8 da 3c 88 07 f6 e8 e0 fc b8 9f 99 b8 31 b1 81 a9 6a 2f ae 1f 9e d6 82 79 06 11 e3 c4 07 ee e1 e1 1e 5a 8b c5 e2 67 af 5d bb f6 ea 30 0c bf d0 3d 37 3a 3a 3a 3a 3a 3a 72 74 62 a3 a3 a3 e3 Data Ascii: @O[9w4<,N\=&!]pN>b7~q3G1+_;o?:YNlttttZfulHDS-bDgQQ2R0%2nUb"w#417&<1j/yZg]0=7::::::rtb
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 74 74 74 74 74 74 dc 89 3e 43 76 74 74 74 1c 3d b6 7b 1b b7 e1 27 a2 9c 24 a1 a3 88 09 7e db 9f bd 99 6f 21 f3 ae 50 f9 67 e5 31 4a 87 bd 02 94 e1 cc 9b 7f aa 3a a8 7b 9c 7f cb 5b c3 12 8f 09 4e 2f ab 6f d6 26 2d 62 88 eb 18 de 14 2d af 18 ae 77 a4 85 a7 af 20 e9 82 1e 1a 91 4f 10 1d 5c cf cc 33 26 f3 7e 99 aa ab 42 e6 f5 d1 d1 d1 d1 d1 d1 d1 f1 65 74 8f 8d 8e 8e 8e 8e a3 c7 da 1e 1b ea 0d f1 3a f1 f1 e8 c9 4d 87 97 71 13 8e 7a 65 72 03 db 4f 11 0a 36 1a bd 7c 3c 6a 66 ec 2a 28 32 c5 12 c3 39 5b 4e 92 fd 9e 2a 4b 10 02 6a c9 06 d7 37 23 78 d4 fd a9 eb 46 5e 1b 5c 3e f4 52 c8 08 a6 f8 1d a7 e9 6c 6f 6f a7 4b 78 32 0f 12 b5 77 06 97 85 cb c9 32 92 e5 85 69 b4 ee 73 9d 78 59 0c e6 d7 bd 35 3a 3a 3a 3a 3a 3a 72 74 62 a3 a3 a3 a3 e3 e8 71 6e 6e 0e 77 eb ad 6c Data Ascii: tttttt>Cvttt={'$~o!Pg1J:{[N/o&-b-w O\3&~Bet:MqzerO6\|<jf(29[NKj7#xF^\>RlooKx2w2isxY5::::::rtbqnnwl
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 2d 4d 52 04 5f 94 29 3c 9b d4 27 c2 05 d1 e3 64 aa 22 48 30 6e 85 a5 37 d8 be 48 f6 f0 26 ab ea 1e 93 43 9c 27 a7 91 8d 8b a2 9f dd 6b e4 3e ff 88 79 e3 19 ac 07 cb 9d 7b 49 18 91 54 5b 5b 5b 1e e8 25 f7 c6 1b cb f8 fc f6 f6 f6 e7 17 8b c5 73 63 9f dd 5c ad 56 9f 29 a5 fc 41 29 e5 a6 13 20 8b c5 e2 33 b5 d6 cf b9 a7 8a 7b 9a d4 5a 6f b6 88 c0 8e 8e 8e 8e 8e 93 41 27 36 3a 3a 36 0f ab d1 5b c2 49 88 af 37 b3 47 4a 29 4e 5e bc d3 cc de 58 5e d7 d0 be d2 cc de 3a ba 1a 9f c3 a5 1f 99 32 3e f5 f6 cd 04 29 10 2e b0 68 38 04 c9 80 a7 06 60 78 bc ae 88 8c f8 a8 30 0c 8e 8f 46 03 1b 03 6c 34 60 9d 58 21 56 46 1d 1b 73 58 7f 4c 0b cb ad 0c 34 95 be bb 2c a3 3b 74 c7 ed 58 87 54 38 2a a0 3c b5 88 37 65 cc f3 35 b5 19 27 82 e3 b5 64 7f ee f7 8c 98 53 f1 b1 ac 5c 2e Data Ascii: -MR_)<'d"H0n7H&C'k>y{IT[[[%sc\V)A) 3{ZoA'6::6[I7GJ)N^X^:2>).h8`x0Fl4`X!VFsXL4,;tXT8*<7e5'dS\.
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 4d 26 94 f3 20 1f 82 c0 88 63 e4 e2 7f 28 70 4f 3c f1 84 9d 3f 7f fe 8e 37 8f 01 7e 6b 18 ca 57 90 16 e8 52 ab ca a1 10 0a e4 cb 2f bf bc 5f 96 20 36 a6 f6 07 b8 1b a8 e2 4d 73 66 50 62 dd f9 e4 01 a5 04 c7 35 0c 9b 29 db 98 77 f6 26 96 8d 1c 65 28 31 c1 c1 e5 3f a9 d3 3e 4e 03 42 f9 3f 29 64 c6 15 2e e1 68 11 4e ea 5e 8b cc 9a 7a 8b 9e 2d b7 62 83 93 cb a7 08 03 75 9d c9 0b ae 1f c6 51 86 33 bf 69 57 c6 23 b7 85 35 0c f1 cc 80 57 f1 b9 ae 85 f6 33 51 cb 2d 2c f1 cc c8 36 f0 e4 3e 65 03 7a a0 4d 8c b1 4e bc 59 28 42 b5 89 42 6b 4c 53 75 c8 d2 52 86 3d b7 b1 22 07 e6 e6 cd 61 55 3c 94 43 5e ee 83 df 39 3d 94 71 1c c7 99 58 8a df b8 37 86 91 ac b1 9c e1 92 a1 2a f6 64 09 c2 22 96 ad 14 d8 8c 35 f2 f1 7c 7d 0e 8f 74 3c 9c 13 17 7c bc b6 ff f6 7d 51 5e 7d f5 Data Ascii: M& c(pO<?7~kWR/_ 6MsfPb5)w&e(1?>NB?)d.hN^z-buQ3iW#5W3Q-,6>ezMNY(BBkLSuR="aU<C^9=qX7*d"5\|}t<\|}Q^}
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: e2 66 a0 d8 4e 51 3e 5c 3a 50 68 73 4a 36 be 2b ed db 90 2d 59 ca 9e 5f 6e 4f 2e 4b d6 af 6c 8c 2b 39 c9 88 26 d5 07 bc 6f 85 2a 2f e7 c5 e9 63 9f 2b 39 53 fb c0 a8 7e cc 9e 2d 23 19 6d 91 29 2d 4c 11 5b 4c 6e a8 76 c7 93 c5 98 24 e1 65 56 18 86 89 b9 3a 2e 43 c1 17 1c 05 f6 ef 88 39 27 f4 09 d7 1b 7c b9 aa eb 0d 2f bc f0 c2 fe 5e 1d ae 7b f8 3d 27 41 fc a5 89 7b 92 38 c9 81 f5 5a ad 56 e7 b6 b6 b6 be 7f 7b 7b fb fb 77 77 77 3f 72 e3 c6 8d ff 69 18 86 7f d4 6c a8 8e 8e 8e 8e 33 82 4e 6c 74 74 98 fd b0 99 fd 0f a3 b7 c6 6d 70 45 c3 09 8d cb 97 2f df 72 0f 8d 37 2c 53 08 85 26 db 10 b4 e3 ce 65 38 f8 9f 15 77 4b 94 fe 6c c3 40 45 36 28 83 34 cb 9b 15 d5 a9 78 ca 3d 9f 8d 97 b9 b8 1b 9b 8d 9e 06 99 53 c6 ec 49 94 81 65 68 ea 08 54 0c 9b 19 6b ca f8 56 69 a8 Data Ascii: fNQ>\:PhsJ6+-Y_nO.Kl+9&o*/c+9S~-#m)-L[Lnv$eV:.C9'\|/^{='A{8ZV{{www?ril3NlttmpE/r7,S&e8wKl@E6(4x=SIehTkVi
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 4a f9 91 c6 bd db 14 82 c3 96 b3 bf 11 b9 1d 53 0a 9a d1 32 99 00 2a 95 a8 14 66 6b 9f e7 2a 7f 98 a7 35 14 f4 56 da 5c 1e be 77 10 8f 8d bb 45 36 9d 16 f9 3b a9 f1 20 93 15 c4 1c e3 b2 4c 9c 00 a1 d2 98 32 58 54 7c 94 b5 58 5a 91 85 61 a3 86 cb 39 d5 06 7c 0a 8a 2a 1b 1b e4 18 3e 5b 26 a0 f2 6e 19 a9 5c 8e b9 9e 03 4c 3c 32 f8 6d ba c1 35 cc db c4 f3 c8 e5 9a 22 23 78 c9 01 6f 44 aa ca 6d 34 ee 59 c3 30 57 f7 79 69 0a b7 93 2a 3b d7 51 91 2d 96 f4 5b 56 c6 ac 6f 4a 63 a9 4e 56 9e 56 3b 99 90 59 f6 06 a9 44 a4 65 e3 6c 85 e5 48 b1 5f 05 cb 7a 56 07 23 f9 e0 7c 94 27 90 2a 23 9e 5e a3 c8 48 cc 93 c7 1e fe ce fd b2 58 2c de 52 4a 79 cf de de de 6f 77 1d a5 a3 a3 e3 2c a1 13 1b 1d f7 22 de 96 d5 f9 6e 19 58 68 d0 6e ea 66 5d ee 9a 7a 12 06 a5 32 b2 94 21 c2 Data Ascii: JS2fk5V\wE6; L2XT\|XZa9\|>[&n\L<2m5"#xoDm4Y0Wyi;Q-[VoJcNVV;YDelH_zV#\|'*#^HX,RJyow,"nXhnf]z2!
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 66 e5 51 cf 6a d6 5e 2d 82 84 cb cb e3 21 ef f7 d0 da 2b a3 90 57 85 32 1c 95 41 dd ea 3f d5 c7 58 56 55 a7 39 84 c2 dc b1 49 19 e8 53 06 78 26 1f 59 ba 0a 59 dc a9 71 b9 0a ef 16 83 76 61 12 4f a5 9d 3d 17 41 3e a8 71 8a cb c0 f7 98 b4 e2 3c 90 e0 68 91 14 73 48 bd 0c 53 84 49 27 36 3a 3a 3a ce 12 3a b1 d1 71 af e1 dc 5c 62 e3 b0 86 e1 a6 4e e8 ae 48 f9 89 28 71 84 dd 71 22 33 b8 59 89 cb 94 e4 96 62 a6 a0 f2 c8 14 d0 16 b9 a1 a0 e2 64 8a f1 dc f4 8c 94 f4 83 82 15 fd 4d c6 26 94 af 45 66 b0 6c 5a c3 08 42 54 71 12 43 96 b7 ba 9f a5 9f 19 ac aa 3e aa dc 99 91 c5 f1 32 52 64 ee 26 a4 ea 99 e0 e7 5f 91 13 1c 36 cb 87 fb 48 ed dd 80 69 f0 a9 1a f8 f6 5c c5 c3 8f 3a 9d a6 d5 0e 59 fb aa e7 b2 65 1c cf 91 81 93 18 2f 6d e2 99 51 50 75 cf 64 37 23 20 f8 a3 ee Data Ascii: fQj^-!+W2A?XVU9ISx&YYqvaO=A>q<hsHSI'6::::q\bNH(qq"3YbdM&EflZBTqC>2Rd&_6Hi\:Ye/mQPud7#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49802	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:05 UTC	2650	OUT	GET /images/products/prod8/3-bottles.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:05 UTC	899	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:05 GMT Content-Type: image/png Content-Length: 503362 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-7ae42" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4968 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ap92FfwTjvdbX2ga7NiU2fvqjzdKszjSBYr52q7F2%2FGtYUkf%2Fmt7uRXnSY66EzizXzZ%2BcLW6fvlbfo8Mz1PJ3kfBczeUZ7nS5NS13qAkIKt1VpHLi9ss9ryUejSiIm4YBpA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2714985541d5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4097&min_rtt=2242&rtt_var=2165&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2838&recv_bytes=3228&delivery_rate=1302408&cwnd=226&unsent_bytes=0&cid=1b43b8a0179057f7&ts=136&x=0"
2025-01-10 16:48:05 UTC	470	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ef 00 00 02 58 08 06 00 00 00 d2 4c 08 9c 00 00 20 00 49 44 41 54 78 9c ec bd 6b ac 6d d9 55 26 36 e6 3e 8f 5b f7 d6 bb ca 2e 53 c6 4f c0 a6 0c c6 04 e3 76 02 4a bb d3 44 01 f1 48 93 d0 9d 44 6a d2 69 91 3f 51 02 48 ad d8 34 52 f3 a3 13 29 22 2d 11 d4 52 94 28 f9 15 75 24 3a 69 d2 52 92 ee 28 12 69 4b 2d 12 62 12 1a 30 a1 31 b8 8c ed b2 5d 36 55 65 d7 c3 f5 b8 75 9f 67 af 15 8d ed 35 ae bf fb d5 37 e6 9c fb 3c f6 de e7 de 35 a4 7d ce 7a cc f7 63 8c 6f 8c 39 e6 5c 36 d3 4c 33 cd 34 d3 4c 33 cd 34 d3 4c 33 9d 0f 2a 51 ca 71 1c e7 2e 9b 69 a6 06 5d be 7c 79 67 9b 28 e6 70 29 a5 19 f6 24 79 70 fa f1 0c df d5 ae b1 8c 9c de ba f7 59 bd b3 b6 40 3e a7 da 69 1c c7 0b 66 f6 60 29 e5 61 33 bb df cc fc ff c2 Data Ascii: PNGIHDRXL IDATxkmU&6>[.SOvJDHDji?QH4R)"-R(u$:iR(iK-b01]6Ueug57<5}zco9\6L34L34L3*Qq.i]\|yg(p)$ypY@>if`)a3
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 5a 9e 67 5c 2f 16 8b 5b 61 3c 4f 0f e7 cf fc da ff 7b 1a 31 c6 3d 7f 8f eb ef a2 dc f1 3c ea 16 71 9c 22 8c df 7b 18 0f eb 3f bf f7 70 38 77 fc 99 87 f7 ff 5e 96 55 23 df bc 79 a6 bc 63 1d 7a fb db df be 13 e5 98 69 a6 5d a5 fd b9 67 66 9a 69 a6 3b 80 1c 08 7f 8b 99 3d 00 20 f3 cd 66 f6 f8 f4 73 a0 7d 54 4a 59 4c d7 6f 32 b3 47 cc ec b1 29 ee 91 63 a1 52 ca c5 29 8d 07 14 50 5d 17 dc a8 f0 a7 91 06 bf 57 0a 14 93 52 8c 38 8f 71 1c 43 49 d8 5b a7 8c 6c fc 41 e5 89 15 b7 8c 1c 4c 62 7d b8 bc 8b c5 e2 ea c1 c1 c1 65 ff 39 26 ff 46 d0 e2 89 be 66 66 2f 1c 1c 1c 3c 3b 8e e3 0b 8b c5 e2 9a cb b6 52 8a f7 e9 f3 7b 7b 7b 7f 36 0c c3 33 a5 94 cb a5 14 47 aa fe fe ab 66 f6 12 b7 6f e4 9b dd cf 34 d3 4c 33 ed 02 cd e0 7d a6 99 66 da 35 72 00 fd d0 64 cd 75 80 fd 1e Data Ascii: Zg\/[a<O{1=<q"{?p8w^U#yczi]gfi;= fs}TJYLo2G)cR)P]WR8qCI[lALb}e9&Fff/<;R{{{63Gfo4L3}f5rdu
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 77 d0 39 ef be 69 f4 5f 74 77 17 33 fb 97 a7 4d a2 f7 b3 0f b9 01 20 0b ab 77 80 f4 f8 1f d7 06 be c7 0e 54 1e 7e f8 e1 5b a0 3c 03 18 58 66 05 cc 19 f0 66 f1 b3 7b cf df ad eb cf 3d f7 dc 2d 20 86 8a c1 26 5c 61 b0 6c 0c b6 78 a3 6b 8f c5 9b c1 31 5b cc 6b 56 75 54 bc 38 0e 5f ab 30 65 3a 67 5c b9 34 19 00 6c 3c 09 06 af 55 7f 32 98 36 31 2e 78 05 81 01 7e 9c 74 13 d7 99 45 9e af 23 1d 07 d4 01 a6 fd e7 e3 37 53 3c 71 3c c7 79 e9 11 97 95 30 27 3f 0b de 15 5a a3 73 d9 51 01 88 15 a3 00 f7 51 1e 03 b7 1c 6c 9f a9 0d 9e 1a 86 e1 f7 86 61 f8 67 c3 30 fc d6 62 b1 f8 bd 71 1c 87 98 ab a8 ac cc e7 bc cf 34 d3 9d 45 33 78 9f 69 a6 35 e8 1c 83 f7 0b 13 48 ff 21 33 fb 57 cc ec c3 b1 f2 c6 d6 cc 10 fe 61 a5 0e 70 ce 3f 9b 5c 0a 1c e8 c4 2f c0 07 5b 56 b7 45 5e 9e Data Ascii: w9i_tw3M wT~[<Xff{=- &\alxk1[kVuT8_0e:g\4l<U261.x~tE#7S<q<y0'?ZsQQlag0bq4E3xi5H!3Wap?\/[VE^
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 70 7f e3 e0 e0 e0 9f 2e 97 cb db dc ec 66 9a 69 a6 dd a6 19 bc cf 34 d3 f9 24 3f 45 e6 bf 55 25 57 e0 65 5d 17 99 3b 85 76 c5 d7 3d 53 78 5a d6 72 a4 0c 08 d7 c2 29 90 c7 e9 67 c0 d4 08 60 33 f5 ac 1e d4 5c 66 18 90 aa f6 60 65 51 8d ed 1e 4b 3a c6 e1 af 9f aa af fe c6 fe 10 23 b7 19 55 47 ae 0f af 9c a0 d2 1b 7e ee 46 fd a4 94 0f 4e 27 6b 87 4c d9 e3 f4 0a 7c fc 0b 8f a8 3c 38 38 f8 8b fb fb fb ff fb 6c 81 9f 69 a6 f3 43 33 78 9f 69 a6 f3 47 f7 9a d9 af f7 94 9a 85 fb dd 44 5e 6f 5f 75 d8 36 28 51 00 4b 59 93 33 80 c8 d7 35 cb 72 e6 2b 5f b3 42 f7 ba c4 a0 45 b7 a6 90 28 62 8b 32 a7 d7 8a 9b 81 76 55 b7 5a 1b 66 f5 54 f9 f5 b6 0b bb bc b0 1b 52 46 e1 cb 9e b9 e4 64 f5 89 b0 4a 19 cf 8e 45 55 e3 02 bf 68 7c e1 c2 85 1f d9 db db fb eb 78 3c ec 36 7f 33 cd Data Ascii: p.fi4$?EU%We];v=SxZr)g`3\f`eQK:#UG~FN'kL\|<88liC3xiGD^o_u6(QKY35r+_BE(b2vUZfTRFdJEUh\|x<63
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 8f 7b 3e 25 85 c1 39 d6 b1 56 97 9a db 0c d7 45 29 27 6a 85 a2 c7 75 07 cf 7a cf be 5e 9a b5 a5 4d 6e 31 ea b8 49 24 76 f1 e1 7a 63 dd 5b 20 de 68 be 63 7e d9 d1 92 4a 69 ba db 15 ff 99 66 da 75 9a c1 fb 4c 33 9d 2f da f8 31 91 b4 ac 7e 2e a8 d0 47 70 b6 41 ec b2 c0 c0 37 73 2b 51 2e 35 dc 1f 0a 50 f7 80 79 4b 2c c6 0c c8 55 3e b5 f1 c1 00 3d b3 f0 2b 00 aa 5c 83 5a be da 35 c5 43 29 13 19 c0 55 00 5f d5 b9 c7 bd 86 89 15 17 8c ab 36 af 72 ff 45 59 94 8b 8e aa 57 b6 52 c2 fd 53 ab 33 ee 17 98 69 a6 99 76 97 66 f0 3e d3 4c 77 28 65 4b e5 c7 a1 00 ef e7 c1 f2 1e ee 0e db 3c e3 5d 81 68 b6 44 67 20 bd 88 23 23 b3 f4 f9 5a 01 7e 05 94 5b 69 aa b0 b5 f7 5c ce cc c2 9e 59 c3 33 05 07 f3 40 c0 ab e2 62 da ea f4 16 23 cb 72 0d 0c b3 42 e0 e9 85 1b 16 82 5d a5 38 Data Ascii: {>%9VE)'juz^Mn1I$vzc[ hc~JifuL3/1~.GpA7s+Q.5PyK,U>=+\Z5C)U_6rEYWRS3ivf>Lw(eK<]hDg ##Z~[i\Y3@b#rB]8
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 34 70 06 30 87 87 87 47 6e d5 9f 00 d0 f8 c2 0b 2f 3c b7 5c 2e bf bc 58 2c 9c e1 2d 86 61 b8 76 74 74 f4 85 e5 72 f9 94 5b 4c 4a 29 cb 1b 37 6e 7c e9 e6 cd 9b 5f ba 70 e1 82 af 20 1c bd e3 1d ef b8 da d7 9b df a4 1e 46 7e 27 93 8f 1b b7 86 84 2b c2 36 a8 57 c9 54 d6 6a 45 2d b0 c8 9f f6 57 e1 d6 11 9a 85 3e e5 5f 8b 5b b3 6a 63 1a 5c 8e 42 be fd aa bc ca 75 26 03 b6 08 aa 91 54 db b0 7b 8c aa 4b 21 17 16 23 3e 94 81 69 b4 ea f9 18 dc df df bf 2d dd 00 e8 d9 3c 45 40 9f f1 31 b4 22 aa 7a a8 af b0 aa 3e 18 69 65 63 32 fa bc 81 ae 5e bd 7a 69 b1 58 38 80 be b8 b7 b7 b7 92 6f 13 68 73 80 fe ee 52 ca 3b 26 d0 ed f4 96 71 1c fd fe 96 7c 2b a5 48 f9 a6 da 5f 1d b1 89 75 ae 81 71 ee 9f 91 56 3a 4c c8 b7 96 02 c4 e3 b4 67 4e 9b 18 4b 4c 35 f9 a6 ca 93 d5 77 5d f9 Data Ascii: 4p0Gn/<\.X,-avttr[LJ)7n\|_p F~'+6WTjE-W>_[jc\Bu&T{K!#>i-<E@1"z>iec2^ziX8ohsR;&q\|+H_uqV:LgNKL5w]
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 61 77 eb b1 69 a3 2a 28 11 37 4a 29 97 f7 f7 f7 9f 32 b3 a7 86 61 78 7e 6f 6f ef f7 cd ec f9 52 ca a7 cc ec 6b d3 e1 15 6f 18 eb 77 02 dd a9 e0 fd ed 66 f6 41 33 7b af 99 7d af bb b5 94 52 be cb 97 78 b8 03 47 b0 64 07 53 ca 34 49 8e 57 a6 dd cc ae 35 0e f0 b9 eb 18 5c 08 e2 31 1d d4 66 d1 ba 62 13 00 8f 1d d4 91 9e fb ef 46 1e 67 39 00 33 26 53 63 3e 6a d9 b2 16 07 19 0b c7 65 e6 af d2 ac 5d ab 74 33 25 01 eb cc a0 05 05 ba 09 06 57 c4 47 60 30 bd ec 3a de a1 b5 0d 77 ef a3 70 72 26 65 00 f6 cd ea 67 39 67 75 3a 2d 52 73 60 17 29 fa db 97 6d b7 5d 5e 05 84 32 61 8b cf 59 b0 66 a0 51 85 c9 c0 1c 3e cb e6 06 a6 c9 80 59 a5 67 0d 17 37 06 b1 5c 76 ce 8f f3 e6 32 67 65 e2 7c 18 1c 04 21 30 e4 7a 23 a8 36 9a eb 3d c0 10 f3 e3 d5 0d 05 ec 33 62 e5 dd e8 cc fa Data Ascii: awi*(7J)2ax~ooRkowfA3{}RxGdS4IW5\1fbFg93&Sc>je]t3%WG`0:wpr&eg9gu:-Rs`)m]^2aYfQ>Yg7\v2ge\|!0z#6=3b
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: b7 1a 80 e7 f0 d8 de d8 b7 de ef 0e e4 1d 4c bb 71 2a f6 23 e1 be 30 1c d3 d9 aa 33 ba db 18 b9 c1 21 90 0f f9 e9 f9 b8 81 2c ca e5 b2 d5 3f 0e 15 8a 23 e4 fb f8 de de de 5f 1a c7 f1 2f 4d 96 fc 27 17 8b c5 c7 97 cb e5 ff 36 0c c3 c7 cb 8e 7e 5d 7c d7 c1 fb 0f 9a d9 bf 6b 66 7f 65 fa 58 d1 8a a2 31 bd a3 c2 1f 1c dd 5f 70 52 e1 e0 72 cb 7a 80 76 5e b6 da f6 06 37 3b 45 45 e0 38 f9 1e 27 ac 12 94 c8 dc ac 03 38 28 c6 62 0d e0 a3 f2 a9 81 74 cc 43 85 e7 b4 82 10 1c b0 05 bd 56 2e 0c c3 4b 8f 2c 50 6c 5a c9 51 4b c8 aa 9d d7 11 76 6a 0e dc 0d b4 ad 79 c4 a4 c6 63 0d 98 2b 10 6c 62 2c 73 3c bc 8e 74 78 ff 4d 56 36 35 2f 0b b9 87 60 7b 2a f7 8a 1a b0 e7 fb 1a 28 aa f5 99 6a 1b e4 31 ad f6 35 b2 12 2a 10 a2 e6 a9 2a 47 10 bb e8 71 db 66 40 37 dc 61 b8 ee b8 a2 Data Ascii: Lq#03!,?#_/M'6~]\|kfeX1_pRrzv^7;EE8'8(btCV.K,PlZQKvjyc+lb,s<txMV65/`{(j15**Gqf@7a
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: a6 c0 28 2b 16 3d 56 57 4b fa b8 06 6a 6d e2 6f 59 7a b5 bc 7a 69 9d f0 ac ac 65 b4 4b f2 ad 67 5e f1 75 cb a2 af 56 6f 54 3d 7a e5 5b c6 df ca b4 6a a5 e4 1b 2b ff 38 56 f1 ba 35 3f 5b fc aa d0 ca 1d bf 0b 63 30 ce 5f fc 56 0f 1e 82 72 78 78 78 ff a5 4b 97 7e ad 94 f2 b1 6d c9 c5 5d 00 ef 6e 71 ff eb fc 50 0d b8 3b dd 82 78 5e ea 57 63 d8 2c 60 99 b2 be ec 9d 00 cc bc 54 bc ac 4c 19 d5 26 7f c6 30 99 41 29 cb 7a 56 76 75 0c 15 33 2a 95 ef 70 cc a3 22 ef 36 cb fb b6 a9 06 7c 33 23 42 cd 0a 3e 26 56 d7 16 58 ca c2 8e c9 12 f9 3a 7c b6 07 d0 b4 ac c4 18 5f 01 dc 1a 70 c8 78 50 0d 4c d4 84 37 fb 2e 63 da 19 48 c5 f4 15 b0 31 da 58 87 65 88 bc f0 28 c5 48 6f 80 63 32 6b e5 e0 e7 fc 33 ea ef b8 6f 95 bf 05 0e 5b bc 30 a3 5e 43 48 8d d6 91 13 eb 50 36 9e ef 24 Data Ascii: (+=VWKjmoYzzieKg^uVoT=z[j+8V5?[c0_VrxxxK~m]nqP;x^Wc,`TL&0A)zVvu3*p"6\|3#B>&VX:\|_pxPL7.cH1Xe(Hoc2k3o[0^CHP6$
2025-01-10 16:48:05 UTC	1369	IN	Data Raw: 3c 5e 9c 51 ad e2 63 d9 b3 36 e3 32 f6 cc fb 56 b8 1e 90 b7 4e 7a 3d d4 92 6f 96 8c 7d 13 f3 4d c9 b7 6c 2c 66 73 e8 34 e5 5b 6d 2e d6 f2 32 9a 7b 0a 3c ab ba d4 9e d7 14 67 23 ec c5 78 4e cd 41 13 ed 9b d5 bd 36 e7 78 cc 61 9c b0 e0 33 29 3e a7 94 63 9e db a5 94 fd 4d cb c7 6d 22 da 43 33 bb 50 0b 90 4d b2 e3 d0 49 e3 9f 35 b9 e5 7d 5b 65 cc 26 7f 8d 29 30 23 c8 de 9b 60 00 b5 89 a9 68 1d 21 c2 65 aa c5 6b 81 2a 55 a7 16 a3 ec 4d 5f 85 8d af ac e2 d1 71 bb 00 98 0b 2c f7 9e 07 00 bf ed b9 5e 03 66 41 59 19 11 a4 66 40 33 13 5c 2a 7d 65 41 aa 59 de 94 85 aa b7 ce 5c 07 06 dc bd 82 bb 17 a0 e3 3d a7 a9 40 97 ca b7 c6 a7 38 8f 5a 1f 28 05 2c c2 d4 8e 87 55 a0 bf 56 67 4c ab c0 69 35 11 46 b9 13 a8 f1 91 d5 b3 c7 cf fe 38 a4 be 61 a2 ee cf 62 ee 66 f2 69 96 Data Ascii: <^Qc62VNz=o}Ml,fs4[m.2{<g#xNA6xa3)>cMm"C3PMI5}[e&)0#`h!ekUM_q,^fAYf@3\}eAY\=@8Z(,UVgLi5F8abfi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49804	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:05 UTC	2338	OUT	GET /images/custom/image3.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:06 UTC	901	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:05 GMT Content-Type: image/png Content-Length: 3785982 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-39c4fe" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4968 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bXZ02cRaur0iwTe%2BaPBT0CvtDi1OrPp6k%2FIMlMMCBGREWuHZeQatFQAU1AzXL2JG273PemCu%2BYP9pA7xyq1LxrSjtrpmzxww%2FRFFKE4oILlptgwrVXxze6l7dCDk817UoHk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27155a724369-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1725&min_rtt=1725&rtt_var=862&sent=5&recv=8&lost=0&retrans=1&sent_bytes=4216&recv_bytes=2916&delivery_rate=350287&cwnd=220&unsent_bytes=0&cid=75ce1672d7b75b43&ts=153&x=0"
2025-01-10 16:48:06 UTC	468	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 cf 00 00 04 65 08 06 00 00 00 37 72 86 47 00 00 80 00 49 44 41 54 78 5e ec bd e7 b7 1c c7 b5 e5 79 2b 33 ab ea de 0b 92 a0 05 bd 03 48 78 d0 c2 03 24 41 c2 11 34 b0 04 09 8f 0b 6f 08 1a 49 94 97 28 89 a2 ec 93 a5 f4 f4 f4 24 7a ef 49 e9 d9 ee 9e e9 e9 d5 6e ad 37 6b 4d cf 97 5e 6b fe 9c 98 b3 cf 89 1d 79 32 2a eb 02 a0 a8 37 7a 3d fc b0 57 d8 cc aa 5b 40 55 46 c4 2f f6 89 91 91 a9 d3 43 ab ce 9b 21 e9 0d a1 73 fe 8d 9a 6a 39 d6 a5 fc b9 e8 27 e5 a9 33 db 75 de 8d a6 73 6f 30 21 9f f7 f1 3a 7f 56 52 e7 82 d9 83 ed 43 84 be 6d 2a 2e 9c 13 ca 8b e6 4b 3a 4f ca 73 93 46 ce 9f d3 52 46 9f 79 92 47 1d 52 d1 d4 39 5a 66 1d 54 5c 88 fb 4d 2e f6 65 ff 11 dc 2f aa 83 f6 a8 fc ba 61 62 ff e6 3d 16 84 e2 a2 9b Data Ascii: PNGIHDRe7rGIDATx^y+3Hx$A4oI($zIn7kM^ky27z=W[@UF/C!sj9'3uso0!:VRCm.K:OsFRFyGR9ZfT\M.e/ab=
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 6a fa da 50 5e bf 56 fa ad 56 15 d7 ad 49 e5 91 ab ef d6 b4 9a be 4e eb ca eb 91 ae 97 7b ac 95 36 f4 47 dd fa a1 2a a6 df 3b a0 ce f5 f7 86 91 eb d6 6b 5a ce b8 2f 54 37 dc 1f 0a 49 3b 33 36 24 95 37 de 1f ba b3 1e 0c d5 cc 07 42 71 c3 7d 03 42 3b f3 e8 03 a1 ce 0b 75 b8 47 89 36 dc 07 d7 44 75 e4 3a 08 f5 dd d9 1b 43 6f ce a6 50 e1 f5 66 6d 94 f2 66 55 39 73 a3 69 d6 a6 50 cc de 14 ca 39 9b 43 35 77 8b a6 aa d9 5b 42 35 67 5b e8 cd db ae 69 39 7b ab a6 c5 ac 2d 2a 96 b5 6d ae a4 f3 1e 0a c5 9c ad 9a ef cc da 1c 3a 72 3d f2 a8 eb ce df ae ed 48 cb f9 0f 87 91 b9 0f 85 8e dc b7 90 7c b9 e0 11 55 ef 96 5d a1 ba 69 87 d6 e5 6d 10 cb c5 fc 47 a4 5d 34 57 fa ce db 29 f7 db a5 62 be 7b d3 9e 54 46 de ab 5a b0 5b d5 bb 69 6f e8 2e 98 90 fb ed 0f 85 a8 ba e5 40 Data Ascii: jP^VVIN{6G;kZ/T7I;36$7Bq}B;uG6Du:CoPfmfU9siP9C5w[B5g[i9{-m:r=H\|U]imG]4W)b{TFZ[io.@
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: a0 1a 95 7b 8e 1d fb 48 da 3f 90 fe 52 7f dc d2 ae bc a7 d1 13 1f 6a de d7 53 15 ee 23 75 ec 83 fe 10 ea a0 12 ef 3f 96 91 a2 0f fa 8e 3f fa b1 a6 95 b4 8f 1f 97 d7 96 bc 5e 8b fb 9e 90 d7 38 29 d7 3f f6 51 a8 e4 fd 43 c8 f7 4e 7d a8 42 1e 1a 7d fc e3 54 df 7d f4 03 4d 7d 1d ae 43 3d 54 41 f1 5e bc 87 de 4f d2 f2 c4 7b da 07 d7 f2 35 20 d6 43 7c bd b1 27 e4 b3 46 3f 29 77 f1 ba f2 3e 7b 27 e4 9e c7 9b 9f 09 ff 4e 7e 0e 14 fe 6e a8 8f bf 5d fa e1 ef 1f 3d 8a 7f 7b b9 f6 08 fe 6d de d2 7f 23 fb 77 7a cb ca f2 6f d9 3b f8 a6 fc bf 78 43 fa e1 ff cd 9b 56 e7 52 d6 17 f2 7f 1a fd 90 47 0a a1 0f da c7 8f bd 2b ff a7 f0 ff eb 0d f9 bf f9 ba f6 41 19 ed bc 0f ea 71 8f 72 e2 35 cd a7 7b ed 7f 4d be 3f af 37 d4 95 ef 0e be 27 fd fd 6f c6 3a 79 ed fd f8 fe e2 fb f9 Data Ascii: {H?RjS#u??^8)?QCN}B}T}M}C=TA^O{5 C\|'F?)w>{'N~n]={m#wzo;xCVRG+Aqr5{M?7'o:y
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 9d 29 57 85 22 13 ea f2 7e c3 fa e6 ea 8c 5f 99 94 b7 e5 ed c3 34 32 76 45 d4 e5 a2 cb ce 4c fd 4b cf 5c a3 97 86 ce d8 b4 01 8d 8c 5e a2 f2 75 c5 f8 e4 7d 1b ea 4f 1b 7c 2d 7d bd 96 be 78 9d 7e 9b 2e 16 5d d4 a2 bc df 64 b2 6b 46 7a 17 7e ba ea 5f 70 c6 ea 88 8a de a0 3a dd 36 9d ff 27 6b 64 00 9a ab 1c 24 57 40 de 52 4e c2 97 38 ff 41 98 59 43 73 02 74 2a ef e7 d5 f2 43 36 54 ee 1a 05 ed 79 bb 0a 3f 82 4d 60 8e 1f d8 76 78 de fc b1 6d fe f0 d6 62 7d 0e b8 1b b0 db f5 47 b9 0d 9e a3 be 94 07 42 ae fc 5e aa ec c1 a1 d7 eb 03 a5 1d 9e 7b e8 4d fd 25 c0 f3 f4 60 cf ca 09 6e 3b 38 3e 00 b7 3f a1 fc bd 72 b0 de d0 65 4b 54 0a cd 63 de 34 08 cf 47 54 4b 14 88 27 49 19 d0 9c c0 9c 10 bd b8 62 d9 00 3c 57 80 7e e5 1d 09 8c 43 39 30 f7 22 2c 27 68 d7 fe 57 d5 f0 Data Ascii: )W"~_42vELK\^u}O\|-}x~.]dkFz~_p:6'kd$W@RN8AYCst*C6Ty?M`vxmb}GB^{M%`n;8>?reKTc4GTK'Ib<W~C90",'hW
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 9b 72 e4 b7 b5 da 55 3f 4b b8 49 4b e1 78 7c 36 00 9e 27 80 ee 9e 47 e9 b9 b4 cb a0 39 84 67 17 9e 61 dc 10 c6 72 82 e4 6e d3 18 52 f4 d3 be d8 5c e6 9e c9 09 a2 6f c3 f3 7f 10 a8 e7 cf 71 3e e3 bb db 30 6e 00 3c 37 80 de dd 6a e3 19 c2 73 02 74 c0 73 08 30 7c 74 a3 41 f0 f1 cd d8 4c 88 31 11 c6 4f 18 9b d5 02 30 07 64 27 54 57 90 1e c7 6a b9 00 cd 3b 6b bf 1f 08 d0 4d 35 20 e7 78 d0 03 74 0a 63 c3 ea 3e 69 bb 0f d7 cb 38 72 ed 33 3a fe ac 90 ae c7 f8 f3 bb 0a d0 a9 fe bd cf 24 80 5e ac fe 66 84 e5 00 e7 d8 04 ca 71 ac 8d 77 bb 22 8c 85 ab 7b be 1e b0 c1 14 c2 78 79 54 c6 c8 48 21 80 73 8c a3 39 de a6 30 e6 f6 f2 f5 80 e2 8d f1 fa 5d 5f d6 ba 22 6e 7e 45 9e 40 bd 2f 63 f3 ae d4 13 90 97 32 3f 18 0a cf d3 5c 42 e6 09 cb 0d a0 9b 0c a0 9b d0 26 f3 0e 08 73 Data Ascii: rU?KIKx\|6'G9garnR\oq>0n<7jsts0\|tAL1O0d'TWj;kM5 xtc>i8r3:$^fqw"{xyTH!s90]_"n~E@/c2?\B&s
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 39 52 82 72 40 74 a4 53 b6 fe 3a 8c 6f f9 55 02 e6 ec e7 e1 39 01 ba 4f 0d 9a 5b 19 f9 d1 6d 04 e3 bf 4a 0e 74 68 ec a1 bf 4e 75 70 a1 43 5d 79 0f e3 db 7f ab 00 1d ee 73 05 e9 f2 1e 08 c9 09 cd 3d 44 f7 f0 1c ce f3 d1 87 7f a3 ea 6f 97 f6 2d bf 0c 7d 05 e9 bf 0a 23 f2 3a 1d 38 d6 9d 1b 1c 29 17 d8 3d 48 e7 02 fb 30 e5 00 dd 03 73 82 f0 bc 5f 7e df c9 20 3a 04 48 00 78 00 c8 30 0e d7 f5 ce df 19 28 77 00 3d 01 f5 08 c7 09 35 3c b0 f0 80 9c ed 80 1d 6c a7 03 dd 43 77 f6 55 87 3a 80 ac b4 fb 94 8e 74 ef 34 57 47 22 00 cb 2e 73 9d 1b 4c 07 68 b7 94 10 1c 50 5c 5d e4 d1 51 ee c1 b8 77 99 b3 9f bf b6 71 af 7d 06 89 01 8b 09 77 0a bc 17 40 ef 3d bf 0f e5 ee df 69 aa 30 9d f0 7b ff 8b f2 b7 02 a0 bf 12 66 1d 7a 3f dc 7e ec 1f e5 33 7d 31 9c bb fb 15 f9 8c 5f 96 Data Ascii: 9Rr@tS:oU9O[mJthNupC]ys=Do-}#:8)=H0s_~ :Hx0(w=5<lCwU:t4WG".sLhP\]Qwq}w@=i0{fz?~3}1_
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 9b da 80 f8 67 f0 fc 33 78 de aa 16 48 3e 4c 7f 39 f0 9c c0 dc 7f 69 fd 8e 97 4f 13 9e e7 ed 2d 3f 68 c3 c4 f0 ec 5a ce ef 3b 04 9e 33 df 84 e7 e8 63 3f 96 7f 69 f0 3c 7f 78 4c 06 cf e9 1a cf f5 97 00 cf 01 ca 3d 34 4f e5 1c 70 13 92 e7 e0 fc 93 00 74 af 49 00 3a 1c e7 00 e6 e5 15 80 de 00 e0 4b 62 dd 20 3c cf c3 b6 23 0f b5 c1 f3 ce e5 2d ae 73 85 e9 2b 9a 30 fc 34 10 9d ed e5 d5 ab 52 f8 f6 d6 b0 ed ae 8e 30 3c 87 ec 1e 96 e7 80 3d 95 9d f3 fc 74 f0 3c b9 d0 a3 3b bd 88 6e 73 75 9e 47 87 39 cb 6d 1a 04 e7 32 08 57 07 3a 76 d7 c6 dd b3 33 64 b0 3f a3 09 c7 db e0 79 0e d0 bd eb 9c 20 dd 0b 6d bd d9 80 e1 08 bf 6e 8e f3 11 dc 23 c2 73 e4 0d a0 4b 7f e9 8b 7e 3e 6c 3b 9d e7 a5 d4 15 22 40 73 a8 76 9e 6f 4a b0 3c 07 e7 29 5c 7b 6c ab e6 1a 28 07 1c 1f 99 b5 Data Ascii: g3xH>L9iO-?hZ;3c?i<xL=4OptI:Kb <#-s+04R0<=t<;nsuG9m2W:v3d?y mn#sK~>l;"@svoJ<)\{l(
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 2d 50 0f f8 2d 63 7e 0b dd 0e a7 f9 e7 cc 65 1e 5d e7 6c 53 a0 ae 21 db 3f a7 f0 bc 03 17 f9 72 1c 0f f5 c5 78 f4 93 c1 73 3d 32 0a f3 0f cc 29 70 9f e8 40 af 96 e5 f0 fc 89 04 cf cb 15 32 d7 d1 88 5c a7 12 3c ef 2e c1 35 e6 32 4f 51 b9 38 37 02 44 8f a1 db 09 cb 7d 68 76 42 f5 dc 79 6e fd a0 08 c9 5b c2 b6 ab 33 3d 0b db 3e 4c c3 c2 b6 73 be a9 73 ce 16 68 9e 20 79 9c d3 b2 cc f9 2d a3 b3 a9 f3 1b 47 9e 29 fc c6 3c 19 73 e3 83 56 16 e5 21 db 21 3a ce 6b 68 7e c0 1c e8 bc e7 2d 83 e0 dc e7 75 83 3b 5e 37 a6 80 db 0a ba 45 ea 36 97 7b 42 16 96 fd 40 0a db 5e c3 72 83 e4 1e 94 27 58 2e 75 f5 b5 76 4d 57 d7 07 d0 df 60 39 1c e7 04 e5 48 09 d0 99 2f 10 ae 3d b9 ce 77 19 48 6f 71 9e 0f 0b db ae e0 1c 70 3d f6 9d 0c 9e 27 87 f9 10 98 8e b0 ed d5 8d 0f 85 ea 06 Data Ascii: -P-c~e]lS!?rxs=2)p@2\<.52OQ87D}hvByn[3=>Lssh y-G)<sV!!:kh~-u;^7E6{B@^r'X.uvMW`9H/=wHoqp='
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: ba cb 09 cc 87 39 d4 15 ac 2b 3c 97 fb e1 de 13 af d5 6e f2 e8 34 07 34 27 48 07 14 04 38 1f 3d fc 86 86 6d ef 1f 32 78 ce 50 ed 29 5c bb a4 5a 17 81 37 e1 37 45 28 ee dd e4 b9 bb dc 5f 97 e7 c7 50 16 55 47 df 0d e5 71 c0 f0 18 da fd e8 7b e1 dc c3 1f 84 f1 03 1f 84 b9 27 ff 53 58 73 f2 ff 0c 97 4c 7c 14 c6 0f bf 1f ce 45 88 70 84 65 3f 1e 01 f7 11 0b d5 6e 67 9c 03 94 7f 1c f5 51 1d ae 3d 9e 7f 0e d0 eb cf ed 26 24 67 e8 71 02 60 b8 cf 09 85 7d 28 f2 1c a0 7b 37 36 fb 78 90 3c e5 e4 c7 7a e6 39 fa 8d 9f 82 93 fb e3 d0 7f b4 76 9c 23 05 d4 a6 bc c3 dc f7 49 40 fb 54 33 84 bb 77 9b e7 67 9e 27 47 79 84 e4 1e b6 e7 7d d9 a6 e7 a7 43 b8 0e 7d 4e bc 6f d0 3f fe ad fc 3c f8 77 f3 f3 6c fb 8c f4 ef c6 79 e7 f8 7f 05 c8 ed ce 3c 37 e7 b9 81 6f 3a c7 79 b6 b9 0f Data Ascii: 9+<n44'H8=m2xP)\Z77E(_PUGq{'SXsL\|Epe?ngQ=&$gq`}({76x<z9v#I@T3wg'Gy}C}No?<wly<7o:y
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 6a fe 76 99 30 6e 95 49 64 bc 26 3a d0 79 e6 39 00 7b 0e cf 09 c9 3b 00 ef 08 d9 9e a9 94 3e d5 02 99 4c ce 8f 2e 74 5c 37 4f ae 9b 2b 93 ce 79 3b 32 28 5e 43 72 7f ce f9 20 3c df ad 93 e9 0a e0 9c a1 e2 74 07 bd 85 87 d3 09 7a 5c 2c a8 6e b3 c9 7d db c4 de 87 b7 23 3c af 70 d6 f9 6d 68 9b 48 67 c5 d9 f9 71 58 8c 40 18 77 2c 48 60 c1 e2 48 c0 ee ff 0e da 71 ef 85 47 42 3f 03 e7 80 ea 5c f8 f0 ae 74 eb 73 dc 52 38 13 16 c3 d5 70 2c 01 74 94 91 76 9d eb dc bb cd b5 0c 70 be e8 98 41 75 ad 7f 34 f4 70 ce 1f ce 48 57 78 0e a0 7e 2a 42 74 d4 63 a1 c9 94 60 7a 2c f7 96 03 98 3f 99 1c e8 08 db 5e 21 1c 23 42 1c c2 dd 91 c2 b3 63 21 cb 16 ba 74 31 2b b9 d2 9f 50 70 5e ad 34 a0 8e be e9 9c 42 2c 76 21 14 a4 5c ab ce 73 80 72 b8 52 ee fc b2 41 73 02 74 15 20 ba b9 Data Ascii: jv0nId&:y9{;>L.t\7O+y;2(^Cr <tz\,n}#<pmhHgqX@w,H`HqGB?\tsR8p,tvpAu4pHWx~*Btc`z,?^!#Bc!t1+Pp^4B,v!\srRAst

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49814	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:06 UTC	2338	OUT	GET /images/custom/image7.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:06 UTC	904	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:06 GMT Content-Type: image/png Content-Length: 1685997 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-19b9ed" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4970 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BS1ndORK6j2buQAfIs8JPICRNa2uygJ2zB2m3G4TKEK8%2FpzuXy%2FIxsiB7tLfE03XdnYPy9cRZFtWLLUK6KOPx6QlJ4hXUy42Kztr2nF2%2FJZhGeC3lAIm2zsxI0c5cVoVBYo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27168fff423b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=20014&min_rtt=4158&rtt_var=11358&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2916&delivery_rate=702260&cwnd=228&unsent_bytes=0&cid=a5aaebdb6410545d&ts=125&x=0"
2025-01-10 16:48:06 UTC	465	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 44 00 00 02 5b 08 06 00 00 00 ed d5 41 57 00 00 20 00 49 44 41 54 78 01 5c bd f5 7b 1b 59 d6 ae ed 0e 9a 49 96 c5 b6 64 d9 92 99 d9 96 99 d9 16 58 32 33 33 53 9c d8 e1 38 cc d0 90 0e 75 d2 98 9e e6 9e 79 a7 69 de 39 f3 9d f3 47 3d df f5 2c b7 72 fa bc 3f ac ab f6 de b5 ab ca 01 57 6d dd 75 af 25 9f 98 82 20 98 0b 83 91 58 ae 44 7a ad 0e 89 65 1a 44 e7 04 23 2a 3b 14 71 45 2a 14 b6 a6 c2 9c af 42 44 7c 20 0c 19 4a 24 95 5a 24 4c 39 7a a8 d3 14 50 24 07 22 ba 50 85 b8 12 23 f4 39 2a a8 52 23 60 c8 d6 c2 5a 68 41 a2 2d 01 d1 e9 06 e8 53 d5 48 c8 8d 41 59 4b 0e 3a fa ab e1 1a ae 46 e7 48 0d 7a 26 aa 30 ba 50 8d f1 85 72 0c 4c 16 c2 d9 97 86 f6 9e 0c b8 06 73 e1 1c 2c 40 4b 57 26 2a 5a 12 51 d6 14 8f d2 Data Ascii: PNGIHDRD[AW IDATx\{YIdX233S8uyi9G=,r?Wmu% XDzeD#;qEBD\| J$Z$L9zP$"P#9R#`ZhA-SHAYK:FHz&0PrLs,@KW&ZQ
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: f7 f8 1c 13 92 0b e2 90 5d 9e 82 ac b2 64 24 e6 99 61 cd 36 ca 58 41 5d 16 ac b9 26 e8 93 22 61 ce 34 20 a5 d8 8a a4 c2 38 58 72 8c 88 cd 8a 82 ca 12 86 f8 bc 18 64 94 25 21 2e 3b 1a 6a 6b 38 b4 09 11 32 37 21 df 2c c7 71 8e 26 5e 01 63 9a 16 d1 a9 1a 99 c3 79 51 29 6a 39 0f e7 f1 5c 3c 8e f3 78 1d 8e c5 e7 19 61 4c 53 c3 94 a1 42 62 a1 11 79 b5 29 28 6c 48 47 4e 75 92 04 db 15 1d f9 28 a8 4f 43 66 45 3c b2 2a 13 50 dc 94 89 f2 f6 3c 94 b6 e6 20 af 3e 0d d9 35 c9 28 73 14 a0 ca 6d 43 61 4b 16 32 aa 13 91 55 9b 8c fc a6 0c 14 34 67 22 a5 dc 82 f8 62 13 92 cb e2 64 ac b8 2d 07 79 8d e9 c8 ae 4b 91 7e 95 a3 10 b5 9d 36 70 cb 73 db 9a b3 a4 cd 7e 49 4b b6 fc 4c bc 2e 7f 26 ee e7 18 a3 da 59 84 b6 81 6a 74 4d b4 c0 3e 54 8d d6 de 4a 38 86 ea d0 37 d3 81 e1 c5 Data Ascii: ]d$a6XA]&"a4 8Xrd%!.;jk827!,q&^cyQ)j9\<xaLSBby)(lHGNu(OCfE<*P< >5(smCaK2U4g"bd-yK~6ps~IKL.&YjtM>TJ87
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: b6 43 c6 bb 37 2a d0 b9 52 82 be ed 72 8c ec d5 62 64 bf 4a 62 f4 5c 39 66 0e ea b0 7c bb 09 f3 d7 eb 30 76 c1 86 f1 8b c5 98 bf 51 89 dd 0f da b1 70 a3 1c eb 77 ea 71 f9 45 2f ae 7f 32 86 dd fb 3d f0 cc 94 20 ad 5c 87 50 fd 31 84 e9 03 10 97 1c 8b 30 75 18 7c 8e fb 20 24 22 08 2a ad 02 d1 31 3a 84 2a 43 70 e4 e4 7b 78 ef a4 0f c2 d5 fe 50 47 07 21 38 f2 3d f8 85 f2 77 f7 24 a2 62 d5 b0 24 1b 61 4e d4 ca ef 57 76 a9 0a 23 8b c5 b8 78 af 13 37 3e ea c3 a3 4f 97 f1 c1 db 4d bc fc f1 0c 3e fb 65 1f 6f 7e d9 c5 d3 9f 97 f1 e8 9b 49 dc 7d 3b 8c 8f 7f 5d c2 ad bf 0d e3 d2 eb 1e 1c 7c 31 88 cb 5f 0c e3 f4 f3 5e ac 3c b0 63 e9 96 0b bb 0f 66 71 e3 e5 1e 9e 7c 7d 80 c7 6f af e0 fe e7 17 f0 f0 cb 4b 78 f2 f5 15 89 eb 2f 4e e1 c6 cb 5d dc 7a bd 8b 7b 9f ef e3 e1 57 Data Ascii: C7RrbdJb\9f\|0vQpwqE/2= \P10u\| $"1:*Cp{xPG!8=w$b$aNWv#x7>OM>eo~I};]\|1_^<cfq\|}oKx/N]z{W
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: b9 dc 88 9c 86 04 64 d5 59 91 5a 19 23 fd 78 9b 1e 19 35 71 28 77 e5 20 a5 c2 04 53 ae 52 b6 69 55 66 14 3b d2 91 54 19 0d 4b 99 46 ae c3 eb e5 b6 c6 23 bd 3e 46 82 ed f2 ce 0c 94 3a d3 64 3d 91 5c a6 43 5a 65 14 8a db 92 50 ed ca 44 95 23 1d ad bd c5 70 f4 97 a2 7f aa 01 f3 5b 5d 58 de 1b c0 c2 6e 2f 16 4f f7 61 e3 c2 28 f6 6f 2d 60 ed fc 08 a6 77 ba 30 73 aa 1b 4b 67 07 25 c6 b7 dd e8 5e 6c 44 cb 78 19 fa 36 db 30 b6 e7 86 67 a5 11 0d a3 c5 12 1d b3 55 e8 5c aa 97 76 55 7f 2e aa 07 f2 d0 3c 51 8a 96 c9 32 d4 0e 15 a0 b2 2f 07 35 83 f9 68 9a 28 45 ed 70 21 8a 3a 53 91 da 60 42 5a 63 0c f2 ec 89 c8 77 24 c9 3a 8e 6b 35 ae b7 d2 f9 79 c3 9e 28 6b 36 8e 31 38 b7 ac 27 1b 69 8d 66 58 2a b4 48 aa 8d 86 8f 29 9f 30 44 85 b4 1a 3d 12 ca 22 05 86 18 b2 82 10 5b Data Ascii: dYZ#x5q(w SRiUf;TKF#>F:d=\CZePD#p[]Xn/Oa(o-`w0sKg%^lDx60gU\vU.<Q2/5h(Ep!:S`BZcw$:k5y(k618'ifX*H)0D="[
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 30 84 0f d9 ca fe 5c 79 80 12 80 70 9f 3e 3f 44 1e ae 71 e5 6a 44 17 85 0b ec e0 03 96 fb 78 1e 1e cb 7d dc b2 4f d8 a2 cb 0b 96 b9 1c e3 03 9a c0 c4 90 17 0a 6d 66 b0 bc 78 48 28 37 20 ce a6 91 31 5d 4e 30 4c 85 e1 b0 94 aa 10 5b 18 01 4d 8a 3f 34 89 fe b0 64 a9 90 92 17 05 4b aa 0a 31 56 05 4c 49 e1 48 29 d1 cb 22 2c a9 5c 07 9b 3d 05 25 8e 54 a4 55 47 a3 b1 bf 18 f9 4d 09 48 2b 8b 42 6a 69 34 d2 ca 8c 12 09 05 7a c4 64 2a 61 4c 8d 40 4c 7a a4 80 0f 02 0f 95 35 10 ba a4 50 01 1e 5e 40 12 95 aa 10 18 12 9f 6f 40 8a 2d 06 d6 3c 3d 08 48 08 4e b8 35 67 a9 a1 4d 0c 15 c8 11 69 09 14 18 62 48 51 80 ed 50 e3 09 04 47 1d 83 2e 29 0c 29 36 b3 f4 09 46 bc 50 84 80 39 2e 87 30 24 10 b1 39 61 e0 62 2b b3 c6 84 cc 5a a3 2c fe 09 44 d2 aa a3 90 d7 66 41 6a ad 01 09 Data Ascii: 0\yp>?DqjDx}OmfxH(7 1]N0L[M?4dK1VLIH)",\=%TUGMH+Bji4zd*aL@Lz5P^@o@-<=HN5gMibHQPG.))6FP9.0$9ab+Z,DfAj
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 8e c5 02 01 22 9d 2b c5 18 38 55 2d f7 4f 2f 10 e9 98 2f 10 28 cd fb 6c eb 74 a1 c0 8f fa d1 6c 69 13 88 10 90 f0 1e cf 7b 37 41 08 e7 1d 82 8e 5c 81 1f ed b3 85 72 af 26 e0 26 e8 6e 99 ca 93 fd bc 77 b3 4d 98 c2 67 41 c7 6c 19 3a 97 aa 65 4b e0 41 40 d2 3a 65 13 40 42 28 42 40 d2 34 5e 28 d0 84 7d 82 90 ca be 0c 09 fb 64 85 40 0e 02 0e c2 91 aa ae 2c 01 1e cd c3 c5 20 00 21 20 f1 8e 11 86 10 94 10 9c d4 f7 e7 0b 10 69 9b ac 40 65 6f 2e f2 3b 92 24 6c 9d e9 ef 60 48 72 4d 34 18 04 15 85 7c d9 d1 62 15 38 42 48 c2 75 34 8f 21 ec 20 fc 20 14 21 0c c9 6b 4a 42 66 ad 45 3e bb 27 94 18 a4 4d 68 c2 cf f1 04 22 84 26 84 22 65 ce 6c a4 d6 c4 c8 8b 18 02 17 9e 9b c0 25 af 2d 01 99 8d b1 c8 6a 8a 93 36 81 48 7e 4b bc bc ac c8 ae 33 a3 a8 35 11 a5 f6 54 94 b5 a7 a0 Data Ascii: "+8U-O//(ltli{7A\r&&nwMgAl:eKA@:e@B(B@4^(}d@, ! i@eo.;$l`HrM4\|b8BHu4! !kJBfE>'Mh"&"el%-j6H~K35T
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: bf 98 0e 81 61 3e d0 19 fd c5 18 31 c4 04 a0 a0 34 0e e6 84 20 64 15 1b 90 69 d3 a1 b4 39 01 6d 43 85 f0 cc 55 c2 31 57 2e 6f 75 ea 46 73 50 3f 99 27 b6 48 be db 82 6c 47 8c 40 92 b2 81 54 69 13 86 a4 34 eb 50 d2 9d 04 5b 57 22 32 5b a3 61 ad 8a 40 62 ad 0a b9 76 f3 e1 07 ea d6 18 c4 96 2b 05 64 d0 fe 20 10 a1 cd c1 07 a6 17 6a 94 f5 64 09 18 c9 ed 48 90 71 42 0f be 8d d0 e4 04 ca 38 61 07 1f b2 7c db c0 63 69 85 30 f8 30 66 9f 60 84 06 09 83 e7 e5 18 8f 21 54 89 ca 0f 83 a5 44 8b a4 72 03 62 8b d5 d0 65 07 41 9f 1b 72 f8 c6 a6 52 27 6f 0a f9 3c d6 a6 06 c0 9c 1d 81 e4 02 03 2c e9 2a 68 4c fe d0 19 03 11 9b 1a 89 ac aa 58 d9 9f 5d 17 87 a4 52 3d b2 6b ad a8 76 e7 c3 5a a8 95 36 41 48 76 95 15 59 95 16 24 16 1a 04 86 10 88 58 72 35 20 1c a1 f9 41 e3 23 22 Data Ascii: a>14 di9mCU1W.ouFsP?'HlG@Ti4P[W"2[a@bv+d jdHqB8a\|ci00f`!TDrbeArR'o<,*hLX]R=kvZ6AHvY$Xr5 A#"
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 0e 93 c5 88 23 27 8f e2 64 a0 af 00 11 85 3a 1c bc e7 a8 0c 0a f8 87 1e 43 98 ca 0f d6 d4 28 e4 97 25 a0 bc 31 01 d5 1d 56 01 22 fd 8b 36 8c ef 54 62 68 a7 14 dd ab f9 70 2c e5 c2 be 90 8b ee ad 72 74 6f 56 8b 25 42 78 41 d0 e1 59 2b 13 20 d2 34 99 21 db a1 d3 b5 62 8b d0 10 e9 d9 ac 94 fd b4 ed 46 ce 34 cb fd 96 b6 1f 01 06 21 88 63 a1 14 2d 53 87 80 84 b6 08 ef d5 bc 17 ff 15 86 f0 3e ce 7b 35 b7 04 dd 35 43 69 20 20 e1 18 01 09 8d 92 43 b8 52 24 30 84 40 84 30 a4 7a 20 eb 9d 2d c2 31 82 0f da 23 ce 05 7e 40 2f 11 3b 84 a6 08 e7 d1 12 e9 5a a8 17 3b b3 d4 99 8a 4a 4f 26 08 42 08 3e 08 48 08 43 38 46 00 c2 31 02 12 01 21 03 05 32 af 69 d4 86 9a fe 7c b1 a6 09 37 4a dc 19 12 84 13 5e 18 92 d5 6c 11 18 42 58 91 52 6b 04 ed 10 1a d6 ec 33 ac c5 3a 81 22 f9 Data Ascii: #'d:C(%1V"6Tbhp,rtoV%BxAY+ 4!bF4!c-S>{55Ci CR$0@0z -1#~@/;Z;JO&B>HC8F1!2i\|7J^lBXRk3:"
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 84 0b b3 63 41 3e 50 9b 42 61 4e 54 43 63 0c 46 50 c4 11 84 44 1e 83 c1 14 0a 0b ad ba e8 00 a8 0d 7e 08 56 f8 20 c6 1a 86 a4 54 0d a2 cc 81 88 8d 0f 81 ce 74 1c e9 05 5a 81 22 39 95 d1 b0 b5 5a 51 df 97 83 f6 a9 32 59 9c 34 4e 14 0a f0 c8 eb 8c 43 61 57 bc a4 c9 d8 7a 93 90 d6 6a 40 7a 5b 14 d8 ae 1c 48 47 81 cb 82 a4 3a b5 00 11 82 91 62 4f 02 0a 9c 71 48 a9 d3 21 b9 de 20 0f 54 da 1f 7c 80 d2 dc 20 cc 48 6d 30 09 28 e1 96 0f 58 42 0e 3e 70 f9 36 82 fb d9 67 0a cc 5f 61 88 c9 16 f1 ce 02 f1 da 22 34 48 bc e7 e4 03 99 ed 77 a9 33 b4 4a aa 4d b0 da 34 02 43 b4 59 81 88 a5 0e 5d 67 42 42 85 16 86 dc 60 88 ad 99 af 14 78 11 9b a1 82 c6 1c 00 85 ee 84 fc fd 25 64 e8 05 f4 ab 12 83 c1 48 29 8b 45 7a a5 15 51 19 4a 98 b2 d5 d0 a6 84 09 cc c8 ac 88 43 72 71 34 Data Ascii: cA>PBaNTCcFPD~V TtZ"9ZQ2Y4NCaWzj@z[HG:bOqH! T\| Hm0(XB>p6g_a"4Hw3JM4CY]gBB`x%dH)EzQJCrq4
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: a1 d0 05 23 42 1f 84 98 24 2d d2 0b 2c c8 2d b3 a2 b0 ca 24 86 48 f7 44 21 06 97 4b 31 b0 5a 8c ae 95 3c 01 22 dd 9b 36 74 ad db c4 10 69 9f 2f 42 f3 74 9e 00 8a ae f5 72 01 1e 4c 99 a1 21 d2 b7 5d 29 76 88 67 ad 44 52 65 78 0f a5 6d 47 38 c2 7b 2c ef cb 87 e0 a3 04 ee 95 4a 81 22 bc 7f 33 7d c6 3e 7f 68 ea f1 3e cd fb 35 c1 07 81 07 c1 07 83 63 bc 97 73 cc 0b b9 09 48 78 1f a7 1d e8 58 28 13 33 84 06 08 53 61 68 80 30 6d 86 c1 36 6d 11 1a 24 0c 02 10 3e 73 08 49 08 4f c4 1a 19 b1 49 8a 0c d3 64 bc a9 33 84 22 b4 45 08 49 d8 e6 38 b7 34 45 18 de 74 1a 02 91 62 67 2a 68 85 30 65 a6 d4 93 29 a6 06 0d 10 c2 0f 02 0a a6 98 d3 a6 e6 9a c0 6b 8b 70 3e 8d 11 5a 22 34 44 0a 5a 52 24 08 41 98 d5 41 43 84 80 84 c1 36 01 09 c1 19 fb 25 f6 4c 81 25 1c e7 cb 98 ec a6 Data Ascii: #B$-,-$HD!K1Z<"6ti/BtrL!])vgDRexmG8{,J"3}>h>5csHxX(3Sah0m6m$>sIOId3"EI84Etbg*h0e)kp>Z"4DZR$AAC6%L%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49816	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:06 UTC	2639	OUT	GET /images/custom/image9.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:06 UTC	897	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:06 GMT Content-Type: image/png Content-Length: 41704 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-a2e8" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4969 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r%2FMeAnLcQjfSA1Qlbbh8arAYG4DhQ1NBj%2F16sH78LaBm56cFbcFojgTWMzpOFKOy5kgbCwfj1bVhPYPHsHB%2Bwcgf7y3c058Sts0dfAOtiEYL9KZgJo49Ea2JYPPLAUYC3Gs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27170c39428e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=6742&min_rtt=2307&rtt_var=3731&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2837&recv_bytes=3217&delivery_rate=1265713&cwnd=222&unsent_bytes=0&cid=7bcf8952b6551584&ts=126&x=0"
2025-01-10 16:48:06 UTC	472	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 5e 00 00 00 fa 08 06 00 00 00 e9 d1 2f 56 00 00 a2 af 49 44 41 54 78 da ec 9a cb 6e 5b 55 14 86 cf 23 e4 11 f2 08 79 84 ce 60 98 17 00 45 62 c6 b8 49 dc b4 4d 43 93 b8 85 96 36 6d 09 0d 08 c9 8f c2 23 64 06 23 a8 90 9a 1b 76 71 2e 4d 18 65 2f d6 e7 6d 09 4b 56 9b 50 23 58 d6 fa 07 9f 72 72 f6 ba fc eb 54 e7 cf ee b6 1b 33 6b 84 10 42 fc 77 84 10 21 84 10 99 08 21 42 08 21 32 11 42 84 10 42 64 22 84 08 21 84 c8 44 08 11 42 08 91 89 10 22 84 10 22 13 21 44 08 21 44 26 42 88 10 42 88 4c 84 10 21 84 10 99 08 21 42 08 21 32 11 42 84 10 42 64 22 84 08 21 84 c8 44 08 11 42 08 91 89 10 22 84 10 22 13 21 44 08 21 44 26 42 88 10 42 88 4c 84 10 21 84 10 99 08 21 42 08 21 32 11 42 84 10 42 64 22 84 08 21 84 c8 Data Ascii: PNGIHDR^/VIDATxn[U#y`EbIMC6m#d#vq.Me/mKVP#XrrT3kBw!!B!2BBd"!DB""!D!D&BBL!!B!2BBd"!DB""!D!D&BBL!!B!2BBd"!
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 6b cb d7 cb 3f b8 d5 94 ee 7d cf 7d d0 94 3f 1e ee 96 fe 23 73 f3 b4 72 f2 d4 d9 9a 2f fd c7 75 7d ff d6 7b 34 d4 1a c4 92 43 2e 35 a8 45 4d 6a b3 4e af eb cd b5 cc 0c cc c2 4c cc c6 8c cc 1a e3 99 ff 2b c8 78 65 bc 49 89 f2 02 4e 04 06 d5 db 6c ec f4 f9 9c 9d ef cc f9 cf 6a a2 87 77 d9 61 5e 65 70 18 1a e6 46 ce 82 63 6e 76 56 8e ee 61 98 98 6f df 8d 74 ce 0d 14 13 1c 33 3e e0 1e 6b c4 10 4b 0e b9 d4 a0 16 35 6b ed 36 bd ae fc 83 80 66 b4 33 03 b3 30 13 b3 f9 8c cc 1a e3 99 cb 78 a7 9a 10 22 32 53 f6 16 a7 9c 25 ce 55 d9 11 ba 49 6d 75 ec cf 1f cc cf 55 17 ec ec 9b a6 9a e5 3d 8c f1 5d f9 23 bb dd f6 8c d3 2f bd 75 73 73 33 37 3f 73 93 74 f3 fd d2 30 52 67 b6 f4 bf c2 38 31 46 72 81 eb 7a 8f 35 62 88 25 87 5c 6a 50 8b 9a d4 a6 47 dd f5 be 53 0f 5a d1 8c Data Ascii: k?}}?#sr/u}{4C.5EMjNL+xeINljwa^epFcnvVaot3>kK5k6f30x"2S%UImuU=]#/uss37?st0Rg81Frz5b%\jPGSZ
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 66 f0 38 47 ec 07 84 90 eb 1b 09 15 09 60 13 44 cb 8c f8 00 aa fc 10 3c f1 98 33 c0 62 86 70 be d1 10 82 d0 6d e0 d9 8e 5d ac 87 5c 2a 3a 5a 4a a5 8e 95 be c6 fd ff 01 30 27 73 53 03 b5 50 93 fd d4 3f ca 0d 7b ce 67 ad ac b9 22 81 4b 0f e9 25 3d a5 b7 f4 d8 5b fc b6 82 d7 0a de 5a 21 ef 0f de 41 01 ce 20 1c 8c d8 dd 95 1b c0 66 d7 58 87 b7 e8 ae 1d a3 33 bc ca d7 d9 97 c5 6e d5 76 e6 65 c2 f1 42 98 1e 79 48 85 87 51 57 15 1c 32 0a e9 aa fc 90 2e ca 3f d8 45 e7 83 8b 75 c0 9d 5c c7 39 97 6b b8 96 31 cc 58 88 b1 99 c3 15 ce cc 4d 0d d4 52 91 9a 59 9b 6b c7 ce 9a 59 7b 79 81 4b 0f b9 06 d1 5b 7a ec 2d 7e 5b c1 6b 05 6f ad 90 d7 07 6f f4 a0 10 d7 ee 2f ec 79 39 22 fa f1 77 13 18 1f 16 7f 87 76 2c 1f 8c f1 6c f6 c2 33 e0 8c af fd 1d 1c 63 37 17 65 42 cc 84 9a Data Ascii: f8G`D<3bpm]\*:ZJ0'sSP?{g"K%=[Z!A fX3nveByHQW2.?Eu\9k1XMRYkY{yK[z-~[koo/y9"wv,l3c7eB
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 37 1e 03 98 9e d2 5b 7a 4c af 2f ee 3f 9e e0 0d 1e e1 15 9e e1 1d 1e e2 25 9e e2 2d e7 5e 24 2b 78 af 53 79 45 11 b5 41 55 17 bc 4b 5c 0a 59 f6 2f bf f0 6d 2f cb 1e 39 58 f6 98 a1 b2 c7 0f 93 23 e9 4b 13 1a fc 87 23 27 c9 91 f3 5d 71 10 cf 0c 31 37 f9 30 f3 a7 1f d7 99 73 d2 ed b1 ff b9 b9 65 3b d6 5d 45 87 ba 0a 15 f2 8b 08 c1 26 70 f7 99 c0 dd e3 0c dc 94 4d 1d 14 bf ba ad e2 d6 77 57 d6 f1 d1 04 92 4b 3c 3f 55 ca 0a 29 79 a9 d1 12 29 76 8a 74 f6 5d e9 cc 80 eb 4b a6 66 6a 67 0d 88 35 b1 b6 92 6b 65 ed f4 80 5e d0 13 7a 43 8f e8 15 3d a3 77 3c 0b a6 8f f4 94 de d2 63 7a 4d cf e9 3d 1e e0 05 9e e0 0d 1e e1 15 9e e1 1d 1e e2 25 9e e2 2d d7 5d 24 2b 78 af 53 79 45 11 b5 41 d7 22 78 03 66 75 f7 db b7 f0 29 65 1c 79 53 f6 88 77 90 f3 86 8f 1a c2 4e 4b 8e 84 Data Ascii: 7[zL/?%-^$+xSyEAUK\Y/m/9X#K#']q170se;]E&pMwWK<?U)y)vt]Kfjg5ke^zC=w<czM=%-]$+xSyEA"xfu)eySwNK
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: d5 13 3d a5 b7 f4 98 5e 23 7a 8f 07 78 81 27 78 83 47 78 85 67 2e ff f0 12 4f f1 d6 8d 5c 1c c0 06 8c 20 98 81 1d 18 b2 82 d7 3b e5 15 45 d4 06 55 36 78 ed 91 ef 37 71 24 8e 90 23 73 b2 f3 d7 49 73 a7 c9 dc 50 32 37 56 49 85 18 05 38 35 3d c0 91 fd cd 30 47 f2 57 01 e6 46 95 ed ec 3b b2 9d 78 81 b7 b1 ce e7 b9 db 3b 2a 75 63 3b c5 2d 6b a5 98 d5 3d 65 4b 5c 79 e1 d1 02 a1 8b c2 87 5a aa 3a d1 63 e4 7a f4 80 07 78 81 27 78 83 47 78 85 67 78 87 87 78 89 a7 78 8b c7 2e bf 9d de 0b 21 d8 80 11 58 81 19 d8 81 21 2b 78 bd 53 5e 51 44 6d 50 65 83 17 1d 5c fc 74 ba 3d 82 ff ea c3 27 72 c4 7f 2e 47 c2 70 99 5d 8c d1 97 72 24 fd 5b 8e 94 51 72 a4 8e 91 23 ed 6b e4 fc 7b c2 17 b2 45 7e 20 db d9 b7 55 b0 bf ab ce ef ee a8 ec 6d ed 95 b2 be 8d 62 96 b4 50 dc c6 17 4b Data Ascii: =^#zx'xGxg.O\ ;EU6x7q$#sIsP27VI85=0GWF;x;*uc;-k=eK\yZ:czx'xGxgxxx.!X!+xS^QDmPe\t='r.Gp]r$[Qr#k{E~ UmbPK
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 28 bc c3 43 bc c4 53 bc c5 63 bc c6 73 bc 77 71 00 13 b0 01 23 b0 02 33 15 94 15 bc 56 f0 d6 6c 79 0c 5e 5b 61 b9 3a b5 ea 19 bf 90 85 4f 29 35 f0 35 d9 43 4d f0 ee 71 86 6e 9e b9 01 33 d6 b7 51 c2 92 16 3a 3b cb 57 59 47 27 cb 9e b0 ca f9 b5 b1 f4 ad 52 ec 24 be 2f ea 51 0b 26 bf a7 fb 4c 98 5c 86 08 5e c6 a8 90 a6 7f da bd dc f1 06 3e ff 94 d6 2d 5d a8 3d 5b 37 89 3f 3f e9 df bb dc 6b 5a de f6 6b 13 b0 c3 bd 66 ce ab 29 bc c3 43 bc c4 53 bc c5 63 bc c6 73 bc 87 01 58 80 09 d8 80 11 58 81 99 0a ca 0a 5e 2b 78 6b b6 3c 06 6f 51 41 85 64 8f 78 5f 76 7e 41 e2 54 7f 15 ee e9 ac f3 db da 2b 6b 63 1b 25 2d 6f a1 73 3f 34 51 ea 5e fe c3 95 2b 65 e7 11 03 a1 9b f0 a3 14 3d b6 6c a5 6d 52 ab 3f de a8 fb 7f ed 53 69 f5 7a b4 3d 63 94 27 13 52 5f 94 3b d6 82 ef a7 Data Ascii: (CScswq#3Vly^[a:O)55CMqn3Q:;WYG'R$/Q&L\^>-]=[7??kZkf)CScsXX^+xk<oQAdx_v~AT+kc%-os?4Q^+e=lmR?Siz=c'R_;
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: ce 89 b2 4e 8d 55 47 13 a2 68 e5 ac e2 90 cc 0a d4 e8 81 bd c5 6b af 75 bc df 75 6e ec be e1 ae 73 1f 35 21 9d 15 b9 ba a2 35 e1 35 9e e3 3d 0c c0 02 4c c0 06 8c c0 4a 99 e1 0b 6b 30 07 7b 30 68 7d b8 66 05 6f 8d d6 a5 c1 db d8 df a8 78 d7 6b 82 77 67 fb 4b 54 b8 a3 bd b9 91 da e9 fc d6 b6 ca 5a d7 5a 89 4b 9a eb dc f7 8d 15 bf b1 bf 6c 51 8b 64 8f 5d 2e 65 ee 94 12 be 97 e2 be bb ea ea 63 c2 d5 d7 04 8c 1b 71 ac bc eb 39 cf a3 86 3c ff 58 a5 6a 99 3d 6a 70 99 e3 05 2d 7e ab da e6 44 07 96 0d 92 df 4d 3e 88 47 02 17 5e 5f 3f 93 d7 90 eb b5 31 6f 74 76 bd 36 6f dc 17 52 c2 ac 8a d6 84 d7 78 8e f7 30 00 0b 30 01 1b 30 02 2b 30 03 3b 6e 99 82 35 98 83 3d 18 b4 82 d7 0a de 1a 2d 80 76 13 be e1 46 66 07 f2 94 0a 0f bf e2 36 78 f3 b7 b5 53 ce c6 36 4a 5d c1 23 Data Ascii: NUGhkuuns5!55=LJk0{0h}foxkwgKTZZKlQd].ecq9<Xj=jp-~DM>G^_?1otv6oRx000+0;n5=-vFf6xS6J]#
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 38 ba bc f1 aa 63 4e cf d7 a7 ae 13 1f 80 f1 f7 84 e0 71 fa c7 ef 7d 84 5e b8 e7 46 29 2b 48 d9 61 d3 f4 e3 07 7f d7 0b 77 ff 4a 6f f8 de a2 0d 53 5e b9 6c 9f 60 02 36 60 04 56 60 06 76 60 08 96 60 0a b6 60 0c d6 60 ae 30 35 ca c7 c8 0a 5e 2b 78 6b b6 2e 09 dc ec 6f fc 8d 96 39 32 27 39 ff b1 92 c8 4f cc cd f1 b6 0a 0e f5 51 ce 9a 96 4a 5e d4 4c e1 33 1a ea d4 d4 8e 2a 0c 9b cd 4d e5 dc ed a6 2c e5 d9 de 35 d1 7b 26 5c 1f 30 01 e3 46 1c 2b f3 da 03 eb a7 72 9e 47 cd 1b fd 56 a5 6a 39 b0 66 74 59 e3 31 5f 75 cc 59 a1 71 96 8d 7a 49 3d ff e0 23 b4 6c d2 08 f1 da 67 3d 1a f1 73 29 2d 1b f9 cc 65 f9 04 13 b0 01 23 b0 02 33 b0 03 43 b0 04 53 b0 05 63 b0 06 73 b0 67 64 fd 02 85 15 bc 35 5b c5 61 db c3 68 96 23 6b 4a ba 23 7d bc 1c 49 a3 64 8f fe 4c f6 b3 ef cb Data Ascii: 8cNq}^F)+HawJoS^l`6`V`v````05^+xk.o92'9OQJ^L3*M,5{&\0F+rGVj9ftY1_uYqzI=#lg=s)-e#3CScsgd5[ah#kJ#}IdL
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: a2 6d 53 fb aa 5f fd df 88 d7 16 7d 31 f0 4a 3c 83 15 98 81 1d 18 82 25 98 82 2d 18 83 35 b7 0c c2 26 8c c2 2a cc c2 ae b7 dc 47 35 51 5e 51 44 4d 96 01 b8 89 51 ba 91 76 7c f7 88 72 f7 bd 5a 0a f8 c2 0d ad 94 bf ae a5 b2 57 34 57 d2 bc 26 3a f7 6d 7d 1d 1d db d4 dc 38 df a8 e0 f8 34 e7 6e 37 6d ad 94 ba ea 9a eb a3 27 3a e9 31 13 34 6e c4 b1 f2 c7 48 df a2 8f 7a 76 e1 7c 8f 5a f7 6d df 32 c7 18 f9 42 87 32 af 9f fd f9 a0 ea 9a d3 a3 72 c3 7f 56 2f 13 a2 68 88 09 59 e5 1c 2e 75 7c db 9c 49 1c 73 ab a4 d3 01 57 e2 19 ac c0 0c ec c0 10 2c c1 14 6c c1 18 ac c1 5c 29 06 61 12 36 61 b4 98 55 eb b9 ae 15 bc d7 bf c6 bc d2 d0 df 48 e8 f8 c2 9e 2a e0 7b 95 1b 5a 0a 15 9a 1d c8 f9 35 2d 94 b9 a4 99 e2 7f 68 a4 d0 09 f7 29 ec fb ee 2a 38 32 45 45 e7 16 3b 7f e5 34 Data Ascii: mS_}1J<%-5&G5Q^QDMQv\|rZW4W&:m}84n7m':14nHzv\|Zm2B2rV/hY.u\|IsW,l\)a6aUH{Z5-h)*82EE;4
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 56 f0 7a 57 f0 3a 52 c7 d6 31 10 0f 73 a4 8c 91 23 6e 84 ec 67 3e 90 ed 58 7f d9 42 5e 57 d1 9e 7f a9 60 95 af 72 97 35 55 da bc 46 8a 36 cf de 8e 8d bc 4b a1 df 3e aa bc c0 7f ab f0 cc 62 29 ef 0c 6f 93 2d 59 ba 6c c1 10 2c c1 14 6c c1 18 ac c1 1c ec c1 20 2c c2 24 6c c2 28 ac c2 2c ec c2 b0 15 bc 56 f0 5e 37 c1 eb 48 1d e7 ef 48 19 9b ee 48 18 29 7b f8 47 b2 1f 1f 68 e0 7e 43 b6 03 af a9 70 43 47 15 1a e0 0b 56 fa 2a 67 71 53 a5 cc 69 a4 88 29 f7 eb f0 f0 bf 28 7c ce f3 ca db fb a5 8a 62 36 8a 4f a5 95 b9 d3 92 a5 cb 57 de 49 d9 62 36 09 a6 22 7e 7a 41 30 06 6b 30 07 7b 30 08 8b 30 09 9b 30 0a ab 30 0b bb 30 0c cb 56 f0 5a c1 eb d5 c1 eb 48 1a e5 67 76 09 fc 07 05 65 8f fc 54 f6 93 ef c8 76 a8 8f 6c c1 af a9 28 e0 11 03 79 33 97 f2 57 34 55 f6 a2 c6 4a Data Ascii: VzW:R1s#ng>XB^W`r5UF6K>b)o-Yl,l ,$l(,V^7HHH){Gh~CpCGV*gqSi)(\|b6OWIb6"~zA0k0{00000VZHgveTvl(y3W4UJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49818	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:06 UTC	2638	OUT	GET /images/app/buygoods.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:06 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:06 GMT Content-Type: image/png Content-Length: 11016 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:26 GMT ETag: "610d4692-2b08" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4969 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FHiR9bvlUNxCArvC%2B6ALfanaX3xLpbGrHs3AacM2sVUHcVEOYf%2FBfqq%2BQFn4jdDkkSmbmy0Slo4sYXwyLK9Vh%2FJUURCvyo7cBp%2FqAYltI0rgNJPwUKQ5i%2FQY8D7QDxBGqCE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2717bcf08c12-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1936&min_rtt=1928&rtt_var=740&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2837&recv_bytes=3216&delivery_rate=1461461&cwnd=177&unsent_bytes=0&cid=05831ce4eb5dc528&ts=125&x=0"
2025-01-10 16:48:06 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b4 00 00 00 2a 08 06 00 00 00 1a a1 71 01 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 b4 a0 03 00 04 00 00 00 01 00 00 00 2a 00 00 00 00 38 e3 0f 08 00 00 2a 72 49 44 41 54 78 01 ed 9d 09 80 5d 45 99 ef cf 76 ef ed 7d 4b 27 e9 ec 9d d0 49 20 09 24 40 d8 02 42 22 20 a2 22 3a 62 d4 67 08 04 97 28 28 f3 64 44 c0 99 79 36 f3 e6 21 8a c3 9b 87 82 c2 cc b0 29 f3 34 91 07 8a 0a 0c 22 11 24 01 03 59 4d 87 6c 9d 74 b6 4e 2f e9 4e a7 f7 7b ef 39 e7 fd fe a7 ef 39 7d 6f 77 03 32 33 c6 f0 5e 2a 9c ae 3a 55 df f7 d5 57 55 5f 7d f5 d5 57 75 2e Data Ascii: PNGIHDRqsRGBDeXIfMMi8rIDATx]Ev}K'I $@B" ":bg((dDy6!)4"$YMltN/N{99}ow23^*:UWU_}Wu.
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: a6 6d 3b a3 4c d3 2a 0f 14 f1 a0 2e ce 77 2c b3 34 59 d8 1e 3f d6 cc 9d a8 ef f8 ef 01 4c 8d 71 08 6f 25 1a 3a 58 ed 11 6a 31 5d 80 b6 1e 9d 97 97 77 cc 65 26 12 e8 fb ef bf df 31 7c bf ca 37 bc 4a 96 8d a8 27 7d 32 79 eb 1b 1b 8f 1f d3 a5 23 62 e0 44 e2 b8 ee 81 c2 c2 c2 49 08 f1 28 98 94 fd 1c 84 74 3a 6d 20 e0 7d dd dd dd 81 74 87 f9 c7 22 8e 04 fa 68 7e 7e dc 35 52 13 3c d7 1d 1d 0a b4 09 07 cc be 1e 3f 69 1c 69 68 68 48 1e 0b 86 4e d4 f1 ee ea 01 84 77 12 5a ba 14 33 55 e2 12 04 e4 27 85 90 1f 46 d8 8f b9 cc 44 9b c2 64 9b 53 64 25 cc 89 be e9 95 45 0a da 84 47 cf 68 71 1d af a9 b6 b6 36 98 6d b5 2f bc e0 54 ec de 5d de 63 c6 ab cc 3e 37 3f 16 cb 6f 4b 99 9d 4d bd d7 5d d7 5d 6b 9a c3 66 e4 8a 15 2b ec ba f6 f6 c4 b4 fc 7c b3 89 e6 76 97 97 fb 53 5a Data Ascii: m;L*.w,4Y?Lqo%:Xj1]we&1\|7J'}2y#bDI(t:m }t"h~~5R<?iihhHNwZ3U'FDdSd%EGhq6m/T]c>7?oKM]]kf+\|vSZ
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: e6 6d b6 6f cf 40 20 8b 71 e5 0d 34 0e 09 a5 cc d0 7f 9e e1 c5 d0 bc e5 0c c4 fb f0 88 74 d5 b7 f5 b7 c2 e3 26 a3 f3 81 02 2b 2f 3e d6 33 bd 52 e0 50 f7 e4 4a 20 0d 23 e9 9b 7e db 57 af 5e da 73 f3 d2 a5 41 6d e1 9f 15 1f 5f 61 ef f1 7b e7 52 cf d9 74 4c 89 cf 04 83 71 cd 9e 2e d7 f0 b7 41 24 df b4 ac b9 d0 09 84 4b 14 a1 6b 23 d1 a3 62 69 bb 34 a4 93 1d df 79 ff a3 93 99 04 1f 63 5e 5c 80 ec e7 0b c7 b2 61 c3 37 0e f3 fe 4a 32 65 6e 13 fc be 7d fb f2 11 a2 cb 69 c7 97 78 e6 53 6f 01 1d 98 a9 07 f0 c8 16 33 b4 e9 d1 40 e7 01 57 cc 53 89 c0 4c 22 af 0c a1 fe 21 83 10 09 b5 4c 01 b4 f7 39 c0 de 44 f9 a5 c4 81 b6 cb a6 95 cd 2b 30 9a 38 90 8b 2f a0 ee 8a 9e 9e 9e 5b a1 f9 42 f6 c0 66 68 7e 0c bc 9b a9 7b 36 70 09 e8 0d 48 46 16 8f 21 5d ca 6c 9e 12 04 ea 5c Data Ascii: mo@ q4t&+/>3RPJ #~W^sAm_a{RtLq.A$Kk#bi4yc^\a7J2en}ixSo3@WSL"!L9D+08/[Bfh~{6pHF!]l\
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: ba 05 fa 69 e2 c9 e4 9d 0e be fa 5a e5 8a a2 c0 7b 37 30 ea b3 4f 42 6f 3a ef d9 13 a4 03 bc 7f 81 b7 5f d0 57 cd d0 73 81 29 a4 ee 4f 81 b3 94 f4 68 ca 03 9a 14 a9 4d 35 e4 8f c7 f3 b3 09 4d 8d 68 59 5a 19 64 c7 8b 66 78 0a d9 4d 7b 44 8a 62 cb 08 04 3a 1d 4b 96 60 86 56 a2 ae 63 99 31 0f 18 0c 88 1b 46 0f 1e 81 27 12 be f3 fd 3e e3 68 5d 73 77 5f 5f e9 f4 e9 66 7c 4f e7 64 27 ee de 08 fc 35 08 48 41 d8 ac 60 02 98 78 40 5c bf 92 8d 26 f7 9b 02 cf c0 40 83 33 83 c9 4b 33 c3 d1 1e f5 42 56 c2 74 93 95 9e 13 1f 05 c3 51 ae 1a e1 bb 5e 0b ed 68 f6 4c 87 bd a9 d9 4c ab c7 0e 42 04 12 9c 70 7d af e4 9e 7b 7e 15 bf f1 c6 0f 04 87 40 77 7e ff 7f 4f b1 cd f4 22 a6 f1 34 84 3a a0 a7 46 33 52 4d 9e 9b 7a a9 32 96 7a 43 a6 06 9a 44 36 db 7b 00 c8 11 66 de 0f d0 c9 Data Ascii: iZ{70OBo:_Ws)OhM5MhYZdfxM{Db:K`Vc1F'>h]sw__f\|Od'5HA`x@\&@3K3BVtQ^hLLBp}{~@w~O"4:F3RMz2zCD6{f
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: e2 61 dd 70 1e f3 10 68 bb ab 43 5a 07 12 1c 32 98 f6 b9 da 17 84 b6 73 c0 86 e9 ad 75 3d e3 c5 da 65 cb fa 96 bc e7 3d 63 e8 20 d9 ad 43 b5 b3 96 d7 f5 74 5a 9d 06 30 c0 1b f2 07 bc 1e 60 24 4c 12 1c 09 56 10 03 a6 89 2a 33 63 3a 71 64 3f 0a 86 a0 65 71 ef 48 a7 92 aa 07 13 41 02 39 ac 3e 68 27 a9 6b 32 26 47 39 1a 29 d2 a4 f0 a0 49 52 4f f9 ef 39 25 c4 47 3f 3c 80 d7 8f 06 1e 2a e8 e1 44 a8 a6 ac 1a 9a 81 12 10 b6 04 11 9a 0d 24 5f 44 c0 da 86 53 e4 18 b0 b7 d7 45 e0 86 9d 92 42 47 bc 1f e0 39 22 9e 87 e2 42 57 bc 27 a8 73 2a e5 53 28 ff 08 e6 cb 2e 5c 86 2f 2c 59 b2 e4 85 a2 a2 a2 d5 b7 df 7e 7b 2b f2 36 a8 cd 32 44 e8 1f ad ac af 33 09 fe 8a 36 cd 15 3e 3c e8 30 66 03 27 b8 ad 52 32 02 b5 ea db 39 7d f3 fc f1 9e 8f 86 ce 5a 3a 11 ca 5e ba 6b 13 42 bb Data Ascii: aphCZ2su=e=c CtZ0`$LV3c:qd?eqHA9>h'k2&G9)IRO9%G?<D$_DSEBG9"BW's*S(.\/,Y~{+62D36><0f'R29}Z:^kB
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: b5 3d f2 3d 8b 4f 9e 76 60 0e af 5c b9 72 98 f6 0b 29 53 3e 99 09 21 b3 20 67 82 f1 be 9b b2 60 6c 47 8f 1e dd 89 79 50 4b 3d 8b 59 b5 be 87 b0 ae 26 dd 8c 60 bb 3a 9c d2 ca a3 fa 46 0a 19 c1 3e 87 b6 9f fb e9 4f 7f 3a f0 77 8f 04 37 52 9e 85 15 2c f7 8d 6e b3 0d 96 53 0f 75 a5 0d 8e 36 06 33 73 53 f1 aa ae 1a cb 37 cf 02 4b 2e 9a a0 10 81 d1 54 68 e2 6d af 97 0e 9c f9 98 24 19 ba ea 2c ae 02 b8 a6 81 23 bc 7d d8 b2 fb 95 bb ef ce 67 a4 d9 10 fa e1 cd ae a0 c1 74 d0 11 3c 74 fb ec de bc 48 a0 2d 3c 1d d8 08 4d d0 d6 4e 2c a8 5b eb 02 7e e8 0a 8c a8 cb 10 f6 b3 72 05 0d 4d e6 a5 9f 72 d3 fe 6f c3 56 b0 ac 69 c3 96 0f 5c 74 e8 a0 b2 0c bf 3e 82 32 a2 e0 09 86 81 39 19 e1 d3 cd 36 e1 2b 2b e4 55 77 23 8e 32 58 f2 37 e5 68 16 e5 11 de 94 26 78 b3 a0 59 ae 81 Data Ascii: ==Ov`\r)S>! g`lGyPK=Y&`:F>O:w7R,nSu63sS7K.Thm$,#}gt<tH-<MN,[~rMroVi\t>296++Uw#2X7h&xY
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: f5 ea d5 fb cf 3b ef 3c f5 b9 3a cf 64 1f a3 2b a3 e3 c0 d5 5e 2b e8 2b f2 03 59 02 4f fb 86 6d 9b 36 6d 8a 4c 18 95 bd 5d 70 d0 aa 87 6c d3 39 80 e1 50 9d 25 d1 32 ae 62 08 e8 15 9c 50 9c 96 70 d2 5b 2c 2f af 2b 6d a4 47 33 44 7c 41 62 56 61 67 44 e0 41 25 52 a6 a6 b9 0e be 7e 8f 6b ee 28 0e da 2e 38 4b 43 23 f0 43 07 9a 9c 8d 1a fa 6f a9 d7 e7 97 5d f1 c6 fe b5 a9 ca c9 69 c3 ec 9a ce 95 92 cb 38 ca 3e 17 91 cc 0f bb 1f 35 49 7b fc 3a 36 79 2f 7f 7d c8 57 28 98 3c de 9d df 7f b4 85 46 b7 a0 b7 6a 42 9c ec c6 d2 b1 92 e8 26 fc eb cf c7 4a ac 1c ed 2c 38 04 c0 e5 64 49 76 b9 3c 13 11 2a 75 aa 43 75 7c fd 41 3a 7b 1e 83 b7 13 61 96 96 90 39 20 ad 1d 7c 99 11 21 64 12 c2 23 b4 81 a7 2b 8e 8d 08 93 70 a2 cd 18 b4 54 7e 36 42 f4 10 71 3d 42 8c 95 e4 56 93 9e Data Ascii: ;<:d+^++YOm6mL]pl9P%2bPp[,/+mG3D\|AbVagDA%R~k(.8KC#Co]i8>5I{:6y/}W(<FjB&J,8dIv<*uCu\|A:{a9 \|!d#+pT~6Bq=BV
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 14 9e 6c 6a 99 15 dc d7 c7 ea f0 dd 26 bc a2 9b 11 d1 17 59 99 7f d5 db bc 6b 87 ec da a1 95 7d f9 9e 7b 12 e3 63 e5 e7 e1 ca ff 34 cb ff 22 a6 c2 78 28 61 03 8a 94 06 8b 1a 74 56 c9 9d 15 f4 36 9a d8 5c cb d1 d6 b3 e9 98 fd dc 6d cb 3e b5 67 28 bd ec f7 3b ee 79 70 b4 1d 77 be 02 89 2f 41 0e 7f f7 40 f5 99 8e e7 f2 b8 f7 1d a7 db bc ef e6 9b a3 63 ee 6c f4 9c 34 a6 c7 69 74 f0 17 19 a8 0f 11 6b 23 15 6e bc 34 20 12 dc 7e 3a 7a 3b f9 2b 78 97 9d 7c 2d 79 ba 83 1b d0 01 4f 1a 6b 15 9a f7 76 ee 19 ac 52 a6 3c 0d 84 f3 80 ff 0c cf 7b c1 19 45 b6 36 06 b4 1d ae f5 07 3f 2d 8f 6c 69 fd 1e 9c fc b2 bf c0 fb f0 53 ae 80 86 2e 35 81 45 81 8f 06 0a d8 54 7e 1c 9c a5 d4 a7 0b 3a da 9c 85 bc 32 4e f2 a0 32 60 03 57 2c b5 99 da 02 dd 97 79 d7 a4 dd 3c f4 e6 5c 48 18 Data Ascii: lj&Yk}{c4"x(atV6\m>g(;ypw/A@cl4itk#n4 ~:z;+x\|-yOkvR<{E6?-liS.5ET~:2N2`W,y<\H
2025-01-10 16:48:06 UTC	966	IN	Data Raw: d8 13 f6 fa 31 e7 57 6b cb f2 47 f4 e9 ff 67 d4 79 bc d0 38 ee 37 85 b2 99 13 63 6b ae e5 00 e9 bf a1 8c a7 e8 4b c7 30 0c 5c 57 e5 d6 e8 c0 c5 f2 5f 98 46 ea 9e af 2d bf 2e d2 94 21 dc 48 31 da 77 1a c2 f8 65 84 f5 1a 84 b4 5c 30 a1 b0 8e 04 1f e6 01 2f bf b1 66 93 bc 14 af b2 eb bf 17 c1 7e 66 24 97 d8 fd f7 af 28 3d ea f7 5e c1 09 c4 a7 31 87 74 64 fd 6b 4e 43 9f ee f3 bb 1a 8d a6 a6 2e ae 68 ea 9b c4 41 fb 25 ac e4 1d c6 81 49 c6 2f bc ea ae 4d 6f ba 7b 74 cc cc 3f 1d 21 be 82 79 3e 07 46 5f e5 a2 c6 bd 45 56 df 1f 46 ba e5 f8 0e ab 3a ee c1 8f 7b 81 fe ea 5d 8f 16 56 16 9b 5f c4 52 fe 1a cc 8e 96 79 30 e0 1e 35 53 8e 6d b1 19 33 0f f0 d1 d0 f3 fc f2 e9 63 5f ff dc b5 1b df 89 80 70 af e0 34 4c 85 1b c0 f9 30 c2 29 da a1 4f 37 18 38 f2 83 38 14 74 de Data Ascii: 1WkGgy87ckK0\W_F-.!H1we\0/f~f$(=^1tdkNC.hA%I/Mo{t?!y>F_EVF:{]V_Ry05Sm3c_p4L0)O788t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49819	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:06 UTC	2339	OUT	GET /images/custom/image12.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:06 UTC	912	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:06 GMT Content-Type: image/png Content-Length: 1762184 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-1ae388" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4969 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yx3LFFxUQ%2BP9N%2Faf%2BF11MLhmsyl92gGuFDmjG6PyMDVyTExQsRIatjv%2FwnDFRlks6jrKXlg9%2FBXnJVof%2F6MsCwpnIYLgKWR2%2B4SsoxBX3tX95jJBx50MPOOb%2F1aiG5y%2BcuE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2717c8a3f5f6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1908&min_rtt=1510&rtt_var=850&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2917&delivery_rate=1933774&cwnd=183&unsent_bytes=0&cid=566d1deac8291fde&ts=118&x=0"
2025-01-10 16:48:06 UTC	457	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 00 00 00 03 00 08 06 00 00 00 93 81 00 8e 00 00 20 00 49 44 41 54 78 01 6c bc 75 78 54 e7 fa ee cf 39 fb bb bf d2 dd bd db dd 16 29 45 13 88 cb 24 13 9b 78 82 6b 81 96 42 5b 28 54 a0 82 5b 70 2d 50 0a 14 77 0b 49 d0 84 b8 7b 88 bb db c4 26 36 99 8c 24 13 37 e4 73 ae 59 6c f6 e9 75 7e bf 3f ee eb cd ac f5 ae 35 93 c9 cc 5a f7 e7 79 ee 37 a3 b6 6c 5f cd d6 1d df fc 5b 9b b7 ad 62 d3 d6 af d9 b0 f9 4b 7e de b8 42 d0 2f 9b 56 0a db 74 fb fe bc 5f b7 fd a7 0d 5f f0 76 ff 9f cf f5 76 de c6 2d 5f fd fb 58 dd fe b7 73 b6 ef 5a cb ce dd df b1 63 e7 77 ec dc b1 86 9d db be c1 6b eb 57 78 6d 59 ce ce 0d 8b d9 be 6e 16 9b bf 73 66 e3 5a 3b 7e fa d6 9c f5 6b 8c f8 fe 3b 3d d6 ad 9f c2 fa 4d 53 f8 79 ab 1e 1b b6 Data Ascii: PNGIHDR IDATxluxT9)E$xkB[(T[p-PwI{&6$7sYlu~?5Zy7l_[bK~B/Vt__vv-_XsZcwkWxmYnsfZ;~k;=MSy
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 42 03 ca f2 8c 28 ca 32 a0 20 43 8f fc 74 7d f2 52 0d c9 4d 31 21 37 d9 92 dc 64 6b b2 13 ac 49 8f b7 26 25 4a c4 f3 38 5b 62 c3 44 04 3f 35 27 24 c0 96 10 7f 47 82 9e 7a 10 15 e2 4e 72 84 1d 25 59 36 d4 16 99 22 ab 9a 80 ba e5 03 ba 3b fe 9b 1e f5 28 7a 34 a3 de 8c ea bf a2 6d fb 3b 6d 8d ef 23 93 7e 48 4d d5 18 6a ab 3f a1 46 3a 91 e6 ba 69 c8 1b a7 d1 2e 9f 84 42 3e 86 96 96 f7 68 6c 7a 87 fa c6 bf d3 20 1b 4d 55 e5 78 aa ca a7 53 55 2a a2 bc c0 86 a2 6c 2b f2 d2 2d c8 7e 6e 42 e6 73 63 d2 d3 cc 49 49 31 21 29 d9 80 c4 a4 e9 24 a6 18 92 f4 dc 88 e4 54 53 92 53 cd 89 4f 36 27 36 c1 92 a8 18 31 a1 61 d6 04 04 58 f1 e8 a1 25 f7 ef 5b 70 e7 9e 15 e7 2e 98 72 e6 bc 05 a7 ce 99 70 e2 0f 03 4e 9e 33 e4 cc 75 53 ae fa 59 73 f7 99 2d 7e 51 0e 04 24 4b 88 c8 75 Data Ascii: B(2 Ct}RM1!7dkI&%J8[bD?5'$GzNr%Y6";(z4m;m#~HMj?F:i.B>hlz MUxSU*l+-~nBscII1!)$TSSO6'61aX%[p.rpN3uSYs-~Q$Ku
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: fd 66 e2 e5 ed c6 ce 3b 4e ec bc 29 61 cf 6d 7b 0e dd 93 70 cc 47 c2 d9 c7 ae 9c f3 77 e6 d2 33 57 ae 86 b8 70 23 dc 95 9b 91 ce dc 8a 72 e1 7e a4 0d c1 51 66 e4 e6 59 d3 a2 f4 60 e0 c5 0a 5e be da c1 8b a1 13 bc e8 bb c9 ab c1 9b bc ec 3f ca f0 c0 06 5e 0e 7e cd ab 17 4b 79 d9 bf 90 de 4e 47 3a da a6 a1 6a fb 27 ca f6 ff 4d bb ea 2f c8 e5 a3 69 a8 9f 4a 75 a5 19 d5 e5 62 1a 6b 25 b4 37 db d0 ad 32 a1 5f 3b 95 de ce 31 68 94 1f a0 51 4e a1 bb cb 86 ee ce 39 a8 95 b3 51 77 ba a1 d2 88 51 28 f4 91 37 4d 44 51 3f 0d 55 83 09 9d cd 16 68 db a6 a3 52 7e 80 42 f3 37 5a 55 ff a0 51 3e 96 9a 86 e9 54 d7 1a 21 ad 99 46 5d ed 24 14 8d 93 68 a9 7d 17 8d fc 2f f4 74 ff 05 8d 76 14 9a ce ff e2 55 d7 74 e8 76 e6 45 f3 1c 9a ab 77 73 2f 3c 86 39 fb 23 30 f0 0a c7 fe 4c Data Ascii: f;N)am{pGw3Wp#r~QfY`^?^~KyNG:j'M/iJubk%72_;1hQN9QwQ(7MDQ?UhR~B7ZUQ>T!F]$h}/tvUtvEws/<9#0L
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: b4 10 94 2d b5 42 27 1d 2c 64 54 5b 90 26 d5 19 7f 73 32 6a 2d c8 a9 35 a7 a8 da 9c 12 a9 05 a5 35 e6 94 d6 99 53 2c 33 a3 b0 d1 8c 7c 99 29 b9 32 13 d2 6a 8c 78 5e 65 42 8a 0e 1c 2a ac 49 af 90 08 00 50 54 3f 97 d2 a6 f9 94 cb 66 08 00 90 58 e8 41 40 aa 2b f7 e2 dc b8 1c ec c0 65 1d a8 46 5a 13 9d 61 43 4e b1 35 d2 7a 2b 1a 9a 2c 68 68 36 a5 a1 d5 8c 5a b9 05 35 72 4b ca 9b 4d 29 6f 36 a7 5c 66 4e 51 8d 11 39 65 d3 c8 2a d1 23 b7 dc 80 02 1d 94 d4 58 50 58 67 45 7e 9d 15 79 f5 56 e4 d4 59 0b e0 92 5c 65 4a 62 b9 05 d1 b9 22 22 32 6d 08 4e b5 e1 49 a2 8d 00 00 77 c3 6d b9 15 e6 20 c8 27 da 89 47 f1 8e 04 a5 39 12 97 ef cc f3 62 7b d2 4a ad c8 ab 14 51 5e 6f 46 8d 6c 2a 4d ad 9f a0 54 8c 41 ab 7e 9f 1e f5 5f e9 57 8f 62 48 ad 83 80 bf 32 a2 f8 07 af 95 93 Data Ascii: -B',dT[&s2j-55S,3\|)2jx^eBIPT?fXA@+eFZaCN5z+,hh6Z5rKM)o6\fNQ9e#XPXgE~yVY\eJb""2mNIwm 'G9b{JQ^oFl*MTA~_WbH2
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 9a 13 68 d5 01 44 e5 3e e7 a7 5b 52 5c 4e 48 99 7d 23 97 a3 b9 52 72 7a eb 51 be 48 66 b0 ef f2 9b f9 c3 07 79 31 70 88 91 a1 33 8c f4 1e 86 91 4d f0 62 3b 5d 03 97 68 ee 79 4e 50 7a 29 3f ec 0e 66 c1 0a 1f 5c 96 78 23 5a e5 27 00 c0 2a 9f 5c a2 3a 40 4b 3f 20 85 91 48 18 ba 43 a7 fc 00 69 09 4b b9 7a de 92 bd 3b f5 d9 be 49 cc 8e ed 12 f6 1f b5 e7 f2 3d 3b 9e c5 9b 90 51 6a 4a b3 d2 83 c1 be 2f a1 6f 17 0c 9e 86 fe f3 f0 c2 9b 17 3d 0f 19 18 8c 44 f3 3a 95 b2 ee 2a 4e 05 94 b0 e5 62 21 01 59 5a 6a 3a e5 f4 be 7a c4 ab 57 bf c2 e0 19 e8 bb 00 2f 6e 31 dc af 83 99 d3 d0 b7 87 97 3d ba ef 86 27 1d ed 26 a8 da f4 84 51 ab b1 44 db 69 83 5a 6d 25 00 80 b4 d5 80 fc 5a 23 52 4a 4c 85 7b 5e 50 b2 13 8f e3 9c f1 09 73 e3 da 43 67 4e 5e 75 64 f7 af f6 fc bc cb 96 Data Ascii: hD>[R\NH}#RrzQHfy1p3Mb;]hyNPz)?f\x#Z'\:@K? HCiKz;I=;QjJ/o=D:Nb!YZj:zW/n1='&QDiZm%Z#RJL{^PsCgN^ud
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 9f f0 ce b2 c7 8c 5d f4 10 eb c5 be 2c 5e ea cb b7 0b af b3 7e ce 19 b6 2d 3e c7 af df 9f 22 c6 f7 0a 8d a5 57 e9 52 1e 65 a8 7f 27 fd 3d eb 18 ec fd 86 e1 be 55 0c 76 2f 65 a0 67 2e 83 7d 33 18 e8 9d 49 9f 76 9e 50 81 ed d4 6e a1 a8 e5 08 51 65 37 39 fb ec 29 4b f7 5c c7 61 fd 75 ec 7e f2 c3 f1 e7 40 56 1e 0f e7 6c 78 08 61 a5 17 c9 6b 5f 49 91 c2 92 d2 66 43 4a 6a 8c 29 28 12 91 93 6f 4f 4a a6 35 09 e9 56 c4 a6 5a 11 95 2c 22 2a d9 9a e8 14 31 71 cf c5 c4 a7 89 78 9e 65 45 5a ae 05 59 05 a6 14 96 18 51 5a 31 4d a8 3e ea cc 7e 73 eb 64 9a 5b 47 d3 da 36 96 56 f9 44 9a 9a f5 90 35 9a 51 53 27 a2 b8 cc 8c 8c 5c 23 12 d3 8d 88 4d 35 26 32 d9 94 b0 44 11 a1 89 f6 04 c5 39 e2 1f e3 c2 93 68 77 bc c3 1d b9 1e 24 e1 d2 13 27 ce 3e 74 e3 37 6f 37 8e dc 74 e1 d0 Data Ascii: ],^~->"WRe'=Uv/eg.}3IvPnQe79)K\au~@Vlxak_IfCJj)(oOJ5VZ,"*1qxeEZYQZ1M>~sd[G6VD5QS'\#M5&2D9hw$'>t7o7t
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 78 5d 96 b0 ef a6 33 87 ee 7b bc 01 6c 5f 37 01 00 76 7b bb b1 e7 ae 3b 5e b7 dc d9 71 dd 9d cd 17 5d f8 f9 b4 13 eb 4e da f3 dd 51 31 3f 9d b0 62 fb 79 31 87 ef d9 73 3e d0 89 db 09 8e 3c 4c 77 e0 69 ae 98 c8 32 5b e2 a4 b6 24 d5 8a 49 ac b6 22 41 07 04 95 d6 24 54 88 89 2d 15 31 ea 6d 05 ff ad 99 ff 33 00 bc 35 fb 6f 0d bf 6e ae 4e 6f a3 41 ba f8 cf 5b 43 ff f6 b8 3f 1b 7e 9d e9 7f 7b de ff f7 1c ba c7 ba 63 b6 79 7d c7 8e 3d 3f e0 b5 7b 1d bb 76 ae 65 c7 e6 af d9 be 61 25 7b 36 ad 60 ff f6 e5 1c dc b5 94 83 5e f3 39 b8 7b 06 fb f7 3a b3 ff 80 1d 07 8f da 70 f8 37 6b 8e 9d b6 e1 d4 1f 12 4e 5f 70 e4 cc 15 27 2e de 72 e1 9a af 2b 77 fd dd f1 09 73 e7 41 94 3b 01 f1 1e 04 26 ba 13 9c e4 41 70 bc 1b 81 d1 ce 02 00 e8 aa ff 8f 82 de 98 ff a7 41 0e 04 04 39 Data Ascii: x]3{l_7v{;^q]NQ1?by1s><Lwi2[$I"A$T-1m35onNoA[C?~{cy}=?{vea%{6`^9{:p7kN_p'.r+wsA;&ApA9
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 28 cf 55 f7 68 50 fd 42 bb f2 53 da 55 0b 50 2a e7 a1 52 cf 15 aa b2 5a ed a7 74 75 2d a3 4b b3 9c 2e cd 0a ba d4 5f 0a 63 77 e7 72 ba 35 cb e8 ee 58 4c 4f c7 3c e1 66 df a3 72 43 a3 9c 89 bc 7d 29 75 8a 1f c8 6f 3d 46 6c 43 00 4f a4 65 9c 4e 57 b2 2b 4c c9 b6 c0 26 2e a4 d6 12 5b 97 4e 89 f2 2e b2 8e f5 a8 3a 66 d3 dd e9 46 af ca 9e 4e b9 08 65 8b b1 00 00 ad 2d 1f 23 6b f9 90 9a e6 0f a9 6c 9c 48 6e f9 44 52 b2 a6 f2 3c cb 98 fc 22 3b 2a 2a 1d 85 a2 45 61 99 25 a9 45 f6 04 a7 d8 71 eb a9 0d bf 5d 15 b3 ef 37 07 b6 1e 74 60 c3 1e 31 3f 79 99 f2 cb 9e 29 1c bf 62 cc c3 10 3b e2 d2 5d 28 28 9f 4d ad 6c 21 55 d2 39 e4 e6 bb 90 98 e2 44 48 94 88 d0 28 23 d2 72 6c a9 6b 58 88 a6 e3 5b 06 7a b7 f2 6a 68 1f af fa bd 78 d9 b7 89 91 9e 35 0c 77 7d c6 70 f7 12 86 Data Ascii: (UhPBSUPRZtu-K._cwr5XLO<frC})uo=FlCOeNW+L&.[N.:fFNe-#klHnDR<";*Ea%Eq]7t`1?y)b;]((Ml!U9DH(#rlkX[zjhx5w}p
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 50 5e 3d 55 50 71 f9 64 74 2a 2b d7 b5 81 75 17 ef 29 34 34 ea 2e 58 1f d3 d8 3c 9a 96 96 0f 05 35 cb 3e 42 56 3b 96 26 e9 64 9a aa 8c a8 2b 31 a1 2c c7 ec 8d f1 4f b4 21 3d 41 4c 46 a2 dd bf a5 5b a3 a0 8b 2a 25 c5 d9 10 1f 63 2f 44 66 ee df 17 71 e9 8a 15 07 0e 1b b1 69 ab 3e 3b 76 4c e4 fe 6d 03 62 42 a7 53 9c 65 82 bc c1 94 fe 4e 3d fa 3b de a7 5b 35 8a e1 ae 51 0c aa 47 d1 a7 f8 0b bd ad ef d1 d5 f8 31 8a aa 29 d4 e5 4f a6 2a 7b 3a 35 f9 d3 a9 2b d6 55 41 3e 44 dd 32 86 6e d5 68 ba 35 ff 10 aa c0 1d ca bf a1 51 be 4f a7 ea 63 74 6d 57 85 7c 2a 6d ad 53 68 95 4f 16 22 0b ba 1b 6c 7d e3 68 a4 b5 93 a8 aa 9e 46 65 95 3e 95 95 06 54 55 19 53 59 6d 4e 65 b5 25 15 95 6f ba 03 65 95 56 e8 a4 83 02 9d a9 29 28 36 24 af 70 3a 99 45 46 c4 e7 99 10 95 67 41 64 Data Ascii: P^=UPqdt+u)44.X<5>BV;&d+1,O!=ALF[%c/Dfqi>;vLmbBSeN=;[5QG1)O{:5+UA>D2nh5QOctmW\|mShO"l}hFe>TUSYmNe%oeV)(6$p:EFgAd
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 04 3b f2 47 a0 2b bf 05 78 bc 01 80 07 1e ec f5 d1 ad 03 70 e1 d0 03 37 61 6d c0 d1 07 ae 9c 78 e4 ca a9 27 2e fc e1 ef ca a5 20 f7 7f c5 7f dc fe 0d 00 ba 35 4e 57 42 1d b9 11 ec c4 dd 47 2e 3c 7e 66 47 44 a2 81 00 98 4d 0a 37 fa fb 97 c3 c8 46 18 f6 7a 93 73 ef 5a cf 2b f5 97 8c a8 16 31 ac 9e c9 b0 ca 9e 91 4e 23 5e f4 18 d3 a7 b6 40 ab 30 43 de 32 99 ba 86 4f 84 bf 55 7e c9 64 a1 fb 95 9a a9 8b 38 4d 25 af 48 9f da 7a 3d e1 de a3 56 4d a1 4b 63 c4 40 a7 0d fd 1d 33 d1 b4 2d a3 bd 75 11 6d 72 5d 65 7a 0a ed aa f1 74 69 f5 19 ee 75 e1 75 ff 62 5e 77 7f c6 ab 9e 05 8c 74 db 08 6b 09 ba 54 ef d3 29 7f 07 6d cb 68 3a 9b 27 31 d0 29 a6 b9 d5 89 e4 e2 99 f8 67 ae e1 6e da 49 ae c6 5f c3 37 c1 9b e4 a2 30 d2 8a 1f 10 90 fe 98 ed be 31 98 ef 7a c8 38 2f 7f 4c Data Ascii: ;G+xp7amx'. 5NWBG.<~fGDM7FzsZ+1N#^@0C2OU~d8M%Hz=VMKc@3-umr]eztiuub^wtkT)mh:'1)gnI_701z8/L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49820	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:06 UTC	2651	OUT	GET /images/products/prod11/6-bottles.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:06 UTC	896	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:06 GMT Content-Type: image/png Content-Length: 668416 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-a3300" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4969 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a7sAk9OaNUs703orUYioHTpmeQesfdVaJSgMhVkZXmvK%2BoNXnA8lOVsPRhT7dbfpkJJXZrSdnGOh5Jtq4zIAH26WESoZ8L10ounzKuR89H3Q9mGWY%2BFwg44oUVrbc2ISxZ4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27185ffc182d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1607&min_rtt=1589&rtt_var=633&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2838&recv_bytes=3229&delivery_rate=1680092&cwnd=155&unsent_bytes=0&cid=e03628a4448df0ea&ts=148&x=0"
2025-01-10 16:48:06 UTC	473	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 36 00 00 02 58 08 06 00 00 00 99 fd 66 5c 00 00 20 00 49 44 41 54 78 9c ec bd 69 8c 6d cb 75 1e b6 ea 9c d3 b7 ef f0 e6 91 7c 8f a2 f4 c4 41 a2 44 53 a2 48 53 b4 4d 28 b2 14 0d 16 12 33 96 22 58 3f 2c c1 48 e2 00 92 20 d8 82 1d e4 8f a1 48 48 fe 44 70 10 18 08 2c c7 88 7f 44 b6 1c 01 09 62 cb 40 10 01 31 ac c1 83 06 4a a6 68 92 96 48 8a a2 48 4a a4 de 7b 7c f3 9d bb 7b 57 b0 fa ed 75 f9 dd ef 7e ab f6 3e dd b7 bb 4f f7 ad 0f 38 dd e7 ec 5d 73 ad 5d b5 d6 b7 57 55 15 3b 24 6a ad 87 4d a2 a3 a3 a3 e3 48 f0 da 6b af 6d 54 c3 96 72 e7 90 eb 63 a8 ba 7e b7 a0 d2 8f 6b 78 6f ee 77 ac 07 a7 ad 7e 73 bd d5 b5 ac 1d 70 7e c9 da 2e bb 47 f7 97 66 76 d1 cc 2e 8c ff 39 dc 96 99 dd 3f de df 2e a5 5c 32 33 ff dc Data Ascii: PNGIHDR6Xf\ IDATximu\|ADSHSM(3"X?,H HHDp,Db@1JhHHJ{\|{Wu~>O8]s]WU;$jMHkmTrc~kxow~sp~.Gfv.9?.\23
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 7c fd 7b dc f3 df 1e 2f e4 cf ff fb 6f 94 4b af 87 ff f7 b0 7e dd 7f 63 9c 08 87 f2 ef 61 22 bc e7 7f 94 e3 c3 1c 3c f9 e4 93 27 9a 7f 47 47 47 47 c7 e9 c5 71 ce 61 4d 45 ad a3 a3 a3 a3 a3 e3 98 71 6e 24 12 6c 24 04 1e 31 b3 47 c7 ff 8f c1 bc e5 44 c0 83 66 f6 84 99 3d 34 de 7f 00 8b 5a 4a b9 38 86 b9 7f fc 5c 1c 09 0b a3 70 87 ae a1 a7 91 11 3e 87 4d b7 05 24 a9 0e 5a 66 37 d4 27 70 79 fc 5c 59 2e 97 af 2c 16 0b 67 0c af 51 d9 fc da b3 a5 94 17 57 ab d5 8b a5 94 d7 80 a8 71 b2 c4 af 3d bf 58 2c 3c cc 65 88 77 d5 89 19 55 7e bf c6 d7 fb cb 94 8e 8e 8e 8e 8e 8e 0e 85 4e 6c 74 74 74 74 74 1c 25 fc 75 ef 57 98 d9 e3 63 1e db 66 f6 26 33 fb aa f1 da be 75 5c 4a 71 d2 e2 0d 23 51 f1 c0 78 ad 8c 44 84 b4 ee 33 a3 bf 75 bd 45 14 1c 96 8c 98 6b 84 b7 8c f3 39 65 Data Ascii: \|{/oK~ca"<'GGGGqaMEqn$l$1GDf=4ZJ8\p>M$Zf7'py\Y.,gQWq=X,<ewU~Nlttttt%uWcf&3u\Jq#QxD3uEk9e
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 89 e2 65 7b e9 a5 97 6e 95 19 37 f2 9c eb 15 70 37 c0 06 bd 22 54 5a 6d 63 c2 3b 01 e3 f1 72 0f f4 2a 68 a5 c7 7b 94 28 6f 0a b5 54 44 dd cb ea d7 22 38 30 3d ee 13 26 4e 42 26 b8 2c 28 ab b1 2c 44 d5 33 64 c9 c3 04 d9 10 c4 83 7f aa d8 e8 d5 7f 3b e1 66 40 a6 61 3c 24 7b a2 6c af bd f6 da fe f3 10 84 48 81 bd 3a 7c b9 4a 78 8a 84 bc 8f 65 71 56 e5 e9 e5 72 f9 74 ad f5 3b 47 ef 0e bf fe fc 30 0c be af c7 bf 18 86 e1 df ef ed ed fd 76 ad f5 13 99 ac 74 74 74 74 74 74 74 dc 1d 1c 5a 43 ec 93 75 47 47 c7 a6 c2 0d 96 4d 82 32 ca 67 78 20 3c 63 66 df 36 7e de 33 9e 42 22 8d c1 20 02 82 b4 70 92 00 c9 8c 30 22 c3 d0 8b 8f 1b 6f 6a 63 47 05 26 3b a6 96 34 ac 03 37 0e bd cf 9e 7b ee b9 db f6 57 38 6e 64 1e 12 06 44 04 7b 43 18 78 51 e0 75 24 2b d4 a6 a6 4c 66 c4 Data Ascii: e{n7p7"TZmc;r*h{(oTD"80=&NB&,(,D3d;f@a<${lH:\|JxeqVrt;G0vtttttttZCuGGM2gx <cf6~3B" p0"ojcG&;47{W8ndD{CxQu$+Lf
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 1c 40 4f 8c cc eb 01 f7 5b 39 88 b7 88 aa 77 b6 34 86 97 98 b4 3c 2c b8 4e aa 5c 8a 14 c9 ea 8b c7 01 e3 3d 26 21 b0 5d 70 a3 4e 3e 62 37 7e 17 71 c2 89 c1 33 c5 ed 83 f1 8d 08 98 02 47 ce c6 be 1c b8 31 2b 9e a8 12 a4 8c 5f 3b 7f fe fc bb 96 cb e5 6f ec ee ee fe d0 de de de 3f 3a e9 e5 59 1d 1d 1d 1d 1d 1d 9b 8e 4e 6c 74 74 74 74 1c 1f fe 97 16 a9 81 06 5a 11 fb 66 9c 75 6c 9a f1 96 91 00 48 44 e0 de 0f 53 1e 12 2d 62 44 ed 67 51 92 13 51 32 a2 05 97 52 30 b9 a1 bc 25 32 a2 c2 84 e7 85 ba 6e e0 55 c1 cb 62 f8 bf 22 77 d8 23 03 d3 34 f2 0c 31 92 8f d8 37 26 88 00 f4 d2 c8 da 3c 88 07 f6 e8 e0 fc b8 9f 99 b8 31 b1 81 a9 6a 2f ae 1f 9e d6 82 79 06 11 e3 c4 07 ee e1 e1 1e 5a 8b c5 e2 67 af 5d bb f6 ea 30 0c bf d0 3d 37 3a 3a 3a 3a 3a 3a 72 74 62 a3 a3 a3 e3 Data Ascii: @O[9w4<,N\=&!]pN>b7~q3G1+_;o?:YNlttttZfulHDS-bDgQQ2R0%2nUb"w#417&<1j/yZg]0=7::::::rtb
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 74 74 74 74 74 74 dc 89 3e 43 76 74 74 74 1c 3d b6 7b 1b b7 e1 27 a2 9c 24 a1 a3 88 09 7e db 9f bd 99 6f 21 f3 ae 50 f9 67 e5 31 4a 87 bd 02 94 e1 cc 9b 7f aa 3a a8 7b 9c 7f cb 5b c3 12 8f 09 4e 2f ab 6f d6 26 2d 62 88 eb 18 de 14 2d af 18 ae 77 a4 85 a7 af 20 e9 82 1e 1a 91 4f 10 1d 5c cf cc 33 26 f3 7e 99 aa ab 42 e6 f5 d1 d1 d1 d1 d1 d1 d1 f1 65 74 8f 8d 8e 8e 8e 8e a3 c7 da 1e 1b ea 0d f1 3a f1 f1 e8 c9 4d 87 97 71 13 8e 7a 65 72 03 db 4f 11 0a 36 1a bd 7c 3c 6a 66 ec 2a 28 32 c5 12 c3 39 5b 4e 92 fd 9e 2a 4b 10 02 6a c9 06 d7 37 23 78 d4 fd a9 eb 46 5e 1b 5c 3e f4 52 c8 08 a6 f8 1d a7 e9 6c 6f 6f a7 4b 78 32 0f 12 b5 77 06 97 85 cb c9 32 92 e5 85 69 b4 ee 73 9d 78 59 0c e6 d7 bd 35 3a 3a 3a 3a 3a 3a 72 74 62 a3 a3 a3 a3 e3 e8 71 6e 6e 0e 77 eb ad 6c Data Ascii: tttttt>Cvttt={'$~o!Pg1J:{[N/o&-b-w O\3&~Bet:MqzerO6\|<jf(29[NKj7#xF^\>RlooKx2w2isxY5::::::rtbqnnwl
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 2d 4d 52 04 5f 94 29 3c 9b d4 27 c2 05 d1 e3 64 aa 22 48 30 6e 85 a5 37 d8 be 48 f6 f0 26 ab ea 1e 93 43 9c 27 a7 91 8d 8b a2 9f dd 6b e4 3e ff 88 79 e3 19 ac 07 cb 9d 7b 49 18 91 54 5b 5b 5b 1e e8 25 f7 c6 1b cb f8 fc f6 f6 f6 e7 17 8b c5 73 63 9f dd 5c ad 56 9f 29 a5 fc 41 29 e5 a6 13 20 8b c5 e2 33 b5 d6 cf b9 a7 8a 7b 9a d4 5a 6f b6 88 c0 8e 8e 8e 8e 8e 93 41 27 36 3a 3a 36 0f ab d1 5b c2 49 88 af 37 b3 47 4a 29 4e 5e bc d3 cc de 58 5e d7 d0 be d2 cc de 3a ba 1a 9f c3 a5 1f 99 32 3e f5 f6 cd 04 29 10 2e b0 68 38 04 c9 80 a7 06 60 78 bc ae 88 8c f8 a8 30 0c 8e 8f 46 03 1b 03 6c 34 60 9d 58 21 56 46 1d 1b 73 58 7f 4c 0b cb ad 0c 34 95 be bb 2c a3 3b 74 c7 ed 58 87 54 38 2a a0 3c b5 88 37 65 cc f3 35 b5 19 27 82 e3 b5 64 7f ee f7 8c 98 53 f1 b1 ac 5c 2e Data Ascii: -MR_)<'d"H0n7H&C'k>y{IT[[[%sc\V)A) 3{ZoA'6::6[I7GJ)N^X^:2>).h8`x0Fl4`X!VFsXL4,;tXT8*<7e5'dS\.
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 4d 26 94 f3 20 1f 82 c0 88 63 e4 e2 7f 28 70 4f 3c f1 84 9d 3f 7f fe 8e 37 8f 01 7e 6b 18 ca 57 90 16 e8 52 ab ca a1 10 0a e4 cb 2f bf bc 5f 96 20 36 a6 f6 07 b8 1b a8 e2 4d 73 66 50 62 dd f9 e4 01 a5 04 c7 35 0c 9b 29 db 98 77 f6 26 96 8d 1c 65 28 31 c1 c1 e5 3f a9 d3 3e 4e 03 42 f9 3f 29 64 c6 15 2e e1 68 11 4e ea 5e 8b cc 9a 7a 8b 9e 2d b7 62 83 93 cb a7 08 03 75 9d c9 0b ae 1f c6 51 86 33 bf 69 57 c6 23 b7 85 35 0c f1 cc 80 57 f1 b9 ae 85 f6 33 51 cb 2d 2c f1 cc c8 36 f0 e4 3e 65 03 7a a0 4d 8c b1 4e bc 59 28 42 b5 89 42 6b 4c 53 75 c8 d2 52 86 3d b7 b1 22 07 e6 e6 cd 61 55 3c 94 43 5e ee 83 df 39 3d 94 71 1c c7 99 58 8a df b8 37 86 91 ac b1 9c e1 92 a1 2a f6 64 09 c2 22 96 ad 14 d8 8c 35 f2 f1 7c 7d 0e 8f 74 3c 9c 13 17 7c bc b6 ff f6 7d 51 5e 7d f5 Data Ascii: M& c(pO<?7~kWR/_ 6MsfPb5)w&e(1?>NB?)d.hN^z-buQ3iW#5W3Q-,6>ezMNY(BBkLSuR="aU<C^9=qX7*d"5\|}t<\|}Q^}
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: e2 66 a0 d8 4e 51 3e 5c 3a 50 68 73 4a 36 be 2b ed db 90 2d 59 ca 9e 5f 6e 4f 2e 4b d6 af 6c 8c 2b 39 c9 88 26 d5 07 bc 6f 85 2a 2f e7 c5 e9 63 9f 2b 39 53 fb c0 a8 7e cc 9e 2d 23 19 6d 91 29 2d 4c 11 5b 4c 6e a8 76 c7 93 c5 98 24 e1 65 56 18 86 89 b9 3a 2e 43 c1 17 1c 05 f6 ef 88 39 27 f4 09 d7 1b 7c b9 aa eb 0d 2f bc f0 c2 fe 5e 1d ae 7b f8 3d 27 41 fc a5 89 7b 92 38 c9 81 f5 5a ad 56 e7 b6 b6 b6 be 7f 7b 7b fb fb 77 77 77 3f 72 e3 c6 8d ff 69 18 86 7f d4 6c a8 8e 8e 8e 8e 33 82 4e 6c 74 74 98 fd b0 99 fd 0f a3 b7 c6 6d 70 45 c3 09 8d cb 97 2f df 72 0f 8d 37 2c 53 08 85 26 db 10 b4 e3 ce 65 38 f8 9f 15 77 4b 94 fe 6c c3 40 45 36 28 83 34 cb 9b 15 d5 a9 78 ca 3d 9f 8d 97 b9 b8 1b 9b 8d 9e 06 99 53 c6 ec 49 94 81 65 68 ea 08 54 0c 9b 19 6b ca f8 56 69 a8 Data Ascii: fNQ>\:PhsJ6+-Y_nO.Kl+9&o*/c+9S~-#m)-L[Lnv$eV:.C9'\|/^{='A{8ZV{{www?ril3NlttmpE/r7,S&e8wKl@E6(4x=SIehTkVi
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 4a f9 91 c6 bd db 14 82 c3 96 b3 bf 11 b9 1d 53 0a 9a d1 32 99 00 2a 95 a8 14 66 6b 9f e7 2a 7f 98 a7 35 14 f4 56 da 5c 1e be 77 10 8f 8d bb 45 36 9d 16 f9 3b a9 f1 20 93 15 c4 1c e3 b2 4c 9c 00 a1 d2 98 32 58 54 7c 94 b5 58 5a 91 85 61 a3 86 cb 39 d5 06 7c 0a 8a 2a 1b 1b e4 18 3e 5b 26 a0 f2 6e 19 a9 5c 8e b9 9e 03 4c 3c 32 f8 6d ba c1 35 cc db c4 f3 c8 e5 9a 22 23 78 c9 01 6f 44 aa ca 6d 34 ee 59 c3 30 57 f7 79 69 0a b7 93 2a 3b d7 51 91 2d 96 f4 5b 56 c6 ac 6f 4a 63 a9 4e 56 9e 56 3b 99 90 59 f6 06 a9 44 a4 65 e3 6c 85 e5 48 b1 5f 05 cb 7a 56 07 23 f9 e0 7c 94 27 90 2a 23 9e 5e a3 c8 48 cc 93 c7 1e fe ce fd b2 58 2c de 52 4a 79 cf de de de 6f 77 1d a5 a3 a3 e3 2c a1 13 1b 1d f7 22 de 96 d5 f9 6e 19 58 68 d0 6e ea 66 5d ee 9a 7a 12 06 a5 32 b2 94 21 c2 Data Ascii: JS2fk5V\wE6; L2XT\|XZa9\|>[&n\L<2m5"#xoDm4Y0Wyi;Q-[VoJcNVV;YDelH_zV#\|'*#^HX,RJyow,"nXhnf]z2!
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 66 e5 51 cf 6a d6 5e 2d 82 84 cb cb e3 21 ef f7 d0 da 2b a3 90 57 85 32 1c 95 41 dd ea 3f d5 c7 58 56 55 a7 39 84 c2 dc b1 49 19 e8 53 06 78 26 1f 59 ba 0a 59 dc a9 71 b9 0a ef 16 83 76 61 12 4f a5 9d 3d 17 41 3e a8 71 8a cb c0 f7 98 b4 e2 3c 90 e0 68 91 14 73 48 bd 0c 53 84 49 27 36 3a 3a 3a ce 12 3a b1 d1 71 af e1 dc 5c 62 e3 b0 86 e1 a6 4e e8 ae 48 f9 89 28 71 84 dd 71 22 33 b8 59 89 cb 94 e4 96 62 a6 a0 f2 c8 14 d0 16 b9 a1 a0 e2 64 8a f1 dc f4 8c 94 f4 83 82 15 fd 4d c6 26 94 af 45 66 b0 6c 5a c3 08 42 54 71 12 43 96 b7 ba 9f a5 9f 19 ac aa 3e aa dc 99 91 c5 f1 32 52 64 ee 26 a4 ea 99 e0 e7 5f 91 13 1c 36 cb 87 fb 48 ed dd 80 69 f0 a9 1a f8 f6 5c c5 c3 8f 3a 9d a6 d5 0e 59 fb aa e7 b2 65 1c cf 91 81 93 18 2f 6d e2 99 51 50 75 cf 64 37 23 20 f8 a3 ee Data Ascii: fQj^-!+W2A?XVU9ISx&YYqvaO=A>q<hsHSI'6::::q\bNH(qq"3YbdM&EflZBTqC>2Rd&_6Hi\:Ye/mQPud7#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49822	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:06 UTC	2338	OUT	GET /images/custom/image8.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:06 UTC	904	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:06 GMT Content-Type: image/png Content-Length: 1280521 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-138a09" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4969 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vONZPkQ%2FJk%2FQNfBWraHGDrI8j%2FBF6xCg3f4LYm23qsHHVrblAoCuzWnYkgDilyAHNlyke6BceMorO1NzQ97iLl81nPnqZs1Z50J3AHv7yerTjIo6V%2B%2Brsjzf5GC4woRp5oM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe271a2b8e5e86-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2461&min_rtt=2206&rtt_var=1338&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2916&delivery_rate=686897&cwnd=241&unsent_bytes=0&cid=40c6bf7ee3bb914a&ts=127&x=0"
2025-01-10 16:48:06 UTC	465	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 02 a6 08 06 00 00 00 15 5d 50 b2 00 00 20 00 49 44 41 54 78 01 c4 bd 75 94 1e d7 99 af 9b 73 cf 19 38 49 ec c4 24 5b 8c 2d 68 66 66 a6 8f b9 3f 68 46 75 8b a9 c5 d0 62 46 8b 99 99 99 c9 b2 98 c1 b2 15 3b 71 78 26 c9 cd 64 26 93 c9 99 3c 77 bd d5 da ed 4f 8a e3 64 ce bd 67 dd 3f 7e 6b 57 ed da 54 5f 95 b4 f6 d3 bf 77 ef fa 56 96 ae 2f d9 fa 7e 9a 72 0c 81 e4 99 82 c9 37 87 68 2a b0 84 52 64 0b d7 54 68 0d 43 49 f2 8a ed 11 e8 1c 91 14 3b a3 d1 b9 62 d0 97 c4 62 f4 c4 ff 99 24 df e0 8e d3 24 c7 52 56 ea 14 da 23 29 b0 45 90 67 09 23 df 1a ae 49 ce e5 58 f2 72 4c 21 64 1b 83 5f 91 e4 89 72 cd a1 af 48 ca 8b 24 5f d5 91 63 d5 ee 37 a5 79 b6 08 72 ad e1 9a 72 a4 5f 69 e7 e5 b9 5c 2b 70 44 69 2a Data Ascii: PNGIHDR]P IDATxus8I$[-hff?hFubF;qx&d&<wOdg?~kWT_wV/~r7hRdThCI;bb$$RV#)Eg#IXrL!d_rH$_c7yrr_i\+pDi
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 32 13 4b 59 26 46 6f 1a 3a 77 22 05 8e e8 d6 e7 69 0d 21 d7 16 4c 8e b5 1f 3a 4f 04 ce fa 18 26 2d b1 b2 f1 58 03 27 ee 0e e7 f8 ed 06 8e 5f ab e6 d8 a5 52 0e 1f 77 b1 7f 9f 85 c3 3b 2d 1c dd e5 e2 f8 1e 1f 47 f6 55 b3 65 4b 29 b3 e6 1b 18 30 32 15 77 75 14 46 77 38 66 4f 1c 0e 4f 32 06 6b 34 56 57 02 d6 92 78 ac 25 b1 9a 6c ae 58 5a 15 8d cd 15 8d c9 19 a6 c9 e0 08 45 a4 b7 87 69 2a 76 84 51 e4 88 a0 d0 16 83 c1 1d 43 56 51 07 72 f2 bf c7 a8 c1 89 ec 5d 57 c7 9d 93 53 f9 e2 e6 62 7e 78 7f 09 77 6e 4c 66 c7 e1 1a 66 ae 2b 66 d8 92 0c 6a 67 47 e3 6b 09 a1 62 46 04 0d 73 53 a8 9a 99 40 f5 ec 78 fa 2f 4e 61 d0 f2 74 6a e7 c6 63 1e d6 97 34 4f 7b 22 72 df a0 77 fc df d3 33 fc ef 08 88 fc 07 7a 45 fd 23 3d 63 fe 8e a0 b4 ef 12 57 fc 2e 39 f6 6e 14 b8 bb 52 58 Data Ascii: 2KY&Fo:w"i!L:O&-X'_Rw;-GUeK)02wuFw8fOO2k4VWx%lXZEi*vQCVQr]WSb~xwnLff+fjgGkbFsS@x/Natjc4O{"rw3zE#=cW.9nRX
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: d9 fe 5e 0e 97 d9 38 59 e7 e1 44 83 97 ad 8e 42 76 38 8a d8 6c ce 65 9d 31 8b 75 a6 6c d6 98 32 58 aa 4f 66 5e 61 1c 73 45 45 49 9a e6 e8 52 99 ab 4f 63 ae 21 9d 39 a6 0c e6 98 b2 98 65 ce 62 a6 29 93 a9 e6 0c 5a 8c 99 4c 31 67 31 c5 9a ad 69 82 29 83 71 86 34 c6 e8 52 19 59 90 c8 e0 dc 18 06 64 45 d2 98 15 46 ff cc 50 6a 33 02 a9 ce e8 47 7d 4e 10 b5 39 81 d4 e4 05 52 57 10 4c 83 2e 84 26 63 38 03 ac 51 0c b6 46 33 be 24 91 11 e6 48 e6 d4 16 33 af d1 c4 c6 96 06 6e 1e 5c c1 9d 13 1b b9 7b 7a 33 37 4f 6e e5 ce 99 1d dc 3f bf 9b 87 17 f7 f2 e8 dc 4e ee 9d da ca ed 43 eb b9 7e 60 0d e7 76 2c e2 c2 9e a5 5c 3d b8 92 1b c7 d6 71 fb e4 46 4d b7 4e 6c 40 24 f9 a2 8f 0e ad e2 e3 23 6b b8 79 7c 3d 77 4e 6d e2 c1 b9 6d 3c 3c bf 9d 87 e7 76 f3 ec f2 01 3e fd e8 b0 Data Ascii: ^8YDBv8le1ul2XOf^asEEIROc!9eb)ZL1g1i)q4RYdEFPj3G}N9RWL.&c8QF3$H3n\{z37On?NC~`v,\=qFMNl@$#ky\|=wNmm<<v>
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 23 a0 03 5d fb 7c 40 cf c0 0f e8 d8 e1 ef 18 54 5e c8 a3 63 eb 34 20 bc b5 79 1a 0f b6 cf e0 e9 fe b9 3c df bf 80 17 bb 17 f2 f9 ce 79 fc 70 f7 02 be d8 3d 97 cf 77 cc 6e 03 c2 4f d7 4f e3 f9 9a 16 3e 59 3d 85 17 6b a7 68 40 f8 6c c5 38 3e 59 35 9a c7 2b 47 71 7d 5e 83 06 85 0f d7 37 73 6b eb 54 0d 04 7f 7e 6d 07 87 16 0c 62 94 2d 46 9b a0 4e 76 27 72 76 f1 50 2e 2c 19 ca 99 39 8d 1c 9d 50 c6 a5 19 0d dc 99 37 84 1b 2d 75 dc 9a 54 cb cd 09 d5 5c 1f 55 c9 dd e6 3a 6e 0f a9 e4 de f0 3a ee 0c ad e3 e6 c0 5a 9e 8c 18 c4 f3 a1 83 b8 57 59 c5 0d af 87 9b 55 e5 dc ac af e4 7c 85 80 93 89 2b a5 26 2e bb 4c 7c ec f6 f1 a4 a9 89 9b 03 2a 38 52 55 c0 c9 e1 7a 3e 5b 3b 94 df 9d 98 cf ef ce 7d c8 cf 8e cd e7 c1 b6 89 dc de 3c 96 eb eb 86 23 63 be 39 af 9e 1b 13 cb b9 Data Ascii: #]\|@T^c4 y<yp=wnOO>Y=kh@l8>Y5+Gq}^7skT~mb-FNv'rvP.,9P7-uT\U:n:ZWYU\|+&.L\|*8RUz>[;}<#c9
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 37 b1 ee 70 2d 47 6e 0e e1 f0 c7 0d ec bf 50 c9 fe 33 95 ec 3b e2 65 d7 4e 07 3b 37 db d9 b5 c9 c9 ae 8d 5e b6 6d 2c 63 f5 6a 1f 63 26 e5 50 de 10 85 b5 2c 54 03 42 a3 3b 0a 87 37 01 bb 47 c1 60 34 d6 92 af 97 c5 15 85 c8 ec 8c d4 64 72 45 6a 50 28 60 a8 77 46 a1 77 c5 a1 73 45 90 94 ff 0e 41 d1 df 22 29 f5 ef a8 2c eb c7 e4 31 79 cc 99 6a 60 d6 8c 22 16 ad b0 31 77 9d 8d 71 cb 8b 68 9c 93 4e e9 e4 48 dc 63 83 a8 98 12 49 dd f4 04 6a a7 c5 53 37 33 9e 01 0b 53 18 bc 34 95 da 59 b1 08 10 66 f9 3a 12 99 f7 26 41 29 df a1 6f cc b7 bf 02 c2 88 ff 41 bf 94 ef 12 5b f8 1e 39 ce ee e8 cb 7a 63 a9 eb 83 a9 7f 2f 0c fd bb a3 6f ec 81 ae 7f 4f 0a 6b 7b 21 40 58 50 d1 5d 73 07 c5 09 4c 73 b6 7b 09 84 9d c8 2c ed 4c 6e 69 47 f4 d5 5d 71 0f 0a a2 6a 58 14 0d 43 12 18 Data Ascii: 7p-GnP3;eN;7^m,cjc&P,TB;7G`4drEjP(`wFwsEA"),1yj`"1wqhNHcIjS73S4Yf:&A)oA[9zc/oOk{!@XP]sLs{,LniG]qjXC
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: eb 8a 34 20 5c de ec e5 cc c6 e9 3c 3c bd 91 fb a7 b7 68 c0 f6 e0 c2 1e fc 25 40 28 2e e1 e3 33 3b 78 74 7a bb e6 24 8a e3 27 6e a2 48 20 4f 9c 42 01 41 05 81 97 f7 2f e7 e2 de 65 9a 2e ed fb 50 cb 57 00 29 ee 9b 4c 68 fd 27 c6 02 24 0a 04 95 a3 a7 20 51 9c 43 b9 a6 a0 50 4d 98 65 82 2c 20 26 f0 25 a9 82 26 99 24 7f 93 d4 84 fa f5 49 b5 9a 20 ab 7c 19 9f 3f 34 c9 78 94 b3 27 63 51 60 27 93 6b e9 4f 4d e0 25 7d 5d af f7 e9 3f 99 57 93 74 81 02 d5 a6 f4 fb fa c4 5e b5 29 e3 52 63 95 7e a5 2d 7f 7d d3 bd cb 35 05 22 72 0f 0a c0 d5 6f 2f f7 e8 0f 27 52 56 c6 27 52 cf 4b e0 47 01 92 72 f4 14 84 29 f0 11 20 92 32 0a 02 05 e4 94 c4 e9 13 89 eb 26 a0 a7 80 50 ea 08 30 89 a4 1d 7f 38 93 32 0a ba a4 4f 91 02 51 05 68 2a 5f 39 84 0a d6 a4 2d 55 5e 52 d5 f6 eb d0 e7 Data Ascii: 4 \<<h%@(.3;xtz$'nH OBA/e.PW)Lh'$ QCPMe, &%&$I \|?4x'cQ`'kOM%}]?Wt^)Rc~-}5"ro/'RV'RKGr) 2&P082OQh*_9-U^R
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 2a b8 3c c2 c0 c1 fa 74 f6 f7 cf e0 e8 a8 02 3e 5e e8 e3 9f 4e 4d 81 1f 6c 86 df 1e 86 1f 6c e0 c9 be 21 ec 18 9b c3 91 a9 56 ae 2e ac e5 e4 44 37 17 e7 56 f3 6c ef 18 3e 3b 3a 8e 5f 7f 34 07 5e 6c 84 c7 2b f9 ed 85 e9 fc f1 da 62 b8 b3 8e 7f 39 b3 90 4f b7 8c 67 db e0 22 d6 37 64 73 60 8c 8d fd 63 4c 9c 68 71 72 75 51 25 3f dd 3f 9d 5f ee 9b c5 c9 51 76 b6 fb b2 d8 5f 56 c0 6e 5b a6 e6 0e ee 31 65 72 d4 5d c0 09 5f b1 06 85 c7 dc c5 1c f7 18 38 51 6a e7 64 99 93 13 1e 07 47 ec 66 4d 87 1d 66 0e ba 2c 1c f6 da 39 5c ea e4 90 cf c1 01 71 12 bd 2e f6 3b ad ec 71 da d8 53 62 67 9b c3 c8 36 a7 89 4d 2e 23 6b 6c 05 6c f0 1a 59 66 cd 65 a9 23 9f 65 de 62 66 39 72 99 e9 29 60 6d 73 0d 07 17 8f e7 f2 ee 25 6c 5d d4 cc de 95 93 58 36 a9 86 7b c7 d6 72 6b df 52 3e Data Ascii: *<t>^NMll!V.D7Vl>;:_4^l+b9Og"7ds`cLhqruQ%??_Qv_Vn[1er]_8QjdGfMf,9\q.;qSbg6M.#kllYfe#ebf9r)`ms%l]X6{rkR>
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 39 90 a1 b3 92 99 bd c6 c2 8a 8d e5 cc 9e 63 a1 b6 32 8a 82 9c 76 14 17 75 24 31 eb db c4 eb fe 11 d3 a0 6e 34 2d 88 65 f8 f2 44 46 2c 4f a4 79 79 22 c3 96 c5 33 78 49 ac 96 5f 3d 3d 42 03 5d 7d 43 37 72 3c 1f 90 6e 7e 97 4c c3 fb 18 5d bd b0 79 03 29 b2 74 23 b3 f0 7d b2 8b db 93 a5 6b 4f 72 7e 3b a2 d3 de d5 40 50 9c 41 59 3b 28 30 98 94 db ea 0a ca 9a c1 ec e2 00 f2 8d fd 34 00 17 08 2c ad 4e d3 d6 0f ba bc f1 58 4a 22 b4 30 5e 0d c4 3c 51 14 9a 83 48 cb eb 41 d2 4b 77 30 3e a3 07 11 c9 5d 08 89 ef 40 9f c8 77 e9 19 fa 7d ba 07 7f 57 73 08 7b 45 be 45 ef e8 77 da 80 50 d6 10 0a 10 8a 1b 29 fd 89 23 ac fd c1 c0 19 f3 12 08 7b 93 96 d3 1d 81 d4 ec e2 9e 14 98 fb a0 b3 07 69 00 e8 ae 4a 40 a4 c6 61 f7 c5 51 68 8d 24 29 3b 80 9e 21 6f d3 b5 df 5b 1a 10 ca Data Ascii: 9c2vu$1n4-eDF,Oyy"3xI_==B]}C7r<n~L]y)t#}kOr~;@PAY;(04,NXJ"0^<QHAKw0>]@w}Ws{EEwP)#{iJ@aQh$);!o[
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 81 3e 69 4b da 11 b8 52 92 3c 05 84 2a 9c 53 ce 15 9c c9 1f 2b 94 a4 3f 19 83 06 5a 7e 60 26 7d ab ba fe 30 29 6d 88 14 78 ca 35 91 b4 2f 63 96 be d5 38 24 15 d8 94 f6 a5 1f e9 53 a0 50 e4 df bf b6 ce f6 25 1c aa 7b 57 6d 29 10 95 f1 a9 fb 54 ef a3 3f cc cb 7b a9 de c9 d7 df 47 f5 ce aa f4 f5 e7 ab 9e 8b a4 f2 ac e4 f9 c9 73 93 77 41 ea a8 7f 0f 72 2c 7d 4a be 48 bd 33 9a 43 a8 80 50 d6 12 fa 87 8d 2a 18 14 10 f4 97 00 a2 82 42 71 dd fe 1a 10 2a 28 14 20 7c 1d 0a 95 6b a8 d6 17 fa 87 90 2a 20 54 e1 a3 5f 07 87 12 22 aa a0 50 8e ff ab 0e a1 80 9f 48 41 94 82 27 39 57 d7 fc a1 50 01 61 db 06 33 7e 20 a8 20 d0 3f f5 0f 17 fd da f5 84 7f c5 21 94 fe be 49 02 a9 32 4e e5 fe c9 f8 d5 bd fc 2d 40 98 61 0a d6 40 50 d6 f5 b5 ea ab 8d 65 04 0a 53 8d bd bf 0a 1b b5 Data Ascii: >iKR<S+?Z~`&}0)mx5/c8$SP%{Wm)T?{GswAr,}JH3CPBq( \|k T_"PHA'9WPa3~ ?!I2N-@a@PeS
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: dc 05 4c ad 30 b0 70 78 19 ab a6 0e 60 50 69 0e c6 b4 00 06 97 e5 52 6b 8e a3 28 aa 3d cb 46 57 30 d6 95 c5 64 4b 1a d3 ad 19 9a a6 59 d2 99 6a 4c d7 9c 31 49 65 fd dc 4c 6b ae b6 76 50 42 26 c7 ea 52 34 18 14 28 d2 36 53 d1 a5 68 30 38 a0 20 ee 6b 81 70 be ad 80 a3 b5 65 dc 6c a8 e7 5a 89 97 87 a5 d5 7c 56 df c8 c3 f2 2a 3e a9 6d e0 8b 01 83 f9 d8 e6 e4 92 c1 c8 05 9d 9e 4b 26 13 e2 0e 2a 18 bc 55 55 ce c5 12 07 67 1c 16 ce ba ed 1a 0c 9e f2 d8 39 e9 b5 73 c2 63 63 bf 5d cf 3e a7 81 83 65 36 0e 55 3a d9 5d 66 61 bb cf c4 f6 32 33 eb 65 53 1c 43 3a b3 73 e3 98 99 1d a3 69 96 84 87 e6 c4 30 31 23 9c f1 19 61 4c c8 8e d6 5c c1 c9 05 f1 4c ca 8f 6b 55 41 22 13 8b 92 98 a2 4f d5 d6 0e 0a 0c 4a 78 ac dc bb 84 89 36 17 25 6b e0 3b 38 37 96 01 59 51 6d 30 58 97 Data Ascii: L0px`PiRk(=FW0dKYjL1IeLkvPB&R4(6Sh08 kpelZ\|V>mK&UUg9scc]>e6U:]fa23eSC:si01#aL\LkUA"OJx6%k;87YQm0X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49825	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:06 UTC	2643	OUT	GET /images/custom/exit-popup.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:06 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:06 GMT Content-Type: image/png Content-Length: 215779 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-34ae3" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4969 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MI%2BU5HQqFCNHdmQfgG6cM2mzx5FJlq%2B3BV5u4vkVheYJ%2FLpfm6SbcYTggM%2B5x7%2FbrwJkVrkwfuVdvOCLL18GwuGYQ1XgbUbhHWqny80ccqFuRi38zOfPV73xlHK0c03I8ck%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe271b58b2de94-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1712&min_rtt=1688&rtt_var=681&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=3221&delivery_rate=1551540&cwnd=235&unsent_bytes=0&cid=b7cad1092cd70985&ts=119&x=0"
2025-01-10 16:48:06 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 9d 00 00 01 10 08 06 00 00 00 f2 13 cf a5 00 00 20 00 49 44 41 54 78 01 ec dd 77 b4 65 59 55 ef 71 04 01 15 51 0c 28 06 e8 ae ba 75 ef ad aa ee 06 13 26 10 13 2a 26 8c 18 00 15 c5 84 8a 20 66 09 06 0c 80 01 15 c1 8c 08 46 c4 80 81 68 40 31 60 9b 51 90 6e 50 82 36 43 50 31 00 4a 18 b8 df f8 ec f2 5b cc b7 c7 a9 06 df f3 af 5b b7 c6 98 63 ad bd c2 5c 73 cd 35 c3 ef ac 7d ce ad eb 5c e7 3a d7 59 2e 66 7a 93 37 79 93 e5 e6 37 bf f9 4a b7 b8 c5 2d 96 77 79 97 77 39 4f ef fc ce ef bc 44 ef f4 4e ef b4 6c 49 df 1c ff ae ef fa ae 0b d2 66 ec 3b be e3 3b 2e 37 bb d9 cd d6 ba 36 eb 58 43 d9 58 3c 8c 35 6e 92 b9 a8 be 77 78 87 77 58 fb f1 69 0e 3e 67 cf 9e 5d de e7 7d de 67 b9 dd ed 6e b7 bc ff fb bf ff 5a 7f Data Ascii: PNGIHDR IDATxweYUqQ(u&*& fFh@1`QnP6CP1J[[c\s5}\:Y.fz7y7J-wyw9ODNlIf;;.76XCX<5nwxwXi>g]}gnZ
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: cf d3 27 7f f2 27 af fb b0 27 f4 29 9f f2 29 eb b3 3d d8 cb c7 7c cc c7 2c 77 bc e3 1d d7 79 1f f9 91 1f 79 9e 0f 5e fa 3f e3 33 3e 63 f9 ec cf fe ec e5 f3 3f ff f3 97 7b dc e3 1e eb 5c 73 ee 7f ff fb 2f 8f 7b dc e3 96 9f fb b9 9f 5b 1e f3 98 c7 2c 8f 7c e4 23 97 47 3f fa d1 cb 63 1f fb d8 e5 17 7e e1 17 d6 e7 fb de f7 be cb 17 7c c1 17 2c 5f f4 45 5f b4 7c c5 57 7c c5 72 cf 7b de 73 b9 fb dd ef be dc ed 6e 77 5b ee 7a d7 bb 2e 1f fb b1 1f bb ee c3 39 d1 97 f2 e4 c9 93 cb a5 97 5e ba 92 b3 a4 cb 49 f4 6c 2c 1d d8 b3 33 22 27 1d d0 85 73 51 66 27 ca 0f fe e0 0f 5e 3e f0 03 3f f0 7c 9b b3 36 97 6e c8 f2 59 9f f5 59 ab 3c 9e ed ed 0e 77 b8 c3 42 17 ea 64 a4 53 fa f0 6c 0c d9 e9 e4 73 3f f7 73 cf ef ef f3 3e ef f3 56 9b b1 bf 2f fd d2 2f 5d 1e f0 80 07 2c 5f Data Ascii: '''))=\|,wyy^?3>c?{\s/{[,\|#G?c~\|,_E_\|W\|r{snw[z.9^Il,3"'sQf'^>?\|6nYY<wBdSls?s>V//],_
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 82 cd c0 e7 31 e8 3c a2 37 a2 0e 38 d0 c8 a1 04 99 3e d1 a9 23 fd 11 50 58 bd 79 8d ab d4 3e 41 a4 67 3c f1 e7 94 39 6f c0 b3 f1 01 ce ca 40 67 20 73 26 4b 09 ce 3c 01 4a 70 09 a4 05 d4 04 1a 0e 99 83 09 6c 05 db 02 74 81 58 70 d3 9f 03 72 be 80 21 10 27 01 48 38 80 66 00 03 90 e3 cc e6 00 30 80 8a 3e e0 4d 92 21 17 67 b4 86 00 32 d7 e0 ec 64 23 37 f0 28 10 5b 07 b0 28 41 b9 19 41 f6 33 a9 7d 06 42 25 39 c0 c9 8d 9e 3a 1e e6 91 49 12 93 cc f4 03 60 80 26 f9 94 e4 dd 92 76 c0 00 a0 34 0e a8 42 dd 7c 02 9b ea da dc 02 02 51 c0 a2 d2 4d a7 b5 8c f9 ce ef fc ce e5 29 4f 79 ca 7a 0b e7 c6 13 fd d2 2f fd d2 12 e8 74 33 e7 b6 cf 1c 00 cd cd dd 57 7e e5 57 ae e0 0e c0 73 53 48 76 67 20 28 15 a4 d4 d9 4e 76 c3 9e b2 47 75 41 8c 9e 9d 39 9d d1 01 7d 01 17 74 22 c9 Data Ascii: 1<78>#PXy>Ag<9o@g s&K<JpltXpr!'H8f0>M!g2d#7([(AA3}B%9:I`&v4B\|QM)Oyz/t3W~WsSHvg (NvGuA9}t"
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: c6 a7 5c 4e 56 60 ca d1 38 42 4e c0 d8 0b 1a 1c 88 23 73 74 8e 29 e0 70 5e fc 80 1f 49 04 30 73 c3 e4 7b 88 00 03 80 05 c4 48 1e 80 47 af 5f 25 28 41 ad bd e2 cd 99 67 10 11 10 0b c0 05 c7 40 27 d0 28 e9 01 97 4a 89 68 52 a0 52 49 36 65 37 29 3d 93 ad 1b 95 80 25 30 08 34 92 5d 02 d5 5e 9f e7 6e 3d 25 56 e3 00 04 e4 19 08 05 c8 80 ac 6e f5 80 44 c0 06 90 02 b8 8c b3 07 e3 7c 7f f3 b7 7e eb b7 d6 1b 38 df e3 fc c5 5f fc c5 e5 57 7f f5 57 d7 d7 ed 5e b9 ff e8 8f fe e8 3a 17 70 75 8b 08 a4 e1 e1 19 91 d1 19 96 18 0b 7a 05 6e 65 c9 b2 00 26 a8 39 c3 ce 9a 5d a0 82 9f 20 eb 6c e9 9b 8d d0 11 d0 67 ef d6 b3 57 e7 e8 7c dd b6 ba b9 24 53 fb 04 8c 01 4e 60 12 b0 04 3a d9 83 fd f6 5a dd 1c 37 98 bd 5e 07 42 b5 19 6b 0c 3d 5a 33 30 e2 5c bb f1 29 39 94 68 d8 1f d9 Data Ascii: \NV`8BN#st)p^I0s{HG_%(Ag@'(JhRRI6e7)=%04]^n=%VnD\|~8_WW^:puzne&9] lgW\|$SN`:Z7^Bk=Z30\)9h
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: fe ee ef ae b7 6f 6e e3 7c 9f 53 9b 1f 17 01 9d df f7 7d df 77 1e c0 79 6d ed 55 31 d0 e9 96 93 8e e9 db d9 39 ff 80 26 7d 66 a3 e9 56 f0 d2 cf 16 d8 54 41 d0 f9 f6 49 da d9 97 00 9d cb 3c 67 c9 87 ae e8 29 d0 09 40 02 8e 9e e9 8c 2e 94 9e bd 16 07 2c e9 c2 57 00 e8 85 ee d4 f5 01 22 f4 00 88 d0 7b 40 93 4d f8 90 82 fa f0 a0 74 5e 25 3a ba 23 4f 49 86 0d 0b d6 ed 8f 3e 24 42 49 83 9d d0 93 bf 0a 40 af fe 22 80 d7 ec 2f 79 c9 4b 96 57 be f2 95 8b 5f b1 d3 29 50 64 0d 73 03 93 74 b8 0b 24 d6 6e dc bc e9 6c ac d2 98 c6 d5 1e d0 8c 7f e3 3c 07 3a d9 09 d0 e9 56 18 ef 12 8d 73 ca 17 c9 58 72 ca 5f 4b c2 9e f5 f1 21 a4 de 18 f3 f8 97 b2 b6 92 68 25 bb 88 b4 19 bf 25 ed 08 0f a0 87 ae d3 b7 98 20 16 38 3f 3a 65 13 c8 6d 27 db 09 64 02 9a ea 81 cb 6e 3c 81 ce 40 Data Ascii: on\|S}wymU19&}fVTAI<g)@.,W"{@Mt^%:#OI>$BI@"/yKW_)Pdst$nl<:VsXr_K!h%% 8?:em'dn<@
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: aa e7 ec 35 bb b6 1f e7 41 ef 3f f3 33 3f b3 ea f6 cf ff fc cf d7 57 eb 7e 48 f4 dc e7 3e 77 bd 4d 06 f2 c8 42 97 f9 60 be 45 87 74 da 33 1d 23 cf c6 f2 5d 65 a4 7d 52 ed ca d9 9e 7f 6a f7 fd 4d 3f 24 9a 37 9d d6 0c 14 92 ab 84 56 a9 8f af a0 c6 29 6b 57 d2 83 7e 49 0d 0f cf 91 7e 67 ae af 39 c6 f0 75 7a cc 56 f4 59 b3 be 3e c0 d4 a6 34 be 75 24 c7 12 be f3 72 d6 ec 81 ef 01 95 dd 72 06 48 d9 54 60 b3 d2 f9 b2 3f f2 91 83 8d ce 18 41 16 ed c9 54 7c f2 5c 9b 92 5d 9b c7 ce d5 d1 76 9e 71 ed b5 b9 f6 84 e7 ec eb 79 b6 c5 4b db d4 d3 96 9f b9 28 19 8c 9f 6b 78 ae 6f f2 dc ae 15 df 59 36 af 33 74 9e 13 7c 06 1c 03 62 f9 9c 38 1a 10 cb c7 f3 f7 da 03 61 ca ce 74 f6 01 6a 81 53 31 db da ed 93 ec e9 8c 8c 9e 77 91 bd e8 af ac ee 39 1e f8 a4 af 6c 8d 1d b3 0f 7b Data Ascii: 5A?3?W~H>wMB`Et3#]e}RjM?$7V)kW~I~g9uzVY>4u$rrHT`?AT\|\]vqyK(kxoY63t\|b8atjS1w9l{
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: e7 f8 19 eb 59 cc d1 16 00 05 68 9c 3d bf 70 7e 6c 2b ff c9 87 d8 0c 5b e8 3c 5a 37 20 62 ff d6 4c 27 ca 49 c9 d3 18 f3 8b a1 e9 6f ce 35 ce 9e c8 1b a5 8b c9 77 57 bd b9 c6 37 c7 1a ad 53 3f be ea da c9 33 79 6d f7 37 e7 9a 83 76 c9 3b d7 c3 a3 75 e3 b7 8b 4f e7 ed 4c 50 37 84 e2 83 b3 e1 cb 74 af 0c 7c 8a c3 13 84 02 70 80 59 60 cd 5c 7e ac 4d ac e9 03 ce dc 73 fa 6f ef e9 a5 bd b5 bf f4 d3 78 e5 dc 97 ba 7d b3 dd 62 17 7b 0b 74 92 41 2c da ca 1b f8 24 ab 31 13 78 aa 23 ed c8 be e8 86 4f d0 57 7a ae 4c 66 a5 3d 1a 93 2f a9 67 43 95 cd ab d4 9e fc 93 7f e7 95 6d f4 9c ae cc c1 e3 18 74 5e 44 b7 9f bb 5e af 4b 1a 93 24 1a 09 48 e9 d6 51 02 03 08 24 19 cf fe e0 b3 ba 84 e2 bf b9 93 24 18 15 1e fd b7 7b dd 50 05 c6 18 21 60 da 2d 26 70 86 3f a3 c4 c7 38 25 Data Ascii: Yh=p~l+[<Z7 bL'Io5wW7S?3ym7v;uOLP7t\|pY`\~Msox}b{tA,$1x#OWzLf=/gCmt^D^K$HQ$${P!`-&p?8%
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 47 ea e9 21 90 30 f5 59 ff ae 32 1e 17 5a 6f 3b a7 f1 b5 93 17 91 bf 3d d8 87 ba 31 c6 b7 9f e6 b6 17 fd cd 35 27 da c5 cb 38 f3 ed 8b fe 22 cf fa f0 62 13 40 96 f8 21 36 03 98 13 64 06 34 f5 a9 23 75 be 25 56 3b 4f 73 27 a0 d3 16 70 a3 db f6 a0 9c f2 93 39 39 1a 53 bf f6 e4 4f cf 64 65 0b 01 42 fb d0 e6 d9 7a d6 9d 7b d8 82 4e 7d c9 29 1f 45 da ec c7 7c e0 95 5f b0 7b 7c e9 cc 1a 95 d6 ec 6c d4 d1 dc e3 94 35 7d 2b 1b 33 f7 d5 5e 77 e9 21 5d 19 83 3c 9b 7b 0c 3a 8f 38 c8 dc 7e 8a 90 28 02 84 ca 12 87 b2 e4 32 4b 01 01 f8 63 70 92 a6 5f 30 fb 41 89 3f 85 e3 6f 30 0a b0 92 0d 83 02 10 24 73 20 51 f0 66 60 6e 3f 18 a4 84 e9 66 4c f2 f7 df e5 b9 25 b5 be 64 21 c8 5b 47 e2 32 4f 5d 9f ef 88 71 08 3f 3e 01 a2 f0 e5 64 9c 8b 43 71 84 80 26 1e ea 51 81 8c 0c 19 Data Ascii: G!0Y2Zo;=15'8"b@!6d4#u%V;Os'p99SOdeBz{N})E\|_{\|l5}+3^w!]<{:8~(2Kcp_0A?o0$s Qf`n?fL%d![G2O]q?>dCq&Q
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: f3 2c 1b 5f db b5 f1 6b ec ae d2 fc d9 1e bf da 66 bf 35 02 91 ca 80 57 63 e8 0a 99 ab cd 78 63 b6 e3 5a 23 7e f1 a2 77 6d ec 03 80 02 04 91 33 a3 43 7c f1 32 de 99 6a d3 4f c7 f3 96 33 80 29 b6 03 6d 4a b9 cc 5b 0d b6 06 d0 99 23 06 4d a0 29 3f 4c c0 c6 8e 22 36 60 6f c9 aa 24 ab bd 68 cf a6 95 c6 92 0d 2f 60 d0 1a ed 43 7f 73 8c b1 4f 63 d8 38 99 c8 3a e5 6f 5f 64 46 fa 51 cf e6 98 4b 47 d6 4b 5e eb 64 f7 ca 68 7b 3e 9d 45 32 19 97 ed b7 67 7d f6 db 9e ed bb bd cf b3 9e 6d b5 2b b5 4f d0 d9 6b f6 ed e5 d8 11 7a be b8 7f 48 e4 20 01 3d 24 58 57 57 96 60 24 14 cf 82 b2 64 22 11 b8 c9 94 90 fd 79 16 37 02 8c df 4d 90 40 ca 49 80 52 8e f4 ac 67 3d 6b 05 1e 78 e3 e3 66 d2 77 d4 80 51 af 48 81 32 ff a7 b5 d7 b1 02 b3 db 04 60 b1 c4 61 3d 75 37 14 d6 74 33 e6 Data Ascii: ,_kf5WcxcZ#~wm3C\|2jO3)mJ[#M)?L"6`o$h/`CsOc8:o_dFQKGK^dh{>E2g}m+OkzH =$XWW`$d"y7M@IRg=kxfwQH2`a=u7t3
2025-01-10 16:48:06 UTC	1369	IN	Data Raw: 9c f8 94 d2 73 fe 98 2f 69 13 6b c4 1d 71 49 e2 4e a6 a9 23 f2 e9 b3 46 ed 95 fa b4 d7 ef 79 b6 cd 76 3a 8d bf 72 3e ab e3 89 e2 a1 6c 9d c6 c7 db 9a ea da 6b 53 56 bf d0 ba d6 d9 8e 33 76 52 bc ad dd 9e 93 db fc 48 1b 20 85 9c 85 67 e3 9d bf 31 62 33 70 27 0e 3b fb 2d 01 64 c5 7a f1 59 3c 06 3a bb ed 0c b0 05 3c ad d1 b9 e3 8d 9c 9d f8 af 9e 8c e9 90 0c e6 e8 13 cf 8c 63 23 f8 91 09 01 9b e4 72 33 e9 d9 98 78 b2 c5 80 6f a0 d3 38 f9 64 82 4b 75 a4 bd 3e 65 3c d9 3b 9e f9 5a 7a ed 8c ca 97 da ed 81 dc 9d a3 b6 e6 75 2e 9e 51 e7 d8 58 fd 8d c1 63 cb 4b 5f 6b 4c 5d 91 23 3f 9b a5 fa 11 a5 23 bb b1 37 ea c0 26 e8 04 ce 80 bd 40 e7 4c 20 81 4e fd 8c 04 88 e4 b0 92 c1 d3 9e f6 b4 35 21 08 cc 8c db 18 37 09 1c ad d7 eb 6f fa a6 6f ba f6 79 fd ee d5 6b df e1 94 Data Ascii: s/ikqIN#Fyv:r>lkSV3vRH g1b3p';-dzY<:<c#r3xo8dKu>e<;Zzu.QXcK_kL]#?#7&@L N5!7ooyk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49832	35.190.80.1	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:06 UTC	542	OUT	OPTIONS /report/v4?s=FHiR9bvlUNxCArvC%2B6ALfanaX3xLpbGrHs3AacM2sVUHcVEOYf%2FBfqq%2BQFn4jdDkkSmbmy0Slo4sYXwyLK9Vh%2FJUURCvyo7cBp%2FqAYltI0rgNJPwUKQ5i%2FQY8D7QDxBGqCE%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://nervedefend.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:07 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 10 Jan 2025 16:48:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49834	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:07 UTC	2338	OUT	GET /images/custom/image5.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:07 UTC	898	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:07 GMT Content-Type: image/png Content-Length: 875993 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-d5dd9" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4970 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MRVU427vVI8iaBSe90gi5NfYJ23gXX9yqit5A%2FrMNWX8SYyDsN%2F3KPd9gzxEGDyafnfXDQOYuB0UDe1Kz2PCNOLE0FUsL70WEsrOKueRZ8pIZtnifWMwcxSSN%2BOL52Rp7Js%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe271c4da0efa5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1978&min_rtt=1971&rtt_var=754&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2916&delivery_rate=1438423&cwnd=203&unsent_bytes=0&cid=10d66f06f48f1e07&ts=117&x=0"
2025-01-10 16:48:07 UTC	471	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 a8 00 00 04 38 08 06 00 00 00 b4 59 82 67 00 00 20 00 49 44 41 54 78 9c ec dd 07 94 64 f7 75 df f9 df 0b 95 3a 4e 0e c0 00 20 00 92 88 04 11 88 c0 1c 25 06 11 24 c5 64 59 5c 59 b2 4c c9 6b 59 59 5e 2b f8 78 2d 7b ed a3 23 2b 71 b5 da 55 a2 a8 48 51 22 4d 8a 51 cc 04 41 30 00 04 c5 9c 31 18 80 18 0c 26 cf 74 aa f8 d2 9e fb 7f ef 55 57 57 57 75 f7 0c 80 16 c2 f7 43 d5 e9 ea aa 97 eb b5 80 83 5f dd 7b bd 2c cb 32 01 00 00 00 00 00 00 00 00 00 00 f0 30 f3 b9 c0 00 00 00 00 00 00 00 00 00 00 80 cd 40 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR8Yg IDATxdu:N %$dY\YLkYY^+x-{#+qUHQ"MQA01&tUWWWuC_{,20@@MA@MA@
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 00 00 00 00 00 00 00 00 80 4d 41 40 0d 00 00 00 00 00 00 00 00 00 00 d8 14 04 d4 00 00 Data Ascii: MA@MA@MA@MA@MA@MA@MA@MA@MA@
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: ce ce ba 0a eb 5d bb f3 b0 7a d7 9e 3d da b3 67 af 0b b1 cf 39 e7 1c 9d 7b ee 3e ed 3d e7 1c 17 5a 03 00 00 00 00 00 00 c0 63 11 01 35 00 00 18 cb c2 55 9b fb 6c 41 f4 3d 07 0e e8 c0 81 bb 75 df 7d f7 e9 e8 91 07 5c 08 7d f4 c8 11 9d 38 71 5c a7 4f 9f 76 15 c7 d2 72 85 b3 fd 9e 87 c0 9e 0b a4 97 83 e8 4c 65 ee bb 56 38 ed 5e 2d 02 e4 e1 1c 79 b9 b2 59 ae fa b8 56 ab c8 f3 3d 79 99 e7 aa a8 a3 38 52 64 d5 d3 6b 9c 5b 19 92 0f 5b 1d 64 2f 6f 65 5c a0 3d ee 1c 06 59 35 f7 a9 53 a7 dc e3 ae bb be 9b ef c7 f3 d4 a8 d7 5d 6b f0 5d bb 76 b9 b0 7a d7 ee 3d da 77 de 3e 9d 77 fe 05 ba f8 e2 8b 75 fe 05 4f 70 ef 51 65 0d 00 00 00 00 00 00 e0 b1 80 80 1a 00 00 f4 95 81 f4 5d df fd ae be f1 f5 af e9 9b df fc 86 ee 3d 70 c0 55 4c 9f 3a 75 d2 55 45 db 8c 68 0b 5b 07 db Data Ascii: ]z=g9{>=Zc5UlA=u}\}8q\OvrLeV8^-yYV=y8Rdk[[d/oe\=Y5S]k]vz=w>wuOpQe]=pUL:uUEh[
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: 00 00 80 87 8a 97 9d 4d df 49 00 00 f0 88 60 61 6a b7 db d5 e2 e2 a2 6e f9 c4 c7 f5 f7 6f fb 5b 37 57 ba dd 6a c9 f3 3d d7 22 7a b9 65 77 36 10 44 97 d5 b7 f9 7b 16 18 0f 06 a0 16 be 5a 05 f4 b0 c1 b0 f4 6c 2b 84 07 0d 57 1d 7b f2 b4 75 6a 42 3f f8 03 2f d2 d5 d7 5e a9 f7 7d e8 63 ba ed 73 5f 52 bb dd 2b 17 50 10 f8 2e 2c f6 c2 50 53 b3 33 ba fa 9a 6b f5 e2 97 bf 42 5e ad a6 4e 9c a8 db e9 a9 1b f5 d4 cd 12 75 d2 58 61 9c ea e4 c9 13 ba ff c0 b7 75 df bd f7 ea d8 f7 ee 57 d6 e9 aa de 98 d6 96 73 ce d7 ce 0b cf d3 b6 ad 5b b4 63 db 76 55 6b 35 1d 3b 76 54 27 1e b8 4f f7 df 7b 40 c7 ee 7f 40 59 bb bb e1 73 19 77 bd d6 5b 67 5c d8 3c d8 0a 7d dc b5 4e 92 74 dd 65 ca cf d2 de f6 fd 50 97 5e 76 99 6e 7e c5 2b 75 f3 2b 5f a5 27 5c 78 a1 ea f5 3a ad c0 01 00 00 Data Ascii: MI`ajno[7Wj="zew6D{Zl+W{ujB?/^}cs_R+P.,PS3kB^NuXauWs[cvUk5;vT'O{@@Ysw[g\<}NteP^vn~+u+_'\x:
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: 3a 7d 5a 73 0b f3 2e d8 b7 eb 63 eb d7 2a a1 6a f5 9a e6 e6 52 b7 3f 7b 3d 8a 63 d5 1b 75 d9 2b b5 6a a8 46 10 28 b0 a0 3c 4b 5d 38 1d d8 29 04 9e e2 24 ff 92 c0 dc fc bc 96 7a 91 ea b3 db b4 74 fc 88 d2 4d 6c 3c 53 ce 8e 5e eb ba ae f5 39 9d cd 67 38 78 5f 65 59 aa 93 27 4e e8 83 ff f8 01 7d f2 96 4f e8 c9 97 5c a2 67 3e eb 39 ba fe 86 1b 5c 0b f0 f3 2f b8 40 95 4a e5 8c f7 01 00 00 00 00 00 00 e0 f1 8d 80 1a 00 80 47 80 43 87 0e e9 ce 3b ee d0 e7 3e f7 59 dd 79 c7 e7 f4 95 2f 7f 59 ed 76 67 28 78 1e df 92 bb 0c 33 ad 9a 78 9c 33 09 2c cf b4 7a 5a eb 54 ff ae 0c a9 3d 85 41 4d fb 9e 74 b1 2e bf e9 46 cd 9c ff 04 45 7e a0 fb bf f1 15 dd 75 fb 1d 5a 3c 76 42 b3 5b b6 e8 8a 6b 9e aa 4b ae be 4a 49 75 5a 51 16 c8 d5 ec a6 79 85 b3 e7 e5 2d c8 93 6e 4f a7 4f Data Ascii: :}Zs.c*jR?{=cu+jF(<K]8)$ztMl<S^9g8x_eY'N}O\g>9\/@JGC;>Yy/Yvg(x3x3,zZT=AMt.FE~uZ<vB[kKJIuZQy-nOO
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: db 7e 8e 6a fd 3c 6c 5c 05 ee a8 b0 72 23 73 a3 c7 ad 6b 95 d2 9e bd 1e fa 9a dd b3 4b cf 79 e9 4b 74 f5 f5 4f d3 74 63 42 5e e6 b9 c0 b9 15 45 9a b7 56 d9 a9 b4 65 66 5a 5b 67 a6 5d 95 f1 d2 52 d7 05 d8 16 e6 56 82 40 33 d5 aa 5a ed b6 e2 5e 4b 71 25 54 6c 81 76 bd ae 46 ad ee ce 37 8a 22 2d 2c b5 f4 bd 43 87 75 f2 f8 09 75 6d a6 74 d4 53 e6 fb ae 5a 77 df de 73 b4 7d db 36 57 fd dc 6a b5 5d 90 6d 73 a9 4f cd 9d 56 dc e9 2a 4d 52 f9 a1 ef da 7f db 17 05 fc 2c 55 d4 5a d2 e2 dc 29 55 bc bc f2 7a 72 2a 9f 33 6d 26 1b 75 4d d4 6b f2 b2 44 9d 6e a4 aa 55 70 5b 40 be b8 e0 5a 87 6f dd ba 45 8d 2d b3 9a 68 4c a9 56 9b d0 a9 a3 87 15 b7 3b d6 84 7c 64 d9 f4 46 66 79 6b 9d 0a e7 8d 7c a7 70 a3 fb d9 c8 fa 6b 85 d5 1a 6e 31 9e 49 9d 76 47 df fc c6 37 74 f7 fe bb Data Ascii: ~j<l\r#skKyKtOtcB^EVefZ[g]RV@3Z^Kq%TlvF7"-,CuumtSZws}6Wj]msOVMR,UZ)Uzr3m&uMkDnUp[@ZoE-hLV;\|dFfyk\|pkn1IvG7t
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: 60 5b b3 13 c7 ea 74 da ae 62 d6 2a 8e 43 0b 5a 8b 10 d4 85 ee 99 a7 6e 37 56 b7 d7 73 61 b2 55 42 67 4a 55 ab 56 14 7a be bc 24 d5 62 ab a5 c5 76 47 8b 4b 4b 3a 3d 3f e7 e6 52 b7 9b 4d 17 4c f7 7a 91 0b 89 9f f8 a4 27 ba 6a 74 9b e3 6d ad bf e3 28 d6 96 a9 69 ed d8 be dd 85 d3 16 ee f7 92 38 7f f4 7a ea 46 91 ab e0 0e 2b 79 cb ee 24 cd d4 e9 45 6e 16 b6 55 79 5b d5 b5 6d 77 62 62 52 be 17 b8 6d 9e 38 7d 5a 27 4e 9d d2 03 0f 3c a0 b9 b9 39 57 f1 6b d5 da 76 d1 4f 1e 3b e1 da 92 5b 05 f5 d4 54 43 8d c9 29 85 d5 9a ab 92 6f 2f 59 58 df d2 e2 91 07 74 e4 bb df 56 dc 6e bb fd b9 cb 35 e2 fb 03 63 e7 7b 0f 04 c5 6b 85 be a3 02 ea c1 6d 8e 9b 31 be 91 fd 8e bc 3f d6 09 a8 87 0d 7f c9 a1 7c 5e ad d6 f4 86 1f f9 11 fd c2 7f f8 8f ee ba 52 51 0d 00 00 00 00 00 00 Data Ascii: `[tb*CZn7VsaUBgJUVz$bvGKK:=?RMLz'jtm(i8zF+y$EnUy[mwbbRm8}Z'N<9WkvO;[TC)o/YXtVn5c{km1?\|^RQ
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: a9 9f d0 93 2e be 48 0d df 93 9f 78 8a 92 d4 85 ae 79 45 b6 a7 d0 ce 21 49 d4 8b 13 57 4d 6d 21 b0 05 d8 59 71 bc 56 89 1c b8 16 df 81 aa 41 e8 9e db fa 16 42 db 7a b6 9d 30 ac b8 e5 5c a5 73 96 a8 db ed a8 d7 8b 5d f5 74 bb d3 55 92 f9 aa 54 ab 8a b3 d4 05 c6 36 8b 7a 7e 7e de 55 42 db 76 2d c8 b4 70 da 7e da 72 d6 da db 8e ad ac 92 b6 16 e5 b6 9c b5 1e b7 56 d2 b6 0d 3b 8e b0 5a 71 a1 ad 05 da 56 e9 6d 55 dc 0b f3 f3 9a 9f 9b 53 dc ea b8 56 dc bd 24 52 b5 5a 75 21 b2 6b c9 ed 87 f2 ad 25 79 96 a9 d2 a8 bb 80 3d 6f fb ed ab b9 b4 a8 76 ab d9 3f 5f 65 cb 9f 69 c7 cd a2 6e aa d9 6b 6a d2 da 82 a7 a9 e6 4f 9f d4 e2 89 53 8a 5a 2d d7 ea 3c 1b d5 f3 7b 23 d6 59 af 0c ab ed 33 b5 80 3a cd d2 91 f3 af 1f 8a 80 7a 5c 05 f5 7a cb 8d 5b d6 5e db b5 7b 97 5e f1 ca Data Ascii: .HxyE!IWMm!YqVABz0\s]tUT6z~~UBv-p~rV;ZqVmUSV$RZu!k%y=ov?_einkjOSZ-<{#Y3:z\z[^{^
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: dd fa 49 cd cf cf 15 99 6a 36 14 a4 95 61 f3 ca 80 7a 75 35 6b 19 b6 ad ae ba 1e 5c 6e ad 70 af 0c b9 cb 60 7b d4 72 1b 35 18 26 96 eb 5a 38 39 3b 3b ab f3 9e 7a 99 9e 78 d9 d5 aa 6f db a1 e9 ed db d4 eb 76 35 55 ab 68 df 8e 2d 9a 69 4c e6 15 c2 51 e4 d6 29 e7 4b 5b ab ec c8 da 58 c7 f9 3c 6a 0b a6 2d a4 76 a1 6f 2f 72 cb d8 4c 68 57 9d 5c 54 a5 bb 4a ec 38 d6 a9 53 a7 dc cf b2 62 36 28 2a b2 5d 28 dd ed ba 87 3d 6f 75 62 37 ef 7a 7a 7a da 1d 67 5a 04 d7 ee 4c 2a 41 de ee db 5a ae 67 72 eb 5b 8b ef 72 1b 6e 36 76 90 07 aa 76 4c bd a2 c2 d9 85 c9 ed b6 9b d1 6c bf db fe 93 a2 35 b7 1d 93 cd bc b6 65 92 28 ce ab 9c 6d fe b6 b5 0e af 54 14 d4 2a 0a 53 37 40 3b 6f 0d 6e 55 db dd ae 3a b6 cd 5e cf ed bb 6c 0d 6e 41 b4 05 d9 bd 5e 57 bd a8 ed 66 4f 57 bd 40 61 Data Ascii: Ij6azu5k\np`{r5&Z89;;zxov5Uh-iLQ)K[X<j-vo/rLhW\TJ8Sb6(](=oub7zzzgZLAZgr[rn6vvLl5e(mT*S7@;onU:^lnA^WfOW@a
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: 63 f7 32 70 87 66 f9 cf 74 8d 56 f3 67 12 70 9f 89 6c c5 1f 61 aa bb ee ba 4b 47 df f2 66 7d f9 4b 5f d4 cf fc dc cf eb c5 2f 7d 19 d5 d4 00 00 00 00 00 00 c0 a3 00 01 35 00 e0 71 c9 aa 6c 3f 7d db 6d fa bd df f9 2d dd 79 c7 ed 5a 5a 5a 1a 98 f5 bc 3c 2b 7a 6d d9 8a e0 ba 0c 99 37 12 26 af 9e 3b bd 1c 78 6f b4 4a 7a 23 ad 98 d7 5a b7 d2 a8 ea 92 2b af d0 0d d7 5f af e9 a0 aa 2c ed a9 db 6d cb ab 4d 6a 7a 6a 46 4f 7c c2 05 8a 33 4f df b9 fb a0 da ad 96 8e 9f 3e 29 cf 9b d6 54 58 d1 e4 44 cd 9d 73 d7 2a a4 93 48 61 e8 bb 6a 68 17 4c 47 81 3b 17 37 87 3a 89 95 c5 49 de f6 db f7 d5 6c b7 5c 6b ee 7a a5 3a d0 42 dd 02 ea 5e bf 3a b9 9c 51 9d ff b4 47 5b dd 4e 53 95 4a c3 25 b8 71 9a a8 65 ed bf cb 0a ee a2 da d9 66 4f 97 01 75 6c 95 ef 16 16 5b 3b 6d 2f af da Data Ascii: c2pftVgplaKGf}K_/}5ql?}m-yZZZ<+zm7&;xoJz#Z+_,mMjzjFO\|3O>)TXDs*HajhLG;7:Il\kz:B^:QG[NSJ%qefOul[;m/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49828	142.250.186.78	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:07 UTC	835	OUT	GET /s/player/3ede36f2/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nervedefend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Rctl5ZNC77k; VISITOR_INFO1_LIVE=dEH-6bbwSQ4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSw%3D%3D; __Secure-ROLLOUT_TOKEN=CMyU3feu7vzFGBDG1ozezeuKAxjG1ozezeuKAw%3D%3D
2025-01-10 16:48:07 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 30890 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 15:52:57 GMT Expires: Sat, 10 Jan 2026 15:52:57 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 08 Jan 2025 05:15:48 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 3310 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:48:07 UTC	704	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 71 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 Data Ascii: (function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)
2025-01-10 16:48:07 UTC	1390	IN	Data Raw: 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 72 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6b 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 6b 7c 7c 22 22 29 2b 22 5f 22 2b 67 2b 2b 2c 6b 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 6b 2c 65 29 7b 74 68 69 73 2e 67 3d 6b 3b 72 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 Data Ascii: ;b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}function c(k,e){this.g=k;r(this,"descript
2025-01-10 16:48:07 UTC	1390	IN	Data Raw: 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 74 68 69 73 2e 6a 3d 21 31 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6d 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 67 3d 31 3b 74 68 69 73 2e 41 3d 74 68 69 73 2e 6c 3d 30 3b 74 68 69 73 2e 69 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 7a 28 61 29 7b 69 66 28 61 2e 6a 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 Data Ascii: n b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function y(){this.j=!1;this.h=null;this.m=void 0;this.g=1;this.A=this.l=0;this.i=null}function z(a){if(a.j)throw new TypeError("Genera
2025-01-10 16:48:07 UTC	1390	IN	Data Raw: 75 72 6e 20 6c 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 6e 65 78 74 28 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 72 6f 77 28 64 29 7d 0a 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 64 2c 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 65 2e 64 6f 6e 65 3f 64 28 65 2e 76 61 6c 75 65 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 65 2e 76 61 6c 75 65 29 2e 74 68 65 6e 28 62 2c 63 29 2e 74 68 65 6e 28 6b 2c 67 29 7d 0a 6b 28 61 Data Ascii: urn la(a,b)};this[Symbol.iterator]=function(){return this}}function na(a){function b(d){return a.next(d)}function c(d){return a.throw(d)}return new Promise(function(d,g){function k(e){e.done?d(e.value):Promise.resolve(e.value).then(b,c).then(k,g)}k(a
2025-01-10 16:48:07 UTC	1390	IN	Data Raw: 79 7b 66 3d 65 2e 74 68 65 6e 7d 63 61 74 63 68 28 68 29 7b 74 68 69 73 2e 6c 28 68 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 4d 28 66 2c 65 29 3a 74 68 69 73 2e 6d 28 65 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 41 28 32 2c 65 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 41 28 31 2c 65 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 69 66 28 74 68 69 73 2e 68 21 3d 30 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 65 2b 22 2c 20 22 2b 66 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c Data Ascii: y{f=e.then}catch(h){this.l(h);return}typeof f=="function"?this.M(f,e):this.m(e)};b.prototype.l=function(e){this.A(2,e)};b.prototype.m=function(e){this.A(1,e)};b.prototype.A=function(e,f){if(this.h!=0)throw Error("Cannot settle("+e+", "+f+"): Promise al
2025-01-10 16:48:07 UTC	1390	IN	Data Raw: 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 65 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 66 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 68 29 3b 7d 7d 0a 76 61 72 20 6c 3d 74 68 69 73 3b 74 68 69 73 2e 67 3d 3d 6e 75 6c 6c 3f 6b 2e 68 28 68 29 3a 74 68 69 73 2e 67 2e 70 75 73 68 28 68 29 3b 74 68 69 73 2e 73 3d 21 30 7d 3b 0a 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f Data Ascii: ;b.prototype.B=function(e,f){function h(){switch(l.h){case 1:e(l.i);break;case 2:f(l.i);break;default:throw Error("Unexpected state: "+l.h);}}var l=this;this.g==null?k.h(h):this.g.push(h);this.s=!0};b.resolve=d;b.reject=function(e){return new b(functio
2025-01-10 16:48:07 UTC	1390	IN	Data Raw: 28 6d 29 26 26 67 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 6e 65 77 20 61 28 5b 5b 68 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 6d 2e 67 65 74 28 68 29 21 3d 32 7c 7c 6d 2e 67 65 74 28 6c 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6d 2e 64 65 6c 65 74 65 28 68 29 3b 6d 2e 73 65 74 28 6c 2c 34 29 3b 72 65 74 75 72 6e 21 6d 2e 68 61 73 28 68 29 26 26 6d 2e 67 65 74 28 6c 29 3d 3d 34 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b Data Ascii: (m)&&g(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var h=Object.seal({}),l=Object.seal({}),m=new a([[h,2],[l,3]]);if(m.get(h)!=2\|\|m.get(l)!=3)return!1;m.delete(h);m.set(l,4);return!m.has(h)&&m.get(l)==4}catch(n){return!1}}())return a;
2025-01-10 16:48:07 UTC	1390	IN	Data Raw: 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 66 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 68 3d 6e 65 77 20 61 28 78 28 5b 5b 66 2c 22 73 22 5d 5d 29 29 3b 69 66 28 68 2e 67 65 74 28 66 29 21 3d 22 73 22 7c 7c 68 2e 73 69 7a 65 21 3d 31 7c 7c 68 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 68 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 68 7c 7c 68 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 Data Ascii: is.set(h[0],h[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var f=Object.seal({x:4}),h=new a(x([[f,"s"]]));if(h.get(f)!="s"\|\|h.size!=1\|\|h.get({x:4})\|\|h.set({x:4},"t")!=h\|\|h.size!=2)retur
2025-01-10 16:48:07 UTC	1390	IN	Data Raw: 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 66 2e 63 61 6c 6c 28 68 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 0a 67 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 67 7d 29 3b 0a 75 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 63 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 4d 61 70 3b 69 66 28 63 29 7b 63 3d 78 28 63 29 3b 66 6f 72 28 76 61 72 20 64 3b 21 28 64 3d Data Ascii: ype.forEach=function(f,h){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,f.call(h,m[1],m[0],this)};g.prototype[Symbol.iterator]=g.prototype.entries;var e=0;return g});u("Set",function(a){function b(c){this.g=new Map;if(c){c=x(c);for(var d;!(d=
2025-01-10 16:48:07 UTC	1390	IN	Data Raw: 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 67 3d 64 2e 6c 65 6e 67 74 68 2c 6b 3d 30 3b 6b 3c 67 3b 6b 2b 2b 29 7b 76 61 72 20 65 3d 64 5b 6b 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 65 2c 6b 2c 64 29 29 7b 62 3d 65 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 0a 75 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 7d 3b 0a 76 Data Ascii: a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var g=d.length,k=0;k<g;k++){var e=d[k];if(b.call(c,e,k,d)){b=e;break a}}b=void 0}return b}});u("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(f){return f};v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49835	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:07 UTC	2348	OUT	GET /images/products/prod7/1-bottle.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:07 UTC	898	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:07 GMT Content-Type: image/png Content-Length: 237735 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-3a0a7" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4970 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1GoBYmGLWATXBFUTnYvw1c7hMnlkkOhMf7LgEkGSZuIlt9%2BxlwUZep2tiHB5fU0FepRVdxBkXleNiN5uyNfY0NE1qx%2B8bTfSV0ihuhQt73HlWoNe%2FGug6SNdpofVvrXuxcM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe271eac4a7d02-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1987&min_rtt=1987&rtt_var=745&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2926&delivery_rate=1469552&cwnd=230&unsent_bytes=0&cid=5478a2ecb6a1d075&ts=130&x=0"
2025-01-10 16:48:07 UTC	471	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8d 00 00 02 58 08 06 00 00 00 9e bc ba d0 00 00 20 00 49 44 41 54 78 9c ec bd 09 b0 6d e9 55 1e b6 fe 73 ce 9d 5f bf a1 df 6b f5 a0 d7 ad 06 8d 6e d1 c2 6e 01 92 ac 81 c1 b2 02 82 04 30 65 a3 d8 01 ca 15 0a 02 15 88 8b aa c4 a9 90 04 92 8a a7 54 aa 5c 60 b0 ab 62 42 39 09 0e d8 54 31 b8 40 80 19 0c 66 32 08 2c 23 68 a9 a5 b6 a4 ee 56 8f ea d7 af df 74 e7 73 ce 9f 5a fb ec 75 df ba df fb d6 bf f7 b9 f7 dc 7b cf bd f7 ac aa 53 e7 9c bd ff 79 ff ff f7 ad b5 fe 61 27 99 b0 dc b8 71 63 d2 49 ee 4b 52 da 5d c5 9c 73 f5 8d d7 db 8a c6 2f c5 65 f7 fd 35 f6 1b af f9 f2 61 7a e3 fe 2f 95 89 b5 43 a9 7d 9a da ce ee d7 61 e6 45 64 49 44 96 45 64 9e 84 d5 eb 77 89 c8 82 86 4b 29 e9 ff b3 75 58 8b 1b 4a ce b9 5b Data Ascii: PNGIHDRX IDATxmUs_knn0eT\`bB9T1@f2,#hVtsZu{Sya'qcIKR]s/e5az/C}aEdIDEdwK)uXJ[
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: 96 cb 8f 0f ff d1 b8 76 dd 7e 5b fb 59 df b5 76 b0 f4 f4 5b af d9 7f 2d 0b 3c 8f 43 97 fb ee bb ef 48 f3 2f 49 6f 6a 4b 36 93 c3 94 a5 1a 64 a5 fe 7d 49 44 2e 88 c8 3d 22 72 ce 95 43 ef 5d 14 91 d7 d4 d7 2f d5 c0 5c 49 0d cc 67 dd 67 a5 26 86 0e d6 65 af a4 8d f1 23 72 9d 44 da 4d b2 17 60 d1 b4 0d b8 a2 3c 95 b4 52 4a d7 95 6c 3a 9d ce cd 94 d2 8d 6e b7 7b 2b a5 d4 77 e1 95 ac 5e d6 4f b7 db bd 9a 52 d2 cf a6 25 21 22 1a ff 4a 4a e9 a5 94 d2 2b 35 d1 49 fd bd 61 40 eb 85 5d 9b c9 4c 50 66 a4 71 f2 44 35 e9 07 45 e4 72 ad e5 ab dc 2d 22 0f 8b c8 43 76 2d a5 a4 1a f9 03 35 31 dc 6b 7d a1 b6 10 e6 58 ab 94 c0 34 ba 67 20 59 92 b6 20 6d 1a a7 09 03 bd 92 b0 fb a5 72 b3 bc 91 ac da 48 a9 cc 78 bd ce a3 9b 73 d6 67 76 b7 b5 9f e5 ef c3 59 39 54 63 17 00 7d 2b Data Ascii: v~[Yv[-<CH/IojK6d}ID.="rC]/\Igg&e#rDM`<RJl:n{+w^OR%!"JJ+5Ia@]LPfqD5Er-"Cv-51k}X4g Y mrHxsgvY9Tc}+
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: 5a 58 33 99 8c cc 36 f7 dd 29 4a a4 5f 26 22 ef 13 91 af 11 91 b7 d7 2e a7 3b 06 9a 69 fc a6 a1 db c7 5f 33 e0 30 53 5f 07 04 0e 44 01 30 61 e5 3f 28 93 5c cb f0 d2 4b 2f 55 83 d8 ac 9e a3 10 3f a1 dc e4 9e 32 89 2c 8d 92 8b a9 e4 5a c2 a5 a4 51 da 51 fc a6 6f 69 20 70 16 9f 91 0e 5e 13 e8 3f 68 b1 08 58 23 48 c4 4c 39 40 0b 47 bf cf 9e 3d 2b 2b 2b d5 50 b8 63 15 98 df 54 c8 ac 20 66 7d 9b 78 a5 c9 94 2e 6f a1 18 81 e8 84 bb 8d 9d e4 16 06 a0 95 36 1c 0e 75 39 f1 1f 0e 87 c3 5f c9 39 ff e6 70 38 fc 84 11 ae 91 61 9e 6d ee db b3 cc 2c 8d 91 e8 7c c4 07 45 e4 1b eb f9 88 07 ec 06 76 78 b3 1a ec 63 e4 e0 b5 41 73 3d a9 15 61 3b 65 0d 90 6d 70 59 a7 6d 22 b1 83 ec bc e6 9e b0 f2 1e 15 61 30 d7 4c 54 6f 4f 2c 91 cb 07 d3 2c b9 85 24 00 b2 88 20 4a 79 b1 b4 bc Data Ascii: ZX36)J_&".;i_30S_D0a?(\K/U?2,ZQQoi p^?hX#HL9@G=+++PcT f}x.o6u9_9p8am,\|EvxcAs=a;empYm"a0LToO,,$ Jy
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: ea fd 4d 81 c6 75 21 9c 14 31 d2 d0 55 5e 47 b9 ec b0 e4 bb f6 ff 99 fb a7 24 cc 02 60 d6 25 e6 17 ed 98 ce 64 f7 38 82 1f 86 17 20 c0 48 0b 2f d5 09 b5 75 96 57 a9 3e cc b5 c5 ea 80 bf 4b d6 9e 3f 3a bd a9 bc c9 cd 1d e0 f3 63 cf 07 35 7f 6c 4b 2c 27 96 6d dc eb 58 57 7b 56 bd 5e ef 47 73 ce 78 a4 fc a9 17 39 08 4b 63 8a 40 f8 7b db 6a 09 4d 03 b7 6d 1a 72 0c 27 d0 c6 01 e2 83 90 c8 8d c3 ca 88 61 98 ab a2 c9 72 88 c0 9d 5d 67 ee 2b 2f 08 c2 11 b9 f9 bd 09 a9 61 42 9a b9 ae 4a f5 c2 b8 18 16 27 a6 b1 9e a5 89 67 74 3d a5 fa 98 19 7f 0f 09 08 89 d5 d7 d9 da c1 7e 97 9e 1d de f7 47 b2 20 69 44 cf d6 c7 65 e2 f3 c2 f4 3a 9d 4e af d3 e9 7c 70 30 18 fc cc cc da d8 2d 27 76 4e 23 a5 f4 96 c3 ce d3 1f 51 30 ed 92 ea a3 d1 a3 01 7c 98 82 60 e9 25 02 51 29 4c 6a Data Ascii: Mu!1U^G$`%d8 H/uW>K?:c5lK,'mXW{V^Gsx9Kc@{jMmr'ar]g+/aBJ'gt=~G iDe:N\|p0-'vN#Q0\|`%Q)Lj
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: a4 e1 9d 16 39 ca ba 96 b4 c4 b6 ff 19 e8 f9 7b cc 85 c4 c0 98 fd 67 e4 23 00 fe 08 44 ec 54 de 68 a9 2d 6a df 19 5c 61 4c d3 66 c7 62 b4 11 96 5f e9 b9 60 3b b0 36 51 d2 f0 6e 26 b4 36 84 ec a9 c8 c4 9d e5 09 04 df 9d 11 b5 1b 96 13 9f 0d 9b 03 69 aa 2b 12 98 7b 7e 0b fa 22 a7 e3 a4 0c 1e 86 cc 2c 8d 5a da 6a 2d 27 45 4a 27 95 1e 96 44 20 ce b4 7b 69 58 ca 89 71 11 00 04 ce 84 8a 40 3d c1 e4 69 94 17 e6 cb ca 57 b2 84 10 c0 31 7d af 9d 7b 40 c3 23 53 98 e5 12 bd af 22 6a 2b 0c 1f b5 5f e4 c2 41 6b 21 b2 c0 b0 fc c9 1d 64 88 cb 70 91 48 30 2f ac 1f 23 62 d6 ae 19 dc 7a a5 ba ea 2a 4c 5c c5 35 93 93 7d 34 7a 51 50 d3 38 2d 84 61 83 51 8f 44 3f 2a 6b a3 0d 10 63 58 01 90 40 41 4d b1 24 4d 6e 9d 36 d7 4a e1 4d a2 72 7a cb 82 b9 78 98 ab d4 13 59 c9 bd c3 2c Data Ascii: 9{g#DTh-j\aLfb_`;6Qn&6i+{~",Zj-'EJ'D {iXq@=iW1}{@#S"j+_Ak!dpH0/#bzL\5}4zQP8-aQD?kcX@AM$Mn6JMrzxY,
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: c9 02 35 68 74 3f 60 bc d2 f3 62 c4 82 00 5b 6a c3 a6 f2 a0 a5 c0 ca 19 b9 5a ec bf 07 e6 a8 dc a8 a1 97 80 17 81 bd 64 0d 31 37 8f 00 c0 47 00 8d 75 f6 4b 6a bd 95 61 2b a7 a2 39 99 44 5c 6e 58 6f 5f 56 36 e7 82 f5 8b 96 0f cf 2c 8d dd 72 aa 97 dc ee 97 28 50 8e 0b 69 b0 e3 2d 0e 4b 22 4b 82 91 03 02 29 0a bb de 74 74 47 13 51 30 97 0f b3 5c a2 f2 23 21 22 71 44 da bb 10 f0 8e ae 49 e1 34 58 04 39 2c 43 82 49 73 56 0e 9f 1e d3 e0 3d 39 e1 61 83 98 3e 23 12 66 b5 61 3c b6 bb 1c d3 2a 59 82 fe bf 9d 16 5c 6a 0b 16 cf ee cf 48 63 b7 9c 5a 4b 03 07 ef 24 3a c6 ac 73 b5 13 04 95 d2 f1 19 26 a5 53 79 19 c9 30 ad 9b 11 07 02 68 e9 25 5a 18 b7 c9 da f0 bf 31 ff 88 68 4c 70 f7 b3 d7 c6 a5 61 27 33 82 2e a6 9d c1 ad 85 e5 f4 82 ef f1 f0 ab a0 22 f7 16 12 86 14 c8 Data Ascii: 5ht?`b[jZd17GuKja+9D\nXo_V6,r(Pi-K"K)ttGQ0\#!"qDI4X9,CIsV=9a>#fa<*Y\jHcZK$:s&Sy0h%Z1hLpa'3."
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: b5 8d 2b a1 29 4c 1b 6b 86 95 85 85 6b 72 e9 44 96 50 09 8c db 48 db 76 29 01 a9 07 7d 66 ad a0 85 8a 24 ce 2c 2c b6 c4 d6 a7 19 59 25 a5 39 9e e8 b9 30 97 58 f4 bc d8 3d 7c c6 f8 ec 66 72 5b 4e aa a5 71 64 2f 82 9f 75 b2 f6 e2 81 84 69 e3 6d 2c 07 69 b1 13 5b e0 b9 b4 39 c8 90 c5 6f 6b 25 09 80 6a e4 d6 61 75 43 d7 88 07 2f 04 66 3c aa 83 c5 89 a4 c9 cd d4 a6 0d b0 6e 48 42 d1 31 22 d1 7f 21 44 c0 88 98 b5 ab bf e6 d3 57 62 6a 6a 6f d6 5e e8 16 9b c9 6d 39 a9 a4 11 1f 89 5a 4b c9 cd 31 93 c3 11 a6 d9 45 cf 02 41 d3 83 8b 27 8c 88 64 18 68 a1 44 9a 6b 82 15 3d 6d 5c 55 42 c0 31 2a 0f b3 3c 58 ba 08 d0 91 46 8d e5 64 fb 21 18 39 b1 6b cc 3d 84 e1 30 fd 68 ff 05 e6 81 2f 6b 62 79 65 58 d6 9b e0 54 5c 6c 53 66 69 d9 ff 36 2f a4 c2 ba cd b0 e1 4e 39 a9 ee a9 Data Ascii: +)LkkrDPHv)}f$,,Y%90X=\|fr[Nqd/uim,i[9ok%jauC/f<nHB1"!DWbjjo^m9ZK1EA'dhDk=m\UB1*<XFd!9k=0h/kbyeXT\lSfi6/N9
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: 59 7d 5a 1c b7 3e c8 6d 34 a7 53 26 33 f7 94 93 93 4c 1c 06 12 73 73 73 72 e1 c2 85 9d 81 69 e2 37 46 e1 ab 39 a5 a5 fb a7 04 e2 b8 61 cb 03 29 de 8f c2 e3 37 c6 f1 e9 e2 7d 21 9b c6 58 39 11 b0 d1 1d 83 84 16 b9 fc a2 49 e7 c8 25 62 40 cb de 93 61 e9 a0 36 ce 2c 82 68 97 74 09 3c 19 a9 b4 79 b6 3e 6f 3c 01 97 b9 e6 da 94 a7 e4 02 24 96 c0 1d e1 98 0b ce a7 59 b2 b4 04 2c a4 7a c9 ed 1d e1 4f bb cc 0e 2c 6c b8 36 8d 82 26 3e d6 21 12 1d 10 f3 f3 f3 b2 b4 b4 54 04 76 fd b6 fd 1c fe 9e 5d b3 eb fa df 5f 63 e1 11 90 2d 1e fb 1d 85 41 40 8f c8 02 ad 15 96 2e 6a df cc 35 e4 ef 25 72 58 61 64 09 d8 7d db 9b 81 80 e9 f7 23 20 00 22 18 b2 a5 a8 16 d7 fe 2b f1 23 d1 fb 23 38 f4 a3 71 2c 9e 9d f8 8a 4a 81 bf 1e bd ab 02 5d 58 02 84 e9 f3 f7 e2 ad 1e 5b fd 14 b9 c3 Data Ascii: Y}Z>m4S&3Lsssri7F9a)7}!X9I%b@a6,ht<y>o<$Y,zO,l6&>!Tv]_c-A@.j5%rXad}# "+##8q,J]X[
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: fb bc 2c 7f fb 36 02 d0 ff 1e 20 2c 1d af e5 a1 1f d9 06 8c 69 71 7e 80 d8 ff e4 e6 6c c4 4d 70 e2 c0 44 f0 67 ed e9 89 82 cd 35 f8 b2 23 29 5a 5a 7e 5e 89 b9 ce 98 85 23 c4 da f1 04 8c e9 f8 32 fa 72 98 b5 e7 b5 4e b4 62 2c 0e 92 88 90 b9 14 3c ee c2 1f 73 8e 75 f2 e2 c9 51 9c c5 c2 ea ea 2d 21 6f f1 44 04 68 c4 84 0a 8d ef 97 d8 47 ed 1a 92 3a 5a 0d 38 ef 60 5a bf f6 5d bb 6f c2 26 ea f1 3f ae 10 c3 3e 89 73 26 de 85 e5 fb bb f5 6f 2b 8f fd f6 1f 75 73 d9 ff ba 1e 83 92 25 78 5a e5 a4 92 c6 ce 53 46 73 db c0 57 3f 5b 5b 5b 3b bf 3d 48 1b 78 e0 1c c4 10 56 2c 79 8d 16 35 66 4b 43 d3 54 13 59 3f 9a 9f 7e f4 37 ba b0 bc 06 66 1d 5d 3b f1 e2 e2 e2 ae 01 a0 d7 74 f2 4f bf ed bf 5d 4b b5 0f d7 06 86 0d 34 af e5 21 c8 a3 ab 87 69 c7 08 6c 0c 7c 85 cc 6b 94 f2 Data Ascii: ,6 ,iq~lMpDg5#)ZZ~^#2rNb,<suQ-!oDhG:Z8`Z]o&?>s&o+us%xZSFsW?[[[;=HxV,y5fKCTY?~7f];tO]K4!il\|k
2025-01-10 16:48:07 UTC	1369	IN	Data Raw: 56 cf dc c9 e0 7b 4d c1 0a 24 2c 13 03 d7 92 c6 79 d0 ed d4 e6 5e f4 7b 2f 82 20 c8 b4 74 ef 76 13 42 36 1e 84 50 33 cf 64 03 1e fa f1 91 4c 50 e3 8d 48 03 5d 39 fa ac 87 b0 74 d6 87 f7 cf 1f eb d1 f4 5c 2c 6c e4 c6 62 84 e1 ef f9 e7 c6 fe 97 9e 29 b3 66 7d 9b 96 2c 13 01 85 47 dc 42 0c 7f 0d c3 7b cb c5 93 bf bf e6 e7 95 f4 b7 02 bd 5a 13 3e 3d 1d db 6a 81 28 69 a8 02 f8 99 cf 7c 46 3e f6 b1 8f 55 ee ab cb 97 2f 57 e3 b9 9e e4 ae f2 55 2f 84 f5 8f 7e bf 3f 98 9b 9b fb 7b 9d 4e e7 7f 62 75 9c c9 48 4e f4 92 db ba 33 3e 35 1c 0e bf 6e 73 73 f3 cb fb fd fe f7 6f 6e 6e fe 65 1b 94 4a 04 1f ff f8 c7 e5 13 9f f8 44 e5 86 fa d0 87 3e 24 df fa ad df 5a 11 87 92 83 6a 30 6a 0a fb d5 26 3a 00 d4 04 ee c0 91 09 d2 60 15 30 4d f5 30 ea 8f 82 e0 1b 11 56 a4 e1 e2 7f Data Ascii: V{M$,y^{/ tvB6P3dLPH]9t\,lb)f},GB{Z>=j(i\|F>U/WU/~?{NbuHN3>5nssonneJD>$Zj0j&:`0M0V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49836	35.190.80.1	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:07 UTC	484	OUT	POST /report/v4?s=FHiR9bvlUNxCArvC%2B6ALfanaX3xLpbGrHs3AacM2sVUHcVEOYf%2FBfqq%2BQFn4jdDkkSmbmy0Slo4sYXwyLK9Vh%2FJUURCvyo7cBp%2FqAYltI0rgNJPwUKQ5i%2FQY8D7QDxBGqCE%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 545 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:07 UTC	545	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 34 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 65 72 76 65 64 65 66 65 6e 64 2e 63 6f 6d 2f 72 65 70 6f 72 74 3f 61 66 66 5f 69 64 3d 31 32 37 30 26 73 75 62 69 64 32 3d 36 39 38 38 5f 73 65 73 73 69 64 32 30 32 35 30 31 31 30 31 36 34 37 32 33 34 37 34 26 73 75 62 69 64 3d 32 35 36 36 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 34 37 2e 32 35 31 22 2c 22 73 74 Data Ascii: [{"age":1,"body":{"elapsed_time":1141,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566","sampling_fraction":1.0,"server_ip":"104.21.47.251","st
2025-01-10 16:48:07 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 10 Jan 2025 16:48:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49847	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:08 UTC	2349	OUT	GET /images/products/prod9/6-bottles.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:08 UTC	908	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:08 GMT Content-Type: image/png Content-Length: 668416 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-a3300" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4971 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nxfB4mg5Io4IhIPdZbQ%2B013AYU8MqxesQ6T9Cy0FFX5aJa8%2Fp4McdaO%2F%2FED7QaabXf3vwthTa7i6ILwyGL5wdJA0M5yDC%2BKLH%2BI5NR9IJ%2BtQwAbRk7%2BMsIO4FXyX2we2VhE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27259a1e8c63-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2183&min_rtt=2037&rtt_var=868&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2927&delivery_rate=1433480&cwnd=228&unsent_bytes=0&cid=08078a45153f363e&ts=119&x=0"
2025-01-10 16:48:08 UTC	461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 36 00 00 02 58 08 06 00 00 00 99 fd 66 5c 00 00 20 00 49 44 41 54 78 9c ec bd 69 8c 6d cb 75 1e b6 ea 9c d3 b7 ef f0 e6 91 7c 8f a2 f4 c4 41 a2 44 53 a2 48 53 b4 4d 28 b2 14 0d 16 12 33 96 22 58 3f 2c c1 48 e2 00 92 20 d8 82 1d e4 8f a1 48 48 fe 44 70 10 18 08 2c c7 88 7f 44 b6 1c 01 09 62 cb 40 10 01 31 ac c1 83 06 4a a6 68 92 96 48 8a a2 48 4a a4 de 7b 7c f3 9d bb 7b 57 b0 fa ed 75 f9 dd ef 7e ab f6 3e dd b7 bb 4f f7 ad 0f 38 dd e7 ec 5d 73 ad 5d b5 d6 b7 57 55 15 3b 24 6a ad 87 4d a2 a3 a3 a3 e3 48 f0 da 6b af 6d 54 c3 96 72 e7 90 eb 63 a8 ba 7e b7 a0 d2 8f 6b 78 6f ee 77 ac 07 a7 ad 7e 73 bd d5 b5 ac 1d 70 7e c9 da 2e bb 47 f7 97 66 76 d1 cc 2e 8c ff 39 dc 96 99 dd 3f de df 2e a5 5c 32 33 ff dc Data Ascii: PNGIHDR6Xf\ IDATximu\|ADSHSM(3"X?,H HHDp,Db@1JhHHJ{\|{Wu~>O8]s]WU;$jMHkmTrc~kxow~sp~.Gfv.9?.\23
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 8c cb 93 c7 f1 eb 5e 4e ff ef 65 f5 7c fd 7b dc f3 df 1e 2f e4 cf ff fb 6f 94 4b af 87 ff f7 b0 7e dd 7f 63 9c 08 87 f2 ef 61 22 bc e7 7f 94 e3 c3 1c 3c f9 e4 93 27 9a 7f 47 47 47 47 c7 e9 c5 71 ce 61 4d 45 ad a3 a3 a3 a3 a3 e3 98 71 6e 24 12 6c 24 04 1e 31 b3 47 c7 ff 8f c1 bc e5 44 c0 83 66 f6 84 99 3d 34 de 7f 00 8b 5a 4a b9 38 86 b9 7f fc 5c 1c 09 0b a3 70 87 ae a1 a7 91 11 3e 87 4d b7 05 24 a9 0e 5a 66 37 d4 27 70 79 fc 5c 59 2e 97 af 2c 16 0b 67 0c af 51 d9 fc da b3 a5 94 17 57 ab d5 8b a5 94 d7 80 a8 71 b2 c4 af 3d bf 58 2c 3c cc 65 88 77 d5 89 19 55 7e bf c6 d7 fb cb 94 8e 8e 8e 8e 8e 8e 0e 85 4e 6c 74 74 74 74 74 1c 25 fc 75 ef 57 98 d9 e3 63 1e db 66 f6 26 33 fb aa f1 da be 75 5c 4a 71 d2 e2 0d 23 51 f1 c0 78 ad 8c 44 84 b4 ee 33 a3 bf 75 bd 45 Data Ascii: ^Ne\|{/oK~ca"<'GGGGqaMEqn$l$1GDf=4ZJ8\p>M$Zf7'py\Y.,gQWq=X,<ewU~Nlttttt%uWcf&3u\Jq#QxD3uE
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 8d 7a 6c 34 a9 0c 48 44 e6 05 61 23 89 e2 65 7b e9 a5 97 6e 95 19 37 f2 9c eb 15 70 37 c0 06 bd 22 54 5a 6d 63 c2 3b 01 e3 f1 72 0f f4 2a 68 a5 c7 7b 94 28 6f 0a b5 54 44 dd cb ea d7 22 38 30 3d ee 13 26 4e 42 26 b8 2c 28 ab b1 2c 44 d5 33 64 c9 c3 04 d9 10 c4 83 7f aa d8 e8 d5 7f 3b e1 66 40 a6 61 3c 24 7b a2 6c af bd f6 da fe f3 10 84 48 81 bd 3a 7c b9 4a 78 8a 84 bc 8f 65 71 56 e5 e9 e5 72 f9 74 ad f5 3b 47 ef 0e bf fe fc 30 0c be af c7 bf 18 86 e1 df ef ed ed fd 76 ad f5 13 99 ac 74 74 74 74 74 74 74 dc 1d 1c 5a 43 ec 93 75 47 47 c7 a6 c2 0d 96 4d 82 32 ca 67 78 20 3c 63 66 df 36 7e de 33 9e 42 22 8d c1 20 02 82 b4 70 92 00 c9 8c 30 22 c3 d0 8b 8f 1b 6f 6a 63 47 05 26 3b a6 96 34 ac 03 37 0e bd cf 9e 7b ee b9 db f6 57 38 6e 64 1e 12 06 44 04 7b 43 18 Data Ascii: zl4HDa#e{n7p7"TZmc;r*h{(oTD"80=&NB&,(,D3d;f@a<${lH:\|JxeqVrt;G0vtttttttZCuGGM2gx <cf6~3B" p0"ojcG&;47{W8ndD{C
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 37 06 2e 71 50 86 3f a7 d5 ea 23 f6 1c 40 4f 8c cc eb 01 f7 5b 39 88 b7 88 aa 77 b6 34 86 97 98 b4 3c 2c b8 4e aa 5c 8a 14 c9 ea 8b c7 01 e3 3d 26 21 b0 5d 70 a3 4e 3e 62 37 7e 17 71 c2 89 c1 33 c5 ed 83 f1 8d 08 98 02 47 ce c6 be 1c b8 31 2b 9e a8 12 a4 8c 5f 3b 7f fe fc bb 96 cb e5 6f ec ee ee fe d0 de de de 3f 3a e9 e5 59 1d 1d 1d 1d 1d 1d 9b 8e 4e 6c 74 74 74 74 1c 1f fe 97 16 a9 81 06 5a 11 fb 66 9c 75 6c 9a f1 96 91 00 48 44 e0 de 0f 53 1e 12 2d 62 44 ed 67 51 92 13 51 32 a2 05 97 52 30 b9 a1 bc 25 32 a2 c2 84 e7 85 ba 6e e0 55 c1 cb 62 f8 bf 22 77 d8 23 03 d3 34 f2 0c 31 92 8f d8 37 26 88 00 f4 d2 c8 da 3c 88 07 f6 e8 e0 fc b8 9f 99 b8 31 b1 81 a9 6a 2f ae 1f 9e d6 82 79 06 11 e3 c4 07 ee e1 e1 1e 5a 8b c5 e2 67 af 5d bb f6 ea 30 0c bf d0 3d 37 3a Data Ascii: 7.qP?#@O[9w4<,N\=&!]pN>b7~q3G1+_;o?:YNlttttZfulHDS-bDgQQ2R0%2nUb"w#417&<1j/yZg]0=7:
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: cb c6 d7 54 db 32 59 c3 f9 a8 72 75 74 74 74 74 74 74 dc 89 3e 43 76 74 74 74 1c 3d b6 7b 1b b7 e1 27 a2 9c 24 a1 a3 88 09 7e db 9f bd 99 6f 21 f3 ae 50 f9 67 e5 31 4a 87 bd 02 94 e1 cc 9b 7f aa 3a a8 7b 9c 7f cb 5b c3 12 8f 09 4e 2f ab 6f d6 26 2d 62 88 eb 18 de 14 2d af 18 ae 77 a4 85 a7 af 20 e9 82 1e 1a 91 4f 10 1d 5c cf cc 33 26 f3 7e 99 aa ab 42 e6 f5 d1 d1 d1 d1 d1 d1 d1 f1 65 74 8f 8d 8e 8e 8e 8e a3 c7 da 1e 1b ea 0d f1 3a f1 f1 e8 c9 4d 87 97 71 13 8e 7a 65 72 03 db 4f 11 0a 36 1a bd 7c 3c 6a 66 ec 2a 28 32 c5 12 c3 39 5b 4e 92 fd 9e 2a 4b 10 02 6a c9 06 d7 37 23 78 d4 fd a9 eb 46 5e 1b 5c 3e f4 52 c8 08 a6 f8 1d a7 e9 6c 6f 6f a7 4b 78 32 0f 12 b5 77 06 97 85 cb c9 32 92 e5 85 69 b4 ee 73 9d 78 59 0c e6 d7 bd 35 3a 3a 3a 3a 3a 3a 72 74 62 a3 a3 Data Ascii: T2Yrutttttt>Cvttt={'$~o!Pg1J:{[N/o&-b-w O\3&~Bet:MqzerO6\|<jf(29[NKj7#xF^\>RlooKx2w2isxY5::::::rtb
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 2e b1 ad 70 4c 42 92 02 7f 73 ff 4f 2d 4d 52 04 5f 94 29 3c 9b d4 27 c2 05 d1 e3 64 aa 22 48 30 6e 85 a5 37 d8 be 48 f6 f0 26 ab ea 1e 93 43 9c 27 a7 91 8d 8b a2 9f dd 6b e4 3e ff 88 79 e3 19 ac 07 cb 9d 7b 49 18 91 54 5b 5b 5b 1e e8 25 f7 c6 1b cb f8 fc f6 f6 f6 e7 17 8b c5 73 63 9f dd 5c ad 56 9f 29 a5 fc 41 29 e5 a6 13 20 8b c5 e2 33 b5 d6 cf b9 a7 8a 7b 9a d4 5a 6f b6 88 c0 8e 8e 8e 8e 8e 93 41 27 36 3a 3a 36 0f ab d1 5b c2 49 88 af 37 b3 47 4a 29 4e 5e bc d3 cc de 58 5e d7 d0 be d2 cc de 3a ba 1a 9f c3 a5 1f 99 32 3e f5 f6 cd 04 29 10 2e b0 68 38 04 c9 80 a7 06 60 78 bc ae 88 8c f8 a8 30 0c 8e 8f 46 03 1b 03 6c 34 60 9d 58 21 56 46 1d 1b 73 58 7f 4c 0b cb ad 0c 34 95 be bb 2c a3 3b 74 c7 ed 58 87 54 38 2a a0 3c b5 88 37 65 cc f3 35 b5 19 27 82 e3 b5 Data Ascii: .pLBsO-MR_)<'d"H0n7H&C'k>y{IT[[[%sc\V)A) 3{ZoA'6::6[I7GJ)N^X^:2>).h8`x0Fl4`X!VFsXL4,;tXT8*<7e5'
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: de 65 66 df 62 66 ef 33 33 5f 42 f2 4d 26 94 f3 20 1f 82 c0 88 63 e4 e2 7f 28 70 4f 3c f1 84 9d 3f 7f fe 8e 37 8f 01 7e 6b 18 ca 57 90 16 e8 52 ab ca a1 10 0a e4 cb 2f bf bc 5f 96 20 36 a6 f6 07 b8 1b a8 e2 4d 73 66 50 62 dd f9 e4 01 a5 04 c7 35 0c 9b 29 db 98 77 f6 26 96 8d 1c 65 28 31 c1 c1 e5 3f a9 d3 3e 4e 03 42 f9 3f 29 64 c6 15 2e e1 68 11 4e ea 5e 8b cc 9a 7a 8b 9e 2d b7 62 83 93 cb a7 08 03 75 9d c9 0b ae 1f c6 51 86 33 bf 69 57 c6 23 b7 85 35 0c f1 cc 80 57 f1 b9 ae 85 f6 33 51 cb 2d 2c f1 cc c8 36 f0 e4 3e 65 03 7a a0 4d 8c b1 4e bc 59 28 42 b5 89 42 6b 4c 53 75 c8 d2 52 86 3d b7 b1 22 07 e6 e6 cd 61 55 3c 94 43 5e ee 83 df 39 3d 94 71 1c c7 99 58 8a df b8 37 86 91 ac b1 9c e1 92 a1 2a f6 64 09 c2 22 96 ad 14 d8 8c 35 f2 f1 7c 7d 0e 8f 74 3c 9c Data Ascii: efbf33_BM& c(pO<?7~kWR/_ 6MsfPb5)w&e(1?>NB?)d.hN^z-buQ3iW#5W3Q-,6>ezMNY(BBkLSuR="aU<C^9=qX7*d"5\|}t<
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: df 55 3d 2c 31 f8 b9 bd 54 1a 6c ec e2 66 a0 d8 4e 51 3e 5c 3a 50 68 73 4a 36 be 2b ed db 90 2d 59 ca 9e 5f 6e 4f 2e 4b d6 af 6c 8c 2b 39 c9 88 26 d5 07 bc 6f 85 2a 2f e7 c5 e9 63 9f 2b 39 53 fb c0 a8 7e cc 9e 2d 23 19 6d 91 29 2d 4c 11 5b 4c 6e a8 76 c7 93 c5 98 24 e1 65 56 18 86 89 b9 3a 2e 43 c1 17 1c 05 f6 ef 88 39 27 f4 09 d7 1b 7c b9 aa eb 0d 2f bc f0 c2 fe 5e 1d ae 7b f8 3d 27 41 fc a5 89 7b 92 38 c9 81 f5 5a ad 56 e7 b6 b6 b6 be 7f 7b 7b fb fb 77 77 77 3f 72 e3 c6 8d ff 69 18 86 7f d4 6c a8 8e 8e 8e 8e 33 82 4e 6c 74 74 98 fd b0 99 fd 0f a3 b7 c6 6d 70 45 c3 09 8d cb 97 2f df 72 0f 8d 37 2c 53 08 85 26 db 10 b4 e3 ce 65 38 f8 9f 15 77 4b 94 fe 6c c3 40 45 36 28 83 34 cb 9b 15 d5 a9 78 ca 3d 9f 8d 97 b9 b8 1b 9b 8d 9e 06 99 53 c6 ec 49 94 81 65 68 Data Ascii: U=,1TlfNQ>\:PhsJ6+-Y_nO.Kl+9&o*/c+9S~-#m)-L[Lnv$eV:.C9'\|/^{='A{8ZV{{www?ril3NlttmpE/r7,S&e8wKl@E6(4x=SIeh
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 3a d6 45 f7 d8 e8 38 11 9c e4 a4 5a 4a f9 91 c6 bd db 14 82 c3 96 b3 bf 11 b9 1d 53 0a 9a d1 32 99 00 2a 95 a8 14 66 6b 9f e7 2a 7f 98 a7 35 14 f4 56 da 5c 1e be 77 10 8f 8d bb 45 36 9d 16 f9 3b a9 f1 20 93 15 c4 1c e3 b2 4c 9c 00 a1 d2 98 32 58 54 7c 94 b5 58 5a 91 85 61 a3 86 cb 39 d5 06 7c 0a 8a 2a 1b 1b e4 18 3e 5b 26 a0 f2 6e 19 a9 5c 8e b9 9e 03 4c 3c 32 f8 6d ba c1 35 cc db c4 f3 c8 e5 9a 22 23 78 c9 01 6f 44 aa ca 6d 34 ee 59 c3 30 57 f7 79 69 0a b7 93 2a 3b d7 51 91 2d 96 f4 5b 56 c6 ac 6f 4a 63 a9 4e 56 9e 56 3b 99 90 59 f6 06 a9 44 a4 65 e3 6c 85 e5 48 b1 5f 05 cb 7a 56 07 23 f9 e0 7c 94 27 90 2a 23 9e 5e a3 c8 48 cc 93 c7 1e fe ce fd b2 58 2c de 52 4a 79 cf de de de 6f 77 1d a5 a3 a3 e3 2c a1 13 1b 1d f7 22 de 96 d5 f9 6e 19 58 68 d0 6e ea 66 Data Ascii: :E8ZJS2fk5V\wE6; L2XT\|XZa9\|>[&n\L<2m5"#xoDm4Y0Wyi;Q-[VoJcNVV;YDelH_zV#\|'*#^HX,RJyow,"nXhnf
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 84 65 ed 91 11 1d ad 7a b1 91 c8 79 66 e5 51 cf 6a d6 5e 2d 82 84 cb cb e3 21 ef f7 d0 da 2b a3 90 57 85 32 1c 95 41 dd ea 3f d5 c7 58 56 55 a7 39 84 c2 dc b1 49 19 e8 53 06 78 26 1f 59 ba 0a 59 dc a9 71 b9 0a ef 16 83 76 61 12 4f a5 9d 3d 17 41 3e a8 71 8a cb c0 f7 98 b4 e2 3c 90 e0 68 91 14 73 48 bd 0c 53 84 49 27 36 3a 3a 3a ce 12 3a b1 d1 71 af e1 dc 5c 62 e3 b0 86 e1 a6 4e e8 ae 48 f9 89 28 71 84 dd 71 22 33 b8 59 89 cb 94 e4 96 62 a6 a0 f2 c8 14 d0 16 b9 a1 a0 e2 64 8a f1 dc f4 8c 94 f4 83 82 15 fd 4d c6 26 94 af 45 66 b0 6c 5a c3 08 42 54 71 12 43 96 b7 ba 9f a5 9f 19 ac aa 3e aa dc 99 91 c5 f1 32 52 64 ee 26 a4 ea 99 e0 e7 5f 91 13 1c 36 cb 87 fb 48 ed dd 80 69 f0 a9 1a f8 f6 5c c5 c3 8f 3a 9d a6 d5 0e 59 fb aa e7 b2 65 1c cf 91 81 93 18 2f 6d e2 Data Ascii: ezyfQj^-!+W2A?XVU9ISx&YYqvaO=A>q<hsHSI'6::::q\bNH(qq"3YbdM&EflZBTqC>2Rd&_6Hi\:Ye/m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49848	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:08 UTC	2338	OUT	GET /images/custom/image9.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:08 UTC	896	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:08 GMT Content-Type: image/png Content-Length: 41704 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-a2e8" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4971 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QLBRdAfeZ1iloZ92S1Dtjp3D2WYFtYtloc6c7%2FqGfwPrvvVRGD9lPmF4EebUfU0Id1ZLmFtKsH8t5qB74E20uXK2UEzUYKoAqWY%2BJ6%2Burm63i475eAcwdTkgGXFSMVSr6hU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2726ddce726f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1950&min_rtt=1936&rtt_var=755&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2916&delivery_rate=1421616&cwnd=173&unsent_bytes=0&cid=00abc7fd7ee7a282&ts=122&x=0"
2025-01-10 16:48:08 UTC	473	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 5e 00 00 00 fa 08 06 00 00 00 e9 d1 2f 56 00 00 a2 af 49 44 41 54 78 da ec 9a cb 6e 5b 55 14 86 cf 23 e4 11 f2 08 79 84 ce 60 98 17 00 45 62 c6 b8 49 dc b4 4d 43 93 b8 85 96 36 6d 09 0d 08 c9 8f c2 23 64 06 23 a8 90 9a 1b 76 71 2e 4d 18 65 2f d6 e7 6d 09 4b 56 9b 50 23 58 d6 fa 07 9f 72 72 f6 ba fc eb 54 e7 cf ee b6 1b 33 6b 84 10 42 fc 77 84 10 21 84 10 99 08 21 42 08 21 32 11 42 84 10 42 64 22 84 08 21 84 c8 44 08 11 42 08 91 89 10 22 84 10 22 13 21 44 08 21 44 26 42 88 10 42 88 4c 84 10 21 84 10 99 08 21 42 08 21 32 11 42 84 10 42 64 22 84 08 21 84 c8 44 08 11 42 08 91 89 10 22 84 10 22 13 21 44 08 21 44 26 42 88 10 42 88 4c 84 10 21 84 10 99 08 21 42 08 21 32 11 42 84 10 42 64 22 84 08 21 84 c8 Data Ascii: PNGIHDR^/VIDATxn[U#y`EbIMC6m#d#vq.Me/mKVP#XrrT3kBw!!B!2BBd"!DB""!D!D&BBL!!B!2BBd"!DB""!D!D&BBL!!B!2BBd"!
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: cb d7 cb 3f b8 d5 94 ee 7d cf 7d d0 94 3f 1e ee 96 fe 23 73 f3 b4 72 f2 d4 d9 9a 2f fd c7 75 7d ff d6 7b 34 d4 1a c4 92 43 2e 35 a8 45 4d 6a b3 4e af eb cd b5 cc 0c cc c2 4c cc c6 8c cc 1a e3 99 ff 2b c8 78 65 bc 49 89 f2 02 4e 04 06 d5 db 6c ec f4 f9 9c 9d ef cc f9 cf 6a a2 87 77 d9 61 5e 65 70 18 1a e6 46 ce 82 63 6e 76 56 8e ee 61 98 98 6f df 8d 74 ce 0d 14 13 1c 33 3e e0 1e 6b c4 10 4b 0e b9 d4 a0 16 35 6b ed 36 bd ae fc 83 80 66 b4 33 03 b3 30 13 b3 f9 8c cc 1a e3 99 cb 78 a7 9a 10 22 32 53 f6 16 a7 9c 25 ce 55 d9 11 ba 49 6d 75 ec cf 1f cc cf 55 17 ec ec 9b a6 9a e5 3d 8c f1 5d f9 23 bb dd f6 8c d3 2f bd 75 73 73 33 37 3f 73 93 74 f3 fd d2 30 52 67 b6 f4 bf c2 38 31 46 72 81 eb 7a 8f 35 62 88 25 87 5c 6a 50 8b 9a d4 a6 47 dd f5 be 53 0f 5a d1 8c 76 Data Ascii: ?}}?#sr/u}{4C.5EMjNL+xeINljwa^epFcnvVaot3>kK5k6f30x"2S%UImuU=]#/uss37?st0Rg81Frz5b%\jPGSZv
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: f0 38 47 ec 07 84 90 eb 1b 09 15 09 60 13 44 cb 8c f8 00 aa fc 10 3c f1 98 33 c0 62 86 70 be d1 10 82 d0 6d e0 d9 8e 5d ac 87 5c 2a 3a 5a 4a a5 8e 95 be c6 fd ff 01 30 27 73 53 03 b5 50 93 fd d4 3f ca 0d 7b ce 67 ad ac b9 22 81 4b 0f e9 25 3d a5 b7 f4 d8 5b fc b6 82 d7 0a de 5a 21 ef 0f de 41 01 ce 20 1c 8c d8 dd 95 1b c0 66 d7 58 87 b7 e8 ae 1d a3 33 bc ca d7 d9 97 c5 6e d5 76 e6 65 c2 f1 42 98 1e 79 48 85 87 51 57 15 1c 32 0a e9 aa fc 90 2e ca 3f d8 45 e7 83 8b 75 c0 9d 5c c7 39 97 6b b8 96 31 cc 58 88 b1 99 c3 15 ce cc 4d 0d d4 52 91 9a 59 9b 6b c7 ce 9a 59 7b 79 81 4b 0f b9 06 d1 5b 7a ec 2d 7e 5b c1 6b 05 6f ad 90 d7 07 6f f4 a0 10 d7 ee 2f ec 79 39 22 fa f1 77 13 18 1f 16 7f 87 76 2c 1f 8c f1 6c f6 c2 33 e0 8c af fd 1d 1c 63 37 17 65 42 cc 84 9a 27 Data Ascii: 8G`D<3bpm]\*:ZJ0'sSP?{g"K%=[Z!A fX3nveByHQW2.?Eu\9k1XMRYkY{yK[z-~[koo/y9"wv,l3c7eB'
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 1e 03 98 9e d2 5b 7a 4c af 2f ee 3f 9e e0 0d 1e e1 15 9e e1 1d 1e e2 25 9e e2 2d e7 5e 24 2b 78 af 53 79 45 11 b5 41 55 17 bc 4b 5c 0a 59 f6 2f bf f0 6d 2f cb 1e 39 58 f6 98 a1 b2 c7 0f 93 23 e9 4b 13 1a fc 87 23 27 c9 91 f3 5d 71 10 cf 0c 31 37 f9 30 f3 a7 1f d7 99 73 d2 ed b1 ff b9 b9 65 3b d6 5d 45 87 ba 0a 15 f2 8b 08 c1 26 70 f7 99 c0 dd e3 0c dc 94 4d 1d 14 bf ba ad e2 d6 77 57 d6 f1 d1 04 92 4b 3c 3f 55 ca 0a 29 79 a9 d1 12 29 76 8a 74 f6 5d e9 cc 80 eb 4b a6 66 6a 67 0d 88 35 b1 b6 92 6b 65 ed f4 80 5e d0 13 7a 43 8f e8 15 3d a3 77 3c 0b a6 8f f4 94 de d2 63 7a 4d cf e9 3d 1e e0 05 9e e0 0d 1e e1 15 9e e1 1d 1e e2 25 9e e2 2d d7 5d 24 2b 78 af 53 79 45 11 b5 41 d7 22 78 03 66 75 f7 db b7 f0 29 65 1c 79 53 f6 88 77 90 f3 86 8f 1a c2 4e 4b 8e 84 cf Data Ascii: [zL/?%-^$+xSyEAUK\Y/m/9X#K#']q170se;]E&pMwWK<?U)y)vt]Kfjg5ke^zC=w<czM=%-]$+xSyEA"xfu)eySwNK
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 13 3d a5 b7 f4 98 5e 23 7a 8f 07 78 81 27 78 83 47 78 85 67 2e ff f0 12 4f f1 d6 8d 5c 1c c0 06 8c 20 98 81 1d 18 b2 82 d7 3b e5 15 45 d4 06 55 36 78 ed 91 ef 37 71 24 8e 90 23 73 b2 f3 d7 49 73 a7 c9 dc 50 32 37 56 49 85 18 05 38 35 3d c0 91 fd cd 30 47 f2 57 01 e6 46 95 ed ec 3b b2 9d 78 81 b7 b1 ce e7 b9 db 3b 2a 75 63 3b c5 2d 6b a5 98 d5 3d 65 4b 5c 79 e1 d1 02 a1 8b c2 87 5a aa 3a d1 63 e4 7a f4 80 07 78 81 27 78 83 47 78 85 67 78 87 87 78 89 a7 78 8b c7 2e bf 9d de 0b 21 d8 80 11 58 81 19 d8 81 21 2b 78 bd 53 5e 51 44 6d 50 65 83 17 1d 5c fc 74 ba 3d 82 ff ea c3 27 72 c4 7f 2e 47 c2 70 99 5d 8c d1 97 72 24 fd 5b 8e 94 51 72 a4 8e 91 23 ed 6b e4 fc 7b c2 17 b2 45 7e 20 db d9 b7 55 b0 bf ab ce ef ee a8 ec 6d ed 95 b2 be 8d 62 96 b4 50 dc c6 17 4b 3f Data Ascii: =^#zx'xGxg.O\ ;EU6x7q$#sIsP27VI85=0GWF;x;*uc;-k=eK\yZ:czx'xGxgxxx.!X!+xS^QDmPe\t='r.Gp]r$[Qr#k{E~ UmbPK?
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: bc c3 43 bc c4 53 bc c5 63 bc c6 73 bc 77 71 00 13 b0 01 23 b0 02 33 15 94 15 bc 56 f0 d6 6c 79 0c 5e 5b 61 b9 3a b5 ea 19 bf 90 85 4f 29 35 f0 35 d9 43 4d f0 ee 71 86 6e 9e b9 01 33 d6 b7 51 c2 92 16 3a 3b cb 57 59 47 27 cb 9e b0 ca f9 b5 b1 f4 ad 52 ec 24 be 2f ea 51 0b 26 bf a7 fb 4c 98 5c 86 08 5e c6 a8 90 a6 7f da bd dc f1 06 3e ff 94 d6 2d 5d a8 3d 5b 37 89 3f 3f e9 df bb dc 6b 5a de f6 6b 13 b0 c3 bd 66 ce ab 29 bc c3 43 bc c4 53 bc c5 63 bc c6 73 bc 87 01 58 80 09 d8 80 11 58 81 99 0a ca 0a 5e 2b 78 6b b6 3c 06 6f 51 41 85 64 8f 78 5f 76 7e 41 e2 54 7f 15 ee e9 ac f3 db da 2b 6b 63 1b 25 2d 6f a1 73 3f 34 51 ea 5e fe c3 95 2b 65 e7 11 03 a1 9b f0 a3 14 3d b6 6c a5 6d 52 ab 3f de a8 fb 7f ed 53 69 f5 7a b4 3d 63 94 27 13 52 5f 94 3b d6 82 ef a7 4a Data Ascii: CScswq#3Vly^[a:O)55CMqn3Q:;WYG'R$/Q&L\^>-]=[7??kZkf)CScsXX^+xk<oQAdx_v~AT+kc%-os?4Q^+e=lmR?Siz=c'R_;J
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 89 b2 4e 8d 55 47 13 a2 68 e5 ac e2 90 cc 0a d4 e8 81 bd c5 6b af 75 bc df 75 6e ec be e1 ae 73 1f 35 21 9d 15 b9 ba a2 35 e1 35 9e e3 3d 0c c0 02 4c c0 06 8c c0 4a 99 e1 0b 6b 30 07 7b 30 68 7d b8 66 05 6f 8d d6 a5 c1 db d8 df a8 78 d7 6b 82 77 67 fb 4b 54 b8 a3 bd b9 91 da e9 fc d6 b6 ca 5a d7 5a 89 4b 9a eb dc f7 8d 15 bf b1 bf 6c 51 8b 64 8f 5d 2e 65 ee 94 12 be 97 e2 be bb ea ea 63 c2 d5 d7 04 8c 1b 71 ac bc eb 39 cf a3 86 3c ff 58 a5 6a 99 3d 6a 70 99 e3 05 2d 7e ab da e6 44 07 96 0d 92 df 4d 3e 88 47 02 17 5e 5f 3f 93 d7 90 eb b5 31 6f 74 76 bd 36 6f dc 17 52 c2 ac 8a d6 84 d7 78 8e f7 30 00 0b 30 01 1b 30 02 2b 30 03 3b 6e 99 82 35 98 83 3d 18 b4 82 d7 0a de 1a 2d 80 76 13 be e1 46 66 07 f2 94 0a 0f bf e2 36 78 f3 b7 b5 53 ce c6 36 4a 5d c1 23 86 Data Ascii: NUGhkuuns5!55=LJk0{0h}foxkwgKTZZKlQd].ecq9<Xj=jp-~DM>G^_?1otv6oRx000+0;n5=-vFf6xS6J]#
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: ba bc f1 aa 63 4e cf d7 a7 ae 13 1f 80 f1 f7 84 e0 71 fa c7 ef 7d 84 5e b8 e7 46 29 2b 48 d9 61 d3 f4 e3 07 7f d7 0b 77 ff 4a 6f f8 de a2 0d 53 5e b9 6c 9f 60 02 36 60 04 56 60 06 76 60 08 96 60 0a b6 60 0c d6 60 ae 30 35 ca c7 c8 0a 5e 2b 78 6b b6 2e 09 dc ec 6f fc 8d 96 39 32 27 39 ff b1 92 c8 4f cc cd f1 b6 0a 0e f5 51 ce 9a 96 4a 5e d4 4c e1 33 1a ea d4 d4 8e 2a 0c 9b cd 4d e5 dc ed a6 2c e5 d9 de 35 d1 7b 26 5c 1f 30 01 e3 46 1c 2b f3 da 03 eb a7 72 9e 47 cd 1b fd 56 a5 6a 39 b0 66 74 59 e3 31 5f 75 cc 59 a1 71 96 8d 7a 49 3d ff e0 23 b4 6c d2 08 f1 da 67 3d 1a f1 73 29 2d 1b f9 cc 65 f9 04 13 b0 01 23 b0 02 33 b0 03 43 b0 04 53 b0 05 63 b0 06 73 b0 67 64 fd 02 85 15 bc 35 5b c5 61 db c3 68 96 23 6b 4a ba 23 7d bc 1c 49 a3 64 8f fe 4c f6 b3 ef cb 76 Data Ascii: cNq}^F)+HawJoS^l`6`V`v````05^+xk.o92'9OQJ^L3*M,5{&\0F+rGVj9ftY1_uYqzI=#lg=s)-e#3CScsgd5[ah#kJ#}IdLv
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 6d 53 fb aa 5f fd df 88 d7 16 7d 31 f0 4a 3c 83 15 98 81 1d 18 82 25 98 82 2d 18 83 35 b7 0c c2 26 8c c2 2a cc c2 ae b7 dc 47 35 51 5e 51 44 4d 96 01 b8 89 51 ba 91 76 7c f7 88 72 f7 bd 5a 0a f8 c2 0d ad 94 bf ae a5 b2 57 34 57 d2 bc 26 3a f7 6d 7d 1d 1d db d4 dc 38 df a8 e0 f8 34 e7 6e 37 6d ad 94 ba ea 9a eb a3 27 3a e9 31 13 34 6e c4 b1 f2 c7 48 df a2 8f 7a 76 e1 7c 8f 5a f7 6d df 32 c7 18 f9 42 87 32 af 9f fd f9 a0 ea 9a d3 a3 72 c3 7f 56 2f 13 a2 68 88 09 59 e5 1c 2e 75 7c db 9c 49 1c 73 ab a4 d3 01 57 e2 19 ac c0 0c ec c0 10 2c c1 14 6c c1 18 ac c1 5c 29 06 61 12 36 61 b4 98 55 eb b9 ae 15 bc d7 bf c6 bc d2 d0 df 48 e8 f8 c2 9e 2a e0 7b 95 1b 5a 0a 15 9a 1d c8 f9 35 2d 94 b9 a4 99 e2 7f 68 a4 d0 09 f7 29 ec fb ee 2a 38 32 45 45 e7 16 3b 7f e5 34 75 Data Ascii: mS_}1J<%-5&G5Q^QDMQv\|rZW4W&:m}84n7m':14nHzv\|Zm2B2rV/hY.u\|IsW,l\)a6aUH{Z5-h)*82EE;4u
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: f0 7a 57 f0 3a 52 c7 d6 31 10 0f 73 a4 8c 91 23 6e 84 ec 67 3e 90 ed 58 7f d9 42 5e 57 d1 9e 7f a9 60 95 af 72 97 35 55 da bc 46 8a 36 cf de 8e 8d bc 4b a1 df 3e aa bc c0 7f ab f0 cc 62 29 ef 0c 6f 93 2d 59 ba 6c c1 10 2c c1 14 6c c1 18 ac c1 1c ec c1 20 2c c2 24 6c c2 28 ac c2 2c ec c2 b0 15 bc 56 f0 5e 37 c1 eb 48 1d e7 ef 48 19 9b ee 48 18 29 7b f8 47 b2 1f 1f 68 e0 7e 43 b6 03 af a9 70 43 47 15 1a e0 0b 56 fa 2a 67 71 53 a5 cc 69 a4 88 29 f7 eb f0 f0 bf 28 7c ce f3 ca db fb a5 8a 62 36 8a 4f a5 95 b9 d3 92 a5 cb 57 de 49 d9 62 36 09 a6 22 7e 7a 41 30 06 6b 30 07 7b 30 08 8b 30 09 9b 30 0a ab 30 0b bb 30 0c cb 56 f0 5a c1 eb d5 c1 eb 48 1a e5 67 76 09 fc 07 05 65 8f fc 54 f6 93 ef c8 76 a8 8f 6c c1 af a9 28 e0 11 03 79 33 97 f2 57 34 55 f6 a2 c6 4a fa Data Ascii: zW:R1s#ng>XB^W`r5UF6K>b)o-Yl,l ,$l(,V^7HHH){Gh~CpCGV*gqSi)(\|b6OWIb6"~zA0k0{00000VZHgveTvl(y3W4UJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49850	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:08 UTC	2337	OUT	GET /images/app/buygoods.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:08 UTC	900	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:08 GMT Content-Type: image/png Content-Length: 11016 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:26 GMT ETag: "610d4692-2b08" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4971 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B2mmCGgL3yxc2gE8Myr1eueSI%2FlsBzl0NqmqEecM5A0yo1O44yiHv%2FnZMhiZ7lMJVvzjDbpjc9mKHRVM%2FBx%2BPOkV22ej%2FimxCYsfuWBWhkDzNgn6TlV9esE0uIVPRSvZHoA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27274b41c443-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1727&min_rtt=1711&rtt_var=675&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2915&delivery_rate=1582655&cwnd=244&unsent_bytes=0&cid=368f6c73b6fbd175&ts=123&x=0"
2025-01-10 16:48:08 UTC	469	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b4 00 00 00 2a 08 06 00 00 00 1a a1 71 01 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 b4 a0 03 00 04 00 00 00 01 00 00 00 2a 00 00 00 00 38 e3 0f 08 00 00 2a 72 49 44 41 54 78 01 ed 9d 09 80 5d 45 99 ef cf 76 ef ed 7d 4b 27 e9 ec 9d d0 49 20 09 24 40 d8 02 42 22 20 a2 22 3a 62 d4 67 08 04 97 28 28 f3 64 44 c0 99 79 36 f3 e6 21 8a c3 9b 87 82 c2 cc b0 29 f3 34 91 07 8a 0a 0c 22 11 24 01 03 59 4d 87 6c 9d 74 b6 4e 2f e9 4e a7 f7 7b ef 39 e7 fd fe a7 ef 39 7d 6f 77 03 32 33 c6 f0 5e 2a 9c ae 3a 55 df f7 d5 57 55 5f 7d f5 d5 57 75 2e Data Ascii: PNGIHDRqsRGBDeXIfMMi8rIDATx]Ev}K'I $@B" ":bg((dDy6!)4"$YMltN/N{99}ow23^*:UWU_}Wu.
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 3b a3 4c d3 2a 0f 14 f1 a0 2e ce 77 2c b3 34 59 d8 1e 3f d6 cc 9d a8 ef f8 ef 01 4c 8d 71 08 6f 25 1a 3a 58 ed 11 6a 31 5d 80 b6 1e 9d 97 97 77 cc 65 26 12 e8 fb ef bf df 31 7c bf ca 37 bc 4a 96 8d a8 27 7d 32 79 eb 1b 1b 8f 1f d3 a5 23 62 e0 44 e2 b8 ee 81 c2 c2 c2 49 08 f1 28 98 94 fd 1c 84 74 3a 6d 20 e0 7d dd dd dd 81 74 87 f9 c7 22 8e 04 fa 68 7e 7e dc 35 52 13 3c d7 1d 1d 0a b4 09 07 cc be 1e 3f 69 1c 69 68 68 48 1e 0b 86 4e d4 f1 ee ea 01 84 77 12 5a ba 14 33 55 e2 12 04 e4 27 85 90 1f 46 d8 8f b9 cc 44 9b c2 64 9b 53 64 25 cc 89 be e9 95 45 0a da 84 47 cf 68 71 1d af a9 b6 b6 36 98 6d b5 2f bc e0 54 ec de 5d de 63 c6 ab cc 3e 37 3f 16 cb 6f 4b 99 9d 4d bd d7 5d d7 5d 6b 9a c3 66 e4 8a 15 2b ec ba f6 f6 c4 b4 fc 7c b3 89 e6 76 97 97 fb 53 5a 5b bd Data Ascii: ;L*.w,4Y?Lqo%:Xj1]we&1\|7J'}2y#bDI(t:m }t"h~~5R<?iihhHNwZ3U'FDdSd%EGhq6m/T]c>7?oKM]]kf+\|vSZ[
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: b6 6f cf 40 20 8b 71 e5 0d 34 0e 09 a5 cc d0 7f 9e e1 c5 d0 bc e5 0c c4 fb f0 88 74 d5 b7 f5 b7 c2 e3 26 a3 f3 81 02 2b 2f 3e d6 33 bd 52 e0 50 f7 e4 4a 20 0d 23 e9 9b 7e db 57 af 5e da 73 f3 d2 a5 41 6d e1 9f 15 1f 5f 61 ef f1 7b e7 52 cf d9 74 4c 89 cf 04 83 71 cd 9e 2e d7 f0 b7 41 24 df b4 ac b9 d0 09 84 4b 14 a1 6b 23 d1 a3 62 69 bb 34 a4 93 1d df 79 ff a3 93 99 04 1f 63 5e 5c 80 ec e7 0b c7 b2 61 c3 37 0e f3 fe 4a 32 65 6e 13 fc be 7d fb f2 11 a2 cb 69 c7 97 78 e6 53 6f 01 1d 98 a9 07 f0 c8 16 33 b4 e9 d1 40 e7 01 57 cc 53 89 c0 4c 22 af 0c a1 fe 21 83 10 09 b5 4c 01 b4 f7 39 c0 de 44 f9 a5 c4 81 b6 cb a6 95 cd 2b 30 9a 38 90 8b 2f a0 ee 8a 9e 9e 9e 5b a1 f9 42 f6 c0 66 68 7e 0c bc 9b a9 7b 36 70 09 e8 0d 48 46 16 8f 21 5d ca 6c 9e 12 04 ea 5c da f4 Data Ascii: o@ q4t&+/>3RPJ #~W^sAm_a{RtLq.A$Kk#bi4yc^\a7J2en}ixSo3@WSL"!L9D+08/[Bfh~{6pHF!]l\
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: fa 69 e2 c9 e4 9d 0e be fa 5a e5 8a a2 c0 7b 37 30 ea b3 4f 42 6f 3a ef d9 13 a4 03 bc 7f 81 b7 5f d0 57 cd d0 73 81 29 a4 ee 4f 81 b3 94 f4 68 ca 03 9a 14 a9 4d 35 e4 8f c7 f3 b3 09 4d 8d 68 59 5a 19 64 c7 8b 66 78 0a d9 4d 7b 44 8a 62 cb 08 04 3a 1d 4b 96 60 86 56 a2 ae 63 99 31 0f 18 0c 88 1b 46 0f 1e 81 27 12 be f3 fd 3e e3 68 5d 73 77 5f 5f e9 f4 e9 66 7c 4f e7 64 27 ee de 08 fc 35 08 48 41 d8 ac 60 02 98 78 40 5c bf 92 8d 26 f7 9b 02 cf c0 40 83 33 83 c9 4b 33 c3 d1 1e f5 42 56 c2 74 93 95 9e 13 1f 05 c3 51 ae 1a e1 bb 5e 0b ed 68 f6 4c 87 bd a9 d9 4c ab c7 0e 42 04 12 9c 70 7d af e4 9e 7b 7e 15 bf f1 c6 0f 04 87 40 77 7e ff 7f 4f b1 cd f4 22 a6 f1 34 84 3a a0 a7 46 33 52 4d 9e 9b 7a a9 32 96 7a 43 a6 06 9a 44 36 db 7b 00 c8 11 66 de 0f d0 c9 0f 81 Data Ascii: iZ{70OBo:_Ws)OhM5MhYZdfxM{Db:K`Vc1F'>h]sw__f\|Od'5HA`x@\&@3K3BVtQ^hLLBp}{~@w~O"4:F3RMz2zCD6{f
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: dd 70 1e f3 10 68 bb ab 43 5a 07 12 1c 32 98 f6 b9 da 17 84 b6 73 c0 86 e9 ad 75 3d e3 c5 da 65 cb fa 96 bc e7 3d 63 e8 20 d9 ad 43 b5 b3 96 d7 f5 74 5a 9d 06 30 c0 1b f2 07 bc 1e 60 24 4c 12 1c 09 56 10 03 a6 89 2a 33 63 3a 71 64 3f 0a 86 a0 65 71 ef 48 a7 92 aa 07 13 41 02 39 ac 3e 68 27 a9 6b 32 26 47 39 1a 29 d2 a4 f0 a0 49 52 4f f9 ef 39 25 c4 47 3f 3c 80 d7 8f 06 1e 2a e8 e1 44 a8 a6 ac 1a 9a 81 12 10 b6 04 11 9a 0d 24 5f 44 c0 da 86 53 e4 18 b0 b7 d7 45 e0 86 9d 92 42 47 bc 1f e0 39 22 9e 87 e2 42 57 bc 27 a8 73 2a e5 53 28 ff 08 e6 cb 2e 5c 86 2f 2c 59 b2 e4 85 a2 a2 a2 d5 b7 df 7e 7b 2b f2 36 a8 cd 32 44 e8 1f ad ac af 33 09 fe 8a 36 cd 15 3e 3c e8 30 66 03 27 b8 ad 52 32 02 b5 ea db 39 7d f3 fc f1 9e 8f 86 ce 5a 3a 11 ca 5e ba 6b 13 42 bb 33 43 Data Ascii: phCZ2su=e=c CtZ0`$LV3c:qd?eqHA9>h'k2&G9)IRO9%G?<D$_DSEBG9"BW's*S(.\/,Y~{+62D36><0f'R29}Z:^kB3C
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: f2 3d 8b 4f 9e 76 60 0e af 5c b9 72 98 f6 0b 29 53 3e 99 09 21 b3 20 67 82 f1 be 9b b2 60 6c 47 8f 1e dd 89 79 50 4b 3d 8b 59 b5 be 87 b0 ae 26 dd 8c 60 bb 3a 9c d2 ca a3 fa 46 0a 19 c1 3e 87 b6 9f fb e9 4f 7f 3a f0 77 8f 04 37 52 9e 85 15 2c f7 8d 6e b3 0d 96 53 0f 75 a5 0d 8e 36 06 33 73 53 f1 aa ae 1a cb 37 cf 02 4b 2e 9a a0 10 81 d1 54 68 e2 6d af 97 0e 9c f9 98 24 19 ba ea 2c ae 02 b8 a6 81 23 bc 7d d8 b2 fb 95 bb ef ce 67 a4 d9 10 fa e1 cd ae a0 c1 74 d0 11 3c 74 fb ec de bc 48 a0 2d 3c 1d d8 08 4d d0 d6 4e 2c a8 5b eb 02 7e e8 0a 8c a8 cb 10 f6 b3 72 05 0d 4d e6 a5 9f 72 d3 fe 6f c3 56 b0 ac 69 c3 96 0f 5c 74 e8 a0 b2 0c bf 3e 82 32 a2 e0 09 86 81 39 19 e1 d3 cd 36 e1 2b 2b e4 55 77 23 8e 32 58 f2 37 e5 68 16 e5 11 de 94 26 78 b3 a0 59 ae 81 ce f0 Data Ascii: =Ov`\r)S>! g`lGyPK=Y&`:F>O:w7R,nSu63sS7K.Thm$,#}gt<tH-<MN,[~rMroVi\t>296++Uw#2X7h&xY
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: d5 fb cf 3b ef 3c f5 b9 3a cf 64 1f a3 2b a3 e3 c0 d5 5e 2b e8 2b f2 03 59 02 4f fb 86 6d 9b 36 6d 8a 4c 18 95 bd 5d 70 d0 aa 87 6c d3 39 80 e1 50 9d 25 d1 32 ae 62 08 e8 15 9c 50 9c 96 70 d2 5b 2c 2f af 2b 6d a4 47 33 44 7c 41 62 56 61 67 44 e0 41 25 52 a6 a6 b9 0e be 7e 8f 6b ee 28 0e da 2e 38 4b 43 23 f0 43 07 9a 9c 8d 1a fa 6f a9 d7 e7 97 5d f1 c6 fe b5 a9 ca c9 69 c3 ec 9a ce 95 92 cb 38 ca 3e 17 91 cc 0f bb 1f 35 49 7b fc 3a 36 79 2f 7f 7d c8 57 28 98 3c de 9d df 7f b4 85 46 b7 a0 b7 6a 42 9c ec c6 d2 b1 92 e8 26 fc eb cf c7 4a ac 1c ed 2c 38 04 c0 e5 64 49 76 b9 3c 13 11 2a 75 aa 43 75 7c fd 41 3a 7b 1e 83 b7 13 61 96 96 90 39 20 ad 1d 7c 99 11 21 64 12 c2 23 b4 81 a7 2b 8e 8d 08 93 70 a2 cd 18 b4 54 7e 36 42 f4 10 71 3d 42 8c 95 e4 56 93 9e 4a 59 Data Ascii: ;<:d+^++YOm6mL]pl9P%2bPp[,/+mG3D\|AbVagDA%R~k(.8KC#Co]i8>5I{:6y/}W(<FjB&J,8dIv<*uCu\|A:{a9 \|!d#+pT~6Bq=BVJY
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 6c 6a 99 15 dc d7 c7 ea f0 dd 26 bc a2 9b 11 d1 17 59 99 7f d5 db bc 6b 87 ec da a1 95 7d f9 9e 7b 12 e3 63 e5 e7 e1 ca ff 34 cb ff 22 a6 c2 78 28 61 03 8a 94 06 8b 1a 74 56 c9 9d 15 f4 36 9a d8 5c cb d1 d6 b3 e9 98 fd dc 6d cb 3e b5 67 28 bd ec f7 3b ee 79 70 b4 1d 77 be 02 89 2f 41 0e 7f f7 40 f5 99 8e e7 f2 b8 f7 1d a7 db bc ef e6 9b a3 63 ee 6c f4 9c 34 a6 c7 69 74 f0 17 19 a8 0f 11 6b 23 15 6e bc 34 20 12 dc 7e 3a 7a 3b f9 2b 78 97 9d 7c 2d 79 ba 83 1b d0 01 4f 1a 6b 15 9a f7 76 ee 19 ac 52 a6 3c 0d 84 f3 80 ff 0c cf 7b c1 19 45 b6 36 06 b4 1d ae f5 07 3f 2d 8f 6c 69 fd 1e 9c fc b2 bf c0 fb f0 53 ae 80 86 2e 35 81 45 81 8f 06 0a d8 54 7e 1c 9c a5 d4 a7 0b 3a da 9c 85 bc 32 4e f2 a0 32 60 03 57 2c b5 99 da 02 dd 97 79 d7 a4 dd 3c f4 e6 5c 48 18 2f cb Data Ascii: lj&Yk}{c4"x(atV6\m>g(;ypw/A@cl4itk#n4 ~:z;+x\|-yOkvR<{E6?-liS.5ET~:2N2`W,y<\H/
2025-01-10 16:48:08 UTC	964	IN	Data Raw: f6 fa 31 e7 57 6b cb f2 47 f4 e9 ff 67 d4 79 bc d0 38 ee 37 85 b2 99 13 63 6b ae e5 00 e9 bf a1 8c a7 e8 4b c7 30 0c 5c 57 e5 d6 e8 c0 c5 f2 5f 98 46 ea 9e af 2d bf 2e d2 94 21 dc 48 31 da 77 1a c2 f8 65 84 f5 1a 84 b4 5c 30 a1 b0 8e 04 1f e6 01 2f bf b1 66 93 bc 14 af b2 eb bf 17 c1 7e 66 24 97 d8 fd f7 af 28 3d ea f7 5e c1 09 c4 a7 31 87 74 64 fd 6b 4e 43 9f ee f3 bb 1a 8d a6 a6 2e ae 68 ea 9b c4 41 fb 25 ac e4 1d c6 81 49 c6 2f bc ea ae 4d 6f ba 7b 74 cc cc 3f 1d 21 be 82 79 3e 07 46 5f e5 a2 c6 bd 45 56 df 1f 46 ba e5 f8 0e ab 3a ee c1 8f 7b 81 fe ea 5d 8f 16 56 16 9b 5f c4 52 fe 1a cc 8e 96 79 30 e0 1e 35 53 8e 6d b1 19 33 0f f0 d1 d0 f3 fc f2 e9 63 5f ff dc b5 1b df 89 80 70 af e0 34 4c 85 1b c0 f9 30 c2 29 da a1 4f 37 18 38 f2 83 38 14 74 de d9 74 Data Ascii: 1WkGgy87ckK0\W_F-.!H1we\0/f~f$(=^1tdkNC.hA%I/Mo{t?!y>F_EVF:{]V_Ry05Sm3c_p4L0)O788tt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49849	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:08 UTC	2350	OUT	GET /images/products/prod11/6-bottles.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:08 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:08 GMT Content-Type: image/png Content-Length: 668416 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-a3300" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4971 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ScQyRzP6zg6zzLWQT8jTqVHEJh8PD6HkssRiuvOfgJo723FoNp%2FkRPHAfpE%2FQSqsGPv4dt8GFJBVLUdLGsaqUfkLFINSLj%2F9ys3gJdgS8migjem%2Bqwc5Vs7R4KrD%2BRVCToU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27275e6317b5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1682&min_rtt=1678&rtt_var=638&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2928&delivery_rate=1703617&cwnd=252&unsent_bytes=0&cid=58283119dab58f3f&ts=121&x=0"
2025-01-10 16:48:08 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 36 00 00 02 58 08 06 00 00 00 99 fd 66 5c 00 00 20 00 49 44 41 54 78 9c ec bd 69 8c 6d cb 75 1e b6 ea 9c d3 b7 ef f0 e6 91 7c 8f a2 f4 c4 41 a2 44 53 a2 48 53 b4 4d 28 b2 14 0d 16 12 33 96 22 58 3f 2c c1 48 e2 00 92 20 d8 82 1d e4 8f a1 48 48 fe 44 70 10 18 08 2c c7 88 7f 44 b6 1c 01 09 62 cb 40 10 01 31 ac c1 83 06 4a a6 68 92 96 48 8a a2 48 4a a4 de 7b 7c f3 9d bb 7b 57 b0 fa ed 75 f9 dd ef 7e ab f6 3e dd b7 bb 4f f7 ad 0f 38 dd e7 ec 5d 73 ad 5d b5 d6 b7 57 55 15 3b 24 6a ad 87 4d a2 a3 a3 a3 e3 48 f0 da 6b af 6d 54 c3 96 72 e7 90 eb 63 a8 ba 7e b7 a0 d2 8f 6b 78 6f ee 77 ac 07 a7 ad 7e 73 bd d5 b5 ac 1d 70 7e c9 da 2e bb 47 f7 97 66 76 d1 cc 2e 8c ff 39 dc 96 99 dd 3f de df 2e a5 5c 32 33 ff dc Data Ascii: PNGIHDR6Xf\ IDATximu\|ADSHSM(3"X?,H HHDp,Db@1JhHHJ{\|{Wu~>O8]s]WU;$jMHkmTrc~kxow~sp~.Gfv.9?.\23
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 5e 4e ff ef 65 f5 7c fd 7b dc f3 df 1e 2f e4 cf ff fb 6f 94 4b af 87 ff f7 b0 7e dd 7f 63 9c 08 87 f2 ef 61 22 bc e7 7f 94 e3 c3 1c 3c f9 e4 93 27 9a 7f 47 47 47 47 c7 e9 c5 71 ce 61 4d 45 ad a3 a3 a3 a3 a3 e3 98 71 6e 24 12 6c 24 04 1e 31 b3 47 c7 ff 8f c1 bc e5 44 c0 83 66 f6 84 99 3d 34 de 7f 00 8b 5a 4a b9 38 86 b9 7f fc 5c 1c 09 0b a3 70 87 ae a1 a7 91 11 3e 87 4d b7 05 24 a9 0e 5a 66 37 d4 27 70 79 fc 5c 59 2e 97 af 2c 16 0b 67 0c af 51 d9 fc da b3 a5 94 17 57 ab d5 8b a5 94 d7 80 a8 71 b2 c4 af 3d bf 58 2c 3c cc 65 88 77 d5 89 19 55 7e bf c6 d7 fb cb 94 8e 8e 8e 8e 8e 8e 0e 85 4e 6c 74 74 74 74 74 1c 25 fc 75 ef 57 98 d9 e3 63 1e db 66 f6 26 33 fb aa f1 da be 75 5c 4a 71 d2 e2 0d 23 51 f1 c0 78 ad 8c 44 84 b4 ee 33 a3 bf 75 bd 45 14 1c 96 8c 98 6b Data Ascii: ^Ne\|{/oK~ca"<'GGGGqaMEqn$l$1GDf=4ZJ8\p>M$Zf7'py\Y.,gQWq=X,<ewU~Nlttttt%uWcf&3u\Jq#QxD3uEk
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 48 44 e6 05 61 23 89 e2 65 7b e9 a5 97 6e 95 19 37 f2 9c eb 15 70 37 c0 06 bd 22 54 5a 6d 63 c2 3b 01 e3 f1 72 0f f4 2a 68 a5 c7 7b 94 28 6f 0a b5 54 44 dd cb ea d7 22 38 30 3d ee 13 26 4e 42 26 b8 2c 28 ab b1 2c 44 d5 33 64 c9 c3 04 d9 10 c4 83 7f aa d8 e8 d5 7f 3b e1 66 40 a6 61 3c 24 7b a2 6c af bd f6 da fe f3 10 84 48 81 bd 3a 7c b9 4a 78 8a 84 bc 8f 65 71 56 e5 e9 e5 72 f9 74 ad f5 3b 47 ef 0e bf fe fc 30 0c be af c7 bf 18 86 e1 df ef ed ed fd 76 ad f5 13 99 ac 74 74 74 74 74 74 74 dc 1d 1c 5a 43 ec 93 75 47 47 c7 a6 c2 0d 96 4d 82 32 ca 67 78 20 3c 63 66 df 36 7e de 33 9e 42 22 8d c1 20 02 82 b4 70 92 00 c9 8c 30 22 c3 d0 8b 8f 1b 6f 6a 63 47 05 26 3b a6 96 34 ac 03 37 0e bd cf 9e 7b ee b9 db f6 57 38 6e 64 1e 12 06 44 04 7b 43 18 78 51 e0 75 24 2b Data Ascii: HDa#e{n7p7"TZmc;r*h{(oTD"80=&NB&,(,D3d;f@a<${lH:\|JxeqVrt;G0vtttttttZCuGGM2gx <cf6~3B" p0"ojcG&;47{W8ndD{CxQu$+
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 3f a7 d5 ea 23 f6 1c 40 4f 8c cc eb 01 f7 5b 39 88 b7 88 aa 77 b6 34 86 97 98 b4 3c 2c b8 4e aa 5c 8a 14 c9 ea 8b c7 01 e3 3d 26 21 b0 5d 70 a3 4e 3e 62 37 7e 17 71 c2 89 c1 33 c5 ed 83 f1 8d 08 98 02 47 ce c6 be 1c b8 31 2b 9e a8 12 a4 8c 5f 3b 7f fe fc bb 96 cb e5 6f ec ee ee fe d0 de de de 3f 3a e9 e5 59 1d 1d 1d 1d 1d 1d 9b 8e 4e 6c 74 74 74 74 1c 1f fe 97 16 a9 81 06 5a 11 fb 66 9c 75 6c 9a f1 96 91 00 48 44 e0 de 0f 53 1e 12 2d 62 44 ed 67 51 92 13 51 32 a2 05 97 52 30 b9 a1 bc 25 32 a2 c2 84 e7 85 ba 6e e0 55 c1 cb 62 f8 bf 22 77 d8 23 03 d3 34 f2 0c 31 92 8f d8 37 26 88 00 f4 d2 c8 da 3c 88 07 f6 e8 e0 fc b8 9f 99 b8 31 b1 81 a9 6a 2f ae 1f 9e d6 82 79 06 11 e3 c4 07 ee e1 e1 1e 5a 8b c5 e2 67 af 5d bb f6 ea 30 0c bf d0 3d 37 3a 3a 3a 3a 3a 3a 72 Data Ascii: ?#@O[9w4<,N\=&!]pN>b7~q3G1+_;o?:YNlttttZfulHDS-bDgQQ2R0%2nUb"w#417&<1j/yZg]0=7::::::r
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 59 c3 f9 a8 72 75 74 74 74 74 74 74 dc 89 3e 43 76 74 74 74 1c 3d b6 7b 1b b7 e1 27 a2 9c 24 a1 a3 88 09 7e db 9f bd 99 6f 21 f3 ae 50 f9 67 e5 31 4a 87 bd 02 94 e1 cc 9b 7f aa 3a a8 7b 9c 7f cb 5b c3 12 8f 09 4e 2f ab 6f d6 26 2d 62 88 eb 18 de 14 2d af 18 ae 77 a4 85 a7 af 20 e9 82 1e 1a 91 4f 10 1d 5c cf cc 33 26 f3 7e 99 aa ab 42 e6 f5 d1 d1 d1 d1 d1 d1 d1 f1 65 74 8f 8d 8e 8e 8e 8e a3 c7 da 1e 1b ea 0d f1 3a f1 f1 e8 c9 4d 87 97 71 13 8e 7a 65 72 03 db 4f 11 0a 36 1a bd 7c 3c 6a 66 ec 2a 28 32 c5 12 c3 39 5b 4e 92 fd 9e 2a 4b 10 02 6a c9 06 d7 37 23 78 d4 fd a9 eb 46 5e 1b 5c 3e f4 52 c8 08 a6 f8 1d a7 e9 6c 6f 6f a7 4b 78 32 0f 12 b5 77 06 97 85 cb c9 32 92 e5 85 69 b4 ee 73 9d 78 59 0c e6 d7 bd 35 3a 3a 3a 3a 3a 3a 72 74 62 a3 a3 a3 a3 e3 e8 71 6e Data Ascii: Yrutttttt>Cvttt={'$~o!Pg1J:{[N/o&-b-w O\3&~Bet:MqzerO6\|<jf(29[NKj7#xF^\>RlooKx2w2isxY5::::::rtbqn
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 92 02 7f 73 ff 4f 2d 4d 52 04 5f 94 29 3c 9b d4 27 c2 05 d1 e3 64 aa 22 48 30 6e 85 a5 37 d8 be 48 f6 f0 26 ab ea 1e 93 43 9c 27 a7 91 8d 8b a2 9f dd 6b e4 3e ff 88 79 e3 19 ac 07 cb 9d 7b 49 18 91 54 5b 5b 5b 1e e8 25 f7 c6 1b cb f8 fc f6 f6 f6 e7 17 8b c5 73 63 9f dd 5c ad 56 9f 29 a5 fc 41 29 e5 a6 13 20 8b c5 e2 33 b5 d6 cf b9 a7 8a 7b 9a d4 5a 6f b6 88 c0 8e 8e 8e 8e 8e 93 41 27 36 3a 3a 36 0f ab d1 5b c2 49 88 af 37 b3 47 4a 29 4e 5e bc d3 cc de 58 5e d7 d0 be d2 cc de 3a ba 1a 9f c3 a5 1f 99 32 3e f5 f6 cd 04 29 10 2e b0 68 38 04 c9 80 a7 06 60 78 bc ae 88 8c f8 a8 30 0c 8e 8f 46 03 1b 03 6c 34 60 9d 58 21 56 46 1d 1b 73 58 7f 4c 0b cb ad 0c 34 95 be bb 2c a3 3b 74 c7 ed 58 87 54 38 2a a0 3c b5 88 37 65 cc f3 35 b5 19 27 82 e3 b5 64 7f ee f7 8c 98 Data Ascii: sO-MR_)<'d"H0n7H&C'k>y{IT[[[%sc\V)A) 3{ZoA'6::6[I7GJ)N^X^:2>).h8`x0Fl4`X!VFsXL4,;tXT8*<7e5'd
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: ef 33 33 5f 42 f2 4d 26 94 f3 20 1f 82 c0 88 63 e4 e2 7f 28 70 4f 3c f1 84 9d 3f 7f fe 8e 37 8f 01 7e 6b 18 ca 57 90 16 e8 52 ab ca a1 10 0a e4 cb 2f bf bc 5f 96 20 36 a6 f6 07 b8 1b a8 e2 4d 73 66 50 62 dd f9 e4 01 a5 04 c7 35 0c 9b 29 db 98 77 f6 26 96 8d 1c 65 28 31 c1 c1 e5 3f a9 d3 3e 4e 03 42 f9 3f 29 64 c6 15 2e e1 68 11 4e ea 5e 8b cc 9a 7a 8b 9e 2d b7 62 83 93 cb a7 08 03 75 9d c9 0b ae 1f c6 51 86 33 bf 69 57 c6 23 b7 85 35 0c f1 cc 80 57 f1 b9 ae 85 f6 33 51 cb 2d 2c f1 cc c8 36 f0 e4 3e 65 03 7a a0 4d 8c b1 4e bc 59 28 42 b5 89 42 6b 4c 53 75 c8 d2 52 86 3d b7 b1 22 07 e6 e6 cd 61 55 3c 94 43 5e ee 83 df 39 3d 94 71 1c c7 99 58 8a df b8 37 86 91 ac b1 9c e1 92 a1 2a f6 64 09 c2 22 96 ad 14 d8 8c 35 f2 f1 7c 7d 0e 8f 74 3c 9c 13 17 7c bc b6 ff Data Ascii: 33_BM& c(pO<?7~kWR/_ 6MsfPb5)w&e(1?>NB?)d.hN^z-buQ3iW#5W3Q-,6>ezMNY(BBkLSuR="aU<C^9=qX7*d"5\|}t<\|
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: b9 bd 54 1a 6c ec e2 66 a0 d8 4e 51 3e 5c 3a 50 68 73 4a 36 be 2b ed db 90 2d 59 ca 9e 5f 6e 4f 2e 4b d6 af 6c 8c 2b 39 c9 88 26 d5 07 bc 6f 85 2a 2f e7 c5 e9 63 9f 2b 39 53 fb c0 a8 7e cc 9e 2d 23 19 6d 91 29 2d 4c 11 5b 4c 6e a8 76 c7 93 c5 98 24 e1 65 56 18 86 89 b9 3a 2e 43 c1 17 1c 05 f6 ef 88 39 27 f4 09 d7 1b 7c b9 aa eb 0d 2f bc f0 c2 fe 5e 1d ae 7b f8 3d 27 41 fc a5 89 7b 92 38 c9 81 f5 5a ad 56 e7 b6 b6 b6 be 7f 7b 7b fb fb 77 77 77 3f 72 e3 c6 8d ff 69 18 86 7f d4 6c a8 8e 8e 8e 8e 33 82 4e 6c 74 74 98 fd b0 99 fd 0f a3 b7 c6 6d 70 45 c3 09 8d cb 97 2f df 72 0f 8d 37 2c 53 08 85 26 db 10 b4 e3 ce 65 38 f8 9f 15 77 4b 94 fe 6c c3 40 45 36 28 83 34 cb 9b 15 d5 a9 78 ca 3d 9f 8d 97 b9 b8 1b 9b 8d 9e 06 99 53 c6 ec 49 94 81 65 68 ea 08 54 0c 9b 19 Data Ascii: TlfNQ>\:PhsJ6+-Y_nO.Kl+9&o*/c+9S~-#m)-L[Lnv$eV:.C9'\|/^{='A{8ZV{{www?ril3NlttmpE/r7,S&e8wKl@E6(4x=SIehT
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 38 11 9c e4 a4 5a 4a f9 91 c6 bd db 14 82 c3 96 b3 bf 11 b9 1d 53 0a 9a d1 32 99 00 2a 95 a8 14 66 6b 9f e7 2a 7f 98 a7 35 14 f4 56 da 5c 1e be 77 10 8f 8d bb 45 36 9d 16 f9 3b a9 f1 20 93 15 c4 1c e3 b2 4c 9c 00 a1 d2 98 32 58 54 7c 94 b5 58 5a 91 85 61 a3 86 cb 39 d5 06 7c 0a 8a 2a 1b 1b e4 18 3e 5b 26 a0 f2 6e 19 a9 5c 8e b9 9e 03 4c 3c 32 f8 6d ba c1 35 cc db c4 f3 c8 e5 9a 22 23 78 c9 01 6f 44 aa ca 6d 34 ee 59 c3 30 57 f7 79 69 0a b7 93 2a 3b d7 51 91 2d 96 f4 5b 56 c6 ac 6f 4a 63 a9 4e 56 9e 56 3b 99 90 59 f6 06 a9 44 a4 65 e3 6c 85 e5 48 b1 5f 05 cb 7a 56 07 23 f9 e0 7c 94 27 90 2a 23 9e 5e a3 c8 48 cc 93 c7 1e fe ce fd b2 58 2c de 52 4a 79 cf de de de 6f 77 1d a5 a3 a3 e3 2c a1 13 1b 1d f7 22 de 96 d5 f9 6e 19 58 68 d0 6e ea 66 5d ee 9a 7a 12 06 Data Ascii: 8ZJS2fk5V\wE6; L2XT\|XZa9\|>[&n\L<2m5"#xoDm4Y0Wyi;Q-[VoJcNVV;YDelH_zV#\|'*#^HX,RJyow,"nXhnf]z
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: ad 7a b1 91 c8 79 66 e5 51 cf 6a d6 5e 2d 82 84 cb cb e3 21 ef f7 d0 da 2b a3 90 57 85 32 1c 95 41 dd ea 3f d5 c7 58 56 55 a7 39 84 c2 dc b1 49 19 e8 53 06 78 26 1f 59 ba 0a 59 dc a9 71 b9 0a ef 16 83 76 61 12 4f a5 9d 3d 17 41 3e a8 71 8a cb c0 f7 98 b4 e2 3c 90 e0 68 91 14 73 48 bd 0c 53 84 49 27 36 3a 3a 3a ce 12 3a b1 d1 71 af e1 dc 5c 62 e3 b0 86 e1 a6 4e e8 ae 48 f9 89 28 71 84 dd 71 22 33 b8 59 89 cb 94 e4 96 62 a6 a0 f2 c8 14 d0 16 b9 a1 a0 e2 64 8a f1 dc f4 8c 94 f4 83 82 15 fd 4d c6 26 94 af 45 66 b0 6c 5a c3 08 42 54 71 12 43 96 b7 ba 9f a5 9f 19 ac aa 3e aa dc 99 91 c5 f1 32 52 64 ee 26 a4 ea 99 e0 e7 5f 91 13 1c 36 cb 87 fb 48 ed dd 80 69 f0 a9 1a f8 f6 5c c5 c3 8f 3a 9d a6 d5 0e 59 fb aa e7 b2 65 1c cf 91 81 93 18 2f 6d e2 99 51 50 75 cf 64 Data Ascii: zyfQj^-!+W2A?XVU9ISx&YYqvaO=A>q<hsHSI'6::::q\bNH(qq"3YbdM&EflZBTqC>2Rd&_6Hi\:Ye/mQPud

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49851	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:08 UTC	2342	OUT	GET /images/custom/exit-popup.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:08 UTC	898	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:08 GMT Content-Type: image/png Content-Length: 215779 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-34ae3" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4971 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ig7mUJRIP14klyGkeSkctYsEPV8LCmBABkF9Y3WXuVYlq9H%2BFo668Gsn9my%2FVQHQOw2RAr1%2Fpny3ZPuTvF9TIfOgf2wzZOJlRTD8r28YS1g4fDW7g6RUpCCz2mWeT5kMWAM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe27279ca5238e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2080&min_rtt=2007&rtt_var=805&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2920&delivery_rate=1454907&cwnd=234&unsent_bytes=0&cid=04f7c67737679c05&ts=120&x=0"
2025-01-10 16:48:08 UTC	471	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 9d 00 00 01 10 08 06 00 00 00 f2 13 cf a5 00 00 20 00 49 44 41 54 78 01 ec dd 77 b4 65 59 55 ef 71 04 01 15 51 0c 28 06 e8 ae ba 75 ef ad aa ee 06 13 26 10 13 2a 26 8c 18 00 15 c5 84 8a 20 66 09 06 0c 80 01 15 c1 8c 08 46 c4 80 81 68 40 31 60 9b 51 90 6e 50 82 36 43 50 31 00 4a 18 b8 df f8 ec f2 5b cc b7 c7 a9 06 df f3 af 5b b7 c6 98 63 ad bd c2 5c 73 cd 35 c3 ef ac 7d ce ad eb 5c e7 3a d7 59 2e 66 7a 93 37 79 93 e5 e6 37 bf f9 4a b7 b8 c5 2d 96 77 79 97 77 39 4f ef fc ce ef bc 44 ef f4 4e ef b4 6c 49 df 1c ff ae ef fa ae 0b d2 66 ec 3b be e3 3b 2e 37 bb d9 cd d6 ba 36 eb 58 43 d9 58 3c 8c 35 6e 92 b9 a8 be 77 78 87 77 58 fb f1 69 0e 3e 67 cf 9e 5d de e7 7d de 67 b9 dd ed 6e b7 bc ff fb bf ff 5a 7f Data Ascii: PNGIHDR IDATxweYUqQ(u&*& fFh@1`QnP6CP1J[[c\s5}\:Y.fz7y7J-wyw9ODNlIf;;.76XCX<5nwxwXi>g]}gnZ
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: f2 27 af fb b0 27 f4 29 9f f2 29 eb b3 3d d8 cb c7 7c cc c7 2c 77 bc e3 1d d7 79 1f f9 91 1f 79 9e 0f 5e fa 3f e3 33 3e 63 f9 ec cf fe ec e5 f3 3f ff f3 97 7b dc e3 1e eb 5c 73 ee 7f ff fb 2f 8f 7b dc e3 96 9f fb b9 9f 5b 1e f3 98 c7 2c 8f 7c e4 23 97 47 3f fa d1 cb 63 1f fb d8 e5 17 7e e1 17 d6 e7 fb de f7 be cb 17 7c c1 17 2c 5f f4 45 5f b4 7c c5 57 7c c5 72 cf 7b de 73 b9 fb dd ef be dc ed 6e 77 5b ee 7a d7 bb 2e 1f fb b1 1f bb ee c3 39 d1 97 f2 e4 c9 93 cb a5 97 5e ba 92 b3 a4 cb 49 f4 6c 2c 1d d8 b3 33 22 27 1d d0 85 73 51 66 27 ca 0f fe e0 0f 5e 3e f0 03 3f f0 7c 9b b3 36 97 6e c8 f2 59 9f f5 59 ab 3c 9e ed ed 0e 77 b8 c3 42 17 ea 64 a4 53 fa f0 6c 0c d9 e9 e4 73 3f f7 73 cf ef ef f3 3e ef f3 56 9b b1 bf 2f fd d2 2f 5d 1e f0 80 07 2c 5f f3 35 5f b3 Data Ascii: ''))=\|,wyy^?3>c?{\s/{[,\|#G?c~\|,_E_\|W\|r{snw[z.9^Il,3"'sQf'^>?\|6nYY<wBdSls?s>V//],_5_
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 31 e8 3c a2 37 a2 0e 38 d0 c8 a1 04 99 3e d1 a9 23 fd 11 50 58 bd 79 8d ab d4 3e 41 a4 67 3c f1 e7 94 39 6f c0 b3 f1 01 ce ca 40 67 20 73 26 4b 09 ce 3c 01 4a 70 09 a4 05 d4 04 1a 0e 99 83 09 6c 05 db 02 74 81 58 70 d3 9f 03 72 be 80 21 10 27 01 48 38 80 66 00 03 90 e3 cc e6 00 30 80 8a 3e e0 4d 92 21 17 67 b4 86 00 32 d7 e0 ec 64 23 37 f0 28 10 5b 07 b0 28 41 b9 19 41 f6 33 a9 7d 06 42 25 39 c0 c9 8d 9e 3a 1e e6 91 49 12 93 cc f4 03 60 80 26 f9 94 e4 dd 92 76 c0 00 a0 34 0e a8 42 dd 7c 02 9b ea da dc 02 02 51 c0 a2 d2 4d a7 b5 8c f9 ce ef fc ce e5 29 4f 79 ca 7a 0b e7 c6 13 fd d2 2f fd d2 12 e8 74 33 e7 b6 cf 1c 00 cd cd dd 57 7e e5 57 ae e0 0e c0 73 53 48 76 67 20 28 15 a4 d4 d9 4e 76 c3 9e b2 47 75 41 8c 9e 9d 39 9d d1 01 7d 01 17 74 22 c9 d3 45 37 5b Data Ascii: 1<78>#PXy>Ag<9o@g s&K<JpltXpr!'H8f0>M!g2d#7([(AA3}B%9:I`&v4B\|QM)Oyz/t3W~WsSHvg (NvGuA9}t"E7[
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 56 60 ca d1 38 42 4e c0 d8 0b 1a 1c 88 23 73 74 8e 29 e0 70 5e fc 80 1f 49 04 30 73 c3 e4 7b 88 00 03 80 05 c4 48 1e 80 47 af 5f 25 28 41 ad bd e2 cd 99 67 10 11 10 0b c0 05 c7 40 27 d0 28 e9 01 97 4a 89 68 52 a0 52 49 36 65 37 29 3d 93 ad 1b 95 80 25 30 08 34 92 5d 02 d5 5e 9f e7 6e 3d 25 56 e3 00 04 e4 19 08 05 c8 80 ac 6e f5 80 44 c0 06 90 02 b8 8c b3 07 e3 7c 7f f3 b7 7e eb b7 d6 1b 38 df e3 fc c5 5f fc c5 e5 57 7f f5 57 d7 d7 ed 5e b9 ff e8 8f fe e8 3a 17 70 75 8b 08 a4 e1 e1 19 91 d1 19 96 18 0b 7a 05 6e 65 c9 b2 00 26 a8 39 c3 ce 9a 5d a0 82 9f 20 eb 6c e9 9b 8d d0 11 d0 67 ef d6 b3 57 e7 e8 7c dd b6 ba b9 24 53 fb 04 8c 01 4e 60 12 b0 04 3a d9 83 fd f6 5a dd 1c 37 98 bd 5e 07 42 b5 19 6b 0c 3d 5a 33 30 e2 5c bb f1 29 39 94 68 d8 1f d9 d9 11 fb 21 Data Ascii: V`8BN#st)p^I0s{HG_%(Ag@'(JhRRI6e7)=%04]^n=%VnD\|~8_WW^:puzne&9] lgW\|$SN`:Z7^Bk=Z30\)9h!
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: b7 6f 6e e3 7c 9f 53 9b 1f 17 01 9d df f7 7d df 77 1e c0 79 6d ed 55 31 d0 e9 96 93 8e e9 db d9 39 ff 80 26 7d 66 a3 e9 56 f0 d2 cf 16 d8 54 41 d0 f9 f6 49 da d9 97 00 9d cb 3c 67 c9 87 ae e8 29 d0 09 40 02 8e 9e e9 8c 2e 94 9e bd 16 07 2c e9 c2 57 00 e8 85 ee d4 f5 01 22 f4 00 88 d0 7b 40 93 4d f8 90 82 fa f0 a0 74 5e 25 3a ba 23 4f 49 86 0d 0b d6 ed 8f 3e 24 42 49 83 9d d0 93 bf 0a 40 af fe 22 80 d7 ec 2f 79 c9 4b 96 57 be f2 95 8b 5f b1 d3 29 50 64 0d 73 03 93 74 b8 0b 24 d6 6e dc bc e9 6c ac d2 98 c6 d5 1e d0 8c 7f e3 3c 07 3a d9 09 d0 e9 56 18 ef 12 8d 73 ca 17 c9 58 72 ca 5f 4b c2 9e f5 f1 21 a4 de 18 f3 f8 97 b2 b6 92 68 25 bb 88 b4 19 bf 25 ed 08 0f a0 87 ae d3 b7 98 20 16 38 3f 3a 65 13 c8 6d 27 db 09 64 02 9a ea 81 cb 6e 3c 81 ce 40 a9 0f 84 ce Data Ascii: on\|S}wymU19&}fVTAI<g)@.,W"{@Mt^%:#OI>$BI@"/yKW_)Pdst$nl<:VsXr_K!h%% 8?:em'dn<@
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: bb b6 1f e7 41 ef 3f f3 33 3f b3 ea f6 cf ff fc cf d7 57 eb 7e 48 f4 dc e7 3e 77 bd 4d 06 f2 c8 42 97 f9 60 be 45 87 74 da 33 1d 23 cf c6 f2 5d 65 a4 7d 52 ed ca d9 9e 7f 6a f7 fd 4d 3f 24 9a 37 9d d6 0c 14 92 ab 84 56 a9 8f af a0 c6 29 6b 57 d2 83 7e 49 0d 0f cf 91 7e 67 ae af 39 c6 f0 75 7a cc 56 f4 59 b3 be 3e c0 d4 a6 34 be 75 24 c7 12 be f3 72 d6 ec 81 ef 01 95 dd 72 06 48 d9 54 60 b3 d2 f9 b2 3f f2 91 83 8d ce 18 41 16 ed c9 54 7c f2 5c 9b 92 5d 9b c7 ce d5 d1 76 9e 71 ed b5 b9 f6 84 e7 ec eb 79 b6 c5 4b db d4 d3 96 9f b9 28 19 8c 9f 6b 78 ae 6f f2 dc ae 15 df 59 36 af 33 74 9e 13 7c 06 1c 03 62 f9 9c 38 1a 10 cb c7 f3 f7 da 03 61 ca ce 74 f6 01 6a 81 53 31 db da ed 93 ec e9 8c 8c 9e 77 91 bd e8 af ac ee 39 1e f8 a4 af 6c 8d 1d b3 0f 7b 0d 78 6e 81 Data Ascii: A?3?W~H>wMB`Et3#]e}RjM?$7V)kW~I~g9uzVY>4u$rrHT`?AT\|\]vqyK(kxoY63t\|b8atjS1w9l{xn
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 59 cc d1 16 00 05 68 9c 3d bf 70 7e 6c 2b ff c9 87 d8 0c 5b e8 3c 5a 37 20 62 ff d6 4c 27 ca 49 c9 d3 18 f3 8b a1 e9 6f ce 35 ce 9e c8 1b a5 8b c9 77 57 bd b9 c6 37 c7 1a ad 53 3f be ea da c9 33 79 6d f7 37 e7 9a 83 76 c9 3b d7 c3 a3 75 e3 b7 8b 4f e7 ed 4c 50 37 84 e2 83 b3 e1 cb 74 af 0c 7c 8a c3 13 84 02 70 80 59 60 cd 5c 7e ac 4d ac e9 03 ce dc 73 fa 6f ef e9 a5 bd b5 bf f4 d3 78 e5 dc 97 ba 7d b3 dd 62 17 7b 0b 74 92 41 2c da ca 1b f8 24 ab 31 13 78 aa 23 ed c8 be e8 86 4f d0 57 7a ae 4c 66 a5 3d 1a 93 2f a9 67 43 95 cd ab d4 9e fc 93 7f e7 95 6d f4 9c ae cc c1 e3 18 74 5e 44 b7 9f bb 5e af 4b 1a 93 24 1a 09 48 e9 d6 51 02 03 08 24 19 cf fe e0 b3 ba 84 e2 bf b9 93 24 18 15 1e fd b7 7b dd 50 05 c6 18 21 60 da 2d 26 70 86 3f a3 c4 c7 38 25 5e c8 b3 75 Data Ascii: Yh=p~l+[<Z7 bL'Io5wW7S?3ym7v;uOLP7t\|pY`\~Msox}b{tA,$1x#OWzLf=/gCmt^D^K$HQ$${P!`-&p?8%^u
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 90 30 f5 59 ff ae 32 1e 17 5a 6f 3b a7 f1 b5 93 17 91 bf 3d d8 87 ba 31 c6 b7 9f e6 b6 17 fd cd 35 27 da c5 cb 38 f3 ed 8b fe 22 cf fa f0 62 13 40 96 f8 21 36 03 98 13 64 06 34 f5 a9 23 75 be 25 56 3b 4f 73 27 a0 d3 16 70 a3 db f6 a0 9c f2 93 39 39 1a 53 bf f6 e4 4f cf 64 65 0b 01 42 fb d0 e6 d9 7a d6 9d 7b d8 82 4e 7d c9 29 1f 45 da ec c7 7c e0 95 5f b0 7b 7c e9 cc 1a 95 d6 ec 6c d4 d1 dc e3 94 35 7d 2b 1b 33 f7 d5 5e 77 e9 21 5d 19 83 3c 9b 7b 0c 3a 8f 38 c8 dc 7e 8a 90 28 02 84 ca 12 87 b2 e4 32 4b 01 01 f8 63 70 92 a6 5f 30 fb 41 89 3f 85 e3 6f 30 0a b0 92 0d 83 02 10 24 73 20 51 f0 66 60 6e 3f 18 a4 84 e9 66 4c f2 f7 df e5 b9 25 b5 be 64 21 c8 5b 47 e2 32 4f 5d 9f ef 88 71 08 3f 3e 01 a2 f0 e5 64 9c 8b 43 71 84 80 26 1e ea 51 81 8c 0c 19 bd 3d e4 50 Data Ascii: 0Y2Zo;=15'8"b@!6d4#u%V;Os'p99SOdeBz{N})E\|_{\|l5}+3^w!]<{:8~(2Kcp_0A?o0$s Qf`n?fL%d![G2O]q?>dCq&Q=P
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: db b5 f1 6b ec ae d2 fc d9 1e bf da 66 bf 35 02 91 ca 80 57 63 e8 0a 99 ab cd 78 63 b6 e3 5a 23 7e f1 a2 77 6d ec 03 80 02 04 91 33 a3 43 7c f1 32 de 99 6a d3 4f c7 f3 96 33 80 29 b6 03 6d 4a b9 cc 5b 0d b6 06 d0 99 23 06 4d a0 29 3f 4c c0 c6 8e 22 36 60 6f c9 aa 24 ab bd 68 cf a6 95 c6 92 0d 2f 60 d0 1a ed 43 7f 73 8c b1 4f 63 d8 38 99 c8 3a e5 6f 5f 64 46 fa 51 cf e6 98 4b 47 d6 4b 5e eb 64 f7 ca 68 7b 3e 9d 45 32 19 97 ed b7 67 7d f6 db 9e ed bb bd cf b3 9e 6d b5 2b b5 4f d0 d9 6b f6 ed e5 d8 11 7a be b8 7f 48 e4 20 01 3d 24 58 57 57 96 60 24 14 cf 82 b2 64 22 11 b8 c9 94 90 fd 79 16 37 02 8c df 4d 90 40 ca 49 80 52 8e f4 ac 67 3d 6b 05 1e 78 e3 e3 66 d2 77 d4 80 51 af 48 81 32 ff a7 b5 d7 b1 02 b3 db 04 60 b1 c4 61 3d 75 37 14 d6 74 33 e6 0f 61 4b b8 Data Ascii: kf5WcxcZ#~wm3C\|2jO3)mJ[#M)?L"6`o$h/`CsOc8:o_dFQKGK^dh{>E2g}m+OkzH =$XWW`$d"y7M@IRg=kxfwQH2`a=u7t3aK
2025-01-10 16:48:08 UTC	1369	IN	Data Raw: 73 fe 98 2f 69 13 6b c4 1d 71 49 e2 4e a6 a9 23 f2 e9 b3 46 ed 95 fa b4 d7 ef 79 b6 cd 76 3a 8d bf 72 3e ab e3 89 e2 a1 6c 9d c6 c7 db 9a ea da 6b 53 56 bf d0 ba d6 d9 8e 33 76 52 bc ad dd 9e 93 db fc 48 1b 20 85 9c 85 67 e3 9d bf 31 62 33 70 27 0e 3b fb 2d 01 64 c5 7a f1 59 3c 06 3a bb ed 0c b0 05 3c ad d1 b9 e3 8d 9c 9d f8 af 9e 8c e9 90 0c e6 e8 13 cf 8c 63 23 f8 91 09 01 9b e4 72 33 e9 d9 98 78 b2 c5 80 6f a0 d3 38 f9 64 82 4b 75 a4 bd 3e 65 3c d9 3b 9e f9 5a 7a ed 8c ca 97 da ed 81 dc 9d a3 b6 e6 75 2e 9e 51 e7 d8 58 fd 8d c1 63 cb 4b 5f 6b 4c 5d 91 23 3f 9b a5 fa 11 a5 23 bb b1 37 ea c0 26 e8 04 ce 80 bd 40 e7 4c 20 81 4e fd 8c 04 88 e4 b0 92 c1 d3 9e f6 b4 35 21 08 cc 8c db 18 37 09 1c ad d7 eb 6f fa a6 6f ba f6 79 fd ee d5 6b df e1 94 84 25 08 af Data Ascii: s/ikqIN#Fyv:r>lkSV3vRH g1b3p';-dzY<:<c#r3xo8dKu>e<;Zzu.QXcK_kL]#?#7&@L N5!7ooyk%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49859	142.250.186.118	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:11 UTC	798	OUT	GET /vi/QZ5xuqBJH_s/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGDwgVihlMA8=&rs=AOn4CLC0SO246uCSmQDlqeODAlq3F_5aGw HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:12 UTC	655	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 65587 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 16:48:12 GMT Expires: Fri, 10 Jan 2025 18:48:12 GMT Cache-Control: public, max-age=7200 ETag: "1713342611" Content-Type: image/jpeg Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:48:12 UTC	735	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 10 0d 0d 0d 0d 0d 0d 10 0d 0d 0d 10 0d 0d 0d 0d 08 0d 0d 10 0d 0d 0d 11 0e 13 12 11 0f 10 10 16 18 26 25 15 22 20 23 10 10 1c 35 25 20 30 2b 30 30 30 13 1b 39 3d 35 2a 3c 25 2a 30 2b 01 09 09 09 0d 0b 0d 15 0e 0e 15 26 15 10 15 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 32 26 26 32 32 32 26 26 32 26 26 32 26 32 32 26 26 26 26 26 26 26 26 32 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 06 08 ff c4 00 5a 10 00 02 02 02 00 03 04 04 08 09 09 03 09 07 02 07 00 01 02 03 04 11 05 12 21 06 07 13 31 41 51 61 71 14 22 32 72 81 91 92 b1 15 23 62 73 74 a1 Data Ascii: JFIF&%" #5% 0+0009=5<%0+&&&&&&&&&&&&&&&&&&&&&&&&&&&2&&222&&2&&2&22&&&&&&&&2"Z!1AQaq"2r#bst
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 19 16 c1 bd 15 b6 15 2e 62 b9 4c 8c a6 54 e6 45 37 21 c4 ad 75 65 d0 44 55 b1 45 88 8c 49 15 9a 52 28 99 73 45 33 40 53 24 43 45 8c 34 45 41 22 49 0f 44 92 02 3a 0d 12 d0 99 42 13 63 62 68 82 0d 91 1b 16 c8 a8 4c ae 45 92 65 72 32 a8 32 23 6c 44 50 31 21 90 4d 12 44 13 24 99 45 b0 26 57 12 68 d3 21 b2 1b 24 c8 6c 50 f6 09 91 1a 22 ae 8b 02 11 64 8d 44 1b 24 99 0d 92 45 0d 82 00 41 16 22 71 44 11 6c 40 34 53 62 2f 2a 9a d8 a8 c0 b1 14 b3 26 c4 63 c9 1c db 20 60 22 2a b9 44 a6 51 32 9a 2b 94 0a cb 15 a0 d1 64 a2 41 a0 cd 2d 11 9f 93 f7 32 7a 23 3f 27 ee 7f 70 a4 3a fe 4a f7 2f b8 91 1a fe 4a f7 2f b8 91 a9 12 f9 00 00 34 80 00 06 80 00 03 40 00 01 a0 00 00 d0 00 00 68 00 00 34 00 00 1a 00 00 0d 00 00 06 80 00 03 40 00 01 a0 00 00 d0 00 00 68 00 00 34 00 00 Data Ascii: .bLTE7!ueDUEIR(sE3@S$CE4EA"ID:BcbhLEer22#lDP1!MD$E&Wh!$lP"dD$EA"qDl@4Sb/&c `"DQ2+dA-2z#?'p:J/J/4@h4@h4
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: a6 8f 47 c3 ad f2 ea 79 aa bc cd de 04 f5 a3 35 a8 f5 75 4b 69 18 f9 51 e8 c8 e3 db d1 0f 22 7b 46 74 e9 b6 8b 29 6b 66 b6 7e 66 d3 2f cc d6 4d 75 34 aa c7 14 09 13 8a 20 94 51 6c 51 18 a2 c8 9a 44 e2 ba 0c 48 19 50 9b 20 49 8b 40 08 92 44 52 26 80 6c ae 45 85 72 02 03 88 b4 4e 28 09 21 a0 19 43 d0 d2 1a 43 d1 43 48 06 80 04 30 04 56 40 00 c0 01 00 10 45 fa 4c 6b 64 64 4d f4 30 ad 64 ad 46 3d 92 f3 31 a4 f6 cb 2d 97 99 8e d9 ce b5 16 d6 67 d2 bc 8c 1a 91 9f 4f a0 4f 25 64 c4 b5 15 44 b6 27 58 c5 4e 20 c7 14 0d 15 10 68 12 25 a1 a4 41 0d 01 36 85 a0 22 d1 5c 91 76 88 49 01 48 68 7a 25 a0 aa 66 8a 99 7c d7 43 1a 64 54 19 4c cb 5b 29 93 39 d5 54 c4 36 22 34 00 34 04 12 d8 9b 10 01 28 b2 c8 94 a2 d8 94 5a 49 10 5e 44 d1 a8 ca c8 a1 49 0e 23 97 91 45 0d 11 d1 Data Ascii: Gy5uKiQ"{Ft)kf~f/Mu4 QlQDHP I@DR&lErN(!CCCH0V@ELkddM0dF=1-gOO%dD'XN h%A6"\vIHhz%f\|CdTL[)9T6"44(ZI^DI#E
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: c4 61 da bc cc e9 a3 0e d2 55 61 4c 48 94 d7 52 08 e6 da 68 4c 5b 0d 90 02 6c 6c 8b 00 23 7f c8 9f cd 97 dc 49 11 bf e4 4f e6 cb ee 0a 8d 3f 22 1f 36 3f 71 61 0a 3e 44 3e 6c 7e e2 cd 1e 89 e1 e3 be 48 07 a0 d0 42 01 e8 34 02 01 e8 34 02 01 e8 34 02 01 e8 34 02 01 e8 34 02 01 e8 34 02 01 e8 34 10 80 7a 0d 00 80 7a 0d 05 20 1e 83 40 20 1e 83 41 08 07 a0 d0 08 07 a0 d0 52 01 e8 34 02 01 e8 34 10 80 7a 0d 00 80 7a 0d 05 20 1e 83 40 20 1e 83 41 08 07 a0 d0 08 07 a0 d0 52 01 e8 34 02 01 e8 34 10 80 7a 0d 00 80 7a 0d 05 20 1e 83 40 20 1e 83 41 36 40 3d 06 80 40 3d 06 82 90 0f 41 a0 10 0f 41 a0 84 03 d0 68 04 03 d0 68 29 22 d8 15 a2 c8 0a b1 93 02 c4 ca a0 58 61 df 14 d0 09 0c 8d 23 a2 51 88 24 59 18 80 45 16 20 48 68 b1 0d 12 44 51 32 88 b4 09 12 d0 92 02 41 b0 Data Ascii: aUaLHRhL[ll#IO?"6?qa>D>l~HB4444444zz @ AR44zz @ AR44zz @ A6@=@=AAhh)"Xa#Q$YE HhDQ2A
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: e4 47 40 88 32 53 06 ca e3 21 b6 69 10 9b 31 6c 32 24 63 d8 66 ac 50 c1 03 04 61 a8 63 10 d0 01 55 df 22 5f 36 5f 71 71 55 ff 00 22 5f 36 5f 70 aa bb 1f e4 43 e6 c7 ee 2c 2b c7 fe 8e 1f 36 3f 71 69 eb 9e 1f 3f 2f 34 80 60 54 20 18 00 80 60 02 01 80 d0 40 30 1a 08 06 57 65 ea 3a de fa f5 5a 5e d2 5e cb 26 fc 26 05 1f 0d 87 b7 ea 0f 86 c3 db f5 13 ae 35 d1 97 d2 f0 28 f8 6c 3d bf 50 7c 36 1e df a8 75 c3 a3 2f a5 e0 51 f0 d8 7b 7e a0 f8 6c 3d bf 50 eb 87 46 5f 4b f4 1a 29 59 90 f6 fd 44 e3 9b 0f 6f d4 3a e2 74 65 f4 b1 44 7c 81 1c ca ff 00 2b ec ff 00 12 c5 9b 57 e5 7d 9f e2 3a e1 d1 92 be 40 e4 2d f8 6d 5f 95 f6 7f 88 7c 36 af ca fb 3f c4 75 c5 e8 c9 57 20 72 16 fc 36 af ca fb 3f c4 3e 1b 57 e5 7d 9f e2 3a e1 d1 92 ae 40 e4 2e f8 6d 5f 95 f6 7f 88 be 1b 57 Data Ascii: G@2S!i1l2$cfPacU"_6_qqU"_6_pC,+6?qi?/4`T `@0We:Z^^&&5(l=P\|6u/Q{~l=PF_K)YDo:teD\|+W}:@-m_\|6?uW r6?>W}:@.m_W
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 14 78 a4 3f 2b ec 92 7c 52 b7 fd ef b2 3a a1 a5 b2 42 48 85 39 51 b1 b5 1d ed 75 7c cb d0 5d a2 a7 85 4d 11 2e 71 2a 68 8a 69 8c 82 24 04 64 51 32 e9 14 c8 94 52 c4 86 c4 61 a8 63 44 46 80 91 55 ff 00 22 5f 36 5f 71 69 55 ff 00 22 5f 36 5f 70 55 f8 df d1 c3 e6 c7 ee 45 a4 31 97 e2 e1 f3 63 f7 22 dd 1e c9 e2 3e 76 5e 6a 20 4b 41 a2 b3 b4 40 96 83 40 da 20 4b 41 a0 6d 10 25 a0 d0 36 88 12 d0 68 1b 44 c0 cf f9 51 ff 00 d7 a4 d8 e8 d7 f1 1f 95 1f 73 fb ce 7c 9e d7 5e 1f 73 08 00 0f 33 d6 00 00 00 69 08 9a 40 38 c4 ba 35 85 70 32 63 10 aa d5 63 e4 2c 64 5b 22 a3 ca 1c a4 79 c3 9c 22 5c a1 c8 47 9c 39 c0 97 28 72 91 e7 0e 70 25 ca 1c a4 7c 40 f1 00 97 20 72 11 f1 03 9c 09 72 07 21 1e 70 e7 02 5c a3 e5 21 ce 1c e0 4b 90 39 08 f3 87 38 12 e4 0e 52 3c e1 ce 04 b9 Data Ascii: x?+\|R:BH9Qu\|]M.q*hi$dQ2RacDFU"_6_qiU"_6_pUE1c">v^j KA@@ KAm%6hDQs\|^s3i@85p2cc,d["y"\G9(rp%\|@ rr!p\!K98R<
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 5f 8d 2d 79 2e 8f ea 20 c4 48 9a 88 45 16 46 26 98 b4 a3 02 c8 c0 94 62 5c a0 18 b9 2a e4 24 a2 5c a2 3d 17 4e 77 91 4f 28 9c 0b f9 45 a1 aa cf a8 c7 71 22 e0 64 38 91 71 0e 93 26 33 44 1c 4c 87 12 0e 04 74 95 8e e2 0a 06 42 ac b2 34 91 b9 dd 87 c8 0e 06 7f 80 65 e0 f0 1c 8c 95 63 c6 c7 b2 f5 4a 52 b5 e3 c1 c9 57 1d 3e b2 d7 97 c9 7f 51 36 e9 d2 d1 b8 8b 46 54 aa 2b 94 09 d4 74 a9 d0 12 68 cd bb 81 e4 d7 8f 0c a9 e3 5b 1c 6b 34 ab c8 b2 b6 aa 9b 7b d2 52 f2 7e 4f ea 2c a7 4b 00 36 02 2e d9 30 2d c4 c5 9d d6 42 9a 61 2b 2d b1 a8 d7 5d 49 b9 4e 4f c9 25 e9 27 9d 81 6e 35 92 a6 fa a7 4d d0 d7 35 77 c5 c6 71 e6 8a 92 da 7e 5d 1a 7f 49 51 8c c8 b2 4c 4c 0a d9 5c 8b 59 54 88 aa d8 86 c4 65 61 a2 c8 90 48 b6 11 28 b2 28 92 1c 62 49 21 b3 44 81 12 d0 f4 36 69 10 Data Ascii: _-y. HEF&b\*$\=NwO(Eq"d8q&3DLtB4ecJRW>Q6FT+th[k4{R~O,K6.0-Ba+-]INO%'n5M5wq~]IQLL\YTeaH((bI!D6i
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 9f 4e 69 49 f2 ef d0 a2 d8 d8 e4 d7 70 eb ab 8a b2 ca 2d ae 0f 5a 9d b5 59 18 3f 74 9a d1 8c 76 ae 0f df c5 b9 19 51 a3 89 61 e3 4b 03 22 4a ab 23 5c 64 dd 51 93 d6 e5 cc da 9a 5e 95 a4 78 de f5 3b 1f 0e 13 c4 e7 55 0b 58 d9 10 59 18 f1 6f e4 45 b7 19 57 bf 63 4f 5e c6 89 2a 58 f1 09 7a 93 7a ea f4 9f 42 fc 7c 0b 6d 4e 55 53 65 b1 8f ca 95 15 ce 6a 3e f7 15 d0 eb bf f2 7f c5 56 5f c5 6b 9f c9 b3 16 15 cb 4f af 2c a7 24 fe f2 eb fb ea 78 17 7c 17 86 70 fa 23 c3 71 64 ea ae 32 73 56 5b 08 bd 39 a6 9e a3 bd 6f aa 7e dd 8d ae 9c 53 fc 8d ef 62 b0 21 93 c5 b8 7d 17 41 59 55 b9 34 42 c8 4b 7c b2 83 9f 54 f5 e8 3a 2f 7d dc 1e 89 7e 0e e2 b8 b5 aa ff 00 08 57 27 6a 82 4b 9d f2 42 70 9b 4b a6 f5 36 9f b9 1a 3e e8 bb 49 6e 07 13 aa 8a eb ae 71 e2 16 51 8d 6c ad e6 Data Ascii: NiIp-ZY?tvQaK"J#\dQ^x;UXYoEWcO^*XzzB\|mNUSej>V_kO,$x\|p#qd2sV[9o~Sb!}AYU4BK\|T:/}~W'jKBpK6>InqQl
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 65 1d ad e0 f9 59 3f 07 85 1c 5b 87 a7 26 e9 fe da 51 72 51 df 9b 8c 94 64 92 7e 4d 7d 7c 2f 7b 5d 3d 3d 48 ab 2a c7 9c e4 a3 18 4a 52 97 c9 8d 71 93 94 be 6a 4b a9 1b 29 94 1b 8c a2 e3 25 d1 c6 69 a9 27 ed 4f c8 fa 63 b5 7d a6 a3 82 e2 e0 71 19 63 fc 27 36 cc 7a b1 31 e3 29 72 c6 15 a8 29 d9 2e 6d 3d 7f 67 df d0 e1 bd bb ed 6b e3 19 8b 2d d2 a8 4a aa aa 55 c6 4a 5a 71 4d c9 f3 69 6f ab 7f 41 47 98 8c 1b 69 24 db 7d 12 8a 7b 6f dd e9 2e c9 c1 b6 9d 78 d4 d9 57 37 97 8f 5c a1 bf 77 32 5b 3b 37 00 8e 3f 66 78 25 3c 56 da 23 7f 13 cf d7 c1 e3 72 fe 8e 32 4e 51 8a 7f d9 4a 2b 99 eb ab da 45 9d 95 ef 43 f0 d5 eb 85 71 8c 5a 27 4e 63 75 d5 2a 63 24 a3 66 be 2c 5a 6d fb 74 d6 9a 7a 22 38 6b 44 7f f5 f4 9b fe d8 70 07 c3 78 8e 56 13 6e 4a 99 fe 2e 52 d6 e5 4c a2 Data Ascii: eY?[&QrQd~M}\|/{]==HJRqjK)%i'Oc}qc'6z1)r).m=gk-JUJZqMioAGi$}{o.xW7\w2[;7?fx%<V#r2NQJ+ECqZ'Ncuc$f,Zmtz"8kDpxVnJ.RL
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 31 7e be 5e 6e 8b e7 53 1f b4 72 13 a2 f7 29 c5 56 3f 1a ae a9 b4 ab cc aa dc 69 a9 7c 96 f9 79 e3 bf a6 1a fa 49 92 c7 a5 bf 88 fe 07 e0 7d 96 82 f8 b2 bb 32 1c 46 e4 fc dd 6a 5c cf 7f 45 d0 5f 41 ea a1 d9 c8 c3 b6 57 e7 49 25 45 78 2b 3b 99 fc 95 39 43 e0 ed fd 51 9b 39 df 7e 99 b0 7c 4b 1b 0e 96 95 58 38 95 55 15 17 b5 17 36 de be a5 59 d2 38 d7 69 eb 5d 94 7c 41 38 fc 2b 27 06 8c 3e 64 d7 3b 9c bf 17 28 fd 0e 56 c8 cb 4f 9d 78 df 13 79 99 79 59 52 f3 c8 ba db 7a f9 a5 29 b6 97 d5 a3 be 70 9c fc 0c 6e c7 f0 eb 38 96 34 b2 b0 dc b9 65 55 2b 6d 5a ef b7 52 7f 19 7a 77 f5 9f 39 9d 93 bb 1e 37 89 c4 38 5e 4f 67 38 8d aa 9f 15 ca 58 76 cd a5 d6 52 e7 e5 8b 7d 14 a3 25 cc 97 a7 6d 16 a4 35 da ee ca 7f fc 12 df fb 35 ff 00 fd 4d 27 7a 3d b5 c5 e3 56 61 cb 12 Data Ascii: 1~^nSr)V?i\|yI}2Fj\E_AWI%Ex+;9CQ9~\|KX8U6Y8i]\|A8+'>d;(VOxyyYRz)pn84eU+mZRzw978^Og8XvR}%m55M'z=Va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49864	142.250.184.198	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:12 UTC	635	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:12 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 16:43:13 GMT Expires: Fri, 10 Jan 2025 16:58:13 GMT Cache-Control: public, max-age=900 Age: 299 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:48:12 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49863	142.250.186.98	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:12 UTC	657	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:12 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Fri, 10 Jan 2025 16:48:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49866	142.250.185.164	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:12 UTC	658	OUT	GET /js/th/8p-ZUt2O_r6IumY5TzUY2RZ4QvEtVfvf_MYYDjqPK3M.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:12 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 54903 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 00:03:54 GMT Expires: Sat, 10 Jan 2026 00:03:54 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 60258 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:48:12 UTC	579	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 59 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 57 3a 33 31 3a 74 3d 3d 77 26 26 28 4a 2e 63 6f 6e 73 6f 6c 65 5b 7a 5d 28 51 2e 6d 65 73 73 61 67 65 29 2c 74 3d 6c 29 7d 7d 7d 63 61 74 63 68 28 45 29 7b 69 66 28 55 3d 3d 31 32 29 74 68 72 6f 77 20 45 3b 55 3d 3d 33 33 26 26 28 51 3d 45 2c 74 3d 31 31 29 7d 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 77 29 7b 72 65 74 75 72 6e 20 58 2e 63 61 6c 6c 28 74 68 69 73 2c 77 29 7d 2c 4a 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 77 2c 6c 29 7b 72 65 74 75 72 6e 28 6c 3d 44 28 32 39 2c 32 34 2c 34 31 2c 32 35 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 2c 6e 75 6c 6c 29 29 26 26 77 2e 65 76 61 6c 28 6c 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 22 31 22 29 29 3d 3d 3d 31 3f 66 75 Data Ascii: Y.createPolicy?W:31:t==w&&(J.console[z](Q.message),t=l)}}}catch(E){if(U==12)throw E;U==33&&(Q=E,t=11)}},k=function(w){return X.call(this,w)},J=this\|\|self;(0,eval)(function(w,l){return(l=D(29,24,41,25,"error","ad",null))&&w.eval(l.createScript("1"))===1?fu
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 62 3d 3d 39 33 3f 62 3d 28 6c 7c 32 34 29 3d 3d 6c 3f 35 34 3a 36 30 3a 62 3d 3d 37 32 3f 28 58 3d 74 79 70 65 6f 66 20 59 2c 63 3d 58 21 3d 74 3f 58 3a 59 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 59 29 3f 22 61 72 72 61 79 22 3a 58 3a 22 6e 75 6c 6c 22 2c 44 3d 63 3d 3d 55 7c 7c 63 3d 3d 74 26 26 74 79 70 65 6f 66 20 59 2e 6c 65 6e 67 74 68 3d 3d 77 2c 62 3d 32 39 29 3a 62 3d 3d 32 32 3f 62 3d 31 36 3a 62 3d 3d 32 39 3f 62 3d 28 6c 26 39 30 29 3d 3d 6c 3f 34 37 3a 38 3a 62 3d 3d 31 36 3f 62 3d 28 28 6c 5e 32 31 29 26 32 35 29 3d 3d 31 3f 33 3a 39 33 3a 62 3d 3d 39 3f 62 3d 28 6c 3e 3e 32 26 37 29 3d 3d 33 3f 37 32 3a 32 39 3a 62 3d 3d 34 37 3f 28 44 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 Data Ascii: b==93?b=(l\|24)==l?54:60:b==72?(X=typeof Y,c=X!=t?X:Y?Array.isArray(Y)?"array":X:"null",D=c==U\|\|c==t&&typeof Y.length==w,b=29):b==22?b=16:b==29?b=(l&90)==l?47:8:b==16?b=((l^21)&25)==1?3:93:b==9?b=(l>>2&7)==3?72:29:b==47?(D=Object.prototype.hasOwnProperty.c
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 29 7b 61 3a 7b 66 6f 72 28 63 20 69 6e 20 55 29 69 66 28 59 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 55 5b 63 5d 2c 63 2c 55 29 29 7b 51 3d 74 3b 62 72 65 61 6b 20 61 7d 51 3d 77 7d 45 3d 38 37 7d 65 6c 73 65 7b 69 66 28 45 3d 3d 32 34 29 72 65 74 75 72 6e 20 51 3b 45 3d 3d 39 3f 45 3d 28 6c 5e 32 30 29 3e 3e 33 3d 3d 31 3f 37 37 3a 38 38 3a 45 3d 3d 32 30 3f 45 3d 28 6c 2b 37 26 37 31 29 3e 3d 6c 26 26 28 6c 2b 33 26 34 36 29 3c 6c 3f 37 3a 32 34 3a 45 3d 3d 37 37 3f 28 74 68 69 73 2e 67 3d 74 68 69 73 2e 67 2c 74 68 69 73 2e 68 34 3d 74 68 69 73 2e 68 34 2c 45 3d 38 38 29 3a 45 3d 3d 39 30 3f 28 59 2b 3d 59 3c 3c 33 2c 59 5e 3d 59 3e 3e 31 31 2c 57 3d 59 2b 28 59 3c 3c 31 35 29 3e 3e 3e 30 2c 63 3d 6e 65 77 20 4e 75 6d 62 65 72 28 57 26 28 31 3c 3c 74 29 Data Ascii: ){a:{for(c in U)if(Y.call(void 0,U[c],c,U)){Q=t;break a}Q=w}E=87}else{if(E==24)return Q;E==9?E=(l^20)>>3==1?77:88:E==20?E=(l+7&71)>=l&&(l+3&46)<l?7:24:E==77?(this.g=this.g,this.h4=this.h4,E=88):E==90?(Y+=Y<<3,Y^=Y>>11,W=Y+(Y<<15)>>>0,c=new Number(W&(1<<t)
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 2c 77 2c 74 2c 55 2c 59 2c 63 2c 58 2c 57 2c 45 2c 51 2c 7a 29 7b 66 6f 72 28 7a 3d 31 32 3b 7a 21 3d 37 34 3b 29 69 66 28 7a 3d 3d 31 32 29 7a 3d 37 39 3b 65 6c 73 65 20 69 66 28 7a 3d 3d 6c 29 74 79 70 65 6f 66 20 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 3d 59 3f 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 55 3a 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 55 29 2c 7a 3d 36 32 3b 65 6c 73 65 7b 69 66 28 7a 3d 3d 36 32 29 72 65 74 75 72 6e 20 51 3b 7a 3d 3d 33 31 3f 28 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 57 3d 76 6f 69 64 20 30 2c 63 3d 44 67 28 59 2c 66 75 6e 63 74 69 6f 6e 28 4a 2c 6b 29 7b 66 6f 72 28 6b 3d 37 36 3b 6b 21 3d 33 39 3b 29 6b 3d 3d 37 36 3f 6b 3d 45 3f 32 30 3a 33 39 3a Data Ascii: ,w,t,U,Y,c,X,W,E,Q,z){for(z=12;z!=74;)if(z==12)z=79;else if(z==l)typeof t.className==Y?t.className=U:t.setAttribute&&t.setAttribute("class",U),z=62;else{if(z==62)return Q;z==31?(E=function(){},W=void 0,c=Dg(Y,function(J,k){for(k=76;k!=39;)k==76?k=E?20:39:
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 33 32 29 29 7c 7c 28 57 5b 58 51 5d 3d 51 3d 6e 65 77 20 4a 6f 28 57 29 29 2c 7a 3d 51 2e 61 64 64 28 63 2c 59 2c 58 2c 4a 2c 55 29 2c 72 3d 33 31 3b 65 6c 73 65 7b 69 66 28 72 3d 3d 37 35 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 61 6e 64 20 61 74 74 61 63 68 45 76 65 6e 74 20 61 72 65 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 22 29 3b 72 3d 3d 33 32 3f 72 3d 57 2e 61 74 74 61 63 68 45 76 65 6e 74 3f 31 37 3a 38 36 3a 72 3d 3d 35 38 26 26 28 72 3d 63 3f 32 3a 32 30 29 7d 7d 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 74 2c 55 2c 59 2c 63 2c 58 2c 57 2c 45 29 7b 66 6f 72 28 58 3d 32 37 3b 58 21 3d 38 35 3b 29 69 66 28 58 3d 3d 38 34 29 58 3d 74 3e 3e 32 3c 31 31 26 26 28 74 5e 31 31 29 3e 3d 37 3f Data Ascii: 32))\|\|(W[XQ]=Q=new Jo(W)),z=Q.add(c,Y,X,J,U),r=31;else{if(r==75)throw Error("addEventListener and attachEvent are unavailable.");r==32?r=W.attachEvent?17:86:r==58&&(r=c?2:20)}}}},n=function(l,w,t,U,Y,c,X,W,E){for(X=27;X!=85;)if(X==84)X=t>>2<11&&(t^11)>=7?
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 7c 7c 77 2c 63 3d 36 39 3b 65 6c 73 65 20 69 66 28 63 3d 3d 33 29 63 3d 74 2b 39 3e 3e 31 3c 74 26 26 28 74 2b 6c 5e 34 29 3e 3d 74 3f 38 32 3a 36 39 3b 65 6c 73 65 7b 69 66 28 63 3d 3d 34 30 29 72 65 74 75 72 6e 20 58 3b 63 3d 3d 36 39 3f 63 3d 28 74 3e 3e 31 26 38 29 3c 37 26 26 28 28 74 7c 34 29 26 37 29 3e 3d 30 3f 38 35 3a 34 30 3a 63 3d 3d 35 34 3f 63 3d 33 3a 63 3d 3d 38 35 26 26 28 58 3d 77 20 69 6e 20 6e 69 3f 6e 69 5b 77 5d 3a 6e 69 5b 77 5d 3d 55 2b 77 2c 63 3d 34 30 29 7d 7d 2c 70 69 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 74 2c 55 2c 59 2c 63 2c 58 2c 57 2c 45 2c 51 2c 7a 2c 4a 29 7b 66 6f 72 28 7a 3d 37 31 3b 7a 21 3d 39 34 3b 29 69 66 28 7a 3d 3d 37 35 29 7b 66 6f 72 28 58 20 69 6e 20 63 3d 28 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 Data Ascii: \|\|w,c=69;else if(c==3)c=t+9>>1<t&&(t+l^4)>=t?82:69;else{if(c==40)return X;c==69?c=(t>>1&8)<7&&((t\|4)&7)>=0?85:40:c==54?c=3:c==85&&(X=w in ni?ni[w]:ni[w]=U+w,c=40)}},pi=function(l,w,t,U,Y,c,X,W,E,Q,z,J){for(z=71;z!=94;)if(z==75){for(X in c=((Array.prototyp
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 3d 28 55 3d 41 72 72 61 79 28 63 29 2c 74 29 3b 59 3c 63 3b 59 2b 2b 29 55 5b 59 5d 3d 77 5b 59 5d 3b 7a 3d 55 7d 65 6c 73 65 20 7a 3d 5b 5d 3b 51 3d 34 30 7d 65 6c 73 65 20 69 66 28 51 3d 3d 31 31 29 6e 28 77 2c 55 2c 35 2c 57 2e 4f 29 2c 51 3d 37 35 3b 65 6c 73 65 7b 69 66 28 51 3d 3d 37 35 29 72 65 74 75 72 6e 20 7a 3b 69 66 28 51 3d 3d 32 37 29 51 3d 57 26 26 57 5b 5a 67 5d 3f 31 31 3a 34 38 3b 65 6c 73 65 20 69 66 28 51 3d 3d 31 39 29 51 3d 6c 2d 36 3c 31 31 26 26 6c 2b 36 3e 3d 31 3f 33 33 3a 34 3b 65 6c 73 65 20 69 66 28 51 3d 3d 34 31 29 57 3d 55 2e 73 72 63 2c 51 3d 32 37 3b 65 6c 73 65 20 69 66 28 51 3d 3d 38 29 74 68 69 73 2e 6e 2b 2b 2c 51 3d 39 36 3b 65 6c 73 65 20 69 66 28 51 3d 3d 31 34 29 7b 69 66 28 77 2e 47 2e 6c 65 6e 67 74 68 29 7b 28 Data Ascii: =(U=Array(c),t);Y<c;Y++)U[Y]=w[Y];z=U}else z=[];Q=40}else if(Q==11)n(w,U,5,W.O),Q=75;else{if(Q==75)return z;if(Q==27)Q=W&&W[Zg]?11:48;else if(Q==19)Q=l-6<11&&l+6>=1?33:4;else if(Q==41)W=U.src,Q=27;else if(Q==8)this.n++,Q=96;else if(Q==14){if(w.G.length){(
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 29 3a 57 3d 3d 34 34 3f 28 45 3d 63 2c 57 3d 39 32 29 3a 57 3d 3d 36 39 3f 28 63 3d 74 72 75 65 2c 57 3d 34 34 29 3a 57 3d 3d 31 3f 57 3d 33 34 3a 57 3d 3d 35 32 3f 28 58 3d 6e 65 77 20 56 42 28 77 2c 74 68 69 73 29 2c 59 3d 74 2e 47 24 7c 7c 74 2e 73 72 63 2c 6c 3d 74 2e 6c 69 73 74 65 6e 65 72 2c 74 2e 59 34 26 26 4b 28 32 38 2c 30 2c 22 6f 6e 22 2c 74 29 2c 63 3d 6c 2e 63 61 6c 6c 28 59 2c 58 29 2c 57 3d 34 34 29 3a 57 3d 3d 34 35 3f 57 3d 74 2e 48 73 3f 36 39 3a 35 32 3a 57 3d 3d 39 32 26 26 28 57 3d 28 55 2b 39 26 38 29 3c 33 26 26 28 55 3c 3c 31 26 33 29 3e 3d 30 3f 33 35 3a 32 30 29 7d 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 74 2c 55 2c 59 2c 63 2c 58 2c 57 2c 45 2c 51 2c 7a 29 7b 69 66 28 28 6c 2b 38 5e 33 32 29 3e 3d 28 28 6c 5e 38 39 Data Ascii: ):W==44?(E=c,W=92):W==69?(c=true,W=44):W==1?W=34:W==52?(X=new VB(w,this),Y=t.G$\|\|t.src,l=t.listener,t.Y4&&K(28,0,"on",t),c=l.call(Y,X),W=44):W==45?W=t.Hs?69:52:W==92&&(W=(U+9&8)<3&&(U<<1&3)>=0?35:20)}},a=function(l,w,t,U,Y,c,X,W,E,Q,z){if((l+8^32)>=((l^89
2025-01-10 16:48:12 UTC	1390	IN	Data Raw: 3a 33 38 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 38 37 29 4a 3d 38 39 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 37 33 29 74 68 69 73 5b 74 68 69 73 2b 22 22 5d 3d 74 68 69 73 2c 7a 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2c 4a 3d 33 33 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 33 33 29 4a 3d 28 77 5e 33 39 29 3c 31 34 26 26 77 2b 32 3e 3e 34 3e 3d 31 3f 38 32 3a 39 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 38 32 29 7a 3d 74 68 69 73 2e 6e 3d 3d 3d 30 3f 30 3a 4d 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 53 6a 2f 74 68 69 73 2e 6e 29 2c 4a 3d 39 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 37 35 29 4f 77 28 35 37 2c 38 30 2c 74 72 75 65 2c 6e 75 6c 6c 2c 59 5b 51 5d 2c 63 2c 58 2c 57 2c 45 29 2c 4a 3d 34 30 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 35 34 29 51 3d 30 2c 4a 3d 38 Data Ascii: :38;else if(J==87)J=89;else if(J==73)this[this+""]=this,z=Promise.resolve(),J=33;else if(J==33)J=(w^39)<14&&w+2>>4>=1?82:9;else if(J==82)z=this.n===0?0:Math.sqrt(this.Sj/this.n),J=9;else if(J==75)Ow(57,80,true,null,Y[Q],c,X,W,E),J=40;else if(J==54)Q=0,J=8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49867	142.250.184.193	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:12 UTC	769	OUT	GET /ytc/AIdro_m9vnpvLDuCjN3benUeTYbdwWWXR-SG2Q9WZSq15GVI1DuDYBub2lf4hmef0g1yidFIrw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:12 UTC	563	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 965 X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 16:10:53 GMT Expires: Sat, 11 Jan 2025 16:10:53 GMT Cache-Control: public, max-age=86400, no-transform Content-Type: image/jpeg Vary: Origin Age: 2239 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:48:12 UTC	827	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0b 0a 0d 06 0d 0c 09 08 05 0a 0a 08 05 0d 09 0b 08 10 0a 07 07 06 08 06 08 09 09 10 09 0b 09 08 0e 12 08 0d 08 11 07 09 08 0f 16 10 09 13 14 0b 15 09 0c 0f 0d 0d 16 08 18 12 14 0c 08 01 03 04 04 06 05 05 08 06 06 0a 0b 0c 0b 0d 10 10 14 0d 0d 0b 12 09 0a 0b 14 14 12 0e 0b 0d 14 0f 10 14 0a 0f 0a 10 14 0a 14 10 12 10 0e 0a 13 0e 0a 0b 14 14 14 0d 14 0b 14 14 0a 0d 08 08 08 14 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 18 00 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 06 07 08 04 ff c4 00 2b 10 00 02 01 03 02 04 05 04 03 00 00 00 00 00 00 00 01 02 00 03 04 11 05 12 07 13 21 51 08 22 31 32 41 52 71 73 b2 06 14 33 ff c4 00 1a 01 01 00 02 03 01 00 Data Ascii: JFIFDD+!Q"12ARqs3
2025-01-10 16:48:12 UTC	138	IN	Data Raw: b6 e5 4c 7d 04 e3 18 95 4b 1a 4c 55 75 0a 6c d7 7a 96 95 d7 ff 00 9c fa 95 6b 1e 4c 55 75 0a 6c d7 7a 96 95 de 5c fa 98 7a 74 33 a0 08 02 00 80 20 08 02 01 d7 a3 fb e8 7e 4a 5f b0 9e 23 d0 f6 3c 47 a5 ec 6a 4f 1f 5f e9 a3 7e 2b ff 00 de 94 a7 7c 35 a2 6e eb cc a8 7c 39 a2 6e eb cc ca 12 e8 5c 84 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 ff d9 Data Ascii: L}KLUulzkLUulz\zt3 ~J_#<GjO_~+\|5n\|9n\@@@@@@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49869	142.250.186.54	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:12 UTC	563	OUT	GET /vi/QZ5xuqBJH_s/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGDwgVihlMA8=&rs=AOn4CLC0SO246uCSmQDlqeODAlq3F_5aGw HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:13 UTC	655	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 65587 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 16:48:12 GMT Expires: Fri, 10 Jan 2025 18:48:12 GMT Cache-Control: public, max-age=7200 Age: 1 ETag: "1713342611" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:48:13 UTC	735	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 10 0d 0d 0d 0d 0d 0d 10 0d 0d 0d 10 0d 0d 0d 0d 08 0d 0d 10 0d 0d 0d 11 0e 13 12 11 0f 10 10 16 18 26 25 15 22 20 23 10 10 1c 35 25 20 30 2b 30 30 30 13 1b 39 3d 35 2a 3c 25 2a 30 2b 01 09 09 09 0d 0b 0d 15 0e 0e 15 26 15 10 15 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 32 26 26 32 32 32 26 26 32 26 26 32 26 32 32 26 26 26 26 26 26 26 26 32 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 06 08 ff c4 00 5a 10 00 02 02 02 00 03 04 04 08 09 09 03 09 07 02 07 00 01 02 03 04 11 05 12 21 06 07 13 31 41 51 61 71 14 22 32 72 81 91 92 b1 15 23 62 73 74 a1 Data Ascii: JFIF&%" #5% 0+0009=5<%0+&&&&&&&&&&&&&&&&&&&&&&&&&&&2&&222&&2&&2&22&&&&&&&&2"Z!1AQaq"2r#bst
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 19 16 c1 bd 15 b6 15 2e 62 b9 4c 8c a6 54 e6 45 37 21 c4 ad 75 65 d0 44 55 b1 45 88 8c 49 15 9a 52 28 99 73 45 33 40 53 24 43 45 8c 34 45 41 22 49 0f 44 92 02 3a 0d 12 d0 99 42 13 63 62 68 82 0d 91 1b 16 c8 a8 4c ae 45 92 65 72 32 a8 32 23 6c 44 50 31 21 90 4d 12 44 13 24 99 45 b0 26 57 12 68 d3 21 b2 1b 24 c8 6c 50 f6 09 91 1a 22 ae 8b 02 11 64 8d 44 1b 24 99 0d 92 45 0d 82 00 41 16 22 71 44 11 6c 40 34 53 62 2f 2a 9a d8 a8 c0 b1 14 b3 26 c4 63 c9 1c db 20 60 22 2a b9 44 a6 51 32 9a 2b 94 0a cb 15 a0 d1 64 a2 41 a0 cd 2d 11 9f 93 f7 32 7a 23 3f 27 ee 7f 70 a4 3a fe 4a f7 2f b8 91 1a fe 4a f7 2f b8 91 a9 12 f9 00 00 34 80 00 06 80 00 03 40 00 01 a0 00 00 d0 00 00 68 00 00 34 00 00 1a 00 00 0d 00 00 06 80 00 03 40 00 01 a0 00 00 d0 00 00 68 00 00 34 00 00 Data Ascii: .bLTE7!ueDUEIR(sE3@S$CE4EA"ID:BcbhLEer22#lDP1!MD$E&Wh!$lP"dD$EA"qDl@4Sb/&c `"DQ2+dA-2z#?'p:J/J/4@h4@h4
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: a6 8f 47 c3 ad f2 ea 79 aa bc cd de 04 f5 a3 35 a8 f5 75 4b 69 18 f9 51 e8 c8 e3 db d1 0f 22 7b 46 74 e9 b6 8b 29 6b 66 b6 7e 66 d3 2f cc d6 4d 75 34 aa c7 14 09 13 8a 20 94 51 6c 51 18 a2 c8 9a 44 e2 ba 0c 48 19 50 9b 20 49 8b 40 08 92 44 52 26 80 6c ae 45 85 72 02 03 88 b4 4e 28 09 21 a0 19 43 d0 d2 1a 43 d1 43 48 06 80 04 30 04 56 40 00 c0 01 00 10 45 fa 4c 6b 64 64 4d f4 30 ad 64 ad 46 3d 92 f3 31 a4 f6 cb 2d 97 99 8e d9 ce b5 16 d6 67 d2 bc 8c 1a 91 9f 4f a0 4f 25 64 c4 b5 15 44 b6 27 58 c5 4e 20 c7 14 0d 15 10 68 12 25 a1 a4 41 0d 01 36 85 a0 22 d1 5c 91 76 88 49 01 48 68 7a 25 a0 aa 66 8a 99 7c d7 43 1a 64 54 19 4c cb 5b 29 93 39 d5 54 c4 36 22 34 00 34 04 12 d8 9b 10 01 28 b2 c8 94 a2 d8 94 5a 49 10 5e 44 d1 a8 ca c8 a1 49 0e 23 97 91 45 0d 11 d1 Data Ascii: Gy5uKiQ"{Ft)kf~f/Mu4 QlQDHP I@DR&lErN(!CCCH0V@ELkddM0dF=1-gOO%dD'XN h%A6"\vIHhz%f\|CdTL[)9T6"44(ZI^DI#E
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: c4 61 da bc cc e9 a3 0e d2 55 61 4c 48 94 d7 52 08 e6 da 68 4c 5b 0d 90 02 6c 6c 8b 00 23 7f c8 9f cd 97 dc 49 11 bf e4 4f e6 cb ee 0a 8d 3f 22 1f 36 3f 71 61 0a 3e 44 3e 6c 7e e2 cd 1e 89 e1 e3 be 48 07 a0 d0 42 01 e8 34 02 01 e8 34 02 01 e8 34 02 01 e8 34 02 01 e8 34 02 01 e8 34 02 01 e8 34 10 80 7a 0d 00 80 7a 0d 05 20 1e 83 40 20 1e 83 41 08 07 a0 d0 08 07 a0 d0 52 01 e8 34 02 01 e8 34 10 80 7a 0d 00 80 7a 0d 05 20 1e 83 40 20 1e 83 41 08 07 a0 d0 08 07 a0 d0 52 01 e8 34 02 01 e8 34 10 80 7a 0d 00 80 7a 0d 05 20 1e 83 40 20 1e 83 41 36 40 3d 06 80 40 3d 06 82 90 0f 41 a0 10 0f 41 a0 84 03 d0 68 04 03 d0 68 29 22 d8 15 a2 c8 0a b1 93 02 c4 ca a0 58 61 df 14 d0 09 0c 8d 23 a2 51 88 24 59 18 80 45 16 20 48 68 b1 0d 12 44 51 32 88 b4 09 12 d0 92 02 41 b0 Data Ascii: aUaLHRhL[ll#IO?"6?qa>D>l~HB4444444zz @ AR44zz @ AR44zz @ A6@=@=AAhh)"Xa#Q$YE HhDQ2A
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: e4 47 40 88 32 53 06 ca e3 21 b6 69 10 9b 31 6c 32 24 63 d8 66 ac 50 c1 03 04 61 a8 63 10 d0 01 55 df 22 5f 36 5f 71 71 55 ff 00 22 5f 36 5f 70 aa bb 1f e4 43 e6 c7 ee 2c 2b c7 fe 8e 1f 36 3f 71 69 eb 9e 1f 3f 2f 34 80 60 54 20 18 00 80 60 02 01 80 d0 40 30 1a 08 06 57 65 ea 3a de fa f5 5a 5e d2 5e cb 26 fc 26 05 1f 0d 87 b7 ea 0f 86 c3 db f5 13 ae 35 d1 97 d2 f0 28 f8 6c 3d bf 50 7c 36 1e df a8 75 c3 a3 2f a5 e0 51 f0 d8 7b 7e a0 f8 6c 3d bf 50 eb 87 46 5f 4b f4 1a 29 59 90 f6 fd 44 e3 9b 0f 6f d4 3a e2 74 65 f4 b1 44 7c 81 1c ca ff 00 2b ec ff 00 12 c5 9b 57 e5 7d 9f e2 3a e1 d1 92 be 40 e4 2d f8 6d 5f 95 f6 7f 88 7c 36 af ca fb 3f c4 75 c5 e8 c9 57 20 72 16 fc 36 af ca fb 3f c4 3e 1b 57 e5 7d 9f e2 3a e1 d1 92 ae 40 e4 2e f8 6d 5f 95 f6 7f 88 be 1b 57 Data Ascii: G@2S!i1l2$cfPacU"_6_qqU"_6_pC,+6?qi?/4`T `@0We:Z^^&&5(l=P\|6u/Q{~l=PF_K)YDo:teD\|+W}:@-m_\|6?uW r6?>W}:@.m_W
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 14 78 a4 3f 2b ec 92 7c 52 b7 fd ef b2 3a a1 a5 b2 42 48 85 39 51 b1 b5 1d ed 75 7c cb d0 5d a2 a7 85 4d 11 2e 71 2a 68 8a 69 8c 82 24 04 64 51 32 e9 14 c8 94 52 c4 86 c4 61 a8 63 44 46 80 91 55 ff 00 22 5f 36 5f 71 69 55 ff 00 22 5f 36 5f 70 55 f8 df d1 c3 e6 c7 ee 45 a4 31 97 e2 e1 f3 63 f7 22 dd 1e c9 e2 3e 76 5e 6a 20 4b 41 a2 b3 b4 40 96 83 40 da 20 4b 41 a0 6d 10 25 a0 d0 36 88 12 d0 68 1b 44 c0 cf f9 51 ff 00 d7 a4 d8 e8 d7 f1 1f 95 1f 73 fb ce 7c 9e d7 5e 1f 73 08 00 0f 33 d6 00 00 00 69 08 9a 40 38 c4 ba 35 85 70 32 63 10 aa d5 63 e4 2c 64 5b 22 a3 ca 1c a4 79 c3 9c 22 5c a1 c8 47 9c 39 c0 97 28 72 91 e7 0e 70 25 ca 1c a4 7c 40 f1 00 97 20 72 11 f1 03 9c 09 72 07 21 1e 70 e7 02 5c a3 e5 21 ce 1c e0 4b 90 39 08 f3 87 38 12 e4 0e 52 3c e1 ce 04 b9 Data Ascii: x?+\|R:BH9Qu\|]M.q*hi$dQ2RacDFU"_6_qiU"_6_pUE1c">v^j KA@@ KAm%6hDQs\|^s3i@85p2cc,d["y"\G9(rp%\|@ rr!p\!K98R<
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 5f 8d 2d 79 2e 8f ea 20 c4 48 9a 88 45 16 46 26 98 b4 a3 02 c8 c0 94 62 5c a0 18 b9 2a e4 24 a2 5c a2 3d 17 4e 77 91 4f 28 9c 0b f9 45 a1 aa cf a8 c7 71 22 e0 64 38 91 71 0e 93 26 33 44 1c 4c 87 12 0e 04 74 95 8e e2 0a 06 42 ac b2 34 91 b9 dd 87 c8 0e 06 7f 80 65 e0 f0 1c 8c 95 63 c6 c7 b2 f5 4a 52 b5 e3 c1 c9 57 1d 3e b2 d7 97 c9 7f 51 36 e9 d2 d1 b8 8b 46 54 aa 2b 94 09 d4 74 a9 d0 12 68 cd bb 81 e4 d7 8f 0c a9 e3 5b 1c 6b 34 ab c8 b2 b6 aa 9b 7b d2 52 f2 7e 4f ea 2c a7 4b 00 36 02 2e d9 30 2d c4 c5 9d d6 42 9a 61 2b 2d b1 a8 d7 5d 49 b9 4e 4f c9 25 e9 27 9d 81 6e 35 92 a6 fa a7 4d d0 d7 35 77 c5 c6 71 e6 8a 92 da 7e 5d 1a 7f 49 51 8c c8 b2 4c 4c 0a d9 5c 8b 59 54 88 aa d8 86 c4 65 61 a2 c8 90 48 b6 11 28 b2 28 92 1c 62 49 21 b3 44 81 12 d0 f4 36 69 10 Data Ascii: _-y. HEF&b\*$\=NwO(Eq"d8q&3DLtB4ecJRW>Q6FT+th[k4{R~O,K6.0-Ba+-]INO%'n5M5wq~]IQLL\YTeaH((bI!D6i
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 9f 4e 69 49 f2 ef d0 a2 d8 d8 e4 d7 70 eb ab 8a b2 ca 2d ae 0f 5a 9d b5 59 18 3f 74 9a d1 8c 76 ae 0f df c5 b9 19 51 a3 89 61 e3 4b 03 22 4a ab 23 5c 64 dd 51 93 d6 e5 cc da 9a 5e 95 a4 78 de f5 3b 1f 0e 13 c4 e7 55 0b 58 d9 10 59 18 f1 6f e4 45 b7 19 57 bf 63 4f 5e c6 89 2a 58 f1 09 7a 93 7a ea f4 9f 42 fc 7c 0b 6d 4e 55 53 65 b1 8f ca 95 15 ce 6a 3e f7 15 d0 eb bf f2 7f c5 56 5f c5 6b 9f c9 b3 16 15 cb 4f af 2c a7 24 fe f2 eb fb ea 78 17 7c 17 86 70 fa 23 c3 71 64 ea ae 32 73 56 5b 08 bd 39 a6 9e a3 bd 6f aa 7e dd 8d ae 9c 53 fc 8d ef 62 b0 21 93 c5 b8 7d 17 41 59 55 b9 34 42 c8 4b 7c b2 83 9f 54 f5 e8 3a 2f 7d dc 1e 89 7e 0e e2 b8 b5 aa ff 00 08 57 27 6a 82 4b 9d f2 42 70 9b 4b a6 f5 36 9f b9 1a 3e e8 bb 49 6e 07 13 aa 8a eb ae 71 e2 16 51 8d 6c ad e6 Data Ascii: NiIp-ZY?tvQaK"J#\dQ^x;UXYoEWcO^*XzzB\|mNUSej>V_kO,$x\|p#qd2sV[9o~Sb!}AYU4BK\|T:/}~W'jKBpK6>InqQl
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 65 1d ad e0 f9 59 3f 07 85 1c 5b 87 a7 26 e9 fe da 51 72 51 df 9b 8c 94 64 92 7e 4d 7d 7c 2f 7b 5d 3d 3d 48 ab 2a c7 9c e4 a3 18 4a 52 97 c9 8d 71 93 94 be 6a 4b a9 1b 29 94 1b 8c a2 e3 25 d1 c6 69 a9 27 ed 4f c8 fa 63 b5 7d a6 a3 82 e2 e0 71 19 63 fc 27 36 cc 7a b1 31 e3 29 72 c6 15 a8 29 d9 2e 6d 3d 7f 67 df d0 e1 bd bb ed 6b e3 19 8b 2d d2 a8 4a aa aa 55 c6 4a 5a 71 4d c9 f3 69 6f ab 7f 41 47 98 8c 1b 69 24 db 7d 12 8a 7b 6f dd e9 2e c9 c1 b6 9d 78 d4 d9 57 37 97 8f 5c a1 bf 77 32 5b 3b 37 00 8e 3f 66 78 25 3c 56 da 23 7f 13 cf d7 c1 e3 72 fe 8e 32 4e 51 8a 7f d9 4a 2b 99 eb ab da 45 9d 95 ef 43 f0 d5 eb 85 71 8c 5a 27 4e 63 75 d5 2a 63 24 a3 66 be 2c 5a 6d fb 74 d6 9a 7a 22 38 6b 44 7f f5 f4 9b fe d8 70 07 c3 78 8e 56 13 6e 4a 99 fe 2e 52 d6 e5 4c a2 Data Ascii: eY?[&QrQd~M}\|/{]==HJRqjK)%i'Oc}qc'6z1)r).m=gk-JUJZqMioAGi$}{o.xW7\w2[;7?fx%<V#r2NQJ+ECqZ'Ncuc$f,Zmtz"8kDpxVnJ.RL
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 31 7e be 5e 6e 8b e7 53 1f b4 72 13 a2 f7 29 c5 56 3f 1a ae a9 b4 ab cc aa dc 69 a9 7c 96 f9 79 e3 bf a6 1a fa 49 92 c7 a5 bf 88 fe 07 e0 7d 96 82 f8 b2 bb 32 1c 46 e4 fc dd 6a 5c cf 7f 45 d0 5f 41 ea a1 d9 c8 c3 b6 57 e7 49 25 45 78 2b 3b 99 fc 95 39 43 e0 ed fd 51 9b 39 df 7e 99 b0 7c 4b 1b 0e 96 95 58 38 95 55 15 17 b5 17 36 de be a5 59 d2 38 d7 69 eb 5d 94 7c 41 38 fc 2b 27 06 8c 3e 64 d7 3b 9c bf 17 28 fd 0e 56 c8 cb 4f 9d 78 df 13 79 99 79 59 52 f3 c8 ba db 7a f9 a5 29 b6 97 d5 a3 be 70 9c fc 0c 6e c7 f0 eb 38 96 34 b2 b0 dc b9 65 55 2b 6d 5a ef b7 52 7f 19 7a 77 f5 9f 39 9d 93 bb 1e 37 89 c4 38 5e 4f 67 38 8d aa 9f 15 ca 58 76 cd a5 d6 52 e7 e5 8b 7d 14 a3 25 cc 97 a7 6d 16 a4 35 da ee ca 7f fc 12 df fb 35 ff 00 fd 4d 27 7a 3d b5 c5 e3 56 61 cb 12 Data Ascii: 1~^nSr)V?i\|yI}2Fj\E_AWI%Ex+;9CQ9~\|KX8U6Y8i]\|A8+'>d;(VOxyyYRz)pn84eU+mZRzw978^Og8XvR}%m55M'z=Va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49870	142.250.186.166	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:13 UTC	460	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:13 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 16:43:13 GMT Expires: Fri, 10 Jan 2025 16:58:13 GMT Cache-Control: public, max-age=900 Age: 300 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:48:13 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49871	142.250.186.98	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:13 UTC	666	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:13 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Fri, 10 Jan 2025 16:48:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 16:48:13 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 69 36 6a 6c 69 36 6f 74 48 2d 79 77 54 35 49 71 54 37 62 38 7a 2d 45 31 77 37 5f 68 74 51 49 38 4d 5a 55 4f 70 65 66 4b 73 68 46 6c 73 33 55 65 6f 5f 4c 48 61 76 6d 36 62 65 49 6a 4f 73 4b 39 4b 57 46 72 4a 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKqi6jli6otH-ywT5IqT7b8z-E1w7_htQI8MZUOpefKshFls3Ueo_LHavm6beIjOsK9KWFrJ","type":4}
2025-01-10 16:48:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49874	142.250.185.228	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:13 UTC	483	OUT	GET /js/th/8p-ZUt2O_r6IumY5TzUY2RZ4QvEtVfvf_MYYDjqPK3M.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:13 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 54903 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 00:03:54 GMT Expires: Sat, 10 Jan 2026 00:03:54 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 60259 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:48:13 UTC	579	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 59 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 57 3a 33 31 3a 74 3d 3d 77 26 26 28 4a 2e 63 6f 6e 73 6f 6c 65 5b 7a 5d 28 51 2e 6d 65 73 73 61 67 65 29 2c 74 3d 6c 29 7d 7d 7d 63 61 74 63 68 28 45 29 7b 69 66 28 55 3d 3d 31 32 29 74 68 72 6f 77 20 45 3b 55 3d 3d 33 33 26 26 28 51 3d 45 2c 74 3d 31 31 29 7d 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 77 29 7b 72 65 74 75 72 6e 20 58 2e 63 61 6c 6c 28 74 68 69 73 2c 77 29 7d 2c 4a 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 77 2c 6c 29 7b 72 65 74 75 72 6e 28 6c 3d 44 28 32 39 2c 32 34 2c 34 31 2c 32 35 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 2c 6e 75 6c 6c 29 29 26 26 77 2e 65 76 61 6c 28 6c 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 22 31 22 29 29 3d 3d 3d 31 3f 66 75 Data Ascii: Y.createPolicy?W:31:t==w&&(J.console[z](Q.message),t=l)}}}catch(E){if(U==12)throw E;U==33&&(Q=E,t=11)}},k=function(w){return X.call(this,w)},J=this\|\|self;(0,eval)(function(w,l){return(l=D(29,24,41,25,"error","ad",null))&&w.eval(l.createScript("1"))===1?fu
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 62 3d 3d 39 33 3f 62 3d 28 6c 7c 32 34 29 3d 3d 6c 3f 35 34 3a 36 30 3a 62 3d 3d 37 32 3f 28 58 3d 74 79 70 65 6f 66 20 59 2c 63 3d 58 21 3d 74 3f 58 3a 59 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 59 29 3f 22 61 72 72 61 79 22 3a 58 3a 22 6e 75 6c 6c 22 2c 44 3d 63 3d 3d 55 7c 7c 63 3d 3d 74 26 26 74 79 70 65 6f 66 20 59 2e 6c 65 6e 67 74 68 3d 3d 77 2c 62 3d 32 39 29 3a 62 3d 3d 32 32 3f 62 3d 31 36 3a 62 3d 3d 32 39 3f 62 3d 28 6c 26 39 30 29 3d 3d 6c 3f 34 37 3a 38 3a 62 3d 3d 31 36 3f 62 3d 28 28 6c 5e 32 31 29 26 32 35 29 3d 3d 31 3f 33 3a 39 33 3a 62 3d 3d 39 3f 62 3d 28 6c 3e 3e 32 26 37 29 3d 3d 33 3f 37 32 3a 32 39 3a 62 3d 3d 34 37 3f 28 44 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 Data Ascii: b==93?b=(l\|24)==l?54:60:b==72?(X=typeof Y,c=X!=t?X:Y?Array.isArray(Y)?"array":X:"null",D=c==U\|\|c==t&&typeof Y.length==w,b=29):b==22?b=16:b==29?b=(l&90)==l?47:8:b==16?b=((l^21)&25)==1?3:93:b==9?b=(l>>2&7)==3?72:29:b==47?(D=Object.prototype.hasOwnProperty.c
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 29 7b 61 3a 7b 66 6f 72 28 63 20 69 6e 20 55 29 69 66 28 59 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 55 5b 63 5d 2c 63 2c 55 29 29 7b 51 3d 74 3b 62 72 65 61 6b 20 61 7d 51 3d 77 7d 45 3d 38 37 7d 65 6c 73 65 7b 69 66 28 45 3d 3d 32 34 29 72 65 74 75 72 6e 20 51 3b 45 3d 3d 39 3f 45 3d 28 6c 5e 32 30 29 3e 3e 33 3d 3d 31 3f 37 37 3a 38 38 3a 45 3d 3d 32 30 3f 45 3d 28 6c 2b 37 26 37 31 29 3e 3d 6c 26 26 28 6c 2b 33 26 34 36 29 3c 6c 3f 37 3a 32 34 3a 45 3d 3d 37 37 3f 28 74 68 69 73 2e 67 3d 74 68 69 73 2e 67 2c 74 68 69 73 2e 68 34 3d 74 68 69 73 2e 68 34 2c 45 3d 38 38 29 3a 45 3d 3d 39 30 3f 28 59 2b 3d 59 3c 3c 33 2c 59 5e 3d 59 3e 3e 31 31 2c 57 3d 59 2b 28 59 3c 3c 31 35 29 3e 3e 3e 30 2c 63 3d 6e 65 77 20 4e 75 6d 62 65 72 28 57 26 28 31 3c 3c 74 29 Data Ascii: ){a:{for(c in U)if(Y.call(void 0,U[c],c,U)){Q=t;break a}Q=w}E=87}else{if(E==24)return Q;E==9?E=(l^20)>>3==1?77:88:E==20?E=(l+7&71)>=l&&(l+3&46)<l?7:24:E==77?(this.g=this.g,this.h4=this.h4,E=88):E==90?(Y+=Y<<3,Y^=Y>>11,W=Y+(Y<<15)>>>0,c=new Number(W&(1<<t)
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 2c 77 2c 74 2c 55 2c 59 2c 63 2c 58 2c 57 2c 45 2c 51 2c 7a 29 7b 66 6f 72 28 7a 3d 31 32 3b 7a 21 3d 37 34 3b 29 69 66 28 7a 3d 3d 31 32 29 7a 3d 37 39 3b 65 6c 73 65 20 69 66 28 7a 3d 3d 6c 29 74 79 70 65 6f 66 20 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 3d 59 3f 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 55 3a 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 55 29 2c 7a 3d 36 32 3b 65 6c 73 65 7b 69 66 28 7a 3d 3d 36 32 29 72 65 74 75 72 6e 20 51 3b 7a 3d 3d 33 31 3f 28 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 57 3d 76 6f 69 64 20 30 2c 63 3d 44 67 28 59 2c 66 75 6e 63 74 69 6f 6e 28 4a 2c 6b 29 7b 66 6f 72 28 6b 3d 37 36 3b 6b 21 3d 33 39 3b 29 6b 3d 3d 37 36 3f 6b 3d 45 3f 32 30 3a 33 39 3a Data Ascii: ,w,t,U,Y,c,X,W,E,Q,z){for(z=12;z!=74;)if(z==12)z=79;else if(z==l)typeof t.className==Y?t.className=U:t.setAttribute&&t.setAttribute("class",U),z=62;else{if(z==62)return Q;z==31?(E=function(){},W=void 0,c=Dg(Y,function(J,k){for(k=76;k!=39;)k==76?k=E?20:39:
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 33 32 29 29 7c 7c 28 57 5b 58 51 5d 3d 51 3d 6e 65 77 20 4a 6f 28 57 29 29 2c 7a 3d 51 2e 61 64 64 28 63 2c 59 2c 58 2c 4a 2c 55 29 2c 72 3d 33 31 3b 65 6c 73 65 7b 69 66 28 72 3d 3d 37 35 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 61 6e 64 20 61 74 74 61 63 68 45 76 65 6e 74 20 61 72 65 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 22 29 3b 72 3d 3d 33 32 3f 72 3d 57 2e 61 74 74 61 63 68 45 76 65 6e 74 3f 31 37 3a 38 36 3a 72 3d 3d 35 38 26 26 28 72 3d 63 3f 32 3a 32 30 29 7d 7d 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 74 2c 55 2c 59 2c 63 2c 58 2c 57 2c 45 29 7b 66 6f 72 28 58 3d 32 37 3b 58 21 3d 38 35 3b 29 69 66 28 58 3d 3d 38 34 29 58 3d 74 3e 3e 32 3c 31 31 26 26 28 74 5e 31 31 29 3e 3d 37 3f Data Ascii: 32))\|\|(W[XQ]=Q=new Jo(W)),z=Q.add(c,Y,X,J,U),r=31;else{if(r==75)throw Error("addEventListener and attachEvent are unavailable.");r==32?r=W.attachEvent?17:86:r==58&&(r=c?2:20)}}}},n=function(l,w,t,U,Y,c,X,W,E){for(X=27;X!=85;)if(X==84)X=t>>2<11&&(t^11)>=7?
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 7c 7c 77 2c 63 3d 36 39 3b 65 6c 73 65 20 69 66 28 63 3d 3d 33 29 63 3d 74 2b 39 3e 3e 31 3c 74 26 26 28 74 2b 6c 5e 34 29 3e 3d 74 3f 38 32 3a 36 39 3b 65 6c 73 65 7b 69 66 28 63 3d 3d 34 30 29 72 65 74 75 72 6e 20 58 3b 63 3d 3d 36 39 3f 63 3d 28 74 3e 3e 31 26 38 29 3c 37 26 26 28 28 74 7c 34 29 26 37 29 3e 3d 30 3f 38 35 3a 34 30 3a 63 3d 3d 35 34 3f 63 3d 33 3a 63 3d 3d 38 35 26 26 28 58 3d 77 20 69 6e 20 6e 69 3f 6e 69 5b 77 5d 3a 6e 69 5b 77 5d 3d 55 2b 77 2c 63 3d 34 30 29 7d 7d 2c 70 69 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 74 2c 55 2c 59 2c 63 2c 58 2c 57 2c 45 2c 51 2c 7a 2c 4a 29 7b 66 6f 72 28 7a 3d 37 31 3b 7a 21 3d 39 34 3b 29 69 66 28 7a 3d 3d 37 35 29 7b 66 6f 72 28 58 20 69 6e 20 63 3d 28 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 Data Ascii: \|\|w,c=69;else if(c==3)c=t+9>>1<t&&(t+l^4)>=t?82:69;else{if(c==40)return X;c==69?c=(t>>1&8)<7&&((t\|4)&7)>=0?85:40:c==54?c=3:c==85&&(X=w in ni?ni[w]:ni[w]=U+w,c=40)}},pi=function(l,w,t,U,Y,c,X,W,E,Q,z,J){for(z=71;z!=94;)if(z==75){for(X in c=((Array.prototyp
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 3d 28 55 3d 41 72 72 61 79 28 63 29 2c 74 29 3b 59 3c 63 3b 59 2b 2b 29 55 5b 59 5d 3d 77 5b 59 5d 3b 7a 3d 55 7d 65 6c 73 65 20 7a 3d 5b 5d 3b 51 3d 34 30 7d 65 6c 73 65 20 69 66 28 51 3d 3d 31 31 29 6e 28 77 2c 55 2c 35 2c 57 2e 4f 29 2c 51 3d 37 35 3b 65 6c 73 65 7b 69 66 28 51 3d 3d 37 35 29 72 65 74 75 72 6e 20 7a 3b 69 66 28 51 3d 3d 32 37 29 51 3d 57 26 26 57 5b 5a 67 5d 3f 31 31 3a 34 38 3b 65 6c 73 65 20 69 66 28 51 3d 3d 31 39 29 51 3d 6c 2d 36 3c 31 31 26 26 6c 2b 36 3e 3d 31 3f 33 33 3a 34 3b 65 6c 73 65 20 69 66 28 51 3d 3d 34 31 29 57 3d 55 2e 73 72 63 2c 51 3d 32 37 3b 65 6c 73 65 20 69 66 28 51 3d 3d 38 29 74 68 69 73 2e 6e 2b 2b 2c 51 3d 39 36 3b 65 6c 73 65 20 69 66 28 51 3d 3d 31 34 29 7b 69 66 28 77 2e 47 2e 6c 65 6e 67 74 68 29 7b 28 Data Ascii: =(U=Array(c),t);Y<c;Y++)U[Y]=w[Y];z=U}else z=[];Q=40}else if(Q==11)n(w,U,5,W.O),Q=75;else{if(Q==75)return z;if(Q==27)Q=W&&W[Zg]?11:48;else if(Q==19)Q=l-6<11&&l+6>=1?33:4;else if(Q==41)W=U.src,Q=27;else if(Q==8)this.n++,Q=96;else if(Q==14){if(w.G.length){(
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 29 3a 57 3d 3d 34 34 3f 28 45 3d 63 2c 57 3d 39 32 29 3a 57 3d 3d 36 39 3f 28 63 3d 74 72 75 65 2c 57 3d 34 34 29 3a 57 3d 3d 31 3f 57 3d 33 34 3a 57 3d 3d 35 32 3f 28 58 3d 6e 65 77 20 56 42 28 77 2c 74 68 69 73 29 2c 59 3d 74 2e 47 24 7c 7c 74 2e 73 72 63 2c 6c 3d 74 2e 6c 69 73 74 65 6e 65 72 2c 74 2e 59 34 26 26 4b 28 32 38 2c 30 2c 22 6f 6e 22 2c 74 29 2c 63 3d 6c 2e 63 61 6c 6c 28 59 2c 58 29 2c 57 3d 34 34 29 3a 57 3d 3d 34 35 3f 57 3d 74 2e 48 73 3f 36 39 3a 35 32 3a 57 3d 3d 39 32 26 26 28 57 3d 28 55 2b 39 26 38 29 3c 33 26 26 28 55 3c 3c 31 26 33 29 3e 3d 30 3f 33 35 3a 32 30 29 7d 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 77 2c 74 2c 55 2c 59 2c 63 2c 58 2c 57 2c 45 2c 51 2c 7a 29 7b 69 66 28 28 6c 2b 38 5e 33 32 29 3e 3d 28 28 6c 5e 38 39 Data Ascii: ):W==44?(E=c,W=92):W==69?(c=true,W=44):W==1?W=34:W==52?(X=new VB(w,this),Y=t.G$\|\|t.src,l=t.listener,t.Y4&&K(28,0,"on",t),c=l.call(Y,X),W=44):W==45?W=t.Hs?69:52:W==92&&(W=(U+9&8)<3&&(U<<1&3)>=0?35:20)}},a=function(l,w,t,U,Y,c,X,W,E,Q,z){if((l+8^32)>=((l^89
2025-01-10 16:48:13 UTC	1390	IN	Data Raw: 3a 33 38 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 38 37 29 4a 3d 38 39 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 37 33 29 74 68 69 73 5b 74 68 69 73 2b 22 22 5d 3d 74 68 69 73 2c 7a 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2c 4a 3d 33 33 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 33 33 29 4a 3d 28 77 5e 33 39 29 3c 31 34 26 26 77 2b 32 3e 3e 34 3e 3d 31 3f 38 32 3a 39 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 38 32 29 7a 3d 74 68 69 73 2e 6e 3d 3d 3d 30 3f 30 3a 4d 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 53 6a 2f 74 68 69 73 2e 6e 29 2c 4a 3d 39 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 37 35 29 4f 77 28 35 37 2c 38 30 2c 74 72 75 65 2c 6e 75 6c 6c 2c 59 5b 51 5d 2c 63 2c 58 2c 57 2c 45 29 2c 4a 3d 34 30 3b 65 6c 73 65 20 69 66 28 4a 3d 3d 35 34 29 51 3d 30 2c 4a 3d 38 Data Ascii: :38;else if(J==87)J=89;else if(J==73)this[this+""]=this,z=Promise.resolve(),J=33;else if(J==33)J=(w^39)<14&&w+2>>4>=1?82:9;else if(J==82)z=this.n===0?0:Math.sqrt(this.Sj/this.n),J=9;else if(J==75)Ow(57,80,true,null,Y[Q],c,X,W,E),J=40;else if(J==54)Q=0,J=8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49873	142.250.184.193	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:13 UTC	534	OUT	GET /ytc/AIdro_m9vnpvLDuCjN3benUeTYbdwWWXR-SG2Q9WZSq15GVI1DuDYBub2lf4hmef0g1yidFIrw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:13 UTC	563	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 965 X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 16:10:53 GMT Expires: Sat, 11 Jan 2025 16:10:53 GMT Cache-Control: public, max-age=86400, no-transform Content-Type: image/jpeg Vary: Origin Age: 2240 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:48:13 UTC	827	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0b 0a 0d 06 0d 0c 09 08 05 0a 0a 08 05 0d 09 0b 08 10 0a 07 07 06 08 06 08 09 09 10 09 0b 09 08 0e 12 08 0d 08 11 07 09 08 0f 16 10 09 13 14 0b 15 09 0c 0f 0d 0d 16 08 18 12 14 0c 08 01 03 04 04 06 05 05 08 06 06 0a 0b 0c 0b 0d 10 10 14 0d 0d 0b 12 09 0a 0b 14 14 12 0e 0b 0d 14 0f 10 14 0a 0f 0a 10 14 0a 14 10 12 10 0e 0a 13 0e 0a 0b 14 14 14 0d 14 0b 14 14 0a 0d 08 08 08 14 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 18 00 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 06 07 08 04 ff c4 00 2b 10 00 02 01 03 02 04 05 04 03 00 00 00 00 00 00 00 01 02 00 03 04 11 05 12 07 13 21 51 08 22 31 32 41 52 71 73 b2 06 14 33 ff c4 00 1a 01 01 00 02 03 01 00 Data Ascii: JFIFDD+!Q"12ARqs3
2025-01-10 16:48:13 UTC	138	IN	Data Raw: b6 e5 4c 7d 04 e3 18 95 4b 1a 4c 55 75 0a 6c d7 7a 96 95 d7 ff 00 9c fa 95 6b 1e 4c 55 75 0a 6c d7 7a 96 95 de 5c fa 98 7a 74 33 a0 08 02 00 80 20 08 02 01 d7 a3 fb e8 7e 4a 5f b0 9e 23 d0 f6 3c 47 a5 ec 6a 4f 1f 5f e9 a3 7e 2b ff 00 de 94 a7 7c 35 a2 6e eb cc a8 7c 39 a2 6e eb cc ca 12 e8 5c 84 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 ff d9 Data Ascii: L}KLUulzkLUulz\zt3 ~J_#<GjO_~+\|5n\|9n\@@@@@@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49883	74.125.174.166	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:13 UTC	2080	OUT	POST /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&mime=video%2Fmp4&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=27145031&dur=2881.399&lmt=1736405030972049&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3 [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:13 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2025-01-10 16:48:14 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 09 Jan 2025 06:43:50 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:14 GMT Expires: Fri, 10 Jan 2025 16:48:14 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:14 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2025-01-10 16:48:14 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2025-01-10 16:48:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-10 16:48:14 UTC	4	IN	Data Raw: 33 31 0d 0a Data Ascii: 31
2025-01-10 16:48:14 UTC	49	IN	Data Raw: 14 2f 08 00 12 0b 51 5a 35 78 75 71 42 4a 48 5f 73 18 8d 03 20 91 d5 ba e8 84 e8 8a 03 30 00 6a 0c 08 8d 03 10 91 d5 ba e8 84 e8 8a 03 70 ad ef 0d Data Ascii: /QZ5xuqBJH_s 0jp
2025-01-10 16:48:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-10 16:48:14 UTC	7	IN	Data Raw: 33 37 37 62 32 0d 0a Data Ascii: 377b2
2025-01-10 16:48:14 UTC	5	IN	Data Raw: 15 ce bd 1b 00 Data Ascii:
2025-01-10 16:48:14 UTC	16384	IN	Data Raw: 00 00 00 1c 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 61 76 30 31 6d 70 34 31 00 00 02 a0 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e3 a4 9a a8 e3 a4 9a a8 00 00 3c 00 02 a3 54 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e3 a4 9a a8 e3 a4 9a a8 00 00 00 01 00 00 00 00 02 a3 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ftypdashiso6av01mp41moovlmvhd<T@(mvex trextrak\tkhdT
2025-01-10 16:48:14 UTC	1995	OUT	POST /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:14 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:14 GMT Expires: Fri, 10 Jan 2025 16:48:14 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:14 UTC	1996	OUT	POST /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:14 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:14 GMT Expires: Fri, 10 Jan 2025 16:48:14 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:14 UTC	1997	OUT	POST /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:15 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:14 GMT Expires: Fri, 10 Jan 2025 16:48:14 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:15 UTC	2090	OUT	POST /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&mime=video%2Fmp4&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=27145031&dur=2881.399&lmt=1736405030972049&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3 [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:15 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 09 Jan 2025 06:43:50 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:15 GMT Expires: Fri, 10 Jan 2025 16:48:15 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:22 UTC	2077	OUT	POST /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:22 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:22 GMT Expires: Fri, 10 Jan 2025 16:48:22 GMT Cache-Control: private, max-age=21290 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:31 UTC	2078	OUT	POST /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:31 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:31 GMT Expires: Fri, 10 Jan 2025 16:48:31 GMT Cache-Control: private, max-age=21281 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:53 UTC	2079	OUT	POST /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:53 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:53 GMT Expires: Fri, 10 Jan 2025 16:48:53 GMT Cache-Control: private, max-age=21259 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:49:03 UTC	2172	OUT	POST /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&mime=video%2Fmp4&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=27145031&dur=2881.399&lmt=1736405030972049&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3 [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:03 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 09 Jan 2025 06:43:50 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:49:03 GMT Expires: Fri, 10 Jan 2025 16:49:03 GMT Cache-Control: private, max-age=21249 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:49:22 UTC	2161	OUT	POST /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&mime=video%2Fmp4&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=17089996&dur=2881.399&lmt=1736403020488492&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3 [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:22 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 09 Jan 2025 06:10:20 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:49:22 GMT Expires: Fri, 10 Jan 2025 16:49:22 GMT Cache-Control: private, max-age=21230 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49882	74.125.174.166	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:13 UTC	1987	OUT	POST /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:13 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2025-01-10 16:48:14 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:13 GMT Expires: Fri, 10 Jan 2025 16:48:13 GMT Cache-Control: private, max-age=21299 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:14 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2025-01-10 16:48:14 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2025-01-10 16:48:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-10 16:48:14 UTC	4	IN	Data Raw: 35 31 0d 0a Data Ascii: 51
2025-01-10 16:48:14 UTC	81	IN	Data Raw: 14 4f 08 00 12 0b 51 5a 35 78 75 71 42 4a 48 5f 73 18 fb 01 20 dd d3 ed c3 b3 e6 8a 03 2a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 30 00 6a 1c 08 fb 01 10 dd d3 ed c3 b3 e6 8a 03 1a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 70 f9 a9 04 Data Ascii: OQZ5xuqBJH_s *CggKA2RyYxIBMQ0jCggKA2RyYxIBMQp
2025-01-10 16:48:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-10 16:48:14 UTC	7	IN	Data Raw: 31 31 34 66 65 0d 0a Data Ascii: 114fe
2025-01-10 16:48:14 UTC	5	IN	Data Raw: 15 da a7 08 00 Data Ascii:
2025-01-10 16:48:14 UTC	16384	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 04 42 85 81 02 18 53 80 67 01 00 00 00 02 f4 3a 6f 11 4d 9b 74 bf 4d bb 92 53 ab 84 15 49 a9 66 53 ac 88 00 00 00 00 00 00 00 44 4d bb 92 53 ab 84 16 54 ae 6b 53 ac 88 00 00 00 00 00 00 00 7f 4d bb 92 53 ab 84 1c 53 bb 6b 53 ac 88 00 00 00 00 00 00 00 d9 15 49 a9 66 b6 2a d7 b1 83 0f 42 40 44 89 84 4a 2f de 84 4d 80 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 57 41 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 16 54 ae 6b d5 ae d3 d7 81 01 73 c5 86 e7 f7 2c 62 23 bd 83 81 02 9c 81 00 22 b5 9c 83 65 6e 67 86 86 41 5f 4f 50 55 53 63 a2 93 4f 70 75 73 48 65 61 64 01 02 38 01 80 bb 00 00 00 00 00 56 aa 83 63 2e a0 56 bb 84 04 c4 b4 00 e1 8d b5 84 47 Data Ascii: EBBBBBwebmBBSg:oMtMSIfSDMSTkSMSSkSIf*B@DJ/Mgoogle/video-fileWAgoogle/video-fileTks,b#"engA_OPUScOpusHead8Vc.VG
2025-01-10 16:49:22 UTC	2080	OUT	POST /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:22 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:49:22 GMT Expires: Fri, 10 Jan 2025 16:49:22 GMT Cache-Control: private, max-age=21230 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:49:56 UTC	2081	OUT	POST /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:56 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:49:56 GMT Expires: Fri, 10 Jan 2025 16:49:56 GMT Cache-Control: private, max-age=21196 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49876	142.250.185.142	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:14 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:14 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 10 Jan 2025 16:48:14 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49886	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:14 UTC	2646	OUT	GET /images/custom/shortcut-icon.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/report?aff_id=1270&subid2=6988_sessid20250110164723474&subid=2566 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:14 UTC	898	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:14 GMT Content-Type: image/png Content-Length: 2113 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-841" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 97 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PEVF3ZklMU%2B18q%2Bv1dGrU6TLXJLoOWjkk665CuUcRl7t6suWPIZj%2BKkwgm5TjB1MWbv4DuTU3pf%2FWAT2kStVSYFBUr2Ds1HXcEtQ%2BlpBQZljtfEWwBEaR%2FlzKzWMX2K576c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2749eeca43a4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1782&min_rtt=1756&rtt_var=712&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2838&recv_bytes=3224&delivery_rate=1482233&cwnd=232&unsent_bytes=0&cid=26fff7ac989bbe95&ts=396&x=0"
2025-01-10 16:48:14 UTC	471	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 07 f6 49 44 41 54 68 81 ed d9 6b 70 94 d5 19 07 f0 df d9 10 42 02 0a 44 60 41 b1 0a 8a f7 6a 5b 54 d4 96 56 07 d1 51 5b 67 bc 3b 4c b5 de 20 1b c0 4e ab 4e c7 71 9c 4a b5 5e a6 9d d2 82 9a 6c e2 bd 62 6d d5 da 69 eb b5 da 7a ab a3 55 bc e0 80 68 51 a8 74 50 48 b8 04 04 13 20 d9 d3 0f bb 09 09 24 d9 dd c4 19 fb c1 ff cc ce 7b de e7 3c 97 ff f3 ee 39 ef 79 ce 79 f9 12 5f e2 8b 41 ac 75 6f ac 75 f4 e7 e6 2f ed ed 38 57 79 b1 76 89 3e 47 4c 48 08 8e ed 20 30 47 22 de 6e ef be b8 8a 77 18 87 bd c2 15 9a 8b a7 d1 77 bc 82 8b e2 9c 9c 8f 11 86 2b b1 30 d6 98 58 b4 a7 36 93 45 4b 3a 8b e2 9d 2a 63 bd 03 f2 Data Ascii: PNGIHDR00WbKGDIDAThkpBD`Aj[TVQ[g;L NNqJ^lbmizUhQtPH ${<9yy_Auou/8Wyv>GLH 0G"nww+0X6EK:*c
2025-01-10 16:48:14 UTC	1369	IN	Data Raw: a3 c4 96 42 ec e3 ed 86 08 e6 8a 1a 05 bf c6 49 56 3b a2 18 f2 9f 1b 62 8d 89 31 6d 45 4c 8b b1 d6 f4 bc fa 51 88 69 0b 62 5a 8c 75 7e d0 9f d8 7d 1e 42 bb 90 ca 0e a9 e7 b0 41 70 89 19 fe 1c 82 b8 8b de ed 86 18 a0 46 74 01 9e 53 65 4a 77 7a 85 62 97 04 62 9d 93 30 c6 70 0f 86 73 6d 2b 38 81 3a 23 44 8d 9d 44 8b f1 a8 e0 2d c1 66 6d 46 e0 48 c1 05 da 87 5c c2 d1 61 86 d7 fb 4a be fb 04 d2 8e c4 0d 18 a2 cc d4 70 b1 96 82 12 a8 75 89 e0 2e 65 c3 b2 82 ad 4d f9 4c 9a 54 a9 ec cf d3 a7 87 21 14 eb 94 ca 78 59 b0 34 a4 f2 8f d1 38 57 b9 0a 8b 31 de b8 33 a9 fc 2a 9f 2e 67 d3 72 b6 35 d1 da cc 80 72 ca 46 b0 db 58 fe fd 00 34 84 94 64 7f c8 f7 98 00 c4 7a 87 ca 78 53 30 2b 54 b9 b3 47 bd 28 48 5b 20 98 a6 3c c9 a1 55 f2 be dc de ba 85 b6 16 da 4c 08 b3 7c 90 Data Ascii: BIV;b1mELQibZu~}BApFtSeJwzbb0psm+8:#DD-fmFH\aJpu.eMLT!xY48W13*.gr5rFX4dzxS0+TG(H[ <UL\|
2025-01-10 16:48:14 UTC	273	IN	Data Raw: 9a 2d d8 f9 1b 42 be 0c df 55 ea 6b 61 ba 15 79 c9 df 66 1f a3 3d 81 29 1d f4 b9 2c de 66 9f 82 12 f8 4c b6 c6 8e 86 87 6a d3 95 19 83 9f 0b a2 e8 44 09 fb 2b 53 b2 b3 d9 e7 72 b0 15 eb cc 10 fd 06 6d b2 e7 41 c7 e0 1c fc 42 76 fd 38 3d a4 72 f5 53 6f 7e d2 3e 90 70 69 98 e1 85 42 63 f7 e7 03 47 36 68 bd e3 44 b5 b8 47 ab 7d f1 2a de 0c 29 8f 28 71 ac ec 16 f4 ed 42 8e 1c 65 ff b5 1e cb 86 ee d0 ef 04 64 54 63 41 48 99 15 66 5b 27 fa 10 63 62 9d d2 30 dd 9a 90 72 b2 e8 3c c1 b5 b1 ce ac 3c de b6 69 b1 34 8f 4e 17 f4 3f 81 60 a2 8c da 8e fb 81 ee 43 a9 8c 33 3a 54 aa 3d 26 f8 ae 68 72 af ae 52 0e 0b 3f b4 b5 df 9c 8a 41 4c bb 33 ce 57 d6 45 56 e7 ea 98 f6 6c 4f 36 ff f7 88 77 1b 19 d3 c5 7f 32 ed 0b fa 3f 84 ba c3 76 4d 14 37 96 bf c4 97 f8 82 f0 3f 6c 03 Data Ascii: -BUkayf=),fLjD+SrmABv8=rSo~>piBcG6hDG}*)(qBedTcAHf['cb0r<<i4N?`C3:T=&hrR?AL3WEVlO6w2?vM7?l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49887	142.250.185.162	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:14 UTC	462	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:14 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Fri, 10 Jan 2025 16:48:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 16:48:14 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 72 53 4c 43 7a 65 51 72 30 56 53 68 71 4f 76 4e 74 50 62 66 5f 34 67 44 68 57 41 44 30 5f 78 6e 62 46 5f 59 38 6a 59 33 72 61 41 76 59 6e 4f 41 79 51 6f 56 33 5a 61 65 54 7a 7a 4f 79 4e 38 71 53 49 50 61 49 70 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKrSLCzeQr0VShqOvNtPbf_4gDhWAD0_xnbF_Y8jY3raAvYnOAyQoV3ZaeTzzOyN8qSIPaIp","type":4}
2025-01-10 16:48:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49890	142.250.185.142	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:14 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:14 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 10 Jan 2025 16:48:14 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49892	74.125.174.166	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:14 UTC	1763	OUT	GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8 [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:14 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:14 GMT Expires: Fri, 10 Jan 2025 16:48:14 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:14 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2025-01-10 16:48:14 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2025-01-10 16:48:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-10 16:48:14 UTC	4	IN	Data Raw: 35 31 0d 0a Data Ascii: 51
2025-01-10 16:48:14 UTC	81	IN	Data Raw: 14 4f 08 00 12 0b 51 5a 35 78 75 71 42 4a 48 5f 73 18 fb 01 20 dd d3 ed c3 b3 e6 8a 03 2a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 30 00 6a 1c 08 fb 01 10 dd d3 ed c3 b3 e6 8a 03 1a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 70 f9 a9 04 Data Ascii: OQZ5xuqBJH_s *CggKA2RyYxIBMQ0jCggKA2RyYxIBMQp
2025-01-10 16:48:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-10 16:48:14 UTC	7	IN	Data Raw: 31 31 34 66 65 0d 0a Data Ascii: 114fe
2025-01-10 16:48:14 UTC	5	IN	Data Raw: 15 da a7 08 00 Data Ascii:
2025-01-10 16:48:14 UTC	16384	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 04 42 85 81 02 18 53 80 67 01 00 00 00 02 f4 3a 6f 11 4d 9b 74 bf 4d bb 92 53 ab 84 15 49 a9 66 53 ac 88 00 00 00 00 00 00 00 44 4d bb 92 53 ab 84 16 54 ae 6b 53 ac 88 00 00 00 00 00 00 00 7f 4d bb 92 53 ab 84 1c 53 bb 6b 53 ac 88 00 00 00 00 00 00 00 d9 15 49 a9 66 b6 2a d7 b1 83 0f 42 40 44 89 84 4a 2f de 84 4d 80 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 57 41 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 16 54 ae 6b d5 ae d3 d7 81 01 73 c5 86 e7 f7 2c 62 23 bd 83 81 02 9c 81 00 22 b5 9c 83 65 6e 67 86 86 41 5f 4f 50 55 53 63 a2 93 4f 70 75 73 48 65 61 64 01 02 38 01 80 bb 00 00 00 00 00 56 aa 83 63 2e a0 56 bb 84 04 c4 b4 00 e1 8d b5 84 47 Data Ascii: EBBBBBwebmBBSg:oMtMSIfSDMSTkSMSSkSIf*B@DJ/Mgoogle/video-fileWAgoogle/video-fileTks,b#"engA_OPUScOpusHead8Vc.VG
2025-01-10 16:48:15 UTC	16384	IN	Data Raw: 77 00 85 4e 32 7b 05 61 22 97 26 44 e7 b6 fe a7 60 29 ea b4 0a 8c e9 6a 74 d6 62 ef 9d cb ae 38 2a c5 03 a5 71 5e f5 96 3d bd 84 26 5f 1d 7a 38 48 6a 8f df 46 87 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e ad 66 88 c8 8a f3 ed 6a 87 9c c0 d9 e9 77 df 74 b3 fd eb 2a 7c 93 42 3d b5 f5 64 3a 6a f4 27 26 66 54 40 d9 e9 77 69 79 5f 0a 29 4a 7d 1e 28 8a bb d5 64 3a 51 dd 4c 4e 72 b7 eb 88 78 07 aa 75 19 5e 89 cd b4 fd 71 0f 61 72 98 d8 e4 5d 2a 2b 03 ef 55 f0 61 72 98 d5 a9 84 2a 2b a5 ef 55 f0 01 6f b0 f2 f0 51 17 82 84 09 a0 20 4f 8f 2f 05 0c bc 14 10 26 80 40 9a 17 3f c0 44 02 9e 8d c2 16 0d 00 ac 6c eb 62 83 40 06 34 03 5c c0 84 00 4f 41 b8 d0 88 23 8d 1e 82 20 88 f4 23 02 20 7a 47 b2 13 82 01 82 68 ff ff ff ff ff 04 73 3b Data Ascii: wN2{a"&D`)jtb8q^=&_z8HjF.fjwt\|B=d:j'&fT@wiy_)J}(d:QLNrxu^qar]+Uar+UoQ O/&@?Dlb@4\OA# # zGhs;
2025-01-10 16:48:15 UTC	1771	OUT	GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8 [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:15 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:15 GMT Expires: Fri, 10 Jan 2025 16:48:15 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49894	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:14 UTC	2339	OUT	GET /images/custom/image11.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:14 UTC	907	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:14 GMT Content-Type: image/png Content-Length: 12361818 Connection: close Last-Modified: Mon, 09 Aug 2021 09:32:20 GMT ETag: "6110f624-bca05a" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4977 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9nWuoM74v2CDuON2o8cfO2ykMhYvq%2F%2FHHcoCXybSR%2B73PCqlwUBRQMFX7FGvU5p%2F3nc5ipCAxX2NwchHHeCwRpE9svSBjlhEdsr%2BUTXMmMJtGkFt%2Fbudkn5PDefV7V5UcfU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe274d3f2e42e6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2159&min_rtt=2152&rtt_var=821&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2917&delivery_rate=1322463&cwnd=202&unsent_bytes=0&cid=ef5f8a660916ed27&ts=136&x=0"
2025-01-10 16:48:14 UTC	462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 cf 00 00 07 cf 08 06 00 00 00 be 1d ae 52 00 00 80 00 49 44 41 54 78 5e 94 9c 75 7c 57 c7 d6 af 6b b4 45 8b 4b f1 10 21 81 24 24 24 c4 dd dd dd dd dd 8d 28 81 84 84 84 04 82 06 77 97 00 c1 dd a5 58 71 a7 48 69 4b 5b 2a d4 9f bb f2 e3 9c f3 be e7 de bf ee 87 3e ac d9 32 7b cf de 33 b3 66 2d be bf dd f7 3e 70 b0 e5 43 7b 5b 3e b6 b3 a3 bb 83 3d 9f 58 db d0 dd dc 92 ee 26 66 f4 30 34 a6 97 81 31 7d 0c 4c f8 cc d0 94 7e 86 16 7c 66 60 4e 9f 29 66 f4 d6 37 a5 d7 64 63 7a eb 1a d3 57 cf 94 81 fa 16 0c d5 b3 66 84 be 2d a3 8d 1c 18 63 e6 c2 28 6b 37 86 3b 7a f1 b9 ab 1f c3 3d 83 18 e9 1d fa 1f 46 fb 86 a3 14 10 8d 52 50 02 6a 21 29 4c 0c cb 62 52 58 1e 7a a1 f9 4c 0e c8 47 df af 90 29 82 a1 6f 21 c6 be 45 Data Ascii: PNGIHDRRIDATx^u\|WkEK!$$$(wXqHiK[*>2{3f->pC{[>=X&f041}L~\|f`N)f7dczWf-c(k7;z=FRPj!)LbRXzLG)o!E
2025-01-10 16:48:14 UTC	1369	IN	Data Raw: 4a 31 ca 89 79 8c 89 cd 60 64 74 32 a3 62 92 18 1b 97 82 72 6c 3a ea 71 59 a8 47 67 a0 16 9a cc 38 df 68 86 3b fb c9 b3 b8 32 c8 da 91 01 e6 56 f4 33 31 a1 8f a1 be f4 e3 64 fa 19 1b d0 5f b6 fb 1b 4b 7f 4a bf f6 9d ac 4f 7f 3d 7d fa ea 4e e6 33 1d 5d 45 79 90 b1 31 83 cd cc 18 6c 65 49 7f 6b 0b fa d8 5a d1 d3 c1 86 1e ee 0e f4 f5 73 67 58 78 80 dc 3f 94 71 f1 91 8c 4f 8a 65 5c 42 34 23 e3 22 19 97 99 c4 f8 82 0c 94 0b d2 51 2b cb 61 62 45 3e 9a 65 79 4c 2c c8 44 27 2f 0b ad cc 34 a9 17 cd 90 88 08 3e 8f 8d 63 60 64 0c bd c3 a2 f9 24 38 8c 8f 02 43 f9 28 24 92 8f 64 fb e3 d0 68 7a 86 c7 d2 2f 22 81 a1 51 a9 8c 8a 4e 43 29 32 15 e5 b0 04 94 43 a4 ef 82 c2 18 e1 eb c7 30 6f 6f 3e f7 f6 63 90 bb 0f 9f 39 b8 d3 cb c6 8d 3e f6 de f4 71 f0 a5 b7 bd 9f 58 7f fa Data Ascii: J1y`dt2brl:qYGg8h;2V31d_KJO=}N3]Ey1leIkZsgXx?qOe\B4#"Q+abE>eyL,D'/4>c`d$8C($dhz/"QNC)2C0oo>c9>qX
2025-01-10 16:48:14 UTC	1369	IN	Data Raw: e1 f6 c9 32 1e 5e ac e6 d1 a5 6a 6e 9f 29 e5 fa f1 02 ae 1f cd e3 cb 63 f9 7c 79 a4 90 2b 07 f2 38 b7 2b 9d d3 db d2 39 b5 59 f6 ef 6f e4 ab 8b 6b a4 ce 66 6e 9d db c6 ed 0b bb b9 79 6e 17 17 8e 6e e6 58 e7 5a 0e 6e 5f c3 91 1d 6b 39 bd 6f 3d 17 0e ad e7 e2 81 d5 9c df bb 82 f3 bb 17 70 62 6d 25 27 96 67 73 b0 3d 9e e3 cb c2 39 b6 c0 97 c3 ad de 1c 5f 10 c4 d9 95 31 1c 5f 19 cd 8e f9 9e 2c ac d2 65 5e 89 1a f3 72 46 33 37 6b 24 6b ca b5 d8 39 c3 84 8e 19 a6 ec a8 32 62 7b 85 a1 82 8d c5 ba ac c9 9d c0 8a 4c 35 96 67 a8 48 59 83 0d 85 5a b2 7f 12 1b 8b 74 59 57 a8 c7 ca fc 29 2c cf 31 62 65 9e 85 58 73 96 e7 9a b1 71 aa 13 3b 6a bd e4 7a 5e 74 36 fa 70 66 71 24 57 57 25 73 76 71 34 bb ea 3c 58 5e 60 ca ec 64 2d 66 c6 8e 67 61 b6 3e f3 33 74 68 8c 53 a3 29 Data Ascii: 2^jn)c\|y+8+9YokfnynnXZn_k9o=pbm%'gs=9_1_,e^rF37k$k92b{L5gHYZtYW),1beXsq;jz^t6pfq$WW%svq4<X^`d-fga>3thS)
2025-01-10 16:48:14 UTC	1369	IN	Data Raw: 15 29 21 54 e7 a4 53 91 5f 40 51 56 3e 99 09 79 04 ba 47 e1 2c b1 98 b5 69 10 c6 fa fe 18 4f f1 c5 cc d0 07 73 89 2d cd 0c ed 64 db 00 33 03 5d 6c 8d f5 70 36 35 c4 d1 48 1f 73 5d 4d 0c 34 55 30 d6 1a 83 9d 9e 12 be 16 ea 04 db 6a 11 ea a0 4b aa 9f 39 89 5e fa c4 ba 69 91 e4 ad cf f4 cc 00 16 d6 16 b1 bc a5 85 75 2b 37 b0 63 f7 09 f6 1d bb c6 c9 8b 8f 38 7d e5 15 bb 8e dc 63 d5 d6 d3 cc 5e b0 81 8a 8a 7a 99 df 99 24 07 b8 e3 64 30 11 2b 6d 65 ec 74 35 70 98 3c 01 c7 c9 e3 b1 d7 51 c6 72 e2 48 2c 26 0c c7 61 92 12 ee 7a ea 78 ea 69 e1 31 59 17 2f 03 43 fc cd cc 09 b3 73 90 fb 7b 93 16 10 40 b2 9f 1f 49 3e 3e 94 44 c7 51 95 94 46 79 62 3a f9 11 89 b2 3f 92 18 f7 20 22 9c 02 f0 b3 08 94 7b 85 60 a1 13 8c a9 5e 30 8e 0e 31 84 46 97 12 95 3a 8d c2 ca d9 d4 d6 Data Ascii: )!TS_@QV>yG,iOs-d3]lp65Hs]M4U0jK9^iu+7c8}c^z$d0+met5p<QrH,&azxi1Y/Cs{@I>>DQFyb:? "{`^01F:
2025-01-10 16:48:14 UTC	1369	IN	Data Raw: 29 89 f5 18 27 d7 61 9c 54 8b 71 62 2d a6 62 cd 92 a7 61 92 52 8d 51 4a 25 a6 e9 35 58 cb bc b1 4b 99 86 43 52 b5 d8 0a ac 53 ab e4 bc 6a 0c e2 4b 30 89 cd c7 49 62 9c 20 b1 21 01 b1 f8 ba 78 e2 6b 6f 8b 8b a1 1e 4e 93 b4 f0 d1 d7 c1 4f 6f 02 3e 93 55 25 c6 56 25 ce 41 9b 4c 6f 43 0a 82 cc c8 f0 32 22 c9 65 0a f1 8e 7a c4 da 6b 13 65 a3 41 b8 a5 32 41 a6 23 09 34 19 45 98 85 0a 91 36 ea 44 5a ab 12 61 a5 4c b4 ad 1a 89 2e 5a 52 4f 9b bc 00 6d 4a c2 75 a8 cf 30 65 56 9e 19 d3 33 f4 04 5d ea b2 f4 98 99 63 40 7d ae 01 33 b2 27 53 97 a6 4d 4d dc 44 a6 86 ab 91 e7 37 46 50 22 3f 40 99 9a 78 3d e6 14 d9 d2 56 6e 2b 71 a8 3d 8b ea ed 99 5d 63 42 4d 9e 1e 99 91 e3 49 0b 55 a7 34 cd 90 69 c5 56 d4 96 5a 89 75 a0 aa 40 e2 c4 f4 00 19 4f 91 f8 c7 e7 e1 95 56 87 63 Data Ascii: )'aTqb-baRQJ%5XKCRSjK0Ib !xkoNOo>U%V%ALoC2"ezkeA2A#4E6DZaL.ZROmJu0eV3]c@}3'SMMD7FP"?@x=Vn+q=]cBMIU4iVZu@OVc
2025-01-10 16:48:14 UTC	1369	IN	Data Raw: 52 f4 5b da 99 d2 dc 8e 61 53 3b 66 2d cb 31 9d bd 04 b3 a6 45 58 36 2f c2 5a 8e d9 b6 2c c3 4e f6 5b 34 2c c2 ac 7e 81 c2 5a 34 2e c2 b0 6e 0e 06 d3 5b d1 9f 36 1b 83 9a d9 98 cd 98 83 55 c3 3c 2c 66 ce c1 74 c6 6c b1 ad d8 ca bd 1c 5a 17 e2 30 bb 0d fb e6 39 0a 6b d7 d4 75 5e 33 56 33 df 61 5e d7 88 71 4d 1d 06 55 b5 e8 57 d6 8a 9d 21 d4 31 b9 72 3a 9a e5 35 a8 95 4e 43 b9 a8 96 71 05 35 28 e7 d7 a0 51 52 87 76 79 23 da 95 b3 e4 78 03 13 a4 6f 34 4a eb 15 8c 2f 9d c1 a4 ca 26 69 4f 2b 86 55 2d 18 57 bc c3 70 6a 33 06 a5 8d 18 16 cf c4 bc b2 19 6b 69 b7 e5 8c 56 ac 67 8a 0f ac 6f c1 b2 be 19 9b 99 2d 38 48 fb 9d 9b 16 e2 32 7b 31 ce 2d 8b 70 9c bd 10 27 b1 2e 73 17 4b bb db b0 a8 6b c6 b4 b6 91 29 15 72 9f e2 2a 26 e4 4e 45 23 af 9c 71 19 05 8c 4d cb 61 Data Ascii: R[aS;f-1EX6/Z,N[4,~Z4.n[6U<,ftlZ09ku^3V3a^qMUW!1r:5NCq5(QRvy#xo4J/&iO+U-Wpj3kiVgo-8H2{1-p'.sKk)r*&NE#qMa
2025-01-10 16:48:14 UTC	1369	IN	Data Raw: 66 53 e8 6f aa a7 10 cc 3f 33 d6 52 88 e6 5d 82 7a 5f 63 5d fa 18 ea d0 6b 8a b6 d4 d7 a4 8f b6 06 3d 27 aa d1 63 82 2a dd 35 54 14 f4 54 57 e3 13 95 2e 01 7d ec bf 50 fa 2f f1 5c 21 98 ff 8b 7f 8b e6 ff e6 ff 47 3c ef 29 b6 a7 c6 14 7a 4d 30 a1 97 a6 05 3d b5 ac e9 ad 10 d0 85 c9 ef 6c ef 49 d6 12 90 5a f2 89 b6 25 9f ca f1 1e da b6 f4 9a 64 43 1f 1d 4b 7a eb 58 28 8e f7 91 79 f2 6f e1 bc 97 9e 23 dd f5 e4 bd 4a 20 db 6d 8a 1b 1f 19 79 f1 91 b1 8f 2c 2a 9e b2 a8 78 f0 e9 14 f7 ff 88 e7 03 35 ed 19 a4 65 cf 60 cd 2e e1 dc 91 21 1a 4e 0c 51 77 15 eb 29 78 31 70 bc 07 fd 54 9c f8 4c d9 86 fe aa 56 0c 54 b7 78 27 9e 2b eb d3 6f 9c be d8 2e 11 5d 50 36 62 a0 aa 39 83 d4 6d 18 3c c1 91 61 93 bc 19 65 20 e3 d8 22 83 09 76 f9 4c 70 28 40 cd 5a 16 21 c7 02 26 ba Data Ascii: fSo?3R]z_c]k='c5TTW.}P/\!G<)zM0=lIZ%dCKzX(yo#J my,x5e`.!NQw)x1pTLVTx'+o.]P6b9m<ae "vLp(@Z!&
2025-01-10 16:48:14 UTC	1369	IN	Data Raw: c3 21 5a a7 77 32 af e1 00 eb 97 5e 64 fb ba 6b ac 59 72 86 b9 0d 7b 98 5e b2 86 e4 e0 5a 5c cd e2 31 d7 0b c2 c5 36 95 c4 e8 d9 54 d6 1c a0 65 d1 6d 66 b7 df 67 ee 92 bb ac 5c fd 88 55 2b ef b0 72 e5 75 d6 6f fc 82 ad 3b ce b2 6d d7 31 3a 76 ee 65 f7 d6 0e 36 2c 5b c3 9a f6 65 6c 5b bb 96 ce 8d 5b d8 b1 62 3d 2b e7 b4 d3 de 38 9f 85 f5 f3 59 30 73 29 cb e7 6c 66 ed e2 bd ac 5b 7a 84 95 ed 47 99 37 a7 93 99 33 b7 2a 84 f3 2e 6a aa d7 51 59 b2 9c f2 ac 56 4a e2 2b c9 08 48 21 ce 3d 92 08 87 10 f2 82 32 a9 cf a8 a5 a9 a0 41 92 e0 36 d6 cd db c8 f1 dd 67 38 b9 f7 12 fb b7 9e 62 dd e2 6d cc 6f 5c 40 63 55 03 95 39 95 4c 2b ac 65 56 c5 2c f2 13 0b 08 f5 8e 22 33 ad 9a a6 d6 2d ac da 2c cf bf ef 0e 9d 47 1e b2 ef c8 03 d6 ac 3b 41 d5 d4 56 72 53 0a 29 cf cc 67 Data Ascii: !Zw2^dkYr{^Z\16Temfg\U+ruo;m1:ve6,[el[[b=+8Y0s)lf[zG73*.jQYVJ+H!=2A6g8bmo\@cU9L+eV,"3-,G;AVrS)g
2025-01-10 16:48:14 UTC	1369	IN	Data Raw: f6 2c 3a 37 24 b1 6b 5d 14 1d eb 23 d9 b2 3c 9c d5 f3 42 98 27 6b 77 5d b9 87 f8 63 17 12 93 7d 09 4f 0e c3 3b 31 01 d7 e4 4c 9c 53 72 b1 49 29 c2 28 b9 04 9d c4 22 54 e2 f2 18 1e 9d 45 ff f0 6c ba 05 66 f1 51 40 36 1f fa 66 f2 81 67 fa ff 88 e7 0e 49 0a e1 fc 03 bb 24 de b7 eb 12 ce 93 79 df 3e 85 f7 1c 92 79 cf 51 b6 9d 13 79 cf 55 b6 3d 32 78 df 2b 87 0f 7c 0a 84 22 de f7 29 e6 43 bf a9 7c 18 f0 4e 3c ff 20 b0 86 0f 64 1d fc 30 68 3a 1f 06 d7 d1 2d ac 51 f2 e6 06 3e 8b 6a 60 60 74 1d fd c2 ca 85 32 fa 47 94 49 8e 5d ca 80 c8 02 06 47 e5 33 28 32 87 01 51 59 0a f1 7c 50 7c 16 83 12 84 c4 4c 06 26 65 31 a0 cb 8a 9f 1e 94 92 2d 64 31 2c 35 97 31 e9 45 8c 4b 2f 65 5c 4a 29 4a 89 25 8c 89 2d 12 8a 85 12 46 c7 14 33 32 a6 88 d1 09 65 8c 4d ad 62 6c 97 78 9e Data Ascii: ,:7$k]#<B'kw]c}O;1LSrI)("TElfQ@6fgI$y>yQyU=2x+\|")C\|N< d0h:-Q>j``t2GI]G3(2QY\|P\|L&e1-d1,51EK/e\J)J%-F32eMblx
2025-01-10 16:48:14 UTC	1369	IN	Data Raw: d7 35 cf 6d c0 38 a7 0e c3 ec 19 4c c9 9e 8e 6e 66 2d 5a 32 fe 26 88 ef 56 4b 94 b9 da f5 03 ab 30 59 c3 42 73 19 1a 9c 4d 5f 9f 64 3e 72 8c e4 23 99 27 7d bc 53 18 e8 9d 41 3f f7 54 b1 99 f4 f3 92 b5 c2 2f 97 cf c3 4a 18 12 28 f3 3a b2 42 e6 c1 4c 0c 32 e7 60 59 34 1f 13 79 4e 63 19 e3 e6 99 75 58 0a d6 92 0b 59 a7 56 63 96 54 89 41 62 25 7a 89 d5 4c 96 35 60 72 6a 03 7a a9 8d 4c 4a ac 63 62 ec 34 34 a2 aa 18 1f 5e 8e 6a 90 f8 0d bf 7c 46 78 65 33 c2 27 07 a5 10 59 87 c2 65 5f 48 3e e3 04 d5 30 59 6f 83 f3 50 0e 4c 15 3f 92 84 5a 88 10 1a 8f 5a 70 34 e3 fc 43 19 ed 1d cc 08 8f 20 86 75 7d 18 d7 25 a2 7b 86 32 cc 23 82 a1 ce 21 0c b1 0b 64 a8 a5 1f 83 4d bd e8 37 c5 8d de ba ce 74 d7 b2 e7 23 75 2b c1 92 6e e3 2d f9 44 cd 82 4f 55 cd e9 ae 66 4e 0f 35 4b Data Ascii: 5m8Lnf-Z2&VK0YBsM_d>r#'}SA?T/J(:BL2`Y4yNcuXYVcTAb%zL5`rjzLJcb44^j\|Fxe3'Ye_H>0YoPL?ZZp4C u}%{2#!dM7t#u+n-DOUfN5K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49895	74.125.174.166	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:14 UTC	1856	OUT	GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&mime=video%2Fmp4&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=27145031&dur=2881.399&lmt=1736405030972049&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3M [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:15 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 09 Jan 2025 06:43:50 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:14 GMT Expires: Fri, 10 Jan 2025 16:48:14 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:15 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2025-01-10 16:48:15 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2025-01-10 16:48:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-10 16:48:15 UTC	4	IN	Data Raw: 33 31 0d 0a Data Ascii: 31
2025-01-10 16:48:15 UTC	49	IN	Data Raw: 14 2f 08 00 12 0b 51 5a 35 78 75 71 42 4a 48 5f 73 18 8d 03 20 91 d5 ba e8 84 e8 8a 03 30 00 6a 0c 08 8d 03 10 91 d5 ba e8 84 e8 8a 03 70 ad ef 0d Data Ascii: /QZ5xuqBJH_s 0jp
2025-01-10 16:48:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-10 16:48:15 UTC	7	IN	Data Raw: 33 37 37 62 32 0d 0a Data Ascii: 377b2
2025-01-10 16:48:15 UTC	5	IN	Data Raw: 15 ce bd 1b 00 Data Ascii:
2025-01-10 16:48:15 UTC	16384	IN	Data Raw: 00 00 00 1c 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 61 76 30 31 6d 70 34 31 00 00 02 a0 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e3 a4 9a a8 e3 a4 9a a8 00 00 3c 00 02 a3 54 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e3 a4 9a a8 e3 a4 9a a8 00 00 00 01 00 00 00 00 02 a3 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ftypdashiso6av01mp41moovlmvhd<T@(mvex trextrak\tkhdT
2025-01-10 16:48:15 UTC	16384	IN	Data Raw: b6 a7 ab c4 0b da 28 3d 0a 71 90 c1 ea 75 60 48 dd b0 cd 30 91 6c a4 db bc 40 f3 6d fa be 20 53 9c 09 e1 e1 3c c4 f0 d3 28 e5 d8 89 fe af 7c b8 58 4e cb ed b8 e8 0d 57 a9 f9 fd 5c 60 02 45 cc c0 f7 be 7c fc 7d a9 e2 dd 4a 5a e8 6b ff e9 f6 bc a2 13 6e 72 7b 3b 4a ec df 9b be 1d e2 25 9e 18 7f 75 6a ab 8b 6d 9d d6 39 fa 96 c3 4c 6c 79 ae ed fd 9f a3 47 ed 03 d5 fc ec e0 c6 50 91 02 0a 45 6b de 3f f1 88 ff d8 6d b5 22 f6 85 aa b7 ed 19 e4 95 b8 ee f4 bc b7 44 a0 66 e3 48 10 68 1b 73 de 8d e6 1f 5a 97 07 19 fc c1 22 b9 44 af d6 0d ec c7 a3 4b 50 74 88 c5 c9 2f 34 4d 5e ca 7b bd cd 0e fb aa fb e6 e1 fb ac 18 e1 ae ac 63 98 41 0a 46 9d 85 28 d9 22 62 4b e5 61 45 b2 a6 de 60 63 11 32 a0 a7 29 e1 e7 dc c1 9f 21 e8 fa 81 38 ff aa 76 25 96 7a aa bf d8 46 95 f5 91 Data Ascii: (=qu`H0l@m S<(\|XNW\`E\|}JZknr{;J%ujm9LlyGPEk?m"DfHhsZ"DKPt/4M^{cAF("bKaE`c2)!8v%zF
2025-01-10 16:48:15 UTC	1773	OUT	GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8 [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:15 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:15 GMT Expires: Fri, 10 Jan 2025 16:48:15 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49891	142.250.185.142	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:14 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:15 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 10 Jan 2025 16:48:15 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49893	142.250.185.142	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:15 UTC	780	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 550 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:15 UTC	550	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 34 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 36 35 32 37 36 39 32 31 34 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"41",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1736527692141",null,null,null
2025-01-10 16:48:15 UTC	938	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=YRK1nRZfa9Ppkm_hzp_u3NzhOl0U_JUZTkvPmlaUYlQsfowg_vsvCUSYIiLq7HCzDedMZQqnq6e0MN4EJks4h8QYJiH4UzCTwFrny-Zrc5NDuRxX4ZRxJ4EEnt4I4c2_FWTgBc55jxT98Su_gdPuULk9f7Thms_WoboaqjJ2MStPwliKED17nIVTL1Ub; expires=Sat, 12-Jul-2025 16:48:15 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 10 Jan 2025 16:48:15 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 10 Jan 2025 16:48:15 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-10 16:48:15 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-01-10 16:48:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49903	74.125.174.166	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:15 UTC	1772	OUT	GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8 [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:15 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:15 GMT Expires: Fri, 10 Jan 2025 16:48:15 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:15 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2025-01-10 16:48:15 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2025-01-10 16:48:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-10 16:48:15 UTC	4	IN	Data Raw: 35 33 0d 0a Data Ascii: 53
2025-01-10 16:48:15 UTC	83	IN	Data Raw: 14 51 08 00 12 0b 51 5a 35 78 75 71 42 4a 48 5f 73 18 fb 01 20 dd d3 ed c3 b3 e6 8a 03 2a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 30 f9 a9 08 6a 1c 08 fb 01 10 dd d3 ed c3 b3 e6 8a 03 1a 0e 43 67 67 4b 41 32 52 79 59 78 49 42 4d 51 70 f7 8d 09 Data Ascii: QQZ5xuqBJH_s *CggKA2RyYxIBMQ0jCggKA2RyYxIBMQp
2025-01-10 16:48:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-10 16:48:15 UTC	7	IN	Data Raw: 32 34 36 66 63 0d 0a Data Ascii: 246fc
2025-01-10 16:48:15 UTC	5	IN	Data Raw: 15 d8 37 12 00 Data Ascii: 7
2025-01-10 16:48:15 UTC	16384	IN	Data Raw: ba 67 1c 36 ca e9 fe 8e b2 d7 3c a8 ad 07 a1 ee c8 d6 40 02 a9 45 d2 63 f1 87 37 c9 3d 29 f5 29 df 2e 37 2b 78 9b 31 3e 84 27 aa c3 29 e9 26 b1 60 d4 c1 ef 96 3d 3b 8e 30 e9 23 d1 aa 69 7c 36 e4 bb aa c9 29 be 0a b3 f5 9a a3 be 3f fb eb 2e 86 d0 e5 ce c6 9a 1e a1 78 ca 79 d9 b4 f2 03 e7 34 1c 8a f0 89 c6 38 e4 c4 63 1d dc ad bf 4c 2a d8 34 97 a6 f0 60 6c ff a6 e5 a2 d0 66 67 fb a2 30 15 42 9e 5c 7f 5c 24 4d 92 52 2d 11 9a 4f 37 f7 ba 38 85 ba 81 17 1e 2d b8 7b 08 d0 f7 08 3f 92 c7 35 0a 1f 50 be dc fe 63 43 5d e2 eb 23 6e 19 db b1 69 91 07 df 8a 72 c9 72 89 a8 a8 97 97 aa 6d 03 77 05 1a 51 9d 3f 67 8b e9 81 b2 3b fd 56 2f 7f 8d ef 81 fa b1 a7 8e 68 74 8e af ff db fb 4a e3 fa d7 17 f6 8b c0 cc 4c 09 a3 41 cf 81 1d 9d 80 fc 7a f5 6e 7d c7 84 ad 0e 8d 4a 6f Data Ascii: g6<@Ec7=)).7+x1>')&`=;0#i\|6)?.xy48cL*4`lfg0B\\$MR-O78-{?5PcC]#nirrmwQ?g;V/htJLAzn}Jo
2025-01-10 16:48:15 UTC	16384	IN	Data Raw: b0 7e 1d 27 00 82 ad 07 89 74 28 63 95 30 bc de b8 0a 07 01 68 96 80 63 22 cd a0 be de 42 c4 b3 5e 97 35 f0 2e cd a9 ed 27 dc 7a f5 f6 60 6b a6 59 35 9f ec 43 8a 60 23 ce c3 8b 74 f9 f7 5b 5e 05 22 68 8b d7 fe 38 b0 c5 56 65 1f a3 5e bf 9b a0 d7 91 94 9c be 10 46 99 be 2b d5 3b cb 18 ed 82 4c 85 c3 22 8a 2b 97 ce 32 23 c7 6a 0c 82 8c 66 1e 19 c1 4a 34 0b f6 f2 61 9e 26 58 c4 cf 9a fe 20 69 2e 95 e1 78 25 b7 cf c2 ff 78 ed 3a 44 4b 7b 98 bd 2a ca 05 6f 3a c1 14 2c 2b 19 f4 75 0a 60 7c 66 12 d5 fd 16 b2 a7 b1 88 58 03 0f 8d 54 58 2c 44 13 f6 0a 3d 4b fe 76 ff d3 1e 4f 6b 1e b8 a5 a9 03 44 3b d6 c1 ec 00 36 2f 2e 35 ac e9 18 40 d6 c4 f8 b2 61 9d 6c c8 71 39 e5 38 c4 e1 72 20 2f 77 25 75 37 b9 d3 cc 0e 3a 4d 2f 47 01 9a cd 31 66 87 7e b4 24 bb a4 cd 98 2d d0 Data Ascii: ~'t(c0hc"B^5.'z`kY5C`#t[^"h8Ve^F+;L"+2#jfJ4a&X i.x%x:DK{*o:,+u`\|fXTX,D=KvOkD;6/.5@alq98r /w%u7:M/G1f~$-
2025-01-10 16:48:16 UTC	1866	OUT	GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&mime=video%2Fmp4&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=27145031&dur=2881.399&lmt=1736405030972049&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3M [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:16 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 09 Jan 2025 06:43:50 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:16 GMT Expires: Fri, 10 Jan 2025 16:48:16 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:22 UTC	1853	OUT	GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8 [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:22 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:22 GMT Expires: Fri, 10 Jan 2025 16:48:22 GMT Cache-Control: private, max-age=21290 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:32 UTC	1854	OUT	GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8 [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:32 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:32 GMT Expires: Fri, 10 Jan 2025 16:48:32 GMT Cache-Control: private, max-age=21280 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:48:53 UTC	1855	OUT	GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8 [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:54 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:48:53 GMT Expires: Fri, 10 Jan 2025 16:48:53 GMT Cache-Control: private, max-age=21259 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:49:04 UTC	1948	OUT	GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&mime=video%2Fmp4&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=27145031&dur=2881.399&lmt=1736405030972049&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3M [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:05 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 09 Jan 2025 06:43:50 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:49:04 GMT Expires: Fri, 10 Jan 2025 16:49:04 GMT Cache-Control: private, max-age=21248 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:49:22 UTC	1937	OUT	GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=396&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&mime=video%2Fmp4&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=17089996&dur=2881.399&lmt=1736403020488492&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3M [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:22 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 09 Jan 2025 06:10:20 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:49:22 GMT Expires: Fri, 10 Jan 2025 16:49:22 GMT Cache-Control: private, max-age=21230 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:49:22 UTC	1856	OUT	GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8 [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:22 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:49:22 GMT Expires: Fri, 10 Jan 2025 16:49:22 GMT Cache-Control: private, max-age=21230 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2025-01-10 16:49:56 UTC	1857	OUT	GET /videoplayback?expire=1736549292&ei=TE-BZ52INPSL6dsPuOnFmAc&ip=8.46.123.189&id=o-AL_JpBj1GMNoRv4nbiQzc9tYon2CEXSer0oEuau9uJRG&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&met=1736527692%2C&mh=Dh&mm=31%2C26&mn=sn-t0aedn7l%2Csn-5ualdns6&ms=au%2Conr&mv=u&mvi=1&pl=23&rms=au%2Cau&bui=AY2Et-OOzOz8JIehJjzVX6y4haNTFqaGwa1G14X2rq0JXj9JUpVBiGtxHA2-JlqD-VUtWF3SOumi2IsB&spc=9kzgDQ53bfUpfRhImk_GkC0yGKf_TuEfb3i7ooBhlZkOHO-nQDa8nlyzVSK4&vprv=1&svpuc=1&xtags=drc%3D1&mime=audio%2Fwebm&ns=32vuh18k1mYdcoTqAjRHWdIQ&rqh=1&gir=yes&clen=49560223&dur=2881.441&lmt=1736348851202525&mt=1736526768&fvip=3&keepalive=yes&fexp=51326932%2C51335594%2C51353498%2C51371294&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=5318224&n=yihQajrTy_bu2Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cxtags%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=met%2Cmh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Crms&lsig=AGluJ3MwRgIhAJWli_u1Kd58istqSyE8nMA8KXx1k5sdT9dwJaqSVp_eAiEA1T7MMfj53j3Eewap4-V8yn86heRffSyVwSwyVe8 [TRUNCATED] Host: rr1---sn-t0aedn7l.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:56 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jan 2025 15:07:31 GMT Content-Type: application/vnd.yt-ump Date: Fri, 10 Jan 2025 16:49:56 GMT Expires: Fri, 10 Jan 2025 16:49:56 GMT Cache-Control: private, max-age=21196 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49907	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:15 UTC	2345	OUT	GET /images/custom/shortcut-icon.png HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:15 UTC	888	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:15 GMT Content-Type: image/png Content-Length: 2113 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-841" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 98 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L2G5LY%2B2F3dYwirHwD4OBCTyJAIDUGwHoCkuxM5ugxTmcaA3ZNi5No5TO6CyxgTIHKffFDG9jSQkAocQmO0HORkQI3i1pnjF9U7hL9AQTZfo5aSXEWuF1zZDfrF8v6NWH3A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2750b8a0c436-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1635&min_rtt=1586&rtt_var=693&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2923&delivery_rate=1473259&cwnd=223&unsent_bytes=0&cid=32c81957b012ca34&ts=120&x=0"
2025-01-10 16:48:15 UTC	481	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 07 f6 49 44 41 54 68 81 ed d9 6b 70 94 d5 19 07 f0 df d9 10 42 02 0a 44 60 41 b1 0a 8a f7 6a 5b 54 d4 96 56 07 d1 51 5b 67 bc 3b 4c b5 de 20 1b c0 4e ab 4e c7 71 9c 4a b5 5e a6 9d d2 82 9a 6c e2 bd 62 6d d5 da 69 eb b5 da 7a ab a3 55 bc e0 80 68 51 a8 74 50 48 b8 04 04 13 20 d9 d3 0f bb 09 09 24 d9 dd c4 19 fb c1 ff cc ce 7b de e7 3c 97 ff f3 ee 39 ef 79 ce 79 f9 12 5f e2 8b 41 ac 75 6f ac 75 f4 e7 e6 2f ed ed 38 57 79 b1 76 89 3e 47 4c 48 08 8e ed 20 30 47 22 de 6e ef be b8 8a 77 18 87 bd c2 15 9a 8b a7 d1 77 bc 82 8b e2 9c 9c 8f 11 86 2b b1 30 d6 98 58 b4 a7 36 93 45 4b 3a 8b e2 9d 2a 63 bd 03 f2 Data Ascii: PNGIHDR00WbKGDIDAThkpBD`Aj[TVQ[g;L NNqJ^lbmizUhQtPH ${<9yy_Auou/8Wyv>GLH 0G"nww+0X6EK:*c
2025-01-10 16:48:15 UTC	1369	IN	Data Raw: 8a 1a 05 bf c6 49 56 3b a2 18 f2 9f 1b 62 8d 89 31 6d 45 4c 8b b1 d6 f4 bc fa 51 88 69 0b 62 5a 8c 75 7e d0 9f d8 7d 1e 42 bb 90 ca 0e a9 e7 b0 41 70 89 19 fe 1c 82 b8 8b de ed 86 18 a0 46 74 01 9e 53 65 4a 77 7a 85 62 97 04 62 9d 93 30 c6 70 0f 86 73 6d 2b 38 81 3a 23 44 8d 9d 44 8b f1 a8 e0 2d c1 66 6d 46 e0 48 c1 05 da 87 5c c2 d1 61 86 d7 fb 4a be fb 04 d2 8e c4 0d 18 a2 cc d4 70 b1 96 82 12 a8 75 89 e0 2e 65 c3 b2 82 ad 4d f9 4c 9a 54 a9 ec cf d3 a7 87 21 14 eb 94 ca 78 59 b0 34 a4 f2 8f d1 38 57 b9 0a 8b 31 de b8 33 a9 fc 2a 9f 2e 67 d3 72 b6 35 d1 da cc 80 72 ca 46 b0 db 58 fe fd 00 34 84 94 64 7f c8 f7 98 00 c4 7a 87 ca 78 53 30 2b 54 b9 b3 47 bd 28 48 5b 20 98 a6 3c c9 a1 55 f2 be dc de ba 85 b6 16 da 4c 08 b3 7c 90 8f 64 ac 75 96 e0 4a c1 59 a1 Data Ascii: IV;b1mELQibZu~}BApFtSeJwzbb0psm+8:#DD-fmFH\aJpu.eMLT!xY48W13*.gr5rFX4dzxS0+TG(H[ <UL\|duJY
2025-01-10 16:48:15 UTC	263	IN	Data Raw: ea 6b 61 ba 15 79 c9 df 66 1f a3 3d 81 29 1d f4 b9 2c de 66 9f 82 12 f8 4c b6 c6 8e 86 87 6a d3 95 19 83 9f 0b a2 e8 44 09 fb 2b 53 b2 b3 d9 e7 72 b0 15 eb cc 10 fd 06 6d b2 e7 41 c7 e0 1c fc 42 76 fd 38 3d a4 72 f5 53 6f 7e d2 3e 90 70 69 98 e1 85 42 63 f7 e7 03 47 36 68 bd e3 44 b5 b8 47 ab 7d f1 2a de 0c 29 8f 28 71 ac ec 16 f4 ed 42 8e 1c 65 ff b5 1e cb 86 ee d0 ef 04 64 54 63 41 48 99 15 66 5b 27 fa 10 63 62 9d d2 30 dd 9a 90 72 b2 e8 3c c1 b5 b1 ce ac 3c de b6 69 b1 34 8f 4e 17 f4 3f 81 60 a2 8c da 8e fb 81 ee 43 a9 8c 33 3a 54 aa 3d 26 f8 ae 68 72 af ae 52 0e 0b 3f b4 b5 df 9c 8a 41 4c bb 33 ce 57 d6 45 56 e7 ea 98 f6 6c 4f 36 ff f7 88 77 1b 19 d3 c5 7f 32 ed 0b fa 3f 84 ba c3 76 4d 14 37 96 bf c4 97 f8 82 f0 3f 6c 03 b4 32 ff 49 24 78 00 00 00 00 Data Ascii: kayf=),fLjD+SrmABv8=rSo~>piBcG6hDG}*)(qBedTcAHf['cb0r<<i4N?`C3:T=&hrR?AL3WEVlO6w2?vM7?l2I$x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49901	142.250.184.193	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:15 UTC	769	OUT	GET /ytc/AIdro_m9vnpvLDuCjN3benUeTYbdwWWXR-SG2Q9WZSq15GVI1DuDYBub2lf4hmef0g1yidFIrw=s88-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:16 UTC	564	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 1228 X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 14:16:44 GMT Expires: Sat, 11 Jan 2025 14:16:44 GMT Cache-Control: public, max-age=86400, no-transform Content-Type: image/jpeg Vary: Origin Age: 9091 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:48:16 UTC	826	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0e 0e 0e 0e 0e 09 08 07 07 0f 08 08 07 0c 06 09 0b 09 06 07 07 06 08 09 06 08 08 08 0a 08 09 0d 08 08 10 0d 09 11 06 0b 08 0d 0a 0a 08 13 08 0d 09 0c 08 08 17 18 0b 14 0d 08 14 0a 08 01 03 04 04 06 05 05 0a 06 06 09 0b 0b 0b 0e 0d 0d 0a 0e 0b 0b 14 0a 08 0e 0a 0e 14 08 08 08 0a 08 09 14 08 0e 0d 08 0a 0b 0a 0a 08 14 08 0d 14 0f 09 0a 14 14 08 0b 0b 0a 14 08 08 0b 0b 08 08 08 ff c0 00 11 08 00 58 00 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 08 07 06 05 ff c4 00 2e 10 00 02 02 01 02 03 07 02 07 01 00 00 00 00 00 00 00 01 02 03 11 04 12 05 13 21 07 08 14 22 31 41 51 06 32 23 33 42 52 61 72 81 15 ff c4 00 18 01 01 01 01 Data Ascii: JFIFXX.!"1AQ2#3BRar
2025-01-10 16:48:16 UTC	402	IN	Data Raw: 4d 94 5b cb ed 93 59 d7 2e ea 60 65 58 b6 94 fa c4 7e ea 2d e5 f6 c9 ac eb 97 75 20 96 ca 49 46 00 00 00 00 00 00 00 00 69 7d de fb 52 7a 3d 54 27 26 d5 76 fe 1e b5 75 c7 2a 72 5e 7c 7c c6 78 92 f5 78 52 5f a8 e4 da 92 7e 6a 5d 5a 9b c9 b4 df 7e 5d 72 39 36 9c 9f 9a 97 56 a6 f2 62 df 7e 5d 72 2e 4b 7b 1a a5 eb a3 af f2 e5 69 9a db 88 ec 95 b8 51 85 f9 f7 7e 19 b8 f5 cf 45 07 ec 4e 92 7e 22 49 ac a7 0b da 66 ac fb b1 ee 4f d2 7a 22 4a 2c af ae 99 ab 7e ec 7b 91 37 79 3e d5 fc 66 aa 4e 12 cd 5a 6d d5 68 fa a7 19 46 32 f3 da ba bf be 7d 53 f7 82 af dd 14 1b 26 4b ca cb a2 2e f2 ed 3b f0 de 89 87 bd 4d ed 95 27 e5 65 d1 17 79 76 97 f0 de 89 87 bd 4c a4 ed 1d 90 00 00 00 00 00 00 00 00 02 fc d1 71 49 2e 05 b9 4e 6a 4b 85 4d 29 e5 ef 49 41 c1 61 ff 00 4e 8b e0 Data Ascii: M[Y.`eX~-u IFi}Rz=T'&vu*r^\|\|xxR_~j]Z~]r96Vb~]r.K{iQ~EN~"IfOz"J,~{7y>fNZmhF2}S&K.;M'eyvLqI.NjKM)IAaN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49908	142.250.185.142	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:15 UTC	781	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1605 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:15 UTC	1605	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 34 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 36 35 32 37 36 39 33 30 30 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"41",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1736527693006",null,null,null
2025-01-10 16:48:16 UTC	938	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=p11Eg7ckVPTuQF9sZSEPtI1twYkSENKQdoQUMndDeI5P8NcezDiEgITX6GILDesb-C4txyQ2DqNxsc7qoIeEJ-Y9XMPoNzYGFfQ_7o6CUePAdmEClApTAr5Jg5JChPq6l9mmDtmfK4UwhnSlTIYZ5Q9UvqDXW5oZSl9aKJ-C1y4Bm6qI0Pt8ZYUXYjZx; expires=Sat, 12-Jul-2025 16:48:15 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 10 Jan 2025 16:48:15 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 10 Jan 2025 16:48:15 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-10 16:48:16 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-01-10 16:48:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49910	142.250.185.142	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:16 UTC	780	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 800 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:16 UTC	800	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 34 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 36 35 32 37 36 39 33 30 30 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"41",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1736527693009",null,null,null
2025-01-10 16:48:16 UTC	940	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=auvk0OhePqC0yOz3kd9fXyMJ02ZM5uilHVRxbTCbKY7G4vF7m2FbtVy3fCRljND_j6_SEhHVmL8rRajPYscnW85xaOHCz3IdA970baFXvCCtUlaut-XV31O3WKs0bFHFwd9RoIl47LhAxMSiOrABv9yLZfWin2p3Muo_9Yet8DtB_aC2-69IKkQc_hp_Eg; expires=Sat, 12-Jul-2025 16:48:16 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 10 Jan 2025 16:48:16 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 10 Jan 2025 16:48:16 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-10 16:48:16 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-01-10 16:48:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49915	142.250.184.193	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:17 UTC	534	OUT	GET /ytc/AIdro_m9vnpvLDuCjN3benUeTYbdwWWXR-SG2Q9WZSq15GVI1DuDYBub2lf4hmef0g1yidFIrw=s88-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:17 UTC	564	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 1228 X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 14:16:44 GMT Expires: Sat, 11 Jan 2025 14:16:44 GMT Cache-Control: public, max-age=86400, no-transform Content-Type: image/jpeg Vary: Origin Age: 9093 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:48:17 UTC	826	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0e 0e 0e 0e 0e 09 08 07 07 0f 08 08 07 0c 06 09 0b 09 06 07 07 06 08 09 06 08 08 08 0a 08 09 0d 08 08 10 0d 09 11 06 0b 08 0d 0a 0a 08 13 08 0d 09 0c 08 08 17 18 0b 14 0d 08 14 0a 08 01 03 04 04 06 05 05 0a 06 06 09 0b 0b 0b 0e 0d 0d 0a 0e 0b 0b 14 0a 08 0e 0a 0e 14 08 08 08 0a 08 09 14 08 0e 0d 08 0a 0b 0a 0a 08 14 08 0d 14 0f 09 0a 14 14 08 0b 0b 0a 14 08 08 0b 0b 08 08 08 ff c0 00 11 08 00 58 00 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 08 07 06 05 ff c4 00 2e 10 00 02 02 01 02 03 07 02 07 01 00 00 00 00 00 00 00 01 02 03 11 04 12 05 13 21 07 08 14 22 31 41 51 06 32 23 33 42 52 61 72 81 15 ff c4 00 18 01 01 01 01 Data Ascii: JFIFXX.!"1AQ2#3BRar
2025-01-10 16:48:17 UTC	402	IN	Data Raw: 4d 94 5b cb ed 93 59 d7 2e ea 60 65 58 b6 94 fa c4 7e ea 2d e5 f6 c9 ac eb 97 75 20 96 ca 49 46 00 00 00 00 00 00 00 00 69 7d de fb 52 7a 3d 54 27 26 d5 76 fe 1e b5 75 c7 2a 72 5e 7c 7c c6 78 92 f5 78 52 5f a8 e4 da 92 7e 6a 5d 5a 9b c9 b4 df 7e 5d 72 39 36 9c 9f 9a 97 56 a6 f2 62 df 7e 5d 72 2e 4b 7b 1a a5 eb a3 af f2 e5 69 9a db 88 ec 95 b8 51 85 f9 f7 7e 19 b8 f5 cf 45 07 ec 4e 92 7e 22 49 ac a7 0b da 66 ac fb b1 ee 4f d2 7a 22 4a 2c af ae 99 ab 7e ec 7b 91 37 79 3e d5 fc 66 aa 4e 12 cd 5a 6d d5 68 fa a7 19 46 32 f3 da ba bf be 7d 53 f7 82 af dd 14 1b 26 4b ca cb a2 2e f2 ed 3b f0 de 89 87 bd 4d ed 95 27 e5 65 d1 17 79 76 97 f0 de 89 87 bd 4c a4 ed 1d 90 00 00 00 00 00 00 00 00 02 fc d1 71 49 2e 05 b9 4e 6a 4b 85 4d 29 e5 ef 49 41 c1 61 ff 00 4e 8b e0 Data Ascii: M[Y.`eX~-u IFi}Rz=T'&vu*r^\|\|xxR_~j]Z~]r96Vb~]r.K{iQ~EN~"IfOz"J,~{7y>fNZmhF2}S&K.;M'eyvLqI.NjKM)IAaN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49922	142.250.185.142	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:18 UTC	988	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 621 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=auvk0OhePqC0yOz3kd9fXyMJ02ZM5uilHVRxbTCbKY7G4vF7m2FbtVy3fCRljND_j6_SEhHVmL8rRajPYscnW85xaOHCz3IdA970baFXvCCtUlaut-XV31O3WKs0bFHFwd9RoIl47LhAxMSiOrABv9yLZfWin2p3Muo_9Yet8DtB_aC2-69IKkQc_hp_Eg
2025-01-10 16:48:18 UTC	621	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 34 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 36 35 32 37 36 39 37 32 38 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"41",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1736527697284",null,null,null
2025-01-10 16:48:19 UTC	948	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=Q5dU8-6z9SZsix0cAK4VRfWitUU9EDuk8QStlDZ-3DoUhgSAarlyoleu2z_BGgmdHecdFNtNBXC_Y4RVM0bp4PDnKgkR9mwkGWnaw0FvOao-jxhphaBXjShhbdkcFsaK5-X8YxRoTrusE6vJzwJ_7ovoE2ei1LHPZjegjk5NPU7vW7kPso9PN9ReK00mdTCnW34QTg; expires=Sat, 12-Jul-2025 16:48:19 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 10 Jan 2025 16:48:19 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 10 Jan 2025 16:48:19 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-10 16:48:19 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-01-10 16:48:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49926	172.217.18.22	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:27 UTC	794	OUT	GET /vi/QZ5xuqBJH_s/mqdefault.jpg?sqp=-oaymwEmCMACELQB8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGDwgVihlMA8=&rs=AOn4CLCqf0M8zQlGVdPdvj1JueShXokisQ HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:27 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 9744 Date: Fri, 10 Jan 2025 16:48:27 GMT Expires: Fri, 10 Jan 2025 18:48:27 GMT Cache-Control: public, max-age=7200 ETag: "1713342611" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:48:27 UTC	744	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 10 0f 10 12 10 10 0d 11 10 10 10 0f 10 0e 0f 10 0f 10 10 0e 10 10 10 11 10 16 12 15 0e 10 10 15 18 22 1b 16 17 20 17 10 10 1d 37 1e 20 25 29 28 29 28 16 1b 30 31 2c 27 30 22 27 28 26 01 09 09 09 0d 0a 0d 15 0e 0d 15 26 15 15 15 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 32 32 26 26 26 26 26 26 32 32 26 26 32 32 32 26 32 32 26 26 32 26 26 32 26 32 32 ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 05 00 02 04 06 01 07 ff c4 00 40 10 00 02 01 03 02 04 03 06 03 05 08 02 01 05 00 00 01 02 03 00 04 11 12 21 05 06 13 31 22 41 51 14 32 61 71 91 b1 23 52 72 15 42 81 b2 c1 07 16 33 Data Ascii: JFIF" 7 %)()(01,'0"'(&&&&&&&&&&&&&&&&&&&&&&&&&22&&&&&&22&&222&22&&2&&2&22@"@!1"AQ2aq#RrB3
2025-01-10 16:48:27 UTC	1390	IN	Data Raw: 2b c9 ce 16 98 84 7c 42 5c b5 6e b0 5d 85 29 b8 7c b5 3c b1 18 51 59 c7 c9 6f c1 b4 2d 78 eb 44 af 00 ad 48 17 dd 6c 08 a5 12 1a 6b c4 4e f4 a8 d6 72 2d 15 34 48 4d 0c d7 80 d4 14 6f 3d a8 4c b5 78 64 c8 ab ba 55 f9 10 38 9b 06 b6 5c 0c ad 61 23 06 b6 46 d9 5a 11 2c 57 41 9f dd 6f d2 7e d4 79 86 0d 06 7f 75 bf 49 fb 56 65 84 b7 5f 02 fe 95 fb 51 34 d5 ed 63 f0 27 e8 5f b5 17 a5 5d 89 61 1e 7c 9e 59 9f 4d 78 71 f0 a3 94 ac 1c 44 6e bf 23 fd 29 49 d2 b2 a0 b7 3a 0f 91 ea 3e a2 ac a3 3d 88 fa 8a 52 16 b6 c3 18 03 7e f5 8f 2f d1 b7 0f d9 b3 a3 f2 fa 8a 9d 1f 97 d4 56 27 7c 79 50 fa df 0a 39 7e 87 c2 bd 8c 7a 3f 2f a8 a9 d1 f9 7d 45 2f eb 7c 05 79 d6 f8 51 ca fd 07 0a f6 31 e8 fc be a2 a7 47 e5 f5 14 bf ad f0 15 3a bf 0a 39 7e 83 85 7b 18 18 be 5f 51 43 c8 f5 Data Ascii: +\|B\n])\|<QYo-xDHlkNr-4HMo=LxdU8\a#FZ,WAo~yuIVe_Q4c'_]a\|YMxqDn#)I:>=R~/V'\|yP9~z?/}E/\|yQ1G:9~{_QC
2025-01-10 16:48:27 UTC	1390	IN	Data Raw: 92 4e 9e ac 7f 88 18 63 56 0f 6d 7d f1 e5 59 bb 47 5e 9b 52 58 12 f0 fe 18 66 99 e2 c3 b6 85 91 bf 0c 47 ab f0 cf 72 1d 94 63 d7 7c fa 03 47 93 94 af 3a 69 2f 44 69 73 0a 80 25 83 58 33 9d 31 6b 88 b6 b4 0c 7b 12 05 57 86 f1 8f 66 99 e5 e9 eb d6 92 a6 9d 7a 71 d4 fd ed 58 39 c7 a5 76 17 1c 7e d8 5a a4 a1 a3 92 e9 db 87 3b aa 48 fa 9b d9 1c b9 57 88 c4 04 27 7c 67 2c 09 3b 0c 0a 13 2d c4 e4 25 e4 9b d4 96 38 8c 2a 5e 50 ec ba 67 81 d1 44 7e ff 00 52 50 da 53 4e 0e 75 11 57 fe eb dc af 57 28 8a 20 44 92 56 6b 8b 75 8c 24 80 e8 74 90 be 99 03 69 6c 68 2d 9a 6d 1f 37 e9 2a 1a db 52 7f e4 89 14 4b a5 9d 2e 1c b9 50 da 08 46 53 a7 72 0e 71 db 7a c7 c4 39 8d 66 8e 58 96 0e 9c 72 47 67 0c 63 ab ad a3 8e d0 38 5d 4d a0 6b 63 d4 dc f8 7b 76 a5 61 46 79 b9 52 ed 7a Data Ascii: NcVm}YG^RXfGrc\|G:i/Dis%X31k{WfzqX9v~Z;HW'\|g,;-%8^PgD~RPSNuWW( DVku$tilh-m7RK.PFSrqz9fXrGgc8]Mkc{vaFyRz
2025-01-10 16:48:27 UTC	1390	IN	Data Raw: 8a b2 4e b1 47 18 5f df 0d 23 2a ae 36 f3 f9 53 6b 39 ef 5e 5f 68 7e a5 cf b3 eb 8f 7b b0 8c a7 4e a6 16 f2 2b e4 b6 06 7c 1a a9 78 34 8a 52 41 53 80 da 21 9a 26 59 99 1d ec 56 36 cc 29 34 66 77 d3 ef 98 c8 c0 c8 c8 00 64 7a 57 31 67 c2 c4 97 7e cc 75 95 12 48 8c 63 31 c6 da 63 d5 e2 d5 21 08 be e8 dc ec 37 ef b0 3a 78 87 17 b8 ba 9a 59 55 9d 76 59 98 2b b9 d2 b0 91 a5 cb 31 c9 2a 48 39 ef 93 4b 25 79 ed a5 59 35 bc 73 15 13 ab ab e5 c8 90 1f 1e a0 73 be 4e dd fd 6a aa c8 dd b1 da 1e af 26 5a 35 c9 8d a6 93 43 5b da cd 16 2e 23 01 9e e0 91 a0 5d 98 3a 6c 46 06 9c aa 6b cf 71 de 97 72 cf 0d 45 be 58 e5 8f 52 03 70 1d 18 2b 31 0b 04 bb 11 e2 5c f8 41 ce 08 c8 c8 ed 53 87 71 ab c9 26 2c 97 53 bc cc 9a 4b 89 1f 59 45 19 c1 39 c9 00 67 e0 3c ab 13 dd 49 13 f5 Data Ascii: NG_#6Sk9^_h~{N+\|x4RAS!&YV6)4fwdzW1g~uHc1c!7:xYUvY+1H9K%yY5ssNj&Z5C[.#]:lFkqrEXRp+1\ASq&,SKYE9g<I
2025-01-10 16:48:27 UTC	1390	IN	Data Raw: 2c 64 d8 dd 43 91 a9 07 51 99 4c 6a c4 0e f8 07 7a 5c dc 1e 25 86 29 66 9f 48 90 5c 82 8a 01 65 92 16 0a 17 20 1c 82 73 93 e5 b5 2d e2 1c 12 4b 70 8d 23 c5 97 0a 7a 6b 20 32 a0 61 90 59 3d 3e 23 23 e3 4d 24 43 6d 0d 79 5e eb a6 5f 13 41 09 74 50 7d a6 15 96 27 50 de 24 3a 95 82 ed ea 0e 7b 6d 4f 6d b8 ad a6 a2 c9 2c 71 24 17 13 4a 10 86 53 22 49 03 20 30 ae 92 3d e6 3e 13 8d bd 2b 9f e1 3c 04 5c 08 b3 27 4f a8 97 0f a9 88 2a 7a 27 01 40 03 23 f8 e6 91 3c 46 95 1a ee 69 60 77 cb b7 62 23 3f e3 08 8c 96 73 44 ac 58 a8 2e 74 90 a4 81 b6 c1 b0 4f f5 a6 97 7c 72 29 22 58 5e 71 d3 8d 78 76 80 57 58 8d 95 cf 5d 95 4a 91 90 ba 72 08 39 f4 34 97 fb b7 71 b6 15 4e ae 96 82 1b 67 ea ee a5 73 b1 c0 19 24 f6 14 2b de 5e 95 35 78 a3 91 16 19 2e 35 c7 20 78 d9 22 70 8f Data Ascii: ,dCQLjz\%)fH\e s-Kp#zk 2aY=>##M$Cmy^_AtP}'P$:{mOm,q$JS"I 0=>+<\'O*z'@#<Fi`wb#?sDX.tO\|r)"X^qxvWX]Jr94qNgs$+^5x.5 x"p
2025-01-10 16:48:27 UTC	1390	IN	Data Raw: 7d 24 32 49 1a 3c 6e 32 32 a4 60 1e c6 ba 28 38 14 53 cc bd 58 ff 00 0c 5b 59 ae 7a 8f 1a eb 95 ca f6 8e 37 76 38 ec 30 06 7b 9c 50 9a f9 33 94 65 78 39 5b ee 2b d6 89 10 c7 a4 c7 24 ee ac 18 9c 89 9f 59 42 bf 03 8d fe 14 6b fe 64 32 db 47 6c 21 d2 a8 c1 b2 64 92 45 04 2e 9f c2 57 da 20 7c c0 38 ae 82 d3 81 41 27 46 dc a1 1f f9 f7 50 bc f9 f1 b4 71 6b d2 ad 84 39 d9 3b fd 05 66 9b 82 d9 21 92 40 b2 3a 2d a2 ce b1 ab 4f 10 12 12 47 86 49 a1 46 64 db f2 f9 1a bb 46 3b 59 83 87 71 e3 12 c2 3a 6a e2 11 32 e0 92 a5 c4 c7 27 e5 8a 55 7b 22 10 9d 35 20 80 7a 99 3a b5 36 76 c6 fe 94 c3 97 d8 15 bb f8 58 4e c3 e1 82 bb d1 79 53 83 c1 78 ce 26 66 51 1f 4d c9 52 17 f0 89 21 ce 31 d8 78 7e b4 92 a2 9b b5 48 2c 9c c5 a2 2b 24 8d d6 46 b6 d5 24 87 43 a8 d4 7c 0b 16 4e Data Ascii: }$2I<n22`(8SX[Yz7v80{P3ex9[+$YBkd2Gl!dE.W \|8A'FPqk9;f!@:-OGIFdF;Yq:j2'U{"5 z:6vXNySx&fQMR!1x~H,+$F$C\|N
2025-01-10 16:48:27 UTC	1390	IN	Data Raw: 8e cc e0 76 0c c4 e4 fc 8d 2e 86 52 c6 b4 b2 d5 c6 49 61 9c da ba 6d e5 11 65 2b 9d 24 ae a0 55 b0 48 c8 3d c1 f5 15 54 94 ae 70 c5 75 02 ac 41 23 2a 7f 74 fa 8d 85 50 d7 95 b9 cc 8d d6 dc 4a 75 72 e9 3c aa ec 34 b4 89 23 ac 8c 0e c5 4b 83 93 d8 77 f4 ad 02 e9 c0 18 76 18 ce 30 c4 7b de f1 c7 c6 b0 c6 40 15 59 27 f4 ac da b6 6d 19 52 35 c9 72 ec 00 67 66 0a 34 a0 66 2c 15 7b e1 01 f7 7e 42 b4 41 c4 a7 04 32 dc 4c ac a9 d3 52 b2 c8 ac b1 9f fe 30 41 d9 76 f7 7b 52 36 94 93 5b 21 90 63 14 35 45 c5 d9 ad 25 20 ea 04 ab 03 90 c0 90 c0 8f de c8 dc 1a ac f2 bb 83 f8 8f 92 18 13 ad b7 0c 72 c3 e4 4f 97 ae f5 5c d4 06 a4 d4 59 75 77 2b 2a c4 f3 48 d1 c7 b4 71 bc 8e e9 1f ae 84 27 0b fc 2b db 3e 29 34 41 91 26 95 11 fd f4 49 1d 11 b6 c7 89 41 c3 6c 48 df d6 8d 75 Data Ascii: v.RIame+$UH=TpuA#tPJur<4#Kwv0{@Y'mR5rgf4f,{~BA2LR0Av{R6[!c5E% rO\Yuw+Hq'+>)4A&IAlHu
2025-01-10 16:48:27 UTC	660	IN	Data Raw: 9c 02 ba 74 55 23 8f 5a 57 22 8e f4 25 7a b4 ab 43 c5 5b 32 35 2b d1 41 ac 6a 68 aa 69 d9 21 48 a0 5c b1 d2 7e 47 ed 47 0d 41 b9 5f 09 f9 1f b5 31 8c 2d 5b f0 d3 f4 2f f2 8a 2e ba cb 6c 7c 09 fa 17 ed 45 cd 77 45 e1 1e 5c 96 58 5d 75 35 d0 b3 53 34 ec 9a 0b ae a6 ba 16 6a 66 8b 0a 0b ae a6 ba 16 6a 66 8b 0a 0b ae a6 ba 16 6a 66 8b 0a 0b ae a6 ba 16 6a 66 8b 0a 0b ae a6 ba 16 6b d0 77 a2 c7 46 c8 86 d9 af 61 5d f3 46 5d 92 ab 6a 2b 91 bb 67 7c 63 b5 1a 85 15 28 62 8a 0d 58 13 35 46 ab 57 8f 4c 0b a1 a7 7c bf c6 0d bc a1 b3 e1 ce f4 92 3a b6 6a 5a b5 43 4e 9d 9f 7f b3 e2 2b 3c 61 94 e7 22 b0 dc 83 9a f9 77 02 e6 57 b6 db 39 5f 4a ec ad b9 be 39 3b 9d cd 71 4f 4a 51 67 6c 35 63 35 90 bc 4a d1 25 05 58 6f eb 5f 3a e3 3c 1d e0 63 a4 65 7c 8d 7d 12 eb 53 78 97 Data Ascii: tU#ZW"%zC[25+Ajhi!H\~GGA_1-[/.l\|EwE\X]u5S4jfjfjfjfkwFa]F]j+g\|c(bX5FWL\|:jZCN+<a"wW9_J9;qOJQgl5c5J%Xo_:<ce\|}Sx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49929	142.250.186.54	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:28 UTC	559	OUT	GET /vi/QZ5xuqBJH_s/mqdefault.jpg?sqp=-oaymwEmCMACELQB8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGDwgVihlMA8=&rs=AOn4CLCqf0M8zQlGVdPdvj1JueShXokisQ HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:48:28 UTC	654	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 9744 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 10 Jan 2025 16:48:27 GMT Expires: Fri, 10 Jan 2025 18:48:27 GMT Cache-Control: public, max-age=7200 ETag: "1713342611" Content-Type: image/jpeg Vary: Origin Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 16:48:28 UTC	736	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 10 0f 10 12 10 10 0d 11 10 10 10 0f 10 0e 0f 10 0f 10 10 0e 10 10 10 11 10 16 12 15 0e 10 10 15 18 22 1b 16 17 20 17 10 10 1d 37 1e 20 25 29 28 29 28 16 1b 30 31 2c 27 30 22 27 28 26 01 09 09 09 0d 0a 0d 15 0e 0d 15 26 15 15 15 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 32 32 26 26 26 26 26 26 32 32 26 26 32 32 32 26 32 32 26 26 32 26 26 32 26 32 32 ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 05 00 02 04 06 01 07 ff c4 00 40 10 00 02 01 03 02 04 03 06 03 05 08 02 01 05 00 00 01 02 03 00 04 11 12 21 05 06 13 31 22 41 51 14 32 61 71 91 b1 23 52 72 15 42 81 b2 c1 07 16 33 Data Ascii: JFIF" 7 %)()(01,'0"'(&&&&&&&&&&&&&&&&&&&&&&&&&22&&&&&&22&&222&22&&2&&2&22@"@!1"AQ2aq#RrB3
2025-01-10 16:48:28 UTC	1390	IN	Data Raw: b5 71 41 24 af 7c ab d0 2b c9 ce 16 98 84 7c 42 5c b5 6e b0 5d 85 29 b8 7c b5 3c b1 18 51 59 c7 c9 6f c1 b4 2d 78 eb 44 af 00 ad 48 17 dd 6c 08 a5 12 1a 6b c4 4e f4 a8 d6 72 2d 15 34 48 4d 0c d7 80 d4 14 6f 3d a8 4c b5 78 64 c8 ab ba 55 f9 10 38 9b 06 b6 5c 0c ad 61 23 06 b6 46 d9 5a 11 2c 57 41 9f dd 6f d2 7e d4 79 86 0d 06 7f 75 bf 49 fb 56 65 84 b7 5f 02 fe 95 fb 51 34 d5 ed 63 f0 27 e8 5f b5 17 a5 5d 89 61 1e 7c 9e 59 9f 4d 78 71 f0 a3 94 ac 1c 44 6e bf 23 fd 29 49 d2 b2 a0 b7 3a 0f 91 ea 3e a2 ac a3 3d 88 fa 8a 52 16 b6 c3 18 03 7e f5 8f 2f d1 b7 0f d9 b3 a3 f2 fa 8a 9d 1f 97 d4 56 27 7c 79 50 fa df 0a 39 7e 87 c2 bd 8c 7a 3f 2f a8 a9 d1 f9 7d 45 2f eb 7c 05 79 d6 f8 51 ca fd 07 0a f6 31 e8 fc be a2 a7 47 e5 f5 14 bf ad f0 15 3a bf 0a 39 7e 83 85 7b Data Ascii: qA$\|+\|B\n])\|<QYo-xDHlkNr-4HMo=LxdU8\a#FZ,WAo~yuIVe_Q4c'_]a\|YMxqDn#)I:>=R~/V'\|yP9~z?/}E/\|yQ1G:9~{
2025-01-10 16:48:28 UTC	1390	IN	Data Raw: 12 e8 dd 7b 50 8f 56 24 92 4e 9e ac 7f 88 18 63 56 0f 6d 7d f1 e5 59 bb 47 5e 9b 52 58 12 f0 fe 18 66 99 e2 c3 b6 85 91 bf 0c 47 ab f0 cf 72 1d 94 63 d7 7c fa 03 47 93 94 af 3a 69 2f 44 69 73 0a 80 25 83 58 33 9d 31 6b 88 b6 b4 0c 7b 12 05 57 86 f1 8f 66 99 e5 e9 eb d6 92 a6 9d 7a 71 d4 fd ed 58 39 c7 a5 76 17 1c 7e d8 5a a4 a1 a3 92 e9 db 87 3b aa 48 fa 9b d9 1c b9 57 88 c4 04 27 7c 67 2c 09 3b 0c 0a 13 2d c4 e4 25 e4 9b d4 96 38 8c 2a 5e 50 ec ba 67 81 d1 44 7e ff 00 52 50 da 53 4e 0e 75 11 57 fe eb dc af 57 28 8a 20 44 92 56 6b 8b 75 8c 24 80 e8 74 90 be 99 03 69 6c 68 2d 9a 6d 1f 37 e9 2a 1a db 52 7f e4 89 14 4b a5 9d 2e 1c b9 50 da 08 46 53 a7 72 0e 71 db 7a c7 c4 39 8d 66 8e 58 96 0e 9c 72 47 67 0c 63 ab ad a3 8e d0 38 5d 4d a0 6b 63 d4 dc f8 7b 76 Data Ascii: {PV$NcVm}YG^RXfGrc\|G:i/Dis%X31k{WfzqX9v~Z;HW'\|g,;-%8^PgD~RPSNuWW( DVku$tilh-m7RK.PFSrqz9fXrGgc8]Mkc{v
2025-01-10 16:48:28 UTC	1390	IN	Data Raw: f2 ec 2c 09 2b ba c2 3a 8a b2 4e b1 47 18 5f df 0d 23 2a ae 36 f3 f9 53 6b 39 ef 5e 5f 68 7e a5 cf b3 eb 8f 7b b0 8c a7 4e a6 16 f2 2b e4 b6 06 7c 1a a9 78 34 8a 52 41 53 80 da 21 9a 26 59 99 1d ec 56 36 cc 29 34 66 77 d3 ef 98 c8 c0 c8 c8 00 64 7a 57 31 67 c2 c4 97 7e cc 75 95 12 48 8c 63 31 c6 da 63 d5 e2 d5 21 08 be e8 dc ec 37 ef b0 3a 78 87 17 b8 ba 9a 59 55 9d 76 59 98 2b b9 d2 b0 91 a5 cb 31 c9 2a 48 39 ef 93 4b 25 79 ed a5 59 35 bc 73 15 13 ab ab e5 c8 90 1f 1e a0 73 be 4e dd fd 6a aa c8 dd b1 da 1e af 26 5a 35 c9 8d a6 93 43 5b da cd 16 2e 23 01 9e e0 91 a0 5d 98 3a 6c 46 06 9c aa 6b cf 71 de 97 72 cf 0d 45 be 58 e5 8f 52 03 70 1d 18 2b 31 0b 04 bb 11 e2 5c f8 41 ce 08 c8 c8 ed 53 87 71 ab c9 26 2c 97 53 bc cc 9a 4b 89 1f 59 45 19 c1 39 c9 00 67 Data Ascii: ,+:NG_#6Sk9^_h~{N+\|x4RAS!&YV6)4fwdzW1g~uHc1c!7:xYUvY+1H9K%yY5ssNj&Z5C[.#]:lFkqrEXRp+1\ASq&,SKYE9g
2025-01-10 16:48:28 UTC	1390	IN	Data Raw: 2a f6 7c 5e 25 50 91 dc 2c 64 d8 dd 43 91 a9 07 51 99 4c 6a c4 0e f8 07 7a 5c dc 1e 25 86 29 66 9f 48 90 5c 82 8a 01 65 92 16 0a 17 20 1c 82 73 93 e5 b5 2d e2 1c 12 4b 70 8d 23 c5 97 0a 7a 6b 20 32 a0 61 90 59 3d 3e 23 23 e3 4d 24 43 6d 0d 79 5e eb a6 5f 13 41 09 74 50 7d a6 15 96 27 50 de 24 3a 95 82 ed ea 0e 7b 6d 4f 6d b8 ad a6 a2 c9 2c 71 24 17 13 4a 10 86 53 22 49 03 20 30 ae 92 3d e6 3e 13 8d bd 2b 9f e1 3c 04 5c 08 b3 27 4f a8 97 0f a9 88 2a 7a 27 01 40 03 23 f8 e6 91 3c 46 95 1a ee 69 60 77 cb b7 62 23 3f e3 08 8c 96 73 44 ac 58 a8 2e 74 90 a4 81 b6 c1 b0 4f f5 a6 97 7c 72 29 22 58 5e 71 d3 8d 78 76 80 57 58 8d 95 cf 5d 95 4a 91 90 ba 72 08 39 f4 34 97 fb b7 71 b6 15 4e ae 96 82 1b 67 ea ee a5 73 b1 c0 19 24 f6 14 2b de 5e 95 35 78 a3 91 16 19 2e Data Ascii: \|^%P,dCQLjz\%)fH\e s-Kp#zk 2aY=>##M$Cmy^_AtP}'P$:{mOm,q$JS"I 0=>+<\'Oz'@#<Fi`wb#?sDX.tO\|r)"X^qxvWX]Jr94qNgs$+^5x.
2025-01-10 16:48:28 UTC	1390	IN	Data Raw: 39 04 81 09 91 e4 d4 63 7d 24 32 49 1a 3c 6e 32 32 a4 60 1e c6 ba 28 38 14 53 cc bd 58 ff 00 0c 5b 59 ae 7a 8f 1a eb 95 ca f6 8e 37 76 38 ec 30 06 7b 9c 50 9a f9 33 94 65 78 39 5b ee 2b d6 89 10 c7 a4 c7 24 ee ac 18 9c 89 9f 59 42 bf 03 8d fe 14 6b fe 64 32 db 47 6c 21 d2 a8 c1 b2 64 92 45 04 2e 9f c2 57 da 20 7c c0 38 ae 82 d3 81 41 27 46 dc a1 1f f9 f7 50 bc f9 f1 b4 71 6b d2 ad 84 39 d9 3b fd 05 66 9b 82 d9 21 92 40 b2 3a 2d a2 ce b1 ab 4f 10 12 12 47 86 49 a1 46 64 db f2 f9 1a bb 46 3b 59 83 87 71 e3 12 c2 3a 6a e2 11 32 e0 92 a5 c4 c7 27 e5 8a 55 7b 22 10 9d 35 20 80 7a 99 3a b5 36 76 c6 fe 94 c3 97 d8 15 bb f8 58 4e c3 e1 82 bb d1 79 53 83 c1 78 ce 26 66 51 1f 4d c9 52 17 f0 89 21 ce 31 d8 78 7e b4 92 a2 9b b5 48 2c 9c c5 a2 2b 24 8d d6 46 b6 d5 24 Data Ascii: 9c}$2I<n22`(8SX[Yz7v80{P3ex9[+$YBkd2Gl!dE.W \|8A'FPqk9;f!@:-OGIFdF;Yq:j2'U{"5 z:6vXNySx&fQMR!1x~H,+$F$
2025-01-10 16:48:28 UTC	1390	IN	Data Raw: b3 33 cf 2b b3 8c 3b 3c 8e cc e0 76 0c c4 e4 fc 8d 2e 86 52 c6 b4 b2 d5 c6 49 61 9c da ba 6d e5 11 65 2b 9d 24 ae a0 55 b0 48 c8 3d c1 f5 15 54 94 ae 70 c5 75 02 ac 41 23 2a 7f 74 fa 8d 85 50 d7 95 b9 cc 8d d6 dc 4a 75 72 e9 3c aa ec 34 b4 89 23 ac 8c 0e c5 4b 83 93 d8 77 f4 ad 02 e9 c0 18 76 18 ce 30 c4 7b de f1 c7 c6 b0 c6 40 15 59 27 f4 ac da b6 6d 19 52 35 c9 72 ec 00 67 66 0a 34 a0 66 2c 15 7b e1 01 f7 7e 42 b4 41 c4 a7 04 32 dc 4c ac a9 d3 52 b2 c8 ac b1 9f fe 30 41 d9 76 f7 7b 52 36 94 93 5b 21 90 63 14 35 45 c5 d9 ad 25 20 ea 04 ab 03 90 c0 90 c0 8f de c8 dc 1a ac f2 bb 83 f8 8f 92 18 13 ad b7 0c 72 c3 e4 4f 97 ae f5 5c d4 06 a4 d4 59 75 77 2b 2a c4 f3 48 d1 c7 b4 71 bc 8e e9 1f ae 84 27 0b fc 2b db 3e 29 34 41 91 26 95 11 fd f4 49 1d 11 b6 c7 89 Data Ascii: 3+;<v.RIame+$UH=TpuA#tPJur<4#Kwv0{@Y'mR5rgf4f,{~BA2LR0Av{R6[!c5E% rO\Yuw+Hq'+>)4A&I
2025-01-10 16:48:28 UTC	668	IN	Data Raw: 94 ff 00 8d cf b6 3d 6b 9c 02 ba 74 55 23 8f 5a 57 22 8e f4 25 7a b4 ab 43 c5 5b 32 35 2b d1 41 ac 6a 68 aa 69 d9 21 48 a0 5c b1 d2 7e 47 ed 47 0d 41 b9 5f 09 f9 1f b5 31 8c 2d 5b f0 d3 f4 2f f2 8a 2e ba cb 6c 7c 09 fa 17 ed 45 cd 77 45 e1 1e 5c 96 58 5d 75 35 d0 b3 53 34 ec 9a 0b ae a6 ba 16 6a 66 8b 0a 0b ae a6 ba 16 6a 66 8b 0a 0b ae a6 ba 16 6a 66 8b 0a 0b ae a6 ba 16 6a 66 8b 0a 0b ae a6 ba 16 6b d0 77 a2 c7 46 c8 86 d9 af 61 5d f3 46 5d 92 ab 6a 2b 91 bb 67 7c 63 b5 1a 85 15 28 62 8a 0d 58 13 35 46 ab 57 8f 4c 0b a1 a7 7c bf c6 0d bc a1 b3 e1 ce f4 92 3a b6 6a 5a b5 43 4e 9d 9f 7f b3 e2 2b 3c 61 94 e7 22 b0 dc 83 9a f9 77 02 e6 57 b6 db 39 5f 4a ec ad b9 be 39 3b 9d cd 71 4f 4a 51 67 6c 35 63 35 90 bc 4a d1 25 05 58 6f eb 5f 3a e3 3c 1d e0 63 a4 65 Data Ascii: =ktU#ZW"%zC[25+Ajhi!H\~GGA_1-[/.l\|EwE\X]u5S4jfjfjfjfkwFa]F]j+g\|c(bX5FWL\|:jZCN+<a"wW9_J9;qOJQgl5c5J%Xo_:<ce

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49935	142.250.185.142	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:45 UTC	997	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 2354 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=Q5dU8-6z9SZsix0cAK4VRfWitUU9EDuk8QStlDZ-3DoUhgSAarlyoleu2z_BGgmdHecdFNtNBXC_Y4RVM0bp4PDnKgkR9mwkGWnaw0FvOao-jxhphaBXjShhbdkcFsaK5-X8YxRoTrusE6vJzwJ_7ovoE2ei1LHPZjegjk5NPU7vW7kPso9PN9ReK00mdTCnW34QTg
2025-01-10 16:48:45 UTC	2354	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 34 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 36 35 32 37 37 32 33 33 39 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"41",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1736527723392",null,null,null
2025-01-10 16:48:45 UTC	495	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 10 Jan 2025 16:48:45 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 16:48:45 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-01-10 16:48:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49934	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:49 UTC	2609	OUT	GET /images/custom/bg-alt.jpg HTTP/1.1 Host: nervedefend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nervedefend.com/css/app.css?id=409e9c6c9baad5c9b446 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:49 UTC	905	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:49 GMT Content-Type: image/jpeg Content-Length: 42797 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-a72d" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 430 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NNgVwVPkHRcqt5r1FdUQZqB9hTOEdC3Tm%2FJ1%2F%2FMVkGo1IiYP8mxYajmi175SpJz%2Bn%2BApLz0ZAD%2BnitROfztZYo3Ay99TPHzeMAmH8ApQhAZI3GdJi5p4b7i7%2BQHYnKbSqoc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe2824df0c8c0f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1975&min_rtt=1962&rtt_var=763&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2838&recv_bytes=3187&delivery_rate=1409266&cwnd=223&unsent_bytes=0&cid=3f2ed2a414ea6fa7&ts=6437&x=0"
2025-01-10 16:48:49 UTC	464	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 Data Ascii: JFIF(ICC_PROFILEmntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(w
2025-01-10 16:48:49 UTC	1369	IN	Data Raw: 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c0 00 11 08 02 1c Data Ascii: ffY[XYZ -mlucenUS Google Inc. 2016C#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
2025-01-10 16:48:49 UTC	1369	IN	Data Raw: 22 1d 7d 2a 9a c1 90 17 15 d3 7f 93 6f 2f 3c 97 b2 a4 63 fe 3b cb 8f c9 b9 94 00 00 00 00 00 04 4f 1a 65 c3 2b 52 e4 99 78 a2 d2 4f 28 0b 13 8a 64 c5 b9 45 3c 64 74 fb b6 04 49 e7 d8 43 92 a7 e8 22 87 1d eb 93 4a a2 20 ad df 06 84 11 2f 0c b5 76 78 65 93 d4 92 8c 1b 79 39 ff 00 2c d5 53 d8 b8 3a 65 25 15 6c 98 c5 b7 aa 5b f6 5c 13 d2 97 e4 7a a5 ba ec 6a 40 00 00 01 32 da 86 dd 7b 82 5d de e0 64 d3 5b a0 83 50 95 4b 1c 1a 9c 6d b6 ed ee 59 d1 d4 fc 6f 4a db bb 28 c3 a3 36 93 54 da f4 35 fc 91 e5 af 74 41 60 4a 9c 5e d2 5f 61 29 28 c5 b7 b2 01 47 cf 3f 81 a5 96 62 ba fe 36 f4 ee 6d 16 a4 ed 77 45 14 00 04 01 8c a0 d3 6e 0b 1c 1a 37 d9 0d 2a 40 62 ba 91 8b b7 97 c2 2b f2 2e a7 85 5a bd cc 25 6e 4e f7 b0 8b a9 26 b9 35 8a eb 4a 95 21 92 a7 17 dd 14 65 00 00 Data Ascii: "}o/<c;Oe+RxO(dE<dtIC"J /vxey9,S:e%l[\zj@2{]d[PKmYoJ(6T5tA`J^_a)(G?b6mwEn7@b+.Z%nN&5J!e
2025-01-10 16:48:49 UTC	1369	IN	Data Raw: 19 31 96 a5 63 6e 88 82 e8 5e 6d f6 0a bc bf a2 80 00 08 93 7e 58 ee ff 00 80 14 97 e4 7a 7b 2d d9 30 e9 45 4d f7 ad 8d 52 51 54 89 5f ec 97 aa 40 53 57 b8 b6 df 2b 92 80 09 70 83 fd 2b e8 c3 ab d3 71 95 a5 83 7a 71 db 6e 06 9d ec 51 cf d2 83 6d be c8 e8 5b 22 25 e1 9d f6 96 19 71 f2 a1 43 27 cc fd 10 3c ba 5f 23 d8 81 99 cf c6 f4 2f 97 c0 e7 26 bc 31 f3 31 c6 2a 2a 80 c5 f4 2a 69 6a df d0 da 09 28 d2 42 97 9e 1f 23 d9 fa 32 81 c2 2f b6 79 42 d3 25 b4 df ce 4b 16 c4 12 e5 38 ef 14 fd 98 29 c5 79 ad 3f 54 35 97 6f e0 a0 32 9f 59 45 d2 c8 43 ac a5 ba 77 c2 33 eb 41 a9 b6 96 18 fa 11 6e 7a bb 22 fc 56 b5 29 79 9d 2e 10 d2 51 74 b6 65 0a 55 a7 24 43 03 3f c8 f8 2d 3b 56 03 14 a2 a4 a9 8c 00 8b 70 f3 65 72 56 e3 23 4b 8e 61 b7 00 37 86 99 46 52 ea c5 2a a7 7c Data Ascii: 1cn^m~Xz{-0EMRQT_@SW+p+qzqnQm["%qC'<_#/&11**ij(B#2/yB%K8)y?T5o2YECw3Anz"V)y.QteU$C?-;VperV#Ka7FR\|
2025-01-10 16:48:49 UTC	1369	IN	Data Raw: a8 22 ed 14 6e 66 ff 00 ea 4a 97 95 6f ea 12 6e 4f 44 7e 5f 05 a4 a2 a9 6c 40 c0 00 08 86 cf dd 89 cb 38 1a fd 6b d7 ff 00 44 14 35 26 bb 97 07 6b d7 b9 99 7d 3e e0 58 00 10 4c 96 a8 b4 11 7a a2 99 44 5e 99 b5 ce 50 15 b1 9c 93 bb ac 17 57 97 f4 50 19 c5 3b ba 2f 52 f6 18 aa f7 01 81 34 d6 cf e1 86 aa df 00 51 9f 5b 30 d3 df 81 ea 72 c4 36 e4 71 8a 8f bf 76 07 21 d1 07 28 c1 2d 37 ec ca 8a 5f 92 4e 97 61 ac 36 be 4b 68 5f 92 3d ed 7b a2 93 4f 67 63 22 50 8f 65 97 c1 03 dd fa 22 88 d0 d7 96 6f e7 21 73 8e e9 3f 66 05 93 29 69 c2 cb 7b 23 99 ce 52 76 db 35 e8 3d 49 b7 97 c9 70 5e 9d 3e 27 97 dd 96 26 ad 34 09 da 4c 81 93 35 8b 5b ac a2 80 04 9d ab 5d c1 ab 54 4c 3c 2d c7 8c af 62 c0 49 e3 d5 0c 97 89 5f 25 00 00 00 09 a4 d5 33 8d aa 74 fb 1d a6 73 e8 a9 bb Data Ascii: "nfJonOD~_l@8kD5&k}>XLzD^PWP;/R4Q[0r6qv!(-7_Na6Kh_={Ogc"Pe"o!s?f)i{#Rv5=Ip^>'&4L5[]TL<-bI_%3ts
2025-01-10 16:48:49 UTC	1369	IN	Data Raw: c0 ce 32 4a 72 5c e5 0a 4e d9 53 c4 a3 2f 5a 61 28 dc b0 02 83 77 46 84 c5 53 7c 94 00 4c 95 c4 a0 03 10 4a dd 1a 49 26 d6 06 92 5b 20 0a 5c 18 3e ae 8b 8c 52 6b b3 35 ea 3a e9 c9 a3 94 b2 0d 57 f9 0f bc 57 c1 ac 17 86 ee db cb 67 29 b7 47 53 8d 26 92 4f 81 62 b7 11 3a 1b de 6f e3 01 f8 e3 dd 5f be 48 88 eb 75 29 25 17 be f4 63 19 b8 3b 4c e8 ea c2 3a 36 aa da 8c ff 00 0b 8f 89 e5 2e c5 8a dc 62 4e d5 a1 91 01 13 57 9e e5 92 b2 ef e8 0c e5 69 3c 6c 61 6e ee ce ba bd 57 df 06 2f a3 e3 49 4b 72 c5 5f 41 dc 3d 6f 26 a6 6b a6 e0 bc 0f ef b8 f5 d6 24 b4 ff 00 44 45 80 00 11 1f 3c be 05 28 d3 c7 71 af f6 bf 64 3d e5 ec 04 68 7c 17 1f 0e 1f d9 42 6a d0 0c 0c f5 be 46 9b 96 e0 3b bc 2f b1 4a 34 b5 2d d6 4a d8 60 24 ed 58 c8 86 2e 3c 6d ec 58 00 01 1a 9c b1 0f b0 Data Ascii: 2Jr\NS/Za(wFS\|LJI&[ \>Rk5:WWg)GS&Ob:o_Hu)%c;L:6.bNWi<lanW/IKr_A=o&k$DE<(qd=h\|BjF;/J4-J`$X.<mX
2025-01-10 16:48:49 UTC	1369	IN	Data Raw: 37 26 71 b5 81 69 97 ef 7f 48 34 cb f7 bf a3 28 9d 2d f6 34 4d 35 82 34 cb 57 9f 7f 40 71 9a ca 9f f0 06 86 1d 6e a3 bd 0b e4 d1 29 35 e7 fe 0e 79 a6 a6 ef 92 c1 26 bd 3e ac af 4d ef b3 7d 8c 87 1f 32 ae 4d 2b aa 31 4b 3b be 59 44 7e 44 b7 4d 7b a1 a9 45 ec d3 30 8a 00 00 02 27 fa 7f f2 28 89 3d 52 8d 61 5e e0 54 b2 ab b9 99 aa 49 6c 2a 4e 4f d0 08 8a b6 69 40 30 15 20 a1 80 11 3c 24 f8 65 50 a4 ae 2d 72 82 2f 54 53 e5 01 0d 53 a2 5c 75 60 d7 79 7a 20 a4 a4 bd 40 95 aa 0b 39 5c a2 d3 4d 5a 76 86 43 86 6e 2e 9f f6 05 35 69 a7 dc 98 b6 d6 9e eb 0d 86 bc e9 6a a4 44 a7 1e 9c f9 b5 90 35 4a 95 09 e1 df d9 0b af 16 f2 9a 34 c3 40 30 25 71 c1 40 00 4b 94 56 ed 21 7e 44 f6 4d fb 20 1c eb 43 b7 44 43 ab 19 3c ba 6c 9e b3 93 8a b8 d2 31 2e 2b ad e1 a6 51 31 92 92 Data Ascii: 7&qiH4(-4M54W@qn)5y&>M}2M+1K;YD~DM{E0'(=Ra^TIl*NOi@0 <$eP-r/TSS\u`yz @9\MZvCn.5ijD5J4@0%q@KV!~DM CDC<l1.+Q1
2025-01-10 16:48:49 UTC	1369	IN	Data Raw: 25 c3 09 c6 d5 a0 db ab ee 8a 6e 90 19 04 60 ef 54 71 ff 00 b3 4d 2a b6 1c 76 01 29 db a6 a9 f0 50 9a 52 54 d1 3e 28 7f ca 3f ca 00 97 86 4a 5d b6 63 4a dd bf 82 5b 8c e2 db 7e 12 57 5d 24 ad 3b 03 56 ac 13 ec f7 44 c3 a9 19 ed f4 37 8c 81 40 02 01 81 3f 92 3c df b6 45 ad bd a0 fe 70 04 ce 71 8c da bd d6 4b 4e 33 58 76 8e 59 5e a7 7b f7 34 e8 4b 4d de c5 c5 6d 1e 38 28 97 ba 92 28 88 04 31 4b ca c0 23 e5 43 12 d8 52 92 8a bf a4 06 7d 78 5b 4d 6f c1 86 c7 5c 63 59 7e 66 32 e8 64 74 fc 88 b2 3a 7e 45 f2 41 60 00 00 61 d4 e8 d5 ca 2f 1c 1b 91 d5 f2 b5 e9 60 65 1e 83 74 db a4 6e 92 8a a5 b0 2d 90 c0 00 00 09 7d 9f a9 42 97 95 82 ca 01 35 dd 19 4e 3f 95 dc 71 5d f9 34 6d c9 e9 5b 77 63 d3 5e 5c 01 cf f8 67 fb 4d 7a 5d 2d 0e de 59 a2 76 32 e8 09 71 8b dd 26 50 Data Ascii: %n`TqM*v)PRT>(?J]cJ[~W]$;VD7@?<EpqKN3XvY^{4KMm8((1K#CR}x[Mo\cY~f2dt:~EA`a/`etn-}B5N?q]4m[wc^\gMz]-Yv2q&P
2025-01-10 16:48:49 UTC	1369	IN	Data Raw: 7e 1a 5b bc 0d 2a 54 88 bb ea 7f e2 8a cb f4 01 b7 5b 89 b7 25 49 0d 45 0c 0c 24 9e eb 74 6b d3 f2 26 0b cc c4 fc 12 bf d2 f7 f4 60 39 6c 51 0e 69 b4 50 13 2f 3c 7e 4b 22 5e 78 7c 96 00 00 00 44 fa 6a 6a 9e fd 99 87 e1 96 ad 2a 8e 92 23 fe c7 ec 8b a0 e9 f4 94 32 f2 cd 00 08 00 00 02 63 dd 70 c6 d5 8b f5 3f 51 ca 4a 2a d8 13 27 4b 4b 57 7b 7a 98 be 84 d6 d9 36 8c 6f c5 2d df f0 3b a7 4f ec a3 08 f4 24 de 70 8e 88 c5 45 52 d8 60 4d 0a ac 9f c7 1e 2b db 05 89 ba 02 74 b5 b4 df ce 45 7d 47 b2 4f d7 62 aa f7 fa 28 0e 7e a4 da f0 a4 e3 c9 3d 3e a3 8c 95 bc 1a f5 61 ae 49 2d c5 d3 e8 35 2b 93 58 e0 bc c5 53 ea 45 b5 91 fe 48 72 35 bb 65 11 11 f9 21 c8 7e 48 72 58 01 1f 92 1c 87 e4 87 25 89 ba 56 c0 e6 9f 51 ca 58 74 96 c6 9d 19 b9 ba 6e eb 24 be 93 95 c9 61 3e Data Ascii: ~[T[%IE$tk&`9lQiP/<~K"^x\|Djj#2cp?QJ*'KKW{z6o-;O$pER`M+tE}GOb(~=>aI-5+XSEHr5e!~HrX%VQXtn$a>
2025-01-10 16:48:49 UTC	1369	IN	Data Raw: ea ce cd 6c c2 32 ce 99 61 ff 00 65 0a 51 52 54 c0 1a b5 ea 09 da 25 49 c5 e9 97 c3 e4 7b 3f 46 03 6e 95 84 55 21 36 9d 22 80 00 00 00 97 89 5f 25 11 26 e5 e1 8f cb e0 02 52 bb 8a cb ef e8 63 f8 73 15 ab 73 54 e3 18 d2 dc 2d 39 c2 bd 4a 2a 31 50 8d 22 80 4d a4 40 c5 b0 b2 fd 07 a5 7b 80 ae f6 56 0f 09 b9 3c 22 88 9e 6a 3c bc fb 00 74 d5 47 d5 e5 96 00 00 06 73 eb 46 0e b7 63 87 51 4d 60 06 bb fb 84 d5 c5 a0 8e c0 f2 e9 7c 81 8c 5d 78 59 ac 5d 2a 78 09 41 35 85 4d 6c 38 b5 28 ff 00 68 05 2f 3c 3d ff 00 f4 59 9c 95 4a 35 cf fe 8a ba dd 50 14 02 18 13 2d ab 91 47 fd 92 f8 1e f2 f6 14 7c d3 f7 ff 00 d0 16 00 00 00 02 b0 14 9a 8d 36 28 a7 27 aa 5f 0b 81 3b 9f 8b f4 ad 97 26 80 02 dc 60 04 de 9c 3d b9 0d 68 53 f2 90 06 97 7b 7d 8d 2a 12 74 95 a6 3b 4f b8 0c 52 Data Ascii: l2aeQRT%I{?FnU!6"_%&RcssT-9J1P"M@{V<"j<tGsFcQM`\|]xY]xA5Ml8(h/<=YJ5P-G\|6('_;&`=hS{}*t;OR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49939	104.21.47.251	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:48:50 UTC	2338	OUT	GET /images/custom/bg-alt.jpg HTTP/1.1 Host: nervedefend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affiliate=eyJpdiI6ImNvdHhwbmd0cy9TSys2VTJ5aXRTaEE9PSIsInZhbHVlIjoiN1phZHNGcjM5NFNjeVYwaDRLNWJRQT09IiwibWFjIjoiMmFlMzlmZjZhNmE4ODg2MmI0OGU5NDU4MjA1YWZkZWNjZjMwN2JlY2E0MTcyYjllY2JhMDQ3YzA1MDI1OTY2NiJ9; hp=eyJpdiI6InR0NFZJK1BHVkF6UUhMTldsRFVQd0E9PSIsInZhbHVlIjoiYjNOUXVjTHA5Um1wVXZwc2wrd1JzY1QwQ0xkNUljS09jZWFBL05sRFBibWZuT3o4Zy9MWGdUS21lN1V0YVFhUCIsIm1hYyI6ImU0ZWUxYWRkODk1OWQ5ZWE3OTNiNTA0Y2U3ZDI5M2NjMDEwNzNlNGEyYmJlZjMyZjk2MDY1NWFkMTNiNzk3YWEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im1peTNVTlJrMjIwMU0reU1Bam56OUE9PSIsInZhbHVlIjoibmEwSVJUbVNSejhrK3o3K2hOQ29XWXJ4UXptYjFPVm0wNUsya1VEV2g3VENqdTd1Tm1Tb1paM24xaUloU2pxZyIsIm1hYyI6ImU2MmY5Y2M4ODkwZjE0MDUyMDNmM2FkN2UxYTFjOTJmYTU2Yzc4M2ExMmI4ODM4OWRlZTY5Zjk0MGIzNmU0ZDIifQ%3D%3D; _=eyJpdiI6IndWbmlrUTlzN1FPK1J0T3E0RDdPZ2c9PSIsInZhbHVlIjoiSFZPeVZrQ3UrcWtuTVhMM1FyYjlNNE5oY0ZKRTI1bW9KYnROdUZKQW1KYmpKbjZTWk1xeE5aUzFlRFZMM0szZyIsIm1hYyI6ImJhOTg4MGVmYTc2OWZkMDhiY2I3MGE5NTlhOTc2YzcxYTdiYmE4Y2EzYzI0YmRmOTg1NGI3MDkxNzJiYzJiMWQifQ%3D%3D; referrer=eyJpdiI6IjNCVzJmendJaWdxZDNLc0prbHY3Q0E9P [TRUNCATED]
2025-01-10 16:48:50 UTC	892	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:48:50 GMT Content-Type: image/jpeg Content-Length: 42797 Connection: close Last-Modified: Fri, 06 Aug 2021 14:26:41 GMT ETag: "610d46a1-a72d" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 431 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V%2BSrIj7VZcCpX1ZSkpzM3FgLTx2COhL2EKmMP28LioX5pduNJtsfctotQj603pglZvRzI7WEgS0aEsy7rYKEMtOW3sgN4TwMZkUQwnwDbaYYhRKAw5VnH98vhtiDTfRzyFw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe282c9ae472b9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1963&min_rtt=1944&rtt_var=767&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=2916&delivery_rate=1391138&cwnd=217&unsent_bytes=0&cid=a66b98788a33964b&ts=126&x=0"
2025-01-10 16:48:50 UTC	477	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 Data Ascii: JFIF(ICC_PROFILEmntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(w
2025-01-10 16:48:50 UTC	1369	IN	Data Raw: 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c0 00 11 08 02 1c 07 80 03 01 22 00 02 11 01 03 11 01 ff Data Ascii: Y[XYZ -mlucenUS Google Inc. 2016C#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"
2025-01-10 16:48:50 UTC	1369	IN	Data Raw: 2f 3c 97 b2 a4 63 fe 3b cb 8f c9 b9 94 00 00 00 00 00 04 4f 1a 65 c3 2b 52 e4 99 78 a2 d2 4f 28 0b 13 8a 64 c5 b9 45 3c 64 74 fb b6 04 49 e7 d8 43 92 a7 e8 22 87 1d eb 93 4a a2 20 ad df 06 84 11 2f 0c b5 76 78 65 93 d4 92 8c 1b 79 39 ff 00 2c d5 53 d8 b8 3a 65 25 15 6c 98 c5 b7 aa 5b f6 5c 13 d2 97 e4 7a a5 ba ec 6a 40 00 00 01 32 da 86 dd 7b 82 5d de e0 64 d3 5b a0 83 50 95 4b 1c 1a 9c 6d b6 ed ee 59 d1 d4 fc 6f 4a db bb 28 c3 a3 36 93 54 da f4 35 fc 91 e5 af 74 41 60 4a 9c 5e d2 5f 61 29 28 c5 b7 b2 01 47 cf 3f 81 a5 96 62 ba fe 36 f4 ee 6d 16 a4 ed 77 45 14 00 04 01 8c a0 d3 6e 0b 1c 1a 37 d9 0d 2a 40 62 ba 91 8b b7 97 c2 2b f2 2e a7 85 5a bd cc 25 6e 4e f7 b0 8b a9 26 b9 35 8a eb 4a 95 21 92 a7 17 dd 14 65 00 00 00 9b a5 62 d3 79 60 bc 4e fb 76 28 08 Data Ascii: /<c;Oe+RxO(dE<dtIC"J /vxey9,S:e%l[\zj@2{]d[PKmYoJ(6T5tA`J^_a)(G?b6mwEn7*@b+.Z%nN&5J!eby`Nv(
2025-01-10 16:48:50 UTC	1369	IN	Data Raw: bc bf a2 80 00 08 93 7e 58 ee ff 00 80 14 97 e4 7a 7b 2d d9 30 e9 45 4d f7 ad 8d 52 51 54 89 5f ec 97 aa 40 53 57 b8 b6 df 2b 92 80 09 70 83 fd 2b e8 c3 ab d3 71 95 a5 83 7a 71 db 6e 06 9d ec 51 cf d2 83 6d be c8 e8 5b 22 25 e1 9d f6 96 19 71 f2 a1 43 27 cc fd 10 3c ba 5f 23 d8 81 99 cf c6 f4 2f 97 c0 e7 26 bc 31 f3 31 c6 2a 2a 80 c5 f4 2a 69 6a df d0 da 09 28 d2 42 97 9e 1f 23 d9 fa 32 81 c2 2f b6 79 42 d3 25 b4 df ce 4b 16 c4 12 e5 38 ef 14 fd 98 29 c5 79 ad 3f 54 35 97 6f e0 a0 32 9f 59 45 d2 c8 43 ac a5 ba 77 c2 33 eb 41 a9 b6 96 18 fa 11 6e 7a bb 22 fc 56 b5 29 79 9d 2e 10 d2 51 74 b6 65 0a 55 a7 24 43 03 3f c8 f8 2d 3b 56 03 14 a2 a4 a9 8c 00 8b 70 f3 65 72 56 e3 23 4b 8e 61 b7 00 37 86 99 46 52 ea c5 2a a7 7c 70 57 4f a8 a6 bd 50 16 00 00 00 04 bc Data Ascii: ~Xz{-0EMRQT_@SW+p+qzqnQm["%qC'<_#/&11**ij(B#2/yB%K8)y?T5o2YECw3Anz"V)y.QteU$C?-;VperV#Ka7FR\|pWOP
2025-01-10 16:48:50 UTC	1369	IN	Data Raw: ea 12 6e 4f 44 7e 5f 05 a4 a2 a9 6c 40 c0 00 08 86 cf dd 89 cb 38 1a fd 6b d7 ff 00 44 14 35 26 bb 97 07 6b d7 b9 99 7d 3e e0 58 00 10 4c 96 a8 b4 11 7a a2 99 44 5e 99 b5 ce 50 15 b1 9c 93 bb ac 17 57 97 f4 50 19 c5 3b ba 2f 52 f6 18 aa f7 01 81 34 d6 cf e1 86 aa df 00 51 9f 5b 30 d3 df 81 ea 72 c4 36 e4 71 8a 8f bf 76 07 21 d1 07 28 c1 2d 37 ec ca 8a 5f 92 4e 97 61 ac 36 be 4b 68 5f 92 3d ed 7b a2 93 4f 67 63 22 50 8f 65 97 c1 03 dd fa 22 88 d0 d7 96 6f e7 21 73 8e e9 3f 66 05 93 29 69 c2 cb 7b 23 99 ce 52 76 db 35 e8 3d 49 b7 97 c9 70 5e 9d 3e 27 97 dd 96 26 ad 34 09 da 4c 81 93 35 8b 5b ac a2 80 04 9d ab 5d c1 ab 54 4c 3c 2d c7 8c af 62 c0 49 e3 d5 0c 97 89 5f 25 00 00 00 09 a4 d5 33 8d aa 74 fb 1d a6 73 e8 a9 bb d9 96 51 cc 74 74 15 74 ef 96 4a e8 e9 Data Ascii: nOD~_l@8kD5&k}>XLzD^PWP;/R4Q[0r6qv!(-7_Na6Kh_={Ogc"Pe"o!s?f)i{#Rv5=Ip^>'&4L5[]TL<-bI_%3tsQtttJ
2025-01-10 16:48:50 UTC	1369	IN	Data Raw: 2f 5a 61 28 dc b0 02 83 77 46 84 c5 53 7c 94 00 4c 95 c4 a0 03 10 4a dd 1a 49 26 d6 06 92 5b 20 0a 5c 18 3e ae 8b 8c 52 6b b3 35 ea 3a e9 c9 a3 94 b2 0d 57 f9 0f bc 57 c1 ac 17 86 ee db cb 67 29 b7 47 53 8d 26 92 4f 81 62 b7 11 3a 1b de 6f e3 01 f8 e3 dd 5f be 48 88 eb 75 29 25 17 be f4 63 19 b8 3b 4c e8 ea c2 3a 36 aa da 8c ff 00 0b 8f 89 e5 2e c5 8a dc 62 4e d5 a1 91 01 13 57 9e e5 92 b2 ef e8 0c e5 69 3c 6c 61 6e ee ce ba bd 57 df 06 2f a3 e3 49 4b 72 c5 5f 41 dc 3d 6f 26 a6 6b a6 e0 bc 0f ef b8 f5 d6 24 b4 ff 00 44 45 80 00 11 1f 3c be 05 28 d3 c7 71 af f6 bf 64 3d e5 ec 04 68 7c 17 1f 0e 1f d9 42 6a d0 0c 0c f5 be 46 9b 96 e0 3b bc 2f b1 4a 34 b5 2d d6 4a d8 60 24 ed 58 c8 86 2e 3c 6d ec 58 00 01 1a 9c b1 0f b0 1c a4 a3 ef d9 0b 4b 96 67 b7 ed 1c 62 Data Ascii: /Za(wFS\|LJI&[ \>Rk5:WWg)GS&Ob:o_Hu)%c;L:6.bNWi<lanW/IKr_A=o&k$DE<(qd=h\|BjF;/J4-J`$X.<mXKgb
2025-01-10 16:48:50 UTC	1369	IN	Data Raw: bf a3 28 9d 2d f6 34 4d 35 82 34 cb 57 9f 7f 40 71 9a ca 9f f0 06 86 1d 6e a3 bd 0b e4 d1 29 35 e7 fe 0e 79 a6 a6 ef 92 c1 26 bd 3e ac af 4d ef b3 7d 8c 87 1f 32 ae 4d 2b aa 31 4b 3b be 59 44 7e 44 b7 4d 7b a1 a9 45 ec d3 30 8a 00 00 02 27 fa 7f f2 28 89 3d 52 8d 61 5e e0 54 b2 ab b9 99 aa 49 6c 2a 4e 4f d0 08 8a b6 69 40 30 15 20 a1 80 11 3c 24 f8 65 50 a4 ae 2d 72 82 2f 54 53 e5 01 0d 53 a2 5c 75 60 d7 79 7a 20 a4 a4 bd 40 95 aa 0b 39 5c a2 d3 4d 5a 76 86 43 86 6e 2e 9f f6 05 35 69 a7 dc 98 b6 d6 9e eb 0d 86 bc e9 6a a4 44 a7 1e 9c f9 b5 90 35 4a 95 09 e1 df d9 0b af 16 f2 9a 34 c3 40 30 25 71 c1 40 00 4b 94 56 ed 21 7e 44 f6 4d fb 20 1c eb 43 b7 44 43 ab 19 3c ba 6c 9e b3 93 8a b8 d2 31 2e 2b ad e1 a6 51 31 92 92 ab cf 74 38 ed 5c 11 0c 00 00 97 e6 45 Data Ascii: (-4M54W@qn)5y&>M}2M+1K;YD~DM{E0'(=Ra^TIl*NOi@0 <$eP-r/TSS\u`yz @9\MZvCn.5ijD5J4@0%q@KV!~DM CDC<l1.+Q1t8\E
2025-01-10 16:48:50 UTC	1369	IN	Data Raw: 04 60 ef 54 71 ff 00 b3 4d 2a b6 1c 76 01 29 db a6 a9 f0 50 9a 52 54 d1 3e 28 7f ca 3f ca 00 97 86 4a 5d b6 63 4a dd bf 82 5b 8c e2 db 7e 12 57 5d 24 ad 3b 03 56 ac 13 ec f7 44 c3 a9 19 ed f4 37 8c 81 40 02 01 81 3f 92 3c df b6 45 ad bd a0 fe 70 04 ce 71 8c da bd d6 4b 4e 33 58 76 8e 59 5e a7 7b f7 34 e8 4b 4d de c5 c5 6d 1e 38 28 97 ba 92 28 88 04 31 4b ca c0 23 e5 43 12 d8 52 92 8a bf a4 06 7d 78 5b 4d 6f c1 86 c7 5c 63 59 7e 66 32 e8 64 74 fc 88 b2 3a 7e 45 f2 41 60 00 00 61 d4 e8 d5 ca 2f 1c 1b 91 d5 f2 b5 e9 60 65 1e 83 74 db a4 6e 92 8a a5 b0 2d 90 c0 00 00 09 7d 9f a9 42 97 95 82 ca 01 35 dd 19 4e 3f 95 dc 71 5d f9 34 6d c9 e9 5b 77 63 d3 5e 5c 01 cf f8 67 fb 4d 7a 5d 2d 0e de 59 a2 76 32 e8 09 71 8b dd 26 50 10 47 e3 4b 66 d7 c8 3d 71 da 49 fa 34 Data Ascii: `TqM*v)PRT>(?J]cJ[~W]$;VD7@?<EpqKN3XvY^{4KMm8((1K#CR}x[Mo\cY~f2dt:~EA`a/`etn-}B5N?q]4m[wc^\gMz]-Yv2q&PGKf=qI4
2025-01-10 16:48:50 UTC	1369	IN	Data Raw: cb f4 01 b7 5b 89 b7 25 49 0d 45 0c 0c 24 9e eb 74 6b d3 f2 26 0b cc c4 fc 12 bf d2 f7 f4 60 39 6c 51 0e 69 b4 50 13 2f 3c 7e 4b 22 5e 78 7c 96 00 00 00 44 fa 6a 6a 9e fd 99 87 e1 96 ad 2a 8e 92 23 fe c7 ec 8b a0 e9 f4 94 32 f2 cd 00 08 00 00 02 63 dd 70 c6 d5 8b f5 3f 51 ca 4a 2a d8 13 27 4b 4b 57 7b 7a 98 be 84 d6 d9 36 8c 6f c5 2d df f0 3b a7 4f ec a3 08 f4 24 de 70 8e 88 c5 45 52 d8 60 4d 0a ac 9f c7 1e 2b db 05 89 ba 02 74 b5 b4 df ce 45 7d 47 b2 4f d7 62 aa f7 fa 28 0e 7e a4 da f0 a4 e3 c9 3d 3e a3 8c 95 bc 1a f5 61 ae 49 2d c5 d3 e8 35 2b 93 58 e0 bc c5 53 ea 45 b5 91 fe 48 72 35 bb 65 11 11 f9 21 c8 7e 48 72 58 01 1f 92 1c 87 e4 87 25 89 ba 56 c0 e6 9f 51 ca 58 74 96 c6 9d 19 b9 ba 6e eb 24 be 93 95 c9 61 3e cc be 8c 74 b6 9e e5 e6 2b 52 56 1b 5f Data Ascii: [%IE$tk&`9lQiP/<~K"^x\|Djj#2cp?QJ'KKW{z6o-;O$pER`M+tE}GOb(~=>aI-5+XSEHr5e!~HrX%VQXtn$a>t+RV_
2025-01-10 16:48:50 UTC	1369	IN	Data Raw: 51 52 54 c0 1a b5 ea 09 da 25 49 c5 e9 97 c3 e4 7b 3f 46 03 6e 95 84 55 21 36 9d 22 80 00 00 00 97 89 5f 25 11 26 e5 e1 8f cb e0 02 52 bb 8a cb ef e8 63 f8 73 15 ab 73 54 e3 18 d2 dc 2d 39 c2 bd 4a 2a 31 50 8d 22 80 4d a4 40 c5 b0 b2 fd 07 a5 7b 80 ae f6 56 0f 09 b9 3c 22 88 9e 6a 3c bc fb 00 74 d5 47 d5 e5 96 00 00 06 73 eb 46 0e b7 63 87 51 4d 60 06 bb fb 84 d5 c5 a0 8e c0 f2 e9 7c 81 8c 5d 78 59 ac 5d 2a 78 09 41 35 85 4d 6c 38 b5 28 ff 00 68 05 2f 3c 3d ff 00 f4 59 9c 95 4a 35 cf fe 8a ba dd 50 14 02 18 13 2d ab 91 47 fd 92 f8 1e f2 f6 14 7c d3 f7 ff 00 d0 16 00 00 00 02 b0 14 9a 8d 36 28 a7 27 aa 5f 0b 81 3b 9f 8b f4 ad 97 26 80 02 dc 60 04 de 9c 3d b9 0d 68 53 f2 90 06 97 7b 7d 8d 2a 12 74 95 a6 3b 4f b8 0c 52 7a 55 b1 91 e7 9d f6 8f f6 03 82 69 5b Data Ascii: QRT%I{?FnU!6"_%&RcssT-9J1P"M@{V<"j<tGsFcQM`\|]xY]xA5Ml8(h/<=YJ5P-G\|6('_;&`=hS{}*t;ORzUi[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49944	35.190.80.1	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:06 UTC	532	OUT	OPTIONS /report/v4?s=V%2BSrIj7VZcCpX1ZSkpzM3FgLTx2COhL2EKmMP28LioX5pduNJtsfctotQj603pglZvRzI7WEgS0aEsy7rYKEMtOW3sgN4TwMZkUQwnwDbaYYhRKAw5VnH98vhtiDTfRzyFw%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://nervedefend.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:07 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 10 Jan 2025 16:49:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49945	35.190.80.1	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:07 UTC	474	OUT	POST /report/v4?s=V%2BSrIj7VZcCpX1ZSkpzM3FgLTx2COhL2EKmMP28LioX5pduNJtsfctotQj603pglZvRzI7WEgS0aEsy7rYKEMtOW3sgN4TwMZkUQwnwDbaYYhRKAw5VnH98vhtiDTfRzyFw%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 453 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:07 UTC	453	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 37 32 33 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 39 35 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 34 37 2e 32 35 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 76 61 6c 69 64 2e 63 6f 6e 74 65 6e 74 5f 6c 65 6e 67 74 68 5f 6d 69 73 6d 61 74 63 68 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 Data Ascii: [{"age":57236,"body":{"elapsed_time":1956,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.47.251","status_code":200,"type":"http.response.invalid.content_length_mismatch"},"type":"networ
2025-01-10 16:49:07 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 10 Jan 2025 16:49:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49946	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:22 UTC	1064	OUT	GET /secure/?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x HTTP/1.1 Host: www.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://nervedefend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:22 UTC	679	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 10 Jan 2025 16:49:22 GMT Content-Length: 0 Connection: close location: https://buygoods.com/secure/?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x CF-Cache-Status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Set-Cookie: __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEc2fzpZzMigfe; SameSite=Lax; path=/; expires=Sat, 11-Jan-25 15:49:22 GMT; HttpOnly Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe28f4890e8c05-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49949	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:23 UTC	1060	OUT	GET /secure/?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x HTTP/1.1 Host: buygoods.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://nervedefend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:24 UTC	1143	IN	HTTP/1.1 302 Found Date: Fri, 10 Jan 2025 16:49:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close location: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x set-cookie: spiaffid_6802=1270; expires=Sun, 10-Jan-2027 16:49:23 GMT; Max-Age=63072000; path=/; domain=.softwareprojects.com; Secure x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Set-Cookie: aff_id=1270; expires=Sun, 10-Jan-2027 16:49:23 GMT; Max-Age=63072000; path=/; domain=.softwareprojects.com; Secure Set-Cookie: sessid2=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.; Secure Set-Cookie: __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4; SameSite=Lax; path=/; expires=Sat, 11-Jan-25 15:49:24 GMT; HttpOnly Server: cloudflare CF-RAY: 8ffe28f8ed581902-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:24 UTC	226	IN	Data Raw: 32 66 64 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 62 75 73 69 6e 65 73 73 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 2d 75 73 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 Data Ascii: 2fd1<!DOCTYPE html><html lang="en"><head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <meta name="Classification" content="business"> <meta name="Language" content="en-us"><meta name="
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 42 75 79 47 6f 6f 64 73 20 3a 20 4e 65 72 76 65 20 44 65 66 65 6e 64 20 2d 20 36 20 42 6f 74 74 6c 65 73 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 2f 62 67 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 76 3d 32 22 3e 0a 20 20 20 20 3c 2f 68 65 Data Ascii: robots" content="noindex,nofollow"> <meta content="width=device-width, initial-scale=1" name="viewport" /> <title>BuyGoods : Nerve Defend - 6 Bottles </title> <link rel="icon" href="https://cdn.buygoods.com/bgfavicon.ico?v=2"> </he
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 61 66 65 65 73 65 63 75 72 65 2e 63 6f 6d 2f 76 65 72 69 66 79 3f 68 6f 73 74 3d 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 36 32 37 32 2f 69 6d 61 67 65 73 2f 6d 63 61 66 65 65 2e 70 6e 67 22 20 61 6c 74 3d 22 54 72 75 73 74 20 47 75 61 72 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 3c 2f 68 65 61 64 65 72 3e 0d 0a 0d 0a 3c 6d 61 69 6e 3e 0d 0a 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 65 72 72 6f 72 2d 62 6f 78 22 Data Ascii: afeesecure.com/verify?host=buygoods.com" target="_blank"> <img src="https://cdn.buygoods.com/assets/6272/images/mcafee.png" alt="Trust Guard"> </a> </div> </div></header><main> <section id="error-box"
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 70 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 79 6d 65 6e 74 2d 74 79 70 65 2d 69 74 65 6d 20 70 61 79 6d 65 6e 74 2d 74 79 70 65 2d 63 61 72 64 20 73 65 6c 65 63 74 65 64 22 20 64 61 74 61 2d 70 61 79 6d 65 6e 74 2d 74 79 70 65 3d 22 63 61 72 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 36 32 37 32 2f 69 6d 61 67 65 73 2f 76 69 73 61 2e 73 76 67 22 20 61 6c 74 3d 22 56 69 73 61 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: pe"> <div class="payment-type-item payment-type-card selected" data-payment-type="card"> <img src="https://cdn.buygoods.com/assets/6272/images/visa.svg" alt="Visa">
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 69 64 3d 22 65 6d 61 69 6c 61 64 64 72 65 73 73 22 20 6e 61 6d 65 3d 22 65 6d 61 69 6c 61 64 64 72 65 73 73 22 20 6f 6e 62 6c 75 72 3d 22 61 64 64 4c 65 61 64 28 74 68 69 73 2e 76 61 6c 75 65 29 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 79 6f 75 40 65 6d 61 69 6c 2e 63 6f 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 69 65 6c 64 20 68 69 64 65 2d 70 61 79 70 61 6c 2d 66 6c 65 78 22 3e 0d Data Ascii: l> <input id="emailaddress" name="emailaddress" onblur="addLead(this.value)" type="text" class="input" placeholder="you@email.com"> </div> <div class="field hide-paypal-flex">
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 69 64 3d 22 63 72 65 64 69 74 63 61 72 64 73 5f 7a 69 70 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 5a 69 70 22 20 6f 6e 62 6c 75 72 3d 22 63 61 6c 63 75 6c 61 74 65 53 61 6c 65 73 54 61 78 28 29 22 20 6e 61 6d 65 3d 22 63 72 65 64 69 74 63 61 72 64 73 5f 7a 69 70 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 Data Ascii: <input id="creditcards_zip" placeholder="Zip" onblur="calculateSalesTax()" name="creditcards_zip" type="text" class="input"> </div> </div> <div cla
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 42 61 68 61 6d 61 73 22 3e 42 61 68 61 6d 61 73 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 42 61 68 72 61 69 6e 22 3e 42 61 68 72 61 69 6e 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 42 61 6e 67 6c 61 64 65 73 68 22 3e 42 61 6e 67 6c 61 64 65 73 68 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 42 61 72 62 61 64 6f 73 22 3e 42 61 72 62 61 64 6f 73 3c 2f 6f 70 74 69 6f 6e 3e 0a 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 42 65 6c 67 69 75 6d 22 3e 42 65 6c 67 69 75 6d 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 42 65 6c 69 7a 65 22 3e 42 65 6c 69 7a 65 3c 2f 6f 70 74 69 Data Ascii: tion><option value="Bahamas">Bahamas</option><option value="Bahrain">Bahrain</option><option value="Bangladesh">Bangladesh</option><option value="Barbados">Barbados</option><option value="Belgium">Belgium</option><option value="Belize">Belize</opti
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 22 3e 43 6f 6d 6f 72 6f 73 3c 2f 6f 70 74 69 6f 6e 3e 0a 0a 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 43 6f 6f 6b 20 49 73 6c 61 6e 64 73 22 3e 43 6f 6f 6b 20 49 73 6c 61 6e 64 73 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 43 6f 73 74 61 20 52 69 63 61 22 3e 43 6f 73 74 61 20 52 69 63 61 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 43 72 6f 61 74 69 61 22 3e 43 72 6f 61 74 69 61 3c 2f 6f 70 74 69 6f 6e 3e 0a 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 43 75 72 61 63 61 6f 22 3e 43 75 72 61 c3 a7 61 6f 3c 2f 6f 70 74 69 6f 6e 3e 0a 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 43 7a 65 63 68 20 52 65 70 75 62 6c 69 63 22 3e 43 7a 65 63 68 20 52 65 70 75 62 6c 69 63 3c 2f 6f 70 74 69 Data Ascii: ">Comoros</option><option value="Cook Islands">Cook Islands</option><option value="Costa Rica">Costa Rica</option><option value="Croatia">Croatia</option><option value="Curacao">Curaao</option><option value="Czech Republic">Czech Republic</opti
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 22 47 69 62 72 61 6c 74 61 72 22 3e 47 69 62 72 61 6c 74 61 72 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 47 72 65 65 63 65 22 3e 47 72 65 65 63 65 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 47 72 65 65 6e 6c 61 6e 64 22 3e 47 72 65 65 6e 6c 61 6e 64 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 47 72 65 6e 61 64 61 22 3e 47 72 65 6e 61 64 61 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 47 75 61 64 65 6c 6f 75 70 65 22 3e 47 75 61 64 65 6c 6f 75 70 65 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 47 75 61 6d 22 3e 47 75 61 6d 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 47 75 Data Ascii: "Gibraltar">Gibraltar</option><option value="Greece">Greece</option><option value="Greenland">Greenland</option><option value="Grenada">Grenada</option><option value="Guadeloupe">Guadeloupe</option><option value="Guam">Guam</option><option value="Gu
2025-01-10 16:49:24 UTC	1071	IN	Data Raw: 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4b 79 72 67 79 7a 73 74 61 6e 22 3e 4b 79 72 67 79 7a 73 74 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4c 61 6f 73 22 3e 4c 61 6f 73 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4c 61 74 76 69 6a 61 22 3e 4c 61 74 76 69 6a 61 3c 2f 6f 70 74 69 6f 6e 3e 0a 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4c 65 73 6f 74 68 6f 22 3e 4c 65 73 6f 74 68 6f 3c 2f 6f 70 74 69 6f 6e 3e 0a 0a 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 22 3e 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4c 69 74 68 75 61 6e 69 61 22 3e 4c 69 74 68 75 61 6e 69 Data Ascii: <option value="Kyrgyzstan">Kyrgyzstan</option><option value="Laos">Laos</option><option value="Latvija">Latvija</option><option value="Lesotho">Lesotho</option><option value="Liechtenstein">Liechtenstein</option><option value="Lithuania">Lithuani

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49950	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:24 UTC	1127	OUT	GET /secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x HTTP/1.1 Host: buygoods.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://nervedefend.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:24 UTC	806	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Tue, 07 Jan 2025 18:39:03 GMT vary: Accept-Encoding expires: Fri, 10 Jan 2025 17:49:24 GMT cache-control: max-age=3600 cache-control: private access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Server: cloudflare CF-RAY: 8ffe2900dc024304-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:24 UTC	563	IN	Data Raw: 37 63 38 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 62 75 73 69 6e 65 73 73 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e Data Ascii: 7c8c<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="Classification" content="business"> <meta name="Language" content="en
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 2f 74 72 61 63 6b 69 6e 67 2e 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 22 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 69 73 70 6c 61 79 2e 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 22 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 22 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 62 72 61 69 6e 74 72 65 65 67 61 74 65 77 Data Ascii: /tracking.buygoods.com" rel="preconnect" crossorigin> <link href="https://display.buygoods.com" rel="preconnect" crossorigin> <link href="https://cdn.buygoods.com" rel="preconnect" crossorigin> <link href="https://js.braintreegatew
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 44 44 5f 52 55 4d 2e 69 6e 69 74 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 69 65 6e 74 54 6f 6b 65 6e 3a 20 27 70 75 62 33 61 39 39 31 37 64 37 39 37 33 63 66 39 30 65 30 36 35 32 62 34 65 33 64 30 33 37 66 65 64 64 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 70 70 6c 69 63 61 74 69 6f 6e 49 64 3a 20 27 32 61 37 39 36 37 37 32 2d 62 66 65 31 2d 34 34 66 65 2d 61 34 63 38 2d 62 63 34 62 61 35 62 65 32 32 38 63 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 69 74 65 3a 20 27 64 61 74 61 64 6f 67 68 71 2e 63 6f 6d 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 72 76 69 63 65 3a 20 27 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: window.DD_RUM.init({ clientToken: 'pub3a9917d7973cf90e0652b4e3d037fedd', applicationId: '2a796772-bfe1-44fe-a4c8-bc4ba5be228c', site: 'datadoghq.com', service: 'buygoods.com',
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 22 20 63 6c 61 73 73 3d 22 70 6f 73 69 74 69 6f 6e 2d 61 62 73 6f 6c 75 74 65 20 77 2d 31 30 30 20 68 2d 31 30 30 20 64 2d 6e 6f 6e 65 22 20 73 74 79 6c 65 3d 22 7a 2d 69 6e 64 65 78 3a 20 33 3b 22 3e 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 65 78 69 74 70 6f 70 75 70 22 20 63 6c 61 73 73 3d 22 70 6f 73 69 74 69 6f 6e 2d 61 62 73 6f 6c 75 74 65 20 77 2d 31 30 30 20 68 2d 31 30 30 20 64 2d 6e 6f 6e 65 22 20 73 74 79 6c 65 3d 22 7a 2d 69 6e 64 65 78 3a 20 31 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6f 73 69 74 69 6f 6e 2d 61 62 73 6f 6c 75 74 65 20 77 2d 31 30 30 20 68 2d 31 30 30 20 62 67 2d 64 61 72 6b 20 6f 70 61 63 69 74 79 2d 35 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 Data Ascii: " class="position-absolute w-100 h-100 d-none" style="z-index: 3;"></div> <div id="exitpopup" class="position-absolute w-100 h-100 d-none" style="z-index: 1;"> <div class="position-absolute w-100 h-100 bg-dark opacity-50"></div>
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 73 3d 22 63 6f 6e 74 61 69 6e 65 72 20 64 2d 66 6c 65 78 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 62 65 74 77 65 65 6e 20 70 74 2d 31 20 70 62 2d 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 69 64 3d 22 62 67 2d 6c 6f 67 6f 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 75 79 67 6f 6f 64 73 6c 6f 67 6f 6e 65 77 2e 70 6e 67 22 20 77 69 64 74 68 3d 22 31 30 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 63 74 20 73 6d 61 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 68 61 76 69 6e 67 2d 74 72 6f 75 62 Data Ascii: s="container d-flex justify-content-between pt-1 pb-1"> <img id="bg-logo" src="https://buygoods.com/images/buygoodslogonew.png" width="100"> <div class="contact small"> <span data-translate="having-troub
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 79 2d 34 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 68 33 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 22 3e 3c 2f 69 3e 20 3c 73 70 61 6e 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 6f 72 64 65 72 2d 64 65 74 61 69 6c 73 22 3e 4f 72 64 65 72 20 44 65 74 61 69 6c 73 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: class="text-center"> <div class="py-4 border-bottom"> <p class="h3"><i class="fa fa-shopping-cart"></i> <span data-translate="order-details">Order Details</span></p>
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 79 2d 33 20 62 6f 72 64 65 72 2d 74 6f 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 68 36 20 6d 79 2d 30 22 3e 3c 73 70 61 6e 20 64 61 74 61 2d 74 72 61 6e Data Ascii: </div> </div> <div class="py-3 border-top"> <div> <p class="h6 my-0"><span data-tran
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 62 2d 33 20 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 2d 31 30 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 68 36 20 6d 62 2d 32 22 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 68 61 76 65 63 6f 75 70 6f 6e 22 3e 48 61 76 65 20 61 20 63 6f 75 70 6f 6e 20 63 6f 64 65 3f 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: b-3 position-relative"> <div class="w-100"> <p class="h6 mb-2" data-translate="havecoupon">Have a coupon code? </p> </div>
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 74 6f 74 61 6c 22 3e 54 6f 74 61 6c 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 63 75 72 72 65 6e 63 79 2d 6e 61 6d 65 22 3e 55 53 44 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 Data Ascii: <span> <span data-translate="total">Total</span> <span id="currency-name">USD</span> </span>
2025-01-10 16:49:24 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 73 61 6c 65 73 70 61 67 65 5f 75 72 6c 22 20 76 61 6c 75 65 3d 22 22 20 69 64 3d 22 73 61 6c 65 73 70 61 67 65 5f 75 72 6c 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 70 72 6f 64 75 63 74 5f 63 6f 64 65 6e 61 6d 65 22 20 76 61 6c 75 65 3d 22 22 20 69 64 3d 22 70 72 6f 64 75 63 74 5f 63 6f 64 65 6e 61 6d 65 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 Data Ascii: <input type="hidden" name="salespage_url" value="" id="salespage_url" /> <input type="hidden" name="product_codename" value="" id="product_codename" /> <input type="hidden"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49952	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:25 UTC	992	OUT	GET /secure/checkout/assets/css/chk.css?v=4 HTTP/1.1 Host: buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:25 UTC	526	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:25 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Thu, 23 Nov 2023 21:35:04 GMT vary: Accept-Encoding etag: W/"655fc588-1068" expires: Mon, 08 Jan 2035 16:49:25 GMT cache-control: public, max-age=315360000 x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: HIT Age: 8529 Server: cloudflare CF-RAY: 8ffe29052a7142e5-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:25 UTC	843	IN	Data Raw: 31 30 36 38 0d 0a 68 74 6d 6c 7b 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 73 6d 6f 6f 74 68 7d 62 6f 64 79 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 39 36 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 63 6f 6e 74 61 63 74 20 61 2c 23 74 65 72 6d 73 20 6c 69 20 61 7b 63 6f 6c 6f 72 3a 23 32 39 38 36 62 38 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 6f 6f 6c 74 69 70 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 Data Ascii: 1068html{scroll-behavior:smooth}body{position:relative}@media (min-width:1200px){.container,.container-lg,.container-md,.container-sm,.container-xl{max-width:960px!important}}.contact a,#terms li a{color:#2986b8!important}.tooltip{max-width:100%;display
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 2d 62 6f 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 65 64 34 64 61 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 0a 23 63 6f 75 70 6f 6e 2d 63 6f 64 65 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 Data Ascii: ound-color:#fff;background-clip:padding-box;border:1px solid #ced4da;-webkit-appearance:none;-moz-appearance:none;appearance:none;border-radius:.25rem;transition:border-color .15s ease-in-out,box-shadow .15s ease-in-out}#coupon-code{border-top-right-radi
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: 0a 23 73 75 62 6d 69 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 39 38 36 62 38 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 39 38 36 62 38 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 32 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 34 29 2c 30 20 31 70 78 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 2c 30 20 33 70 78 20 31 70 78 20 2d 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 73 75 62 6d 69 74 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 31 31 70 78 20 30 20 72 67 62 28 30 20 30 20 30 2f 31 38 25 29 2c 30 20 34 70 78 20 31 35 70 78 20 30 Data Ascii: #submit{background-color:#2986b8!important;border-color:#2986b8!important;box-shadow:0 2px 2px 0 rgba(0,0,0,.14),0 1px 5px 0 rgba(0,0,0,.12),0 3px 1px -2px rgba(0,0,0,.2)}#submit:hover{outline:0;-webkit-box-shadow:0 5px 11px 0 rgb(0 0 0/18%),0 4px 15px 0
2025-01-10 16:49:25 UTC	627	IN	Data Raw: 6c 74 69 70 2d 68 65 61 64 69 6e 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 20 30 20 30 7d 2e 74 6f 6f 6c 74 69 70 2d 73 65 63 74 69 6f 6e 2e 76 69 73 61 3e 64 69 76 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 7d 2e 74 6f 6f 6c 74 69 70 2d 73 65 63 74 69 6f 6e 20 2e 74 6f 6f 6c 74 69 70 2d 68 65 61 64 69 6e 67 2c 2e 74 6f 6f 6c 74 69 70 2d 73 65 63 74 69 6f 6e 20 2e 74 6f 6f 6c 74 69 70 2d 62 6f 64 79 7b 70 61 64 64 69 6e 67 3a 31 32 70 78 7d 2e 74 6f 6f 6c 74 69 70 2d 68 65 61 64 69 6e 67 7b 66 6c 65 78 3a 31 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b Data Ascii: ltip-heading{border-radius:4px 0 0}.tooltip-section.visa>div{border-right:1px solid #eee}.tooltip-section .tooltip-heading,.tooltip-section .tooltip-body{padding:12px}.tooltip-heading{flex:1;display:flex;align-items:center;padding-bottom:0;font-size:14px;
2025-01-10 16:49:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49956	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:25 UTC	739	OUT	GET /assets/checkout/css/bootstrap.min.css HTTP/1.1 Host: cdn.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:25 UTC	733	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:25 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Thu, 04 Aug 2022 20:22:41 GMT x-amz-storage-class: INTELLIGENT_TIERING etag: W/"c5e0fd3f86e982297300c5bba09e4ca5" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 e70925a92da0404e239c3620389c3dd0.cloudfront.net (CloudFront) x-amz-cf-pop: JFK52-P2 x-amz-cf-id: IZFA-bToa0xycUGQhyle0FqDhmIyu3ZsOuFSb2gysfSJQlNR9o3SXg== Age: 1256 CF-Cache-Status: HIT Expires: Fri, 10 Jan 2025 20:49:25 GMT Cache-Control: public, max-age=14400 Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe29052fbf5e6c-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:25 UTC	636	IN	Data Raw: 37 63 64 34 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 Data Ascii: 7cd4@charset "UTF-8";/! Bootstrap v5.1.3 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: 35 30 35 37 3b 2d 2d 62 73 2d 67 72 61 79 2d 38 30 30 3a 23 33 34 33 61 34 30 3b 2d 2d 62 73 2d 67 72 61 79 2d 39 30 30 3a 23 32 31 32 35 32 39 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 3a 23 31 39 38 37 35 34 3b 2d 2d 62 73 2d 69 6e 66 6f 3a 23 30 64 63 61 66 30 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 62 73 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 62 73 2d 64 61 72 6b 3a 23 32 31 32 35 32 39 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 72 67 62 3a 31 33 2c 31 31 30 2c 32 35 33 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 72 67 Data Ascii: 5057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rg
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 74 65 78 74 2d 61 6c 69 67 6e 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 68 72 7b 6d 61 72 67 69 6e 3a 31 72 65 6d 20 30 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 62 6f 72 64 65 72 3a 30 3b 6f 70 61 63 69 74 79 3a 2e 32 35 7d 68 72 3a 6e Data Ascii: color:var(--bs-body-color);text-align:var(--bs-body-text-align);background-color:var(--bs-body-bg);-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}hr{margin:1rem 0;color:inherit;background-color:currentColor;border:0;opacity:.25}hr:n
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: 3a 23 66 63 66 38 65 33 7d 73 75 62 2c 73 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 61 7b 63 6f 6c 6f 72 3a 23 30 64 36 65 66 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 61 35 38 63 61 7d 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 63 6c 61 73 73 5d 29 2c 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 63 6c 61 73 73 5d 29 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 69 6e 68 65 Data Ascii: :#fcf8e3}sub,sup{position:relative;font-size:.75em;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#0d6efd;text-decoration:underline}a:hover{color:#0a58ca}a:not([href]):not([class]),a:not([href]):not([class]):hover{color:inhe
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: 64 7b 6f 70 61 63 69 74 79 3a 31 7d 5b 6c 69 73 74 5d 3a 3a 2d 77 65 62 6b 69 74 2d 63 61 6c 65 6e 64 61 72 2d 70 69 63 6b 65 72 2d 69 6e 64 69 63 61 74 6f 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 7b 63 75 72 73 6f 72 Data Ascii: d{opacity:1}[list]::-webkit-calendar-picker-indicator{display:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: 63 61 6c 63 28 31 2e 36 32 35 72 65 6d 20 2b 20 34 2e 35 76 77 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 72 65 6d 7d 7d 2e 64 69 73 70 6c 61 79 2d 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 35 37 35 72 65 6d 20 2b 20 33 2e 39 76 77 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 64 69 73 70 6c 61 79 2d 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 2e 35 72 65 6d 7d 7d 2e 64 69 73 70 6c 61 79 2d 33 7b 66 6f 6e 74 2d Data Ascii: calc(1.625rem + 4.5vw);font-weight:300;line-height:1.2}@media (min-width:1200px){.display-1{font-size:5rem}}.display-2{font-size:calc(1.575rem + 3.9vw);font-weight:300;line-height:1.2}@media (min-width:1200px){.display-2{font-size:4.5rem}}.display-3{font-
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: 68 74 3a 61 75 74 6f 7d 2e 66 69 67 75 72 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 66 69 67 75 72 65 2d 69 6d 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 69 67 75 72 65 2d 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 78 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 Data Ascii: ht:auto}.figure{display:inline-block}.figure-img{margin-bottom:.5rem;line-height:1}.figure-caption{font-size:.875em;color:#6c757d}.container,.container-fluid,.container-lg,.container-md,.container-sm,.container-xl,.container-xxl{width:100%;padding-right:v
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: 33 33 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 36 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 61 75 74 6f 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 32 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c Data Ascii: 3333333333%}.row-cols-4>{flex:0 0 auto;width:25%}.row-cols-5>{flex:0 0 auto;width:20%}.row-cols-6>*{flex:0 0 auto;width:16.6666666667%}.col-auto{flex:0 0 auto;width:auto}.col-1{flex:0 0 auto;width:8.33333333%}.col-2{flex:0 0 auto;width:16.66666667%}.col
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: 29 7b 2e 63 6f 6c 2d 73 6d 7b 66 6c 65 78 3a 31 20 30 20 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 61 75 74 6f 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 31 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 32 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d Data Ascii: ){.col-sm{flex:1 0 0%}.row-cols-sm-auto>{flex:0 0 auto;width:auto}.row-cols-sm-1>{flex:0 0 auto;width:100%}.row-cols-sm-2>{flex:0 0 auto;width:50%}.row-cols-sm-3>{flex:0 0 auto;width:33.3333333333%}.row-cols-sm-4>*{flex:0 0 auto;width:25%}.row-cols-sm
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: 72 2d 78 3a 30 2e 32 35 72 65 6d 7d 2e 67 2d 73 6d 2d 31 2c 2e 67 79 2d 73 6d 2d 31 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 2e 32 35 72 65 6d 7d 2e 67 2d 73 6d 2d 32 2c 2e 67 78 2d 73 6d 2d 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 30 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 32 2c 2e 67 79 2d 73 6d 2d 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 33 2c 2e 67 78 2d 73 6d 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 72 65 6d 7d 2e 67 2d 73 6d 2d 33 2c 2e 67 79 2d 73 6d 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 72 65 6d 7d 2e 67 2d 73 6d 2d 34 2c 2e 67 78 2d 73 6d 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 34 2c 2e 67 79 2d 73 6d 2d 34 7b 2d Data Ascii: r-x:0.25rem}.g-sm-1,.gy-sm-1{--bs-gutter-y:0.25rem}.g-sm-2,.gx-sm-2{--bs-gutter-x:0.5rem}.g-sm-2,.gy-sm-2{--bs-gutter-y:0.5rem}.g-sm-3,.gx-sm-3{--bs-gutter-x:1rem}.g-sm-3,.gy-sm-3{--bs-gutter-y:1rem}.g-sm-4,.gx-sm-4{--bs-gutter-x:1.5rem}.g-sm-4,.gy-sm-4{-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49951	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:25 UTC	1026	OUT	GET /images/buygoodslogonew.png HTTP/1.1 Host: buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:25 UTC	661	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:25 GMT Content-Type: image/webp Content-Length: 4248 Connection: close Cf-Bgj: imgq:100,h2pri Cf-Polished: origFmt=png, origSize=22484 Content-Disposition: inline; filename="buygoodslogonew.webp" Vary: Accept cache-control: public, max-age=315360000 etag: "5f1b2b58-57d4" expires: Mon, 08 Jan 2035 16:49:25 GMT last-modified: Fri, 24 Jul 2020 18:41:28 GMT strict-transport-security: max-age=15552000; includeSubDomains x-frame-options: SAMEORIGIN x-server: WEB_2 CF-Cache-Status: HIT Age: 8528 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe29052fbf43c1-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:25 UTC	708	IN	Data Raw: 52 49 46 46 90 10 00 00 57 45 42 50 56 50 38 4c 84 10 00 00 2f b3 c0 0e 10 f5 86 82 b6 6d 98 84 3f ec ee 32 88 88 09 e0 dc fd 86 ed 17 b7 85 97 a4 ca 37 25 db da 14 c9 cd 92 c5 52 73 77 65 c5 fb 43 f6 c8 ab c0 b1 bd c0 aa ff 8b c8 ec 96 a6 3a e7 37 33 33 33 b3 c5 a3 30 33 33 33 33 33 40 8e 6c 5b b5 92 7f 08 9f d1 e7 ec be ef 3e fd b8 bb 33 26 07 f2 90 dc 48 92 23 c9 69 35 38 bb 7b 77 57 a6 f9 32 09 90 24 99 b6 15 d7 d6 b3 6d db b6 6d db b6 6d db b6 6d db fa b6 6d 1b eb 40 92 a4 84 99 b8 91 c1 8e 83 27 d0 d1 b6 59 75 e4 cc 5e 9c 31 db 8d 57 1a 5d e9 9c fa ff 92 99 99 99 17 31 3c 13 da fb 6d 57 1d a9 fb 79 ac 8e cb 10 79 09 94 39 c2 9a d0 98 79 01 cc 9c 31 33 53 8c 6d 5b b5 15 91 7f 0c 0e 2f 09 dc dd 1d da fb fe b7 c7 5a e7 be 17 84 e4 36 92 24 49 16 35 5a Data Ascii: RIFFWEBPVP8L/m?27%RsweC:7333033333@l[>3&H#i58{wW2$mmmmm@'Yu^1W]1<mWyy9y13Sm[/Z6$I5Z
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: c8 42 1a 4c c1 15 78 07 bf e0 0f 7c 87 27 b0 0d c5 20 5d 02 82 50 04 5b f0 a6 b5 66 01 4e 86 c7 30 03 3e 25 40 06 7f 98 86 87 27 5b 02 ad b5 77 61 13 32 80 61 8a b4 0a c4 c2 12 bc 3d f9 e4 06 7f e1 e2 b9 00 93 e3 fd ee ee 08 a0 81 14 58 78 d6 87 e7 45 f0 05 8e a0 0c f8 07 42 e0 a4 d4 90 73 c0 4a 92 37 d9 3c c8 16 24 2b 42 15 8c 5c ce 4c 2a 70 fa d6 2f bc 33 52 08 f2 3c 33 c9 19 88 84 9c b7 28 69 81 73 ff 1a 29 de 58 8b 22 f9 6b 15 22 93 14 4c c4 d6 cb 43 c8 a5 12 ee b6 ca 05 ee 40 b0 72 1b 5c ad b9 c0 2f a8 53 40 09 d6 1f ad c9 c0 e2 03 21 cd 0c bb a5 c8 0d 10 04 a1 5e d2 7f 67 c4 f7 b0 df 6a 97 e3 72 91 18 86 14 96 cc 1a f2 9d 10 72 c6 43 d5 fa 34 65 12 7d 07 a7 c8 83 cc 44 80 73 fe e9 5e 4f b4 8e c5 90 55 11 69 48 91 a9 ab c0 25 df ce 62 a7 68 b4 c8 b0 Data Ascii: BLx\|' ]P[fN0>%@'[wa2a=XxEBsJ7<$+B\L*p/3R<3(is)X"k"LC@r\/S@!^gjrrC4e}Ds^OUiH%bh
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: b3 e5 ea a6 0c 02 49 86 1b 2d 21 2a 8d 7e 6f 56 49 5e 5b 06 c6 40 d5 61 8c d3 cc 24 7b 22 02 9e 4e 9e d9 b4 7b de 1f a3 23 22 c6 69 11 b2 66 51 20 22 c0 cd cc 24 a7 90 5a 9b 8a dc 45 02 4d 65 15 c6 c3 26 23 d0 5a 83 5d f0 91 68 84 cc 0b 20 d3 2d be 04 67 98 93 a8 fa 56 d1 e7 2f fa 38 85 02 18 77 17 b8 94 0b b4 00 94 9b 4f 42 10 8e f8 17 fa cb ab e4 0d 5d 97 38 1a 17 31 04 72 c7 28 44 45 be a1 69 67 db 1d 4c f6 91 8e ab 93 44 06 c8 4c f2 45 04 e9 d4 e2 fa 34 33 65 d5 d1 25 df 46 5c 44 dc f2 e8 01 3b 7d cb 17 2a 90 a9 53 a0 a4 c3 ab 56 25 2b 99 09 f9 53 a6 b9 ed c2 7e d4 40 7a 14 dd 66 31 e7 16 d0 03 5e cd 8b 44 4a 45 d2 26 e5 c1 35 50 93 08 0a 09 c5 1d 94 c1 3f 6f 3f b0 db ef fd d7 f5 9d 2d a4 0f 42 bc 73 25 30 7b 02 07 52 ff c3 2c 3c aa 5c 2d 2e 2c c8 43 Data Ascii: I-!~oVI^[@a${"N{#"ifQ "$ZEMe&#Z]h -gV/8wOB]81r(DEigLDLE43e%F\D;}SV%+S~@zf1^DJE&5P?o?-Bs%0{R,<\-.,C
2025-01-10 16:49:25 UTC	802	IN	Data Raw: 75 b1 d4 21 11 f0 81 2a 98 7a 0d 8e 93 96 a0 35 35 1e 9b af 2f 56 0b 44 a1 02 04 50 84 58 e8 4f da 78 0a ce 60 1f 26 50 76 d7 d7 64 ee f4 30 e5 02 5f dd 31 05 04 42 90 10 b4 42 fb ab 26 28 00 9f 17 f3 ea 5f 84 8e d0 fe 4a 10 73 6e 11 91 24 f7 ec 89 08 b6 19 00 b5 80 02 24 02 60 49 68 c0 fe 90 1a 64 c4 b6 8b 83 40 ad 8e c5 dd 99 f3 61 53 23 4b 70 84 b6 c0 6e b8 bb 48 37 22 4c 12 ea 9f ba f4 3f bb ff 1f 8d 4b 98 3d 3b 94 5c b0 e7 59 c0 fa 6a 07 88 f3 7e 78 ee 64 d9 5a 54 6a b3 3b 09 f3 dc 73 3f ec 46 b0 9d e5 b4 86 e0 c8 13 9b cc 40 74 9b 01 f2 90 08 51 10 0a 91 07 40 40 25 66 ce 8f 38 fa ed c0 c8 ee 5b 37 36 6e 7c fa 80 5c f9 e6 41 77 fc 7e a1 17 f2 46 f3 d0 a3 0c c2 06 e1 25 5a 64 22 ed 89 08 10 6a 41 b1 ce 4f 0b 29 c7 92 80 c5 99 48 40 40 44 94 ff 4f 8d Data Ascii: u!*z55/VDPXOx`&Pvd0_1BB&(_Jsn$$`Ihd@aS#KpnH7"L?K=;\Yj~xdZTj;s?F@tQ@@%f8[76n\|\Aw~F%Zd"jAO)H@@DO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49961	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:25 UTC	780	OUT	GET /assets/checkout/img/visa-cvv.jpg HTTP/1.1 Host: cdn.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:25 UTC	869	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:25 GMT Content-Type: image/jpeg Content-Length: 3404 Connection: close Age: 1294 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=3483 etag: "0c525e42cfd28b6bd9b5da1870308fd2" last-modified: Mon, 18 Jan 2021 16:42:51 GMT via: 1.1 be85287d15abd3cfecdfa319493ba256.cloudfront.net (CloudFront) x-amz-cf-id: 11sB1bkUeELccx33FkJRabAZSx1TaDbsWTnmHumEzhYXj7bJAAtRVA== x-amz-cf-pop: JFK52-P2 x-amz-meta-s3b-last-modified: 20210118T164232Z x-amz-meta-sha256: 58f07946c525e281c699683d32423bb696a45144a7b9975f4ac79481a0c33369 x-cache: Hit from cloudfront CF-Cache-Status: HIT Expires: Fri, 10 Jan 2025 20:49:25 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe29058f8bc33f-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:25 UTC	500	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 8e 00 e6 03 01 22 00 02 11 01 03 11 01 ff c4 00 38 00 01 00 02 03 00 03 01 01 00 00 00 00 00 00 00 00 00 06 09 04 07 0a 03 05 08 01 02 01 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 b1 3f 4e 7c fd bc 84 5b 80 00 Data Ascii: JFIF"8?N\|[
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: 42 d7 00 96 4b 20 5e f3 aa eb 52 14 79 9c 87 21 47 84 85 1e 12 14 78 48 51 e1 21 47 84 85 1e 19 7a f6 53 16 e7 39 fd 0d be 74 f7 a7 c2 6f f2 bd 43 33 4a c6 7a 0f a6 34 32 d5 4d f3 a7 b7 0c 5f 42 26 08 00 00 00 00 00 00 00 00 00 00 00 fe 3f bc 9d 7b 94 8d 39 41 50 6f ce 90 51 3a 41 44 e9 05 13 a4 14 4e 90 51 3a 41 44 e9 05 13 a4 14 4e 90 51 3a 41 44 e9 05 13 a4 17 ca f2 58 98 37 9c 37 ff c4 00 2d 10 00 01 01 07 04 00 05 04 03 01 00 00 00 00 00 00 00 04 03 05 06 07 08 17 19 01 02 15 16 10 18 20 38 40 11 12 35 44 13 14 50 70 ff da 00 08 01 01 00 01 08 00 7f 3f 9b 3c 55 34 d8 cf e5 6d dd ae dd 7e ba 43 91 36 e6 5a 6f 60 b7 fd ac 8e d4 49 91 da 89 32 3b 51 26 47 6a 24 c8 ed 44 99 1d a8 93 23 b5 12 64 76 a2 4c 8e d4 49 91 da 89 32 3b 51 26 47 6a 24 c8 ed 44 99 Data Ascii: BK ^Ry!GxHQ!GzS9toC3Jz42M_B&?{9APoQ:ADNQ:ADNQ:ADX77- 8@5DPp?<U4m~C6Zo`I2;Q&Gj$D#dvLI2;Q&Gj$D
2025-01-10 16:49:25 UTC	1369	IN	Data Raw: 48 3e 89 c9 1a 9f a2 e9 a3 85 29 38 5c c9 32 89 eb fa ee b7 2f 3f f4 e4 64 97 7e 57 98 57 6b 53 25 4e a6 8d cc 27 cd bd 44 18 eb e6 48 25 91 a9 8f b4 ad f5 b8 d2 0d 24 69 49 27 32 2d b4 88 56 bc de 91 50 09 5d 22 4d 26 83 a3 d3 08 42 76 2d 11 09 33 36 d9 54 6a 9c 35 a9 94 1a 8e c4 64 f6 1d 99 ac 23 e8 f4 3b 9f 24 67 82 87 15 d6 64 d9 d5 91 1f 65 bd e6 5d e1 a8 8d 14 f1 06 a2 34 53 c4 1a 88 d1 4f 10 6a 23 45 3c 41 a8 8d 14 f1 06 a2 34 53 c4 1a 88 d1 4f 10 6a 23 45 3c 41 a8 8d 14 f1 06 a2 34 53 c4 1a 88 d1 4f 10 6a 23 45 3c 41 a8 8d 14 f1 06 a2 34 53 c4 1a 88 d1 4f 10 6d e4 ad 79 36 1a d2 56 66 51 1f 7f ab a2 7c cc 8e 7a e3 05 0f 12 98 a4 5a db a9 22 22 23 fc 2a f3 25 25 61 a4 cb c5 23 cc 64 29 c4 87 50 8c 28 a7 12 1d 42 30 a2 9c 48 75 08 c2 8a 71 21 d4 23 Data Ascii: H>)8\2/?d~WWkS%N'DH%$iI'2-VP]"M&Bv-36Tj5d#;$gde]4SOj#E<A4SOj#E<A4SOj#E<A4SOmy6VfQ\|zZ""#*%%a#d)P(B0Huq!#
2025-01-10 16:49:25 UTC	166	IN	Data Raw: 79 b5 ce 86 09 27 d4 9b ce 16 9c 7a 0f 6e d9 b3 45 89 1d ce 6b 6d 1d 3f 85 ca 47 ec 2b 94 8f d8 57 29 1f b0 ae 52 3f 61 5c a4 7e c2 b9 48 fd 85 72 91 fb 0a dd f0 df 0a 11 0f 16 1b 7f a0 b6 98 10 37 8b 60 c5 66 d0 c6 d8 c6 b4 87 17 03 6b 45 87 d1 a7 a6 08 ee 38 04 83 cd 42 c7 e2 7f f9 4c dc b0 99 6d dd aa 17 5c ce ff 00 2b 7b 45 84 e7 41 85 09 e1 dc 36 06 92 2d b0 9b 49 e9 6d 9d 3a fc 8c 18 ec 8c c0 e0 af 85 7c 2b e1 5f 0a f8 57 c2 be 15 f0 af 85 7c 2b e1 5f 0a fb 54 5d e4 1a f2 d6 0b 42 ff d9 Data Ascii: y'znEkm?G+W)R?a\~Hr7`fkE8BLm\+{EA6-Im:\|+_W\|+_T]B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49955	151.101.194.133	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:25 UTC	546	OUT	GET /web/3.97.2/js/client.min.js HTTP/1.1 Host: js.braintreegateway.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:25 UTC	822	IN	HTTP/1.1 200 OK Connection: close Content-Length: 38602 Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "650b5a7f-96ca" Last-Modified: Wed, 20 Sep 2023 20:47:59 GMT Paypal-Debug-Id: d989081cbe3ba Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000d989081cbe3ba-1afc57f92bf24ea9-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 10 Jan 2025 16:49:25 GMT X-Served-By: cache-dfw-kdal2120145-DFW, cache-ewr-kewr1740049-EWR X-Cache: HIT, HIT X-Cache-Hits: 4372, 0 X-Timer: S1736527765.362945,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 62 72 61 69 6e Data Ascii: !function(e){var t;"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):((t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).brain
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 65 2c 22 22 2b 74 5b 65 5d 29 7d 29 2c 65 3d 6e 65 77 20 61 2e 50 72 6f 6d 69 73 65 47 6c 6f 62 61 6c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 6e 29 7d 29 2c 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 65 77 20 45 72 72 6f 72 28 72 2e 73 72 63 2b 22 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 2e 22 29 29 7d 29 2c 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 66 75 6e 63 74 69 6f Data Ascii: ys(t).forEach(function(e){n.setAttribute("data-"+e,""+t[e])}),e=new a.PromiseGlobal(function(e,t){n.addEventListener("load",function(){e(n)}),n.addEventListener("error",function(){t(new Error(r.src+" failed to load."))}),n.addEventListener("abort",functio
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 6e 20 74 28 65 29 7d 29 7d 7d 2c 7b 7d 5d 2c 38 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 65 28 22 2e 2f 6c 69 62 2f 64 65 66 65 72 72 65 64 22 29 2c 69 3d 65 28 22 2e 2f 6c 69 62 2f 6f 6e 63 65 22 29 2c 61 3d 65 28 22 2e 2f 6c 69 62 2f 70 72 6f 6d 69 73 65 2d 6f 72 2d 63 61 6c 6c 62 61 63 6b 22 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 5b 5d 2c 72 3d 30 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 74 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 26 Data Ascii: n t(e)})}},{}],8:[function(e,t,r){"use strict";var o=e("./lib/deferred"),i=e("./lib/once"),a=e("./lib/promise-or-callback");function s(n){return function(){for(var e,t=[],r=0;r<arguments.length;r++)t[r]=arguments[r];return"function"==typeof t[t.length-1]&
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 72 6e 20 76 6f 69 64 20 75 28 6e 2e 70 72 6f 6d 69 73 65 2c 65 29 7d 73 28 6e 2e 70 72 6f 6d 69 73 65 2c 65 29 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 74 72 79 7b 69 66 28 65 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 70 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 73 6f 6c 76 65 64 20 77 69 74 68 20 69 74 73 65 6c 66 2e 22 29 3b 69 66 28 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 72 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 64 28 74 29 Data Ascii: rn void u(n.promise,e)}s(n.promise,e)}}))}function s(t,e){try{if(e===t)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var r=e.then;if(e instanceof i)return t._state=3,t._value=e,void d(t)
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6f 28 5b 5d 29 3b 76 61 72 20 73 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 21 66 75 6e 63 74 69 6f 6e 20 74 28 72 2c 65 29 7b 74 72 79 7b 69 66 28 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 6e 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 72 2c 65 29 7d 2c 69 29 7d 61 5b 72 5d 3d 65 2c 30 3d 3d 2d 2d 73 26 26 6f 28 61 29 7d 63 61 74 63 68 28 Data Ascii: ll(t);if(0===a.length)return o([]);var s=a.length;for(var e=0;e<a.length;e++)!function t(r,e){try{if(e&&("object"==typeof e\|\|"function"==typeof e)){var n=e.then;if("function"==typeof n)return void n.call(e,function(e){t(r,e)},i)}a[r]=e,0==--s&&o(a)}catch(
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 3a 22 2c 65 29 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 7b 7d 5d 2c 31 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 75 3d 65 28 22 2e 2f 63 6f 6e 73 74 61 6e 74 73 22 29 2e 42 52 41 49 4e 54 52 45 45 5f 56 45 52 53 49 4f 4e 2c 6e 3d 65 28 22 2e 2f 72 65 71 75 65 73 74 2f 67 72 61 70 68 71 6c 22 29 2c 6f 3d 65 28 22 2e 2f 72 65 71 75 65 73 74 22 29 2c 69 3d 65 28 22 2e 2e 2f 6c 69 62 2f 69 73 2d 76 65 72 69 66 69 65 64 2d 64 6f 6d 61 69 6e 22 29 2c 64 3d 65 28 22 2e 2e 2f 6c 69 62 2f 62 72 61 69 6e 74 72 65 65 2d 65 72 72 6f 72 22 29 2c 70 3d 65 28 22 2e 2e 2f 6c 69 62 2f 63 6f 6e 76 65 72 74 2d 74 6f 2d 62 72 61 69 6e 74 72 65 65 2d 65 72 72 6f 72 22 29 2c 61 3d 65 28 22 2e 2f 67 65 74 2d Data Ascii: :",e)},t.exports=i},{}],10:[function(e,t,r){"use strict";var u=e("./constants").BRAINTREE_VERSION,n=e("./request/graphql"),o=e("./request"),i=e("../lib/is-verified-domain"),d=e("../lib/braintree-error"),p=e("../lib/convert-to-braintree-error"),a=e("./get-
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 5f 47 41 54 45 57 41 59 5f 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 5f 49 4e 56 41 4c 49 44 5f 44 4f 4d 41 49 4e 2e 74 79 70 65 2c 63 6f 64 65 3a 79 2e 43 4c 49 45 4e 54 5f 47 41 54 45 57 41 59 5f 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 5f 49 4e 56 41 4c 49 44 5f 44 4f 4d 41 49 4e 2e 63 6f 64 65 2c 6d 65 73 73 61 67 65 3a 22 67 72 61 70 68 51 4c 2e 75 72 6c 20 70 72 6f 70 65 72 74 79 20 69 73 20 6f 6e 20 61 6e 20 69 6e 76 61 6c 69 64 20 64 6f 6d 61 69 6e 2e 22 7d 29 3b 74 68 69 73 2e 5f 67 72 61 70 68 51 4c 3d 6e 65 77 20 6e 28 7b 67 72 61 70 68 51 4c 3a 72 2e 67 72 61 70 68 51 4c 7d 29 7d 7d 4f 2e 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 2c 65 2c 6e 3d 62 5b 74 2e 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 5d 3b 69 66 Data Ascii: _GATEWAY_CONFIGURATION_INVALID_DOMAIN.type,code:y.CLIENT_GATEWAY_CONFIGURATION_INVALID_DOMAIN.code,message:"graphQL.url property is on an invalid domain."});this._graphQL=new n({graphQL:r.graphQL})}}O.initialize=function(t){var r,e,n=b[t.authorization];if
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 72 65 64 69 74 5f 63 61 72 64 73 22 3d 3d 3d 73 2e 65 6e 64 70 6f 69 6e 74 26 26 63 2e 67 65 74 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 28 29 2e 67 61 74 65 77 61 79 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 63 72 65 64 69 74 43 61 72 64 73 2e 63 6f 6c 6c 65 63 74 44 65 76 69 63 65 44 61 74 61 29 3b 69 66 28 22 67 72 61 70 68 51 4c 41 70 69 22 21 3d 3d 73 2e 61 70 69 26 26 28 73 2e 6d 65 74 68 6f 64 3f 73 2e 65 6e 64 70 6f 69 6e 74 7c 7c 28 74 3d 22 6f 70 74 69 6f 6e 73 2e 65 6e 64 70 6f 69 6e 74 22 29 3a 74 3d 22 6f 70 74 69 6f 6e 73 2e 6d 65 74 68 6f 64 22 29 2c 74 29 74 68 72 6f 77 20 6e 65 77 20 64 28 7b 74 79 70 65 3a 79 2e 43 4c 49 45 4e 54 5f 4f 50 54 49 4f 4e 5f 52 45 51 55 49 52 45 44 2e 74 79 70 65 2c 63 6f 64 65 3a 79 2e 43 4c 49 45 4e 54 5f 4f Data Ascii: redit_cards"===s.endpoint&&c.getConfiguration().gatewayConfiguration.creditCards.collectDeviceData);if("graphQLApi"!==s.api&&(s.method?s.endpoint\|\|(t="options.endpoint"):t="options.method"),t)throw new d({type:y.CLIENT_OPTION_REQUIRED.type,code:y.CLIENT_O
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 4c 49 45 4e 54 5f 41 55 54 48 4f 52 49 5a 41 54 49 4f 4e 5f 49 4e 53 55 46 46 49 43 49 45 4e 54 29 3a 34 32 39 3d 3d 3d 65 3f 72 3d 6e 65 77 20 64 28 79 2e 43 4c 49 45 4e 54 5f 52 41 54 45 5f 4c 49 4d 49 54 45 44 29 3a 35 30 30 3c 3d 65 3f 72 3d 6e 65 77 20 64 28 79 2e 43 4c 49 45 4e 54 5f 47 41 54 45 57 41 59 5f 4e 45 54 57 4f 52 4b 29 3a 28 65 3c 32 30 30 7c 7c 34 30 30 3c 3d 65 29 26 26 28 72 3d 70 28 74 2c 7b 74 79 70 65 3a 79 2e 43 4c 49 45 4e 54 5f 52 45 51 55 45 53 54 5f 45 52 52 4f 52 2e 74 79 70 65 2c 63 6f 64 65 3a 79 2e 43 4c 49 45 4e 54 5f 52 45 51 55 45 53 54 5f 45 52 52 4f 52 2e 63 6f 64 65 2c 6d 65 73 73 61 67 65 3a 79 2e 43 4c 49 45 4e 54 5f 52 45 51 55 45 53 54 5f 45 52 52 4f 52 2e 6d 65 73 73 61 67 65 7d 29 29 3b 69 66 28 72 29 72 65 74 Data Ascii: LIENT_AUTHORIZATION_INSUFFICIENT):429===e?r=new d(y.CLIENT_RATE_LIMITED):500<=e?r=new d(y.CLIENT_GATEWAY_NETWORK):(e<200\|\|400<=e)&&(r=p(t,{type:y.CLIENT_REQUEST_ERROR.type,code:y.CLIENT_REQUEST_ERROR.code,message:y.CLIENT_REQUEST_ERROR.message}));if(r)ret
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 34 31 2c 22 2e 2e 2f 6c 69 62 2f 6d 65 74 68 6f 64 73 22 3a 34 33 2c 22 2e 2e 2f 6c 69 62 2f 6f 6e 63 65 22 3a 34 34 2c 22 2e 2f 63 6f 6e 73 74 61 6e 74 73 22 3a 31 31 2c 22 2e 2f 65 72 72 6f 72 73 22 3a 31 32 2c 22 2e 2f 67 65 74 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 31 33 2c 22 2e 2f 72 65 71 75 65 73 74 22 3a 32 34 2c 22 2e 2f 72 65 71 75 65 73 74 2f 67 72 61 70 68 71 6c 22 3a 32 32 2c 22 40 62 72 61 69 6e 74 72 65 65 2f 77 72 61 70 2d 70 72 6f 6d 69 73 65 22 3a 38 7d 5d 2c 31 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 42 52 41 49 4e 54 52 45 45 5f 56 45 52 53 49 4f 4e 3a 22 32 30 31 38 2d 30 35 2d 31 30 22 7d 7d 2c 7b 7d 5d 2c 31 32 3a 5b 66 75 6e 63 74 69 Data Ascii: 41,"../lib/methods":43,"../lib/once":44,"./constants":11,"./errors":12,"./get-configuration":13,"./request":24,"./request/graphql":22,"@braintree/wrap-promise":8}],11:[function(e,t,r){"use strict";t.exports={BRAINTREE_VERSION:"2018-05-10"}},{}],12:[functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49954	151.101.194.133	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:25 UTC	554	OUT	GET /web/3.97.2/js/data-collector.min.js HTTP/1.1 Host: js.braintreegateway.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:25 UTC	820	IN	HTTP/1.1 200 OK Connection: close Content-Length: 30015 Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "650b5a7f-753f" Last-Modified: Wed, 20 Sep 2023 20:47:59 GMT Paypal-Debug-Id: 7ba4b2435398b Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000007ba4b2435398b-7451ff3e6ac796ef-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 10 Jan 2025 16:49:25 GMT X-Served-By: cache-dfw-ktki8620039-DFW, cache-nyc-kteb1890076-NYC X-Cache: HIT, HIT X-Cache-Hits: 24, 0 X-Timer: S1736527765.371821,VS0,VE3 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 62 72 61 69 6e Data Ascii: !function(t){var e;"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):((e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).brain
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 74 2c 22 22 2b 65 5b 74 5d 29 7d 29 2c 74 3d 6e 65 77 20 73 2e 50 72 6f 6d 69 73 65 47 6c 6f 62 61 6c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 72 29 7d 29 2c 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 6e 65 77 20 45 72 72 6f 72 28 6e 2e 73 72 63 2b 22 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 2e 22 29 29 7d 29 2c 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c Data Ascii: ject.keys(e).forEach(function(t){r.setAttribute("data-"+t,""+e[t])}),t=new s.PromiseGlobal(function(t,e){r.addEventListener("load",function(){t(r)}),r.addEventListener("error",function(){e(new Error(n.src+" failed to load."))}),r.addEventListener("abort",
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 6e 67 74 68 3b 6e 2b 2b 29 65 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 28 74 3d 65 2e 70 6f 70 28 29 2c 74 3d 6f 2e 6f 6e 63 65 28 69 2e 64 65 66 65 72 72 65 64 28 74 29 29 29 2c 73 2e 70 72 6f 6d 69 73 65 4f 72 43 61 6c 6c 62 61 63 6b 28 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 2c 74 29 7d 7d 61 2e 77 72 61 70 50 72 6f 74 6f 74 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 69 3d 28 74 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 29 2e 69 67 6e 6f 72 65 4d 65 74 68 6f 64 73 7c 7c 5b 5d 2c 6f 3d 21 30 3d 3d 3d 74 2e 74 72 61 6e 73 66 6f 72 6d 50 72 69 76 61 74 65 4d 65 74 68 6f 64 73 3b 72 65 74 75 72 Data Ascii: ngth;n++)e[n]=arguments[n];return"function"==typeof e[e.length-1]&&(t=e.pop(),t=o.once(i.deferred(t))),s.promiseOrCallback(r.apply(this,e),t)}}a.wrapPrototype=function(r,t){var i=(t=void 0===t?{}:t).ignoreMethods\|\|[],o=!0===t.transformPrivateMethods;retur
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 20 6e 3d 74 2e 74 68 65 6e 3b 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 65 2e 5f 73 74 61 74 65 3d 33 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 76 6f 69 64 20 68 28 65 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 66 28 28 72 3d 6e 2c 69 3d 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 65 29 7d 65 2e 5f 73 74 61 74 65 3d 31 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 68 28 65 29 7d 63 61 74 63 68 28 74 29 7b 75 28 65 2c 74 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 68 Data Ascii: n=t.then;if(t instanceof o)return e._state=3,e._value=t,void h(e);if("function"==typeof n)return void f((r=n,i=t,function(){r.apply(i,arguments)}),e)}e._state=1,e._value=t,h(e)}catch(t){u(e,t)}var r,i}function u(t,e){t._state=2,t._value=e,h(t)}function h
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 72 6e 20 76 6f 69 64 20 72 2e 63 61 6c 6c 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 6e 2c 74 29 7d 2c 6f 29 7d 73 5b 6e 5d 3d 74 2c 30 3d 3d 2d 2d 61 26 26 69 28 73 29 7d 63 61 74 63 68 28 74 29 7b 6f 28 74 29 7d 7d 28 74 2c 73 5b 74 5d 29 7d 29 7d 2c 6f 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 66 75 6e 63 74 69 6f 6e 28 69 2c 74 29 7b 69 66 28 21 6e 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 6e 2b 22 20 22 2b 6e 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 Data Ascii: rn void r.call(t,function(t){e(n,t)},o)}s[n]=t,0==--a&&i(s)}catch(t){o(t)}}(t,s[t])})},o.allSettled=function(n){return new this(function(i,t){if(!n\|\|void 0===n.length)return t(new TypeError(typeof n+" "+n+" is not iterable(cannot read property Symbol(Symb
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 45 44 22 2c 6d 65 73 73 61 67 65 3a 22 4b 6f 75 6e 74 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 74 68 69 73 20 6d 65 72 63 68 61 6e 74 2e 22 7d 2c 44 41 54 41 5f 43 4f 4c 4c 45 43 54 4f 52 5f 4b 4f 55 4e 54 5f 45 52 52 4f 52 3a 7b 74 79 70 65 3a 74 2e 74 79 70 65 73 2e 4d 45 52 43 48 41 4e 54 2c 63 6f 64 65 3a 22 44 41 54 41 5f 43 4f 4c 4c 45 43 54 4f 52 5f 4b 4f 55 4e 54 5f 45 52 52 4f 52 22 7d 2c 44 41 54 41 5f 43 4f 4c 4c 45 43 54 4f 52 5f 52 45 51 55 49 52 45 53 5f 43 52 45 41 54 45 5f 4f 50 54 49 4f 4e 53 3a 7b 74 79 70 65 3a 74 2e 74 79 70 65 73 2e 4d 45 52 43 48 41 4e 54 2c 63 6f 64 65 3a 22 44 41 54 41 5f 43 4f 4c 4c 45 43 54 4f 52 5f 52 45 51 55 49 52 45 53 5f 43 52 45 41 54 45 5f 4f 50 54 49 4f 4e 53 22 2c 6d 65 73 73 61 67 65 Data Ascii: ED",message:"Kount is not enabled for this merchant."},DATA_COLLECTOR_KOUNT_ERROR:{type:t.types.MERCHANT,code:"DATA_COLLECTOR_KOUNT_ERROR"},DATA_COLLECTOR_REQUIRES_CREATE_OPTIONS:{type:t.types.MERCHANT,code:"DATA_COLLECTOR_REQUIRES_CREATE_OPTIONS",message
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 66 72 61 6d 65 5b 74 69 74 6c 65 3d 22 70 70 66 6e 69 66 72 61 6d 65 22 5d 27 29 29 2c 75 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 66 72 61 6d 65 5b 74 69 74 6c 65 3d 22 70 62 66 22 5d 27 29 29 2c 75 28 74 68 69 73 2e 5f 70 61 72 61 6d 65 74 65 72 42 6c 6f 63 6b 29 2c 75 28 74 68 69 73 2e 5f 74 68 69 72 64 50 61 72 74 79 42 6c 6f 63 6b 29 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6e 65 77 20 72 3b 72 65 74 75 72 6e 21 28 74 3d 74 7c 7c 7b 7d 29 2e 73 65 73 73 69 6f 6e 49 64 26 26 69 3f 28 65 2e 73 65 73 73 69 6f 6e 49 64 3d 69 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 65 29 29 3a 65 2e 69 6e 69 74 Data Ascii: uerySelector('iframe[title="ppfniframe"]')),u(document.querySelector('iframe[title="pbf"]')),u(this._parameterBlock),u(this._thirdPartyBlock)},e.exports={setup:function(t){var e=new r;return!(t=t\|\|{}).sessionId&&i?(e.sessionId=i,Promise.resolve(e)):e.init
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 69 3d 65 2e 64 65 76 69 63 65 44 61 74 61 2c 6f 2e 5f 69 6e 73 74 61 6e 63 65 73 2e 70 75 73 68 28 65 29 7d 65 6c 73 65 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 2e 73 65 74 75 70 28 7b 73 65 73 73 69 6f 6e 49 64 3a 72 2e 72 69 73 6b 43 6f 72 72 65 6c 61 74 69 6f 6e 49 64 7c 7c 72 2e 63 6c 69 65 6e 74 4d 65 74 61 64 61 74 61 49 64 7c 7c 72 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 2c 65 6e 76 69 72 6f 6e 6d 65 6e 74 3a 74 2e 67 65 74 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 28 29 2e 67 61 74 65 77 61 79 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e Data Ascii: i=e.deviceData,o._instances.push(e)}else i={};return Promise.resolve(t)}).then(function(t){return a.setup({sessionId:r.riskCorrelationId\|\|r.clientMetadataId\|\|r.correlationId,environment:t.getConfiguration().gatewayConfiguration.environment}).then(function
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 67 61 74 65 77 61 79 2e 63 6f 6d 2f 64 61 74 61 22 7d 2c 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 76 61 72 20 65 3d 61 2e 67 65 74 43 61 63 68 65 64 44 65 76 69 63 65 44 61 74 61 28 74 2e 6d 65 72 63 68 61 6e 74 49 64 29 3b 65 3f 28 74 68 69 73 2e 64 65 76 69 63 65 44 61 74 61 3d 65 2c 74 68 69 73 2e 5f 69 73 43 61 63 68 65 64 3d 21 30 29 3a 28 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 3d 74 68 69 73 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 45 6e 76 69 72 6f 6e 6d 65 6e 74 28 74 29 2c 72 2e 72 61 6e 64 6f 6d 2e 73 74 61 72 74 43 6f 6c 6c 65 63 74 6f 72 73 28 29 2c 74 68 69 73 2e 5f 64 65 76 69 63 65 53 65 73 73 69 6f 6e 49 64 3d 74 68 69 73 2e 5f 67 65 6e 65 72 61 74 65 44 65 76 69 63 65 53 65 73 73 69 6f 6e 49 64 Data Ascii: gateway.com/data"},s={};function a(t){var e=a.getCachedDeviceData(t.merchantId);e?(this.deviceData=e,this._isCached=!0):(this._currentEnvironment=this._initializeEnvironment(t),r.random.startCollectors(),this._deviceSessionId=this._generateDeviceSessionId
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 65 6e 74 2e 75 72 6c 2b 22 2f 6c 6f 67 6f 2e 68 74 6d 22 2b 65 2c 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 69 6d 67 20 73 72 63 3d 22 27 2b 74 2e 5f 63 75 72 72 65 6e 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 2e 75 72 6c 2b 22 2f 6c 6f 67 6f 2e 67 69 66 22 2b 65 2b 27 22 20 61 6c 74 3d 22 22 20 2f 3e 27 7d 2c 31 30 29 2c 6e 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 45 6e 76 69 72 6f 6e 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6f 5b 74 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 74 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 66 6f 72 20 6b 6f Data Ascii: ent.url+"/logo.htm"+e,n.innerHTML='<img src="'+t._currentEnvironment.url+"/logo.gif"+e+'" alt="" />'},10),n},a.prototype._initializeEnvironment=function(t){var e=o[t.environment];if(null==e)throw new Error(t.environment+" is not a valid environment for ko

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49953	151.101.194.133	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:25 UTC	555	OUT	GET /web/3.97.2/js/paypal-checkout.min.js HTTP/1.1 Host: js.braintreegateway.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:25 UTC	819	IN	HTTP/1.1 200 OK Connection: close Content-Length: 59638 Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "650b5a7f-e8f6" Last-Modified: Wed, 20 Sep 2023 20:47:59 GMT Paypal-Debug-Id: 2c0c2b3cca202 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000002c0c2b3cca202-155deabc1ae28470-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 10 Jan 2025 16:49:25 GMT X-Served-By: cache-dfw-kdfw8210151-DFW, cache-nyc-kteb1890047-NYC X-Cache: HIT, HIT X-Cache-Hits: 5, 0 X-Timer: S1736527765.374661,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 62 72 61 69 6e Data Ascii: !function(e){var t;"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):((t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).brain
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 65 2c 22 22 2b 74 5b 65 5d 29 7d 29 2c 65 3d 6e 65 77 20 73 2e 50 72 6f 6d 69 73 65 47 6c 6f 62 61 6c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 6e 29 7d 29 2c 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 65 77 20 45 72 72 6f 72 28 72 2e 73 72 63 2b 22 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 2e 22 29 29 7d 29 2c 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 Data Ascii: Object.keys(t).forEach(function(e){n.setAttribute("data-"+e,""+t[e])}),e=new s.PromiseGlobal(function(e,t){n.addEventListener("load",function(){e(n)}),n.addEventListener("error",function(){t(new Error(r.src+" failed to load."))}),n.addEventListener("abort
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 6e 28 65 29 26 26 2f 5c 62 47 53 41 5c 62 2f 2e 74 65 73 74 28 65 29 7d 7d 2c 7b 22 2e 2f 69 73 2d 69 6f 73 22 3a 31 32 7d 5d 2c 31 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 22 2e 2f 69 73 2d 69 6f 73 22 29 2c 69 3d 65 28 22 2e 2f 69 73 2d 69 6f 73 2d 67 6f 6f 67 6c 65 2d 73 65 61 72 63 68 2d 61 70 70 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 21 21 6e 28 65 Data Ascii: exports=function(e){return e=e\|\|window.navigator.userAgent,n(e)&&/\bGSA\b/.test(e)}},{"./is-ios":12}],10:[function(e,t,r){"use strict";var n=e("./is-ios"),i=e("./is-ios-google-search-app");t.exports=function(e){return e=e\|\|window.navigator.userAgent,!!n(e
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 73 2d 69 6f 73 2d 66 69 72 65 66 6f 78 22 29 2c 6f 3d 65 28 22 2e 2f 69 73 2d 69 6f 73 2d 77 65 62 76 69 65 77 22 29 2c 73 3d 65 28 22 2e 2f 69 73 2d 63 68 72 6f 6d 65 22 29 2c 61 3d 65 28 22 2e 2f 69 73 2d 73 61 6d 73 75 6e 67 22 29 2c 63 3d 65 28 22 2e 2f 69 73 2d 64 75 63 6b 64 75 63 6b 67 6f 22 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 2d 31 3c 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2e 69 6e 64 65 78 4f 66 28 22 4f 70 65 72 61 20 4d 69 6e 69 22 29 7d 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 21 28 6f 28 65 29 7c 7c 69 28 65 29 7c Data Ascii: s-ios-firefox"),o=e("./is-ios-webview"),s=e("./is-chrome"),a=e("./is-samsung"),c=e("./is-duckduckgo");function u(e){return-1<(e=e\|\|window.navigator.userAgent).indexOf("Opera Mini")}t.exports=function(e){return e=e\|\|window.navigator.userAgent,!(o(e)\|\|i(e)\|
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 65 29 7d 2c 69 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 65 29 7d 2c 69 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 65 29 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 5b 5d 2c 72 3d 30 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 74 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 28 65 3d 74 68 69 73 2e 5f 70 72 6f 6d 69 73 65 29 2e 74 68 Data Ascii: ce=function(e){return i.Promise.race(e)},i.reject=function(e){return i.Promise.reject(e)},i.resolve=function(e){return i.Promise.resolve(e)},i.prototype.then=function(){for(var e,t=[],r=0;r<arguments.length;r++)t[r]=arguments[r];return(e=this._promise).th
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 65 73 6f 6c 76 65 3d 28 65 3d 65 7c 7c 7b 7d 29 2e 6f 6e 52 65 73 6f 6c 76 65 7c 7c 69 2e 64 65 66 61 75 6c 74 4f 6e 52 65 73 6f 6c 76 65 2c 74 68 69 73 2e 5f 6f 6e 52 65 6a 65 63 74 3d 65 2e 6f 6e 52 65 6a 65 63 74 7c 7c 69 2e 64 65 66 61 75 6c 74 4f 6e 52 65 6a 65 63 74 2c 69 2e 73 68 6f 75 6c 64 43 61 74 63 68 45 78 63 65 70 74 69 6f 6e 73 28 65 29 26 26 74 68 69 73 2e 5f 70 72 6f 6d 69 73 65 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 74 68 69 73 2e 5f 72 65 73 65 74 53 74 61 74 65 28 29 29 7d 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 7b 7d 5d 2c 32 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 22 2e 2f 6c 69 62 2f 73 65 74 2d 61 74 74 72 69 62 75 74 65 73 22 29 Data Ascii: esolve=(e=e\|\|{}).onResolve\|\|i.defaultOnResolve,this._onReject=e.onReject\|\|i.defaultOnReject,i.shouldCatchExceptions(e)&&this._promise.catch(function(){}),this._resetState())}t.exports=n},{}],22:[function(e,t,r){"use strict";var n=e("./lib/set-attributes")
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 2c 32 36 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 78 78 78 78 78 78 78 78 2d 78 78 78 78 2d 34 78 78 78 2d 79 78 78 78 2d 78 78 78 78 78 78 78 78 78 78 78 78 22 2e 72 65 70 6c 61 63 65 28 2f 5b 78 79 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 3b 72 65 74 75 72 6e 28 22 78 22 3d 3d 3d 65 3f 74 3a 33 26 74 7c 38 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 29 7d 7d 2c 7b 7d 5d 2c 32 37 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c Data Ascii: ,26:[function(e,t,r){"use strict";t.exports=function(){return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(e){var t=16*Math.random()\|0;return("x"===e?t:3&t\|8).toString(16)})}},{}],27:[function(e,t,r){"use strict";Object.defineProperty(r,
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 72 74 79 4e 61 6d 65 73 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 21 3d 3d 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 2c 72 3d 2d 31 3d 3d 3d 69 2e 69 6e 64 65 78 4f 66 28 65 29 2c 65 3d 6f 7c 7c 22 5f 22 21 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 3b 72 65 74 75 72 6e 20 74 26 26 65 26 26 72 7d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 3d 61 28 74 29 7d 29 2c 6e 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 61 7d 2c 7b 22 2e 2f 6c 69 62 2f 64 65 66 65 72 72 65 64 Data Ascii: rtyNames(n.prototype).filter(function(e){var t="constructor"!==e&&"function"==typeof n.prototype[e],r=-1===i.indexOf(e),e=o\|\|"_"!==e.charAt(0);return t&&e&&r}).forEach(function(e){var t=n.prototype[e];n.prototype[e]=a(t)}),n},t.exports=a},{"./lib/deferred
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 72 20 69 3d 28 30 2c 61 2e 70 61 63 6b 61 67 65 50 61 79 6c 6f 61 64 29 28 65 2c 6e 2c 74 2c 72 29 3b 72 65 74 75 72 6e 21 21 69 26 26 28 74 68 69 73 2e 6c 69 6d 69 74 42 72 6f 61 64 63 61 73 74 54 6f 46 72 61 6d 65 73 41 72 72 61 79 3f 74 68 69 73 2e 74 61 72 67 65 74 46 72 61 6d 65 73 41 73 57 69 6e 64 6f 77 73 28 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 30 2c 61 2e 73 65 6e 64 4d 65 73 73 61 67 65 29 28 65 2c 69 2c 6e 29 7d 29 3a 28 30 2c 61 2e 62 72 6f 61 64 63 61 73 74 29 28 69 2c 7b 6f 72 69 67 69 6e 3a 6e 2c 66 72 61 6d 65 3a 77 69 6e 64 6f 77 2e 74 6f 70 7c 7c 77 69 6e 64 6f 77 2e 73 65 6c 66 7d 29 2c 21 30 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6d 69 74 41 73 50 72 6f 6d 69 73 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: r i=(0,a.packagePayload)(e,n,t,r);return!!i&&(this.limitBroadcastToFramesArray?this.targetFramesAsWindows().forEach(function(e){(0,a.sendMessage)(e,i,n)}):(0,a.broadcast)(i,{origin:n,frame:window.top\|\|window.self}),!0)},o.prototype.emitAsPromise=function(
2025-01-10 16:49:25 UTC	1379	IN	Data Raw: 44 65 73 74 72 6f 79 65 64 29 7b 74 68 69 73 2e 69 73 44 65 73 74 72 6f 79 65 64 3d 21 30 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 3b 74 68 69 73 2e 6f 66 66 28 74 2e 65 76 65 6e 74 4e 61 6d 65 2c 74 2e 68 61 6e 64 6c 65 72 29 7d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 2e 6c 65 6e 67 74 68 3d 30 7d 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 73 73 65 73 56 65 72 69 66 79 44 6f 6d 61 69 6e 43 68 65 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 76 65 72 69 66 79 44 6f 6d 61 69 6e 7c 7c 74 68 69 73 2e 63 68 65 63 6b 4f 72 69 67 69 6e 28 65 29 7d 2c 6f 2e 70 72 6f 74 Data Ascii: Destroyed){this.isDestroyed=!0;for(var e=0;e<this.listeners.length;e++){var t=this.listeners[e];this.off(t.eventName,t.handler)}this.listeners.length=0}},o.prototype.passesVerifyDomainCheck=function(e){return!this.verifyDomain\|\|this.checkOrigin(e)},o.prot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49963	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:25 UTC	593	OUT	GET /images/buygoodslogonew.png HTTP/1.1 Host: buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:26 UTC	585	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:25 GMT Content-Type: image/png Content-Length: 5198 Connection: close Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=22484 Vary: Accept cache-control: public, max-age=315360000 etag: "5f1b2b58-57d4" expires: Mon, 08 Jan 2035 16:49:25 GMT last-modified: Fri, 24 Jul 2020 18:41:28 GMT strict-transport-security: max-age=15552000; includeSubDomains x-frame-options: SAMEORIGIN x-server: WEB_2 CF-Cache-Status: HIT Age: 8528 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe29091bcb18ee-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	784	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b4 00 00 00 3c 08 06 00 00 00 cf 2e 90 87 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 13 e9 49 44 41 54 78 da ed 9c 09 78 53 c5 da c7 4f 5b 68 cb 52 28 a2 80 ec 7c a5 4b 92 b6 29 20 02 65 6f a1 3b 7a 11 64 47 59 4a d3 a6 a5 0a 08 16 2d fb a6 28 e2 f2 89 57 14 17 50 36 05 2e d0 25 20 d7 2b 2a a0 02 5e 90 c5 0d 65 af 88 80 0a b8 b0 99 ef 17 bf 73 bd e9 e9 cc 49 5a 8b b7 f7 f1 bc cf f3 7b 26 cd cc bc 99 26 ff f3 9e 99 77 26 51 0c 33 cc 30 c3 0c 33 cc 30 c3 0c 33 cc 30 c3 0c 33 cc 30 c3 0c 33 cc 30 c3 0c 33 cc 30 c3 0c 33 cc 30 c3 3c 5b f8 88 f9 01 03 ec 73 5a e6 2f 5a 13 fe e0 d3 af 87 75 bc 63 42 78 64 42 66 Data Ascii: PNGIHDR<. cHRMz%u0`:o_FIDATxxSO[hR(\|K) eo;zdGYJ-(WP6.% +*^esIZ{&&w&Q30303030303030<[sZ/ZucBxdBf
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 71 73 71 45 0a 3e 88 f6 30 15 36 c0 3e 38 0b 97 e0 0a fc 08 c7 e1 1d 78 04 da 79 21 3c 13 cc 87 b7 e1 1b 77 31 f0 c1 fe 0a 8f 8f 41 01 a4 7b e1 2f 18 6c b0 11 8e b8 fa 23 66 ed 14 e0 1b d8 0a d3 a1 91 07 7f f5 60 22 6c 86 33 6e 63 72 71 15 f6 c0 44 b5 6d 1a 5c 13 44 e8 f6 6e fe 6e 84 7c 70 c0 11 70 ba a3 8e f5 02 7c 00 8f 41 f8 f5 12 73 35 98 23 10 eb 46 c4 94 c2 87 bf 57 5b 27 e0 3c c2 79 40 51 ad 4d 6a b6 9f 4b 70 a5 db d8 9d d6 3e f7 ee 96 a6 85 6e cb ad 4e bb 5d 1a bf bf 30 86 2c 7c 17 94 79 cd 24 04 df 2f ef 3e 99 3f 73 2f 5b 28 17 d1 31 6d 3f a2 f3 aa 98 94 9c 3a bf b5 9b f4 6a 90 69 de a6 27 78 83 0f 81 d3 4b 3e 87 6c 1d b1 8c 86 fd e5 f0 77 09 16 e9 f8 8b 85 7f c0 95 72 f8 dc 04 26 89 bf f6 b0 cd 0b 1f 57 c1 0e 63 05 75 a7 a1 b6 1a e5 3b f1 78 07 Data Ascii: qsqE>06>8xy!<w1A{/l#f`"l3ncrqDm\Dnn\|pp\|As5#FW['<y@QMjKp>nN]0,\|y$/>?s/[(1m?:ji'xK>lwr&Wcu;x
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: ea 5e d5 f5 87 10 e1 4d 41 bf 85 ae 3b 0f e5 cf 5e a6 38 0b 60 3a f4 e1 7d bc 7e e2 26 02 d6 41 34 9f 0b b2 01 73 a3 92 ec d5 75 fb 0e 9a b2 44 20 e8 ad d0 01 de d3 e6 93 21 47 27 da 4f 27 da 6b 85 f8 4f 52 81 e1 6e a2 cf d6 66 3a e0 2c e3 4f 51 a7 4f 75 78 7c b0 ec b4 24 e7 df 8b a2 05 6f b9 a6 1b bb 05 d3 8d 03 a6 e9 eb 2d 8a 8e b1 2b d7 83 0f e3 9c 60 fe 99 26 99 4b 2e 82 1a 3a 62 89 17 44 bf 0b 60 87 a9 02 7f 25 50 d3 83 00 3f 96 08 7a 02 7c 2f 78 ad c1 1e fc 35 82 f7 04 3e 27 41 35 58 0b ce 72 70 11 b6 70 97 1c 6f 9e f0 b2 6f e5 0b 3a d1 1e 56 26 ea 81 25 c1 8e 48 f4 0d 11 16 09 a6 1c 6f 23 bc be 94 5f 69 a7 0f 44 ee 64 e9 38 fa 4e 7a 55 eb cb 9a 98 b5 39 32 2e 3d d0 ed e2 4b e0 f9 0b da 54 20 db da 83 d5 fa 2c fe be ac a9 3f 46 d4 36 bb 45 e7 c6 92 Data Ascii: ^MA;^8`:}~&A4suD !G'O'kORnf:,OQOux\|$o-+`&K.:bD`%P?z\|/x5>'A5Xrppoo:V&%Ho#_iDd8NzU92.=KT ,?F6E
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 3f 4e 1a 29 a6 ae ad c1 e6 83 a7 d3 66 fb e0 43 b8 aa df ce 71 d2 3c 65 4d 30 82 6e a9 77 4e 19 41 1f a7 dc ed e1 48 69 a1 5b c4 bd 01 36 ea 64 07 2e 51 be eb e1 fc 76 09 58 34 19 95 6b 3a ed f7 c3 76 f9 62 0e f1 4d df 50 cc 1d e6 46 75 43 e5 94 ce c1 ae 4d 88 75 11 3c c1 e3 a5 c2 bc 3f 20 f4 9d e6 7b 5f 08 56 2a d3 cc b9 8b 7d c9 f7 16 c8 05 a2 0f 22 fd 39 7a c4 bc 61 9a c3 4e 77 e9 f6 4b d5 f5 f9 2d 47 45 63 75 4e e4 f9 72 07 d8 a5 d3 ff b0 b9 77 46 b0 87 dd 34 b6 64 45 b7 7c 39 12 71 17 23 ae 5a 94 7e c2 53 6c de b3 1f 4a e5 83 39 3c 35 ec 77 1c 6b bd 06 43 34 53 88 a6 5e 7d e1 40 7e 11 ed 36 3f b0 3a d4 ed 4e a7 ae 01 2a cc 71 7c 74 54 ae 87 71 b8 27 42 f2 f5 2a 7d 92 32 8f 44 0d 9f dd 4f eb 0f 41 d6 21 0b f2 64 05 ce 52 1f a3 d4 3d 1b 4b 1b 3f da bc Data Ascii: ?N)fCq<eM0nwNAHi[6d.QvX4k:vbMPFuCMu<? {_V}"9zaNwK-GEcuNrwF4dE\|9q#Z~SlJ9<5wkC4S^}@~6?:Nq\|tTq'B*}2DOA!dR=K?
2025-01-10 16:49:26 UTC	307	IN	Data Raw: d0 ae 63 32 f1 b1 14 1f 7b c3 7b d8 4e b6 ee 9c ee 6c d5 fe ae cb 61 dd 33 26 f3 9e 84 2a 86 55 7d e3 e4 5e 00 82 ae 8f 98 6f 70 a1 a6 ec 2a 2d 35 c6 c2 af 0e db e0 21 e4 73 5d e2 ce 86 3c 18 07 77 40 2c dc 0c b5 7f d7 94 20 de e6 8b 88 1b 5b 7a 65 dd d9 aa d3 a8 15 88 f2 14 51 db c9 c2 ed 02 42 3d 4b 34 3f 45 59 d2 ec d6 bb 4b 5a 77 1d 73 82 b6 25 70 b2 55 e7 51 27 9b b4 bf fb 64 48 e7 f4 d3 cd 3b 8c f8 b6 55 ec a8 1f e8 eb 84 13 e1 5d d3 5f 89 ba 33 bf 7f c8 90 87 9a 86 c6 8e 30 7e 8c de 30 e9 c6 85 af 0b e5 3a 59 8b 0e 23 fd cd 71 59 75 d8 3d 6d 1e d6 7d 4c cf e6 b7 8e 78 00 c1 fe d5 9a 94 bd 94 af ae 2d e3 6b 64 ab c2 bb d9 56 99 e3 32 57 5b 59 ec 72 17 da 42 bb c5 cd 6e 19 f1 b0 29 3e 73 28 47 62 43 11 74 2d 04 ed af 18 66 98 61 86 19 66 98 61 86 19 Data Ascii: c2{{Nla3&U}^op-5!s]<w@, [zeQB=K4?EYKZws%pUQ'dH;U]_30~0:Y#qYu=m}Lx-kdV2W[YrBn)>s(GbCt-fafa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49962	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:25 UTC	780	OUT	GET /assets/checkout/img/amex-cvv.jpg HTTP/1.1 Host: cdn.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:26 UTC	869	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:25 GMT Content-Type: image/jpeg Content-Length: 7274 Connection: close Age: 1294 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=7625 etag: "62e5dff3893a6d87c78d41fb91df4d6e" last-modified: Mon, 18 Jan 2021 16:42:51 GMT via: 1.1 c723324ff3815a0e30df3eecba242152.cloudfront.net (CloudFront) x-amz-cf-id: WttOG2JTmPMT-OThIfbhFJufrU84c5OkKw8d1inCCDw6s1l8Zh0bCQ== x-amz-cf-pop: JFK52-P2 x-amz-meta-s3b-last-modified: 20210118T164236Z x-amz-meta-sha256: 393fb32832435cd5d675a87dea3cd38c46eb46ec60c010b5c54555e9a8bbedeb x-cache: Hit from cloudfront CF-Cache-Status: HIT Expires: Fri, 10 Jan 2025 20:49:25 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe29092f926a5c-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	500	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 8e 00 e6 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 01 00 03 01 00 03 01 01 00 00 00 00 00 00 00 00 00 05 07 08 06 03 04 09 02 01 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 de fc b4 73 de f8 c9 14 72 f9 c8 a3 Data Ascii: JFIF"6sr
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 3b 72 07 a9 f1 60 57 bf b9 2a d3 2e 89 ef 6e a9 ba 6b 7f c7 a1 cc 73 69 d3 3c 7f 61 05 af 2f 96 aa 8e e3 72 ea bd ff 00 b2 74 c5 b3 b9 21 b3 16 81 ae 93 7d fe 49 b3 e6 b7 57 1b d9 70 ba 61 19 cd f3 30 38 76 5e 6a df cb 6c e4 ba ba 32 d1 8b f7 5d 85 2b 75 6b cc 17 c8 0a f7 dc ed 95 d2 ad fd d9 e8 9e 27 d0 b1 53 0e 47 ae 4d 6b fe 5a e9 56 fc 37 bd d5 a6 b1 3c 8d 88 38 48 ab 41 12 17 ce 02 bb b8 d5 d3 88 76 e4 53 7d 25 80 8b 73 1d 39 6c c2 63 c7 e4 9d a6 70 eb b2 55 ab 4c 6c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6b ec 44 f6 eb 5d c5 eb 7f ff c4 00 3a 10 00 01 04 01 03 03 03 01 05 04 09 05 00 00 00 00 04 02 03 05 06 01 00 07 54 13 15 16 11 12 14 56 20 36 37 40 74 21 23 24 25 10 22 31 34 35 38 44 Data Ascii: ;r`W*.nksi<a/rt!}IWpa08v^jl2]+uk'SGMkZV7<8HAvS}%s9lcpULlj,j,j,j,j,j,j,j,j,j,j,kD]:TV 67@t!#$%"1458D
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 91 ca fc 58 e8 a5 c7 17 18 a6 54 c9 70 11 bb 3d 3f 9a f4 16 5f b1 2c 39 38 d1 de 42 19 da 1a dc ad 4e 8c 14 7c bb b9 51 48 ca b3 86 63 3f 13 65 bf 4b 8f cb a9 b9 5a 9c ec 91 03 47 2a 48 53 57 d4 d7 99 cc 7d 32 56 bc ce 63 e9 92 b5 e6 73 1f 4c 95 af 33 98 fa 64 ad 79 9c c7 d3 24 ea ab 1e 79 13 87 4d 1e 3f c3 53 e8 c3 68 67 ec 58 6e 8c d7 4c 40 ee 45 cb 9b 95 23 df d4 8d ba 83 2f 5f 26 58 56 0d 75 b1 96 b6 9d 1a 33 72 e3 a4 65 84 8e 58 12 d1 cf 97 9c a5 9c cd 5f 98 84 91 74 35 c3 ce 14 a6 fd 3f 7a 9b b0 2f 55 d8 9e 15 83 4f 0d ff 00 4f 62 20 37 04 09 f9 6e da 91 24 a3 cc cb 59 79 0d ea cd 67 62 ac 22 08 7c 43 8b 6d 59 ce 33 a8 69 66 27 62 43 91 17 dd 91 8a 69 2f 37 a7 b7 6a 30 3f eb 17 15 3a 10 f8 56 12 a2 6c 76 d6 ab 4e 32 87 23 a5 0e cb b8 ce 7d 6b 97 10 Data Ascii: XTp=?_,98BN\|QHc?eKZG*HSW}2VcsL3dy$yM?ShgXnL@E#/_&XVu3reX_t5?z/UOOb 7n$Yygb"\|CmY3if'bCi/7j0?:VlvN2#}k
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: d3 ba 83 48 5d d9 aa e1 1c 49 31 c3 07 ce b1 8c 30 a4 95 10 99 4c af 9f 11 3b f2 ac 1e 1d 80 30 e6 ee 20 6d 90 64 11 bd 2f 08 ca 56 6f 89 47 0e a4 89 d7 6d 8d 16 d2 48 72 c5 9f a5 17 08 81 cf 95 1c 22 5e 56 22 df ac b2 76 dc 6d ee d2 9a 5a 54 95 21 22 6f d0 98 91 ca b2 d2 9b 52 16 a1 66 80 4e 80 ef f6 7c 6b 29 3e a2 f4 8f 59 74 4e fe 3d f4 10 9e 12 a4 a4 93 74 49 dc f3 a7 5a 6d 68 42 78 78 8d e3 61 24 f2 ac 1e 1f 0e 1c 56 90 0c a6 4e 84 83 49 61 29 0f a5 c3 6a 49 4a 40 12 3f 73 22 8e 15 95 24 15 14 ec 9b 62 13 77 84 c5 32 c2 1a 5b 04 25 47 50 9f c3 cf be b1 78 3c 3e a1 20 10 66 06 9a c7 95 21 94 94 ba 8d 78 ad 50 23 c3 ca 98 c3 61 af 7d 3c d2 2d 33 a8 ee ac 4e 11 0b f9 4f de 2b 5e d3 a1 fc c3 4a 64 a5 d6 92 82 74 7a 13 23 b8 7b 4f 95 21 b6 b0 ef 61 3b 95 Data Ascii: H]I10L;0 md/VoGmHr"^V"vmZT!"oRfN\|k)>YtN=tIZmhBxxa$VNIa)jIJ@?s"$bw2[%GPx<> f!xP#a}<-3NO+^Jdtz#{O!a;
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 28 ee 49 51 24 ec 3d df d7 05 3b 22 d5 1d ca 48 ef ee ac de 95 9b d2 b3 7a 56 6f 4a cd e9 59 bd 2b 37 a5 66 f4 ac de 95 9b d2 b3 7a 56 6f 4a cd e9 59 bd 2b 37 a5 66 f4 ac de 95 9b d2 b3 7a 56 6f 4a cd e9 59 bd 2b 37 a5 66 f4 ac de 95 9b d2 94 e1 8f ed 48 1e ad b4 ef 02 7f bd 7f ff c4 00 2a 10 01 01 00 02 01 04 02 01 03 03 05 00 00 00 00 00 01 11 00 21 31 41 c1 f0 f1 51 61 71 10 20 40 50 81 a1 30 60 91 b1 e1 ff da 00 08 01 01 00 01 3f 10 70 66 b6 31 cb 79 0f 89 9e 4b df 3c 97 be 79 2f 7c f2 5e f9 e4 bd f3 c9 7b e7 92 f7 cf 25 ef 9e 4b df 3c 97 be 79 2f 7c f2 5e f9 e4 bd f3 c9 7b e7 92 f7 cf 25 ef 9e 4b df 3c 97 be 79 2f 7c f2 5e f9 e4 bd f3 c9 7b e7 92 f7 cf 25 ef 9e 4b df 3c 97 be 1e 01 3c 79 c3 45 59 89 16 47 ef 7f d7 41 90 02 aa c0 32 0b 1d a2 e0 20 57 Data Ascii: (IQ$=;"HzVoJY+7fzVoJY+7fzVoJY+7fH*!1AQaq @P0`?pf1yK<y/\|^{%K<y/\|^{%K<y/\|^{%K<<yEYGA2 W
2025-01-10 16:49:26 UTC	1298	IN	Data Raw: d4 c0 03 51 0b 8c 06 34 9b bc fc e0 c0 bc aa 34 43 07 4d a6 08 45 be 0b 6d b1 03 91 43 78 b8 a8 08 5a 66 2a 4b 3a fe a2 04 3b 1d 93 25 02 06 85 67 39 73 ed 24 e5 94 8a aa 11 be 33 87 74 9e 00 06 08 09 66 9a d1 9b 64 6a 7c 10 26 40 81 66 da de 46 f1 71 3b 65 60 82 0c 6b 8c bd d0 3d 9e cb 2a aa 0d 8a ce 70 80 28 0a 40 a8 20 55 74 0e 9f d0 08 9d 04 c7 93 eb f9 81 56 40 1a fe 67 9c e3 5c 4e ec 14 23 05 b5 68 55 39 82 84 6a 6b 96 7d db 3e ed 9f 76 cf bb 67 dd b3 ee d9 f7 6c fb b6 7d db 3e ed 9f 76 cf bb 67 dd b3 ee d9 f7 6c fb b6 7d db 3e ed 9f 76 cf bb 67 dd b3 ee d9 f7 6c fb b6 7d db 2a 41 74 11 fb 99 60 f8 a3 ad 11 ec aa 0a b7 a0 e9 bf ff c4 00 32 11 00 02 02 01 03 03 02 04 01 0d 00 00 00 00 00 00 01 02 00 11 12 03 21 51 04 13 31 10 41 05 61 92 d1 a1 14 15 Data Ascii: Q44CMEmCxZfK:;%g9s$3tfdj\|&@fFq;e`k=p(@ UtV@g\N#hU9jk}>vgl}>vgl}>vgl}*At`2!Q1Aa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49964	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:25 UTC	783	OUT	GET /assets/checkout/img/trust-guard.png HTTP/1.1 Host: cdn.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:26 UTC	954	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: image/webp Content-Length: 3376 Connection: close Age: 1256 Cf-Bgj: imgq:100,h2pri Cf-Polished: origFmt=png, origSize=5327 Content-Disposition: inline; filename="trust-guard.webp" Vary: Accept etag: "3de9602cf1dd5a0af3b11a48e2e0a91f" last-modified: Thu, 21 Jan 2021 19:13:08 GMT via: 1.1 e8977de5589675c37360cfbb1bfac24a.cloudfront.net (CloudFront) x-amz-cf-id: l5fYOYvlk1KQ1K2x2zkYDR45vJknb8UCjWIl5QbfB18mqqYN3pwCDA== x-amz-cf-pop: JFK52-P2 x-amz-meta-s3b-last-modified: 20210112T081931Z x-amz-meta-sha256: f412b3902d3e216bf2c35f7764bc656b44397c11a94570c07b21ba943ba875f3 x-cache: Hit from cloudfront CF-Cache-Status: HIT Expires: Fri, 10 Jan 2025 20:49:26 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe29098a340f64-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	415	IN	Data Raw: 52 49 46 46 28 0d 00 00 57 45 42 50 56 50 38 4c 1c 0d 00 00 2f 58 c0 07 10 4d 28 68 db c8 51 c7 cf 3e 7f c2 af 72 88 e8 ff 04 20 46 e5 4b 9f 24 59 42 40 c1 9f 70 41 90 6d 53 7f ca b1 3c 87 18 10 35 91 24 45 ab 88 e7 3e ff 12 88 88 27 a2 10 41 51 fd 27 98 a4 a9 b6 63 38 2e 17 92 70 8f c4 27 62 18 9a a6 89 86 94 e6 17 af 88 c3 e1 dd 29 b7 18 62 33 34 4b 90 38 08 b2 6d 3a 7f ed e7 0c 11 31 01 c8 ce fb dd 65 57 da fe c5 b1 9c ff bf bb d5 62 9a 39 c3 0c cb 66 66 66 a6 c8 be 02 87 8e f6 16 7c 0f be 80 65 66 66 66 18 3c 0c d2 11 cd 8c 58 6a fc 07 33 a3 63 ba 80 2f 32 b3 ad 9a 3a 18 99 31 6a a3 cc cc 6c a7 0c 2a 19 db 74 01 cc 76 64 a7 aa 55 95 27 73 e4 dc b5 91 99 19 96 79 63 33 54 d1 c3 f6 c9 90 24 fd 22 22 b3 aa 1a b3 56 ef ad 67 e7 6c db b6 6d db b6 8d bf 6c Data Ascii: RIFF(WEBPVP8L/XM(hQ>r FK$YB@pAmS<5$E>'AQ'c8.p'b)b34K8m:1eWb9fff\|efff<Xj3c/2:1jl*tvdU'syc3T$""Vglml
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: e0 87 cf f7 59 d7 e1 0b 7a 94 95 23 1c 11 34 04 55 61 82 2d 34 96 c6 32 0b a9 2b 7b ef 41 a9 fe 7f 8a ec fc bf f6 3c f0 a3 63 16 f4 10 1b 4a ad 83 4b b2 46 84 83 28 b4 93 8a 46 74 b0 97 79 37 a6 ac f0 e4 53 44 43 a5 7c 01 25 d0 36 db 7f 38 89 82 b6 ea 3f c1 ea bd 47 c4 fe d6 cf ee 60 38 c0 3c 0d 1b 70 1b 75 8a 02 b4 73 8d 43 f6 b6 8d 75 8b da fa d6 ce 26 67 a7 79 bb 55 aa ff 97 49 b0 e0 7a d0 9a ef a4 55 3d bb 0d b1 83 1a 00 d0 14 c6 50 42 da 29 bd 2c b7 44 b2 b5 94 a1 81 69 18 26 50 29 55 4a 95 12 00 d3 00 0f b8 8f 69 54 4a 95 52 05 a6 51 82 01 d3 ac 00 15 73 92 61 96 9c 93 5c eb 71 f9 e1 b0 53 30 9a ad b7 7a 17 fd 88 87 e9 4a 60 80 f9 58 4a 59 a0 96 12 37 5c 87 3c f2 34 8a 44 ea 37 8e bb 9e 9e 4b 77 21 3c 9e 99 2f 26 5a 3f 8d 37 7f e2 5b fb 8d 64 cb a7 Data Ascii: Yz#4Ua-42+{A<cJKF(Fty7SDC\|%68?G`8<pusCu&gyUIzU=PB),Di&P)UJiTJRQsa\qS0zJ`XJY7\<4D7Kw!</&Z?7[d
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 36 2f b9 46 ff c2 01 60 30 15 fd cf c9 cf 57 a9 ea de c7 e5 6f d4 ba 53 7d 1b 8a fe 50 ac 20 a1 53 5a 79 bb 72 65 52 7d a1 10 2d 35 fc dc 5e f5 7e 57 7d a0 4a 35 c1 5f 7a f2 a3 82 3f 2b 12 4a c7 ee e7 9d fe 31 ab 2c 77 c2 5d 96 7c ca db 10 69 a9 a5 6f 87 87 8a be 4a bc b5 ef 22 0c 00 66 00 30 76 9a 2b e8 5e c5 6e 75 93 bc 36 1f 60 b6 15 bd 59 4e cb e9 de c8 8b 06 9e 04 70 96 45 54 27 9a cc ce d9 24 ce 09 c5 f4 0c 08 21 98 19 d4 98 3d e3 8d 7f 27 7b af 89 28 47 72 5e 05 c0 c0 ca 49 d4 99 f7 92 1d b6 70 d8 a5 13 fe b1 1d 3b b8 f6 03 f6 3c 29 7a 0e f9 45 09 fe 5a 42 d5 06 93 1e 50 d4 d2 70 96 50 ae 69 42 07 41 10 9d d3 a8 01 ac 3b 0d c5 62 a5 9d 01 12 1c 89 44 5d 9a 42 91 0f 89 19 f2 b2 ea 41 b2 07 f3 00 c0 7c 34 1f f9 a6 96 67 9a 3f 5a 87 24 80 d8 f0 c9 3d Data Ascii: 6/F`0WoS}P SZyreR}-5^~W}J5_z?+J1,w]\|ioJ"f0v+^nu6`YNpET'$!='{(Gr^Ip;<)zEZBPpPiBA;bD]BA\|4g?Z$=
2025-01-10 16:49:26 UTC	223	IN	Data Raw: 46 c5 29 1b 2e 1f 35 bf 33 21 a7 18 5d 79 e3 ed af 75 b9 84 50 bf 84 22 0a 73 2a d9 6b 73 63 85 38 b3 a1 48 03 ee ae ef cb 95 0d 6e 3d c7 ef d8 cc a4 9e 26 ce cb a5 a4 5d 2e 02 31 51 38 65 0e e3 f3 9f 96 b4 02 22 0a b1 1c fb a4 46 7e 8c 38 bc 75 1b 48 b4 49 74 d4 3e 61 24 77 5a 24 73 0c 85 12 77 75 4a 1c d2 44 88 4e cd 82 0d b1 51 32 39 c2 75 47 fd 19 75 49 3a 8c fa 2e 37 68 41 02 71 a2 0e 16 f2 64 ae 08 a6 26 14 a8 75 80 0b a8 ca 17 12 9a 49 89 b5 b7 f2 68 4b 26 56 b4 5c 2b d7 ca 30 cd 0a 4a 46 05 28 eb 16 38 07 9f f9 12 80 f2 59 e5 32 ca 67 01 7a a4 76 d6 13 51 c3 e4 42 cc 02 00 f0 de ab fe 7f 1f 73 ea 42 ee c9 cb 84 7f e3 a3 30 00 fe 2d 8f 69 ef 65 0a 34 05 Data Ascii: F).53!]yuP"s*ksc8Hn=&].1Q8e"F~8uHIt>a$wZ$swuJDNQ29uGuI:.7hAqd&uIhK&V\+0JF(8Y2gzvQBsB0-ie4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49965	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:25 UTC	549	OUT	GET /assets/checkout/img/visa-cvv.jpg HTTP/1.1 Host: cdn.buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:26 UTC	869	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: image/jpeg Content-Length: 3404 Connection: close Age: 1295 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=3483 etag: "0c525e42cfd28b6bd9b5da1870308fd2" last-modified: Mon, 18 Jan 2021 16:42:51 GMT via: 1.1 be85287d15abd3cfecdfa319493ba256.cloudfront.net (CloudFront) x-amz-cf-id: 11sB1bkUeELccx33FkJRabAZSx1TaDbsWTnmHumEzhYXj7bJAAtRVA== x-amz-cf-pop: JFK52-P2 x-amz-meta-s3b-last-modified: 20210118T164232Z x-amz-meta-sha256: 58f07946c525e281c699683d32423bb696a45144a7b9975f4ac79481a0c33369 x-cache: Hit from cloudfront CF-Cache-Status: HIT Expires: Fri, 10 Jan 2025 20:49:26 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe2909ba734338-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	500	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 8e 00 e6 03 01 22 00 02 11 01 03 11 01 ff c4 00 38 00 01 00 02 03 00 03 01 01 00 00 00 00 00 00 00 00 00 06 09 04 07 0a 03 05 08 01 02 01 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 b1 3f 4e 7c fd bc 84 5b 80 00 Data Ascii: JFIF"8?N\|[
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 42 d7 00 96 4b 20 5e f3 aa eb 52 14 79 9c 87 21 47 84 85 1e 12 14 78 48 51 e1 21 47 84 85 1e 19 7a f6 53 16 e7 39 fd 0d be 74 f7 a7 c2 6f f2 bd 43 33 4a c6 7a 0f a6 34 32 d5 4d f3 a7 b7 0c 5f 42 26 08 00 00 00 00 00 00 00 00 00 00 00 fe 3f bc 9d 7b 94 8d 39 41 50 6f ce 90 51 3a 41 44 e9 05 13 a4 14 4e 90 51 3a 41 44 e9 05 13 a4 14 4e 90 51 3a 41 44 e9 05 13 a4 17 ca f2 58 98 37 9c 37 ff c4 00 2d 10 00 01 01 07 04 00 05 04 03 01 00 00 00 00 00 00 00 04 03 05 06 07 08 17 19 01 02 15 16 10 18 20 38 40 11 12 35 44 13 14 50 70 ff da 00 08 01 01 00 01 08 00 7f 3f 9b 3c 55 34 d8 cf e5 6d dd ae dd 7e ba 43 91 36 e6 5a 6f 60 b7 fd ac 8e d4 49 91 da 89 32 3b 51 26 47 6a 24 c8 ed 44 99 1d a8 93 23 b5 12 64 76 a2 4c 8e d4 49 91 da 89 32 3b 51 26 47 6a 24 c8 ed 44 99 Data Ascii: BK ^Ry!GxHQ!GzS9toC3Jz42M_B&?{9APoQ:ADNQ:ADNQ:ADX77- 8@5DPp?<U4m~C6Zo`I2;Q&Gj$D#dvLI2;Q&Gj$D
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 48 3e 89 c9 1a 9f a2 e9 a3 85 29 38 5c c9 32 89 eb fa ee b7 2f 3f f4 e4 64 97 7e 57 98 57 6b 53 25 4e a6 8d cc 27 cd bd 44 18 eb e6 48 25 91 a9 8f b4 ad f5 b8 d2 0d 24 69 49 27 32 2d b4 88 56 bc de 91 50 09 5d 22 4d 26 83 a3 d3 08 42 76 2d 11 09 33 36 d9 54 6a 9c 35 a9 94 1a 8e c4 64 f6 1d 99 ac 23 e8 f4 3b 9f 24 67 82 87 15 d6 64 d9 d5 91 1f 65 bd e6 5d e1 a8 8d 14 f1 06 a2 34 53 c4 1a 88 d1 4f 10 6a 23 45 3c 41 a8 8d 14 f1 06 a2 34 53 c4 1a 88 d1 4f 10 6a 23 45 3c 41 a8 8d 14 f1 06 a2 34 53 c4 1a 88 d1 4f 10 6a 23 45 3c 41 a8 8d 14 f1 06 a2 34 53 c4 1a 88 d1 4f 10 6d e4 ad 79 36 1a d2 56 66 51 1f 7f ab a2 7c cc 8e 7a e3 05 0f 12 98 a4 5a db a9 22 22 23 fc 2a f3 25 25 61 a4 cb c5 23 cc 64 29 c4 87 50 8c 28 a7 12 1d 42 30 a2 9c 48 75 08 c2 8a 71 21 d4 23 Data Ascii: H>)8\2/?d~WWkS%N'DH%$iI'2-VP]"M&Bv-36Tj5d#;$gde]4SOj#E<A4SOj#E<A4SOj#E<A4SOmy6VfQ\|zZ""#*%%a#d)P(B0Huq!#
2025-01-10 16:49:26 UTC	166	IN	Data Raw: 79 b5 ce 86 09 27 d4 9b ce 16 9c 7a 0f 6e d9 b3 45 89 1d ce 6b 6d 1d 3f 85 ca 47 ec 2b 94 8f d8 57 29 1f b0 ae 52 3f 61 5c a4 7e c2 b9 48 fd 85 72 91 fb 0a dd f0 df 0a 11 0f 16 1b 7f a0 b6 98 10 37 8b 60 c5 66 d0 c6 d8 c6 b4 87 17 03 6b 45 87 d1 a7 a6 08 ee 38 04 83 cd 42 c7 e2 7f f9 4c dc b0 99 6d dd aa 17 5c ce ff 00 2b 7b 45 84 e7 41 85 09 e1 dc 36 06 92 2d b0 9b 49 e9 6d 9d 3a fc 8c 18 ec 8c c0 e0 af 85 7c 2b e1 5f 0a f8 57 c2 be 15 f0 af 85 7c 2b e1 5f 0a fb 54 5d e4 1a f2 d6 0b 42 ff d9 Data Ascii: y'znEkm?G+W)R?a\~Hr7`fkE8BLm\+{EA6-Im:\|+_W\|+_T]B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49967	151.101.130.133	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	374	OUT	GET /web/3.97.2/js/client.min.js HTTP/1.1 Host: js.braintreegateway.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:26 UTC	822	IN	HTTP/1.1 200 OK Connection: close Content-Length: 38602 Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "650b5a7f-96ca" Last-Modified: Wed, 20 Sep 2023 20:47:59 GMT Paypal-Debug-Id: d989081cbe3ba Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000d989081cbe3ba-1afc57f92bf24ea9-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 10 Jan 2025 16:49:26 GMT X-Served-By: cache-dfw-kdal2120145-DFW, cache-ewr-kewr1740061-EWR X-Cache: HIT, HIT X-Cache-Hits: 4372, 1 X-Timer: S1736527766.112121,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 62 72 61 69 6e Data Ascii: !function(e){var t;"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):((t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).brain
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 65 2c 22 22 2b 74 5b 65 5d 29 7d 29 2c 65 3d 6e 65 77 20 61 2e 50 72 6f 6d 69 73 65 47 6c 6f 62 61 6c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 6e 29 7d 29 2c 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 65 77 20 45 72 72 6f 72 28 72 2e 73 72 63 2b 22 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 2e 22 29 29 7d 29 2c 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 66 75 6e 63 74 69 6f Data Ascii: ys(t).forEach(function(e){n.setAttribute("data-"+e,""+t[e])}),e=new a.PromiseGlobal(function(e,t){n.addEventListener("load",function(){e(n)}),n.addEventListener("error",function(){t(new Error(r.src+" failed to load."))}),n.addEventListener("abort",functio
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 6e 20 74 28 65 29 7d 29 7d 7d 2c 7b 7d 5d 2c 38 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 65 28 22 2e 2f 6c 69 62 2f 64 65 66 65 72 72 65 64 22 29 2c 69 3d 65 28 22 2e 2f 6c 69 62 2f 6f 6e 63 65 22 29 2c 61 3d 65 28 22 2e 2f 6c 69 62 2f 70 72 6f 6d 69 73 65 2d 6f 72 2d 63 61 6c 6c 62 61 63 6b 22 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 5b 5d 2c 72 3d 30 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 74 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 26 Data Ascii: n t(e)})}},{}],8:[function(e,t,r){"use strict";var o=e("./lib/deferred"),i=e("./lib/once"),a=e("./lib/promise-or-callback");function s(n){return function(){for(var e,t=[],r=0;r<arguments.length;r++)t[r]=arguments[r];return"function"==typeof t[t.length-1]&
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 72 6e 20 76 6f 69 64 20 75 28 6e 2e 70 72 6f 6d 69 73 65 2c 65 29 7d 73 28 6e 2e 70 72 6f 6d 69 73 65 2c 65 29 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 74 72 79 7b 69 66 28 65 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 70 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 73 6f 6c 76 65 64 20 77 69 74 68 20 69 74 73 65 6c 66 2e 22 29 3b 69 66 28 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 72 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 64 28 74 29 Data Ascii: rn void u(n.promise,e)}s(n.promise,e)}}))}function s(t,e){try{if(e===t)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var r=e.then;if(e instanceof i)return t._state=3,t._value=e,void d(t)
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6f 28 5b 5d 29 3b 76 61 72 20 73 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 21 66 75 6e 63 74 69 6f 6e 20 74 28 72 2c 65 29 7b 74 72 79 7b 69 66 28 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 6e 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 72 2c 65 29 7d 2c 69 29 7d 61 5b 72 5d 3d 65 2c 30 3d 3d 2d 2d 73 26 26 6f 28 61 29 7d 63 61 74 63 68 28 Data Ascii: ll(t);if(0===a.length)return o([]);var s=a.length;for(var e=0;e<a.length;e++)!function t(r,e){try{if(e&&("object"==typeof e\|\|"function"==typeof e)){var n=e.then;if("function"==typeof n)return void n.call(e,function(e){t(r,e)},i)}a[r]=e,0==--s&&o(a)}catch(
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 3a 22 2c 65 29 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 7b 7d 5d 2c 31 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 75 3d 65 28 22 2e 2f 63 6f 6e 73 74 61 6e 74 73 22 29 2e 42 52 41 49 4e 54 52 45 45 5f 56 45 52 53 49 4f 4e 2c 6e 3d 65 28 22 2e 2f 72 65 71 75 65 73 74 2f 67 72 61 70 68 71 6c 22 29 2c 6f 3d 65 28 22 2e 2f 72 65 71 75 65 73 74 22 29 2c 69 3d 65 28 22 2e 2e 2f 6c 69 62 2f 69 73 2d 76 65 72 69 66 69 65 64 2d 64 6f 6d 61 69 6e 22 29 2c 64 3d 65 28 22 2e 2e 2f 6c 69 62 2f 62 72 61 69 6e 74 72 65 65 2d 65 72 72 6f 72 22 29 2c 70 3d 65 28 22 2e 2e 2f 6c 69 62 2f 63 6f 6e 76 65 72 74 2d 74 6f 2d 62 72 61 69 6e 74 72 65 65 2d 65 72 72 6f 72 22 29 2c 61 3d 65 28 22 2e 2f 67 65 74 2d Data Ascii: :",e)},t.exports=i},{}],10:[function(e,t,r){"use strict";var u=e("./constants").BRAINTREE_VERSION,n=e("./request/graphql"),o=e("./request"),i=e("../lib/is-verified-domain"),d=e("../lib/braintree-error"),p=e("../lib/convert-to-braintree-error"),a=e("./get-
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 5f 47 41 54 45 57 41 59 5f 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 5f 49 4e 56 41 4c 49 44 5f 44 4f 4d 41 49 4e 2e 74 79 70 65 2c 63 6f 64 65 3a 79 2e 43 4c 49 45 4e 54 5f 47 41 54 45 57 41 59 5f 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 5f 49 4e 56 41 4c 49 44 5f 44 4f 4d 41 49 4e 2e 63 6f 64 65 2c 6d 65 73 73 61 67 65 3a 22 67 72 61 70 68 51 4c 2e 75 72 6c 20 70 72 6f 70 65 72 74 79 20 69 73 20 6f 6e 20 61 6e 20 69 6e 76 61 6c 69 64 20 64 6f 6d 61 69 6e 2e 22 7d 29 3b 74 68 69 73 2e 5f 67 72 61 70 68 51 4c 3d 6e 65 77 20 6e 28 7b 67 72 61 70 68 51 4c 3a 72 2e 67 72 61 70 68 51 4c 7d 29 7d 7d 4f 2e 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 2c 65 2c 6e 3d 62 5b 74 2e 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 5d 3b 69 66 Data Ascii: _GATEWAY_CONFIGURATION_INVALID_DOMAIN.type,code:y.CLIENT_GATEWAY_CONFIGURATION_INVALID_DOMAIN.code,message:"graphQL.url property is on an invalid domain."});this._graphQL=new n({graphQL:r.graphQL})}}O.initialize=function(t){var r,e,n=b[t.authorization];if
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 72 65 64 69 74 5f 63 61 72 64 73 22 3d 3d 3d 73 2e 65 6e 64 70 6f 69 6e 74 26 26 63 2e 67 65 74 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 28 29 2e 67 61 74 65 77 61 79 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 63 72 65 64 69 74 43 61 72 64 73 2e 63 6f 6c 6c 65 63 74 44 65 76 69 63 65 44 61 74 61 29 3b 69 66 28 22 67 72 61 70 68 51 4c 41 70 69 22 21 3d 3d 73 2e 61 70 69 26 26 28 73 2e 6d 65 74 68 6f 64 3f 73 2e 65 6e 64 70 6f 69 6e 74 7c 7c 28 74 3d 22 6f 70 74 69 6f 6e 73 2e 65 6e 64 70 6f 69 6e 74 22 29 3a 74 3d 22 6f 70 74 69 6f 6e 73 2e 6d 65 74 68 6f 64 22 29 2c 74 29 74 68 72 6f 77 20 6e 65 77 20 64 28 7b 74 79 70 65 3a 79 2e 43 4c 49 45 4e 54 5f 4f 50 54 49 4f 4e 5f 52 45 51 55 49 52 45 44 2e 74 79 70 65 2c 63 6f 64 65 3a 79 2e 43 4c 49 45 4e 54 5f 4f Data Ascii: redit_cards"===s.endpoint&&c.getConfiguration().gatewayConfiguration.creditCards.collectDeviceData);if("graphQLApi"!==s.api&&(s.method?s.endpoint\|\|(t="options.endpoint"):t="options.method"),t)throw new d({type:y.CLIENT_OPTION_REQUIRED.type,code:y.CLIENT_O
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 4c 49 45 4e 54 5f 41 55 54 48 4f 52 49 5a 41 54 49 4f 4e 5f 49 4e 53 55 46 46 49 43 49 45 4e 54 29 3a 34 32 39 3d 3d 3d 65 3f 72 3d 6e 65 77 20 64 28 79 2e 43 4c 49 45 4e 54 5f 52 41 54 45 5f 4c 49 4d 49 54 45 44 29 3a 35 30 30 3c 3d 65 3f 72 3d 6e 65 77 20 64 28 79 2e 43 4c 49 45 4e 54 5f 47 41 54 45 57 41 59 5f 4e 45 54 57 4f 52 4b 29 3a 28 65 3c 32 30 30 7c 7c 34 30 30 3c 3d 65 29 26 26 28 72 3d 70 28 74 2c 7b 74 79 70 65 3a 79 2e 43 4c 49 45 4e 54 5f 52 45 51 55 45 53 54 5f 45 52 52 4f 52 2e 74 79 70 65 2c 63 6f 64 65 3a 79 2e 43 4c 49 45 4e 54 5f 52 45 51 55 45 53 54 5f 45 52 52 4f 52 2e 63 6f 64 65 2c 6d 65 73 73 61 67 65 3a 79 2e 43 4c 49 45 4e 54 5f 52 45 51 55 45 53 54 5f 45 52 52 4f 52 2e 6d 65 73 73 61 67 65 7d 29 29 3b 69 66 28 72 29 72 65 74 Data Ascii: LIENT_AUTHORIZATION_INSUFFICIENT):429===e?r=new d(y.CLIENT_RATE_LIMITED):500<=e?r=new d(y.CLIENT_GATEWAY_NETWORK):(e<200\|\|400<=e)&&(r=p(t,{type:y.CLIENT_REQUEST_ERROR.type,code:y.CLIENT_REQUEST_ERROR.code,message:y.CLIENT_REQUEST_ERROR.message}));if(r)ret
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 34 31 2c 22 2e 2e 2f 6c 69 62 2f 6d 65 74 68 6f 64 73 22 3a 34 33 2c 22 2e 2e 2f 6c 69 62 2f 6f 6e 63 65 22 3a 34 34 2c 22 2e 2f 63 6f 6e 73 74 61 6e 74 73 22 3a 31 31 2c 22 2e 2f 65 72 72 6f 72 73 22 3a 31 32 2c 22 2e 2f 67 65 74 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 31 33 2c 22 2e 2f 72 65 71 75 65 73 74 22 3a 32 34 2c 22 2e 2f 72 65 71 75 65 73 74 2f 67 72 61 70 68 71 6c 22 3a 32 32 2c 22 40 62 72 61 69 6e 74 72 65 65 2f 77 72 61 70 2d 70 72 6f 6d 69 73 65 22 3a 38 7d 5d 2c 31 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 42 52 41 49 4e 54 52 45 45 5f 56 45 52 53 49 4f 4e 3a 22 32 30 31 38 2d 30 35 2d 31 30 22 7d 7d 2c 7b 7d 5d 2c 31 32 3a 5b 66 75 6e 63 74 69 Data Ascii: 41,"../lib/methods":43,"../lib/once":44,"./constants":11,"./errors":12,"./get-configuration":13,"./request":24,"./request/graphql":22,"@braintree/wrap-promise":8}],11:[function(e,t,r){"use strict";t.exports={BRAINTREE_VERSION:"2018-05-10"}},{}],12:[functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49966	151.101.130.133	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	382	OUT	GET /web/3.97.2/js/data-collector.min.js HTTP/1.1 Host: js.braintreegateway.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:26 UTC	820	IN	HTTP/1.1 200 OK Connection: close Content-Length: 30015 Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "650b5a7f-753f" Last-Modified: Wed, 20 Sep 2023 20:47:59 GMT Paypal-Debug-Id: 7ba4b2435398b Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000007ba4b2435398b-7451ff3e6ac796ef-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 10 Jan 2025 16:49:26 GMT X-Served-By: cache-dfw-ktki8620039-DFW, cache-ewr-kewr1740074-EWR X-Cache: HIT, HIT X-Cache-Hits: 12, 0 X-Timer: S1736527766.128185,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 62 72 61 69 6e Data Ascii: !function(t){var e;"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):((e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).brain
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 74 2c 22 22 2b 65 5b 74 5d 29 7d 29 2c 74 3d 6e 65 77 20 73 2e 50 72 6f 6d 69 73 65 47 6c 6f 62 61 6c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 72 29 7d 29 2c 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 6e 65 77 20 45 72 72 6f 72 28 6e 2e 73 72 63 2b 22 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 2e 22 29 29 7d 29 2c 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c Data Ascii: ject.keys(e).forEach(function(t){r.setAttribute("data-"+t,""+e[t])}),t=new s.PromiseGlobal(function(t,e){r.addEventListener("load",function(){t(r)}),r.addEventListener("error",function(){e(new Error(n.src+" failed to load."))}),r.addEventListener("abort",
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 6e 67 74 68 3b 6e 2b 2b 29 65 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 28 74 3d 65 2e 70 6f 70 28 29 2c 74 3d 6f 2e 6f 6e 63 65 28 69 2e 64 65 66 65 72 72 65 64 28 74 29 29 29 2c 73 2e 70 72 6f 6d 69 73 65 4f 72 43 61 6c 6c 62 61 63 6b 28 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 2c 74 29 7d 7d 61 2e 77 72 61 70 50 72 6f 74 6f 74 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 69 3d 28 74 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 29 2e 69 67 6e 6f 72 65 4d 65 74 68 6f 64 73 7c 7c 5b 5d 2c 6f 3d 21 30 3d 3d 3d 74 2e 74 72 61 6e 73 66 6f 72 6d 50 72 69 76 61 74 65 4d 65 74 68 6f 64 73 3b 72 65 74 75 72 Data Ascii: ngth;n++)e[n]=arguments[n];return"function"==typeof e[e.length-1]&&(t=e.pop(),t=o.once(i.deferred(t))),s.promiseOrCallback(r.apply(this,e),t)}}a.wrapPrototype=function(r,t){var i=(t=void 0===t?{}:t).ignoreMethods\|\|[],o=!0===t.transformPrivateMethods;retur
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 20 6e 3d 74 2e 74 68 65 6e 3b 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 65 2e 5f 73 74 61 74 65 3d 33 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 76 6f 69 64 20 68 28 65 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 66 28 28 72 3d 6e 2c 69 3d 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 65 29 7d 65 2e 5f 73 74 61 74 65 3d 31 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 68 28 65 29 7d 63 61 74 63 68 28 74 29 7b 75 28 65 2c 74 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 68 Data Ascii: n=t.then;if(t instanceof o)return e._state=3,e._value=t,void h(e);if("function"==typeof n)return void f((r=n,i=t,function(){r.apply(i,arguments)}),e)}e._state=1,e._value=t,h(e)}catch(t){u(e,t)}var r,i}function u(t,e){t._state=2,t._value=e,h(t)}function h
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 72 6e 20 76 6f 69 64 20 72 2e 63 61 6c 6c 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 6e 2c 74 29 7d 2c 6f 29 7d 73 5b 6e 5d 3d 74 2c 30 3d 3d 2d 2d 61 26 26 69 28 73 29 7d 63 61 74 63 68 28 74 29 7b 6f 28 74 29 7d 7d 28 74 2c 73 5b 74 5d 29 7d 29 7d 2c 6f 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 66 75 6e 63 74 69 6f 6e 28 69 2c 74 29 7b 69 66 28 21 6e 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 6e 2b 22 20 22 2b 6e 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 Data Ascii: rn void r.call(t,function(t){e(n,t)},o)}s[n]=t,0==--a&&i(s)}catch(t){o(t)}}(t,s[t])})},o.allSettled=function(n){return new this(function(i,t){if(!n\|\|void 0===n.length)return t(new TypeError(typeof n+" "+n+" is not iterable(cannot read property Symbol(Symb
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 45 44 22 2c 6d 65 73 73 61 67 65 3a 22 4b 6f 75 6e 74 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 74 68 69 73 20 6d 65 72 63 68 61 6e 74 2e 22 7d 2c 44 41 54 41 5f 43 4f 4c 4c 45 43 54 4f 52 5f 4b 4f 55 4e 54 5f 45 52 52 4f 52 3a 7b 74 79 70 65 3a 74 2e 74 79 70 65 73 2e 4d 45 52 43 48 41 4e 54 2c 63 6f 64 65 3a 22 44 41 54 41 5f 43 4f 4c 4c 45 43 54 4f 52 5f 4b 4f 55 4e 54 5f 45 52 52 4f 52 22 7d 2c 44 41 54 41 5f 43 4f 4c 4c 45 43 54 4f 52 5f 52 45 51 55 49 52 45 53 5f 43 52 45 41 54 45 5f 4f 50 54 49 4f 4e 53 3a 7b 74 79 70 65 3a 74 2e 74 79 70 65 73 2e 4d 45 52 43 48 41 4e 54 2c 63 6f 64 65 3a 22 44 41 54 41 5f 43 4f 4c 4c 45 43 54 4f 52 5f 52 45 51 55 49 52 45 53 5f 43 52 45 41 54 45 5f 4f 50 54 49 4f 4e 53 22 2c 6d 65 73 73 61 67 65 Data Ascii: ED",message:"Kount is not enabled for this merchant."},DATA_COLLECTOR_KOUNT_ERROR:{type:t.types.MERCHANT,code:"DATA_COLLECTOR_KOUNT_ERROR"},DATA_COLLECTOR_REQUIRES_CREATE_OPTIONS:{type:t.types.MERCHANT,code:"DATA_COLLECTOR_REQUIRES_CREATE_OPTIONS",message
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 66 72 61 6d 65 5b 74 69 74 6c 65 3d 22 70 70 66 6e 69 66 72 61 6d 65 22 5d 27 29 29 2c 75 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 66 72 61 6d 65 5b 74 69 74 6c 65 3d 22 70 62 66 22 5d 27 29 29 2c 75 28 74 68 69 73 2e 5f 70 61 72 61 6d 65 74 65 72 42 6c 6f 63 6b 29 2c 75 28 74 68 69 73 2e 5f 74 68 69 72 64 50 61 72 74 79 42 6c 6f 63 6b 29 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6e 65 77 20 72 3b 72 65 74 75 72 6e 21 28 74 3d 74 7c 7c 7b 7d 29 2e 73 65 73 73 69 6f 6e 49 64 26 26 69 3f 28 65 2e 73 65 73 73 69 6f 6e 49 64 3d 69 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 65 29 29 3a 65 2e 69 6e 69 74 Data Ascii: uerySelector('iframe[title="ppfniframe"]')),u(document.querySelector('iframe[title="pbf"]')),u(this._parameterBlock),u(this._thirdPartyBlock)},e.exports={setup:function(t){var e=new r;return!(t=t\|\|{}).sessionId&&i?(e.sessionId=i,Promise.resolve(e)):e.init
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 69 3d 65 2e 64 65 76 69 63 65 44 61 74 61 2c 6f 2e 5f 69 6e 73 74 61 6e 63 65 73 2e 70 75 73 68 28 65 29 7d 65 6c 73 65 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 2e 73 65 74 75 70 28 7b 73 65 73 73 69 6f 6e 49 64 3a 72 2e 72 69 73 6b 43 6f 72 72 65 6c 61 74 69 6f 6e 49 64 7c 7c 72 2e 63 6c 69 65 6e 74 4d 65 74 61 64 61 74 61 49 64 7c 7c 72 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 2c 65 6e 76 69 72 6f 6e 6d 65 6e 74 3a 74 2e 67 65 74 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 28 29 2e 67 61 74 65 77 61 79 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e Data Ascii: i=e.deviceData,o._instances.push(e)}else i={};return Promise.resolve(t)}).then(function(t){return a.setup({sessionId:r.riskCorrelationId\|\|r.clientMetadataId\|\|r.correlationId,environment:t.getConfiguration().gatewayConfiguration.environment}).then(function
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 67 61 74 65 77 61 79 2e 63 6f 6d 2f 64 61 74 61 22 7d 2c 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 76 61 72 20 65 3d 61 2e 67 65 74 43 61 63 68 65 64 44 65 76 69 63 65 44 61 74 61 28 74 2e 6d 65 72 63 68 61 6e 74 49 64 29 3b 65 3f 28 74 68 69 73 2e 64 65 76 69 63 65 44 61 74 61 3d 65 2c 74 68 69 73 2e 5f 69 73 43 61 63 68 65 64 3d 21 30 29 3a 28 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 3d 74 68 69 73 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 45 6e 76 69 72 6f 6e 6d 65 6e 74 28 74 29 2c 72 2e 72 61 6e 64 6f 6d 2e 73 74 61 72 74 43 6f 6c 6c 65 63 74 6f 72 73 28 29 2c 74 68 69 73 2e 5f 64 65 76 69 63 65 53 65 73 73 69 6f 6e 49 64 3d 74 68 69 73 2e 5f 67 65 6e 65 72 61 74 65 44 65 76 69 63 65 53 65 73 73 69 6f 6e 49 64 Data Ascii: gateway.com/data"},s={};function a(t){var e=a.getCachedDeviceData(t.merchantId);e?(this.deviceData=e,this._isCached=!0):(this._currentEnvironment=this._initializeEnvironment(t),r.random.startCollectors(),this._deviceSessionId=this._generateDeviceSessionId
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 65 6e 74 2e 75 72 6c 2b 22 2f 6c 6f 67 6f 2e 68 74 6d 22 2b 65 2c 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 69 6d 67 20 73 72 63 3d 22 27 2b 74 2e 5f 63 75 72 72 65 6e 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 2e 75 72 6c 2b 22 2f 6c 6f 67 6f 2e 67 69 66 22 2b 65 2b 27 22 20 61 6c 74 3d 22 22 20 2f 3e 27 7d 2c 31 30 29 2c 6e 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 45 6e 76 69 72 6f 6e 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6f 5b 74 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 74 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 66 6f 72 20 6b 6f Data Ascii: ent.url+"/logo.htm"+e,n.innerHTML='<img src="'+t._currentEnvironment.url+"/logo.gif"+e+'" alt="" />'},10),n},a.prototype._initializeEnvironment=function(t){var e=o[t.environment];if(null==e)throw new Error(t.environment+" is not a valid environment for ko

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49975	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	980	OUT	GET /secure/checkout/assets/js/fontawesome.js HTTP/1.1 Host: buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:26 UTC	532	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: application/javascript Content-Length: 11891 Connection: close last-modified: Mon, 15 Jul 2024 10:28:04 GMT etag: "6694f9b4-2e73" expires: Mon, 08 Jan 2035 16:49:26 GMT cache-control: public, max-age=315360000 x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: HIT Age: 8529 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe290add7f0f73-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	837	IN	Data Raw: 77 69 6e 64 6f 77 2e 46 6f 6e 74 41 77 65 73 6f 6d 65 4b 69 74 43 6f 6e 66 69 67 20 3d 20 7b 22 69 64 22 3a 35 38 37 34 33 31 37 34 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 2e 31 35 2e 34 22 2c 22 74 6f 6b 65 6e 22 3a 22 31 64 64 35 38 37 36 36 34 38 22 2c 22 6d 65 74 68 6f 64 22 3a 22 63 73 73 22 2c 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 61 2d 66 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 22 2c 22 6c 69 63 65 6e 73 65 22 3a 22 66 72 65 65 22 2c 22 61 73 79 6e 63 4c 6f 61 64 69 6e 67 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 61 75 74 6f 41 31 31 79 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 62 61 73 65 55 72 6c 4b 69 74 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 69 74 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 Data Ascii: window.FontAwesomeKitConfig = {"id":58743174,"version":"5.15.4","token":"1dd5876648","method":"css","baseUrl":"https://ka-f.fontawesome.com","license":"free","asyncLoading":{"enabled":true},"autoA11y":{"enabled":true},"baseUrlKit":"https://kit.fontawesome
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 74 73 5b 6e 5d 3a 7b 7d 3b 6e 25 32 3f 74 28 4f 62 6a 65 63 74 28 6f 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 65 2c 74 2c 6f 5b 74 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6f 29 29 3a 74 28 4f 62 6a 65 63 74 28 6f 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6f 2c Data Ascii: ts[n]:{};n%2?t(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):t(Object(o)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(o,
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 63 74 28 61 29 21 3d 3d 61 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 66 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 63 7d 7d 28 74 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 69 28 74 2c 65 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 22 4f 62 6a 65 63 74 22 3d 3d 3d 6e 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 3b 69 66 28 22 4d 61 70 22 3d 3d 3d 6e 7c 7c 22 53 65 74 22 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 Data Ascii: ct(a)!==a))return}finally{if(f)throw o}}return c}}(t,e)\|\|function(t,e){if(!t)return;if("string"==typeof t)return i(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);"Object"===n&&t.constructor&&(n=t.constructor.name);if("Map"===n\|\|"Set"===n)return
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 53 69 62 6c 69 6e 67 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 72 2d 6f 6e 6c 79 22 29 3b 69 66 28 6e 26 26 72 29 7b 76 61 72 20 6f 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 6f 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6e 2c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 73 72 2d 6f 6e 6c 79 22 29 2c 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7d 7d 29 29 7d 76 61 72 20 6c 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6d 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 76 6f 69 64 20 30 21 3d 3d 67 6c 6f 62 61 6c 2e 70 72 6f 63 65 73 73 26 26 22 66 75 6e 63 74 69 6f 6e Data Ascii: ementSibling.classList.contains("sr-only");if(n&&r){var o=t.createElement("span");o.innerHTML=n,o.classList.add("sr-only"),e.parentNode.insertBefore(o,e.nextSibling)}}))}var l,h=function(){},m="undefined"!=typeof global&&void 0!==global.process&&"function
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 20 5f 28 74 29 7b 67 6c 6f 62 61 6c 2e 70 72 6f 63 65 73 73 2e 65 6d 69 74 28 22 72 65 6a 65 63 74 69 6f 6e 48 61 6e 64 6c 65 64 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 20 72 65 73 6f 6c 76 65 72 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 3d 3d 21 31 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 63 6f 6e 73 74 72 75 63 74 20 27 50 72 6f 6d 69 73 65 27 3a 20 50 6c 65 61 73 65 20 75 73 65 20 74 68 65 20 27 6e 65 77 27 20 6f 70 65 72 61 74 6f Data Ascii: _(t){global.process.emit("rejectionHandled",t)}function F(t){if("function"!=typeof t)throw new TypeError("Promise resolver "+t+" is not a function");if(this instanceof F==!1)throw new TypeError("Failed to construct 'Promise': Please use the 'new' operato
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 28 74 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 46 3f 74 3a 6e 65 77 20 46 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 29 7d 2c 46 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 46 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 3b 76 61 72 20 43 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 3f 50 72 6f 6d 69 73 65 3a 46 3b 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 66 65 74 63 68 2c 72 3d 65 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 6f 3d 65 2e 74 6f 6b 65 6e 2c 69 3d 74 3b 72 65 74 75 72 6e 20 6f 26 26 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 64 65 78 4f Data Ascii: (t)&&t.constructor===F?t:new F((function(e){e(t)}))},F.reject=function(t){return new F((function(e,n){n(t)}))};var C="function"==typeof Promise?Promise:F;function I(t,e){var n=e.fetch,r=e.XMLHttpRequest,o=e.token,i=t;return o&&!function(t){return t.indexO
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 65 6e 74 7c 7c 6f 2c 69 3d 64 2e 62 69 6e 64 28 64 2c 6f 2c 5b 5d 2e 63 6f 6e 63 61 74 28 66 2c 75 2c 63 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 61 2d 22 2e 63 6f 6e 63 61 74 28 74 29 7d 29 29 29 29 3b 74 2e 61 75 74 6f 41 31 31 79 2e 65 6e 61 62 6c 65 64 26 26 72 28 69 29 3b 76 61 72 20 61 3d 74 2e 73 75 62 73 65 74 50 61 74 68 26 26 74 2e 62 61 73 65 55 72 6c 2b 22 2f 22 2b 74 2e 73 75 62 73 65 74 50 61 74 68 2c 6c 3d 5b 7b 69 64 3a 22 66 61 2d 6d 61 69 6e 22 2c 61 64 64 4f 6e 3a 76 6f 69 64 20 30 2c 75 72 6c 3a 61 7d 5d 3b 69 66 28 74 2e 76 34 73 68 69 6d 26 26 74 2e 76 34 73 68 69 6d 2e 65 6e 61 62 6c 65 64 26 26 6c 2e 70 75 73 68 28 7b 69 64 3a 22 66 61 2d 76 34 2d 73 68 69 6d 73 22 2c 61 64 64 4f 6e 3a 22 2d 76 Data Ascii: ent\|\|o,i=d.bind(d,o,[].concat(f,u,c.map((function(t){return"fa-".concat(t)}))));t.autoA11y.enabled&&r(i);var a=t.subsetPath&&t.baseUrl+"/"+t.subsetPath,l=[{id:"fa-main",addOn:void 0,url:a}];if(t.v4shim&&t.v4shim.enabled&&l.push({id:"fa-v4-shims",addOn:"-v
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 68 53 76 67 46 72 6f 6d 3d 74 2e 62 61 73 65 55 72 6c 2b 22 2f 72 65 6c 65 61 73 65 73 2f 22 2b 28 22 6c 61 74 65 73 74 22 3d 3d 3d 74 2e 76 65 72 73 69 6f 6e 3f 22 6c 61 74 65 73 74 22 3a 22 76 22 2e 63 6f 6e 63 61 74 28 74 2e 76 65 72 73 69 6f 6e 29 29 2b 22 2f 73 76 67 73 22 2c 6e 2e 66 65 74 63 68 55 70 6c 6f 61 64 65 64 53 76 67 46 72 6f 6d 3d 74 2e 75 70 6c 6f 61 64 73 55 72 6c 29 3b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 74 2e 76 34 73 68 69 6d 2e 65 6e 61 62 6c 65 64 26 26 72 2e 70 75 73 68 28 6e 65 77 20 43 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 49 28 73 28 74 2c 7b 61 64 64 4f 6e 3a 22 2d 76 34 2d 73 68 69 6d 73 22 2c 6d 69 6e 69 66 79 3a 74 2e 6d 69 6e 69 66 79 2e 65 6e 61 62 6c 65 64 7d 29 2c 6e 29 2e 74 68 65 6e 28 28 66 75 Data Ascii: hSvgFrom=t.baseUrl+"/releases/"+("latest"===t.version?"latest":"v".concat(t.version))+"/svgs",n.fetchUploadedSvgFrom=t.uploadsUrl);var r=[];return t.v4shim.enabled&&r.push(new C((function(r,o){I(s(t,{addOn:"-v4-shims",minify:t.minify.enabled}),n).then((fu
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 29 2c 69 3d 31 3b 65 3d 6e 2e 73 68 69 66 74 28 29 3b 29 65 28 29 7d 29 2c 69 3f 73 65 74 54 69 6d 65 6f 75 74 28 74 2c 30 29 3a 6e 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 26 26 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 74 29 2e 6f 62 73 65 72 76 65 28 64 6f 63 75 6d 65 6e 74 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 7d 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 46 6f 6e 74 41 77 65 73 6f 6d 65 4b 69 74 43 6f 6e 66 69 67 29 7b 76 61 72 20 44 3d Data Ascii: removeEventListener("DOMContentLoaded",e),i=1;e=n.shift();)e()}),i?setTimeout(t,0):n.push(t)}function N(t){"undefined"!=typeof MutationObserver&&new MutationObserver(t).observe(document,{childList:!0,subtree:!0})}try{if(window.FontAwesomeKitConfig){var D=
2025-01-10 16:49:26 UTC	102	IN	Data Raw: 65 20 4b 69 74 3a 22 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 74 29 29 7d 29 29 7d 7d 63 61 74 63 68 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 22 2e 63 6f 6e 63 61 74 28 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 4b 69 74 3a 22 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 61 29 29 7d 7d 29 29 3b 0a Data Ascii: e Kit:"," ").concat(t))}))}}catch(a){console.error("".concat("Font Awesome Kit:"," ").concat(a))}}));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49969	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	778	OUT	GET /assets/checkout/img/mcafee.png HTTP/1.1 Host: cdn.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:26 UTC	949	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: image/webp Content-Length: 2700 Connection: close Age: 1256 Cf-Bgj: imgq:100,h2pri Cf-Polished: origFmt=png, origSize=4508 Content-Disposition: inline; filename="mcafee.webp" Vary: Accept etag: "ceacba2ec650452d7a16fec9294d546f" last-modified: Thu, 21 Jan 2021 19:13:08 GMT via: 1.1 e70925a92da0404e239c3620389c3dd0.cloudfront.net (CloudFront) x-amz-cf-id: MUDdH7ez-LPfFXwwwB4iJkAHi7OmGpssKQ-EKoBBXoX-RpAz_pvkdA== x-amz-cf-pop: JFK52-P2 x-amz-meta-s3b-last-modified: 20210112T081931Z x-amz-meta-sha256: b0252ca48eaf74d5d646ffa92de624da4155291272dd1d5ca0daddfc3f096d10 x-cache: Hit from cloudfront CF-Cache-Status: HIT Expires: Fri, 10 Jan 2025 20:49:26 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe290adc9f0f97-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	420	IN	Data Raw: 52 49 46 46 84 0a 00 00 57 45 42 50 56 50 38 4c 78 0a 00 00 2f 59 c0 07 10 35 87 82 b6 6d 18 87 3f ec 1d 0c 11 31 01 be a1 ad a1 f3 47 b7 da b6 e5 b2 f2 6f 1b 77 77 9f d9 c7 dd dd dd dd dd dd dd dd dd dd dd dd dd dd 65 fc f8 39 e3 ee 3e 7b ef 63 bb 86 13 13 4d 05 58 a8 5d b0 d6 8e 90 d8 99 1a a6 02 34 a3 1b 97 12 dc 5a 80 02 ce 22 9d 98 74 7e bc 06 8a 20 26 25 25 7c 32 ac 07 52 7a 98 12 d0 98 e8 af 83 88 14 62 d6 92 20 00 60 19 49 19 db d6 da b6 dd b5 6d db 66 b5 67 db b6 ef d6 b6 8d ce dc 83 36 0e db b6 0d 24 ca bf ff c6 7f 4d ff 19 b9 6d e3 88 d3 b6 ef 9e e2 7d 83 e4 6c db 8e cd 29 25 ed 8c 6d db b6 6d 7b 26 b6 6d db b6 6d db f6 f7 c7 3d 64 65 af 32 bb 37 ce 3a c7 94 10 db 46 0f 2c 20 59 7e 71 ea c8 36 6b 6e d9 80 5a b0 93 02 f2 17 10 36 60 36 90 a5 ed Data Ascii: RIFFWEBPVP8Lx/Y5m?1Gowwe9>{cMX]4Z"t~ &%%\|2Rzb `Imfg6$Mm}l)%mm{&mm=de27:F, Y~q6knZ6`6
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 15 21 3c d9 5d b0 2e f5 11 66 24 a9 bc 51 a3 de 1d b4 8f 37 3f 70 a7 44 fa 05 bd b8 0d 47 90 08 1c 0b 95 b9 ec 0b 82 2d 5e 8c 66 4b fd 61 eb fd 00 7e b4 cc 8d 65 7a 55 a2 ef e6 45 03 af d6 aa 95 c2 7a c9 be 6c bf 23 00 b6 12 f9 1e 60 9c 45 50 74 96 76 c8 9e e0 22 10 16 a1 24 29 b3 57 99 6b ad f7 1b 37 1f ba 43 aa 6b 8a 9c 5e fb 85 47 32 88 8f 89 7d 2c 0c 87 ed 1e d8 d3 48 9d 45 83 8a e6 24 b0 32 a4 64 5f 47 25 fa 6a 61 24 e0 94 ba e5 a1 cd 46 da e5 ca 85 07 80 8d b4 ec cf 13 3a 21 74 d6 d8 0c 2e fc 80 35 01 a2 8d a7 b2 de 8c 84 fd 73 15 56 72 ab 83 b6 28 92 b1 75 21 00 70 56 d1 aa a0 16 47 b2 30 26 38 8f e0 0d d6 59 59 5f 36 27 36 37 6e 00 7c 69 36 98 54 c8 f8 14 fb 1e 81 21 46 31 f1 2f 34 94 1b 7b 06 49 49 ed 89 f7 e7 a7 b6 1a 49 25 fa e6 4e 07 91 01 25 Data Ascii: !<].f$Q7?pDG-^fKa~ezUEzl#`EPtv"$)Wk7Ck^G2},HE$2d_G%ja$F:!t.5sVr(u!pVG0&8YY_6'67n\|i6T!F1/4{III%N%
2025-01-10 16:49:26 UTC	911	IN	Data Raw: a3 f4 2e 43 8d 79 76 bf 7b 96 0c 54 41 fb a9 fd bb ea 6d c8 b2 d4 ee 4b 26 5a 07 7a 6a a6 6b e2 a3 9c d8 b1 b6 2f 85 8e ff 9c 64 c5 dc 1b 2a 9a fe 6a 84 bd 97 3e a4 5f 58 3c b7 fc 6e 9e 6c ea 6d b2 71 73 03 90 3b ab 05 b9 69 e4 11 00 70 37 23 2d 80 a3 76 01 60 77 9c ad a8 15 b1 d9 b2 d5 77 e1 07 c2 31 2b 5e 2a 42 8f 40 f4 ed 7e a9 be 65 77 7f 10 e9 fe 9d 68 c4 1b e0 74 e1 dd 4e b4 57 55 1c 3f ec 03 50 13 37 f6 29 53 85 29 c3 9c d9 92 61 e0 92 8d 5a e9 52 59 00 00 02 84 6d 81 fd 78 88 92 d1 aa c9 72 d9 1b 44 ba ab 7f 99 22 9b 72 9b 25 8b 63 8b f5 6f de 8c ce c3 81 ab 5e e2 e3 01 cf b0 25 52 d2 6d 7a 6d f2 2d d4 9a be f6 8f 94 d7 b8 ce d4 f5 55 2e f2 52 ce 20 8c ff fa 46 b3 ee c9 7e 66 f5 8d bb 45 b5 a6 69 ae 94 57 92 7b 65 6d f9 5c ec 18 ab bc be 89 69 9c Data Ascii: .Cyv{TAmK&Zzjk/dj>_X<nlmqs;ip7#-v`ww1+^B@~ewhtNWU?P7)S)aZRYmxrD"r%co^%Rmzm-U.R F~fEiW{em\i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49971	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	976	OUT	GET /secure/checkout/assets/js/md5.min.js HTTP/1.1 Host: buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:26 UTC	530	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: application/javascript Content-Length: 3714 Connection: close last-modified: Tue, 27 Feb 2024 21:38:05 GMT etag: "65de563d-e82" expires: Mon, 08 Jan 2035 16:49:26 GMT cache-control: public, max-age=315360000 x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: HIT Age: 8530 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe290adace32c7-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	839	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 64 28 6e 2c 74 29 7b 76 61 72 20 72 3d 28 36 35 35 33 35 26 6e 29 2b 28 36 35 35 33 35 26 74 29 3b 72 65 74 75 72 6e 28 6e 3e 3e 31 36 29 2b 28 74 3e 3e 31 36 29 2b 28 72 3e 3e 31 36 29 3c 3c 31 36 7c 36 35 35 33 35 26 72 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6e 2c 74 2c 72 2c 65 2c 6f 2c 75 29 7b 72 65 74 75 72 6e 20 64 28 28 75 3d 64 28 64 28 74 2c 6e 29 2c 64 28 65 2c 75 29 29 29 3c 3c 6f 7c 75 3e 3e 3e 33 32 2d 6f 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 6e 2c 74 2c 72 2c 65 2c 6f 2c 75 2c 63 29 7b 72 65 74 75 72 6e 20 66 28 74 26 72 7c 7e 74 26 65 2c 6e 2c 74 2c 6f 2c 75 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 6e 2c 74 2c 72 2c 65 2c 6f 2c Data Ascii: !function(n){"use strict";function d(n,t){var r=(65535&n)+(65535&t);return(n>>16)+(t>>16)+(r>>16)<<16\|65535&r}function f(n,t,r,e,o,u){return d((u=d(d(t,n),d(e,u)))<<o\|u>>>32-o,r)}function l(n,t,r,e,o,u,c){return f(t&r\|~t&e,n,t,o,u,c)}function g(n,t,r,e,o,
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 5d 2c 37 2c 31 37 37 30 30 33 35 34 31 36 29 2c 61 3d 6c 28 61 2c 63 2c 66 2c 69 2c 6e 5b 68 2b 39 5d 2c 31 32 2c 2d 31 39 35 38 34 31 34 34 31 37 29 2c 69 3d 6c 28 69 2c 61 2c 63 2c 66 2c 6e 5b 68 2b 31 30 5d 2c 31 37 2c 2d 34 32 30 36 33 29 2c 66 3d 6c 28 66 2c 69 2c 61 2c 63 2c 6e 5b 68 2b 31 31 5d 2c 32 32 2c 2d 31 39 39 30 34 30 34 31 36 32 29 2c 63 3d 6c 28 63 2c 66 2c 69 2c 61 2c 6e 5b 68 2b 31 32 5d 2c 37 2c 31 38 30 34 36 30 33 36 38 32 29 2c 61 3d 6c 28 61 2c 63 2c 66 2c 69 2c 6e 5b 68 2b 31 33 5d 2c 31 32 2c 2d 34 30 33 34 31 31 30 31 29 2c 69 3d 6c 28 69 2c 61 2c 63 2c 66 2c 6e 5b 68 2b 31 34 5d 2c 31 37 2c 2d 31 35 30 32 30 30 32 32 39 30 29 2c 63 3d 67 28 63 2c 66 3d 6c 28 66 2c 69 2c 61 2c 63 2c 6e 5b 68 2b 31 35 5d 2c 32 32 2c 31 32 33 36 Data Ascii: ],7,1770035416),a=l(a,c,f,i,n[h+9],12,-1958414417),i=l(i,a,c,f,n[h+10],17,-42063),f=l(f,i,a,c,n[h+11],22,-1990404162),c=l(c,f,i,a,n[h+12],7,1804603682),a=l(a,c,f,i,n[h+13],12,-40341101),i=l(i,a,c,f,n[h+14],17,-1502002290),c=g(c,f=l(f,i,a,c,n[h+15],22,1236
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 2c 69 2c 6e 5b 68 2b 37 5d 2c 31 30 2c 31 31 32 36 38 39 31 34 31 35 29 2c 69 3d 6d 28 69 2c 61 2c 63 2c 66 2c 6e 5b 68 2b 31 34 5d 2c 31 35 2c 2d 31 34 31 36 33 35 34 39 30 35 29 2c 66 3d 6d 28 66 2c 69 2c 61 2c 63 2c 6e 5b 68 2b 35 5d 2c 32 31 2c 2d 35 37 34 33 34 30 35 35 29 2c 63 3d 6d 28 63 2c 66 2c 69 2c 61 2c 6e 5b 68 2b 31 32 5d 2c 36 2c 31 37 30 30 34 38 35 35 37 31 29 2c 61 3d 6d 28 61 2c 63 2c 66 2c 69 2c 6e 5b 68 2b 33 5d 2c 31 30 2c 2d 31 38 39 34 39 38 36 36 30 36 29 2c 69 3d 6d 28 69 2c 61 2c 63 2c 66 2c 6e 5b 68 2b 31 30 5d 2c 31 35 2c 2d 31 30 35 31 35 32 33 29 2c 66 3d 6d 28 66 2c 69 2c 61 2c 63 2c 6e 5b 68 2b 31 5d 2c 32 31 2c 2d 32 30 35 34 39 32 32 37 39 39 29 2c 63 3d 6d 28 63 2c 66 2c 69 2c 61 2c 6e 5b 68 2b 38 5d 2c 36 2c 31 38 37 Data Ascii: ,i,n[h+7],10,1126891415),i=m(i,a,c,f,n[h+14],15,-1416354905),f=m(f,i,a,c,n[h+5],21,-57434055),c=m(c,f,i,a,n[h+12],6,1700485571),a=m(a,c,f,i,n[h+3],10,-1894986606),i=m(i,a,c,f,n[h+10],15,-1051523),f=m(f,i,a,c,n[h+1],21,-2054922799),c=m(c,f,i,a,n[h+8],6,187
2025-01-10 16:49:26 UTC	137	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 3a 6e 2e 6d 64 35 3d 74 7d 28 74 68 69 73 29 3b Data Ascii: unction"==typeof define&&define.amd?define(function(){return t}):"object"==typeof module&&module.exports?module.exports=t:n.md5=t}(this);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49976	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	716	OUT	GET /lib/v1/js/vaultFrame.js?v=65 HTTP/1.1 Host: pay.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:26 UTC	728	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true Cache-Control: public, max-age=14400 last-modified: Fri, 13 Dec 2024 13:40:04 GMT etag: W/"3e3f-193c03f7320" vary: Accept-Encoding CF-Cache-Status: MISS Expires: Fri, 10 Jan 2025 20:49:26 GMT Set-Cookie: __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; SameSite=Lax; path=/; expires=Sat, 11-Jan-25 16:49:26 GMT; HttpOnly Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe290aec3432d3-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	641	IN	Data Raw: 33 65 33 66 0d 0a 2f 2a 2a 0a 20 2a 20 45 78 74 72 61 63 74 20 77 68 65 72 65 20 77 65 20 61 72 65 20 68 6f 73 74 69 6e 67 20 74 68 69 73 2e 2e 2e 2e 0a 20 2a 2f 0a 63 6f 6e 73 74 20 63 75 72 72 65 6e 74 44 6f 6d 61 69 6e 56 46 20 3d 20 28 20 6e 65 77 20 55 52 4c 28 20 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 20 29 20 29 3b 0a 0a 2f 2a 2a 0a 20 2a 20 52 65 70 72 65 73 65 6e 74 73 20 61 6e 20 6f 62 6a 65 63 74 20 66 6f 72 20 6d 61 6e 61 67 69 6e 67 20 61 6e 64 20 69 6e 74 65 72 61 63 74 69 6e 67 20 77 69 74 68 20 61 6e 20 69 66 72 61 6d 65 20 75 73 65 64 20 66 6f 72 20 70 61 79 6d 65 6e 74 20 70 72 6f 63 65 73 73 69 6e 67 2e 20 0a 20 2a 20 49 74 20 70 72 6f 76 69 64 65 73 20 6d 65 74 68 6f 64 73 20 66 6f 72 20 69 6e 69 Data Ascii: 3e3f/** * Extract where we are hosting this.... /const currentDomainVF = ( new URL( document.currentScript.src ) );/* * Represents an object for managing and interacting with an iframe used for payment processing. * It provides methods for ini
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 61 6d 65 2e 0a 20 2a 20 40 70 72 6f 70 65 72 74 79 20 7b 66 75 6e 63 74 69 6f 6e 7d 20 61 64 64 53 74 79 6c 65 73 68 65 65 74 20 2d 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 61 64 64 20 61 20 73 74 79 6c 65 73 68 65 65 74 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 27 73 20 68 65 61 64 2e 0a 20 2a 20 40 70 72 6f 70 65 72 74 79 20 7b 66 75 6e 63 74 69 6f 6e 7d 20 63 72 65 61 74 65 49 66 72 61 6d 65 20 2d 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 63 72 65 61 74 65 20 61 6e 64 20 61 70 70 65 6e 64 20 61 6e 20 69 66 72 61 6d 65 20 65 6c 65 6d 65 6e 74 2e 0a 20 2a 20 40 70 72 6f 70 65 72 74 79 20 7b 66 75 6e 63 74 69 6f 6e 7d 20 63 72 65 61 74 65 54 6f 6b 65 6e 46 69 65 6c 64 49 66 4e 6f 74 45 78 69 73 74 73 20 2d 20 46 75 6e 63 74 69 6f 6e 20 74 Data Ascii: ame. * @property {function} addStylesheet - Function to add a stylesheet link to the document's head. * @property {function} createIframe - Function to create and append an iframe element. * @property {function} createTokenFieldIfNotExists - Function t
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 20 79 6f 75 72 20 6f 77 6e 20 72 69 73 6b 2e 0a 09 09 09 75 6e 65 6e 63 72 79 70 74 65 64 43 61 72 64 45 6c 65 6d 65 6e 74 73 3a 0a 09 09 09 7b 0a 09 09 09 09 63 61 72 64 6e 75 6d 62 65 72 3a 20 6e 75 6c 6c 2c 0a 09 09 09 09 6d 6f 6e 74 68 3a 20 6e 75 6c 6c 2c 0a 09 09 09 09 79 65 61 72 3a 20 6e 75 6c 6c 2c 0a 09 09 09 09 63 76 76 3a 20 6e 75 6c 6c 0a 09 09 09 7d 0a 09 09 7d 2c 0a 0a 09 09 65 6c 65 6d 65 6e 74 73 3a 0a 09 09 7b 0a 09 09 09 69 66 72 61 6d 65 3a 20 6e 75 6c 6c 2c 0a 09 09 09 70 61 79 6d 65 6e 74 3a 20 6e 75 6c 6c 2c 0a 09 09 09 74 6f 6b 65 6e 3a 20 6e 75 6c 6c 2c 0a 09 09 09 63 61 72 64 6e 75 6d 62 65 72 3a 20 6e 75 6c 6c 2c 0a 09 09 09 63 61 72 64 6d 6f 6e 74 68 3a 20 6e 75 6c 6c 2c 0a 09 09 09 63 61 72 64 79 65 61 72 3a 20 6e 75 6c 6c 2c Data Ascii: your own risk.unencryptedCardElements:{cardnumber: null,month: null,year: null,cvv: null}},elements:{iframe: null,payment: null,token: null,cardnumber: null,cardmonth: null,cardyear: null,
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 3b 0a 0a 09 09 09 2f 2f 20 41 74 74 61 63 68 20 74 68 65 20 73 74 79 6c 65 73 68 65 65 74 20 74 6f 20 74 68 65 20 63 75 72 72 65 6e 74 20 64 6f 63 75 6d 65 6e 74 0a 09 09 09 2f 2f 20 76 61 75 6c 74 46 72 61 6d 65 2e 61 64 64 53 74 79 6c 65 73 68 65 65 74 28 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 74 68 65 20 69 66 72 61 6d 65 0a 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 63 72 65 61 74 65 49 66 72 61 6d 65 28 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 74 68 65 20 74 6f 6b 65 6e 20 66 69 65 6c 64 20 69 66 20 77 65 20 64 69 64 6e 27 74 20 66 69 6e 64 20 69 74 0a 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 63 72 65 61 74 65 54 6f 6b 65 6e 46 69 65 6c 64 49 66 4e 6f 74 45 78 69 73 74 73 28 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 74 Data Ascii: ;// Attach the stylesheet to the current document// vaultFrame.addStylesheet();// Create the iframevaultFrame.createIframe();// Create the token field if we didn't find itvaultFrame.createTokenFieldIfNotExists();// Create t
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 65 2e 69 66 72 61 6d 65 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 53 74 61 74 75 73 20 3d 20 27 73 65 6e 74 27 3b 0a 09 09 09 2f 2f 20 41 73 6b 20 74 68 65 20 66 72 61 6d 65 20 74 6f 20 73 74 61 72 74 20 76 61 6c 69 64 61 74 69 6f 6e 0a 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 73 65 6e 64 4d 65 73 73 61 67 65 54 6f 49 66 72 61 6d 65 28 0a 09 09 09 7b 0a 09 09 09 09 74 79 70 65 3a 20 27 74 6f 6b 65 6e 69 7a 65 27 0a 09 09 09 7d 20 29 3b 0a 0a 09 09 09 2f 2f 20 57 61 69 74 20 66 6f 72 20 74 68 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 09 09 09 61 77 61 69 74 20 76 61 75 6c 74 46 72 61 6d 65 2e 77 61 69 74 46 6f 72 49 66 72 61 6d 65 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 53 74 61 74 75 73 28 29 3b 0a 0a 09 09 09 72 65 74 75 72 Data Ascii: e.iframeCommunicationStatus = 'sent';// Ask the frame to start validationvaultFrame.sendMessageToIframe({type: 'tokenize'} );// Wait for the validation to completeawait vaultFrame.waitForIframeCommunicationStatus();retur
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 20 27 45 78 70 69 72 61 74 69 6f 6e 20 6d 6f 6e 74 68 20 69 73 20 69 6e 63 6f 72 72 65 63 74 21 27 0a 09 09 20 2a 20 7d 2c 0a 09 09 20 2a 20 7b 0a 09 09 20 2a 20 09 09 70 61 74 68 3a 20 27 63 72 65 64 69 74 63 61 72 64 73 5f 79 65 61 72 27 2c 0a 09 09 20 2a 20 09 09 6d 73 67 3a 20 27 45 78 70 69 72 61 74 69 6f 6e 20 79 65 61 72 20 69 73 20 69 6e 63 6f 72 72 65 63 74 21 27 0a 09 09 20 2a 20 7d 20 5d 20 29 0a 09 09 20 2a 2f 0a 09 09 73 68 6f 77 45 72 72 6f 72 73 3a 20 28 20 65 72 72 6f 72 73 20 29 20 3d 3e 0a 09 09 7b 0a 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 73 65 6e 64 4d 65 73 73 61 67 65 54 6f 49 66 72 61 6d 65 28 0a 09 09 09 7b 0a 09 09 09 09 74 79 70 65 3a 20 27 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 27 2c 0a 09 09 09 09 65 72 72 6f 72 73 Data Ascii: 'Expiration month is incorrect!' * }, * { * path: 'creditcards_year', * msg: 'Expiration year is incorrect!' * } ] ) */showErrors: ( errors ) =>{vaultFrame.sendMessageToIframe({type: 'validation-error',errors
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 20 74 61 6b 65 73 20 75 70 20 61 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 77 69 64 74 68 0a 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 65 6c 65 6d 65 6e 74 73 2e 69 66 72 61 6d 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 60 31 30 30 25 60 3b 0a 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 65 6c 65 6d 65 6e 74 73 2e 69 66 72 61 6d 65 2e 73 72 63 20 3d 0a 09 09 09 09 60 24 7b 76 61 75 6c 74 46 72 61 6d 65 2e 6f 70 74 69 6f 6e 73 2e 6f 72 69 67 69 6e 7d 2f 76 61 75 6c 74 2f 76 31 2f 66 6f 72 6d 66 72 61 6d 65 2d 24 7b 76 61 75 6c 74 46 72 61 6d 65 2e 6f 70 74 69 6f 6e 73 2e 66 72 61 6d 65 54 79 70 65 7d 3f 61 3d 24 7b 76 61 75 6c 74 46 72 61 6d 65 2e 6f 70 74 69 6f 6e 73 2e 61 63 63 6f 75 6e 74 49 64 7d 26 73 3d 24 7b 76 61 75 6c 74 46 72 61 6d 65 2e 6f 70 74 Data Ascii: takes up all available widthvaultFrame.elements.iframe.style.width = `100%`;vaultFrame.elements.iframe.src =`${vaultFrame.options.origin}/vault/v1/formframe-${vaultFrame.options.frameType}?a=${vaultFrame.options.accountId}&s=${vaultFrame.opt
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 68 65 74 68 65 72 20 77 65 20 66 6f 75 6e 64 20 74 68 65 20 74 6f 6b 65 6e 20 65 6c 65 6d 65 6e 74 0a 09 09 09 69 66 20 28 20 21 76 61 75 6c 74 46 72 61 6d 65 2e 65 6c 65 6d 65 6e 74 73 5b 20 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 20 5d 20 29 0a 09 09 09 7b 0a 09 09 09 09 2f 2f 20 49 66 20 6e 6f 74 2c 20 63 72 65 61 74 65 20 69 74 0a 09 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 65 6c 65 6d 65 6e 74 73 5b 20 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 20 5d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 20 27 69 6e 70 75 74 27 20 29 3b 0a 09 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 65 6c 65 6d 65 6e 74 73 5b 20 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 20 5d 2e 74 79 70 65 20 3d 20 27 68 69 64 64 65 6e 27 3b 0a 09 Data Ascii: hether we found the token elementif ( !vaultFrame.elements[ elementInstance ] ){// If not, create itvaultFrame.elements[ elementInstance ] = document.createElement( 'input' );vaultFrame.elements[ elementInstance ].type = 'hidden';
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 62 6f 74 74 6f 6d 3a 20 33 2e 39 72 65 6d 3b 22 3e 0a 09 09 09 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 74 69 70 2d 73 65 63 74 69 6f 6e 20 76 69 73 61 20 62 67 2d 77 68 69 74 65 22 3e 0a 09 09 09 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 74 69 70 2d 68 65 61 64 69 6e 67 22 3e 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 56 69 73 61 2c 20 4d 61 73 74 65 72 43 61 72 64 2c 20 3c 62 72 3e 44 69 73 63 6f 76 65 72 20 26 61 6d 70 3b 20 4a 43 42 0a 09 09 09 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 09 09 09 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 74 69 70 2d 62 6f 64 79 22 3e 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 74 69 Data Ascii: bottom: 3.9rem;"> <div class="tooltip-section visa bg-white"> <div class="tooltip-heading"> Visa, MasterCard, <br>Discover & JCB </div> <div class="tooltip-body"> <div class="toolti
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 20 27 5b 64 61 74 61 2d 74 6f 6f 6c 74 69 70 3d 63 76 76 5d 27 20 29 3b 0a 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 61 74 74 61 63 68 43 56 56 54 6f 6f 6c 74 69 70 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 28 29 3b 0a 09 09 7d 2c 0a 0a 09 09 61 74 74 61 63 68 43 56 56 54 6f 6f 6c 74 69 70 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 3a 20 28 29 20 3d 3e 0a 09 09 7b 0a 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 65 6c 65 6d 65 6e 74 73 2e 63 76 76 54 6f 6f 6c 74 69 70 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 20 27 5b 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 63 6c 6f 73 65 5d 27 20 29 0a 09 09 09 09 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 20 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 Data Ascii: ocument.querySelector( '[data-tooltip=cvv]' );vaultFrame.attachCVVTooltipEventHandlers();},attachCVVTooltipEventHandlers: () =>{vaultFrame.elements.cvvTooltip.querySelector( '[data-tooltip-close]' ).addEventListener( 'click', functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49970	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	984	OUT	GET /secure/checkout/assets/js/dictionary.js?v=29 HTTP/1.1 Host: buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:26 UTC	532	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: application/javascript Content-Length: 31103 Connection: close last-modified: Fri, 03 Jan 2025 16:20:04 GMT etag: "67780e34-797f" expires: Mon, 08 Jan 2035 16:49:26 GMT cache-control: public, max-age=315360000 x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: HIT Age: 8529 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe290aefb3f797-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	837	IN	Data Raw: 63 6f 6e 73 74 20 64 69 63 74 69 6f 6e 61 72 79 20 3d 20 7b 0a 20 20 20 20 22 74 69 74 6c 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 42 75 79 47 6f 6f 64 73 20 2d 20 53 65 63 75 72 65 20 43 68 65 63 6b 6f 75 74 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 42 75 79 47 6f 6f 64 73 20 2d 20 50 61 67 6f 20 53 65 67 75 72 6f 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 42 75 79 47 6f 6f 64 73 20 2d 20 50 61 69 65 6d 65 6e 74 20 53 c3 a9 63 75 72 69 73 c3 a9 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 42 75 79 47 6f 6f 64 73 20 2d 20 53 69 63 68 65 72 65 20 5a 61 68 6c 75 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 42 75 79 47 6f 6f 64 73 20 2d 20 43 68 65 63 6b 6f 75 74 20 53 65 67 75 72 6f 22 2c 0a 20 20 20 20 20 20 20 20 61 Data Ascii: const dictionary = { "title": { en: "BuyGoods - Secure Checkout", es: "BuyGoods - Pago Seguro", fr: "BuyGoods - Paiement Scuris", de: "BuyGoods - Sichere Zahlung", pt: "BuyGoods - Checkout Seguro", a
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 41 74 74 65 6e 64 65 7a 20 21 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 57 61 72 74 65 21 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 45 73 70 65 72 61 21 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 a7 d9 86 d8 aa d8 b8 d8 b1 21 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 70 6f 70 75 70 2d 73 70 65 63 69 61 6c 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 54 68 69 73 20 53 70 65 63 69 61 6c 20 4f 66 66 65 72 20 69 73 20 4e 4f 54 20 47 75 61 72 61 6e 74 65 65 64 20 74 6f 20 4c 61 73 74 20 42 65 79 6f 6e 64 20 54 6f 64 61 79 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 45 73 74 61 20 6f 66 65 72 74 61 20 65 73 70 65 63 69 61 6c 20 4e 4f 20 65 73 74 c3 a1 20 67 61 72 61 6e 74 69 7a 61 Data Ascii: ", fr: "Attendez !", de: "Warte!", pt: "Espera!", ar: "!" }, "popup-special": { en: "This Special Offer is NOT Guaranteed to Last Beyond Today", es: "Esta oferta especial NO est garantiza
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 3a 20 22 44 65 74 61 6c 6c 65 73 20 64 65 6c 20 50 65 64 69 64 6f 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 44 c3 a9 74 61 69 6c 73 20 44 65 20 4c 61 20 43 6f 6d 6d 61 6e 64 65 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 45 69 6e 7a 65 6c 68 65 69 74 65 6e 20 64 65 72 20 42 65 73 74 65 6c 6c 75 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 44 65 74 61 6c 68 65 73 20 64 6f 20 50 65 64 69 64 6f 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 aa d9 81 d8 a7 d8 b5 d9 8a d9 84 20 d8 a7 d9 84 d8 b7 d9 84 d8 a8 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 6e 6f 72 6d 61 6c 2d 70 72 69 63 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 4e 6f 72 6d 61 6c 20 50 72 69 63 65 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 50 72 65 63 69 6f Data Ascii: : "Detalles del Pedido", fr: "Dtails De La Commande", de: "Einzelheiten der Bestellung", pt: "Detalhes do Pedido", ar: " " }, "normal-price": { en: "Normal Price", es: "Precio
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 50 61 79 6d 65 6e 74 20 4d 65 74 68 6f 64 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 4d c3 a9 74 6f 64 6f 20 64 65 20 70 61 67 6f 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 4d 6f 64 65 20 64 65 20 70 61 69 65 6d 65 6e 74 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 5a 61 68 6c 75 6e 67 73 6d 65 74 68 6f 64 65 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 4d c3 a9 74 6f 64 6f 20 64 65 20 50 61 67 61 6d 65 6e 74 6f 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 b7 d8 b1 d9 8a d9 82 d8 a9 20 d8 a7 d9 84 d8 af d9 81 d8 b9 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 63 72 65 64 69 74 2d 63 61 72 64 22 3a 20 7b Data Ascii: }, "payment-method": { en: "Payment Method", es: "Mtodo de pago", fr: "Mode de paiement", de: "Zahlungsmethode", pt: "Mtodo de Pagamento", ar: " " }, "credit-card": {
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 61 6e 64 64 61 74 65 6e 20 76 6f 6e 20 50 61 79 50 61 6c 20 66 c3 bc 72 20 64 65 6e 20 43 68 65 63 6b 6f 75 74 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 55 73 65 20 6f 73 20 64 61 64 6f 73 20 64 65 20 65 6e 76 69 6f 20 64 6f 20 50 61 79 50 61 6c 20 70 61 72 61 20 6f 20 63 68 65 63 6b 6f 75 74 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 a7 d8 b3 d8 aa d8 ae d8 af d9 85 20 d8 a8 d9 8a d8 a7 d9 86 d8 a7 d8 aa 20 d8 a7 d9 84 d8 b4 d8 ad d9 86 20 d9 85 d9 86 20 50 61 79 50 61 6c 20 d9 84 d8 a5 d8 aa d9 85 d8 a7 d9 85 20 d8 b9 d9 85 d9 84 d9 8a d8 a9 20 d8 a7 d9 84 d8 af d9 81 d8 b9 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 63 75 73 74 6f 6d 65 72 2d 69 6e 66 6f 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 43 75 73 74 6f 6d 65 72 20 49 6e Data Ascii: anddaten von PayPal fr den Checkout", pt: "Use os dados de envio do PayPal para o checkout", ar: " PayPal " }, "customer-info": { en: "Customer In
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: c3 b3 72 69 6f 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 a7 d9 84 d9 87 d8 a7 d8 aa d9 81 20 d9 85 d8 b7 d9 84 d9 88 d8 a8 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 45 6d 61 69 6c 20 61 64 64 72 65 73 73 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 45 2d 6d 61 69 6c 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 45 2d 6d 61 69 6c 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 45 6d 61 69 6c 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 45 6e 64 65 72 65 c3 a7 6f 20 64 65 20 45 2d 6d 61 69 6c 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 b9 d9 86 d9 88 d8 a7 d9 86 20 d8 a7 d9 84 d8 a8 d8 b1 d9 8a d8 af 20 d8 a7 d9 84 d8 a5 d9 84 d9 83 d8 aa d8 b1 d9 88 d9 86 d9 8a 22 Data Ascii: rio", ar: " " }, "email": { en: "Email address", es: "E-mail", fr: "E-mail", de: "Email", pt: "Endereo de E-mail", ar: " "
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 64 65 72 65 c3 a7 6f 20 64 65 20 63 6f 62 72 61 6e c3 a7 61 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 b9 d9 86 d9 88 d8 a7 d9 86 20 d8 a7 d9 84 d8 b4 d8 ad d9 86 20 d8 a7 d9 84 d8 ae d8 a7 d8 b5 20 d8 a8 d9 83 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 61 64 64 72 65 73 73 2d 72 65 71 75 69 72 65 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 53 68 69 70 70 69 6e 67 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 4c 61 20 64 69 72 65 63 63 69 c3 b3 6e 20 64 65 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 65 73 20 6f 62 6c 69 67 61 74 6f 72 69 61 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 4c 27 61 64 72 65 73 73 65 20 64 65 20 66 61 63 74 75 72 61 74 69 6f 6e 20 65 73 74 20 6f Data Ascii: dereo de cobrana", ar: " " }, "address-required": { en: "Shipping address is required", es: "La direccin de facturacin es obligatoria", fr: "L'adresse de facturation est o
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 53 65 20 72 65 71 75 69 65 72 65 20 63 c3 b3 64 69 67 6f 20 70 6f 73 74 61 6c 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 4c 65 20 63 6f 64 65 20 70 6f 73 74 61 6c 20 65 73 74 20 72 65 71 75 69 73 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 50 6f 73 74 6c 65 69 74 7a 61 68 6c 20 69 73 74 20 65 72 66 6f 72 64 65 72 6c 69 63 68 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 4f 20 43 45 50 20 c3 a9 20 6f 62 72 69 67 61 74 c3 b3 72 69 6f 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 b1 d9 85 d8 b2 20 d8 a7 d9 84 d8 a8 d8 b1 d9 8a d8 af 20 d9 85 d8 b7 d9 84 d9 88 d8 a8 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 43 69 74 79 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 43 69 75 64 Data Ascii: Se requiere cdigo postal", fr: "Le code postal est requis", de: "Postleitzahl ist erforderlich", pt: "O CEP obrigatrio", ar: " " }, "city": { en: "City", es: "Ciud
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 22 63 61 72 64 2d 72 65 71 75 69 72 65 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 43 72 65 64 69 74 20 63 61 72 64 20 6e 75 6d 62 65 72 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 53 65 20 72 65 71 75 69 65 72 65 20 6e c3 ba 6d 65 72 6f 20 64 65 20 74 61 72 6a 65 74 61 20 64 65 20 63 72 c3 a9 64 69 74 6f 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 4c 65 20 6e 75 6d c3 a9 72 6f 20 64 65 20 63 61 72 74 65 20 64 65 20 63 72 c3 a9 64 69 74 20 65 73 74 20 72 65 71 75 69 73 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 4b 72 65 64 69 74 6b 61 72 74 65 6e 6e 75 6d 6d 65 72 20 69 73 74 20 65 72 66 6f 72 64 65 72 6c 69 63 68 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 4f 20 6e c3 ba 6d 65 72 6f 20 64 Data Ascii: "card-required": { en: "Credit card number is required", es: "Se requiere nmero de tarjeta de crdito", fr: "Le numro de carte de crdit est requis", de: "Kreditkartennummer ist erforderlich", pt: "O nmero d
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 64 65 3a 20 22 53 69 63 68 65 72 68 65 69 74 73 63 6f 64 65 20 69 73 74 20 65 72 66 6f 72 64 65 72 6c 69 63 68 22 2c 20 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 4f 20 63 c3 b3 64 69 67 6f 20 64 65 20 73 65 67 75 72 61 6e c3 a7 61 20 c3 a9 20 6f 62 72 69 67 61 74 c3 b3 72 69 6f 22 2c 20 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 b1 d9 85 d8 b2 20 d8 a7 d9 84 d8 a3 d9 85 d8 a7 d9 86 20 d9 85 d8 b7 d9 84 d9 88 d8 a8 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 63 61 72 64 2d 33 22 3a 20 7b 20 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 54 68 65 20 33 20 64 69 67 69 74 73 20 6f 6e 20 74 68 65 20 63 61 72 64 27 73 20 62 61 63 6b 2e 22 2c 20 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 4c 6f 73 20 33 20 64 c3 ad 67 69 74 6f 73 20 65 6e 20 65 6c Data Ascii: de: "Sicherheitscode ist erforderlich", pt: "O cdigo de segurana obrigatrio", ar: " " }, "card-3": { en: "The 3 digits on the card's back.", es: "Los 3 dgitos en el

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	49973	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	784	OUT	GET /assets/checkout/img/badge-60-day.png HTTP/1.1 Host: cdn.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:26 UTC	824	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: image/webp Content-Length: 16834 Connection: close Age: 1295 Cf-Bgj: imgq:100,h2pri Cf-Polished: origFmt=png, origSize=22361 Content-Disposition: inline; filename="badge-60-day.webp" etag: "51daeb8d05b2dd445e1f1069f4dbd668" last-modified: Fri, 02 Apr 2021 16:44:14 GMT vary: Accept via: 1.1 29117767a034875a8b49afd641f25d82.cloudfront.net (CloudFront) x-amz-cf-id: dx88SUtb5BvfncoA5jgjI-URKvl6BGH3q9Kk-tXL-VGMI4QLGuuIIQ== x-amz-cf-pop: JFK52-P2 x-cache: Hit from cloudfront CF-Cache-Status: HIT Expires: Fri, 10 Jan 2025 20:49:26 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe290adcd0426b-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	545	IN	Data Raw: 52 49 46 46 ba 41 00 00 57 45 42 50 56 50 38 4c ad 41 00 00 2f 67 c0 18 10 55 87 82 b6 6d a4 ba fc 59 ef 5e 06 11 31 01 b9 b7 5c a1 30 e8 44 42 8b f6 9f 85 dd 5c 04 6d 91 69 9d f5 22 f7 94 b3 fd 57 25 29 bf 24 46 70 77 87 15 3b 77 97 83 bb bb bb 9e 15 ce b8 bb cb c5 dd 19 f7 76 97 1a 6d f7 ae aa 71 3b a3 e7 96 21 cb 13 c6 78 44 9d 04 db 8e a1 c2 40 92 a8 2d ac 88 a3 57 b5 23 89 49 86 30 fa 21 12 0b 80 60 2a 0e 82 e8 e7 2e 3b 9c b3 9f d4 88 87 55 13 45 a7 81 ee 7b 49 18 37 0f 24 00 56 27 90 0e 89 70 58 12 d2 0d 83 a7 d7 04 50 51 10 01 01 c8 b1 b6 6d 79 94 fb 77 d7 78 f2 9d 3f bf 7c 71 19 60 bc 22 15 de fe 3d 3b 99 9d b0 01 2d 9d 8e d6 75 03 d6 b9 eb 91 64 6b db 22 27 2f 33 1d b9 eb 2e 1c 36 c0 94 2d 30 73 2d ff ff ae 54 57 bb cb 49 b5 2b f2 e1 2d f1 e4 0f Data Ascii: RIFFAWEBPVP8LA/gUmY^1\0DB\mi"W%)$Fpw;wvmq;!xD@-W#I0!`*.;UE{I7$V'pXPQmywx?\|q`"=;-udk"'/3.6-0s-TWI+-
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: e7 ee ee 7e dd 9d ba a0 b7 e4 c8 de 6b fe 33 4b f6 3e b1 03 24 3c 08 10 e4 e1 a4 2d 2d 6e af 05 ca c5 a9 17 f7 40 bd c5 2a 48 72 b6 07 da b6 4d db b6 6d 6b 71 8c d1 3d 6d 2c db b6 6d db b6 6d db b6 6d 6c db b6 cd 65 6b ac d1 7b 6b b5 94 c8 40 92 24 43 b5 b6 71 78 81 15 eb ff 97 4b 72 2a cc cc 0c 0d 75 8b b9 aa b1 aa 1a 86 99 99 99 99 99 99 99 99 99 99 99 a7 99 bb 9a b9 bb 7a aa eb 42 e1 f0 ec 22 e4 38 91 af 29 7f 4f fb a8 96 a3 ee 06 06 b7 90 28 96 ac 38 d9 01 6d 80 55 4a 05 d5 f0 a8 50 9d f6 b9 2a a8 f8 bb 82 a0 bc 61 66 66 26 c5 cc 49 2d a1 4e ab 2c 80 e3 98 15 93 ad 56 e3 de a0 c2 ee 2d 84 e3 ae 6a df a5 c6 27 6a 64 e4 9c 91 b8 80 7b c2 89 66 59 3e 8c 0b c8 0e de 90 e2 c4 32 93 fb 85 7c 9f 61 9f 51 01 1b 4b a5 82 aa 4b b5 4f 2c 5d 15 54 9c 6c 80 f9 b5 Data Ascii: ~k3K>$<--n@HrMmkq=m,mmmlek{k@$CqxKruzB"8)O(8mUJP*aff&I-N,V-j'jd{fY>2\|aQKKO,]Tl
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: f4 1e 8b d3 5a 44 99 55 26 53 0b 7c 3a 77 b7 2d a0 a0 de a8 ac f4 f0 c4 35 ff 35 13 a4 be ee 45 9f 69 06 79 ab f2 0d ef 2e 86 04 87 af 47 ec a1 1e c9 7b 4a bc 53 de 53 6c 9b 33 ee e1 8c a9 1b 88 df 8a a8 9d d0 1f 95 f2 e4 70 2d 8f ed 78 54 1c 50 68 40 27 29 aa 97 62 3b 29 2e f1 d8 24 e0 a1 80 4e 03 8e e7 91 fc 80 16 79 d8 c4 23 66 0e 21 73 42 a4 c3 66 16 bd b0 64 82 85 55 e2 3d 9f 97 fd cc a9 cc 2a ac b8 cc e4 32 0b 41 65 43 88 47 c6 2e 27 9f 06 80 1a ae a7 79 e3 9f a4 5d 34 bb 45 87 45 f9 8d f4 20 7b 01 6a 7d fb b7 e1 af 07 c8 5c 68 bb 2f cf 57 24 d8 43 23 5e 12 33 64 cd 51 d2 97 a8 d2 56 88 19 53 d7 90 b6 62 d1 6b 61 38 2a a1 e1 84 62 07 ef a7 50 51 0a 13 a6 30 71 40 0c 03 ba ef d1 43 8f 47 2d ae e7 08 89 c5 77 2d 2e f6 78 9e c3 c1 0e d7 f5 d8 c8 63 d1 Data Ascii: ZDU&S\|:w-55Eiy.G{JSSl3p-xTPh@')b;).$Ny#f!sBfdU=2AeCG.'y]4EE {j}\h/W$C#^3dQVSbka8bPQ0q@CG-w-.xc
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: dd db 6a 4f 1d 32 bd be 70 97 06 ef 4f 4c 30 2a dd e3 3d 31 91 58 0f 06 c7 74 8b 61 ba c5 62 d3 6c 1e 75 3a fc b7 d3 61 ff d7 65 ce e1 a7 d3 e7 c2 bc 15 14 94 41 c6 01 cf f5 e2 55 f6 b4 49 fb 54 cc a9 45 94 f9 a8 c4 c3 6c b9 4f 87 95 29 83 ba dd 22 67 56 0a a4 3b 90 0c 25 47 55 72 14 85 64 00 b1 7b 50 89 44 16 47 a8 f6 aa be 28 1f 88 37 10 3f 25 a7 56 48 9a 42 8a 14 52 d6 45 76 a7 b4 6d 56 30 f8 44 ea 72 a7 70 bb 93 85 dc 6f 6f 37 66 74 99 01 09 cb 5e d1 a8 e3 2b 53 54 a6 14 1e 53 b8 42 e1 82 cc 05 b6 e7 07 0c cf d7 2c d7 61 b8 a1 88 c2 18 de cb 3e 1a 7f be 61 79 f9 85 7b d4 85 47 51 ac 3b dd e2 91 d9 86 8a a9 9e 11 9f ea e9 98 e6 6a 70 fa 3a de ff e9 b4 29 68 f7 2a 84 06 01 2c 30 99 d6 61 a7 6c ad 84 a3 17 6d dc 2f 4e 1b 2f 67 bc 5f b9 d2 b0 ca 41 7a 88 Data Ascii: jO2pOL0=1Xtablu:aeAUITElO)"gV;%GUrd{PDG(7?%VHBREvmV0Drpoo7ft^+STSB,a>ay{GQ;jp:)h,0alm/N/g_Az
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 5a 11 af a6 8a ef cf 28 bf 15 95 2a 0d eb fc 3a 9e a5 60 f4 4e 2f 20 eb 4d 10 cc 07 07 12 11 a9 3d 20 22 f2 1d 96 4e 08 5c 0f 12 14 79 2b 65 75 0e 75 72 34 f5 3a f2 53 4f 9c ff d2 cc b4 da 87 9d fe bd b0 30 a0 67 a0 32 85 c0 12 9e 39 04 48 87 9e b2 90 14 70 29 60 52 81 4e 51 63 79 c2 95 b7 ff 6f a1 9f 86 ae d0 7b 4c b6 6b c1 1e 2c a2 66 af 67 ff 73 94 5a d6 bd 79 aa 84 e2 84 c5 7a a5 2f 21 7b 0a 91 1b 45 22 16 26 49 45 6b 22 79 27 e2 8f 2a 46 1f 2d 6f d4 ef 57 bb 43 c3 a9 ac 4a b1 1c 15 b0 09 21 13 ac f2 5e 8f 25 ca 4c 74 fa 6a a7 6a 9a 46 68 94 a6 68 97 3c 73 32 44 d4 23 9f e6 64 ca 30 81 74 13 d3 a8 84 91 80 8c dd 91 1c 25 b7 b9 ec b6 89 5c db 82 91 fd 13 76 98 a1 a6 86 ca 54 6c db 83 4a 86 63 0a 9f c2 c1 a0 33 40 71 04 b6 a8 68 95 4c 7d 68 ad 0d 58 5f Data Ascii: Z(:`N/ M= "N\y+euur4:SO0g29Hp)`RNQcyo{Lk,fgsZyz/!{E"&IEk"y'F-oWCJ!^%LtjjFhh<s2D#d0t%\vTlJc3@qhL}hX_
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 19 3b 0a aa 12 8e 56 8c 1e 8b 32 55 d1 fd 87 be ec 7e 94 92 9a a5 4c 19 12 7a e8 f9 88 a8 6b 50 14 91 59 72 ff 92 fe 7f ba c1 0a 67 47 a0 68 0f 71 22 f4 41 95 c9 ad 52 62 8b 68 4e 36 e6 64 8f 7e ff ef 56 b5 7a 83 6a 29 03 16 fd ed 3a 75 e1 13 88 dd 1c 32 33 a3 c7 42 87 41 8a 02 b4 3e 55 fd e1 31 0b fc e9 1e 43 f5 2f 08 2f ba 8a dd 92 76 bf 80 9e fe ab 2e c1 29 33 07 93 df 16 09 76 07 40 cb 9f 82 8b 4e 44 3f 90 68 96 2f 67 be 85 e5 9b 2b b7 0a 5c 4b a4 6b 6d c2 f5 1a 9b 30 5d 7c 09 00 6a 8f e0 ac ec ea 6e 58 4e 0e 6b 5a 00 68 0a 0c 96 6c 95 3e 75 6f 65 2e 12 29 1b 94 3d 8c 5b 0b 9e ee 20 79 10 69 40 bc ea 85 db 8f 48 da 2f 77 d2 97 e6 a6 0e 6c 98 1d a1 88 82 ab ac 0c d0 e0 a0 30 22 71 eb 81 3f 5c 63 85 93 a3 d8 49 8d 3e 28 d3 07 09 15 55 5a 22 ac b8 2a c2 Data Ascii: ;V2U~LzkPYrgGhq"ARbhN6d~Vzj):u23BA>U1C//v.)3v@ND?h/g+\Kkm0]\|jnXNkZhl>uoe.)=[ yi@H/wl0"q?\cI>(UZ"*
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 96 a0 6d 94 d4 09 78 c7 bd 9c e0 9a 94 71 80 ac 2b bf 2d a2 69 7b 75 ba 8c e0 d4 d4 a0 82 0c d3 4c b5 3f 1b 5e b5 d3 f6 ac 5a 5c a0 d9 55 34 bb 6a b4 69 12 ed 9a e0 d6 63 b5 81 21 ee 46 9f 21 2e 00 14 40 ea 84 51 f6 b5 c2 c7 92 a3 8c d3 44 b4 0e 49 7b 50 69 56 70 ec 08 43 2b c2 16 16 52 12 61 4f 50 da bf a0 ac 2b b0 27 00 19 98 89 1c 79 4c 2c d6 74 0e 1a 00 8c 9b 2b 22 b6 2a 37 fb 7d 10 af 4f b5 ca 42 7e 4b 4f 20 46 1f eb c1 5f f9 95 0f c9 71 bb 0a 80 df b3 9c a7 83 24 d8 bb 45 31 0a 1a 0c 4f ea ef e3 0d aa f7 2f 5a ec 97 cb 91 50 9d 2c 8c 09 7c 36 c1 7a 13 1d 77 cd e6 7a cd 51 54 40 00 57 54 75 00 b1 59 50 b4 2a 63 41 a4 10 72 c5 6d 91 74 f6 be f6 97 31 da 5f 3a c0 e2 36 74 3b e5 96 83 47 ed b5 6c 44 b3 2b 34 bf 48 3a 36 31 a7 2b 9b d6 5f 7c 15 38 af 1b Data Ascii: mxq+-i{uL?^Z\U4jic!F!.@QDI{PiVpC+RaOP+'yL,t+"7}OB~KO F_q$E1O/ZP,\|6zwzQT@WTuYPcArmt1_:6t;GlD+4H:61+_\|8
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 2e c7 dd 2a 66 92 30 52 43 85 ac 65 8f 0f 01 f0 5b 42 71 1b a9 9f 10 07 46 67 63 2e 00 f7 00 70 a7 a9 8e 2b 30 23 46 4f 8d 90 c4 1b 71 7a dc 32 de 9d 35 9a 73 2c 11 a1 d1 a0 0e 32 89 04 d5 44 d3 2c c1 52 02 3a 5c eb 07 9d 58 16 e4 bc c2 f5 1a be f3 1c ae 75 24 a7 15 22 cc 74 39 83 5f 29 3c 6b 80 16 80 a8 20 a8 d0 8a 50 26 fd 91 87 97 d1 69 92 9d 29 3b 6e 5f 64 9c 2a f4 ac 5e ab 30 31 f1 5c cb 5c 94 85 3b c8 70 87 cb db 59 31 8b 3c 02 c7 71 b0 cc 52 c4 cc e0 67 64 e2 6f a4 ae 76 eb de 91 22 25 b7 a2 8e 54 95 4f 89 54 4c f5 54 4a 01 8a 0e 1e 35 aa 08 d9 59 74 19 e8 b7 cb 30 ac 2e 36 54 61 20 2c c4 9c a2 de f0 6d 2b 99 ec c3 b6 eb ce f9 20 b0 c6 14 73 bc fd a6 59 db 1e 96 50 86 15 bc 10 c2 22 86 a2 75 10 dc 8d 1e 09 6a 0c 1c 56 d1 05 cd 00 e0 ab 0c 26 83 b8 Data Ascii: .f0RCe[BqFgc.p+0#FOqz25s,2D,R:\Xu$"t9_)<k P&i);n_d^01\\;pY1<qRgdov"%TOTLTJ5Yt0.6Ta ,m+ sYP"ujV&
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: cf a2 0f 40 6d 0b 54 e6 10 73 47 ce 41 92 5b c2 ea 21 39 4f ef 28 6b 9b 14 29 b9 12 85 14 b7 4d 2c 87 37 c8 f9 9f d2 85 7f 29 6e b3 5d e9 ad e8 f1 2b 80 1c a4 28 42 f0 3e bf 2b 84 9b ab 8e a7 c1 46 2f 25 51 53 cf b7 6a b9 5d 43 eb 25 82 ed 1e 00 7e d3 dc bf 7e 09 dc 99 42 17 8e e1 61 ce 02 e0 cb 3c ec 5e 8c 08 f6 c9 d5 9d 09 9b d6 f4 f9 9f 57 43 26 35 6e 5e 8f ea 8f a7 4c 61 ac 30 91 bd 36 fb 78 7f 95 d0 8d 28 d3 27 14 86 a0 4b b8 6c c8 ad 72 3a f8 84 2b 73 aa 3f af 69 7e 31 19 fb f8 51 fe e8 fd 67 2b e4 34 b8 c7 fd 9c 9f 1f 03 29 6b 42 7d 87 8a 3c 9f 52 90 73 d8 14 4d 32 46 0e 4c c1 c9 cd 79 20 11 55 0f cb e8 6c 00 c3 93 b4 06 c1 a9 18 a5 67 aa a4 f7 ad ff 89 87 b1 0c be a1 8d 50 69 62 e4 31 ab 52 61 33 44 88 ef 05 17 96 44 32 a9 0c c2 2e 7f 23 71 bf 5b Data Ascii: @mTsGA[!9O(k)M,7)n]+(B>+F/%QSj]C%~~Ba<^WC&5n^La06x('Klr:+s?i~1Qg+4)kB}<RsM2FLy UlgPib1Ra3DD2.#q[
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: c4 24 ad 5f 36 a1 ea 0d d8 66 8a 7e 1e 9d 6c bd 99 9b 36 8f 87 3a 9b b3 31 cf 8a d7 2f 9a a9 a9 b6 d4 d4 ea 6a 33 01 f8 0d 1b 9b 46 5f 6e 42 ed 39 fd 7d bd 5c 53 a7 cf 72 d6 2f 9b fb d7 7b f5 df bb 64 8c cd 1e 0d bd 45 d9 22 98 65 02 bc 22 fb ef 7f 6a 41 3f 5e cb 66 4c 54 2c c9 c4 23 92 83 5f db 2d 90 db fc 25 6d 75 55 a2 a0 2d 52 a9 af 43 34 3f 82 2b 3a 31 13 a1 3f 0a d7 2a 81 cf 2d be 00 ae 10 3c ae 04 42 6a 7d d0 02 ab 4f bc 0d 00 75 a7 5c 4e ef 48 3d ee eb 54 4c 4f d1 ac eb 1a 33 ad 90 e4 5c 49 72 10 56 82 d7 08 39 57 1a 5b c0 a5 08 a8 03 69 06 26 37 63 72 7f 2e 71 bf 5a 49 17 39 a8 75 9d 0a 1f 48 55 4b 20 47 61 8f 06 8e 46 2e d2 8d c0 3a b3 bf ef 6f 36 eb 4c 33 01 f8 0d 83 0f 2e 98 69 63 43 dd 7d 62 88 fb 4f 0d 76 7f de 4c 73 7e f9 92 c5 f7 72 6f bb Data Ascii: $_6f~l6:1/j3F_nB9}\Sr/{dE"e"jA?^fLT,#_-%muU-RC4?+:1?*-<Bj}Ou\NH=TLO3\IrV9W[i&7cr.qZI9uHUK GaF.:o6L3.icC}bOvLs~ro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	49972	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	981	OUT	GET /secure/checkout/assets/js/app.js?v=1.0.12 HTTP/1.1 Host: buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:26 UTC	534	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: application/javascript Content-Length: 236476 Connection: close last-modified: Tue, 07 Jan 2025 18:37:03 GMT etag: "677d744f-39bbc" expires: Mon, 08 Jan 2035 16:49:26 GMT cache-control: public, max-age=315360000 x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: HIT Age: 8529 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe290aea064207-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	835	IN	Data Raw: 2f 2f 20 49 6e 69 74 69 61 6c 69 7a 65 20 55 52 4c 20 63 6f 6d 70 6f 6e 65 6e 74 73 0a 6c 65 74 20 64 6f 6d 61 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 2c 0a 20 20 20 20 70 61 74 68 6e 61 6d 65 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2c 0a 20 20 20 20 63 68 65 63 6b 6f 75 74 50 61 72 61 6d 73 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 73 6c 69 63 65 28 20 31 20 29 2c 0a 20 20 20 20 63 68 65 63 6b 6f 75 74 55 72 6c 20 3d 20 64 6f 6d 61 69 6e 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2c 20 2f 2f 73 65 6e 74 20 74 6f 20 4c 6f 67 43 61 72 Data Ascii: // Initialize URL componentslet domain = window.location.host, pathname = window.location.pathname, checkoutParams = window.location.search.slice( 1 ), checkoutUrl = domain + window.location.pathname + window.location.search, //sent to LogCar
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 6c 50 61 72 61 6d 73 2e 67 65 74 28 20 22 72 65 73 75 6c 74 5f 73 74 72 22 20 29 20 3d 3d 20 6e 75 6c 6c 20 29 20 3f 20 22 22 20 3a 20 75 72 6c 50 61 72 61 6d 73 2e 67 65 74 28 20 22 72 65 73 75 6c 74 5f 73 74 72 22 20 29 2c 0a 20 20 20 20 0a 20 20 20 20 2f 2f 20 49 6e 69 74 69 61 6c 69 7a 65 20 66 6f 72 6d 20 68 65 6c 70 65 72 73 0a 20 20 20 20 73 61 6d 65 53 68 69 70 70 69 6e 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 22 73 61 6d 65 2d 73 68 69 70 70 69 6e 67 22 20 29 2c 0a 20 20 20 20 72 65 63 75 72 72 69 6e 67 43 68 65 63 6b 62 6f 78 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 22 72 65 63 75 72 72 69 6e 67 2d 63 68 65 63 6b 22 20 29 2c 0a 20 20 20 20 73 75 62 6d 69 74 Data Ascii: lParams.get( "result_str" ) == null ) ? "" : urlParams.get( "result_str" ), // Initialize form helpers sameShipping = document.getElementById( "same-shipping" ), recurringCheckbox = document.getElementById( "recurring-check" ), submit
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 65 73 74 20 70 61 72 61 6d 73 0a 20 20 20 20 76 69 64 20 3d 20 75 72 6c 50 61 72 61 6d 73 2e 67 65 74 28 22 76 69 64 31 22 29 20 7c 7c 20 22 22 3b 0a 0a 2f 2f 20 53 70 65 63 69 61 6c 20 63 6f 64 65 6e 61 6d 65 20 73 65 74 75 70 20 66 6f 72 20 61 63 63 6f 75 6e 74 20 39 34 32 33 20 74 6f 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 70 72 69 63 65 20 6f 6e 20 63 68 65 63 6b 6f 75 74 20 66 6f 72 20 41 75 73 74 72 69 61 20 61 73 20 66 6f 72 20 47 65 72 6d 61 6e 79 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 74 61 78 65 73 20 61 70 70 6c 69 65 64 20 66 6f 72 20 41 75 73 74 72 69 61 0a 2f 2f 20 69 66 20 28 20 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 39 34 32 33 20 29 0a 2f 2f 20 7b 0a 2f 2f 20 20 20 20 20 73 77 69 74 63 68 28 63 6f 64 65 6e 61 6d Data Ascii: est params vid = urlParams.get("vid1") \|\| "";// Special codename setup for account 9423 to have the same price on checkout for Austria as for Germany, regardless of the taxes applied for Austria// if ( accountID == 9423 )// {// switch(codenam
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 34 38 34 33 38 30 32 22 20 29 20 7c 7c 0a 20 20 20 20 28 20 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 27 36 38 31 39 27 20 26 26 20 73 65 73 73 69 64 32 20 3d 3d 20 22 73 65 73 73 69 64 32 30 32 33 30 37 31 30 31 35 31 34 32 38 39 36 32 22 20 29 20 7c 7c 0a 20 20 20 20 28 20 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 27 36 35 37 34 27 20 26 26 20 73 65 73 73 69 64 32 20 3d 3d 20 22 73 65 73 73 69 64 32 30 32 33 30 34 32 31 32 30 31 33 39 35 33 30 22 20 29 20 7c 7c 0a 20 20 20 20 28 20 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 27 37 30 38 36 27 20 26 26 20 73 65 73 73 69 64 32 20 3d 3d 20 22 73 65 73 73 69 64 32 30 32 33 30 36 31 35 31 36 34 37 32 37 36 38 37 22 20 29 20 7c 7c 0a 20 20 20 20 28 20 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 27 37 30 38 35 27 20 26 26 20 Data Ascii: 4843802" ) \|\| ( accountID == '6819' && sessid2 == "sessid20230710151428962" ) \|\| ( accountID == '6574' && sessid2 == "sessid2023042120139530" ) \|\| ( accountID == '7086' && sessid2 == "sessid20230615164727687" ) \|\| ( accountID == '7085' &&
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 20 20 20 63 6f 6e 73 74 20 73 65 73 73 69 64 32 20 3d 20 61 77 61 69 74 20 77 61 69 74 46 6f 72 43 6f 6f 6b 69 65 28 27 73 65 73 73 69 64 32 27 2c 20 35 30 30 30 2c 20 31 30 30 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 65 73 73 69 64 32 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 6c 6f 61 64 50 61 67 65 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 74 6f 64 61 79 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 66 6f 72 6d 61 74 74 65 64 44 61 74 65 20 3d 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 74 72 69 6e 67 28 74 6f 64 61 79 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 29 20 2b 0a 20 20 20 20 20 20 20 20 Data Ascii: const sessid2 = await waitForCookie('sessid2', 5000, 100); if (sessid2) { reloadPage(); } else { const today = new Date(); const formattedDate = String(today.getFullYear()) +
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 20 22 73 63 72 69 70 74 22 20 29 3b 0a 20 20 20 20 74 72 61 63 6b 69 6e 67 43 6f 64 65 2e 74 79 70 65 20 3d 20 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 0a 20 20 20 20 74 72 61 63 6b 69 6e 67 43 6f 64 65 5b 20 22 61 73 79 6e 63 22 20 5d 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 74 72 61 63 6b 69 6e 67 43 6f 64 65 2e 73 72 63 20 3d 20 6d 79 73 72 63 3b 0a 20 20 20 20 6c 65 74 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 20 22 73 63 72 69 70 74 22 20 29 5b 20 30 20 5d 3b 0a 20 20 20 20 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 20 74 72 61 63 6b 69 6e 67 43 6f 64 65 2c 20 73 20 29 3b 0a 0a 7d 20 29 28 29 Data Ascii: nt.createElement( "script" ); trackingCode.type = "text/javascript"; trackingCode[ "async" ] = true; trackingCode.src = mysrc; let s = document.getElementsByTagName( "script" )[ 0 ]; s.parentNode.insertBefore( trackingCode, s );} )()
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 33 0a 20 20 20 20 20 20 20 20 6d 78 62 5f 73 65 73 73 69 6f 6e 20 3d 20 28 20 63 68 65 63 6b 6f 75 74 50 61 72 61 6d 73 2e 69 6e 64 65 78 4f 66 28 20 22 26 73 75 62 69 64 33 3d 22 20 29 20 21 3d 20 2d 31 20 29 20 3f 20 75 72 6c 50 61 72 61 6d 73 2e 67 65 74 28 20 27 73 75 62 69 64 33 27 20 29 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 20 6d 78 62 5f 73 65 73 73 69 6f 6e 20 21 3d 20 27 27 20 26 26 20 6d 78 62 5f 73 65 73 73 69 6f 6e 20 21 3d 20 6e 75 6c 6c 20 26 26 20 28 20 6d 78 62 5f 73 65 73 73 69 6f 6e 2e 73 70 6c 69 74 28 20 27 5f 27 20 29 20 29 2e 6c 65 6e 67 74 68 20 3e 20 31 20 29 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 68 65 63 6b 6f 75 74 49 6e 69 74 20 2b 3d 20 22 26 6d 78 62 5f 73 65 73 73 69 6f 6e Data Ascii: 3 mxb_session = ( checkoutParams.indexOf( "&subid3=" ) != -1 ) ? urlParams.get( 'subid3' ) : ""; if ( mxb_session != '' && mxb_session != null && ( mxb_session.split( '_' ) ).length > 1 ) { checkoutInit += "&mxb_session
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 6e 69 74 69 61 6c 69 7a 65 20 63 68 65 63 6b 6f 75 74 20 73 65 74 74 69 6e 67 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 63 68 65 63 6b 6f 75 74 50 61 72 61 6d 73 2e 69 6e 64 65 78 4f 66 28 20 22 26 6c 61 6e 67 3d 22 20 29 20 21 3d 20 2d 31 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 61 72 72 61 79 4c 61 6e 67 73 20 3d 20 5b 27 65 6e 27 2c 27 66 72 27 2c 27 64 65 27 2c 27 65 73 27 2c 27 70 74 27 2c 27 61 72 27 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 61 72 72 61 79 4c 61 6e 67 73 2e 69 6e 63 6c 75 64 65 73 28 75 72 6c 50 61 72 61 Data Ascii: return false; } // Initialize checkout settings if(checkoutParams.indexOf( "&lang=" ) != -1){ let arrayLangs = ['en','fr','de','es','pt','ar']; if(arrayLangs.includes(urlPara
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 20 22 23 63 72 65 64 69 74 63 61 72 64 73 5f 63 6f 75 6e 74 72 79 22 20 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 72 65 73 70 6f 6e 73 65 2e 63 6f 75 6e 74 72 69 65 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 20 22 23 63 72 65 64 69 74 63 61 72 64 73 5f 63 6f 75 6e 74 72 79 22 20 29 2e 76 61 6c 75 65 20 3d 20 72 65 73 70 6f 6e 73 65 2e 62 69 6c 6c 69 6e 67 43 6f 75 6e 74 72 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 20 22 23 61 64 64 72 65 73 73 65 73 5f 63 6f 75 6e 74 72 79 22 20 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 72 65 73 70 6f 6e 73 65 Data Ascii: document.querySelector( "#creditcards_country" ).innerHTML = response.countries; document.querySelector( "#creditcards_country" ).value = response.billingCountry; document.querySelector( "#addresses_country" ).innerHTML = response
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 68 3d 22 38 30 22 20 63 6c 61 73 73 3d 22 69 6d 67 2d 66 6c 75 69 64 22 20 61 6c 74 3d 22 44 69 67 69 74 61 6c 20 50 72 6f 64 75 63 74 22 20 3e 27 20 2b 20 27 20 27 20 2b 20 72 65 73 70 6f 6e 73 65 2e 70 72 6f 64 75 63 74 4e 61 6d 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 38 31 31 37 20 7c 7c 20 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 37 35 33 33 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 67 75 61 72 61 6e 74 65 65 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 64 2d 6e 6f 6e 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 61 63 63 6f 75 6e 74 49 44 20 Data Ascii: h="80" class="img-fluid" alt="Digital Product" >' + ' ' + response.productName; if(accountID == 8117 \|\| accountID == 7533) { document.querySelector("#guarantee").classList.add('d-none'); } if(accountID

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49968	151.101.130.133	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	383	OUT	GET /web/3.97.2/js/paypal-checkout.min.js HTTP/1.1 Host: js.braintreegateway.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:26 UTC	822	IN	HTTP/1.1 200 OK Connection: close Content-Length: 59638 Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "650b5a7f-e8f6" Last-Modified: Wed, 20 Sep 2023 20:47:59 GMT Paypal-Debug-Id: 2c0c2b3cca202 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000002c0c2b3cca202-155deabc1ae28470-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 10 Jan 2025 16:49:26 GMT X-Served-By: cache-dfw-kdfw8210151-DFW, cache-ewr-kewr1740042-EWR X-Cache: HIT, MISS X-Cache-Hits: 13, 0 X-Timer: S1736527766.208654,VS0,VE53 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 62 72 61 69 6e Data Ascii: !function(e){var t;"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):((t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).brain
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 65 2c 22 22 2b 74 5b 65 5d 29 7d 29 2c 65 3d 6e 65 77 20 73 2e 50 72 6f 6d 69 73 65 47 6c 6f 62 61 6c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 6e 29 7d 29 2c 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 65 77 20 45 72 72 6f 72 28 72 2e 73 72 63 2b 22 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 2e 22 29 29 7d 29 2c 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 Data Ascii: Object.keys(t).forEach(function(e){n.setAttribute("data-"+e,""+t[e])}),e=new s.PromiseGlobal(function(e,t){n.addEventListener("load",function(){e(n)}),n.addEventListener("error",function(){t(new Error(r.src+" failed to load."))}),n.addEventListener("abort
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 6e 28 65 29 26 26 2f 5c 62 47 53 41 5c 62 2f 2e 74 65 73 74 28 65 29 7d 7d 2c 7b 22 2e 2f 69 73 2d 69 6f 73 22 3a 31 32 7d 5d 2c 31 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 22 2e 2f 69 73 2d 69 6f 73 22 29 2c 69 3d 65 28 22 2e 2f 69 73 2d 69 6f 73 2d 67 6f 6f 67 6c 65 2d 73 65 61 72 63 68 2d 61 70 70 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 21 21 6e 28 65 Data Ascii: exports=function(e){return e=e\|\|window.navigator.userAgent,n(e)&&/\bGSA\b/.test(e)}},{"./is-ios":12}],10:[function(e,t,r){"use strict";var n=e("./is-ios"),i=e("./is-ios-google-search-app");t.exports=function(e){return e=e\|\|window.navigator.userAgent,!!n(e
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 73 2d 69 6f 73 2d 66 69 72 65 66 6f 78 22 29 2c 6f 3d 65 28 22 2e 2f 69 73 2d 69 6f 73 2d 77 65 62 76 69 65 77 22 29 2c 73 3d 65 28 22 2e 2f 69 73 2d 63 68 72 6f 6d 65 22 29 2c 61 3d 65 28 22 2e 2f 69 73 2d 73 61 6d 73 75 6e 67 22 29 2c 63 3d 65 28 22 2e 2f 69 73 2d 64 75 63 6b 64 75 63 6b 67 6f 22 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 2d 31 3c 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2e 69 6e 64 65 78 4f 66 28 22 4f 70 65 72 61 20 4d 69 6e 69 22 29 7d 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 21 28 6f 28 65 29 7c 7c 69 28 65 29 7c Data Ascii: s-ios-firefox"),o=e("./is-ios-webview"),s=e("./is-chrome"),a=e("./is-samsung"),c=e("./is-duckduckgo");function u(e){return-1<(e=e\|\|window.navigator.userAgent).indexOf("Opera Mini")}t.exports=function(e){return e=e\|\|window.navigator.userAgent,!(o(e)\|\|i(e)\|
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 65 29 7d 2c 69 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 65 29 7d 2c 69 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 65 29 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 5b 5d 2c 72 3d 30 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 74 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 28 65 3d 74 68 69 73 2e 5f 70 72 6f 6d 69 73 65 29 2e 74 68 Data Ascii: ce=function(e){return i.Promise.race(e)},i.reject=function(e){return i.Promise.reject(e)},i.resolve=function(e){return i.Promise.resolve(e)},i.prototype.then=function(){for(var e,t=[],r=0;r<arguments.length;r++)t[r]=arguments[r];return(e=this._promise).th
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 65 73 6f 6c 76 65 3d 28 65 3d 65 7c 7c 7b 7d 29 2e 6f 6e 52 65 73 6f 6c 76 65 7c 7c 69 2e 64 65 66 61 75 6c 74 4f 6e 52 65 73 6f 6c 76 65 2c 74 68 69 73 2e 5f 6f 6e 52 65 6a 65 63 74 3d 65 2e 6f 6e 52 65 6a 65 63 74 7c 7c 69 2e 64 65 66 61 75 6c 74 4f 6e 52 65 6a 65 63 74 2c 69 2e 73 68 6f 75 6c 64 43 61 74 63 68 45 78 63 65 70 74 69 6f 6e 73 28 65 29 26 26 74 68 69 73 2e 5f 70 72 6f 6d 69 73 65 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 74 68 69 73 2e 5f 72 65 73 65 74 53 74 61 74 65 28 29 29 7d 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 7b 7d 5d 2c 32 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 22 2e 2f 6c 69 62 2f 73 65 74 2d 61 74 74 72 69 62 75 74 65 73 22 29 Data Ascii: esolve=(e=e\|\|{}).onResolve\|\|i.defaultOnResolve,this._onReject=e.onReject\|\|i.defaultOnReject,i.shouldCatchExceptions(e)&&this._promise.catch(function(){}),this._resetState())}t.exports=n},{}],22:[function(e,t,r){"use strict";var n=e("./lib/set-attributes")
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 2c 32 36 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 78 78 78 78 78 78 78 78 2d 78 78 78 78 2d 34 78 78 78 2d 79 78 78 78 2d 78 78 78 78 78 78 78 78 78 78 78 78 22 2e 72 65 70 6c 61 63 65 28 2f 5b 78 79 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 3b 72 65 74 75 72 6e 28 22 78 22 3d 3d 3d 65 3f 74 3a 33 26 74 7c 38 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 29 7d 7d 2c 7b 7d 5d 2c 32 37 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c Data Ascii: ,26:[function(e,t,r){"use strict";t.exports=function(){return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(e){var t=16*Math.random()\|0;return("x"===e?t:3&t\|8).toString(16)})}},{}],27:[function(e,t,r){"use strict";Object.defineProperty(r,
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 72 74 79 4e 61 6d 65 73 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 21 3d 3d 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 2c 72 3d 2d 31 3d 3d 3d 69 2e 69 6e 64 65 78 4f 66 28 65 29 2c 65 3d 6f 7c 7c 22 5f 22 21 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 3b 72 65 74 75 72 6e 20 74 26 26 65 26 26 72 7d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 3d 61 28 74 29 7d 29 2c 6e 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 61 7d 2c 7b 22 2e 2f 6c 69 62 2f 64 65 66 65 72 72 65 64 Data Ascii: rtyNames(n.prototype).filter(function(e){var t="constructor"!==e&&"function"==typeof n.prototype[e],r=-1===i.indexOf(e),e=o\|\|"_"!==e.charAt(0);return t&&e&&r}).forEach(function(e){var t=n.prototype[e];n.prototype[e]=a(t)}),n},t.exports=a},{"./lib/deferred
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 72 20 69 3d 28 30 2c 61 2e 70 61 63 6b 61 67 65 50 61 79 6c 6f 61 64 29 28 65 2c 6e 2c 74 2c 72 29 3b 72 65 74 75 72 6e 21 21 69 26 26 28 74 68 69 73 2e 6c 69 6d 69 74 42 72 6f 61 64 63 61 73 74 54 6f 46 72 61 6d 65 73 41 72 72 61 79 3f 74 68 69 73 2e 74 61 72 67 65 74 46 72 61 6d 65 73 41 73 57 69 6e 64 6f 77 73 28 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 30 2c 61 2e 73 65 6e 64 4d 65 73 73 61 67 65 29 28 65 2c 69 2c 6e 29 7d 29 3a 28 30 2c 61 2e 62 72 6f 61 64 63 61 73 74 29 28 69 2c 7b 6f 72 69 67 69 6e 3a 6e 2c 66 72 61 6d 65 3a 77 69 6e 64 6f 77 2e 74 6f 70 7c 7c 77 69 6e 64 6f 77 2e 73 65 6c 66 7d 29 2c 21 30 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6d 69 74 41 73 50 72 6f 6d 69 73 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: r i=(0,a.packagePayload)(e,n,t,r);return!!i&&(this.limitBroadcastToFramesArray?this.targetFramesAsWindows().forEach(function(e){(0,a.sendMessage)(e,i,n)}):(0,a.broadcast)(i,{origin:n,frame:window.top\|\|window.self}),!0)},o.prototype.emitAsPromise=function(
2025-01-10 16:49:26 UTC	1379	IN	Data Raw: 44 65 73 74 72 6f 79 65 64 29 7b 74 68 69 73 2e 69 73 44 65 73 74 72 6f 79 65 64 3d 21 30 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 3b 74 68 69 73 2e 6f 66 66 28 74 2e 65 76 65 6e 74 4e 61 6d 65 2c 74 2e 68 61 6e 64 6c 65 72 29 7d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 2e 6c 65 6e 67 74 68 3d 30 7d 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 73 73 65 73 56 65 72 69 66 79 44 6f 6d 61 69 6e 43 68 65 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 76 65 72 69 66 79 44 6f 6d 61 69 6e 7c 7c 74 68 69 73 2e 63 68 65 63 6b 4f 72 69 67 69 6e 28 65 29 7d 2c 6f 2e 70 72 6f 74 Data Ascii: Destroyed){this.isDestroyed=!0;for(var e=0;e<this.listeners.length;e++){var t=this.listeners[e];this.off(t.eventName,t.handler)}this.listeners.length=0}},o.prototype.passesVerifyDomainCheck=function(e){return!this.verifyDomain\|\|this.checkOrigin(e)},o.prot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	49974	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	993	OUT	GET /secure/checkout/assets/js/paypal-cs-conversion.js?v=7 HTTP/1.1 Host: buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:26 UTC	532	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: application/javascript Content-Length: 43487 Connection: close last-modified: Thu, 25 Jul 2024 21:08:05 GMT etag: "66a2beb5-a9df" expires: Mon, 08 Jan 2035 16:49:26 GMT cache-control: public, max-age=315360000 x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: HIT Age: 8529 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe290b0c4c7d0b-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	837	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 6f 75 6e 74 72 79 43 6f 6e 76 65 72 73 69 6f 6e 28 69 6e 70 75 74 29 0a 7b 0a 20 20 63 6f 6e 73 74 20 70 61 79 70 61 6c 54 6f 43 6f 75 6e 74 72 79 20 3d 20 7b 0a 20 20 20 20 27 41 4c 27 3a 20 27 41 6c 62 61 6e 69 61 27 2c 0a 20 20 20 20 27 44 5a 27 3a 20 27 41 6c 67 65 72 69 61 27 2c 0a 20 20 20 20 27 41 44 27 3a 20 27 41 6e 64 6f 72 72 61 27 2c 0a 20 20 20 20 27 41 4f 27 3a 20 27 41 6e 67 6f 6c 61 27 2c 0a 20 20 20 20 27 41 49 27 3a 20 27 41 6e 67 75 69 6c 6c 61 27 2c 0a 20 20 20 20 27 41 47 27 3a 20 27 41 6e 74 69 67 75 61 20 26 20 42 61 72 62 75 64 61 27 2c 0a 20 20 20 20 27 41 52 27 3a 20 27 41 72 67 65 6e 74 69 6e 61 27 2c 0a 20 20 20 20 27 41 4d 27 3a 20 27 41 72 6d 65 6e 69 61 27 2c 0a 20 20 20 20 27 41 57 27 3a 20 27 Data Ascii: function countryConversion(input){ const paypalToCountry = { 'AL': 'Albania', 'DZ': 'Algeria', 'AD': 'Andorra', 'AO': 'Angola', 'AI': 'Anguilla', 'AG': 'Antigua & Barbuda', 'AR': 'Argentina', 'AM': 'Armenia', 'AW': '
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 27 43 61 79 6d 61 6e 20 49 73 6c 61 6e 64 73 27 2c 0a 20 20 20 20 27 54 44 27 3a 20 27 43 68 61 64 27 2c 0a 20 20 20 20 27 43 4c 27 3a 20 27 43 68 69 6c 65 27 2c 0a 20 20 20 20 27 43 32 27 3a 20 27 43 68 69 6e 61 27 2c 0a 20 20 20 20 27 43 4f 27 3a 20 27 43 6f 6c 6f 6d 62 69 61 27 2c 0a 20 20 20 20 27 4b 4d 27 3a 20 27 43 6f 6d 6f 72 6f 73 27 2c 0a 20 20 20 20 27 43 47 27 3a 20 27 43 6f 6e 67 6f 20 2d 20 42 72 61 7a 7a 61 76 69 6c 6c 65 27 2c 0a 20 20 20 20 27 43 44 27 3a 20 27 43 6f 6e 67 6f 20 2d 20 4b 69 6e 73 68 61 73 61 27 2c 0a 20 20 20 20 27 43 4b 27 3a 20 27 43 6f 6f 6b 20 49 73 6c 61 6e 64 73 27 2c 0a 20 20 20 20 27 43 52 27 3a 20 27 43 6f 73 74 61 20 52 69 63 61 27 2c 0a 20 20 20 20 27 43 49 27 3a 20 27 43 c3 b4 74 65 20 64 e2 80 99 49 76 6f 69 Data Ascii: 'Cayman Islands', 'TD': 'Chad', 'CL': 'Chile', 'C2': 'China', 'CO': 'Colombia', 'KM': 'Comoros', 'CG': 'Congo - Brazzaville', 'CD': 'Congo - Kinshasa', 'CK': 'Cook Islands', 'CR': 'Costa Rica', 'CI': 'Cte dIvoi
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 79 7a 73 74 61 6e 27 2c 0a 20 20 20 20 27 4c 41 27 3a 20 27 4c 61 6f 73 27 2c 0a 20 20 20 20 27 4c 56 27 3a 20 27 4c 61 74 76 69 61 27 2c 0a 20 20 20 20 27 4c 53 27 3a 20 27 4c 65 73 6f 74 68 6f 27 2c 0a 20 20 20 20 27 4c 49 27 3a 20 27 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 27 2c 0a 20 20 20 20 27 4c 54 27 3a 20 27 4c 69 74 68 75 61 6e 69 61 27 2c 0a 20 20 20 20 27 4c 55 27 3a 20 27 4c 75 78 65 6d 62 6f 75 72 67 27 2c 0a 20 20 20 20 27 4d 4b 27 3a 20 27 4d 61 63 65 64 6f 6e 69 61 27 2c 0a 20 20 20 20 27 4d 47 27 3a 20 27 4d 61 64 61 67 61 73 63 61 72 27 2c 0a 20 20 20 20 27 4d 57 27 3a 20 27 4d 61 6c 61 77 69 27 2c 0a 20 20 20 20 27 4d 59 27 3a 20 27 4d 61 6c 61 79 73 69 61 27 2c 0a 20 20 20 20 27 4d 56 27 3a 20 27 4d 61 6c 64 69 76 65 73 27 2c 0a 20 20 Data Ascii: yzstan', 'LA': 'Laos', 'LV': 'Latvia', 'LS': 'Lesotho', 'LI': 'Liechtenstein', 'LT': 'Lithuania', 'LU': 'Luxembourg', 'MK': 'Macedonia', 'MG': 'Madagascar', 'MW': 'Malawi', 'MY': 'Malaysia', 'MV': 'Maldives',
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 53 27 3a 20 27 53 65 72 62 69 61 27 2c 0a 20 20 20 20 27 53 43 27 3a 20 27 53 65 79 63 68 65 6c 6c 65 73 27 2c 0a 20 20 20 20 27 53 4c 27 3a 20 27 53 69 65 72 72 61 20 4c 65 6f 6e 65 27 2c 0a 20 20 20 20 27 53 47 27 3a 20 27 53 69 6e 67 61 70 6f 72 65 27 2c 0a 20 20 20 20 27 53 4b 27 3a 20 27 53 6c 6f 76 61 6b 69 61 27 2c 0a 20 20 20 20 27 53 49 27 3a 20 27 53 6c 6f 76 65 6e 69 61 27 2c 0a 20 20 20 20 27 53 42 27 3a 20 27 53 6f 6c 6f 6d 6f 6e 20 49 73 6c 61 6e 64 73 27 2c 0a 20 20 20 20 27 53 4f 27 3a 20 27 53 6f 6d 61 6c 69 61 27 2c 0a 20 20 20 20 27 5a 41 27 3a 20 27 53 6f 75 74 68 20 41 66 72 69 63 61 27 2c 0a 20 20 20 20 27 4b 52 27 3a 20 27 53 6f 75 74 68 20 4b 6f 72 65 61 27 2c 0a 20 20 20 20 27 45 53 27 3a 20 27 53 70 61 69 6e 27 2c 0a 20 20 20 20 Data Ascii: S': 'Serbia', 'SC': 'Seychelles', 'SL': 'Sierra Leone', 'SG': 'Singapore', 'SK': 'Slovakia', 'SI': 'Slovenia', 'SB': 'Solomon Islands', 'SO': 'Somalia', 'ZA': 'South Africa', 'KR': 'South Korea', 'ES': 'Spain',
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 63 6f 75 6e 74 72 79 20 6e 61 6d 65 0a 20 20 20 20 72 65 74 75 72 6e 20 70 61 79 70 61 6c 54 6f 43 6f 75 6e 74 72 79 5b 69 6e 70 75 74 5d 20 7c 7c 20 27 55 6e 6b 6e 6f 77 6e 27 3b 0a 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 2f 2f 20 49 66 20 74 68 65 20 69 6e 70 75 74 20 69 73 20 61 20 63 6f 75 6e 74 72 79 20 6e 61 6d 65 2c 20 72 65 74 75 72 6e 20 74 68 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 50 61 79 50 61 6c 20 63 6f 64 65 0a 20 20 20 20 63 6f 6e 73 74 20 66 6f 72 6d 61 74 74 65 64 43 6f 75 6e 74 72 79 4e 61 6d 65 20 3d 20 69 6e 70 75 74 2e 74 72 69 6d 28 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 63 6f 75 6e 74 72 79 54 6f 50 61 79 70 61 6c 5b 66 6f 72 6d 61 74 74 65 64 43 6f 75 6e 74 72 79 4e 61 6d 65 Data Ascii: orresponding country name return paypalToCountry[input] \|\| 'Unknown'; } else { // If the input is a country name, return the corresponding PayPal code const formattedCountryName = input.trim(); return countryToPaypal[formattedCountryName
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 27 4e 4d 27 3a 20 27 4e 65 77 20 4d 65 78 69 63 6f 27 2c 0a 20 20 20 20 20 20 20 20 27 4e 59 27 3a 20 27 4e 65 77 20 59 6f 72 6b 27 2c 0a 20 20 20 20 20 20 20 20 27 4e 43 27 3a 20 27 4e 6f 72 74 68 20 43 61 72 6f 6c 69 6e 61 27 2c 0a 20 20 20 20 20 20 20 20 27 4e 44 27 3a 20 27 4e 6f 72 74 68 20 44 61 6b 6f 74 61 27 2c 0a 20 20 20 20 20 20 20 20 27 4d 50 27 3a 20 27 4e 6f 72 74 68 65 72 6e 20 4d 61 72 69 61 6e 61 20 49 73 6c 61 6e 64 73 27 2c 0a 20 20 20 20 20 20 20 20 27 4f 48 27 3a 20 27 4f 68 69 6f 27 2c 0a 20 20 20 20 20 20 20 20 27 4f 4b 27 3a 20 27 4f 6b 6c 61 68 6f 6d 61 27 2c 0a 20 20 20 20 20 20 20 20 27 4f 52 27 3a 20 27 4f 72 65 67 6f 6e 27 2c 0a 20 20 20 20 20 20 20 20 27 50 41 27 3a 20 27 50 65 6e 6e 73 79 6c 76 61 6e Data Ascii: 'NM': 'New Mexico', 'NY': 'New York', 'NC': 'North Carolina', 'ND': 'North Dakota', 'MP': 'Northern Mariana Islands', 'OH': 'Ohio', 'OK': 'Oklahoma', 'OR': 'Oregon', 'PA': 'Pennsylvan
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 7d 2c 0a 20 20 20 20 27 41 72 67 65 6e 74 69 6e 61 27 3a 20 7b 0a 20 20 20 20 20 20 27 43 49 55 44 41 44 20 41 55 54 c3 93 4e 4f 4d 41 20 44 45 20 42 55 45 4e 4f 53 20 41 49 52 45 53 27 3a 20 27 42 75 65 6e 6f 73 20 41 69 72 65 73 20 28 43 69 75 64 61 64 29 27 2c 0a 20 20 20 20 20 20 27 42 55 45 4e 4f 53 20 41 49 52 45 53 27 3a 20 27 42 75 65 6e 6f 73 20 41 69 72 65 73 20 28 50 72 6f 76 69 6e 63 69 61 29 27 2c 0a 20 20 20 20 20 20 27 43 41 54 41 4d 41 52 43 41 27 3a 20 27 43 61 74 61 6d 61 72 63 61 27 2c 0a 20 20 20 20 20 20 27 43 48 41 43 4f 27 3a 20 27 43 68 61 63 6f 27 2c 0a 20 20 20 20 20 20 27 43 48 55 42 55 54 27 3a 20 27 43 68 75 62 75 74 27 2c 0a 20 20 20 20 20 20 27 43 c3 93 52 44 4f 42 41 27 3a 20 27 43 c3 b3 72 64 6f 62 61 27 2c 0a 20 20 20 20 Data Ascii: }, 'Argentina': { 'CIUDAD AUTNOMA DE BUENOS AIRES': 'Buenos Aires (Ciudad)', 'BUENOS AIRES': 'Buenos Aires (Provincia)', 'CATAMARCA': 'Catamarca', 'CHACO': 'Chaco', 'CHUBUT': 'Chubut', 'CRDOBA': 'Crdoba',
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 74 68 65 72 6e 20 54 65 72 72 69 74 6f 72 79 27 2c 0a 20 20 20 20 20 20 20 20 27 51 4c 44 27 3a 20 27 51 75 65 65 6e 73 6c 61 6e 64 27 2c 0a 20 20 20 20 20 20 20 20 27 53 41 27 3a 20 27 53 6f 75 74 68 20 41 75 73 74 72 61 6c 69 61 27 2c 0a 20 20 20 20 20 20 20 20 27 54 41 53 27 3a 20 27 54 61 73 6d 61 6e 69 61 27 2c 0a 20 20 20 20 20 20 20 20 27 56 49 43 27 3a 20 27 56 69 63 74 6f 72 69 61 27 2c 0a 20 20 20 20 20 20 20 20 27 57 41 27 3a 20 27 57 65 73 74 65 72 6e 20 41 75 73 74 72 61 6c 69 61 27 0a 20 20 20 20 7d 2c 0a 20 20 20 20 27 53 6f 75 74 68 20 4b 6f 72 65 61 27 3a 7b 0a 20 20 20 20 20 20 22 42 75 73 61 6e 22 3a 20 22 42 75 73 61 6e 22 2c 0a 20 20 20 20 20 20 22 43 68 75 6e 67 63 68 65 6f 6e 67 62 75 6b 2d 64 6f 22 3a 20 22 43 68 75 6e 67 63 68 65 Data Ascii: thern Territory', 'QLD': 'Queensland', 'SA': 'South Australia', 'TAS': 'Tasmania', 'VIC': 'Victoria', 'WA': 'Western Australia' }, 'South Korea':{ "Busan": "Busan", "Chungcheongbuk-do": "Chungche
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 53 4b 49 45 27 3a 20 27 5a 61 63 68 6f 64 6e 69 6f 2d 70 6f 6d 6f 72 73 6b 69 65 27 0a 20 20 20 20 7d 2c 0a 20 20 20 20 27 50 61 6e 61 6d 61 27 3a 7b 0a 20 20 20 20 20 20 27 50 72 6f 76 69 6e 63 69 61 20 64 65 20 42 6f 63 61 73 20 64 65 6c 20 54 6f 72 6f 27 3a 20 27 42 6f 63 61 73 20 64 65 6c 20 54 6f 72 6f 27 2c 0a 20 20 20 20 20 20 27 50 72 6f 76 69 6e 63 69 61 20 64 65 20 43 68 69 72 69 71 75 c3 ad 27 3a 20 27 43 68 69 72 69 71 75 c3 ad 27 2c 0a 20 20 20 20 20 20 27 50 72 6f 76 69 6e 63 69 61 20 64 65 20 43 6f 63 6c c3 a9 27 3a 20 27 43 6f 63 6c c3 a9 27 2c 0a 20 20 20 20 20 20 27 50 72 6f 76 69 6e 63 69 61 20 64 65 20 43 6f 6c c3 b3 6e 27 3a 20 27 43 6f 6c c3 b3 6e 27 2c 0a 20 20 20 20 20 20 27 50 72 6f 76 69 6e 63 69 61 20 64 65 6c 20 44 61 72 69 c3 Data Ascii: SKIE': 'Zachodnio-pomorskie' }, 'Panama':{ 'Provincia de Bocas del Toro': 'Bocas del Toro', 'Provincia de Chiriqu': 'Chiriqu', 'Provincia de Cocl': 'Cocl', 'Provincia de Coln': 'Coln', 'Provincia del Dari
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 42 48 45 52 49 27 3a 20 27 42 68 65 72 69 27 2c 0a 20 20 20 20 20 20 27 44 48 41 57 41 4c 41 47 49 52 49 27 3a 20 27 44 68 61 77 61 6c 61 67 69 72 69 27 2c 0a 20 20 20 20 20 20 27 47 41 4e 44 41 4b 49 27 3a 20 27 47 61 6e 64 61 6b 69 27 2c 0a 20 20 20 20 20 20 27 4a 41 4e 41 4b 50 55 52 27 3a 20 27 4a 61 6e 61 6b 70 75 72 27 2c 0a 20 20 20 20 20 20 27 4b 41 52 4e 41 4c 49 27 3a 20 27 4b 61 72 6e 61 6c 69 27 2c 0a 20 20 20 20 20 20 27 4b 41 54 48 4d 41 4e 44 55 27 3a 20 27 4b 61 74 68 6d 61 6e 64 75 27 2c 0a 20 20 20 20 20 20 27 4b 4f 53 49 27 3a 20 27 4b 6f 73 69 27 2c 0a 20 20 20 20 20 20 27 4c 55 4d 42 49 4e 49 27 3a 20 27 4c 75 6d 62 69 6e 69 27 2c 0a 20 20 20 20 20 20 27 4d 41 48 41 4b 41 4c 49 27 3a 20 27 4d 61 68 61 6b 61 6c 69 27 2c 0a 20 20 20 20 Data Ascii: BHERI': 'Bheri', 'DHAWALAGIRI': 'Dhawalagiri', 'GANDAKI': 'Gandaki', 'JANAKPUR': 'Janakpur', 'KARNALI': 'Karnali', 'KATHMANDU': 'Kathmandu', 'KOSI': 'Kosi', 'LUMBINI': 'Lumbini', 'MAHAKALI': 'Mahakali',

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.16	49977	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	979	OUT	GET /secure/checkout/assets/js/places.js?v=2 HTTP/1.1 Host: buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:26 UTC	530	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: application/javascript Content-Length: 3865 Connection: close last-modified: Mon, 27 Nov 2023 21:02:05 GMT etag: "656503cd-f19" expires: Mon, 08 Jan 2035 16:49:26 GMT cache-control: public, max-age=315360000 x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: HIT Age: 8529 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe290d18924358-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	839	IN	Data Raw: 76 61 72 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 2c 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2c 61 75 74 6f 63 6f 6d 70 6c 65 74 65 55 70 64 61 74 65 64 2c 70 6c 61 63 65 2c 70 6c 61 63 65 55 70 64 61 74 65 64 2c 63 6f 75 6e 74 72 79 2c 61 64 64 72 65 73 73 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 63 72 65 64 69 74 63 61 72 64 73 5f 61 64 64 72 65 73 73 22 29 2c 61 64 64 72 65 73 73 55 70 64 61 74 65 64 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 61 64 64 72 65 73 73 65 73 5f 61 64 64 72 65 73 73 22 29 2c 63 6f 6d 70 6f 6e 65 6e 74 46 6f 72 6d 3d 7b 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 5f 61 72 65 61 5f 6c 65 76 65 6c 5f 31 3a 22 6c 6f 6e 67 5f 6e 61 6d 65 22 2c 6c 6f 63 61 6c 69 74 79 3a Data Ascii: var geolocation,autocomplete,autocompleteUpdated,place,placeUpdated,country,address=document.querySelector("#creditcards_address"),addressUpdated=document.querySelector("#addresses_address"),componentForm={administrative_area_level_1:"long_name",louserty:
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 6c 65 74 65 28 61 64 64 72 65 73 73 55 70 64 61 74 65 64 2c 7b 74 79 70 65 73 3a 5b 22 61 64 64 72 65 73 73 22 5d 7d 29 29 2e 73 65 74 46 69 65 6c 64 73 28 5b 22 61 64 64 72 65 73 73 5f 63 6f 6d 70 6f 6e 65 6e 74 22 5d 29 2c 61 75 74 6f 63 6f 6d 70 6c 65 74 65 55 70 64 61 74 65 64 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 22 70 6c 61 63 65 5f 63 68 61 6e 67 65 64 22 2c 66 69 6c 6c 49 6e 41 64 64 72 65 73 73 55 70 64 61 74 65 64 29 7d 66 75 6e 63 74 69 6f 6e 20 66 69 6c 6c 49 6e 41 64 64 72 65 73 73 28 29 7b 69 66 28 70 6c 61 63 65 3d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 67 65 74 50 6c 61 63 65 28 29 2c 61 64 64 72 65 73 73 2e 76 61 6c 75 65 3d 22 22 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 72 65 64 69 74 63 61 72 64 Data Ascii: lete(addressUpdated,{types:["address"]})).setFields(["address_component"]),autocompleteUpdated.addListener("place_changed",fillInAddressUpdated)}function fillInAddress(){if(place=autocomplete.getPlace(),address.value="",document.getElementById("creditcard
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 69 74 63 61 72 64 73 5f 73 74 61 74 65 22 29 2e 76 61 6c 75 65 3d 74 2c 75 70 64 61 74 65 43 6f 75 6e 74 72 79 28 64 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 72 65 64 69 74 63 61 72 64 73 5f 63 6f 75 6e 74 72 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 6f 73 74 61 6c 5f 63 6f 64 65 22 3a 63 61 73 65 22 70 6f 73 74 61 6c 5f 63 6f 64 65 5f 70 72 65 66 69 78 22 3a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 72 65 64 69 74 63 61 72 64 73 5f 7a 69 70 22 29 2e 76 61 6c 75 65 3d 64 7d 7d 63 61 6c 63 75 6c 61 74 65 54 61 78 65 73 28 29 7d 66 75 6e 63 74 69 6f 6e 20 66 69 6c 6c 49 6e 41 64 64 72 65 73 73 55 70 64 61 74 65 64 28 29 7b 69 66 28 70 6c 61 63 65 55 70 64 61 74 65 64 3d 61 Data Ascii: itcards_state").value=t,updateCountry(d,document.getElementById("creditcards_country"));break;case"postal_code":case"postal_code_prefix":document.getElementById("creditcards_zip").value=d}}calculateTaxes()}function fillInAddressUpdated(){if(placeUpdated=a
2025-01-10 16:49:26 UTC	288	IN	Data Raw: 73 65 73 5f 63 6f 75 6e 74 72 79 22 29 2e 76 61 6c 75 65 3d 64 2c 53 74 61 74 65 53 65 6c 65 63 74 69 6f 6e 42 61 73 65 64 4f 6e 43 6f 75 6e 74 72 79 28 64 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 74 61 74 65 77 72 61 70 70 65 72 5f 73 68 69 70 70 69 6e 67 22 29 2c 22 61 64 64 72 65 73 73 65 73 5f 73 74 61 74 65 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 64 64 72 65 73 73 65 73 5f 73 74 61 74 65 22 29 2e 76 61 6c 75 65 3d 74 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 6f 73 74 61 6c 5f 63 6f 64 65 22 3a 63 61 73 65 22 70 6f 73 74 61 6c 5f 63 6f 64 65 5f 70 72 65 66 69 78 22 3a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 64 64 72 65 73 73 65 73 Data Ascii: ses_country").value=d,StateSelectionBasedOnCountry(d,document.getElementById("statewrapper_shipping"),"addresses_state"),document.getElementById("addresses_state").value=t;break;case"postal_code":case"postal_code_prefix":document.getElementById("addresses

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.16	49978	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	549	OUT	GET /assets/checkout/img/amex-cvv.jpg HTTP/1.1 Host: cdn.buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:26 UTC	869	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: image/jpeg Content-Length: 7274 Connection: close Age: 1295 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=7625 etag: "62e5dff3893a6d87c78d41fb91df4d6e" last-modified: Mon, 18 Jan 2021 16:42:51 GMT via: 1.1 c723324ff3815a0e30df3eecba242152.cloudfront.net (CloudFront) x-amz-cf-id: WttOG2JTmPMT-OThIfbhFJufrU84c5OkKw8d1inCCDw6s1l8Zh0bCQ== x-amz-cf-pop: JFK52-P2 x-amz-meta-s3b-last-modified: 20210118T164236Z x-amz-meta-sha256: 393fb32832435cd5d675a87dea3cd38c46eb46ec60c010b5c54555e9a8bbedeb x-cache: Hit from cloudfront CF-Cache-Status: HIT Expires: Fri, 10 Jan 2025 20:49:26 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe290d48b442b8-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	500	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 8e 00 e6 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 01 00 03 01 00 03 01 01 00 00 00 00 00 00 00 00 00 05 07 08 06 03 04 09 02 01 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 de fc b4 73 de f8 c9 14 72 f9 c8 a3 Data Ascii: JFIF"6sr
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 3b 72 07 a9 f1 60 57 bf b9 2a d3 2e 89 ef 6e a9 ba 6b 7f c7 a1 cc 73 69 d3 3c 7f 61 05 af 2f 96 aa 8e e3 72 ea bd ff 00 b2 74 c5 b3 b9 21 b3 16 81 ae 93 7d fe 49 b3 e6 b7 57 1b d9 70 ba 61 19 cd f3 30 38 76 5e 6a df cb 6c e4 ba ba 32 d1 8b f7 5d 85 2b 75 6b cc 17 c8 0a f7 dc ed 95 d2 ad fd d9 e8 9e 27 d0 b1 53 0e 47 ae 4d 6b fe 5a e9 56 fc 37 bd d5 a6 b1 3c 8d 88 38 48 ab 41 12 17 ce 02 bb b8 d5 d3 88 76 e4 53 7d 25 80 8b 73 1d 39 6c c2 63 c7 e4 9d a6 70 eb b2 55 ab 4c 6c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6a 2c a5 6b ec 44 f6 eb 5d c5 eb 7f ff c4 00 3a 10 00 01 04 01 03 03 03 01 05 04 09 05 00 00 00 00 04 02 03 05 06 01 00 07 54 13 15 16 11 12 14 56 20 36 37 40 74 21 23 24 25 10 22 31 34 35 38 44 Data Ascii: ;r`W*.nksi<a/rt!}IWpa08v^jl2]+uk'SGMkZV7<8HAvS}%s9lcpULlj,j,j,j,j,j,j,j,j,j,j,kD]:TV 67@t!#$%"1458D
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 91 ca fc 58 e8 a5 c7 17 18 a6 54 c9 70 11 bb 3d 3f 9a f4 16 5f b1 2c 39 38 d1 de 42 19 da 1a dc ad 4e 8c 14 7c bb b9 51 48 ca b3 86 63 3f 13 65 bf 4b 8f cb a9 b9 5a 9c ec 91 03 47 2a 48 53 57 d4 d7 99 cc 7d 32 56 bc ce 63 e9 92 b5 e6 73 1f 4c 95 af 33 98 fa 64 ad 79 9c c7 d3 24 ea ab 1e 79 13 87 4d 1e 3f c3 53 e8 c3 68 67 ec 58 6e 8c d7 4c 40 ee 45 cb 9b 95 23 df d4 8d ba 83 2f 5f 26 58 56 0d 75 b1 96 b6 9d 1a 33 72 e3 a4 65 84 8e 58 12 d1 cf 97 9c a5 9c cd 5f 98 84 91 74 35 c3 ce 14 a6 fd 3f 7a 9b b0 2f 55 d8 9e 15 83 4f 0d ff 00 4f 62 20 37 04 09 f9 6e da 91 24 a3 cc cb 59 79 0d ea cd 67 62 ac 22 08 7c 43 8b 6d 59 ce 33 a8 69 66 27 62 43 91 17 dd 91 8a 69 2f 37 a7 b7 6a 30 3f eb 17 15 3a 10 f8 56 12 a2 6c 76 d6 ab 4e 32 87 23 a5 0e cb b8 ce 7d 6b 97 10 Data Ascii: XTp=?_,98BN\|QHc?eKZG*HSW}2VcsL3dy$yM?ShgXnL@E#/_&XVu3reX_t5?z/UOOb 7n$Yygb"\|CmY3if'bCi/7j0?:VlvN2#}k
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: d3 ba 83 48 5d d9 aa e1 1c 49 31 c3 07 ce b1 8c 30 a4 95 10 99 4c af 9f 11 3b f2 ac 1e 1d 80 30 e6 ee 20 6d 90 64 11 bd 2f 08 ca 56 6f 89 47 0e a4 89 d7 6d 8d 16 d2 48 72 c5 9f a5 17 08 81 cf 95 1c 22 5e 56 22 df ac b2 76 dc 6d ee d2 9a 5a 54 95 21 22 6f d0 98 91 ca b2 d2 9b 52 16 a1 66 80 4e 80 ef f6 7c 6b 29 3e a2 f4 8f 59 74 4e fe 3d f4 10 9e 12 a4 a4 93 74 49 dc f3 a7 5a 6d 68 42 78 78 8d e3 61 24 f2 ac 1e 1f 0e 1c 56 90 0c a6 4e 84 83 49 61 29 0f a5 c3 6a 49 4a 40 12 3f 73 22 8e 15 95 24 15 14 ec 9b 62 13 77 84 c5 32 c2 1a 5b 04 25 47 50 9f c3 cf be b1 78 3c 3e a1 20 10 66 06 9a c7 95 21 94 94 ba 8d 78 ad 50 23 c3 ca 98 c3 61 af 7d 3c d2 2d 33 a8 ee ac 4e 11 0b f9 4f de 2b 5e d3 a1 fc c3 4a 64 a5 d6 92 82 74 7a 13 23 b8 7b 4f 95 21 b6 b0 ef 61 3b 95 Data Ascii: H]I10L;0 md/VoGmHr"^V"vmZT!"oRfN\|k)>YtN=tIZmhBxxa$VNIa)jIJ@?s"$bw2[%GPx<> f!xP#a}<-3NO+^Jdtz#{O!a;
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 28 ee 49 51 24 ec 3d df d7 05 3b 22 d5 1d ca 48 ef ee ac de 95 9b d2 b3 7a 56 6f 4a cd e9 59 bd 2b 37 a5 66 f4 ac de 95 9b d2 b3 7a 56 6f 4a cd e9 59 bd 2b 37 a5 66 f4 ac de 95 9b d2 b3 7a 56 6f 4a cd e9 59 bd 2b 37 a5 66 f4 ac de 95 9b d2 94 e1 8f ed 48 1e ad b4 ef 02 7f bd 7f ff c4 00 2a 10 01 01 00 02 01 04 02 01 03 03 05 00 00 00 00 00 01 11 00 21 31 41 c1 f0 f1 51 61 71 10 20 40 50 81 a1 30 60 91 b1 e1 ff da 00 08 01 01 00 01 3f 10 70 66 b6 31 cb 79 0f 89 9e 4b df 3c 97 be 79 2f 7c f2 5e f9 e4 bd f3 c9 7b e7 92 f7 cf 25 ef 9e 4b df 3c 97 be 79 2f 7c f2 5e f9 e4 bd f3 c9 7b e7 92 f7 cf 25 ef 9e 4b df 3c 97 be 79 2f 7c f2 5e f9 e4 bd f3 c9 7b e7 92 f7 cf 25 ef 9e 4b df 3c 97 be 1e 01 3c 79 c3 45 59 89 16 47 ef 7f d7 41 90 02 aa c0 32 0b 1d a2 e0 20 57 Data Ascii: (IQ$=;"HzVoJY+7fzVoJY+7fzVoJY+7fH*!1AQaq @P0`?pf1yK<y/\|^{%K<y/\|^{%K<y/\|^{%K<<yEYGA2 W
2025-01-10 16:49:26 UTC	1298	IN	Data Raw: d4 c0 03 51 0b 8c 06 34 9b bc fc e0 c0 bc aa 34 43 07 4d a6 08 45 be 0b 6d b1 03 91 43 78 b8 a8 08 5a 66 2a 4b 3a fe a2 04 3b 1d 93 25 02 06 85 67 39 73 ed 24 e5 94 8a aa 11 be 33 87 74 9e 00 06 08 09 66 9a d1 9b 64 6a 7c 10 26 40 81 66 da de 46 f1 71 3b 65 60 82 0c 6b 8c bd d0 3d 9e cb 2a aa 0d 8a ce 70 80 28 0a 40 a8 20 55 74 0e 9f d0 08 9d 04 c7 93 eb f9 81 56 40 1a fe 67 9c e3 5c 4e ec 14 23 05 b5 68 55 39 82 84 6a 6b 96 7d db 3e ed 9f 76 cf bb 67 dd b3 ee d9 f7 6c fb b6 7d db 3e ed 9f 76 cf bb 67 dd b3 ee d9 f7 6c fb b6 7d db 3e ed 9f 76 cf bb 67 dd b3 ee d9 f7 6c fb b6 7d db 2a 41 74 11 fb 99 60 f8 a3 ad 11 ec aa 0a b7 a0 e9 bf ff c4 00 32 11 00 02 02 01 03 03 02 04 01 0d 00 00 00 00 00 00 01 02 00 11 12 03 21 51 04 13 31 10 41 05 61 92 d1 a1 14 15 Data Ascii: Q44CMEmCxZfK:;%g9s$3tfdj\|&@fFq;e`k=p(@ UtV@g\N#hU9jk}>vgl}>vgl}>vgl}*At`2!Q1Aa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.16	49980	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	552	OUT	GET /assets/checkout/img/trust-guard.png HTTP/1.1 Host: cdn.buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:26 UTC	879	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: image/png Content-Length: 4619 Connection: close Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=5327 Vary: Accept etag: "3de9602cf1dd5a0af3b11a48e2e0a91f" last-modified: Thu, 21 Jan 2021 19:13:08 GMT via: 1.1 e8977de5589675c37360cfbb1bfac24a.cloudfront.net (CloudFront) x-amz-cf-id: l5fYOYvlk1KQ1K2x2zkYDR45vJknb8UCjWIl5QbfB18mqqYN3pwCDA== x-amz-cf-pop: JFK52-P2 x-amz-meta-s3b-last-modified: 20210112T081931Z x-amz-meta-sha256: f412b3902d3e216bf2c35f7764bc656b44397c11a94570c07b21ba943ba875f3 x-cache: Hit from cloudfront CF-Cache-Status: REVALIDATED Expires: Fri, 10 Jan 2025 20:49:26 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe290dabfe43f1-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	490	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 59 00 00 00 20 08 06 00 00 00 79 26 d4 a6 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 11 c5 49 44 41 54 78 da ed 59 79 58 8d e9 fb 3f 2d a7 ed 54 27 c9 d2 aa bd a8 4e a7 54 32 43 c8 32 c4 18 c6 36 64 17 33 c2 d8 86 99 b1 4c 18 7e 0c c6 32 84 3a 6d 4a 09 1d 4b a2 85 24 4b c6 92 16 3b 59 2a bb 6c 29 95 e8 f3 bb e7 be 3a 2e a7 ba 86 f8 7e ff fa 7a cf 75 5f cf 39 ef b9 9f fb 7d de cf 73 ef 8f 00 8d b8 ca 5e 95 21 e7 71 2e 52 8b 53 91 5c 94 8c d3 8f ce e0 49 c5 13 7c be fe f5 0a 14 7c 08 d7 9d b2 3b 98 93 3d 07 f6 72 07 68 6e d4 84 ca 4a 35 26 61 b0 10 96 db ac 30 39 6b 32 2e 3d bd f4 19 ce 8f 05 39 e3 ce 61 d8 6c b7 81 ca 22 15 98 0c 33 85 73 27 67 48 bd dc e0 ea 25 85 b3 8f 33 2c 06 5a 40 38 5f 03 2d Data Ascii: PNGIHDRY y&sRGBIDATxYyX?-T'NT2C26d3L~2:mJK$K;Y*l):.~zu_9}s^!q.RS\I\|\|;=rhnJ5&a09k2.=9al"3s'gH%3,Z@8_-
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 34 ec be b6 67 8d b6 eb 67 0f be 2f 63 39 8d 22 9e b3 89 68 63 ed 18 c2 a3 82 98 a7 c1 91 49 79 2e 93 ac ae cc 86 65 30 85 28 c9 e3 df 4c 8a b9 21 ef 90 ec 5f d6 5f 2b c3 2c c6 0c c9 85 c9 78 50 fe 80 40 26 40 1a 24 99 0a 5a 7f d5 86 41 36 f9 de 14 82 cd 4a 1a ac ac d1 11 2a 30 fc d9 90 34 de 13 92 0e 12 68 ac d1 a4 7b 2c a7 51 a4 11 a6 01 ef 5d ed e1 7f 70 38 06 a7 0d 41 db 9d 1e f0 dc e9 85 a1 07 87 c1 4d ee 06 cd 70 4d 1a dd a1 15 a9 0d 69 82 1b 9a 44 1b c2 7d 97 07 86 10 6f e7 bd 5d e0 2e 6f 8b e1 34 77 50 da 60 78 ed 6c c7 2f ad 11 a1 09 27 b9 0b c9 f4 87 df fe de b0 8a b3 82 d3 0e 67 18 44 35 81 f3 0e 09 b4 49 56 cb 58 63 98 c7 9a d3 3d 03 f8 ec f1 c1 40 9a df 7a 7b 6b 98 c5 9a a1 d7 be 5e 18 7c e0 3b 38 27 b8 c0 28 a6 19 9a c5 34 27 99 1a ef 7b 17 Data Ascii: 4gg/c9"hcIy.e0(L!__+,xP@&@$ZA6J*04h{,Q]p8AMpMiD}o].o4wP`xl/'gD5IVXc=@z{k^\|;8'(4'{
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: e5 68 d0 6f 15 38 66 eb 40 14 2b aa a3 85 4c 6c c6 d9 25 d9 0d 81 cc 66 f9 75 4a 5f 14 95 16 41 71 55 bd a9 a2 7c 32 05 a6 5b 28 27 df ed 85 e7 95 cf f1 ee f5 ba e6 35 8e df 3d 4e d6 a2 05 6d 99 36 f9 d4 61 5c 8d d6 5e 5c 69 ed b8 91 c0 e9 5e a7 bd 9d 58 76 42 41 02 b4 23 58 09 28 58 ba e2 cc 83 33 38 f9 e0 24 17 48 5f ed ff 4a a9 73 f8 a6 e6 0d 8a cb 8a 31 2a 63 14 44 61 22 f8 26 f9 e2 c8 bd 23 a8 7b 1d bd 7b 14 5d 13 bb 61 5c 46 00 f3 2b ae ea 37 d5 c8 2b c9 c7 c4 63 81 bc f9 04 f6 47 83 cc 00 b7 26 2d ee 79 49 82 cc e7 e9 38 76 ff 18 3a 27 76 26 a1 1f 0e b2 4e b8 0e 92 8b 53 f1 b4 ea 29 a7 4c 83 52 06 21 98 02 59 e4 e5 28 f6 b9 de 7b bc f1 a2 ea 9f 76 6a 3e 02 b3 a6 11 4d c7 44 1a fb 1d 18 08 ed 70 6d 72 47 7d b8 dd 5a 56 5d 86 10 0a 76 33 ff 9e 89 9d Data Ascii: ho8f@+Ll%fuJ_AqU\|2[('5=Nm6a\^\i^XvBA#X(X38$H_Js1*cDa"&#{{]a\F+7+cG&-yI8v:'v&NS)LR!Y({vj>MDpmrG}ZV]v3
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 24 ff 5a 58 5e 8c 94 a2 14 d2 ae de ec 93 a5 3b a5 64 72 67 51 f0 bc 80 cc b5 90 e9 e6 8b 9b 48 29 4e 81 41 b4 01 e7 d8 5c 26 9f 0f 26 90 0b 70 97 02 58 da ed 03 04 e0 08 50 50 e5 b5 18 51 1a 35 e9 d8 24 64 dd cf a2 ac e3 3a f6 de da 8b fe 69 fd 39 b0 aa 87 ab 83 d2 3c de dc 85 67 17 72 35 d8 2c aa 39 57 ae d4 af a0 6e df 50 0e be b1 05 b1 b8 5e 7a 9d dc d6 cd da 75 14 61 5f 51 12 6d 40 57 ea d0 0d 44 c6 9d 0c 4a 23 af b2 c5 e6 95 e4 51 e9 bd 11 ed 29 9e a8 ff 03 b0 ec fd 29 1c 37 87 ac 3b db 20 70 fc 44 2e 93 d7 dc 5b 0c 4b 76 19 c2 b7 da 6c 7d 86 84 6d 56 4e be c9 74 39 07 ae a8 aa c0 9a 55 6b e0 d0 d6 01 5a 2b b5 ea 55 7b 8a 7e ab 7a 84 90 4a 64 91 a2 2d a8 28 81 b9 60 d0 24 a2 b1 f6 bb 26 8f f4 df bb d5 22 b7 3b f5 36 8b d9 17 d3 ef 7a 45 91 8a 8c 65 Data Ascii: $ZX^;drgQH)NA\&&pXPPQ5$d:i9<gr5,9WnP^zua_Qm@WDJ#Q))7; pD.[Kvl}mVNt9UkZ+U{~zJd-(`$&";6zEe
2025-01-10 16:49:26 UTC	22	IN	Data Raw: ff 0f e9 79 fc 37 26 83 09 59 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: y7&YIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.16	49981	198.217.251.250	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	554	OUT	GET /cardinalcruise/v1/songbird.js HTTP/1.1 Host: songbird.cardinalcommerce.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:26 UTC	878	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=14400 Last-Modified: Tue, 01 Mar 2022 19:58:10 GMT ETag: W/"0f522ada62dd81:0" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 636 Expires: Fri, 10 Jan 2025 20:49:26 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3zIdGpdRVWB7qizxngcDQXHck2qPp%2FprMJwy3b1BPIl2xNqYb6lyeDSD4gKF57n1J9XhTXRrofq346593YxUXEohn4F7y9a3OJZ9ySA4RC7boFDoIOgqXVI%2FE%2B%2BN%2B9Mm8jl8f39LI8NUb2be1yz6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe290e0df618c4-EWR
2025-01-10 16:49:26 UTC	491	IN	Data Raw: 31 33 33 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 69 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 69 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 6f 61 64 65 64 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 77 69 6e 64 6f 77 2e 73 6f 6e 67 62 69 72 64 4c 6f 61 64 65 72 3b 77 69 6e 64 6f 77 2e 73 6f 6e 67 62 69 72 64 4c 6f 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 73 2c 75 2c 61 3d 30 2c 6c 3d 5b 5d 3b 61 3c 74 2e 6c 65 Data Ascii: 133b!function(e){function n(i){if(t[i])return t[i].exports;var o=t[i]={exports:{},id:i,loaded:!1};return e[i].call(o.exports,o,o.exports,n),o.loaded=!0,o.exports}var i=window.songbirdLoader;window.songbirdLoader=function(t,r){for(var s,u,a=0,l=[];a<t.le
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 2c 6e 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 5b 65 5d 29 6f 5b 65 5d 2e 70 75 73 68 28 69 29 3b 65 6c 73 65 7b 6f 5b 65 5d 3d 5b 69 5d 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 72 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 72 2e 61 73 79 6e 63 3d 21 30 2c 72 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2c 72 2e 73 72 63 3d 6e 2e 70 2b 22 22 2b 65 2b 22 2e 62 31 30 39 65 30 63 36 66 64 32 61 35 62 36 62 39 33 62 32 2e 73 6f 6e 67 62 69 72 Data Ascii: ,n);if(void 0!==o[e])o[e].push(i);else{o[e]=[i];var t=document.getElementsByTagName("head")[0],r=document.createElement("script");r.type="text/javascript",r.charset="utf-8",r.async=!0,r.crossOrigin="anonymous",r.src=n.p+""+e+".b109e0c6fd2a5b6b93b2.songbir
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 22 2c 65 29 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 6c 6f 67 28 22 65 72 72 6f 72 22 2c 65 29 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 35 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 69 29 7b 76 61 72 20 74 2c 6f 3d 69 28 35 29 2c 72 3d 69 28 34 36 29 2c 73 3d 6e 65 77 20 72 28 22 42 61 73 65 2e 50 6f 6c 79 66 69 6c 6c 65 72 22 29 2c 75 3d 7b 4a 53 4f 4e 3a 21 31 2c 70 65 72 66 6f 72 6d 61 6e 63 65 3a 21 31 2c 62 69 6e 64 3a 21 31 2c 66 69 6c 74 65 72 3a 21 31 7d 2c 61 3d 7b 70 6f 6c 79 66 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 3d 65 2c 22 4a 53 4f 4e 22 69 6e 20 6f 2e 77 69 6e 64 6f 77 3f 28 75 2e 4a 53 4f 4e 3d 21 30 2c 61 2e 69 73 46 69 6e 69 73 68 65 64 28 29 29 3a Data Ascii: ",e)},i.prototype.error=function(e){this.log("error",e)},e.exports=i},54:function(e,n,i){var t,o=i(5),r=i(46),s=new r("Base.Polyfiller"),u={JSON:!1,performance:!1,bind:!1,filter:!1},a={polyfill:function(e){t=e,"JSON"in o.window?(u.JSON=!0,a.isFinished()):
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 65 2c 61 72 67 75 6d 65 6e 74 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 7d 2c 63 6f 6e 74 69 6e 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 65 2c 61 72 67 75 6d 65 6e 74 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 7d 2c 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 65 2c 61 72 67 75 6d 65 6e 74 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 7d 2c 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 65 2c 61 72 67 75 6d 65 6e 74 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 7d 2c 6f 66 66 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 65 2c 61 72 67 75 6d 65 6e 74 73 3a 61 72 67 75 6d 65 6e Data Ascii: .push({name:e,arguments:arguments})},continue:function(e){r.push({name:e,arguments:arguments})},on:function(e){a.push({name:e,arguments:arguments})},trigger:function(e){c.push({name:e,arguments:arguments})},off:function(e){u.push({name:e,arguments:argumen
2025-01-10 16:49:26 UTC	333	IN	Data Raw: 64 2e 70 61 72 74 69 61 6c 28 78 2e 70 72 6f 63 65 73 73 53 65 74 75 70 2c 43 29 29 2c 6c 2e 6c 65 6e 67 74 68 3e 30 26 26 66 2e 70 75 62 6c 69 73 68 28 22 73 65 74 75 70 22 2c 6c 5b 30 5d 2e 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 6c 5b 30 5d 2e 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 2c 68 2e 6e 61 6d 65 73 70 61 63 65 3d 74 2c 68 2e 77 69 6e 64 6f 77 3d 65 2c 4e 2e 69 6e 69 74 69 61 6c 69 7a 65 28 65 29 2c 4e 2e 63 61 70 74 75 72 65 54 69 6d 69 6e 67 28 77 2e 67 65 74 43 75 72 72 65 6e 74 53 63 72 69 70 74 28 29 29 7d 63 61 74 63 68 28 65 29 7b 4f 2e 65 72 72 6f 72 28 22 46 61 74 61 6c 20 45 78 63 65 70 74 69 6f 6e 20 77 68 69 6c 65 20 70 72 6f 63 65 73 73 69 6e 67 3a 20 22 2b 28 65 2e 6d 65 73 73 61 67 65 21 3d 3d 6e 3f 65 2e 6d 65 73 73 61 67 65 3a 65 Data Ascii: d.partial(x.processSetup,C)),l.length>0&&f.publish("setup",l[0].arguments[0],l[0].arguments[1]),h.namespace=t,h.window=e,N.initialize(e),N.captureTiming(w.getCurrentScript())}catch(e){O.error("Fatal Exception while processing: "+(e.message!==n?e.message:e
2025-01-10 16:49:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.16	49983	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	603	OUT	GET /secure/checkout/assets/js/md5.min.js HTTP/1.1 Host: buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:26 UTC	530	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: application/javascript Content-Length: 3714 Connection: close last-modified: Tue, 27 Feb 2024 21:38:05 GMT etag: "65de563d-e82" expires: Mon, 08 Jan 2035 16:49:26 GMT cache-control: public, max-age=315360000 x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: HIT Age: 8530 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe290ebf3d8c24-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	839	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 64 28 6e 2c 74 29 7b 76 61 72 20 72 3d 28 36 35 35 33 35 26 6e 29 2b 28 36 35 35 33 35 26 74 29 3b 72 65 74 75 72 6e 28 6e 3e 3e 31 36 29 2b 28 74 3e 3e 31 36 29 2b 28 72 3e 3e 31 36 29 3c 3c 31 36 7c 36 35 35 33 35 26 72 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6e 2c 74 2c 72 2c 65 2c 6f 2c 75 29 7b 72 65 74 75 72 6e 20 64 28 28 75 3d 64 28 64 28 74 2c 6e 29 2c 64 28 65 2c 75 29 29 29 3c 3c 6f 7c 75 3e 3e 3e 33 32 2d 6f 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 6e 2c 74 2c 72 2c 65 2c 6f 2c 75 2c 63 29 7b 72 65 74 75 72 6e 20 66 28 74 26 72 7c 7e 74 26 65 2c 6e 2c 74 2c 6f 2c 75 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 6e 2c 74 2c 72 2c 65 2c 6f 2c Data Ascii: !function(n){"use strict";function d(n,t){var r=(65535&n)+(65535&t);return(n>>16)+(t>>16)+(r>>16)<<16\|65535&r}function f(n,t,r,e,o,u){return d((u=d(d(t,n),d(e,u)))<<o\|u>>>32-o,r)}function l(n,t,r,e,o,u,c){return f(t&r\|~t&e,n,t,o,u,c)}function g(n,t,r,e,o,
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 5d 2c 37 2c 31 37 37 30 30 33 35 34 31 36 29 2c 61 3d 6c 28 61 2c 63 2c 66 2c 69 2c 6e 5b 68 2b 39 5d 2c 31 32 2c 2d 31 39 35 38 34 31 34 34 31 37 29 2c 69 3d 6c 28 69 2c 61 2c 63 2c 66 2c 6e 5b 68 2b 31 30 5d 2c 31 37 2c 2d 34 32 30 36 33 29 2c 66 3d 6c 28 66 2c 69 2c 61 2c 63 2c 6e 5b 68 2b 31 31 5d 2c 32 32 2c 2d 31 39 39 30 34 30 34 31 36 32 29 2c 63 3d 6c 28 63 2c 66 2c 69 2c 61 2c 6e 5b 68 2b 31 32 5d 2c 37 2c 31 38 30 34 36 30 33 36 38 32 29 2c 61 3d 6c 28 61 2c 63 2c 66 2c 69 2c 6e 5b 68 2b 31 33 5d 2c 31 32 2c 2d 34 30 33 34 31 31 30 31 29 2c 69 3d 6c 28 69 2c 61 2c 63 2c 66 2c 6e 5b 68 2b 31 34 5d 2c 31 37 2c 2d 31 35 30 32 30 30 32 32 39 30 29 2c 63 3d 67 28 63 2c 66 3d 6c 28 66 2c 69 2c 61 2c 63 2c 6e 5b 68 2b 31 35 5d 2c 32 32 2c 31 32 33 36 Data Ascii: ],7,1770035416),a=l(a,c,f,i,n[h+9],12,-1958414417),i=l(i,a,c,f,n[h+10],17,-42063),f=l(f,i,a,c,n[h+11],22,-1990404162),c=l(c,f,i,a,n[h+12],7,1804603682),a=l(a,c,f,i,n[h+13],12,-40341101),i=l(i,a,c,f,n[h+14],17,-1502002290),c=g(c,f=l(f,i,a,c,n[h+15],22,1236
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 2c 69 2c 6e 5b 68 2b 37 5d 2c 31 30 2c 31 31 32 36 38 39 31 34 31 35 29 2c 69 3d 6d 28 69 2c 61 2c 63 2c 66 2c 6e 5b 68 2b 31 34 5d 2c 31 35 2c 2d 31 34 31 36 33 35 34 39 30 35 29 2c 66 3d 6d 28 66 2c 69 2c 61 2c 63 2c 6e 5b 68 2b 35 5d 2c 32 31 2c 2d 35 37 34 33 34 30 35 35 29 2c 63 3d 6d 28 63 2c 66 2c 69 2c 61 2c 6e 5b 68 2b 31 32 5d 2c 36 2c 31 37 30 30 34 38 35 35 37 31 29 2c 61 3d 6d 28 61 2c 63 2c 66 2c 69 2c 6e 5b 68 2b 33 5d 2c 31 30 2c 2d 31 38 39 34 39 38 36 36 30 36 29 2c 69 3d 6d 28 69 2c 61 2c 63 2c 66 2c 6e 5b 68 2b 31 30 5d 2c 31 35 2c 2d 31 30 35 31 35 32 33 29 2c 66 3d 6d 28 66 2c 69 2c 61 2c 63 2c 6e 5b 68 2b 31 5d 2c 32 31 2c 2d 32 30 35 34 39 32 32 37 39 39 29 2c 63 3d 6d 28 63 2c 66 2c 69 2c 61 2c 6e 5b 68 2b 38 5d 2c 36 2c 31 38 37 Data Ascii: ,i,n[h+7],10,1126891415),i=m(i,a,c,f,n[h+14],15,-1416354905),f=m(f,i,a,c,n[h+5],21,-57434055),c=m(c,f,i,a,n[h+12],6,1700485571),a=m(a,c,f,i,n[h+3],10,-1894986606),i=m(i,a,c,f,n[h+10],15,-1051523),f=m(f,i,a,c,n[h+1],21,-2054922799),c=m(c,f,i,a,n[h+8],6,187
2025-01-10 16:49:26 UTC	137	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 3a 6e 2e 6d 64 35 3d 74 7d 28 74 68 69 73 29 3b Data Ascii: unction"==typeof define&&define.amd?define(function(){return t}):"object"==typeof module&&module.exports?module.exports=t:n.md5=t}(this);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.16	49982	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	722	OUT	GET /v1/address?id=corporateaddress HTTP/1.1 Host: display.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:26 UTC	716	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Transfer-Encoding: chunked Connection: close x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true x-server: WEB_6_7500 strict-transport-security: max-age=15552000; includeSubDomains set-cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Last-Modified: Fri, 10 Jan 2025 16:49:26 GMT CF-Cache-Status: MISS Expires: Fri, 10 Jan 2025 20:49:26 GMT Cache-Control: public, max-age=14400 Set-Cookie: __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEeyx5cparoLdJ; SameSite=Lax; path=/; expires=Sat, 11-Jan-25 15:49:26 GMT; HttpOnly Server: cloudflare CF-RAY: 8ffe290ebc7072a1-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	142	IN	Data Raw: 38 38 0d 0a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6f 72 70 6f 72 61 74 65 61 64 64 72 65 73 73 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 22 42 75 79 47 6f 6f 64 73 20 49 6e 63 2c 20 31 30 30 30 20 4e 6f 72 74 68 20 57 65 73 74 20 73 74 2e 20 53 75 69 74 65 20 23 31 32 30 30 2c 20 20 57 69 6c 6d 69 6e 67 74 6f 6e 2c 20 20 44 45 2c 20 20 31 39 38 30 31 2c 20 20 55 53 41 22 3b 0d 0a Data Ascii: 88document.getElementById("corporateaddress").innerHTML = "BuyGoods Inc, 1000 North West st. Suite #1200, Wilmington, DE, 19801, USA";
2025-01-10 16:49:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.16	49984	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	547	OUT	GET /assets/checkout/img/mcafee.png HTTP/1.1 Host: cdn.buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:26 UTC	879	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: image/png Content-Length: 3736 Connection: close Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=4508 Vary: Accept etag: "ceacba2ec650452d7a16fec9294d546f" last-modified: Thu, 21 Jan 2021 19:13:08 GMT via: 1.1 e70925a92da0404e239c3620389c3dd0.cloudfront.net (CloudFront) x-amz-cf-id: MUDdH7ez-LPfFXwwwB4iJkAHi7OmGpssKQ-EKoBBXoX-RpAz_pvkdA== x-amz-cf-pop: JFK52-P2 x-amz-meta-s3b-last-modified: 20210112T081931Z x-amz-meta-sha256: b0252ca48eaf74d5d646ffa92de624da4155291272dd1d5ca0daddfc3f096d10 x-cache: Hit from cloudfront CF-Cache-Status: REVALIDATED Expires: Fri, 10 Jan 2025 20:49:26 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe290ebbf20f75-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	490	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5a 00 00 00 20 08 06 00 00 00 92 11 6f a5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0e 52 49 44 41 54 78 da ed 9a 07 54 94 57 16 c7 03 1a 34 71 35 6b d4 35 c6 14 35 9b 98 c4 f4 64 e3 c6 e4 6c fa a6 a8 88 a8 80 12 31 36 d4 44 89 20 a2 58 80 18 5b 4c 6c 60 0b d8 50 11 5b 8c 5d 09 d8 8d 82 05 61 86 19 60 e8 32 d4 61 86 3a 74 f8 ef ff dc 03 23 4d 14 36 f1 64 f7 78 cf 79 07 f8 ca fb de fb bd 7b ff f7 7e ef e3 3e dc b3 bb 61 16 f7 81 56 f8 f3 7e 18 7e f2 45 55 7e 3e fe 08 ab 2c 2d 45 e2 a9 93 08 f5 59 89 0a fe 5e cf aa ab ff 80 07 56 a2 ca 68 44 75 61 21 50 55 85 e6 ac 9a e3 41 45 c5 dd 01 ad fb 6e 21 ae df 77 1f 62 fb 3e 0b dd d2 ef 51 a1 4d c3 ef 61 a5 f9 79 50 04 ee c4 d6 0f 3f c0 82 f6 ed b0 f9 dd Data Ascii: PNGIHDRZ osRGBRIDATxTW4q5k55dl16D X[Ll`P[]a`2a:t#M6dxy{~>aV~~EU~>,-EY^VhDua!PUAEn!wb>QMayP?
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: ea 2b cf 8b e9 d5 0b fa 75 1b 50 55 50 00 e3 c9 53 48 20 24 01 41 d0 05 47 8f a2 d6 2a d2 d2 51 14 1c 82 82 5f 0e a0 24 3c 1c 55 45 45 f5 41 e6 10 e4 c0 41 88 b4 b0 80 d2 a2 1d 0c fe fe a8 2e 32 a2 d6 8a ce 9c 41 cc f3 fd a0 7e a4 07 f2 f7 ed 17 87 aa 95 8f ca ec 6c 18 4f 9f 45 e1 b1 63 e2 f5 e0 bc 1a 5a 45 66 16 8a 4e 9d 46 d1 f1 e3 a8 48 4a 96 05 6a 05 e8 c6 c0 15 f7 5b 20 f9 b3 cf 91 7f e0 20 aa 8b 4b ea 03 a6 06 a6 5c b8 80 83 13 c6 62 69 b7 2e 98 cb eb 3d d9 bc 08 b7 a6 dd 16 b4 a6 06 34 a1 42 d9 a9 13 e2 5f fb 07 d4 8f f6 34 1d d3 d4 80 ae ca cb 83 7e cd 5a c4 3c fd b4 e9 9c a2 63 47 a4 da 7f 81 92 6b e1 a8 b5 bc 80 9d 50 f7 ee 63 1a 7f 8a 8d 2d ca e2 e3 4d b2 92 b7 65 0b 54 bd 7a 43 f3 fc f3 f2 7c d4 e4 8d 5c 3f 3f c4 3e f3 0c 22 cc cd a5 ef a8 4e Data Ascii: +uPUPSH $AG*Q_$<UEEAA.2A~lOEcZEfNFHJj[ K\bi.=4B_4~Z<cGkPc-MeTzC\|\??>"N
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 4b 96 e2 86 83 03 72 59 5d 14 b3 1c 4d 67 04 64 cd 9d 8b 2a 8e b5 d6 98 17 a4 ba c9 70 71 85 76 fc 44 96 72 ab 29 07 a9 75 fb 62 94 97 20 9f 0b c5 e7 c8 9b a5 61 ed 3a a9 ab 4d 92 d1 5a d0 2d b0 16 80 fe bf b4 7b a0 ef 81 ae 63 c5 c5 c5 50 ab 63 70 91 95 c3 75 ca 44 76 b6 0e 95 d4 c5 d2 d2 52 a4 31 61 c5 c4 6a 10 4b 8d 66 93 df 93 99 e1 8b ea bc 56 57 f0 da 24 d6 b1 a1 ac 0e 2e 33 81 27 f1 7c 49 89 3c 0b 19 4c 54 1a de 97 9d 93 23 7d d6 5a 8e 5e cf fe 34 ec 3f 9d c7 ab 60 e4 18 e2 e2 13 4c cf 49 48 4c 42 4e 8e 1e 55 75 a5 83 12 91 c2 be 63 62 e5 9a 9a a6 e1 7d f1 28 67 69 aa 37 18 64 1c 06 43 2e f2 28 59 15 15 15 7f 0e d0 95 9c 44 2c c1 b9 cf f7 c2 e0 a1 23 f0 f1 e7 96 f8 74 d0 50 8c 9d 30 19 fb 0f 1e 42 12 35 7c d1 d2 1f 60 69 6d 23 e7 07 0e 19 86 4f 06 Data Ascii: KrY]Mgd*pqvDr)ub a:MZ-{cPcpuDvR1ajKfVW$.3'\|I<LT#}Z^4?`LIHLBNUucb}(gi7dC.(YD,#tP0B5\|`im#O
2025-01-10 16:49:26 UTC	508	IN	Data Raw: e3 32 13 ce ec c7 8e a1 ef bf 2d 00 06 7a 30 6b 5b 02 f3 10 8d 67 1f 52 06 8e 77 9c 82 cf 2c ad e5 d9 7c 86 2c 5a 94 4a c5 d2 6e ac d4 f0 2c d1 04 dc d5 f0 70 8c 64 2d 6d cf 16 1f 9f 28 b0 67 b8 cd 06 93 37 c7 e8 08 47 de cf aa 07 4e ac eb 53 d3 e4 9e 5b 83 06 6f 2e 66 99 94 3a da 41 3e e5 08 d4 db 7c 65 39 c2 36 47 00 37 01 b7 ce fe f4 02 ee 4f fb 7f f4 21 94 bb 02 25 49 36 30 f1 bc ed d4 38 27 67 57 91 87 b1 13 27 c3 73 c1 22 9c 3e 7b 4e bc 51 9b 96 0e bf cd 5b e0 e4 32 93 10 dd c0 a4 23 1e bc ec c7 95 50 a9 a3 41 13 d8 c1 21 27 e1 42 00 ac 83 25 f4 e9 75 2c fd 2e 4a 5d 4b 93 2a c5 97 f5 f9 d4 e9 33 30 86 b0 1d bf 9a 06 6f 9f f5 48 4a 16 c8 a0 49 e5 30 87 49 d0 93 f5 7a 16 23 ac d6 02 98 17 be 9a e6 0c d6 f0 92 07 56 ac 5e 03 e7 19 6e a6 f1 4c e3 d8 5d Data Ascii: 2-z0k[gRw,\|,ZJn,pd-m(g7GNS[o.f:A>\|e96G7O!%I608'gW's">{NQ[2#PA!'B%u,.J]K*30oHJI0Iz#V^nL]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.16	49987	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	607	OUT	GET /secure/checkout/assets/js/fontawesome.js HTTP/1.1 Host: buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:26 UTC	532	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: application/javascript Content-Length: 11891 Connection: close last-modified: Mon, 15 Jul 2024 10:28:04 GMT etag: "6694f9b4-2e73" expires: Mon, 08 Jan 2035 16:49:26 GMT cache-control: public, max-age=315360000 x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: HIT Age: 8529 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe290eee67438b-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	837	IN	Data Raw: 77 69 6e 64 6f 77 2e 46 6f 6e 74 41 77 65 73 6f 6d 65 4b 69 74 43 6f 6e 66 69 67 20 3d 20 7b 22 69 64 22 3a 35 38 37 34 33 31 37 34 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 2e 31 35 2e 34 22 2c 22 74 6f 6b 65 6e 22 3a 22 31 64 64 35 38 37 36 36 34 38 22 2c 22 6d 65 74 68 6f 64 22 3a 22 63 73 73 22 2c 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 61 2d 66 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 22 2c 22 6c 69 63 65 6e 73 65 22 3a 22 66 72 65 65 22 2c 22 61 73 79 6e 63 4c 6f 61 64 69 6e 67 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 61 75 74 6f 41 31 31 79 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 62 61 73 65 55 72 6c 4b 69 74 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 69 74 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 Data Ascii: window.FontAwesomeKitConfig = {"id":58743174,"version":"5.15.4","token":"1dd5876648","method":"css","baseUrl":"https://ka-f.fontawesome.com","license":"free","asyncLoading":{"enabled":true},"autoA11y":{"enabled":true},"baseUrlKit":"https://kit.fontawesome
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 74 73 5b 6e 5d 3a 7b 7d 3b 6e 25 32 3f 74 28 4f 62 6a 65 63 74 28 6f 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 65 2c 74 2c 6f 5b 74 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6f 29 29 3a 74 28 4f 62 6a 65 63 74 28 6f 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6f 2c Data Ascii: ts[n]:{};n%2?t(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):t(Object(o)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(o,
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 63 74 28 61 29 21 3d 3d 61 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 66 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 63 7d 7d 28 74 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 69 28 74 2c 65 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 22 4f 62 6a 65 63 74 22 3d 3d 3d 6e 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 3b 69 66 28 22 4d 61 70 22 3d 3d 3d 6e 7c 7c 22 53 65 74 22 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 Data Ascii: ct(a)!==a))return}finally{if(f)throw o}}return c}}(t,e)\|\|function(t,e){if(!t)return;if("string"==typeof t)return i(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);"Object"===n&&t.constructor&&(n=t.constructor.name);if("Map"===n\|\|"Set"===n)return
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 53 69 62 6c 69 6e 67 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 72 2d 6f 6e 6c 79 22 29 3b 69 66 28 6e 26 26 72 29 7b 76 61 72 20 6f 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 6f 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6e 2c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 73 72 2d 6f 6e 6c 79 22 29 2c 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7d 7d 29 29 7d 76 61 72 20 6c 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6d 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 76 6f 69 64 20 30 21 3d 3d 67 6c 6f 62 61 6c 2e 70 72 6f 63 65 73 73 26 26 22 66 75 6e 63 74 69 6f 6e Data Ascii: ementSibling.classList.contains("sr-only");if(n&&r){var o=t.createElement("span");o.innerHTML=n,o.classList.add("sr-only"),e.parentNode.insertBefore(o,e.nextSibling)}}))}var l,h=function(){},m="undefined"!=typeof global&&void 0!==global.process&&"function
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 20 5f 28 74 29 7b 67 6c 6f 62 61 6c 2e 70 72 6f 63 65 73 73 2e 65 6d 69 74 28 22 72 65 6a 65 63 74 69 6f 6e 48 61 6e 64 6c 65 64 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 20 72 65 73 6f 6c 76 65 72 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 3d 3d 21 31 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 63 6f 6e 73 74 72 75 63 74 20 27 50 72 6f 6d 69 73 65 27 3a 20 50 6c 65 61 73 65 20 75 73 65 20 74 68 65 20 27 6e 65 77 27 20 6f 70 65 72 61 74 6f Data Ascii: _(t){global.process.emit("rejectionHandled",t)}function F(t){if("function"!=typeof t)throw new TypeError("Promise resolver "+t+" is not a function");if(this instanceof F==!1)throw new TypeError("Failed to construct 'Promise': Please use the 'new' operato
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 28 74 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 46 3f 74 3a 6e 65 77 20 46 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 29 7d 2c 46 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 46 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 3b 76 61 72 20 43 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 3f 50 72 6f 6d 69 73 65 3a 46 3b 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 66 65 74 63 68 2c 72 3d 65 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 6f 3d 65 2e 74 6f 6b 65 6e 2c 69 3d 74 3b 72 65 74 75 72 6e 20 6f 26 26 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 64 65 78 4f Data Ascii: (t)&&t.constructor===F?t:new F((function(e){e(t)}))},F.reject=function(t){return new F((function(e,n){n(t)}))};var C="function"==typeof Promise?Promise:F;function I(t,e){var n=e.fetch,r=e.XMLHttpRequest,o=e.token,i=t;return o&&!function(t){return t.indexO
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 65 6e 74 7c 7c 6f 2c 69 3d 64 2e 62 69 6e 64 28 64 2c 6f 2c 5b 5d 2e 63 6f 6e 63 61 74 28 66 2c 75 2c 63 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 61 2d 22 2e 63 6f 6e 63 61 74 28 74 29 7d 29 29 29 29 3b 74 2e 61 75 74 6f 41 31 31 79 2e 65 6e 61 62 6c 65 64 26 26 72 28 69 29 3b 76 61 72 20 61 3d 74 2e 73 75 62 73 65 74 50 61 74 68 26 26 74 2e 62 61 73 65 55 72 6c 2b 22 2f 22 2b 74 2e 73 75 62 73 65 74 50 61 74 68 2c 6c 3d 5b 7b 69 64 3a 22 66 61 2d 6d 61 69 6e 22 2c 61 64 64 4f 6e 3a 76 6f 69 64 20 30 2c 75 72 6c 3a 61 7d 5d 3b 69 66 28 74 2e 76 34 73 68 69 6d 26 26 74 2e 76 34 73 68 69 6d 2e 65 6e 61 62 6c 65 64 26 26 6c 2e 70 75 73 68 28 7b 69 64 3a 22 66 61 2d 76 34 2d 73 68 69 6d 73 22 2c 61 64 64 4f 6e 3a 22 2d 76 Data Ascii: ent\|\|o,i=d.bind(d,o,[].concat(f,u,c.map((function(t){return"fa-".concat(t)}))));t.autoA11y.enabled&&r(i);var a=t.subsetPath&&t.baseUrl+"/"+t.subsetPath,l=[{id:"fa-main",addOn:void 0,url:a}];if(t.v4shim&&t.v4shim.enabled&&l.push({id:"fa-v4-shims",addOn:"-v
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 68 53 76 67 46 72 6f 6d 3d 74 2e 62 61 73 65 55 72 6c 2b 22 2f 72 65 6c 65 61 73 65 73 2f 22 2b 28 22 6c 61 74 65 73 74 22 3d 3d 3d 74 2e 76 65 72 73 69 6f 6e 3f 22 6c 61 74 65 73 74 22 3a 22 76 22 2e 63 6f 6e 63 61 74 28 74 2e 76 65 72 73 69 6f 6e 29 29 2b 22 2f 73 76 67 73 22 2c 6e 2e 66 65 74 63 68 55 70 6c 6f 61 64 65 64 53 76 67 46 72 6f 6d 3d 74 2e 75 70 6c 6f 61 64 73 55 72 6c 29 3b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 74 2e 76 34 73 68 69 6d 2e 65 6e 61 62 6c 65 64 26 26 72 2e 70 75 73 68 28 6e 65 77 20 43 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 49 28 73 28 74 2c 7b 61 64 64 4f 6e 3a 22 2d 76 34 2d 73 68 69 6d 73 22 2c 6d 69 6e 69 66 79 3a 74 2e 6d 69 6e 69 66 79 2e 65 6e 61 62 6c 65 64 7d 29 2c 6e 29 2e 74 68 65 6e 28 28 66 75 Data Ascii: hSvgFrom=t.baseUrl+"/releases/"+("latest"===t.version?"latest":"v".concat(t.version))+"/svgs",n.fetchUploadedSvgFrom=t.uploadsUrl);var r=[];return t.v4shim.enabled&&r.push(new C((function(r,o){I(s(t,{addOn:"-v4-shims",minify:t.minify.enabled}),n).then((fu
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 29 2c 69 3d 31 3b 65 3d 6e 2e 73 68 69 66 74 28 29 3b 29 65 28 29 7d 29 2c 69 3f 73 65 74 54 69 6d 65 6f 75 74 28 74 2c 30 29 3a 6e 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 26 26 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 74 29 2e 6f 62 73 65 72 76 65 28 64 6f 63 75 6d 65 6e 74 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 7d 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 46 6f 6e 74 41 77 65 73 6f 6d 65 4b 69 74 43 6f 6e 66 69 67 29 7b 76 61 72 20 44 3d Data Ascii: removeEventListener("DOMContentLoaded",e),i=1;e=n.shift();)e()}),i?setTimeout(t,0):n.push(t)}function N(t){"undefined"!=typeof MutationObserver&&new MutationObserver(t).observe(document,{childList:!0,subtree:!0})}try{if(window.FontAwesomeKitConfig){var D=
2025-01-10 16:49:26 UTC	102	IN	Data Raw: 65 20 4b 69 74 3a 22 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 74 29 29 7d 29 29 7d 7d 63 61 74 63 68 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 22 2e 63 6f 6e 63 61 74 28 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 4b 69 74 3a 22 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 61 29 29 7d 7d 29 29 3b 0a Data Ascii: e Kit:"," ").concat(t))}))}}catch(a){console.error("".concat("Font Awesome Kit:"," ").concat(a))}}));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.16	49985	104.16.80.73	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	612	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://buygoods.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:26 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8ffe290ede71437a-EWR
2025-01-10 16:49:26 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.16	49993	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	611	OUT	GET /secure/checkout/assets/js/dictionary.js?v=29 HTTP/1.1 Host: buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:26 UTC	532	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: application/javascript Content-Length: 31103 Connection: close last-modified: Fri, 03 Jan 2025 16:20:04 GMT etag: "67780e34-797f" expires: Mon, 08 Jan 2035 16:49:26 GMT cache-control: public, max-age=315360000 x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: HIT Age: 8529 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe290f5dc98c39-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:26 UTC	837	IN	Data Raw: 63 6f 6e 73 74 20 64 69 63 74 69 6f 6e 61 72 79 20 3d 20 7b 0a 20 20 20 20 22 74 69 74 6c 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 42 75 79 47 6f 6f 64 73 20 2d 20 53 65 63 75 72 65 20 43 68 65 63 6b 6f 75 74 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 42 75 79 47 6f 6f 64 73 20 2d 20 50 61 67 6f 20 53 65 67 75 72 6f 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 42 75 79 47 6f 6f 64 73 20 2d 20 50 61 69 65 6d 65 6e 74 20 53 c3 a9 63 75 72 69 73 c3 a9 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 42 75 79 47 6f 6f 64 73 20 2d 20 53 69 63 68 65 72 65 20 5a 61 68 6c 75 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 42 75 79 47 6f 6f 64 73 20 2d 20 43 68 65 63 6b 6f 75 74 20 53 65 67 75 72 6f 22 2c 0a 20 20 20 20 20 20 20 20 61 Data Ascii: const dictionary = { "title": { en: "BuyGoods - Secure Checkout", es: "BuyGoods - Pago Seguro", fr: "BuyGoods - Paiement Scuris", de: "BuyGoods - Sichere Zahlung", pt: "BuyGoods - Checkout Seguro", a
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 41 74 74 65 6e 64 65 7a 20 21 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 57 61 72 74 65 21 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 45 73 70 65 72 61 21 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 a7 d9 86 d8 aa d8 b8 d8 b1 21 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 70 6f 70 75 70 2d 73 70 65 63 69 61 6c 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 54 68 69 73 20 53 70 65 63 69 61 6c 20 4f 66 66 65 72 20 69 73 20 4e 4f 54 20 47 75 61 72 61 6e 74 65 65 64 20 74 6f 20 4c 61 73 74 20 42 65 79 6f 6e 64 20 54 6f 64 61 79 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 45 73 74 61 20 6f 66 65 72 74 61 20 65 73 70 65 63 69 61 6c 20 4e 4f 20 65 73 74 c3 a1 20 67 61 72 61 6e 74 69 7a 61 Data Ascii: ", fr: "Attendez !", de: "Warte!", pt: "Espera!", ar: "!" }, "popup-special": { en: "This Special Offer is NOT Guaranteed to Last Beyond Today", es: "Esta oferta especial NO est garantiza
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 3a 20 22 44 65 74 61 6c 6c 65 73 20 64 65 6c 20 50 65 64 69 64 6f 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 44 c3 a9 74 61 69 6c 73 20 44 65 20 4c 61 20 43 6f 6d 6d 61 6e 64 65 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 45 69 6e 7a 65 6c 68 65 69 74 65 6e 20 64 65 72 20 42 65 73 74 65 6c 6c 75 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 44 65 74 61 6c 68 65 73 20 64 6f 20 50 65 64 69 64 6f 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 aa d9 81 d8 a7 d8 b5 d9 8a d9 84 20 d8 a7 d9 84 d8 b7 d9 84 d8 a8 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 6e 6f 72 6d 61 6c 2d 70 72 69 63 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 4e 6f 72 6d 61 6c 20 50 72 69 63 65 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 50 72 65 63 69 6f Data Ascii: : "Detalles del Pedido", fr: "Dtails De La Commande", de: "Einzelheiten der Bestellung", pt: "Detalhes do Pedido", ar: " " }, "normal-price": { en: "Normal Price", es: "Precio
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 50 61 79 6d 65 6e 74 20 4d 65 74 68 6f 64 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 4d c3 a9 74 6f 64 6f 20 64 65 20 70 61 67 6f 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 4d 6f 64 65 20 64 65 20 70 61 69 65 6d 65 6e 74 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 5a 61 68 6c 75 6e 67 73 6d 65 74 68 6f 64 65 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 4d c3 a9 74 6f 64 6f 20 64 65 20 50 61 67 61 6d 65 6e 74 6f 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 b7 d8 b1 d9 8a d9 82 d8 a9 20 d8 a7 d9 84 d8 af d9 81 d8 b9 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 63 72 65 64 69 74 2d 63 61 72 64 22 3a 20 7b Data Ascii: }, "payment-method": { en: "Payment Method", es: "Mtodo de pago", fr: "Mode de paiement", de: "Zahlungsmethode", pt: "Mtodo de Pagamento", ar: " " }, "credit-card": {
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 61 6e 64 64 61 74 65 6e 20 76 6f 6e 20 50 61 79 50 61 6c 20 66 c3 bc 72 20 64 65 6e 20 43 68 65 63 6b 6f 75 74 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 55 73 65 20 6f 73 20 64 61 64 6f 73 20 64 65 20 65 6e 76 69 6f 20 64 6f 20 50 61 79 50 61 6c 20 70 61 72 61 20 6f 20 63 68 65 63 6b 6f 75 74 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 a7 d8 b3 d8 aa d8 ae d8 af d9 85 20 d8 a8 d9 8a d8 a7 d9 86 d8 a7 d8 aa 20 d8 a7 d9 84 d8 b4 d8 ad d9 86 20 d9 85 d9 86 20 50 61 79 50 61 6c 20 d9 84 d8 a5 d8 aa d9 85 d8 a7 d9 85 20 d8 b9 d9 85 d9 84 d9 8a d8 a9 20 d8 a7 d9 84 d8 af d9 81 d8 b9 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 63 75 73 74 6f 6d 65 72 2d 69 6e 66 6f 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 43 75 73 74 6f 6d 65 72 20 49 6e Data Ascii: anddaten von PayPal fr den Checkout", pt: "Use os dados de envio do PayPal para o checkout", ar: " PayPal " }, "customer-info": { en: "Customer In
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: c3 b3 72 69 6f 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 a7 d9 84 d9 87 d8 a7 d8 aa d9 81 20 d9 85 d8 b7 d9 84 d9 88 d8 a8 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 45 6d 61 69 6c 20 61 64 64 72 65 73 73 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 45 2d 6d 61 69 6c 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 45 2d 6d 61 69 6c 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 45 6d 61 69 6c 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 45 6e 64 65 72 65 c3 a7 6f 20 64 65 20 45 2d 6d 61 69 6c 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 b9 d9 86 d9 88 d8 a7 d9 86 20 d8 a7 d9 84 d8 a8 d8 b1 d9 8a d8 af 20 d8 a7 d9 84 d8 a5 d9 84 d9 83 d8 aa d8 b1 d9 88 d9 86 d9 8a 22 Data Ascii: rio", ar: " " }, "email": { en: "Email address", es: "E-mail", fr: "E-mail", de: "Email", pt: "Endereo de E-mail", ar: " "
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 64 65 72 65 c3 a7 6f 20 64 65 20 63 6f 62 72 61 6e c3 a7 61 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 b9 d9 86 d9 88 d8 a7 d9 86 20 d8 a7 d9 84 d8 b4 d8 ad d9 86 20 d8 a7 d9 84 d8 ae d8 a7 d8 b5 20 d8 a8 d9 83 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 61 64 64 72 65 73 73 2d 72 65 71 75 69 72 65 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 53 68 69 70 70 69 6e 67 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 4c 61 20 64 69 72 65 63 63 69 c3 b3 6e 20 64 65 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 65 73 20 6f 62 6c 69 67 61 74 6f 72 69 61 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 4c 27 61 64 72 65 73 73 65 20 64 65 20 66 61 63 74 75 72 61 74 69 6f 6e 20 65 73 74 20 6f Data Ascii: dereo de cobrana", ar: " " }, "address-required": { en: "Shipping address is required", es: "La direccin de facturacin es obligatoria", fr: "L'adresse de facturation est o
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 53 65 20 72 65 71 75 69 65 72 65 20 63 c3 b3 64 69 67 6f 20 70 6f 73 74 61 6c 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 4c 65 20 63 6f 64 65 20 70 6f 73 74 61 6c 20 65 73 74 20 72 65 71 75 69 73 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 50 6f 73 74 6c 65 69 74 7a 61 68 6c 20 69 73 74 20 65 72 66 6f 72 64 65 72 6c 69 63 68 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 4f 20 43 45 50 20 c3 a9 20 6f 62 72 69 67 61 74 c3 b3 72 69 6f 22 2c 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 b1 d9 85 d8 b2 20 d8 a7 d9 84 d8 a8 d8 b1 d9 8a d8 af 20 d9 85 d8 b7 d9 84 d9 88 d8 a8 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 43 69 74 79 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 43 69 75 64 Data Ascii: Se requiere cdigo postal", fr: "Le code postal est requis", de: "Postleitzahl ist erforderlich", pt: "O CEP obrigatrio", ar: " " }, "city": { en: "City", es: "Ciud
2025-01-10 16:49:26 UTC	1369	IN	Data Raw: 22 63 61 72 64 2d 72 65 71 75 69 72 65 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 43 72 65 64 69 74 20 63 61 72 64 20 6e 75 6d 62 65 72 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 53 65 20 72 65 71 75 69 65 72 65 20 6e c3 ba 6d 65 72 6f 20 64 65 20 74 61 72 6a 65 74 61 20 64 65 20 63 72 c3 a9 64 69 74 6f 22 2c 0a 20 20 20 20 20 20 20 20 66 72 3a 20 22 4c 65 20 6e 75 6d c3 a9 72 6f 20 64 65 20 63 61 72 74 65 20 64 65 20 63 72 c3 a9 64 69 74 20 65 73 74 20 72 65 71 75 69 73 22 2c 0a 20 20 20 20 20 20 20 20 64 65 3a 20 22 4b 72 65 64 69 74 6b 61 72 74 65 6e 6e 75 6d 6d 65 72 20 69 73 74 20 65 72 66 6f 72 64 65 72 6c 69 63 68 22 2c 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 4f 20 6e c3 ba 6d 65 72 6f 20 64 Data Ascii: "card-required": { en: "Credit card number is required", es: "Se requiere nmero de tarjeta de crdito", fr: "Le numro de carte de crdit est requis", de: "Kreditkartennummer ist erforderlich", pt: "O nmero d
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 64 65 3a 20 22 53 69 63 68 65 72 68 65 69 74 73 63 6f 64 65 20 69 73 74 20 65 72 66 6f 72 64 65 72 6c 69 63 68 22 2c 20 0a 20 20 20 20 20 20 20 20 70 74 3a 20 22 4f 20 63 c3 b3 64 69 67 6f 20 64 65 20 73 65 67 75 72 61 6e c3 a7 61 20 c3 a9 20 6f 62 72 69 67 61 74 c3 b3 72 69 6f 22 2c 20 0a 20 20 20 20 20 20 20 20 61 72 3a 20 22 d8 b1 d9 85 d8 b2 20 d8 a7 d9 84 d8 a3 d9 85 d8 a7 d9 86 20 d9 85 d8 b7 d9 84 d9 88 d8 a8 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 63 61 72 64 2d 33 22 3a 20 7b 20 0a 20 20 20 20 20 20 20 20 65 6e 3a 20 22 54 68 65 20 33 20 64 69 67 69 74 73 20 6f 6e 20 74 68 65 20 63 61 72 64 27 73 20 62 61 63 6b 2e 22 2c 20 0a 20 20 20 20 20 20 20 20 65 73 3a 20 22 4c 6f 73 20 33 20 64 c3 ad 67 69 74 6f 73 20 65 6e 20 65 6c Data Ascii: de: "Sicherheitscode ist erforderlich", pt: "O cdigo de segurana obrigatrio", ar: " " }, "card-3": { en: "The 3 digits on the card's back.", es: "Los 3 dgitos en el

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.16	49991	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	553	OUT	GET /assets/checkout/img/badge-60-day.png HTTP/1.1 Host: cdn.buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194
2025-01-10 16:49:27 UTC	748	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:27 GMT Content-Type: image/png Content-Length: 20114 Connection: close Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=22361 etag: "51daeb8d05b2dd445e1f1069f4dbd668" last-modified: Fri, 02 Apr 2021 16:44:14 GMT vary: Accept via: 1.1 29117767a034875a8b49afd641f25d82.cloudfront.net (CloudFront) x-amz-cf-id: dx88SUtb5BvfncoA5jgjI-URKvl6BGH3q9Kk-tXL-VGMI4QLGuuIIQ== x-amz-cf-pop: JFK52-P2 x-cache: Hit from cloudfront CF-Cache-Status: REVALIDATED Expires: Fri, 10 Jan 2025 20:49:27 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe290f6fe64201-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:27 UTC	621	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 68 00 00 00 64 08 06 00 00 00 6a de 75 da 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 4e 4c 49 44 41 54 78 da ec 5a 69 74 54 55 b6 ae 7e 2a a0 68 db 22 dd fd 9a a6 1d b1 99 41 3a 40 08 53 02 99 48 02 19 48 8a 30 4f 92 84 29 10 4c 18 d4 a5 06 45 b4 45 b1 d5 06 c5 06 44 04 91 30 07 08 43 30 81 00 61 4a 02 49 a8 cc 73 65 a8 54 2a 49 55 2a 35 df 7b bf b7 f7 59 a9 a5 cb f7 e7 bd f5 9c da c7 5e 6b af 73 ee 50 f7 e6 9e ef ec 6f 7f fb 9c a8 ee d9 3d fb a9 ec 37 40 72 b7 9c 9c d8 07 54 f7 ec 67 b1 ff 48 49 51 77 4b 4b 0b ea ae 56 ab ef fb de b5 fb 92 93 3d 1e 72 df c7 7d 6e bf 7b c3 8e 1d 1e 0f 94 d3 6f b9 65 30 55 f7 ec 07 b5 fb 62 63 fb f0 a0 3f c0 7d f5 60 d5 c3 f1 f1 41 dd 79 a0 3d 62 3d 1e 50 ab 7f ff Data Ascii: PNGIHDRhdjusRGBNLIDATxZitTU~h"A:@SHH0O)LEED0C0aJIseTIU*5{Y^ksPo=7@rTgHIQwKKV=r}n{oe0Ubc?}`Ay=b=P
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 7d 98 1a f9 f9 9a 2b 33 93 6a 72 e6 bd a7 0a 18 fb 07 3a ee 0e fc 3f cd 53 94 e8 ef 2b 2f 8f ef ce ad 3b 7a 76 ec 98 f6 10 0f 4a 83 f6 c5 2d c0 26 b8 da d6 b4 d7 56 c4 bf ab fa d3 73 03 e9 fc 63 fb 0f ce 0e 76 b5 ac 32 a1 6d 39 d0 14 e7 84 76 89 04 7b 02 ea 34 4b 52 4b 72 16 ef 84 21 0e a8 98 a7 a0 6a 01 81 34 4f 46 f5 1c d8 2b 16 98 32 ce 46 6f 34 6a e6 d6 a2 7e 0e 94 c2 28 27 0a 23 5d a8 9a 01 dd ed d9 57 e8 b9 fd 18 98 f7 3f 9d ea 5b 73 5d 7d 1a 25 11 40 d1 0c 1c 3c 12 e9 47 e7 bb a5 d0 a4 71 8b 0e a6 5d 16 27 bf 7a 71 e1 8e 14 72 36 41 2f b1 b1 1e 0f a9 fd 54 9c 27 fa 76 1a 12 af c3 ba 06 68 8b 07 e4 75 e8 6c 5e 9d f7 cf cf 22 66 6a 4b 96 ee 87 63 0d 94 86 58 17 ea 63 a0 d4 c7 28 a8 5d 24 a3 39 16 68 8a 01 2a e7 cb 4a e5 7c a0 7c 2e 50 36 1b 28 9d 25 Data Ascii: }+3jr:?S+/;zvJ-&Vscv2m9v{4KRKr!j4OF+2Fo4j~('#]W?[s]}%@<Gq]'zqr6A/T'vhul^"fjKcXc(]$9h*J\|\|.P6(%
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 66 fa 85 7d 3e 89 85 69 41 bb b5 59 53 f3 73 53 a7 c4 31 38 69 1f 51 b1 fd 4b 36 80 6b 1b 06 c8 eb cf 16 e3 86 42 16 03 c0 cb 80 73 03 9c a6 24 a3 b9 65 4d 99 dc b6 c6 06 e3 6a a0 35 5e 21 50 b8 85 8b 80 b1 54 2f 40 3d 45 40 25 d1 56 e1 97 03 50 41 a0 d4 9e 18 03 53 4e 18 ac 94 f0 b9 c6 41 f5 0b e4 b1 40 25 b5 15 74 5c 3a 13 28 66 11 10 02 14 06 00 05 7e c0 ed c9 40 de 24 20 37 80 fa 74 fe 56 18 f5 a3 a8 25 cf 89 82 44 20 cb 37 82 60 be e8 03 73 ce 34 ca 57 93 51 77 d6 1b 0d 44 77 9a dd cf a2 31 6d 1c 0c 14 79 16 02 12 35 f3 21 97 cc 82 c2 40 55 cc 82 31 27 dc 50 7f 79 5a ad 39 37 42 46 49 14 50 a9 06 ea a3 a1 39 e9 fb 0f a6 b8 6c ce 4d bf 64 03 38 82 44 a8 ff d1 64 58 9b 2e c0 e9 24 e9 dc 91 a0 c0 96 08 b8 d6 02 ed ab b8 ce 51 88 da 20 11 a5 59 29 c7 34 Data Ascii: f}>iAYSsS18iQK6kBs$eMj5^!PT/@=E@%VPASNA@%t\:(f~@$ 7tV%D 7`s4WQwDw1my5!@U1'PyZ97BFIP9lMd8DdX.$Q Y)4
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 10 0c 7f fe 79 71 df 9e 3d 7b d0 d2 d2 02 7d b3 8e 9e 6f 87 cd ee 82 d9 a6 c0 6a d6 c3 55 ff 15 50 1c 00 90 00 91 ef ce 83 44 91 64 23 4a 33 69 66 a2 f1 b2 3f 4a f7 0f 46 ed e1 e7 61 65 25 78 2b 04 66 8a 20 db ad 20 58 6e 90 94 a7 1a aa e3 aa 9f cb 75 cb 17 25 47 3c ef d0 56 d4 93 9c 02 04 db fc d4 c6 bb 9e cc b7 ab 92 7c 86 d8 da 93 aa 20 56 07 d6 38 c9 39 ef 28 6e 31 e0 24 29 ad bf 33 1d 85 fb 9f 43 25 29 34 3b 8b 00 5d 2c d0 b0 02 02 a4 6a 5f a0 79 3f 53 59 17 f5 b8 04 11 55 54 54 d0 cc df 25 22 80 ed 8b 2f be c0 f8 f1 e3 60 36 9b 45 a4 f4 ea d5 0b 29 87 0e 81 ed b5 d7 5e 43 9f 3e 7d 30 68 d0 20 01 c8 f6 ed db f1 f2 cb 2f 83 ed f2 e5 2b 18 3e 7c 38 4c 26 13 ac 44 77 17 2e 5c 40 61 61 21 72 72 72 30 63 46 34 5a 5b db e0 22 5a 04 14 41 7f 16 bb 0c 9b a1 Data Ascii: yq={}ojUPDd#J3if?JFae%x+f Xnu%G<V\| V89(n1$)3C%)4;],j_y?SYUTT%"/`6E)^C>}0h /+>\|8L&Dw.\@aa!rrr0cF4Z["ZA
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: ac 02 05 80 6c 71 71 71 22 f2 64 59 21 97 59 8c 30 30 0c 10 83 23 f2 52 5d 5d 9d 70 59 72 09 90 5a 2a 32 61 cc 7a 8e 72 4e 00 45 8c 3f 4c a4 e2 f4 54 17 dd 25 1a af fc 7a 10 9a cf 8f 45 c3 e9 51 a8 3f 35 12 8d a7 46 4a f5 a9 23 e4 ba 13 c3 95 86 d4 a1 68 3d 3d 18 a9 9b fa 6d e4 e8 49 59 43 51 f4 43 5b 7e fe bc 9e fc f0 fc db cb 16 c8 e6 24 10 38 b2 62 12 e0 80 5d ac 46 93 b7 dc 8d c6 5d 92 a2 2d 54 8c 2a bc fb d9 c8 79 67 2e c4 b2 8d bd 19 4e 89 69 cd 0e a9 0b 1c 76 b7 94 e6 c8 e0 81 3c 7b f6 2c 4e 9f 3e cd 7d 56 65 6e 3a e3 eb 7c 3f b7 62 10 bf 6f 8a 22 06 1b df 37 8e b2 bc bc 3c ce 53 e2 77 ee fc 56 56 5e 0e 36 56 86 02 1c 72 06 8a 9f a3 d5 6a 05 c5 86 47 44 70 84 89 68 37 76 3a a0 2f 3a 86 f6 0c 15 da 48 28 b4 9c f3 42 7b 5e 18 1a af f8 23 ff b3 3e a8 Data Ascii: lqqq"dY!Y00#R]]pYrZ2azrNE?LT%zEQ?5FJ#h==mIYCQC[~$8b]F]-Tyg.Niv<{,N>}Ven:\|?bo"7<SwVV^6VrjGDph7v:/:H(B{^#>
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: c8 0a d2 63 a0 02 02 fc 11 18 e0 c7 e5 03 3f 1f 4f f8 fb 79 23 22 bc 2f cc 66 b3 fa 3f 87 91 00 08 30 00 84 08 08 e3 13 20 55 54 eb 3d d4 be 7d fb e4 35 49 81 12 6d 8f 53 62 4d 2d ee e6 df 41 d6 c1 41 ac 3b 9d 90 b5 cf 07 05 1c a9 e7 1c 37 e3 ca 8a b6 c8 dc e1 c0 51 ba 23 2f da 6e 5a fa d6 6e f4 3e 74 45 c6 e6 4e 48 58 de 06 a7 ff d5 b2 f8 e7 cf 3a ac 65 0f db 74 9a a7 3e ae f9 63 a4 a0 d1 be 83 93 5c eb 4b df a7 ae ff be 44 0b 0d 1e 6f d7 6b 85 6f d5 6b 04 07 04 a7 9e 83 b7 dc b3 11 cc b7 ae a8 a2 15 0a 05 64 6b 59 22 e3 4c 85 a5 a6 d0 1a 35 85 22 c7 a8 fe 66 ce 9c 39 48 a0 aa fc e9 a7 9f 12 a0 58 ac 59 b3 46 15 f8 7f 50 81 d6 01 12 52 b0 65 cb 16 39 41 2a 3a 06 0e 1c 88 be bd 83 61 e6 ef 36 26 9e dc ae 54 05 3a 07 a1 bb 8b 44 4f 20 41 d3 c1 d1 a3 c7 1f Data Ascii: c?Oy#"/f?0 UT=}5ImSbM-AA;7Q#/nZn>tENHX:et>c\KDokokdkY"L5"f9HXYFPRe9A*:a6&T:DO A
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 58 73 9c 55 14 65 1c f2 c7 e5 25 2d 90 ba ae 8b 8a 9e ab cb 9a 6b f1 df 36 c1 e2 d7 db 7c 4e 80 3a 8a ca 4d 82 d0 6c 62 e8 1f d8 8e 29 4d 94 ce d7 b9 da 5e 88 9d 3a b5 24 ff ed 2b 16 1a db 95 b1 83 ea 80 3c de 65 8a c9 d8 eb 4e 6d 2a 12 20 d5 d6 e4 4a cd 7c 17 b5 55 45 56 8a 9c 8a 26 cd 5b 29 35 f9 16 65 95 f9 f3 e7 43 07 2b fa c4 09 29 50 d0 b8 00 48 8e 57 cf 47 92 46 0b 2b 0b 23 29 e8 46 42 30 f3 f5 50 54 c6 0d 84 46 07 8d b8 69 3e 9f 29 57 bb 1f 97 0f 8e ac 8d 80 f8 d3 ea 69 8e cf 8d 19 8c 76 3d 49 02 fc bc 70 3f 6e 18 b4 b4 91 b0 a4 8e c0 de e5 11 7c 2f e9 f5 5f 82 30 7f 4e 08 ca e9 31 a8 ba 22 62 67 24 de 88 22 79 68 ef ca 28 72 83 8b 8b 8b ae 9e 8b b6 27 44 45 4e be a4 66 2b 69 08 11 82 f0 64 f3 ac 2e ac ca f2 32 8e 25 6a 91 71 e9 00 92 d7 32 4d 7e Data Ascii: XsUe%-k6\|N:Mlb)M^:$+<eNm* J\|UEV&[)5eC+)PHWGF+#)FB0PTFi>)Wiv=Ip?n\|/_0N1"bg$"yh(r'DENf+id.2%jq2M~
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 73 2a c9 9d 7e 01 c5 a4 d0 d9 af 5b 44 ca b1 30 92 8a e9 be 4c dd 6c c7 5c de 5f b1 37 2d 25 0c c8 9a 27 2a b1 5e 57 78 b0 de 8c 98 56 7a 6a 90 1a 23 da 9b f2 15 e8 07 bb 8a 07 a9 37 a5 02 8a be 02 a9 0c 38 79 08 40 03 05 00 a1 d5 02 06 7b 99 61 d8 30 bf 37 f6 2c ed 83 32 1d 30 3e 7f e7 d4 60 69 4c 19 41 de 7c cf 20 58 e8 99 7e 70 ae 3f ff f6 43 93 ae 1e 08 f4 73 c3 8b 1d 1d 49 7f 43 50 1d d7 07 45 a7 42 f0 e5 0c 37 15 41 9e 8f 01 12 69 89 13 5c 5b ae 9e d0 6b e7 77 df 7d 87 ee dd bb f3 82 cb 97 e8 91 5a 24 8f 4c d5 d9 2a 4d 57 56 94 a3 9c 75 28 f7 c6 25 46 8f 01 71 f3 5f c2 e5 55 dd 90 7d 36 92 73 a0 ce a4 db 9d 18 2d 2d 71 e2 73 03 62 17 fc 55 bb fa 9f a6 d8 f7 59 f7 55 3c b7 ad 27 fb 1b 5a 8e 1a 65 fc 43 cd aa 6c f5 6b 2d 4d 2a 03 c9 bf 34 6b 5a 0e ee Data Ascii: s~[D0Ll\_7-%'^WxVzj#78y@{a07,20>`iLA\| X~p?CsICPEB7Ai\[kw}Z$LMWVu(%Fq_U}6s--qsbUYU<'ZeClk-M4kZ
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: e8 c2 d5 11 4b 3f 74 61 e4 04 d2 d8 e1 8b dc 9f 7d f1 6a 7f 67 f6 55 4e 70 73 51 e0 28 65 db ce ce 4e 07 48 9c aa 3c e9 8f a4 69 95 5e 47 d8 a8 44 15 23 a9 b9 cc 92 e4 3d 72 5c f2 ba 15 a0 22 c4 ad 1d 83 98 4f 08 d0 dc 66 b8 f1 0b 05 de ed 2e 48 58 f6 32 6e 30 62 52 68 2c 49 df d2 1d 59 1c e2 65 ff e8 54 57 78 c0 54 83 f3 de 38 fd bd cf b2 ff 9a ec 0d cf ff de 08 7a f1 f8 91 b1 a1 25 59 6f 24 a2 68 9a 6c a2 d5 70 eb b5 06 82 a3 b6 1d d6 10 ac 3b 31 61 9c 22 ba a3 9e 4e 7f 24 8f 05 2e be 00 cb fd 18 68 80 32 fd 4d e0 94 54 0e 80 d3 52 75 b5 4d 99 32 45 2c 53 32 4e 56 c3 3a 3d 82 74 76 f7 5b 80 cc 4c 71 1e 9e 3e 70 74 f5 c1 ed e3 42 44 54 1d c2 f5 9f 07 62 cc 30 7f fc 7d 52 20 8d 1a 83 a0 6b 71 57 f7 f5 83 e1 19 93 02 68 db c2 20 a6 b8 08 b1 e3 d2 1e 15 aa Data Ascii: K?ta}jgUNpsQ(eNH<i^GD#=r\"Of.HX2n0bRh,IYeTWxT8z%Yo$hlp;1a"N$.h2MTRuM2E,S2NV:=tv[Lq>ptBDTb0}R kqWh
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: c5 47 03 08 10 45 d2 b8 de c0 95 b1 68 a8 2e 62 d8 8b 29 51 45 0b 6a 09 8e 1a 0d 67 1e 45 5e e2 4e 49 17 f2 9c 92 e9 f1 d8 de 24 24 41 45 90 0f 81 f1 e2 0a 0a 10 30 3c 11 b3 a5 1f eb cf 70 94 d2 14 59 c9 cf 4e fd 25 02 63 87 79 51 19 70 57 03 b7 ff fc c3 0f a5 e7 c3 f1 de 04 0f 82 6a c2 bd 13 c1 d8 bd d0 53 45 ca db af ba e2 3e bf df bf df 73 c7 fb 63 8d c8 d8 e3 8e 4c ce af b2 f7 98 b0 ef 9f 46 ed a5 ce 0e 50 51 e3 a8 c0 91 25 c0 a8 ef 33 73 e6 4c 69 50 25 a5 a9 a8 a9 ac aa c1 83 82 6c 5c 3d bc 02 a9 97 e8 d1 2e ab 54 e0 a8 54 57 f2 48 19 48 72 12 8f 29 b1 34 65 95 0d b2 c9 12 ef b2 61 4e 60 fd c9 d9 49 4b f0 41 0f 3c f8 c5 8b e7 cb 57 2b 3f 11 a8 d5 9f 0b c2 b9 75 6e 5b 45 4e 0b 67 0d 92 dd 23 4f 63 94 7f 7e e5 d6 51 f6 e5 b7 26 5f 05 1d 3a bc 19 5e 8d Data Ascii: GEh.b)QEjgE^NI$$AE0<pYN%cyQpWjSE>scLFPQ%3sLiP%l\=.TTWHHr)4eaN`IKA<W+?un[ENg#Oc~Q&_:^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.16	49994	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	620	OUT	GET /secure/checkout/assets/js/paypal-cs-conversion.js?v=7 HTTP/1.1 Host: buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:27 UTC	532	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:26 GMT Content-Type: application/javascript Content-Length: 43487 Connection: close last-modified: Thu, 25 Jul 2024 21:08:05 GMT etag: "66a2beb5-a9df" expires: Mon, 08 Jan 2035 16:49:26 GMT cache-control: public, max-age=315360000 x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: HIT Age: 8529 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe290f6dc87cfa-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:27 UTC	837	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 6f 75 6e 74 72 79 43 6f 6e 76 65 72 73 69 6f 6e 28 69 6e 70 75 74 29 0a 7b 0a 20 20 63 6f 6e 73 74 20 70 61 79 70 61 6c 54 6f 43 6f 75 6e 74 72 79 20 3d 20 7b 0a 20 20 20 20 27 41 4c 27 3a 20 27 41 6c 62 61 6e 69 61 27 2c 0a 20 20 20 20 27 44 5a 27 3a 20 27 41 6c 67 65 72 69 61 27 2c 0a 20 20 20 20 27 41 44 27 3a 20 27 41 6e 64 6f 72 72 61 27 2c 0a 20 20 20 20 27 41 4f 27 3a 20 27 41 6e 67 6f 6c 61 27 2c 0a 20 20 20 20 27 41 49 27 3a 20 27 41 6e 67 75 69 6c 6c 61 27 2c 0a 20 20 20 20 27 41 47 27 3a 20 27 41 6e 74 69 67 75 61 20 26 20 42 61 72 62 75 64 61 27 2c 0a 20 20 20 20 27 41 52 27 3a 20 27 41 72 67 65 6e 74 69 6e 61 27 2c 0a 20 20 20 20 27 41 4d 27 3a 20 27 41 72 6d 65 6e 69 61 27 2c 0a 20 20 20 20 27 41 57 27 3a 20 27 Data Ascii: function countryConversion(input){ const paypalToCountry = { 'AL': 'Albania', 'DZ': 'Algeria', 'AD': 'Andorra', 'AO': 'Angola', 'AI': 'Anguilla', 'AG': 'Antigua & Barbuda', 'AR': 'Argentina', 'AM': 'Armenia', 'AW': '
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 27 43 61 79 6d 61 6e 20 49 73 6c 61 6e 64 73 27 2c 0a 20 20 20 20 27 54 44 27 3a 20 27 43 68 61 64 27 2c 0a 20 20 20 20 27 43 4c 27 3a 20 27 43 68 69 6c 65 27 2c 0a 20 20 20 20 27 43 32 27 3a 20 27 43 68 69 6e 61 27 2c 0a 20 20 20 20 27 43 4f 27 3a 20 27 43 6f 6c 6f 6d 62 69 61 27 2c 0a 20 20 20 20 27 4b 4d 27 3a 20 27 43 6f 6d 6f 72 6f 73 27 2c 0a 20 20 20 20 27 43 47 27 3a 20 27 43 6f 6e 67 6f 20 2d 20 42 72 61 7a 7a 61 76 69 6c 6c 65 27 2c 0a 20 20 20 20 27 43 44 27 3a 20 27 43 6f 6e 67 6f 20 2d 20 4b 69 6e 73 68 61 73 61 27 2c 0a 20 20 20 20 27 43 4b 27 3a 20 27 43 6f 6f 6b 20 49 73 6c 61 6e 64 73 27 2c 0a 20 20 20 20 27 43 52 27 3a 20 27 43 6f 73 74 61 20 52 69 63 61 27 2c 0a 20 20 20 20 27 43 49 27 3a 20 27 43 c3 b4 74 65 20 64 e2 80 99 49 76 6f 69 Data Ascii: 'Cayman Islands', 'TD': 'Chad', 'CL': 'Chile', 'C2': 'China', 'CO': 'Colombia', 'KM': 'Comoros', 'CG': 'Congo - Brazzaville', 'CD': 'Congo - Kinshasa', 'CK': 'Cook Islands', 'CR': 'Costa Rica', 'CI': 'Cte dIvoi
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 79 7a 73 74 61 6e 27 2c 0a 20 20 20 20 27 4c 41 27 3a 20 27 4c 61 6f 73 27 2c 0a 20 20 20 20 27 4c 56 27 3a 20 27 4c 61 74 76 69 61 27 2c 0a 20 20 20 20 27 4c 53 27 3a 20 27 4c 65 73 6f 74 68 6f 27 2c 0a 20 20 20 20 27 4c 49 27 3a 20 27 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 27 2c 0a 20 20 20 20 27 4c 54 27 3a 20 27 4c 69 74 68 75 61 6e 69 61 27 2c 0a 20 20 20 20 27 4c 55 27 3a 20 27 4c 75 78 65 6d 62 6f 75 72 67 27 2c 0a 20 20 20 20 27 4d 4b 27 3a 20 27 4d 61 63 65 64 6f 6e 69 61 27 2c 0a 20 20 20 20 27 4d 47 27 3a 20 27 4d 61 64 61 67 61 73 63 61 72 27 2c 0a 20 20 20 20 27 4d 57 27 3a 20 27 4d 61 6c 61 77 69 27 2c 0a 20 20 20 20 27 4d 59 27 3a 20 27 4d 61 6c 61 79 73 69 61 27 2c 0a 20 20 20 20 27 4d 56 27 3a 20 27 4d 61 6c 64 69 76 65 73 27 2c 0a 20 20 Data Ascii: yzstan', 'LA': 'Laos', 'LV': 'Latvia', 'LS': 'Lesotho', 'LI': 'Liechtenstein', 'LT': 'Lithuania', 'LU': 'Luxembourg', 'MK': 'Macedonia', 'MG': 'Madagascar', 'MW': 'Malawi', 'MY': 'Malaysia', 'MV': 'Maldives',
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 53 27 3a 20 27 53 65 72 62 69 61 27 2c 0a 20 20 20 20 27 53 43 27 3a 20 27 53 65 79 63 68 65 6c 6c 65 73 27 2c 0a 20 20 20 20 27 53 4c 27 3a 20 27 53 69 65 72 72 61 20 4c 65 6f 6e 65 27 2c 0a 20 20 20 20 27 53 47 27 3a 20 27 53 69 6e 67 61 70 6f 72 65 27 2c 0a 20 20 20 20 27 53 4b 27 3a 20 27 53 6c 6f 76 61 6b 69 61 27 2c 0a 20 20 20 20 27 53 49 27 3a 20 27 53 6c 6f 76 65 6e 69 61 27 2c 0a 20 20 20 20 27 53 42 27 3a 20 27 53 6f 6c 6f 6d 6f 6e 20 49 73 6c 61 6e 64 73 27 2c 0a 20 20 20 20 27 53 4f 27 3a 20 27 53 6f 6d 61 6c 69 61 27 2c 0a 20 20 20 20 27 5a 41 27 3a 20 27 53 6f 75 74 68 20 41 66 72 69 63 61 27 2c 0a 20 20 20 20 27 4b 52 27 3a 20 27 53 6f 75 74 68 20 4b 6f 72 65 61 27 2c 0a 20 20 20 20 27 45 53 27 3a 20 27 53 70 61 69 6e 27 2c 0a 20 20 20 20 Data Ascii: S': 'Serbia', 'SC': 'Seychelles', 'SL': 'Sierra Leone', 'SG': 'Singapore', 'SK': 'Slovakia', 'SI': 'Slovenia', 'SB': 'Solomon Islands', 'SO': 'Somalia', 'ZA': 'South Africa', 'KR': 'South Korea', 'ES': 'Spain',
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 63 6f 75 6e 74 72 79 20 6e 61 6d 65 0a 20 20 20 20 72 65 74 75 72 6e 20 70 61 79 70 61 6c 54 6f 43 6f 75 6e 74 72 79 5b 69 6e 70 75 74 5d 20 7c 7c 20 27 55 6e 6b 6e 6f 77 6e 27 3b 0a 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 2f 2f 20 49 66 20 74 68 65 20 69 6e 70 75 74 20 69 73 20 61 20 63 6f 75 6e 74 72 79 20 6e 61 6d 65 2c 20 72 65 74 75 72 6e 20 74 68 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 50 61 79 50 61 6c 20 63 6f 64 65 0a 20 20 20 20 63 6f 6e 73 74 20 66 6f 72 6d 61 74 74 65 64 43 6f 75 6e 74 72 79 4e 61 6d 65 20 3d 20 69 6e 70 75 74 2e 74 72 69 6d 28 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 63 6f 75 6e 74 72 79 54 6f 50 61 79 70 61 6c 5b 66 6f 72 6d 61 74 74 65 64 43 6f 75 6e 74 72 79 4e 61 6d 65 Data Ascii: orresponding country name return paypalToCountry[input] \|\| 'Unknown'; } else { // If the input is a country name, return the corresponding PayPal code const formattedCountryName = input.trim(); return countryToPaypal[formattedCountryName
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 27 4e 4d 27 3a 20 27 4e 65 77 20 4d 65 78 69 63 6f 27 2c 0a 20 20 20 20 20 20 20 20 27 4e 59 27 3a 20 27 4e 65 77 20 59 6f 72 6b 27 2c 0a 20 20 20 20 20 20 20 20 27 4e 43 27 3a 20 27 4e 6f 72 74 68 20 43 61 72 6f 6c 69 6e 61 27 2c 0a 20 20 20 20 20 20 20 20 27 4e 44 27 3a 20 27 4e 6f 72 74 68 20 44 61 6b 6f 74 61 27 2c 0a 20 20 20 20 20 20 20 20 27 4d 50 27 3a 20 27 4e 6f 72 74 68 65 72 6e 20 4d 61 72 69 61 6e 61 20 49 73 6c 61 6e 64 73 27 2c 0a 20 20 20 20 20 20 20 20 27 4f 48 27 3a 20 27 4f 68 69 6f 27 2c 0a 20 20 20 20 20 20 20 20 27 4f 4b 27 3a 20 27 4f 6b 6c 61 68 6f 6d 61 27 2c 0a 20 20 20 20 20 20 20 20 27 4f 52 27 3a 20 27 4f 72 65 67 6f 6e 27 2c 0a 20 20 20 20 20 20 20 20 27 50 41 27 3a 20 27 50 65 6e 6e 73 79 6c 76 61 6e Data Ascii: 'NM': 'New Mexico', 'NY': 'New York', 'NC': 'North Carolina', 'ND': 'North Dakota', 'MP': 'Northern Mariana Islands', 'OH': 'Ohio', 'OK': 'Oklahoma', 'OR': 'Oregon', 'PA': 'Pennsylvan
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 7d 2c 0a 20 20 20 20 27 41 72 67 65 6e 74 69 6e 61 27 3a 20 7b 0a 20 20 20 20 20 20 27 43 49 55 44 41 44 20 41 55 54 c3 93 4e 4f 4d 41 20 44 45 20 42 55 45 4e 4f 53 20 41 49 52 45 53 27 3a 20 27 42 75 65 6e 6f 73 20 41 69 72 65 73 20 28 43 69 75 64 61 64 29 27 2c 0a 20 20 20 20 20 20 27 42 55 45 4e 4f 53 20 41 49 52 45 53 27 3a 20 27 42 75 65 6e 6f 73 20 41 69 72 65 73 20 28 50 72 6f 76 69 6e 63 69 61 29 27 2c 0a 20 20 20 20 20 20 27 43 41 54 41 4d 41 52 43 41 27 3a 20 27 43 61 74 61 6d 61 72 63 61 27 2c 0a 20 20 20 20 20 20 27 43 48 41 43 4f 27 3a 20 27 43 68 61 63 6f 27 2c 0a 20 20 20 20 20 20 27 43 48 55 42 55 54 27 3a 20 27 43 68 75 62 75 74 27 2c 0a 20 20 20 20 20 20 27 43 c3 93 52 44 4f 42 41 27 3a 20 27 43 c3 b3 72 64 6f 62 61 27 2c 0a 20 20 20 20 Data Ascii: }, 'Argentina': { 'CIUDAD AUTNOMA DE BUENOS AIRES': 'Buenos Aires (Ciudad)', 'BUENOS AIRES': 'Buenos Aires (Provincia)', 'CATAMARCA': 'Catamarca', 'CHACO': 'Chaco', 'CHUBUT': 'Chubut', 'CRDOBA': 'Crdoba',
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 74 68 65 72 6e 20 54 65 72 72 69 74 6f 72 79 27 2c 0a 20 20 20 20 20 20 20 20 27 51 4c 44 27 3a 20 27 51 75 65 65 6e 73 6c 61 6e 64 27 2c 0a 20 20 20 20 20 20 20 20 27 53 41 27 3a 20 27 53 6f 75 74 68 20 41 75 73 74 72 61 6c 69 61 27 2c 0a 20 20 20 20 20 20 20 20 27 54 41 53 27 3a 20 27 54 61 73 6d 61 6e 69 61 27 2c 0a 20 20 20 20 20 20 20 20 27 56 49 43 27 3a 20 27 56 69 63 74 6f 72 69 61 27 2c 0a 20 20 20 20 20 20 20 20 27 57 41 27 3a 20 27 57 65 73 74 65 72 6e 20 41 75 73 74 72 61 6c 69 61 27 0a 20 20 20 20 7d 2c 0a 20 20 20 20 27 53 6f 75 74 68 20 4b 6f 72 65 61 27 3a 7b 0a 20 20 20 20 20 20 22 42 75 73 61 6e 22 3a 20 22 42 75 73 61 6e 22 2c 0a 20 20 20 20 20 20 22 43 68 75 6e 67 63 68 65 6f 6e 67 62 75 6b 2d 64 6f 22 3a 20 22 43 68 75 6e 67 63 68 65 Data Ascii: thern Territory', 'QLD': 'Queensland', 'SA': 'South Australia', 'TAS': 'Tasmania', 'VIC': 'Victoria', 'WA': 'Western Australia' }, 'South Korea':{ "Busan": "Busan", "Chungcheongbuk-do": "Chungche
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 53 4b 49 45 27 3a 20 27 5a 61 63 68 6f 64 6e 69 6f 2d 70 6f 6d 6f 72 73 6b 69 65 27 0a 20 20 20 20 7d 2c 0a 20 20 20 20 27 50 61 6e 61 6d 61 27 3a 7b 0a 20 20 20 20 20 20 27 50 72 6f 76 69 6e 63 69 61 20 64 65 20 42 6f 63 61 73 20 64 65 6c 20 54 6f 72 6f 27 3a 20 27 42 6f 63 61 73 20 64 65 6c 20 54 6f 72 6f 27 2c 0a 20 20 20 20 20 20 27 50 72 6f 76 69 6e 63 69 61 20 64 65 20 43 68 69 72 69 71 75 c3 ad 27 3a 20 27 43 68 69 72 69 71 75 c3 ad 27 2c 0a 20 20 20 20 20 20 27 50 72 6f 76 69 6e 63 69 61 20 64 65 20 43 6f 63 6c c3 a9 27 3a 20 27 43 6f 63 6c c3 a9 27 2c 0a 20 20 20 20 20 20 27 50 72 6f 76 69 6e 63 69 61 20 64 65 20 43 6f 6c c3 b3 6e 27 3a 20 27 43 6f 6c c3 b3 6e 27 2c 0a 20 20 20 20 20 20 27 50 72 6f 76 69 6e 63 69 61 20 64 65 6c 20 44 61 72 69 c3 Data Ascii: SKIE': 'Zachodnio-pomorskie' }, 'Panama':{ 'Provincia de Bocas del Toro': 'Bocas del Toro', 'Provincia de Chiriqu': 'Chiriqu', 'Provincia de Cocl': 'Cocl', 'Provincia de Coln': 'Coln', 'Provincia del Dari
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 42 48 45 52 49 27 3a 20 27 42 68 65 72 69 27 2c 0a 20 20 20 20 20 20 27 44 48 41 57 41 4c 41 47 49 52 49 27 3a 20 27 44 68 61 77 61 6c 61 67 69 72 69 27 2c 0a 20 20 20 20 20 20 27 47 41 4e 44 41 4b 49 27 3a 20 27 47 61 6e 64 61 6b 69 27 2c 0a 20 20 20 20 20 20 27 4a 41 4e 41 4b 50 55 52 27 3a 20 27 4a 61 6e 61 6b 70 75 72 27 2c 0a 20 20 20 20 20 20 27 4b 41 52 4e 41 4c 49 27 3a 20 27 4b 61 72 6e 61 6c 69 27 2c 0a 20 20 20 20 20 20 27 4b 41 54 48 4d 41 4e 44 55 27 3a 20 27 4b 61 74 68 6d 61 6e 64 75 27 2c 0a 20 20 20 20 20 20 27 4b 4f 53 49 27 3a 20 27 4b 6f 73 69 27 2c 0a 20 20 20 20 20 20 27 4c 55 4d 42 49 4e 49 27 3a 20 27 4c 75 6d 62 69 6e 69 27 2c 0a 20 20 20 20 20 20 27 4d 41 48 41 4b 41 4c 49 27 3a 20 27 4d 61 68 61 6b 61 6c 69 27 2c 0a 20 20 20 20 Data Ascii: BHERI': 'Bheri', 'DHAWALAGIRI': 'Dhawalagiri', 'GANDAKI': 'Gandaki', 'JANAKPUR': 'Janakpur', 'KARNALI': 'Karnali', 'KATHMANDU': 'Kathmandu', 'KOSI': 'Kosi', 'LUMBINI': 'Lumbini', 'MAHAKALI': 'Mahakali',

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.16	49995	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:26 UTC	599	OUT	GET /lib/v1/js/vaultFrame.js?v=65 HTTP/1.1 Host: pay.buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse
2025-01-10 16:49:27 UTC	593	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:27 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true Cache-Control: public, max-age=14400 last-modified: Fri, 13 Dec 2024 13:40:04 GMT etag: W/"3e3f-193c03f7320" vary: Accept-Encoding CF-Cache-Status: MISS Expires: Fri, 10 Jan 2025 20:49:27 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe29100a650f8f-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:27 UTC	776	IN	Data Raw: 33 65 33 66 0d 0a 2f 2a 2a 0a 20 2a 20 45 78 74 72 61 63 74 20 77 68 65 72 65 20 77 65 20 61 72 65 20 68 6f 73 74 69 6e 67 20 74 68 69 73 2e 2e 2e 2e 0a 20 2a 2f 0a 63 6f 6e 73 74 20 63 75 72 72 65 6e 74 44 6f 6d 61 69 6e 56 46 20 3d 20 28 20 6e 65 77 20 55 52 4c 28 20 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 20 29 20 29 3b 0a 0a 2f 2a 2a 0a 20 2a 20 52 65 70 72 65 73 65 6e 74 73 20 61 6e 20 6f 62 6a 65 63 74 20 66 6f 72 20 6d 61 6e 61 67 69 6e 67 20 61 6e 64 20 69 6e 74 65 72 61 63 74 69 6e 67 20 77 69 74 68 20 61 6e 20 69 66 72 61 6d 65 20 75 73 65 64 20 66 6f 72 20 70 61 79 6d 65 6e 74 20 70 72 6f 63 65 73 73 69 6e 67 2e 20 0a 20 2a 20 49 74 20 70 72 6f 76 69 64 65 73 20 6d 65 74 68 6f 64 73 20 66 6f 72 20 69 6e 69 Data Ascii: 3e3f/** * Extract where we are hosting this.... /const currentDomainVF = ( new URL( document.currentScript.src ) );/* * Represents an object for managing and interacting with an iframe used for payment processing. * It provides methods for ini
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 72 61 6d 65 20 2d 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 63 72 65 61 74 65 20 61 6e 64 20 61 70 70 65 6e 64 20 61 6e 20 69 66 72 61 6d 65 20 65 6c 65 6d 65 6e 74 2e 0a 20 2a 20 40 70 72 6f 70 65 72 74 79 20 7b 66 75 6e 63 74 69 6f 6e 7d 20 63 72 65 61 74 65 54 6f 6b 65 6e 46 69 65 6c 64 49 66 4e 6f 74 45 78 69 73 74 73 20 2d 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 74 6f 6b 65 6e 20 66 69 65 6c 64 20 69 66 20 69 74 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 2e 0a 20 2a 20 40 70 72 6f 70 65 72 74 79 20 7b 66 75 6e 63 74 69 6f 6e 7d 20 63 72 65 61 74 65 43 61 72 64 4e 75 6d 62 65 72 49 66 4e 6f 74 45 78 69 73 74 73 20 2d 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 63 61 72 64 20 6e 75 6d 62 65 72 20 Data Ascii: rame - Function to create and append an iframe element. * @property {function} createTokenFieldIfNotExists - Function to create the token field if it doesn't exist. * @property {function} createCardNumberIfNotExists - Function to create the card number
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 65 6e 74 73 3a 0a 09 09 7b 0a 09 09 09 69 66 72 61 6d 65 3a 20 6e 75 6c 6c 2c 0a 09 09 09 70 61 79 6d 65 6e 74 3a 20 6e 75 6c 6c 2c 0a 09 09 09 74 6f 6b 65 6e 3a 20 6e 75 6c 6c 2c 0a 09 09 09 63 61 72 64 6e 75 6d 62 65 72 3a 20 6e 75 6c 6c 2c 0a 09 09 09 63 61 72 64 6d 6f 6e 74 68 3a 20 6e 75 6c 6c 2c 0a 09 09 09 63 61 72 64 79 65 61 72 3a 20 6e 75 6c 6c 2c 0a 09 09 09 63 61 72 64 68 61 73 68 3a 20 6e 75 6c 6c 2c 0a 09 09 09 63 61 72 64 6b 68 61 73 68 3a 20 6e 75 6c 6c 2c 0a 09 09 09 63 76 76 54 6f 6f 6c 74 69 70 3a 20 6e 75 6c 6c 0a 09 09 7d 2c 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 49 6e 69 74 69 61 6c 69 7a 65 73 20 74 68 65 20 56 61 75 6c 74 46 72 61 6d 65 20 6f 62 6a 65 63 74 20 77 69 74 68 20 74 68 65 20 70 72 6f 76 69 64 65 64 20 6f 70 74 69 6f 6e Data Ascii: ents:{iframe: null,payment: null,token: null,cardnumber: null,cardmonth: null,cardyear: null,cardhash: null,cardkhash: null,cvvTooltip: null},/** * Initializes the VaultFrame object with the provided option
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 66 72 61 6d 65 28 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 74 68 65 20 74 6f 6b 65 6e 20 66 69 65 6c 64 20 69 66 20 77 65 20 64 69 64 6e 27 74 20 66 69 6e 64 20 69 74 0a 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 63 72 65 61 74 65 54 6f 6b 65 6e 46 69 65 6c 64 49 66 4e 6f 74 45 78 69 73 74 73 28 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 74 68 65 20 63 61 72 64 20 6e 75 6d 62 65 72 20 66 69 65 6c 64 20 69 66 20 77 65 20 64 69 64 6e 27 74 20 66 69 6e 64 20 69 74 0a 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 63 72 65 61 74 65 43 61 72 64 45 6c 65 6d 65 6e 74 49 66 4e 6f 74 45 78 69 73 74 73 28 20 27 63 61 72 64 6e 75 6d 62 65 72 27 2c 20 76 61 75 6c 74 46 72 61 6d 65 2e 6f 70 74 69 6f 6e 73 2e 65 6c 65 43 61 72 64 4e 75 6d 62 65 72 49 64 20 Data Ascii: frame();// Create the token field if we didn't find itvaultFrame.createTokenFieldIfNotExists();// Create the card number field if we didn't find itvaultFrame.createCardElementIfNotExists( 'cardnumber', vaultFrame.options.eleCardNumberId
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 7a 65 27 0a 09 09 09 7d 20 29 3b 0a 0a 09 09 09 2f 2f 20 57 61 69 74 20 66 6f 72 20 74 68 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 09 09 09 61 77 61 69 74 20 76 61 75 6c 74 46 72 61 6d 65 2e 77 61 69 74 46 6f 72 49 66 72 61 6d 65 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 53 74 61 74 75 73 28 29 3b 0a 0a 09 09 09 72 65 74 75 72 6e 20 28 20 76 61 75 6c 74 46 72 61 6d 65 2e 65 6c 65 6d 65 6e 74 73 2e 74 6f 6b 65 6e 2e 76 61 6c 75 65 20 21 3d 20 27 27 20 29 3b 0a 09 09 7d 2c 0a 0a 09 09 77 61 69 74 46 6f 72 49 66 72 61 6d 65 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 53 74 61 74 75 73 3a 20 61 73 79 6e 63 20 28 29 20 3d 3e 0a 09 09 7b 0a 09 09 09 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 20 28 20 72 65 73 6f 6c 76 65 Data Ascii: ze'} );// Wait for the validation to completeawait vaultFrame.waitForIframeCommunicationStatus();return ( vaultFrame.elements.token.value != '' );},waitForIframeCommunicationStatus: async () =>{return new Promise( ( resolve
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 29 0a 09 09 20 2a 2f 0a 09 09 73 68 6f 77 45 72 72 6f 72 73 3a 20 28 20 65 72 72 6f 72 73 20 29 20 3d 3e 0a 09 09 7b 0a 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 73 65 6e 64 4d 65 73 73 61 67 65 54 6f 49 66 72 61 6d 65 28 0a 09 09 09 7b 0a 09 09 09 09 74 79 70 65 3a 20 27 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 27 2c 0a 09 09 09 09 65 72 72 6f 72 73 3a 20 65 72 72 6f 72 73 0a 09 09 09 7d 20 29 3b 0a 09 09 7d 2c 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 41 64 64 73 20 61 20 73 74 79 6c 65 73 68 65 65 74 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 27 73 20 68 65 61 64 20 66 6f 72 20 73 74 79 6c 69 6e 67 20 70 75 72 70 6f 73 65 73 2e 0a 09 09 20 2a 2f 0a 09 09 61 64 64 53 74 79 6c 65 73 68 65 65 74 3a 20 28 29 20 3d 3e 0a 09 09 7b 0a Data Ascii: ) /showErrors: ( errors ) =>{vaultFrame.sendMessageToIframe({type: 'validation-error',errors: errors} );},/* * Adds a stylesheet link to the document's head for styling purposes. */addStylesheet: () =>{
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 2e 6f 70 74 69 6f 6e 73 2e 6f 72 69 67 69 6e 7d 2f 76 61 75 6c 74 2f 76 31 2f 66 6f 72 6d 66 72 61 6d 65 2d 24 7b 76 61 75 6c 74 46 72 61 6d 65 2e 6f 70 74 69 6f 6e 73 2e 66 72 61 6d 65 54 79 70 65 7d 3f 61 3d 24 7b 76 61 75 6c 74 46 72 61 6d 65 2e 6f 70 74 69 6f 6e 73 2e 61 63 63 6f 75 6e 74 49 64 7d 26 73 3d 24 7b 76 61 75 6c 74 46 72 61 6d 65 2e 6f 70 74 69 6f 6e 73 2e 73 65 73 73 69 6f 6e 49 64 7d 26 6c 61 6e 67 3d 24 7b 76 61 75 6c 74 46 72 61 6d 65 2e 6f 70 74 69 6f 6e 73 2e 6c 61 6e 67 7d 26 74 3d 24 7b 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 7d 60 3b 0a 0a 09 09 09 2f 2f 20 41 70 70 65 6e 64 20 69 74 20 74 6f 20 74 68 65 20 70 61 79 6d 65 6e 74 20 65 6c 65 6d 65 6e 74 0a 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 65 6c 65 6d 65 Data Ascii: .options.origin}/vault/v1/formframe-${vaultFrame.options.frameType}?a=${vaultFrame.options.accountId}&s=${vaultFrame.options.sessionId}&lang=${vaultFrame.options.lang}&t=${new Date().getTime()}`;// Append it to the payment elementvaultFrame.eleme
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 74 73 5b 20 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 20 5d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 20 27 69 6e 70 75 74 27 20 29 3b 0a 09 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 65 6c 65 6d 65 6e 74 73 5b 20 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 20 5d 2e 74 79 70 65 20 3d 20 27 68 69 64 64 65 6e 27 3b 0a 09 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 65 6c 65 6d 65 6e 74 73 5b 20 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 20 5d 2e 6e 61 6d 65 20 3d 20 65 6c 65 6d 65 6e 74 49 64 3b 0a 09 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 65 6c 65 6d 65 6e 74 73 5b 20 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 20 5d 2e 69 64 20 3d 20 65 6c 65 6d 65 6e 74 49 64 3b 0a 0a 09 09 09 09 2f 2f 20 41 70 70 65 6e 64 20 74 Data Ascii: ts[ elementInstance ] = document.createElement( 'input' );vaultFrame.elements[ elementInstance ].type = 'hidden';vaultFrame.elements[ elementInstance ].name = elementId;vaultFrame.elements[ elementInstance ].id = elementId;// Append t
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 65 72 43 61 72 64 2c 20 3c 62 72 3e 44 69 73 63 6f 76 65 72 20 26 61 6d 70 3b 20 4a 43 42 0a 09 09 09 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 09 09 09 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 74 69 70 2d 62 6f 64 79 22 3e 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 74 69 70 2d 63 6f 6e 74 65 6e 74 22 3e 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 7b 74 68 72 65 65 44 69 67 69 74 73 7d 2e 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 63 68 65 63 6b 6f 75 74 2f Data Ascii: erCard, <br>Discover & JCB </div> <div class="tooltip-body"> <div class="tooltip-content"> ${threeDigits}. </div> <img src="https://cdn.buygoods.com/assets/checkout/
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 20 3d 3e 0a 09 09 7b 0a 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 65 6c 65 6d 65 6e 74 73 2e 63 76 76 54 6f 6f 6c 74 69 70 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 20 27 5b 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 63 6c 6f 73 65 5d 27 20 29 0a 09 09 09 09 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 20 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 20 65 76 65 6e 74 20 29 0a 09 09 09 09 7b 0a 09 09 09 09 09 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 09 09 09 65 76 65 6e 74 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 0a 0a 09 09 09 09 09 76 61 75 6c 74 46 72 61 6d 65 2e 63 6c 6f 73 65 43 56 56 54 6f 6f 6c 74 69 70 28 29 3b 0a 09 09 09 09 7d 20 29 3b 0a 09 09 09 Data Ascii: =>{vaultFrame.elements.cvvTooltip.querySelector( '[data-tooltip-close]' ).addEventListener( 'click', function ( event ){event.preventDefault();event.stopImmediatePropagation();vaultFrame.closeCVVTooltip();} );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.16	49998	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:27 UTC	1166	OUT	GET /track/?a=6802&firstcookie=0&tracking_redirect=&referrer=https%3A%2F%2Fnervedefend.com%2F&sessid2=sessid20250110164829858&product=prod9&is_checkout=1&caller_url=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid20250110164829858%26aff_id%3D1270%26sid%3D2566%26sid2%3D6988_sessid20250110164723474%26account_id%3D6802%26product_codename%3Dprod9%26redirect%3DaHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x HTTP/1.1 Host: tracking.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEJgUPmnkKW5JETNtVJGZX1NbzGS8DXQqj3aVkHKS
2025-01-10 16:49:27 UTC	1328	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:27 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-credentials: true p3p: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE" cache-control: no-cache, must-revalidate pragma: no-cache expires: Tue, Jan 12 1999 01:01:01 GMT set-cookie: spiaffid_6802=1270; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:49:27 GMT; Secure set-cookie: spisubid_6802=2566%7C6988_sessid20250110164723474; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:49:27 GMT; Secure set-cookie: spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:49:27 GMT; Secure set-cookie: spisessid2_6802=sessid20250110164829858; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:49:27 GMT; Secure set-cookie: spi_funnel_codename_6802=; Domain=.buygoods.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure vary: Accept-Encoding x-server: WEB_6 strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ffe2910fe8243cd-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:27 UTC	41	IN	Data Raw: 31 61 64 30 0d 0a 0a 76 61 72 20 73 70 69 74 6f 64 61 79 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 76 61 72 20 73 70 69 Data Ascii: 1ad0var spitoday = new Date();var spi
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 65 78 70 69 72 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 73 70 69 65 78 70 69 72 65 2e 73 65 74 54 69 6d 65 28 73 70 69 74 6f 64 61 79 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 33 36 30 30 30 30 30 2a 32 34 2a 39 30 29 3b 0a 0a 2f 2f 20 47 65 74 20 68 6f 73 74 6e 61 6d 65 20 77 69 74 68 6f 75 74 20 74 68 65 20 73 75 62 64 6f 6d 61 69 6e 0a 2f 2f 0a 2f 2f 20 54 68 65 20 6d 65 74 68 6f 64 20 6c 6f 6f 6b 73 20 61 74 20 74 68 65 20 73 65 63 6f 6e 64 2d 6c 65 76 65 6c 20 64 6f 6d 61 69 6e 20 66 6f 72 20 63 6f 6d 6d 6f 6e 20 6f 6e 65 73 2c 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 69 66 20 77 65 20 6e 65 65 64 20 74 68 65 0a 2f 2f 20 6c 61 73 74 20 32 20 6f 72 20 74 68 65 20 6c 61 73 74 20 33 20 70 61 72 74 73 0a 2f 2f 0a 2f 2f 20 50 61 72 61 6d 65 74 65 72 Data Ascii: expire = new Date();spiexpire.setTime(spitoday.getTime() + 36000002490);// Get hostname without the subdomain//// The method looks at the second-level domain for common ones, to determine if we need the// last 2 or the last 3 parts//// Parameter
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 38 5f 73 65 73 73 69 64 32 30 32 35 30 31 31 30 31 36 34 37 32 33 34 37 34 22 29 2b 22 3b 65 78 70 69 72 65 73 3d 22 2b 73 70 69 65 78 70 69 72 65 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 22 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 22 2b 68 6f 73 74 6e 61 6d 65 3b 0a 09 09 09 09 09 0a 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 72 65 66 65 72 72 65 72 3d 22 2b 28 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 3a 6e 65 72 76 65 64 65 66 65 6e 64 2e 63 6f 6d 3a 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 25 32 46 73 65 63 75 72 65 25 32 46 63 68 65 63 6b 6f 75 74 22 29 2b 22 3b 65 78 70 69 72 65 73 3d 22 2b 73 70 69 65 78 70 69 72 65 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 22 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 22 2b 68 6f 73 74 6e 61 6d Data Ascii: 8_sessid20250110164723474")+";expires="+spiexpire.toGMTString()+";path=/;domain="+hostname;document.cookie = "referrer="+("8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout")+";expires="+spiexpire.toGMTString()+";path=/;domain="+hostnam
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 2f 3f 22 3b 0a 76 61 72 20 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 63 62 64 20 3d 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 63 62 64 2b 22 73 65 73 73 69 64 32 3d 22 2b 65 73 63 61 70 65 28 22 73 65 73 73 69 64 32 30 32 35 30 31 31 30 31 36 34 38 32 39 38 35 38 22 29 2b 22 26 22 3b 0a 0a 76 61 72 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 63 62 64 5f 68 74 6d 6c 20 3d 20 22 62 75 79 67 6f 6f 64 73 68 6f 6d 65 6f 69 6c 73 2e 63 6f 6d 25 32 46 73 65 63 75 72 65 25 32 46 63 68 65 63 6b 6f 75 74 2e 68 74 6d 6c 25 33 46 22 3b 0a 76 61 72 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 63 62 64 5f 68 74 6d 6c 20 3d 20 22 62 75 79 67 6f 6f 64 73 68 6f 6d 65 6f 69 6c 73 2e 63 6f 6d 2f 73 65 63 75 72 65 2f 63 68 65 63 6b 6f 75 74 Data Ascii: /?";var spi_replace_str_cbd = spi_pattern_base_cbd+"sessid2="+escape("sessid20250110164829858")+"&";var spi_pattern_enc_cbd_html = "buygoodshomeoils.com%2Fsecure%2Fcheckout.html%3F";var spi_pattern_base_cbd_html = "buygoodshomeoils.com/secure/checkout
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 73 70 69 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 73 70 69 29 3b 0a 0a 66 6f 72 20 28 73 70 69 5f 69 20 3d 20 30 3b 20 73 70 69 5f 69 20 3c 20 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 2e 6c 65 6e 67 74 68 3b 20 73 70 69 5f 69 2b 2b 29 20 0a 7b 0a 09 76 61 72 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 20 3d 20 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 5b 73 70 69 5f 69 5d 2e 68 72 65 66 3b 0a 0a 09 2f 2f 20 42 75 79 47 6f 6f 64 73 48 6f 6d 65 4f 69 6c 73 0a 09 69 66 28 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 2e 69 6e 64 65 78 4f 66 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 63 62 64 29 20 3e 20 2d 31 29 0a 09 7b 0a 09 09 73 Data Ascii: pi_replace_enc_spi = encodeURIComponent(spi_replace_str_spi);for (spi_i = 0; spi_i < spi_myNodelist.length; spi_i++) {var spi_track_link = spi_myNodelist[spi_i].href;// BuyGoodsHomeOilsif(spi_track_link.indexOf(spi_pattern_base_cbd) > -1){s
2025-01-10 16:49:27 UTC	1355	IN	Data Raw: 63 5f 62 67 5f 68 74 6d 6c 2c 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 29 3b 0a 09 09 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 5b 73 70 69 5f 69 5d 2e 68 72 65 66 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 3b 0a 09 7d 0a 0a 09 2f 2f 20 42 75 79 47 6f 6f 64 73 20 48 54 4d 4c 32 20 2d 20 6f 72 64 65 72 2e 68 74 6d 6c 0a 09 69 66 28 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 2e 69 6e 64 65 78 4f 66 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 62 67 5f 68 74 6d 6c 32 29 20 3e 20 2d 31 29 0a 09 7b 0a 09 09 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 2e 72 65 70 6c 61 63 65 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 62 67 5f 68 74 6d 6c 32 2c 73 70 69 5f 72 Data Ascii: c_bg_html,spi_replace_enc_bg_html);spi_myNodelist[spi_i].href = spi_track_link;}// BuyGoods HTML2 - order.htmlif(spi_track_link.indexOf(spi_pattern_base_bg_html2) > -1){spi_track_link = spi_track_link.replace(spi_pattern_base_bg_html2,spi_r
2025-01-10 16:49:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.16	49999	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:27 UTC	1056	OUT	POST /secure/checkout/init HTTP/1.1 Host: buygoods.com Connection: keep-alive Content-Length: 90 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://buygoods.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:27 UTC	90	OUT	Data Raw: 61 3d 36 38 30 32 26 63 3d 70 72 6f 64 39 26 73 3d 73 65 73 73 69 64 32 30 32 35 30 31 31 30 31 36 34 38 32 39 38 35 38 26 61 69 64 3d 31 32 37 30 26 6d 78 62 5f 73 65 73 73 69 6f 6e 3d 36 39 38 38 5f 73 65 73 73 69 64 32 30 32 35 30 31 31 30 31 36 34 37 32 33 34 37 34 Data Ascii: a=6802&c=prod9&s=sessid20250110164829858&aid=1270&mxb_session=6988_sessid20250110164723474
2025-01-10 16:49:27 UTC	382	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ffe29111d5115cb-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:27 UTC	987	IN	Data Raw: 33 39 37 63 0d 0a 7b 22 70 72 6f 64 75 63 74 50 72 69 63 65 22 3a 22 32 39 34 2e 30 30 22 2c 22 72 65 74 61 69 6c 50 72 69 63 65 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 4e 61 6d 65 22 3a 22 4e 65 72 76 65 20 44 65 66 65 6e 64 20 2d 20 36 20 42 6f 74 74 6c 65 73 22 2c 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 30 22 2c 22 70 72 6f 64 75 63 74 49 6d 61 67 65 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 22 2c 22 69 73 5f 70 72 69 6d 61 72 79 22 3a 22 30 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 5c 2f 70 72 6f 64 75 63 74 69 6d 61 67 65 73 5c 2f 36 38 30 32 5c 2f 33 34 5c 2f 36 5f 62 6f 5f 6c 65 73 65 63 66 73 30 6b 5f 70 5f 67 5f 72 65 73 69 7a 65 Data Ascii: 397c{"productPrice":"294.00","retailPrice":"0.00","productName":"Nerve Defend - 6 Bottles","productType":"0","productImage":[{"name":"","is_primary":"0","position":"0","url":"https:\/\/cdn.buygoods.com\/productimages\/6802\/34\/6_bo_lesecfs0k_p_g_resize
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 5c 22 41 72 75 62 61 5c 22 3e 41 72 75 62 61 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 41 75 73 74 72 61 6c 69 61 5c 22 3e 41 75 73 74 72 61 6c 69 61 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 41 75 73 74 72 69 61 5c 22 3e 41 75 73 74 72 69 61 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 26 41 72 69 6e 67 3b 6c 61 6e 64 20 49 73 6c 61 6e 64 73 5c 22 3e 5c 75 30 30 63 35 6c 61 6e 64 20 49 73 6c 61 6e 64 73 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 41 7a 65 72 62 61 69 6a 61 6e 5c 22 3e 41 7a 65 72 62 61 69 6a 61 6e 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c Data Ascii: \"Aruba\">Aruba<\/option>\n<option value=\"Australia\">Australia<\/option>\n<option value=\"Austria\">Austria<\/option>\n<option value=\"Åland Islands\">\u00c5land Islands<\/option>\n<option value=\"Azerbaijan\">Azerbaijan<\/option>\n<option value=\
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 22 43 61 70 65 20 56 65 72 64 65 5c 22 3e 43 61 70 65 20 56 65 72 64 65 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 43 61 79 6d 61 6e 20 49 73 6c 61 6e 64 73 5c 22 3e 43 61 79 6d 61 6e 20 49 73 6c 61 6e 64 73 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 43 68 69 6c 65 5c 22 3e 43 68 69 6c 65 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 43 68 72 69 73 74 6d 61 73 20 49 73 6c 61 6e 64 5c 22 3e 43 68 72 69 73 74 6d 61 73 20 49 73 6c 61 6e 64 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 43 6f 63 6f 73 20 28 4b 65 65 6c 69 6e 67 29 20 49 73 6c 61 6e 64 73 5c 22 3e 43 6f 63 6f 73 20 28 4b 65 65 Data Ascii: "Cape Verde\">Cape Verde<\/option>\n<option value=\"Cayman Islands\">Cayman Islands<\/option>\n\n<option value=\"Chile\">Chile<\/option>\n\n<option value=\"Christmas Island\">Christmas Island<\/option>\n<option value=\"Cocos (Keeling) Islands\">Cocos (Kee
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 46 72 61 6e 63 65 5c 22 3e 46 72 61 6e 63 65 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 46 72 65 6e 63 68 20 47 75 69 61 6e 61 5c 22 3e 46 72 65 6e 63 68 20 47 75 69 61 6e 61 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 46 72 65 6e 63 68 20 50 6f 6c 79 6e 65 73 69 61 5c 22 3e 46 72 65 6e 63 68 20 50 6f 6c 79 6e 65 73 69 61 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 46 72 65 6e 63 68 20 53 6f 75 74 68 65 72 6e 20 54 65 72 72 69 74 6f 72 69 65 73 5c 22 3e 46 72 65 6e 63 68 20 53 6f 75 74 68 65 72 6e 20 54 65 72 72 69 74 6f 72 69 65 73 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 Data Ascii: \n<option value=\"France\">France<\/option>\n<option value=\"French Guiana\">French Guiana<\/option>\n<option value=\"French Polynesia\">French Polynesia<\/option>\n<option value=\"French Southern Territories\">French Southern Territories<\/option>\n<opti
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 69 61 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 5c 6e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 49 72 65 6c 61 6e 64 5c 22 3e 49 72 65 6c 61 6e 64 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 49 73 6c 65 20 6f 66 20 4d 61 6e 5c 22 3e 49 73 6c 65 20 6f 66 20 4d 61 6e 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 49 73 72 61 65 6c 5c 22 3e 49 73 72 61 65 6c 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 49 74 61 6c 79 5c 22 3e 49 74 61 6c 79 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 4a 61 70 61 6e 5c 22 3e 4a 61 70 61 6e 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d Data Ascii: ia<\/option>\n\n\n<option value=\"Ireland\">Ireland<\/option>\n<option value=\"Isle of Man\">Isle of Man<\/option>\n<option value=\"Israel\">Israel<\/option>\n<option value=\"Italy\">Italy<\/option>\n<option value=\"Japan\">Japan<\/option>\n<option value=
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 4d 61 72 73 68 61 6c 6c 20 49 73 6c 61 6e 64 73 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 4d 61 72 74 69 6e 69 71 75 65 5c 22 3e 4d 61 72 74 69 6e 69 71 75 65 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 4d 61 75 72 69 74 61 6e 69 61 5c 22 3e 4d 61 75 72 69 74 61 6e 69 61 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 4d 61 75 72 69 74 69 75 73 5c 22 3e 4d 61 75 72 69 74 69 75 73 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 4d 61 79 6f 74 74 65 5c 22 3e 4d 61 79 6f 74 74 65 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 4d 65 78 69 63 6f 5c 22 3e 4d 65 78 69 63 6f Data Ascii: Marshall Islands<\/option>\n<option value=\"Martinique\">Martinique<\/option>\n<option value=\"Mauritania\">Mauritania<\/option>\n<option value=\"Mauritius\">Mauritius<\/option>\n<option value=\"Mayotte\">Mayotte<\/option>\n<option value=\"Mexico\">Mexico
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 20 76 61 6c 75 65 3d 5c 22 4f 6d 61 6e 5c 22 3e 4f 6d 61 6e 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 50 61 6b 69 73 74 61 6e 5c 22 3e 50 61 6b 69 73 74 61 6e 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 50 61 6c 61 75 5c 22 3e 50 61 6c 61 75 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 50 61 6c 65 73 74 69 6e 65 5c 22 3e 50 61 6c 65 73 74 69 6e 65 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 50 61 6e 61 6d 61 5c 22 3e 50 61 6e 61 6d 61 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 50 61 70 75 61 20 4e 65 77 20 47 75 69 6e 65 61 5c 22 3e 50 61 70 75 61 20 4e 65 Data Ascii: value=\"Oman\">Oman<\/option>\n<option value=\"Pakistan\">Pakistan<\/option>\n<option value=\"Palau\">Palau<\/option>\n<option value=\"Palestine\">Palestine<\/option>\n<option value=\"Panama\">Panama<\/option>\n<option value=\"Papua New Guinea\">Papua Ne
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 3d 5c 22 53 61 6e 20 4d 61 72 69 6e 6f 5c 22 3e 53 61 6e 20 4d 61 72 69 6e 6f 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 53 61 6f 20 54 6f 6d 65 20 61 6e 64 20 50 72 69 6e 63 69 70 65 5c 22 3e 53 61 6f 20 54 6f 6d 65 20 61 6e 64 20 50 72 69 6e 63 69 70 65 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 53 61 75 64 69 20 41 72 61 62 69 61 5c 22 3e 53 61 75 64 69 20 41 72 61 62 69 61 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 53 65 6e 65 67 61 6c 5c 22 3e 53 65 6e 65 67 61 6c 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 53 65 72 62 69 61 5c 22 3e 53 65 72 62 69 61 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c Data Ascii: =\"San Marino\">San Marino<\/option>\n<option value=\"Sao Tome and Principe\">Sao Tome and Principe<\/option>\n<option value=\"Saudi Arabia\">Saudi Arabia<\/option>\n<option value=\"Senegal\">Senegal<\/option>\n<option value=\"Serbia\">Serbia<\/option>\n<
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 54 72 69 6e 69 64 61 64 20 61 6e 64 20 54 6f 62 61 67 6f 5c 22 3e 54 72 69 6e 69 64 61 64 20 61 6e 64 20 54 6f 62 61 67 6f 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 54 75 6e 69 73 69 61 5c 22 3e 54 75 6e 69 73 69 61 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 54 5c 75 30 30 66 63 72 6b 69 79 65 5c 22 3e 54 5c 75 30 30 66 63 72 6b 69 79 65 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 54 75 72 6b 6d 65 6e 69 73 74 61 6e 5c 22 3e 54 75 72 6b 6d 65 6e 69 73 74 61 6e 3c 5c 2f 6f 70 74 69 6f 6e 3e 5c 6e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 5c 22 54 75 72 6b 73 20 61 6e 64 20 43 61 69 63 Data Ascii: n<option value=\"Trinidad and Tobago\">Trinidad and Tobago<\/option>\n<option value=\"Tunisia\">Tunisia<\/option>\n<option value=\"T\u00fcrkiye\">T\u00fcrkiye<\/option>\n<option value=\"Turkmenistan\">Turkmenistan<\/option>\n<option value=\"Turks and Caic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.16	49992	13.33.219.205	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:27 UTC	548	OUT	GET /us1/v5/datadog-rum.js HTTP/1.1 Host: www.datadoghq-browser-agent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:27 UTC	567	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 165619 Connection: close Last-Modified: Tue, 07 Jan 2025 16:38:15 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 16:49:28 GMT Cache-Control: max-age=14400, s-maxage=60 ETag: "ed8dc464fbd29476d2d886d74cd136af" X-Cache: RefreshHit from cloudfront Via: 1.1 343f10c14a24beceec4fd2e9df6f9a50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: m2pv5FchkJm6TSIaWMeik1XCN4j8LYpOLK37roqjJllHlRKzQRneiQ== Timing-Allow-Origin: *
2025-01-10 16:49:27 UTC	15817	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 6c 6f 67 3a 22 6c 6f 67 22 2c 64 65 62 75 67 3a 22 64 65 62 75 67 22 2c 69 6e 66 6f 3a 22 69 6e 66 6f 22 2c 77 61 72 6e 3a 22 77 61 72 6e 22 2c 65 72 72 6f 72 3a 22 65 72 72 6f 72 22 7d 2c 65 3d 63 6f 6e 73 6f 6c 65 2c 6e 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 65 5b 74 5d 7d 29 29 3b 76 61 72 20 72 3d 22 44 61 74 61 64 6f 67 20 42 72 6f 77 73 65 72 20 53 44 4b 3a 22 2c 69 3d 7b 64 65 62 75 67 3a 6e 2e 64 65 62 75 67 2e 62 69 6e 64 28 65 2c 72 29 2c 6c 6f 67 3a 6e 2e 6c 6f 67 2e 62 69 6e 64 28 65 2c 72 29 2c 69 6e 66 6f 3a 6e 2e 69 6e 66 6f 2e 62 69 6e 64 28 65 2c 72 Data Ascii: !function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r
2025-01-10 16:49:27 UTC	16384	IN	Data Raw: 67 65 26 26 21 6f 2e 68 61 73 28 61 29 29 7b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 48 28 7b 74 79 70 65 3a 22 74 65 6c 65 6d 65 74 72 79 22 2c 64 61 74 65 3a 4b 74 28 29 2c 73 65 72 76 69 63 65 3a 74 2c 76 65 72 73 69 6f 6e 3a 22 35 2e 33 35 2e 30 22 2c 73 6f 75 72 63 65 3a 22 62 72 6f 77 73 65 72 22 2c 5f 64 64 3a 7b 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 3a 32 7d 2c 74 65 6c 65 6d 65 74 72 79 3a 48 28 65 2c 7b 72 75 6e 74 69 6d 65 5f 65 6e 76 3a 6e 2c 63 6f 6e 6e 65 63 74 69 76 69 74 79 3a 6e 65 28 29 2c 73 64 6b 5f 73 65 74 75 70 3a 22 63 64 6e 22 7d 29 2c 65 78 70 65 72 69 6d 65 6e 74 61 6c 5f 66 65 61 74 75 72 65 73 3a 67 28 52 74 28 29 29 7d 2c 76 6f 69 64 20 30 21 3d 3d 72 3f 72 28 29 3a 7b 7d 29 Data Ascii: ge&&!o.has(a)){var c=function(t,e,n){return H({type:"telemetry",date:Kt(),service:t,version:"5.35.0",source:"browser",_dd:{format_version:2},telemetry:H(e,{runtime_env:n,connectivity:ne(),sdk_setup:"cdn"}),experimental_features:g(Rt())},void 0!==r?r():{})
2025-01-10 16:49:27 UTC	16384	IN	Data Raw: 69 6f 6e 20 44 6e 28 74 29 7b 72 65 74 75 72 6e 20 78 6e 7c 7c 28 78 6e 3d 41 74 28 62 74 2e 43 4f 4e 53 49 53 54 45 4e 54 5f 54 52 41 43 45 5f 53 41 4d 50 4c 49 4e 47 29 26 26 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 42 69 67 55 69 6e 74 36 34 41 72 72 61 79 28 31 29 29 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 3f 50 6e 3a 55 6e 29 2c 78 6e 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 50 6e 28 74 29 7b 76 61 72 20 65 3d 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 42 69 67 55 69 6e 74 36 34 41 72 72 61 79 28 31 29 29 5b 30 5d 3b 72 65 74 75 72 6e 20 36 33 3d 3d 3d 74 26 26 28 65 3e 3e 3d Data Ascii: ion Dn(t){return xn\|\|(xn=At(bt.CONSISTENT_TRACE_SAMPLING)&&function(){try{return crypto.getRandomValues(new BigUint64Array(1)),!0}catch(t){return!1}}()?Pn:Un),xn(t)}function Pn(t){var e=crypto.getRandomValues(new BigUint64Array(1))[0];return 63===t&&(e>>=
2025-01-10 16:49:27 UTC	16384	IN	Data Raw: 72 74 29 3b 72 65 74 75 72 6e 20 65 26 26 6e 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 74 2c 65 2c 6e 29 7b 69 66 28 74 3c 3d 65 26 26 65 3c 3d 6e 29 72 65 74 75 72 6e 7b 64 75 72 61 74 69 6f 6e 3a 47 74 28 24 74 28 65 2c 6e 29 29 2c 73 74 61 72 74 3a 47 74 28 24 74 28 74 2c 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 72 28 74 29 7b 72 65 74 75 72 6e 22 22 3d 3d 3d 74 2e 6e 65 78 74 48 6f 70 50 72 6f 74 6f 63 6f 6c 3f 76 6f 69 64 20 30 3a 74 2e 6e 65 78 74 48 6f 70 50 72 6f 74 6f 63 6f 6c 7d 66 75 6e 63 74 69 6f 6e 20 4f 72 28 74 29 7b 72 65 74 75 72 6e 22 22 3d 3d 3d 74 2e 64 65 6c 69 76 65 72 79 54 79 70 65 3f 22 6f 74 68 65 72 22 3a 74 2e 64 65 6c 69 76 65 72 79 54 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 4d 72 28 74 29 7b 69 66 28 74 2e 73 74 61 72 74 54 Data Ascii: rt);return e&&n}function Ir(t,e,n){if(t<=e&&e<=n)return{duration:Gt($t(e,n)),start:Gt($t(t,e))}}function Nr(t){return""===t.nextHopProtocol?void 0:t.nextHopProtocol}function Or(t){return""===t.deliveryType?"other":t.deliveryType}function Mr(t){if(t.startT
2025-01-10 16:49:27 UTC	16384	IN	Data Raw: 73 74 72 61 74 69 6f 6e 28 22 64 65 61 64 5f 63 6c 69 63 6b 22 29 7d 29 29 2c 7b 69 73 52 61 67 65 3a 21 31 7d 7d 76 61 72 20 58 69 3d 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 72 61 6e 67 65 22 5d 29 2c 74 65 78 74 61 72 65 61 2c 73 65 6c 65 63 74 2c 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 5d 2c 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 5d 20 2a 2c 63 61 6e 76 61 73 2c 61 5b 68 72 65 66 5d 2c 61 5b 68 72 65 66 5d 20 2a Data Ascii: stration("dead_click")})),{isRage:!1}}var Xi='input:not([type="checkbox"]):not([type="radio"]):not([type="button"]):not([type="submit"]):not([type="reset"]):not([type="range"]),textarea,select,[contenteditable],[contenteditable] ,canvas,a[href],a[href]
2025-01-10 16:49:27 UTC	16384	IN	Data Raw: 7d 29 7d 7d 7d 7d 29 29 3b 72 65 74 75 72 6e 7b 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 6f 28 74 29 7b 76 61 72 20 65 3b 69 66 28 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 79 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 74 2e 6e 6f 64 65 26 26 6e 69 28 74 2e 6e 6f 64 65 29 7d 29 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6e 6f 64 65 7d 76 61 72 20 4c 6f 2c 44 6f 3d 35 65 33 2c 50 6f 3d 56 74 3b 66 75 6e 63 74 69 6f 6e 20 55 6f 28 29 7b 72 65 74 75 72 6e 20 4b 72 28 7a 72 2e 4c 41 59 4f 55 54 5f 53 48 49 46 54 29 26 26 22 57 65 61 6b 52 65 66 22 69 6e 20 77 69 6e 64 6f 77 7d 76 61 72 20 7a 6f 3d Data Ascii: })}}}}));return{stop:function(){s.unsubscribe()}}}function Mo(t){var e;if(t)return null===(e=y(t,(function(t){return!!t.node&&ni(t.node)})))\|\|void 0===e?void 0:e.node}var Lo,Do=5e3,Po=Vt;function Uo(){return Kr(zr.LAYOUT_SHIFT)&&"WeakRef"in window}var zo=
2025-01-10 16:49:27 UTC	16384	IN	Data Raw: 71 75 65 73 74 43 6f 75 6e 74 2d 3d 31 2c 74 68 69 73 2e 6f 6e 67 6f 69 6e 67 42 79 74 65 43 6f 75 6e 74 2d 3d 74 2e 62 79 74 65 73 43 6f 75 6e 74 7d 7d 2c 71 75 65 75 65 64 50 61 79 6c 6f 61 64 73 3a 6d 61 28 29 2c 71 75 65 75 65 46 75 6c 6c 52 65 70 6f 72 74 65 64 3a 21 31 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 52 65 71 75 65 73 74 26 26 22 6b 65 65 70 61 6c 69 76 65 22 69 6e 20 6e 65 77 20 52 65 71 75 65 73 74 28 22 68 74 74 70 3a 2f 2f 61 22 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 26 26 6e 2e 62 79 74 65 73 43 6f 75 6e 74 3c 65 3b Data Ascii: questCount-=1,this.ongoingByteCount-=t.bytesCount}},queuedPayloads:ma(),queueFullReported:!1},i=function(n,r){return function(t,e,n,r){var i=function(){try{return window.Request&&"keepalive"in new Request("http://a")}catch(t){return!1}}()&&n.bytesCount<e;
2025-01-10 16:49:27 UTC	16384	IN	Data Raw: 74 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 49 64 46 6f 72 45 76 65 6e 74 28 74 29 7d 29 29 7d 7d 29 7d 29 29 3b 72 65 74 75 72 6e 7b 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 75 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 73 75 62 73 63 72 69 62 65 28 34 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 7b 74 69 6d 65 73 74 61 6d 70 3a 4b 74 28 29 2c 74 79 70 65 3a 61 73 7d 29 7d 29 29 3b 72 65 74 75 72 6e 7b 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 75 28 74 2c 65 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 64 6f 63 75 Data Ascii: ts.map((function(t){return n.getIdForEvent(t)}))}})}));return{stop:function(){r.unsubscribe()}}}function su(t,e){var n=t.subscribe(4,(function(){e({timestamp:Kt(),type:as})}));return{stop:function(){n.unsubscribe()}}}function uu(t,e,n){void 0===n&&(n=docu
2025-01-10 16:49:27 UTC	16384	IN	Data Raw: 6f 63 6b 3a 54 2c 5f 74 72 5f 66 6c 75 73 68 5f 62 6c 6f 63 6b 3a 48 2c 5f 74 72 5f 74 61 6c 6c 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 70 65 6e 64 69 6e 67 5f 62 75 66 5b 74 2e 64 5f 62 75 66 2b 32 2a 74 2e 6c 61 73 74 5f 6c 69 74 5d 3d 65 3e 3e 3e 38 26 32 35 35 2c 74 2e 70 65 6e 64 69 6e 67 5f 62 75 66 5b 74 2e 64 5f 62 75 66 2b 32 2a 74 2e 6c 61 73 74 5f 6c 69 74 2b 31 5d 3d 32 35 35 26 65 2c 74 2e 70 65 6e 64 69 6e 67 5f 62 75 66 5b 74 2e 6c 5f 62 75 66 2b 74 2e 6c 61 73 74 5f 6c 69 74 5d 3d 32 35 35 26 6e 2c 74 2e 6c 61 73 74 5f 6c 69 74 2b 2b 2c 30 3d 3d 3d 65 3f 74 2e 64 79 6e 5f 6c 74 72 65 65 5b 32 2a 6e 5d 2b 2b 3a 28 74 2e 6d 61 74 63 68 65 73 2b 2b 2c 65 2d 2d 2c 74 2e 64 79 6e 5f 6c 74 72 65 65 5b 32 Data Ascii: ock:T,_tr_flush_block:H,_tr_tally:function(t,e,n){return t.pending_buf[t.d_buf+2t.last_lit]=e>>>8&255,t.pending_buf[t.d_buf+2t.last_lit+1]=255&e,t.pending_buf[t.l_buf+t.last_lit]=255&n,t.last_lit++,0===e?t.dyn_ltree[2*n]++:(t.matches++,e--,t.dyn_ltree[2
2025-01-10 16:49:27 UTC	16384	IN	Data Raw: 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 65 28 74 2c 65 2c 61 29 7b 74 72 79 7b 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 74 79 70 65 3a 22 65 72 72 6f 72 65 64 22 2c 65 72 72 6f 72 3a 65 2c 73 74 72 65 61 6d 49 64 3a 61 7d 29 7d 63 61 74 63 68 28 6e 29 7b 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 74 79 70 65 3a 22 65 72 72 6f 72 65 64 22 2c 65 72 72 6f 72 3a 53 74 72 69 6e 67 28 65 29 2c 73 74 72 65 61 6d 49 64 3a 61 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 74 72 6d 2e 61 64 6c 65 72 3b 72 65 74 75 72 6e 20 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 33 2c 30 2c 65 3e 3e 3e 32 34 26 32 35 35 2c 65 3e 3e 3e 31 36 26 32 35 35 2c 65 3e 3e 3e 38 26 32 35 35 2c 32 35 35 26 65 5d 29 7d 72 65 2e 70 72 6f 74 Data Ascii: !0}}function ie(t,e,a){try{t.postMessage({type:"errored",error:e,streamId:a})}catch(n){t.postMessage({type:"errored",error:String(e),streamId:a})}}function se(t){var e=t.strm.adler;return new Uint8Array([3,0,e>>>24&255,e>>>16&255,e>>>8&255,255&e])}re.prot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.16	49996	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:27 UTC	606	OUT	GET /secure/checkout/assets/js/places.js?v=2 HTTP/1.1 Host: buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:27 UTC	530	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:27 GMT Content-Type: application/javascript Content-Length: 3865 Connection: close last-modified: Mon, 27 Nov 2023 21:02:05 GMT etag: "656503cd-f19" expires: Mon, 08 Jan 2035 16:49:27 GMT cache-control: public, max-age=315360000 x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: HIT Age: 8530 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe2910fea1f5f8-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:27 UTC	839	IN	Data Raw: 76 61 72 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 2c 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2c 61 75 74 6f 63 6f 6d 70 6c 65 74 65 55 70 64 61 74 65 64 2c 70 6c 61 63 65 2c 70 6c 61 63 65 55 70 64 61 74 65 64 2c 63 6f 75 6e 74 72 79 2c 61 64 64 72 65 73 73 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 63 72 65 64 69 74 63 61 72 64 73 5f 61 64 64 72 65 73 73 22 29 2c 61 64 64 72 65 73 73 55 70 64 61 74 65 64 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 61 64 64 72 65 73 73 65 73 5f 61 64 64 72 65 73 73 22 29 2c 63 6f 6d 70 6f 6e 65 6e 74 46 6f 72 6d 3d 7b 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 5f 61 72 65 61 5f 6c 65 76 65 6c 5f 31 3a 22 6c 6f 6e 67 5f 6e 61 6d 65 22 2c 6c 6f 63 61 6c 69 74 79 3a Data Ascii: var geolocation,autocomplete,autocompleteUpdated,place,placeUpdated,country,address=document.querySelector("#creditcards_address"),addressUpdated=document.querySelector("#addresses_address"),componentForm={administrative_area_level_1:"long_name",louserty:
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 6c 65 74 65 28 61 64 64 72 65 73 73 55 70 64 61 74 65 64 2c 7b 74 79 70 65 73 3a 5b 22 61 64 64 72 65 73 73 22 5d 7d 29 29 2e 73 65 74 46 69 65 6c 64 73 28 5b 22 61 64 64 72 65 73 73 5f 63 6f 6d 70 6f 6e 65 6e 74 22 5d 29 2c 61 75 74 6f 63 6f 6d 70 6c 65 74 65 55 70 64 61 74 65 64 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 22 70 6c 61 63 65 5f 63 68 61 6e 67 65 64 22 2c 66 69 6c 6c 49 6e 41 64 64 72 65 73 73 55 70 64 61 74 65 64 29 7d 66 75 6e 63 74 69 6f 6e 20 66 69 6c 6c 49 6e 41 64 64 72 65 73 73 28 29 7b 69 66 28 70 6c 61 63 65 3d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 67 65 74 50 6c 61 63 65 28 29 2c 61 64 64 72 65 73 73 2e 76 61 6c 75 65 3d 22 22 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 72 65 64 69 74 63 61 72 64 Data Ascii: lete(addressUpdated,{types:["address"]})).setFields(["address_component"]),autocompleteUpdated.addListener("place_changed",fillInAddressUpdated)}function fillInAddress(){if(place=autocomplete.getPlace(),address.value="",document.getElementById("creditcard
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 69 74 63 61 72 64 73 5f 73 74 61 74 65 22 29 2e 76 61 6c 75 65 3d 74 2c 75 70 64 61 74 65 43 6f 75 6e 74 72 79 28 64 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 72 65 64 69 74 63 61 72 64 73 5f 63 6f 75 6e 74 72 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 6f 73 74 61 6c 5f 63 6f 64 65 22 3a 63 61 73 65 22 70 6f 73 74 61 6c 5f 63 6f 64 65 5f 70 72 65 66 69 78 22 3a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 72 65 64 69 74 63 61 72 64 73 5f 7a 69 70 22 29 2e 76 61 6c 75 65 3d 64 7d 7d 63 61 6c 63 75 6c 61 74 65 54 61 78 65 73 28 29 7d 66 75 6e 63 74 69 6f 6e 20 66 69 6c 6c 49 6e 41 64 64 72 65 73 73 55 70 64 61 74 65 64 28 29 7b 69 66 28 70 6c 61 63 65 55 70 64 61 74 65 64 3d 61 Data Ascii: itcards_state").value=t,updateCountry(d,document.getElementById("creditcards_country"));break;case"postal_code":case"postal_code_prefix":document.getElementById("creditcards_zip").value=d}}calculateTaxes()}function fillInAddressUpdated(){if(placeUpdated=a
2025-01-10 16:49:27 UTC	288	IN	Data Raw: 73 65 73 5f 63 6f 75 6e 74 72 79 22 29 2e 76 61 6c 75 65 3d 64 2c 53 74 61 74 65 53 65 6c 65 63 74 69 6f 6e 42 61 73 65 64 4f 6e 43 6f 75 6e 74 72 79 28 64 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 74 61 74 65 77 72 61 70 70 65 72 5f 73 68 69 70 70 69 6e 67 22 29 2c 22 61 64 64 72 65 73 73 65 73 5f 73 74 61 74 65 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 64 64 72 65 73 73 65 73 5f 73 74 61 74 65 22 29 2e 76 61 6c 75 65 3d 74 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 6f 73 74 61 6c 5f 63 6f 64 65 22 3a 63 61 73 65 22 70 6f 73 74 61 6c 5f 63 6f 64 65 5f 70 72 65 66 69 78 22 3a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 64 64 72 65 73 73 65 73 Data Ascii: ses_country").value=d,StateSelectionBasedOnCountry(d,document.getElementById("statewrapper_shipping"),"addresses_state"),document.getElementById("addresses_state").value=t;break;case"postal_code":case"postal_code_prefix":document.getElementById("addresses

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.16	49997	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:27 UTC	608	OUT	GET /secure/checkout/assets/js/app.js?v=1.0.12 HTTP/1.1 Host: buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4
2025-01-10 16:49:27 UTC	534	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:27 GMT Content-Type: application/javascript Content-Length: 236476 Connection: close last-modified: Tue, 07 Jan 2025 18:37:03 GMT etag: "677d744f-39bbc" expires: Mon, 08 Jan 2035 16:49:27 GMT cache-control: public, max-age=315360000 x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: HIT Age: 8530 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8ffe29111eed6a58-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:27 UTC	835	IN	Data Raw: 2f 2f 20 49 6e 69 74 69 61 6c 69 7a 65 20 55 52 4c 20 63 6f 6d 70 6f 6e 65 6e 74 73 0a 6c 65 74 20 64 6f 6d 61 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 2c 0a 20 20 20 20 70 61 74 68 6e 61 6d 65 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2c 0a 20 20 20 20 63 68 65 63 6b 6f 75 74 50 61 72 61 6d 73 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 73 6c 69 63 65 28 20 31 20 29 2c 0a 20 20 20 20 63 68 65 63 6b 6f 75 74 55 72 6c 20 3d 20 64 6f 6d 61 69 6e 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2c 20 2f 2f 73 65 6e 74 20 74 6f 20 4c 6f 67 43 61 72 Data Ascii: // Initialize URL componentslet domain = window.location.host, pathname = window.location.pathname, checkoutParams = window.location.search.slice( 1 ), checkoutUrl = domain + window.location.pathname + window.location.search, //sent to LogCar
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 6c 50 61 72 61 6d 73 2e 67 65 74 28 20 22 72 65 73 75 6c 74 5f 73 74 72 22 20 29 20 3d 3d 20 6e 75 6c 6c 20 29 20 3f 20 22 22 20 3a 20 75 72 6c 50 61 72 61 6d 73 2e 67 65 74 28 20 22 72 65 73 75 6c 74 5f 73 74 72 22 20 29 2c 0a 20 20 20 20 0a 20 20 20 20 2f 2f 20 49 6e 69 74 69 61 6c 69 7a 65 20 66 6f 72 6d 20 68 65 6c 70 65 72 73 0a 20 20 20 20 73 61 6d 65 53 68 69 70 70 69 6e 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 22 73 61 6d 65 2d 73 68 69 70 70 69 6e 67 22 20 29 2c 0a 20 20 20 20 72 65 63 75 72 72 69 6e 67 43 68 65 63 6b 62 6f 78 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 22 72 65 63 75 72 72 69 6e 67 2d 63 68 65 63 6b 22 20 29 2c 0a 20 20 20 20 73 75 62 6d 69 74 Data Ascii: lParams.get( "result_str" ) == null ) ? "" : urlParams.get( "result_str" ), // Initialize form helpers sameShipping = document.getElementById( "same-shipping" ), recurringCheckbox = document.getElementById( "recurring-check" ), submit
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 65 73 74 20 70 61 72 61 6d 73 0a 20 20 20 20 76 69 64 20 3d 20 75 72 6c 50 61 72 61 6d 73 2e 67 65 74 28 22 76 69 64 31 22 29 20 7c 7c 20 22 22 3b 0a 0a 2f 2f 20 53 70 65 63 69 61 6c 20 63 6f 64 65 6e 61 6d 65 20 73 65 74 75 70 20 66 6f 72 20 61 63 63 6f 75 6e 74 20 39 34 32 33 20 74 6f 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 70 72 69 63 65 20 6f 6e 20 63 68 65 63 6b 6f 75 74 20 66 6f 72 20 41 75 73 74 72 69 61 20 61 73 20 66 6f 72 20 47 65 72 6d 61 6e 79 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 74 61 78 65 73 20 61 70 70 6c 69 65 64 20 66 6f 72 20 41 75 73 74 72 69 61 0a 2f 2f 20 69 66 20 28 20 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 39 34 32 33 20 29 0a 2f 2f 20 7b 0a 2f 2f 20 20 20 20 20 73 77 69 74 63 68 28 63 6f 64 65 6e 61 6d Data Ascii: est params vid = urlParams.get("vid1") \|\| "";// Special codename setup for account 9423 to have the same price on checkout for Austria as for Germany, regardless of the taxes applied for Austria// if ( accountID == 9423 )// {// switch(codenam
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 34 38 34 33 38 30 32 22 20 29 20 7c 7c 0a 20 20 20 20 28 20 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 27 36 38 31 39 27 20 26 26 20 73 65 73 73 69 64 32 20 3d 3d 20 22 73 65 73 73 69 64 32 30 32 33 30 37 31 30 31 35 31 34 32 38 39 36 32 22 20 29 20 7c 7c 0a 20 20 20 20 28 20 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 27 36 35 37 34 27 20 26 26 20 73 65 73 73 69 64 32 20 3d 3d 20 22 73 65 73 73 69 64 32 30 32 33 30 34 32 31 32 30 31 33 39 35 33 30 22 20 29 20 7c 7c 0a 20 20 20 20 28 20 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 27 37 30 38 36 27 20 26 26 20 73 65 73 73 69 64 32 20 3d 3d 20 22 73 65 73 73 69 64 32 30 32 33 30 36 31 35 31 36 34 37 32 37 36 38 37 22 20 29 20 7c 7c 0a 20 20 20 20 28 20 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 27 37 30 38 35 27 20 26 26 20 Data Ascii: 4843802" ) \|\| ( accountID == '6819' && sessid2 == "sessid20230710151428962" ) \|\| ( accountID == '6574' && sessid2 == "sessid2023042120139530" ) \|\| ( accountID == '7086' && sessid2 == "sessid20230615164727687" ) \|\| ( accountID == '7085' &&
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 20 20 20 63 6f 6e 73 74 20 73 65 73 73 69 64 32 20 3d 20 61 77 61 69 74 20 77 61 69 74 46 6f 72 43 6f 6f 6b 69 65 28 27 73 65 73 73 69 64 32 27 2c 20 35 30 30 30 2c 20 31 30 30 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 65 73 73 69 64 32 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 6c 6f 61 64 50 61 67 65 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 74 6f 64 61 79 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 66 6f 72 6d 61 74 74 65 64 44 61 74 65 20 3d 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 74 72 69 6e 67 28 74 6f 64 61 79 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 29 20 2b 0a 20 20 20 20 20 20 20 20 Data Ascii: const sessid2 = await waitForCookie('sessid2', 5000, 100); if (sessid2) { reloadPage(); } else { const today = new Date(); const formattedDate = String(today.getFullYear()) +
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 20 22 73 63 72 69 70 74 22 20 29 3b 0a 20 20 20 20 74 72 61 63 6b 69 6e 67 43 6f 64 65 2e 74 79 70 65 20 3d 20 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 0a 20 20 20 20 74 72 61 63 6b 69 6e 67 43 6f 64 65 5b 20 22 61 73 79 6e 63 22 20 5d 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 74 72 61 63 6b 69 6e 67 43 6f 64 65 2e 73 72 63 20 3d 20 6d 79 73 72 63 3b 0a 20 20 20 20 6c 65 74 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 20 22 73 63 72 69 70 74 22 20 29 5b 20 30 20 5d 3b 0a 20 20 20 20 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 20 74 72 61 63 6b 69 6e 67 43 6f 64 65 2c 20 73 20 29 3b 0a 0a 7d 20 29 28 29 Data Ascii: nt.createElement( "script" ); trackingCode.type = "text/javascript"; trackingCode[ "async" ] = true; trackingCode.src = mysrc; let s = document.getElementsByTagName( "script" )[ 0 ]; s.parentNode.insertBefore( trackingCode, s );} )()
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 33 0a 20 20 20 20 20 20 20 20 6d 78 62 5f 73 65 73 73 69 6f 6e 20 3d 20 28 20 63 68 65 63 6b 6f 75 74 50 61 72 61 6d 73 2e 69 6e 64 65 78 4f 66 28 20 22 26 73 75 62 69 64 33 3d 22 20 29 20 21 3d 20 2d 31 20 29 20 3f 20 75 72 6c 50 61 72 61 6d 73 2e 67 65 74 28 20 27 73 75 62 69 64 33 27 20 29 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 20 6d 78 62 5f 73 65 73 73 69 6f 6e 20 21 3d 20 27 27 20 26 26 20 6d 78 62 5f 73 65 73 73 69 6f 6e 20 21 3d 20 6e 75 6c 6c 20 26 26 20 28 20 6d 78 62 5f 73 65 73 73 69 6f 6e 2e 73 70 6c 69 74 28 20 27 5f 27 20 29 20 29 2e 6c 65 6e 67 74 68 20 3e 20 31 20 29 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 68 65 63 6b 6f 75 74 49 6e 69 74 20 2b 3d 20 22 26 6d 78 62 5f 73 65 73 73 69 6f 6e Data Ascii: 3 mxb_session = ( checkoutParams.indexOf( "&subid3=" ) != -1 ) ? urlParams.get( 'subid3' ) : ""; if ( mxb_session != '' && mxb_session != null && ( mxb_session.split( '_' ) ).length > 1 ) { checkoutInit += "&mxb_session
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 6e 69 74 69 61 6c 69 7a 65 20 63 68 65 63 6b 6f 75 74 20 73 65 74 74 69 6e 67 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 63 68 65 63 6b 6f 75 74 50 61 72 61 6d 73 2e 69 6e 64 65 78 4f 66 28 20 22 26 6c 61 6e 67 3d 22 20 29 20 21 3d 20 2d 31 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 61 72 72 61 79 4c 61 6e 67 73 20 3d 20 5b 27 65 6e 27 2c 27 66 72 27 2c 27 64 65 27 2c 27 65 73 27 2c 27 70 74 27 2c 27 61 72 27 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 61 72 72 61 79 4c 61 6e 67 73 2e 69 6e 63 6c 75 64 65 73 28 75 72 6c 50 61 72 61 Data Ascii: return false; } // Initialize checkout settings if(checkoutParams.indexOf( "&lang=" ) != -1){ let arrayLangs = ['en','fr','de','es','pt','ar']; if(arrayLangs.includes(urlPara
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 20 22 23 63 72 65 64 69 74 63 61 72 64 73 5f 63 6f 75 6e 74 72 79 22 20 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 72 65 73 70 6f 6e 73 65 2e 63 6f 75 6e 74 72 69 65 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 20 22 23 63 72 65 64 69 74 63 61 72 64 73 5f 63 6f 75 6e 74 72 79 22 20 29 2e 76 61 6c 75 65 20 3d 20 72 65 73 70 6f 6e 73 65 2e 62 69 6c 6c 69 6e 67 43 6f 75 6e 74 72 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 20 22 23 61 64 64 72 65 73 73 65 73 5f 63 6f 75 6e 74 72 79 22 20 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 72 65 73 70 6f 6e 73 65 Data Ascii: document.querySelector( "#creditcards_country" ).innerHTML = response.countries; document.querySelector( "#creditcards_country" ).value = response.billingCountry; document.querySelector( "#addresses_country" ).innerHTML = response
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 68 3d 22 38 30 22 20 63 6c 61 73 73 3d 22 69 6d 67 2d 66 6c 75 69 64 22 20 61 6c 74 3d 22 44 69 67 69 74 61 6c 20 50 72 6f 64 75 63 74 22 20 3e 27 20 2b 20 27 20 27 20 2b 20 72 65 73 70 6f 6e 73 65 2e 70 72 6f 64 75 63 74 4e 61 6d 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 38 31 31 37 20 7c 7c 20 61 63 63 6f 75 6e 74 49 44 20 3d 3d 20 37 35 33 33 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 67 75 61 72 61 6e 74 65 65 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 64 2d 6e 6f 6e 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 61 63 63 6f 75 6e 74 49 44 20 Data Ascii: h="80" class="img-fluid" alt="Digital Product" >' + ' ' + response.productName; if(accountID == 8117 \|\| accountID == 7533) { document.querySelector("#guarantee").classList.add('d-none'); } if(accountID

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.16	50000	198.217.251.250	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:27 UTC	382	OUT	GET /cardinalcruise/v1/songbird.js HTTP/1.1 Host: songbird.cardinalcommerce.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:27 UTC	874	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=14400 Last-Modified: Tue, 01 Mar 2022 19:58:10 GMT ETag: W/"0f522ada62dd81:0" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 637 Expires: Fri, 10 Jan 2025 20:49:27 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EGbv8gvmWwpbnqMkNWHQ2vVjxuVvJR3ahzL99pvhcz4yxXi%2FTcl2mfWZyWJAzFJ0wVZKWt24%2BvO2RLQBR95%2BgiULLUMwAFFZ063rkvH7q41uDB8qWHvHuKyAVP5p8HWvk28AUo0b4f0HcHhV03mj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe29127afdf5f8-EWR
2025-01-10 16:49:27 UTC	495	IN	Data Raw: 31 33 33 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 69 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 69 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 6f 61 64 65 64 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 77 69 6e 64 6f 77 2e 73 6f 6e 67 62 69 72 64 4c 6f 61 64 65 72 3b 77 69 6e 64 6f 77 2e 73 6f 6e 67 62 69 72 64 4c 6f 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 73 2c 75 2c 61 3d 30 2c 6c 3d 5b 5d 3b 61 3c 74 2e 6c 65 Data Ascii: 133b!function(e){function n(i){if(t[i])return t[i].exports;var o=t[i]={exports:{},id:i,loaded:!1};return e[i].call(o.exports,o,o.exports,n),o.loaded=!0,o.exports}var i=window.songbirdLoader;window.songbirdLoader=function(t,r){for(var s,u,a=0,l=[];a<t.le
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 5b 65 5d 29 6f 5b 65 5d 2e 70 75 73 68 28 69 29 3b 65 6c 73 65 7b 6f 5b 65 5d 3d 5b 69 5d 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 72 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 72 2e 61 73 79 6e 63 3d 21 30 2c 72 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2c 72 2e 73 72 63 3d 6e 2e 70 2b 22 22 2b 65 2b 22 2e 62 31 30 39 65 30 63 36 66 64 32 61 35 62 36 62 39 33 62 32 2e 73 6f 6e 67 62 69 72 64 2e 6a 73 Data Ascii: if(void 0!==o[e])o[e].push(i);else{o[e]=[i];var t=document.getElementsByTagName("head")[0],r=document.createElement("script");r.type="text/javascript",r.charset="utf-8",r.async=!0,r.crossOrigin="anonymous",r.src=n.p+""+e+".b109e0c6fd2a5b6b93b2.songbird.js
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 6c 6f 67 28 22 65 72 72 6f 72 22 2c 65 29 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 35 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 69 29 7b 76 61 72 20 74 2c 6f 3d 69 28 35 29 2c 72 3d 69 28 34 36 29 2c 73 3d 6e 65 77 20 72 28 22 42 61 73 65 2e 50 6f 6c 79 66 69 6c 6c 65 72 22 29 2c 75 3d 7b 4a 53 4f 4e 3a 21 31 2c 70 65 72 66 6f 72 6d 61 6e 63 65 3a 21 31 2c 62 69 6e 64 3a 21 31 2c 66 69 6c 74 65 72 3a 21 31 7d 2c 61 3d 7b 70 6f 6c 79 66 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 3d 65 2c 22 4a 53 4f 4e 22 69 6e 20 6f 2e 77 69 6e 64 6f 77 3f 28 75 2e 4a 53 4f 4e 3d 21 30 2c 61 2e 69 73 46 69 6e 69 73 68 65 64 28 29 29 3a 28 73 2e 64 Data Ascii: },i.prototype.error=function(e){this.log("error",e)},e.exports=i},54:function(e,n,i){var t,o=i(5),r=i(46),s=new r("Base.Polyfiller"),u={JSON:!1,performance:!1,bind:!1,filter:!1},a={polyfill:function(e){t=e,"JSON"in o.window?(u.JSON=!0,a.isFinished()):(s.d
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 68 28 7b 6e 61 6d 65 3a 65 2c 61 72 67 75 6d 65 6e 74 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 7d 2c 63 6f 6e 74 69 6e 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 65 2c 61 72 67 75 6d 65 6e 74 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 7d 2c 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 65 2c 61 72 67 75 6d 65 6e 74 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 7d 2c 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 65 2c 61 72 67 75 6d 65 6e 74 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 7d 2c 6f 66 66 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 65 2c 61 72 67 75 6d 65 6e 74 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 Data Ascii: h({name:e,arguments:arguments})},continue:function(e){r.push({name:e,arguments:arguments})},on:function(e){a.push({name:e,arguments:arguments})},trigger:function(e){c.push({name:e,arguments:arguments})},off:function(e){u.push({name:e,arguments:arguments})
2025-01-10 16:49:27 UTC	329	IN	Data Raw: 72 74 69 61 6c 28 78 2e 70 72 6f 63 65 73 73 53 65 74 75 70 2c 43 29 29 2c 6c 2e 6c 65 6e 67 74 68 3e 30 26 26 66 2e 70 75 62 6c 69 73 68 28 22 73 65 74 75 70 22 2c 6c 5b 30 5d 2e 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 6c 5b 30 5d 2e 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 2c 68 2e 6e 61 6d 65 73 70 61 63 65 3d 74 2c 68 2e 77 69 6e 64 6f 77 3d 65 2c 4e 2e 69 6e 69 74 69 61 6c 69 7a 65 28 65 29 2c 4e 2e 63 61 70 74 75 72 65 54 69 6d 69 6e 67 28 77 2e 67 65 74 43 75 72 72 65 6e 74 53 63 72 69 70 74 28 29 29 7d 63 61 74 63 68 28 65 29 7b 4f 2e 65 72 72 6f 72 28 22 46 61 74 61 6c 20 45 78 63 65 70 74 69 6f 6e 20 77 68 69 6c 65 20 70 72 6f 63 65 73 73 69 6e 67 3a 20 22 2b 28 65 2e 6d 65 73 73 61 67 65 21 3d 3d 6e 3f 65 2e 6d 65 73 73 61 67 65 3a 65 29 29 2c 79 Data Ascii: rtial(x.processSetup,C)),l.length>0&&f.publish("setup",l[0].arguments[0],l[0].arguments[1]),h.namespace=t,h.window=e,N.initialize(e),N.captureTiming(w.getCurrentScript())}catch(e){O.error("Fatal Exception while processing: "+(e.message!==n?e.message:e)),y
2025-01-10 16:49:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.16	50001	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:27 UTC	605	OUT	GET /v1/address?id=corporateaddress HTTP/1.1 Host: display.buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189::nervedefend.com%2Freport; spisessid2_6802=sessid20250110164818194; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEeyx5cparoLdJ
2025-01-10 16:49:27 UTC	567	IN	HTTP/1.1 302 Found Date: Fri, 10 Jan 2025 16:49:27 GMT Transfer-Encoding: chunked Connection: close x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true location: http://yomali.com x-server: WEB_6_7500 strict-transport-security: max-age=15552000; includeSubDomains set-cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ CF-Cache-Status: MISS Expires: Fri, 10 Jan 2025 20:49:27 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8ffe2912e80080da-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.16	50004	104.16.79.73	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:27 UTC	413	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:27 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:27 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8ffe291368af8cc8-EWR
2025-01-10 16:49:27 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2025-01-10 16:49:27 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.16	50007	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:27 UTC	1018	OUT	GET /track/?a=6802&firstcookie=0&tracking_redirect=&referrer=https%3A%2F%2Fnervedefend.com%2F&sessid2=sessid20250110164829858&product=prod9&is_checkout=1&caller_url=https%3A%2F%2Fbuygoods.com%2Fsecure%2Fcheckout.html%3Fsessid2%3Dsessid20250110164829858%26aff_id%3D1270%26sid%3D2566%26sid2%3D6988_sessid20250110164723474%26account_id%3D6802%26product_codename%3Dprod9%26redirect%3DaHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x HTTP/1.1 Host: tracking.buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEJgUPmnkKW5JETNtVJGZX1NbzGS8DXQqj3aVkHKS; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858
2025-01-10 16:49:28 UTC	1328	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:27 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-credentials: true p3p: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE" cache-control: no-cache, must-revalidate pragma: no-cache expires: Tue, Jan 12 1999 01:01:01 GMT set-cookie: spiaffid_6802=1270; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:49:27 GMT; Secure set-cookie: spisubid_6802=2566%7C6988_sessid20250110164723474; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:49:27 GMT; Secure set-cookie: spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:49:27 GMT; Secure set-cookie: spisessid2_6802=sessid20250110164829858; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Thu, 10 Apr 2025 16:49:27 GMT; Secure set-cookie: spi_funnel_codename_6802=; Domain=.buygoods.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure vary: Accept-Encoding x-server: WEB_6 strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ffe29154cf672ad-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:28 UTC	41	IN	Data Raw: 31 61 64 30 0d 0a 0a 76 61 72 20 73 70 69 74 6f 64 61 79 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 76 61 72 20 73 70 69 Data Ascii: 1ad0var spitoday = new Date();var spi
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 65 78 70 69 72 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 73 70 69 65 78 70 69 72 65 2e 73 65 74 54 69 6d 65 28 73 70 69 74 6f 64 61 79 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 33 36 30 30 30 30 30 2a 32 34 2a 39 30 29 3b 0a 0a 2f 2f 20 47 65 74 20 68 6f 73 74 6e 61 6d 65 20 77 69 74 68 6f 75 74 20 74 68 65 20 73 75 62 64 6f 6d 61 69 6e 0a 2f 2f 0a 2f 2f 20 54 68 65 20 6d 65 74 68 6f 64 20 6c 6f 6f 6b 73 20 61 74 20 74 68 65 20 73 65 63 6f 6e 64 2d 6c 65 76 65 6c 20 64 6f 6d 61 69 6e 20 66 6f 72 20 63 6f 6d 6d 6f 6e 20 6f 6e 65 73 2c 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 69 66 20 77 65 20 6e 65 65 64 20 74 68 65 0a 2f 2f 20 6c 61 73 74 20 32 20 6f 72 20 74 68 65 20 6c 61 73 74 20 33 20 70 61 72 74 73 0a 2f 2f 0a 2f 2f 20 50 61 72 61 6d 65 74 65 72 Data Ascii: expire = new Date();spiexpire.setTime(spitoday.getTime() + 36000002490);// Get hostname without the subdomain//// The method looks at the second-level domain for common ones, to determine if we need the// last 2 or the last 3 parts//// Parameter
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 38 5f 73 65 73 73 69 64 32 30 32 35 30 31 31 30 31 36 34 37 32 33 34 37 34 22 29 2b 22 3b 65 78 70 69 72 65 73 3d 22 2b 73 70 69 65 78 70 69 72 65 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 22 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 22 2b 68 6f 73 74 6e 61 6d 65 3b 0a 09 09 09 09 09 0a 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 72 65 66 65 72 72 65 72 3d 22 2b 28 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 3a 6e 65 72 76 65 64 65 66 65 6e 64 2e 63 6f 6d 3a 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 25 32 46 73 65 63 75 72 65 25 32 46 63 68 65 63 6b 6f 75 74 22 29 2b 22 3b 65 78 70 69 72 65 73 3d 22 2b 73 70 69 65 78 70 69 72 65 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 22 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 22 2b 68 6f 73 74 6e 61 6d Data Ascii: 8_sessid20250110164723474")+";expires="+spiexpire.toGMTString()+";path=/;domain="+hostname;document.cookie = "referrer="+("8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout")+";expires="+spiexpire.toGMTString()+";path=/;domain="+hostnam
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 2f 3f 22 3b 0a 76 61 72 20 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 63 62 64 20 3d 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 63 62 64 2b 22 73 65 73 73 69 64 32 3d 22 2b 65 73 63 61 70 65 28 22 73 65 73 73 69 64 32 30 32 35 30 31 31 30 31 36 34 38 32 39 38 35 38 22 29 2b 22 26 22 3b 0a 0a 76 61 72 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 63 62 64 5f 68 74 6d 6c 20 3d 20 22 62 75 79 67 6f 6f 64 73 68 6f 6d 65 6f 69 6c 73 2e 63 6f 6d 25 32 46 73 65 63 75 72 65 25 32 46 63 68 65 63 6b 6f 75 74 2e 68 74 6d 6c 25 33 46 22 3b 0a 76 61 72 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 63 62 64 5f 68 74 6d 6c 20 3d 20 22 62 75 79 67 6f 6f 64 73 68 6f 6d 65 6f 69 6c 73 2e 63 6f 6d 2f 73 65 63 75 72 65 2f 63 68 65 63 6b 6f 75 74 Data Ascii: /?";var spi_replace_str_cbd = spi_pattern_base_cbd+"sessid2="+escape("sessid20250110164829858")+"&";var spi_pattern_enc_cbd_html = "buygoodshomeoils.com%2Fsecure%2Fcheckout.html%3F";var spi_pattern_base_cbd_html = "buygoodshomeoils.com/secure/checkout
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 73 70 69 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 73 70 69 29 3b 0a 0a 66 6f 72 20 28 73 70 69 5f 69 20 3d 20 30 3b 20 73 70 69 5f 69 20 3c 20 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 2e 6c 65 6e 67 74 68 3b 20 73 70 69 5f 69 2b 2b 29 20 0a 7b 0a 09 76 61 72 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 20 3d 20 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 5b 73 70 69 5f 69 5d 2e 68 72 65 66 3b 0a 0a 09 2f 2f 20 42 75 79 47 6f 6f 64 73 48 6f 6d 65 4f 69 6c 73 0a 09 69 66 28 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 2e 69 6e 64 65 78 4f 66 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 63 62 64 29 20 3e 20 2d 31 29 0a 09 7b 0a 09 09 73 Data Ascii: pi_replace_enc_spi = encodeURIComponent(spi_replace_str_spi);for (spi_i = 0; spi_i < spi_myNodelist.length; spi_i++) {var spi_track_link = spi_myNodelist[spi_i].href;// BuyGoodsHomeOilsif(spi_track_link.indexOf(spi_pattern_base_cbd) > -1){s
2025-01-10 16:49:28 UTC	1355	IN	Data Raw: 63 5f 62 67 5f 68 74 6d 6c 2c 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 29 3b 0a 09 09 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 5b 73 70 69 5f 69 5d 2e 68 72 65 66 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 3b 0a 09 7d 0a 0a 09 2f 2f 20 42 75 79 47 6f 6f 64 73 20 48 54 4d 4c 32 20 2d 20 6f 72 64 65 72 2e 68 74 6d 6c 0a 09 69 66 28 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 2e 69 6e 64 65 78 4f 66 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 62 67 5f 68 74 6d 6c 32 29 20 3e 20 2d 31 29 0a 09 7b 0a 09 09 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 2e 72 65 70 6c 61 63 65 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 62 67 5f 68 74 6d 6c 32 2c 73 70 69 5f 72 Data Ascii: c_bg_html,spi_replace_enc_bg_html);spi_myNodelist[spi_i].href = spi_track_link;}// BuyGoods HTML2 - order.htmlif(spi_track_link.indexOf(spi_pattern_base_bg_html2) > -1){spi_track_link = spi_track_link.replace(spi_pattern_base_bg_html2,spi_r
2025-01-10 16:49:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.16	50010	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:27 UTC	826	OUT	GET /productimages/6802/34/6_bo_lesecfs0k_p_g_resized333.png HTTP/1.1 Host: cdn.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858
2025-01-10 16:49:28 UTC	1002	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:28 GMT Content-Type: image/webp Content-Length: 91072 Connection: close Cf-Bgj: imgq:100,h2pri Cf-Polished: origFmt=png, origSize=141499 Content-Disposition: inline; filename="6_bo_lesecfs0k_p_g_resized333.webp" Vary: Accept etag: "72fd79ec6c125064c4c83879bf92232e" last-modified: Wed, 21 Jul 2021 09:09:24 GMT via: 1.1 3321cf5b75e8f5d527528f2fde6db65e.cloudfront.net (CloudFront) x-amz-cf-id: lZusjlOnbu9W8BAy8JLFZrLSh7G3sCPTQmgR9cbVqCyQ6m7Ot_KcYw== x-amz-cf-pop: BOS50-P3 x-amz-meta-s3cmd-attrs: atime:1626858560/ctime:1626858560/gid:0/gname:wheel/md5:72fd79ec6c125064c4c83879bf92232e/mode:33206/mtime:1626858560/uid:0/uname:root x-cache: Miss from cloudfront CF-Cache-Status: HIT Age: 1459 Expires: Fri, 10 Jan 2025 20:49:28 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe29165fbfefa1-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:28 UTC	367	IN	Data Raw: 52 49 46 46 b8 63 01 00 57 45 42 50 56 50 38 4c ab 63 01 00 2f bb 01 53 10 4d 50 92 24 39 8e 24 89 7b 20 08 92 e6 f8 ff 83 81 ac a5 67 3d 46 f4 7f 02 f4 bf a5 25 bf 1f a5 f7 13 81 5f 78 df 57 a6 be 24 09 68 c4 db dd 31 f0 85 61 9f 6c 23 49 7e 5f a9 0a 04 49 ec 76 1f 6c 3b 92 00 5b b2 87 eb 74 94 a4 04 98 d0 ed ed e2 7d fb d9 3c 67 db 46 47 4b d2 90 6c 19 04 dd c1 b6 bb cd 9e 44 02 e2 eb 90 d9 dd 40 24 c9 b6 cb f6 81 3d 49 3e 01 01 49 40 d2 dd 6d 5b 08 38 21 92 64 e3 24 29 09 bb a4 24 7c 4c 77 7b 97 bf 24 91 88 3d 07 ad 6b 24 12 48 22 01 09 c0 76 15 48 49 40 ea 04 68 78 df f7 9d b6 db ce 71 ce 04 0e 01 64 17 d0 27 db 66 0f 1f 03 74 b7 6d 47 49 32 82 a4 e1 61 03 4e 0c 14 c8 b6 9f a7 b4 cf d9 6d 24 71 7c 92 38 bb 77 5c 48 be 4d 15 f2 1d 9e 2a d5 18 d7 35 1b Data Ascii: RIFFcWEBPVP8Lc/SMP$9${ g=F%_xW$h1al#I~_Ivl;[t}<gFGKlD@$=I>I@m[8!d$)$\|Lw{$=k$H"vHI@hxqd'ftmGI2aNm$q\|8w\HM*5
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: fc f5 32 36 d4 b4 0d d4 f4 0e 18 1c 3b 06 db e0 d8 8e c1 8e 6d df b7 8d 3d 7b d9 86 e9 e5 db 06 1f 83 f7 e0 63 f8 12 fb bc 27 fb bc e7 7d c3 f6 90 70 8e 05 3c 0f fb b3 01 37 82 d5 b7 59 8b 79 df e6 f3 f3 04 f0 f3 3c e6 0b cf 63 db 41 d1 60 9f 91 00 bc 90 24 ea 79 9e 07 a8 e7 79 a0 aa d6 43 55 95 77 ba d6 1c 03 28 32 2e 58 2b 19 12 1c 3c ab ea 81 43 06 33 e9 61 cb d4 84 4b ac 9a 9e 1a ac 2e d0 b8 6a 8f 4d ad aa 39 90 a8 16 08 c0 36 92 20 1c 2f f1 56 ad 3b ba aa 92 ac 61 50 40 48 e2 ab 1e 76 4f 00 49 e2 28 98 97 24 31 23 f1 ed ec 55 0c 29 fb 27 49 02 81 c4 77 b3 73 2e a2 f3 25 65 57 b7 fc 65 c8 11 88 92 42 1a a0 92 64 bd 23 3a 86 ee 6e b2 93 1d 60 93 87 24 19 90 90 35 2c bd fa 9c 48 d2 97 02 68 b7 86 25 bb 24 b9 6c 5b ef 6b 4b b6 7e 78 20 1f d0 36 ca 3b 48 Data Ascii: 26;m={c'}p<7Yy<cA`$yyCUw(2.X+<C3aK.jM96 /V;aP@HvOI($1#U)'Iws.%eWeBd#:n`$5,Hh%$l[kK~x 6;H
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: c2 3c 01 44 e7 00 e7 04 b7 8d 9d 4d 9e 6d ea e6 14 9d 13 41 85 cd 93 4d 95 4d c5 37 e5 8d 7d 82 2a 8a 53 fc 70 9a 04 9c 27 53 9d 28 be ee d0 4d 75 ee d8 66 52 f4 41 c5 0d 15 dc 6d 8a d3 4d dc a1 73 53 92 00 f3 c0 c7 db e3 6d 5e 37 af 8f ef 24 05 9f 97 2b b0 17 55 3c 11 af 6c ee 00 dc 33 d5 3d cf 04 7c 6e 3a c4 cd a9 3e 73 ba e9 5e d0 0d dd e6 b9 e7 11 9f 39 2f 38 dc a6 3a 15 92 20 e0 44 c0 09 9e 9b c3 c9 fc 14 a7 68 93 d6 4e 75 82 0e 04 2e 0a a2 08 1b b6 a6 f9 c2 6a ad 0e c0 2b 38 db 36 cd bd 4d 52 92 d0 36 49 f3 ce b6 4e aa 2d 79 ed a5 e4 e3 83 de 9a 2f 2e 97 2f ed 35 fc 18 49 da e6 db 4b db b4 47 d3 36 7f a3 fd 3f 98 bb 56 fb ff d7 ff b6 95 ff 5c 5b 71 77 77 6d ee ee 34 87 e4 90 ac ba 67 cf 6e 89 41 75 77 77 77 77 67 fb 5e 7b cd 39 c6 fc bd 5f af f7 e7 Data Ascii: <DMmAMM7}*Sp'S(MufRAmMsSm^7$+U<l3=\|n:>s^9/8: DhNu.j+86MR6IN-y/./5IKG6?V\[qwwm4gnAuwwwwg^{9_
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 56 fd 8b 2e 01 b4 55 db 6d ac 31 c6 9c 6b ef 73 ae 64 39 50 cc f4 be b8 13 d4 a5 02 5b 96 9c 54 55 a3 1e 43 03 98 19 03 86 48 be 70 ce de 6b 8d c1 bb b6 6d d5 b6 6d 47 a5 d6 d6 fa 98 73 ee 7d e0 5d b1 fe 64 83 4c 60 c9 14 c9 05 bc 60 94 20 38 be 18 fe c2 04 8e b8 78 f6 5e 6b 8e de 5b 0d 45 6e 1b 29 5d be 0d c3 3e c1 ff fa 7f cf 2e 39 92 74 5d d7 6d 1e 73 fc 09 ef 4d 7a ef a4 4c d9 94 4a ae bc 6b ab 6a 57 de 7b ef d4 be bc f7 46 5d 56 25 ef bd f7 29 a5 4c 3a 65 a6 d2 67 64 44 64 78 7b fc 39 cf f3 dc f7 75 5d 50 95 99 aa fe 0f be 34 87 82 fc e1 41 74 d1 26 40 29 34 f6 d0 dc 30 f7 20 ee 31 31 c3 3d 26 48 84 e6 d0 fa 61 4c 0e e2 b0 ab ee e4 b0 73 c6 dc 6b 1e d5 04 bb 4f fb 66 b3 57 88 f1 b9 cb 33 e6 90 e4 9a c3 f0 8c 89 71 d2 1e 9a ea 5a 23 c4 11 42 9b e4 98 Data Ascii: V.Um1ksd9P[TUCHpkmmGs}]dL`` 8x^k[En)]>.9t]msMzLJkjW{F]V%)L:egdDdx{9u]P4At&@)40 11=&HaLskOfW3qZ#B
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 2c 73 68 91 e7 a7 39 2f 62 31 6c 0c d6 9a 31 87 a0 9c 17 9c 35 8a f0 29 60 73 b1 8f 25 90 18 08 84 0e 0a 66 6d 01 ce 38 f7 63 f3 08 54 73 9d 5f 07 f3 4f 22 0e b4 a9 c0 ee 65 90 ad 55 46 12 03 02 99 ec b0 96 2c f2 02 78 04 03 ed 06 7e 72 c4 e1 11 2f 10 ff 18 a9 ce 0c 1b 1a 94 64 c8 82 e4 90 81 13 01 a6 45 b4 06 e8 9a fe ae 61 03 40 23 5a 42 b7 98 95 c4 07 ab a1 6e b2 cf 35 09 16 d0 10 da 54 6c 2e de 3b e4 01 80 cb 83 f9 29 ff f3 ca 45 93 4d c9 7b 8f 6a db 86 82 3a 0a f9 d9 87 3e fb 29 85 7d 0d d8 04 f8 7d 4b 6c 08 b2 e7 51 69 00 73 be e0 56 21 ef fc 09 03 01 32 3b 16 51 c6 aa a6 10 24 02 8d d1 72 cd 83 4e 69 0c 0c cd 1d e7 20 92 f9 94 62 58 87 8d 36 a0 35 b0 6f 99 50 2f 8d d6 8a 4c 84 61 0e 2b ec 4b 00 3c 93 bc 4f 74 c4 9f a5 aa f1 ed 4e 15 57 d0 e0 ee dd Data Ascii: ,sh9/b1l15)`s%fm8cTs_O"eUF,x~r/dEa@#ZBn5Tl.;)EM{j:>)}}KlQisV!2;Q$rNi bX65oP/La+K<OtNW
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 81 e3 00 a8 15 06 d9 58 24 7d 8e 8f a0 c9 4e 45 5b 3b c3 a2 42 50 d3 b9 64 8b 5a 01 44 5a 0d c0 e1 d4 14 4a fe fa f3 e3 d0 7e fd 8b 6e e8 24 52 93 72 35 a8 b1 8d 52 60 c4 1b 6c 13 3a 11 5e ec 1a 46 d5 e7 dd 50 1c 69 42 bf 39 16 a9 4f 0d 61 8a 6b 36 51 bc e4 81 be 31 fc 30 dd 67 3f cf 37 b2 6c 86 cd 7f cc 38 37 be 4d 2a 0b 35 73 20 41 03 a3 25 fa 90 e7 c9 64 54 b5 40 c9 25 91 3b c0 fd c4 f6 c4 16 6a 54 50 a0 4a c9 07 17 dd d0 46 c1 d9 48 ad 68 be 3c cf c8 5d 3c 3a e3 29 0b a4 1a 3a 49 3b d9 41 00 2e f4 61 e6 d6 e0 8f 0b e9 0c c2 48 ca bb 17 18 63 9c 49 55 81 b4 0d 1a 23 fa 60 e9 3c 04 63 79 81 90 3c 50 05 ae 02 7a e4 57 dd 11 1b 03 d0 28 4f 28 08 5a af 2f 50 8f 9a 33 4a 81 ad da 1e 45 59 ba 51 92 ba a7 20 82 8b ee ea 58 75 1e 77 1a b3 94 e5 1e fd b8 ab dc Data Ascii: X$}NE[;BPdZDZJ~n$Rr5R`l:^FPiB9Oak6Q10g?7l87M*5s A%dT@%;jTPJFHh<]<:):I;A.aHcIU#`<cy<PzW(O(Z/P3JEYQ Xuw
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 2c 80 d6 8d c5 58 37 00 cd 2c f2 ad 6a bb e7 c5 26 b6 e6 9e 54 90 53 25 d9 82 6e 1e 72 71 ee d3 0d 53 46 c8 c3 f4 86 59 5d e0 b7 cf cf ed e7 63 ff 73 33 f3 01 a8 d9 75 a9 58 4d 98 c3 a7 c6 86 52 30 63 61 e9 60 92 7c bf 04 19 1d 97 d2 1d e2 d8 88 0b ca ec 3f 45 77 92 6a 3f c1 e1 c5 12 b1 fa fa de 7b fb 00 b5 4c 43 2c b2 d3 30 ee 74 0a 60 6f 0b a1 e3 9e c9 32 2b d7 a4 0e db 75 5d f2 04 b5 c5 25 0c 03 94 6f 25 2d 84 c1 44 75 33 d4 34 58 61 19 72 53 77 39 12 9a e6 56 ad 69 bd c9 7c 18 ea 4f 53 3d 27 a7 ef f4 58 d8 b5 dd bb 4b 7c f8 b3 4c 53 ed 65 63 77 72 1b 79 0b 83 22 7f 44 7c 30 c1 fb ef 94 85 34 07 eb 6d 43 a9 3b 5c 4a 34 34 ab 40 16 26 67 6c 97 02 06 08 c7 0a ec 1c 71 77 c4 d1 33 b4 77 a2 a9 40 dc ad 69 94 d3 d1 2e 12 10 23 31 69 c1 fb 88 5e 8b d2 6f 2b Data Ascii: ,X7,j&TS%nrqSFY]cs3uXMR0ca`\|?Ewj?{LC,0t`o2+u]%o%-Du34XarSw9Vi\|OS='XK\|LSecwry"D\|04mC;\J44@&glqw3w@i.#1i^o+
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 92 11 c2 d6 04 ad 8b 99 ab 5d 46 88 2c 55 96 01 79 1c c7 21 97 0f f0 04 25 26 0b ac 1e 62 f9 10 4b ca 2c 9d 83 97 4f 83 b7 9f 32 54 e0 e9 e8 f2 c2 69 25 4e 58 24 ad 55 a7 9d ff 79 12 8f 75 3b 55 f6 8d 8e dc 76 41 a7 08 d5 e0 5a c2 92 85 0d 17 27 4d 1a 2c f9 6d 07 c6 77 b1 dc 05 7e 3d ab ef 35 a7 e0 21 5f 48 aa 4d 62 9a cb 96 84 69 f0 8c b7 3d 68 a0 1c 55 25 8a 0a 13 ae d1 3f 0b 71 00 85 08 16 1a a3 58 ab 2b 6e 0d 77 89 87 01 33 69 0c 66 61 91 f6 00 90 e3 59 ab fa 92 15 ac da 3a 55 01 59 1e ed 79 ab 89 14 72 00 c2 16 65 8b 12 f4 97 b0 84 64 35 96 10 bc ca 30 e5 f9 12 28 6b c3 e7 57 83 4d 0c 27 34 9c ef c0 f3 1f 1d aa 39 9a 8d 89 9a 52 55 f5 7c d3 07 a8 6b 78 c0 0e a6 5e 37 b8 b6 08 06 fb 36 54 ea 2b 4b ec c8 92 6e 37 4f db 96 53 92 08 75 22 4b bb 5d d7 24 Data Ascii: ]F,Uy!%&bK,O2Ti%NX$Uyu;UvAZ'M,mw~=5!_HMbi=hU%?qX+nw3ifaY:UYyred50(kWM'49RU\|kx^76T+Kn7OSu"K]$
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 75 72 31 52 1c 4b e8 39 02 57 6f 1d 3f 21 70 76 09 94 a5 cb 5b 69 61 3b 14 f6 80 65 56 23 38 7e 31 32 1e 9e ed b6 a4 f2 16 af f4 2c 8c 56 c8 29 d0 2a ce ea dd cd a9 36 29 26 6e 97 2d ef 87 ea ad 3a 93 b9 91 2e 85 98 99 a8 47 99 41 c4 54 35 9d b7 8a 56 36 fd 2a 46 0f c7 97 54 ee 08 ef 1c 97 c3 20 d7 11 8d 5a 85 ba 10 54 48 36 08 55 49 b4 38 e4 b0 d4 1e d2 2e 00 79 e0 9f e3 e2 0d 14 94 95 d4 f6 4f 70 e2 c9 40 bc 58 43 f3 56 ca 62 a9 6d 8f 4a 53 c3 dd a0 05 a5 29 3a 03 bd 34 f7 a3 2b ea 96 27 24 9f aa ae 40 6f 21 f3 60 a0 5b a7 71 a8 4b 67 cf eb 0c d8 46 f4 9b 36 e6 5a b7 63 a7 ad 9c 8a ea de e4 18 19 10 93 c2 c3 5c 1a ba 9f 2a a8 c6 47 fa 29 18 6c 23 8f 98 e6 40 5e 03 db 43 72 33 a0 22 aa 1a 6e 07 ef 1e 80 01 d9 24 ef ba 30 e0 10 ea 61 75 16 53 04 4a 5d e1 Data Ascii: ur1RK9Wo?!pv[ia;eV#8~12,V)6)&n-:.GAT5V6FT ZTH6UI8.yOp@XCVbmJS):4+'$@o!`[qKgF6Zc\*G)l#@^Cr3"n$0auSJ]
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: a0 3d 6a 78 89 68 84 bc 24 81 35 0e be d1 3f 4c 76 70 06 e1 81 c6 cc 70 59 a6 21 10 6e 25 5f 5b 79 04 78 54 c9 c8 81 97 76 17 c0 7c 1c 81 59 58 67 d3 85 f9 96 ca a1 77 87 9e 37 76 b3 ba 1b 2b 90 8a 73 bd 7f ed 4b 59 76 e2 c1 b2 26 12 5e 3d be 52 2c 6a 38 23 f8 99 4a 9f 94 d1 66 3a 3f 4c 13 97 01 24 fc b6 e6 ae df 02 e0 b3 80 f8 f9 41 fb 4f 09 7a fd b7 be df f0 8a 57 8c ad 9c a4 4d 18 ca 08 c9 02 a6 8c 01 b8 c9 e2 d2 2a 30 58 21 a4 49 dd 10 08 6b df 71 a5 ce d8 5c e9 a3 04 59 62 2d ee f7 00 20 5b 18 90 10 96 ee 5a cc 00 72 23 94 14 ea bc cf b2 86 9a 46 06 04 72 cc 9a 45 1a ff 5b 08 2d 32 ba 0b ac c8 d7 92 78 ad 5e 4f 7c 9a 69 4a 40 31 7f 2d ed 13 47 54 4b 41 72 b0 a4 57 24 08 a1 2a 08 48 97 07 9f 0a cc cd 95 5f 72 08 2c 86 b4 52 ce de 2a 07 ee bd d8 23 49 Data Ascii: =jxh$5?LvppY!n%_[yxTv\|YXgw7v+sKYv&^=R,j8#Jf:?L$AOzWM0X!Ikq\Yb- [Zr#FrE[-2x^O\|iJ@1-GTKArW$H_r,R*#I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.16	50009	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:27 UTC	786	OUT	GET /v1/terms?id=terms HTTP/1.1 Host: display.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEeyx5cparoLdJ; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858
2025-01-10 16:49:28 UTC	581	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:28 GMT Transfer-Encoding: chunked Connection: close x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true x-server: WEB_6_7500 strict-transport-security: max-age=15552000; includeSubDomains set-cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Last-Modified: Fri, 10 Jan 2025 16:49:28 GMT CF-Cache-Status: MISS Expires: Fri, 10 Jan 2025 20:49:28 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8ffe291669afc45e-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:28 UTC	788	IN	Data Raw: 34 65 31 0d 0a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 65 72 6d 73 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 60 0a 09 09 09 09 09 09 3c 70 3e 54 65 72 6d 73 20 6f 66 20 70 75 72 63 68 61 73 65 3a 3c 2f 70 3e 0a 09 09 09 09 09 09 3c 75 6c 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 22 3e 0a 09 09 09 09 09 09 09 3c 6c 69 3e 42 79 20 70 6c 61 63 69 6e 67 20 61 6e 20 6f 72 64 65 72 2c 20 79 6f 75 20 61 63 6b 6e 6f 77 6c 65 64 67 65 20 74 68 61 74 20 79 6f 75 20 68 61 76 65 20 72 65 61 64 20 61 6e 64 20 61 63 63 65 70 74 20 6f 75 72 20 3c 61 20 68 72 65 66 3d 22 2f 74 65 72 6d 73 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 74 65 72 6d 73 20 61 6e 64 20 63 6f 6e 64 69 74 69 6f 6e 73 3c 2f 61 3e 20 61 6e 64 20 3c 61 Data Ascii: 4e1document.getElementById("terms").innerHTML = `<p>Terms of purchase:</p><ul class="small"><li>By placing an order, you acknowledge that you have read and accept our <a href="/terms" target="_blank">terms and conditions</a> and <a
2025-01-10 16:49:28 UTC	468	IN	Data Raw: 70 74 73 20 61 74 20 66 72 61 75 64 20 77 69 6c 6c 20 62 65 20 70 72 6f 73 65 63 75 74 65 64 2e 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 3c 6c 69 3e 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 73 75 62 6d 69 74 74 65 64 20 62 79 20 74 68 69 73 20 70 61 79 6d 65 6e 74 20 70 72 6f 63 65 73 73 20 69 73 20 68 61 6e 64 6c 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 73 74 72 61 69 6e 74 73 20 6f 66 20 6f 75 72 20 3c 61 20 68 72 65 66 3d 22 2f 70 72 69 76 61 63 79 2e 70 68 70 22 20 74 61 72 67 65 74 3d 22 5f 6e 65 77 22 3e 70 72 69 76 61 63 79 20 70 6f 6c 69 63 79 3c 2f 61 3e 2e 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 3c 6c 69 3e 42 75 79 47 6f 6f 64 73 20 69 73 20 6e 6f 74 20 61 20 70 61 79 6d 65 6e 74 20 70 72 6f 63 65 73 73 6f 72 20 6f 72 20 62 61 6e 6b 2e 20 57 Data Ascii: pts at fraud will be prosecuted.</li><li>Information submitted by this payment process is handled within the constraints of our <a href="/privacy.php" target="_new">privacy policy</a>.</li><li>BuyGoods is not a payment processor or bank. W
2025-01-10 16:49:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.16	50008	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:27 UTC	610	OUT	GET /secure/checkout/init HTTP/1.1 Host: buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858
2025-01-10 16:49:28 UTC	382	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-server: WEB_2 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ffe29167dcb0c74-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:28 UTC	38	IN	Data Raw: 32 30 0d 0a 7b 22 63 68 65 63 6b 6f 75 74 52 65 73 75 6c 74 22 3a 22 49 6e 76 61 6c 69 64 20 55 52 4c 22 7d 0d 0a Data Ascii: 20{"checkoutResult":"Invalid URL"}
2025-01-10 16:49:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.16	50014	172.66.40.141	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:28 UTC	1012	OUT	GET /vault/v1/formframe-checkout?a=6802&s=sessid20250110164829858&lang=en&t=1736527766561 HTTP/1.1 Host: pay.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuDqeA12C7yZiXvHMtnAKZaxhG15odmb2hbz9qRCse; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858
2025-01-10 16:49:28 UTC	476	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true vary: Accept-Encoding CF-Cache-Status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe2916d9208cee-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 31 37 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 62 75 73 69 6e 65 73 73 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e Data Ascii: 1777<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="Classification" content="business"> <meta name="Language" content="en
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 70 61 79 6d 65 6e 74 2d 64 65 74 61 69 6c 73 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 63 72 65 64 69 74 2d 63 61 72 64 22 3e 3c 2f 69 3e 20 43 61 72 64 20 44 65 74 61 69 6c 73 3c 2f 73 70 61 6e 3e 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 2f 69 6d 67 2f 76 69 73 61 2e 73 76 67 22 20 61 6c 74 3d 22 56 69 73 61 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 63 6c 61 73 73 3d 22 6d 65 2d 31 22 3e 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 2f 69 6d 67 2f 6d 61 73 74 65 72 63 61 72 64 2e 73 76 67 22 20 61 6c 74 3d 22 4d 61 73 74 65 72 63 61 72 64 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 63 6c 61 73 73 3d 22 Data Ascii: payment-details"><i class="fas fa-credit-card"></i> Card Details</span> <span> <img src="/img/visa.svg" alt="Visa" height="21" class="me-1"> <img src="/img/mastercard.svg" alt="Mastercard" height="21" class="
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 22 63 61 72 64 73 65 63 75 72 65 2e 68 61 6e 64 6c 65 4b 65 79 55 70 28 74 68 69 73 2c 74 68 69 73 2e 76 61 6c 75 65 2c 27 63 76 76 27 29 3b 22 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 78 6c 65 6e 67 74 68 3d 22 37 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 72 65 71 75 69 72 65 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 72 65 64 69 74 63 61 72 64 73 5f 6d 6f 6e 74 68 22 20 6e 61 6d 65 3d 22 63 72 65 64 69 74 63 61 72 64 73 5f 6d 6f 6e 74 68 22 20 76 61 6c 75 65 3d 22 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 Data Ascii: "cardsecure.handleKeyUp(this,this.value,'cvv');" maxlength="7" autocomplete="off" required> <input type="hidden" id="creditcards_month" name="creditcards_month" value=""> <input type="h
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 69 76 20 69 64 3d 22 70 61 79 6d 65 6e 74 5f 74 6f 6b 65 6e 22 20 63 6c 61 73 73 3d 22 76 61 6c 69 64 2d 66 65 65 62 61 63 6b 20 70 73 2d 33 20 64 2d 6e 6f 6e 65 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 66 6f 72 6d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6a 73 2f 76 31 2f 66 6f 72 6d 66 72 61 6d 65 2d 63 68 65 63 6b 6f 75 74 2e 6a 73 3f 76 3d 37 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f Data Ascii: iv id="payment_token" class="valid-feeback ps-3 d-none"></div></form><script type="text/javascript" src="/js/v1/formframe-checkout.js?v=7"></script> </div> <script>(function(){function c(){var b=a.contentDocument\|\|a.co
2025-01-10 16:49:28 UTC	539	IN	Data Raw: 63 6f 6e 3d 27 7b 22 72 61 79 49 64 22 3a 22 38 66 66 65 32 39 31 36 64 39 32 30 38 63 65 65 22 2c 22 73 65 72 76 65 72 54 69 6d 69 6e 67 22 3a 7b 22 6e 61 6d 65 22 3a 7b 22 63 66 45 78 74 50 72 69 22 3a 74 72 75 65 2c 22 63 66 4c 34 22 3a 74 72 75 65 2c 22 63 66 53 70 65 65 64 42 72 61 69 6e 22 3a 74 72 75 65 2c 22 63 66 43 61 63 68 65 53 74 61 74 75 73 22 3a 74 72 75 65 7d 7d 2c 22 76 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 2e 31 30 2e 35 22 2c 22 74 6f 6b 65 6e 22 3a 22 64 65 36 36 38 37 35 62 32 34 35 61 34 34 30 38 62 38 33 33 33 35 38 31 38 65 62 30 36 38 64 61 22 7d 27 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 Data Ascii: con='{"rayId":"8ffe2916d9208cee","serverTiming":{"name":{"cfExtPri":true,"cfL4":true,"cfSpeedBrain":true,"cfCacheStatus":true}},"version":"2024.10.5","token":"de66875b245a4408b83335818eb068da"}' crossorigin="anonymous"></script></body> <script type="
2025-01-10 16:49:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.16	50013	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:28 UTC	777	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858
2025-01-10 16:49:28 UTC	438	IN	HTTP/1.1 302 Found Date: Fri, 10 Jan 2025 16:49:28 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 8ffe2916de0f4265-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.16	50017	198.217.251.238	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:28 UTC	615	OUT	GET /cardinalcruise/v1/b109e0c6fd2a5b6b93b2/1.b109e0c6fd2a5b6b93b2.songbird.js HTTP/1.1 Host: includes.ccdc02.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://buygoods.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:28 UTC	543	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:28 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=15552000 Last-Modified: Tue, 01 Mar 2022 19:58:10 GMT ETag: W/"0f522ada62dd81:0" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding CF-Cache-Status: HIT Age: 10618069 Expires: Wed, 09 Jul 2025 16:49:28 GMT Server: cloudflare CF-RAY: 8ffe2917ab0f4233-EWR
2025-01-10 16:49:28 UTC	826	IN	Data Raw: 37 64 38 31 0d 0a 73 6f 6e 67 62 69 72 64 4c 6f 61 64 65 72 28 5b 31 5d 2c 5b 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 6e 28 36 29 2c 73 3d 6e 28 35 29 2c 6f 3d 6e 28 37 31 29 2c 61 3d 21 31 2c 75 3d 6e 28 38 38 29 2e 4a 4c 2c 63 3d 7b 7d 2c 68 3d 6e 28 34 36 29 2c 66 3d 7b 6f 75 74 70 75 74 51 75 65 75 65 64 4c 6f 67 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 65 61 63 68 28 63 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 6f 69 64 20 30 21 3d 3d 74 2e 67 65 74 4c 6f 67 51 75 65 75 65 26 26 28 63 5b 65 5d 3d 75 28 65 29 2c 69 2e 65 61 63 68 28 74 2e 67 65 74 4c 6f 67 51 75 65 75 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 63 5b 65 5d 5b 6e 2e 74 79 70 65 5d 28 6e 2e 6d 65 73 73 61 67 65 29 2c 74 2e 4c 6f 67 51 75 Data Ascii: 7d81songbirdLoader([1],[,function(t,e,n){var r,i=n(6),s=n(5),o=n(71),a=!1,u=n(88).JL,c={},h=n(46),f={outputQueuedLogs:function(){i.each(c,function(t,e){void 0!==t.getLogQueue&&(c[e]=u(e),i.each(t.getLogQueue(),function(n){c[e][n.type](n.message),t.LogQu
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 6f 67 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 3d 72 2e 61 70 70 65 6e 64 65 72 73 3b 69 66 28 69 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 72 6c 22 69 6e 20 65 26 26 28 74 3d 65 29 7d 29 2c 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 6c 65 76 65 6c 3c 35 65 33 29 7b 76 61 72 20 6e 3d 74 2e 62 61 74 63 68 53 69 7a 65 3b 74 2e 62 61 74 63 68 53 69 7a 65 3d 31 2c 75 2e 73 65 74 4f 70 74 69 6f 6e 73 28 7b 61 70 70 65 6e 64 65 72 73 3a 65 7d 29 2c 72 2e 69 6e 66 6f 28 22 46 6c 75 73 68 69 6e 67 20 6c 6f 67 73 22 29 2c 74 2e 62 61 74 63 68 53 69 7a 65 3d 6e 2c 75 2e 73 65 74 4f 70 74 69 6f 6e 73 28 7b 61 70 70 65 6e 64 65 72 73 3a 65 7d 29 7d 7d 2c 69 6e 69 74 69 61 6c 69 7a 65 4c 6f 67 67 65 72 3a 66 75 6e 63 74 69 6f Data Ascii: ogs:function(){var t,e=r.appenders;if(i.each(e,function(e){"url"in e&&(t=e)}),void 0!==t&&t.level<5e3){var n=t.batchSize;t.batchSize=1,u.setOptions({appenders:e}),r.info("Flushing logs"),t.batchSize=n,u.setOptions({appenders:e})}},initializeLogger:functio
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 72 2e 65 72 72 6f 72 28 22 53 61 6e 69 74 69 7a 65 20 4f 72 64 65 72 20 6f 62 6a 65 63 74 20 72 65 73 75 6c 74 65 64 20 69 6e 20 61 6e 20 65 72 72 6f 72 3a 20 22 2b 74 29 7d 72 65 74 75 72 6e 20 74 7d 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 6e 28 36 29 2c 73 3d 6e 28 39 34 29 2c 6f 3d 6e 28 31 29 2c 61 3d 6e 28 36 36 29 2c 75 3d 6e 28 36 37 29 2c 63 3d 6e 28 36 38 29 2c 68 3d 7b 7d 2c 66 3d 6e 28 37 29 2c 6c 3d 6e 28 36 39 29 2c 64 3d 7b 7d 3b 69 2e 6d 65 72 67 65 28 64 2c 6c 2c 73 29 3b 76 61 72 20 70 3d 7b 6d 65 72 67 65 50 61 79 6d 65 6e 74 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 67 2e 67 65 74 4d 65 72 63 68 61 6e 74 43 6f 6e 66 69 67 Data Ascii: r.error("Sanitize Order object resulted in an error: "+t)}return t}}};t.exports=l},,function(t,e,n){var r,i=n(6),s=n(94),o=n(1),a=n(66),u=n(67),c=n(68),h={},f=n(7),l=n(69),d={};i.merge(d,l,s);var p={mergePaymentConfig:function(t){var e=g.getMerchantConfig
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 28 74 29 7d 7d 29 7d 2c 6d 65 72 67 65 50 61 79 6d 65 6e 74 42 75 74 74 6f 6e 43 6f 6e 66 69 67 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 67 2e 67 65 74 50 61 79 6d 65 6e 74 43 6f 6e 66 69 67 28 74 29 2c 6e 3d 7b 7d 3b 69 66 28 74 29 72 65 74 75 72 6e 20 69 2e 6d 65 72 67 65 28 6e 2c 7b 62 75 74 74 6f 6e 3a 64 2e 62 75 74 74 6f 6e 7d 2c 65 29 2c 68 5b 74 5d 3d 6e 2c 6e 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 67 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 29 2c 69 3d 6e 28 31 29 2e 67 65 74 4c 6f 67 67 65 72 49 6e 73 74 61 6e 63 65 28 22 42 61 73 65 2e 45 76 65 6e 74 73 22 29 2c 73 3d 6e 28 37 29 2c 6f 3d 7b 5f 74 79 70 65 3a 22 69 6e 74 65 72 6e 61 6c 22 7d 2c 61 3d 7b 5f 74 79 70 65 3a 22 61 63 74 69 Data Ascii: (t)}})},mergePaymentButtonConfigs:function(t){var e=g.getPaymentConfig(t),n={};if(t)return i.merge(n,{button:d.button},e),h[t]=n,n}};t.exports=g},function(t,e,n){var r=n(6),i=n(1).getLoggerInstance("Base.Events"),s=n(7),o={_type:"internal"},a={_type:"acti
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 33 29 2c 63 3d 74 5b 65 5d 2c 68 3d 5b 5d 3b 69 66 28 21 63 26 26 21 6e 29 72 65 74 75 72 6e 20 6e 65 77 20 73 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 28 29 7d 29 3b 63 3f 63 2e 68 69 73 74 6f 72 69 63 3d 6e 3a 28 63 3d 74 5b 65 5d 3d 7b 7d 2c 63 2e 73 75 62 73 63 72 69 62 65 72 73 3d 5b 5d 2c 63 2e 68 69 73 74 6f 72 69 63 3d 6e 7c 7c 21 31 29 2c 69 2e 64 65 62 75 67 28 22 50 75 62 6c 69 73 68 69 6e 67 20 5b 22 2b 74 2e 5f 74 79 70 65 2b 22 5d 20 65 76 65 6e 74 20 5b 22 2b 65 2b 22 5d 20 61 73 20 22 2b 28 6e 3f 22 61 20 68 69 73 74 6f 72 69 63 22 3a 22 61 6e 20 61 76 65 72 61 67 65 22 29 2b 22 20 65 76 65 6e 74 20 77 69 74 Data Ascii: rray.prototype.slice.call(arguments,3),c=t[e],h=[];if(!c&&!n)return new s.Promise(function(t){t()});c?c.historic=n:(c=t[e]={},c.subscribers=[],c.historic=n\|\|!1),i.debug("Publishing ["+t._type+"] event ["+e+"] as "+(n?"a historic":"an average")+" event wit
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 70 75 62 6c 69 73 68 2c 61 2c 72 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 3a 72 2e 70 61 72 74 69 61 6c 28 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 2c 61 29 2c 5f 74 79 70 65 3a 22 61 63 74 69 76 65 22 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 68 2e 69 6e 74 65 72 6e 61 6c 2c 74 2e 65 78 70 6f 72 74 73 2e 70 61 73 73 69 76 65 3d 68 2e 70 61 73 73 69 76 65 2c 74 2e 65 78 70 6f 72 74 73 2e 61 63 74 69 76 65 3d 68 2e 61 63 74 69 76 65 7d 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 6c 6e 2e 44 61 74 65 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 2c 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 65 Data Ascii: publish,a,r,!0),removeEvent:r.partial(c.removeEvent,a),_type:"active"}};t.exports=h.internal,t.exports.passive=h.passive,t.exports.active=h.active},,function(t,e,n){(function(t,n){(function(){function r(){return ln.Date.now()}function i(t,e,n){switch(n.le
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 74 28 65 28 6e 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2d 31 2c 72 3d 74 2e 6c 65 6e 67 74 68 2c 69 3d 30 2c 73 3d 5b 5d 3b 2b 2b 6e 3c 72 3b 29 7b 76 61 72 20 6f 3d 74 5b 6e 5d 3b 6f 21 3d 3d 65 26 26 22 5f 5f 6c 6f 64 61 73 68 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 5f 22 21 3d 3d 6f 7c 7c 28 74 5b 6e 5d 3d 22 5f 5f 6c 6f 64 61 73 68 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 5f 22 2c 73 5b 69 2b 2b 5d 3d 6e 29 7d 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 53 28 74 29 7b 76 61 72 20 65 3d 2d 31 2c 6e 3d 41 72 72 61 79 28 74 2e 73 69 7a 65 29 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 2b 2b 65 5d 3d 74 7d 29 2c 6e 7d 66 75 6e 63 Data Ascii: eturn t(e(n))}}function b(t,e){for(var n=-1,r=t.length,i=0,s=[];++n<r;){var o=t[n];o!==e&&"__lodash_placeholder__"!==o\|\|(t[n]="__lodash_placeholder__",s[i++]=n)}return s}function S(t){var e=-1,n=Array(t.size);return t.forEach(function(t){n[++e]=t}),n}func
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 54 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 74 5b 65 5d 3b 46 6e 2e 63 61 6c 6c 28 74 2c 65 29 26 26 51 74 28 72 2c 6e 29 26 26 28 6e 21 3d 3d 44 65 7c 7c 65 20 69 6e 20 74 29 7c 7c 42 28 74 2c 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 69 66 28 51 74 28 74 5b 6e 5d 5b 30 5d 2c 65 29 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 26 26 64 74 28 65 2c 6d 65 28 65 29 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 26 26 64 74 28 65 2c 76 65 28 65 29 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 2c 65 2c 6e 29 7b 22 5f 5f 70 72 6f 74 6f 5f 5f 22 3d Data Ascii: T(t,e,n){var r=t[e];Fn.call(t,e)&&Qt(r,n)&&(n!==De\|\|e in t)\|\|B(t,e,n)}function I(t,e){for(var n=t.length;n--;)if(Qt(t[n][0],e))return n;return-1}function j(t,e){return t&&dt(e,me(e),t)}function _(t,e){return t&&dt(e,ve(e),t)}function B(t,e,n){"__proto__"=
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 6e 20 65 3d 65 28 74 29 2c 4f 72 28 74 29 3f 65 3a 63 28 65 2c 6e 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 29 74 3d 74 3d 3d 3d 44 65 3f 22 5b 6f 62 6a 65 63 74 20 55 6e 64 65 66 69 6e 65 64 5d 22 3a 22 5b 6f 62 6a 65 63 74 20 4e 75 6c 6c 5d 22 3b 65 6c 73 65 20 69 66 28 56 6e 26 26 56 6e 20 69 6e 20 4f 62 6a 65 63 74 28 74 29 29 7b 76 61 72 20 65 3d 46 6e 2e 63 61 6c 6c 28 74 2c 56 6e 29 2c 6e 3d 74 5b 56 6e 5d 3b 74 72 79 7b 74 5b 56 6e 5d 3d 44 65 3b 76 61 72 20 72 3d 21 30 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 69 3d 4f 6e 2e 63 61 6c 6c 28 74 29 3b 72 26 26 28 65 3f 74 5b 56 6e 5d 3d 6e 3a 64 65 6c 65 74 65 20 74 5b 56 6e 5d 29 2c 74 3d 69 7d 65 6c 73 65 20 74 3d 4f 6e 2e 63 61 6c 6c 28 74 29 3b 72 Data Ascii: n e=e(t),Or(t)?e:c(e,n(t))}function k(t){if(null==t)t=t===De?"[object Undefined]":"[object Null]";else if(Vn&&Vn in Object(t)){var e=Fn.call(t,Vn),n=t[Vn];try{t[Vn]=De;var r=!0}catch(t){}var i=On.call(t);r&&(e?t[Vn]=n:delete t[Vn]),t=i}else t=On.call(t);r
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 66 20 6e 26 26 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 29 26 26 28 75 3d 21 31 29 29 2c 69 2e 64 65 6c 65 74 65 28 74 29 2c 69 2e 64 65 6c 65 74 65 28 65 29 2c 65 3d 75 7d 7d 65 6c 73 65 20 65 3d 21 31 3b 65 6c 73 65 20 65 3d 21 31 7d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 71 28 74 29 7b 72 65 74 75 72 6e 20 73 65 28 74 29 26 26 22 5b 6f 62 6a 65 63 74 20 4d 61 70 5d 22 3d 3d 76 72 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 6e 3b 69 66 28 6e 75 6c 6c 3d 3d 74 29 72 65 74 75 72 6e 21 72 3b 66 6f 72 28 74 3d 4f 62 6a 65 63 74 28 74 29 3b 6e 2d 2d 3b 29 7b 76 Data Ascii: f n&&n instanceof n&&"function"==typeof r&&r instanceof r)&&(u=!1)),i.delete(t),i.delete(e),e=u}}else e=!1;else e=!1}}return e}function q(t){return se(t)&&"[object Map]"==vr(t)}function z(t,e){var n=e.length,r=n;if(null==t)return!r;for(t=Object(t);n--;){v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.16	50015	3.122.176.248	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:28 UTC	544	OUT	OPTIONS /graphql HTTP/1.1 Host: payments.braintree-api.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,braintree-version,content-type Origin: https://buygoods.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:28 UTC	501	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:28 GMT Transfer-Encoding: chunked Connection: close server: nginx access-control-allow-origin: https://buygoods.com access-control-max-age: 1800 access-control-allow-methods: GET,DELETE,OPTIONS,PATCH,POST,PUT access-control-allow-headers: authorization,braintree-version,content-type Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Frame-Options: DENY X-Content-Type-Options: nosniff paypal-debug-id: ca33b8b5dee84
2025-01-10 16:49:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.16	50022	3.233.158.25	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:28 UTC	899	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Afetch%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=00e378c4-ec06-48a9-a27d-7e569b44bfb3&batch_time=1736527766990 HTTP/1.1 Host: browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15652 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://buygoods.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:28 UTC	15652	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 30 30 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 30 30 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 32 61 37 39 36 37 37 32 2d 62 66 65 31 2d 34 34 66 65 2d 61 34 63 38 2d 62 63 34 62 61 35 62 65 32 32 38 63 22 7d 2c 22 64 61 74 65 22 3a 31 37 33 36 35 32 37 37 36 35 36 32 37 2c 22 73 65 72 76 69 63 65 22 3a 22 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":100,"session_replay_sample_rate":100},"discarded":false},"application":{"id":"2a796772-bfe1-44fe-a4c8-bc4ba5be228c"},"date":1736527765627,"service":"buygoods.com","source":"browse
2025-01-10 16:49:28 UTC	430	IN	HTTP/1.1 202 Accepted content-type: application/json content-length: 53 dd-request-id: 00e378c4-ec06-48a9-a27d-7e569b44bfb3 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Fri, 10 Jan 2025 16:49:28 GMT connection: close
2025-01-10 16:49:28 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 30 30 65 33 37 38 63 34 2d 65 63 30 36 2d 34 38 61 39 2d 61 32 37 64 2d 37 65 35 36 39 62 34 34 62 66 62 33 22 7d Data Ascii: {"request_id":"00e378c4-ec06-48a9-a27d-7e569b44bfb3"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.16	50023	3.233.158.25	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:28 UTC	899	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.35.0%2Capi%3Afetch%2Cenv%3Acheckout%2Cservice%3Abuygoods.com&dd-api-key=pub3a9917d7973cf90e0652b4e3d037fedd&dd-evp-origin-version=5.35.0&dd-evp-origin=browser&dd-request-id=394cee19-b750-4519-b924-96ec051dc8b3&batch_time=1736527766993 HTTP/1.1 Host: browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15234 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://buygoods.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://buygoods.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 16:49:28 UTC	15234	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 30 30 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 30 30 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 32 61 37 39 36 37 37 32 2d 62 66 65 31 2d 34 34 66 65 2d 61 34 63 38 2d 62 63 34 62 61 35 62 65 32 32 38 63 22 7d 2c 22 64 61 74 65 22 3a 31 37 33 36 35 32 37 37 36 33 37 38 36 2c 22 73 65 72 76 69 63 65 22 3a 22 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":100,"session_replay_sample_rate":100},"discarded":false},"application":{"id":"2a796772-bfe1-44fe-a4c8-bc4ba5be228c"},"date":1736527763786,"service":"buygoods.com","source":"browse
2025-01-10 16:49:28 UTC	430	IN	HTTP/1.1 202 Accepted content-type: application/json content-length: 53 dd-request-id: 394cee19-b750-4519-b924-96ec051dc8b3 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Fri, 10 Jan 2025 16:49:28 GMT connection: close
2025-01-10 16:49:28 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 33 39 34 63 65 65 31 39 2d 62 37 35 30 2d 34 35 31 39 2d 62 39 32 34 2d 39 36 65 63 30 35 31 64 63 38 62 33 22 7d Data Ascii: {"request_id":"394cee19-b750-4519-b924-96ec051dc8b3"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.16	50025	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:28 UTC	1516	OUT	GET /affiliates/go/conversion/iframe/bg?a=6802&t=1df5ed17281f7f57cd6afec32e271fa5&checkout=1&s=sessid20250110164829858 HTTP/1.1 Host: buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://buygoods.com/secure/checkout.html?sessid2=sessid20250110164829858&aff_id=1270&sid=2566&sid2=6988_sessid20250110164723474&account_id=6802&product_codename=prod9&redirect=aHR0cHM6Ly9uZXJ2ZWRlZmVuZC5jb20vdXBncmFkZS0x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEcmVX28dyzMA4; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; _dd_s=rum=1&id=4a68f3de-05b8-4dc3-92f1-e171ff820f1f&created=1736527766939&expire=1736528666940
2025-01-10 16:49:28 UTC	398	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-server: WEB_2 strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Server: cloudflare CF-RAY: 8ffe291a6bd74390-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.16	50024	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:28 UTC	796	OUT	GET /v1/terms?id=terms HTTP/1.1 Host: display.buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: spiaffid_6802=1270; spisubid_6802=2566%7C6988_sessid20250110164723474; __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhEeyx5cparoLdJ; spireferrer_6802=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout; spisessid2_6802=sessid20250110164829858; sessid2=sessid20250110164829858; spi_funnel_codename=; aff_id=1270; sid=2566%7C6988_sessid20250110164723474; referrer=8.46.123.189:nervedefend.com:buygoods.com%2Fsecure%2Fcheckout
2025-01-10 16:49:28 UTC	581	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:28 GMT Transfer-Encoding: chunked Connection: close x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true x-server: WEB_6_7500 strict-transport-security: max-age=15552000; includeSubDomains set-cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Last-Modified: Fri, 10 Jan 2025 16:49:28 GMT CF-Cache-Status: MISS Expires: Fri, 10 Jan 2025 20:49:28 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8ffe291aab180cb2-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 16:49:28 UTC	788	IN	Data Raw: 34 62 35 0d 0a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 65 72 6d 73 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 60 0a 09 09 09 09 09 09 3c 70 3e 54 65 72 6d 73 20 6f 66 20 70 75 72 63 68 61 73 65 3a 3c 2f 70 3e 0a 09 09 09 09 09 09 3c 75 6c 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 22 3e 0a 09 09 09 09 09 09 09 3c 6c 69 3e 42 79 20 70 6c 61 63 69 6e 67 20 61 6e 20 6f 72 64 65 72 2c 20 79 6f 75 20 61 63 6b 6e 6f 77 6c 65 64 67 65 20 74 68 61 74 20 79 6f 75 20 68 61 76 65 20 72 65 61 64 20 61 6e 64 20 61 63 63 65 70 74 20 6f 75 72 20 3c 61 20 68 72 65 66 3d 22 2f 74 65 72 6d 73 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 74 65 72 6d 73 20 61 6e 64 20 63 6f 6e 64 69 74 69 6f 6e 73 3c 2f 61 3e 20 61 6e 64 20 3c 61 Data Ascii: 4b5document.getElementById("terms").innerHTML = `<p>Terms of purchase:</p><ul class="small"><li>By placing an order, you acknowledge that you have read and accept our <a href="/terms" target="_blank">terms and conditions</a> and <a
2025-01-10 16:49:28 UTC	424	IN	Data Raw: 74 65 64 2e 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 3c 6c 69 3e 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 73 75 62 6d 69 74 74 65 64 20 62 79 20 74 68 69 73 20 70 61 79 6d 65 6e 74 20 70 72 6f 63 65 73 73 20 69 73 20 68 61 6e 64 6c 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 73 74 72 61 69 6e 74 73 20 6f 66 20 6f 75 72 20 3c 61 20 68 72 65 66 3d 22 2f 70 72 69 76 61 63 79 2e 70 68 70 22 20 74 61 72 67 65 74 3d 22 5f 6e 65 77 22 3e 70 72 69 76 61 63 79 20 70 6f 6c 69 63 79 3c 2f 61 3e 2e 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 3c 6c 69 3e 20 69 73 20 6e 6f 74 20 61 20 70 61 79 6d 65 6e 74 20 70 72 6f 63 65 73 73 6f 72 20 6f 72 20 62 61 6e 6b 2e 20 57 65 20 73 74 72 69 63 74 6c 79 20 6f 70 65 72 61 74 65 20 61 73 20 61 6e 20 6f 6e 6c 69 6e 65 20 72 65 74 61 Data Ascii: ted.</li><li>Information submitted by this payment process is handled within the constraints of our <a href="/privacy.php" target="_new">privacy policy</a>.</li><li> is not a payment processor or bank. We strictly operate as an online reta
2025-01-10 16:49:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.16	50026	172.66.40.234	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 16:49:28 UTC	396	OUT	GET / HTTP/1.1 Host: yomali.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=02DiuDQJEcNyeUjVzptTfY3gThbRJjaqEebNXvXSB78Sp
2025-01-10 16:49:28 UTC	1194	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 16:49:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type x-server: WEB_2 strict-transport-security: max-age=31536000; Last-Modified: Fri, 10 Jan 2025 16:49:28 GMT Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yoh6wlH%2BJwvosfFmvgy0g76fWeuc3btEwVZ%2BZEoMRUgJvorZQ2oiOEf7Ltop8Sm6IQHJPuX7dsOYPI2jem5Wfrc466NR080MkLArKq%2BFda4iuZmMtHBreQg2Zwep"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe291aad304393-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1709&min_rtt=1672&rtt_var=654&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2819&recv_bytes=974&delivery_rate=1746411&cwnd=206&unsent_bytes=0&cid=7d5c6baf1f8300d4&ts=193&x=0"
2025-01-10 16:49:28 UTC	175	IN	Data Raw: 35 37 34 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 21 2d 2d 20 54 69 74 6c 65 20 2d 2d 3e 0a 20 20 3c 74 69 74 6c 65 3e 53 65 6c 6c 20 4d 6f 72 65 20 4f 6e 6c 69 6e 65 20 20 7c 20 20 59 6f 6d 61 6c 69 20 67 72 6f 75 70 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 3c 21 2d 2d 20 4d 65 74 61 20 54 61 67 73 20 2d 2d 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 Data Ascii: 5743<!DOCTYPE html><html lang="en"><head> ... Title --> <title>Sell More Online \| Yomali group</title> ... Meta Tags --> <meta charset="utf-8"> <meta name="
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 0a 20 20 3c 21 2d 2d 20 46 61 76 69 63 6f 6e 20 2d 2d 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 79 6f 6d 61 6c 69 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 79 6f 6d 61 6c 69 5f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 0a 0a 20 20 3c 21 2d 2d 20 53 79 6c 65 73 68 65 65 74 73 20 Data Ascii: viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta http-equiv="x-ua-compatible" content="ie=edge"> ... Favicon --> <link rel="shortcut icon" href="https://cdn.yomali.com/images/yomali_favicon.ico"> ... Sylesheets
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 3c 21 2d 2d 20 4c 6f 67 6f 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 22 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 2d 62 72 61 6e 64 20 64 2d 66 6c 65 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 79 6f 6d 61 6c 69 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 69 6d 67 2f 6c 6f 67 6f 2f 79 6f 6d 61 6c 69 5f 6c 6f 67 6f 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 33 30 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 45 6e 64 20 4c 6f 67 6f 20 2d 2d 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 4e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ... Logo --> <a href="/" class="navbar-brand d-flex"> <img src="https://cdn.yomali.com/assets/img/logo/yomali_logo.png" height=30> </a> ... End Logo --> ... Navigation -->
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 22 20 68 72 65 66 3d 22 2f 70 61 72 74 6e 65 72 73 22 3e 50 61 72 74 6e 65 72 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 67 69 76 69 6e 67 2d 62 61 63 6b 22 3e 47 69 76 69 6e 67 20 42 61 63 6b 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f Data Ascii: " href="/partners">Partners</a> </li> <li class="dropdown-item "> <a class="nav-link" href="/giving-back">Giving Back</a> </li> </ul> </
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 70 61 79 6d 65 6e 74 73 22 3e 50 61 79 6d 65 6e 74 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 63 72 6d 22 3e 53 68 6f 70 70 69 6e 67 63 61 72 74 20 26 61 6d 70 3b 20 Data Ascii: <li class="dropdown-item "> <a class="nav-link" href="/payments">Payments</a> </li> <li class="dropdown-item "> <a class="nav-link" href="/crm">Shoppingcart &
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 62 74 6e 20 75 2d 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 20 67 2d 66 6f 6e 74 2d 73 69 7a 65 2d 31 33 20 74 65 78 74 2d 75 70 70 65 72 63 61 73 65 20 67 2d 70 79 2d 31 30 20 67 2d 70 78 2d 31 35 20 22 20 68 72 65 66 3d 22 2f 63 6f 6e 74 61 63 74 22 20 3e 43 6f 6e 74 61 63 74 20 75 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 6e 61 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 68 65 61 64 65 72 3e 0a 20 20 20 20 3c 21 2d 2d 20 45 6e 64 20 48 65 61 64 65 72 20 2d 2d 3e 0a 0a 20 20 20 20 0a 0a 0a 20 20 20 20 3c 21 2d 2d 20 42 6c 6f 67 20 4d 69 6e 69 6d 61 Data Ascii: <a class="btn u-btn-outline-primary g-font-size-13 text-uppercase g-py-10 g-px-15 " href="/contact" >Contact us</a> </div> </div> </nav> </div> </header> ... End Header --> ... Blog Minima
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 20 49 74 73 20 74 68 65 20 6b 65 79 20 74 6f 20 62 75 69 6c 64 69 6e 67 20 73 75 73 74 61 69 6e 61 62 6c 65 20 62 75 73 69 6e 65 73 73 65 73 20 74 68 61 74 20 77 65 20 61 72 65 20 70 72 6f 75 64 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 2e 3c 62 72 3e 3c 62 72 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 20 61 72 65 20 61 20 3c 62 3e 66 75 6c 6c 79 20 64 69 73 74 72 69 62 75 74 65 64 3c 2f 62 3e 20 63 6f 6d 70 61 6e 79 2e 20 20 45 6d 70 6c 6f 79 69 6e 67 20 35 32 30 20 70 72 6f 66 65 73 73 69 6f 6e 61 6c 73 20 61 63 72 6f 73 73 20 31 36 20 63 6f 75 6e 74 72 69 65 73 2c 20 6d 6f 73 74 20 6f 66 20 6f 75 72 20 70 65 6f 70 6c 65 20 77 6f 72 6b 20 66 72 6f 6d 20 68 6f 6d 65 2c 20 6f 72 20 77 68 65 72 65 76 65 72 20 74 68 65 79 20 61 72 65 20 6d Data Ascii: Its the key to building sustainable businesses that we are proud to work with.<br><br> We are a <b>fully distributed</b> company. Employing 520 professionals across 16 countries, most of our people work from home, or wherever they are m
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 33 20 63 6f 6c 2d 73 6d 2d 36 20 67 2d 6d 62 2d 32 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 2d 63 6f 75 6e 74 65 72 20 67 2d 63 6f 6c 6f 72 2d 67 72 61 79 2d 64 61 72 6b 2d 76 32 20 67 2d 66 6f 6e 74 2d 73 69 7a 65 2d 33 35 20 67 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2d 33 30 30 20 67 2d 6d 62 2d 37 22 3e 24 31 42 2b 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 20 63 6c 61 73 73 3d 22 68 36 20 67 2d 63 6f 6c 6f 72 2d 67 72 61 79 2d 64 61 72 6b 2d 76 35 22 3e 49 6d 70 61 63 74 3c 2f 68 34 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c Data Ascii: </div> <div class="col-lg-3 col-sm-6 g-mb-20"> <div class="js-counter g-color-gray-dark-v2 g-font-size-35 g-font-weight-300 g-mb-7">$1B+</div> <h4 class="h6 g-color-gray-dark-v5">Impact</h4> </div> <
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 6f 75 72 20 43 75 6c 74 75 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 72 74 69 63 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 45 6e 64 20 41 72 74 69 63 6c 65 20 2d 2d 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 45 6e 64 20 41 72 74 69 63 6c 65 73 20 2d 2d 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 53 69 64 65 62 61 72 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 34 20 22 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 55 73 65 66 75 6c 20 4c 69 6e 6b 73 20 2d 2d 3e 0a 20 Data Ascii: rn more about our Culture</a> </div> </article> ... End Article --> </div> ... End Articles --> ... Sidebar --> <div class="col-lg-4 "> ... Useful Links -->
2025-01-10 16:49:28 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 65 61 6b 70 6f 69 6e 74 22 3a 20 37 36 38 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 65 74 74 69 6e 67 73 22 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 6c 69 64 65 73 54 6f 53 68 6f 77 22 3a 20 34 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 65 61 6b 70 6f 69 6e 74 22 3a 20 35 37 36 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 65 74 74 69 6e 67 73 22 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 6c 69 64 65 73 54 6f 53 68 6f 77 22 3a Data Ascii: }, { "breakpoint": 768, "settings": { "slidesToShow": 4 } }, { "breakpoint": 576, "settings": { "slidesToShow":

Target ID:	0
Start time:	11:47:54
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	11:47:55
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1888,i,15600538889269617292,16567569674908108909,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:47:56
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.shinsengumiusa.com/mrloskie"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	11:48:12
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4160 --field-trial-handle=1888,i,15600538889269617292,16567569674908108909,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	11:48:12
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4152 --field-trial-handle=1888,i,15600538889269617292,16567569674908108909,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.shinsengumiusa.com/mrloskie

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Windows Analysis Report
https://www.shinsengumiusa.com/mrloskie