Edit tour

Windows Analysis Report
https://u.masdnfikjentriu.ru/dfgbwerfsd/dfgjher.html

Overview

General Information

Sample URL:	https://u.masdnfikjentriu.ru/dfgbwerfsd/dfgjher.html
Analysis ID:	1654803
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Creates files inside the system directory

Deletes files inside the Windows folder

HTML title does not match URL

Suricata IDS alerts with low severity for network traffic

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1232 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 952 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,17515779017414841794,3202495408193389535,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2084 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u.masdnfikjentriu.ru/dfgbwerfsd/dfgjher.html" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-04-02T16:42:20.215008+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.8	49781	104.21.80.21	443	TCP
2025-04-02T16:42:21.454878+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.8	49790	104.21.80.21	443	TCP
2025-04-02T16:42:31.464590+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.8	49797	104.21.80.21	443	TCP
2025-04-02T16:42:32.337233+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.8	49798	104.21.80.21	443	TCP
2025-04-02T16:42:41.917914+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.8	49801	104.21.80.21	443	TCP
2025-04-02T16:42:42.620637+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.8	49803	104.21.80.21	443	TCP
2025-04-02T16:42:50.596717+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.8	49806	104.21.80.21	443	TCP
2025-04-02T16:42:51.611039+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.8	49807	104.21.80.21	443	TCP
2025-04-02T16:43:06.757315+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.8	49818	104.21.80.21	443	TCP
2025-04-02T16:43:07.317668+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.8	49819	104.21.80.21	443	TCP
2025-04-02T16:43:15.741506+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.8	49824	104.21.80.21	443	TCP
2025-04-02T16:43:16.607464+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.8	49825	104.21.80.21	443	TCP

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 02 Apr 2025 14:42:11 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeServer: cloudflareCache-Control: max-age=14400Cf-Cache-Status: EXPIREDCF-RAY: 92a117666cc74264-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_163.1.dr, chromecache_150.1.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_163.1.dr, chromecache_150.1.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_161.1.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_161.1.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_103.1.dr	String found in binary or memory: http://jquery.malsup.com/cycle/
Source: chromecache_103.1.dr	String found in binary or memory: http://jquery.malsup.com/license.html
Source: chromecache_161.1.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_161.1.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_103.1.dr	String found in binary or memory: http://malsup.com/jquery/cycle/
Source: chromecache_103.1.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_103.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_119.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Events/wheel
Source: chromecache_119.1.dr	String found in binary or memory: https://github.com/ten1seven/what-input
Source: chromecache_164.1.dr	String found in binary or memory: https://www.richtimepieces.com/

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 142.251.35.164:443 -> 192.168.2.8:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.50.75:443 -> 192.168.2.8:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.50.75:443 -> 192.168.2.8:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.74.28:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.74.28:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.74.28:443 -> 192.168.2.8:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.74.28:443 -> 192.168.2.8:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.74.28:443 -> 192.168.2.8:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.74.28:443 -> 192.168.2.8:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.74.28:443 -> 192.168.2.8:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.21:443 -> 192.168.2.8:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.21:443 -> 192.168.2.8:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.8:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.8:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.8:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.8:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.8:49809 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1232_97090708

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1232_97090708

Jump to behavior

Source: classification engine

Classification label: mal48.win@22/152@12/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,17515779017414841794,3202495408193389535,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2084 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u.masdnfikjentriu.ru/dfgbwerfsd/dfgjher.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,17515779017414841794,3202495408193389535,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2084 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://u.masdnfikjentriu.ru/dfgbwerfsd/dfgjher.html	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://www.richtimepieces.com/fonts/fontawesome-webfont.woff2?v=4.7.0	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/jscript_jquery.cycle.js	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/jquery.min.js	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/images/banners/slick02.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/c/cartier-xihzcn4hjpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/css/font-awesome.min.css	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/p/patek-philippe-jjxj7bmtjpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/slick.min.js	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/css/stylesheet_slick.css	100%	Avira URL Cloud	phishing
https://s.8o.cm/log.php?owa_timestamp=1743604960&owa_event_type=dom.click&owa_dom_element_name=keyword&owa_dom_element_value=%28not+set%29&owa_dom_element_id=%28not+set%29&owa_dom_element_class=mu-search-header-input&owa_dom_element_tag=INPUT&owa_page_url=https%3A%2F%2Fwww.richtimepieces.com%2F&owa_page_width=1280&owa_page_height=897&owa_dom_element_text=&owa_dom_element_x=897&owa_dom_element_y=61&owa_click_x=1002&owa_click_y=73&owa_is_new_visitor=true&owa_visitor_id=1743604938246737690&owa_fsts=1743604938&owa_dsfs=0&owa_last_req=&owa_session_id=1743604938814759907&owa_is_new_session=true&owa_nps=0&owa_dsps=0&owa_medium=referral&owa_source=u.masdnfikjentriu.ru&owa_search_terms=%28none%29&owa_session_referer=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_site_id=7196e4cfdc610562944c1a3a204dfa73&owa_HTTP_REFERER=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_page_title=Top+Watches+On+Sale%2C+Up+To+80%25+Off.&	0%	Avira URL Cloud	safe
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/jscript_menu_conf.js	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/logo.png	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/jscript_muencss.js	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/c/cartier-8qjct2bmjpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/images/banners/slick01.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/foundation.min.js	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/fonts/opensans-webfont.woff2	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/css/style.css	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/o/omega-hyd0tby7jpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://s.8o.cm/log.php?owa_timestamp=1743604969&owa_event_type=dom.click&owa_dom_element_name=keyword&owa_dom_element_value=%28not+set%29&owa_dom_element_id=%28not+set%29&owa_dom_element_class=mu-search-header-input&owa_dom_element_tag=INPUT&owa_page_url=https%3A%2F%2Fwww.richtimepieces.com%2F&owa_page_width=1280&owa_page_height=897&owa_dom_element_text=&owa_dom_element_x=897&owa_dom_element_y=61&owa_click_x=972&owa_click_y=73&owa_is_new_visitor=true&owa_visitor_id=1743604938246737690&owa_fsts=1743604938&owa_dsfs=0&owa_last_req=&owa_session_id=1743604938814759907&owa_is_new_session=true&owa_nps=0&owa_dsps=0&owa_medium=referral&owa_source=u.masdnfikjentriu.ru&owa_search_terms=%28none%29&owa_session_referer=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_site_id=7196e4cfdc610562944c1a3a204dfa73&owa_HTTP_REFERER=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_page_title=Top+Watches+On+Sale%2C+Up+To+80%25+Off.&	0%	Avira URL Cloud	safe
https://www.richtimepieces.com/includes/templates/musheji_mobile/css/foundation.min.css	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/b/breitling-hp6hvu53jpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/icon-zoom-h.png	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/r/rolex-fgr2o710jpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/stars_5.gif	100%	Avira URL Cloud	phishing
https://u.masdnfikjentriu.ru/favicon.ico	0%	Avira URL Cloud	safe
https://www.richtimepieces.com/bmz_cache/c/cartier-g13b8qn6jpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/close_pic.gif	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/fonts.css	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/css/stylesheet_select_popup.css	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/images/az_loading.gif	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/favicon.ico	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/o/omega-8hzd1z8ijpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://s.8o.cm/log.php?owa_timestamp=1743604949&owa_event_type=dom.click&owa_dom_element_name=keyword&owa_dom_element_value=%28not+set%29&owa_dom_element_id=%28not+set%29&owa_dom_element_class=mu-search-header-input&owa_dom_element_tag=INPUT&owa_page_url=https%3A%2F%2Fwww.richtimepieces.com%2F&owa_page_width=1280&owa_page_height=897&owa_dom_element_text=&owa_dom_element_x=897&owa_dom_element_y=61&owa_click_x=947&owa_click_y=75&owa_is_new_visitor=true&owa_visitor_id=1743604938246737690&owa_fsts=1743604938&owa_dsfs=0&owa_last_req=&owa_session_id=1743604938814759907&owa_is_new_session=true&owa_nps=0&owa_dsps=0&owa_medium=referral&owa_source=u.masdnfikjentriu.ru&owa_search_terms=%28none%29&owa_session_referer=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_site_id=7196e4cfdc610562944c1a3a204dfa73&owa_HTTP_REFERER=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_page_title=Top+Watches+On+Sale%2C+Up+To+80%25+Off.&	0%	Avira URL Cloud	safe
https://www.richtimepieces.com/bmz_cache/o/omega-66c8yjw7jpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/r/rolex-y8vazdzbjpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/o/omega-jtz4j19sjpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/css/stylesheet_header.min.cart.css	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/lines.png	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/cartico.png	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/payment_icons.png	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/c/cartier-rqhp2kzxjpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://s.8o.cm/log.php?owa_timestamp=1743604938&owa_event_type=base.page_request&owa_is_new_visitor=true&owa_visitor_id=1743604938246737690&owa_fsts=1743604938&owa_dsfs=0&owa_last_req=&owa_session_id=1743604938814759907&owa_is_new_session=true&owa_nps=0&owa_dsps=0&owa_medium=referral&owa_source=u.masdnfikjentriu.ru&owa_search_terms=%28none%29&owa_session_referer=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_site_id=7196e4cfdc610562944c1a3a204dfa73&owa_page_url=https%3A%2F%2Fwww.richtimepieces.com%2F&owa_HTTP_REFERER=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_page_title=Top+Watches+On+Sale%2C+Up+To+80%25+Off.&	0%	Avira URL Cloud	safe
https://s.8o.cm/log.php?owa_timestamp=1743604985&owa_event_type=dom.click&owa_dom_element_name=keyword&owa_dom_element_value=%28not+set%29&owa_dom_element_id=%28not+set%29&owa_dom_element_class=mu-search-header-input&owa_dom_element_tag=INPUT&owa_page_url=https%3A%2F%2Fwww.richtimepieces.com%2F&owa_page_width=1280&owa_page_height=897&owa_dom_element_text=&owa_dom_element_x=897&owa_dom_element_y=61&owa_click_x=972&owa_click_y=73&owa_is_new_visitor=true&owa_visitor_id=1743604938246737690&owa_fsts=1743604938&owa_dsfs=0&owa_last_req=&owa_session_id=1743604938814759907&owa_is_new_session=true&owa_nps=0&owa_dsps=0&owa_medium=referral&owa_source=u.masdnfikjentriu.ru&owa_search_terms=%28none%29&owa_session_referer=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_site_id=7196e4cfdc610562944c1a3a204dfa73&owa_HTTP_REFERER=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_page_title=Top+Watches+On+Sale%2C+Up+To+80%25+Off.&	0%	Avira URL Cloud	safe
https://www.richtimepieces.com/images/banners/slick05.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/p/patek-philippe-v6u9618bjpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/includes/templates/musheji_mobile/css/foundation.anim.min.css	100%	Avira URL Cloud	phishing
https://s.8o.cm/log.php?owa_timestamp=1743604994&owa_event_type=dom.click&owa_dom_element_name=keyword&owa_dom_element_value=%28not+set%29&owa_dom_element_id=%28not+set%29&owa_dom_element_class=mu-search-header-input&owa_dom_element_tag=INPUT&owa_page_url=https%3A%2F%2Fwww.richtimepieces.com%2F&owa_page_width=1280&owa_page_height=897&owa_dom_element_text=&owa_dom_element_x=897&owa_dom_element_y=61&owa_click_x=1002&owa_click_y=73&owa_is_new_visitor=true&owa_visitor_id=1743604938246737690&owa_fsts=1743604938&owa_dsfs=0&owa_last_req=&owa_session_id=1743604938814759907&owa_is_new_session=true&owa_nps=0&owa_dsps=0&owa_medium=referral&owa_source=u.masdnfikjentriu.ru&owa_search_terms=%28none%29&owa_session_referer=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_site_id=7196e4cfdc610562944c1a3a204dfa73&owa_HTTP_REFERER=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_page_title=Top+Watches+On+Sale%2C+Up+To+80%25+Off.&	0%	Avira URL Cloud	safe
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/foundation.what-input.js	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/r/rolex-rw9eyr7sjpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://s.8o.cm/modules/base/js/owa.tracker-combined-min.js	0%	Avira URL Cloud	safe
https://www.richtimepieces.com/images/banners/slick03.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/css/font-awesome.css	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/b/breitling-9gpmjdokjpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/bmz_cache/r/rolex-8ki2cldwjpg.image.320x320.jpg	100%	Avira URL Cloud	phishing
https://www.richtimepieces.com/images/banners/slick04.jpg	100%	Avira URL Cloud	phishing

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.richtimepieces.com	104.21.74.28	true	false	unknown
s.8o.cm	104.21.80.21	true	false	high
www.google.com	142.251.35.164	true	false	high
u.masdnfikjentriu.ru	104.21.50.75	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.richtimepieces.com/css/font-awesome.min.css	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/fonts/fontawesome-webfont.woff2?v=4.7.0	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/images/banners/slick02.jpg	false	Avira URL Cloud: phishing	unknown
https://otelrules.svc.static.microsoft/rules/rule120100v3s19.xml	false		high
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/slick.min.js	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/jscript_jquery.cycle.js	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/jquery.min.js	false	Avira URL Cloud: phishing	unknown
https://s.8o.cm/log.php?owa_timestamp=1743604960&owa_event_type=dom.click&owa_dom_element_name=keyword&owa_dom_element_value=%28not+set%29&owa_dom_element_id=%28not+set%29&owa_dom_element_class=mu-search-header-input&owa_dom_element_tag=INPUT&owa_page_url=https%3A%2F%2Fwww.richtimepieces.com%2F&owa_page_width=1280&owa_page_height=897&owa_dom_element_text=&owa_dom_element_x=897&owa_dom_element_y=61&owa_click_x=1002&owa_click_y=73&owa_is_new_visitor=true&owa_visitor_id=1743604938246737690&owa_fsts=1743604938&owa_dsfs=0&owa_last_req=&owa_session_id=1743604938814759907&owa_is_new_session=true&owa_nps=0&owa_dsps=0&owa_medium=referral&owa_source=u.masdnfikjentriu.ru&owa_search_terms=%28none%29&owa_session_referer=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_site_id=7196e4cfdc610562944c1a3a204dfa73&owa_HTTP_REFERER=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_page_title=Top+Watches+On+Sale%2C+Up+To+80%25+Off.&	false	Avira URL Cloud: safe	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/css/stylesheet_slick.css	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/bmz_cache/p/patek-philippe-jjxj7bmtjpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/bmz_cache/c/cartier-xihzcn4hjpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/images/banners/slick01.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/foundation.min.js	false	Avira URL Cloud: phishing	unknown
http://c.pki.goog/r/r4.crl	false		high
https://www.richtimepieces.com/bmz_cache/c/cartier-8qjct2bmjpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/jscript_muencss.js	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/logo.png	false	Avira URL Cloud: phishing	unknown
https://otelrules.svc.static.microsoft/rules/rule120609v0s19.xml	false		high
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/jscript_menu_conf.js	false	Avira URL Cloud: phishing	unknown
https://s.8o.cm/log.php?owa_timestamp=1743604969&owa_event_type=dom.click&owa_dom_element_name=keyword&owa_dom_element_value=%28not+set%29&owa_dom_element_id=%28not+set%29&owa_dom_element_class=mu-search-header-input&owa_dom_element_tag=INPUT&owa_page_url=https%3A%2F%2Fwww.richtimepieces.com%2F&owa_page_width=1280&owa_page_height=897&owa_dom_element_text=&owa_dom_element_x=897&owa_dom_element_y=61&owa_click_x=972&owa_click_y=73&owa_is_new_visitor=true&owa_visitor_id=1743604938246737690&owa_fsts=1743604938&owa_dsfs=0&owa_last_req=&owa_session_id=1743604938814759907&owa_is_new_session=true&owa_nps=0&owa_dsps=0&owa_medium=referral&owa_source=u.masdnfikjentriu.ru&owa_search_terms=%28none%29&owa_session_referer=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_site_id=7196e4cfdc610562944c1a3a204dfa73&owa_HTTP_REFERER=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_page_title=Top+Watches+On+Sale%2C+Up+To+80%25+Off.&	false	Avira URL Cloud: safe	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/css/style.css	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/bmz_cache/o/omega-hyd0tby7jpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/fonts/opensans-webfont.woff2	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/bmz_cache/c/cartier-g13b8qn6jpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/bmz_cache/r/rolex-fgr2o710jpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/	false		unknown
https://www.richtimepieces.com/bmz_cache/b/breitling-hp6hvu53jpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://u.masdnfikjentriu.ru/dfgbwerfsd/dfgjher.html	false		unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/stars_5.gif	false	Avira URL Cloud: phishing	unknown
https://u.masdnfikjentriu.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/css/foundation.min.css	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/icon-zoom-h.png	false	Avira URL Cloud: phishing	unknown
http://c.pki.goog/r/gsr1.crl	false		high
https://www.richtimepieces.com/includes/templates/musheji_mobile/css/stylesheet_select_popup.css	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/close_pic.gif	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/fonts.css	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/css/stylesheet_header.min.cart.css	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/bmz_cache/r/rolex-y8vazdzbjpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://www.richtimepieces.com/images/az_loading.gif	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/bmz_cache/o/omega-8hzd1z8ijpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://s.8o.cm/log.php?owa_timestamp=1743604949&owa_event_type=dom.click&owa_dom_element_name=keyword&owa_dom_element_value=%28not+set%29&owa_dom_element_id=%28not+set%29&owa_dom_element_class=mu-search-header-input&owa_dom_element_tag=INPUT&owa_page_url=https%3A%2F%2Fwww.richtimepieces.com%2F&owa_page_width=1280&owa_page_height=897&owa_dom_element_text=&owa_dom_element_x=897&owa_dom_element_y=61&owa_click_x=947&owa_click_y=75&owa_is_new_visitor=true&owa_visitor_id=1743604938246737690&owa_fsts=1743604938&owa_dsfs=0&owa_last_req=&owa_session_id=1743604938814759907&owa_is_new_session=true&owa_nps=0&owa_dsps=0&owa_medium=referral&owa_source=u.masdnfikjentriu.ru&owa_search_terms=%28none%29&owa_session_referer=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_site_id=7196e4cfdc610562944c1a3a204dfa73&owa_HTTP_REFERER=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_page_title=Top+Watches+On+Sale%2C+Up+To+80%25+Off.&	false	Avira URL Cloud: safe	unknown
https://www.richtimepieces.com/bmz_cache/o/omega-jtz4j19sjpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://otelrules.svc.static.microsoft/rules/rule120610v0s19.xml	false		high
https://www.richtimepieces.com/bmz_cache/o/omega-66c8yjw7jpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/cartico.png	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/lines.png	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/bmz_cache/p/patek-philippe-v6u9618bjpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/bmz_cache/c/cartier-rqhp2kzxjpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/css/foundation.anim.min.css	false	Avira URL Cloud: phishing	unknown
https://s.8o.cm/log.php?owa_timestamp=1743604938&owa_event_type=base.page_request&owa_is_new_visitor=true&owa_visitor_id=1743604938246737690&owa_fsts=1743604938&owa_dsfs=0&owa_last_req=&owa_session_id=1743604938814759907&owa_is_new_session=true&owa_nps=0&owa_dsps=0&owa_medium=referral&owa_source=u.masdnfikjentriu.ru&owa_search_terms=%28none%29&owa_session_referer=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_site_id=7196e4cfdc610562944c1a3a204dfa73&owa_page_url=https%3A%2F%2Fwww.richtimepieces.com%2F&owa_HTTP_REFERER=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_page_title=Top+Watches+On+Sale%2C+Up+To+80%25+Off.&	false	Avira URL Cloud: safe	unknown
https://www.richtimepieces.com/images/banners/slick05.jpg	false	Avira URL Cloud: phishing	unknown
https://otelrules.svc.static.microsoft/rules/rule120600v5s19.xml	false		high
https://www.richtimepieces.com/includes/templates/musheji_mobile/images/payment_icons.png	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/foundation.what-input.js	false	Avira URL Cloud: phishing	unknown
https://s.8o.cm/log.php?owa_timestamp=1743604985&owa_event_type=dom.click&owa_dom_element_name=keyword&owa_dom_element_value=%28not+set%29&owa_dom_element_id=%28not+set%29&owa_dom_element_class=mu-search-header-input&owa_dom_element_tag=INPUT&owa_page_url=https%3A%2F%2Fwww.richtimepieces.com%2F&owa_page_width=1280&owa_page_height=897&owa_dom_element_text=&owa_dom_element_x=897&owa_dom_element_y=61&owa_click_x=972&owa_click_y=73&owa_is_new_visitor=true&owa_visitor_id=1743604938246737690&owa_fsts=1743604938&owa_dsfs=0&owa_last_req=&owa_session_id=1743604938814759907&owa_is_new_session=true&owa_nps=0&owa_dsps=0&owa_medium=referral&owa_source=u.masdnfikjentriu.ru&owa_search_terms=%28none%29&owa_session_referer=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_site_id=7196e4cfdc610562944c1a3a204dfa73&owa_HTTP_REFERER=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_page_title=Top+Watches+On+Sale%2C+Up+To+80%25+Off.&	false	Avira URL Cloud: safe	unknown
https://www.richtimepieces.com/bmz_cache/r/rolex-rw9eyr7sjpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://s.8o.cm/log.php?owa_timestamp=1743604994&owa_event_type=dom.click&owa_dom_element_name=keyword&owa_dom_element_value=%28not+set%29&owa_dom_element_id=%28not+set%29&owa_dom_element_class=mu-search-header-input&owa_dom_element_tag=INPUT&owa_page_url=https%3A%2F%2Fwww.richtimepieces.com%2F&owa_page_width=1280&owa_page_height=897&owa_dom_element_text=&owa_dom_element_x=897&owa_dom_element_y=61&owa_click_x=1002&owa_click_y=73&owa_is_new_visitor=true&owa_visitor_id=1743604938246737690&owa_fsts=1743604938&owa_dsfs=0&owa_last_req=&owa_session_id=1743604938814759907&owa_is_new_session=true&owa_nps=0&owa_dsps=0&owa_medium=referral&owa_source=u.masdnfikjentriu.ru&owa_search_terms=%28none%29&owa_session_referer=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_site_id=7196e4cfdc610562944c1a3a204dfa73&owa_HTTP_REFERER=https%3A%2F%2Fu.masdnfikjentriu.ru%2F&owa_page_title=Top+Watches+On+Sale%2C+Up+To+80%25+Off.&	false	Avira URL Cloud: safe	unknown
https://s.8o.cm/modules/base/js/owa.tracker-combined-min.js	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120608v0s19.xml	false		high
https://www.richtimepieces.com/images/banners/slick04.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/images/banners/slick03.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/bmz_cache/b/breitling-9gpmjdokjpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/bmz_cache/r/rolex-8ki2cldwjpg.image.320x320.jpg	false	Avira URL Cloud: phishing	unknown
https://www.richtimepieces.com/css/font-awesome.css	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://fontawesome.io	chromecache_163.1.dr, chromecache_150.1.dr	false	high
http://github.com/kenwheeler/slick	chromecache_161.1.dr	false	high
http://www.opensource.org/licenses/mit-license.php	chromecache_103.1.dr	false	high
http://github.com/kenwheeler/slick/issues	chromecache_161.1.dr	false	high
http://malsup.com/jquery/cycle/	chromecache_103.1.dr	false	high
http://kenwheeler.github.io/slick	chromecache_161.1.dr	false	high
http://kenwheeler.github.io	chromecache_161.1.dr	false	high
http://fontawesome.io/license	chromecache_163.1.dr, chromecache_150.1.dr	false	high
https://developer.mozilla.org/en-US/docs/Web/Events/wheel	chromecache_119.1.dr	false	high
https://github.com/ten1seven/what-input	chromecache_119.1.dr	false	high
http://www.gnu.org/licenses/gpl.html	chromecache_103.1.dr	false	high
http://jquery.malsup.com/cycle/	chromecache_103.1.dr	false	high
http://jquery.malsup.com/license.html	chromecache_103.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.80.21	s.8o.cm	United States	13335	CLOUDFLARENETUS	false
104.21.74.28	www.richtimepieces.com	United States	13335	CLOUDFLARENETUS	false
142.251.35.164	www.google.com	United States	15169	GOOGLEUS	false
104.21.50.75	u.masdnfikjentriu.ru	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.8

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1654803
Start date and time:	2025-04-02 16:41:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://u.masdnfikjentriu.ru/dfgbwerfsd/dfgjher.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@22/152@12/5

Warnings

Exclude process from analysis (whitelisted): sppsvc.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.176.206, 142.250.80.99, 142.250.64.78, 142.251.179.84, 142.250.81.238, 142.251.40.238, 142.251.40.202, 142.250.65.234, 142.250.65.170, 142.251.40.234, 142.250.65.202, 142.250.80.10, 142.250.81.234, 142.251.41.10, 142.251.32.106, 142.250.72.106, 142.250.80.74, 172.217.165.138, 142.251.35.170, 142.250.80.106, 142.250.80.42, 142.250.176.202, 23.219.161.71, 142.250.65.238, 142.251.40.206, 142.251.40.174, 142.251.41.14, 142.250.65.206, 142.251.40.195, 142.250.80.14, 142.250.80.78, 142.250.65.174, 4.175.87.197, 184.31.69.3, 20.190.152.21, 23.33.40.139
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, otelrules.svc.static.microsoft, login.live.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://u.masdnfikjentriu.ru/dfgbwerfsd/dfgjher.html

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Source: https://www.richtimepieces.com/fonts/fontawesome-webfont.woff2?v=4.7.0	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/jscript_jquery.cycle.js	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/jquery.min.js	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/images/banners/slick02.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/c/cartier-xihzcn4hjpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/css/font-awesome.min.css	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/p/patek-philippe-jjxj7bmtjpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/slick.min.js	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/css/stylesheet_slick.css	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/jscript_menu_conf.js	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/images/logo.png	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/jscript_muencss.js	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/c/cartier-8qjct2bmjpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/images/banners/slick01.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/foundation.min.js	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/fonts/opensans-webfont.woff2	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/css/style.css	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/o/omega-hyd0tby7jpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/css/foundation.min.css	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/b/breitling-hp6hvu53jpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/images/icon-zoom-h.png	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/r/rolex-fgr2o710jpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/images/stars_5.gif	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/c/cartier-g13b8qn6jpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/images/close_pic.gif	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/fonts.css	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/css/stylesheet_select_popup.css	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/images/az_loading.gif	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/o/omega-8hzd1z8ijpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/o/omega-66c8yjw7jpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/r/rolex-y8vazdzbjpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/o/omega-jtz4j19sjpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/css/stylesheet_header.min.cart.css	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/images/lines.png	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/images/cartico.png	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/images/payment_icons.png	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/c/cartier-rqhp2kzxjpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/images/banners/slick05.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/p/patek-philippe-v6u9618bjpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/css/foundation.anim.min.css	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/includes/templates/musheji_mobile/jscript/foundation.what-input.js	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/r/rolex-rw9eyr7sjpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/images/banners/slick03.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/css/font-awesome.css	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/b/breitling-9gpmjdokjpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/bmz_cache/r/rolex-8ki2cldwjpg.image.320x320.jpg	Avira URL Cloud: Label: phishing
Source: https://www.richtimepieces.com/images/banners/slick04.jpg	Avira URL Cloud: Label: phishing

Source: https://www.richtimepieces.com/	HTTP Parser: Form action: https://www.richtimepieces.com/index.php?main_page=advanced_search_result
Source: https://www.richtimepieces.com/	HTTP Parser: Form action: https://www.richtimepieces.com/index.php?main_page=advanced_search_result
Source: https://www.richtimepieces.com/	HTTP Parser: Form action: https://www.richtimepieces.com/index.php?main_page=advanced_search_result

Source: https://u.masdnfikjentriu.ru/dfgbwerfsd/dfgjher.html	HTTP Parser: No favicon
Source: https://www.richtimepieces.com/	HTTP Parser: No favicon
Source: https://www.richtimepieces.com/	HTTP Parser: No favicon
Source: https://www.richtimepieces.com/	HTTP Parser: No favicon

Source: https://www.richtimepieces.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.richtimepieces.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.richtimepieces.com/	HTTP Parser: No <meta name="author".. found

Source: https://www.richtimepieces.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.richtimepieces.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.richtimepieces.com/	HTTP Parser: No <meta name="copyright".. found

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49801 -> 104.21.80.21:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49798 -> 104.21.80.21:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49807 -> 104.21.80.21:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49790 -> 104.21.80.21:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49803 -> 104.21.80.21:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49806 -> 104.21.80.21:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49797 -> 104.21.80.21:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49819 -> 104.21.80.21:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49818 -> 104.21.80.21:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49824 -> 104.21.80.21:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49781 -> 104.21.80.21:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49825 -> 104.21.80.21:443

Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.201.147
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.201.147
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.90
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.90
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: u.masdnfikjentriu.ru
Source: global traffic	DNS traffic detected: DNS query: www.richtimepieces.com
Source: global traffic	DNS traffic detected: DNS query: s.8o.cm

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1505 x 197, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	162936
Entropy (8bit):	7.990946627684716
Encrypted:	true
SSDEEP:	3072:IixfzMxI1sE/TobGqPwIlGSrrRkIB11DZmzxdD02FvhvKsK:Igj1sY0bN0Sr1kI5DqxzbC
MD5:	1137E6BA87E0B0E67F2F62122EC6074E
SHA1:	7BAD84846DA44B5BCEB16555508C09D9FFE25803
SHA-256:	E0FE83B16047710F71D7E1E076359011A89D4D64043769BC2C48A32EE2B1300E
SHA-512:	D770F3C81A3A88FEB9D86CEDBD7DFC363AB6F5D7731E928E7D0E5BB384C882218AD6B2EB655613A291CF61A46918736FC50FB041D5745A40D657FB22C202C68C
Malicious:	false
Reputation:	low
URL:	https://www.richtimepieces.com/includes/templates/musheji_mobile/images/payment_icons.png
Preview:	.PNG........IHDR...............9.....pHYs................MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 2, 2025 16:42:04.745995998 CEST	53	61171	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:04.758698940 CEST	53	50037	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:05.769666910 CEST	53	64279	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:05.866014957 CEST	53	50752	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:09.135467052 CEST	61742	53	192.168.2.8	1.1.1.1
Apr 2, 2025 16:42:09.135756969 CEST	56428	53	192.168.2.8	1.1.1.1
Apr 2, 2025 16:42:09.237796068 CEST	53	61742	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:09.238393068 CEST	53	56428	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:10.369358063 CEST	52039	53	192.168.2.8	1.1.1.1
Apr 2, 2025 16:42:10.369579077 CEST	59946	53	192.168.2.8	1.1.1.1
Apr 2, 2025 16:42:10.726845980 CEST	53	59946	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:10.771635056 CEST	53	52039	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:12.773947954 CEST	50125	53	192.168.2.8	1.1.1.1
Apr 2, 2025 16:42:12.774131060 CEST	51611	53	192.168.2.8	1.1.1.1
Apr 2, 2025 16:42:12.887535095 CEST	53	50125	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:12.887708902 CEST	53	51611	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:15.915483952 CEST	51061	53	192.168.2.8	1.1.1.1
Apr 2, 2025 16:42:15.915921926 CEST	58143	53	192.168.2.8	1.1.1.1
Apr 2, 2025 16:42:16.020270109 CEST	53	51061	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:16.027456999 CEST	53	58143	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:18.457103014 CEST	61297	53	192.168.2.8	1.1.1.1
Apr 2, 2025 16:42:18.457262039 CEST	63730	53	192.168.2.8	1.1.1.1
Apr 2, 2025 16:42:18.638411045 CEST	53	61297	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:18.692028999 CEST	53	63730	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:19.301168919 CEST	53	60160	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:20.251105070 CEST	62345	53	192.168.2.8	1.1.1.1
Apr 2, 2025 16:42:20.251575947 CEST	62637	53	192.168.2.8	1.1.1.1
Apr 2, 2025 16:42:20.432315111 CEST	53	62345	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:20.483269930 CEST	53	62637	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:23.004962921 CEST	53	58953	1.1.1.1	192.168.2.8
Apr 2, 2025 16:42:41.989309072 CEST	53	51390	1.1.1.1	192.168.2.8
Apr 2, 2025 16:43:04.542759895 CEST	53	54571	1.1.1.1	192.168.2.8
Apr 2, 2025 16:43:04.962630987 CEST	53	50575	1.1.1.1	192.168.2.8
Apr 2, 2025 16:43:07.567584991 CEST	53	52780	1.1.1.1	192.168.2.8

Source: global traffic	HTTP traffic detected: GET /dfgbwerfsd/dfgjher.html HTTP/1.1Host: u.masdnfikjentriu.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: u.masdnfikjentriu.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.masdnfikjentriu.ru/dfgbwerfsd/dfgjher.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEI59DNAQi91c4BCIDWzgEIvODOAQiu5M4BCIvlzgEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://u.masdnfikjentriu.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/jscript/jquery.min.js HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /css/font-awesome.min.css HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/css/foundation.anim.min.css HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /css/font-awesome.css HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/css/foundation.min.css HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/css/style.css HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/css/stylesheet_header.min.cart.css HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/css/stylesheet_select_popup.css HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/css/stylesheet_slick.css HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /fonts.css HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/jscript/slick.min.js HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/images/icon-zoom-h.png HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/includes/templates/musheji_mobile/css/style.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/images/lines.png HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/includes/templates/musheji_mobile/css/style.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/images/cartico.png HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/includes/templates/musheji_mobile/css/stylesheet_header.min.cart.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /images/banners/slick04.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /bmz_cache/b/breitling-hp6hvu53jpg.image.320x320.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /bmz_cache/p/patek-philippe-jjxj7bmtjpg.image.320x320.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /bmz_cache/c/cartier-g13b8qn6jpg.image.320x320.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /images/banners/slick05.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /bmz_cache/c/cartier-8qjct2bmjpg.image.320x320.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /bmz_cache/c/cartier-xihzcn4hjpg.image.320x320.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /bmz_cache/c/cartier-rqhp2kzxjpg.image.320x320.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/images/cartico.png HTTP/1.1Host: www.richtimepieces.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/images/lines.png HTTP/1.1Host: www.richtimepieces.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/images/icon-zoom-h.png HTTP/1.1Host: www.richtimepieces.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /bmz_cache/b/breitling-hp6hvu53jpg.image.320x320.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /bmz_cache/p/patek-philippe-jjxj7bmtjpg.image.320x320.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/images/stars_5.gif HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /images/banners/slick04.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /images/banners/slick03.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /bmz_cache/b/breitling-9gpmjdokjpg.image.320x320.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /bmz_cache/p/patek-philippe-v6u9618bjpg.image.320x320.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /bmz_cache/c/cartier-8qjct2bmjpg.image.320x320.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /bmz_cache/c/cartier-xihzcn4hjpg.image.320x320.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /bmz_cache/c/cartier-g13b8qn6jpg.image.320x320.jpg HTTP/1.1Host: www.richtimepieces.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
Source: global traffic	HTTP traffic detected: GET /includes/templates/musheji_mobile/images/close_pic.gif HTTP/1.1Host: www.richtimepieces.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.richtimepieces.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 320x320, components 3
Category:	downloaded
Size (bytes):	23491
Entropy (8bit):	7.952978465789606
Encrypted:	false
SSDEEP:	384:SHmVuGhkLuVH6Jh3gqLt6Ppvk0ZqtFiCr5c4kON42OySZhDKVgHtpebEz:SHLiVaJBTLt6PpT6iCrU6O9DrpebEz
MD5:	B09F5FE70FD12AB301FE161251A237C9
SHA1:	A20373821D6363BA59290FF2A990B1C77263B60B
SHA-256:	74BD5EA7BF191A3B0B82985BE5385AD3050DBF97CB889205590A2F7791000F54
SHA-512:	D391D792840250E1AE3182F21C51276D54D05FC9A17A5ED7A7502162F799725FD64285BBA1CD48972F316201EE2F43FB85779E7CB700788D4C8DE648F2B6468B
Malicious:	false
Reputation:	low
URL:	https://www.richtimepieces.com/bmz_cache/r/rolex-8ki2cldwjpg.image.320x320.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85....C..............................................!........."$".$.......C.......................................................................@.@.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....(...(...(...(....\|m.O.....-.....N:.OA.z....%.$Z.e...3?.p...{.._.\|_.......H'w.......o.Mg...s4,.8U?)=.._:x.T....-.k..J.v>r........Ma.......l....\jj.+......o...U........I.H..0..F.._t...+.....u.&0..vg.}.....&......G#.P..x".V.H[..K..H.#.''<.k..E..5..{...O.....z25./.8.;s.Q....{a...g....t.7c.#.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 1261x604, components 3
Category:	downloaded
Size (bytes):	180968
Entropy (8bit):	7.980064066045819
Encrypted:	false
SSDEEP:	3072:5tkfvPbM2BaSXD3phv9puz2r5/cTn/L5m5J0jm+ONzOU05pZKYN8:5tkfvHT5N9p1r5kTn/qSjm+ONzP0UE8
MD5:	A4F5FB612238D6DC693DF007819337C2
SHA1:	C72EFABAED06EF5A0642AB81E07A2645F3190738
SHA-256:	2E1794B18F2197E337393176C060BBA7A2889B21F6B91EA7015B2B0EF19124AF
SHA-512:	86A561E497D7643F0CD74CF42FDD3418E112AE69E8EDAAC6265BA4D14D3650D9DF5093A91F73074727222C8D94A4B0495CF534E871FBD8193F7D5F29890955A5
Malicious:	false
Reputation:	low
URL:	https://www.richtimepieces.com/images/banners/slick02.jpg
Preview:	......JFIF.....`.`.....0Exif..MM........1..............www.meitu.com....C....................................................................C.......................................................................\.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....`.a..{...j.....s1.w.h$x.......T.z.@......gU=.P...\.G.6....(.@Ff$.Up.E..qN.Z.......}R..i.8S....H.....9.T.B...(..m..c...5N.l.j..m..c....c."......Lz.s..5.cH.8BO$~U.Z...'w?...IX.,..~..i.w.Y.O@a.TJI.H.u-Gf..U..Y..hh..%.#..EG3...A.?M.......=x......=iXi\z.?w?Z..J...P(m..#8.......I.jZ.. ....v...d...P^.x.

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 2, 2025 16:42:05.769747972 CEST	192.168.2.8	1.1.1.1	c226	(Port unreachable)	Destination Unreachable
Apr 2, 2025 16:42:18.692107916 CEST	192.168.2.8	1.1.1.1	c275	(Port unreachable)	Destination Unreachable
Apr 2, 2025 16:42:20.483370066 CEST	192.168.2.8	1.1.1.1	c275	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Apr 2, 2025 16:42:21.722348928 CEST	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 2, 2025 16:42:21.817310095 CEST	221	IN	HTTP/1.1 304 Not Modified Date: Wed, 02 Apr 2025 14:42:01 GMT Expires: Wed, 02 Apr 2025 15:32:01 GMT Age: 20 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Apr 2, 2025 16:42:21.823542118 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 2, 2025 16:42:21.922702074 CEST	221	IN	HTTP/1.1 304 Not Modified Date: Wed, 02 Apr 2025 14:42:01 GMT Expires: Wed, 02 Apr 2025 15:32:01 GMT Age: 20 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:10 UTC	693	OUT	GET /dfgbwerfsd/dfgjher.html HTTP/1.1 Host: u.masdnfikjentriu.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 14:42:11 UTC	303	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:11 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Server: cloudflare Cf-Cache-Status: DYNAMIC Last-Modified: Tue, 18 Mar 2025 09:04:58 GMT Vary: Accept-Encoding CF-RAY: 92a11763e85a3d64-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 14:42:11 UTC	256	IN	Data Raw: 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 3b 20 55 52 4c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 69 63 68 74 69 6d 65 70 69 65 63 65 73 2e 63 6f 6d 2f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 70 3e 52 65 64 69 72 65 63 74 69 6e 67 20 69 6e 20 31 20 73 65 63 6f 6e 64 2e 2e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0d Data Ascii: fa<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta http-equiv="refresh" content="1; URL=https://www.richtimepieces.com/"> <title>Redirecting...</title></head><body> <p>Redirecting in 1 second...</p></body></html>
2025-04-02 14:42:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:11 UTC	626	OUT	GET /favicon.ico HTTP/1.1 Host: u.masdnfikjentriu.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.masdnfikjentriu.ru/dfgbwerfsd/dfgjher.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 14:42:11 UTC	291	IN	HTTP/1.1 404 Not Found Date: Wed, 02 Apr 2025 14:42:11 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: max-age=14400 Cf-Cache-Status: EXPIRED CF-RAY: 92a117666cc74264-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 14:42:11 UTC	278	IN	Data Raw: 31 30 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 75 2e 6d 61 73 64 6e 66 69 6b 6a 65 6e 74 72 69 75 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e Data Ascii: 10a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache Server at u.masdnfikjentriu.ru Port 80</address>

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:12 UTC	575	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEI59DNAQi91c4BCIDWzgEIvODOAQiu5M4BCIvlzgEY4eLOAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 14:42:12 UTC	1303	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:12 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Ya-dEIolz9lYTBVOdugMuQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-04-02 14:42:12 UTC	1303	IN	Data Raw: 62 37 37 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 73 74 6f 63 6b 20 6d 61 72 6b 65 74 20 64 6f 77 20 6e 61 73 64 61 71 20 73 5c 75 30 30 32 36 70 20 35 30 30 22 2c 22 6e 65 74 66 6c 69 78 20 6d 6f 76 69 65 73 22 2c 22 6d 69 6e 6e 65 73 6f 74 61 20 77 65 61 74 68 65 72 20 66 6f 72 65 63 61 73 74 22 2c 22 64 75 6b 65 20 63 6f 6f 70 65 72 20 66 6c 61 67 67 22 2c 22 67 69 76 65 20 74 68 65 20 6d 61 6e 69 66 65 73 74 20 61 63 20 73 68 61 64 6f 77 73 22 2c 22 61 70 72 69 6c 20 73 6f 63 69 61 6c 20 73 65 63 75 72 69 74 79 20 73 73 69 20 70 61 79 6d 65 6e 74 73 22 2c 22 73 6f 6c 6f 20 6c 65 76 65 6c 69 6e 67 20 73 65 61 73 6f 6e 20 33 20 72 65 6c 65 61 73 65 20 64 61 74 65 22 2c 22 6d 61 63 6b 69 6e 61 63 20 62 72 69 64 67 65 20 63 6c 6f 73 65 64 20 66 61 6c 6c 69 Data Ascii: b77)]}'["",["stock market dow nasdaq s\u0026p 500","netflix movies","minnesota weather forecast","duke cooper flagg","give the manifest ac shadows","april social security ssi payments","solo leveling season 3 release date","mackinac bridge closed falli
2025-04-02 14:42:12 UTC	1303	IN	Data Raw: 53 74 32 4e 44 64 69 56 47 68 69 63 44 52 4f 64 6d 64 53 65 56 68 4c 4b 30 70 4f 53 56 49 7a 65 47 35 4a 53 45 35 54 62 6c 70 30 5a 57 68 58 64 58 4a 6a 64 46 52 56 64 57 35 6c 64 6d 52 46 4d 54 59 30 56 7a 42 70 62 47 55 79 64 54 4a 42 53 33 64 59 54 7a 42 47 63 79 39 4a 52 55 56 6e 62 6a 42 43 65 6c 52 55 57 47 35 54 53 47 39 35 4e 6e 51 33 62 56 46 6c 59 58 51 77 64 6b 6c 4a 4c 30 56 58 52 6b 6f 76 64 45 4e 57 52 32 4e 5a 57 44 55 31 52 6d 4a 34 4d 48 68 6d 64 6e 46 32 56 48 56 74 4d 7a 68 78 4e 31 70 4d 61 54 4a 54 55 6d 67 32 61 31 59 79 64 58 70 6a 52 6e 52 55 5a 31 64 6b 52 6b 5a 47 56 55 70 43 55 6c 4a 53 55 55 4a 59 4e 69 39 69 5a 57 49 77 62 54 52 6e 4d 6d 78 30 64 30 68 42 4e 7a 68 46 53 44 6c 78 62 30 77 32 65 47 70 68 4b 33 52 30 55 6a 68 58 Data Ascii: St2NDdiVGhicDROdmdSeVhLK0pOSVIzeG5JSE5Tblp0ZWhXdXJjdFRVdW5ldmRFMTY0VzBpbGUydTJBS3dYTzBGcy9JRUVnbjBCelRUWG5TSG95NnQ3bVFlYXQwdklJL0VXRkovdENWR2NZWDU1RmJ4MHhmdnF2VHVtMzhxN1pMaTJTUmg2a1YydXpjRnRUZ1dkRkZGVUpCUlJSUUJYNi9iZWIwbTRnMmx0d0hBNzhFSDlxb0w2eGphK3R0UjhX
2025-04-02 14:42:12 UTC	336	IN	Data Raw: 74 69 64 22 3a 22 33 33 33 35 32 33 36 34 38 38 36 30 36 32 30 31 33 32 30 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 32 2c 31 32 35 31 2c 31 32 35 30 2c 36 30 34 2c 36 30 33 2c 36 30 32 2c 36 30 31 2c 36 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 Data Ascii: tid":"3335236488606201320","google:suggestrelevance":[1252,1251,1250,604,603,602,601,600],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308]],"google:su
2025-04-02 14:42:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:13 UTC	698	OUT	GET / HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://u.masdnfikjentriu.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 14:42:13 UTC	541	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:13 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache X-Frame-Options: SAMEORIGIN Cf-Cache-Status: DYNAMIC Vary: Accept-Encoding Set-Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7; HttpOnly; Secure; Path=/; Domain=www.richtimepieces.com CF-RAY: 92a117711c1d8cbd-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 14:42:13 UTC	828	IN	Data Raw: 31 37 35 61 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 32 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 77 69 64 74 68 3d 64 65 76 69 Data Ascii: 175a<!doctype html><html class="no-js" lang="en"><head> <meta charset="utf-8"/> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta content="initial-scale=1.0, minimum-scale=1.0, maximum-scale=2.0, user-scalable=no, width=devi
2025-04-02 14:42:13 UTC	1369	IN	Data Raw: 20 20 20 3c 21 2d 2d 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 6f 75 6e 64 61 74 69 6f 6e 2f 36 2e 34 2e 31 2f 63 73 73 2f 66 6f 75 6e 64 61 74 69 6f 6e 2e 6d 69 6e 2e 63 73 73 22 3e 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 69 6e 63 6c 75 64 65 73 2f 74 65 6d 70 6c 61 74 65 73 2f 6d 75 73 68 65 6a 69 5f 6d 6f 62 69 6c 65 2f 6a 73 63 72 69 70 74 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 73 73 2f 66 6f 6e 74 2d 61 77 65 73 6f Data Ascii: ...<link rel="stylesheet" type="text/css" href="//cdnjs.cloudflare.com/ajax/libs/foundation/6.4.1/css/foundation.min.css">--><script src="includes/templates/musheji_mobile/jscript/jquery.min.js"></script><link rel="stylesheet" href="css/font-aweso
2025-04-02 14:42:13 UTC	1369	IN	Data Raw: 0a 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 75 2d 74 6f 70 2d 62 6f 78 2d 70 63 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 75 2d 74 6f 70 2d 62 6f 78 2d 70 63 2d 62 6f 78 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 65 6c 63 6f 6d 65 2d 6d 73 67 22 3e 3c 70 3e 53 61 76 65 20 55 70 20 74 6f 20 39 30 25 20 4f 66 66 20 2a 20 46 72 65 65 20 53 68 69 70 70 69 6e 67 20 41 6c 6c 20 4f 72 64 65 72 2e 3c 2f 70 3e 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 70 2d 69 74 65 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 69 64 3d 22 6d 65 6e 75 5f 6d 6f 72 65 22 20 63 6c 61 73 73 3d 22 Data Ascii: <div class="mu-top-box-pc"> <div class="mu-top-box-pc-boxs"> <div class="welcome-msg"><p>Save Up to 90% Off * Free Shipping All Order.</p> </div> <div class="top-item"> <a id="menu_more" class="
2025-04-02 14:42:13 UTC	1369	IN	Data Raw: 77 77 77 2e 72 69 63 68 74 69 6d 65 70 69 65 63 65 73 2e 63 6f 6d 2f 22 3e 3c 69 6d 67 20 61 6c 74 3d 22 54 6f 70 20 57 61 74 63 68 65 73 20 4f 6e 20 53 61 6c 65 2c 20 55 70 20 54 6f 20 38 30 25 20 4f 66 66 2e 22 20 74 69 74 6c 65 3d 22 54 6f 70 20 57 61 74 63 68 65 73 20 4f 6e 20 53 61 6c 65 2c 20 55 70 20 54 6f 20 38 30 25 20 4f 66 66 2e 22 20 73 72 63 3d 22 69 6e 63 6c 75 64 65 73 2f 74 65 6d 70 6c 61 74 65 73 2f 6d 75 73 68 65 6a 69 5f 6d 6f 62 69 6c 65 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2e 70 6e 67 22 20 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 2d 74 65 78 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 70 3e 42 65 73 74 20 4c 75 78 75 72 79 20 57 61 74 63 68 65 73 20 4f 6e 20 Data Ascii: www.richtimepieces.com/"><img alt="Top Watches On Sale, Up To 80% Off." title="Top Watches On Sale, Up To 80% Off." src="includes/templates/musheji_mobile/images/logo.png" /></a></div> <div class="logo-text"> <p>Best Luxury Watches On
2025-04-02 14:42:13 UTC	1051	IN	Data Raw: 75 73 65 61 72 62 74 6e 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 22 3e 3c 2f 64 69 76 3e 3c 2f 66 6f 72 6d 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 0d 0a 20 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6d 75 70 63 6e 61 76 62 6f 78 73 22 Data Ascii: usearbtn"><div class="clear"></div></form> <div class="clear"></div> </div> </div> <div class="clear"></div> </div> <div class="clear"></div> </div> <div id="mupcnavboxs"
2025-04-02 14:42:13 UTC	1369	IN	Data Raw: 36 37 35 34 0d 0a 0a 0d 0a 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 22 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 75 6c 3e 0d 0a 0d 0a 0d 0a 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 21 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 22 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 0d 0a 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 0d 0a 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 75 73 6c 69 63 6b 62 6f 78 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 69 6e 63 6c 75 64 65 73 2f 74 65 6d 70 6c 61 74 65 73 2f 6d 75 73 68 65 6a 69 5f 6d 6f 62 69 6c 65 Data Ascii: 6754<div class="clear"></div></ul></div>...-----------------------------><div class="clear"></div></div> </div> <div class="muslickboxs"> <script src="includes/templates/musheji_mobile
2025-04-02 14:42:13 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 62 6f 66 20 75 70 6c 6f 61 64 20 61 6c 65 72 74 73 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 65 6f 66 20 75 70 6c 6f 61 64 20 61 6c 65 72 74 73 20 2d 2d 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 65 6e 74 65 72 43 6f 6c 75 6d 6e 22 20 69 64 3d 22 69 6e 64 65 78 44 65 66 61 75 6c 74 22 3e 0d 0a 0d 0a 0d 0a 0d 0a 20 20 20 20 0d 0a 3c 21 2d 2d 20 62 6f 66 3a 20 77 68 61 74 73 5f 6e 65 77 20 2d 2d 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 65 6e 74 65 72 42 6f 78 57 72 61 70 70 65 72 22 20 69 64 3d 22 49 Data Ascii: ... bof upload alerts --> ... eof upload alerts --> <div class="centerColumn" id="indexDefault"> ... bof: whats_new --><div class="centerBoxWrapper" id="I
2025-04-02 14:42:13 UTC	1369	IN	Data Raw: 74 73 4e 65 77 20 6d 75 6d 6f 62 69 6c 65 6e 65 77 6c 69 73 74 20 6e 65 77 72 65 63 31 20 62 61 63 6b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 75 73 68 65 6a 69 5f 62 6f 78 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 75 73 68 65 6a 69 5f 69 6d 67 22 3e 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 69 63 68 74 69 6d 65 70 69 65 63 65 73 2e 63 6f 6d 2f 62 72 65 69 74 6c 69 6e 67 2d 6e 61 76 69 74 69 6d 65 72 2d 30 31 2d 34 36 2d 72 6f 73 65 2d 67 6f 6c 64 2d 73 69 6c 76 65 72 2d 64 69 61 6c 2d 6d 65 6e 73 2d 77 61 74 63 68 2d 72 62 30 31 33 37 2d 62 6f 78 2d 63 61 72 64 2d 70 2d 32 37 36 31 2e 68 74 6d 6c 22 3e 3c 69 6d 67 20 73 72 63 3d 22 62 6d 7a 5f 63 61 63 68 65 2f 62 2f 62 72 65 69 74 6c 69 6e 67 2d 39 67 70 6d 6a 64 6f Data Ascii: tsNew mumobilenewlist newrec1 back"><div class="musheji_box"><div class="musheji_img"><a href="https://www.richtimepieces.com/breitling-navitimer-01-46-rose-gold-silver-dial-mens-watch-rb0137-box-card-p-2761.html"><img src="bmz_cache/b/breitling-9gpmjdo
2025-04-02 14:42:13 UTC	1369	IN	Data Raw: 73 20 57 61 74 63 68 20 35 31 31 39 22 20 74 69 74 6c 65 3d 22 20 50 61 74 65 6b 20 50 68 69 6c 69 70 70 65 20 43 61 6c 61 74 72 61 76 61 20 57 68 69 74 65 20 47 6f 6c 64 20 42 6c 61 63 6b 20 53 74 72 61 70 20 4d 65 6e 73 20 57 61 74 63 68 20 35 31 31 39 20 22 20 77 69 64 74 68 3d 22 33 32 30 22 20 68 65 69 67 68 74 3d 22 33 32 30 22 20 2f 3e 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 75 73 68 65 6a 69 5f 62 6f 74 74 6f 6d 22 3e 0a 3c 75 6c 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 75 73 68 65 6a 69 5f 6e 61 6d 65 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 69 63 68 74 69 6d 65 70 69 65 63 65 73 2e 63 6f 6d 2f 70 61 74 65 6b 2d 70 68 69 6c 69 70 70 65 2d 63 61 6c 61 74 72 61 76 61 2d 77 68 69 74 Data Ascii: s Watch 5119" title=" Patek Philippe Calatrava White Gold Black Strap Mens Watch 5119 " width="320" height="320" /></a></div><div class="musheji_bottom"><ul><li class="musheji_name"><a href="https://www.richtimepieces.com/patek-philippe-calatrava-whit
2025-04-02 14:42:13 UTC	1369	IN	Data Raw: 31 39 3c 2f 61 3e 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 75 73 68 65 6a 69 5f 70 72 69 63 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6e 6f 72 6d 61 6c 70 72 69 63 65 22 3e 24 31 30 2c 33 39 30 2e 30 30 20 3c 2f 73 70 61 6e 3e 26 6e 62 73 70 3b 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 72 6f 64 75 63 74 53 70 65 63 69 61 6c 50 72 69 63 65 22 3e 24 33 33 30 2e 30 30 3c 2f 73 70 61 6e 3e 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 75 5f 72 65 76 69 65 77 73 5f 73 22 3e 3c 69 6d 67 20 73 72 63 3d 22 69 6e 63 6c 75 64 65 73 2f 74 65 6d 70 6c 61 74 65 73 2f 6d 75 73 68 65 6a 69 5f 6d 6f 62 69 6c 65 2f 69 6d 61 67 65 73 2f 73 74 61 72 73 5f 35 2e 67 69 66 22 20 2f 3e 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 Data Ascii: 19</a></li><li class="musheji_price"><span class="normalprice">$10,390.00 </span> <span class="productSpecialPrice">$330.00</span></li><li class="mu_reviews_s"><img src="includes/templates/musheji_mobile/images/stars_5.gif" /></li></ul></div></d

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:13 UTC	633	OUT	GET /includes/templates/musheji_mobile/jscript/jquery.min.js HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.richtimepieces.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:14 UTC	935	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:14 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Sat, 28 May 2016 13:23:16 GMT Cache-Control: max-age=14400 Expires: Wed, 02 Apr 2025 14:47:14 GMT Vary: Accept-Encoding CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hr5F7dto%2BAC0CLjdHvhIDfSmM8eS7QkmAkIiAvsniVD5Qf%2BNslxGtQAFUoZFlUmc20zjqJRZmVbK8ReC65Q6grgv3V6r%2BszExn8oasrZjQctUjcwqozUDZf61LeTv%2FBo5AChn6AXh34i"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92a117756ee0c52b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105183&min_rtt=104820&rtt_var=22417&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1205&delivery_rate=35485&cwnd=235&unsent_bytes=0&cid=906710ad8678dce8&ts=1145&x=0"
2025-04-02 14:42:14 UTC	434	IN	Data Raw: 37 63 64 34 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 32 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 Data Ascii: 7cd4/! jQuery v2.2.2 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a d
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 72 74 79 2c 6c 3d 7b 7d 2c 6d 3d 22 32 2e 32 2e 32 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 2e 66 6e 2e 69 6e 69 74 28 61 2c 62 29 7d 2c 6f 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 70 3d 2f 5e 2d 6d 73 2d 2f 2c 71 3d 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 3b 6e 2e 66 6e 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 6d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 22 22 2c 6c 65 6e 67 74 68 3a 30 2c 74 6f 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: rty,l={},m="2.2.2",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 3a 22 6a 51 75 65 72 79 22 2b 28 6d 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c 69 73 41 72 72 61 79 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 69 73 57 69 6e 64 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 61 3d 3d 3d 61 2e 77 69 6e 64 6f 77 7d 2c 69 73 4e 75 6d 65 72 69 63 3a 66 75 6e 63 74 69 Data Ascii: :"jQuery"+(m+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray,isWindow:function(a){return null!=a&&a===a.window},isNumeric:functi
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 3f 5b 61 5d 3a 61 29 3a 67 2e 63 61 6c 6c 28 63 2c 61 29 29 2c 63 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 2d 31 3a 68 2e 63 61 6c 6c 28 62 2c 61 2c 63 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 2b 62 2e 6c 65 6e 67 74 68 2c 64 3d 30 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 63 3e 64 3b 64 2b 2b 29 61 5b 65 2b 2b 5d 3d 62 5b 64 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3d 65 2c 61 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 2c 65 3d 5b 5d 2c 66 3d 30 2c 67 3d 61 2e 6c 65 6e 67 74 68 2c 68 3d 21 63 3b 67 3e 66 3b 66 2b 2b 29 64 3d 21 62 28 61 5b 66 5d 2c 66 29 2c 64 Data Ascii: ?[a]:a):g.call(c,a)),c},inArray:function(a,b,c){return null==b?-1:h.call(b,a,c)},merge:function(a,b){for(var c=+b.length,d=0,e=a.length;c>d;d++)a[e++]=b[d];return a.length=e,a},grep:function(a,b,c){for(var d,e=[],f=0,g=a.length,h=!c;g>f;f++)d=!b(a[f],f),d
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 6e 20 63 3b 72 65 74 75 72 6e 2d 31 7d 2c 4b 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4c 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 4d 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 5c 78 30 30 2d 5c 5c 78 61 30 5d 29 2b 22 2c 4e 3d 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 22 2b 4d 2b 22 29 28 3f 3a 22 2b 4c 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d 29 22 2b 4c 2b 22 2a 28 3f 3a 27 28 28 3f Data Ascii: n c;return-1},K="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",L="[\\x20\\t\\r\\n\\f]",M="(?:\\\\.\|[\\w-]\|[^\\x00-\\xa0])+",N="\\["+L+"("+M+")(?:"+L+"([^$\|!~]?=)"+L+"(?:'((?
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d 3d 64 7c 7c 63 3f 62 3a 30 3e 64 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 64 7c 35 36 33 32 30 29 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 29 7d 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 45 3d 49 2e 63 61 6c 6c 28 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 45 5b 76 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 61 29 7b 48 3d 7b 61 70 70 6c 79 3a 45 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 47 2e 61 70 70 6c 79 28 Data Ascii: -65536;return d!==d\|\|c?b:0>d?String.fromCharCode(d+65536):String.fromCharCode(d>>10\|55296,1023&d\|56320)},da=function(){m()};try{H.apply(E=I.call(v.childNodes),v.childNodes),E[v.childNodes.length].nodeType}catch(ea){H={apply:E.length?function(a,b){G.apply(
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 20 22 5d 3d 65 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 75 5d 3d 21 30 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 61 28 62 29 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 2c 62 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: {return a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function ha(a){return a[u]=!0,a}function ia(a){var b=n.createElement("div");try{return!!a(b)}catch(c){return!1}finally{b.parentNode&&b.parentNode.removeChild(b),b=null}}function
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 2c 21 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 5a 2e 74 65 73 74 28 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 63 2e 67 65 74 42 79 49 64 3d 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 Data Ascii: ,!a.getAttribute("className")}),c.getElementsByTagName=ia(function(a){return a.appendChild(n.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=Z.test(n.getElementsByClassName),c.getById=ia(function(a){return o.appendChild(a
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4c 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4b 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 Data Ascii: wcapture^='']").length&&q.push("[^$]="+L+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+L+"*(?:value\|"+K+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.query
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 61 29 3d 3d 3d 64 3f 61 3d 3d 3d 6e 7c 7c 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 61 29 3f 2d 31 3a 62 3d 3d 3d 6e 7c 7c 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 Data Ascii: (b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocumentPosition(a)===d?a===n\|\|a.ownerDocument===v&&t(v,a)?-1:b===n\|\|b.ownerDocument===v&&t(v,b)?1:k?J(k,a)-J(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:14 UTC	616	OUT	GET /css/font-awesome.min.css HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.richtimepieces.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:14 UTC	927	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:14 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close cf-cache-status: HIT Last-Modified: Thu, 03 Nov 2016 03:08:06 GMT ETag: W/"7918-5405cddce3180-gzip" Vary: Accept-Encoding Age: 5316 Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bR65vhBrGsSLF1wB%2Fl1Vf%2BogYapdiSNr87LBK1wSvkfxK5MO%2BcRXYvdembTvMe%2FAJ8bIxog0dMqOz0mojEDY9DvhFc8VKVFYUvBEhT9gUgyl99acIIZIh4CpYb%2FSmvlqILZCP3QeR7S0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92a11777a8064693-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=103051&min_rtt=102536&rtt_var=22414&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2847&recv_bytes=1188&delivery_rate=35773&cwnd=238&unsent_bytes=0&cid=014268c6bbf30940&ts=263&x=0"
2025-04-02 14:42:14 UTC	442	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 Data Ascii: font.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:norma
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 2d 6d 73 2d 66 69 Data Ascii: e(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{-ms-fi
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 7b Data Ascii: tion:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:before{
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 74 61 67 Data Ascii: lag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.fa-tag
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 65 70 2d 66 Data Ascii: fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-step-f
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 7d 2e 66 61 Data Ascii: tent:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"}.fa
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 6e 6c 6f 63 Data Ascii: 095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa-unloc
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d Data Ascii: .fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc"}.fa-
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 65 74 68 6f Data Ascii: fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-stetho

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:14 UTC	653	OUT	GET /includes/templates/musheji_mobile/css/foundation.anim.min.css HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.richtimepieces.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:14 UTC	929	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:14 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close cf-cache-status: REVALIDATED Last-Modified: Tue, 01 Aug 2017 05:31:10 GMT Cache-Control: max-age=14400 expires: Wed, 02 Apr 2025 15:42:14 GMT Vary: Accept-Encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cLv9TFearzJ2EUUL9a3%2F0HGS8tWzQXT7dVbNhj7kgRzVtJ2BPBEEKsh5MZGDj9C%2BN5r%2Bh11BDgLBAWjIqgSJdmtEGvhSiQSa9YKshx3G3FTzKGalM%2BRJskFQukj28CQtS7gGeRqUAbN%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92a11777ad41917b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=103610&min_rtt=103038&rtt_var=22596&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2847&recv_bytes=1225&delivery_rate=35559&cwnd=241&unsent_bytes=0&cid=d3d609e7be488f72&ts=449&x=0"
2025-04-02 14:42:14 UTC	440	IN	Data Raw: 34 35 63 30 0d 0a 2e 73 6c 69 64 65 2d 69 6e 2d 64 6f 77 6e 2e 6d 75 69 2d 65 6e 74 65 72 2c 0a 2e 73 6c 69 64 65 2d 69 6e 2d 6c 65 66 74 2e 6d 75 69 2d 65 6e 74 65 72 2c 0a 2e 73 6c 69 64 65 2d 69 6e 2d 75 70 2e 6d 75 69 2d 65 6e 74 65 72 2c 0a 2e 73 6c 69 64 65 2d 69 6e 2d 72 69 67 68 74 2e 6d 75 69 2d 65 6e 74 65 72 2c 0a 2e 73 6c 69 64 65 2d 6f 75 74 2d 64 6f 77 6e 2e 6d 75 69 2d 6c 65 61 76 65 2c 0a 2e 73 6c 69 64 65 2d 6f 75 74 2d 72 69 67 68 74 2e 6d 75 69 2d 6c 65 61 76 65 2c 0a 2e 73 6c 69 64 65 2d 6f 75 74 2d 75 70 2e 6d 75 69 2d 6c 65 61 76 65 2c 0a 2e 73 6c 69 64 65 2d 6f 75 74 2d 6c 65 66 74 2e 6d 75 69 2d 6c 65 61 76 65 2c 0a 2e 66 61 64 65 2d 69 6e 2e 6d 75 69 2d 65 6e 74 65 72 2c 0a 2e 66 61 64 65 2d 6f 75 74 2e 6d 75 69 2d 6c 65 61 76 65 Data Ascii: 45c0.slide-in-down.mui-enter,.slide-in-left.mui-enter,.slide-in-up.mui-enter,.slide-in-right.mui-enter,.slide-out-down.mui-leave,.slide-out-right.mui-leave,.slide-out-up.mui-leave,.slide-out-left.mui-leave,.fade-in.mui-enter,.fade-out.mui-leave
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 79 2e 6d 75 69 2d 65 6e 74 65 72 2c 0a 2e 68 69 6e 67 65 2d 6f 75 74 2d 66 72 6f 6d 2d 74 6f 70 2e 6d 75 69 2d 6c 65 61 76 65 2c 0a 2e 68 69 6e 67 65 2d 6f 75 74 2d 66 72 6f 6d 2d 72 69 67 68 74 2e 6d 75 69 2d 6c 65 61 76 65 2c 0a 2e 68 69 6e 67 65 2d 6f 75 74 2d 66 72 6f 6d 2d 62 6f 74 74 6f 6d 2e 6d 75 69 2d 6c 65 61 76 65 2c 0a 2e 68 69 6e 67 65 2d 6f 75 74 2d 66 72 6f 6d 2d 6c 65 66 74 2e 6d 75 69 2d 6c 65 61 76 65 2c 0a 2e 68 69 6e 67 65 2d 6f 75 74 2d 66 72 6f 6d 2d 6d 69 64 64 6c 65 2d 78 2e 6d 75 69 2d 6c 65 61 76 65 2c 0a 2e 68 69 6e 67 65 2d 6f 75 74 2d 66 72 6f 6d 2d 6d 69 64 64 6c 65 2d 79 2e 6d 75 69 2d 6c 65 61 76 65 2c 0a 2e 73 63 61 6c 65 2d 69 6e 2d 75 70 2e 6d 75 69 2d 65 6e 74 65 72 2c 0a 2e 73 63 61 6c 65 2d 69 6e 2d 64 6f 77 6e 2e 6d Data Ascii: y.mui-enter,.hinge-out-from-top.mui-leave,.hinge-out-from-right.mui-leave,.hinge-out-from-bottom.mui-leave,.hinge-out-from-left.mui-leave,.hinge-out-from-middle-x.mui-leave,.hinge-out-from-middle-y.mui-leave,.scale-in-up.mui-enter,.scale-in-down.m
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2c 20 6f 70 61 63 69 74 79 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 74 72 61 6e 73 66 6f 72 6d 2c 20 6f 70 61 63 69 74 79 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 73 6c 69 64 65 2d 69 6e 2d 75 70 2e 6d 75 69 2d 65 6e 74 65 72 2e 6d 75 69 2d 65 6e 74 65 72 2d 61 63 74 69 76 65 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 0a 20 20 20 20 74 72 61 Data Ascii: ansition-property: -webkit-transform, opacity; transition-property: transform, opacity; -webkit-backface-visibility: hidden; backface-visibility: hidden;}.slide-in-up.mui-enter.mui-enter-active { -webkit-transform: translateY(0); tra
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 76 65 2d 61 63 74 69 76 65 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 0a 7d 0a 2e 73 6c 69 64 65 2d 6f 75 74 2d 75 70 2e 6d 75 69 2d 6c 65 61 76 65 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2c 20 6f 70 61 63 69 74 79 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 Data Ascii: ve-active { -webkit-transform: translateX(100%); transform: translateX(100%);}.slide-out-up.mui-leave { -webkit-transform: translateY(0); transform: translateY(0); transition-property: -webkit-transform, opacity; transition-prope
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 2c 20 6f 70 61 63 69 74 79 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 74 72 61 6e 73 66 6f 72 6d 2c 20 6f 70 61 63 69 74 79 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 7d 0a 2e 68 69 6e 67 65 2d 69 6e 2d 66 72 6f 6d 2d 74 6f 70 2e 6d 75 69 2d 65 6e 74 65 72 2e 6d 75 69 2d 65 6e 74 65 72 2d 61 63 74 69 76 65 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 32 30 30 30 70 78 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 32 30 30 30 70 78 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 2e Data Ascii: ransform, opacity; transition-property: transform, opacity; opacity: 0;}.hinge-in-from-top.mui-enter.mui-enter-active { -webkit-transform: perspective(2000px) rotate(0deg); transform: perspective(2000px) rotate(0deg); opacity: 1;}.
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 65 63 74 69 76 65 28 32 30 30 30 70 78 29 20 72 6f 74 61 74 65 59 28 39 30 64 65 67 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2c 20 6f 70 61 63 69 74 79 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 74 72 61 6e 73 66 6f 72 6d 2c 20 6f 70 61 63 69 74 79 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 7d 0a 2e 68 69 6e 67 65 2d 69 6e 2d 66 72 6f 6d 2d 6c 65 66 74 2e 6d 75 69 2d 65 6e 74 65 72 2e 6d 75 69 2d 65 6e 74 65 72 2d 61 63 74 69 Data Ascii: ective(2000px) rotateY(90deg); -webkit-transform-origin: left; transform-origin: left; transition-property: -webkit-transform, opacity; transition-property: transform, opacity; opacity: 0;}.hinge-in-from-left.mui-enter.mui-enter-acti
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 2e 68 69 6e 67 65 2d 6f 75 74 2d 66 72 6f 6d 2d 74 6f 70 2e 6d 75 69 2d 6c 65 61 76 65 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 32 30 30 30 70 78 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 32 30 30 30 70 78 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 74 6f 70 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 74 6f 70 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 Data Ascii: rotate(0deg); opacity: 1;}.hinge-out-from-top.mui-leave { -webkit-transform: perspective(2000px) rotate(0deg); transform: perspective(2000px) rotate(0deg); -webkit-transform-origin: top; transform-origin: top; transition-propert
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 6f 6d 2d 62 6f 74 74 6f 6d 2e 6d 75 69 2d 6c 65 61 76 65 2e 6d 75 69 2d 6c 65 61 76 65 2d 61 63 74 69 76 65 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 32 30 30 30 70 78 29 20 72 6f 74 61 74 65 58 28 39 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 32 30 30 30 70 78 29 20 72 6f 74 61 74 65 58 28 39 30 64 65 67 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 7d 0a 2e 68 69 6e 67 65 2d 6f 75 74 2d 66 72 6f 6d 2d 6c 65 66 74 2e 6d 75 69 2d 6c 65 61 76 65 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 32 30 30 30 70 78 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 Data Ascii: om-bottom.mui-leave.mui-leave-active { -webkit-transform: perspective(2000px) rotateX(90deg); transform: perspective(2000px) rotateX(90deg); opacity: 0;}.hinge-out-from-left.mui-leave { -webkit-transform: perspective(2000px) rotate(0deg)
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 2d 6f 72 69 67 69 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2c 20 6f 70 61 63 69 74 79 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 74 72 61 6e 73 66 6f 72 6d 2c 20 6f 70 61 63 69 74 79 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 2e 68 69 6e 67 65 2d 6f 75 74 2d 66 72 6f 6d 2d 6d 69 64 64 6c 65 2d 79 2e 6d 75 69 2d 6c 65 61 76 65 2e 6d 75 69 2d 6c 65 61 76 65 2d 61 63 74 69 76 65 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 32 30 30 30 70 78 29 20 72 6f 74 61 74 65 59 28 2d 39 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e Data Ascii: -origin: center; transition-property: -webkit-transform, opacity; transition-property: transform, opacity; opacity: 1;}.hinge-out-from-middle-y.mui-leave.mui-leave-active { -webkit-transform: perspective(2000px) rotateY(-90deg); tran
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 29 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2c 20 6f 70 61 63 69 74 79 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 74 72 61 6e 73 66 6f 72 6d 2c 20 6f 70 61 63 69 74 79 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 2e 73 63 61 6c 65 2d 6f 75 74 2d 64 6f 77 6e 2e 6d 75 69 2d 6c 65 61 76 65 2e 6d 75 69 2d 6c 65 61 76 65 2d 61 63 74 69 76 65 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 35 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 35 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 7d 0a 2e 73 70 69 6e 2d 69 6e 2e 6d 75 Data Ascii: ); transition-property: -webkit-transform, opacity; transition-property: transform, opacity; opacity: 1;}.scale-out-down.mui-leave.mui-leave-active { -webkit-transform: scale(0.5); transform: scale(0.5); opacity: 0;}.spin-in.mu

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:14 UTC	612	OUT	GET /css/font-awesome.css HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.richtimepieces.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:14 UTC	374	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:14 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Server: cloudflare Last-Modified: Thu, 03 Nov 2016 03:08:04 GMT Etag: W/"9226-5405cddafad00-gzip" Vary: Accept-Encoding Cache-Control: max-age=14400 Cf-Cache-Status: HIT Age: 5316 CF-RAY: 92a11777afa50f67-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 14:42:14 UTC	995	IN	Data Raw: 31 61 31 64 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2f 2a 20 46 4f 4e 54 20 50 41 54 48 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 41 77 65 73 Data Ascii: 1a1d/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) // FONT PATH * -------------------------- */@font-face { font-family: 'FontAwes
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 74 61 69 6e 65 72 20 2a 2f 0a 2e 66 61 2d 6c 67 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 33 33 33 33 33 33 33 33 65 6d 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 2e 37 35 65 6d 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 31 35 25 3b 0a 7d 0a 2e 66 61 2d 32 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 0a 7d 0a 2e 66 61 2d 33 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 65 6d 3b 0a 7d 0a 2e 66 61 2d 34 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 65 6d 3b 0a 7d 0a 2e 66 61 2d 35 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 65 6d 3b 0a 7d 0a 2e 66 61 2d 66 77 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 2e 32 38 35 37 31 34 32 39 65 6d 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e Data Ascii: tainer */.fa-lg { font-size: 1.33333333em; line-height: 0.75em; vertical-align: -15%;}.fa-2x { font-size: 2em;}.fa-3x { font-size: 3em;}.fa-4x { font-size: 4em;}.fa-5x { font-size: 5em;}.fa-fw { width: 1.28571429em; text-align
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 0a 20 20 7d 0a 7d 0a 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 20 7b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 Data Ascii: ; }}@keyframes fa-spin { 0% { -webkit-transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(359deg); transform: rotate(359deg); }}.fa-rotate-90 { -ms-filter: "progid:DXImageTransform.Microsoft
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 6d 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 2e 66 61 2d 73 74 61 63 6b 2d 31 78 2c 0a 2e 66 61 2d 73 74 61 63 6b 2d 32 78 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 66 61 2d 73 74 61 63 6b 2d 31 78 20 7b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 2e 66 61 2d 73 74 61 63 6b 2d 32 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 0a 7d 0a 2e 66 61 2d 69 6e 76 65 72 73 65 20 Data Ascii: m; height: 2em; line-height: 2em; vertical-align: middle;}.fa-stack-1x,.fa-stack-2x { position: absolute; left: 0; width: 100%; text-align: center;}.fa-stack-1x { line-height: inherit;}.fa-stack-2x { font-size: 2em;}.fa-inverse
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 31 36 22 3b 0a 7d 0a 2e 66 61 2d 63 6c 6f 63 6b 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 31 37 22 3b 0a 7d 0a 2e 66 61 2d 72 6f 61 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 31 38 22 3b 0a 7d 0a 2e 66 61 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 31 39 22 3b 0a 7d 0a 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6f 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 31 61 22 3b 0a 7d 0a 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6f 2d 75 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 Data Ascii: efore { content: "\f016";}.fa-clock-o:before { content: "\f017";}.fa-road:before { content: "\f018";}.fa-download:before { content: "\f019";}.fa-arrow-circle-o-down:before { content: "\f01a";}.fa-arrow-circle-o-up:before { content: "
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 2d 63 65 6e 74 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 37 22 3b 0a 7d 0a 2e 66 61 2d 61 6c 69 67 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 38 22 3b 0a 7d 0a 2e 66 61 2d 61 6c 69 67 6e 2d 6a 75 73 74 69 66 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 39 22 3b 0a 7d 0a 2e 66 61 2d 6c 69 73 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 61 22 3b 0a 7d 0a 2e 66 61 2d 64 65 64 65 6e 74 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 6f 75 74 64 65 6e 74 3a 62 65 66 6f 72 65 20 7b 0a 0d 0a 37 38 30 39 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 62 22 3b 0a 7d 0a 2e 66 61 2d 69 Data Ascii: align-center:before { content: "\f037";}.fa-align-right:before { content: "\f038";}.fa-align-justify:before { content: "\f039";}.fa-list:before { content: "\f03a";}.fa-dedent:before,.fa-outdent:before {7809 content: "\f03b";}.fa-i
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 35 35 22 3b 0a 7d 0a 2e 66 61 2d 6d 69 6e 75 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 35 36 22 3b 0a 7d 0a 2e 66 61 2d 74 69 6d 65 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 35 37 22 3b 0a 7d 0a 2e 66 61 2d 63 68 65 63 6b 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 35 38 22 3b 0a 7d 0a 2e 66 61 2d 71 75 65 73 74 69 6f 6e 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 35 39 22 3b 0a 7d 0a 2e 66 61 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 35 Data Ascii: ontent: "\f055";}.fa-minus-circle:before { content: "\f056";}.fa-times-circle:before { content: "\f057";}.fa-check-circle:before { content: "\f058";}.fa-question-circle:before { content: "\f059";}.fa-info-circle:before { content: "\f05
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 35 22 3b 0a 7d 0a 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 36 22 3b 0a 7d 0a 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 37 22 3b 0a 7d 0a 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 38 22 3b 0a 7d 0a 2e 66 61 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 39 22 3b 0a 7d 0a 2e 66 61 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e Data Ascii: a-comment:before { content: "\f075";}.fa-magnet:before { content: "\f076";}.fa-chevron-up:before { content: "\f077";}.fa-chevron-down:before { content: "\f078";}.fa-retweet:before { content: "\f079";}.fa-shopping-cart:before { conten
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 39 34 22 3b 0a 7d 0a 2e 66 61 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 39 35 22 3b 0a 7d 0a 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 39 36 22 3b 0a 7d 0a 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 39 37 22 3b 0a 7d 0a 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 39 38 22 3b 0a 7d 0a 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 39 39 22 3b 0a 7d 0a 2e 66 61 2d Data Ascii: fore { content: "\f094";}.fa-phone:before { content: "\f095";}.fa-square-o:before { content: "\f096";}.fa-bookmark-o:before { content: "\f097";}.fa-phone-square:before { content: "\f098";}.fa-twitter:before { content: "\f099";}.fa-
2025-04-02 14:42:14 UTC	1369	IN	Data Raw: 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 30 22 3b 0a 7d 0a 2e 66 61 2d 63 68 61 69 6e 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 31 22 3b 0a 7d 0a 2e 66 61 2d 63 6c 6f 75 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 32 22 3b 0a 7d 0a 2e 66 61 2d 66 6c 61 73 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 33 22 3b 0a 7d 0a 2e 66 61 2d 63 75 74 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 73 63 69 73 73 6f 72 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 34 22 3b 0a 7d 0a 2e 66 61 2d 63 6f 70 79 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 66 69 6c 65 73 2d 6f 3a 62 65 66 6f Data Ascii: content: "\f0c0";}.fa-chain:before,.fa-link:before { content: "\f0c1";}.fa-cloud:before { content: "\f0c2";}.fa-flask:before { content: "\f0c3";}.fa-cut:before,.fa-scissors:before { content: "\f0c4";}.fa-copy:before,.fa-files-o:befo

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://u.masdnfikjentriu.ru/dfgbwerfsd/dfgjher.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Windows Analysis Report
https://u.masdnfikjentriu.ru/dfgbwerfsd/dfgjher.html

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:14 UTC	660	OUT	GET /includes/templates/musheji_mobile/css/stylesheet_header.min.cart.css HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.richtimepieces.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:15 UTC	921	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:14 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Sun, 05 Jul 2020 04:12:54 GMT Cache-Control: max-age=14400 Expires: Wed, 02 Apr 2025 15:42:14 GMT Vary: Accept-Encoding CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k2YGvHytBx0Ky5yFH6249uCGHoF7HiIULam8xVc6CAxPDSzgKUULsX0ZPYHCUh8JBVXYG%2BNfbdN6PATOaPU4LwimYm1UcXQ7indxPq7uHELLcYc5GEIr3LaSRLqiLAxB6gh9LauubtHe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92a1177a4f8c4394-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=104226&min_rtt=103838&rtt_var=22492&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2847&recv_bytes=1232&delivery_rate=35470&cwnd=231&unsent_bytes=0&cid=1fc4c6a05adfdb95&ts=462&x=0"
2025-04-02 14:42:15 UTC	448	IN	Data Raw: 62 38 34 0d 0a 23 62 74 6e 5f 61 6e 69 6d 42 6f 78 43 61 72 74 7b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 32 30 3b 0d 0a 7d 0d 0a 2e 6d 75 74 6f 70 63 61 72 74 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 63 61 72 74 69 63 6f 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 20 33 36 70 78 3b Data Ascii: b84#btn_animBoxCart{ float: right; height: 36px; line-height: 36px;position:relative; text-align: left; z-index: 120;}.mutopcart{ display:block; background: url(../images/cartico.png) no-repeat center center; width: 36px;
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 62 6c 6f 63 6b 3b 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 7d 0d 0a 23 62 74 6e 5f 61 6e 69 6d 42 6f 78 43 61 72 74 20 61 3a 68 6f 76 65 72 20 2e 63 61 72 74 5f 69 6e 66 6f 73 7b 63 6f 6c 6f 72 3a 23 44 32 31 30 34 34 3b 7d 0d 0a 0d 0a 2e 6d 75 5f 63 68 65 63 6b 6f 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 22 2e 2e 2f 69 6d 61 67 65 73 2f 63 68 65 63 6b 5f 6f 75 74 2e 67 69 66 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 30 20 2d 35 36 70 78 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 42 38 30 38 30 37 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c Data Ascii: block; height: 20px;}#btn_animBoxCart a:hover .cart_infos{color:#D21044;}.mu_checkout{background: url("../images/check_out.gif") no-repeat scroll 0 -56px transparent; color: #B80807; display: block; float: right; font-weight: bol
2025-04-02 14:42:15 UTC	1138	IN	Data Raw: 20 61 7b 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 32 70 78 3b 7d 0d 0a 2e 61 6e 69 6d 42 6f 78 43 61 72 74 54 6f 74 61 6c 20 73 74 72 6f 6e 67 7b 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 70 78 3b 7d 0d 0a 2e 61 6e 69 6d 42 6f 78 43 61 72 74 54 6f 74 61 6c 2c 20 2e 61 6e 69 6d 42 6f 78 43 61 72 74 4c 69 6e 6b 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 45 43 30 30 38 43 3b 0d 0a 09 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 33 70 78 3b 0d 0a 7d 0d 0a 2e 61 6e 69 6d 42 6f 78 43 61 72 74 54 6f 74 61 6c 7b 20 70 61 64 64 69 6e 67 3a 35 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 Data Ascii: a{ padding-left:12px;}.animBoxCartTotal strong{ padding-right:5px;}.animBoxCartTotal, .animBoxCartLink {color: #EC008C;font-size: 13px;font-weight:normal;text-align: right;padding:3px;}.animBoxCartTotal{ padding:5px; line-height
2025-04-02 14:42:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:14 UTC	601	OUT	GET /fonts.css HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.richtimepieces.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:15 UTC	930	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:15 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 13 Feb 2025 01:28:35 GMT ETag: W/"19b-62dfbfa0c7154-gzip" Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5318 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vu2XNL%2BW2Y5PWVeUerwCDfzzK6zdKx%2BAamxx%2BHC%2Bs4%2BKAAAaxO0%2B%2FfFHCtd6UXfQhbIuP4lfuX8nJqZd8KKz0icv3duBAEElT6M8BjWNNPdLUaSVMm4H1fkL8bIziukwhtUaBeFIpNTO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92a1177bccaa97d2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=104042&min_rtt=103739&rtt_var=22342&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2847&recv_bytes=1173&delivery_rate=35594&cwnd=216&unsent_bytes=0&cid=74cf6019dea07284&ts=268&x=0"
2025-04-02 14:42:15 UTC	418	IN	Data Raw: 31 39 62 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 70 65 6e 73 61 6e 73 27 3b 0d 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 66 6f 6e 74 73 2f 6f 70 65 6e 73 61 6e 73 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 27 29 3b 0d 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 66 6f 6e 74 73 2f 6f 70 65 6e 73 61 6e 73 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 75 72 6c 28 27 66 6f 6e 74 73 2f 6f 70 65 6e 73 61 6e 73 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 75 72 6c 28 27 66 6f 6e 74 Data Ascii: 19b@font-face { font-family: 'opensans'; src: url('fonts/opensans-webfont.eot'); src: url('fonts/opensans-webfont.eot?#iefix') format('embedded-opentype'), url('fonts/opensans-webfont.woff2') format('woff2'), url('font
2025-04-02 14:42:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:15 UTC	741	OUT	GET /includes/templates/musheji_mobile/images/icon-zoom-h.png HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.richtimepieces.com/includes/templates/musheji_mobile/css/style.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:15 UTC	401	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:15 GMT Content-Type: image/png Content-Length: 3130 Connection: close Server: cloudflare Accept-Ranges: bytes Cache-Control: public, max-age=864000, must-revalidate Expires: Sun, 27 Apr 2025 04:20:49 GMT Cf-Cache-Status: HIT Age: 469286 Last-Modified: Fri, 28 Mar 2025 04:20:49 GMT CF-RAY: 92a11780cf4d1a48-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 14:42:15 UTC	968	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 0f 08 06 00 00 00 02 b1 24 11 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR$pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 90 02 49 b1 a4 54 d2 12 d2 46 d2 6e 52 23 e9 2c a9 9b 34 48 1a 23 93 c9 da 64 6b b2 07 39 94 2c 20 2b c8 85 e4 9d e4 c3 e4 33 e4 1b e4 21 f2 5b 0a 9d 62 40 71 a4 f8 53 e2 28 52 ca 6a 4a 19 e5 10 e5 34 e5 06 65 98 32 41 55 a3 9a 52 dd a8 a1 54 11 35 8f 5a 42 ad a1 b6 52 af 51 87 a8 13 34 75 9a 39 cd 83 16 49 4b a5 ad a2 95 d3 1a 68 17 68 f7 69 af e8 74 ba 11 dd 95 1e 4e 97 d0 57 d2 cb e9 47 e8 97 e8 03 f4 77 0c 0d 86 15 83 c7 88 67 28 19 9b 18 07 18 67 19 77 18 af 98 4c a6 19 d3 8b 19 c7 54 30 37 31 eb 98 e7 99 0f 99 6f 55 58 2a b6 2a 7c 15 91 ca 0a 95 4a 95 26 95 1b 2a 2f 54 a9 aa a6 aa de aa 0b 55 f3 55 cb 54 8f a9 5e 53 7d ae 46 55 33 53 e3 a9 09 d4 96 ab 55 aa 9d 50 eb 53 1b 53 67 a9 3b a8 87 aa 67 a8 6f 54 3f a4 7e 59 fd 89 06 59 c3 4c c3 4f 43 a4 51 Data Ascii: ITFnR#,4H#dk9, +3![b@qS(RjJ4e2AURT5ZBRQ4u9IKhhitNWGwg(gwLT071oUX*\|J&/TUUT^S}FU3SUPSSg;goT?~YYLOCQ
2025-04-02 14:42:15 UTC	793	IN	Data Raw: 3d 54 52 8f d6 2b eb 47 0e c7 1f be fe 9d ef 77 2d 0d 36 0d 55 8d 9c c6 e2 23 70 44 79 e4 e9 f7 09 df f7 1e 0d 3a da 76 8c 7b ac e1 07 d3 1f 76 1d 67 1d 2f 6a 42 9a f2 9a 46 9b 53 9a fb 5b 62 5b ba 4f cc 3e d1 d6 ea de 7a fc 47 db 1f 0f 9c 34 3c 59 79 4a f3 54 c9 69 da e9 82 d3 93 67 f2 cf 8c 9d 95 9d 7d 7e 2e f9 dc 60 db a2 b6 7b e7 63 ce df 6a 0f 6f ef ba 10 74 e1 d2 45 ff 8b e7 3b bc 3b ce 5c f2 b8 74 f2 b2 db e5 13 57 b8 57 9a af 3a 5f 6d ea 74 ea 3c fe 93 d3 4f c7 bb 9c bb 9a ae b9 5c 6b b9 ee 7a bd b5 7b 66 f7 e9 1b 9e 37 ce dd f4 bd 79 f1 16 ff d6 d5 9e 39 3d dd bd f3 7a 6f f7 c5 f7 f5 df 16 dd 7e 72 27 fd ce cb bb d9 77 27 ee ad bc 4f bc 5f f4 40 ed 41 d9 43 dd 87 d5 3f 5b fe dc d8 ef dc 7f 6a c0 77 a0 f3 d1 dc 47 f7 06 85 83 cf fe 91 f5 8f 0f 43 Data Ascii: =TR+Gw-6U#pDy:v{vg/jBFS[b[O>zG4<YyJTig}~.`{cjotE;;\tWW:_mt<O\kz{f7y9=zo~r'w'O_@AC?[jwGC

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:15 UTC	664	OUT	GET /images/banners/slick04.jpg HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.richtimepieces.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:15 UTC	921	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:15 GMT Content-Type: image/jpeg Content-Length: 229972 Connection: close last-modified: Thu, 27 Mar 2025 10:37:28 GMT Accept-Ranges: bytes Cache-Control: public, max-age=864000, must-revalidate Age: 533087 cf-cache-status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HFg9lfcZqolYdMyfLEOgJF%2BKj3Ysn%2F8LkNgmBLxHlmF%2BQBW9Axv8eopS%2F1L4FoT8JkZQQuKNoPTt6D7cYMogAxYAwDFKh6DP5u2%2FZUcKX%2BN8g02VQbF4tk%2B8p9QsAMge3l84rLsWKmxd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92a11780ca741895-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=107009&min_rtt=104443&rtt_var=25896&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2847&recv_bytes=1236&delivery_rate=33190&cwnd=227&unsent_bytes=0&cid=1d9716bbb8d75b15&ts=277&x=0"
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 72 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 31 01 02 00 0e 00 00 00 32 00 00 00 12 02 03 00 02 00 00 00 02 00 02 00 69 87 04 00 01 00 00 00 40 00 00 00 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 8d 04 00 00 00 00 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFrExifII*12i@www.meitu.com0220@CC
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 07 2b 00 ce 0f 4a 57 40 d5 87 96 24 75 a6 20 0e 40 c5 00 27 5a 00 42 ea 3a 9a 0d 12 ba 17 cd c7 f1 7e 95 57 ba d0 89 24 84 79 0f 04 54 dd 90 e2 98 19 03 72 68 bb 33 e5 b3 17 cd c7 f1 7e 94 5d 94 06 40 7a b7 e9 45 d8 5e 42 6e 53 de 80 bb 60 d2 60 60 1a 00 6f 98 ff 00 de a7 76 00 58 9e a6 9a dc 52 d8 4a a3 3b a4 14 12 de a1 49 ec 2b b0 24 9e a6 84 ac 17 b2 0a 60 dc 42 83 36 19 3e b4 00 8c d8 e0 1e 68 01 84 e7 93 40 08 58 0c f3 40 0c 77 20 75 a0 08 d9 fb 13 40 11 c8 e3 a0 34 10 f7 1a 5f 23 81 40 88 d9 88 38 14 14 93 4c 63 9c 0c 50 5e 96 b1 19 62 3f 87 f5 a0 84 ac 32 81 4a 4d 07 4a 0c 9c d9 1d 04 39 48 64 8e 57 bf d2 82 95 8c ad 4e e8 17 28 5b 9a 97 25 63 68 ad 74 2a 22 3b 92 71 c5 73 cd dc d9 21 5d 0a b6 31 44 7e 11 e9 71 b8 39 c5 37 b0 ec c9 bc a3 e5 10 47 Data Ascii: +JW@$u @'ZB:~W$yTrh3~]@zE^BnS```ovXRJ;I+$`B6>h@X@w u@4_#@8LcP^b?2JMJ9HdWN([%cht*";qs!]1D~q97G
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: c6 6a 1b b9 49 58 cf 9c a9 e0 9f c6 90 cc 5d 6e da 09 21 28 f8 38 1c 1c d0 68 79 2f 8d ec 82 dd ca 42 f1 bb 8c 50 44 d5 cf 35 f1 3d bb db cc 54 0e 01 ab 5b 13 7b 14 62 b8 02 30 41 e9 c5 5a d8 7b 98 be 2d 60 c7 21 bb 74 ad e3 d0 0e 1f 53 71 e6 b6 0f 4a b0 29 5b 6a 52 5a ce 5a 37 c0 03 a5 44 e3 cc 89 5f 11 db 78 23 c4 d3 02 37 c8 d8 c8 cd 2a 52 e4 76 22 a5 3b a3 e8 8f 82 be 3c 0d 24 76 13 49 f2 9c 00 6b db a3 3b c0 f1 b1 14 ac f4 3d d2 ca e1 26 88 3a 36 41 03 f0 a1 1c 89 58 9f ca c7 04 66 98 c0 a0 53 8c 0a 05 64 46 ea 37 72 28 04 92 1a ca 00 ce 28 18 9f 21 18 22 82 5a 62 38 4d a7 6a f3 40 72 b2 32 b9 ea 28 0e 51 0a ae 3e ee 68 0e 51 85 50 f4 5c 50 27 16 46 f0 af 5d b5 5c a4 72 a2 17 b7 4c f0 bf 9d 1c a1 ca 88 a4 80 01 b8 00 45 1c a4 38 ea 43 2a 2a 0c f1 54 Data Ascii: jIX]n!(8hy/BPD5=T[{b0AZ{-`!tSqJ)[jRZZ7D_x#7Rv";<$vIk;=&:6AXfSdF7r((!"Zb8Mj@r2(Q>hQP\P'F]\rLE8C*T
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 6e 85 9d f1 8e bb 4d 35 76 49 cc eb df 11 74 6d 31 1a 49 2e f6 2a ae 4e e2 2a 88 96 e7 07 ab 7e d2 de 12 b5 9c c2 75 58 f9 fc ea 1d 48 23 17 7b 90 5b 7e d0 de 19 b8 8b 74 7a a2 70 c7 38 fc 3d ea 1d 68 ae a0 ad d4 e3 7c ac 47 18 07 a4 63 b7 b0 af a7 e6 67 e7 b2 b7 33 05 8b 9e 7d 3b 8a 1b b8 ac 80 40 a4 f3 d3 e9 48 76 63 84 2a bd bf 4a 5a 0a c3 84 41 4e 40 a7 74 3b 31 76 93 da 81 0e 29 c7 5a 02 cc 70 04 8c 63 b5 03 b3 01 19 5f 5a 02 cc 19 0b 76 3f 95 01 66 2a 47 81 40 59 8b e5 80 38 fe 54 0d 45 8f 55 05 71 ef 41 a2 8d c5 11 af 71 9a 0a e5 41 b3 e6 f6 a0 39 50 bb 17 d2 81 38 d9 0d 28 73 8a 57 44 d9 8f 02 35 5c 15 24 fa d3 1a 40 8a a7 a0 c7 a6 68 1f 2a 14 a6 0f 03 f4 a0 7c a8 30 de 86 81 f2 db 60 55 c9 e7 f2 a0 2c c5 29 93 d6 81 f2 b1 55 71 ce 68 0e 56 2e d3 Data Ascii: nM5vItm1I.N~uXH#{[~tzp8=h\|Gcg3};@HvcJZAN@t;1v)Zpc_Zv?fG@Y8TEUqAqA9P8(sWD5\$@h*\|0`U,)UqhV.
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 21 41 5c a2 84 26 81 59 8f c0 f4 a0 39 58 a1 49 e9 40 72 b0 08 4d 01 66 18 39 c5 2b a0 e5 62 84 39 e4 51 74 c3 95 8b b1 7d 29 d9 07 2b 14 44 0f 6a 96 ed b0 d4 1b 17 ca 23 d3 f2 a3 98 7c 8c 5d 87 d4 51 cc ca e4 40 b1 93 d6 97 31 4a 36 1d e5 aa 9f 98 51 cc 31 3c a2 4f 1f ca 8e 74 01 e4 11 de 87 32 65 b0 e0 ac 7b 53 53 1a 4c 5f 2d a9 b9 26 0e 3a 8a 10 63 9a 2e 83 97 51 76 e0 0c 0e 29 95 66 39 17 b9 a0 12 6c 75 01 ca c5 51 93 8a 07 11 4a 72 31 41 5d 07 01 d8 0a 00 91 14 e3 15 2d b0 24 8d 7b 1f d2 93 77 01 e1 42 f4 a4 03 80 24 f1 40 12 22 63 91 59 9a 12 0e 46 df 7a 05 64 39 14 8e 28 2a 2a cc 9a 18 ce 68 35 8e c5 a8 a3 00 8c 8a cc d8 99 00 cd 02 6a e3 c6 47 03 8a 0a 48 7a 82 07 3e b4 16 91 22 29 e9 49 ec 5a 85 c9 e2 07 b0 a8 34 8c 2c 4e 80 ee a0 d4 9e 21 e8 3e Data Ascii: !A\&Y9XI@rMf9+b9Qt})+Dj#\|]Q@1J6Q1<Ot2e{SSL_-&:c.Qv)f9luQJr1A]-${wB$@"cYFzd9(**h5jGHz>")IZ4,N!>
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 83 d4 d3 43 1c 8a bd 2a 5b b0 0e 50 07 4a c9 c9 dc ae 52 44 19 5e 05 09 b6 c1 a4 90 f5 5c f5 cd 51 23 91 55 4f 35 2d b4 c1 6a 49 52 6a b7 15 01 27 02 82 c9 e3 8d b8 04 50 16 d4 b3 14 61 14 7a d0 69 18 93 05 03 a5 66 68 3e 35 3d 70 68 1a 57 1e aa 73 d2 82 f6 25 8d 79 c9 a9 72 2e 11 d4 b3 14 44 1e 45 26 db 3a 62 ac 89 a3 50 0f 02 90 12 22 fc d9 c5 00 4b 18 eb 40 13 2e 48 00 0a 00 95 10 50 34 ae 3d 40 e0 50 3e 51 e8 ad e9 40 72 93 44 a4 75 a0 a2 78 bb 71 52 dd 86 95 c9 d7 00 74 fd 2b 37 2d 4d a2 ac 87 c6 a6 a4 a5 d8 98 0e 00 a0 43 c0 00 60 50 5c 63 75 71 c9 d6 83 5d 89 63 66 04 00 33 53 ca 80 b1 16 47 26 93 56 26 45 88 f9 50 c4 d2 24 9e 03 c5 0f 53 48 13 67 28 58 8e 82 a5 a3 41 f0 7d d0 48 c6 4d 44 b6 2a 24 e8 39 a8 28 99 4e 46 68 01 68 1a 76 1e 84 e2 82 93 Data Ascii: C[PJRD^\Q#UO5-jIRj'Pazifh>5=phWs%yr.DE&:bP"K@.HP4=@P>Q@rDuxqRt+7-MC`P\cuq]cf3SG&V&EP$SHg(XA}HMD$9(NFhhv
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 9f bd 41 64 a9 c1 c0 a0 09 14 64 d0 6b 08 dc 9e 28 87 53 da a1 ee 6c a3 64 4e b9 c6 4d 21 92 44 bc f3 de 80 27 44 cf 34 01 22 46 07 6a 00 95 54 28 a0 07 c7 de 82 a2 3d 00 26 82 89 50 1e b9 e2 80 26 8b e6 eb 4a 5b 0d 6e 4e aa 14 0c 0e d5 8b 66 a9 22 58 c6 7a d2 28 95 3e f0 a0 07 d0 69 05 71 ca 58 f7 a0 d2 d6 d0 70 24 1c 8a 00 9e 2c 03 ba a2 ec 8b b2 cc 63 70 14 5e e2 bd c9 e3 53 f7 47 4e d4 80 9e 35 0a a0 e3 9a 0d 62 4a bf 77 14 a5 b1 63 e3 6c 61 7d 3a 56 72 d8 a8 96 23 2a 46 45 41 44 88 4e 71 40 0e 00 9e 94 00 f5 04 0e 68 2a 3b 0f 42 4f 5a 0a 24 40 31 9c 52 e5 43 5b 92 a3 f6 1c 56 73 56 35 89 28 39 19 a8 28 6b 80 0e 45 43 dc 13 d4 17 69 e8 39 a4 6b 1d 47 23 b6 4f 3d 28 2c 96 27 cf 04 d4 3d c8 7b 93 2b e7 eb 48 43 8b 13 d4 d2 b2 01 2a 5a b3 35 86 c2 c6 e1 Data Ascii: Addk(SldNM!D'D4"FjT(=&P&J[nNf"Xz(>iqXp$,cp^SGN5bJwcla}:Vr#FEADNq@h;BOZ$@1RC[VsV5(9(kECi9kG#O=(,'={+HC*Z5
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 90 68 36 1c bb 88 fb d4 00 f0 87 82 4d 00 4f 12 81 8a 99 13 22 75 18 02 a4 92 54 62 0e 7b 50 05 98 5c 63 ad 06 b1 dc 95 3a fe 14 16 3d 73 91 59 c9 15 1d 89 a3 6c 0e 2b 32 89 68 02 44 38 00 fb 50 03 cb 8c 70 68 01 55 88 19 a0 d1 13 23 00 39 a0 09 23 6c 83 83 53 23 4a 64 8a f8 e0 d6 2c d0 78 5d c3 39 14 20 0f 2b 6f 20 52 7b 0d 3b 31 30 3d 2a 0a e6 43 91 c8 38 a4 d5 c5 cf ad 89 04 9c f4 a4 d2 29 47 a8 f1 26 79 a9 01 18 9e b4 1a c3 61 a1 fd 6b 37 b9 b2 d8 7a c8 c7 b5 27 b1 ac 51 2c 72 9c e4 d4 6a 6f f0 a2 ed a4 be fd e9 d9 8b 99 17 a1 9f 23 00 d5 2d 85 76 48 25 24 71 4c 39 98 8e e4 8c d4 c8 b4 c8 c1 19 c5 49 a2 96 a4 52 8e 73 ef 41 bc 5e 83 33 b7 9c d0 55 98 f8 e4 52 7a d0 9d 8c ea 45 93 c6 d9 e2 b4 4c e4 9c 49 a3 39 20 d5 73 18 8f 6c e3 e5 a3 98 cc 61 27 14 Data Ascii: h6MO"uTb{P\c:=sYl+2hD8PphU#9#lS#Jd,x]9 +o R{;10=*C8)G&yak7z'Q,rjo#-vH%$qL9IRsA^3URzELI9 sla'
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 71 40 12 46 fb 78 f7 a9 91 51 92 44 aa c1 8e 05 65 24 69 cc 89 57 20 63 3d a9 14 3d 09 23 9a 1e a0 30 8e 70 6a 1a b0 09 90 0e 09 a1 34 52 6a c3 81 39 1c d0 da b0 ae ee 4a ac 00 c1 ac 8b 11 df 8e 28 34 83 b2 23 2f 92 70 6a 1e e6 ca 4a c0 27 0a 70 4f e5 52 cd e3 24 99 22 4f 9e 86 92 d0 d2 53 4d 16 ed a7 ff 00 6b bd 1c c4 39 a4 5c 86 73 dd aa 88 e6 4d 96 23 9c 63 a9 a0 64 82 55 20 8d d4 9a b9 69 8d 24 06 dd 9a 87 a1 aa 63 5c ab 8e 28 37 84 95 d1 03 9e 71 9a 0e 84 ee 22 3f cd 81 49 a6 29 16 62 72 a3 39 a6 73 4d 16 62 7f 4a bd 4e 37 b8 f2 e4 0e 4d 26 da 32 22 92 40 3a 1a 39 98 15 e4 95 89 c0 6a 39 90 10 19 18 f7 a9 60 26 58 fd e3 40 06 01 ea 28 00 e9 c5 00 19 ed 40 01 e0 66 80 13 7a fa d0 01 bc 7a 1a 00 42 fc 71 40 08 58 9e a6 80 12 80 1b bc 76 14 00 d2 7b 9a Data Ascii: q@FxQDe$iW c==#0pj4Rj9J(4#/pjJ'pOR$"OSMk9\sM#cdU i$c\(7q"?I)br9sMbJN7M&2"@:9j9`&X@(@fzzBq@Xv{
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 34 5a e0 4a a4 03 cd 43 48 b5 b1 2a 11 8c 56 4c d1 6c 3d 5b 03 a5 03 11 89 27 2b f8 e6 93 d8 06 90 d9 fb a2 a0 07 13 81 9a 06 b5 62 2c a4 9e 7f 9d 2e 54 6b ca 89 09 ca e4 7a 54 b5 61 a5 62 26 1b 7e 60 7b d6 6f 73 45 b1 0c a7 0d d6 91 bc 77 1d 1b 9f 5a 99 14 59 8a 52 a7 83 52 4c 8b 11 5e e0 f3 fc ea 93 44 96 a3 be 52 38 34 d3 34 26 4b a5 24 60 d3 2a 24 a1 f7 2e 41 a8 7b 9a ad 84 f3 00 f5 a4 6b 1e 84 52 b0 ce 49 a0 e9 5b 8d 42 09 04 1e f4 0a 6e cc b3 1b 9c 0d c2 83 9a 6c b3 03 1c 64 d6 87 27 51 64 94 01 53 23 32 b4 f3 f3 d6 a4 0a ed 30 27 93 fa d0 03 41 c1 cd 00 3b 79 f4 14 00 9b ce 73 40 0b bc fa 0a 00 4c f3 92 4f e1 40 01 6e 30 33 f8 d0 02 50 01 40 05 00 35 98 83 81 40 08 5c 91 8a 00 4a 00 0f 23 14 00 81 42 f4 a0 01 88 c1 e6 80 19 40 01 04 75 14 00 c3 8c Data Ascii: 4ZJCHVLl=['+b,.TkzTab&~`{osEwZYRRL^DR844&K$`$.A{kRI[Bnld'QdS#20'A;ys@LO@n03P@5@\J#B@u

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:15 UTC	689	OUT	GET /bmz_cache/b/breitling-hp6hvu53jpg.image.320x320.jpg HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.richtimepieces.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:15 UTC	910	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:15 GMT Content-Type: image/jpeg Content-Length: 25692 Connection: close last-modified: Fri, 28 Mar 2025 03:42:28 GMT Accept-Ranges: bytes Cache-Control: public, max-age=864000, must-revalidate Age: 471586 cf-cache-status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d5k0o5nKDKj1iO51xG3KciARBAs2VDnGAAhPkWw4%2FZoycUksqTab%2BPfn2oC0yOjOhWC3tQep3dB2HOA29tqJrHtp0QSM3vXJRtJZUE1oplbrtFPHmZ8ja2ko0POXTs7ugsmSMW6TGrf1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92a11780c9962f06-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=107697&min_rtt=104127&rtt_var=25718&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1261&delivery_rate=35771&cwnd=225&unsent_bytes=0&cid=343c50d5dcdea18a&ts=272&x=0"
2025-04-02 14:42:15 UTC	459	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 35 0a ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 40 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85C!"$"$C@@"
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 2e 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 8a f2 75 b6 b5 92 77 fb a8 a5 8f Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?.((((uw
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: e1 43 f7 56 e6 5f c5 3f d9 f7 5f f0 ec 9a 7b 78 4d ee fc 4b 0d c1 f2 e7 f2 ed f6 bc 32 7a 90 09 c2 1f ef 1e 98 e7 b5 77 3f 11 3f 67 ed 0d 3c 15 6f 07 83 a3 63 e2 3b 60 9e 6c 93 5d 90 97 7c 00 e3 e6 3b 57 9e 47 4e 98 af 23 d5 3e 2f fc 46 d4 37 06 f1 01 b4 43 fc 36 b0 22 63 f1 c6 7f 5a f6 ff 00 83 9e 3a 3e 2f f0 e0 4b c9 cf f6 bd 98 09 74 bb b0 64 1f c3 20 1e 87 bf be 7d a9 54 85 48 2b b1 c6 51 93 b2 19 a4 7c 16 f0 ec 1f 0a 13 46 d4 f4 9b 67 f1 24 d6 ec d3 ea 08 c5 9a de 63 92 a1 48 38 2a a7 0a 70 39 19 ac ff 00 86 3f 09 34 2f 0c e8 97 1f f0 9d 69 7a 7e b7 a8 5d cb 80 81 d8 ad bc 40 7f 09 18 3b 89 39 cf b0 af 43 9e e2 ee 5b 8f b2 db b9 48 c9 d8 5d 50 bb bb e0 1d 88 b9 19 38 20 92 4e 06 47 5c e2 93 51 b0 fb 12 79 b7 1f 68 21 10 bb a5 cc 6a 1f 6f 76 56 53 83 Data Ascii: CV_?_{xMK2zw??g<oc;`l]\|;WGN#>/F7C6"cZ:>/Ktd }TH+Q\|Fg$cH8*p9?4/iz~]@;9C[H]P8 NG\Qyh!jovVS
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 11 bd 42 40 3f e7 94 46 41 ff 00 8e e6 b5 7e 15 3d bf 82 fe 20 5b 6a 9e 2e b4 be b0 82 08 a4 08 5e d5 c9 12 15 2a 32 b8 ce 30 4f 6f 4a ef 8c a1 08 7b ba 9c ce 2e 52 d4 f3 e9 e2 96 09 de 09 e3 78 e5 8d 8a ba 38 c1 52 0e 08 23 b1 a6 60 11 c8 ad 2f 12 5f be ad e2 1d 47 55 65 6c de 5d 49 3e 08 e7 e6 62 40 fd 6b b4 f8 c7 e1 9d 17 c2 76 7e 1d d2 ed 60 64 d5 9a cf cc d4 5b cc 27 73 70 3a 1e 07 cc 1f a7 61 5a 73 da c9 f5 23 97 73 ce ed de 5b 69 c4 f6 93 4b 6f 28 e8 f1 b1 52 3f 2a f4 1f 06 7c 5c f1 06 89 32 47 aa 46 ba ad a8 e0 ee e2 40 3e bd eb 91 d2 7c 3f ab ea ba 6e a1 a9 58 59 3c f6 9a 72 79 97 52 02 31 1a e0 9c f2 79 e0 13 c5 66 c3 14 b3 cc 90 42 8d 24 92 30 54 45 19 2c 4f 00 01 4a 70 84 f7 08 ca 51 3e ba f0 3f c5 2b 0f 12 5a 9b 3d 1b 52 8a cd d9 30 61 3f 2b Data Ascii: B@?FA~= [j.^20OoJ{.Rx8R#`/_GUel]I>b@kv~`d['sp:aZs#s[iKo(R?\|\2GF@>\|?nXY<ryR1yfB$0TE,OJpQ>?+Z=R0a?+
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 45 71 1e 73 84 61 c1 e0 2a 9c 12 31 9f 5a d5 fd 9c fc 25 fd a1 ac 49 e2 7b c8 c3 5b 58 36 cb 70 7f 8a 6c 67 3f f0 10 73 f5 23 d2 bd 06 f9 ae ad 4c fa 6e a9 68 9b 0e 04 f0 4c 82 48 9f 3d 37 29 e3 e9 91 9f 4a e6 5f c3 ba 86 97 24 d7 bf 0f f5 76 d1 ae a5 19 93 4e 9d c3 da cc 7f d9 2f 9d ad e9 bb 23 fd a1 5a aa d7 8b 5d 59 3c 9a a6 73 df b4 4f 8b bf b5 75 e4 f0 e5 9c a4 da 69 ed ba e0 83 c3 cf 8e 9f f0 10 71 f5 26 bc a7 ad 75 7e 12 f0 bb df f8 f9 34 5f 14 4c da 6b 2b b4 b7 7f 6b 6f 2e 47 c7 25 41 3d 4b 67 af a6 4d 54 f8 8b 7b a1 5e f8 b2 ee 4f 0e 59 c5 6b a6 c7 88 e3 f2 c6 16 42 bd 5c 0e c0 ff 00 f5 eb ae 95 a3 68 23 09 a6 fd e6 3b c0 fe 30 d5 bc 25 7c 24 b3 7f 3a cd 8f ef ad 64 e5 18 77 c0 3d 0d 7d 15 e1 ff 00 1a c1 e2 8f 07 cd 1e 8d 1a 4a a1 71 f6 28 e2 00 Data Ascii: Eqsa*1Z%I{[X6plg?s#LnhLH=7)J_$vN/#Z]Y<sOuiq&u~4_Lk+ko.G%A=KgMT{^OYkB\h#;0%\|$:dw=}Jq(
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: d7 4a 40 2f 2c 87 01 14 64 70 07 cc d9 1e 80 56 b9 af 16 f8 d9 f1 0f c5 fa 1e b7 e4 78 3b 4c fb 7d 9e 94 8b 26 b0 e6 0f 31 01 71 95 42 47 2b 85 19 24 74 c8 cd 2a 70 95 49 72 a1 ca 4a 2a ec 9b c5 1a ef 85 35 4b 99 87 88 ad 20 b1 8c 19 12 2b 8b 67 69 2e 21 2b 30 88 09 63 55 ca 97 2d 90 bc e4 03 9e 95 c9 eb 9f 0f f5 3b 38 7e db a4 cd 0d fd 8c 8b be 19 62 3f 2c 83 d0 0e c7 e9 f9 0a e8 bc 15 f1 0f c2 7f 13 23 8f 4e 9d e7 d1 f5 bc 31 31 a9 5d ef 94 2a e1 58 a9 59 14 a9 23 0c 33 8e 7b 66 bd 3a dd 2f 61 d4 ac f4 5b 5d 3d 0e 8b 6f 64 04 b7 13 b6 e6 66 1f 2a 46 a3 39 24 00 4b 13 ed 4e a4 1c 1d 9a b3 08 c9 49 5d 1f 2a f8 87 4f d2 7c 43 65 fd 91 e2 4b 77 cc 3f 2c 37 00 01 3d a9 3f dd 27 aa f7 da 78 3f ad 79 65 c7 82 e1 f0 ff 00 8c 6c 2c fc 53 76 22 d0 ee 24 25 2f e2 Data Ascii: J@/,dpVx;L}&1qBG+$tpIrJ5K +gi.!+0cU-;8~b?,#N11]XY#3{f:/a[]=odfF9$KNI]*O\|CeKw?,7=?'x?yel,Sv"$%/
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: c5 d7 98 10 b4 85 43 02 4e 30 9b 8e d8 22 cf 19 fc f3 cd 45 a7 59 eb 7e 1f d4 7c 2d 7f 37 86 75 2d 4e 1b 0d 0b ec e1 6d 4c 64 c3 70 c5 43 e4 33 0f e1 40 32 3d 6b 53 55 d7 2c f5 49 d6 6d 57 e1 4e ad 7b 2a ae d5 7b 8b 5b 69 08 1e 99 2f d2 b6 b2 e6 be e9 91 ad 8a 16 c3 fe 12 eb b8 2f fc 5d e2 1d 22 1b 48 5c 49 06 97 6f 74 9e 52 30 e4 33 92 73 23 0e d9 00 0e c3 bd 7a 8e 9a 6d 3e c7 1f d8 a4 8e 48 31 f2 34 6c 19 4f e2 2b cc 8d c7 87 8f 5f 83 97 9c ff 00 d4 3a d7 ff 00 8a ad bf 82 da 7d e6 9b e1 3f b3 dd 58 3d 86 6e 27 75 b7 60 07 96 ad 33 b2 af 1c 70 08 e9 59 d4 5a 5c a8 bd 4e 9b c5 9a d5 af 87 7c 3d 7d ad 5e 7f a9 b4 84 c8 54 75 73 d9 47 b9 38 03 eb 5c ff 00 83 2d 13 c2 be 08 9b 57 f1 14 c9 0d e5 c6 fd 4b 55 99 fa 2c 8f f3 30 fa 28 c2 81 ec 2a bf 8b 0f fc 24 Data Ascii: CN0"EY~\|-7u-NmLdpC3@2=kSU,ImWN{{[i//]"H\IotR03s#zm>H14lO+_:}?X=n'u`3pYZ\N\|=}^TusG8\-WKU,0($
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: fa 3e bb 1a e5 ec a7 6c 89 00 fe 38 9b a4 8b ee 39 1d c0 ae a2 79 a2 82 26 96 69 12 28 d4 65 99 d8 00 3f 13 5c 72 8b 8b b3 37 4d 35 72 43 d2 bc c7 5f f0 7f 89 60 6d 53 44 f0 dc 9a 7a 78 7b 5a 0c d3 a5 c2 17 6b 46 7c 89 04 4b c0 c3 67 38 3c 03 9e 2b bf d3 35 7d 2f 54 f3 7f b3 75 1b 4b cf 29 b6 c9 e4 4c af b0 fa 1c 13 8a bf 55 19 4a 0c 4d 29 19 9e 19 d3 e4 d2 74 2b 3d 36 4b 87 b8 6b 68 52 2f 31 ce 59 b6 80 32 4f 73 c5 69 62 b9 1f 13 6a 5a ce 9b 74 cd 1c db 60 6f b8 4a 0d a3 f1 c1 f4 27 fc 2b 06 f3 c4 3a fc ae cb 15 f1 31 36 7c b6 89 51 83 fb 71 c8 3c f6 fc 33 50 dd ca 48 f4 b7 3b 10 b0 05 88 1d 07 7a cd d1 75 64 bf 88 f9 c8 2d e6 0e 50 c6 cd c9 20 e0 e3 d4 70 79 ef 5c b6 9f aa 6a d3 59 45 6e f7 4e 22 91 d8 b5 c1 1f 30 45 c0 3c f6 c9 ce 33 ce 3d f9 ac af 26 Data Ascii: >l89y&i(e?\r7M5rC_`mSDzx{ZkF\|Kg8<+5}/TuK)LUJM)t+=6KkhR/1Y2OsibjZt`oJ'+:16\|Qq<3PH;zud-P py\jYEnN"0E<3=&
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 67 98 eb 7a ee 83 ac 43 1e 8f f1 0f 46 b8 f0 f5 e0 70 6d ee 66 6f dd 2c 9d 9a 1b 95 e1 5b eb 83 ed 5e 47 f1 d2 f7 57 bc b2 7d 12 6b d8 f5 b8 34 49 d7 cb d5 11 7e 62 25 5c ec 93 1f 29 65 01 72 c3 d4 67 93 5f 52 de 5a db 5e 5a c9 6d 75 6f 14 f0 c8 36 bc 72 20 65 61 e8 41 e0 d6 36 8f e1 0f 0e e9 16 b3 da 58 69 56 d1 5b 4f bb cc 84 20 28 43 75 18 3d 8d 75 61 f1 51 a3 35 3b 6d d0 c2 ad 17 52 2e 37 dc f3 1d 0f e1 5d 85 a6 81 63 af 7c 3a f1 1c f6 ba b2 c4 1c 5d 19 bc c8 ae b3 c9 57 1d 31 ed 8f c2 ba 0f 08 7c 4c 61 aa af 86 bc 71 63 fd 83 ae e4 2a 17 38 82 e7 d0 c6 c7 8e 7d 33 f4 26 b3 75 5f 0a 78 8b e1 dd fc ba e7 80 43 de e9 2e db ef 34 47 62 7e ad 11 eb 9f 6e bf 5e db 96 b7 3e 08 f8 bd e1 97 82 78 52 66 41 89 60 94 6d b8 b5 7f e6 3e a3 83 5a d4 92 a8 b9 a7 ef Data Ascii: gzCFpmfo,[^GW}k4I~b%\)erg_RZ^Zmuo6r eaA6XiV[O (Cu=uaQ5;mR.7]c\|:]W1\|Laqc*8}3&u_xC.4Gb~n^>xRfA`m>Z
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 39 38 18 fa 11 5e e7 67 f0 e6 d5 a3 f3 5e 6b d8 dd ce fd ab 1a 00 b9 e7 1d 7b 57 95 25 66 d1 d8 9d d5 cd bf 84 d7 42 6d 0a 6b 7c f3 0c d9 1f 42 3f c4 1a ec c5 73 1e 14 d0 97 c3 de 7f 92 6e a7 12 81 90 51 46 31 f8 fb d7 4a a7 20 1c 11 ec 69 0c 7d 14 94 b4 00 b4 51 45 00 07 a5 79 4f 8e 2f d6 ce c3 59 d5 81 6d d6 b0 cf 38 e7 8f 95 59 bf a5 7a b1 e9 5e 11 f1 82 63 17 c3 6f 14 4e 18 9c e9 77 08 30 31 f7 91 87 f5 a1 01 f1 8d d6 87 aa d8 e8 f6 3a 9d cd ab 25 a5 e9 2b 6f 26 e0 77 91 ec 0e 47 4e f5 d2 db 7c 2e f1 84 f6 02 ec 5a 5b c6 cc bb 96 09 26 0b 21 fc 3a 03 ec 48 ae f3 46 d2 ae af f4 0f 00 34 76 8d 71 6b 69 20 9e 7e 46 13 e5 3b 58 e7 af 24 57 3f ab 3f 8c ee 3e 33 4d 6d 63 73 7c e9 6f 73 13 6d 8d db ca 8a 02 14 fc c0 70 01 04 e7 3d 4e 6b b3 db c9 e8 ba 18 fb Data Ascii: 98^g^k{W%fBmk\|B?snQF1J i}QEyO/Ym8Yz^coNw01:%+o&wGN\|.Z[&!:HF4vqki ~F;X$W??>3Mmcs\|osmp=Nk

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:15 UTC	694	OUT	GET /bmz_cache/p/patek-philippe-jjxj7bmtjpg.image.320x320.jpg HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.richtimepieces.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:15 UTC	363	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:15 GMT Content-Type: image/jpeg Content-Length: 19429 Connection: close Server: cloudflare Accept-Ranges: bytes Cache-Control: public, max-age=864000, must-revalidate Cf-Cache-Status: HIT Age: 433287 Last-Modified: Fri, 28 Mar 2025 14:20:48 GMT CF-RAY: 92a11780cf5df788-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 14:42:15 UTC	1006	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 35 0a ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 40 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85C!"$"$C@@"
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 6e 14 6d cb 0a 51 a8 ce 39 dc 47 6a 00 f5 7d 3e 68 a4 5c a4 81 8e 3d 45 50 f1 f0 09 a5 5b 46 08 fd f4 98 6f a0 04 ff 00 4a f3 d8 75 89 e1 03 69 c1 15 25 ce b3 75 7b 1a 44 ee 48 56 dd cf d3 1f d6 80 34 75 8d 1a f7 51 bf b2 4b 2e a2 15 59 58 1f bb df f9 56 c6 97 60 d6 93 2c 63 72 a2 f0 03 1e 6b 9c b7 d6 ae d1 f7 06 f9 87 39 15 6c 6b 57 93 10 58 fe 38 a0 0f 64 f8 13 70 96 ff 00 15 7c 39 18 7c 7f c4 ca 21 9f ab 63 fa d7 df 63 a5 7e 64 7c 3c f1 0b 68 de 32 d1 f5 49 17 7a db 5f 43 31 5c e3 76 d7 07 19 fc 2b ee 7b bf 88 5e 25 11 ab 41 e1 98 30 c0 11 9b 92 7f a5 00 7a 8d 15 c7 fc 3f f1 26 ad ad bd c4 5a be 99 1d 93 a0 0d 1f 96 e4 86 1d fa fe 15 d8 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 03 65 38 89 8f b1 Data Ascii: nmQ9Gj}>h\=EP[FoJui%u{DHV4uQK.YXV`,crk9lkWX8dp\|9\|!cc~d\|<h2Iz_C1\v+{^%A0z?&ZPEPEPEPEPEPEPEPEPe8
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: ab bd 06 3b 9d 77 c3 96 72 dc bc fe 5b ef b5 11 fc 98 fb e1 90 02 7b 77 a2 da 48 a7 92 e6 78 35 19 0b dd 21 49 98 4a 1b 70 ce 79 fc 45 5e 8e 6d 4a 19 74 b6 17 49 73 0d 87 ca 12 55 e5 d0 9e 54 fe 1c 0f a0 a0 0c 28 7e 0d fc 2d b9 d5 6e 6c 65 d3 af 77 43 18 95 e4 b5 bb c4 61 48 c9 23 70 e8 32 3b d6 fe 91 f0 2b e0 fd fc 51 bd b5 b5 d4 ca c3 e5 0d 76 ea 5b 8f c2 a8 4d 7b f6 7b 1d 4e e6 f3 4d 2b 79 2c 84 47 24 27 19 89 f3 bd 49 5f 6e 07 d4 7a 56 b5 9e 1e f2 c3 48 d1 f5 15 9e 0b 04 17 a5 2e 0e dd e8 f8 25 73 ec a7 b8 fe 23 e9 40 0f 9f f6 6a f8 5d 2a 15 4b 1d 42 2c f7 5b c2 7f 98 35 8d 7d fb 2a 78 0e 60 45 be a7 ac c0 4f ab a3 0f fd 06 bb 3d 33 c5 d7 56 90 6a 37 97 22 48 ed 63 2a f6 48 e3 22 64 6e 00 07 f2 cf 3c 66 bb 6d 3f 5c b5 b8 f2 96 46 11 3c b1 89 50 13 c3 Data Ascii: ;wr[{wHx5!IJpyE^mJtIsUT(~-nlewCaH#p2;+Qv[M{{NM+y,G$'I_nzVH.%s#@j]KB,[5}x`EO=3Vj7"Hc*H"dn<fm?\F<P
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: e3 fc 71 e2 ab 7d 3a 48 f4 c8 ae 3c a9 a6 3b 65 9c 0c 88 41 1f cf f9 75 a0 08 7c 71 e2 db 7b 69 1b 48 b4 9d 44 f2 2b 2b cb 8c 84 3f dd 1f ed 7f 2a f2 c9 d8 a4 2b 0d ca 15 bd 8e 03 f6 78 c0 e5 89 6e 3d cb 7b ff 00 5a 9e 69 26 48 a1 83 51 8d e4 9a 4b 79 05 97 72 09 e9 9f 5c 9c 56 96 99 61 f6 18 63 bd d4 5f cf bb 28 23 04 2e 4f b2 2f a9 ed 40 15 ec f4 b0 a4 6a 5a bb 47 e6 aa 28 db 9f 91 30 00 cf b9 fe bd 2b 56 78 23 8e cc 5f 6b 33 b5 85 81 3b 52 31 91 34 e4 f4 00 0e 41 3e 83 9f 5c 73 56 27 2b a6 bc 13 de 41 f6 cd 56 51 ba ce c1 5b 88 c7 f7 dc f6 1e ad f8 0e f5 bd e1 cf 0a 4d 71 78 ba c6 bf 27 da af 48 c2 82 30 91 0f ee a0 fe 11 fa 9e f4 01 ce 58 68 fa e7 88 d4 5b db c2 74 2d 14 7c be 5c 67 6c d2 0f 46 23 a6 7f ba bf 89 35 dc 78 63 c1 fa 2e 83 02 a5 9d 9c 6a Data Ascii: q}:H<;eAu\|q{iHD++?*+xn={Zi&HQKyr\Vac_(#.O/@jZG(0+Vx#_k3;R14A>\sV'+AVQ[Mqx'H0Xh[t-\|\glF#5xc.j
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: bb 6d ca 97 2d 27 97 83 e6 61 b8 93 d7 8a fa 50 e6 81 f4 a0 0f 94 3e 03 7c 2f f1 ff 00 86 7c 77 f0 ee fb 5b f0 bd cd a5 ae 83 a5 5e d9 5e 4b f6 98 1c 09 26 96 77 52 02 c8 49 5c 48 b9 e3 d7 8a fa c2 8e 29 68 00 a4 a5 a2 80 13 15 f3 97 c7 7b bb 9f 8a ff 00 15 f4 af 82 3a 34 ee 34 9b 46 4d 47 c5 57 11 1e 16 25 20 a4 39 f5 39 1f 8b 2f a1 af 52 f8 e7 f1 1b 4d f8 67 e0 1b ed 7a e6 48 5e ff 00 cb 29 a7 5a 33 7c d7 33 9c 05 50 3a 90 09 04 e3 a0 cd 60 7e cc 3f 0f ef 7c 1f e0 c9 b5 9f 11 96 9b c5 9e 23 97 fb 47 58 9a 4f be 1d f2 56 33 fe e8 27 23 d4 9a 00 f5 2b 0b 4b 6b 0b 28 2c ac e1 8e 0b 6b 78 d6 28 62 41 85 44 51 80 a0 76 00 00 2a 7a 5c 52 1a 00 42 01 18 23 35 cc 78 93 48 8c 43 23 08 cc 96 ad cb c6 3f 84 ff 00 79 6b a8 a4 60 08 c1 19 14 01 e3 89 e6 f8 72 f8 45 Data Ascii: m-'aP>\|/\|w[^^K&wRI\H)h{:44FMGW% 99/RMgzH^)Z3\|3P:`~?\|#GXOV3'#+Kk(,kx(bADQv*z\RB#5xHC#?yk`rE
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: a8 c7 dc b7 4e 13 fe fa e5 8f fb d5 99 ac ca d7 5f 6c 68 58 ef b8 90 69 b6 d8 ed 92 7c c2 3d c2 87 fd 2b bc d2 e0 8e de d2 38 63 50 a9 1a 84 50 3a 00 05 00 52 f1 8f 86 f4 af 16 f8 7e e3 42 d6 a2 96 5b 1b 80 04 89 1c cd 19 38 e4 72 a4 1e bc fe 15 e1 da cf c1 ef 89 de 10 9e 1d 43 e1 7f 8f a4 bf 86 d0 96 83 4a d7 7e 7d 8b c6 63 49 47 45 38 c1 52 00 ef d4 03 5f 44 d1 40 1e 0b a5 fe d1 96 ba 16 ac 9e 1f f8 b5 e1 6d 4b c1 5a ae 07 ef 9d 4c f6 92 8e 9b 95 d7 27 19 fa 8f 7a f6 8f 0f eb ba 37 88 74 e4 d4 74 3d 52 cf 52 b3 93 ee cd 6b 32 c8 87 f1 07 af b5 54 f1 87 86 34 cf 13 69 ff 00 66 d4 20 89 dd 73 e5 3b c4 b2 05 cf 50 55 81 0c a7 ba 9e 0f e5 5e 65 f0 c3 e1 16 83 a1 7c 49 ba f1 15 9f 86 ee 7c 39 35 8a 98 5a 3b 4b c6 fb 06 a0 ee a0 89 52 22 72 a1 41 23 69 e0 31 Data Ascii: N_lhXi\|=+8cPP:R~B[8rCJ~}cIGE8R_D@mKZL'z7tt=RRk2T4if s;PU^e\|I\|95Z;KR"rA#i1
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: ee 03 d7 1d 47 e3 d2 b9 2d 2e 0f ec ef 12 cb 02 1c c5 70 bb d3 dc 8f f1 04 7e 54 01 e6 57 b3 a5 ee 85 67 af df eb 4d 35 c6 96 c2 d2 69 b4 ef 96 e1 52 42 01 2c 0e 32 37 63 9c 7f 11 eb 5e a9 f0 83 5a b2 d4 b4 49 6d 2c ae 45 c4 36 af fb 97 ee 51 b2 79 fa 36 e1 f8 0a f3 58 74 b6 d3 bc 59 ac 78 7e 3f 0f 8b a8 8e e4 8a ea 24 06 4b 75 71 fb b6 c3 1d a7 08 53 d3 a7 7a e8 7e 14 6a 5a da ea 56 92 6b 06 c3 0f 9b 32 d6 d2 a9 25 ba fc ca bc 29 0c b8 c7 fb 54 01 ec 34 50 28 a0 02 8a 28 a0 02 83 d2 8a 0d 00 20 ac bf 16 dc 3d b7 87 af 1a 36 2b 23 a7 95 19 07 04 33 9d a0 fe 66 b5 6b 98 f8 89 30 8f 48 48 cc 4f 32 b3 96 68 d1 77 17 01 4f 18 fa 91 40 1c 4e 80 da 8f f6 ad f4 da 66 af 6f ab db 59 c1 e5 ad 81 26 38 60 63 92 43 02 76 92 38 cf 24 8f 6a d6 f0 bc af 6d e1 8b 9d 59 Data Ascii: G-.p~TWgM5iRB,27c^ZIm,E6Qy6XtYx~?$KuqSz~jZVk2%)T4P(( =6+#3fk0HHO2hwO@NfoY&8`cCv8$jmY
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 7f ad 6e 56 6f 87 93 cb d2 6d 90 70 04 6b fc ab 9d be f8 85 a5 69 31 4d 3f 88 22 3a 54 11 cf 24 6b 34 b7 30 32 ba ab 95 0f 80 fb b0 71 9c 6d e3 34 01 da 51 5e 5d 79 fb 41 7c 1c b4 b7 f3 a5 f1 e6 9a 47 3f 22 07 77 18 ff 00 64 29 22 b9 b9 bf 6a 5f 86 f3 cc 60 d0 2d 7c 49 e2 19 47 00 69 fa 53 b6 7f ef ac 1f d2 80 3d d6 8a e7 3e 1c f8 9f fe 13 0f 09 da f8 83 fb 2a f7 4a fb 43 ca bf 64 bc 5d b3 47 b2 46 4c 3a f6 3f 2e 71 db 35 d1 1e 94 00 94 50 3a 51 40 05 28 3e b4 94 50 07 0f f1 8b e1 57 84 7e 29 68 5f d9 de 23 b1 1f 68 8c 1f b2 df 42 02 cf 6c 4f f7 5b b8 f5 53 90 6b e3 8b dd 03 e2 d7 ec b3 e2 e3 ac e9 ae fa a7 86 26 90 2c 93 46 ac 6d 6e 13 3c 2c ab ff 00 2c df d0 fa f4 27 9a fb fc 1c 54 77 56 d6 d7 96 b2 da dd c1 14 f0 4a a5 24 8a 54 0c ae a7 a8 20 f0 45 00 Data Ascii: nVompki1M?":T$k402qm4Q^]yA\|G?"wd)"j_`-\|IGiS=>*JCd]GFL:?.q5P:Q@(>PW~)h_#hBlO[Sk&,Fmn<,,'TwVJ$T E
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 60 00 3a 00 29 e4 d0 02 37 4a 6d 04 e6 8a 00 51 4b 48 29 68 00 a2 8a 28 01 6b e7 7f da aa 67 8b c5 be 1f 0b 7b e0 2b 5f f4 0b 8f f9 1a e0 59 22 6f de 47 fe af 2a 70 de be d5 f4 40 ae 7b c5 3e 07 f0 87 8a ae e0 ba f1 2f 87 34 cd 62 5b 78 da 38 7e db 6e b3 08 d4 90 4e d0 c0 80 4e 07 34 01 f2 1c 37 44 80 cf a9 7e ce 8c 3d 45 b4 4b fc d4 55 95 6d cb b8 5d 7e cf 04 fb 47 0f f8 57 d3 6d f0 7f e1 5b 2e d3 f0 f7 c3 38 f6 d3 62 1f d2 95 3e 10 7c 2e 41 85 f0 0f 87 40 f6 b0 8f fc 28 03 c6 fe 02 a9 ff 00 85 a9 62 de 67 c3 26 ff 00 44 b8 ff 00 91 55 11 66 e8 bf eb 36 8f b9 fd 71 5f 4a cf cb a7 d0 ff 00 2a e7 f4 0f 87 de 0a f0 fe a8 9a a6 85 e1 9d 33 4b bc 44 64 12 da 40 23 25 5b a8 38 ea 38 1d 6b 7e e0 80 db bf ba 33 40 1c a0 01 74 0d 60 81 c3 b4 df af 1f d6 bc be ce Data Ascii: `:)7JmQKH)h(kg{+_Y"oGp@{>/4b[x8~nNN47D~=EKUm]~GWm[.8b>\|.A@(bg&DUf6q_J3KDd@#%[88k~3@t`
2025-04-02 14:42:15 UTC	1369	IN	Data Raw: 0e 4f d7 a0 ee 45 79 ef c5 ff 00 88 be 35 b5 bd d5 34 2f 0e 5a e9 fe 1c 82 c3 1f 6e f1 16 af 3a ac 10 23 8c a3 20 3f 79 88 e8 30 c7 39 18 e3 35 f3 d6 86 05 f5 f5 e7 88 fc 23 11 d7 ef a2 6c df fc 43 f1 8f c9 65 6a c3 bd bc 52 64 64 76 ce e6 e9 85 14 01 df 7c 46 f8 b7 e3 5f 14 e9 6b a8 de 5f 45 f0 b3 c1 12 30 78 6e 6f 13 cc d5 75 15 53 91 e4 c2 39 c1 c0 e4 60 7f b4 47 15 f4 37 c1 bf 1a 47 e3 bf 00 e9 da ef 93 2d bd d3 c6 12 ea 19 62 31 3a 48 00 39 da 7a 06 04 38 f6 61 d6 be 46 f0 56 8f a8 f8 af c4 92 dd fc 3e d3 2e bc 7b e2 12 fb 6e bc 6d e2 68 cf d8 6d 5b fe 9d e1 7c 82 47 6d c0 91 d9 40 af 78 f8 59 6d a0 7c 34 f1 54 ba 6f 88 be 27 5e f8 a3 c6 3e 21 9a 38 ef 2d d9 bc d0 25 1c 29 11 a8 26 20 06 46 58 81 8e c0 01 80 0f 73 a6 9a 50 73 45 00 25 28 eb 41 14 ab Data Ascii: OEy54/Zn:# ?y095#lCejRddv\|F_k_E0xnouS9`G7G-b1:H9z8aFV>.{nmhm[\|Gm@xYm\|4To'^>!8-%)& FXsPsE%(A

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:16 UTC	687	OUT	GET /bmz_cache/c/cartier-g13b8qn6jpg.image.320x320.jpg HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.richtimepieces.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:16 UTC	916	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:16 GMT Content-Type: image/jpeg Content-Length: 13445 Connection: close last-modified: Fri, 28 Mar 2025 20:22:53 GMT Accept-Ranges: bytes Cache-Control: public, max-age=864000, must-revalidate Age: 411562 cf-cache-status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J8i42QhBrere2pNzefb9ayCrfyrPjwvAocEufZpOSV6C5wxhCvd%2F2azmxqIDwue9raUdDGgDbEQGA5zO9abGbPPelKaU3QojNy%2FVCpV5ZCF050GARDk%2Fz%2FMw6ffYhu2QRchuW%2FgBy7fI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92a11783d925c62c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=101114&min_rtt=100908&rtt_var=21603&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1259&delivery_rate=36682&cwnd=232&unsent_bytes=0&cid=e7b8a9ad135b2040&ts=264&x=0"
2025-04-02 14:42:16 UTC	453	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 35 0a ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 40 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85C!"$"$C@@"
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 2e 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?.((((((
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: bc 67 f8 ac 66 1f f8 e1 af cc df 1a 4d bf c5 da b3 83 f7 af 25 e9 c7 f1 1a c2 b7 43 d9 ca 5f c4 88 67 d1 a1 36 f2 3c 13 2b 98 c1 66 0b cf 03 3f 8f 6a a9 0e 9f 0c 81 33 22 e1 8e 39 e2 96 2b b2 b2 cb 9e 0b 82 31 eb 9a 8f 4d b9 8c 5b 08 df 82 1b 72 92 7b d6 1b 9e b5 d2 7b 1a 96 ba 2d 91 01 e4 98 10 32 01 e9 8a b5 16 97 a5 aa 1c 95 56 c7 0d b4 9c 1c 66 b3 16 e5 8f ca a4 8c 1e 82 99 f6 97 50 41 1f e1 41 a7 31 ad ab 25 d5 95 8b 15 92 27 82 45 08 24 8d 30 7a f7 e7 83 83 d4 7a 55 fb 4b a5 11 08 da 3d a4 0e 31 5c f2 df 8b 9b 19 6d 9f 82 c3 3b 7d 4f b5 2e 99 7a b3 c0 0c a7 f7 8b f2 9f 7f 7a 68 ca 6b 54 ce 86 3b 98 f1 b8 37 7e e6 a5 4b d8 fc f1 c6 47 f2 35 ce 4d 70 b1 b1 da 78 ea 29 8b 76 37 a9 cb 11 9c 71 41 2d 9d 85 fc fe 75 a7 94 18 28 67 50 49 3d 39 15 fa 3a 9f Data Ascii: gfM%C_g6<+f?j3"9+1M[r{{-2VfPAA1%'E$0zzUK=1\m;}O.zzhkT;7~KG5Mpx)v7qA-u(gPI=9:
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 31 05 64 de e5 b6 e4 01 83 93 8e 6a e8 55 8b 90 f1 95 7d ad 15 1b 6a 99 e9 34 52 02 0d 2d 77 1e 30 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 06 80 10 91 8a e5 7c 55 e2 64 b4 47 b7 b4 70 64 e8 ce 3b 7d 29 de 31 d7 45 aa 35 a5 bb fc e4 61 d8 1e 9e d5 e6 b3 bd ce a7 7e 2c ac 5c 1b 87 20 16 23 22 20 7a 1e 78 2c 72 30 3f 13 c5 70 62 31 0e fc 90 dc f4 70 b8 54 d7 b4 a9 b0 eb db b9 ae 27 28 8b e7 dc 37 3b 1a 40 a1 41 fe 27 63 d0 7e a7 b5 47 e1 c8 2d e6 d4 ae 57 c4 bf b8 92 cd 89 54 9e 30 aa 17 3f 2b a2 91 85 07 8e 4e 5b de ad d9 79 9e 0d d6 d6 d9 e3 fb 7c b7 4c 64 8a 38 ca 99 23 38 c3 16 27 93 d4 fc d9 c7 3f 85 61 ea 57 07 50 d6 de 7b 58 d2 f2 f8 1c 79 cf f3 43 6d fe Data Ascii: 1djU}j4R-w0QEQEQEQEQEQEQEQEQEQEQEQE\|UdGpd;})1E5a~,\ #" zx,r0?pb1pT'(7;@A'c~G-WT0?+N[y\|Ld8#8'?aWP{XyCm
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 62 84 3a aa ed ce 0c 60 e4 73 fe e9 a4 07 27 71 3a 4f e2 e9 a6 85 c4 91 cb 04 ce 8c a7 82 0c 24 82 2b a2 f8 48 33 61 7f 9e d7 23 ff 00 40 5a 34 29 fc 3b aa 68 d6 9a b5 bd 91 82 09 ac 85 ca ee 4d ae 91 11 d0 e3 a7 1c 60 57 4b a0 69 da 7e 9e f3 a5 80 d9 bd 81 91 03 67 07 1c 1f 6e 31 4d b1 58 b7 ac 5f c3 a5 e9 73 5f 4f ca c6 bc 2f f7 8f 61 f8 9a e4 fe 1a e8 d2 6a 9a 8c fe 24 d4 14 bb 79 84 42 4f 19 6f e2 23 d8 74 fc ea c7 8e ec 75 7d 57 51 b0 d3 e2 b7 64 b1 69 00 32 83 91 b8 f1 96 f4 c0 f5 af 47 d1 34 c8 34 fb 08 6d 20 4d b1 44 81 54 7d 3b fd 68 19 9b ac 78 7e cf 57 b2 6b 6b b8 77 29 1c 1c 72 bf 4a f1 fd 6f 49 d4 3c 11 aa e4 8f 36 c0 b0 71 9f ba 30 72 08 f4 c1 c7 fb a7 da be 83 60 11 71 58 5e 29 d3 ac b5 3d 3d ac ee f6 0f 30 e2 32 d8 e1 b1 db d7 bd 73 d6 a2 Data Ascii: b:`s'q:O$+H3a#@Z4);hM`WKi~gn1MX_s_O/aj$yBOo#tu}WQdi2G44m MDT};hx~Wkkw)rJoI<6q0r`qX^)==02s
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 6b 5b 4f ed 09 ed e0 39 82 f6 21 36 03 00 08 04 67 23 76 32 b9 f5 55 af 40 7d 2e c2 de d2 5b 5b 6b 68 e2 8e 55 da e1 46 37 71 8c 9f 7f 7a f2 78 3e d9 a6 78 9e ea d6 da 53 0c f3 2b 79 4c 0e 36 ca 3a 1f a6 e5 1f f7 d1 ae 3c 54 54 64 a6 7a 18 39 b9 c1 d3 7f 23 57 52 d1 ce 85 7f 24 31 cd 2c b0 b7 ef 11 e5 93 73 31 01 77 73 dc 90 ca 7f e0 27 8a f6 4f 85 fa 9f db bc 3a b0 bb 66 4b 63 b3 fe 02 79 1f e1 f8 57 96 eb fa 36 a0 34 5d 3b 57 bf be 96 e2 56 88 17 8f 8c 2a aa 96 3d 39 24 c6 39 3e bd 4d 74 7f 08 6f 9a df 5b 36 2e 78 99 0a e3 fd a5 e7 fc 6b 1a 6f d9 62 16 96 4c d2 b2 55 70 fb dd a3 d6 e8 a2 8a f5 cf 18 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 29 0d 2d 06 80 3c 93 e2 8d c4 92 6a 3a 87 94 46 e8 d0 46 99 Data Ascii: k[O9!6g#v2U@}.[[khUF7qzx>xS+yL6:<TTdz9#WR$1,s1ws'O:fKcyW64];WV*=9$9>Mto[6.xkobLUp(((((((()-<j:FF
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: f8 83 c4 d2 42 d1 4b e1 b8 de 36 18 65 68 58 82 3e 84 d6 97 83 d5 ef f4 3d 5a db 52 b2 48 8f da 09 68 27 88 ca 8a be 5a 11 95 27 24 71 9c 66 b5 35 df 13 e9 fa 58 68 a3 22 e6 e4 71 e5 a1 e1 4f b9 ed f4 eb 59 7e 16 d4 75 26 f1 13 4f aa 46 b0 c5 a9 46 16 15 fb bf 32 02 40 03 af 2a 5b 9f f6 6b ac e1 3a 9d 36 38 93 4f 81 22 8f 64 68 81 55 7c 93 16 00 e3 ee 11 95 fa 55 82 a2 aa 59 cf 1c 37 26 c2 69 58 4c d9 78 fc f9 94 c9 30 1f 79 82 83 c2 8c 8e c3 af 41 57 4d 21 ea 44 ea 08 e9 5c b7 8b b4 57 b8 97 ed 96 c1 19 8a 85 96 36 e3 76 3a 11 ef 5d 61 1c 66 b3 35 59 32 85 45 45 4a 6a 6a cc d2 95 49 53 97 32 3c ae f3 41 7d 4b 51 b5 92 f2 30 8b 6b 26 f5 01 b3 cf 19 fc f1 8f c4 d7 7f 67 21 da 32 6a 84 91 0f 33 76 2a cc 27 68 18 a5 4e 94 69 ab 22 eb 57 95 57 79 1a 66 74 8a Data Ascii: BK6ehX>=ZRHh'Z'$qf5Xh"qOY~u&OFF2@[k:68O"dhU\|UY7&iXLx0yAWM!D\W6v:]af5Y2EEJjjIS2<A}KQ0k&g!2j3v'hNi"WWyft
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: d0 eb c1 d1 55 25 77 d0 79 d3 ac ac ee 15 f5 1b 76 be d4 a6 f9 92 d2 01 b9 bf e0 44 f2 7e a4 d7 5b a6 e8 9e 29 8c 2c f6 da 06 91 6b c7 ca b3 cc c6 4f a6 40 c7 e5 59 9e 04 8e 7b 47 82 46 0d 36 ab a8 1f 32 69 49 01 91 7a e0 64 81 c0 ed ed c5 7a 1c d6 51 d9 c8 cb 3e 93 7b 7f 13 0e 27 d9 92 5c e3 0a 3e b9 eb 8e dd 6b cd a7 46 a5 6d 4f 46 b5 78 d2 d0 e0 de 1b 66 bf fb 06 bd a4 1d 1e ea 43 84 93 21 ed e5 27 b6 7b 67 de ba 7f 0e f8 77 ec 3e 2d d3 21 40 1a de 49 3c d4 20 63 6e c1 b8 82 3d 41 00 7e 20 d5 7b ed 36 4f b3 ac 77 a9 2f f6 5d dc 9e 41 86 e1 f7 c9 6b 26 48 1c f3 c1 23 1d 4f 51 8e 0d 6f fc 24 ba 9d be d1 a7 5e 91 24 f6 52 34 21 cf 24 e0 02 0e 7f dd 38 27 be 29 52 a5 c9 5d 42 68 55 6a 73 50 73 81 e8 d8 a2 8a 2b de 3c 20 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 Data Ascii: U%wyvD~[),kO@Y{GF62iIzdzQ>{'\>kFmOFxfC!'{gw>-!@I< cn=A~ {6Ow/]Ak&H#OQo$^$R4!$8')R]BhUjsPs+< (((
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: e9 3f e1 2d 57 95 c4 7e 54 11 b4 41 a3 29 8c 90 9c 61 8e 79 c1 e7 93 d7 15 cd 75 37 da 5d ce bb 38 27 6d 63 d8 b9 a7 f8 9c 6d 3a 76 b3 6e 22 71 f2 bc 57 03 e5 3f 42 7f af eb 5b 73 7d 9a e7 4a 6b 2b 59 3c ad e3 20 48 49 e3 39 ae 7a 68 13 54 d7 4e 9f a4 3d bd ed b2 46 ad 24 33 e4 ad bb 10 3e 44 71 96 07 e9 95 1d 31 d6 a8 5d e9 e7 4d ba 36 a9 77 75 a5 49 90 44 52 ae f8 18 e0 1e 18 02 3b 8f bc a0 d6 cb 13 28 7c 6b 4e e6 0f 0b 09 bf 71 d9 f6 3a ff 00 0c d9 4b 61 a7 b5 bc db 4c 86 57 62 54 e4 30 27 8f d3 02 b1 b5 f0 eb af c7 72 22 91 92 37 46 24 29 3d 3a d6 7b 9d 6a e6 c6 4b 67 b7 b5 d4 ed a4 05 24 f2 25 ce e1 dc 7c a4 ff 00 21 55 f7 4f 1b 00 da 6e b1 6c 54 e4 ed 98 9e e0 ff 00 18 07 b5 6d 1c 55 37 d4 c1 e1 2a 2e 86 a6 b3 a7 34 9a 35 b1 04 99 d9 49 90 af 27 73 Data Ascii: ?-W~TA)ayu7]8'mcm:vn"qW?B[s}Jk+Y< HI9zhTN=F$3>Dq1]M6wuIDR;(\|kNq:KaLWbT0'r"7F$)=:{jKg$%\|!UOnlTmU7*.45I's
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: d4 52 eb 56 bc 92 49 25 21 a4 79 e4 cb b7 e7 c9 af b5 bf 64 9b 58 21 f8 49 15 cc 2a cb f6 ab d9 e4 39 f6 6d a3 1f 82 d6 b4 a3 79 6a 18 cc 32 a3 4b 9a fa dc f5 d5 18 a5 a2 8a ec 3c 70 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 3d 2b f3 27 e2 fc 46 d3 c6 da e8 55 c9 8b 58 b9 5e 38 ff 00 96 84 8f e7 5f a6 c6 bf 36 3e 3c 44 cb f1 3f c6 56 78 e5 75 39 9d 4f b8 73 9f d3 9a c2 bf 43 d8 ca 35 94 d7 74 71 3b ce cc 9c 9c fa 9a 57 f2 db 15 5a d7 32 46 18 e7 68 1d 4d 4b 2a b7 00 8f 6f a7 35 ce 7b 3a 34 48 d2 38 89 63 f3 00 51 92 17 39 a6 82 4f 3b 96 a2 86 39 24 70 15 1b 24 e3 81 56 21 b2 b8 61 f3 28 8d 4e 4e 5d 80 a2 e2 51 43 22 89 e5 9d 63 8f 19 27 1c 9c Data Ascii: RVI%!ydX!I9myj2K<p(((((((((((((=+'FUX^8_6><D?Vxu9OsC5tq;WZ2FhMKo5{:4H8cQ9O;9$p$V!a(NN]QC"c'

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:16 UTC	664	OUT	GET /images/banners/slick05.jpg HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.richtimepieces.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:16 UTC	364	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:16 GMT Content-Type: image/jpeg Content-Length: 153387 Connection: close Server: cloudflare Accept-Ranges: bytes Cache-Control: public, max-age=864000, must-revalidate Cf-Cache-Status: HIT Age: 469289 Last-Modified: Fri, 28 Mar 2025 04:20:47 GMT CF-RAY: 92a11783ebe443d9-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 14:42:16 UTC	1005	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 02 5c 04 ed 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 Data Ascii: JFIF0ExifMM*1www.meitu.comCC\
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 30 60 a7 3e e6 dd 87 ec f4 98 1b ad cb 7d 46 6b 39 42 14 f6 2e f2 7d 4d cd 3b f6 7a b7 1d 6c 7b 76 4a cd c9 0d 42 7d cd 58 bf 67 c8 14 02 2c 4f e0 b5 0f 96 48 b7 09 17 2d be 00 a2 f2 96 58 e3 9d cb 9a 5c a8 5c 93 34 6d be 01 b1 20 7d 90 7f df 18 a3 dd 89 4a 12 ee 69 5b fc 03 7c 64 5a fe 94 9c e2 5a 84 99 6e d7 e0 31 8d bf 79 09 f6 e2 a6 53 45 b8 4a c5 e4 f8 1c 22 5c a4 07 9e bc 54 f3 20 e5 99 2c 3f 05 a4 07 1f 67 27 db 14 73 20 71 91 37 fc 29 89 41 e2 2d bf 51 47 3a 07 19 77 1e 9f 06 a6 07 84 fc 31 47 38 28 c9 b2 68 be 0c 96 1f bd 18 f4 e2 8e 74 6b 14 d3 09 3e 0c c4 bd 54 1f c2 a2 72 09 2b b2 33 f0 7f 60 21 53 39 fc 2a 39 c8 b0 d3 f0 8d f3 cc 05 bf 1a 6a 68 69 58 8e 5f 84 57 1d 63 b5 38 a7 ce bb 0c 62 fc 22 bd 0b 80 8c bf f0 1c d2 e6 57 15 99 14 df 09 6e Data Ascii: 0`>}Fk9B.}M;zl{vJB}Xg,OH-X\\4m }Ji[\|dZZn1ySEJ"\T ,?g's q7)A-QG:w1G8(htk>Tr+3`!S9*9jhiX_Wc8b"Wn
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 00 25 00 14 00 02 01 e6 80 1c 0a 93 8d bf a5 00 3a 80 18 ff 00 78 d0 02 50 01 40 05 00 00 e0 f4 a0 0e 93 c0 6e b8 ba e0 7f 07 5f f8 15 00 7d b7 7a 4f f6 94 fc ff 00 cb 66 fe 75 f0 fc f6 3e ce 2b 41 13 a5 2e 76 6a 90 f4 eb 44 9b 02 58 f1 d6 b2 6c 0b 11 e0 76 e9 52 09 13 23 d0 68 3a 32 79 e4 d0 04 a8 4e 3a d0 03 e3 62 1b 39 a4 90 d6 e4 86 52 07 a7 e3 5a 28 df 42 9e c2 a4 99 fc 7d 3b d6 9e c1 90 5a b7 b4 d4 66 5c c3 6a d8 a3 ea ed b1 39 28 ab 97 ac fc 3b ad 4e 03 47 6a 4b 76 18 ad a1 83 6c c2 58 bb 1b 16 3f 0e 7c 4f 7b 18 93 ec 87 f2 ae a8 e0 52 d4 c6 78 ed 0d dd 27 e0 96 b3 76 00 98 ed cf f0 ed ad 16 11 18 7d 7c e9 74 8f d9 c2 fa e3 69 62 d8 ef 5a 7d 52 28 4f 1c da 3a 7d 23 f6 63 91 ca 87 c6 3d 4a d1 f5 78 91 f5 87 23 ab d1 bf 66 d8 a1 0a 3e c6 18 ff 00 7b Data Ascii: %:xP@n_}zOfu>+A.vjDXlvR#h:2yN:b9RZ(B};Zf\j9(;NGjKvlX?\|O{Rx'v}\|tibZ}R(O:}#c=Jx#f>{
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 3f fc 24 7e 0b 87 73 67 2d 1c 40 1f fe bd 7b b8 6c e6 ff 00 11 e4 62 72 b7 0d 91 f3 e7 c5 7f f8 25 2f c2 ef 17 34 d7 7e 17 b8 58 1d c1 db 11 4c 15 27 9a f6 a9 66 98 69 af 79 1e 5b c2 d6 a7 23 e5 3f 8c bf f0 4a df 8a 7e 10 9e 79 f4 48 0d cc 70 82 c1 a2 04 8c 0a a9 46 8e 27 e1 2e 18 97 43 e2 3e 74 f1 6f c0 1f 89 5e 13 9d a1 d5 bc 3d 3a ec 24 92 14 8c 8a e6 ab 96 f2 6a 8e 8a 79 8d 3a ba 1c 7d d5 84 b6 72 18 66 85 d0 83 f7 5c 72 2b 86 ae 1d c0 ea 85 55 34 40 63 24 f4 cf a5 72 f2 b6 cd 92 34 3c 3b e1 5d 77 c5 17 83 4e d0 34 99 6e a5 66 0b 88 57 38 cd 6d 0a 57 24 f4 6b 4f d8 c7 e3 ad e5 aa 5d d9 78 61 a4 56 4d c0 77 ae aa 78 37 51 68 73 cf 11 0a 4e cc e5 bc 43 f0 47 e2 87 86 67 78 35 bf 09 5c c6 57 8d de 59 20 7e 54 de 5f 52 e6 7f 5e a3 dc e6 6f 34 cb ab 17 36 Data Ascii: ?$~sg-@{lbr%/4~XL'fiy[#?J~yHpF'.C>to^=:$jy:}rf\r+U4@c$r4<;]wN4nfW8mW$kO]xaVMwx7QhsNCGgx5\WY ~T_R^o46
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: eb 45 06 c2 e8 96 1b d0 57 9a 7e c1 8f 99 12 7d b1 7b 2f eb 4f d8 34 1c c8 9a 2b c0 47 6a 9e 46 57 31 2a 5d a9 18 63 47 23 0b f9 12 a4 b0 81 90 7b d4 34 1c c3 84 e7 3c 2f eb 51 66 9d c5 71 c1 f2 71 8a 1c 90 87 54 29 26 c0 07 1d 2a c0 78 00 81 91 da 9a dc 01 90 3a ed c5 53 60 30 d9 24 83 cb 71 c7 7a 98 d4 e5 64 cb 61 92 e8 96 d2 26 c1 8f c2 b5 55 d9 9f 2a ec 53 9f c3 d0 60 8c fe 75 ac 6b 5d 89 d3 52 e8 52 ba f0 dc 0e a5 48 ef d7 15 b2 a8 99 12 a2 64 df 78 46 39 01 58 f3 9c e7 2a 2b 78 54 57 33 74 59 97 73 e1 d9 62 f9 23 67 c8 3f c5 5a 36 a4 2e 47 12 ab d9 dd c2 c4 73 c5 4b 8a 62 73 ec 34 5d 4a 87 64 83 8e df 5a 71 81 2a 6d 6a 4b 1d de 7a d6 8e 9a 68 6a 7c db 12 c7 74 1b a0 15 cd 52 8b 66 f1 95 87 f9 e4 8c 06 3c 73 8c d7 3b c1 c6 7b 9a aa b2 e8 cb fa 57 8a Data Ascii: EW~}{/O4+GjFW1]cG#{4</QfqqT)&x:S`0$qzda&US`uk]RRHdxF9X+xTW3tYsb#g?Z6.GsKbs4]JdZq*mjKzhj\|tRf<s;{W
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 80 d4 a3 71 f1 2a 38 c1 2f 70 bd 78 da 68 03 32 eb e2 95 ba 12 7e d9 8c fb d0 06 65 f7 c5 58 f8 d9 77 bb e8 d8 a9 90 d3 68 cb bb f8 ad c7 17 24 7f c0 b3 52 3e 63 2a ef e2 cc a8 71 15 d7 5e bc d0 44 a4 ca 17 1f 17 24 ff 00 96 b7 20 7a 50 45 d9 42 f3 e2 bc d2 b0 f2 ae 7a 0f 5a 0a 8b 6c a9 2f c4 fb 99 50 e6 e7 a0 f5 a0 a2 83 fc 45 b9 95 8b 1b a3 c7 a9 a0 06 a7 c4 2b 8e 4f da f9 cf 73 40 0f 4f 88 17 2d ff 00 2f 44 fd 2a 92 4c 07 af 8d ee 65 1b be d2 7f 1a 7c b1 01 7f e1 30 b9 6e 4b 16 f7 cd 4b 56 7a 0b 9a c2 c7 e2 eb 8d c0 fc f9 cf 63 48 39 d9 3a f8 ae e1 bf e7 a7 1d a8 21 ca ec 91 3c 55 7c 5b 31 96 c7 b9 a0 57 45 88 bc 4d a8 ee 1f e3 41 4a 7c a8 b3 0f 8b 2e 94 e2 55 e6 81 fb 42 d4 1e 2d b8 cf 23 8a 0c e4 ee ee 4e 3c 57 3b 1c e3 93 de 82 4b 31 78 92 77 01 c0 Data Ascii: q8/pxh2~eXwh$R>cq^D$ zPEBzZl/PE+Os@O-/D*Le\|0nKKVzcH9:!<U\|[1WEMAJ\|.UB-#N<W;K1xw
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: a0 02 80 1c 80 1c e4 50 03 72 47 43 40 01 24 f5 34 00 50 00 38 39 a0 07 17 04 62 80 1a 38 39 a0 07 ab f6 f5 a0 01 ba 1f a5 00 33 24 74 34 00 f4 e4 73 40 0d 70 01 e0 50 00 9f 78 50 03 f3 8e 7f 9d 00 35 9f 3c 0a 00 6d 00 2a e7 3c 0a 00 70 27 3c af eb 40 0d 7f bc 68 01 28 00 a0 02 80 0a 00 28 03 a0 f0 2f fc bd 7f c0 3f f6 6a 00 fd 0b 4f 86 da 85 ce a1 36 2d 88 fd e9 fe 75 e2 47 0f 66 7d 1c b1 8b ab 3a 4d 03 e0 ed c6 79 c9 fa a5 75 46 8a 48 e6 96 26 e7 6d a1 7c 14 b6 03 37 36 dc e7 d2 ad a5 63 07 88 e8 76 1a 1f c2 fd 36 d9 7f e3 d4 71 ea 2a 24 cc dd 77 dc e9 b4 bf 04 69 e8 37 7d 9c 70 73 cd 43 68 c6 ec dd b3 d2 34 fb 7c 6d b7 8c 7d 2a 1c 85 76 6a 5b 5b db 7f 08 fa 54 3a 8c 16 e5 f8 2d f6 8e 0f 43 59 fb 4d 4b 65 db 62 4a f5 a7 74 41 6e 20 07 20 52 6d 58 6a f7 Data Ascii: PrGC@$4P89b893$t4s@pPxP5<m<p'<@h((/?jO6-uGf}:MyuFH&m\|76cv6q$wi7}psCh4\|m}*vj[[T:-CYMKebJtAn RmXj
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 6d 91 11 6c a9 15 1c 9c a6 32 a6 99 ec 7e 07 fd be fc 53 a1 c9 15 97 c4 2f 0e 8b 98 8e 01 b9 8c 72 2b 6a 58 9a 94 74 47 9d 89 c0 7b 59 dd 23 dc 7e 1d 7e d3 ff 00 06 3e 23 01 1d 8e bb 15 8d db 9c f9 32 b6 dc 9f 4e 6b d7 a1 9c 4e 07 9b 88 ca 9d b6 3d 06 5b 5b 2d 4a d9 3c e1 6f 77 03 0d d8 18 6e 0d 7d 16 03 3d 8b 8a e6 67 ce e3 72 29 4e 5c d6 3c cf e2 a7 ec 8b f0 43 e2 dd a4 b6 9a cf 84 ed e2 92 60 47 9a d0 0e a6 be a2 86 79 09 47 73 e7 ea e5 b5 29 48 f8 d3 f6 87 ff 00 82 24 58 4b e6 ea 5f 0e ef 14 6d cb 18 d3 90 de 83 da bd 1a 78 9c 2e 2a 1e f2 d4 e6 72 c4 61 e7 a6 c7 c3 ff 00 18 ff 00 61 af 8d 3f 0a 2f a6 5d 47 c2 f3 4b 0a b1 1e 64 68 48 18 ac 6a 65 8e 7e f4 0e aa 59 9a 7a 48 f1 ad 4b 44 d5 34 ab 97 b6 bc b6 78 9d 0f cc 8e a4 11 f9 d7 9d 5b 03 5a 1f 11 e8 Data Ascii: ml2~S/r+jXtG{Y#~~>#2NkN=[[-J<own}=gr)N\<C`GyGs)H$XK_mx.*raa?/]GKdhHje~YzHKD4x[Z
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 65 66 03 e2 97 0d 91 e9 4f 96 e3 4b 52 6f 38 ba e0 51 c8 8a b2 10 92 7a d3 50 1d 93 24 85 4b 0e 47 6a 4d 58 97 14 2f d9 fc c3 d7 a5 54 66 e2 42 89 14 da 7f 99 f2 92 39 f5 15 aa aa c8 70 d0 a3 73 e1 88 a5 52 d2 d7 44 2b b4 43 a5 73 1a ff 00 c2 10 b8 3e 5c 41 ba f5 ad d5 7b 9c d3 a5 63 12 f7 c1 72 72 c9 1e dc 7e b5 b4 66 a4 8c 79 5c 7a 18 f7 de 1d bd 87 84 1d 33 5a c5 26 17 7d 8c f3 67 75 1b 1f 3c 1e 3a 71 4e 74 d6 96 2a 13 68 41 3e 0e dc 56 6a c8 d6 35 18 4b 73 82 b9 03 a7 ad 4c d7 3b 2f da 26 b4 1e 93 06 1f e1 51 ec cc e3 37 cc 39 48 3c 8a 1d 24 75 a7 70 0c 8a e1 8e 77 76 ac 9d 18 82 aa e2 5c b3 d6 ef 2d 5c 03 2e d5 1d ab 29 50 8d 8b 8e 21 b3 66 cf c5 d6 97 0c 20 9f e6 63 fc 47 b5 71 55 a5 63 a2 35 6e 6a 08 2c 6f a2 dd 1b ab 03 ea 47 15 c9 28 d9 ea 8d 63 Data Ascii: efOKRo8QzP$KGjMX/TfB9psRD+Cs>\A{crr~fy\z3Z&}gu<:qNt*hA>Vj5KsL;/&Q79H<$upwv\-\.)P!f cGqUc5nj,oG(c
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: f8 f3 6d 70 79 d4 71 81 d3 35 9b 9e a0 e8 b3 a5 d3 7e 33 5b 6d 00 5d 03 90 3f e5 a5 1c e6 6e 8b b9 bd a7 7c 55 d3 ee 70 0c fd 47 ad 6b cd a1 83 8b b9 af 67 e2 ad 3b 52 1f f1 f1 fa d3 e7 61 ca c5 b9 b4 d3 75 2e 4b a1 ff 00 76 ba a3 53 61 b8 d8 c1 d7 fc 09 a7 5c 5b 49 fb 81 92 3a 56 aa a9 0d 3b 9e 65 e2 ef 84 16 84 7f a8 fa 00 2b 6f 69 a6 a4 ba 9a 1e 63 e2 8f 84 ff 00 60 04 2d bf 63 da b4 53 89 93 a9 73 ce b5 ff 00 0b dd 69 87 fe 3d ce 05 5a 91 a6 86 09 d5 5a df 0b 8e a7 bd 6d 19 89 a5 62 dc 5a 8f 3d ba fa d6 bc cc c7 9d 16 e3 bd 18 c6 47 e7 45 ee 25 3d 49 a3 b9 e9 f3 0e b4 b9 11 7e d1 96 22 9c e4 02 7a 9f 4a 4e 09 21 aa 8d b2 71 28 07 25 ab 27 b1 a1 66 09 fb 63 bd 66 f6 1a d4 b2 92 03 ef ef 50 3e 52 68 ce 00 34 02 56 1f e6 67 8c 9f c6 95 d1 40 df 76 86 d0 Data Ascii: mpyq5~3[m]?n\|UpGkg;Rau.KvSa\[I:V;e+oic`-cSsi=ZZmbZ=GE%=I~"zJN!q(%'fcfP>Rh4Vg@v

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:16 UTC	687	OUT	GET /bmz_cache/c/cartier-8qjct2bmjpg.image.320x320.jpg HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.richtimepieces.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:16 UTC	908	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:16 GMT Content-Type: image/jpeg Content-Length: 12263 Connection: close Cache-control: public, max-age=864000, must-revalidate CF-Cache-Status: HIT Age: 469288 Last-Modified: Fri, 28 Mar 2025 04:20:48 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uz0%2BE2UDvG7myt4AHf55Yzo2QXN3VLwB4fpsUR1Kpkq9ZexN6wqGI9x5eTo96Og5GfhVp1fGHqcQ6sRHI20ksVdLXn4sqsmNG0KarYeFj1LjzNuSY9J8Ekik2ISMFt4gcnXp6gSbbZHp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92a11783ed00e738-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=100975&min_rtt=100433&rtt_var=21544&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2847&recv_bytes=1259&delivery_rate=36978&cwnd=230&unsent_bytes=0&cid=97c22859d0159211&ts=267&x=0"
2025-04-02 14:42:16 UTC	461	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 35 0a ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 40 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85C!"$"$C@@"
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 2e 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 bf 36 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?.(((((((6
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: f9 85 00 5f 91 71 13 28 e7 e5 c7 e9 4e 73 88 cf 4e 14 7f 4a cf 6d 46 22 0f cd d7 bd 2b ea 30 90 c0 30 39 e9 40 17 4f 00 f1 c0 5a 48 f2 36 0e 98 e6 a8 be a1 1f cd 87 07 8c 53 16 fc 0c fc e3 a5 00 75 7e 10 b8 58 b5 ab 49 1d 82 80 e0 92 78 03 91 5f a3 3e 0f f1 14 7a 8f 87 f4 ab 9b cb ab 26 bb bd b5 8e 75 8e 16 23 70 64 0f f2 83 c9 e0 83 5f 97 8b a8 aa 80 14 82 71 8a fb ff 00 c0 de 5d ef c3 2f 08 aa c4 d7 0e da 1d 83 31 67 db e4 1f 25 70 eb 9e e3 93 c7 3c 74 a0 0f 67 52 19 43 03 90 79 14 b5 43 40 b9 fb 56 97 04 85 c4 8d b7 6b 30 ee c3 83 fa d5 fa 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 2b 90 f1 b3 89 ef 2d ed 54 9d db 97 a3 63 a1 dc 79 ec 3e 51 9a eb 64 Data Ascii: _q(NsNJmF"+009@OZH6Su~XIx_>z&u#pd_q]/1g%p<tgRCyC@Vk0((((((((((((+-Tcy>Qd
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 68 76 da 8e 8f a9 db dc d8 cc 99 8a 57 d3 c2 97 5f 5f 9d 72 41 f5 ef 40 1a 9f db 56 91 4e 05 ba 45 1d b8 52 8c 3e d4 bb c9 dc 0e f1 83 81 d3 38 e3 34 f3 e2 62 d2 c2 ab 6d 6a 23 b7 74 68 f3 32 0e 15 b3 ce 3b f6 cf bd 52 9f 4d d7 98 e5 ae ac 8f fd b8 c3 ff 00 c4 d7 03 a9 78 ab 48 d2 fc 4e da 25 d7 8a 2d d3 55 12 08 cd 99 b2 2c c5 8f 40 17 61 07 39 18 c7 ad 00 7a fb eb 1a 6c f1 2c ed 0b 10 5b 6c a2 27 07 01 b8 62 79 e4 76 19 cf eb 5b b6 76 8d 67 00 d3 f4 26 8b ec a5 4e d8 e3 c2 64 b6 4e 30 31 b7 19 1e 9e 9c 57 9c e9 d6 7a 8a a7 da 26 4b 57 1b 77 2b a5 aa 23 8f ae 14 12 31 d5 4f f3 ad fd 13 c5 36 b6 0e 6d 35 34 16 ab 6f 80 8e 84 fe f1 3b a9 39 ed c7 3e e3 1d 68 01 3c 45 63 76 da 71 b6 2b a8 4d 7b 04 25 6d e4 c9 2d e6 c7 ca a9 6e ae 49 f5 e3 9e 3a 57 7f f0 df Data Ascii: hvW__rA@VNER>84bmj#th2;RMxHN%-U,@a9zl,[l'byv[vg&NdN01Wz&KWw+#1O6m54o;9>h<Ecvq+M{%m-nI:W
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 1f 5a f1 eb cd 32 6d 72 3b fb 7b 84 89 6d 64 99 16 2c e7 7c d8 dc 5d 41 1c af f0 8c 8f 43 40 1d 86 91 a9 58 4a 15 6e 0f cf e5 64 ab 8c 63 91 82 de 86 bc eb c5 f7 91 7f 69 b4 eb 19 45 88 1f 93 23 83 9c e3 8e 87 a7 e6 6b 52 5f 0b 2e 97 a6 c0 ba 75 d5 cd aa c1 20 7e 41 66 91 02 ee 3b 58 63 a9 c0 e4 e3 15 c9 6a ac b3 39 54 18 f3 a5 dd f4 1d 7f 91 14 01 ce 6a 7a 97 87 16 55 d2 75 4d 7e d3 4f d4 57 65 dc 42 6b 91 11 df 96 d8 d8 24 6e c1 19 c7 23 a6 6b b4 f0 36 b4 ba be 8f 1c ce 50 4e 84 c7 2e c7 0c ac cb c1 65 23 aa 9e c7 8f a5 79 6f 8c be 0a e8 be 31 d6 a7 d6 6f f5 5d 46 1b b9 42 a8 f2 8a ec 45 50 00 00 11 ed eb d6 b8 9f 11 7e ce b3 e9 16 13 ea 7a 57 8a 66 63 02 ef da d6 db 58 01 d4 e4 37 61 cd 00 7d 69 0b fc bc 10 6b 0b 43 d3 e7 b5 b1 d3 3c 21 6d a8 5c 34 76 Data Ascii: Z2mr;{md,\|]AC@XJndciE#kR_.u ~Af;Xcj9TjzUuM~OWeBk$n#k6PN.e#yo1o]FBEP~zWfcX7a}ikC<!m\4v
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 34 1d 99 9d 5a 50 ab 1e 59 ab a3 cc fc 13 f1 07 57 f0 95 ea 68 7e 32 8e 63 6e 0e d8 ae c8 c9 51 ee 7f 88 7b f5 af 74 d2 f5 2b 5b eb 48 ee 6d 67 8e 68 a4 5d c8 e8 d9 04 7a 83 5c 37 88 b4 2d 3b 5a b2 6b 6b eb 65 95 4f 43 8e 41 f5 07 b5 79 16 b3 27 88 be 1e ea 4b a4 e8 ba db c5 6b 7d cc 62 4c 62 2f 9b 19 c9 18 1e e4 57 64 61 0c 63 f7 7d d9 7e 0f fc 8e 49 4e 78 45 ef 7b d1 fc 57 f9 9f 4d dc cc a0 67 35 97 79 79 14 31 3c d2 c8 b1 c6 a3 2c cc 70 00 f7 3d ab e7 9d 07 e2 5f 8d 45 c4 9a 3a dd 5b ea 37 0e 4f 95 34 cb bb 66 3a 90 46 33 f8 d6 9b f8 57 c4 de 24 95 67 f1 0e a9 75 70 b9 c8 8c b6 d8 d7 e8 a3 8a ce a6 11 51 95 aa 49 7c b5 2e 9e 2d d6 8d e9 c7 ef d0 ec fc 49 f1 57 c3 5a 63 b4 36 72 be a9 73 d0 25 b7 2b 9f f7 ba 7e 59 af 2e f1 0f 88 fc 45 e2 f6 d4 34 a5 b1 Data Ascii: 4ZPYWh~2cnQ{t+[Hmgh]z\7-;ZkkeOCAy'Kk}bLb/Wdac}~INxE{WMg5yy1<,p=_E:[7O4f:F3W$gupQI\|.-IWZc6rs%+~Y.E4
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: d3 6d 8d df a1 08 e7 1c e7 f8 5b 07 eb 40 1a 5f 06 34 2f 13 e8 1f 0e f5 2b 6f 15 58 58 d9 ea 73 6a 5b b6 59 c3 1c 51 15 d9 18 52 04 60 2f 6e a0 75 06 ba 5f 09 6b 3a 5d 94 b2 59 eb 37 90 db 0b 89 41 86 56 90 2e cf 94 75 1d c1 c1 fa 57 45 e2 1b 88 0e 87 0d c4 32 ac b1 bb 07 56 46 04 32 81 9c 83 dc 55 0f 0c 5a a5 b5 8c 37 33 41 15 c0 69 49 48 a5 70 cb 91 91 9d b8 38 3c 75 eb cd 00 1a c4 3a 7d bc f1 ba 6b f6 b7 72 dc 02 b0 b2 3a 00 ee 00 19 24 1c 12 0e 38 f7 ef 8a c1 f0 f6 89 69 ad 4a de 6c c2 1b c0 49 8f e4 fb cb b8 96 3f fa 0f e7 5a fa e2 db 4f 35 c6 a9 16 9b 69 1e a1 b1 b3 2c 6a 0e f0 83 04 e7 07 1c 01 8c 7b 57 53 f0 cf 44 b5 7d 05 6e 9c 33 48 64 21 65 c6 18 8d ab 91 f4 cf f2 a0 0c 4b 4f 09 41 0d dc 30 bd d1 96 66 6c c2 02 74 7c 70 4f b0 38 af 49 d1 74 bb Data Ascii: m[@_4/+oXXsj[YQR`/nu_k:]Y7AV.uWE2VF2UZ73AiIHp8<u:}kr:$8iJlI?ZO5i,j{WSD}n3Hd!eKOA0flt\|pO8It
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 3b 3f 89 63 b0 d4 a2 b7 d4 2c ee 6e 96 ed 56 51 1d a0 2c 8c 70 37 64 93 c0 dc 71 ce 3a 8a 5f 10 c7 7b 78 7f b5 2e 74 e1 6f 87 3e 42 a4 fe 63 79 7f c4 08 e8 08 f6 cf 38 ad 5b 3d 3f c9 d6 ee b4 c9 e4 74 5b 64 f3 20 50 48 3b 4b 7c c0 63 82 06 00 c7 5a de 96 0b 4b 83 f6 68 ec 96 47 92 42 73 cb 15 4c 77 1d 8f 03 8a 00 f1 cb bd 3e dc 9b 9d 2e f6 35 9a ca f2 36 56 46 fb ac 08 c3 2f d2 ac f8 2f 41 d2 3c 25 e1 d8 74 cd 3a 18 ad ad 2d 93 2e f8 0b b8 81 f3 3b 1f 53 d4 93 5a 3e 2c 81 a1 b8 9a 3f 29 b6 2c 9b a1 93 69 03 07 a6 38 e9 db f2 ae 13 e2 7d a6 a5 e2 4f 00 6a 5a 36 93 7b 25 a5 f4 d1 10 bb 5b 02 41 fc 51 b7 b3 0e 28 03 c4 7e 22 f8 b2 db e2 37 8d 6f 35 db f6 73 e0 af 0c 8f dd c7 9d bf 6b 72 70 a8 3f da 91 87 e0 80 9e d5 a9 f0 d6 4b 0d 03 49 d4 be 33 f8 fa de 3b Data Ascii: ;?c,nVQ,p7dq:_{x.to>Bcy8[=?t[d PH;K\|cZKhGBsLw>.56VF//A<%t:-.;SZ>,?),i8}OjZ6{%[AQ(~"7o5skrp?KI3;
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 74 78 e3 18 20 75 c6 46 49 f6 ed c5 32 cf 4c 8a 59 a7 8c 5f 47 38 81 8a b9 48 d4 15 38 07 e6 e3 8e b4 00 90 6a 97 0a a5 9a da 6f a1 15 23 ea 77 0c b9 fb 3c b9 3e a0 51 3e 97 0a 6a 89 69 6f a8 45 33 ba 97 31 79 4b bf 00 80 76 f1 cf 3d 3d bf 3a 5b db 08 93 c9 30 5e 2a 3b 30 46 8d a2 0c 32 49 c7 38 fc 3d ce 07 14 01 8b ab 5f 5e 4b 14 82 e7 f7 16 c8 37 36 48 f9 80 e7 9f 6f 5a b9 a0 78 6d 2f 1e 39 35 27 2d 0c c0 66 0d b8 2a bc f1 ee 48 23 fc 8e 6f 5c da 59 fd 89 d9 ee c9 54 39 7f dd 7a 75 dc 14 03 83 fe 7d 6a c5 a4 f0 dd da b5 e6 89 74 ab 6f 1d a8 26 32 fb 3c bc 12 01 3b b1 8e 9f 5e 28 01 b3 d9 5f 68 89 71 69 e1 cd 4d ed ed e2 90 46 b6 05 1d 95 4e 06 02 13 c8 1f 78 f5 c7 b5 6c 78 27 4b 86 f7 c4 32 6a 9b 58 ac 2a 06 58 e7 e6 e3 fa 8f d2 b9 a1 fd a6 6c b1 73 6c Data Ascii: tx uFI2LY_G8H8jo#w<>Q>jioE31yKv==:[0^;0F2I8=_^K76HoZxm/95'-fH#o\YT9zu}jto&2<;^(_hqiMFNxlx'K2jX*Xlsl
2025-04-02 14:42:16 UTC	850	IN	Data Raw: 39 3d 3a fb 54 82 22 54 60 73 b4 03 8a 3c bc e0 11 d3 8c e2 98 10 c8 79 7f cc 52 30 20 b1 ef 91 53 c9 18 c1 27 d0 52 4b 1e 0b 60 f6 06 80 20 51 f3 71 9e b4 83 92 a2 a7 64 c3 f4 c7 34 88 9f 30 fa 9a 60 3a d6 22 c7 8e 70 0f 4a fd 3f f8 75 11 87 c0 3e 1e 84 f5 4d 2e d9 4f e1 12 d7 e6 6e 9d 1f 04 91 d8 ff 00 2a fd 43 d0 61 fb 3e 87 61 06 31 e5 db 46 9f 92 81 52 05 da 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 03 5f 9c bf 19 62 58 7e 2e f8 bd 00 cf fc 4e ae 0e 31 d8 c8 d5 fa 34 6b f3 af e3 e6 d4 f8 cd e2 f4 03 fe 62 72 37 e3 90 7f ad 00 70 ce bf 2f 2b 8c 12 4f eb 4d 8d 42 a4 7b 87 47 fe 94 ac 57 6b 7a 70 45 36 57 c1 6c f4 c8 34 00 81 3e 73 Data Ascii: 9=:T"T`s<yR0 S'RK` Qqd40`:"pJ?u>M.On*Ca>a1FR((((((((((((((_bX~.N14kbr7p/+OMB{GWkzpE6Wl4>s

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:16 UTC	687	OUT	GET /bmz_cache/c/cartier-xihzcn4hjpg.image.320x320.jpg HTTP/1.1 Host: www.richtimepieces.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.richtimepieces.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: zenid=fr6u3l7d0kgt9m3ldv8l27q9p7
2025-04-02 14:42:16 UTC	912	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:16 GMT Content-Type: image/jpeg Content-Length: 16280 Connection: close last-modified: Wed, 26 Mar 2025 16:55:18 GMT Accept-Ranges: bytes Cache-Control: public, max-age=864000, must-revalidate Age: 596818 cf-cache-status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CbY%2FcwMwoRbymcWOfNRlf9xlmYpFyTvU7LMJkWYMaZW8G5MIZrOKM0rYSV6VUqEySF2vQyD2RudZkYpl2U%2Fv%2B97g0CfMUvDOIYjqhki984Ba00dli475QzzqJT2ckTfSQ1E7MxtWWeJE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92a1178409e27cfa-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=103401&min_rtt=103195&rtt_var=22080&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1259&delivery_rate=35884&cwnd=220&unsent_bytes=0&cid=64cde40c52fb03e8&ts=274&x=0"
2025-04-02 14:42:16 UTC	457	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 35 0a ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 40 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85C!"$"$C@@"
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 2e 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?.(((((((
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 72 73 dd 9b 6b ab a4 eb 99 d9 85 75 87 a5 79 6f 8b 2e da 2d 72 ee 30 f8 02 43 de bc dc cd da 9a f5 3b 30 69 39 3b 9d 17 f6 9e 7f fd 75 f3 27 c5 8f 14 eb b1 7c 42 d5 e2 b5 d5 e5 8e 08 e6 1b 23 0f c2 fc a3 b5 7b 12 ea 07 fe 7a 8f ce 97 c3 fe 06 d0 3c 40 b7 5a ad e6 97 6d 3d c4 b7 32 06 90 a0 24 80 78 c9 fa 57 83 38 b9 ab 1e c5 19 c2 8b 72 92 3e 70 3e 2e f1 33 13 bb 5b 9c 7f ba f8 a1 bc 5f e2 45 e3 fb 7e e9 7d fc e3 5f 52 0f 85 7e 15 eb fd 87 65 9f 78 85 39 7e 15 78 4f fe 80 36 1f 8c 0b 51 ec 24 6e f1 f4 3b 1f 2b 7f c2 5f e2 72 78 f1 35 f0 fa 5c 37 f8 d3 c7 8b 7c 53 93 ff 00 15 75 fa 93 ff 00 4f 6d fe 35 f5 3f fc 2a Data Ascii: Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@rskuyo.-r0C;0i9;u'\|B#{z<@Zm=2$xW8r>p>.3[_E~}_R~ex9~xO6Q$n;+_rx5\7\|SuOm5?*
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: fa 6e 14 a3 5d 54 71 96 87 4c ff 00 09 fc 3e b6 42 7b 7b 79 c4 e1 77 07 17 04 17 38 cf 3d 86 78 e9 58 fa 16 95 a8 ea 1a c6 a3 65 a7 c9 aa 69 26 06 58 a3 78 ef ae 15 22 61 9c 9d 87 e5 7c f0 71 d8 1a b7 6b f1 36 ca 0d 39 23 37 56 66 60 87 2a f7 6b b3 77 18 3c 0e 99 c9 e9 50 68 3e 31 b9 b8 bc 69 24 bf b4 78 d9 fc cc c0 a7 10 9f f6 4e 3a 72 49 ce 6a ab 4f 0a ea 42 df 87 ea 2a 71 af c9 2b eb eb fa 1d 15 c4 3e 2e f0 f8 17 17 be 22 b3 bf d3 51 73 33 df d9 7c e9 f8 c7 8c 8e bc 9f ca 97 4b f1 96 9d 25 b2 de 4d 60 f1 ac 92 bc 42 5b 0c ce 7e 52 46 e6 8d 46 f5 07 19 e8 7a 8a 6f 88 bc 6b a5 b6 8d 23 4e b2 6a 0b e4 b1 78 ed d3 7a 93 e8 58 70 09 19 a7 78 26 7d 2a 4d 22 1b 18 a6 10 c2 36 ac 60 ee 19 38 1f 2b 31 1c 9c 93 cf 42 41 eb 57 ec e9 54 ad cb 4e 7d 3d 4c df 34 69 Data Ascii: n]TqL>B{{yw8=xXei&Xx"a\|qk69#7Vf`kw<Ph>1i$xN:rIjOBq+>."Qs3\|K%M`B[~RFFzok#NjxzXpx&}*M"6`8+1BAWTN}=L4i
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: b2 b9 66 4d 84 23 24 84 79 96 ee 46 76 3e 3e b5 81 a4 4d 1e a1 a5 01 a8 ee 76 9d 41 4f b3 ab 30 85 ca e0 ae 39 d8 47 00 73 ce 2b 9d d7 55 34 7d 6a dc 26 f8 ae a6 0a 24 76 d8 a2 40 37 61 58 1c 63 e5 19 07 23 a6 3a d6 b2 a6 b0 90 55 a9 bd fa 7a 98 a7 f5 99 3a 53 5e 9f 23 e8 30 41 00 e7 ad 2d 71 3f 0d 7c 4c ba a5 84 36 f7 02 48 e4 28 19 16 51 86 00 8c ed 39 ae da bd 8a 15 a3 5a 0a 71 3c ba b4 9d 29 38 c8 28 a2 8a d8 cc 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 0d 70 3f 12 7c 41 0d a4 12 ab 3f ee 2d c6 5c 0e ae fd 02 8f 7e d5 d8 6b 77 ab 61 a7 4b 70 7e f0 18 51 ea 7b 57 8e 4c b7 3a e6 bf 21 8f ce 78 74 f7 1f 2c 6a 09 9a e1 86 7b f1 85 52 0e 7d 5b a7 15 e7 e3 aa 4d af 65 4f 76 76 e0 e9 c6 fc f3 Data Ascii: fM#$yFv>>MvAO09Gs+U4}j&$v@7aXc#:Uz:S^#0A-q?\|L6H(Q9Zq<)8((((((((((p?\|A?-\~kwaKp~Q{WL:!xt,j{R}[MeOvv
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 14 00 51 45 14 00 50 7a 51 48 dd 28 03 83 f8 a9 ac 25 8d 9c 85 b9 4b 68 9a 56 1e a7 1c 0f f3 eb 5e 73 e0 dd 42 5d 3b cc b6 bd 85 6d ee 6d d9 ae 5a e7 1e 62 89 1b 21 d8 92 30 73 c0 c7 18 da 47 6a de f1 e4 b1 ea 9a f5 86 9f 33 16 4b eb df 99 41 c1 64 40 58 2f e2 42 0f c6 ba 0b 1d 3e 13 a6 8b 8f b4 c5 15 c5 ca 94 92 03 84 52 84 92 30 a4 63 21 43 63 81 9e f5 e3 a8 4e b5 79 55 4f 6d 11 ea f3 42 95 15 4d ad ce 7b 5c f1 1d 8e b1 6f 32 5a 03 3c f1 b2 46 66 da a1 58 b0 05 42 b0 e4 f1 df b6 45 71 9a 0d b7 fc 24 5e 26 dd 9d f6 70 74 3d 8a 03 c1 ff 00 81 b6 5b e9 8a b1 e2 08 d3 49 d1 e7 48 9c 87 96 46 21 82 ed 21 a5 27 9c 76 db 18 3c 7b 57 4f f0 b7 4b 58 34 35 b9 28 15 ee 0e fe 3b 2f 45 1f 4c 62 b8 b0 6a 78 ba fc f5 7a 1d 58 97 0c 3d 2b 53 ea 41 ad 6b b6 96 f7 30 4f Data Ascii: QEPzQH(%KhV^sB];mmZb!0sGj3KAd@X/B>R0c!CcNyUOmBM{\o2Z<FfXBEq$^&pt=[IHF!!'v<{WOKX45(;/ELbjxzX=+SAk0O
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 31 c4 c4 e6 4d 81 9b 18 e8 3a 6e f5 f9 71 5e 02 a4 be af 39 c6 76 7f e4 7b 4e ad ab 42 2e 37 48 f2 cf 1e 4c 6e b5 2b 6b 48 f8 f3 24 77 50 3b 16 61 1a 8f c8 37 e7 5e c1 a0 5a 2d b6 9f 0c 28 a0 2a 28 00 57 8b de 11 3f 8e b4 d8 ba 8d d0 7f ec cf ff 00 b3 57 a0 f8 df c4 7f f0 88 97 f1 04 de 20 d2 a1 b1 b4 b5 51 73 a6 5e 4a b1 19 32 58 86 47 27 87 20 10 14 82 1b 69 1c 75 1d 39 44 2d 4d b3 9f 31 97 bc a2 77 7b 06 3a 55 19 ec ad 61 bc 93 54 f2 99 a7 58 3c b2 50 64 95 07 76 00 1d 4e 6b c2 e4 f8 e9 e2 9f 88 77 af a2 fc 17 f0 9c 97 2e aa bf 68 d5 b5 50 23 82 d8 37 43 b7 3c 9e 0f 53 ce 0f ca 6b d5 7c 09 a5 eb ba 47 c3 8b 2b 3f 13 4d 73 7f ad b3 3c 97 d3 5a ba 86 69 5e 46 72 cb c8 1b 79 e8 3b 71 8e d5 ec 1e 61 ab a6 d9 47 93 7c db a6 9e 55 da 26 9a dc 47 28 8f 39 08 Data Ascii: 1M:nq^9v{NB.7HLn+kH$wP;a7^Z-(*(W?W Qs^J2XG' iu9D-M1w{:UaTX<PdvNkw.hP#7C<Sk\|G+?Ms<Zi^Fry;qaG\|U&G(9
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: f6 f5 ae 83 c4 5e 36 b4 ba b2 b4 8e 58 ad 2e 04 93 43 22 66 32 5a 35 dc a1 dc 70 76 f5 23 24 8e a6 be 79 c7 0e f0 f3 e7 7a df fe 18 f7 b9 ab fb 58 72 2d 1a 3c d2 07 29 e3 cd 29 df bb 41 9c fb c7 b7 f9 d5 4f 8e f2 fc 39 d3 3e 2f d9 6a 9e 3c f0 b6 b5 e2 19 17 48 80 d9 43 69 07 9b 02 e2 59 b7 19 17 23 27 38 c0 39 1d 78 a9 fc 40 ed 6d e2 5b 3b b6 5f 28 47 30 38 1d 84 73 37 1f f7 cb 2d 7d 05 a4 8b 79 22 4b a0 88 64 68 c2 17 db c9 51 92 06 7d 39 3f 9d 77 e5 32 5e c9 a3 8b 31 8f be 9f 91 f3 c6 a3 f1 d3 e1 e5 d4 36 a2 d3 c1 9e 33 d3 2e 6c 93 65 9d c5 96 94 b1 bd ba ff 00 74 61 b0 53 d5 08 2a 7b 8a f4 ad 36 d9 3e 26 7c 1e d0 6f 75 49 75 a9 25 98 25 c4 86 c2 e3 ec 33 34 8b b9 4e fc 30 00 67 39 5c f5 fa 54 ff 00 16 7e 30 f8 3b e1 e0 16 97 f7 0d a8 6b 32 e0 5b e9 56 Data Ascii: ^6X.C"f2Z5pv#$yzXr-<))AO9>/j<HCiY#'89x@m[;_(G08s7-}y"KdhQ}9?w2^163.letaS*{6>&\|ouIu%%34N0g9\T~0;k2[V
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 2d 07 cc 61 64 03 f8 43 12 84 e0 0f 9f 39 38 ae 6b c4 97 fe 24 f0 0d e4 bf 0e 3c 03 a5 e8 1e 14 b3 61 f6 89 7c 49 79 2a 20 78 64 66 d8 46 ee 5a 41 f7 0f de 39 5e 00 04 53 34 8f 0f 7c 3e f0 2e 89 a8 f8 bf 5a d2 f5 af 1c 6a 2b 13 49 7b ab ea 76 db 22 6c 8c 11 19 9c a8 39 ce 01 5d ec 73 8c d7 d0 1e 29 ee da 74 ba ce 93 e3 4b c8 2e a5 d1 6d fc 3d 72 a1 74 bb 4b 48 18 5c 3c b8 0d 24 92 1e 98 e4 8e 9e 84 91 df a2 b8 b9 e3 ad 79 e7 c3 cf 1d c9 e3 8f 04 c1 ab 5e d8 cb e1 b6 d4 9d e3 b0 47 b8 56 96 54 c1 21 d3 20 72 40 63 8c 1e 06 7a 56 cc 7a a1 b3 99 2c ae d4 c4 8f 28 82 c8 34 86 59 66 0a b9 2c dd 4f 63 c9 3d 06 49 c9 c5 0c 66 b5 cc e7 9e 79 ac e9 1f 73 64 d0 6e 12 78 d6 58 a4 57 46 19 56 53 90 47 d6 a3 ce 4d 48 0a 9f 7a af 40 c4 60 8a a0 bf 78 55 a8 8f 00 66 80 Data Ascii: -adC98k$<a\|Iy* xdfFZA9^S4\|>.Zj+I{v"l9]s)tK.m=rtKH\<$y^GVT! r@czVz,(4Yf,Oc=IfysdnxXWFVSGMHz@`xUf
2025-04-02 14:42:16 UTC	1369	IN	Data Raw: 78 7e 3d 2f c3 6c 3e cb 65 62 d1 5a 5b 4a 78 79 89 2d bd db be 4e 3d 3a b7 e1 a5 77 a8 5d 5b 1b a6 6b 09 65 48 56 2d 85 3a ca cc 48 20 0f 6f 97 9f 73 e9 5e 49 fb 21 be a1 7f e0 dd 63 5e d4 ee a7 ba ba d4 b5 47 77 96 57 24 b6 d5 51 9f cc 9a df f8 fd e3 bd 7b c0 b6 da 0c fa 22 58 c8 75 0b d3 6b 2a 5d 44 cc 39 00 82 08 61 8e f4 98 ee 75 5a 6f 8b 1a f7 5b d6 74 d4 d1 af 90 e9 77 36 f0 19 59 7e 49 84 b8 f9 d3 8e 42 e7 27 e9 5b cb 3e a5 24 ac 21 b6 44 11 dd 2a 36 f3 c4 91 15 04 b2 fa 11 bb ff 00 1d 23 bd 72 df 15 bc 5b 71 e0 9f 87 37 9a fa 47 0d c5 fc 68 ab 0c 7b 4e c7 94 f7 c0 39 c0 1b 98 f3 d0 1e 6b 6f e1 c7 89 6d 7c 5d e0 dd 33 c4 56 9b 42 de 42 19 d0 1f f5 6e 38 75 fc 18 11 f8 52 b0 11 6a 5e 17 d2 8e a9 63 e2 bd 5a 4b 89 ef b4 3f b4 cb 6f 34 4c 55 bc a7 04 Data Ascii: x~=/l>ebZ[Jxy-N=:w][keHV-:H os^I!c^GwW$Q{"Xuk]D9auZo[tw6Y~IB'[>$!D6#r[q7Gh{N9kom\|]3VBBn8uRj^cZK?o4LU