Edit tour

Windows Analysis Report
https://sxdcfvg.blob.core.windows.net/swfgm/slp.html

Overview

General Information

Sample URL:	https://sxdcfvg.blob.core.windows.net/swfgm/slp.html
Analysis ID:	1622939
Infos:

Detection

Phisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected Phisher

AI detected landing page (webpage, office document or email)

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6076 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1992 --field-trial-handle=1940,i,16882724255978475923,7103110700798514473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5508 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4312 --field-trial-handle=1940,i,16882724255978475923,7103110700798514473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6612 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sxdcfvg.blob.core.windows.net/swfgm/slp.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_198	JoeSecurity_Phisher_2	Yara detected Phisher	Joe Security

HTTP traffic detected: POST /vturb/check HTTP/1.1Host: api.vturb.com.brConnection: keep-aliveContent-Length: 185sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*Content-Type: application/json;charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://mindboostingtips.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mindboostingtips.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 24 Feb 2025 17:05:15 GMTContent-Type: text/plain; charset=utf-8Content-Length: 18Connection: closeServer: APISIX/3.8.0

Source: chromecache_208.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_155.2.dr	String found in binary or memory: https://buygoods.com/affiliates/go/conversion/iframe/bg?a=7753&t=99ea197081eaae3f99dedb2c45f8d967&s=
Source: chromecache_155.2.dr	String found in binary or memory: https://buygoods.com/secure/checkout.html?account_id=7753&product_codename=brain1&redirect=aHR0cHM6L
Source: chromecache_155.2.dr	String found in binary or memory: https://buygoods.com/secure/checkout.html?account_id=7753&product_codename=brain3&redirect=aHR0cHM6L
Source: chromecache_155.2.dr	String found in binary or memory: https://buygoods.com/secure/checkout.html?account_id=7753&product_codename=brain6&redirect=aHR0cHM6L
Source: chromecache_191.2.dr, chromecache_208.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_194.2.dr, chromecache_163.2.dr	String found in binary or memory: https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/2024/12/27/676eda6149ed7a000106b9b1.
Source: chromecache_194.2.dr, chromecache_163.2.dr	String found in binary or memory: https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/2025/01/11/678292add12d360001a40b53.
Source: chromecache_177.2.dr, chromecache_193.2.dr, chromecache_202.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_146.2.dr, chromecache_155.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_177.2.dr, chromecache_193.2.dr, chromecache_202.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_155.2.dr	String found in binary or memory: https://display.buygoods.com/v1/disclaimer?id=disclaimer&account_id=7753
Source: chromecache_130.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_130.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_155.2.dr	String found in binary or memory: https://go.maxweb.com/conversion/iframe/?a=10559&token=59069a23144c480686398d6bdd4d577b
Source: chromecache_194.2.dr, chromecache_163.2.dr	String found in binary or memory: https://images.converteai.net/$
Source: chromecache_155.2.dr	String found in binary or memory: https://images.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/players/676ed89a956c3f600a607753/
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/anti-spam
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/contact
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/css/bootstrap.min.css
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/css/normalize.css
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/css/style.css?v=1.12
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/disclaimer
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/1b_small.png
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/1b_small_md.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/1b_small_sm.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/3b_small.png
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/3b_small_md.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/3b_small_sm.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/6b_small.png
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/6b_small_md.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/6b_small_sm.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/badges/78-value.svg
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/checkout/review-1.jpg
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/checkout/review-1.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/checkout/review-2.jpg
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/checkout/review-2.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/checkout/review-3.jpg
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/checkout/review-3.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/logo.png
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/logo.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/money-back-bg-sm.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/money-back-bg-xs.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/money-back-bg.png
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/money-back-bg.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/thanks/sharp_memory.png
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/thanks/sharp_memory.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/thanks/worst_foods.png
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/imgs/thanks/worst_foods.webp
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/privacy
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/resources
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/returns
Source: chromecache_155.2.dr	String found in binary or memory: https://mindboostingtips.com/terms
Source: chromecache_198.2.dr	String found in binary or memory: https://mwebcommand.com/10559/1659/3/?subid=540447&subid2=458817970&subid3=
Source: chromecache_208.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_191.2.dr, chromecache_208.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_125.2.dr	String found in binary or memory: https://rejrixe.com/1CT3065rhh-2nIBGN2NvxZOtt1T0ZyYi7fMYUyEaNMLU5BWAzzN_kusmBRowzeEwOYbAB7d7QCfIBO9e
Source: chromecache_155.2.dr	String found in binary or memory: https://scripts.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/players/676ed89a956c3f600a607753
Source: chromecache_194.2.dr, chromecache_163.2.dr	String found in binary or memory: https://scripts.converteai.net/lib/js/smartplayer/$
Source: chromecache_191.2.dr, chromecache_208.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_191.2.dr, chromecache_208.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_191.2.dr, chromecache_208.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_146.2.dr	String found in binary or memory: https://track.familyshealth.org/cf/cv?ct=video_watched
Source: chromecache_155.2.dr	String found in binary or memory: https://tracking.buygoods.com/track/?a=7753&firstcookie=0
Source: chromecache_203.2.dr, chromecache_199.2.dr	String found in binary or memory: https://www.buygoods.com/images/buygoods_black.png);
Source: chromecache_208.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_191.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_208.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_191.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_155.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-0SK6XE8J3Q
Source: chromecache_191.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_191.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_191.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: classification engine

Classification label: mal60.phis.win@23/147@70/26

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1992 --field-trial-handle=1940,i,16882724255978475923,7103110700798514473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sxdcfvg.blob.core.windows.net/swfgm/slp.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4312 --field-trial-handle=1940,i,16882724255978475923,7103110700798514473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1992 --field-trial-handle=1940,i,16882724255978475923,7103110700798514473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4312 --field-trial-handle=1940,i,16882724255978475923,7103110700798514473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_174.2.dr, chromecache_178.2.dr

Binary or memory string: hGFs5

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sxdcfvg.blob.core.windows.net/swfgm/slp.html	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://mindboostingtips.com/imgs/checkout/review-2.jpg	0%	Avira URL Cloud	safe
https://mwebcommand.com/10559/1659/3/?subid=540447&subid2=458817970&subid3=	100%	Avira URL Cloud	malware
https://mindboostingtips.com/imgs/checkout/review-2.webp	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/money-back-bg-sm.webp	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/logo.png	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/1b_small.png	0%	Avira URL Cloud	safe
https://mindboostingtips.com/terms	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/3b_small_sm.webp	0%	Avira URL Cloud	safe
https://mindboostingtips.com/fonts/Konnect-Bold.woff2	0%	Avira URL Cloud	safe
https://mindboostingtips.com/anti-spam	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/favicon/site.webmanifest	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/3b_small_md.webp	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/favicon/apple-touch-icon.png	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/6b_small_md.webp	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/checkout/review-3.webp	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/money-back-bg.png	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/money-back-bg-xs.webp	0%	Avira URL Cloud	safe
https://rejrixe.com/1CT3065rhh-2nIBGN2NvxZOtt1T0ZyYi7fMYUyEaNMLU5BWAzzN_kusmBRowzeEwOYbAB7d7QCfIBO9eGNh3Zg~~	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/badges/78-value.svg	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/1b_small_md.webp	0%	Avira URL Cloud	safe
https://mindboostingtips.com/fonts/Konnect-Medium.woff2	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/checkout/review-1.webp	0%	Avira URL Cloud	safe
https://mindboostingtips.com/css/normalize.css	0%	Avira URL Cloud	safe
https://track.familyshealth.org/cf/cv?ct=video_watched	0%	Avira URL Cloud	safe
https://mindboostingtips.com/disclaimer	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/6b_small_sm.webp	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/3b_small.png	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/logo.webp	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/checkout/review-1.jpg	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/landing/volume-icon.svg	0%	Avira URL Cloud	safe
https://mindboostingtips.com/privacy	0%	Avira URL Cloud	safe
https://mindboostingtips.com/resources	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/thanks/worst_foods.png	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/thanks/sharp_memory.png	0%	Avira URL Cloud	safe
https://mindboostingtips.com/fonts/OpenSans-Regular.woff	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/1b_small_sm.webp	0%	Avira URL Cloud	safe
https://mindboostingtips.com/css/style.css?v=1.12	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/checkout/review-3.jpg	0%	Avira URL Cloud	safe
https://mindboostingtips.com/imgs/6b_small.png	0%	Avira URL Cloud	safe
https://mindboostingtips.com/contact	0%	Avira URL Cloud	safe
https://mindboostingtips.com/returns	0%	Avira URL Cloud	safe
https://mindboostingtips.com/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://mindboostingtips.com	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.253.35	true	false	high
a46.dscb.akamai.net	2.19.11.112	true	false	high
mindboostingtips.com	146.190.187.29	true	false	unknown
k8s-ingressa-apisixga-42b0c4171d-57817256.us-east-1.elb.amazonaws.com	3.220.253.108	true	false	high
a1049.dscv.akamai.net	2.19.11.117	true	false	high
buygoodslb.clickcrm.com	172.66.40.234	true	false	high
rejrixe.com	91.236.116.57	true	false	unknown
buygoods.com	172.66.40.234	true	false	high
vt-h-1.b-cdn.net	169.150.247.39	true	false	high
a1509.dscb.akamai.net	2.19.11.121	true	false	high
rum-static.pingdom.net	104.22.54.104	true	false	high
tracking.buygoods.com	172.66.40.141	true	false	high
scontent.xx.fbcdn.net	157.240.251.9	true	false	high
prod-dem-collector-elb-611025824.eu-west-1.elb.amazonaws.com	34.243.154.178	true	false	high
go.maxweb.com	172.66.40.143	true	false	high
www.google.com	142.250.181.228	true	false	high
mwebcommand.com	104.21.43.68	true	false	unknown
www.facebook.com	unknown	unknown	false	high
cdn.converteai.net	unknown	unknown	false	high
display.buygoods.com	unknown	unknown	false	high
www.buygoods.com	unknown	unknown	false	high
rum-collector-2.pingdom.net	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
images.converteai.net	unknown	unknown	false	high
scripts.converteai.net	unknown	unknown	false	high
api.vturb.com.br	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://display.buygoods.com/v1/disclaimer?id=disclaimer&account_id=7753	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_11.ts	false		high
https://mwebcommand.com/10559/1659/3/?subid=540447&subid2=458817970&subid3=	false	Avira URL Cloud: malware	unknown
https://api.vturb.com.br/vturb/check	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_7.ts	false		high
https://tracking.buygoods.com/track/?a=7753&firstcookie=0&tracking_redirect=&referrer=https%3A%2F%2Frejrixe.com%2F&sessid2=&product=brain1,brain3,brain6&vid1=&vid2=&vid3=&caller_url=https%3A%2F%2Fmindboostingtips.com%2F%3Faff_id%3D114767%26subid2%3D10559_sessid2025022417054973%26subid%3D1659	false		high
https://mindboostingtips.com/?aff_id=114767&subid2=10559_sessid2025022417054973&subid=1659	true		unknown
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_1.ts	false		high
https://connect.facebook.net/en_US/fbevents.js	false		high
https://connect.facebook.net/signals/config/973652597448915?v=2.9.184&r=stable&domain=mindboostingtips.com&hme=93c44828b638838a88daf3a14a90ff297f7fc4ade758f21de5500c9f17542765&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C194%2C191%2C192%2C34%2C144%2C15%2C50%2C198%2C197%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113	false		high
https://vt-h-1.b-cdn.net/x	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_19.ts	false		high
https://mindboostingtips.com/fonts/Konnect-Bold.woff2	false	Avira URL Cloud: safe	unknown
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_16.ts	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=958043822230367&ev=PageView&dl=https%3A%2F%2Fmindboostingtips.com&rl=https%3A%2F%2Frejrixe.com&if=false&ts=1740416712284&sw=1280&sh=1024&v=2.9.184&r=stable&ec=0&o=12316&fbp=fb.1.1740416712279.278076389737681334&pm=1&hrl=88c4ae&ler=other&cdl=API_unavailable&it=1740416710815&coo=false&cs_cc=1&cas=7363032473811755&rqm=FGET	false		high
https://connect.facebook.net/signals/config/958043822230367?v=2.9.184&r=stable&domain=mindboostingtips.com&hme=93c44828b638838a88daf3a14a90ff297f7fc4ade758f21de5500c9f17542765&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C194%2C191%2C192%2C34%2C144%2C15%2C50%2C198%2C197%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_4.ts	false		high
https://rejrixe.com/1CT3065rhh-2nIBGN2NvxZOtt1T0ZyYi7fMYUyEaNMLU5BWAzzN_kusmBRowzeEwOYbAB7d7QCfIBO9eGNh3Zg~~	false	Avira URL Cloud: safe	unknown
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_2.ts	false		high
https://mindboostingtips.com/imgs/favicon/site.webmanifest	false	Avira URL Cloud: safe	unknown
https://rum-static.pingdom.net/pa-63869521405b1d00110016b4.js	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_17.ts	false		high
https://mindboostingtips.com/imgs/favicon/apple-touch-icon.png	false	Avira URL Cloud: safe	unknown
https://scripts.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/players/676ed89a956c3f600a607753/player.js	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_5.ts	false		high
https://go.maxweb.com/conversion/iframe/?a=10559&token=59069a23144c480686398d6bdd4d577b	false		high
https://mindboostingtips.com/fonts/Konnect-Medium.woff2	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/css/normalize.css	false	Avira URL Cloud: safe	unknown
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_14.ts	false		high
https://mindboostingtips.com/imgs/landing/volume-icon.svg	false	Avira URL Cloud: safe	unknown
https://www.buygoods.com/images/buygoods_black.png	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_15.ts	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video_0.m3u8	false		high
https://mindboostingtips.com/imgs/logo.webp	false	Avira URL Cloud: safe	unknown
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video_2.m3u8	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_12.ts	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/main.m3u8	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_8.ts	false		high
https://mindboostingtips.com/fonts/OpenSans-Regular.woff	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/css/style.css?v=1.12	false	Avira URL Cloud: safe	unknown
https://rum-collector-2.pingdom.net/img/beacon.gif?id=63869521405b1d00110016b4&sAW=1280&sAH=984&bIW=1280&bIH=907&pD=24&dPR=1&or=landscape-primary&nT=0&rC=0&nS=0&cS=916&cE=1409&dLE=916&dLS=859&fS=858&hS=917&rE=-1&rS=-1&reS=1409&resS=1532&resE=1618&uEE=-1&uES=-1&dL=1548&dI=3223&dCLES=3873&dCLEE=3874&dC=7368&lES=7368&lEE=7369&s=nt&title=Brain%20Savior%20%7C%20LP&path=https%3A%2F%2Fmindboostingtips.com%2F&ref=https%3A%2F%2Frejrixe.com%2F&sId=apfnovfb&sST=1740416713&sIS=1&rV=0&v=1.4.1	false		high
https://scripts.converteai.net/lib/js/smartplayer/v1/smartplayer.min.js	false		high
https://mindboostingtips.com/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_13.ts	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/2024/12/27/676eda6149ed7a000106b9b1.png	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/360p/segment_0.ts	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_9.ts	false		high
https://buygoods.com/images/buygoods_black.png	false		high
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/676ed8258191e7e36f1fd4d7/video/720p/segment_3.ts	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_191.2.dr, chromecache_208.2.dr	false		high
https://mindboostingtips.com/imgs/checkout/review-2.jpg	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/logo.png	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/money-back-bg-sm.webp	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/checkout/review-2.webp	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/1b_small.png	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/anti-spam	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/3b_small_sm.webp	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com	chromecache_208.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_191.2.dr, chromecache_208.2.dr	false		high
https://mindboostingtips.com/terms	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/money-back-bg.png	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://scripts.converteai.net/lib/js/smartplayer/$	chromecache_194.2.dr, chromecache_163.2.dr	false		high
https://buygoods.com/secure/checkout.html?account_id=7753&product_codename=brain3&redirect=aHR0cHM6L	chromecache_155.2.dr	false		high
https://mindboostingtips.com/imgs/checkout/review-3.webp	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/badges/78-value.svg	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/money-back-bg-xs.webp	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/3b_small_md.webp	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/6b_small_md.webp	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/2025/01/11/678292add12d360001a40b53.	chromecache_194.2.dr, chromecache_163.2.dr	false		high
https://mindboostingtips.com/imgs/1b_small_md.webp	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/checkout/review-1.webp	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_191.2.dr, chromecache_208.2.dr	false		high
https://connect.facebook.net/	chromecache_177.2.dr, chromecache_193.2.dr, chromecache_202.2.dr	false		high
https://images.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/players/676ed89a956c3f600a607753/	chromecache_155.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_191.2.dr, chromecache_208.2.dr	false		high
https://mindboostingtips.com/imgs/3b_small.png	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/6b_small_sm.webp	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://buygoods.com/affiliates/go/conversion/iframe/bg?a=7753&t=99ea197081eaae3f99dedb2c45f8d967&s=	chromecache_155.2.dr	false		high
https://track.familyshealth.org/cf/cv?ct=video_watched	chromecache_146.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/disclaimer	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/2024/12/27/676eda6149ed7a000106b9b1.	chromecache_194.2.dr, chromecache_163.2.dr	false		high
https://mindboostingtips.com/imgs/checkout/review-1.jpg	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/resources	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/thanks/worst_foods.png	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/privacy	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/thanks/sharp_memory.png	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://buygoods.com/secure/checkout.html?account_id=7753&product_codename=brain1&redirect=aHR0cHM6L	chromecache_155.2.dr	false		high
https://mindboostingtips.com/imgs/6b_small.png	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/checkout/review-3.jpg	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/imgs/1b_small_sm.webp	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com/contact	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://mindboostingtips.com	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://www.buygoods.com/images/buygoods_black.png);	chromecache_203.2.dr, chromecache_199.2.dr	false		high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_130.2.dr	false		high
https://buygoods.com/secure/checkout.html?account_id=7753&product_codename=brain6&redirect=aHR0cHM6L	chromecache_155.2.dr	false		high
https://images.converteai.net/$	chromecache_194.2.dr, chromecache_163.2.dr	false		high
https://tracking.buygoods.com/track/?a=7753&firstcookie=0	chromecache_155.2.dr	false		high
https://getbootstrap.com/)	chromecache_130.2.dr	false		high
https://mindboostingtips.com/returns	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://scripts.converteai.net/dfe92173-5a98-4876-b33e-c1ccecd3aef1/players/676ed89a956c3f600a607753	chromecache_155.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
2.16.164.105	unknown	European Union	20940	AKAMAI-ASN1EU	false
3.220.253.108	k8s-ingressa-apisixga-42b0c4171d-57817256.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
169.150.247.38	unknown	United States	2711	SPIRITTEL-ASUS	false
169.150.247.39	vt-h-1.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
2.19.11.117	a1049.dscv.akamai.net	European Union	719	ELISA-ASHelsinkiFinlandEU	false
91.236.116.57	rejrixe.com	Sweden	42237	ICMESE	false
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false
2.19.11.112	a46.dscb.akamai.net	European Union	719	ELISA-ASHelsinkiFinlandEU	false
172.66.40.143	go.maxweb.com	United States	13335	CLOUDFLARENETUS	false
146.190.187.29	mindboostingtips.com	United States	702	UUNETUS	false
172.66.40.141	tracking.buygoods.com	United States	13335	CLOUDFLARENETUS	false
104.21.43.68	mwebcommand.com	United States	13335	CLOUDFLARENETUS	false
2.16.202.98	unknown	European Union	16625	AKAMAI-ASUS	false
34.250.94.237	unknown	United States	16509	AMAZON-02US	false
172.67.5.216	unknown	United States	13335	CLOUDFLARENETUS	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
34.243.154.178	prod-dem-collector-elb-611025824.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
2.19.11.121	a1509.dscb.akamai.net	European Union	719	ELISA-ASHelsinkiFinlandEU	false
172.66.40.234	buygoodslb.clickcrm.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
72.247.154.177	unknown	United States	20940	AKAMAI-ASN1EU	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false
104.22.54.104	rum-static.pingdom.net	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1622939
Start date and time:	2025-02-24 18:04:00 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sxdcfvg.blob.core.windows.net/swfgm/slp.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@23/147@70/26
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.74.195, 142.250.186.46, 64.233.184.84, 142.250.185.110, 216.58.206.78, 142.250.186.142, 57.150.87.129, 142.250.186.110, 172.217.16.200, 142.250.184.232, 172.217.16.142, 199.232.210.172, 2.23.77.188, 142.250.185.174, 142.250.185.206, 142.250.181.238, 216.58.206.35, 216.58.212.142, 199.232.214.172, 2.19.106.160, 20.12.23.50, 13.107.253.72, 23.1.237.91
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://sxdcfvg.blob.core.windows.net/swfgm/slp.html

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Feb 24 16:05:00 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9861242142324236
Encrypted:	false
SSDEEP:	48:80SdHWTny8pjHAidAKZdA19ehwiZUklqehqy+3:80uWrJpqpy
MD5:	2912D0B99D147A3B658061282B3F095B
SHA1:	43F31B6F8CDD5229756E222DE606B67B38A38AA9
SHA-256:	B23E3D6EBDD4947F7712414B1F9FBF2F5562DED7446B761D371E73556FD8A5C1
SHA-512:	9D9A937F87CA2FF20A3F268249BF027881F164A63AB251B8A50B070382340E4103BD7C43212339B5D16DC44305DB872132A0CA78041696D7339554F5676FE0CE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....}].<...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXZ......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............Qy.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_146.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=973652597448915&ev=PageView&noscript=1" equals www.facebook.com (Facebook)
Source: chromecache_155.2.dr	String found in binary or memory: <noscript><img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=958043822230367&ev=PageView&noscript=1" /></noscript> equals www.facebook.com (Facebook)
Source: chromecache_191.2.dr, chromecache_208.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},Fk:function(){e=qb()},Jd:function(){d()}}};var $b=xa(["data-gtm-yt-inspected-"]),HG=["www.youtube.com","www.youtube-nocookie.com"],IG,JG=!1; equals www.youtube.com (Youtube)
Source: chromecache_191.2.dr, chromecache_208.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=tD(a,c,e);S(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return S(122),!0;if(d&&f){for(var m=Bb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},wD=function(){var a=[],b=function(c){return eb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_191.2.dr, chromecache_208.2.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Ih:f,Gh:g,Hh:k,oi:m,ri:n,jf:p,Lb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var t=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){t&&t();d()};F(function(){for(var v=B.getElementsByTagName("script"),u=v.length,w=0;w<u;w++){var x=v[w].getAttribute("src");if(SG(x,"iframe_api")\|\|SG(x,"player_api"))return e}for(var y=B.getElementsByTagName("iframe"),A=y.length,C=0;C<A;C++)if(!JG&&QG(y[C],q.jf))return pc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_202.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(b){var c=typeof a.URL==="function"?a.URL:a.webkitURL;c=new c(b);c=c.hostname.endsWith(".facebook.com")&&c.pathname=="/signals/iwl.js";if(!c)throw new Error("Disallowed script URL");return b}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_202.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_202.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_191.2.dr, chromecache_208.2.dr	String found in binary or memory: var UF=function(a,b,c,d,e){var f=RC("fsl",c?"nv.mwt":"mwt",0),g;g=c?RC("fsl","nv.ids",[]):RC("fsl","ids",[]);if(!g.length)return!0;var k=WC(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);S(121);if(m==="https://www.facebook.com/tr/")return S(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!CB(k,EB(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: rejrixe.com
Source: global traffic	DNS traffic detected: DNS query: mwebcommand.com
Source: global traffic	DNS traffic detected: DNS query: mindboostingtips.com
Source: global traffic	DNS traffic detected: DNS query: images.converteai.net
Source: global traffic	DNS traffic detected: DNS query: display.buygoods.com
Source: global traffic	DNS traffic detected: DNS query: rum-static.pingdom.net
Source: global traffic	DNS traffic detected: DNS query: tracking.buygoods.com
Source: global traffic	DNS traffic detected: DNS query: scripts.converteai.net
Source: global traffic	DNS traffic detected: DNS query: go.maxweb.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: www.buygoods.com
Source: global traffic	DNS traffic detected: DNS query: buygoods.com
Source: global traffic	DNS traffic detected: DNS query: vt-h-1.b-cdn.net
Source: global traffic	DNS traffic detected: DNS query: api.vturb.com.br
Source: global traffic	DNS traffic detected: DNS query: cdn.converteai.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: rum-collector-2.pingdom.net

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 24, 2025 18:05:03.285402060 CET	192.168.2.5	1.1.1.1	0x2027	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:03.285516024 CET	192.168.2.5	1.1.1.1	0x8336	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:05.627512932 CET	192.168.2.5	1.1.1.1	0x650e	Standard query (0)	rejrixe.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:05.627911091 CET	192.168.2.5	1.1.1.1	0xf6ee	Standard query (0)	rejrixe.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:07.186919928 CET	192.168.2.5	1.1.1.1	0xcc3f	Standard query (0)	mwebcommand.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:07.187053919 CET	192.168.2.5	1.1.1.1	0x6ef	Standard query (0)	mwebcommand.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:07.992034912 CET	192.168.2.5	1.1.1.1	0xa25	Standard query (0)	mindboostingtips.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:07.992171049 CET	192.168.2.5	1.1.1.1	0x56f0	Standard query (0)	mindboostingtips.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:09.360848904 CET	192.168.2.5	1.1.1.1	0xf947	Standard query (0)	images.converteai.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:09.360992908 CET	192.168.2.5	1.1.1.1	0xb382	Standard query (0)	images.converteai.net	65	IN (0x0001)	false
Feb 24, 2025 18:05:09.636261940 CET	192.168.2.5	1.1.1.1	0x1e37	Standard query (0)	display.buygoods.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:09.636436939 CET	192.168.2.5	1.1.1.1	0xabae	Standard query (0)	display.buygoods.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:09.638016939 CET	192.168.2.5	1.1.1.1	0xa0ce	Standard query (0)	rum-static.pingdom.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:09.638149023 CET	192.168.2.5	1.1.1.1	0xbfba	Standard query (0)	rum-static.pingdom.net	65	IN (0x0001)	false
Feb 24, 2025 18:05:09.638628960 CET	192.168.2.5	1.1.1.1	0x8777	Standard query (0)	tracking.buygoods.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:09.638791084 CET	192.168.2.5	1.1.1.1	0xb85c	Standard query (0)	tracking.buygoods.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:09.640748978 CET	192.168.2.5	1.1.1.1	0xc197	Standard query (0)	scripts.converteai.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:09.640961885 CET	192.168.2.5	1.1.1.1	0xff76	Standard query (0)	scripts.converteai.net	65	IN (0x0001)	false
Feb 24, 2025 18:05:09.698827982 CET	192.168.2.5	1.1.1.1	0xfb9a	Standard query (0)	go.maxweb.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:09.698879957 CET	192.168.2.5	1.1.1.1	0x7e0a	Standard query (0)	go.maxweb.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:10.314373016 CET	192.168.2.5	1.1.1.1	0xead9	Standard query (0)	rum-static.pingdom.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:10.314501047 CET	192.168.2.5	1.1.1.1	0x2dff	Standard query (0)	rum-static.pingdom.net	65	IN (0x0001)	false
Feb 24, 2025 18:05:10.360673904 CET	192.168.2.5	1.1.1.1	0x2fa4	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:10.360826015 CET	192.168.2.5	1.1.1.1	0xed25	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Feb 24, 2025 18:05:10.361381054 CET	192.168.2.5	1.1.1.1	0xd0e0	Standard query (0)	www.buygoods.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:10.361504078 CET	192.168.2.5	1.1.1.1	0x746c	Standard query (0)	www.buygoods.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:10.376358986 CET	192.168.2.5	1.1.1.1	0x9f95	Standard query (0)	display.buygoods.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:10.376512051 CET	192.168.2.5	1.1.1.1	0xf80a	Standard query (0)	display.buygoods.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:10.389249086 CET	192.168.2.5	1.1.1.1	0xb579	Standard query (0)	mindboostingtips.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:10.389379978 CET	192.168.2.5	1.1.1.1	0xa101	Standard query (0)	mindboostingtips.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:10.403774023 CET	192.168.2.5	1.1.1.1	0x1944	Standard query (0)	tracking.buygoods.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:10.404891014 CET	192.168.2.5	1.1.1.1	0xac9	Standard query (0)	tracking.buygoods.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:10.542869091 CET	192.168.2.5	1.1.1.1	0x22eb	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:10.542967081 CET	192.168.2.5	1.1.1.1	0x9f94	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Feb 24, 2025 18:05:10.640815973 CET	192.168.2.5	1.1.1.1	0xdf17	Standard query (0)	buygoods.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:10.640952110 CET	192.168.2.5	1.1.1.1	0x41d3	Standard query (0)	buygoods.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:10.660959959 CET	192.168.2.5	1.1.1.1	0xaa1b	Standard query (0)	images.converteai.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:10.661097050 CET	192.168.2.5	1.1.1.1	0xd23	Standard query (0)	images.converteai.net	65	IN (0x0001)	false
Feb 24, 2025 18:05:10.976090908 CET	192.168.2.5	1.1.1.1	0xcee3	Standard query (0)	scripts.converteai.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:10.976207972 CET	192.168.2.5	1.1.1.1	0x4c71	Standard query (0)	scripts.converteai.net	65	IN (0x0001)	false
Feb 24, 2025 18:05:10.989675999 CET	192.168.2.5	1.1.1.1	0xbda	Standard query (0)	buygoods.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:10.989811897 CET	192.168.2.5	1.1.1.1	0xcbc0	Standard query (0)	buygoods.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:11.974446058 CET	192.168.2.5	1.1.1.1	0x62b2	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:11.974586964 CET	192.168.2.5	1.1.1.1	0xb45b	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Feb 24, 2025 18:05:11.976079941 CET	192.168.2.5	1.1.1.1	0x3606	Standard query (0)	buygoods.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:11.976206064 CET	192.168.2.5	1.1.1.1	0x8104	Standard query (0)	buygoods.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:12.695614100 CET	192.168.2.5	1.1.1.1	0x71d6	Standard query (0)	vt-h-1.b-cdn.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:12.695785046 CET	192.168.2.5	1.1.1.1	0x33f4	Standard query (0)	vt-h-1.b-cdn.net	65	IN (0x0001)	false
Feb 24, 2025 18:05:12.697946072 CET	192.168.2.5	1.1.1.1	0xe854	Standard query (0)	api.vturb.com.br	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:12.698087931 CET	192.168.2.5	1.1.1.1	0xedc2	Standard query (0)	api.vturb.com.br	65	IN (0x0001)	false
Feb 24, 2025 18:05:12.722052097 CET	192.168.2.5	1.1.1.1	0x6700	Standard query (0)	cdn.converteai.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:12.722162008 CET	192.168.2.5	1.1.1.1	0xb940	Standard query (0)	cdn.converteai.net	65	IN (0x0001)	false
Feb 24, 2025 18:05:13.246417046 CET	192.168.2.5	1.1.1.1	0xdeac	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:13.246721029 CET	192.168.2.5	1.1.1.1	0x482c	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:14.315484047 CET	192.168.2.5	1.1.1.1	0x4c14	Standard query (0)	cdn.converteai.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:14.315742970 CET	192.168.2.5	1.1.1.1	0x9566	Standard query (0)	cdn.converteai.net	65	IN (0x0001)	false
Feb 24, 2025 18:05:14.317390919 CET	192.168.2.5	1.1.1.1	0x54f6	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:14.317606926 CET	192.168.2.5	1.1.1.1	0xaa63	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Feb 24, 2025 18:05:14.530610085 CET	192.168.2.5	1.1.1.1	0x149f	Standard query (0)	rum-collector-2.pingdom.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:14.530973911 CET	192.168.2.5	1.1.1.1	0xd02b	Standard query (0)	rum-collector-2.pingdom.net	65	IN (0x0001)	false
Feb 24, 2025 18:05:14.695028067 CET	192.168.2.5	1.1.1.1	0xc8da	Standard query (0)	api.vturb.com.br	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:14.695305109 CET	192.168.2.5	1.1.1.1	0x5c53	Standard query (0)	api.vturb.com.br	65	IN (0x0001)	false
Feb 24, 2025 18:05:15.700891018 CET	192.168.2.5	1.1.1.1	0xf50a	Standard query (0)	rum-collector-2.pingdom.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:05:15.701037884 CET	192.168.2.5	1.1.1.1	0x9be5	Standard query (0)	rum-collector-2.pingdom.net	65	IN (0x0001)	false
Feb 24, 2025 18:06:13.682957888 CET	192.168.2.5	1.1.1.1	0xbf2d	Standard query (0)	vt-h-1.b-cdn.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:06:13.683095932 CET	192.168.2.5	1.1.1.1	0x639a	Standard query (0)	vt-h-1.b-cdn.net	65	IN (0x0001)	false
Feb 24, 2025 18:06:15.661494970 CET	192.168.2.5	1.1.1.1	0x3d8e	Standard query (0)	cdn.converteai.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:06:15.662041903 CET	192.168.2.5	1.1.1.1	0x5d88	Standard query (0)	cdn.converteai.net	65	IN (0x0001)	false
Feb 24, 2025 18:06:17.950026035 CET	192.168.2.5	1.1.1.1	0x2526	Standard query (0)	cdn.converteai.net	A (IP address)	IN (0x0001)	false
Feb 24, 2025 18:06:17.950156927 CET	192.168.2.5	1.1.1.1	0x2043	Standard query (0)	cdn.converteai.net	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:06 UTC	777	OUT	GET /1CT3065rhh-2nIBGN2NvxZOtt1T0ZyYi7fMYUyEaNMLU5BWAzzN_kusmBRowzeEwOYbAB7d7QCfIBO9eGNh3Zg~~ HTTP/1.1 Host: rejrixe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://sxdcfvg.blob.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:07 UTC	347	IN	HTTP/1.1 200 OK date: Mon, 24 Feb 2025 17:05:06 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked server: nginx/1.12.2 vary: Accept-Encoding set-cookie: uid1315=458817970-20250224120506-fcfe51b3c9469aeda3dc7edd3cccb5e5-; domain=; expires=Mon, 24-Feb-2025 18:05:06 GMT; path=/; SameSite=None; Secure connection: close
2025-02-24 17:05:07 UTC	149	IN	Data Raw: 38 41 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 77 65 62 63 6f 6d 6d 61 6e 64 2e 63 6f 6d 2f 31 30 35 35 39 2f 31 36 35 39 2f 33 2f 3f 73 75 62 69 64 3d 35 34 30 34 34 37 26 73 75 62 69 64 32 3d 34 35 38 38 31 37 39 37 30 26 73 75 62 69 64 33 3d 22 3c 2f 73 63 72 69 70 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 8A<script type="text/javascript">window.location.href="https://mwebcommand.com/10559/1659/3/?subid=540447&subid2=458817970&subid3="</script>0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:07 UTC	726	OUT	GET /10559/1659/3/?subid=540447&subid2=458817970&subid3= HTTP/1.1 Host: mwebcommand.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://rejrixe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:07 UTC	888	IN	HTTP/1.1 302 Found Date: Mon, 24 Feb 2025 17:05:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: max-age=3600 cache-control: private pragma: no-cache location: https://mindboostingtips.com/?aff_id=114767&subid2=10559_sessid2025022417054973&subid=1659 expires: Mon, 24 Feb 2025 18:05:07 GMT access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type x-server: WEB_6 strict-transport-security: max-age=31536000; cf-cache-status: DYNAMIC Set-Cookie: __cflb=02DiuDvnJbjKdBkxKLVBqBrQP8wYzWkbUM2Wm9itrKkNx; SameSite=Lax; path=/; expires=Tue, 25-Feb-25 16:05:07 GMT; HttpOnly Server: cloudflare CF-RAY: 917109e77c1d4398-EWR
2025-02-24 17:05:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:08 UTC	741	OUT	GET /?aff_id=114767&subid2=10559_sessid2025022417054973&subid=1659 HTTP/1.1 Host: mindboostingtips.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rejrixe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:08 UTC	1201	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:08 GMT Server: Apache/2.4.58 (Ubuntu) Cache-Control: no-cache, private, max-age=172800 Set-Cookie: XSRF-TOKEN=eyJpdiI6IlVnbkhBRlI4QnJXeVJZdWpSU1JsZXc9PSIsInZhbHVlIjoiRFR2ZjIxVmZLN2tuTm9SdFpTa0hUalk2KzJCcHNINW81b3lHaXFNMzBEMFV1bmlaSE5DS0lBN1FXT2xYSzdIdG1tN2VHR0Jqa0tXTnFFTVRxS3prRHZ2aDluVlpPenRaM09Sdlcyclp1MmQwS1JTV2tUaVlVWjZadlFYbEZyMjciLCJtYWMiOiI2MmEwY2RhZWNlYTliY2QzZTE4MWVlMDQxNGUwY2Y5NGExYWRkZGQ5NGJiY2Y3YzE5NTlmODU3NDdkMjVkYjU5In0%3D; expires=Mon, 24-Feb-2025 19:05:08 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: brain_savior_session=eyJpdiI6Ik4vWXRIeWlvbExhUHJCUm1aQ3J1Q3c9PSIsInZhbHVlIjoiSnZ2aVJRTDh4MWd2UlRMRWorRXRHMmRxYzljQ0gzV1JIR05xdzc5eW5SakdSUUFRMjlPUUtsdFJOUDRaTHEyZXZaU05kOWlIbEtlZWdzZmZYY1I5dDh1K1VhOURCSXFZaGxGRzRpT08rdEZITjhqVUdRM0tISDU1ak1lK0xFSW8iLCJtYWMiOiI5MDdmNTdmMDExOTc3MzFiZGIyYmFjYjcwZTc4Yjc1YzdkNWY2MThiYjkzOTUzNzI3M2EyNGIzMTc3NjdjZTdiIn0%3D; expires=Mon, 24-Feb-2025 19:05:08 GMT; Max-Age=7200; path=/; httponly; samesite=lax Expires: Wed, 26 Feb 2025 17:05:08 GMT Vary: Accept-Encoding X-Robots-Tag: noindex, nofollow Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-02-24 17:05:08 UTC	6991	IN	Data Raw: 38 33 39 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 Data Ascii: 839b<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"/> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no"/> <meta name="csrf-token"
2025-02-24 17:05:08 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 2f 70 69 63 74 75 72 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 69 63 65 20 6d 62 2d 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 24 36 39 3c 2f 68 32 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 33 3e 50 65 72 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 2d 62 6c 6f 63 6b 22 3e 42 6f 74 74 6c 65 3c 2f 73 70 61 6e 3e 3c 2f 68 33 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 2f 73 65 63 75 72 65 2f 63 68 65 63 6b 6f 75 74 2e 68 74 6d 6c 3f 61 63 Data Ascii: </picture> </div> <div class="price mb-4"> <h2>$69</h2> <h3>Per <span class="d-block">Bottle</span></h3> </div> <a href="https://buygoods.com/secure/checkout.html?ac
2025-02-24 17:05:08 UTC	10322	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 68 35 20 63 6c 61 73 73 3d 22 70 72 69 63 65 2d 62 61 63 6b 20 74 65 78 74 2d 75 70 70 65 72 22 3e 33 30 2d 64 61 79 20 53 75 70 70 6c 79 3c 2f 68 35 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6c 61 6e 2d 69 6d 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 69 63 74 75 72 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 6f 75 72 63 65 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 6d 69 6e 64 62 6f 6f 73 74 69 6e 67 74 69 70 73 2e 63 6f 6d 2f 69 6d 67 73 2f 31 62 5f 73 6d 61 6c 6c 5f 6d 64 2e 77 65 62 70 22 20 6d 65 64 69 61 3d 22 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 35 30 70 78 29 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 77 65 62 70 Data Ascii: <h5 class="price-back text-upper">30-day Supply</h5> <div class="plan-img"> <picture> <source srcset="https://mindboostingtips.com/imgs/1b_small_md.webp" media="(min-width: 450px)" type="image/webp
2025-02-24 17:05:08 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-02-24 17:05:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:09 UTC	1321	OUT	GET /css/normalize.css HTTP/1.1 Host: mindboostingtips.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mindboostingtips.com/?aff_id=114767&subid2=10559_sessid2025022417054973&subid=1659 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlVnbkhBRlI4QnJXeVJZdWpSU1JsZXc9PSIsInZhbHVlIjoiRFR2ZjIxVmZLN2tuTm9SdFpTa0hUalk2KzJCcHNINW81b3lHaXFNMzBEMFV1bmlaSE5DS0lBN1FXT2xYSzdIdG1tN2VHR0Jqa0tXTnFFTVRxS3prRHZ2aDluVlpPenRaM09Sdlcyclp1MmQwS1JTV2tUaVlVWjZadlFYbEZyMjciLCJtYWMiOiI2MmEwY2RhZWNlYTliY2QzZTE4MWVlMDQxNGUwY2Y5NGExYWRkZGQ5NGJiY2Y3YzE5NTlmODU3NDdkMjVkYjU5In0%3D; brain_savior_session=eyJpdiI6Ik4vWXRIeWlvbExhUHJCUm1aQ3J1Q3c9PSIsInZhbHVlIjoiSnZ2aVJRTDh4MWd2UlRMRWorRXRHMmRxYzljQ0gzV1JIR05xdzc5eW5SakdSUUFRMjlPUUtsdFJOUDRaTHEyZXZaU05kOWlIbEtlZWdzZmZYY1I5dDh1K1VhOURCSXFZaGxGRzRpT08rdEZITjhqVUdRM0tISDU1ak1lK0xFSW8iLCJtYWMiOiI5MDdmNTdmMDExOTc3MzFiZGIyYmFjYjcwZTc4Yjc1YzdkNWY2MThiYjkzOTUzNzI3M2EyNGIzMTc3NjdjZTdiIn0%3D
2025-02-24 17:05:09 UTC	377	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:09 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Wed, 05 Apr 2023 06:42:44 GMT ETag: "17fa-5f891196be100" Accept-Ranges: bytes Content-Length: 6138 Cache-Control: max-age=2592000 Expires: Wed, 26 Mar 2025 17:05:09 GMT Vary: Accept-Encoding X-Robots-Tag: noindex, nofollow Connection: close Content-Type: text/css
2025-02-24 17:05:09 UTC	6138	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 0a 2f 2a 20 44 6f 63 75 6d 65 6e 74 0a 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 31 2e 20 43 6f 72 72 65 63 74 20 74 68 65 20 6c 69 6e 65 20 68 65 69 67 68 74 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0a 20 2a 20 32 2e 20 50 72 65 76 65 6e 74 20 61 64 6a 75 73 74 6d 65 6e 74 73 20 6f 66 20 66 6f 6e Data Ascii: /! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css //* Document ========================================================================== //* * 1. Correct the line height in all browsers. * 2. Prevent adjustments of fon

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:09 UTC	1325	OUT	GET /css/bootstrap.min.css HTTP/1.1 Host: mindboostingtips.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mindboostingtips.com/?aff_id=114767&subid2=10559_sessid2025022417054973&subid=1659 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlVnbkhBRlI4QnJXeVJZdWpSU1JsZXc9PSIsInZhbHVlIjoiRFR2ZjIxVmZLN2tuTm9SdFpTa0hUalk2KzJCcHNINW81b3lHaXFNMzBEMFV1bmlaSE5DS0lBN1FXT2xYSzdIdG1tN2VHR0Jqa0tXTnFFTVRxS3prRHZ2aDluVlpPenRaM09Sdlcyclp1MmQwS1JTV2tUaVlVWjZadlFYbEZyMjciLCJtYWMiOiI2MmEwY2RhZWNlYTliY2QzZTE4MWVlMDQxNGUwY2Y5NGExYWRkZGQ5NGJiY2Y3YzE5NTlmODU3NDdkMjVkYjU5In0%3D; brain_savior_session=eyJpdiI6Ik4vWXRIeWlvbExhUHJCUm1aQ3J1Q3c9PSIsInZhbHVlIjoiSnZ2aVJRTDh4MWd2UlRMRWorRXRHMmRxYzljQ0gzV1JIR05xdzc5eW5SakdSUUFRMjlPUUtsdFJOUDRaTHEyZXZaU05kOWlIbEtlZWdzZmZYY1I5dDh1K1VhOURCSXFZaGxGRzRpT08rdEZITjhqVUdRM0tISDU1ak1lK0xFSW8iLCJtYWMiOiI5MDdmNTdmMDExOTc3MzFiZGIyYmFjYjcwZTc4Yjc1YzdkNWY2MThiYjkzOTUzNzI3M2EyNGIzMTc3NjdjZTdiIn0%3D
2025-02-24 17:05:09 UTC	380	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:09 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Wed, 05 Apr 2023 06:42:44 GMT ETag: "260c5-5f891196be100" Accept-Ranges: bytes Content-Length: 155845 Cache-Control: max-age=2592000 Expires: Wed, 26 Mar 2025 17:05:09 GMT Vary: Accept-Encoding X-Robots-Tag: noindex, nofollow Connection: close Content-Type: text/css
2025-02-24 17:05:09 UTC	7812	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d Data Ascii: @charset "UTF-8";/! Bootstrap v5.0.2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d6efd;-
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 29 7d 2e 63 6f 6c 7b 66 6c 65 78 3a 31 20 30 20 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 61 75 74 6f 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 31 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 32 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 Data Ascii: )}.col{flex:1 0 0%}.row-cols-auto>{flex:0 0 auto;width:auto}.row-cols-1>{flex:0 0 auto;width:100%}.row-cols-2>{flex:0 0 auto;width:50%}.row-cols-3>{flex:0 0 auto;width:33.3333333333%}.row-cols-4>{flex:0 0 auto;width:25%}.row-cols-5>{flex:0 0 auto;wi
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 32 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e Data Ascii: th:83.33333333%}.col-xl-11{flex:0 0 auto;width:91.66666667%}.col-xl-12{flex:0 0 auto;width:100%}.offset-xl-0{margin-left:0}.offset-xl-1{margin-left:8.33333333%}.offset-xl-2{margin-left:16.66666667%}.offset-xl-3{margin-left:25%}.offset-xl-4{margin-left:33.
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 65 7d 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 68 6f 76 65 72 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 5b 72 65 61 64 6f 6e 6c 79 5d 29 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 65 30 65 33 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 2e 33 37 35 72 65 6d 20 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 3a 2d 2e 33 37 35 72 65 6d 20 2d 2e 37 35 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 65 6e 64 3a 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 2e 37 35 72 65 6d 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b Data Ascii: e}}.form-control:hover:not(:disabled):not([readonly])::file-selector-button{background-color:#dde0e3}.form-control::-webkit-file-upload-button{padding:.375rem .75rem;margin:-.375rem -.75rem;-webkit-margin-end:.75rem;margin-inline-end:.75rem;color:#212529;
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 66 6f 72 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 6f 7a 2d 72 61 6e 67 65 2d 74 68 75 6d 62 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 66 6f 72 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 6f 7a 2d 72 61 6e 67 65 2d 74 68 75 6d 62 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 36 64 34 66 65 7d 2e 66 6f 72 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 6f 7a 2d 72 61 6e 67 65 2d 74 72 61 63 6b 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 2e 35 72 65 6d 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 Data Ascii: @media (prefers-reduced-motion:reduce){.form-range::-moz-range-thumb{-moz-transition:none;transition:none}}.form-range::-moz-range-thumb:active{background-color:#b6d4fe}.form-range::-moz-range-track{width:100%;height:.5rem;color:transparent;cursor:pointer
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 69 6e 76 61 6c 69 64 2c 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2e 69 73 2d 69 6e 76 61 6c 69 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 2e 37 35 72 65 6d 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 74 6f 70 20 63 61 6c 63 28 2e 33 37 35 65 6d 20 2b 20 2e 31 38 37 35 72 65 6d 29 20 72 69 67 68 74 20 63 61 6c 63 28 2e 33 37 35 65 6d 20 2b 20 2e 31 38 37 35 72 65 6d 29 7d 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 2e 69 73 2d 69 6e 76 61 6c 69 64 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 3a 69 6e 76 61 6c 69 64 7b 62 6f 72 64 Data Ascii: .was-validated textarea.form-control:invalid,textarea.form-control.is-invalid{padding-right:calc(1.5em + .75rem);background-position:top calc(.375em + .1875rem) right calc(.375em + .1875rem)}.form-select.is-invalid,.was-validated .form-select:invalid{bord
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 66 61 66 62 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 35 72 65 6d 20 72 67 62 61 28 32 31 31 2c 32 31 32 2c 32 31 33 2c 2e 35 29 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 61 63 74 69 76 65 2b 2e 62 74 6e 2d 6c 69 67 68 74 2c 2e 62 74 6e 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2b 2e 62 74 6e 2d 6c 69 67 68 74 2c 2e 62 74 6e 2d 6c 69 67 68 74 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 6c 69 67 68 74 3a 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 6c 69 67 68 74 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 39 66 61 66 62 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 39 66 61 66 62 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 61 63 74 69 76 65 2b 2e 62 Data Ascii: fafb;box-shadow:0 0 0 .25rem rgba(211,212,213,.5)}.btn-check:active+.btn-light,.btn-check:checked+.btn-light,.btn-light.active,.btn-light:active,.show>.btn-light.dropdown-toggle{color:#000;background-color:#f9fafb;border-color:#f9fafb}.btn-check:active+.b
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 62 74 6e 2d 67 72 6f 75 70 2d 6c 67 3e 2e 62 74 6e 2c 2e 62 74 6e 2d 6c 67 7b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 7d 2e 62 74 6e 2d 67 72 6f 75 70 2d 73 6d 3e 2e 62 74 6e 2c 2e 62 74 6e 2d 73 6d 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 20 2e 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 2e 66 61 64 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 6c 69 6e 65 61 72 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 Data Ascii: olor:#6c757d}.btn-group-lg>.btn,.btn-lg{padding:.5rem 1rem;font-size:1.25rem;border-radius:.3rem}.btn-group-sm>.btn,.btn-sm{padding:.25rem .5rem;font-size:.875rem;border-radius:.2rem}.fade{transition:opacity .15s linear}@media (prefers-reduced-motion:redu
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 32 35 72 65 6d 7d 2e 6e 61 76 2d 74 61 62 73 20 2e 6e 61 76 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 6e 61 76 2d 74 61 62 73 20 2e 6e 61 76 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 20 23 65 39 65 63 65 66 20 23 64 65 65 32 65 36 3b 69 73 6f 6c 61 74 69 6f 6e 3a 69 73 6f 6c 61 74 65 7d 2e 6e 61 76 2d 74 61 62 73 20 2e 6e 61 76 2d 6c 69 6e 6b 2e 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 6e 61 76 2d 74 61 62 73 20 2e 6e 61 76 2d 69 74 65 6d 2e 73 68 6f 77 20 2e 6e 61 76 2d 6c 69 6e 6b 2c 2e 6e 61 76 2d 74 61 62 73 20 Data Ascii: 25rem}.nav-tabs .nav-link:focus,.nav-tabs .nav-link:hover{border-color:#e9ecef #e9ecef #dee2e6;isolation:isolate}.nav-tabs .nav-link.disabled{color:#6c757d;background-color:transparent;border-color:transparent}.nav-tabs .nav-item.show .nav-link,.nav-tabs
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 35 29 7d 2e 63 61 72 64 2d 68 65 61 64 65 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 63 61 6c 63 28 2e 32 35 72 65 6d 20 2d 20 31 70 78 29 20 63 61 6c 63 28 2e 32 35 72 65 6d 20 2d 20 31 70 78 29 20 30 20 30 7d 2e 63 61 72 64 2d 66 6f 6f 74 65 72 7b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 31 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 33 29 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 35 29 7d 2e 63 61 72 64 2d 66 6f 6f 74 65 72 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 Data Ascii: ;border-bottom:1px solid rgba(0,0,0,.125)}.card-header:first-child{border-radius:calc(.25rem - 1px) calc(.25rem - 1px) 0 0}.card-footer{padding:.5rem 1rem;background-color:rgba(0,0,0,.03);border-top:1px solid rgba(0,0,0,.125)}.card-footer:last-child{borde

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:09 UTC	1324	OUT	GET /css/style.css?v=1.12 HTTP/1.1 Host: mindboostingtips.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mindboostingtips.com/?aff_id=114767&subid2=10559_sessid2025022417054973&subid=1659 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlVnbkhBRlI4QnJXeVJZdWpSU1JsZXc9PSIsInZhbHVlIjoiRFR2ZjIxVmZLN2tuTm9SdFpTa0hUalk2KzJCcHNINW81b3lHaXFNMzBEMFV1bmlaSE5DS0lBN1FXT2xYSzdIdG1tN2VHR0Jqa0tXTnFFTVRxS3prRHZ2aDluVlpPenRaM09Sdlcyclp1MmQwS1JTV2tUaVlVWjZadlFYbEZyMjciLCJtYWMiOiI2MmEwY2RhZWNlYTliY2QzZTE4MWVlMDQxNGUwY2Y5NGExYWRkZGQ5NGJiY2Y3YzE5NTlmODU3NDdkMjVkYjU5In0%3D; brain_savior_session=eyJpdiI6Ik4vWXRIeWlvbExhUHJCUm1aQ3J1Q3c9PSIsInZhbHVlIjoiSnZ2aVJRTDh4MWd2UlRMRWorRXRHMmRxYzljQ0gzV1JIR05xdzc5eW5SakdSUUFRMjlPUUtsdFJOUDRaTHEyZXZaU05kOWlIbEtlZWdzZmZYY1I5dDh1K1VhOURCSXFZaGxGRzRpT08rdEZITjhqVUdRM0tISDU1ak1lK0xFSW8iLCJtYWMiOiI5MDdmNTdmMDExOTc3MzFiZGIyYmFjYjcwZTc4Yjc1YzdkNWY2MThiYjkzOTUzNzI3M2EyNGIzMTc3NjdjZTdiIn0%3D
2025-02-24 17:05:09 UTC	380	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:09 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Thu, 09 Jan 2025 13:45:45 GMT ETag: "1e6b9-62b4631f2ddc7" Accept-Ranges: bytes Content-Length: 124601 Cache-Control: max-age=2592000 Expires: Wed, 26 Mar 2025 17:05:09 GMT Vary: Accept-Encoding X-Robots-Tag: noindex, nofollow Connection: close Content-Type: text/css
2025-02-24 17:05:09 UTC	7812	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 4f 70 65 6e 53 61 6e 73 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 0a 7d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 Data Ascii: @font-face { font-family: 'Open Sans'; font-style: normal; font-weight: 400; font-stretch: 100%; font-display: swap; src: url('../fonts/OpenSans-Regular.woff') format('woff');}@font-face { font-family: 'Open Sans'; font-s
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 73 2d 73 74 65 70 70 65 72 2d 62 75 6c 6c 65 74 2d 68 61 6c 66 29 3b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 3b 0a 7d 0a 0a 2e 73 74 65 70 70 65 72 5f 5f 73 74 65 70 3a 6c 61 73 74 2d 63 68 69 6c 64 20 2e 73 74 65 70 70 65 72 5f 5f 62 75 74 74 6f 6e 3a 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6e 6f 74 69 63 65 5f 62 6f 78 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 35 46 37 46 41 3b 0a 20 20 20 20 62 Data Ascii: s-stepper-bullet-half); left: 50%; -webkit-transform: translate(0, -50%); transform: translate(0, -50%); z-index: -1;}.stepper__step:last-child .stepper__button::after { display: none;}.notice_box { background: #F5F7FA; b
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2e 34 72 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6d 61 69 6e 29 3b 0a 7d 0a 2e 75 70 73 65 6c 6c 2d 70 72 69 63 65 2e 66 69 6e 61 6c 2d 70 72 69 63 65 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 2e 32 72 65 6d 20 30 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 35 70 78 29 20 7b 0a 20 20 20 20 2e 6c 69 6d 69 74 65 64 5f 74 69 6d 65 5f Data Ascii: size: 18px; margin-top: .4rem; color: var(--color-main);}.upsell-price.final-price { margin: 0.2rem 0; text-align: right; font-weight: 700; font-size: 21px;}@media (min-width: 768px) and (max-width: 915px) { .limited_time_
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 65 3a 20 32 34 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 33 70 78 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 34 30 70 78 20 36 35 70 78 20 36 35 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 37 39 62 64 37 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 35 70 78 29 20 7b 0a 20 20 20 20 2e 72 65 66 75 73 65 5f 6f 66 66 65 72 20 61 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 34 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d Data Ascii: e: 24px; line-height: 33px; text-decoration: underline; padding: 40px 65px 65px; color: #179bd7; display: block;}@media (min-width: 768px) and (max-width: 915px) { .refuse_offer a { padding: 40px 30px; }}@media (m
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 31 34 70 78 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 2e 6d 61 69 6e 2d 76 69 64 65 6f 20 2e 62 67 2d 76 69 64 65 6f 20 2e 76 6f 6c 75 6d 65 2d 6d 75 74 65 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 32 35 35 2c 20 39 36 2c 20 35 2c 20 30 2e 36 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 Data Ascii: 14px; }}.main-video .bg-video .volume-mute { position: absolute; top: 50%; left: 50%; -webkit-transform: translate(-50%, -50%); transform: translate(-50%, -50%); background: rgba(255, 96, 5, 0.6); -webkit-backdrop-filter
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 70 78 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 2e 73 74 61 74 65 6d 65 6e 74 20 2e 62 6f 78 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 39 63 38 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 34 70 78 20 37 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 35 30 70 78 20 30 20 32 30 70 78 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 20 20 20 20 2e 73 74 61 74 65 6d 65 6e 74 20 2e 62 6f 78 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 33 32 70 78 Data Ascii: px; }}.statement .box { background: #ffffff; border: 1px solid #ccc9c8; border-radius: 4px; padding: 14px 7px; margin: 50px 0 20px;}@media (max-width: 767px) { .statement .box { padding: 15px; margin: 32px
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 74 6f 70 3a 20 2d 34 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 35 70 78 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 37 35 70 78 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 20 20 20 20 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 20 69 6d 67 20 7b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 2d 38 30 70 78 3b 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 Data Ascii: relative; top: -40px; margin-right: 35px; max-width: 275px;}@media (max-width: 767px) { .testimonial img { position: absolute; margin-right: 0; top: -80px; left: 50%; -webkit-transform: translateX
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 36 34 25 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 35 70 78 29 20 7b 0a 20 20 20 20 2e 6f 72 64 65 72 20 2e 6f 72 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 65 5f 6f 72 64 65 72 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 35 35 25 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 2e 6f 72 64 65 72 20 2e 6f 72 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 65 5f 6f 72 64 65 72 20 2e 6f 72 64 65 72 5f 66 6f 72 6d 20 2e 61 6c 65 72 74 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 6f 72 64 65 72 20 2e 6f 72 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 Data Ascii: { width: 64%;}@media (min-width: 768px) and (max-width: 915px) { .order .order-content .secure_order { width: 55%; }}.order .order-content .secure_order .order_form .alert { text-align: center;}.order .order-content .secur
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 64 65 72 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 20 69 6e 70 75 74 3a 6e 6f 74 28 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 29 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 0a 2e 6f 72 64 65 72 20 2e 6f 72 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 65 5f 6f 72 64 65 72 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 20 73 65 6c 65 63 74 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 34 36 43 37 41 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 2e 6f 72 64 65 72 20 2e 6f 72 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 65 5f 6f 72 64 65 72 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 20 69 6e 70 75 74 3a 6e Data Ascii: der .form-group input:not(input[type="checkbox"]):-ms-input-placeholder,.order .order-content .secure_order .form-group select:-ms-input-placeholder { color: #646C7A; font-weight: normal;}.order .order-content .secure_order .form-group input:n
2025-02-24 17:05:09 UTC	8000	IN	Data Raw: 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 32 70 78 20 30 70 78 20 72 67 62 61 28 31 37 34 2c 20 31 36 39 2c 20 31 36 38 2c 20 30 2e 31 29 3b 0a 7d 0a 0a 2e 6f 72 64 65 72 20 2e 6f 72 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 65 5f 6f 72 64 65 72 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 63 68 65 63 6b 62 6f 78 20 2e 63 68 65 63 6b 5f 63 6f 6e 74 61 69 6e 65 72 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 68 65 63 6b 6d 61 72 6b 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6d 61 69 6e 29 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6d 61 69 6e 29 3b 0a 7d 0a 0a 2e 6f 72 64 65 72 20 2e 6f 72 64 65 72 2d 63 6f 6e 74 65 6e Data Ascii: box-shadow: 0px 2px 0px rgba(174, 169, 168, 0.1);}.order .order-content .secure_order .form-group.checkbox .check_container input:checked ~ .checkmark { background: var(--color-main); border: 1px solid var(--color-main);}.order .order-conten

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:09 UTC	1320	OUT	GET /fonts/Konnect-Bold.woff2 HTTP/1.1 Host: mindboostingtips.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mindboostingtips.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://mindboostingtips.com/css/style.css?v=1.12 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlVnbkhBRlI4QnJXeVJZdWpSU1JsZXc9PSIsInZhbHVlIjoiRFR2ZjIxVmZLN2tuTm9SdFpTa0hUalk2KzJCcHNINW81b3lHaXFNMzBEMFV1bmlaSE5DS0lBN1FXT2xYSzdIdG1tN2VHR0Jqa0tXTnFFTVRxS3prRHZ2aDluVlpPenRaM09Sdlcyclp1MmQwS1JTV2tUaVlVWjZadlFYbEZyMjciLCJtYWMiOiI2MmEwY2RhZWNlYTliY2QzZTE4MWVlMDQxNGUwY2Y5NGExYWRkZGQ5NGJiY2Y3YzE5NTlmODU3NDdkMjVkYjU5In0%3D; brain_savior_session=eyJpdiI6Ik4vWXRIeWlvbExhUHJCUm1aQ3J1Q3c9PSIsInZhbHVlIjoiSnZ2aVJRTDh4MWd2UlRMRWorRXRHMmRxYzljQ0gzV1JIR05xdzc5eW5SakdSUUFRMjlPUUtsdFJOUDRaTHEyZXZaU05kOWlIbEtlZWdzZmZYY1I5dDh1K1VhOURCSXFZaGxGRzRpT08rdEZITjhqVUdRM0tISDU1ak1lK0xFSW8iLCJtYWMiOiI5MDdmNTdmMDExOTc3MzFiZGIyYmFjYjcwZTc4Yjc1YzdkNWY2MThiYjkzOTUzNzI3M2EyNGIzMTc3NjdjZTdiIn0%3D; showoffers=1
2025-02-24 17:05:09 UTC	358	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:09 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Wed, 05 Apr 2023 06:42:47 GMT ETag: "8814-5f8911999a7c0" Accept-Ranges: bytes Content-Length: 34836 Cache-Control: max-age=31536000 Expires: Tue, 24 Feb 2026 17:05:09 GMT X-Robots-Tag: noindex, nofollow Connection: close Content-Type: font/woff2
2025-02-24 17:05:09 UTC	7834	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 88 14 00 0f 00 00 00 01 cc 10 00 00 87 b0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 32 1b 82 a3 2a 1c 9b 44 06 60 00 88 7e 11 08 0a 83 f3 78 82 f9 1e 0b 8a 1e 00 01 36 02 24 03 94 38 04 20 05 8f 36 07 a8 66 5b 8d 88 91 0a 32 c7 38 da 5c 43 50 cd b2 15 c1 36 42 80 67 f1 97 ba b2 06 3b 19 17 98 73 e0 97 5a e9 bc 25 e5 d9 45 90 2b c6 b6 8c 66 d8 38 00 66 f1 09 30 fb ff ff ff ff ff ff 97 27 3f c4 df bc bb 34 ef 92 36 29 34 2d e5 53 cb 4f 06 fe a6 63 38 64 88 22 06 80 72 38 ef 73 80 50 38 2d 02 45 5f 22 a7 01 0d 2b 4a 9e 12 ab 55 81 86 10 8b c6 79 1a a1 1d b6 f2 58 a8 09 99 47 14 14 26 53 e7 09 f2 8c 4d 09 ac 05 53 c7 dc a8 32 ce 45 74 16 dc 75 3d 55 6c 6e dd 24 4c 69 c1 bb 65 Data Ascii: wOF2?FFTM2*D`~x6$8 6f[28\CP6Bg;sZ%E+f8f0'?46)4-SOc8d"r8sP8-E_"+JUyXG&SMS2Etu=Uln$Lie
2025-02-24 17:05:10 UTC	8000	IN	Data Raw: 88 9c 02 3a d5 9a 6a d2 ba e4 1a a0 80 1e 79 c3 20 7a ae 16 0f 0f 2f 5e cd 35 39 de 76 1c 2f bb b6 a6 c8 90 ea a6 ab 5e 7a ed 52 6b 72 9d 2c 89 24 ea ac e3 70 91 b5 d5 b5 cf fe f4 34 de d1 1d 05 d5 82 6e 1c a2 f1 e8 26 20 9a 88 6e 0a ba a9 88 a6 a1 9b be ba e0 e1 55 58 87 f0 c2 87 6e a6 41 cd 42 37 7b 47 be 98 58 34 3a ba e0 da 75 c4 d1 35 d7 08 8d f6 bf f1 4a ad c9 71 c1 c4 49 74 3c 6f 2b f1 a2 ba ed a9 a7 ad c9 f5 bf 49 54 5b 93 eb 82 93 28 b8 26 d7 0b 27 c1 6d 38 63 7e 81 7c 31 1a 1d 5d 73 ed 12 ed 88 49 24 b1 8e 8a b3 82 ea fe 08 03 17 07 17 0b 1b 67 ec 54 87 ce 08 d5 ff 20 dc 0b 50 cd 35 39 05 d7 97 b9 3d b8 83 62 6f d6 85 58 a9 15 11 f6 d1 af bd 4d 99 9f 78 19 5e 88 95 d9 9a 8f fe 0b fc ad 06 01 1c 7c f2 c8 27 9f 7c 1c 2c 6c 2c ec 86 13 e5 88 ff 55 Data Ascii: :jy z/^59v/^zRkr,$p4n& nUXnAB7{GX4:u5JqIt<o+IT[(&'m8c~\|1]sI$gT P59=boXMx^\|'\|,l,U
2025-02-24 17:05:10 UTC	8000	IN	Data Raw: 23 29 0b 2b d7 15 45 a9 d0 49 fb 50 cc cb 31 86 c8 1c c2 30 82 fe 7d ce bd e7 58 d8 23 6d d7 f4 41 9b 0c 82 7e a6 5c c5 a4 71 a2 64 93 ca 4c c7 2e 61 bf 08 4b b8 ad c9 1c 74 e7 e6 0b 4a 1a 73 38 96 01 2a 12 30 c0 20 91 9b 80 e6 a7 c8 2c 1c f5 91 55 7b 16 31 00 46 70 5d b8 25 33 bf 51 41 ed 88 8f 1d 6f 43 33 3f 92 74 90 6c 03 a4 48 ac 97 82 72 95 c1 c9 53 16 b6 0a 9d 78 16 3f 85 c5 da 8e 3f f0 9b e6 a3 6b 2e 45 ad cd c6 76 55 e3 9a 3c 5d 53 55 87 78 65 90 51 5e 3a 31 6f b2 f3 62 3c ee 3c 2c 8e 42 18 0c ee e2 30 8b f0 52 57 42 b8 e4 68 f6 3f 93 ad 39 44 c7 d7 3f 8e 3e 46 b0 48 d6 6d ee 54 8c 66 70 39 1c 8e b1 d7 76 c5 77 79 6f e3 82 8a e9 ef da f3 45 76 8e 74 49 52 ab 5d 32 80 be 09 d3 73 61 08 1f 89 7b ce d5 c1 e0 e8 d7 9c e9 1b 48 e9 89 b4 b3 b5 67 ff e7 Data Ascii: #)+EIP10}X#mA~\qdL.aKtJs8*0 ,U{1Fp]%3QAoC3?tlHrSx??k.EvU<]SUxeQ^:1ob<<,B0RWBh?9D?>FHmTfp9vwyoEvtIR]2sa{Hg
2025-02-24 17:05:10 UTC	8000	IN	Data Raw: ea 4e 3b 2c e9 b0 48 dd 27 0f 57 fb fa 1c 69 88 6c 88 ba fc 7b 27 bf 95 f7 0e 76 29 33 2a 33 b2 a5 35 23 22 33 62 a2 38 c2 8e ea ec 49 23 da d1 ac 8b 2c 0e b6 e7 71 72 c2 4f dc cf 3f dc 79 f8 c1 a7 fe 9e be ee 4e 09 22 7a b2 2c 4a c3 ff 8d 8a 3f f6 e4 1e 29 0a bd 5f c5 95 81 8d f7 88 20 62 ac a9 19 24 ef e3 a8 df 95 e2 89 7f 7f 4d bd bb 9f 44 29 3b 88 c1 61 b6 9e 45 2c f6 d9 3d 83 c4 11 5a 76 e3 12 a2 ac e5 50 f3 da 16 de dc 16 e9 1d 40 9f 09 67 1b aa 8e eb e3 4b 6d de 58 34 2c aa b8 e7 79 89 9a cd ed d2 09 8b ee 2d d4 6c 52 a4 07 1e ce 68 e8 d3 0f da e8 16 a0 cc 7d 2c 09 a7 d4 77 a5 c8 da 3a bd 82 11 69 ce 94 0e 49 e8 40 8c 90 5f 47 ea bc 74 e4 81 f2 e4 13 ad aa dd 15 f6 95 cd 2e ad 05 c8 00 5e 01 c9 7e 7d 10 e7 6d 64 25 36 0e 77 dd e1 bd 9b fe b4 af b9 Data Ascii: N;,H'Wil{'v)3*35#"3b8I#,qrO?yN"z,J?)_ b$MD);aE,=ZvP@gKmX4,y-lRh},w:iI@_Gt.^~}md%6w
2025-02-24 17:05:10 UTC	3002	IN	Data Raw: 14 9a 8e 01 ea 9a 80 b2 d0 a6 10 e9 3b 25 23 35 90 83 56 dd e3 89 24 80 97 da 39 61 0b 56 cc a0 32 b5 aa cf b3 1b 76 a5 cf ae 7a 6a 4b fe 70 47 94 d3 07 18 8e 50 06 0a 01 cf c4 09 fd 4d bf 24 41 66 c0 75 5b aa 58 2d 15 4b 0f f8 3f 42 09 64 09 d2 48 98 80 23 40 d3 28 49 20 69 90 15 00 00 2f 6d 90 57 c2 29 9f 33 7b fc ad 91 f9 b8 12 f1 52 a8 7f a9 c8 ec 7d ec 5c e9 4f 1b 0e f1 7c 97 b9 bb d2 3c 10 68 e1 c7 d5 6d c6 3f 0d 52 01 be da ca 63 55 70 89 e3 86 e9 f0 fb 95 86 0f 55 fa 6d 24 b5 db f3 54 da 36 c9 1c 3e 01 76 c8 cd 3d 70 0c 33 27 8f 98 15 1e 35 61 e6 47 06 3d 1a 20 1c f0 23 67 e8 87 26 7a 0b f5 8b b8 3f 03 ff 1d 84 ca 07 fd b3 11 fe 7b 08 94 14 c3 6f ea 92 e8 e3 a0 ef aa c3 bf 87 06 d5 22 37 97 00 b8 a7 e5 8e c4 25 4a 36 5b 05 ff 30 70 e8 23 74 9a fc Data Ascii: ;%#5V$9aV2vzjKpGPM$Afu[X-K?BdH#@(I i/mW)3{R}\O\|<hm?RcUpUm$T6>v=p3'5aG= #g&z?{o"7%J6[0p#t

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:10 UTC	668	OUT	GET /dfe92173-5a98-4876-b33e-c1ccecd3aef1/players/676ed89a956c3f600a607753/thumbnail.jpg HTTP/1.1 Host: images.converteai.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mindboostingtips.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:10 UTC	566	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 760 Last-Modified: Wed, 15 Jan 2025 20:30:07 GMT ETag: "d40e62c10558bb5e42b2c50e3957efc9" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes X-Amz-Cf-Pop: DUS51-P2 X-Amz-Cf-Id: -gRGmQD_vvBdBCwiMU5etIV6Ys2pAsuf-8wXrZNC9XrYz9q5tzdgMg== Date: Mon, 24 Feb 2025 17:05:10 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" Connection: close Server-Timing: ak_p; desc="1740416709902_1551568377_3090451141_34649_531_89_189_-";dur=1
2025-02-24 17:05:10 UTC	760	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 24 00 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222$@"}!1AQa"q2

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:10 UTC	556	OUT	GET /pa-63869521405b1d00110016b4.js HTTP/1.1 Host: rum-static.pingdom.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mindboostingtips.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:10 UTC	434	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:10 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Fri, 14 Oct 2022 06:22:28 GMT vary: Accept-Encoding etag: W/"63490024-1852" expires: Mon, 24 Feb 2025 17:07:47 GMT Cache-Control: max-age=86400 access-control-allow-origin: * CF-Cache-Status: HIT Age: 143 Server: cloudflare CF-RAY: 917109f6ccb5f5f6-EWR
2025-02-24 17:05:10 UTC	935	IN	Data Raw: 31 38 35 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 22 3d 22 2b 28 65 3f 74 5b 6e 5d 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 5b 6e 5d 29 29 7d 29 29 2e 6a 6f 69 6e 28 22 26 22 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 65 29 7b 76 61 72 20 6e 2c 6f 2c 72 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 28 74 2e 74 72 69 6d 28 29 2e 73 70 6c 69 74 28 22 26 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 3d 74 2e 69 6e 64 65 78 Data Ascii: 185f!function(){"use strict";function t(t,e){return Object.keys(t).map((function(n){return n+"="+(e?t[n]:encodeURIComponent(t[n]))})).join("&")}function e(t,e){var n,o,r={};return t&&"string"==typeof t?(t.trim().split("&").forEach((function(t){n=t.index
2025-02-24 17:05:10 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 72 2b 22 3f 22 2b 74 28 65 29 7d 28 63 29 29 2c 2d 31 21 3d 3d 65 2e 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 29 29 7b 76 61 72 20 64 3d 65 2e 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 56 65 72 73 69 6f 6e 2e 6d 61 74 63 68 28 2f 4d 53 49 45 20 28 5c 64 2b 29 2f 29 3b 64 26 26 70 61 72 73 65 49 6e 74 28 64 5b 31 5d 29 3c 3d 39 26 26 28 75 3d 21 30 29 7d 69 66 28 65 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 26 26 21 75 29 7b 76 61 72 20 66 3d 6e 65 77 20 65 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 66 2e 6f 70 65 6e 28 73 2c 72 29 2c 22 47 45 54 22 3d 3d 3d 73 3f 66 2e 73 65 6e 64 28 74 28 63 29 29 3a 66 2e 73 65 6e 64 28 4a 53 4f 4e Data Ascii: {return r+"?"+t(e)}(c)),-1!==e.navigator.appName.indexOf("Internet Explorer")){var d=e.navigator.appVersion.match(/MSIE (\d+)/);d&&parseInt(d[1])<=9&&(u=!0)}if(e.XMLHttpRequest&&!u){var f=new e.XMLHttpRequest;f.open(s,r),"GET"===s?f.send(t(c)):f.send(JSON
2025-02-24 17:05:10 UTC	1369	IN	Data Raw: 2e 67 65 74 53 65 73 73 69 6f 6e 49 6e 74 65 72 61 63 74 69 6f 6e 53 74 65 70 28 29 2c 72 56 3a 64 2e 73 74 6f 72 61 67 65 2e 67 65 74 28 22 72 76 22 29 7c 7c 22 30 22 2c 76 3a 64 2e 76 65 72 7d 3a 64 2e 73 65 73 73 69 6f 6e 53 74 61 72 74 28 21 31 29 7d 2c 67 65 6e 65 72 61 74 65 53 65 73 73 69 6f 6e 49 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 37 38 33 36 34 31 36 34 30 39 36 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 32 37 34 32 37 34 35 37 34 33 33 35 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 2c 73 65 73 73 69 6f 6e 53 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 74 3f 22 31 22 3a 22 30 22 3b 76 61 72 20 65 3d 64 2e 67 65 6e 65 72 61 74 65 53 65 73 73 69 6f 6e 49 44 28 29 3b 64 Data Ascii: .getSessionInteractionStep(),rV:d.storage.get("rv")\|\|"0",v:d.ver}:d.sessionStart(!1)},generateSessionID:function(){return(78364164096+Math.floor(2742745743359*Math.random())).toString(36)},sessionStart:function(t){t=t?"1":"0";var e=d.generateSessionID();d
2025-02-24 17:05:10 UTC	1369	IN	Data Raw: 69 66 28 72 26 26 74 29 7b 76 61 72 20 6e 3d 65 28 72 2e 67 65 74 49 74 65 6d 28 6f 2e 73 74 6f 72 61 67 65 4b 65 79 29 29 3b 72 65 74 75 72 6e 20 6e 3f 6e 5b 74 5d 3a 22 22 7d 72 65 74 75 72 6e 22 22 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 69 66 28 72 26 26 6e 29 74 72 79 7b 76 61 72 20 61 3d 72 2e 67 65 74 49 74 65 6d 28 6f 2e 73 74 6f 72 61 67 65 4b 65 79 29 2c 73 3d 61 3f 65 28 61 29 3a 7b 7d 3b 73 5b 6e 5d 3d 69 2c 72 2e 73 65 74 49 74 65 6d 28 6f 2e 73 74 6f 72 61 67 65 4b 65 79 2c 74 28 73 29 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 73 74 6f 72 65 20 22 2b 6e 2b 22 20 69 6e 20 73 74 6f 72 61 67 65 2e 22 2c 74 29 7d 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f Data Ascii: if(r&&t){var n=e(r.getItem(o.storageKey));return n?n[t]:""}return""},set:function(n,i){if(r&&n)try{var a=r.getItem(o.storageKey),s=a?e(a):{};s[n]=i,r.setItem(o.storageKey,t(s))}catch(t){console.error("unable to store "+n+" in storage.",t)}},remove:functio
2025-02-24 17:05:10 UTC	1205	IN	Data Raw: 76 61 69 6c 48 65 69 67 68 74 2c 62 49 57 3a 74 2e 69 6e 6e 65 72 57 69 64 74 68 2c 62 49 48 3a 74 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 70 44 3a 74 2e 73 63 72 65 65 6e 2e 70 69 78 65 6c 44 65 70 74 68 2c 64 50 52 3a 31 7c 74 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 2c 6f 72 3a 74 2e 73 63 72 65 65 6e 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 26 26 74 2e 73 63 72 65 65 6e 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 2e 74 79 70 65 7c 7c 22 22 7d 7d 28 74 29 29 2c 75 2e 70 75 73 68 28 7b 6e 54 3a 69 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 74 79 70 65 2c 72 43 3a 69 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 72 65 64 69 72 65 63 74 43 6f 75 6e 74 7d 29 2c 75 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 7b 6e 53 3a 30 2c 63 53 3a 73 28 74 2e 63 Data Ascii: vailHeight,bIW:t.innerWidth,bIH:t.innerHeight,pD:t.screen.pixelDepth,dPR:1\|t.devicePixelRatio,or:t.screen.orientation&&t.screen.orientation.type\|\|""}}(t)),u.push({nT:i.navigation.type,rC:i.navigation.redirectCount}),u.push(function(t){return{nS:0,cS:s(t.c
2025-02-24 17:05:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:10 UTC	567	OUT	GET /v1/disclaimer?id=disclaimer&account_id=7753 HTTP/1.1 Host: display.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mindboostingtips.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:10 UTC	595	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:10 GMT Transfer-Encoding: chunked Connection: close x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true x-server: WEB_6_7500 strict-transport-security: max-age=15552000; includeSubDomains set-cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ cf-cache-status: DYNAMIC Set-Cookie: __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFGZ3TiMc1aYhJ; SameSite=Lax; path=/; expires=Tue, 25-Feb-25 16:05:10 GMT; HttpOnly Server: cloudflare CF-RAY: 917109f6fb469e05-EWR alt-svc: h3=":443"; ma=86400
2025-02-24 17:05:10 UTC	774	IN	Data Raw: 35 33 62 0d 0a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 69 73 63 6c 61 69 6d 65 72 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 60 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 20 63 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 30 30 34 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 70 61 64 64 69 6e 67 3a 30 3b 22 3e 0a 09 09 09 09 3c 64 69 76 20 73 74 79 6c 65 3d 22 62 6f 78 2d 73 68 61 64 6f 77 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 39 38 30 33 39 29 20 31 70 78 20 31 70 78 20 33 70 78 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 6d 61 72 Data Ascii: 53bdocument.getElementById("disclaimer").innerHTML = `<div class="main container" style="z-index: 1000004;width:100%; padding:0;"><div style="box-shadow: rgba(0, 0, 0, 0.298039) 1px 1px 3px; width: 100%; line-height: 15px;overflow: hidden; mar
2025-02-24 17:05:10 UTC	572	IN	Data Raw: 64 73 20 69 73 20 74 68 65 20 72 65 74 61 69 6c 65 72 20 6f 66 20 74 68 69 73 20 70 72 6f 64 75 63 74 2e 20 0a 09 09 09 09 09 42 75 79 47 6f 6f 64 73 20 69 73 20 61 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 20 6f 66 20 42 75 79 47 6f 6f 64 73 2c 20 61 20 44 65 6c 61 77 61 72 65 20 63 6f 72 70 6f 72 61 74 69 6f 6e 20 6c 6f 63 61 74 65 64 20 61 74 20 31 32 30 31 20 4e 20 4f 72 61 6e 67 65 20 53 74 72 65 65 74 20 53 75 69 74 65 20 23 37 32 32 33 2c 20 57 69 6c 6d 69 6e 67 74 6f 6e 2c 20 44 45 2c 20 31 39 38 30 31 2c 20 55 53 41 20 61 6e 64 20 75 73 65 64 20 62 79 20 70 65 72 6d 69 73 73 69 6f 6e 2e 20 0a 09 09 09 09 09 42 75 79 47 6f 6f 64 73 20 72 6f 6c 65 20 61 73 20 72 65 74 61 69 6c 65 72 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6e 73 74 Data Ascii: ds is the retailer of this product. BuyGoods is a registered trademark of BuyGoods, a Delaware corporation located at 1201 N Orange Street Suite #7223, Wilmington, DE, 19801, USA and used by permission. BuyGoods role as retailer does not const
2025-02-24 17:05:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:10 UTC	787	OUT	GET /track/?a=7753&firstcookie=0&tracking_redirect=&referrer=https%3A%2F%2Frejrixe.com%2F&sessid2=&product=brain1,brain3,brain6&vid1=&vid2=&vid3=&caller_url=https%3A%2F%2Fmindboostingtips.com%2F%3Faff_id%3D114767%26subid2%3D10559_sessid2025022417054973%26subid%3D1659 HTTP/1.1 Host: tracking.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mindboostingtips.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:10 UTC	1335	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:10 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-credentials: true p3p: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE" cache-control: no-cache, must-revalidate pragma: no-cache expires: Tue, Jan 12 1999 01:01:01 GMT set-cookie: spiaffid_7753=114767; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Sun, 25 May 2025 17:05:10 GMT; Secure vary: Accept-Encoding x-server: WEB_6 strict-transport-security: max-age=15552000; includeSubDomains CF-Cache-Status: DYNAMIC Set-Cookie: spisubid_7753=1659%7C10559_sessid2025022417054973; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Sun, 25 May 2025 17:05:10 GMT; Secure Set-Cookie: spicampaign_id_7753=; Domain=.buygoods.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure Set-Cookie: spireferrer_7753=; Domain=.buygoods.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure Set-Cookie: spireferrer_7753=8.46.123.189:rejrixe.com:mindboostingtips.com; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Sun, 25 May 2025 17:05:10 GMT; Secure Set-Cookie: spisessid2_7753=sessid20250224170510993; Max-Age=7776000; Domain=.buygoods.com; Path=/; Expires=Sun, 25 May 2025 17:05:10 GMT; Secure
2025-02-24 17:05:10 UTC	333	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 70 69 5f 66 75 6e 6e 65 6c 5f 63 6f 64 65 6e 61 6d 65 5f 37 37 35 33 3d 3b 20 44 6f 6d 61 69 6e 3d 2e 62 75 79 67 6f 6f 64 73 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 6c 62 3d 30 32 44 69 75 45 4a 67 55 50 6d 6e 6b 4b 57 35 4a 45 54 4e 74 56 4a 47 5a 58 31 4e 62 7a 47 53 38 46 38 79 79 4b 68 5a 68 62 61 37 76 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 75 65 2c 20 32 35 2d 46 65 62 2d 32 35 20 31 36 3a 30 35 3a 31 30 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 72 76 Data Ascii: Set-Cookie: spi_funnel_codename_7753=; Domain=.buygoods.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SecureSet-Cookie: __cflb=02DiuEJgUPmnkKW5JETNtVJGZX1NbzGS8F8yyKhZhba7v; SameSite=Lax; path=/; expires=Tue, 25-Feb-25 16:05:10 GMT; HttpOnlyServ
2025-02-24 17:05:10 UTC	1369	IN	Data Raw: 31 62 34 35 0d 0a 0a 76 61 72 20 73 70 69 74 6f 64 61 79 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 76 61 72 20 73 70 69 65 78 70 69 72 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 73 70 69 65 78 70 69 72 65 2e 73 65 74 54 69 6d 65 28 73 70 69 74 6f 64 61 79 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 33 36 30 30 30 30 30 2a 32 34 2a 39 30 29 3b 0a 0a 2f 2f 20 47 65 74 20 68 6f 73 74 6e 61 6d 65 20 77 69 74 68 6f 75 74 20 74 68 65 20 73 75 62 64 6f 6d 61 69 6e 0a 2f 2f 0a 2f 2f 20 54 68 65 20 6d 65 74 68 6f 64 20 6c 6f 6f 6b 73 20 61 74 20 74 68 65 20 73 65 63 6f 6e 64 2d 6c 65 76 65 6c 20 64 6f 6d 61 69 6e 20 66 6f 72 20 63 6f 6d 6d 6f 6e 20 6f 6e 65 73 2c 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 69 66 20 77 65 20 6e 65 65 64 20 74 68 65 0a 2f 2f 20 6c Data Ascii: 1b45var spitoday = new Date();var spiexpire = new Date();spiexpire.setTime(spitoday.getTime() + 36000002490);// Get hostname without the subdomain//// The method looks at the second-level domain for common ones, to determine if we need the// l
2025-02-24 17:05:10 UTC	1369	IN	Data Raw: 09 09 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 73 69 64 3d 22 2b 65 73 63 61 70 65 28 22 31 36 35 39 7c 31 30 35 35 39 5f 73 65 73 73 69 64 32 30 32 35 30 32 32 34 31 37 30 35 34 39 37 33 22 29 2b 22 3b 65 78 70 69 72 65 73 3d 22 2b 73 70 69 65 78 70 69 72 65 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 22 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 22 2b 68 6f 73 74 6e 61 6d 65 3b 0a 09 09 09 09 09 0a 09 09 09 09 09 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 63 61 6d 70 61 69 67 6e 5f 69 64 3d 22 2b 65 73 63 61 70 65 28 22 22 29 2b 22 3b 65 78 70 69 72 65 73 3d 22 2b 73 70 69 65 78 70 69 72 65 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 22 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 22 2b 68 6f 73 74 6e 61 6d 65 3b 0a 09 Data Ascii: document.cookie = "sid="+escape("1659\|10559_sessid2025022417054973")+";expires="+spiexpire.toGMTString()+";path=/;domain="+hostname;document.cookie = "campaign_id="+escape("")+";expires="+spiexpire.toGMTString()+";path=/;domain="+hostname;
2025-02-24 17:05:10 UTC	1369	IN	Data Raw: 32 30 32 35 30 32 32 34 31 37 30 35 31 30 39 39 33 22 29 2b 22 26 22 3b 0a 0a 76 61 72 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 63 62 64 20 3d 20 22 62 75 79 67 6f 6f 64 73 68 6f 6d 65 6f 69 6c 73 2e 63 6f 6d 25 32 46 73 65 63 75 72 65 25 32 46 25 33 46 22 3b 0a 76 61 72 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 63 62 64 20 3d 20 22 62 75 79 67 6f 6f 64 73 68 6f 6d 65 6f 69 6c 73 2e 63 6f 6d 2f 73 65 63 75 72 65 2f 3f 22 3b 0a 76 61 72 20 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 63 62 64 20 3d 20 73 70 69 5f 70 61 74 74 65 72 6e 5f 62 61 73 65 5f 63 62 64 2b 22 73 65 73 73 69 64 32 3d 22 2b 65 73 63 61 70 65 28 22 73 65 73 73 69 64 32 30 32 35 30 32 32 34 31 37 30 35 31 30 39 39 33 22 29 2b 22 26 22 3b 0a 0a 76 61 72 20 73 70 Data Ascii: 20250224170510993")+"&";var spi_pattern_enc_cbd = "buygoodshomeoils.com%2Fsecure%2F%3F";var spi_pattern_base_cbd = "buygoodshomeoils.com/secure/?";var spi_replace_str_cbd = spi_pattern_base_cbd+"sessid2="+escape("sessid20250224170510993")+"&";var sp
2025-02-24 17:05:10 UTC	1369	IN	Data Raw: 0a 76 61 72 20 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 62 67 5f 68 74 6d 6c 29 3b 0a 76 61 72 20 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 32 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 62 67 5f 68 74 6d 6c 32 29 3b 0a 76 61 72 20 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 73 70 69 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 70 69 5f 72 65 70 6c 61 63 65 5f 73 74 72 5f 73 70 69 29 3b 0a 0a 66 6f 72 20 28 73 70 69 5f 69 20 3d 20 30 3b 20 73 70 69 5f 69 20 3c 20 73 70 69 5f 6d 79 4e 6f 64 65 Data Ascii: var spi_replace_enc_bg_html = encodeURIComponent(spi_replace_str_bg_html);var spi_replace_enc_bg_html2 = encodeURIComponent(spi_replace_str_bg_html2);var spi_replace_enc_spi = encodeURIComponent(spi_replace_str_spi);for (spi_i = 0; spi_i < spi_myNode
2025-02-24 17:05:10 UTC	1369	IN	Data Raw: 6c 69 73 74 5b 73 70 69 5f 69 5d 2e 68 72 65 66 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 3b 0a 09 7d 65 6c 73 65 20 69 66 28 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 2e 69 6e 64 65 78 4f 66 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 29 20 3e 20 2d 31 29 0a 09 7b 0a 09 09 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 2e 72 65 70 6c 61 63 65 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 2c 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 62 67 5f 68 74 6d 6c 29 3b 0a 09 09 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 5b 73 70 69 5f 69 5d 2e 68 72 65 66 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 3b 0a 09 7d 0a 0a 09 2f 2f 20 42 75 79 47 6f 6f Data Ascii: list[spi_i].href = spi_track_link;}else if(spi_track_link.indexOf(spi_pattern_enc_bg_html) > -1){spi_track_link = spi_track_link.replace(spi_pattern_enc_bg_html,spi_replace_enc_bg_html);spi_myNodelist[spi_i].href = spi_track_link;}// BuyGoo
2025-02-24 17:05:10 UTC	144	IN	Data Raw: 5f 74 72 61 63 6b 5f 6c 69 6e 6b 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 2e 72 65 70 6c 61 63 65 28 73 70 69 5f 70 61 74 74 65 72 6e 5f 65 6e 63 5f 73 70 69 2c 73 70 69 5f 72 65 70 6c 61 63 65 5f 65 6e 63 5f 73 70 69 29 3b 0a 09 09 73 70 69 5f 6d 79 4e 6f 64 65 6c 69 73 74 5b 73 70 69 5f 69 5d 2e 68 72 65 66 20 3d 20 73 70 69 5f 74 72 61 63 6b 5f 6c 69 6e 6b 3b 0a 09 7d 0a 7d 20 20 20 20 20 20 20 20 0a 09 09 09 0d 0a Data Ascii: _track_link = spi_track_link.replace(spi_pattern_enc_spi,spi_replace_enc_spi);spi_myNodelist[spi_i].href = spi_track_link;}}
2025-02-24 17:05:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:10 UTC	1322	OUT	GET /fonts/Konnect-Medium.woff2 HTTP/1.1 Host: mindboostingtips.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mindboostingtips.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://mindboostingtips.com/css/style.css?v=1.12 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlVnbkhBRlI4QnJXeVJZdWpSU1JsZXc9PSIsInZhbHVlIjoiRFR2ZjIxVmZLN2tuTm9SdFpTa0hUalk2KzJCcHNINW81b3lHaXFNMzBEMFV1bmlaSE5DS0lBN1FXT2xYSzdIdG1tN2VHR0Jqa0tXTnFFTVRxS3prRHZ2aDluVlpPenRaM09Sdlcyclp1MmQwS1JTV2tUaVlVWjZadlFYbEZyMjciLCJtYWMiOiI2MmEwY2RhZWNlYTliY2QzZTE4MWVlMDQxNGUwY2Y5NGExYWRkZGQ5NGJiY2Y3YzE5NTlmODU3NDdkMjVkYjU5In0%3D; brain_savior_session=eyJpdiI6Ik4vWXRIeWlvbExhUHJCUm1aQ3J1Q3c9PSIsInZhbHVlIjoiSnZ2aVJRTDh4MWd2UlRMRWorRXRHMmRxYzljQ0gzV1JIR05xdzc5eW5SakdSUUFRMjlPUUtsdFJOUDRaTHEyZXZaU05kOWlIbEtlZWdzZmZYY1I5dDh1K1VhOURCSXFZaGxGRzRpT08rdEZITjhqVUdRM0tISDU1ak1lK0xFSW8iLCJtYWMiOiI5MDdmNTdmMDExOTc3MzFiZGIyYmFjYjcwZTc4Yjc1YzdkNWY2MThiYjkzOTUzNzI3M2EyNGIzMTc3NjdjZTdiIn0%3D; showoffers=1
2025-02-24 17:05:10 UTC	358	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:10 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Wed, 05 Apr 2023 06:42:48 GMT ETag: "881c-5f89119a8ea00" Accept-Ranges: bytes Content-Length: 34844 Cache-Control: max-age=31536000 Expires: Tue, 24 Feb 2026 17:05:10 GMT X-Robots-Tag: noindex, nofollow Connection: close Content-Type: font/woff2
2025-02-24 17:05:10 UTC	7834	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 88 1c 00 0f 00 00 00 01 ca 00 00 00 87 ba 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 32 1b 82 a3 2a 1c 9b 44 06 60 00 88 7e 11 08 0a 83 ef 1c 82 fd 70 0b 8a 1e 00 01 36 02 24 03 94 38 04 20 05 90 04 07 a8 66 5b 2d 8b 91 0b ff ed f0 bf 03 09 70 b5 ad b6 86 e0 c6 00 4a 6b fa ba 9a 94 c9 01 23 0f 7b 2f 8c e9 b9 31 00 bd 56 8b 2c 3a 90 c3 c6 01 00 3e fd 51 cc fe ff ff ff ff ff ff 9b 48 c7 e3 6f bb bb f7 de dd fb ed 8d 8f c3 b1 09 8c cd 80 82 4c 4d 8d 24 62 a4 46 01 53 22 62 11 83 f3 ce 7a 06 09 4e 6c cc c4 83 f7 49 f2 81 1b 32 44 1c 41 20 1f 21 37 66 b8 82 c2 c1 04 52 a4 ae 4b 34 c5 2c e0 29 16 92 b5 57 74 cd 37 c3 d9 0c e6 0a 81 62 e0 44 09 08 c5 f9 02 9a 45 b1 0c 42 17 78 c1 Data Ascii: wOF2?FFTM2*D`~p6$8 f[-pJk#{/1V,:>QHoLM$bFS"bzNlI2DA !7fRK4,)Wt7bDEBx
2025-02-24 17:05:10 UTC	8000	IN	Data Raw: 27 e4 4e c9 9d 91 3b 27 77 41 ee a2 cc 25 b9 cb 32 57 e4 ae ca 5c 93 bb 2e 73 43 ee 65 37 45 5d 80 45 53 80 47 9c 28 39 72 25 94 d4 a2 56 19 e5 79 17 cc 34 b5 c8 c8 c8 91 c7 5c e3 dd da c6 38 ec 3a 5e 4a 45 4a e9 48 2b 13 99 c9 a1 d6 f8 34 b2 98 62 1a 67 8d db 20 eb f8 d0 30 86 9b 1f 53 87 e7 7b 30 16 78 ba c3 d2 03 9e 9e b0 f4 82 27 06 9e 58 58 e2 e0 89 bf 9b 60 45 91 47 58 c3 5a e1 3d 9e fe 52 60 06 14 3c 03 37 61 5b 0c 87 87 0f b8 4e 37 c4 e1 63 ae 61 26 bc fd 8d 3c d4 1a ef 26 18 23 a6 e9 96 77 fc e0 6f 69 b3 3d ed 93 26 3e ed 6f 4c a3 ad f1 69 82 63 1a 70 8d 4f 2b 1c 13 86 dd d2 97 be c9 b6 18 0e 0f 1f 73 9d 46 78 43 8c 29 a6 e3 a8 68 8e a0 a6 4f c2 40 42 83 84 0a 35 9a 68 86 63 f7 58 3e 79 81 65 05 b0 ba 4d de 03 ae 7b 3e 15 c0 06 7d c9 da a4 1f 6a Data Ascii: 'N;'wA%2W\.sCe7E]ESG(9r%Vy4\8:^JEJH+4bg 0S{0x'XX`EGXZ=R`<7a[N7ca&<&#woi=&>oLicpO+sFxC)hO@B5hcX>yeM{>}j
2025-02-24 17:05:10 UTC	8000	IN	Data Raw: fb 43 98 65 75 63 c0 91 fc 2a 03 d5 62 fe 8c bd 90 6f ea d7 c7 49 36 46 b6 fa 48 93 e0 0a bb 1e 8b f3 03 e3 22 8f a3 c0 ef 46 8c 12 91 9f af eb 5d ba 60 f9 96 c5 48 cf 98 4f bb 34 8c 47 f0 3c dd a7 ff df 41 c7 a3 9e ee fe e8 31 7b 7d 0b 85 a8 c7 f3 5f 37 30 aa b0 98 57 6b f0 3f 95 3c fd ff 7f cb 22 77 8a d0 65 aa e6 af 43 b7 f1 e2 63 d8 f6 1f 30 e6 ef 0f 2a e0 71 bf be a5 c4 cd 09 63 be 7a f3 91 57 f5 8e 1f a7 8a 78 f6 f2 c6 94 2d d2 f3 b5 15 08 ec 7a d1 39 ed f4 89 ca 4f ed b8 97 28 5a 62 5f a1 60 32 dc 8b ff bd 83 bb ea e8 af c7 e8 2e 75 3c ba 34 72 b7 5a 00 69 da 2a ce 83 0d 42 5e 53 73 be 98 c1 40 8d 2b aa 08 28 ae 75 4f 1d 41 39 82 0f a8 96 f9 ee 31 9f a6 e8 1f 25 45 06 cf 18 b6 58 0d 83 a9 6b 7f b0 dc 61 08 c9 cb c5 6b 80 59 1e 5e 4f c1 42 8a bb 28 Data Ascii: CeucboI6FH"F]`HO4G<A1{}_70Wk?<"weCc0qczWx-z9O(Zb_`2.u<4rZi*B^Ss@+(uOA91%EXkakY^OB(
2025-02-24 17:05:10 UTC	8000	IN	Data Raw: 93 e3 b1 12 e2 1c 0d ba fa 43 b5 6f fe 61 b1 49 42 fd 81 77 da 44 0d 03 16 0e e1 54 b3 f2 60 9f ad 2c 4c fc 8d f1 b0 3f 1e 2c ca 00 41 ba fa 78 07 22 cd dd 70 14 c9 4c 0e f2 6f 42 0e b4 57 44 2f 55 9f ba 58 88 f4 bd 3e 0e 15 94 37 34 5a 78 b8 1e bd 80 bf 54 00 ec 67 b7 b4 fe 01 21 75 3f f5 c9 c9 ef 4b 4d 0d 4d 47 6f 9a 1b 5a ea 5f 3d ab b9 54 7b 69 a7 32 c1 3e 73 c1 a0 97 a3 7e 47 41 a9 9d 88 85 ed e0 16 4f ad 85 83 ae eb be 71 1c ae a4 74 eb d0 85 a1 a1 fc 3c bd 9e a6 5b 02 7f f5 21 dc 1e 25 9a eb 2f d5 ba d4 50 1e 31 f5 55 0f fe 1b c8 1a d8 b4 39 63 e8 59 f8 7f 20 ab 13 10 ec 3f c1 25 0a ad a7 51 c9 a2 ba 1f 92 db ef c9 9f 38 14 01 ba 38 a1 8c af d8 92 3c d4 52 89 f8 0a c0 c3 b9 e2 3a bd a3 49 9c e9 32 67 02 af 7f f0 7a 53 2b 53 78 8c 15 9b 85 45 b2 52 Data Ascii: CoaIBwDT`,L?,Ax"pLoBWD/UX>74ZxTg!u?KMMGoZ_=T{i2>s~GAOqt<[!%/P1U9cY ?%Q88<R:I2gzS+SxER
2025-02-24 17:05:10 UTC	3010	IN	Data Raw: 67 74 9b fe a1 0c 2c bd c0 cd e1 1c 88 99 f9 e0 2f f8 b6 3c 27 40 96 fe 99 30 81 2b 26 69 67 4d fc 3c 6d 6e df 4e 78 df 25 5a b6 6e 53 89 22 d3 07 1c 1a 5a 20 85 c0 a3 2e 59 1f 7e eb eb 01 79 06 52 e7 a8 32 5e 34 e7 1e c8 df 10 41 5e 42 6e e8 12 48 04 d2 94 10 82 9c 86 bc 02 00 1a 72 1b f2 4b 77 59 60 7a 26 0d e3 fc 1c c4 70 79 d6 97 09 9c 67 82 3b f7 98 2f 06 14 1f 29 c3 be 39 19 f0 e9 e1 48 e3 d6 f0 1e 72 05 e4 da 60 d7 4a 09 4b 63 03 bf 3d 2a 3b 31 bf 59 be 4e a5 1e a7 c0 25 65 be 70 ba 2e a5 ef d1 d9 7f af ba dc 35 ec 19 ca 51 3f 3e 81 7e 7e ae bf 12 64 1b fa 39 ea b3 6f f2 fe 10 0c 67 02 d6 6e 03 96 1b 00 2c ce 01 16 fb 82 35 ff 02 58 bc 0d 96 7f 05 16 c7 00 cb 7b 80 b5 5f b4 c1 82 df 93 ef 13 26 7a ff 75 2f 05 d6 1c 04 fe b5 0c 7d 1d ac 5e 9f 13 44 Data Ascii: gt,/<'@0+&igM<mnNx%ZnS"Z .Y~yR2^4A^BnHrKwY`z&pyg;/)9Hr`JKc=*;1YN%ep.5Q?>~~d9ogn,5X{_&zu/}^D

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:10 UTC	1323	OUT	GET /fonts/OpenSans-Regular.woff HTTP/1.1 Host: mindboostingtips.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mindboostingtips.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://mindboostingtips.com/css/style.css?v=1.12 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlVnbkhBRlI4QnJXeVJZdWpSU1JsZXc9PSIsInZhbHVlIjoiRFR2ZjIxVmZLN2tuTm9SdFpTa0hUalk2KzJCcHNINW81b3lHaXFNMzBEMFV1bmlaSE5DS0lBN1FXT2xYSzdIdG1tN2VHR0Jqa0tXTnFFTVRxS3prRHZ2aDluVlpPenRaM09Sdlcyclp1MmQwS1JTV2tUaVlVWjZadlFYbEZyMjciLCJtYWMiOiI2MmEwY2RhZWNlYTliY2QzZTE4MWVlMDQxNGUwY2Y5NGExYWRkZGQ5NGJiY2Y3YzE5NTlmODU3NDdkMjVkYjU5In0%3D; brain_savior_session=eyJpdiI6Ik4vWXRIeWlvbExhUHJCUm1aQ3J1Q3c9PSIsInZhbHVlIjoiSnZ2aVJRTDh4MWd2UlRMRWorRXRHMmRxYzljQ0gzV1JIR05xdzc5eW5SakdSUUFRMjlPUUtsdFJOUDRaTHEyZXZaU05kOWlIbEtlZWdzZmZYY1I5dDh1K1VhOURCSXFZaGxGRzRpT08rdEZITjhqVUdRM0tISDU1ak1lK0xFSW8iLCJtYWMiOiI5MDdmNTdmMDExOTc3MzFiZGIyYmFjYjcwZTc4Yjc1YzdkNWY2MThiYjkzOTUzNzI3M2EyNGIzMTc3NjdjZTdiIn0%3D; showoffers=1
2025-02-24 17:05:10 UTC	357	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:10 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Wed, 05 Apr 2023 06:42:51 GMT ETag: "50d8-5f89119d6b0c0" Accept-Ranges: bytes Content-Length: 20696 Cache-Control: max-age=31536000 Expires: Tue, 24 Feb 2026 17:05:10 GMT X-Robots-Tag: noindex, nofollow Connection: close Content-Type: font/woff
2025-02-24 17:05:10 UTC	7835	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 50 d8 00 13 00 00 00 00 82 94 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 50 b4 00 00 00 1c 00 00 00 1c 73 17 51 95 47 44 45 46 00 00 4b 6c 00 00 00 1d 00 00 00 1e 00 27 00 f5 47 50 4f 53 00 00 4c 10 00 00 04 a3 00 00 09 9e 2d 72 17 42 47 53 55 42 00 00 4b 8c 00 00 00 81 00 00 00 a8 a0 63 88 a1 4f 53 2f 32 00 00 02 20 00 00 00 60 00 00 00 60 a0 e5 99 7f 63 6d 61 70 00 00 04 c4 00 00 01 9e 00 00 02 02 1d 95 70 91 63 76 74 20 00 00 0d 80 00 00 00 4f 00 00 00 b4 53 c9 25 4f 66 70 67 6d 00 00 06 64 00 00 06 6f 00 00 0d 6d 45 20 8e 7c 67 61 73 70 00 00 4b 64 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0f a8 00 00 36 e3 00 00 56 6c 46 12 e7 65 68 65 61 64 00 00 01 a8 00 00 00 Data Ascii: wOFFPFFTMPsQGDEFKl'GPOSL-rBGSUBKcOS/2 ``cmappcvt OS%OfpgmdomE \|gaspKdglyf6VlFehead
2025-02-24 17:05:10 UTC	8000	IN	Data Raw: fc fd 3f de ef 7a 6c 1f fb 0f fb 04 6c 10 b1 7e 25 7b 83 32 77 b6 23 01 96 c0 e8 6f 61 d0 de 81 d5 25 ec 1d 76 85 7d ce 3e b4 c3 3b be f5 2a 31 82 96 36 57 4b 5c 2d e2 4e 18 c3 a1 45 56 1f 1e 9f bb 8d 86 7c b5 88 35 79 ec d0 a9 c4 d4 36 b2 da 5a 89 d6 d2 3d ee 22 74 9a 57 d1 47 3c fd c1 34 3f 5f 9b 77 23 f6 87 9f ff 83 48 d5 70 b2 96 bb 3e 62 0e b7 86 b3 b9 30 5e f8 c6 ad 5c 0e ee 46 72 cc cb 5d 06 09 bf c9 28 be d1 b9 f8 06 06 a8 32 09 81 10 19 85 57 d2 10 40 46 3a 76 65 56 83 87 65 f4 ec 3b 6a 5c ed 61 36 37 6a a5 f9 d1 29 d8 f5 e0 43 67 bd eb 93 af 8a f5 c5 ba a2 83 f4 12 8f f9 40 01 07 61 59 7d 40 5b a0 d1 60 12 5e 88 cd 0e 3a b1 3c 70 82 7c f5 84 fb 87 0d b5 b5 74 dd 49 77 3d 7d 6f b1 fb 28 2e 31 99 7e ea ae f4 93 11 c5 13 1d 15 c0 9c 0e 6b 42 76 0a Data Ascii: ?zll~%{2w#oa%v}>;*16WK\-NEV\|5y6Z="tWG<4?_w#Hp>b0^\Fr](2W@F:veVe;j\a67j)Cg@aY}@[`^:<p\|tIw=}o(.1~kBv
2025-02-24 17:05:10 UTC	4861	IN	Data Raw: 17 d2 0a 8e 8f 9c ff 62 52 fa ce 47 0e ff dd dd 4d 0f 1d 1f d8 52 32 70 ed 18 76 69 ce 7d ef 2d 7c e1 8d dd 13 07 af dc f1 ec 81 ed d2 5b b3 96 04 51 dd 93 d0 fe f9 d7 f5 5a 9a 64 52 fa a0 b2 c1 c3 d9 7f be 9a c8 2a ec 89 6b 12 6c 57 e7 96 d7 ae 2b 2b 7d 79 e3 28 9d fe 61 9a 5a f3 ec e6 1d 9c a6 d3 98 99 e7 0f 22 4d 7b 68 b6 1a 7a 08 5a 8b dc 36 c1 b3 5e 1a 8f 3d b6 fd ce f2 19 fd ee 5d 7e ec 37 bf 72 c1 4b ad bc 3c 50 94 df fa 1b ee d9 51 a2 fe 3b 62 dc 6e ec 3e 51 ff 65 dc e8 a9 7e e5 33 6e c5 8a fa dc 0e 0f f0 2b 3f c6 5e 12 e5 d7 b0 3c 46 f4 af 95 97 b3 7d 02 6f 4f e1 39 14 e8 57 f2 bb 95 a9 ae f6 41 3c 68 53 c0 5f 8e 63 36 f1 f3 db 40 e8 c5 83 7d 12 88 dd e6 bb 2b 6f 8f 6d c9 83 90 e1 5a 5a 05 11 97 70 ad 99 09 89 0a 2a e8 c4 cc 70 a1 9e 8d 12 df 5f Data Ascii: bRGMR2pvi}-\|[QZdRklW++}y(aZ"M{hzZ6^=]~7rK<PQ;bn>Qe~3n+?^<F}oO9WA<hS_c6@}+omZZpp_

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:10 UTC	1378	OUT	GET /imgs/landing/volume-icon.svg HTTP/1.1 Host: mindboostingtips.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mindboostingtips.com/?aff_id=114767&subid2=10559_sessid2025022417054973&subid=1659 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlVnbkhBRlI4QnJXeVJZdWpSU1JsZXc9PSIsInZhbHVlIjoiRFR2ZjIxVmZLN2tuTm9SdFpTa0hUalk2KzJCcHNINW81b3lHaXFNMzBEMFV1bmlaSE5DS0lBN1FXT2xYSzdIdG1tN2VHR0Jqa0tXTnFFTVRxS3prRHZ2aDluVlpPenRaM09Sdlcyclp1MmQwS1JTV2tUaVlVWjZadlFYbEZyMjciLCJtYWMiOiI2MmEwY2RhZWNlYTliY2QzZTE4MWVlMDQxNGUwY2Y5NGExYWRkZGQ5NGJiY2Y3YzE5NTlmODU3NDdkMjVkYjU5In0%3D; brain_savior_session=eyJpdiI6Ik4vWXRIeWlvbExhUHJCUm1aQ3J1Q3c9PSIsInZhbHVlIjoiSnZ2aVJRTDh4MWd2UlRMRWorRXRHMmRxYzljQ0gzV1JIR05xdzc5eW5SakdSUUFRMjlPUUtsdFJOUDRaTHEyZXZaU05kOWlIbEtlZWdzZmZYY1I5dDh1K1VhOURCSXFZaGxGRzRpT08rdEZITjhqVUdRM0tISDU1ak1lK0xFSW8iLCJtYWMiOiI5MDdmNTdmMDExOTc3MzFiZGIyYmFjYjcwZTc4Yjc1YzdkNWY2MThiYjkzOTUzNzI3M2EyNGIzMTc3NjdjZTdiIn0%3D
2025-02-24 17:05:10 UTC	381	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:10 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Wed, 05 Apr 2023 06:43:59 GMT ETag: "2dd-5f8911de449c0" Accept-Ranges: bytes Content-Length: 733 Cache-Control: max-age=31536000 Expires: Tue, 24 Feb 2026 17:05:10 GMT Vary: Accept-Encoding X-Robots-Tag: noindex, nofollow Connection: close Content-Type: image/svg+xml
2025-02-24 17:05:10 UTC	733	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 35 20 32 32 4c 31 38 2e 35 20 31 36 48 32 33 2e 35 56 38 48 31 38 2e 35 4c 31 30 2e 35 20 32 56 32 32 5a 22 20 73 74 72 6f 6b 65 3d 22 23 38 32 37 42 37 39 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f Data Ascii: <svg width="25" height="24" viewBox="0 0 25 24" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0)"><path d="M10.5 22L18.5 16H23.5V8H18.5L10.5 2V22Z" stroke="#827B79" stroke-width="2" stroke-miterlimit="10" stroke-linecap="square"/

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:10 UTC	1378	OUT	GET /imgs/logo.webp HTTP/1.1 Host: mindboostingtips.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mindboostingtips.com/?aff_id=114767&subid2=10559_sessid2025022417054973&subid=1659 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlVnbkhBRlI4QnJXeVJZdWpSU1JsZXc9PSIsInZhbHVlIjoiRFR2ZjIxVmZLN2tuTm9SdFpTa0hUalk2KzJCcHNINW81b3lHaXFNMzBEMFV1bmlaSE5DS0lBN1FXT2xYSzdIdG1tN2VHR0Jqa0tXTnFFTVRxS3prRHZ2aDluVlpPenRaM09Sdlcyclp1MmQwS1JTV2tUaVlVWjZadlFYbEZyMjciLCJtYWMiOiI2MmEwY2RhZWNlYTliY2QzZTE4MWVlMDQxNGUwY2Y5NGExYWRkZGQ5NGJiY2Y3YzE5NTlmODU3NDdkMjVkYjU5In0%3D; brain_savior_session=eyJpdiI6Ik4vWXRIeWlvbExhUHJCUm1aQ3J1Q3c9PSIsInZhbHVlIjoiSnZ2aVJRTDh4MWd2UlRMRWorRXRHMmRxYzljQ0gzV1JIR05xdzc5eW5SakdSUUFRMjlPUUtsdFJOUDRaTHEyZXZaU05kOWlIbEtlZWdzZmZYY1I5dDh1K1VhOURCSXFZaGxGRzRpT08rdEZITjhqVUdRM0tISDU1ak1lK0xFSW8iLCJtYWMiOiI5MDdmNTdmMDExOTc3MzFiZGIyYmFjYjcwZTc4Yjc1YzdkNWY2MThiYjkzOTUzNzI3M2EyNGIzMTc3NjdjZTdiIn0%3D; showoffers=1
2025-02-24 17:05:10 UTC	355	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:10 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Wed, 05 Apr 2023 06:43:02 GMT ETag: "2196-5f8911a7e8980" Accept-Ranges: bytes Content-Length: 8598 Cache-Control: max-age=172800 Expires: Wed, 26 Feb 2025 17:05:10 GMT X-Robots-Tag: noindex, nofollow Connection: close Content-Type: image/webp
2025-02-24 17:05:10 UTC	7837	IN	Data Raw: 52 49 46 46 8e 21 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 b3 00 00 45 00 00 41 4c 50 48 5a 0f 00 00 01 b0 86 ff bf 6a 29 d5 ef bf d6 da e7 0c 67 68 04 69 03 67 e8 2e a5 b9 5c b0 b8 76 37 d7 b8 61 dc b6 0b 5b 09 8b b0 5b f1 da dd 49 d8 41 0d 29 a1 0c 48 4a 39 b1 f7 5e 6b fd 5e ec 3d e7 0c a3 cc eb 88 98 00 ec c5 35 d0 f4 d8 47 cb b6 55 54 85 24 59 b1 e2 b9 f3 5a 43 50 bf 0d d0 68 c2 02 92 96 e4 fa f9 cf 4d bd f2 c2 33 8f 68 53 cf 91 00 a5 cf 91 71 18 f2 d7 f7 2e 1b 9c 45 5d 16 d9 6b 19 f4 5b c8 ea d8 5b be 7d 62 11 a0 32 c9 40 ea 80 c9 64 03 b3 b7 d2 e8 b6 9c 95 9e 96 37 35 83 ce 04 4a 50 27 55 c6 60 2f ae 64 9f 2f 58 45 7a 5e 0c c9 28 d4 51 65 14 70 c0 99 93 5e 7c 61 ef 24 62 ee 60 95 a7 e5 24 18 8d 3a 2a 0a 28 3a f5 a5 35 bf 92 dc 3b 29 0c Data Ascii: RIFF!WEBPVP8XEALPHZj)ghig.\v7a[[IA)HJ9^k^=5GUT$YZCPhM3hSq.E]k[[}b2@d75JP'U`/d/XEz^(Qep^\|a$b`$:*(:5;)
2025-02-24 17:05:10 UTC	761	IN	Data Raw: 8e e5 20 0f 2e 55 3b 46 e0 e8 53 db 33 fa 19 95 61 3f c6 c7 d6 ad bc 7c 36 37 3f f6 67 0f ff fd 4d 23 cc 0b 66 37 16 8e be 34 dc 77 23 f9 eb 4b 18 28 7f 3e d5 f3 7f e8 20 0c d9 11 30 a0 c8 f2 32 5d f2 fe 54 c1 13 8f c1 de cd da 94 b4 eb ab 77 cb 6c 1d 6e e2 66 da 9b 16 6c ca 67 8d cb b0 dc 15 e8 ac 95 81 fe e6 f5 af ef e1 52 10 72 a2 00 17 a6 f8 20 3e 5b 67 b3 a6 2b 4e 91 e9 ae 01 0a 1f 03 0b 11 9c 8b 82 32 da f0 78 ca 00 50 be 34 02 da f9 6e e1 38 91 80 8f 10 9a 73 71 52 5c ae 56 97 2e f7 84 66 ee 82 65 e1 0b be 0a f8 2f 58 0d 94 e6 74 a6 aa e3 a8 9e 80 e1 f1 4e 63 9f 1c e8 e1 b3 c8 b1 f9 a4 95 f9 d9 9f c3 b8 8e 10 cc 3e a3 5d 3d 8b 7d 1f 48 e8 f8 9c 2b 21 88 b1 9c 75 7f 1a 72 55 64 e7 d1 f4 3d 59 8d 80 c4 0a 07 c6 95 40 4f 0f 6f 0c b0 27 00 ed b8 48 6d Data Ascii: .U;FS3a?\|67?gM#f74w#K(> 02]TwlnflgRr >[g+N2xP4n8sqR\V.fe/XtNc>]=}H+!urUd=Y@Oo'Hm

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:10 UTC	745	OUT	GET /conversion/iframe/?a=10559&token=59069a23144c480686398d6bdd4d577b HTTP/1.1 Host: go.maxweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mindboostingtips.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:10 UTC	788	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding expires: Mon, 24 Feb 2025 18:05:10 GMT cache-control: max-age=3600 cache-control: private access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type x-server: WEB_6 strict-transport-security: max-age=31536000; cf-cache-status: DYNAMIC Set-Cookie: __cflb=02DiuDvnJbjKdBkxKLVBqBrQP8wYzWkbUPEyKkQqj8jrC; SameSite=Lax; path=/; expires=Tue, 25-Feb-25 16:05:10 GMT; HttpOnly Server: cloudflare CF-RAY: 917109f7dbc38c2d-EWR
2025-02-24 17:05:10 UTC	581	IN	Data Raw: 34 65 35 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 20 3c 21 2d 2d 20 4d 65 74 61 20 50 69 78 65 6c 20 43 6f 64 65 20 2d 2d 3e 0a 20 3c 73 63 72 69 70 74 3e 0a 20 21 66 75 6e 63 74 69 6f 6e 28 66 2c 62 2c 65 2c 76 2c 6e 2c 74 2c 73 29 0a 20 20 20 20 20 7b 69 66 28 66 2e 66 62 71 29 72 65 74 75 72 6e 3b 6e 3d 66 2e 66 62 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 61 6c 6c 4d 65 74 68 6f 64 3f 0a 20 20 20 20 20 6e 2e 63 61 6c 6c 4d 65 74 68 6f 64 2e 61 70 70 6c 79 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 3a 6e 2e 71 75 65 75 65 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 0a 20 20 20 20 20 69 66 28 21 66 2e 5f 66 62 71 29 66 2e 5f 66 62 71 3d 6e Data Ascii: 4e5<html><head><title>Pixels</title></head><body> ... Meta Pixel Code --> <script> !function(f,b,e,v,n,t,s) {if(f.fbq)return;n=f.fbq=function(){n.callMethod? n.callMethod.apply(n,arguments):n.queue.push(arguments)}; if(!f._fbq)f._fbq=n
2025-02-24 17:05:10 UTC	679	IN	Data Raw: 73 0a 20 20 76 61 72 20 73 65 63 6f 6e 64 73 20 3d 20 31 32 30 30 3b 0a 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 66 62 71 28 27 74 72 61 63 6b 27 2c 20 27 50 61 67 65 56 69 65 77 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 66 62 71 28 27 74 72 61 63 6b 27 2c 20 27 41 64 64 54 6f 43 61 72 74 27 2c 20 7b 76 61 6c 75 65 3a 20 36 39 2c 20 63 75 72 72 65 6e 63 79 3a 20 27 55 53 44 27 7d 2c 20 7b 65 76 65 6e 74 49 44 3a 20 27 45 56 45 4e 54 5f 49 44 27 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 7d 2c 20 73 65 63 6f 6e 64 73 20 2a 20 31 30 30 30 29 3b 0a 20 3c 2f 73 63 72 69 70 74 3e 0a 20 3c 6e 6f 73 63 72 69 70 74 3e 3c 69 6d 67 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 Data Ascii: s var seconds = 1200; setTimeout(function() { fbq('track', 'PageView'); fbq('track', 'AddToCart', {value: 69, currency: 'USD'}, {eventID: 'EVENT_ID'}); }, seconds * 1000); </script> <noscript><img height="1" wid
2025-02-24 17:05:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sxdcfvg.blob.core.windows.net/swfgm/slp.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Windows Analysis Report
https://sxdcfvg.blob.core.windows.net/swfgm/slp.html

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:10 UTC	605	OUT	GET /images/buygoods_black.png HTTP/1.1 Host: www.buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mindboostingtips.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:10 UTC	422	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 24 Feb 2025 17:05:10 GMT Content-Length: 0 Connection: close location: https://buygoods.com/images/buygoods_black.png CF-Cache-Status: HIT Age: 3179 Expires: Mon, 24 Feb 2025 21:05:10 GMT Cache-Control: public, max-age=14400 Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 917109fb28228ccc-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:10 UTC	387	OUT	GET /v1/disclaimer?id=disclaimer&account_id=7753 HTTP/1.1 Host: display.buygoods.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:11 UTC	595	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:10 GMT Transfer-Encoding: chunked Connection: close x-powered-by: Express access-control-allow-origin: * access-control-allow-credentials: true x-server: WEB_6_7500 strict-transport-security: max-age=15552000; includeSubDomains set-cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ CF-Cache-Status: DYNAMIC Set-Cookie: __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFGZ3TiMc1aYhJ; SameSite=Lax; path=/; expires=Tue, 25-Feb-25 16:05:10 GMT; HttpOnly Server: cloudflare CF-RAY: 917109fb5d6218d0-EWR alt-svc: h3=":443"; ma=86400
2025-02-24 17:05:11 UTC	774	IN	Data Raw: 35 33 62 0d 0a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 69 73 63 6c 61 69 6d 65 72 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 60 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 20 63 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 30 30 34 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 70 61 64 64 69 6e 67 3a 30 3b 22 3e 0a 09 09 09 09 3c 64 69 76 20 73 74 79 6c 65 3d 22 62 6f 78 2d 73 68 61 64 6f 77 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 39 38 30 33 39 29 20 31 70 78 20 31 70 78 20 33 70 78 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 6d 61 72 Data Ascii: 53bdocument.getElementById("disclaimer").innerHTML = `<div class="main container" style="z-index: 1000004;width:100%; padding:0;"><div style="box-shadow: rgba(0, 0, 0, 0.298039) 1px 1px 3px; width: 100%; line-height: 15px;overflow: hidden; mar
2025-02-24 17:05:11 UTC	572	IN	Data Raw: 64 73 20 69 73 20 74 68 65 20 72 65 74 61 69 6c 65 72 20 6f 66 20 74 68 69 73 20 70 72 6f 64 75 63 74 2e 20 0a 09 09 09 09 09 42 75 79 47 6f 6f 64 73 20 69 73 20 61 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 20 6f 66 20 42 75 79 47 6f 6f 64 73 2c 20 61 20 44 65 6c 61 77 61 72 65 20 63 6f 72 70 6f 72 61 74 69 6f 6e 20 6c 6f 63 61 74 65 64 20 61 74 20 31 32 30 31 20 4e 20 4f 72 61 6e 67 65 20 53 74 72 65 65 74 20 53 75 69 74 65 20 23 37 32 32 33 2c 20 57 69 6c 6d 69 6e 67 74 6f 6e 2c 20 44 45 2c 20 31 39 38 30 31 2c 20 55 53 41 20 61 6e 64 20 75 73 65 64 20 62 79 20 70 65 72 6d 69 73 73 69 6f 6e 2e 20 0a 09 09 09 09 09 42 75 79 47 6f 6f 64 73 20 72 6f 6c 65 20 61 73 20 72 65 74 61 69 6c 65 72 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6e 73 74 Data Ascii: ds is the retailer of this product. BuyGoods is a registered trademark of BuyGoods, a Delaware corporation located at 1201 N Orange Street Suite #7223, Wilmington, DE, 19801, USA and used by permission. BuyGoods role as retailer does not const
2025-02-24 17:05:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:10 UTC	1090	OUT	GET /imgs/landing/volume-icon.svg HTTP/1.1 Host: mindboostingtips.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlVnbkhBRlI4QnJXeVJZdWpSU1JsZXc9PSIsInZhbHVlIjoiRFR2ZjIxVmZLN2tuTm9SdFpTa0hUalk2KzJCcHNINW81b3lHaXFNMzBEMFV1bmlaSE5DS0lBN1FXT2xYSzdIdG1tN2VHR0Jqa0tXTnFFTVRxS3prRHZ2aDluVlpPenRaM09Sdlcyclp1MmQwS1JTV2tUaVlVWjZadlFYbEZyMjciLCJtYWMiOiI2MmEwY2RhZWNlYTliY2QzZTE4MWVlMDQxNGUwY2Y5NGExYWRkZGQ5NGJiY2Y3YzE5NTlmODU3NDdkMjVkYjU5In0%3D; brain_savior_session=eyJpdiI6Ik4vWXRIeWlvbExhUHJCUm1aQ3J1Q3c9PSIsInZhbHVlIjoiSnZ2aVJRTDh4MWd2UlRMRWorRXRHMmRxYzljQ0gzV1JIR05xdzc5eW5SakdSUUFRMjlPUUtsdFJOUDRaTHEyZXZaU05kOWlIbEtlZWdzZmZYY1I5dDh1K1VhOURCSXFZaGxGRzRpT08rdEZITjhqVUdRM0tISDU1ak1lK0xFSW8iLCJtYWMiOiI5MDdmNTdmMDExOTc3MzFiZGIyYmFjYjcwZTc4Yjc1YzdkNWY2MThiYjkzOTUzNzI3M2EyNGIzMTc3NjdjZTdiIn0%3D; showoffers=1
2025-02-24 17:05:10 UTC	381	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:10 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Wed, 05 Apr 2023 06:43:59 GMT ETag: "2dd-5f8911de449c0" Accept-Ranges: bytes Content-Length: 733 Cache-Control: max-age=31536000 Expires: Tue, 24 Feb 2026 17:05:10 GMT Vary: Accept-Encoding X-Robots-Tag: noindex, nofollow Connection: close Content-Type: image/svg+xml
2025-02-24 17:05:10 UTC	733	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 35 20 32 32 4c 31 38 2e 35 20 31 36 48 32 33 2e 35 56 38 48 31 38 2e 35 4c 31 30 2e 35 20 32 56 32 32 5a 22 20 73 74 72 6f 6b 65 3d 22 23 38 32 37 42 37 39 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f Data Ascii: <svg width="25" height="24" viewBox="0 0 25 24" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0)"><path d="M10.5 22L18.5 16H23.5V8H18.5L10.5 2V22Z" stroke="#827B79" stroke-width="2" stroke-miterlimit="10" stroke-linecap="square"/

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:10 UTC	1257	OUT	GET /imgs/logo.webp HTTP/1.1 Host: mindboostingtips.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlVnbkhBRlI4QnJXeVJZdWpSU1JsZXc9PSIsInZhbHVlIjoiRFR2ZjIxVmZLN2tuTm9SdFpTa0hUalk2KzJCcHNINW81b3lHaXFNMzBEMFV1bmlaSE5DS0lBN1FXT2xYSzdIdG1tN2VHR0Jqa0tXTnFFTVRxS3prRHZ2aDluVlpPenRaM09Sdlcyclp1MmQwS1JTV2tUaVlVWjZadlFYbEZyMjciLCJtYWMiOiI2MmEwY2RhZWNlYTliY2QzZTE4MWVlMDQxNGUwY2Y5NGExYWRkZGQ5NGJiY2Y3YzE5NTlmODU3NDdkMjVkYjU5In0%3D; brain_savior_session=eyJpdiI6Ik4vWXRIeWlvbExhUHJCUm1aQ3J1Q3c9PSIsInZhbHVlIjoiSnZ2aVJRTDh4MWd2UlRMRWorRXRHMmRxYzljQ0gzV1JIR05xdzc5eW5SakdSUUFRMjlPUUtsdFJOUDRaTHEyZXZaU05kOWlIbEtlZWdzZmZYY1I5dDh1K1VhOURCSXFZaGxGRzRpT08rdEZITjhqVUdRM0tISDU1ak1lK0xFSW8iLCJtYWMiOiI5MDdmNTdmMDExOTc3MzFiZGIyYmFjYjcwZTc4Yjc1YzdkNWY2MThiYjkzOTUzNzI3M2EyNGIzMTc3NjdjZTdiIn0%3D; showoffers=1; sessid2=sessid20250224170510993; spi_funnel_codename=; aff_id=114767; sid=1659%7C10559_sessid2025022417054973; campaign_id=; referrer=8.46.123.189:rejrixe.com:mindboostingtips.com
2025-02-24 17:05:11 UTC	355	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:10 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Wed, 05 Apr 2023 06:43:02 GMT ETag: "2196-5f8911a7e8980" Accept-Ranges: bytes Content-Length: 8598 Cache-Control: max-age=172800 Expires: Wed, 26 Feb 2025 17:05:10 GMT X-Robots-Tag: noindex, nofollow Connection: close Content-Type: image/webp
2025-02-24 17:05:11 UTC	7837	IN	Data Raw: 52 49 46 46 8e 21 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 b3 00 00 45 00 00 41 4c 50 48 5a 0f 00 00 01 b0 86 ff bf 6a 29 d5 ef bf d6 da e7 0c 67 68 04 69 03 67 e8 2e a5 b9 5c b0 b8 76 37 d7 b8 61 dc b6 0b 5b 09 8b b0 5b f1 da dd 49 d8 41 0d 29 a1 0c 48 4a 39 b1 f7 5e 6b fd 5e ec 3d e7 0c a3 cc eb 88 98 00 ec c5 35 d0 f4 d8 47 cb b6 55 54 85 24 59 b1 e2 b9 f3 5a 43 50 bf 0d d0 68 c2 02 92 96 e4 fa f9 cf 4d bd f2 c2 33 8f 68 53 cf 91 00 a5 cf 91 71 18 f2 d7 f7 2e 1b 9c 45 5d 16 d9 6b 19 f4 5b c8 ea d8 5b be 7d 62 11 a0 32 c9 40 ea 80 c9 64 03 b3 b7 d2 e8 b6 9c 95 9e 96 37 35 83 ce 04 4a 50 27 55 c6 60 2f ae 64 9f 2f 58 45 7a 5e 0c c9 28 d4 51 65 14 70 c0 99 93 5e 7c 61 ef 24 62 ee 60 95 a7 e5 24 18 8d 3a 2a 0a 28 3a f5 a5 35 bf 92 dc 3b 29 0c Data Ascii: RIFF!WEBPVP8XEALPHZj)ghig.\v7a[[IA)HJ9^k^=5GUT$YZCPhM3hSq.E]k[[}b2@d75JP'U`/d/XEz^(Qep^\|a$b`$:*(:5;)
2025-02-24 17:05:11 UTC	761	IN	Data Raw: 8e e5 20 0f 2e 55 3b 46 e0 e8 53 db 33 fa 19 95 61 3f c6 c7 d6 ad bc 7c 36 37 3f f6 67 0f ff fd 4d 23 cc 0b 66 37 16 8e be 34 dc 77 23 f9 eb 4b 18 28 7f 3e d5 f3 7f e8 20 0c d9 11 30 a0 c8 f2 32 5d f2 fe 54 c1 13 8f c1 de cd da 94 b4 eb ab 77 cb 6c 1d 6e e2 66 da 9b 16 6c ca 67 8d cb b0 dc 15 e8 ac 95 81 fe e6 f5 af ef e1 52 10 72 a2 00 17 a6 f8 20 3e 5b 67 b3 a6 2b 4e 91 e9 ae 01 0a 1f 03 0b 11 9c 8b 82 32 da f0 78 ca 00 50 be 34 02 da f9 6e e1 38 91 80 8f 10 9a 73 71 52 5c ae 56 97 2e f7 84 66 ee 82 65 e1 0b be 0a f8 2f 58 0d 94 e6 74 a6 aa e3 a8 9e 80 e1 f1 4e 63 9f 1c e8 e1 b3 c8 b1 f9 a4 95 f9 d9 9f c3 b8 8e 10 cc 3e a3 5d 3d 8b 7d 1f 48 e8 f8 9c 2b 21 88 b1 9c 75 7f 1a 72 55 64 e7 d1 f4 3d 59 8d 80 c4 0a 07 c6 95 40 4f 0f 6f 0c b0 27 00 ed b8 48 6d Data Ascii: .U;FS3a?\|67?gM#f74w#K(> 02]TwlnflgRr >[g+N2xP4n8sqR\V.fe/XtNc>]=}H+!urUd=Y@Oo'Hm

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:11 UTC	541	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mindboostingtips.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:11 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-RVGztP7b' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-02-24 17:05:11 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-02-24 17:05:11 UTC	1	IN	Data Raw: 2f Data Ascii: /
2025-02-24 17:05:11 UTC	14670	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2025-02-24 17:05:11 UTC	16384	IN	Data Raw: 56 41 52 49 41 42 4c 45 22 7c 7c 64 3d 3d 3d 22 47 54 4d 22 7c 7c 64 3d 3d 3d 22 4a 53 4f 4e 5f 4c 44 22 7c 7c 64 3d 3d 3d 22 4d 45 54 41 5f 54 41 47 22 7c 7c 64 3d 3d 3d 22 4f 50 45 4e 5f 47 52 41 50 48 22 7c 7c 64 3d 3d 3d 22 52 44 46 41 22 7c 7c 64 3d 3d 3d 22 53 43 48 45 4d 41 5f 44 4f 54 5f 4f 52 47 22 7c 7c 64 3d 3d 3d 22 55 52 49 22 3f 64 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d Data Ascii: VARIABLE"\|\|d==="GTM"\|\|d==="JSON_LD"\|\|d==="META_TAG"\|\|d==="OPEN_GRAPH"\|\|d==="RDFA"\|\|d==="SCHEMA_DOT_ORG"\|\|d==="URI"?d:null;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a=
2025-02-24 17:05:11 UTC	16384	IN	Data Raw: 2c 4c 4f 57 45 52 5f 4d 49 43 52 4f 44 41 54 41 5f 44 45 4c 41 59 3a 22 6c 6f 77 65 72 5f 6d 69 63 72 6f 64 61 74 61 5f 64 65 6c 61 79 22 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 73 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f Data Ascii: ,LOWER_MICRODATA_DELAY:"lower_microdata_delay"}})();return j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExperimentsTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsMo
2025-02-24 17:05:11 UTC	16384	IN	Data Raw: 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 54 79 70 65 64 65 66 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 Data Ascii: l.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsFBEventsPixelTypedef"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.stri
2025-02-24 17:05:11 UTC	1713	IN	Data Raw: 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6a 5b 61 5b 30 5d 5d 2c 61 5b 31 5d 29 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 67 5b 6b 28 61 29 5d 3b 62 3d 62 26 26 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 2e 63 61 6c 6c 26 26 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 64 3f 62 3a 6e 75 6c 6c 3b 62 21 3d 3d 6e 75 6c 6c 26 26 28 6a 5b 61 5b 30 5d 5d 3d 6a 5b 61 5b 30 5d 5d 7c 7c 7b 7d 2c 6a 5b 61 5b 30 5d 5d 5b 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 Data Ascii: roperty.call(j[a[0]],a[1]))return!0;var b=g[k(a)];b=b&&b.getProtocol.call&&b.getProtocol()===d?b:null;b!==null&&(j[a[0]]=j[a[0]]\|\|{},j[a[0]][a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(
2025-02-24 17:05:11 UTC	14671	IN	Data Raw: 65 45 6e 63 6f 64 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 62 28 61 2c 63 29 3b 61 21 3d 6e 75 6c 6c 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 61 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 6e 63 6f 64 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 69 66 28 67 2e 66 62 71 3d 3d 6e 75 6c 6c 7c 7c 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d Data Ascii: eEncodings",value:function(a){a=b(a,c);a!=null&&(this.moduleEncodings=a)}},{key:"addEncodings",value:function(a){var c=this;if(g.fbq==null\|\|g.fbq.__fbeventsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedM
2025-02-24 17:05:11 UTC	16384	IN	Data Raw: 62 2e 6d 61 70 4f 66 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 61 74 63 68 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 Data Ascii: b.mapOf(b["boolean"]()))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsSendBatch",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEv
2025-02-24 17:05:11 UTC	16384	IN	Data Raw: 2c 62 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 22 3b 6e 28 74 68 69 73 2c 61 29 3b 76 61 72 20 63 3d 6a 28 74 68 69 73 2c 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 3b 63 2e 6e 61 6d 65 3d 22 46 42 45 76 65 6e 74 73 43 6f 65 72 63 69 6f 6e 45 72 72 6f 72 22 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 20 61 7d 28 45 72 72 6f 72 29 3b 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 61 29 7d 66 75 Data Ascii: ,b);function a(){var b=arguments.length>0&&arguments[0]!==void 0?arguments[0]:"";n(this,a);var c=j(this,(a.__proto__\|\|Object.getPrototypeOf(a)).call(this,b));c.name="FBEventsCoercionError";return c}return a}(Error);function h(a){return Object.values(a)}fu

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:11 UTC	781	OUT	GET /affiliates/go/conversion/iframe/bg?a=7753&t=99ea197081eaae3f99dedb2c45f8d967&s=sessid20250224170510993 HTTP/1.1 Host: buygoods.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mindboostingtips.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:11 UTC	533	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 17:05:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-server: WEB_2 strict-transport-security: max-age=15552000; includeSubDomains cf-cache-status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Set-Cookie: __cflb=02DiuEzB32VBtgHEATPXr64oJeuFiEXhFHHryuvFdrDBi; SameSite=Lax; path=/; expires=Tue, 25-Feb-25 16:05:11 GMT; HttpOnly Server: cloudflare CF-RAY: 917109fdeef37293-EWR alt-svc: h3=":443"; ma=86400
2025-02-24 17:05:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:11 UTC	425	OUT	GET /dfe92173-5a98-4876-b33e-c1ccecd3aef1/players/676ed89a956c3f600a607753/player.js HTTP/1.1 Host: scripts.converteai.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:12 UTC	460	IN	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Sat, 11 Jan 2025 15:48:04 GMT ETag: "f51ccf342127abe155811eb2fd3ec90f" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: XcwR8MgymDmWra3elplwmo9vqDmOe-C-qmNYROPyNwslAUnKJI-52g== Date: Mon, 24 Feb 2025 17:05:12 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" Content-Length: 4306 Connection: close
2025-02-24 17:05:12 UTC	4306	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 76 54 75 72 62 43 68 61 6e 67 65 50 6c 61 79 65 72 28 29 7b 21 76 54 75 72 62 4f 72 69 67 69 6e 61 6c 50 6c 61 79 65 72 49 73 4d 6f 62 69 6c 65 26 26 76 54 75 72 62 44 65 76 69 63 65 49 73 4d 6f 62 69 6c 65 7c 7c 76 54 75 72 62 4f 72 69 67 69 6e 61 6c 50 6c 61 79 65 72 49 73 4d 6f 62 69 6c 65 26 26 21 76 54 75 72 62 44 65 76 69 63 65 49 73 4d 6f 62 69 6c 65 3f 28 76 54 75 72 62 50 6c 61 79 65 72 3d 76 54 75 72 62 41 6c 74 65 72 6e 61 74 69 76 65 50 6c 61 79 65 72 2c 76 54 75 72 62 53 72 63 49 64 3d 76 54 75 72 62 50 6c 61 79 65 72 2e 69 64 29 3a 76 54 75 72 62 50 6c 61 79 65 72 3d 76 54 75 72 62 4f 72 69 67 69 6e 61 6c 50 6c 61 79 65 72 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 Data Ascii: function vTurbChangePlayer(){!vTurbOriginalPlayerIsMobile&&vTurbDeviceIsMobile\|\|vTurbOriginalPlayerIsMobile&&!vTurbDeviceIsMobile?(vTurbPlayer=vTurbAlternativePlayer,vTurbSrcId=vTurbPlayer.id):vTurbPlayer=vTurbOriginalPlayer;var e=document.getElementById(

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:11 UTC	566	OUT	GET /lib/js/smartplayer/v1/smartplayer.min.js HTTP/1.1 Host: scripts.converteai.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mindboostingtips.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:11 UTC	470	IN	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Thu, 20 Feb 2025 18:26:22 GMT ETag: "845e3e0d380ddf20a3689dc669b52647" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: DUS51-P2 X-Amz-Cf-Id: 4__Y9TEXL9upigAUxDrQ3GobPA5i_jeyEn3ge18UVTguXkwg0sq69A== Date: Mon, 24 Feb 2025 17:05:11 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43" Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2025-02-24 17:05:11 UTC	15914	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 48 6c 73 3d 65 28 29 3a 74 2e 48 6c 73 3d 65 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f Data Ascii: 0000C000"undefined"!=typeof window&&function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.Hls=e():t.Hls=e()}(this,(function(){return functio
2025-02-24 17:05:12 UTC	15842	IN	Data Raw: 61 72 20 65 3d 67 28 74 2e 64 61 74 61 2c 21 30 29 2c 72 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 74 2e 64 61 74 61 2e 73 75 62 61 72 72 61 79 28 65 2e 6c 65 6e 67 74 68 2b 31 29 29 3b 72 65 74 75 72 6e 7b 6b 65 79 3a 74 2e 74 79 70 65 2c 69 6e 66 6f 3a 65 2c 64 61 74 61 3a 72 2e 62 75 66 66 65 72 7d 7d 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 28 74 2e 73 69 7a 65 3c 32 29 29 7b 69 66 28 22 54 58 58 58 22 3d 3d 3d 74 2e 74 79 70 65 29 7b 76 61 72 20 65 3d 31 2c 72 3d 67 28 74 2e 64 61 74 61 2e 73 75 62 61 72 72 61 79 28 65 29 2c 21 30 29 3b 65 2b 3d 72 2e 6c 65 6e 67 74 68 2b 31 3b 76 61 72 20 61 3d 67 28 74 2e 64 61 74 61 2e 73 75 62 61 72 72 61 79 28 65 29 29 3b 72 65 74 75 72 6e 7b 6b 65 79 3a 74 2e 74 79 70 65 2c 69 6e 66 6f Data Ascii: ar e=g(t.data,!0),r=new Uint8Array(t.data.subarray(e.length+1));return{key:t.type,info:e,data:r.buffer}}},m=function(t){if(!(t.size<2)){if("TXXX"===t.type){var e=1,r=g(t.data.subarray(e),!0);e+=r.length+1;var a=g(t.data.subarray(e));return{key:t.type,info
2025-02-24 17:05:12 UTC	16384	IN	Data Raw: 6f 54 72 61 63 6b 2e 69 73 41 41 43 3d 21 30 2c 74 68 69 73 2e 61 61 63 4f 76 65 72 46 6c 6f 77 3d 6e 75 6c 6c 2c 74 68 69 73 2e 61 61 63 4c 61 73 74 50 54 53 3d 6e 75 6c 6c 2c 74 68 69 73 2e 61 76 63 53 61 6d 70 6c 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 61 75 64 69 6f 43 6f 64 65 63 3d 65 2c 74 68 69 73 2e 76 69 64 65 6f 43 6f 64 65 63 3d 72 2c 74 68 69 73 2e 5f 64 75 72 61 74 69 6f 6e 3d 61 7d 2c 65 2e 72 65 73 65 74 54 69 6d 65 53 74 61 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 2e 72 65 73 65 74 43 6f 6e 74 69 67 75 69 74 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 61 75 64 69 6f 54 72 61 63 6b 2c 65 3d 74 68 69 73 2e 5f 61 76 63 54 72 61 63 6b 2c 72 3d 74 68 69 73 2e 5f 69 64 33 54 72 61 63 6b 3b 74 26 26 28 74 2e Data Ascii: oTrack.isAAC=!0,this.aacOverFlow=null,this.aacLastPTS=null,this.avcSample=null,this.audioCodec=e,this.videoCodec=r,this._duration=a},e.resetTimeStamp=function(){},e.resetContiguity=function(){var t=this._audioTrack,e=this._avcTrack,r=this._id3Track;t&&(t.
2025-02-24 17:05:12 UTC	1024	IN	Data Raw: 68 69 73 2e 72 65 6d 75 78 65 72 3b 74 26 26 65 26 26 28 74 2e 72 65 73 65 74 43 6f 6e 74 69 67 75 69 74 79 28 29 2c 65 2e 72 65 73 65 74 4e 65 78 74 54 69 6d 65 73 74 61 6d 70 28 29 29 7d 2c 65 2e 72 65 73 65 74 49 6e 69 74 53 65 67 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 61 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 64 65 6d 75 78 65 72 2c 69 3d 74 68 69 73 2e 72 65 6d 75 78 65 72 3b 6e 26 26 69 26 26 28 6e 2e 72 65 73 65 74 49 6e 69 74 53 65 67 6d 65 6e 74 28 65 2c 72 2c 61 29 2c 69 2e 72 65 73 65 74 49 6e 69 74 53 65 67 6d 65 6e 74 28 74 2c 65 2c 72 29 29 7d 2c 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 64 65 6d 75 78 65 72 26 26 28 74 68 69 73 2e 64 65 6d 75 78 65 72 2e 64 65 73 74 72 6f 79 28 29 2c Data Ascii: his.remuxer;t&&e&&(t.resetContiguity(),e.resetNextTimestamp())},e.resetInitSegment=function(t,e,r,a){var n=this.demuxer,i=this.remuxer;n&&i&&(n.resetInitSegment(e,r,a),i.resetInitSegment(t,e,r))},e.destroy=function(){this.demuxer&&(this.demuxer.destroy(),
2025-02-24 17:05:12 UTC	328	IN	Data Raw: 30 30 30 30 30 31 33 43 0d 0a 68 69 73 2e 76 65 6e 64 6f 72 2c 6f 3d 65 2e 61 75 64 69 6f 43 6f 64 65 63 2c 6c 3d 65 2e 64 65 66 61 75 6c 74 49 6e 69 74 50 74 73 2c 63 3d 65 2e 64 75 72 61 74 69 6f 6e 2c 75 3d 65 2e 69 6e 69 74 53 65 67 6d 65 6e 74 44 61 74 61 2c 64 3d 65 2e 76 69 64 65 6f 43 6f 64 65 63 2c 68 3d 30 2c 66 3d 73 74 2e 6c 65 6e 67 74 68 3b 68 3c 66 3b 68 2b 2b 29 69 66 28 73 74 5b 68 5d 2e 64 65 6d 75 78 2e 70 72 6f 62 65 28 74 29 29 7b 72 3d 73 74 5b 68 5d 3b 62 72 65 61 6b 7d 72 7c 7c 28 70 2e 62 2e 77 61 72 6e 28 22 46 61 69 6c 65 64 20 74 6f 20 66 69 6e 64 20 64 65 6d 75 78 65 72 20 62 79 20 70 72 6f 62 69 6e 67 20 66 72 61 67 2c 20 74 72 65 61 74 69 6e 67 20 61 73 20 6d 70 34 20 70 61 73 73 74 68 72 6f 75 67 68 22 29 2c 72 3d 7b 64 65 Data Ascii: 0000013Chis.vendor,o=e.audioCodec,l=e.defaultInitPts,c=e.duration,u=e.initSegmentData,d=e.videoCodec,h=0,f=st.length;h<f;h++)if(st[h].demux.probe(t)){r=st[h];break}r\|\|(p.b.warn("Failed to find demuxer by probing frag, treating as mp4 passthrough"),r={de
2025-02-24 17:05:12 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 79 26 26 79 20 69 6e 73 74 61 6e 63 65 6f 66 20 76 7c 7c 28 74 68 69 73 2e 72 65 6d 75 78 65 72 3d 6e 65 77 20 76 28 6e 2c 61 2c 69 2c 73 29 29 2c 6d 26 26 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 7c 7c 28 74 68 69 73 2e 64 65 6d 75 78 65 72 3d 6e 65 77 20 67 28 6e 2c 61 2c 69 29 2c 74 68 69 73 2e 70 72 6f 62 65 3d 67 2e 70 72 6f 62 65 29 2c 74 68 69 73 2e 72 65 73 65 74 49 6e 69 74 53 65 67 6d 65 6e 74 28 75 2c 6f 2c 64 2c 63 29 2c 74 68 69 73 2e 72 65 73 65 74 49 6e 69 74 69 61 6c 54 69 6d 65 73 74 61 6d 70 28 6c 29 7d 2c 65 2e 6e 65 65 64 73 50 72 6f 62 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 64 65 6d 75 78 65 72 7c 7c 21 74 68 69 73 2e 72 65 6d 75 78 65 72 7c 7c 65 Data Ascii: 00004000y&&y instanceof v\|\|(this.remuxer=new v(n,a,i,s)),m&&m instanceof g\|\|(this.demuxer=new g(n,a,i),this.probe=g.probe),this.resetInitSegment(u,o,d,c),this.resetInitialTimestamp(l)},e.needsProbing=function(t,e,r){return!this.demuxer\|\|!this.remuxer\|\|e
2025-02-24 17:05:12 UTC	12	IN	Data Raw: 3e 31 36 26 32 35 35 2c 65 3e 0d 0a Data Ascii: >16&255,e>
2025-02-24 17:05:12 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 3e 38 26 32 35 35 2c 32 35 35 26 65 2c 61 3e 3e 32 34 2c 61 3e 3e 31 36 26 32 35 35 2c 61 3e 3e 38 26 32 35 35 2c 32 35 35 26 61 2c 6e 3e 3e 32 34 2c 6e 3e 3e 31 36 26 32 35 35 2c 6e 3e 3e 38 26 32 35 35 2c 32 35 35 26 6e 2c 30 2c 31 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 36 34 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 32 35 35 2c 32 35 35 2c 32 35 35 2c 32 35 35 5d 29 Data Ascii: 00004000>8&255,255&e,a>>24,a>>16&255,a>>8&255,255&a,n>>24,n>>16&255,n>>8&255,255&n,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,255,255,255])
2025-02-24 17:05:12 UTC	12	IN	Data Raw: 5d 29 3b 72 65 74 75 72 6e 20 0d 0a Data Ascii: ]);return
2025-02-24 17:05:12 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 69 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 7c 7c 74 5b 72 5d 2e 6c 65 6e 67 74 68 3e 30 7d 29 2c 21 31 29 7d 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 3d 65 7c 7c 7b 7d 3b 76 61 72 20 6e 3d 7b 6d 61 69 6e 3a 72 2e 6d 7d 2c 6f 3d 65 2e 61 6c 6c 3f 7b 6d 61 69 6e 3a 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 2e 6d 61 69 6e 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 7b 6d 61 69 6e 3a 5b 65 5d 7d 2c 61 3d 7b 6d 61 69 6e 3a 5b 5d 7d 2c 6e 3d 7b 6d 61 69 6e 3a 7b 7d 7d 3b 73 28 72 29 3b 29 66 6f 72 28 76 61 Data Ascii: 00004000i}function s(t){return Object.keys(t).reduce((function(e,r){return e\|\|t[r].length>0}),!1)}t.exports=function(t,e){e=e\|\|{};var n={main:r.m},o=e.all?{main:Object.keys(n.main)}:function(t,e){for(var r={main:[e]},a={main:[]},n={main:{}};s(r);)for(va

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:12 UTC	1391	OUT	GET /signals/config/958043822230367?v=2.9.184&r=stable&domain=mindboostingtips.com&hme=93c44828b638838a88daf3a14a90ff297f7fc4ade758f21de5500c9f17542765&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C194%2C191%2C192%2C34%2C144%2C15%2C50%2C198%2C197%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mindboostingtips.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:12 UTC	1762	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net facebook.com .facebook.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com cdninstagram.com .cdninstagram.com;script-src 'nonce-9REVyn2K' .facebook.com .fbcdn.net .facebook.net blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net facebook.com .facebook.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com cdninstagram.com .cdninstagram.com;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self';img-src 'self' data: blob: facebook.net .facebook.net facebook.com .facebook.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-02-24 17:05:12 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-02-24 17:05:12 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2025-02-24 17:05:12 UTC	1491	IN	Data Raw: 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 Data Ascii: ory);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMe
2025-02-24 17:05:12 UTC	14893	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 66 29 7b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 7d 3b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 73 74 61 72 74 3a 75 6e 77 61 6e 74 65 64 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e 69 64 29 3b 76 61 72 20 68 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 62 2e 69 64 2c 22 55 6e 77 61 6e 74 65 64 44 61 74 61 22 29 3b 69 66 28 21 68 29 72 65 74 75 72 6e 7b 7d 3b 68 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 62 2e 69 64 2c 22 50 72 6f 74 65 63 74 65 64 44 61 74 61 4d 6f 64 65 22 29 3b 76 61 72 20 6b 3d 64 2e 67 65 74 28 62 2e 69 64 2c 22 75 6e 77 61 6e 74 65 64 44 61 74 61 22 29 3b 69 66 28 6b 3d 3d 6e 75 6c 6c 29 72 65 74 Data Ascii: function(b,c,f){if(b==null)return{};a.performanceMark("fbevents:start:unwantedDataProcessing",b.id);var h=e.optIns.isOptedIn(b.id,"UnwantedData");if(!h)return{};h=e.optIns.isOptedIn(b.id,"ProtectedDataMode");var k=d.get(b.id,"unwantedData");if(k==null)ret
2025-02-24 17:05:12 UTC	1500	IN	Data Raw: 65 76 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 22 29 3b 69 66 28 65 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 31 3b 62 3d 65 2e 75 6e 76 65 72 69 66 69 65 64 45 76 65 6e 74 4e 61 6d 65 73 3b 65 3d 65 2e 72 65 73 74 72 69 63 74 65 64 45 76 65 6e 74 4e 61 6d 65 73 3b 76 61 72 20 66 3d 21 31 2c 69 3d 21 31 3b 62 26 26 28 66 3d 62 2e 69 6e 63 6c 75 64 65 73 28 61 29 2c 66 26 26 68 28 7b 74 79 70 65 3a 22 55 4e 56 45 52 49 46 49 45 44 5f 45 56 45 4e 54 22 7d 29 29 3b 65 26 26 28 69 3d 65 2e 69 6e 63 6c 75 64 65 73 28 61 29 2c 69 26 26 68 28 7b 74 79 70 65 3a 22 52 45 53 54 52 49 43 54 45 44 5f 45 56 45 4e 54 22 7d 29 29 3b 72 65 74 75 72 6e 20 66 7c 7c 69 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d Data Ascii: eventValidation");if(e==null)return!1;b=e.unverifiedEventNames;e=e.restrictedEventNames;var f=!1,i=!1;b&&(f=b.includes(a),f&&h({type:"UNVERIFIED_EVENT"}));e&&(i=e.includes(a),i&&h({type:"RESTRICTED_EVENT"}));return f\|\|i})})})();return e.exports}(a,b,c,d)}
2025-02-24 17:05:13 UTC	14884	IN	Data Raw: 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 3b 76 61 72 20 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 64 3d 63 2e 6b 65 79 73 2c 67 3d 63 2e 65 61 63 68 3b 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 22 29 3b 76 61 72 20 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 Data Ascii: ={exports:{}};e.exports;(function(){"use strict";f.getFbeventsModules("SignalsParamList");var c=f.getFbeventsModules("SignalsFBEventsUtils"),d=c.keys,g=c.each;c=f.getFbeventsModules("SignalsFBEventsPlugin");var h=f.getFbeventsModules("SignalsFBEventsSendE
2025-02-24 17:05:13 UTC	1500	IN	Data Raw: 6e 75 6c 6c 3f 62 2e 64 65 6c 61 79 49 6e 4d 73 3a 74 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 62 2e 64 69 73 61 62 6c 65 42 61 63 6b 75 70 54 69 6d 65 6f 75 74 21 3d 6e 75 6c 6c 3f 62 2e 64 69 73 61 62 6c 65 42 61 63 6b 75 70 54 69 6d 65 6f 75 74 3a 21 31 3b 76 3d 3d 3d 6e 75 6c 6c 26 26 21 62 26 26 28 76 3d 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 78 28 64 2c 75 2c 73 29 7d 2c 63 29 29 7d 29 3b 69 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 77 29 7b 76 61 72 20 62 3d 61 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 7c 7c 6e 65 77 20 63 28 29 2c 65 3d 21 30 2c 66 3d 21 31 2c 67 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 68 3d 72 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e Data Ascii: null?b.delayInMs:t;b=b!=null&&b.disableBackupTimeout!=null?b.disableBackupTimeout:!1;v===null&&!b&&(v=a.setTimeout(function(){x(d,u,s)},c))});i.listen(function(a){if(!w){var b=a.customParams\|\|new c(),e=!0,f=!1,g=void 0;try{for(var h=r[typeof Symbol==="fun
2025-02-24 17:05:13 UTC	14884	IN	Data Raw: 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 Data Ascii: .__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ens
2025-02-24 17:05:13 UTC	2115	IN	Data Raw: 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 66 62 71 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 39 35 38 30 34 33 38 32 32 32 33 30 33 36 37 22 2c 20 7b 5f 5f 66 62 45 76 65 6e 74 73 50 6c 75 67 69 6e 3a 20 31 2c 20 70 6c 75 67 69 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 66 62 71 2c 20 69 6e 73 74 61 6e 63 65 2c 20 63 6f 6e 66 69 67 29 20 7b 20 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 39 35 38 30 34 33 38 32 32 32 33 30 33 36 37 22 2c 20 22 49 57 4c 42 6f 6f 74 73 74 72 61 70 70 65 72 22 2c 20 74 72 75 65 29 3b 0a 63 6f 6e 66 69 67 2e 73 65 74 28 22 39 35 38 30 34 33 38 32 32 32 33 30 33 36 37 22 2c 20 22 63 6f 6f Data Ascii: ment,location,history);fbq.registerPlugin("958043822230367", {__fbEventsPlugin: 1, plugin: function(fbq, instance, config) { fbq.loadPlugin("iwlbootstrapper");instance.optIn("958043822230367", "IWLBootstrapper", true);config.set("958043822230367", "coo
2025-02-24 17:05:13 UTC	4064	IN	Data Raw: 65 64 45 76 65 6e 74 4e 61 6d 65 73 22 3a 5b 5d 2c 22 72 65 73 74 72 69 63 74 65 64 45 76 65 6e 74 4e 61 6d 65 73 22 3a 5b 5d 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 65 76 65 6e 74 76 61 6c 69 64 61 74 69 6f 6e 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 39 35 38 30 34 33 38 32 32 32 33 30 33 36 37 22 2c 20 22 45 76 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 22 2c 20 74 72 75 65 29 3b 0a 63 6f 6e 66 69 67 2e 73 65 74 28 22 39 35 38 30 34 33 38 32 32 32 33 30 33 36 37 22 2c 20 22 70 72 6f 74 65 63 74 65 64 44 61 74 61 4d 6f 64 65 22 2c 20 7b 22 73 74 61 6e 64 61 72 64 50 61 72 61 6d 73 22 3a 7b 22 6c 65 61 64 5f 65 76 65 6e 74 5f 73 6f 75 72 63 65 22 3a 74 72 75 65 2c 22 6e 65 74 5f 72 65 76 65 6e 75 65 22 3a 74 72 75 65 2c Data Ascii: edEventNames":[],"restrictedEventNames":[]});fbq.loadPlugin("eventvalidation");instance.optIn("958043822230367", "EventValidation", true);config.set("958043822230367", "protectedDataMode", {"standardParams":{"lead_event_source":true,"net_revenue":true,

Timestamp	Bytes transferred	Direction	Data
2025-02-24 17:05:12 UTC	1384	OUT	GET /signals/config/973652597448915?v=2.9.184&r=stable&domain=mindboostingtips.com&hme=93c44828b638838a88daf3a14a90ff297f7fc4ade758f21de5500c9f17542765&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C194%2C191%2C192%2C34%2C144%2C15%2C50%2C198%2C197%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://go.maxweb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 17:05:13 UTC	1762	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net facebook.com .facebook.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com cdninstagram.com .cdninstagram.com;script-src 'nonce-P7Vrnw2V' .facebook.com .fbcdn.net .facebook.net blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net facebook.com .facebook.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com cdninstagram.com .cdninstagram.com;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self';img-src 'self' data: blob: facebook.net .facebook.net facebook.com .facebook.com fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-02-24 17:05:13 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-02-24 17:05:13 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2025-02-24 17:05:13 UTC	1500	IN	Data Raw: 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 Data Ascii: ory);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMe
2025-02-24 17:05:13 UTC	1482	IN	Data Raw: 62 2c 63 2c 66 29 7b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 7d 3b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 73 74 61 72 74 3a 75 6e 77 61 6e 74 65 64 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e 69 64 29 3b 76 61 72 20 68 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 62 2e 69 64 2c 22 55 6e 77 61 6e 74 65 64 44 61 74 61 22 29 3b 69 66 28 21 68 29 72 65 74 75 72 6e 7b 7d 3b 68 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 62 2e 69 64 2c 22 50 72 6f 74 65 63 74 65 64 44 61 74 61 4d 6f 64 65 22 29 3b 76 61 72 20 6b 3d 64 2e 67 65 74 28 62 2e 69 64 2c 22 75 6e 77 61 6e 74 65 64 44 61 74 61 22 29 3b 69 66 28 6b 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 Data Ascii: b,c,f){if(b==null)return{};a.performanceMark("fbevents:start:unwantedDataProcessing",b.id);var h=e.optIns.isOptedIn(b.id,"UnwantedData");if(!h)return{};h=e.optIns.isOptedIn(b.id,"ProtectedDataMode");var k=d.get(b.id,"unwantedData");if(k==null)return{};var
2025-02-24 17:05:13 UTC	13402	IN	Data Raw: 22 7d 63 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 66 2c 69 29 7b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 73 74 61 72 74 3a 76 61 6c 69 64 61 74 65 55 72 6c 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e 69 64 29 3b 76 61 72 20 6a 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 62 2e 69 64 2c 22 55 6e 77 61 6e 74 65 64 44 61 74 61 22 29 3b 69 66 28 21 6a 29 72 65 74 75 72 6e 3b 6a 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 62 2e 69 64 2c 22 50 72 6f 74 65 63 74 65 64 44 61 74 61 4d 6f 64 65 22 29 3b 76 61 72 20 6c 3d 64 2e 67 65 74 28 62 2e 69 64 2c 22 75 6e 77 61 6e 74 65 64 44 61 74 61 22 29 3b 69 66 28 6c 3d 3d Data Ascii: "}c.listen(function(b,c,f,i){if(b==null)return;a.performanceMark("fbevents:start:validateUrlProcessing",b.id);var j=e.optIns.isOptedIn(b.id,"UnwantedData");if(!j)return;j=e.optIns.isOptedIn(b.id,"ProtectedDataMode");var l=d.get(b.id,"unwantedData");if(l==
2025-02-24 17:05:13 UTC	1491	IN	Data Raw: 65 76 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 22 29 3b 69 66 28 65 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 31 3b 62 3d 65 2e 75 6e 76 65 72 69 66 69 65 64 45 76 65 6e 74 4e 61 6d 65 73 3b 65 3d 65 2e 72 65 73 74 72 69 63 74 65 64 45 76 65 6e 74 4e 61 6d 65 73 3b 76 61 72 20 66 3d 21 31 2c 69 3d 21 31 3b 62 26 26 28 66 3d 62 2e 69 6e 63 6c 75 64 65 73 28 61 29 2c 66 26 26 68 28 7b 74 79 70 65 3a 22 55 4e 56 45 52 49 46 49 45 44 5f 45 56 45 4e 54 22 7d 29 29 3b 65 26 26 28 69 3d 65 2e 69 6e 63 6c 75 64 65 73 28 61 29 2c 69 26 26 68 28 7b 74 79 70 65 3a 22 52 45 53 54 52 49 43 54 45 44 5f 45 56 45 4e 54 22 7d 29 29 3b 72 65 74 75 72 6e 20 66 7c 7c 69 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d Data Ascii: eventValidation");if(e==null)return!1;b=e.unverifiedEventNames;e=e.restrictedEventNames;var f=!1,i=!1;b&&(f=b.includes(a),f&&h({type:"UNVERIFIED_EVENT"}));e&&(i=e.includes(a),i&&h({type:"RESTRICTED_EVENT"}));return f\|\|i})})})();return e.exports}(a,b,c,d)}
2025-02-24 17:05:13 UTC	14893	IN	Data Raw: 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 3b 76 61 72 20 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 64 3d 63 2e 6b 65 79 73 2c 67 3d 63 2e 65 61 63 68 3b 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 22 29 3b 76 61 72 20 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 Data Ascii: ,d){var e={exports:{}};e.exports;(function(){"use strict";f.getFbeventsModules("SignalsParamList");var c=f.getFbeventsModules("SignalsFBEventsUtils"),d=c.keys,g=c.each;c=f.getFbeventsModules("SignalsFBEventsPlugin");var h=f.getFbeventsModules("SignalsFBEv
2025-02-24 17:05:13 UTC	1500	IN	Data Raw: 6e 75 6c 6c 3f 62 2e 64 65 6c 61 79 49 6e 4d 73 3a 74 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 62 2e 64 69 73 61 62 6c 65 42 61 63 6b 75 70 54 69 6d 65 6f 75 74 21 3d 6e 75 6c 6c 3f 62 2e 64 69 73 61 62 6c 65 42 61 63 6b 75 70 54 69 6d 65 6f 75 74 3a 21 31 3b 76 3d 3d 3d 6e 75 6c 6c 26 26 21 62 26 26 28 76 3d 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 78 28 64 2c 75 2c 73 29 7d 2c 63 29 29 7d 29 3b 69 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 77 29 7b 76 61 72 20 62 3d 61 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 7c 7c 6e 65 77 20 63 28 29 2c 65 3d 21 30 2c 66 3d 21 31 2c 67 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 68 3d 72 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e Data Ascii: null?b.delayInMs:t;b=b!=null&&b.disableBackupTimeout!=null?b.disableBackupTimeout:!1;v===null&&!b&&(v=a.setTimeout(function(){x(d,u,s)},c))});i.listen(function(a){if(!w){var b=a.customParams\|\|new c(),e=!0,f=!1,g=void 0;try{for(var h=r[typeof Symbol==="fun
2025-02-24 17:05:13 UTC	1482	IN	Data Raw: 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 Data Ascii: .__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ens
2025-02-24 17:05:13 UTC	13402	IN	Data Raw: 69 6d 65 28 29 29 3b 76 61 72 20 75 3d 6c 28 70 29 3b 75 21 3d 6e 75 6c 6c 26 26 28 75 21 3d 22 65 6d 70 74 79 22 26 26 75 21 3d 22 66 62 22 26 26 75 21 3d 22 69 67 22 26 26 28 75 3d 22 6f 74 68 65 72 22 29 29 3b 67 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 7b 6c 65 72 3a 75 7d 7d 29 7d 63 61 74 63 68 28 61 29 7b 61 2e 6d 65 73 73 61 67 65 3d 22 5b 4c 61 73 74 45 78 74 65 72 6e 61 6c 52 65 66 65 72 72 65 72 20 45 72 72 6f 72 5d 22 2b 61 2e 6d 65 73 73 61 67 65 2c 6b 28 61 29 7d 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 Data Ascii: ime());var u=l(p);u!=null&&(u!="empty"&&u!="fb"&&u!="ig"&&(u="other"));g.listen(function(a){return{ler:u}})}catch(a){a.message="[LastExternalReferrer Error]"+a.message,k(a)}})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvent