Create Interactive Tour

Windows Analysis Report
https://storage.googleapis.com/m030325nw/0203010214585.html#5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21

Overview

General Information

Sample URL:	https://storage.googleapis.com/m030325nw/0203010214585.html#5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21
Analysis ID:	1654898
Infos:

Detection

Phisher

Score:	56
Range:	0 - 100
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

Yara detected Phisher

Creates files inside the system directory

Deletes files inside the Windows folder

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3948 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2020,i,11669691295841033446,745604029517793520,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2052 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5884 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://storage.googleapis.com/m030325nw/0203010214585.html#5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_201	JoeSecurity_Phisher_2	Yara detected Phisher	Joe Security

Suricata Signatures

ETPRO EXPLOIT_KIT FoxTDS Initial Check

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-04-02T18:42:13.937240+0200	2859622	1	Exploit Kit Activity Detected	104.21.64.1	443	192.168.2.4	49730	TCP

HTTP traffic detected: POST /report/v4?s=jnPtg5DL8OTJ5AHwEwpahy1Ceahp9WjtGGZKJ1u4raXBH8EJnobql4wloYA%2FTb6nBui1DzkInzm5c0p7hWe8P9mitrCSxcfkS6iuIyA8CE7LmjuGf9aG8pQyxWG%2Fkk1OfHegyFQ%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 489Content-Type: application/reports+jsonOrigin: https://montgomeryan.clickUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 02 Apr 2025 16:42:14 GMTContent-Type: text/plain; charset=utf-8Content-Length: 0Connection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jnPtg5DL8OTJ5AHwEwpahy1Ceahp9WjtGGZKJ1u4raXBH8EJnobql4wloYA%2FTb6nBui1DzkInzm5c0p7hWe8P9mitrCSxcfkS6iuIyA8CE7LmjuGf9aG8pQyxWG%2Fkk1OfHegyFQ%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 92a1c7405a2defa5-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=107450&min_rtt=104533&rtt_var=25090&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1236&delivery_rate=35623&cwnd=236&unsent_bytes=0&cid=5a4b281f80eea67d&ts=570&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 02 Apr 2025 16:42:42 GMTContent-Type: application/json; charset=utf-8Content-Length: 75Connection: closeAccess-Control-Allow-Origin: *ETag: W/"4b-ovrfQmjJROgaUSBwko1/fb8QeaY"

Source: chromecache_179.4.dr	String found in binary or memory: http://google.com
Source: chromecache_179.4.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_179.4.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_179.4.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_187.4.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_227.4.dr, chromecache_194.4.dr, chromecache_198.4.dr, chromecache_187.4.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_146.4.dr, chromecache_194.4.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_136.4.dr, chromecache_138.4.dr, chromecache_165.4.dr, chromecache_129.4.dr, chromecache_202.4.dr, chromecache_128.4.dr, chromecache_196.4.dr, chromecache_217.4.dr, chromecache_142.4.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_182.4.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_175.4.dr	String found in binary or memory: https://adssettings.google.com"
Source: chromecache_210.4.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_218.4.dr	String found in binary or memory: https://api.figjampublishing.com/ads/site/confirm-visit?domain=$
Source: chromecache_218.4.dr	String found in binary or memory: https://api.optoutsystem.com/optout-ad-redirect/confirm
Source: chromecache_182.4.dr, chromecache_212.4.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_179.4.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_179.4.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/large_147710_1_3_ef6945a23c.webp"
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/large_Wolf_Hall_1014x570_ba4e0ef087.jp
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/large_workingmanre_jpg_e613ede59b.webp
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/medium_147710_1_3_ef6945a23c.webp&quot
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/medium_Wolf_Hall_1014x570_ba4e0ef087.j
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/medium_shutterstock_2429284207_1_ec1ce
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/medium_workingmanre_jpg_e613ede59b.web
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/small_147710_1_3_ef6945a23c.webp"
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/small_Wolf_Hall_1014x570_ba4e0ef087.jp
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/small_shutterstock_2429284207_1_ec1cef
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/small_workingmanre_jpg_e613ede59b.webp
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/thumbnail_147710_1_3_ef6945a23c.webp&q
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/thumbnail_Wolf_Hall_1014x570_ba4e0ef08
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/thumbnail_shutterstock_2429284207_1_ec
Source: chromecache_186.4.dr	String found in binary or memory: https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/thumbnail_workingmanre_jpg_e613ede59b.
Source: chromecache_179.4.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_146.4.dr	String found in binary or memory: https://developers.google.com/ad-placement
Source: chromecache_179.4.dr	String found in binary or memory: https://ep1.adtrafficquality.google/getconfig/sodar
Source: chromecache_179.4.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/$
Source: chromecache_179.4.dr, chromecache_220.4.dr	String found in binary or memory: https://ep3.adtrafficquality.google/ivt/worklet/caw.js
Source: chromecache_132.4.dr	String found in binary or memory: https://esp.rtbhouse.com/encrypt
Source: chromecache_178.4.dr	String found in binary or memory: https://fledge.us.criteo.com/nspbws
Source: chromecache_143.4.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_179.4.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_143.4.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Inter:wght
Source: chromecache_151.4.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Barlow
Source: chromecache_179.4.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_151.4.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto
Source: chromecache_151.4.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Rubik
Source: chromecache_143.4.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_156.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2)
Source: chromecache_156.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2)
Source: chromecache_156.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2)
Source: chromecache_156.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2)
Source: chromecache_156.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2)
Source: chromecache_156.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2)
Source: chromecache_156.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2)
Source: chromecache_179.4.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/$
Source: chromecache_220.4.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_179.4.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_175.4.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/conversion/?ai=&sigh=BpnfxIaauQU
Source: chromecache_179.4.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_175.4.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png"
Source: chromecache_175.4.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png"
Source: chromecache_175.4.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png"
Source: chromecache_136.4.dr, chromecache_138.4.dr, chromecache_165.4.dr, chromecache_129.4.dr, chromecache_202.4.dr, chromecache_128.4.dr, chromecache_196.4.dr, chromecache_217.4.dr, chromecache_142.4.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/managed/dict/$
Source: chromecache_187.4.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/147710_1_3_ef6945a23c.webp"
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/21residence_article_Large_00c193a23d.webp
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/7_best_resale_apps_to_sell_your_stuff_0_c6dd347b22.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/Happy_Face_Main_2025_07930177b9.webp
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/Wolf_Hall_1014x570_ba4e0ef087.jpg"
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/ashre_jpg_ee4546fc4d.webp
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/best_face_moisturizers_for_dry_winter_skin_0_4d20452492.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/different_hot_dog_styles_from_around_the_world_0_f0ec7c12ae.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/foods_to_boost_your_immune_system_during_cold_season_0_9c7c270ea8.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/journaling_can_benefit_your_mental_health_and_heres_how_0_d13ba9db0f.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/lessstronggreaterwhat_are_memestockslessstronggreater_0_6a0ef86527.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/must_try_trader_joes_fall_items_to_add_to_your_grocery_list_0_b9da95eaac.
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/nfts_and_sneakers_0_e29f1db1d0.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/shutterstock_1015450198_04129b776f.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/shutterstock_1015450198_fb6607bb4c.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/shutterstock_1715498335_5d0c6c164c.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/shutterstock_1715498335_b216cd9134.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/shutterstock_2148214697_1c2803425c.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/shutterstock_2429284207_1_ec1cefd709.jpg"
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/shutterstock_2431500523_d5f1372599.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/shutterstock_2528367937_53dc313dcf.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/shutterstock_2565426787_1_609e9e28c5.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/shutterstock_398419264_82ac35a171.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/shutterstock_449136469_6e710d5cb8.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/shutterstock_449136469_768aeb017b.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/starbucks_new_fall_food_and_drink_items_are_here_0_d658024d70.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/typerduplicityre_jpg_e3ef3ac5dc.webp
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/what_is_the_electric_tesla_semi_0_c8c66b6906.jpg
Source: chromecache_186.4.dr	String found in binary or memory: https://lb.athomedaily.com/workingmanre_jpg_e613ede59b.webp"
Source: chromecache_187.4.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_187.4.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_187.4.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_187.4.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_182.4.dr, chromecache_219.4.dr, chromecache_212.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_179.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_187.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_227.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=colleague-executed&name=
Source: chromecache_227.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=
Source: chromecache_227.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_227.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_227.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_227.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_227.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-fallback2
Source: chromecache_227.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-later2
Source: chromecache_227.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-pagehide2
Source: chromecache_227.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-start2
Source: chromecache_227.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_189.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_136.4.dr, chromecache_138.4.dr, chromecache_165.4.dr, chromecache_129.4.dr, chromecache_202.4.dr, chromecache_128.4.dr, chromecache_196.4.dr, chromecache_217.4.dr, chromecache_142.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_146.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_182.4.dr, chromecache_212.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_179.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_179.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_179.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_179.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_186.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-7571486619349218
Source: chromecache_179.4.dr, chromecache_136.4.dr, chromecache_138.4.dr, chromecache_165.4.dr, chromecache_129.4.dr, chromecache_202.4.dr, chromecache_128.4.dr, chromecache_196.4.dr, chromecache_217.4.dr, chromecache_142.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_179.4.dr, chromecache_136.4.dr, chromecache_138.4.dr, chromecache_165.4.dr, chromecache_129.4.dr, chromecache_202.4.dr, chromecache_128.4.dr, chromecache_196.4.dr, chromecache_217.4.dr, chromecache_142.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_175.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Source: chromecache_142.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_179.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_179.4.dr, chromecache_136.4.dr, chromecache_138.4.dr, chromecache_165.4.dr, chromecache_129.4.dr, chromecache_146.4.dr, chromecache_202.4.dr, chromecache_128.4.dr, chromecache_196.4.dr, chromecache_217.4.dr, chromecache_142.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_175.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjss
Source: chromecache_187.4.dr	String found in binary or memory: https://publickeyservice.msmt.gcp.privacysandboxservices.com
Source: chromecache_132.4.dr	String found in binary or memory: https://secure-signals-gazetkowo-300234255994.europe-west4.run.app/ss-rtbhouse
Source: chromecache_179.4.dr, chromecache_220.4.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_179.4.dr, chromecache_220.4.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/cocar.js
Source: chromecache_179.4.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_186.4.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/tag/js/gpt.js
Source: chromecache_182.4.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_182.4.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_210.4.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_210.4.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_182.4.dr, chromecache_212.4.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_179.4.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_143.4.dr	String found in binary or memory: https://umami.optoutsystem.com
Source: chromecache_186.4.dr	String found in binary or memory: https://variety.com/2025/film/news/sydney-sweeney-gundam-movie-1236353245/"
Source: chromecache_186.4.dr	String found in binary or memory: https://variety.com/2025/film/reviews/october-8-review-1236346839/"
Source: chromecache_186.4.dr	String found in binary or memory: https://variety.com/2025/tv/reviews/wolf-hall-the-mirror-and-the-light-review-pbs-1236344296/"
Source: chromecache_186.4.dr	String found in binary or memory: https://www.figjampublishing.com/ad-serving-policy/
Source: chromecache_186.4.dr	String found in binary or memory: https://www.figjampublishing.com/privacy-policy/
Source: chromecache_186.4.dr	String found in binary or memory: https://www.figjampublishing.com/website-terms-of-use/
Source: chromecache_201.4.dr	String found in binary or memory: https://www.glasswoodplate.com/o-ngjc-h72-64a1b4275b478fd490bb6da4fbc0a952
Source: chromecache_212.4.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_210.4.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_210.4.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_210.4.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_212.4.dr	String found in binary or memory: https://www.google.com
Source: chromecache_210.4.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_136.4.dr, chromecache_138.4.dr, chromecache_165.4.dr, chromecache_129.4.dr, chromecache_202.4.dr, chromecache_128.4.dr, chromecache_196.4.dr, chromecache_217.4.dr, chromecache_142.4.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_179.4.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_175.4.dr	String found in binary or memory: https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttps://www.%26gl%
Source: chromecache_179.4.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_179.4.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_175.4.dr	String found in binary or memory: https://www.google.com/url?ct=abg
Source: chromecache_227.4.dr, chromecache_182.4.dr, chromecache_212.4.dr, chromecache_187.4.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_227.4.dr, chromecache_187.4.dr	String found in binary or memory: https://www.googleadservices.com/.well-known/private-aggregation/report-shared-storage
Source: chromecache_227.4.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_187.4.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/$
Source: chromecache_212.4.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_182.4.dr, chromecache_212.4.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_210.4.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_186.4.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-9000201-10
Source: chromecache_182.4.dr, chromecache_212.4.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_227.4.dr, chromecache_187.4.dr	String found in binary or memory: https://www.googletagservices.com/agrp/
Source: chromecache_179.4.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_175.4.dr	String found in binary or memory: https://www.gstatic.com"
Source: chromecache_175.4.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png"
Source: chromecache_179.4.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/$
Source: chromecache_186.4.dr	String found in binary or memory: https://www.hollywoodreporter.com/movies/movie-reviews/a-working-man-review-jason-statham-david-ayer
Source: chromecache_182.4.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_132.4.dr	String found in binary or memory: https://www.rtbhouse.com/
Source: chromecache_182.4.dr, chromecache_212.4.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_182.4.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.247.156:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.42.123.243:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.247.156:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.236.171.103:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.236.171.103:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.82.117.22:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.42.123.243:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.163:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.163:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.73.46:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.73.46:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.73.46:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.73.46:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.73.46:443 -> 192.168.2.4:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.73.46:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.163:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.163:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.163:443 -> 192.168.2.4:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.163:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.163:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.70.199.106:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.98:443 -> 192.168.2.4:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.73.46:443 -> 192.168.2.4:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.73.46:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.35.203.86:443 -> 192.168.2.4:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.163.154:443 -> 192.168.2.4:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.110:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.165.130:443 -> 192.168.2.4:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.32.98:443 -> 192.168.2.4:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.110:443 -> 192.168.2.4:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.226.84:443 -> 192.168.2.4:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.128.51:443 -> 192.168.2.4:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.28.101:443 -> 192.168.2.4:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.102.146.192:443 -> 192.168.2.4:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.96.70.87:443 -> 192.168.2.4:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.119.117.47:443 -> 192.168.2.4:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.111.60.239:443 -> 192.168.2.4:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.226.84:443 -> 192.168.2.4:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.119.117.17:443 -> 192.168.2.4:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.119.117.8:443 -> 192.168.2.4:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.41.2:443 -> 192.168.2.4:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.119.117.17:443 -> 192.168.2.4:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.111.60.239:443 -> 192.168.2.4:49895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.49.23.1:443 -> 192.168.2.4:49898 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir436_1013507523

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir436_1013507523

Jump to behavior

Source: classification engine

Classification label: mal56.phis.win@31/179@95/32

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2020,i,11669691295841033446,745604029517793520,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2052 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://storage.googleapis.com/m030325nw/0203010214585.html#5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2020,i,11669691295841033446,745604029517793520,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2052 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://storage.googleapis.com/m030325nw/0203010214585.html#5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/medium_workingmanre_jpg_e613ede59b.web	0%	Avira URL Cloud	safe
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/small_shutterstock_2429284207_1_ec1cef	0%	Avira URL Cloud	safe
https://www.figjampublishing.com/ad-serving-policy/	0%	Avira URL Cloud	safe
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/medium_Wolf_Hall_1014x570_ba4e0ef087.j	0%	Avira URL Cloud	safe
https://www.glasswoodplate.com/assets/script-e6d51933b9c387e0333322740e94168c.js	0%	Avira URL Cloud	safe
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/medium_147710_1_3_ef6945a23c.webp&quot	0%	Avira URL Cloud	safe
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/large_Wolf_Hall_1014x570_ba4e0ef087.jp	0%	Avira URL Cloud	safe
https://www.glasswoodplate.com/assets/clsx-cb9sL_yK.js	0%	Avira URL Cloud	safe
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/small_147710_1_3_ef6945a23c.webp"	0%	Avira URL Cloud	safe
https://www.glasswoodplate.com/assets/index-rXJICDJD.css	0%	Avira URL Cloud	safe
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/thumbnail_Wolf_Hall_1014x570_ba4e0ef08	0%	Avira URL Cloud	safe
https://www.glasswoodplate.com/assets/index-ZK6TGWZV.css	0%	Avira URL Cloud	safe
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/large_workingmanre_jpg_e613ede59b.webp	0%	Avira URL Cloud	safe
https://www.glasswoodplate.com/assets/index-lkLDrYLm.js	0%	Avira URL Cloud	safe
https://montgomeryan.click/favicon.ico	0%	Avira URL Cloud	safe
https://www.figjampublishing.com/privacy-policy/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
securepubads.g.doubleclick.net	142.251.40.130	true	false	high
tracenep.admaster.cc	35.209.233.198	true	false	high
www.googletagservices.com	142.251.41.2	true	false	high
api.optoutsystem.com	44.236.171.103	true	false	high
oa.openxcdn.net	34.102.146.192	true	false	high
montgomeryan.click	104.21.112.1	true	false	unknown
stats.g.doubleclick.net	142.251.163.154	true	false	high
cdn-ima.33across.com.cdn.cloudflare.net	104.18.28.101	true	false	high
static.admaster.cc	34.54.226.84	true	false	high
www.google.com	142.251.40.196	true	false	high
d1402xccwihzsp.cloudfront.net	108.138.128.51	true	false	high
publickeyservice-a.msmt-3.gcp.privacysandboxservices.com	34.49.23.1	true	false	high
in-ftd-172.us5.vip.prod.criteo.net	74.119.117.47	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
gum.us5.vip.prod.criteo.com	74.119.117.17	true	false	high
sentry.io	35.186.247.156	true	false	high
invstatic101.creativecdn.com	34.96.70.87	true	false	high
www.glasswoodplate.com	104.21.16.1	true	false	high
lb.athomedaily.com	172.67.73.46	true	false	high
gtrace.mediago.io	35.208.249.213	true	false	high
umami.optoutsystem.com	52.42.123.243	true	false	high
www.athomedaily.com	104.26.9.163	true	false	high
in-ftd-163.us5.vip.prod.criteo.com	74.119.117.8	true	false	high
googleads.g.doubleclick.net	142.250.80.66	true	false	high
www3.l.google.com	142.250.80.110	true	false	high
analytics.google.com	142.251.35.174	true	false	high
td.doubleclick.net	142.251.32.98	true	false	high
common-alb-1024279046.us-west-2.elb.amazonaws.com	54.70.199.106	true	false	high
imagesnep.admaster.cc	34.111.60.239	true	false	high
ep3.adtrafficquality.google	172.217.165.130	true	false	high
fundingchoicesmessages.google.com	unknown	unknown	false	high
gum.criteo.com	unknown	unknown	false	high
connectid.analytics.yahoo.com	unknown	unknown	false	high
static.criteo.net	unknown	unknown	false	high
publickeyservice.msmt.gcp.privacysandboxservices.com	unknown	unknown	false	high
cdn-ima.33across.com	unknown	unknown	false	high
gtracenep.admaster.cc	unknown	unknown	false	high
api.figjampublishing.com	unknown	unknown	false	high
fledge.us.criteo.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.glasswoodplate.com/assets/script-e6d51933b9c387e0333322740e94168c.js	false	Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/f/AGSKWxWCpbGrMNXikcxDTegwxqZqOhAe55Wn0OyRmJCQoVERekQ07qzb1xtUMjPhdGVEMHCTkLcYgFGJDImXgq62Ux6jGIHWZF_exfuwXX0QmFzv8eqECWHna4dPuYERcXZ5roaGtySu?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzQzNjEyMTY0LDkwMjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuIl0sImh0dHBzOi8vd3d3LmF0aG9tZWRhaWx5LmNvbS8iLG51bGwsW1s4LCJJMUxRU2h1TEZ0ZyJdLFs5LCJlbi1VUyJdLFsyMywiMTc0MzYxMjE2NCJdLFsxOSwiMiJdLFsxNywiWzBdIl0sWzI0LCJ3d3cuZ2xhc3N3b29kcGxhdGUuY29tIl0sWzI5LCJmYWxzZSJdXV0	false		high
https://www.athomedaily.com/_astro/HeroCarousel.d38d3a33.css	false		high
https://fledge.us.criteo.com/nspbws	false		high
https://cdn-ima.33across.com/ob.js	false		high
https://lb.athomedaily.com/147710_1_3_ef6945a23c.webp	false		high
https://www.glasswoodplate.com/assets/clsx-cb9sL_yK.js	false	Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/f/AGSKWxUBTioSGFvw8zeZ60rvlWGj3oNdGHDFZG1rp3ggJPk_0BOM_mZWcABRJj2TezT88N72utNHQ4a5mHFbWuyWhjOzzveZV_gc0LUYIGGHk5W6EgFmnoVn7BA9-zdnJ4bVUYuj0NDC3wTFP91KJQpcK89cgEZtiVjusP6ZA1ALRsv7ppsUbPBcPpZsKA0=/_/sponsored_by./customad./smartlinks.epl?/welcome_ad./ads/bg_	false		high
https://api.optoutsystem.com/optout/optout-key/page/248000	false		high
https://lb.athomedaily.com/Wolf_Hall_1014x570_ba4e0ef087.jpg	false		high
https://lb.athomedaily.com/Happy_Face_Main_2025_07930177b9.webp	false		high
https://www.athomedaily.com/styles/redesign-ahd-app.css	false		high
https://fundingchoicesmessages.google.com/f/AGSKWxUeGQja_l4RZrpkdw8AuVoNcFVfJG8SlmLJUxcw17B1YBm_D4E-wWa07ploIh0t6gavkm2xgjgxit0vRe16wEFv-rpIl-2v3lU4Pg4EJt7P9iQT8Rf7b-XhWVBfwO7OliQdg8eY?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzQzNjEyMTY3LDIzMzAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOSw2XSxudWxsLDIsbnVsbCwiZW4iLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly93d3cuYXRob21lZGFpbHkuY29tLyIsbnVsbCxbWzgsIkkxTFFTaHVMRnRnIl0sWzksImVuLVVTIl0sWzIzLCIxNzQzNjEyMTY0Il0sWzE5LCIyIl0sWzE3LCJbMF0iXSxbMjQsInd3dy5nbGFzc3dvb2RwbGF0ZS5jb20iXSxbMjksImZhbHNlIl1dXQ	false		high
https://umami.optoutsystem.com/api/send	false		high
http://c.pki.goog/r/gsr1.crl	false		high
https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=www.athomedaily.com&gdpr=0&gdpr_consent=	false		high
https://www.athomedaily.com/_astro/hoisted.f9784d2a.js	false		high
https://montgomeryan.click/5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21	false		unknown
https://www.athomedaily.com/figjam-logo-small-bright.png	false		high
https://www.googletagservices.com/agrp/prod/model_person_country_code_US_person_region_code_4d415f353433.json	false		high
https://api.optoutsystem.com/optout/optout-key/decrypt	false		high
https://www.athomedaily.com/optout/redesign-confirmation.css	false		high
https://fundingchoicesmessages.google.com/el/AGSKWxXyXuQqDepADJkCnFv179q_a3p8FePk7mKIBOAHaNSO26x7ix0ApXwRUlWnK_EP4uuQZCKWuHoYT5Qxw6NN40dNUCsvY4nJa7awtrk5GKBDbEOPtNNX7E5mjzsqEpkziUHJTDk6	false		high
https://oa.openxcdn.net/esp.js	false		high
https://montgomeryan.click/t/5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21	false		unknown
https://lb.athomedaily.com/Apple_TV_The_Studio_key_art_graphic_header_4_1_show_home_jpg_og_c0d3c9c422.jpg	false		high
https://static.admaster.cc/js/cookieSync.html?tn=2ce2e6e33746b4224011d22068a89c02	false		high
https://www.athomedaily.com/_astro/redesign-post-layout.astro_astro_type_script_index_0_lang.682b0eb5.js	false		high
https://www.glasswoodplate.com/assets/index-rXJICDJD.css	false	Avira URL Cloud: safe	unknown
https://lb.athomedaily.com/21residence_article_Large_00c193a23d.webp	false		high
https://www.athomedaily.com/_astro/index.a9196c82.css	false		high
https://www.glasswoodplate.com/assets/index-ZK6TGWZV.css	false	Avira URL Cloud: safe	unknown
https://gum.criteo.com/sid/json?origin=publishertagids&domain=athomedaily.com&sn=ChromeSyncframe&so=0&topUrl=www.athomedaily.com&topicsavail=1&fledgeavail=1	false		high
https://www.glasswoodplate.com/assets/index-lkLDrYLm.js	false	Avira URL Cloud: safe	unknown
https://montgomeryan.click/favicon.ico	true	Avira URL Cloud: safe	unknown
https://api.optoutsystem.com/optout/collection/optout-page-collect/248000	false		high
https://publickeyservice.msmt.gcp.privacysandboxservices.com/.well-known/aggregation-service/v1/public-keys	false		high
https://imagesnep.admaster.cc/ML/00bce1e6b24ef543ad34d1933d824941__scv1__622x368.gif	false		high
http://c.pki.goog/r/r4.crl	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/small_shutterstock_2429284207_1_ec1cef	chromecache_186.4.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_182.4.dr	false		high
https://lb.athomedaily.com/different_hot_dog_styles_from_around_the_world_0_f0ec7c12ae.jpg	chromecache_186.4.dr	false		high
https://www.figjampublishing.com/ad-serving-policy/	chromecache_186.4.dr	false	Avira URL Cloud: safe	unknown
https://www.googletagservices.com/agrp/	chromecache_227.4.dr, chromecache_187.4.dr	false		high
http://www.broofa.com	chromecache_146.4.dr, chromecache_194.4.dr	false		high
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/medium_workingmanre_jpg_e613ede59b.web	chromecache_186.4.dr	false	Avira URL Cloud: safe	unknown
https://lb.athomedaily.com/what_is_the_electric_tesla_semi_0_c8c66b6906.jpg	chromecache_186.4.dr	false		high
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/large_Wolf_Hall_1014x570_ba4e0ef087.jp	chromecache_186.4.dr	false	Avira URL Cloud: safe	unknown
https://lb.athomedaily.com/shutterstock_1715498335_5d0c6c164c.jpg	chromecache_186.4.dr	false		high
https://lb.athomedaily.com/shutterstock_2528367937_53dc313dcf.jpg	chromecache_186.4.dr	false		high
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/medium_Wolf_Hall_1014x570_ba4e0ef087.j	chromecache_186.4.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_210.4.dr	false		high
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/small_147710_1_3_ef6945a23c.webp"	chromecache_186.4.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com	chromecache_182.4.dr, chromecache_212.4.dr	false		high
https://www.google.com	chromecache_212.4.dr	false		high
https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttps://www.%26gl%	chromecache_175.4.dr	false		high
https://www.youtube.com/iframe_api	chromecache_182.4.dr	false		high
https://variety.com/2025/film/reviews/october-8-review-1236346839/"	chromecache_186.4.dr	false		high
https://fundingchoicesmessages.google.com/i/$	chromecache_179.4.dr	false		high
https://lb.athomedaily.com/147710_1_3_ef6945a23c.webp"	chromecache_186.4.dr	false		high
https://api.figjampublishing.com/ads/site/confirm-visit?domain=$	chromecache_218.4.dr	false		high
https://lb.athomedaily.com/nfts_and_sneakers_0_e29f1db1d0.jpg	chromecache_186.4.dr	false		high
https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png"	chromecache_175.4.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_210.4.dr	false		high
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_179.4.dr	false		high
https://googleads.g.doubleclick.net/pagead/html/$	chromecache_179.4.dr	false		high
https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png"	chromecache_175.4.dr	false		high
https://openjsf.org/	chromecache_187.4.dr	false		high
https://www.google.com/adsense	chromecache_136.4.dr, chromecache_138.4.dr, chromecache_165.4.dr, chromecache_129.4.dr, chromecache_202.4.dr, chromecache_128.4.dr, chromecache_196.4.dr, chromecache_217.4.dr, chromecache_142.4.dr	false		high
https://variety.com/2025/tv/reviews/wolf-hall-the-mirror-and-the-light-review-pbs-1236344296/"	chromecache_186.4.dr	false		high
https://lb.athomedaily.com/shutterstock_2429284207_1_ec1cefd709.jpg"	chromecache_186.4.dr	false		high
https://lb.athomedaily.com/shutterstock_1015450198_fb6607bb4c.jpg	chromecache_186.4.dr	false		high
https://www.google.com/url?ct=abg	chromecache_175.4.dr	false		high
https://lb.athomedaily.com/must_try_trader_joes_fall_items_to_add_to_your_grocery_list_0_b9da95eaac.	chromecache_186.4.dr	false		high
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	chromecache_179.4.dr, chromecache_220.4.dr	false		high
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/medium_147710_1_3_ef6945a23c.webp&quot	chromecache_186.4.dr	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/pagead/js/car.js	chromecache_179.4.dr, chromecache_220.4.dr	false		high
https://cct.google/taggy/agent.js	chromecache_182.4.dr, chromecache_212.4.dr	false		high
https://variety.com/2025/film/news/sydney-sweeney-gundam-movie-1236353245/"	chromecache_186.4.dr	false		high
http://mathiasbynens.be/	chromecache_179.4.dr	false		high
https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png"	chromecache_175.4.dr	false		high
https://lb.athomedaily.com/shutterstock_449136469_6e710d5cb8.jpg	chromecache_186.4.dr	false		high
http://underscorejs.org/LICENSE	chromecache_187.4.dr	false		high
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/thumbnail_Wolf_Hall_1014x570_ba4e0ef08	chromecache_186.4.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/adsense/search/async-ads.js	chromecache_179.4.dr	false		high
https://cms-images-figjamadmin-com.s3.us-west-2.amazonaws.com/large_workingmanre_jpg_e613ede59b.webp	chromecache_186.4.dr	false	Avira URL Cloud: safe	unknown
https://secure-signals-gazetkowo-300234255994.europe-west4.run.app/ss-rtbhouse	chromecache_132.4.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_210.4.dr	false		high
https://esp.rtbhouse.com/encrypt	chromecache_132.4.dr	false		high
https://lb.athomedaily.com/shutterstock_449136469_768aeb017b.jpg	chromecache_186.4.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_182.4.dr	false		high
http://googleads.g.doubleclick.net	chromecache_179.4.dr	false		high
https://js.foundation/	chromecache_187.4.dr	false		high
https://lb.athomedaily.com/starbucks_new_fall_food_and_drink_items_are_here_0_d658024d70.jpg	chromecache_186.4.dr	false		high
https://ep2.adtrafficquality.google/sodar/$	chromecache_179.4.dr	false		high
https://lb.athomedaily.com/workingmanre_jpg_e613ede59b.webp"	chromecache_186.4.dr	false		high
https://www.figjampublishing.com/privacy-policy/	chromecache_186.4.dr	false	Avira URL Cloud: safe	unknown
https://npms.io/search?q=ponyfill.	chromecache_187.4.dr	false		high
https://securepubads.g.doubleclick.net/tag/js/gpt.js	chromecache_186.4.dr	false		high
https://www.hollywoodreporter.com/movies/movie-reviews/a-working-man-review-jason-statham-david-ayer	chromecache_186.4.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.35.203.86	unknown	United States	16509	AMAZON-02US	false
142.250.80.110	www3.l.google.com	United States	15169	GOOGLEUS	false
34.96.70.87	invstatic101.creativecdn.com	United States	15169	GOOGLEUS	false
52.42.123.243	umami.optoutsystem.com	United States	16509	AMAZON-02US	false
74.119.117.47	in-ftd-172.us5.vip.prod.criteo.net	United States	19750	AS-CRITEOUS	false
35.186.247.156	sentry.io	United States	15169	GOOGLEUS	false
104.21.80.1	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.73.46	lb.athomedaily.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.217.165.130	ep3.adtrafficquality.google	United States	15169	GOOGLEUS	false
108.138.128.51	d1402xccwihzsp.cloudfront.net	United States	16509	AMAZON-02US	false
34.49.23.1	publickeyservice-a.msmt-3.gcp.privacysandboxservices.com	United States	2686	ATGS-MMD-ASUS	false
142.251.163.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.54.226.84	static.admaster.cc	United States	2686	ATGS-MMD-ASUS	false
35.209.233.198	tracenep.admaster.cc	United States	19527	GOOGLE-2US	false
74.119.117.8	in-ftd-163.us5.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
142.250.72.98	unknown	United States	15169	GOOGLEUS	false
142.251.41.2	www.googletagservices.com	United States	15169	GOOGLEUS	false
104.21.64.1	unknown	United States	13335	CLOUDFLARENETUS	true
34.111.60.239	imagesnep.admaster.cc	United States	15169	GOOGLEUS	false
142.251.32.98	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.251.40.196	www.google.com	United States	15169	GOOGLEUS	false
54.70.199.106	common-alb-1024279046.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.208.249.213	gtrace.mediago.io	United States	19527	GOOGLE-2US	false
104.21.16.1	www.glasswoodplate.com	United States	13335	CLOUDFLARENETUS	false
74.119.117.17	gum.us5.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
44.236.171.103	api.optoutsystem.com	United States	16509	AMAZON-02US	false
104.26.9.163	www.athomedaily.com	United States	13335	CLOUDFLARENETUS	false
34.102.146.192	oa.openxcdn.net	United States	15169	GOOGLEUS	false
35.82.117.22	unknown	United States	237	MERIT-AS-14US	false
104.18.28.101	cdn-ima.33across.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1654898
Start date and time:	2025-04-02 18:40:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://storage.googleapis.com/m030325nw/0203010214585.html#5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@31/179@95/32

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.227, 142.250.65.174, 172.253.122.84, 142.250.176.206, 142.250.64.110, 142.251.35.174, 172.217.165.155, 142.250.80.91, 142.251.40.187, 142.250.176.219, 142.251.41.27, 142.251.32.123, 142.250.65.251, 142.251.40.219, 142.250.81.251, 142.250.80.123, 142.250.65.187, 142.250.65.219, 142.250.80.59, 142.251.40.251, 142.250.80.27, 142.250.72.123, 199.232.210.172, 142.250.80.67, 64.233.180.95, 142.250.80.66, 142.250.80.34, 142.251.32.110, 172.217.165.142, 142.251.40.138, 142.250.65.170, 142.250.80.10, 142.251.40.106, 142.250.64.74, 142.250.72.106, 142.250.65.234, 142.250.80.74, 142.251.35.170, 142.251.40.170, 142.251.32.106, 142.250.80.42, 142.250.65.202, 142.250.80.106, 142.250.176.202, 142.250.81.234, 142.251.40.206, 142.250.80.40, 142.251.40.130, 142.250.80.78, 142.251.40.98, 216.239.36.178, 216.239.38.178, 216.239.34.178, 216.239.32.178, 142.250.65.225, 142.250.80.98, 142.250.81.226, 142.250.176.194, 142.250.65.226, 142.250.65.227, 142.251.40.238, 34.104.35.123,
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://storage.googleapis.com/m030325nw/0203010214585.html#5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.3502090290998976
Encrypted:	false
SSDEEP:	3:dRYto:Tuo
MD5:	E000ACEF32012A650D8C243D77C7302C
SHA1:	50624C2BAE8FE1A6DA065AB4BCA1C96822AE1820
SHA-256:	E3933184560739B70B60E2D0E48A6C7D7E18F76D95362E11F4155267700AC3A7
SHA-512:	D88E2A944FB1B88903CB2B7E207AE289C01770C3FD30A9A76F2031CAECC048AD474603FE393056F9C6E1A34BC6DD6A626CAD90773871095D11CED1241F49C061
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed

Source: https://montgomeryan.click/5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21	HTTP Parser: No favicon
Source: https://montgomeryan.click/t/5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21	HTTP Parser: No favicon
Source: https://www.athomedaily.com/?utm_source=live&utm_medium=traffic&utm_campaign=one&sc=30975&tc=30975	HTTP Parser: No favicon
Source: https://www.athomedaily.com/?utm_source=live&utm_medium=traffic&utm_campaign=one&sc=30975&tc=30975	HTTP Parser: No favicon
Source: https://www.athomedaily.com/?utm_source=live&utm_medium=traffic&utm_campaign=one&sc=30975&tc=30975	HTTP Parser: No favicon
Source: https://www.athomedaily.com/?utm_source=live&utm_medium=traffic&utm_campaign=one&sc=30975&tc=30975	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.99
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.99
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_182.4.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=v;return t},Vk:function(){e=qb()},Md:function(){d()}}};var $b=va(["data-gtm-yt-inspected-"]),AH=["www.youtube.com","www.youtube-nocookie.com"],BH,CH=!1; equals www.youtube.com (Youtube)
Source: chromecache_182.4.dr	String found in binary or memory: S(b)\|\|Hm(a,b)},b)},It=function(){return[L.m.R,L.m.T]},Jt=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,Kt=/^www\.googleadservices\.com$/,Ot=/^gad_source[_=](\d+)$/;function Tt(){return qo("dedupe_gclid",function(){return lr()})};var Ut=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,Vt=/^www.googleadservices.com$/;function Wt(a){a\|\|(a=Xt());return a.fo?!1:a.fn\|\|a.gn\|\|a.kn\|\|a.hn\|\|a.rf\|\|a.Pm\|\|a.jn\|\|a.Um?!0:!1}function Xt(){var a={},b=Rr(!0);a.fo=!!b._up;var c=gt();a.fn=c.aw!==void 0;a.gn=c.dc!==void 0;a.kn=c.wbraid!==void 0;a.hn=c.gbraid!==void 0;a.jn=c.gclsrc==="aw.ds";a.rf=Gt().rf;var d=A.referrer?ck(ik(A.referrer),"host"):"";a.Um=Ut.test(d);a.Pm=Vt.test(d);return a};var Yt=["https://www.google.com","https://www.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_182.4.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=eE(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Ab(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},hE=function(){var a=[],b=function(c){return eb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_212.4.dr	String found in binary or memory: function Bt(a,b){var c=Ss(b),d=Ts(a,c);if(!d)return 0;var e;e=a==="ag"?Us(d):Ps(d);for(var f=0,g=0;g<e.length;g++)f=Math.max(f,e[g].timestamp);return f}function Ct(a){for(var b=0,c=l(Object.keys(a)),d=c.next();!d.done;d=c.next())for(var e=a[d.value],f=0;f<e.length;f++)b=Math.max(b,Number(e[f].timestamp));return b}function Dt(a){var b=Math.max(Bt("aw",a),Ct(Ms(Ls())?Fs():{})),c=Math.max(Bt("gb",a),Ct(Ms(Ls())?Fs("_gac_gb",!0):{}));c=Math.max(c,Bt("ag",a));return c>b};function Tt(){return qo("dedupe_gclid",function(){return lr()})};var Ut=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,Vt=/^www.googleadservices.com$/;function Wt(a){a\|\|(a=Xt());return a.fo?!1:a.fn\|\|a.gn\|\|a.kn\|\|a.hn\|\|a.rf\|\|a.Pm\|\|a.jn\|\|a.Um?!0:!1}function Xt(){var a={},b=Rr(!0);a.fo=!!b._up;var c=gt();a.fn=c.aw!==void 0;a.gn=c.dc!==void 0;a.kn=c.wbraid!==void 0;a.hn=c.gbraid!==void 0;a.jn=c.gclsrc==="aw.ds";a.rf=Gt().rf;var d=A.referrer?ck(ik(A.referrer),"host"):"";a.Um=Ut.test(d);a.Pm=Vt.test(d);return a};var Yt=["https://www.google.com","https://www.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_182.4.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Vh:f,Th:g,Uh:k,Fi:m,Gi:n,qf:p,Rb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var v=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){v&&v();d()};C(function(){for(var u=A.getElementsByTagName("script"),t=u.length,w=0;w<t;w++){var x=u[w].getAttribute("src");if(LH(x,"iframe_api")\|\|LH(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,D=0;D<B;D++)if(!CH&&JH(y[D],q.qf))return sc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_212.4.dr	String found in binary or memory: return f}yH.K="internal.enableAutoEventOnTimer";var $b=va(["data-gtm-yt-inspected-"]),AH=["www.youtube.com","www.youtube-nocookie.com"],BH,CH=!1; equals www.youtube.com (Youtube)
Source: chromecache_182.4.dr	String found in binary or memory: var NG=function(a,b,c,d,e){var f=CD("fsl",c?"nv.mwt":"mwt",0),g;g=c?CD("fsl","nv.ids",[]):CD("fsl","ids",[]);if(!g.length)return!0;var k=HD(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!oC(k,qC(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: montgomeryan.click
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.glasswoodplate.com
Source: global traffic	DNS traffic detected: DNS query: sentry.io
Source: global traffic	DNS traffic detected: DNS query: api.optoutsystem.com
Source: global traffic	DNS traffic detected: DNS query: umami.optoutsystem.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.athomedaily.com
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: lb.athomedaily.com
Source: global traffic	DNS traffic detected: DNS query: api.figjampublishing.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: ep3.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: tracenep.admaster.cc
Source: global traffic	DNS traffic detected: DNS query: static.admaster.cc
Source: global traffic	DNS traffic detected: DNS query: connectid.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: oa.openxcdn.net
Source: global traffic	DNS traffic detected: DNS query: invstatic101.creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn-ima.33across.com
Source: global traffic	DNS traffic detected: DNS query: static.criteo.net
Source: global traffic	DNS traffic detected: DNS query: imagesnep.admaster.cc
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: gtracenep.admaster.cc
Source: global traffic	DNS traffic detected: DNS query: fledge.us.criteo.com
Source: global traffic	DNS traffic detected: DNS query: www.googletagservices.com
Source: global traffic	DNS traffic detected: DNS query: publickeyservice.msmt.gcp.privacysandboxservices.com

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 2, 2025 18:42:09.279992104 CEST	192.168.2.4	1.1.1.1	0x75c8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:09.280323982 CEST	192.168.2.4	1.1.1.1	0xaade	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:11.976641893 CEST	192.168.2.4	1.1.1.1	0xd7c0	Standard query (0)	montgomeryan.click	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:11.976802111 CEST	192.168.2.4	1.1.1.1	0x2c09	Standard query (0)	montgomeryan.click	65	IN (0x0001)	false
Apr 2, 2025 18:42:11.990967989 CEST	192.168.2.4	1.1.1.1	0xcf8b	Standard query (0)	montgomeryan.click	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:11.991117001 CEST	192.168.2.4	1.1.1.1	0x885b	Standard query (0)	montgomeryan.click	65	IN (0x0001)	false
Apr 2, 2025 18:42:13.013140917 CEST	192.168.2.4	1.1.1.1	0xe01c	Standard query (0)	montgomeryan.click	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:14.835000038 CEST	192.168.2.4	1.1.1.1	0x3088	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:14.835166931 CEST	192.168.2.4	1.1.1.1	0xd448	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:17.090281963 CEST	192.168.2.4	1.1.1.1	0xd210	Standard query (0)	www.glasswoodplate.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:17.090560913 CEST	192.168.2.4	1.1.1.1	0xc536	Standard query (0)	www.glasswoodplate.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:23.259449959 CEST	192.168.2.4	1.1.1.1	0xeb59	Standard query (0)	sentry.io	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:23.259736061 CEST	192.168.2.4	1.1.1.1	0x8812	Standard query (0)	sentry.io	65	IN (0x0001)	false
Apr 2, 2025 18:42:23.315552950 CEST	192.168.2.4	1.1.1.1	0x567c	Standard query (0)	api.optoutsystem.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:23.315802097 CEST	192.168.2.4	1.1.1.1	0x7118	Standard query (0)	api.optoutsystem.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:23.316432953 CEST	192.168.2.4	1.1.1.1	0x354c	Standard query (0)	umami.optoutsystem.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:23.316680908 CEST	192.168.2.4	1.1.1.1	0x3c5	Standard query (0)	umami.optoutsystem.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:23.904805899 CEST	192.168.2.4	1.1.1.1	0x867e	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:23.904805899 CEST	192.168.2.4	1.1.1.1	0xf62f	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 2, 2025 18:42:23.944665909 CEST	192.168.2.4	1.1.1.1	0x78b	Standard query (0)	sentry.io	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:23.945338964 CEST	192.168.2.4	1.1.1.1	0x809a	Standard query (0)	sentry.io	65	IN (0x0001)	false
Apr 2, 2025 18:42:24.151842117 CEST	192.168.2.4	1.1.1.1	0x8ad4	Standard query (0)	www.glasswoodplate.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.151994944 CEST	192.168.2.4	1.1.1.1	0x810d	Standard query (0)	www.glasswoodplate.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:24.816154957 CEST	192.168.2.4	1.1.1.1	0x827e	Standard query (0)	umami.optoutsystem.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.816361904 CEST	192.168.2.4	1.1.1.1	0x155c	Standard query (0)	umami.optoutsystem.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:25.695600033 CEST	192.168.2.4	1.1.1.1	0x1a1a	Standard query (0)	api.optoutsystem.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:25.695841074 CEST	192.168.2.4	1.1.1.1	0xf7a8	Standard query (0)	api.optoutsystem.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:38.390804052 CEST	192.168.2.4	1.1.1.1	0x4c24	Standard query (0)	www.athomedaily.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:38.390957117 CEST	192.168.2.4	1.1.1.1	0x208e	Standard query (0)	www.athomedaily.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:39.851304054 CEST	192.168.2.4	1.1.1.1	0xf3fa	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:39.851468086 CEST	192.168.2.4	1.1.1.1	0x81bf	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 2, 2025 18:42:40.024039984 CEST	192.168.2.4	1.1.1.1	0x3417	Standard query (0)	lb.athomedaily.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.024422884 CEST	192.168.2.4	1.1.1.1	0x4dfc	Standard query (0)	lb.athomedaily.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:40.053678989 CEST	192.168.2.4	1.1.1.1	0xf9c1	Standard query (0)	www.athomedaily.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.053962946 CEST	192.168.2.4	1.1.1.1	0x1749	Standard query (0)	www.athomedaily.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:40.494097948 CEST	192.168.2.4	1.1.1.1	0xcf8c	Standard query (0)	api.figjampublishing.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.494340897 CEST	192.168.2.4	1.1.1.1	0x4324	Standard query (0)	api.figjampublishing.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:40.672574043 CEST	192.168.2.4	1.1.1.1	0x689e	Standard query (0)	lb.athomedaily.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.672722101 CEST	192.168.2.4	1.1.1.1	0xff4a	Standard query (0)	lb.athomedaily.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:40.895296097 CEST	192.168.2.4	1.1.1.1	0x833	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.895550966 CEST	192.168.2.4	1.1.1.1	0x9f82	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 2, 2025 18:42:41.065012932 CEST	192.168.2.4	1.1.1.1	0x2d4b	Standard query (0)	www.athomedaily.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:41.869849920 CEST	192.168.2.4	1.1.1.1	0x35d7	Standard query (0)	api.figjampublishing.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:41.870074987 CEST	192.168.2.4	1.1.1.1	0x971f	Standard query (0)	api.figjampublishing.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:42.932733059 CEST	192.168.2.4	1.1.1.1	0x4759	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:42.932928085 CEST	192.168.2.4	1.1.1.1	0xdb4d	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:43.269026995 CEST	192.168.2.4	1.1.1.1	0x43b5	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:43.269555092 CEST	192.168.2.4	1.1.1.1	0x888e	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 2, 2025 18:42:43.287041903 CEST	192.168.2.4	1.1.1.1	0x6156	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:43.287189960 CEST	192.168.2.4	1.1.1.1	0x4402	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 2, 2025 18:42:43.288568020 CEST	192.168.2.4	1.1.1.1	0x3fa	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:43.288759947 CEST	192.168.2.4	1.1.1.1	0xc5b3	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 2, 2025 18:42:43.457562923 CEST	192.168.2.4	1.1.1.1	0xe6b9	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:43.457783937 CEST	192.168.2.4	1.1.1.1	0xd52a	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:43.472899914 CEST	192.168.2.4	1.1.1.1	0x8d06	Standard query (0)	ep3.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:43.473114014 CEST	192.168.2.4	1.1.1.1	0x5de9	Standard query (0)	ep3.adtrafficquality.google	65	IN (0x0001)	false
Apr 2, 2025 18:42:45.088418007 CEST	192.168.2.4	1.1.1.1	0xb075	Standard query (0)	tracenep.admaster.cc	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.088587046 CEST	192.168.2.4	1.1.1.1	0x73b2	Standard query (0)	tracenep.admaster.cc	65	IN (0x0001)	false
Apr 2, 2025 18:42:45.089070082 CEST	192.168.2.4	1.1.1.1	0xe4fb	Standard query (0)	static.admaster.cc	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.089406967 CEST	192.168.2.4	1.1.1.1	0x134e	Standard query (0)	static.admaster.cc	65	IN (0x0001)	false
Apr 2, 2025 18:42:45.147874117 CEST	192.168.2.4	1.1.1.1	0x4821	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.148049116 CEST	192.168.2.4	1.1.1.1	0xf9d4	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 2, 2025 18:42:45.158143044 CEST	192.168.2.4	1.1.1.1	0xd9c7	Standard query (0)	connectid.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.158436060 CEST	192.168.2.4	1.1.1.1	0x3ecc	Standard query (0)	connectid.analytics.yahoo.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:45.159200907 CEST	192.168.2.4	1.1.1.1	0xd3dd	Standard query (0)	oa.openxcdn.net	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.159370899 CEST	192.168.2.4	1.1.1.1	0x6d29	Standard query (0)	oa.openxcdn.net	65	IN (0x0001)	false
Apr 2, 2025 18:42:45.160022974 CEST	192.168.2.4	1.1.1.1	0x5140	Standard query (0)	invstatic101.creativecdn.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.160473108 CEST	192.168.2.4	1.1.1.1	0xeb76	Standard query (0)	invstatic101.creativecdn.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:45.161161900 CEST	192.168.2.4	1.1.1.1	0x473a	Standard query (0)	cdn-ima.33across.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.161397934 CEST	192.168.2.4	1.1.1.1	0xb6e7	Standard query (0)	cdn-ima.33across.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:45.490251064 CEST	192.168.2.4	1.1.1.1	0x7e8e	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.490469933 CEST	192.168.2.4	1.1.1.1	0xb589	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Apr 2, 2025 18:42:45.578208923 CEST	192.168.2.4	1.1.1.1	0x358d	Standard query (0)	imagesnep.admaster.cc	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.578346968 CEST	192.168.2.4	1.1.1.1	0xb773	Standard query (0)	imagesnep.admaster.cc	65	IN (0x0001)	false
Apr 2, 2025 18:42:46.235871077 CEST	192.168.2.4	1.1.1.1	0xdf9f	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:46.236265898 CEST	192.168.2.4	1.1.1.1	0x9ee6	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:46.349855900 CEST	192.168.2.4	1.1.1.1	0x8c70	Standard query (0)	gtracenep.admaster.cc	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:46.349855900 CEST	192.168.2.4	1.1.1.1	0xac9a	Standard query (0)	gtracenep.admaster.cc	65	IN (0x0001)	false
Apr 2, 2025 18:42:48.292215109 CEST	192.168.2.4	1.1.1.1	0xe728	Standard query (0)	fledge.us.criteo.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:48.292783022 CEST	192.168.2.4	1.1.1.1	0xc898	Standard query (0)	fledge.us.criteo.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:48.913064957 CEST	192.168.2.4	1.1.1.1	0x9c17	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:48.913389921 CEST	192.168.2.4	1.1.1.1	0x8e44	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 2, 2025 18:42:49.267258883 CEST	192.168.2.4	1.1.1.1	0x2c7a	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:49.267415047 CEST	192.168.2.4	1.1.1.1	0xd676	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:49.530139923 CEST	192.168.2.4	1.1.1.1	0xa33c	Standard query (0)	imagesnep.admaster.cc	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:49.530319929 CEST	192.168.2.4	1.1.1.1	0xf815	Standard query (0)	imagesnep.admaster.cc	65	IN (0x0001)	false
Apr 2, 2025 18:42:49.582314014 CEST	192.168.2.4	1.1.1.1	0x9e5e	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:49.582501888 CEST	192.168.2.4	1.1.1.1	0xe653	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:49.701945066 CEST	192.168.2.4	1.1.1.1	0x5b03	Standard query (0)	imagesnep.admaster.cc	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:50.344578981 CEST	192.168.2.4	1.1.1.1	0xcb3f	Standard query (0)	imagesnep.admaster.cc	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:51.189696074 CEST	192.168.2.4	1.1.1.1	0x880	Standard query (0)	publickeyservice.msmt.gcp.privacysandboxservices.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:51.189924002 CEST	192.168.2.4	1.1.1.1	0x394c	Standard query (0)	publickeyservice.msmt.gcp.privacysandboxservices.com	65	IN (0x0001)	false
Apr 2, 2025 18:42:51.678687096 CEST	192.168.2.4	1.1.1.1	0xde3d	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:51.679198027 CEST	192.168.2.4	1.1.1.1	0x9332	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Apr 2, 2025 18:43:17.531208038 CEST	192.168.2.4	1.1.1.1	0x692e	Standard query (0)	imagesnep.admaster.cc	A (IP address)	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 2, 2025 18:42:09.389647007 CEST	1.1.1.1	192.168.2.4	0x75c8	No error (0)	www.google.com		142.251.40.196	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:09.407826900 CEST	1.1.1.1	192.168.2.4	0xaade	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 2, 2025 18:42:12.099646091 CEST	1.1.1.1	192.168.2.4	0x2c09	No error (0)	montgomeryan.click			65	IN (0x0001)	false
Apr 2, 2025 18:42:12.110982895 CEST	1.1.1.1	192.168.2.4	0x885b	No error (0)	montgomeryan.click			65	IN (0x0001)	false
Apr 2, 2025 18:42:12.113750935 CEST	1.1.1.1	192.168.2.4	0xd7c0	No error (0)	montgomeryan.click		104.21.112.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:12.113750935 CEST	1.1.1.1	192.168.2.4	0xd7c0	No error (0)	montgomeryan.click		104.21.16.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:12.113750935 CEST	1.1.1.1	192.168.2.4	0xd7c0	No error (0)	montgomeryan.click		104.21.32.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:12.113750935 CEST	1.1.1.1	192.168.2.4	0xd7c0	No error (0)	montgomeryan.click		104.21.64.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:12.113750935 CEST	1.1.1.1	192.168.2.4	0xd7c0	No error (0)	montgomeryan.click		104.21.80.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:12.113750935 CEST	1.1.1.1	192.168.2.4	0xd7c0	No error (0)	montgomeryan.click		104.21.96.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:12.113750935 CEST	1.1.1.1	192.168.2.4	0xd7c0	No error (0)	montgomeryan.click		104.21.48.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:13.134232998 CEST	1.1.1.1	192.168.2.4	0xe01c	No error (0)	montgomeryan.click		104.21.64.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:13.134232998 CEST	1.1.1.1	192.168.2.4	0xe01c	No error (0)	montgomeryan.click		104.21.16.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:13.134232998 CEST	1.1.1.1	192.168.2.4	0xe01c	No error (0)	montgomeryan.click		104.21.96.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:13.134232998 CEST	1.1.1.1	192.168.2.4	0xe01c	No error (0)	montgomeryan.click		104.21.48.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:13.134232998 CEST	1.1.1.1	192.168.2.4	0xe01c	No error (0)	montgomeryan.click		104.21.32.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:13.134232998 CEST	1.1.1.1	192.168.2.4	0xe01c	No error (0)	montgomeryan.click		104.21.80.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:13.134232998 CEST	1.1.1.1	192.168.2.4	0xe01c	No error (0)	montgomeryan.click		104.21.112.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:14.942847013 CEST	1.1.1.1	192.168.2.4	0x3088	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:17.206336975 CEST	1.1.1.1	192.168.2.4	0xc536	No error (0)	www.glasswoodplate.com			65	IN (0x0001)	false
Apr 2, 2025 18:42:17.207472086 CEST	1.1.1.1	192.168.2.4	0xd210	No error (0)	www.glasswoodplate.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:17.207472086 CEST	1.1.1.1	192.168.2.4	0xd210	No error (0)	www.glasswoodplate.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:17.207472086 CEST	1.1.1.1	192.168.2.4	0xd210	No error (0)	www.glasswoodplate.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:17.207472086 CEST	1.1.1.1	192.168.2.4	0xd210	No error (0)	www.glasswoodplate.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:17.207472086 CEST	1.1.1.1	192.168.2.4	0xd210	No error (0)	www.glasswoodplate.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:17.207472086 CEST	1.1.1.1	192.168.2.4	0xd210	No error (0)	www.glasswoodplate.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:17.207472086 CEST	1.1.1.1	192.168.2.4	0xd210	No error (0)	www.glasswoodplate.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:23.367266893 CEST	1.1.1.1	192.168.2.4	0xeb59	No error (0)	sentry.io		35.186.247.156	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:23.422333002 CEST	1.1.1.1	192.168.2.4	0x354c	No error (0)	umami.optoutsystem.com		52.42.123.243	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:23.422333002 CEST	1.1.1.1	192.168.2.4	0x354c	No error (0)	umami.optoutsystem.com		35.82.117.22	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:23.422333002 CEST	1.1.1.1	192.168.2.4	0x354c	No error (0)	umami.optoutsystem.com		44.236.171.103	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:23.430121899 CEST	1.1.1.1	192.168.2.4	0x567c	No error (0)	api.optoutsystem.com		44.236.171.103	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:23.430121899 CEST	1.1.1.1	192.168.2.4	0x567c	No error (0)	api.optoutsystem.com		52.42.123.243	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:23.430121899 CEST	1.1.1.1	192.168.2.4	0x567c	No error (0)	api.optoutsystem.com		35.82.117.22	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.011614084 CEST	1.1.1.1	192.168.2.4	0xf62f	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 2, 2025 18:42:24.011925936 CEST	1.1.1.1	192.168.2.4	0x867e	No error (0)	googleads.g.doubleclick.net		142.250.80.66	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.050591946 CEST	1.1.1.1	192.168.2.4	0x78b	No error (0)	sentry.io		35.186.247.156	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.279915094 CEST	1.1.1.1	192.168.2.4	0x8ad4	No error (0)	www.glasswoodplate.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.279915094 CEST	1.1.1.1	192.168.2.4	0x8ad4	No error (0)	www.glasswoodplate.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.279915094 CEST	1.1.1.1	192.168.2.4	0x8ad4	No error (0)	www.glasswoodplate.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.279915094 CEST	1.1.1.1	192.168.2.4	0x8ad4	No error (0)	www.glasswoodplate.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.279915094 CEST	1.1.1.1	192.168.2.4	0x8ad4	No error (0)	www.glasswoodplate.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.279915094 CEST	1.1.1.1	192.168.2.4	0x8ad4	No error (0)	www.glasswoodplate.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.279915094 CEST	1.1.1.1	192.168.2.4	0x8ad4	No error (0)	www.glasswoodplate.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.342288017 CEST	1.1.1.1	192.168.2.4	0x810d	No error (0)	www.glasswoodplate.com			65	IN (0x0001)	false
Apr 2, 2025 18:42:24.931019068 CEST	1.1.1.1	192.168.2.4	0x827e	No error (0)	umami.optoutsystem.com		52.42.123.243	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.931019068 CEST	1.1.1.1	192.168.2.4	0x827e	No error (0)	umami.optoutsystem.com		44.236.171.103	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:24.931019068 CEST	1.1.1.1	192.168.2.4	0x827e	No error (0)	umami.optoutsystem.com		35.82.117.22	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:25.819148064 CEST	1.1.1.1	192.168.2.4	0x1a1a	No error (0)	api.optoutsystem.com		35.82.117.22	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:25.819148064 CEST	1.1.1.1	192.168.2.4	0x1a1a	No error (0)	api.optoutsystem.com		44.236.171.103	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:25.819148064 CEST	1.1.1.1	192.168.2.4	0x1a1a	No error (0)	api.optoutsystem.com		52.42.123.243	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:38.499535084 CEST	1.1.1.1	192.168.2.4	0x208e	No error (0)	www.athomedaily.com			65	IN (0x0001)	false
Apr 2, 2025 18:42:38.507833004 CEST	1.1.1.1	192.168.2.4	0x4c24	No error (0)	www.athomedaily.com		104.26.9.163	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:38.507833004 CEST	1.1.1.1	192.168.2.4	0x4c24	No error (0)	www.athomedaily.com		172.67.73.46	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:38.507833004 CEST	1.1.1.1	192.168.2.4	0x4c24	No error (0)	www.athomedaily.com		104.26.8.163	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:39.956860065 CEST	1.1.1.1	192.168.2.4	0xf3fa	No error (0)	securepubads.g.doubleclick.net		142.251.40.130	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:39.957146883 CEST	1.1.1.1	192.168.2.4	0x81bf	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Apr 2, 2025 18:42:40.133173943 CEST	1.1.1.1	192.168.2.4	0x3417	No error (0)	lb.athomedaily.com		172.67.73.46	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.133173943 CEST	1.1.1.1	192.168.2.4	0x3417	No error (0)	lb.athomedaily.com		104.26.9.163	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.133173943 CEST	1.1.1.1	192.168.2.4	0x3417	No error (0)	lb.athomedaily.com		104.26.8.163	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.153758049 CEST	1.1.1.1	192.168.2.4	0x4dfc	No error (0)	lb.athomedaily.com			65	IN (0x0001)	false
Apr 2, 2025 18:42:40.165920019 CEST	1.1.1.1	192.168.2.4	0x1749	No error (0)	www.athomedaily.com			65	IN (0x0001)	false
Apr 2, 2025 18:42:40.608586073 CEST	1.1.1.1	192.168.2.4	0xcf8c	No error (0)	api.figjampublishing.com	common-alb-1024279046.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:40.608586073 CEST	1.1.1.1	192.168.2.4	0xcf8c	No error (0)	common-alb-1024279046.us-west-2.elb.amazonaws.com		54.70.199.106	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.608586073 CEST	1.1.1.1	192.168.2.4	0xcf8c	No error (0)	common-alb-1024279046.us-west-2.elb.amazonaws.com		52.35.203.86	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.608586073 CEST	1.1.1.1	192.168.2.4	0xcf8c	No error (0)	common-alb-1024279046.us-west-2.elb.amazonaws.com		44.228.132.153	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.642582893 CEST	1.1.1.1	192.168.2.4	0x4324	No error (0)	api.figjampublishing.com	common-alb-1024279046.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:40.783066988 CEST	1.1.1.1	192.168.2.4	0x689e	No error (0)	lb.athomedaily.com		104.26.9.163	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.783066988 CEST	1.1.1.1	192.168.2.4	0x689e	No error (0)	lb.athomedaily.com		104.26.8.163	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.783066988 CEST	1.1.1.1	192.168.2.4	0x689e	No error (0)	lb.athomedaily.com		172.67.73.46	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:40.783107042 CEST	1.1.1.1	192.168.2.4	0xff4a	No error (0)	lb.athomedaily.com			65	IN (0x0001)	false
Apr 2, 2025 18:42:41.002850056 CEST	1.1.1.1	192.168.2.4	0x833	No error (0)	googleads.g.doubleclick.net		142.250.72.98	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:41.003745079 CEST	1.1.1.1	192.168.2.4	0x9f82	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 2, 2025 18:42:41.211934090 CEST	1.1.1.1	192.168.2.4	0x2d4b	No error (0)	www.athomedaily.com		172.67.73.46	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:41.211934090 CEST	1.1.1.1	192.168.2.4	0x2d4b	No error (0)	www.athomedaily.com		104.26.9.163	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:41.211934090 CEST	1.1.1.1	192.168.2.4	0x2d4b	No error (0)	www.athomedaily.com		104.26.8.163	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:41.995182991 CEST	1.1.1.1	192.168.2.4	0x971f	No error (0)	api.figjampublishing.com	common-alb-1024279046.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:42.038686991 CEST	1.1.1.1	192.168.2.4	0x35d7	No error (0)	api.figjampublishing.com	common-alb-1024279046.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:42.038686991 CEST	1.1.1.1	192.168.2.4	0x35d7	No error (0)	common-alb-1024279046.us-west-2.elb.amazonaws.com		52.35.203.86	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:42.038686991 CEST	1.1.1.1	192.168.2.4	0x35d7	No error (0)	common-alb-1024279046.us-west-2.elb.amazonaws.com		44.228.132.153	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:42.038686991 CEST	1.1.1.1	192.168.2.4	0x35d7	No error (0)	common-alb-1024279046.us-west-2.elb.amazonaws.com		54.70.199.106	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:43.039150953 CEST	1.1.1.1	192.168.2.4	0x4759	No error (0)	analytics.google.com		142.251.35.174	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:43.383272886 CEST	1.1.1.1	192.168.2.4	0x43b5	No error (0)	stats.g.doubleclick.net		142.251.163.154	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:43.383272886 CEST	1.1.1.1	192.168.2.4	0x43b5	No error (0)	stats.g.doubleclick.net		142.251.163.155	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:43.400938034 CEST	1.1.1.1	192.168.2.4	0x6156	No error (0)	td.doubleclick.net		142.251.32.98	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:43.401951075 CEST	1.1.1.1	192.168.2.4	0xc5b3	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 2, 2025 18:42:43.426462889 CEST	1.1.1.1	192.168.2.4	0x3fa	No error (0)	googleads.g.doubleclick.net		142.250.81.226	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:43.562017918 CEST	1.1.1.1	192.168.2.4	0xe6b9	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:43.562017918 CEST	1.1.1.1	192.168.2.4	0xe6b9	No error (0)	www3.l.google.com		142.250.80.110	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:43.580370903 CEST	1.1.1.1	192.168.2.4	0x5de9	No error (0)	ep3.adtrafficquality.google			65	IN (0x0001)	false
Apr 2, 2025 18:42:43.581456900 CEST	1.1.1.1	192.168.2.4	0x8d06	No error (0)	ep3.adtrafficquality.google		172.217.165.130	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:43.599684954 CEST	1.1.1.1	192.168.2.4	0xd52a	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:45.193537951 CEST	1.1.1.1	192.168.2.4	0xb075	No error (0)	tracenep.admaster.cc		35.209.233.198	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.195023060 CEST	1.1.1.1	192.168.2.4	0xe4fb	No error (0)	static.admaster.cc		34.54.226.84	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.254431963 CEST	1.1.1.1	192.168.2.4	0xf9d4	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
Apr 2, 2025 18:42:45.254700899 CEST	1.1.1.1	192.168.2.4	0x4821	No error (0)	securepubads.g.doubleclick.net		142.251.40.130	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.263837099 CEST	1.1.1.1	192.168.2.4	0x3ecc	No error (0)	connectid.analytics.yahoo.com	d1402xccwihzsp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:45.264624119 CEST	1.1.1.1	192.168.2.4	0xd9c7	No error (0)	connectid.analytics.yahoo.com	d1402xccwihzsp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:45.264624119 CEST	1.1.1.1	192.168.2.4	0xd9c7	No error (0)	d1402xccwihzsp.cloudfront.net		108.138.128.51	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.264624119 CEST	1.1.1.1	192.168.2.4	0xd9c7	No error (0)	d1402xccwihzsp.cloudfront.net		108.138.128.5	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.264624119 CEST	1.1.1.1	192.168.2.4	0xd9c7	No error (0)	d1402xccwihzsp.cloudfront.net		108.138.128.56	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.264624119 CEST	1.1.1.1	192.168.2.4	0xd9c7	No error (0)	d1402xccwihzsp.cloudfront.net		108.138.128.120	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.267759085 CEST	1.1.1.1	192.168.2.4	0x473a	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:45.267759085 CEST	1.1.1.1	192.168.2.4	0x473a	No error (0)	cdn-ima.33across.com.cdn.cloudflare.net		104.18.28.101	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.267759085 CEST	1.1.1.1	192.168.2.4	0x473a	No error (0)	cdn-ima.33across.com.cdn.cloudflare.net		104.18.29.101	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.269615889 CEST	1.1.1.1	192.168.2.4	0xb6e7	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:45.269615889 CEST	1.1.1.1	192.168.2.4	0xb6e7	No error (0)	cdn-ima.33across.com.cdn.cloudflare.net			65	IN (0x0001)	false
Apr 2, 2025 18:42:45.301865101 CEST	1.1.1.1	192.168.2.4	0xd3dd	No error (0)	oa.openxcdn.net		34.102.146.192	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.303355932 CEST	1.1.1.1	192.168.2.4	0x5140	No error (0)	invstatic101.creativecdn.com		34.96.70.87	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.597106934 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	static.criteo.net	in-ftd-172.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:45.597106934 CEST	1.1.1.1	192.168.2.4	0x7e8e	No error (0)	in-ftd-172.us5.vip.prod.criteo.net		74.119.117.47	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:45.598619938 CEST	1.1.1.1	192.168.2.4	0xb589	No error (0)	static.criteo.net	in-ftd-172.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:45.683804035 CEST	1.1.1.1	192.168.2.4	0x358d	No error (0)	imagesnep.admaster.cc		34.111.60.239	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:46.349381924 CEST	1.1.1.1	192.168.2.4	0xdf9f	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:46.349381924 CEST	1.1.1.1	192.168.2.4	0xdf9f	No error (0)	gum.us5.vip.prod.criteo.com		74.119.117.17	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:46.351011038 CEST	1.1.1.1	192.168.2.4	0x9ee6	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:46.454468966 CEST	1.1.1.1	192.168.2.4	0xac9a	No error (0)	gtracenep.admaster.cc	gtrace.mediago.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:46.459878922 CEST	1.1.1.1	192.168.2.4	0x8c70	No error (0)	gtracenep.admaster.cc	gtrace.mediago.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:46.459878922 CEST	1.1.1.1	192.168.2.4	0x8c70	No error (0)	gtrace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:48.399792910 CEST	1.1.1.1	192.168.2.4	0xc898	No error (0)	fledge.us.criteo.com	in-ftd-163.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:48.402345896 CEST	1.1.1.1	192.168.2.4	0xe728	No error (0)	fledge.us.criteo.com	in-ftd-163.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:48.402345896 CEST	1.1.1.1	192.168.2.4	0xe728	No error (0)	in-ftd-163.us5.vip.prod.criteo.com		74.119.117.8	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:49.021650076 CEST	1.1.1.1	192.168.2.4	0x8e44	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 2, 2025 18:42:49.021924019 CEST	1.1.1.1	192.168.2.4	0x9c17	No error (0)	googleads.g.doubleclick.net		142.250.80.34	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:49.376146078 CEST	1.1.1.1	192.168.2.4	0x2c7a	No error (0)	www.googletagservices.com		142.251.41.2	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:49.710011959 CEST	1.1.1.1	192.168.2.4	0xe653	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:49.711046934 CEST	1.1.1.1	192.168.2.4	0x9e5e	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:49.711046934 CEST	1.1.1.1	192.168.2.4	0x9e5e	No error (0)	gum.us5.vip.prod.criteo.com		74.119.117.17	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:50.449573040 CEST	1.1.1.1	192.168.2.4	0xcb3f	No error (0)	imagesnep.admaster.cc		34.111.60.239	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:51.295653105 CEST	1.1.1.1	192.168.2.4	0x880	No error (0)	publickeyservice.msmt.gcp.privacysandboxservices.com	publickeyservice-a.msmt-3.gcp.privacysandboxservices.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:51.295653105 CEST	1.1.1.1	192.168.2.4	0x880	No error (0)	publickeyservice-a.msmt-3.gcp.privacysandboxservices.com		34.49.23.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:42:51.301162004 CEST	1.1.1.1	192.168.2.4	0x394c	No error (0)	publickeyservice.msmt.gcp.privacysandboxservices.com	publickeyservice-a.msmt-3.gcp.privacysandboxservices.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 18:42:51.786470890 CEST	1.1.1.1	192.168.2.4	0xde3d	No error (0)	www.googletagservices.com		142.250.80.98	A (IP address)	IN (0x0001)	false
Apr 2, 2025 18:43:17.639939070 CEST	1.1.1.1	192.168.2.4	0x692e	No error (0)	imagesnep.admaster.cc		34.111.60.239	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Apr 2, 2025 18:42:15.703135967 CEST	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 2, 2025 18:42:15.803045988 CEST	222	IN	HTTP/1.1 304 Not Modified Date: Wed, 02 Apr 2025 16:33:36 GMT Expires: Wed, 02 Apr 2025 17:23:36 GMT Age: 519 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Apr 2, 2025 18:42:15.809518099 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 2, 2025 18:42:15.908292055 CEST	223	IN	HTTP/1.1 304 Not Modified Date: Wed, 02 Apr 2025 15:53:30 GMT Expires: Wed, 02 Apr 2025 16:43:30 GMT Age: 2925 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:13 UTC	719	OUT	GET /5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21 HTTP/1.1 Host: montgomeryan.click Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:13 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 16:42:13 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cf-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 92a1c73acc4dc40e-EWR alt-svc: h3=":443"; ma=86400
2025-04-02 16:42:13 UTC	465	IN	Data Raw: 31 63 61 0d 0a 3c 73 63 72 69 70 74 3e 0a 6c 65 74 20 65 3d 6e 65 77 20 55 52 4c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 65 2e 70 61 74 68 6e 61 6d 65 3d 22 2f 74 22 2b 65 2e 70 61 74 68 6e 61 6d 65 3b 6c 65 74 20 6f 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 26 26 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6f 3d 5b 22 67 6f 6f 67 6c 65 62 6f 74 22 2c 22 62 69 6e 67 62 6f 74 22 2c 22 79 61 6e 64 65 78 62 6f 74 22 2c 22 64 75 63 6b 64 75 63 6b 62 6f 74 22 2c 22 73 6c 75 72 70 22 2c 22 62 61 69 64 75 73 70 69 64 65 72 22 2c 22 66 61 63 65 62 6f 74 22 2c 22 69 61 5f 61 72 63 68 69 76 65 72 22 5d 2c 74 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 Data Ascii: 1ca<script>let e=new URL(window.location.href);e.pathname="/t"+e.pathname;let o=e.toString();navigator.cookieEnabled&&!function(e){for(var o=["googlebot","bingbot","yandexbot","duckduckbot","slurp","baiduspider","facebot","ia_archiver"],t=e.toLowerCase
2025-04-02 16:42:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:14 UTC	664	OUT	GET /favicon.ico HTTP/1.1 Host: montgomeryan.click Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://montgomeryan.click/5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:14 UTC	823	IN	HTTP/1.1 404 Not Found Date: Wed, 02 Apr 2025 16:42:14 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jnPtg5DL8OTJ5AHwEwpahy1Ceahp9WjtGGZKJ1u4raXBH8EJnobql4wloYA%2FTb6nBui1DzkInzm5c0p7hWe8P9mitrCSxcfkS6iuIyA8CE7LmjuGf9aG8pQyxWG%2Fkk1OfHegyFQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92a1c7405a2defa5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=107450&min_rtt=104533&rtt_var=25090&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1236&delivery_rate=35623&cwnd=236&unsent_bytes=0&cid=5a4b281f80eea67d&ts=570&x=0"

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:15 UTC	825	OUT	GET /t/5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21 HTTP/1.1 Host: montgomeryan.click Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://montgomeryan.click/5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:15 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 16:42:15 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cf-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 92a1c7473ee73343-MIA alt-svc: h3=":443"; ma=86400
2025-04-02 16:42:15 UTC	281	IN	Data Raw: 31 31 32 0d 0a 3c 73 63 72 69 70 74 3e 0a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6c 61 73 73 77 6f 6f 64 70 6c 61 74 65 2e 63 6f 6d 2f 6f 2d 6e 67 6a 63 2d 68 37 32 2d 36 34 61 31 62 34 32 37 35 62 34 37 38 66 64 34 39 30 62 62 36 64 61 34 66 62 63 30 61 39 35 32 27 3b 20 0a 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 72 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6c 61 73 73 77 6f 6f 64 70 6c 61 74 65 2e 63 6f 6d 2f 6f 2d 6e 67 6a 63 2d 68 37 32 2d 36 34 61 31 62 34 32 37 35 62 34 37 38 66 64 34 39 30 62 62 36 64 61 34 66 62 63 30 61 39 35 32 27 29 3b 0a 7d 2c 20 31 Data Ascii: 112<script>setTimeout(function(){ window.location.href = 'https://www.glasswoodplate.com/o-ngjc-h72-64a1b4275b478fd490bb6da4fbc0a952'; console.log('redirecting to https://www.glasswoodplate.com/o-ngjc-h72-64a1b4275b478fd490bb6da4fbc0a952');}, 1
2025-04-02 16:42:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:15 UTC	547	OUT	OPTIONS /report/v4?s=jnPtg5DL8OTJ5AHwEwpahy1Ceahp9WjtGGZKJ1u4raXBH8EJnobql4wloYA%2FTb6nBui1DzkInzm5c0p7hWe8P9mitrCSxcfkS6iuIyA8CE7LmjuGf9aG8pQyxWG%2Fkk1OfHegyFQ%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://montgomeryan.click Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:15 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 02 Apr 2025 16:42:15 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:15 UTC	522	OUT	POST /report/v4?s=jnPtg5DL8OTJ5AHwEwpahy1Ceahp9WjtGGZKJ1u4raXBH8EJnobql4wloYA%2FTb6nBui1DzkInzm5c0p7hWe8P9mitrCSxcfkS6iuIyA8CE7LmjuGf9aG8pQyxWG%2Fkk1OfHegyFQ%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 489 Content-Type: application/reports+json Origin: https://montgomeryan.click User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:15 UTC	489	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 39 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 6f 6e 74 67 6f 6d 65 72 79 61 6e 2e 63 6c 69 63 6b 2f 35 76 6e 44 55 4e 31 30 39 33 34 34 42 49 69 71 36 37 34 77 61 70 67 67 64 75 74 6f 79 33 37 37 53 4a 4e 46 55 57 46 42 54 4e 4b 50 50 4a 4c 31 38 37 38 30 37 45 4f 56 43 31 38 33 37 37 64 32 31 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 36 34 2e 31 22 2c 22 73 74 Data Ascii: [{"age":1,"body":{"elapsed_time":794,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://montgomeryan.click/5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21","sampling_fraction":1.0,"server_ip":"104.21.64.1","st
2025-04-02 16:42:16 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 02 Apr 2025 16:42:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:17 UTC	739	OUT	GET /o-ngjc-h72-64a1b4275b478fd490bb6da4fbc0a952 HTTP/1.1 Host: www.glasswoodplate.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://montgomeryan.click/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:18 UTC	1233	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 16:42:18 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 92a1c7558833e55d-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Cache-Control: public, max-age=3600 Last-Modified: Wed, 02 Apr 2025 13:25:23 GMT domain-integrity-check: true x-azure-ref: 20250402T164217Z-1774dc4dbcc6pb6hhC1TEBs9kw00000001bg000000007p6f x-cache: TCP_MISS x-fd-int-roxy-purgeid: 83698550 x-ms-request-id: fbeed906-401e-002a-7eee-a3604d000000 x-ms-version: 2018-03-28 x-spoke-cache: true x-spoke-cache-at: Wed Apr 02 2025 16:42:18 GMT+0000 (Coordinated Universal Time) Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W1MRNBTz%2FVwozsY7ylC2aXXkxRYXmbxJDNF%2FdPnxMAKNwB7vEsjL4HYIQmhwoqpKnbrQGO912kNVVWBdlAR3WCAR67XAXvhYnNNSxxKnTHBFbk7QikBb93G5GsAOt5AqHozgWrc2Hmrq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105554&min_rtt=105490&rtt_var=22349&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1311&delivery_rate=35254&cwnd=200&unsent_bytes=0&cid=22c3598aee2475ee&ts=1257&x=0"
2025-04-02 16:42:18 UTC	1052	IN	Data Raw: 34 31 35 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 55 6e 73 75 62 73 63 72 69 62 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 73 76 67 22 20 73 69 7a 65 73 3d 22 61 6e 79 22 Data Ascii: 415<!doctype html><html lang="en"> <head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>Unsubscribe</title> <link rel="icon" type="image/svg+xml" href="/favicon.svg" sizes="any"
2025-04-02 16:42:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:18 UTC	628	OUT	GET /assets/script-e6d51933b9c387e0333322740e94168c.js HTTP/1.1 Host: www.glasswoodplate.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.glasswoodplate.com/o-ngjc-h72-64a1b4275b478fd490bb6da4fbc0a952 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:19 UTC	1288	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 16:42:19 GMT Content-Type: application/javascript Content-Length: 2741 Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 92a1c75c9c2e7d06-EWR Cf-Cache-Status: HIT Accept-Ranges: bytes Age: 1523 Cache-Control: public, max-age=14400 Etag: "0x8DD57AFEFAA1AB7" Last-Modified: Fri, 28 Feb 2025 04:25:30 GMT Domain-Integrity-Check: true X-Azure-Ref: 20250228T150644Z-17d5879b7cbtjq4vhC1EWRyen80000000kmg00000000hwmg X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 83698530 X-Ms-Request-Id: 629d7701-901e-0085-5099-890b0f000000 X-Ms-Version: 2018-03-28 X-Spoke-Cache: true X-Spoke-Cache-At: Wed Apr 02 2025 16:16:56 GMT+0000 (Coordinated Universal Time) Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sb6%2FFFqz7sRSsbkth2gmRxGSZ9q5gFA1jcoGHC1IsYBOBquv1N%2FtxzMxYsSvRnI1vUXZ2scxvqg5S6%2F%2FyEb%2BVLO5PpXtZe2i9V5erQBNg0bSj%2F%2FP%2B4okzTzvnZ3%2FQc1CePdf0Sj1Z9wb"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=119626&min_rtt=112611&rtt_var=31095&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1200&delivery_rate=33050&cwnd=189&unsent_bytes=0&cid=5d288f5bbaed823d&ts=1646&x=0"
2025-04-02 16:42:19 UTC	81	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 63 72 65 65 6e 2c 6e 3d 65 2e 77 69 64 74 68 2c 72 3d 65 2e 68 65 69 67 68 74 2c 61 3d 74 2e 6e 61 76 Data Ascii: !function(){"use strict";!function(t){var e=t.screen,n=e.width,r=e.height,a=t.nav
2025-04-02 16:42:19 UTC	1369	IN	Data Raw: 69 67 61 74 6f 72 2e 6c 61 6e 67 75 61 67 65 2c 69 3d 74 2e 6c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2c 75 3d 74 2e 64 6f 63 75 6d 65 6e 74 2c 63 3d 74 2e 68 69 73 74 6f 72 79 2c 66 3d 69 2e 68 6f 73 74 6e 61 6d 65 2c 73 3d 69 2e 70 61 74 68 6e 61 6d 65 2c 6c 3d 69 2e 73 65 61 72 63 68 2c 64 3d 75 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 64 29 7b 76 61 72 20 6d 3d 22 64 61 74 61 2d 22 2c 68 3d 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 2e 62 69 6e 64 28 64 29 2c 76 3d 68 28 6d 2b 22 77 65 62 73 69 74 65 2d 69 64 22 29 2c 70 3d 68 28 6d 2b 22 68 6f 73 74 2d 75 72 6c 22 29 2c 67 3d 22 66 61 6c 73 65 22 21 3d 3d 68 28 6d 2b 22 61 75 74 6f 2d 74 72 61 63 6b 22 29 2c 79 3d 68 28 6d 2b 22 64 6f 2d 6e 6f 74 2d 74 72 Data Ascii: igator.language,i=t.location,o=t.localStorage,u=t.document,c=t.history,f=i.hostname,s=i.pathname,l=i.search,d=u.currentScript;if(d){var m="data-",h=d.getAttribute.bind(d),v=h(m+"website-id"),p=h(m+"host-url"),g="false"!==h(m+"auto-track"),y=h(m+"do-not-tr
2025-04-02 16:42:19 UTC	1291	IN	Data Raw: 28 29 7b 7d 29 29 7d 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4c 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 78 28 29 2c 7b 6e 61 6d 65 3a 74 2c 64 61 74 61 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 76 6f 69 64 20 30 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 28 78 28 29 29 3a 78 28 29 29 7d 3b 74 2e 75 6d 61 6d 69 7c 7c 28 74 2e 75 6d 61 6d 69 3d 7b 74 72 61 63 6b 3a 44 2c 69 64 65 6e 74 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4c 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 78 28 29 2c 7b 64 61 74 61 Data Ascii: (){}))}},D=function(t,e){return L("string"==typeof t?Object.assign({},x(),{name:t,data:"object"==typeof e?e:void 0}):"object"==typeof t?t:"function"==typeof t?t(x()):x())};t.umami\|\|(t.umami={track:D,identify:function(t){return L(Object.assign({},x(),{data

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:19 UTC	618	OUT	GET /assets/index-rXJICDJD.css HTTP/1.1 Host: www.glasswoodplate.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.glasswoodplate.com/o-ngjc-h72-64a1b4275b478fd490bb6da4fbc0a952 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:19 UTC	1282	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 16:42:19 GMT Content-Type: text/css Content-Length: 1326 Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 92a1c75eee481aea-EWR Cf-Cache-Status: HIT Accept-Ranges: bytes Age: 1523 Cache-Control: public, max-age=14400 Etag: "0x8DD64E009855C3C" Last-Modified: Sun, 16 Mar 2025 23:12:35 GMT Domain-Integrity-Check: true X-Azure-Ref: 20250318T101946Z-16957774976n88mzhC1TEB6sen000000054g000000002f65 X-Cache: TCP_HIT X-Cache-Info: L1_T2 X-Fd-Int-Roxy-Purgeid: 83698539 X-Ms-Request-Id: 53ae37f7-901e-00de-52c9-96974f000000 X-Ms-Version: 2018-03-28 X-Spoke-Cache: true X-Spoke-Cache-At: Wed Apr 02 2025 16:16:56 GMT+0000 (Coordinated Universal Time) Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HHSRiRQv1nc%2FL6tSrVVKr3mWBoHZeQVAacfGI%2Bm7Et4HrN3PvpvOxw3LOGJcHBqbhsjSWYJfeQW6SOxD4LN3TkvP7nnjknngRG7v7rpnBT335dEPcUOgerdUxFV2zNtgOvbEBKBP%2FpvN"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105740&min_rtt=104807&rtt_var=23077&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1190&delivery_rate=35542&cwnd=238&unsent_bytes=0&cid=4c59dfdf9d217667&ts=301&x=0"
2025-04-02 16:42:19 UTC	1326	IN	Data Raw: 2e 5f 61 70 70 2d 73 74 61 72 74 75 70 2d 73 70 69 6e 6e 65 72 5f 65 7a 64 65 64 5f 34 7b 6c 65 66 74 3a 35 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 7d 2e 5f 73 70 69 6e 6e 65 72 5f 65 7a 64 65 64 5f 31 32 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 72 6f 74 61 74 69 6f 6e 5f 65 7a 64 65 64 5f 31 20 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 3a 34 70 78 20 73 6f 6c 69 64 20 23 32 64 34 65 63 32 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 Data Ascii: ._app-startup-spinner_ezded_4{left:50%;position:fixed;top:50%;transform:translate(-50%,-50%)}._spinner_ezded_12{animation:_rotation_ezded_1 1s linear infinite;border-radius:50%;border:4px solid #2d4ec2;border-bottom-color:transparent;box-sizing:border-box

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:19 UTC	640	OUT	GET /assets/index-LRWDlzmF.js HTTP/1.1 Host: www.glasswoodplate.com Connection: keep-alive Origin: https://www.glasswoodplate.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.glasswoodplate.com/o-ngjc-h72-64a1b4275b478fd490bb6da4fbc0a952 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:19 UTC	1285	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 16:42:19 GMT Content-Type: application/javascript Content-Length: 842330 Connection: close CF-Ray: 92a1c7607adfe911-LHR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 765 Cache-Control: public, max-age=14400 ETag: "0x8DD71E9D2950089" Last-Modified: Wed, 02 Apr 2025 13:25:23 GMT domain-integrity-check: true x-azure-ref: 20250402T132906Z-157d97d486cz8ttfhC1LON3ue40000000cb000000001fxmt x-cache: TCP_HIT x-fd-int-roxy-purgeid: 83698550 x-ms-request-id: 2bda94d0-001e-002b-69d3-a33f91000000 x-ms-version: 2018-03-28 x-spoke-cache: true x-spoke-cache-at: Wed Apr 02 2025 16:29:34 GMT+0000 (Coordinated Universal Time) Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eSg%2B%2FFm%2BwrNHK1Nt3dBjcmCv2bokLGPaU3JyvYWndrhc%2BCg2T30nqA6lGQdwLRUgDJjYHVt8antZNNu0ipdBS67nOWgW1VHKJm%2BtI3d%2F1TZUzxh3Un%2BkPDh8ZPdoUFpBk1fbq57Z6p%2Fr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=176151&min_rtt=176093&rtt_var=37194&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1212&delivery_rate=21144&cwnd=33&unsent_bytes=0&cid=224b66f2b896cabc&ts=418&x=0"
2025-04-02 16:42:19 UTC	84	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 70 41 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 63 6f 6e 73 74 20 6e 3d 74 5b 72 5d 3b 69 66 28 74 79 70 65 6f 66 20 6e 21 3d 22 73 74 72 69 6e 67 22 26 26 21 41 72 Data Ascii: function pA(e,t){for(var r=0;r<t.length;r++){const n=t[r];if(typeof n!="string"&&!Ar
2025-04-02 16:42:19 UTC	1369	IN	Data Raw: 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 29 7b 66 6f 72 28 63 6f 6e 73 74 20 6f 20 69 6e 20 6e 29 69 66 28 6f 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 21 28 6f 20 69 6e 20 65 29 29 7b 63 6f 6e 73 74 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 6f 29 3b 69 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6f 2c 69 2e 67 65 74 3f 69 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 28 29 3d 3e 6e 5b 6f 5d 7d 29 7d 7d 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 Data Ascii: ray.isArray(n)){for(const o in n)if(o!=="default"&&!(o in e)){const i=Object.getOwnPropertyDescriptor(n,o);i&&Object.defineProperty(e,o,i.get?i:{enumerable:!0,get:()=>n[o]})}}}return Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"
2025-04-02 16:42:19 UTC	1369	IN	Data Raw: 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 72 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 7d 65 6c 73 65 20 72 3d 7b 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 6e 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 6e 2c 6f 2e 67 65 74 3f 6f 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 5b 6e Data Ascii: ,arguments)};r.prototype=t.prototype}else r={};return Object.defineProperty(r,"__esModule",{value:!0}),Object.keys(e).forEach(function(n){var o=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(r,n,o.get?o:{enumerable:!0,get:function(){return e[n
2025-04-02 16:42:19 UTC	1369	IN	Data Raw: 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 65 21 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 73 65 74 53 74 61 74 65 28 2e 2e 2e 29 3a 20 74 61 6b 65 73 20 61 6e 20 6f 62 6a 65 63 74 20 6f 66 20 73 74 61 74 65 20 76 61 72 69 61 62 6c 65 73 20 74 6f 20 75 70 64 61 74 65 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 20 77 68 69 63 68 20 72 65 74 75 72 6e 73 20 61 6e 20 6f 62 6a 65 63 74 20 6f 66 20 73 74 61 74 65 20 76 61 72 69 61 62 6c 65 73 2e 22 29 3b 74 68 69 73 2e 75 70 64 61 74 65 72 2e 65 6e 71 75 65 75 65 53 65 74 53 74 61 74 65 28 74 68 69 73 2c 65 2c 74 2c 22 73 65 74 53 74 61 74 65 22 29 7d 3b 74 61 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 63 65 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 75 70 64 61 74 65 72 2e Data Ascii: ="function"&&e!=null)throw Error("setState(...): takes an object of state variables to update or a function which returns an object of state variables.");this.updater.enqueueSetState(this,e,t,"setState")};ta.prototype.forceUpdate=function(e){this.updater.
2025-04-02 16:42:19 UTC	1369	IN	Data Raw: 65 63 74 22 26 26 65 21 3d 3d 6e 75 6c 6c 26 26 65 2e 6b 65 79 21 3d 6e 75 6c 6c 3f 49 41 28 22 22 2b 65 2e 6b 65 79 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 59 75 28 65 2c 74 2c 72 2c 6e 2c 6f 29 7b 76 61 72 20 69 3d 74 79 70 65 6f 66 20 65 3b 28 69 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 69 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 26 26 28 65 3d 6e 75 6c 6c 29 3b 76 61 72 20 61 3d 21 31 3b 69 66 28 65 3d 3d 3d 6e 75 6c 6c 29 61 3d 21 30 3b 65 6c 73 65 20 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 61 3d 21 30 3b 62 72 65 61 6b 3b 63 61 73 65 22 6f 62 6a 65 63 74 22 3a 73 77 69 74 63 68 28 65 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 4c 73 3a Data Ascii: ect"&&e!==null&&e.key!=null?IA(""+e.key):t.toString(36)}function Yu(e,t,r,n,o){var i=typeof e;(i==="undefined"\|\|i==="boolean")&&(e=null);var a=!1;if(e===null)a=!0;else switch(i){case"string":case"number":a=!0;break;case"object":switch(e.$$typeof){case Ls:
2025-04-02 16:42:19 UTC	1369	IN	Data Raw: 2e 5f 72 65 73 75 6c 74 2e 64 65 66 61 75 6c 74 3b 74 68 72 6f 77 20 65 2e 5f 72 65 73 75 6c 74 7d 76 61 72 20 48 74 3d 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 2c 4a 75 3d 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 75 6c 6c 7d 2c 4f 41 3d 7b 52 65 61 63 74 43 75 72 72 65 6e 74 44 69 73 70 61 74 63 68 65 72 3a 48 74 2c 52 65 61 63 74 43 75 72 72 65 6e 74 42 61 74 63 68 43 6f 6e 66 69 67 3a 4a 75 2c 52 65 61 63 74 43 75 72 72 65 6e 74 4f 77 6e 65 72 3a 72 79 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 76 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 63 74 28 2e 2e 2e 29 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e 20 70 72 6f 64 75 63 74 69 6f 6e 20 62 75 69 6c 64 73 20 6f 66 20 52 65 61 63 74 2e 22 29 7d 5f 65 2e 43 68 69 6c 64 72 65 6e 3d 7b 6d Data Ascii: ._result.default;throw e._result}var Ht={current:null},Ju={transition:null},OA={ReactCurrentDispatcher:Ht,ReactCurrentBatchConfig:Ju,ReactCurrentOwner:ry};function wv(){throw Error("act(...) is not supported in production builds of React.")}_e.Children={m
2025-04-02 16:42:19 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 65 3d 7b 24 24 74 79 70 65 6f 66 3a 24 41 2c 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 3a 65 2c 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 32 3a 65 2c 5f 74 68 72 65 61 64 43 6f 75 6e 74 3a 30 2c 50 72 6f 76 69 64 65 72 3a 6e 75 6c 6c 2c 43 6f 6e 73 75 6d 65 72 3a 6e 75 6c 6c 2c 5f 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 6e 75 6c 6c 2c 5f 67 6c 6f 62 61 6c 4e 61 6d 65 3a 6e 75 6c 6c 7d 2c 65 2e 50 72 6f 76 69 64 65 72 3d 7b 24 24 74 79 70 65 6f 66 3a 67 41 2c 5f 63 6f 6e 74 65 78 74 3a 65 7d 2c 65 2e 43 6f 6e 73 75 6d 65 72 3d 65 7d 3b 5f 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3d 45 76 3b 5f 65 2e 63 72 65 61 74 65 46 61 63 74 6f 72 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 45 76 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 Data Ascii: {return e={$$typeof:$A,_currentValue:e,_currentValue2:e,_threadCount:0,Provider:null,Consumer:null,_defaultValue:null,_globalName:null},e.Provider={$$typeof:gA,_context:e},e.Consumer=e};_e.createElement=Ev;_e.createFactory=function(e){var t=Ev.bind(null,e
2025-04-02 16:42:19 UTC	1369	IN	Data Raw: 29 7d 3b 5f 65 2e 75 73 65 52 65 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 48 74 2e 63 75 72 72 65 6e 74 2e 75 73 65 52 65 66 28 65 29 7d 3b 5f 65 2e 75 73 65 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 48 74 2e 63 75 72 72 65 6e 74 2e 75 73 65 53 74 61 74 65 28 65 29 7d 3b 5f 65 2e 75 73 65 53 79 6e 63 45 78 74 65 72 6e 61 6c 53 74 6f 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 2e 63 75 72 72 65 6e 74 2e 75 73 65 53 79 6e 63 45 78 74 65 72 6e 61 6c 53 74 6f 72 65 28 65 2c 74 2c 72 29 7d 3b 5f 65 2e 75 73 65 54 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 74 2e 63 75 72 72 65 6e 74 2e 75 73 65 54 72 61 6e 73 69 74 69 6f 6e Data Ascii: )};_e.useRef=function(e){return Ht.current.useRef(e)};_e.useState=function(e){return Ht.current.useState(e)};_e.useSyncExternalStore=function(e,t,r){return Ht.current.useSyncExternalStore(e,t,r)};_e.useTransition=function(){return Ht.current.useTransition
2025-04-02 16:42:19 UTC	1369	IN	Data Raw: 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 0a 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 0a 4c 69 63 65 6e 73 65 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 0a 54 48 49 53 20 43 4f 44 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 4f 4e 20 41 4e 20 2a 41 53 20 49 53 2a 20 42 41 53 49 53 2c 20 57 49 54 48 4f 55 54 20 57 41 Data Ascii: der the Apache License, Version 2.0 (the "License"); you may not usethis file except in compliance with the License. You may obtain a copy of theLicense at http://www.apache.org/licenses/LICENSE-2.0THIS CODE IS PROVIDED ON AN AS IS BASIS, WITHOUT WA
2025-04-02 16:42:19 UTC	1369	IN	Data Raw: 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 28 7b 7d 29 7d 2c 68 61 73 3a 75 3f 66 75 6e 63 74 69 6f 6e 28 50 2c 4d 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 50 2c 4d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 50 2c 4d 29 7b 72 65 74 75 72 6e 20 4d 20 69 6e 20 50 7d 2c 67 65 74 3a 75 3f 66 75 6e 63 74 69 6f 6e 28 50 2c 4d 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 50 2c 4d 29 3f 50 5b 4d 5d 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 50 2c 4d 29 7b 72 65 74 75 72 6e 20 50 5b 4d 5d 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 46 75 6e 63 74 69 6f 6e 29 2c 63 3d 74 79 70 65 6f 66 20 70 72 6f 63 65 73 73 3d 3d 22 6f 62 6a 65 63 74 22 26 26 69 39 Data Ascii: _proto__:null})}:function(){return Z({})},has:u?function(P,M){return r.call(P,M)}:function(P,M){return M in P},get:u?function(P,M){return r.call(P,M)?P[M]:void 0}:function(P,M){return P[M]}},d=Object.getPrototypeOf(Function),c=typeof process=="object"&&i9

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:23 UTC	650	OUT	GET /favicon.ico HTTP/1.1 Host: www.glasswoodplate.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.glasswoodplate.com/o-ngjc-h72-64a1b4275b478fd490bb6da4fbc0a952 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:24 UTC	1280	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 16:42:23 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 15086 Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 92a1c77b8e924400-EWR Cf-Cache-Status: HIT Accept-Ranges: bytes Age: 1486 Cache-Control: public, max-age=14400 Etag: "0x8DD509E5267107B" Last-Modified: Wed, 19 Feb 2025 04:31:47 GMT Domain-Integrity-Check: true X-Azure-Ref: 20250220T183756Z-r1cf96d96c7sndw6hC1TEByp90000000013g00000000a4ud X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 83698522 X-Ms-Request-Id: 05a324b6-b01e-0084-7849-83f1a8000000 X-Ms-Version: 2018-03-28 X-Spoke-Cache: true X-Spoke-Cache-At: Wed Apr 02 2025 16:17:37 GMT+0000 (Coordinated Universal Time) Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s4Ov%2BigKAyVsS2u2s27P9AjIYiIghZoA1SfBRABLczUMsTFSEwxjx9hbEWH3d6FEBsKo1dPqiir0MzOjxHiSvhYzkp%2Fs1TT5v7OQVZzxFBt%2Fx%2BVwHlIsPxZOijrp4PosgZpxC0sOZOIh"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=103999&min_rtt=103631&rtt_var=22173&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2847&recv_bytes=1222&delivery_rate=35903&cwnd=223&unsent_bytes=0&cid=be990dca2ae9369b&ts=501&x=0"
2025-04-02 16:42:24 UTC	89	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $
2025-04-02 16:42:24 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-04-02 16:42:24 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 4c 30 25 c2 4e 2d d0 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ce c5 50 2c 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 4d 2b 35 c2 4e 2d ea c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d Data Ascii: L0%N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-P,#M+5N-N-N-N-N-N-N-N-N-N-N-
2025-04-02 16:42:24 UTC	1369	IN	Data Raw: a7 96 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e1 a7 96 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2e b3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c2 4d 2e 32 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff e1 a7 96 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: N-N-N-N-N-N.M.2N-N-N-N-N-N-
2025-04-02 16:42:24 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ef d0 c7 ff c8 5e 40 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c5 58 39 ff eb c4 b9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e1 a7 96 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d d4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c2 4d 2d ed c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff e1 a7 96 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fc fb ff de 9f 8d ff c2 4f 2e ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4f 2e ff dd 9c 89 ff fe fb fa ff ff ff ff ff ff ff ff ff ff Data Ascii: ^@N-N-N-N-N-N-X9N-N-N-N-N-N-N-N-M-N-N-N-N-N-N-N-O.N-N-N-N-N-N-N-N-O.
2025-04-02 16:42:24 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 e5 e0 ff c8 60 42 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c1 4e 2e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 4d 2e 42 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c8 5e 40 ff f5 e1 dc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 e5 e0 ff c8 60 42 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e Data Ascii: `BN-N-N-N-N-N-N-N-N-N.M.BN-N-N-N-N-N-N-N-N-N-^@`BN-N-N-N-N-N
2025-04-02 16:42:24 UTC	107	IN	Data Raw: c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4d 2d 8e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf 40 20 08 c1 4e 2e cf c2 4e 2d Data Ascii: N-N-N-N-N-N-N-N-N-N-N-M-@ N.N-
2025-04-02 16:42:24 UTC	1369	IN	Data Raw: ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c8 5e 40 ff f5 e1 dc ff ff ff ff ff ff ff ff ff f6 e5 e0 ff c8 60 42 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d d2 c6 55 39 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 4e 2e 27 c2 4e 2d ec c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c8 5e 40 ff f5 e1 dc ff f6 e5 Data Ascii: N-N-N-N-N-N-N-N-N-N-N-N-^@`BN-N-N-N-N-N-N-N-N-N-N-N-N-N-U9N.'N-N-N-N-N-N-N-N-N-N-N-N-N-N-^@
2025-04-02 16:42:24 UTC	1369	IN	Data Raw: c3 50 2d 33 c2 4e 2d 9a c2 4e 2d f0 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ef c1 4e 2d 99 c2 4d 2e 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 49 24 07 c0 4e 2b 41 c2 4e 2d 82 c2 4f 2d af c2 4d 2d d6 c2 4e 2d ee c2 4e 2d fa c2 4e 2d f9 c2 4e 2d ee c2 4e 2d d5 c2 4f 2d af c2 4d 2d 81 c3 50 2c 40 b6 49 24 Data Ascii: P-3N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-M.2I$N+AN-O-M-N-N-N-N-N-O-M-P,@I$
2025-04-02 16:42:24 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:23 UTC	751	OUT	POST /api/1314267/envelope/?sentry_key=6c20ba397902400f9d47007cf6200a24&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.64.0 HTTP/1.1 Host: sentry.io Connection: keep-alive Content-Length: 501 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.glasswoodplate.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.glasswoodplate.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:23 UTC	501	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 35 2d 30 34 2d 30 32 54 31 36 3a 34 32 3a 32 32 2e 34 32 31 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 36 34 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 64 37 66 31 32 37 61 30 39 62 64 66 34 36 62 66 38 36 39 38 63 66 62 66 62 35 39 65 63 65 30 30 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 35 2d 30 34 2d 30 32 54 31 36 3a 34 32 3a 32 32 2e 34 32 31 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 35 2d 30 34 2d 30 32 54 31 36 3a 34 32 3a 32 32 2e 34 32 31 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2025-04-02T16:42:22.421Z","sdk":{"name":"sentry.javascript.browser","version":"7.64.0"}}{"type":"session"}{"sid":"d7f127a09bdf46bf8698cfbfb59ece00","init":true,"started":"2025-04-02T16:42:22.421Z","timestamp":"2025-04-02T16:42:22.421Z","stat
2025-04-02 16:42:23 UTC	555	IN	HTTP/1.1 200 OK server: nginx date: Wed, 02 Apr 2025 16:42:23 GMT content-type: application/json Content-Length: 2 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin x-envoy-upstream-service-time: 0 strict-transport-security: max-age=31536000; includeSubDomains; preload via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-04-02 16:42:23 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:23 UTC	535	OUT	OPTIONS /api/send HTTP/1.1 Host: umami.optoutsystem.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.glasswoodplate.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.glasswoodplate.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:24 UTC	528	IN	HTTP/1.1 204 No Content Date: Wed, 02 Apr 2025 16:42:24 GMT Content-Length: 0 Connection: close X-DNS-Prefetch-Control: on Content-Security-Policy: default-src 'self';img-src ;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is;frame-ancestors 'self' Access-Control-Allow-Origin: Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers Access-Control-Allow-Headers: content-type Access-Control-Max-Age: 86400

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:24 UTC	504	OUT	GET /api/1314267/envelope/?sentry_key=6c20ba397902400f9d47007cf6200a24&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.64.0 HTTP/1.1 Host: sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:24 UTC	552	IN	HTTP/1.1 405 Method Not Allowed server: nginx date: Wed, 02 Apr 2025 16:42:24 GMT Content-Length: 0 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST x-envoy-upstream-service-time: 0 strict-transport-security: max-age=31536000; includeSubDomains; preload via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://storage.googleapis.com/m030325nw/0203010214585.html#5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Windows Analysis Report
https://storage.googleapis.com/m030325nw/0203010214585.html#5vnDUN109344BIiq674wapggdutoy377SJNFUWFBTNKPPJL187807EOVC18377d21

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:24 UTC	633	OUT	POST /api/send HTTP/1.1 Host: umami.optoutsystem.com Connection: keep-alive Content-Length: 269 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.glasswoodplate.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.glasswoodplate.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:24 UTC	269	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 65 76 65 6e 74 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 77 65 62 73 69 74 65 22 3a 22 39 63 31 34 38 62 37 64 2d 34 31 37 61 2d 34 33 36 61 2d 62 65 33 32 2d 38 35 39 66 61 32 38 30 66 66 30 61 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 77 77 77 2e 67 6c 61 73 73 77 6f 6f 64 70 6c 61 74 65 2e 63 6f 6d 22 2c 22 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 30 32 34 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 55 6e 73 75 62 73 63 72 69 62 65 22 2c 22 75 72 6c 22 3a 22 2f 6f 2d 6e 67 6a 63 2d 68 37 32 2d 36 34 61 31 62 34 32 37 35 62 34 37 38 66 64 34 39 30 62 62 36 64 61 34 66 62 63 30 61 39 35 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 6f 6e 74 67 6f 6d 65 Data Ascii: {"type":"event","payload":{"website":"9c148b7d-417a-436a-be32-859fa280ff0a","hostname":"www.glasswoodplate.com","screen":"1280x1024","language":"en-US","title":"Unsubscribe","url":"/o-ngjc-h72-64a1b4275b478fd490bb6da4fbc0a952","referrer":"https://montgome
2025-04-02 16:42:24 UTC	418	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 16:42:24 GMT Content-Type: text/plain Content-Length: 629 Connection: close X-DNS-Prefetch-Control: on Content-Security-Policy: default-src 'self';img-src ;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is;frame-ancestors 'self' Access-Control-Allow-Origin: ETag: "wga6ksc0shhh" Vary: Accept-Encoding
2025-04-02 16:42:24 UTC	629	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 49 73 49 6e 52 35 63 43 49 36 49 6b 70 58 56 43 4a 39 2e 65 79 4a 70 5a 43 49 36 49 6a 49 77 4e 6d 45 77 59 54 55 79 4c 57 52 6b 4e 54 55 74 4e 54 67 7a 4e 43 30 35 59 7a 4a 6d 4c 54 68 69 4f 54 49 32 4d 6a 6c 6b 59 54 49 33 4e 79 49 73 49 6e 64 6c 59 6e 4e 70 64 47 56 4a 5a 43 49 36 49 6a 6c 6a 4d 54 51 34 59 6a 64 6b 4c 54 51 78 4e 32 45 74 4e 44 4d 32 59 53 31 69 5a 54 4d 79 4c 54 67 31 4f 57 5a 68 4d 6a 67 77 5a 6d 59 77 59 53 49 73 49 6d 68 76 63 33 52 75 59 57 31 6c 49 6a 6f 69 64 33 64 33 4c 6d 64 73 59 58 4e 7a 64 32 39 76 5a 48 42 73 59 58 52 6c 4c 6d 4e 76 62 53 49 73 49 6d 4a 79 62 33 64 7a 5a 58 49 69 4f 69 4a 6a 61 48 4a 76 62 57 55 69 4c 43 4a 76 63 79 49 36 49 6c 64 70 62 6d 52 76 64 33 Data Ascii: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjIwNmEwYTUyLWRkNTUtNTgzNC05YzJmLThiOTI2MjlkYTI3NyIsIndlYnNpdGVJZCI6IjljMTQ4YjdkLTQxN2EtNDM2YS1iZTMyLTg1OWZhMjgwZmYwYSIsImhvc3RuYW1lIjoid3d3LmdsYXNzd29vZHBsYXRlLmNvbSIsImJyb3dzZXIiOiJjaHJvbWUiLCJvcyI6IldpbmRvd3

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:24 UTC	397	OUT	GET /favicon.ico HTTP/1.1 Host: www.glasswoodplate.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:25 UTC	1282	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 16:42:24 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 15086 Connection: close CF-Ray: 92a1c781bf085c81-MIA CF-Cache-Status: HIT Accept-Ranges: bytes Age: 2003 Cache-Control: public, max-age=14400 ETag: "0x8DD6830310494F4" Last-Modified: Fri, 21 Mar 2025 04:23:54 GMT domain-integrity-check: true x-azure-ref: 20250325T050013Z-1757b869654gsr9xhC1MIA42bc0000000y3000000000yard x-cache: TCP_HIT x-fd-int-roxy-purgeid: 83698543 x-ms-request-id: 474d5e33-f01e-0067-250d-9d362e000000 x-ms-version: 2018-03-28 x-spoke-cache: true x-spoke-cache-at: Wed Apr 02 2025 16:09:00 GMT+0000 (Coordinated Universal Time) Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BlLNlXS4IK%2BCFEwqjaXkx7j9sss2f8JWyTjbGvPkFkNFXj%2B4i%2BTd2q%2BNWvj9mp8MhTIGLP4eGwR8LIypMEiNDuYMotO40bp6BOa1u9D28CxcA%2BYe9JEkckBaAaOWuKkQTVr24E%2Bxp0cS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=163608&min_rtt=161722&rtt_var=35950&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=969&delivery_rate=23000&cwnd=33&unsent_bytes=0&cid=5d4b58491e615657&ts=405&x=0"
2025-04-02 16:42:25 UTC	1369	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $
2025-04-02 16:42:25 UTC	1369	IN	Data Raw: ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d fb c3 4e 2e 8c bf 40 20 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 4c 30 25 c2 4e 2d d0 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ce c5 50 2c 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: N-N-N-N-N.@ L0%N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-P,#
2025-04-02 16:42:25 UTC	1369	IN	Data Raw: c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d fb c3 4c 2b 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c2 4e 2d b7 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff e1 a7 96 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e1 a7 96 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2e b3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c2 4d 2e Data Ascii: N-N-N-N-N-L+/N-N-N-N-N-N-N-N-N-N-N-N.M.
2025-04-02 16:42:25 UTC	1369	IN	Data Raw: 4e 2d ff c3 4e 2e ad 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c2 4d 2d d6 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff e1 a7 96 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ef d0 c7 ff c8 5e 40 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c5 58 39 ff eb c4 b9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e1 a7 96 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d d4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c2 4d 2d ed c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff Data Ascii: N-N.M-N-N-N-N-N-N-N-^@N-N-N-N-N-N-X9N-N-N-N-N-N-N-N-M-N-N-N-N-N-N-N-
2025-04-02 16:42:25 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 c2 4e 2d 82 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c8 5e 40 ff f5 e1 dc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 e5 e0 ff c8 60 42 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c1 4e 2e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 4d 2e 42 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c8 5e 40 ff f5 e1 dc ff ff ff ff ff ff Data Ascii: N-N-N-N-N-N-N-N-N-N-^@`BN-N-N-N-N-N-N-N-N-N.M.BN-N-N-N-N-N-N-N-N-N-^@
2025-04-02 16:42:25 UTC	1369	IN	Data Raw: ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c8 5e 40 ff f5 e1 dc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 e5 e0 ff c8 60 42 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4d 2d 8e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf 40 20 08 c1 4e 2e cf c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c8 5e 40 ff f5 e1 dc ff ff ff Data Ascii: N-N-N-N-N-N-N-N-N-N-N-N-^@`BN-N-N-N-N-N-N-N-N-N-N-N-N-M-@ N.N-N-N-N-N-N-N-N-N-N-N-N-N-^@
2025-04-02 16:42:25 UTC	1369	IN	Data Raw: c2 4f 2d b9 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d b7 c5 50 2b 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c3 50 2d 33 c2 4e 2d 9a c2 4e 2d f0 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d Data Ascii: O-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-N-P+0P-3N-N-N-N-N-N-N-N-N-N-N-N-N-N-
2025-04-02 16:42:25 UTC	1369	IN	Data Raw: 00 00 00 00 3f 00 00 fc 00 00 00 00 3f 00 00 fe 00 00 00 00 7f 00 00 ff 00 00 00 00 ff 00 00 ff 80 00 00 01 ff 00 00 ff c0 00 00 03 ff 00 00 ff e0 00 00 07 ff 00 00 ff f0 00 00 0f ff 00 00 ff fc 00 00 3f ff 00 00 ff ff 00 00 ff ff 00 00 ff ff e0 07 ff ff 00 00 ff ff ff ff ff ff 00 00 ff ff ff ff ff ff 00 00 ff ff ff ff ff ff 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ???( @
2025-04-02 16:42:25 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d1 7a 62 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c3 4f 2c 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 01 c2 4e 2d d8 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff d1 7a 62 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d1 7a 62 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4d 2d d6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c2 4d 2e 32 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff d1 7a 62 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: zbN-N-N-O,QN-N-N-N-zbzbN-N-N-M-M.2N-N-N-N-zb
2025-04-02 16:42:25 UTC	1369	IN	Data Raw: ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff cd 6f 55 ff fa f2 ef ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb f4 f2 ff cf 73 59 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c1 4e 2f 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 01 c2 4e 2d d9 c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff cd 6f 55 ff fa f2 ef ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb f4 f2 ff cf 73 59 ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c2 4e 2d ff c3 4e 2d d7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 4f 2c 57 c2 4e 2d ff c2 4e 2d ff c2 4e Data Ascii: N-N-N-oUsYN-N-N-N-N-N-N-N/1N-N-N-N-N-N-N-N-oUsYN-N-N-N-N-N-N-N-O,WN-N-N

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:24 UTC	550	OUT	OPTIONS /optout/optout-key/decrypt HTTP/1.1 Host: api.optoutsystem.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.glasswoodplate.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.glasswoodplate.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:24 UTC	335	IN	HTTP/1.1 204 No Content Date: Wed, 02 Apr 2025 16:42:24 GMT Connection: close Vary: Origin Access-Control-Allow-Origin: https://www.glasswoodplate.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Access-Control-Allow-Methods: GET,HEAD,PUT,POST,DELETE,PATCH Access-Control-Allow-Headers: content-type

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:25 UTC	711	OUT	POST /optout/optout-key/decrypt HTTP/1.1 Host: api.optoutsystem.com Connection: keep-alive Content-Length: 93 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://www.glasswoodplate.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.glasswoodplate.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:25 UTC	93	OUT	Data Raw: 7b 22 6b 65 79 22 3a 22 6f 2d 6e 67 6a 63 2d 68 37 32 2d 36 34 61 31 62 34 32 37 35 62 34 37 38 66 64 34 39 30 62 62 36 64 61 34 66 62 63 30 61 39 35 32 22 2c 22 6f 70 74 6f 75 74 44 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 67 6c 61 73 73 77 6f 6f 64 70 6c 61 74 65 2e 63 6f 6d 22 7d Data Ascii: {"key":"o-ngjc-h72-64a1b4275b478fd490bb6da4fbc0a952","optoutDomain":"www.glasswoodplate.com"}
2025-04-02 16:42:25 UTC	399	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 16:42:25 GMT Content-Type: application/json; charset=utf-8 Content-Length: 528 Connection: close Vary: Origin Access-Control-Allow-Origin: https://www.glasswoodplate.com Access-Control-Allow-Credentials: true X-RateLimit-Remaining: 1499 X-RateLimit-Reset: 1743612205 X-RateLimit-Limit: 1500 Cache-Control: no-cache Pragma: no-cache Expires: -1
2025-04-02 16:42:25 UTC	528	IN	Data Raw: 7b 22 6d 61 69 6c 65 72 5f 69 64 22 3a 31 34 38 30 34 39 2c 22 63 61 6d 70 61 69 67 6e 5f 69 64 22 3a 32 34 38 30 30 30 2c 22 63 6d 61 5f 69 64 22 3a 36 39 36 37 37 34 32 32 2c 22 6a 61 69 6c 65 64 5f 61 64 76 65 72 74 69 73 65 72 5f 69 64 22 3a 33 32 37 35 32 2c 22 73 6f 75 72 63 65 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 33 30 39 37 35 2c 22 74 61 72 67 65 74 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 33 30 39 37 35 2c 22 74 6f 6b 65 6e 22 3a 22 65 79 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 49 73 49 6e 52 35 63 43 49 36 49 6b 70 58 56 43 4a 39 2e 65 79 4a 30 65 58 42 6c 49 6a 6f 69 62 33 42 30 62 33 56 30 49 69 77 69 59 32 46 74 63 47 46 70 5a 32 35 66 61 57 51 69 4f 6a 49 30 4f 44 41 77 4d 43 77 69 62 57 46 70 62 47 56 79 58 32 6c 6b 49 6a 6f 78 4e 44 67 Data Ascii: {"mailer_id":148049,"campaign_id":248000,"cma_id":69677422,"jailed_advertiser_id":32752,"source_client_id":30975,"target_client_id":30975,"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0eXBlIjoib3B0b3V0IiwiY2FtcGFpZ25faWQiOjI0ODAwMCwibWFpbGVyX2lkIjoxNDg

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:26 UTC	554	OUT	OPTIONS /optout/optout-key/page/248000 HTTP/1.1 Host: api.optoutsystem.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization Origin: https://www.glasswoodplate.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.glasswoodplate.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:26 UTC	336	IN	HTTP/1.1 204 No Content Date: Wed, 02 Apr 2025 16:42:26 GMT Connection: close Vary: Origin Access-Control-Allow-Origin: https://www.glasswoodplate.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Access-Control-Allow-Methods: GET,HEAD,PUT,POST,DELETE,PATCH Access-Control-Allow-Headers: authorization

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:26 UTC	409	OUT	GET /optout/optout-key/decrypt HTTP/1.1 Host: api.optoutsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:26 UTC	391	IN	HTTP/1.1 405 Method Not Allowed Date: Wed, 02 Apr 2025 16:42:26 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 18 Connection: close Vary: Origin Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true X-RateLimit-Remaining: 1498 X-RateLimit-Reset: 1743612205 X-RateLimit-Limit: 1500 Allow: POST Cache-Control: no-cache Pragma: no-cache Expires: -1
2025-04-02 16:42:26 UTC	18	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 Data Ascii: Method Not Allowed

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:26 UTC	913	OUT	GET /optout/optout-key/page/248000 HTTP/1.1 Host: api.optoutsystem.com Connection: keep-alive sec-ch-ua-platform: "Windows" Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0eXBlIjoib3B0b3V0IiwiY2FtcGFpZ25faWQiOjI0ODAwMCwibWFpbGVyX2lkIjoxNDgwNDksImNtYV9pZCI6Njk2Nzc0MjIsImlhdCI6MTc0MzYxMjE0NSwiZXhwIjoxNzQ1NDI2NTQ1fQ.gZiSQkw4QIlrM5bEKK3aQe8EYwlzHbQUSJlgbz4giyE User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://www.glasswoodplate.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.glasswoodplate.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:27 UTC	399	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 16:42:27 GMT Content-Type: application/json; charset=utf-8 Content-Length: 172 Connection: close Vary: Origin Access-Control-Allow-Origin: https://www.glasswoodplate.com Access-Control-Allow-Credentials: true X-RateLimit-Remaining: 1497 X-RateLimit-Reset: 1743612205 X-RateLimit-Limit: 1500 Cache-Control: no-cache Pragma: no-cache Expires: -1
2025-04-02 16:42:27 UTC	172	IN	Data Raw: 7b 22 73 74 79 6c 65 22 3a 7b 7d 2c 22 6c 6f 67 6f 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 3a 7b 22 74 69 74 6c 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 74 65 6e 74 22 3a 6e 75 6c 6c 7d 2c 22 6c 61 6e 64 69 6e 67 22 3a 7b 22 74 69 74 6c 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 74 65 6e 74 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 74 65 6e 74 42 65 6c 6f 77 45 6d 61 69 6c 22 3a 6e 75 6c 6c 7d 2c 22 70 72 69 76 61 63 79 22 3a 7b 22 75 72 6c 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 74 65 6e 74 22 3a 6e 75 6c 6c 7d 7d Data Ascii: {"style":{},"logo":null,"confirmation":{"title":null,"content":null},"landing":{"title":null,"content":null,"contentBelowEmail":null},"privacy":{"url":null,"content":null}}

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:26 UTC	394	OUT	GET /api/send HTTP/1.1 Host: umami.optoutsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:27 UTC	370	IN	HTTP/1.1 405 Method Not Allowed Date: Wed, 02 Apr 2025 16:42:26 GMT Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Content-Security-Policy: default-src 'self';img-src ;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is;frame-ancestors 'self' Access-Control-Allow-Origin:
2025-04-02 16:42:27 UTC	28	IN	Data Raw: 31 36 0d 0a 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a Data Ascii: 16405 Method Not Allowed
2025-04-02 16:42:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:27 UTC	618	OUT	GET /assets/index-ZK6TGWZV.css HTTP/1.1 Host: www.glasswoodplate.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.glasswoodplate.com/o-ngjc-h72-64a1b4275b478fd490bb6da4fbc0a952 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:27 UTC	1270	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 16:42:27 GMT Content-Type: text/css Content-Length: 22153 Connection: close CF-Ray: 92a1c7928b4f726f-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 1529 Cache-Control: public, max-age=14400 ETag: "0x8DD509E5263196C" Last-Modified: Wed, 19 Feb 2025 04:31:47 GMT domain-integrity-check: true x-azure-ref: 20250220T184813Z-r1cf96d96c7nnvgchC1TEBw1kw00000001sg00000000b8p0 x-cache: TCP_HIT x-fd-int-roxy-purgeid: 83698522 x-ms-request-id: 56bcaaca-b01e-0001-5349-83e081000000 x-ms-version: 2018-03-28 x-spoke-cache: true x-spoke-cache-at: Wed Apr 02 2025 16:16:58 GMT+0000 (Coordinated Universal Time) Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FKZLsUgyOWbCuG%2BCkpQeygz%2BX1UfObMfyGVOv5vhI4jUEj8gL2z8xnJgf8mzmirZBR5zmW8uO%2F%2ByOQ1teTD4oc0SDxFC7cSNHEdtT9CBkpWBz80Zau%2FWxNl6CT3s1h%2BPxR2KJC8TPqtU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=109797&min_rtt=105244&rtt_var=29047&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1190&delivery_rate=31295&cwnd=216&unsent_bytes=0&cid=fd074376afe82e9b&ts=312&x=0"
2025-04-02 16:42:27 UTC	99	IN	Data Raw: 2a 2c 3a 62 65 66 6f 72 65 2c 3a 61 66 74 65 72 7b 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 2d 78 3a 20 30 3b 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 2d 79 3a 20 30 3b 2d 2d 74 77 2d 74 72 61 6e 73 6c 61 74 65 2d 78 3a 20 30 3b 2d 2d 74 77 2d 74 72 61 6e 73 6c 61 Data Ascii: *,:before,:after{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-transla
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 74 65 2d 79 3a 20 30 3b 2d 2d 74 77 2d 72 6f 74 61 74 65 3a 20 30 3b 2d 2d 74 77 2d 73 6b 65 77 2d 78 3a 20 30 3b 2d 2d 74 77 2d 73 6b 65 77 2d 79 3a 20 30 3b 2d 2d 74 77 2d 73 63 61 6c 65 2d 78 3a 20 31 3b 2d 2d 74 77 2d 73 63 61 6c 65 2d 79 3a 20 31 3b 2d 2d 74 77 2d 70 61 6e 2d 78 3a 20 3b 2d 2d 74 77 2d 70 61 6e 2d 79 3a 20 3b 2d 2d 74 77 2d 70 69 6e 63 68 2d 7a 6f 6f 6d 3a 20 3b 2d 2d 74 77 2d 73 63 72 6f 6c 6c 2d 73 6e 61 70 2d 73 74 72 69 63 74 6e 65 73 73 3a 20 70 72 6f 78 69 6d 69 74 79 3b 2d 2d 74 77 2d 67 72 61 64 69 65 6e 74 2d 66 72 6f 6d 2d 70 6f 73 69 74 69 6f 6e 3a 20 3b 2d 2d 74 77 2d 67 72 61 64 69 65 6e 74 2d 76 69 61 2d 70 6f 73 69 74 69 6f 6e 3a 20 3b 2d 2d 74 77 2d 67 72 61 64 69 65 6e 74 2d 74 6f 2d 70 6f 73 69 74 69 6f 6e 3a 20 3b Data Ascii: te-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 2d 74 6f 2d 70 6f 73 69 74 69 6f 6e 3a 20 3b 2d 2d 74 77 2d 6f 72 64 69 6e 61 6c 3a 20 3b 2d 2d 74 77 2d 73 6c 61 73 68 65 64 2d 7a 65 72 6f 3a 20 3b 2d 2d 74 77 2d 6e 75 6d 65 72 69 63 2d 66 69 67 75 72 65 3a 20 3b 2d 2d 74 77 2d 6e 75 6d 65 72 69 63 2d 73 70 61 63 69 6e 67 3a 20 3b 2d 2d 74 77 2d 6e 75 6d 65 72 69 63 2d 66 72 61 63 74 69 6f 6e 3a 20 3b 2d 2d 74 77 2d 72 69 6e 67 2d 69 6e 73 65 74 3a 20 3b 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 77 69 64 74 68 3a 20 30 70 78 3b 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 2d 2d 74 77 2d 72 69 6e 67 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 35 39 20 31 33 30 20 32 34 36 20 2f 20 2e 35 29 3b 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 73 68 61 64 6f 77 Data Ascii: -to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 7d 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 63 6f 64 65 2c 6b 62 64 2c 73 61 6d 70 2c 70 72 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 75 69 2d 6d 6f 6e 6f 73 70 61 63 65 2c 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 2c 43 6f 75 72 Data Ascii: xt-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Cour
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 2c 68 34 2c 68 35 2c 68 36 2c 68 72 2c 66 69 67 75 72 65 2c 70 2c 70 72 65 7b 6d 61 72 67 69 6e 3a 30 7d 66 69 65 6c 64 73 65 74 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 6c 65 67 65 6e 64 7b 70 61 64 64 69 6e 67 3a 30 7d 6f 6c 2c 75 6c 2c 6d 65 6e 75 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 64 69 61 6c 6f 67 7b 70 61 64 64 69 6e 67 3a 30 7d 74 65 78 74 61 72 65 61 7b 72 65 73 69 7a 65 3a 76 65 72 74 69 63 61 6c 7d 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 74 65 78 74 61 72 65 61 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 6f 70 61 63 69 74 79 3a 31 3b 63 6f 6c 6f 72 3a 23 39 63 61 33 61 66 7d 62 75 74 74 6f 6e 2c 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 Data Ascii: ,h4,h5,h6,hr,figure,p,pre{margin:0}fieldset{margin:0;padding:0}legend{padding:0}ol,ul,menu{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}button,[role=button]{c
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 69 6e 73 65 74 29 20 30 20 30 20 30 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 77 69 64 74 68 29 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 63 6f 6c 6f 72 29 3b 2d 2d 74 77 2d 72 69 6e 67 2d 73 68 61 64 6f 77 3a 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 69 6e 73 65 74 29 20 30 20 30 20 30 20 63 61 6c 63 28 31 70 78 20 2b 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 77 69 64 74 68 29 29 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 63 6f 6c 6f 72 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 73 68 61 64 6f 77 29 2c 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 73 68 61 64 6f 77 29 2c 76 61 72 28 2d Data Ascii: ar(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow: var(--tw-ring-inset) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(-
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 2d 70 6f 73 69 74 69 6f 6e 3a 69 6e 69 74 69 61 6c 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 75 6e 73 65 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 69 6e 69 74 69 61 6c 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 37 35 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 70 72 69 6e 74 2d 63 6f 6c 6f 72 2d 61 64 6a 75 73 74 3a 75 6e 73 65 74 3b 70 72 69 6e 74 2d 63 6f 6c 6f 72 2d 61 64 6a 75 73 74 3a 75 6e 73 65 74 7d 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 2d 77 65 62 6b 69 74 2d 70 72 Data Ascii: -position:initial;background-repeat:unset;background-size:initial;padding-right:.75rem;-webkit-print-color-adjust:unset;print-color-adjust:unset}[type=checkbox],[type=radio]{-webkit-appearance:none;-moz-appearance:none;appearance:none;padding:0;-webkit-pr
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 69 65 77 42 6f 78 3d 27 30 20 30 20 31 36 20 31 36 27 20 66 69 6c 6c 3d 27 77 68 69 74 65 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 33 65 25 33 63 70 61 74 68 20 64 3d 27 4d 31 32 2e 32 30 37 20 34 2e 37 39 33 61 31 20 31 20 30 20 30 31 30 20 31 2e 34 31 34 6c 2d 35 20 35 61 31 20 31 20 30 20 30 31 2d 31 2e 34 31 34 20 30 6c 2d 32 2d 32 61 31 20 31 20 30 20 30 31 31 2e 34 31 34 2d 31 2e 34 31 34 4c 36 2e 35 20 39 2e 30 38 36 6c 34 2e 32 39 33 2d 34 2e 32 39 33 61 31 20 31 20 30 20 30 31 31 2e 34 31 34 20 30 7a 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 29 7d 40 6d 65 64 69 61 20 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 20 61 63 74 69 76 65 29 7b 5b 74 79 70 65 3d 63 68 65 63 6b Data Ascii: iewBox='0 0 16 16' fill='white' xmlns='http://www.w3.org/2000/svg'%3e%3cpath d='M12.207 4.793a1 1 0 010 1.414l-5 5a1 1 0 01-1.414 0l-2-2a1 1 0 011.414-1.414L6.5 9.086l4.293-4.293a1 1 0 011.414 0z'/%3e%3c/svg%3e")}@media (forced-colors: active){[type=check
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 3a 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 5b 74 79 70 65 3d 66 69 6c 65 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 6e 73 65 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 75 6e 73 65 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 5b 74 79 70 65 3d 66 69 6c 65 5d 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 73 6f 6c 69 64 20 42 75 74 74 6f 6e 54 65 78 74 3b 6f 75 74 6c 69 Data Ascii: :indeterminate:focus{border-color:transparent;background-color:currentColor}[type=file]{background:unset;border-color:inherit;border-width:0;border-radius:0;padding:0;font-size:unset;line-height:inherit}[type=file]:focus{outline:1px solid ButtonText;outli
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 30 20 30 20 23 30 30 30 30 29 2c 76 61 72 28 2d 2d 74 77 2d 73 68 61 64 6f 77 29 3b 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 3a 23 35 36 38 33 66 33 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 74 65 78 74 61 72 65 61 2c 73 65 6c 65 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 38 37 35 72 65 6d 7d 7d 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 7b 68 65 69 67 68 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 36 70 78 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 32 70 78 3b Data Ascii: 0 0 #0000),var(--tw-shadow);outline-color:#5683f3}@media (min-width: 768px){input[type=email],input[type=text],textarea,select{font-size:1.875rem}}input[type=checkbox]{height:16px;width:16px;flex-shrink:0;cursor:pointer;border-radius:4px;border-width:2px;

Timestamp	Bytes transferred	Direction	Data
2025-04-02 16:42:27 UTC	555	OUT	GET /assets/index-lkLDrYLm.js HTTP/1.1 Host: www.glasswoodplate.com Connection: keep-alive Origin: https://www.glasswoodplate.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 16:42:27 UTC	1279	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 16:42:27 GMT Content-Type: application/javascript Content-Length: 25413 Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 92a1c792ad0243c3-EWR Cf-Cache-Status: HIT Accept-Ranges: bytes Age: 411 Cache-Control: public, max-age=14400 Etag: "0x8DD71E9D284D64A" Last-Modified: Wed, 02 Apr 2025 13:25:22 GMT Domain-Integrity-Check: true X-Azure-Ref: 20250402T133147Z-17cccd5449bh49mhhC1EWRu74000000015w0000000003q48 X-Cache: TCP_HIT X-Fd-Int-Roxy-Purgeid: 83698550 X-Ms-Request-Id: c4a29f16-401e-0064-2dd2-a37231000000 X-Ms-Version: 2018-03-28 X-Spoke-Cache: true X-Spoke-Cache-At: Wed Apr 02 2025 16:35:35 GMT+0000 (Coordinated Universal Time) Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HN%2BQDz5de1eEqZgAPErZTvwh9XWg632%2BZ247cEXxohF9qDablkKeY9RJgj0%2FTA0%2F5YbsAn2vCJpDJtyXJChdbgUcSkdRG1kOmbHM07a0q68kkbmDShWsEFkLTeYKQ9OlwZhVrU%2BDL8Xo"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=111922&min_rtt=106958&rtt_var=30032&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2847&recv_bytes=1127&delivery_rate=30528&cwnd=196&unsent_bytes=0&cid=b0b1561a33335bc2&ts=343&x=0"
2025-04-02 16:42:27 UTC	90	IN	Data Raw: 69 6d 70 6f 72 74 7b 72 20 61 73 20 6e 2c 58 20 61 73 20 48 2c 6a 20 61 73 20 65 2c 4c 20 61 73 20 4f 2c 67 20 61 73 20 73 65 2c 69 20 61 73 20 61 65 2c 75 20 61 73 20 6b 2c 6b 20 61 73 20 6e 65 2c 6c 20 61 73 20 72 65 2c 62 20 61 73 20 59 2c 42 20 61 73 20 41 2c 4a 20 Data Ascii: import{r as n,X as H,j as e,L as O,g as se,i as ae,u as k,k as ne,l as re,b as Y,B as A,J
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 61 73 20 7a 2c 63 20 61 73 20 69 65 2c 4e 20 61 73 20 4b 2c 64 20 61 73 20 58 2c 65 20 61 73 20 6c 65 2c 66 20 61 73 20 46 7d 66 72 6f 6d 22 2e 2f 69 6e 64 65 78 2d 4c 52 57 44 6c 7a 6d 46 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 63 20 61 73 20 68 2c 75 20 61 73 20 6f 65 2c 76 20 61 73 20 42 2c 67 20 61 73 20 63 65 2c 62 20 61 73 20 4a 2c 65 20 61 73 20 64 65 2c 64 20 61 73 20 6d 65 7d 66 72 6f 6d 22 2e 2f 63 6c 73 78 2d 63 62 39 73 4c 5f 79 4b 2e 6a 73 22 3b 76 61 72 20 49 3b 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 44 45 56 39 32 37 38 3d 22 64 65 76 39 32 37 38 22 7d 29 28 49 7c 7c 28 49 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 56 3d 28 29 3d 3e 28 7b 74 72 61 63 6b 45 76 65 6e 74 3a 6e 2e 75 73 65 43 61 6c 6c 62 61 63 6b 28 61 73 79 6e 63 28 73 2c 61 29 3d Data Ascii: as z,c as ie,N as K,d as X,e as le,f as F}from"./index-LRWDlzmF.js";import{c as h,u as oe,v as B,g as ce,b as J,e as de,d as me}from"./clsx-cb9sL_yK.js";var I;(function(t){t.DEV9278="dev9278"})(I\|\|(I={}));const V=()=>({trackEvent:n.useCallback(async(s,a)=
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 70 65 61 74 43 6f 75 6e 74 3a 22 69 6e 64 65 66 69 6e 69 74 65 22 7d 29 29 29 2c 44 3d 28 7b 76 61 72 69 61 6e 74 3a 74 2c 6c 6f 61 64 69 6e 67 3a 73 2c 63 68 69 6c 64 72 65 6e 3a 61 2c 63 6c 61 73 73 4e 61 6d 65 3a 72 2c 2e 2e 2e 69 7d 29 3d 3e 65 2e 6a 73 78 73 28 22 62 75 74 74 6f 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 68 28 22 69 6e 6c 69 6e 65 2d 66 6c 65 78 20 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 63 75 72 73 6f 72 2d 70 6f 69 6e 74 65 72 20 62 6f 72 64 65 72 20 72 6f 75 6e 64 65 64 2d 6d 64 20 74 65 78 74 2d 62 75 74 74 6f 6e 20 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 20 70 79 2d 6d 64 20 70 78 2d 5b 33 2e 35 72 65 6d 5d 20 73 68 61 64 6f 77 2d 32 64 70 20 74 72 61 6e 73 69 74 69 6f 6e 2d 61 6c 6c 20 Data Ascii: peatCount:"indefinite"}))),D=({variant:t,loading:s,children:a,className:r,...i})=>e.jsxs("button",{className:h("inline-flex justify-center items-center cursor-pointer border rounded-md text-button font-semibold py-md px-[3.5rem] shadow-2dp transition-all
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 43 31 32 2e 32 38 33 33 20 31 38 20 31 32 2e 35 32 30 38 20 31 37 2e 39 30 34 32 20 31 32 2e 37 31 32 35 20 31 37 2e 37 31 32 35 43 31 32 2e 39 30 34 32 20 31 37 2e 35 32 30 38 20 31 33 20 31 37 2e 32 38 33 33 20 31 33 20 31 37 43 31 33 20 31 36 2e 37 31 36 37 20 31 32 2e 39 30 34 32 20 31 36 2e 34 37 39 32 20 31 32 2e 37 31 32 35 20 31 36 2e 32 38 37 35 43 31 32 2e 35 32 30 38 20 31 36 2e 30 39 35 38 20 31 32 2e 32 38 33 33 20 31 36 20 31 32 20 31 36 43 31 31 2e 37 31 36 37 20 31 36 20 31 31 2e 34 37 39 32 20 31 36 2e 30 39 35 38 20 31 31 2e 32 38 37 35 20 31 36 2e 32 38 37 35 43 31 31 2e 30 39 35 38 20 31 36 2e 34 37 39 32 20 31 31 20 31 36 2e 37 31 36 37 20 31 31 20 31 37 43 31 31 20 31 37 2e 32 38 33 33 20 31 31 2e 30 39 35 38 20 31 37 2e 35 32 30 38 Data Ascii: C12.2833 18 12.5208 17.9042 12.7125 17.7125C12.9042 17.5208 13 17.2833 13 17C13 16.7167 12.9042 16.4792 12.7125 16.2875C12.5208 16.0958 12.2833 16 12 16C11.7167 16 11.4792 16.0958 11.2875 16.2875C11.0958 16.4792 11 16.7167 11 17C11 17.2833 11.0958 17.5208
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 3a 20 23 7b 6b 65 79 7d 2c 20 45 6e 74 65 72 22 3b 66 75 6e 63 74 69 6f 6e 20 67 65 28 74 29 7b 76 61 72 20 73 3d 28 2f 6d 61 63 20 6f 73 20 78 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3f 22 e2 8c 98 22 3a 22 43 74 72 6c 22 29 2b 22 2b 43 22 3b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 23 7b 5c 73 2a 6b 65 79 5c 73 2a 7d 2f 67 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 74 2c 73 29 7b 76 61 72 20 61 2c 72 2c 69 2c 6c 2c 6f 2c 63 2c 70 3d 21 31 3b 73 7c 7c 28 73 3d 7b 7d 29 2c 61 3d 73 2e 64 65 62 75 67 7c 7c 21 31 3b 74 72 79 7b 69 3d 68 65 28 29 2c 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 28 29 Data Ascii: : #{key}, Enter";function ge(t){var s=(/mac os x/i.test(navigator.userAgent)?"":"Ctrl")+"+C";return t.replace(/#{\skey\s}/g,s)}function ye(t,s){var a,r,i,l,o,c,p=!1;s\|\|(s={}),a=s.debug\|\|!1;try{i=he(),l=document.createRange(),o=document.getSelection()
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 28 75 29 7b 61 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 63 6f 70 79 20 75 73 69 6e 67 20 63 6c 69 70 62 6f 61 72 64 44 61 74 61 3a 20 22 2c 75 29 2c 61 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 66 61 6c 6c 69 6e 67 20 62 61 63 6b 20 74 6f 20 70 72 6f 6d 70 74 22 29 2c 72 3d 67 65 28 22 6d 65 73 73 61 67 65 22 69 6e 20 73 3f 73 2e 6d 65 73 73 61 67 65 3a 76 65 29 2c 77 69 6e 64 6f 77 2e 70 72 6f 6d 70 74 28 72 2c 74 29 7d 7d 66 69 6e 61 6c 6c 79 7b 6f 26 26 28 74 79 70 65 6f 66 20 6f 2e 72 65 6d 6f 76 65 52 61 6e 67 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6f 2e 72 65 6d 6f 76 65 52 61 6e 67 65 28 6c 29 3a 6f 2e 72 65 6d 6f 76 65 41 6c 6c 52 61 6e 67 65 73 28 29 29 2c 63 26 26 64 6f 63 75 6d 65 6e 74 2e 62 Data Ascii: (u){a&&console.error("unable to copy using clipboardData: ",u),a&&console.error("falling back to prompt"),r=ge("message"in s?s.message:ve),window.prompt(r,t)}}finally{o&&(typeof o.removeRange=="function"?o.removeRange(l):o.removeAllRanges()),c&&document.b
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 6e 2e 75 73 65 52 65 66 28 6e 75 6c 6c 29 3b 6e 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 28 28 29 3d 3e 7b 69 66 28 21 66 2e 63 75 72 72 65 6e 74 7c 7c 21 61 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 7b 63 6c 69 65 6e 74 48 65 69 67 68 74 3a 62 2c 73 63 72 6f 6c 6c 48 65 69 67 68 74 3a 45 7d 3d 66 2e 63 75 72 72 65 6e 74 3b 62 3c 45 26 26 75 3c 69 26 26 6a 28 4e 3d 3e 4e 2b 31 29 7d 2c 5b 75 2c 61 2c 69 5d 29 3b 63 6f 6e 73 74 20 77 3d 28 29 3d 3e 7b 64 28 21 30 29 2c 6f 26 26 6f 28 21 30 29 2c 78 2e 63 75 72 72 65 6e 74 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 78 2e 63 75 72 72 65 6e 74 29 2c 78 2e 63 75 72 72 65 6e 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 64 28 21 31 29 2c 5f 29 2c 50 28 61 3f 3f 22 22 29 7d 2c 79 3d 28 29 3d 3e 7b 64 Data Ascii: n.useRef(null);n.useLayoutEffect(()=>{if(!f.current\|\|!a)return;const{clientHeight:b,scrollHeight:E}=f.current;b<E&&u<i&&j(N=>N+1)},[u,a,i]);const w=()=>{d(!0),o&&o(!0),x.current&&clearTimeout(x.current),x.current=setTimeout(()=>d(!1),_),P(a??"")},y=()=>{d
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 72 3a 61 7d 7d 2c 77 65 3d 28 29 3d 3e 7b 63 6f 6e 73 74 7b 70 61 67 65 44 61 74 61 3a 74 7d 3d 6b 28 29 3b 72 65 74 75 72 6e 20 74 21 3d 6e 75 6c 6c 26 26 74 2e 70 72 69 76 61 63 79 2e 75 72 6c 3f 65 2e 6a 73 78 28 22 61 22 2c 7b 68 72 65 66 3a 74 2e 70 72 69 76 61 63 79 2e 75 72 6c 2c 74 61 72 67 65 74 3a 22 5f 62 6c 61 6e 6b 22 2c 72 65 6c 3a 22 6e 6f 72 65 66 65 72 72 65 72 22 2c 63 68 69 6c 64 72 65 6e 3a 22 50 72 69 76 61 63 79 20 70 6f 6c 69 63 79 22 7d 29 3a 74 21 3d 6e 75 6c 6c 26 26 74 2e 70 72 69 76 61 63 79 2e 63 6f 6e 74 65 6e 74 3f 65 2e 6a 73 78 28 4f 2c 7b 74 6f 3a 22 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 2c 63 68 69 6c 64 72 65 6e 3a 22 50 72 69 76 61 63 79 20 70 6f 6c 69 63 79 22 7d 29 3a 6e 75 6c 6c 7d 2c 65 65 3d 28 7b 6c 69 6e Data Ascii: r:a}},we=()=>{const{pageData:t}=k();return t!=null&&t.privacy.url?e.jsx("a",{href:t.privacy.url,target:"_blank",rel:"noreferrer",children:"Privacy policy"}):t!=null&&t.privacy.content?e.jsx(O,{to:"privacy-policy",children:"Privacy policy"}):null},ee=({lin
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 65 3a 68 28 22 6f 75 74 6c 69 6e 65 20 6f 75 74 6c 69 6e 65 2d 31 20 6f 75 74 6c 69 6e 65 2d 77 61 72 6e 69 6e 67 20 72 6f 75 6e 64 65 64 2d 73 6d 22 2c 22 62 67 2d 77 61 72 6e 69 6e 67 20 62 67 2d 6f 70 61 63 69 74 79 2d 73 75 62 74 6c 65 22 2c 22 66 6c 65 78 20 67 61 70 2d 6d 64 20 70 2d 6c 67 20 77 2d 66 69 74 22 2c 22 77 68 69 74 65 73 70 61 63 65 2d 70 72 65 2d 77 72 61 70 22 2c 74 29 2c 63 68 69 6c 64 72 65 6e 3a 5b 65 2e 6a 73 78 28 45 65 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 74 65 78 74 2d 77 61 72 6e 69 6e 67 20 66 6c 65 78 2d 6e 6f 6e 65 22 2c 72 6f 6c 65 3a 22 69 6d 67 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 57 61 72 6e 69 6e 67 22 7d 29 2c 65 2e 6a 73 78 73 28 22 64 69 76 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 65 2e 6a 73 78 28 22 73 Data Ascii: e:h("outline outline-1 outline-warning rounded-sm","bg-warning bg-opacity-subtle","flex gap-md p-lg w-fit","whitespace-pre-wrap",t),children:[e.jsx(Ee,{className:"text-warning flex-none",role:"img","aria-label":"Warning"}),e.jsxs("div",{children:[e.jsx("s
2025-04-02 16:42:27 UTC	1369	IN	Data Raw: 69 7d 29 3d 3e 65 2e 6a 73 78 73 28 22 6d 61 69 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 62 67 2d 77 68 69 74 65 20 70 2d 5b 32 34 70 78 5f 35 30 70 78 5f 32 34 70 78 5f 35 30 70 78 5d 20 66 6c 65 78 20 66 6c 65 78 2d 63 6f 6c 20 6d 64 3a 73 68 61 64 6f 77 2d 31 32 64 70 20 6d 64 3a 72 6f 75 6e 64 65 64 2d 72 2d 6c 67 20 6d 64 3a 70 2d 5b 36 35 70 78 5f 36 30 70 78 5d 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 73 3f 65 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 68 69 64 64 65 6e 20 6d 64 3a 62 6c 6f 63 6b 20 6d 62 2d 6c 67 22 2c 63 68 69 6c 64 72 65 6e 3a 73 7d 29 3a 76 6f 69 64 20 30 2c 65 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 66 6c 65 78 2d 31 22 2c 63 68 69 6c 64 72 65 6e 3a 65 2e 6a 73 78 28 72 65 Data Ascii: i})=>e.jsxs("main",{className:"bg-white p-[24px_50px_24px_50px] flex flex-col md:shadow-12dp md:rounded-r-lg md:p-[65px_60px]",children:[s?e.jsx("div",{className:"hidden md:block mb-lg",children:s}):void 0,e.jsx("div",{className:"flex-1",children:e.jsx(re