Edit tour

Windows Analysis Report
https://t.go.rac.co.uk/r/?id=hdbca1b06,4986fb17,b63dba

Overview

General Information

Sample URL:	https://t.go.rac.co.uk/r/?id=hdbca1b06,4986fb17,b63dba
Analysis ID:	1658336
Infos:

Detection

Score:	52
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected Powershell download and execute

Ask for current and new password

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

HTML body contains password input but no form action

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5980 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2024,i,3780472638815683947,13844783282416527798,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2060 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://t.go.rac.co.uk/r/?id=hdbca1b06,4986fb17,b63dba" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_198	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security

HTTP traffic detected: POST /cdn-cgi/rum? HTTP/1.1Host: www.rac.co.ukConnection: keep-aliveContent-Length: 478sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0baggage: sentry-environment=prd,sentry-release=%24npm_package_version,sentry-public_key=f01c33c32f394fe3542950332b162038,sentry-trace_id=db84c7c2f6694bea9349082ecf008627,sentry-sample_rate=0.1,sentry-sampled=falseRequest-Id: |b3af729abd554e019451ee18b7c4765e.d1a239584a7e486bsentry-trace: db84c7c2f6694bea9349082ecf008627-813a0ffa7232e7c0-0traceparent: 00-b3af729abd554e019451ee18b7c4765e-d1a239584a7e486b-01User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36content-type: application/jsonAccept: */*Origin: https://www.rac.co.ukSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.rac.co.uk/myrac?route=prize-drawAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AMCV_6797C27A57DFC4097F000101%40AdobeOrg=MCMID%7C57646075230342348791702254968590827519; nlid=dbca1b06|4986fb17; nllastdelid=4986fb17; ai_user=mV6XQBk50zNrsrQpFscPz8|2025-04-07T13:14:12.684Z; RAC_ENSIGHTEN_PRIVACY_BANNER_LOADED=1

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Mon, 07 Apr 2025 13:14:16 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Apr 2025 13:14:30 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 92c9c9d3da87ea5b-EWRCF-Cache-Status: EXPIREDCache-Control: public, max-age=14400Expires: Mon, 07 Apr 2025 17:14:30 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-Encodingx-nextjs-cache: STALEx-powered-by: Next.jsServer: cloudflarealt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Apr 2025 13:14:30 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closestrict-transport-security: max-age=31536000; includeSubDomainsCF-Cache-Status: EXPIREDExpires: Mon, 07 Apr 2025 17:14:30 GMTCache-Control: public, max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=sXnP1WhrulESKcp3t.lSSPLZD7T8Bj.TqbIWrrVaFYc-1744031670-1.0.1.1-O4HMEkvDb28p3S1pSxXd342GGysZtdM6Dp_Qm57S3TpywWU4j3b_r9voz591P4BZviX4zgF8CjmLAJ2lyn4RETmd5XGEkhU9_O_KTCBEzMpOMluu1rbceAFZ0gdpEcry4hsYHx1MUdZL20tHL9lQUbvmDDjG93ZBnq7UKy8lIjI"}],"group":"cf-csp-endpoint","max_age":86400}Content-Security-Policy-Report-Only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=sXnP1WhrulESKcp3t.lSSPLZD7T8Bj.TqbIWrrVaFYc-1744031670-1.0.1.1-O4HMEkvDb28p3S1pSxXd342GGysZtdM6Dp_Qm57S3TpywWU4j3b_r9voz591P4BZviX4zgF8CjmLAJ2lyn4RETmd5XGEkhU9_O_KTCBEzMpOMluu1rbceAFZ0gdpEcry4hsYHx1MUdZL20tHL9lQUbvmDDjG93ZBnq7UKy8lIjI; report-to cf-csp-endpointServer: cloudflareCF-RAY: 92c9c9d48a5d7a81-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Apr 2025 13:14:30 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closestrict-transport-security: max-age=31536000; includeSubDomainsCF-Cache-Status: EXPIREDExpires: Mon, 07 Apr 2025 17:14:30 GMTCache-Control: public, max-age=14400Server: cloudflareCF-RAY: 92c9c9d4a8caa6cc-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Apr 2025 13:14:30 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closestrict-transport-security: max-age=31536000; includeSubDomainsCF-Cache-Status: EXPIREDExpires: Mon, 07 Apr 2025 17:14:30 GMTCache-Control: public, max-age=14400Server: cloudflareCF-RAY: 92c9c9d49c3d4261-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Apr 2025 13:14:30 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 92c9c9d4a9506e2f-EWRCF-Cache-Status: EXPIREDCache-Control: public, max-age=14400Expires: Mon, 07 Apr 2025 17:14:30 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-Encodingx-nextjs-cache: STALEx-powered-by: Next.jsServer: cloudflarealt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Apr 2025 13:14:30 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 92c9c9d4bca67cf0-EWRCF-Cache-Status: EXPIREDCache-Control: public, max-age=14400Expires: Mon, 07 Apr 2025 17:14:30 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-Encodingx-nextjs-cache: STALEx-powered-by: Next.jsServer: cloudflarealt-svc: h3=":443"; ma=86400

Source: chromecache_156.2.dr	String found in binary or memory: http://asmjs.org
Source: chromecache_182.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_120.2.dr	String found in binary or memory: http://www.glassboxdigital.com
Source: chromecache_137.2.dr	String found in binary or memory: https://account.rac.insure-systems.co.uk/registration/newaccount
Source: chromecache_122.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_122.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_122.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_131.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_148.2.dr, chromecache_163.2.dr	String found in binary or memory: https://c2001.report.gbss.io/9agaaooi/glassbox/reporting/1a869a1c-4c4c-6b08-a226-ce1cd350941e/cls_re
Source: chromecache_109.2.dr, chromecache_207.2.dr, chromecache_151.2.dr	String found in binary or memory: https://c2001.report.gbss.io/9agaaooi/reporting/$
Source: chromecache_120.2.dr	String found in binary or memory: https://c2001.report.gbss.io/9agaaooi/reporting/eb3cf965-c6ae-73b4-247b-e6a178cb2786/cls_report
Source: chromecache_127.2.dr, chromecache_121.2.dr, chromecache_122.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_184.2.dr	String found in binary or memory: https://cdn.gbqofs.com/sv/a/
Source: chromecache_109.2.dr, chromecache_207.2.dr, chromecache_151.2.dr	String found in binary or memory: https://cdn2.gbqofs.com/rac/myrac/u/detector-dom.min.js
Source: chromecache_163.2.dr	String found in binary or memory: https://cdn2.gbqofs.com/rac/p/detector-dom.min.js
Source: chromecache_182.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_114.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_114.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_114.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_114.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_182.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_182.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.38.1/LICENSE
Source: chromecache_120.2.dr	String found in binary or memory: https://glassboxdigitalsupport.zendesk.com/agent/tickets/177964
Source: chromecache_121.2.dr	String found in binary or memory: https://google.com
Source: chromecache_121.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_182.2.dr	String found in binary or memory: https://iab.ensighten.com/v3/
Source: chromecache_109.2.dr, chromecache_207.2.dr, chromecache_151.2.dr	String found in binary or memory: https://identity.rac.co.uk/js/gigya.js?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnk
Source: chromecache_137.2.dr	String found in binary or memory: https://images.contentstack.io/v3/assets/bltab270fecbe9695fb/blt750b2cb6cb910d75/5f34f044578b8833eed
Source: chromecache_137.2.dr	String found in binary or memory: https://images.contentstack.io/v3/assets/bltab270fecbe9695fb/blt7e6d13516a049208/5e73a34c82f4cf42bbb
Source: chromecache_137.2.dr	String found in binary or memory: https://images.contentstack.io/v3/assets/bltab270fecbe9695fb/blt959c97a419efa5c0/5e8acf8f0189b754579
Source: chromecache_137.2.dr	String found in binary or memory: https://images.contentstack.io/v3/assets/bltab270fecbe9695fb/blt99d3b5b729a02220/5ec2853abab1845d392
Source: chromecache_137.2.dr	String found in binary or memory: https://images.contentstack.io/v3/assets/bltab270fecbe9695fb/bltbe8643175c0bf203/5ec3978d97b46c1911a
Source: chromecache_109.2.dr, chromecache_207.2.dr, chromecache_151.2.dr	String found in binary or memory: https://nexus.ensighten.com/rac/myracprod/Bootstrap.js
Source: chromecache_122.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_127.2.dr, chromecache_121.2.dr, chromecache_122.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/ccm/collect
Source: chromecache_127.2.dr, chromecache_121.2.dr, chromecache_122.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_201.2.dr, chromecache_130.2.dr, chromecache_175.2.dr	String found in binary or memory: https://rac.co.uk
Source: chromecache_137.2.dr	String found in binary or memory: https://rac.insure-systems.co.uk/SelfService/Security/Login/LoginRegister
Source: chromecache_207.2.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Source: chromecache_141.2.dr	String found in binary or memory: https://static1.rac.co.uk/my-rac/tick.png
Source: chromecache_127.2.dr, chromecache_121.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_127.2.dr, chromecache_121.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_131.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_131.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_127.2.dr, chromecache_121.2.dr, chromecache_122.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_182.2.dr	String found in binary or memory: https://www.ensighten.com/products/enterprise-tag-management/privacy/
Source: chromecache_156.2.dr	String found in binary or memory: https://www.glassboxdigital.com
Source: chromecache_163.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_131.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_131.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_131.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_122.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_131.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_127.2.dr, chromecache_121.2.dr, chromecache_122.2.dr	String found in binary or memory: https://www.google.com/ccm/collect
Source: chromecache_122.2.dr	String found in binary or memory: https://www.google.com/gmp/conversion;
Source: chromecache_127.2.dr	String found in binary or memory: https://www.google.com/travel/flights/click/conversion
Source: chromecache_121.2.dr, chromecache_122.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_122.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_127.2.dr, chromecache_121.2.dr, chromecache_122.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_122.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_163.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id
Source: chromecache_131.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_127.2.dr, chromecache_121.2.dr, chromecache_122.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_127.2.dr, chromecache_121.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_137.2.dr	String found in binary or memory: https://www.rac.co.uk/business/business-club-login
Source: chromecache_137.2.dr	String found in binary or memory: https://www.rac.co.uk/insurance/existing-customer
Source: chromecache_182.2.dr	String found in binary or memory: https://www.rac.co.uk/legal-information/privacy-policy/part-2/cookies-policy
Source: chromecache_200.2.dr, chromecache_163.2.dr	String found in binary or memory: https://www.rac.co.uk/myrac
Source: chromecache_137.2.dr	String found in binary or memory: https://www.rac.co.uk/reportbreakdown
Source: chromecache_127.2.dr, chromecache_121.2.dr, chromecache_122.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_127.2.dr, chromecache_121.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 142.251.35.164:443 -> 192.168.2.6:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.211.49.168:443 -> 192.168.2.6:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.211.49.168:443 -> 192.168.2.6:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.176.193:443 -> 192.168.2.6:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.15.200:443 -> 192.168.2.6:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.15.200:443 -> 192.168.2.6:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.43:443 -> 192.168.2.6:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.125:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.125:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.79.73:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.132.11:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.39:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.19.104:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.132.118:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.112:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.55:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.55:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.195.249:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.197.213.252:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.49.108:443 -> 192.168.2.6:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.6:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.232.15.196:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.232.15.196:443 -> 192.168.2.6:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.232.15.196:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.195.249:443 -> 192.168.2.6:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.55:443 -> 192.168.2.6:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.55:443 -> 192.168.2.6:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.6:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.6:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.14.200:443 -> 192.168.2.6:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.14.200:443 -> 192.168.2.6:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.6:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.14.200:443 -> 192.168.2.6:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.14.200:443 -> 192.168.2.6:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.137:443 -> 192.168.2.6:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.137:443 -> 192.168.2.6:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.14.200:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.18.104:443 -> 192.168.2.6:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.92.107.24:443 -> 192.168.2.6:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.92.107.24:443 -> 192.168.2.6:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.203.69.88:443 -> 192.168.2.6:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.231.188.235:443 -> 192.168.2.6:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.39.72:443 -> 192.168.2.6:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.6:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.98:443 -> 192.168.2.6:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.227.150.108:443 -> 192.168.2.6:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.227.150.108:443 -> 192.168.2.6:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.165.132:443 -> 192.168.2.6:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.31.155:443 -> 192.168.2.6:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.55:443 -> 192.168.2.6:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.39.196:443 -> 192.168.2.6:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.209.243.58:443 -> 192.168.2.6:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.110:443 -> 192.168.2.6:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.15.200:443 -> 192.168.2.6:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.15.200:443 -> 192.168.2.6:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.15.200:443 -> 192.168.2.6:49859 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5980_1008436340

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5980_1008436340

Jump to behavior

Source: classification engine

Classification label: mal52.phis.evad.win@25/170@80/38

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2024,i,3780472638815683947,13844783282416527798,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2060 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://t.go.rac.co.uk/r/?id=hdbca1b06,4986fb17,b63dba"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2024,i,3780472638815683947,13844783282416527798,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2060 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: dropped/chromecache_198, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Valid Accounts	Windows Management Instrumentation	1 Valid Accounts	1 Valid Accounts	1 Masquerading	1 GUI Input Capture	System Service Discovery	Remote Services	1 GUI Input Capture	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	1 Drive-by Compromise	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Process Injection	1 Valid Accounts	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Process Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://t.go.rac.co.uk/r/?id=hdbca1b06,4986fb17,b63dba	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://smetrics.rac.co.uk/b/ss/ramoracprod,ramoracstag/1/JS-2.27.0/s49434517218123?AQB=1&ndh=1&pf=1&t=7%2F3%2F2025%209%3A14%3A18%201%20240&mid=57646075230342348791702254968590827519&aamlh=7&ce=UTF-8&ns=racmotoringservices&cdp=3&pageName=rac%3Amyrac%3Alogin&g=https%3A%2F%2Fwww.rac.co.uk%2Fmyrac%2Flogin%3Froute%3Dprize-draw&c.&getTimeParting=6.3&.c&ch=my%20rac&events=event8%3D95&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&v3=D%3Dc3&c9=First%20Visit&c10=year%3D2025%20%7C%20month%3DApril%20%7C%20date%3D7%20%7C%20day%3DMonday%20%7C%20time%3D2%3A14%20PM&c11=New&c13=D%3Dv0&v13=95&c15=www.rac.co.uk&v16=D%3Dc11&c17=D%3Dv13&v35=D%3Dc10&c75=VisitorAPI%20Present&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=897&mcorgid=6797C27A57DFC4097F000101%40AdobeOrg&AQE=1	0%	Avira URL Cloud	safe
https://identity.rac.co.uk/js/gigya.js?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa	0%	Avira URL Cloud	safe
https://static1.rac.co.uk/my-rac/login.png	0%	Avira URL Cloud	safe
https://identity.rac.co.uk/gs/webSdk/Api.aspx?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa&version=latest&build=17250&serviceName=apiService	0%	Avira URL Cloud	safe
https://www.ensighten.com/products/enterprise-tag-management/privacy/	0%	Avira URL Cloud	safe
https://static1.rac.co.uk/my-rac/register.png	0%	Avira URL Cloud	safe
http://www.glassboxdigital.com	0%	Avira URL Cloud	safe
https://identity.rac.co.uk/sdk.config.get?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa&httpStatusCodes=true&ver=1744031640000	0%	Avira URL Cloud	safe
https://identity.rac.co.uk/js/gigya.js?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnk	0%	Avira URL Cloud	safe
https://identity.rac.co.uk/accounts.getScreenSets?screenSetIDs=RAC-RegistrationLogin&include=html%2Ccss%2Cjavascript%2Ctranslations%2C&lang=en&APIKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa&source=showScreenSet&sdk=js_latest&pageURL=https%3A%2F%2Fwww.rac.co.uk%2Fmyrac%2Flogin%3Froute%3Dprize-draw&sdkBuild=17250&format=json&httpStatusCodes=true	0%	Avira URL Cloud	safe
http://asmjs.org	0%	Avira URL Cloud	safe
https://o4504131318775808.ingest.sentry.io/api/4506026917429248/envelope/?sentry_key=f01c33c32f394fe3542950332b162038&sentry_version=7&sentry_client=sentry.javascript.react%2F7.118.0	0%	Avira URL Cloud	safe
https://rac.demdex.net/dest5.html?d_nsid=undefined	0%	Avira URL Cloud	safe
https://identity.rac.co.uk/js/gigya.services.plugins.base.min.js?services=gigya.services.accounts.plugins.screenSet&lang=en&version=latest	0%	Avira URL Cloud	safe
https://identity.rac.co.uk/gs/i/gm/close_x1.png	0%	Avira URL Cloud	safe
https://glassboxdigitalsupport.zendesk.com/agent/tickets/177964	0%	Avira URL Cloud	safe
https://identity.rac.co.uk/gs/sso.htm?APIKey=3_Fjktq6oDQNp_VP68WVXFHlc0lxERi1XQHq7b8uJYtu3heJGZU6RakiRA-2Iq7uLp&ssoSegment=&version=latest&build=17250	0%	Avira URL Cloud	safe
https://identity.rac.co.uk/accounts.webSdkBootstrap?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa&pageURL=https%3A%2F%2Fwww.rac.co.uk%2Fmyrac%2Flogin%3Froute%3Dprize-draw&sdk=js_latest&sdkBuild=17250&format=json	0%	Avira URL Cloud	safe
https://www.glassboxdigital.com	0%	Avira URL Cloud	safe
https://racmotoringserv.tt.omtrdc.net/rest/v1/delivery?client=racmotoringserv&sessionId=c251b1106e9e4a5e8df7d2c8279f7c82&version=2.2.0	0%	Avira URL Cloud	safe
https://static1.rac.co.uk/my-rac/tick.png	0%	Avira URL Cloud	safe
https://rac.page.link/prize-draw?	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
d2pz9khpjpljz2.cloudfront.net	18.164.116.43	true	false	high
static.cloudflareinsights.com	104.16.79.73	true	false	high
d1bmufbqxxbrqn.cloudfront.net	18.173.132.11	true	false	high
cdn2.gbqofs.com	104.18.19.104	true	false	high
rac.co.uk	104.18.15.200	true	false	high
rac.co.uk.ssl.sc.omtrdc.net	63.140.39.72	true	false	unknown
events.launchdarkly.com	18.209.243.58	true	false	high
stats.g.doubleclick.net	142.250.31.155	true	false	high
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	3.92.107.24	true	false	high
www.rac.co.uk	104.18.15.200	true	false	high
adobetarget.data.adobedc.net	63.140.39.196	true	false	high
m.sni.global.fastly.net	151.101.65.55	true	false	high
www.google.com	142.251.35.164	true	false	high
o4504131318775808.ingest.sentry.io	34.120.195.249	true	false	unknown
rac.page.link	142.250.176.193	true	false	unknown
cm.everesttech.net.akadns.net	34.231.188.235	true	false	high
rac-mkt-prod1-hk2qw-652751541.eu-west-1.elb.amazonaws.com	52.211.49.168	true	false	unknown
clientstream-ga.launchdarkly.com	15.197.213.252	true	false	high
cdn.gbqofs.com	104.18.18.104	true	false	high
k.sni.global.fastly.net	151.101.194.137	true	false	high
edge-geo.nc0.co	3.232.15.196	true	false	high
analytics-alv.google.com	216.239.38.181	true	false	high
d1fwropszq6szy.cloudfront.net	3.168.102.125	true	false	unknown
td.doubleclick.net	142.250.72.98	true	false	high
d2bk84w7zjjc1n.cloudfront.net	18.238.49.39	true	false	unknown
static1.rac.co.uk	104.18.15.200	true	false	unknown
data.privacy.ensighten.com	unknown	unknown	false	high
identity.rac.co.uk	unknown	unknown	false	unknown
cm.everesttech.net	unknown	unknown	false	high
nexus.ensighten.com	unknown	unknown	false	high
cdn.contentstack.io	unknown	unknown	false	high
doh.cq0.co	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
racmotoringserv.tt.omtrdc.net	unknown	unknown	false	unknown
clientstream.launchdarkly.com	unknown	unknown	false	high
images.contentstack.io	unknown	unknown	false	high
app.launchdarkly.com	unknown	unknown	false	high
rac.demdex.net	unknown	unknown	false	unknown
t.go.rac.co.uk	unknown	unknown	false	unknown
iab.ensighten.com	unknown	unknown	false	high
smetrics.rac.co.uk	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false		high
https://identity.rac.co.uk/accounts.getScreenSets?screenSetIDs=RAC-RegistrationLogin&include=html%2Ccss%2Cjavascript%2Ctranslations%2C&lang=en&APIKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa&source=showScreenSet&sdk=js_latest&pageURL=https%3A%2F%2Fwww.rac.co.uk%2Fmyrac%2Flogin%3Froute%3Dprize-draw&sdkBuild=17250&format=json&httpStatusCodes=true	false	Avira URL Cloud: safe	unknown
https://www.rac.co.uk/myrac/static/media/android_store.f9e9c0af1121b46766bb7572746b92be.svg	false		high
https://nexus.ensighten.com/rac/myracprod/code/6b84a10433251ee115ec41a54170f1d3.js?conditionId0=503673	false		high
https://app.launchdarkly.com/sdk/evalx/5d161ac563b5940767d737da/contexts/eyJrZXkiOiJyYWN1c2VyIiwiZW1haWwiOiJyYWN1c2VyQGVtYWlsLmNvbSIsIm5hbWUiOiJteXJhYyB1c2VyIiwiZmlyc3ROYW1lIjoibXlyYWMiLCJsYXN0TmFtZSI6InVzZXIifQ	false		high
https://www.rac.co.uk/myrac/static/media/fa-brands-400.d878b0a6a1144760244f.woff2	false		high
https://identity.rac.co.uk/js/gigya.js?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa	false	Avira URL Cloud: safe	unknown
https://images.contentstack.io/v3/assets/blt5c81b366f85d2e9d/blte746c871161ce557/5db06294e9d7526ab429e55e/buying-a-car.jpg	false		high
https://static1.rac.co.uk/my-rac/register.png	false	Avira URL Cloud: safe	unknown
https://iab.ensighten.com/v3/vendor-list.json	false		high
https://nexus.ensighten.com/rac/myracprod/code/e2b359c384b48e0d99b185ec6f9942bb.js?conditionId0=4957114	false		high
https://images.contentstack.io/v3/assets/blt5c81b366f85d2e9d/bltf289f65b1b696cb6/5db062a9347d1c6baa57be6d/news-and-advice.jpg	false		high
https://smetrics.rac.co.uk/b/ss/ramoracprod,ramoracstag/1/JS-2.27.0/s49434517218123?AQB=1&ndh=1&pf=1&t=7%2F3%2F2025%209%3A14%3A18%201%20240&mid=57646075230342348791702254968590827519&aamlh=7&ce=UTF-8&ns=racmotoringservices&cdp=3&pageName=rac%3Amyrac%3Alogin&g=https%3A%2F%2Fwww.rac.co.uk%2Fmyrac%2Flogin%3Froute%3Dprize-draw&c.&getTimeParting=6.3&.c&ch=my%20rac&events=event8%3D95&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&v3=D%3Dc3&c9=First%20Visit&c10=year%3D2025%20%7C%20month%3DApril%20%7C%20date%3D7%20%7C%20day%3DMonday%20%7C%20time%3D2%3A14%20PM&c11=New&c13=D%3Dv0&v13=95&c15=www.rac.co.uk&v16=D%3Dc11&c17=D%3Dv13&v35=D%3Dc10&c75=VisitorAPI%20Present&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=897&mcorgid=6797C27A57DFC4097F000101%40AdobeOrg&AQE=1	false	Avira URL Cloud: safe	unknown
https://cdn.contentstack.io/v3/content_types/footer/entries/?include[]=footeritems&include[]=sociallinks&include[]=columns.items&locale=en&limit=1&environment=production	false		high
https://cdn.contentstack.io/v3/content_types/myraclandingpages/entries/?include[]=componentitems&include[]=componentitems.stack.faqs&locale=en&limit=1&environment=production	false		high
https://cdn.contentstack.io/v3/content_types/header/entries/?include[]=menuitems&include[]=menuitems.menusubitems&locale=en&limit=1&environment=production	false		high
https://events.launchdarkly.com/events/diagnostic/5d161ac563b5940767d737da	false		high
https://www.rac.co.uk/cdn-cgi/rum?	false		high
https://nexus.ensighten.com/rac/myracprod/code/b15e718c687ee6fe7f34d2443e6eb92d.js?conditionId0=513891	false		high
https://www.rac.co.uk/myrac/MyRacCF/app_themes/components/pagetemplates/web2master/fonts/dinroundot.woff	false		high
https://nexus.ensighten.com/rac/myracprod/code/d43015f174492dae780e37393a8ceefd.js?conditionId0=455106	false		high
https://static1.rac.co.uk/my-rac/login.png	false	Avira URL Cloud: safe	unknown
http://c.pki.goog/r/gsr1.crl	false		high
https://dpm.demdex.net/ibs:dpid=411&dpuuid=Z-PPrAAAAMY1gAOH	false		high
https://nexus.ensighten.com/error/e.gif?msg=%22TypeError%3A%20Cannot%20read%20properties%20of%20undefined%20(reading%20%27_fields%27)%22%20error%20caught%20in%20Data%20Definition%20extractor%3A%20Rac%20MCMID%2C%20ID%3A68508.&lnn=-1&fn=&cid=709&client=rac&publishPath=myracprod&rid=-1&did=-1&errorName=DataDefinitionException	false		high
https://cdn2.gbqofs.com/rac/myrac/u/detector-dom.min.js	false		high
https://identity.rac.co.uk/sdk.config.get?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa&httpStatusCodes=true&ver=1744031640000	false	Avira URL Cloud: safe	unknown
https://cdn2.gbqofs.com/rac/p/config.js	false		high
https://www.rac.co.uk/myrac?route=prize-draw	false		high
https://images.contentstack.io/v3/assets/blt5c81b366f85d2e9d/blt356acadc11835740/5db0629456458c6b3fc17565/car-insurance.jpg	false		high
https://nexus.ensighten.com/rac/myracprod/code/b13fe902c75d8d69abee2bc361a78265.js?conditionId0=423014	false		high
https://cdn2.gbqofs.com/rac/p/detector-dom.min.js	false		high
https://images.contentstack.io/v3/assets/blt5c81b366f85d2e9d/blt2c9a6c6ef3baa893/6332e61a8076874bc1dcd25c/CRS-2291_SMR_CarCare_TopNav_376x110.jpg	false		high
https://cdn.contentstack.io/v3/content_types/leftnavigationmenus/entries/?query=%7B%22title%22%3A%22Anonymous%20Users%20Left%20Navigation%22%7D&include[]=menuitems&include[]=menuitems.menusubitems&locale=en&limit=1&environment=production	false		high
https://nexus.ensighten.com/rac/myracprod/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/rac/myracprod/code/&publishedOn=Fri%20Mar%2021%2016:40:36%20GMT%202025&ClientID=709&PageID=https%3A%2F%2Fwww.rac.co.uk%2Fmyrac%3Froute%3Dprize-draw	false		high
https://nexus.ensighten.com/rac/myracprod/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/rac/myracprod/code/&publishedOn=Fri%20Mar%2021%2016:40:36%20GMT%202025&ClientID=709&PageID=https%3A%2F%2Fwww.rac.co.uk%2Fmyrac%2Flogin%3Froute%3Dprize-draw	false		high
https://www.rac.co.uk/app_themes/components/pagetemplates/web2master/images/RACLogo.png	false		high
https://www.rac.co.uk/myrac/login?route=prize-draw	false		high
https://www.rac.co.uk/myrac/MyRacCF/app_themes/components/pagetemplates/web2master/fonts/dinroundot-medium.woff	false		high
https://identity.rac.co.uk/gs/webSdk/Api.aspx?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa&version=latest&build=17250&serviceName=apiService	false	Avira URL Cloud: safe	unknown
https://rac.demdex.net/dest5.html?d_nsid=undefined	false	Avira URL Cloud: safe	unknown
https://www.rac.co.uk/myrac/static/media/chevron-right-white-narrow.fe9b1828c9226f9bae84.svg	false		high
https://www.rac.co.uk/myrac/static/media/hazard_triangle.4d1bca6a446c12df5e3f953205298144.svg	false		high
https://www.rac.co.uk/myrac/static/js/main.390a2188.js	false		high
https://www.rac.co.uk/fonts/DINRoundOTW05-Medium.woff2	false		high
https://www.rac.co.uk/myrac/static/media/myrac.7472b6fb78863110eb537be26f3cd043.svg	false		high
https://clientstream.launchdarkly.com/eval/5d161ac563b5940767d737da/eyJrZXkiOiJyYWN1c2VyIiwiZW1haWwiOiJyYWN1c2VyQGVtYWlsLmNvbSIsIm5hbWUiOiJteXJhYyB1c2VyIiwiZmlyc3ROYW1lIjoibXlyYWMiLCJsYXN0TmFtZSI6InVzZXIifQ	false		high
https://events.launchdarkly.com/events/bulk/5d161ac563b5940767d737da	false		high
https://images.contentstack.io/v3/assets/bltab270fecbe9695fb/blt99d3b5b729a02220/5ec2853abab1845d392de8e4/rac_family_breakdown_mobile.jpg	false		high
https://identity.rac.co.uk/js/gigya.services.plugins.base.min.js?services=gigya.services.accounts.plugins.screenSet&lang=en&version=latest	false	Avira URL Cloud: safe	unknown
http://c.pki.goog/r/r4.crl	false		high
https://o4504131318775808.ingest.sentry.io/api/4506026917429248/envelope/?sentry_key=f01c33c32f394fe3542950332b162038&sentry_version=7&sentry_client=sentry.javascript.react%2F7.118.0	false	Avira URL Cloud: safe	unknown
https://www.rac.co.uk/myrac/MyRacCF/app_themes/components/pagetemplates/web2master/css/rac.min.css	false		high
https://www.rac.co.uk/myrac/static/media/FrederickSimmsBold.ec3db95cd615496bc820.woff	false		high
https://cm.everesttech.net/cm/dd?d_uuid=57164591691348759641672121288078857532	false		high
https://identity.rac.co.uk/gs/sso.htm?APIKey=3_Fjktq6oDQNp_VP68WVXFHlc0lxERi1XQHq7b8uJYtu3heJGZU6RakiRA-2Iq7uLp&ssoSegment=&version=latest&build=17250	false	Avira URL Cloud: safe	unknown
https://identity.rac.co.uk/gs/i/gm/close_x1.png	false	Avira URL Cloud: safe	unknown
https://identity.rac.co.uk/accounts.webSdkBootstrap?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa&pageURL=https%3A%2F%2Fwww.rac.co.uk%2Fmyrac%2Flogin%3Froute%3Dprize-draw&sdk=js_latest&sdkBuild=17250&format=json	false	Avira URL Cloud: safe	unknown
https://racmotoringserv.tt.omtrdc.net/rest/v1/delivery?client=racmotoringserv&sessionId=c251b1106e9e4a5e8df7d2c8279f7c82&version=2.2.0	false	Avira URL Cloud: safe	unknown
https://static1.rac.co.uk/my-rac/tick.png	false	Avira URL Cloud: safe	unknown
https://images.contentstack.io/v3/assets/blt5c81b366f85d2e9d/blt2baa200161a71d69/607ee7f803ce953dac756084/RACLogo.png	false		high
https://www.rac.co.uk/myrac/static/media/apple_store.44ce655c4b578e78d43fdc02da7dbdf9.svg	false		high
https://rac.co.uk/myrac?route=prize-draw	false		high
https://nexus.ensighten.com/rac/myracprod/Bootstrap.js	false		high
https://doh.cq0.co/resolve?type=PTR&name=www.rac.co.uk.query.publicsuffix.zone	false		high
https://images.contentstack.io/v3/assets/blt5c81b366f85d2e9d/blt71ca94f308157c47/5d70bc36470b460a68ae30bb/insuranceadvert.png	false		high
https://rac.page.link/prize-draw?	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://images.contentstack.io/v3/assets/bltab270fecbe9695fb/blt7e6d13516a049208/5e73a34c82f4cf42bbb	chromecache_137.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_127.2.dr, chromecache_121.2.dr	false		high
https://github.com/zloirock/core-js	chromecache_182.2.dr	false		high
https://rac.co.uk	chromecache_201.2.dr, chromecache_130.2.dr, chromecache_175.2.dr	false		high
https://www.rac.co.uk/myrac	chromecache_200.2.dr, chromecache_163.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_131.2.dr	false		high
https://www.youtube.com	chromecache_127.2.dr, chromecache_121.2.dr, chromecache_122.2.dr	false		high
https://fontawesome.com	chromecache_114.2.dr	false		high
https://www.google.com	chromecache_122.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_127.2.dr, chromecache_121.2.dr	false		high
https://identity.rac.co.uk/js/gigya.js?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnk	chromecache_109.2.dr, chromecache_207.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_131.2.dr	false		high
https://www.google.com/gmp/conversion;	chromecache_122.2.dr	false		high
https://www.ensighten.com/products/enterprise-tag-management/privacy/	chromecache_182.2.dr	false	Avira URL Cloud: safe	unknown
http://www.glassboxdigital.com	chromecache_120.2.dr	false	Avira URL Cloud: safe	unknown
https://iab.ensighten.com/v3/	chromecache_182.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_127.2.dr, chromecache_121.2.dr, chromecache_122.2.dr	false		high
https://github.com/zloirock/core-js/blob/v3.38.1/LICENSE	chromecache_182.2.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_131.2.dr	false		high
https://c2001.report.gbss.io/9agaaooi/reporting/$	chromecache_109.2.dr, chromecache_207.2.dr, chromecache_151.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_127.2.dr, chromecache_121.2.dr	false		high
https://www.google.com/ccm/collect	chromecache_127.2.dr, chromecache_121.2.dr, chromecache_122.2.dr	false		high
https://www.rac.co.uk/insurance/existing-customer	chromecache_137.2.dr	false		high
http://asmjs.org	chromecache_156.2.dr	false	Avira URL Cloud: safe	unknown
https://images.contentstack.io/v3/assets/bltab270fecbe9695fb/blt959c97a419efa5c0/5e8acf8f0189b754579	chromecache_137.2.dr	false		high
https://glassboxdigitalsupport.zendesk.com/agent/tickets/177964	chromecache_120.2.dr	false	Avira URL Cloud: safe	unknown
https://www.glassboxdigital.com	chromecache_156.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com/license/free	chromecache_114.2.dr	false		high
https://www.google.com/travel/flights/click/conversion	chromecache_127.2.dr	false		high
https://www.rac.co.uk/legal-information/privacy-policy/part-2/cookies-policy	chromecache_182.2.dr	false		high
https://c2001.report.gbss.io/9agaaooi/reporting/eb3cf965-c6ae-73b4-247b-e6a178cb2786/cls_report	chromecache_120.2.dr	false		high
https://rac.insure-systems.co.uk/SelfService/Security/Login/LoginRegister	chromecache_137.2.dr	false		high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_114.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.19.104	cdn2.gbqofs.com	United States	13335	CLOUDFLARENETUS	false
104.18.14.200	unknown	United States	13335	CLOUDFLARENETUS	false
54.227.150.108	unknown	United States	14618	AMAZON-AESUS	false
18.173.132.118	unknown	United States	3	MIT-GATEWAYSUS	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
151.101.129.55	unknown	United States	54113	FASTLYUS	false
63.140.39.196	adobetarget.data.adobedc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
63.140.39.72	rac.co.uk.ssl.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
18.164.116.43	d2pz9khpjpljz2.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
18.238.49.39	d2bk84w7zjjc1n.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.18.104	cdn.gbqofs.com	United States	13335	CLOUDFLARENETUS	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
172.217.165.132	unknown	United States	15169	GOOGLEUS	false
52.211.49.168	rac-mkt-prod1-hk2qw-652751541.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
63.140.38.110	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
3.168.102.112	unknown	United States	16509	AMAZON-02US	false
52.203.69.88	unknown	United States	14618	AMAZON-AESUS	false
3.232.15.196	edge-geo.nc0.co	United States	14618	AMAZON-AESUS	false
63.140.38.55	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
104.18.15.200	rac.co.uk	United States	13335	CLOUDFLARENETUS	false
142.250.72.98	td.doubleclick.net	United States	15169	GOOGLEUS	false
3.92.107.24	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.209.243.58	events.launchdarkly.com	United States	14618	AMAZON-AESUS	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
3.168.102.125	d1fwropszq6szy.cloudfront.net	United States	16509	AMAZON-02US	false
15.197.213.252	clientstream-ga.launchdarkly.com	United States	7430	TANDEMUS	false
151.101.65.55	m.sni.global.fastly.net	United States	54113	FASTLYUS	false
151.101.194.137	k.sni.global.fastly.net	United States	54113	FASTLYUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
142.250.31.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.173.132.11	d1bmufbqxxbrqn.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
34.231.188.235	cm.everesttech.net.akadns.net	United States	14618	AMAZON-AESUS	false
18.238.49.108	unknown	United States	16509	AMAZON-02US	false
142.251.35.164	www.google.com	United States	15169	GOOGLEUS	false
34.120.195.249	o4504131318775808.ingest.sentry.io	United States	15169	GOOGLEUS	false
142.250.176.193	rac.page.link	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1658336
Start date and time:	2025-04-07 15:13:00 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://t.go.rac.co.uk/r/?id=hdbca1b06,4986fb17,b63dba
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.evad.win@25/170@80/38

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.80.110, 142.250.65.195, 142.251.40.206, 172.253.115.84, 142.250.80.78, 142.250.81.238, 142.250.65.206, 23.219.161.71, 142.251.41.14, 142.250.65.232, 142.251.40.238, 142.251.35.174, 142.250.65.174, 142.250.80.10, 142.250.81.234, 142.250.65.234, 142.250.176.202, 142.250.80.42, 142.250.65.202, 142.251.41.10, 172.217.165.138, 142.250.80.74, 142.250.80.106, 142.251.40.106, 142.250.65.170, 142.251.35.170, 142.251.32.106, 142.251.40.234, 142.251.40.202, 142.251.40.168, 172.217.165.136, 142.250.65.163, 172.217.165.142, 142.250.72.99, 172.253.62.84, 142.250.81.232, 184.31.69.3, 20.109.210.53
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, c.pki.goog, www.google-analytics.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://t.go.rac.co.uk/r/?id=hdbca1b06,4986fb17,b63dba

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-3K2END2NPT&gacid=123425760.1744031658&gtm=45je5430h2v874441660za200zb9190149569&dma=0&gcs=G111&gcd=13t3t3t3t5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102788824~102803279~102813109~102887800~102926062~102975949~103016951~103021830~103027016&z=1383237516
Preview:	<html></html>

Source: https://www.rac.co.uk/myrac/login?route=prize-draw	HTTP Parser: Two password fields found
Source: https://www.rac.co.uk/myrac/login?route=prize-draw	HTTP Parser: Two password fields found

Source: https://www.rac.co.uk/myrac/login?route=prize-draw	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-3K2END2NPT&gacid=123425760.1744031658&gtm=45je5430h2v874441660za200zb9190149569&dma=0&gcs=G111&gcd=13t3t3t3t5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102788824~102803279~102813109~102887800~102926062~102975949~103016951~103021830~103027016&z=1383237516
Source: https://www.rac.co.uk/myrac/login?route=prize-draw	HTTP Parser: Iframe src: https://rac.demdex.net/dest5.html?d_nsid=undefined#https%3A%2F%2Fwww.rac.co.uk
Source: https://www.rac.co.uk/myrac/login?route=prize-draw	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-3K2END2NPT&gacid=123425760.1744031658&gtm=45je5430h2v874441660za200zb9190149569&dma=0&gcs=G111&gcd=13t3t3t3t5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102788824~102803279~102813109~102887800~102926062~102975949~103016951~103021830~103027016&z=1383237516
Source: https://www.rac.co.uk/myrac/login?route=prize-draw	HTTP Parser: Iframe src: https://rac.demdex.net/dest5.html?d_nsid=undefined#https%3A%2F%2Fwww.rac.co.uk

Source: https://www.rac.co.uk/myrac/login?route=prize-draw	HTTP Parser: No <meta name="author".. found
Source: https://www.rac.co.uk/myrac/login?route=prize-draw	HTTP Parser: No <meta name="author".. found

Source: https://www.rac.co.uk/myrac/login?route=prize-draw	HTTP Parser: No <meta name="copyright".. found
Source: https://www.rac.co.uk/myrac/login?route=prize-draw	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: t.go.rac.co.uk to https://rac.page.link/prize-draw?
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: rac.page.link to https://rac.co.uk/myrac?route=prize-draw

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_121.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=v;return t},Vk:function(){e=qb()},Md:function(){d()}}};var $b=va(["data-gtm-yt-inspected-"]),AH=["www.youtube.com","www.youtube-nocookie.com"],BH,CH=!1; equals www.youtube.com (Youtube)
Source: chromecache_127.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=v;return t},Vk:function(){e=qb()},Od:function(){d()}}};var $b=va(["data-gtm-yt-inspected-"]),EH=["www.youtube.com","www.youtube-nocookie.com"],FH,GH=!1; equals www.youtube.com (Youtube)
Source: chromecache_127.2.dr	String found in binary or memory: R(b)\|\|Jm(a,b)},b)},Kt=function(){return[L.m.R,L.m.T]},Lt=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,Mt=/^www\.googleadservices\.com$/,Qt=/^gad_source[_=](\d+)$/;function Vt(){return so("dedupe_gclid",function(){return nr()})};var Wt=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,Xt=/^www.googleadservices.com$/;function Yt(a){a\|\|(a=Zt());return a.fo?!1:a.fn\|\|a.gn\|\|a.kn\|\|a.hn\|\|a.tf\|\|a.Pm\|\|a.jn\|\|a.Um?!0:!1}function Zt(){var a={},b=Tr(!0);a.fo=!!b._up;var c=it();a.fn=c.aw!==void 0;a.gn=c.dc!==void 0;a.kn=c.wbraid!==void 0;a.hn=c.gbraid!==void 0;a.jn=c.gclsrc==="aw.ds";a.tf=It().tf;var d=A.referrer?ek(kk(A.referrer),"host"):"";a.Um=Wt.test(d);a.Pm=Xt.test(d);return a};var $t=["https://www.google.com","https://www.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_121.2.dr, chromecache_122.2.dr	String found in binary or memory: S(b)\|\|Im(a,b)},b)},Jt=function(){return[L.m.R,L.m.T]},Kt=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,Lt=/^www\.googleadservices\.com$/,Pt=/^gad_source[_=](\d+)$/;function Ut(){return ro("dedupe_gclid",function(){return mr()})};var Vt=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,Wt=/^www.googleadservices.com$/;function Xt(a){a\|\|(a=Yt());return a.fo?!1:a.fn\|\|a.gn\|\|a.kn\|\|a.hn\|\|a.rf\|\|a.Pm\|\|a.jn\|\|a.Um?!0:!1}function Yt(){var a={},b=Sr(!0);a.fo=!!b._up;var c=ht();a.fn=c.aw!==void 0;a.gn=c.dc!==void 0;a.kn=c.wbraid!==void 0;a.hn=c.gbraid!==void 0;a.jn=c.gclsrc==="aw.ds";a.rf=Ht().rf;var d=A.referrer?dk(jk(A.referrer),"host"):"";a.Um=Vt.test(d);a.Pm=Wt.test(d);return a};var Zt=["https://www.google.com","https://www.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_121.2.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Vh:f,Th:g,Uh:k,Fi:m,Gi:n,qf:p,Rb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var v=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){v&&v();d()};C(function(){for(var u=A.getElementsByTagName("script"),t=u.length,w=0;w<t;w++){var x=u[w].getAttribute("src");if(LH(x,"iframe_api")\|\|LH(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,D=0;D<B;D++)if(!CH&&JH(y[D],q.qf))return sc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_127.2.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Vh:f,Th:g,Uh:k,Fi:m,Gi:n,rf:p,Rb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var v=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){v&&v();d()};D(function(){for(var u=A.getElementsByTagName("script"),t=u.length,w=0;w<t;w++){var x=u[w].getAttribute("src");if(PH(x,"iframe_api")\|\|PH(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,C=0;C<B;C++)if(!GH&&NH(y[C],q.rf))return sc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_122.2.dr	String found in binary or memory: return f}yH.K="internal.enableAutoEventOnTimer";var $b=va(["data-gtm-yt-inspected-"]),AH=["www.youtube.com","www.youtube-nocookie.com"],BH,CH=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: t.go.rac.co.uk
Source: global traffic	DNS traffic detected: DNS query: rac.page.link
Source: global traffic	DNS traffic detected: DNS query: rac.co.uk
Source: global traffic	DNS traffic detected: DNS query: www.rac.co.uk
Source: global traffic	DNS traffic detected: DNS query: identity.rac.co.uk
Source: global traffic	DNS traffic detected: DNS query: nexus.ensighten.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: doh.cq0.co
Source: global traffic	DNS traffic detected: DNS query: iab.ensighten.com
Source: global traffic	DNS traffic detected: DNS query: cdn2.gbqofs.com
Source: global traffic	DNS traffic detected: DNS query: app.launchdarkly.com
Source: global traffic	DNS traffic detected: DNS query: o4504131318775808.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: cdn.contentstack.io
Source: global traffic	DNS traffic detected: DNS query: clientstream.launchdarkly.com
Source: global traffic	DNS traffic detected: DNS query: images.contentstack.io
Source: global traffic	DNS traffic detected: DNS query: data.privacy.ensighten.com
Source: global traffic	DNS traffic detected: DNS query: cdn.gbqofs.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: rac.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: smetrics.rac.co.uk
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: racmotoringserv.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: events.launchdarkly.com
Source: global traffic	DNS traffic detected: DNS query: static1.rac.co.uk

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 7, 2025 15:14:01.972162962 CEST	53	58388	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:02.002243996 CEST	53	57294	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:02.880151033 CEST	53	64950	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:02.913639069 CEST	53	52210	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:05.612581968 CEST	50328	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:05.612956047 CEST	64694	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:05.710812092 CEST	53	64694	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:05.710864067 CEST	53	50328	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:06.959537029 CEST	62749	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:06.962658882 CEST	49438	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:07.068520069 CEST	53	49438	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:07.135622025 CEST	53	62749	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:07.843981981 CEST	63060	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:07.844188929 CEST	56813	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:07.950761080 CEST	53	56813	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:07.950860977 CEST	53	63060	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:08.537437916 CEST	54131	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:08.537682056 CEST	60189	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:08.637773037 CEST	53	54131	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:08.638216972 CEST	53	60189	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:09.689806938 CEST	55095	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:09.690088987 CEST	59772	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:09.790615082 CEST	53	59772	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:09.792340040 CEST	53	55095	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:10.829262018 CEST	62359	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:10.829595089 CEST	53286	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:10.830780029 CEST	54155	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:10.830981970 CEST	53139	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:10.930567026 CEST	53	53139	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:10.931304932 CEST	53	54155	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:10.972242117 CEST	53	62359	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:10.991688013 CEST	53	53286	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:12.260687113 CEST	60889	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:12.260854959 CEST	59025	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:12.357271910 CEST	53285	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:12.357467890 CEST	51684	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:12.360686064 CEST	53	60889	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:12.360703945 CEST	53	59025	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:12.370316982 CEST	57668	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:12.370482922 CEST	52174	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:12.459275007 CEST	53	53285	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:12.459748983 CEST	53	51684	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:12.474391937 CEST	53	52174	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:12.481153965 CEST	53	57668	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:12.855856895 CEST	50409	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:12.856050014 CEST	62814	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:12.955589056 CEST	53	50409	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:12.958848953 CEST	53	62814	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:13.241298914 CEST	52509	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:13.241461992 CEST	55022	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:13.243087053 CEST	62075	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:13.243311882 CEST	49923	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:13.344540119 CEST	53	55022	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:13.344567060 CEST	53	52509	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:13.378515959 CEST	53	49923	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:13.390731096 CEST	53	62075	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:13.483599901 CEST	50193	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:13.483815908 CEST	50350	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:13.583184958 CEST	53	50193	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:13.584233999 CEST	53	50350	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:13.680247068 CEST	65324	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:13.680433989 CEST	53595	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:13.684036016 CEST	62472	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:13.684257984 CEST	61153	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:13.784739017 CEST	53	62472	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:13.786420107 CEST	53	61153	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:13.855458975 CEST	53	53595	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:13.871731043 CEST	53	65324	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:14.740984917 CEST	53035	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:14.741251945 CEST	51191	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:14.842964888 CEST	53	53035	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:14.843209982 CEST	53	51191	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:14.995253086 CEST	62293	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:14.995560884 CEST	58368	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:15.109910965 CEST	53	62293	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.129324913 CEST	53	58368	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.151731014 CEST	60279	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:15.151870012 CEST	64956	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:15.254000902 CEST	53	64956	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.255227089 CEST	53	60279	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.278851986 CEST	52308	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:15.279004097 CEST	65098	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:15.379750967 CEST	53	52308	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.380141020 CEST	53	65098	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.657061100 CEST	51728	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:15.658272028 CEST	57102	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:15.700095892 CEST	59025	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:15.700391054 CEST	51226	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:15.702157021 CEST	57419	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:15.702311039 CEST	53706	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:15.718801022 CEST	56627	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:15.718967915 CEST	59597	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:15.759474039 CEST	53	51728	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.780173063 CEST	53	57102	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.799258947 CEST	53	59025	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.799974918 CEST	53	51226	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.805643082 CEST	53	57419	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.805675983 CEST	53	53706	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.818739891 CEST	53	56627	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.819384098 CEST	53	59597	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:15.905993938 CEST	53	61747	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:16.350167036 CEST	60398	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:16.350331068 CEST	54204	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:16.451422930 CEST	53	60398	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:16.451703072 CEST	53	54204	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:17.796772957 CEST	64668	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:17.797210932 CEST	52395	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:17.866698027 CEST	53	60800	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:17.894643068 CEST	53	64668	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:17.895714998 CEST	53	52395	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:18.958040953 CEST	63592	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:18.958215952 CEST	51857	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:19.054917097 CEST	53	51857	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:19.055551052 CEST	53	63592	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:19.180237055 CEST	53	58531	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:20.068797112 CEST	52533	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.069082022 CEST	58685	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.069379091 CEST	60802	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.069983006 CEST	61038	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.166649103 CEST	53	59485	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:20.167351007 CEST	53	60802	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:20.168128014 CEST	53	61038	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:20.178672075 CEST	53	52533	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:20.232908010 CEST	53	58685	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:20.240426064 CEST	60111	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.240597963 CEST	65384	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.343162060 CEST	53	60111	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:20.344836950 CEST	53	65384	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:20.443605900 CEST	56303	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.444025040 CEST	54292	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.479422092 CEST	60216	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.479620934 CEST	64952	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.541137934 CEST	53	56303	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:20.541965961 CEST	53	54292	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:20.577785015 CEST	53	64952	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:20.578270912 CEST	53	60216	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:20.925311089 CEST	59777	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.925781012 CEST	56385	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.968173981 CEST	65522	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.968756914 CEST	50087	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.970762968 CEST	61911	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:20.970999002 CEST	62452	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:21.022852898 CEST	53	56385	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:21.023746014 CEST	53	59777	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:21.068520069 CEST	53	65522	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:21.069128990 CEST	53	50087	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:21.072216034 CEST	53	61911	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:21.072285891 CEST	53	62452	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:21.145873070 CEST	49630	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:21.146020889 CEST	55929	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:21.253102064 CEST	53	49630	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:21.255454063 CEST	53	55929	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:21.933991909 CEST	53542	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:21.935271978 CEST	52057	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:21.936656952 CEST	59711	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:21.937117100 CEST	55356	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:22.041321993 CEST	53	59711	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:22.041351080 CEST	53	55356	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:22.042829037 CEST	53	52057	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:22.044282913 CEST	53	53542	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:22.723793983 CEST	65363	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:22.724037886 CEST	54884	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:22.827991009 CEST	53	65363	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:22.853574038 CEST	53	54884	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:30.019323111 CEST	62446	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:30.019484997 CEST	65113	53	192.168.2.6	1.1.1.1
Apr 7, 2025 15:14:30.121031046 CEST	53	65113	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:30.121962070 CEST	53	62446	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:30.250787973 CEST	53	57436	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:39.180460930 CEST	53	58501	1.1.1.1	192.168.2.6
Apr 7, 2025 15:14:58.898869038 CEST	138	138	192.168.2.6	192.168.2.255
Apr 7, 2025 15:15:01.433449030 CEST	53	50138	1.1.1.1	192.168.2.6
Apr 7, 2025 15:15:01.757507086 CEST	53	50948	1.1.1.1	192.168.2.6
Apr 7, 2025 15:15:03.757939100 CEST	53	62480	1.1.1.1	192.168.2.6
Apr 7, 2025 15:15:04.185529947 CEST	53	51677	1.1.1.1	192.168.2.6

Timestamp	Bytes transferred	Direction	Data
Apr 7, 2025 15:14:16.143409967 CEST	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 7, 2025 15:14:16.239475012 CEST	221	IN	HTTP/1.1 304 Not Modified Date: Mon, 07 Apr 2025 13:13:36 GMT Expires: Mon, 07 Apr 2025 14:03:36 GMT Age: 40 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Apr 7, 2025 15:14:16.319334030 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 7, 2025 15:14:16.417541981 CEST	1243	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="cacerts" Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]} Content-Length: 530 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 07 Apr 2025 12:37:11 GMT Expires: Mon, 07 Apr 2025 13:27:11 GMT Cache-Control: public, max-age=3000 Age: 2225 Last-Modified: Thu, 03 Apr 2025 14:18:00 GMT Content-Type: application/pkix-crl Vary: Accept-Encoding Data Raw: 30 82 02 0e 30 82 01 93 02 01 01 30 0a 06 08 2a 86 48 ce 3d 04 03 03 30 47 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 22 30 20 06 03 55 04 0a 13 19 47 6f 6f 67 6c 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 20 4c 4c 43 31 14 30 12 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 34 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 17 0d 32 36 30 32 32 38 30 37 35 39 35 39 5a 30 81 e9 30 2f 02 10 6e 47 a9 ce 4f 46 c2 3d e2 49 ea cc 38 94 53 73 17 0d 31 39 30 39 33 30 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 f0 9c 5b 70 05 a6 dc 86 e2 f9 9e f3 17 0d 32 30 30 31 33 31 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 fe a5 81 44 7e 3b fd 3b b8 1c 24 98 17 0d 32 33 30 36 31 33 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 16 68 25 e1 70 04 40 61 24 91 f5 40 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 00 8e b2 58 e7 b5 94 0c 1f f9 00 44 17 0d 32 35 30 [TRUNCATED] Data Ascii: 000H=0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R4250403080000Z260228075959Z00/nGOF=I8Ss190930000000Z00U0,[p200131000000Z00U0,D~;;$230613000000Z00U0,h%p@a$@250403080000Z00U0,XD250403080000Z00U/0-0U0U#0LtI6>j0H=i0f1>2en:IN@g=;bQZ~`NX1?^4y[$\4{;$zDeU6O

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:07 UTC	695	OUT	GET /r/?id=hdbca1b06,4986fb17,b63dba HTTP/1.1 Host: t.go.rac.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:14:07 UTC	612	IN	HTTP/1.1 302 Found Date: Mon, 07 Apr 2025 13:14:07 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 17 Connection: close Server: Apache X-Robots-Tag: noindex P3P: CP="CAO DSP COR CURa DEVa TAIa OUR BUS IND UNI COM NAV" Location: https://rac.page.link/prize-draw? Set-Cookie: AMCV_6797C27A57DFC4097F000101%40AdobeOrg=MCMID%7C57646075230342348791702254968590827519; Domain=rac.co.uk; Path=/; Expires=Sat, 02-May-2026 13:14:07 GMT Set-Cookie: nlid=dbca1b06\|4986fb17; Domain=rac.co.uk; Path=/ Set-Cookie: nllastdelid=4986fb17; Domain=rac.co.uk; Path=/; Expires=Sat, 02-May-2026 13:14:07 GMT
2025-04-07 13:14:07 UTC	17	IN	Data Raw: 54 65 6d 70 6f 72 61 72 69 6c 79 20 6d 6f 76 65 64 Data Ascii: Temporarily moved

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:08 UTC	674	OUT	GET /prize-draw? HTTP/1.1 Host: rac.page.link Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:14:08 UTC	1646	IN	HTTP/1.1 302 Found Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 07 Apr 2025 13:14:08 GMT Location: https://rac.co.uk/myrac?route=prize-draw Cross-Origin-Opener-Policy: unsafe-none Content-Security-Policy: script-src 'report-sample' 'nonce-PkrhSxayiRPzv5D6R0i8xg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: same-site Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:09 UTC	824	OUT	GET /myrac?route=prize-draw HTTP/1.1 Host: rac.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AMCV_6797C27A57DFC4097F000101%40AdobeOrg=MCMID%7C57646075230342348791702254968590827519; nlid=dbca1b06\|4986fb17; nllastdelid=4986fb17
2025-04-07 13:14:09 UTC	341	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 07 Apr 2025 13:14:09 GMT Content-Type: text/html Content-Length: 167 Connection: close Cache-Control: max-age=3600 Expires: Mon, 07 Apr 2025 14:14:09 GMT Location: https://www.rac.co.uk/myrac?route=prize-draw Server: cloudflare CF-RAY: 92c9c95228bea6cc-EWR alt-svc: h3=":443"; ma=86400
2025-04-07 13:14:09 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:10 UTC	828	OUT	GET /myrac?route=prize-draw HTTP/1.1 Host: www.rac.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AMCV_6797C27A57DFC4097F000101%40AdobeOrg=MCMID%7C57646075230342348791702254968590827519; nlid=dbca1b06\|4986fb17; nllastdelid=4986fb17
2025-04-07 13:14:10 UTC	433	IN	HTTP/1.1 200 OK Date: Mon, 07 Apr 2025 13:14:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 92c9c955acc7c32b-EWR CF-Cache-Status: DYNAMIC Content-Disposition: inline; filename="index.html" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Server-Timing: cfCacheStatus;desc="DYNAMIC" Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-04-07 13:14:10 UTC	1369	IN	Data Raw: 37 36 37 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 6d 79 72 61 63 2f 66 61 76 69 63 6f 6e 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 6d 79 72 61 63 2f 66 61 76 69 63 6f 6e 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2e 70 6e 67 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d Data Ascii: 767<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/myrac/favicons/favicon.ico"/><link rel="apple-touch-icon" href="/myrac/favicons/apple-touch-icon.png"><meta name="viewport" content="width=device-width,initial-scale=
2025-04-07 13:14:10 UTC	533	IN	Data Raw: 70 74 20 74 6f 20 72 75 6e 20 74 68 69 73 20 61 70 70 2e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2e 6d 69 6e 2e 6a 73 2f 76 63 64 31 35 63 62 65 37 37 37 32 66 34 39 63 33 39 39 63 36 61 35 62 61 62 66 32 32 63 31 32 34 31 37 31 37 36 38 39 31 37 36 30 31 35 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 5a 70 73 4f 6d 6c 52 51 56 36 79 39 30 37 54 49 30 64 4b 42 48 71 39 4d 64 32 39 6e 6e 61 45 49 50 6c 6b 66 38 34 72 6e 61 45 52 6e 71 36 7a 76 57 76 50 55 71 72 32 66 74 38 4d 31 61 53 32 38 6f 4e 37 Data Ascii: pt to run this app.</noscript><div id="root"></div><script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN7
2025-04-07 13:14:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:11 UTC	773	OUT	GET /myrac/MyRacCF/app_themes/components/pagetemplates/web2master/css/rac.min.css HTTP/1.1 Host: www.rac.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.rac.co.uk/myrac?route=prize-draw Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AMCV_6797C27A57DFC4097F000101%40AdobeOrg=MCMID%7C57646075230342348791702254968590827519; nlid=dbca1b06\|4986fb17; nllastdelid=4986fb17
2025-04-07 13:14:11 UTC	525	IN	HTTP/1.1 200 OK Date: Mon, 07 Apr 2025 13:14:11 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 92c9c95c29c025d8-EWR CF-Cache-Status: HIT Age: 1359 Cache-Control: public, max-age=14400 Content-Disposition: inline; filename="rac.min.css" ETag: W/"4ad2239e790d7f110a6d0db1aa12372eb2aa6b15" Expires: Mon, 07 Apr 2025 17:14:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-04-07 13:14:11 UTC	844	IN	Data Raw: 33 39 32 63 0d 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 3b 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 79 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 79 3b 2d 77 65 Data Ascii: 392c.slick-slider{position:relative;display:block;box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-touch-callout:none;-khtml-user-select:none;-ms-touch-action:pan-y;touch-action:pan-y;-we
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 64 65 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 20 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 69 6d 67 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 2e 64 72 61 67 67 69 6e 67 20 69 6d 67 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 73 6c 69 63 6b 2d 69 6e 69 74 69 61 6c 69 7a 65 64 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 73 6c 69 63 6b 2d 76 65 72 74 69 63 61 6c 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 Data Ascii: de{float:right}.slick-slide img{display:block}.slick-slide.slick-loading img{display:none}.slick-slide.dragging img{pointer-events:none}.slick-initialized .slick-slide{display:block}.slick-loading .slick-slide{visibility:hidden}.slick-vertical .slick-slid
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 69 63 6f 6e 2d 76 65 68 69 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 64 22 7d 2e 72 61 63 49 63 6f 6e 46 6f 6e 74 2e 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 4e 65 78 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 65 22 7d 2e 72 61 63 49 63 6f 6e 46 6f 6e 74 2e 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 50 72 65 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 66 22 7d 2e 72 61 63 49 63 6f 6e 46 6f 6e 74 2e 69 63 6f 6e 2d 67 72 6f 75 70 2d 73 70 65 61 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 30 22 7d 2e 72 61 63 49 63 6f 6e 46 6f 6e 74 2e 69 63 6f 6e 2d 66 61 73 74 2d 76 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 31 22 7d 2e 72 61 63 49 63 6f 6e 46 6f Data Ascii: icon-vehicle:before{content:"\e60d"}.racIconFont.icon-chevronNext:before{content:"\e60e"}.racIconFont.icon-chevronPrev:before{content:"\e60f"}.racIconFont.icon-group-speak:before{content:"\e610"}.racIconFont.icon-fast-van:before{content:"\e611"}.racIconFo
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 30 63 22 7d 2e 72 61 63 49 63 6f 6e 46 6f 6e 74 2e 69 63 6f 6e 2d 65 6e 76 65 6c 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 30 65 30 27 7d 2e 72 61 63 49 63 6f 6e 46 6f 6e 74 2e 69 63 6f 6e 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 30 35 61 27 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 31 20 72 61 63 69 63 6f 6e 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 Data Ascii: :before{content:"\e80c"}.racIconFont.icon-envelope:before{content:'\f0e0'}.racIconFont.icon-info-circle:before{content:'\f05a'}.fa{display:inline-block;font:normal normal normal 14px/1 racicon;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:a
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 30 22 7d 2e 66 61 2d 66 69 6c 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 36 22 7d 2a 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 7d 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 72 6f 62 6f 74 6f 5f 73 6c 61 62 2c 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 61 37 64 31 65 66 7d 3a 3a 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 61 37 64 31 65 66 7d 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c Data Ascii: e{content:"\f090"}.fa-file-o:before{content:"\f016"}*{-webkit-font-smoothing:antialiased;text-rendering:optimizeLegibility}body{font-family:roboto_slab,serif;font-size:15px}::-moz-selection{background:#a7d1ef}::selection{background:#a7d1ef}h1,h2,h3,h4,h5,
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 73 65 63 74 69 6f 6e 2d 62 67 4f 72 61 6e 67 65 20 68 32 2c 73 65 63 74 69 6f 6e 2e 73 65 63 74 69 6f 6e 2d 62 67 4f 72 61 6e 67 65 20 68 33 2c 73 65 63 74 69 6f 6e 2e 73 65 63 74 69 6f 6e 2d 62 67 4f 72 61 6e 67 65 20 68 34 2c 73 65 63 74 69 6f 6e 2e 73 65 63 74 69 6f 6e 2d 62 67 4f 72 61 6e 67 65 20 68 35 2c 73 65 63 74 69 6f 6e 2e 73 65 63 74 69 6f 6e 2d 62 67 4f 72 61 6e 67 65 20 68 36 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 73 65 63 74 69 6f 6e 2e 73 65 63 74 69 6f 6e 2d 62 67 4f 72 61 6e 67 65 4c 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 36 65 66 7d 73 65 63 74 69 6f 6e 2e 73 65 63 74 69 6f 6e 2d 62 67 4f 72 61 6e 67 65 20 2e 70 61 6e 65 6c 7b 63 6f 6c 6f 72 3a 23 34 34 34 7d 73 65 63 74 69 6f 6e 2e 73 65 63 Data Ascii: section-bgOrange h2,section.section-bgOrange h3,section.section-bgOrange h4,section.section-bgOrange h5,section.section-bgOrange h6{color:inherit}section.section-bgOrangeLight{background-color:#fff6ef}section.section-bgOrange .panel{color:#444}section.sec
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 67 3a 67 72 61 79 73 63 61 6c 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 62 6c 6f 63 6b 71 75 6f 74 65 3a 61 66 74 65 72 7b 74 6f 70 3a 61 75 74 6f 3b 62 6f 74 74 6f 6d 3a 2e 32 65 6d 3b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 32 30 31 44 22 7d 62 6c 6f 63 6b 71 75 6f 74 65 20 73 6d 61 6c 6c 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 2d 6d 6f 7a 2d 6f 70 61 63 69 74 79 3a 2e 36 3b 2d 6b 68 74 6d 6c 2d 6f 70 61 63 69 74 79 3a 2e 36 3b 2d 77 65 62 6b 69 74 2d 6f 70 61 63 69 74 79 3a 2e 36 3b 6f 70 61 63 69 74 79 3a 2e 36 7d 62 6c 6f 63 6b 71 75 6f 74 65 20 73 6d 61 6c 6c 3a Data Ascii: g:grayscale;display:block;position:absolute;top:0;left:0;font-size:2em}blockquote:after{top:auto;bottom:.2em;left:auto;right:0;content:"\201D"}blockquote small{color:inherit;-moz-opacity:.6;-khtml-opacity:.6;-webkit-opacity:.6;opacity:.6}blockquote small:
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 62 74 6e 2d 64 65 66 61 75 6c 74 20 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 64 65 66 61 75 6c 74 20 2e 61 63 74 69 76 65 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 64 65 66 61 75 6c 74 20 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 64 65 66 61 75 6c 74 20 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 64 65 66 61 75 6c 74 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 64 65 66 61 75 6c 74 3a 61 63 74 69 76 65 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 64 65 66 61 75 6c 74 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 64 65 66 61 75 6c 74 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2c 2e 6f 70 65 6e 3e 2e 64 72 Data Ascii: ;opacity:1}.btn-default .active,.btn-default .active.focus,.btn-default .active:focus,.btn-default .active:hover,.btn-default:active,.btn-default:active.focus,.btn-default:active:focus,.btn-default:active:hover,.open>.dropdown-toggle.btn-default,.open>.dr
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 2d 70 72 69 6d 61 72 79 20 61 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 33 61 36 37 38 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 23 30 33 61 36 37 38 2c 23 30 34 63 65 39 35 29 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 20 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 33 61 36 37 38 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 23 30 33 61 36 37 38 2c 23 30 34 63 65 39 35 29 7d 2e 62 74 6e 2d 73 75 Data Ascii: -primary a:focus,.btn-primary a:hover{text-decoration:none}.btn-success{color:#fff;background:#03a678;background:linear-gradient(#03a678,#04ce95)}.btn-success .focus,.btn-success:focus{background:#03a678;background:linear-gradient(#03a678,#04ce95)}.btn-su
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 6e 2d 69 6e 66 6f 20 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 69 6e 66 6f 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 69 6e 66 6f 3a 61 63 74 69 76 65 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 69 6e 66 6f 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 69 6e 66 6f 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 69 6e 66 6f 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 69 6e 66 6f 2e 66 6f 63 75 73 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 69 6e 66 6f 3a 66 6f 63 75 73 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 69 6e 66 6f 3a 68 6f 76 65 72 7b 62 61 Data Ascii: n-info .active:hover,.btn-info:active,.btn-info:active.focus,.btn-info:active:focus,.btn-info:active:hover,.open>.dropdown-toggle.btn-info,.open>.dropdown-toggle.btn-info.focus,.open>.dropdown-toggle.btn-info:focus,.open>.dropdown-toggle.btn-info:hover{ba

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:11 UTC	731	OUT	GET /myrac/static/css/main.39b8cddc.css HTTP/1.1 Host: www.rac.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.rac.co.uk/myrac?route=prize-draw Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AMCV_6797C27A57DFC4097F000101%40AdobeOrg=MCMID%7C57646075230342348791702254968590827519; nlid=dbca1b06\|4986fb17; nllastdelid=4986fb17
2025-04-07 13:14:11 UTC	531	IN	HTTP/1.1 200 OK Date: Mon, 07 Apr 2025 13:14:11 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 92c9c95d5c4d41c1-EWR CF-Cache-Status: HIT Age: 1359 Cache-Control: public, max-age=14400 Content-Disposition: inline; filename="main.39b8cddc.css" ETag: W/"aeafbaf066e3f90be5cc2326dc6cf363c0e6ecdb" Expires: Mon, 07 Apr 2025 17:14:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-04-07 13:14:11 UTC	838	IN	Data Raw: 32 65 39 65 0d 0a 2e 54 6f 61 73 74 5f 74 6f 61 73 74 5f 5f 44 4b 76 6e 56 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 35 66 63 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 34 70 78 20 34 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 31 29 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 3a 37 30 30 20 2e 39 72 65 6d 2f 31 2e 33 72 65 6d 20 46 72 65 64 65 72 69 63 6b 53 69 6d 6d 73 2c 47 65 6f 72 67 69 61 3b 68 65 69 67 68 74 3a 34 35 70 78 3b 6d 61 72 67 69 6e 3a 32 30 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 31 70 78 Data Ascii: 2e9e.Toast_toast__DKvnV{background:#005fcc;border-radius:6px;box-shadow:0 4px 4px 0 rgba(0,0,0,.251);color:#fff;font:700 .9rem/1.3rem FrederickSimms,Georgia;height:45px;margin:20px 0;padding:10px;position:relative}@media only screen and (min-width:991px
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 6d 2f 32 2e 35 72 65 6d 20 46 72 65 64 65 72 69 63 6b 53 69 6d 6d 73 42 6f 6c 64 2c 47 65 6f 72 67 69 61 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 7d 2e 50 61 67 65 54 69 74 6c 65 5f 70 61 67 65 54 69 74 6c 65 5f 5f 6a 46 70 51 70 20 68 33 20 2e 50 61 67 65 54 69 74 6c 65 5f 67 72 65 79 43 6f 6c 6f 72 5f 5f 63 64 4c 72 73 7b 63 6f 6c 6f 72 3a 23 34 37 34 37 34 61 3b 66 6f 6e 74 3a 37 30 30 20 32 2e 38 72 65 6d 2f 33 2e 33 72 65 6d 20 46 72 65 64 65 72 69 63 6b 53 69 6d 6d 73 42 6f 6c 64 2c 47 65 6f 72 67 69 61 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 50 61 67 65 54 69 74 6c 65 5f 70 61 67 65 54 69 74 6c 65 5f 5f 6a 46 70 51 70 20 2e 50 61 67 65 54 69 74 6c 65 5f 73 75 62 68 65 61 64 65 72 5f 5f 77 46 73 65 5a 7b 66 6f 6e 74 3a 34 30 30 20 2e 39 Data Ascii: m/2.5rem FrederickSimmsBold,Georgia!important;margin:0}.PageTitle_pageTitle__jFpQp h3 .PageTitle_greyColor__cdLrs{color:#47474a;font:700 2.8rem/3.3rem FrederickSimmsBold,Georgia!important}.PageTitle_pageTitle__jFpQp .PageTitle_subheader__wFseZ{font:400 .9
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 36 31 70 78 29 7b 2e 52 65 6d 69 6e 64 65 72 73 43 61 72 64 5f 74 69 74 6c 65 5f 5f 30 58 59 57 4d 7b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 20 31 30 70 78 7d 7d 2e 52 65 6d 69 6e 64 65 72 49 74 65 6d 32 5f 63 6f 6e 74 61 69 6e 65 72 5f 5f 58 73 30 70 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 31 30 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 36 30 70 78 29 7b 2e 52 65 6d Data Ascii: ht:700;line-height:1.5rem;margin:0;padding:0}@media only screen and (min-width:1061px){.RemindersCard_title__0XYWM{padding:0 20px 10px}}.ReminderItem2_container__Xs0pe{align-items:center;display:flex;gap:10px}@media only screen and (max-width:1060px){.Rem
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 4c 69 63 65 6e 73 65 20 7c 20 62 69 74 2e 6c 79 2f 6e 6f 72 6d 61 6c 69 7a 65 2d 73 63 73 73 20 2a 2f 68 74 6d 6c 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 72 65 64 65 72 69 63 6b 53 69 6d 6d 73 2c 47 65 6f 72 67 69 61 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 7b 64 69 73 70 Data Ascii: License \| bit.ly/normalize-scss */html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%;font-family:FrederickSimms,Georgia;line-height:1.15}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure{disp
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 6c 65 7d 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 Data Ascii: le}[type=checkbox],[type=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]::-webkit-search-cancel-button,[type=search]::-webkit-search-decoration{-webkit-appe
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 67 68 74 7d 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 62 6f 64 79 7b 6d 69 6e 2d 77 69 64 74 68 3a 33 30 30 70 78 7d 69 6e 70 75 74 3a 2d 77 65 62 6b 69 74 2d 61 75 74 6f 66 69 6c 6c 2c 73 65 6c 65 63 74 3a 2d 77 65 62 6b 69 74 2d 61 75 74 6f 66 69 6c 6c 2c 74 65 78 74 61 72 65 61 3a 2d 77 65 62 6b 69 74 2d 61 75 74 6f 66 69 6c 6c 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 30 30 30 70 78 20 23 66 66 66 7d 61 7b 63 6f 6c 6f 72 3a 23 66 39 35 31 30 38 7d 2e 68 61 73 2d 68 6f 76 65 72 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 66 36 63 30 30 7d 2e 74 61 62 62 69 6e 67 20 61 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 33 70 78 20 23 30 33 62 31 66 66 7d 2e 43 6f Data Ascii: ght}*{box-sizing:border-box}body{min-width:300px}input:-webkit-autofill,select:-webkit-autofill,textarea:-webkit-autofill{box-shadow:inset 0 0 0 1000px #fff}a{color:#f95108}.has-hover a:hover{color:#ef6c00}.tabbing a:focus{box-shadow:0 0 0 3px #03b1ff}.Co
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 6d 65 64 69 61 2f 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 2d 6f 72 61 6e 67 65 2e 39 66 31 37 35 62 63 63 36 61 66 33 33 34 30 62 31 62 66 66 2e 73 76 67 29 7d 2e 4c 6f 61 64 65 72 2d 2d 6c 6f 61 64 69 6e 67 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 4c 6f 61 64 65 72 2d 2d 6c 6f 61 64 69 6e 67 20 2e 4c 6f 61 64 65 72 5f 5f 63 68 65 76 72 6f 6e 7b 61 6e 69 6d 61 74 69 6f 6e 3a 63 68 65 76 72 6f 6e 2d 6c 6f 61 64 20 32 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 2c 2e 35 2c 2e 39 2c 2e 35 29 20 69 6e 66 69 6e 69 74 65 7d 2e 4c 6f 61 64 65 72 2d 2d 6c 6f 61 64 69 6e 67 20 2e 4c 6f 61 64 65 72 5f 5f 63 68 65 76 72 6f 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 32 35 73 3b 6c 65 66 74 3a 30 7d 2e 4c 6f 61 64 Data Ascii: media/chevron-right-orange.9f175bcc6af3340b1bff.svg)}.Loader--loading{opacity:1}.Loader--loading .Loader__chevron{animation:chevron-load 2s cubic-bezier(.1,.5,.9,.5) infinite}.Loader--loading .Loader__chevron:nth-child(2){animation-delay:.25s;left:0}.Load
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 7d 2e 42 74 6e 2d 2d 6c 6f 61 64 69 6e 67 20 2e 42 74 6e 5f 5f 69 6e 6e 65 72 2c 2e 42 74 6e 2d 2d 6c 6f 61 64 69 6e 67 3a 61 66 74 65 72 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 42 74 6e 2d 2d 6c 6f 61 64 69 6e 67 20 2e 42 74 6e 5f 5f 6c 6f 61 64 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 42 74 6e 2d 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 42 74 6e 2d 2d 61 6c 69 67 6e 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 42 74 6e 2d 2d 73 65 61 72 63 68 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 Data Ascii: 0%;transform:translate(-50%,-50%)}.Btn--loading .Btn__inner,.Btn--loading:after{opacity:0}.Btn--loading .Btn__loader{opacity:1}.Btn--block{display:block;text-align:center;width:100%}.Btn--align-left{text-align:left}.Btn--search:after{background-image:url(
2025-04-07 13:14:11 UTC	1369	IN	Data Raw: 35 39 39 64 35 31 39 36 31 39 39 37 66 36 64 31 61 30 2e 73 76 67 29 3b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 42 74 6e 2d 2d 63 69 72 63 6c 65 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 6d 79 72 61 63 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 63 69 72 63 6c 65 2d 67 72 65 65 6e 2e 31 30 65 63 35 33 35 37 61 66 63 38 33 32 34 65 61 64 39 65 2e 73 76 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: 599d51961997f6d1a0.svg);opacity:.4}.Btn--circle:after{background-image:url(/myrac/static/media/circle-green.10ec5357afc8324ead9e.svg);background-position:50%;background-repeat:no-repeat;background-size:contain;content:"";float:right;height:1.4em;margin-le
2025-04-07 13:14:11 UTC	152	IN	Data Raw: 34 61 34 61 34 61 7d 2e 42 74 6e 2d 2d 67 72 65 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 34 61 34 61 34 61 7d 2e 42 74 6e 2d 2d 67 72 65 79 2e 42 74 6e 2d 2d 67 72 61 64 69 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 23 36 30 36 30 36 30 20 30 2c 23 34 61 34 61 34 61 29 7d 2e 42 74 6e 2d 2d 6c 69 67 68 74 2d 67 72 65 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 34 66 34 66 34 0d 0a Data Ascii: 4a4a4a}.Btn--grey{background:#4a4a4a}.Btn--grey.Btn--gradient{background:linear-gradient(180deg,#606060 0,#4a4a4a)}.Btn--light-grey{background:#f4f4f4

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:11 UTC	583	OUT	GET /rac/myracprod/Bootstrap.js HTTP/1.1 Host: nexus.ensighten.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.rac.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:14:11 UTC	678	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 570406 Connection: close Date: Mon, 07 Apr 2025 13:14:12 GMT x-amz-replication-status: COMPLETED Last-Modified: Fri, 21 Mar 2025 16:40:38 GMT ETag: "9a99a27a567169dd792d71a292ebc47f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 x-amz-version-id: sCmEDFRpv5oq9fR_MzpiE2dx46BWtyYH Accept-Ranges: bytes Server: CloudFront X-Cache: Miss from cloudfront Via: 1.1 7edae070a6a25cc68c970c1111701a20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: htYreOD1wAEx8oUWc10WqdNAgslJGUZ5CXepnbg6ArKQE3rEpky7rA== Vary: Origin
2025-04-07 13:14:11 UTC	15706	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 65 6e 73 69 67 68 74 65 6e 49 6e 69 74 28 29 7b 76 61 72 20 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 20 3d 20 7b 63 6c 69 65 6e 74 3a 20 22 72 61 63 22 2c 20 63 6c 69 65 6e 74 49 64 3a 20 37 30 39 2c 20 70 75 62 6c 69 73 68 50 61 74 68 3a 20 22 6d 79 72 61 63 70 72 6f 64 22 2c 20 69 73 50 75 62 6c 69 63 3a 30 2c 20 73 65 72 76 65 72 43 6f 6d 70 6f 6e 65 6e 74 4c 6f 63 61 74 69 6f 6e 3a 20 22 6e 65 78 75 73 2e 65 6e 73 69 67 68 74 65 6e 2e 63 6f 6d 2f 72 61 63 2f 6d 79 72 61 63 70 72 6f 64 2f 73 65 72 76 65 72 43 6f 6d 70 6f 6e 65 6e 74 2e 70 68 70 22 2c 20 73 74 61 74 69 63 4a 61 76 61 73 63 72 69 70 74 50 61 74 68 3a 20 22 6e 65 78 75 73 2e 65 6e 73 69 67 68 74 65 6e 2e 63 6f 6d 2f 72 61 63 2f 6d 79 72 61 63 70 72 6f Data Ascii: (function ensightenInit(){var ensightenOptions = {client: "rac", clientId: 709, publishPath: "myracprod", isPublic:0, serverComponentLocation: "nexus.ensighten.com/rac/myracprod/serverComponent.php", staticJavascriptPath: "nexus.ensighten.com/rac/myracpro
2025-04-07 13:14:11 UTC	284	IN	Data Raw: 6f 6e 28 29 7b 7d 3b 62 2e 64 65 62 75 67 7c 7c 28 62 2e 64 65 62 75 67 3d 62 2e 6c 6f 67 29 3b 62 2e 69 6e 66 6f 7c 7c 28 62 2e 69 6e 66 6f 3d 62 2e 6c 6f 67 29 3b 62 2e 77 61 72 6e 7c 7c 28 62 2e 77 61 72 6e 3d 62 2e 6c 6f 67 29 3b 62 2e 65 72 72 6f 72 7c 7c 28 62 2e 65 72 72 6f 72 3d 62 2e 6c 6f 67 29 7d 29 28 29 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 2d 31 3c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 41 70 70 6c 65 57 65 62 4b 69 74 2f 22 29 3f 65 2e 74 69 6d 65 72 3d 77 69 6e 64 6f 77 2e 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 6c 6f 61 64 65 64 7c 69 6e 74 65 72 61 63 74 69 76 65 7c 63 6f 6d 70 6c 65 74 65 2f 2e 74 65 73 74 28 64 Data Ascii: on(){};b.debug\|\|(b.debug=b.log);b.info\|\|(b.info=b.log);b.warn\|\|(b.warn=b.log);b.error\|\|(b.error=b.log)})();document.addEventListener?(-1<navigator.userAgent.indexOf("AppleWebKit/")?e.timer=window.setInterval(function(){/loaded\|interactive\|complete/.test(d
2025-04-07 13:14:11 UTC	871	IN	Data Raw: 74 65 72 76 61 6c 28 65 2e 74 69 6d 65 72 29 2c 63 2e 63 61 6c 6c 4f 6e 44 4f 4d 50 61 72 73 65 64 28 29 29 7d 2c 35 30 29 3a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 63 2e 63 61 6c 6c 4f 6e 44 4f 4d 50 61 72 73 65 64 2c 21 31 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 63 2e 63 61 6c 6c 4f 6e 44 4f 4d 4c 6f 61 64 65 64 2c 0a 21 31 29 29 3a 28 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 74 68 72 6f 77 22 63 6f 6e 74 69 6e Data Ascii: terval(e.timer),c.callOnDOMParsed())},50):document.addEventListener("DOMContentLoaded",c.callOnDOMParsed,!1),window.addEventListener("load",c.callOnDOMLoaded,!1)):(setTimeout(function(){var a=window.document;(function(){try{if(!document.body)throw"contin
2025-04-07 13:14:11 UTC	12792	IN	Data Raw: 2e 64 65 70 6c 6f 79 6d 65 6e 74 49 64 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 7c 22 2b 64 2e 69 64 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 7c 22 2b 66 2c 61 2e 70 75 73 68 28 67 29 3b 62 3d 22 5b 22 2b 61 2e 6a 6f 69 6e 28 22 3b 22 29 2b 22 5d 22 3b 76 61 72 20 70 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 65 2e 6e 65 78 75 73 2b 22 2f 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6c 2e 63 6c 69 65 6e 74 29 2b 22 2f 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6c 2e 70 75 62 6c 69 73 68 50 61 74 68 29 2b 22 2f 54 61 67 41 75 64 69 74 42 65 61 63 6f 6e 2e 72 6e 63 3f 63 69 64 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6c 2e 63 6c 69 65 6e 74 49 64 29 Data Ascii: .deploymentId.toString()+"\|"+d.id.toString()+"\|"+f,a.push(g);b="["+a.join(";")+"]";var p=window.location.protocol+"//"+e.nexus+"/"+encodeURIComponent(l.client)+"/"+encodeURIComponent(l.publishPath)+"/TagAuditBeacon.rnc?cid="+encodeURIComponent(l.clientId)
2025-04-07 13:14:11 UTC	16384	IN	Data Raw: 74 69 6f 6e 73 2e 6e 73 5d 2e 64 61 74 61 2e 65 6e 67 69 6e 65 28 64 7c 7c 22 6d 65 6d 6f 72 79 22 29 2e 72 65 6d 6f 76 65 28 61 29 7d 3b 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 5b 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 2e 6e 73 5d 2e 64 61 74 61 2e 65 6e 67 69 6e 65 28 61 7c 7c 22 6d 65 6d 6f 72 79 22 29 2e 63 6c 65 61 72 28 29 7d 3b 65 2e 64 65 66 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 64 26 26 28 61 2e 6e 61 6d 65 3d 64 2e 69 64 7c 7c 64 2e 6e 61 6d 65 29 3b 69 66 28 21 61 2e 6e 61 6d 65 29 72 65 74 75 72 6e 20 66 5b 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 2e 6e 73 5d 2e 77 68 65 6e 2e 72 65 6a 65 63 74 28 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 70 61 72 61 6d 65 74 65 72 Data Ascii: tions.ns].data.user(d\|\|"memory").remove(a)};e.clear=function(a){return f[ensightenOptions.ns].data.user(a\|\|"memory").clear()};e.define=function(a,d){d&&(a.name=d.id\|\|d.name);if(!a.name)return f[ensightenOptions.ns].when.reject(Error("Invalid parameter
2025-04-07 13:14:11 UTC	16384	IN	Data Raw: 28 3b 6c 3d 6c 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 29 31 3d 3d 6c 2e 6e 6f 64 65 54 79 70 65 26 26 28 79 5b 31 5d 3f 79 5b 31 5d 3d 3d 6c 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 31 29 26 26 28 61 5b 61 2e 6c 65 6e 67 74 68 5d 3d 6c 29 3b 72 65 74 75 72 6e 20 61 7d 28 5b 5d 29 3a 6c 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 79 5b 31 5d 7c 7c 22 2a 22 29 3b 62 3d 30 3b 66 6f 72 28 6d 3d 76 2e 6c 65 6e 67 74 68 3b 62 3c 6d 3b 62 2b 2b 29 69 66 28 68 3d 6e 2e 61 70 70 6c 79 28 76 5b 62 5d 2c 79 29 29 65 5b 65 2e 6c 65 6e 67 74 68 5d 3d 68 3b 69 66 28 21 63 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 3b 6b 28 65 2c 0a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 28 61 2c 63 2c 67 29 26 26 28 66 5b 66 2e 6c Data Ascii: (;l=l.nextSibling;)1==l.nodeType&&(y[1]?y[1]==l.tagName.toLowerCase():1)&&(a[a.length]=l);return a}([]):l.getElementsByTagName(y[1]\|\|"*");b=0;for(m=v.length;b<m;b++)if(h=n.apply(v[b],y))e[e.length]=h;if(!c.length)return e;k(e,function(a){t(a,c,g)&&(f[f.l
2025-04-07 13:14:11 UTC	5608	IN	Data Raw: 32 5f 5f 65 6e 73 54 61 62 27 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 27 74 63 66 32 5f 5f 65 6e 73 54 61 62 4c 69 6e 6b 73 20 24 7b 22 70 75 72 70 6f 73 65 73 41 6e 64 46 65 61 74 75 72 65 73 22 3d 3d 3d 65 3f 22 61 63 74 69 76 65 22 3a 22 22 7d 27 20 69 64 3d 27 74 63 66 32 5f 5f 65 6e 73 54 61 62 4c 69 6e 6b 73 2d 70 75 72 70 6f 73 65 73 41 6e 64 46 65 61 74 75 72 65 73 27 3e 24 7b 6f 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 2e 74 63 66 32 50 75 72 70 41 6e 64 46 65 61 74 75 72 65 73 4d 6f 64 61 6c 2e 74 69 74 6c 65 7c 7c 22 22 7d 3c 2f 62 75 74 74 6f 6e 3e 20 5c 6e 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 27 74 63 66 32 5f 5f 65 6e 73 54 61 62 4c 69 6e 6b 73 20 24 7b 22 76 65 6e Data Ascii: 2__ensTab'>\n <button class='tcf2__ensTabLinks ${"purposesAndFeatures"===e?"active":""}' id='tcf2__ensTabLinks-purposesAndFeatures'>${o.translation.tcf2PurpAndFeaturesModal.title\|\|""}</button> \n <button class='tcf2__ensTabLinks ${"ven
2025-04-07 13:14:11 UTC	2786	IN	Data Raw: 6e 73 74 20 65 20 6f 66 20 6e 2e 64 65 76 69 63 65 53 74 6f 72 61 67 65 44 69 73 63 6c 6f 73 75 72 65 44 65 74 61 69 6c 73 2e 64 69 73 63 6c 6f 73 75 72 65 73 29 69 66 28 65 2e 70 75 72 70 6f 73 65 73 29 7b 76 61 72 20 64 2c 70 3b 63 6f 6e 73 74 20 74 3d 28 30 2c 63 2e 64 65 66 61 75 6c 74 29 28 64 3d 28 30 2c 6c 2e 64 65 66 61 75 6c 74 29 28 70 3d 65 2e 70 75 72 70 6f 73 65 73 29 2e 63 61 6c 6c 28 70 2c 28 65 29 3d 3e 73 5b 65 5d 3f 73 5b 65 5d 2e 6e 61 6d 65 3a 6e 75 6c 6c 29 29 2e 63 61 6c 6c 28 64 2c 28 65 29 3d 3e 6e 75 6c 6c 21 3d 65 29 3b 65 2e 70 75 72 70 6f 73 65 73 3d 74 7d 76 61 72 20 66 3b 6e 2e 64 65 76 69 63 65 53 74 6f 72 61 67 65 44 69 73 63 6c 6f 73 75 72 65 44 65 74 61 69 6c 73 3f 69 2b 3d 60 3c 64 69 76 20 63 6c 61 73 73 3d 27 74 63 66 Data Ascii: nst e of n.deviceStorageDisclosureDetails.disclosures)if(e.purposes){var d,p;const t=(0,c.default)(d=(0,l.default)(p=e.purposes).call(p,(e)=>s[e]?s[e].name:null)).call(d,(e)=>null!=e);e.purposes=t}var f;n.deviceStorageDisclosureDetails?i+=`<div class='tcf
2025-04-07 13:14:11 UTC	12792	IN	Data Raw: 74 63 66 32 5f 5f 65 6e 73 4d 6f 64 61 6c 56 65 6e 64 6f 72 73 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 27 43 6f 6e 73 65 6e 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 27 3e 20 5c 6e 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 27 74 63 66 32 5f 5f 61 6c 6c 6f 77 41 6c 6c 27 20 69 64 3d 27 74 63 66 32 5f 5f 65 6e 73 43 6f 6e 73 65 6e 74 54 69 74 6c 65 27 3e 20 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 27 74 63 66 32 5f 5f 65 6e 73 54 6f 67 67 6c 65 52 6f 77 20 74 63 66 32 5f 76 65 6e 64 6f 72 73 44 65 73 63 72 69 70 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 27 3e 20 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 27 63 6f 6e 73 65 6e 74 44 65 73 63 72 69 70 74 69 6f Data Ascii: tcf2__ensModalVendors" aria-label='Consent Configuration'> \n <header class='tcf2__allowAll' id='tcf2__ensConsentTitle'> \n <div class='tcf2__ensToggleRow tcf2_vendorsDescriptionContainer'> \n <div class='consentDescriptio
2025-04-07 13:14:11 UTC	16384	IN	Data Raw: 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 74 5b 6e 5d 2e 74 61 67 3d 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 76 61 72 20 66 3d 65 2e 67 61 74 65 77 61 79 2e 67 65 74 4c 69 73 74 28 29 3b 63 6f 6e 73 74 20 76 3d 65 2e 67 61 74 65 77 61 79 2e 69 73 57 68 69 74 65 6c 69 73 74 28 29 3b 0a 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 64 29 2e 63 61 6c 6c 28 64 2c 28 65 29 3d 3e 7b 69 66 28 76 26 26 66 2e 43 55 53 54 4f 4d 5f 41 4c 4c 4f 57 29 7b 63 6f 6e 73 74 20 74 3d 66 2e 43 55 53 54 4f 4d 5f 41 4c 4c 4f 57 2c 6e 3d 70 28 65 2e 64 61 74 61 73 65 74 2e 74 61 67 2c 74 29 3b 65 2e 63 68 65 63 6b 65 64 3d 21 21 6e 7d 65 6c 73 65 20 69 66 28 21 76 26 26 66 2e 43 55 53 54 4f 4d 5f 42 4c 4f 43 Data Ascii: for(let n=0;n<t.length;n++)if(t[n].tag===e)return!0;return!1}var f=e.gateway.getList();const v=e.gateway.isWhitelist();(0,a.default)(d).call(d,(e)=>{if(v&&f.CUSTOM_ALLOW){const t=f.CUSTOM_ALLOW,n=p(e.dataset.tag,t);e.checked=!!n}else if(!v&&f.CUSTOM_BLOC

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:11 UTC	749	OUT	GET /js/gigya.js?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa HTTP/1.1 Host: identity.rac.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.rac.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AMCV_6797C27A57DFC4097F000101%40AdobeOrg=MCMID%7C57646075230342348791702254968590827519; nlid=dbca1b06\|4986fb17; nllastdelid=4986fb17
2025-04-07 13:14:11 UTC	754	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 600477 Connection: close Date: Mon, 07 Apr 2025 13:14:11 GMT access-control-allow-origin: * Cache-Control: public, s-maxage=3600, max-age=900 ETag: 6c61746573747c31373434303331363531353638 edge-cache-tag: siteid_807894263556,ver_latest x-sdk-version: latest p3p: CP="IDC COR PSA DEV ADM OUR IND ONL" x-error-code: 0 x-soa: true, Gator x-server: gator-eu1-prod-7f99cb54df-xcqr4 x-callid: f8f5c59076564a58a173f8745fe002a1 x-robots-tag: none Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 dda48093758850ff13b7c87654612728.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P6 X-Amz-Cf-Id: uHxWlzFk6ed-1LaiB3g4sUS9HTjJYUi_Z7REkWbQ3ke7XSi0SHEGBQ==
2025-04-07 13:14:11 UTC	15630	IN	Data Raw: 2f 2f 20 23 23 23 20 73 65 72 76 65 72 20 69 6e 6a 65 63 74 65 64 20 63 6f 64 65 20 23 23 23 0d 0a 76 61 72 20 67 69 67 79 61 20 3d 20 77 69 6e 64 6f 77 2e 67 69 67 79 61 3b 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 67 69 67 79 61 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 21 67 69 67 79 61 2e 69 73 47 69 67 79 61 29 20 7b 0d 0a 20 20 20 20 67 69 67 79 61 20 3d 20 7b 69 73 47 69 67 79 61 3a 20 74 72 75 65 7d 3b 0d 0a 7d 0d 0a 67 69 67 79 61 2e 61 70 69 4b 65 79 20 3d 20 27 33 5f 58 45 31 55 7a 57 36 52 69 62 69 73 32 77 67 68 71 58 4f 54 66 72 57 57 55 59 6a 70 59 43 2d 5f 4d 30 53 6f 4c 46 4a 73 52 48 38 65 30 36 68 4a 6b 48 6e 6b 68 6c 6c 72 4c 6a 54 61 73 38 58 61 27 3b 0d 0a 67 69 67 79 61 2e 64 65 66 61 75 6c 74 41 70 69 44 6f 6d 61 69 6e Data Ascii: // ### server injected code ###var gigya = window.gigya;if (typeof gigya == 'undefined' \|\| !gigya.isGigya) { gigya = {isGigya: true};}gigya.apiKey = '3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa';gigya.defaultApiDomain
2025-04-07 13:14:11 UTC	16350	IN	Data Raw: 62 5f 31 2e 5f 5f 61 73 73 69 67 6e 28 74 73 6c 69 62 5f 31 2e 5f 5f 61 73 73 69 67 6e 28 7b 7d 2c 74 29 2c 7b 63 61 6c 6c 62 61 63 6b 3a 69 7d 29 5d 29 7d 29 29 5d 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 61 6c 6c 46 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 2c 61 72 50 61 72 61 6d 73 29 7b 76 61 72 20 66 6e 3d 65 76 61 6c 28 6e 61 6d 65 29 2c 61 72 50 61 72 74 73 3d 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 72 50 61 72 74 73 2e 73 70 6c 69 63 65 28 61 72 50 61 72 74 73 2e 6c 65 6e 67 74 68 2d 31 2c 31 29 3b 76 61 72 20 73 63 6f 70 65 3d 65 76 61 6c 28 61 72 50 61 72 74 73 2e 6a 6f 69 6e 28 22 2e 22 29 29 3b 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 6c 6f 67 67 65 72 2e 72 65 70 6f 72 74 28 22 65 76 61 6c 20 75 73 61 67 65 22 2c 7b 6d 65 74 68 Data Ascii: b_1.__assign(tslib_1.__assign({},t),{callback:i})])}))]}))}))}function callFunction(name,arParams){var fn=eval(name),arParts=name.split(".");arParts.splice(arParts.length-1,1);var scope=eval(arParts.join("."));window.gigya.logger.report("eval usage",{meth
2025-04-07 13:14:11 UTC	244	IN	Data Raw: 69 67 79 61 4d 6f 62 69 6c 65 44 69 61 6c 6f 67 22 29 2c 63 28 77 69 6e 64 6f 77 2c 22 68 61 73 68 63 68 61 6e 67 65 22 2c 73 29 7d 29 2c 35 30 29 7d 2c 74 2e 5f 72 65 6d 6f 76 65 44 69 61 6c 6f 67 42 61 63 6b 4c 69 73 74 65 6e 65 72 3d 64 2c 74 2e 70 72 65 70 65 6e 64 54 6f 42 6f 64 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2c 74 2e 62 6f 64 79 26 26 28 74 2e 62 6f 64 79 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 26 26 74 2e 62 6f 64 79 2e 66 69 72 73 74 43 68 69 6c 64 3f 74 2e 62 6f 64 79 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 2e 62 6f 64 79 2e 66 69 72 73 74 43 68 69 6c 64 29 3a 74 2e 62 6f 64 79 2e 61 70 70 65 6e Data Ascii: igyaMobileDialog"),c(window,"hashchange",s)}),50)},t._removeDialogBackListener=d,t.prependToBody=function(e,t){void 0===t&&(t=window.document),t.body&&(t.body.insertBefore&&t.body.firstChild?t.body.insertBefore(e,t.body.firstChild):t.body.appen
2025-04-07 13:14:11 UTC	16384	IN	Data Raw: 64 43 68 69 6c 64 28 65 29 29 7d 2c 74 2e 61 70 70 65 6e 64 54 6f 42 6f 64 79 3d 67 2c 74 2e 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 26 26 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 2c 74 2e 69 73 43 68 69 6c 64 4f 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 3b 29 7b 69 66 28 74 3d 3d 69 29 72 65 74 75 72 6e 21 30 3b 69 3d 69 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 72 65 74 75 72 6e 21 31 7d 2c 74 2e 69 73 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 3b 65 3b 29 7b 76 61 72 20 74 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 Data Ascii: dChild(e))},t.appendToBody=g,t.removeElement=function(e){e&&e.parentElement&&e.parentElement.removeChild(e)},t.isChildOf=function(e,t){for(var i=e.parentNode;i;){if(t==i)return!0;i=i.parentNode}return!1},t.isVisible=function(e){for(;e;){var t=getComputedS
2025-04-07 13:14:11 UTC	1514	IN	Data Raw: 4e 61 6d 65 2c 22 74 72 75 65 22 2c 31 2c 74 2c 6e 75 6c 6c 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 44 65 66 61 75 6c 74 44 6f 6d 61 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 72 2e 6c 6f 63 61 6c 49 6e 66 6f 2e 70 61 67 65 44 6f 6d 61 69 6e 29 2c 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 72 2e 6c 6f 63 61 6c 49 6e 66 6f 2e 62 61 73 65 44 6f 6d 61 69 6e 7c 7c 22 22 29 2c 74 2e 6c 65 6e 67 74 68 3e 30 26 26 65 2e 6c 65 6e 67 74 68 3e 3d 74 2e 6c 65 6e 67 74 68 26 26 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 74 29 3d 3d 3d 65 2e 6c 65 6e 67 74 68 2d 74 2e 6c 65 6e 67 74 68 3f 74 3a 65 7d 2c 65 2e 70 72 6f 74 6f Data Ascii: Name,"true",1,t,null)}catch(e){return!1}},e.prototype.getDefaultDomain=function(e,t){return void 0===e&&(e=r.localInfo.pageDomain),void 0===t&&(t=r.localInfo.baseDomain\|\|""),t.length>0&&e.length>=t.length&&e.lastIndexOf(t)===e.length-t.length?t:e},e.proto
2025-04-07 13:14:11 UTC	16384	IN	Data Raw: 3d 72 2e 6c 6f 63 61 6c 49 6e 66 6f 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 2e 6c 6f 63 61 6c 49 6e 66 6f 3f 76 6f 69 64 20 30 3a 72 2e 6c 6f 63 61 6c 49 6e 66 6f 2e 75 73 65 72 41 67 65 6e 74 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 21 28 30 3d 3d 3d 69 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 73 22 29 29 7c 7c 21 6e 7c 7c 6e 2e 69 6e 64 65 78 4f 66 28 22 43 50 55 20 69 50 68 6f 6e 65 20 4f 53 20 31 32 22 29 3e 2d 31 7c 7c 6e 2e 69 6e 64 65 78 4f 66 28 22 69 50 61 64 3b 20 43 50 55 20 4f 53 20 31 32 22 29 3e 2d 31 7c 7c 6e 2e 69 6e 64 65 78 4f 66 28 22 4d 61 63 69 6e 74 6f 73 68 3b 20 49 6e 74 65 6c 20 4d 61 63 20 4f 53 20 58 20 31 Data Ascii: =r.localInfo\|\|void 0===r.localInfo?void 0:r.localInfo.userAgent)&&void 0!==t?t:navigator.userAgent.toLowerCase();return!(0===i.indexOf("https"))\|\|!n\|\|n.indexOf("CPU iPhone OS 12")>-1\|\|n.indexOf("iPad; CPU OS 12")>-1\|\|n.indexOf("Macintosh; Intel Mac OS X 1
2025-04-07 13:14:11 UTC	14870	IN	Data Raw: 74 6f 74 79 70 65 2e 67 65 74 41 75 74 68 50 61 72 61 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 69 66 28 74 68 69 73 2e 70 61 72 61 6d 73 2e 6f 61 75 74 68 5f 74 6f 6b 65 6e 29 74 68 69 73 2e 70 61 72 61 6d 73 2e 61 75 74 68 4d 6f 64 65 3d 22 74 6f 6b 65 6e 22 3b 65 6c 73 65 20 69 66 28 21 74 68 69 73 2e 70 61 72 61 6d 73 2e 6e 6f 41 75 74 68 26 26 21 74 68 69 73 2e 70 61 72 61 6d 73 2e 72 65 67 54 6f 6b 65 6e 29 7b 76 61 72 20 74 3d 6e 2e 67 65 74 28 74 68 69 73 2e 70 61 72 61 6d 73 2e 41 50 49 4b 65 79 29 3b 69 66 28 74 29 7b 74 68 69 73 2e 73 65 6e 74 4c 6f 67 69 6e 54 6f 6b 65 6e 3d 74 3b 76 61 72 20 69 3d 6e 2e 67 65 74 47 6c 74 65 78 70 43 6f 6f 6b 69 65 28 74 68 69 73 2e 70 61 72 61 6d 73 2e 41 50 49 4b 65 79 29 3b 6e 75 Data Ascii: totype.getAuthParams=function(){var e={};if(this.params.oauth_token)this.params.authMode="token";else if(!this.params.noAuth&&!this.params.regToken){var t=n.get(this.params.APIKey);if(t){this.sentLoginToken=t;var i=n.getGltexpCookie(this.params.APIKey);nu
2025-04-07 13:14:11 UTC	16384	IN	Data Raw: 29 2b 22 5f 22 2b 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 73 2e 72 65 71 75 65 73 74 49 44 3d 73 2e 77 69 6e 64 6f 77 4e 61 6d 65 2b 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 73 7d 72 65 74 75 72 6e 20 6e 2e 5f 5f 65 78 74 65 6e 64 73 28 69 2c 74 29 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 62 65 66 6f 72 65 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 61 66 74 65 72 52 65 73 70 6f 6e 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 64 6f 6e 74 43 6c 6f 73 65 26 26 22 66 61 6c 73 65 22 21 3d 3d 65 2e 64 6f 6e 74 43 6c 6f 73 65 7c 7c 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 75 74 69 6c 73 2e 77 69 6e 2e 63 6c 6f 73 65 28 74 68 69 73 2e 77 69 6e 64 6f 77 4e 61 6d Data Ascii: )+"_"+(new Date).getTime(),s.requestID=s.windowName+(new Date).getTime(),s}return n.__extends(i,t),i.prototype.beforeRequest=function(){},i.prototype.afterResponse=function(e){e.dontClose&&"false"!==e.dontClose\|\|window.gigya.utils.win.close(this.windowNam
2025-04-07 13:14:11 UTC	16384	IN	Data Raw: 74 69 6c 73 2e 6f 62 6a 65 63 74 2e 6d 65 72 67 65 28 5b 69 2c 65 5d 29 2c 30 21 3d 6e 2e 65 72 72 6f 72 43 6f 64 65 3f 5b 33 2c 33 5d 3a 28 69 2e 65 76 65 6e 74 4e 61 6d 65 3d 22 61 63 63 6f 75 6e 74 73 2e 6c 6f 67 69 6e 22 2c 6e 2e 55 49 44 3f 5b 33 2c 32 5d 3a 5b 34 2c 6e 65 77 20 67 69 67 79 61 2e 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 61 63 63 6f 75 6e 74 73 2e 67 65 74 41 63 63 6f 75 6e 74 49 6e 66 6f 28 7b 63 61 6c 6c 62 61 63 6b 3a 65 2c 69 6e 63 6c 75 64 65 3a 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 75 74 69 6c 73 2e 73 74 72 69 6e 67 55 74 69 6c 73 2e 6d 65 72 67 65 43 6f 6d 6d 61 53 65 70 61 72 61 74 65 64 56 61 6c 75 65 73 28 22 70 72 6f 66 69 6c 65 2c 64 61 74 Data Ascii: tils.object.merge([i,e]),0!=n.errorCode?[3,3]:(i.eventName="accounts.login",n.UID?[3,2]:[4,new gigya.Promise((function(e){return window.gigya.accounts.getAccountInfo({callback:e,include:window.gigya.utils.stringUtils.mergeCommaSeparatedValues("profile,dat
2025-04-07 13:14:12 UTC	16384	IN	Data Raw: 74 4d 6f 62 69 6c 65 52 65 67 53 63 72 65 65 6e 53 65 74 3a 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 74 68 69 73 53 63 72 69 70 74 2e 67 6c 6f 62 61 6c 43 6f 6e 66 2e 64 65 66 61 75 6c 74 52 65 67 53 63 72 65 65 6e 53 65 74 2c 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 61 63 63 6f 75 6e 74 73 2e 73 68 6f 77 53 63 72 65 65 6e 53 65 74 28 7b 69 67 6e 6f 72 65 41 70 69 51 75 65 75 65 3a 21 30 2c 73 63 72 65 65 6e 53 65 74 3a 69 7d 29 2c 5b 33 2c 35 5d 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 34 2c 66 28 74 2e 74 6f 6b 65 6e 29 5d 3b 63 61 73 65 20 34 3a 61 2e 73 65 6e 74 28 29 2c 61 2e 6c 61 62 65 6c 3d 35 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 5b 32 5d 7d 7d 29 29 7d 29 29 7d 2c 74 2e 67 65 74 47 69 67 79 61 53 65 74 74 69 6e 67 73 3d 66 75 6e 63 74 69 Data Ascii: tMobileRegScreenSet:window.gigya.thisScript.globalConf.defaultRegScreenSet,window.gigya.accounts.showScreenSet({ignoreApiQueue:!0,screenSet:i}),[3,5]);case 3:return[4,f(t.token)];case 4:a.sent(),a.label=5;case 5:return[2]}}))}))},t.getGigyaSettings=functi

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:12 UTC	715	OUT	GET /myrac/static/js/main.390a2188.js HTTP/1.1 Host: www.rac.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.rac.co.uk/myrac?route=prize-draw Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AMCV_6797C27A57DFC4097F000101%40AdobeOrg=MCMID%7C57646075230342348791702254968590827519; nlid=dbca1b06\|4986fb17; nllastdelid=4986fb17
2025-04-07 13:14:12 UTC	544	IN	HTTP/1.1 200 OK Date: Mon, 07 Apr 2025 13:14:12 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 92c9c9638e180f55-EWR CF-Cache-Status: HIT Age: 1360 Cache-Control: public, max-age=14400 Content-Disposition: inline; filename="main.390a2188.js" ETag: W/"b02166a648f67edd80e5a32231662088f84b4b99" Expires: Mon, 07 Apr 2025 17:14:12 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-04-07 13:14:12 UTC	825	IN	Data Raw: 32 32 66 39 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 33 39 30 61 32 31 38 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 6e 3d 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 6e 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 Data Ascii: 22f9/! For license information please see main.390a2188.js.LICENSE.txt /!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=(new Error).stack;n&&(e._sentryDebugIds=e._sentryDeb
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 3b 69 66 28 6e 26 26 6e 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 6e 2e 67 65 74 28 65 29 3b 76 61 72 20 61 3d 7b 7d 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 69 66 28 22 64 65 66 61 75 6c 74 22 21 3d 3d 69 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 69 29 29 7b 76 61 72 20 6c 3d 6f 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 69 29 3a 6e 75 6c 6c 3b 6c 26 26 28 6c 2e 67 65 74 7c 7c 6c 2e 73 65 74 29 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: ;if(n&&n.has(e))return n.get(e);var a={},o=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var i in e)if("default"!==i&&Object.prototype.hasOwnProperty.call(e,i)){var l=o?Object.getOwnPropertyDescriptor(e,i):null;l&&(l.get\|\|l.set)?Object.define
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 6e 65 22 2c 22 72 65 61 64 6f 6e 6c 79 22 2c 22 72 65 71 75 69 72 65 64 22 2c 22 72 65 76 65 72 73 65 64 22 2c 22 73 63 6f 70 65 64 22 2c 22 73 65 61 6d 6c 65 73 73 22 2c 22 73 65 6c 65 63 74 65 64 22 2c 22 69 74 65 6d 73 63 6f 70 65 22 5d 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 7d 2c 35 37 39 35 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 6e 3d 5b 22 6f 6e 61 62 6f 72 74 22 2c 22 6f 6e 61 64 64 73 6f 75 72 63 65 62 75 66 66 65 72 22 2c 22 6f 6e 61 64 64 74 72 61 63 6b 22 2c 22 6f 6e 61 66 74 65 72 70 72 69 6e Data Ascii: ne","readonly","required","reversed","scoped","seamless","selected","itemscope"];t.default=n},57953:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var n=["onabort","onaddsourcebuffer","onaddtrack","onafterprin
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 64 65 64 6d 65 74 61 64 61 74 61 22 2c 22 6f 6e 6c 6f 61 64 65 6e 64 22 2c 22 6f 6e 6c 6f 61 64 69 6e 67 22 2c 22 6f 6e 6c 6f 61 64 69 6e 67 64 6f 6e 65 22 2c 22 6f 6e 6c 6f 61 64 69 6e 67 65 72 72 6f 72 22 2c 22 6f 6e 6c 6f 61 64 73 74 61 72 74 22 2c 22 6f 6e 6c 6f 73 74 70 6f 69 6e 74 65 72 63 61 70 74 75 72 65 22 2c 22 6f 6e 6d 61 72 6b 22 2c 22 6f 6e 6d 65 73 73 61 67 65 22 2c 22 6f 6e 6d 65 73 73 61 67 65 65 72 72 6f 72 22 2c 22 6f 6e 6d 6f 75 73 65 64 6f 77 6e 22 2c 22 6f 6e 6d 6f 75 73 65 65 6e 74 65 72 22 2c 22 6f 6e 6d 6f 75 73 65 6c 65 61 76 65 22 2c 22 6f 6e 6d 6f 75 73 65 6d 6f 76 65 22 2c 22 6f 6e 6d 6f 75 73 65 6f 75 74 22 2c 22 6f 6e 6d 6f 75 73 65 6f 76 65 72 22 2c 22 6f 6e 6d 6f 75 73 65 75 70 22 2c 22 6f 6e 6d 75 74 65 22 2c 22 6f 6e 6e Data Ascii: dedmetadata","onloadend","onloading","onloadingdone","onloadingerror","onloadstart","onlostpointercapture","onmark","onmessage","onmessageerror","onmousedown","onmouseenter","onmouseleave","onmousemove","onmouseout","onmouseover","onmouseup","onmute","onn
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 6e 65 65 64 65 64 22 2c 22 6f 6e 76 65 72 73 69 6f 6e 63 68 61 6e 67 65 22 2c 22 6f 6e 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 22 6f 6e 76 6f 69 63 65 73 63 68 61 6e 67 65 64 22 2c 22 6f 6e 76 6f 6c 75 6d 65 63 68 61 6e 67 65 22 2c 22 6f 6e 77 61 69 74 69 6e 67 22 2c 22 6f 6e 77 61 69 74 69 6e 67 66 6f 72 6b 65 79 22 2c 22 6f 6e 77 65 62 6b 69 74 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 22 6f 6e 77 65 62 6b 69 74 61 6e 69 6d 61 74 69 6f 6e 69 74 65 72 61 74 69 6f 6e 22 2c 22 6f 6e 77 65 62 6b 69 74 61 6e 69 6d 61 74 69 6f 6e 73 74 61 72 74 22 2c 22 6f 6e 77 65 62 6b 69 74 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 22 6f 6e 77 68 65 65 6c 22 5d 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 7d 2c 34 33 35 36 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: needed","onversionchange","onvisibilitychange","onvoiceschanged","onvolumechange","onwaiting","onwaitingforkey","onwebkitanimationend","onwebkitanimationiteration","onwebkitanimationstart","onwebkittransitionend","onwheel"];t.default=n},43562:function(e,t
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 67 22 2c 66 6f 72 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 68 74 74 70 2d 65 71 75 69 76 22 3a 22 68 74 74 70 45 71 75 69 76 22 2c 69 63 6f 6e 3a 22 69 63 6f 6e 22 2c 69 64 3a 22 69 64 22 2c 69 6e 70 75 74 6d 6f 64 65 3a 22 69 6e 70 75 74 4d 6f 64 65 22 2c 69 6e 74 65 67 72 69 74 79 3a 22 69 6e 74 65 67 72 69 74 79 22 2c 69 73 3a 22 69 73 22 2c 6b 65 79 70 61 72 61 6d 73 3a 22 6b 65 79 50 61 72 61 6d 73 22 2c 6b 65 79 74 79 70 65 3a 22 6b 65 79 54 79 70 65 22 2c 6b 69 6e 64 3a 22 6b 69 6e 64 22 2c 6c 61 62 65 6c 3a 22 6c 61 62 65 6c 22 2c 6c 61 6e 67 3a 22 6c 61 6e 67 22 2c 6c 69 73 74 3a 22 6c 69 73 74 22 2c 6c 6f 6f 70 3a 22 6c 6f 6f 70 22 2c 6c 6f 77 3a 22 6c 6f 77 22 2c 6d 61 6e 69 66 65 73 74 3a 22 6d 61 6e 69 66 65 73 74 22 2c 6d 61 72 67 69 6e 68 65 69 Data Ascii: g",for:"htmlFor","http-equiv":"httpEquiv",icon:"icon",id:"id",inputmode:"inputMode",integrity:"integrity",is:"is",keyparams:"keyParams",keytype:"keyType",kind:"kind",label:"label",lang:"lang",list:"list",loop:"loop",low:"low",manifest:"manifest",marginhei
2025-04-07 13:14:12 UTC	1291	IN	Data Raw: 6f 75 72 63 65 22 2c 74 79 70 65 6f 66 3a 22 74 79 70 65 6f 66 22 2c 76 6f 63 61 62 3a 22 76 6f 63 61 62 22 2c 61 75 74 6f 63 61 70 69 74 61 6c 69 7a 65 3a 22 61 75 74 6f 43 61 70 69 74 61 6c 69 7a 65 22 2c 61 75 74 6f 63 6f 72 72 65 63 74 3a 22 61 75 74 6f 43 6f 72 72 65 63 74 22 2c 61 75 74 6f 73 61 76 65 3a 22 61 75 74 6f 53 61 76 65 22 2c 63 6f 6c 6f 72 3a 22 63 6f 6c 6f 72 22 2c 69 74 65 6d 70 72 6f 70 3a 22 69 74 65 6d 50 72 6f 70 22 2c 69 74 65 6d 73 63 6f 70 65 3a 22 69 74 65 6d 53 63 6f 70 65 22 2c 69 74 65 6d 74 79 70 65 3a 22 69 74 65 6d 54 79 70 65 22 2c 69 74 65 6d 69 64 3a 22 69 74 65 6d 49 44 22 2c 69 74 65 6d 72 65 66 3a 22 69 74 65 6d 52 65 66 22 2c 72 65 73 75 6c 74 73 3a 22 72 65 73 75 6c 74 73 22 2c 73 65 63 75 72 69 74 79 3a 22 73 65 Data Ascii: ource",typeof:"typeof",vocab:"vocab",autocapitalize:"autoCapitalize",autocorrect:"autoCorrect",autosave:"autoSave",color:"color",itemprop:"itemProp",itemscope:"itemScope",itemtype:"itemType",itemid:"itemID",itemref:"itemRef",results:"results",security:"se
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 37 66 65 61 0d 0a 72 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2c 75 2c 64 29 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 63 7d 2c 36 35 30 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 64 61 74 61 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 7d 2c 32 35 33 37 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f Data Ascii: 7fear.default.createElement(c,u,d)};t.default=c},65084:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var n=function(e){return e.data};t.default=n},25376:function(e,t){"use strict";Object.defineProperty(t,"_
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 2e 44 69 72 65 63 74 69 76 65 2c 6c 2e 64 65 66 61 75 6c 74 29 2c 64 28 72 2c 61 2e 45 6c 65 6d 65 6e 74 54 79 70 65 2e 43 6f 6d 6d 65 6e 74 2c 6c 2e 64 65 66 61 75 6c 74 29 2c 64 28 72 2c 61 2e 45 6c 65 6d 65 6e 74 54 79 70 65 2e 53 63 72 69 70 74 2c 6c 2e 64 65 66 61 75 6c 74 29 2c 64 28 72 2c 61 2e 45 6c 65 6d 65 6e 74 54 79 70 65 2e 43 44 41 54 41 2c 6c 2e 64 65 66 61 75 6c 74 29 2c 64 28 72 2c 61 2e 45 6c 65 6d 65 6e 74 54 79 70 65 2e 44 6f 63 74 79 70 65 2c 6c 2e 64 65 66 61 75 6c 74 29 2c 72 29 3b 74 2e 64 65 66 61 75 6c 74 3d 66 7d 2c 39 39 33 39 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 Data Ascii: .Directive,l.default),d(r,a.ElementType.Comment,l.default),d(r,a.ElementType.Script,l.default),d(r,a.ElementType.CDATA,l.default),d(r,a.ElementType.Doctype,l.default),r);t.default=f},99399:function(e,t,n){"use strict";function r(e){return r="function"==ty
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 65 29 7d 29 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 29 7b 76 61 72 20 61 3d 74 28 65 2c 6e 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 61 7c 7c 61 29 72 65 74 75 72 6e 20 61 7d 72 65 74 75 72 6e 28 30 2c 72 2e 64 65 66 61 75 6c 74 29 28 65 2c 6e 2c 74 29 7d 29 29 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 69 7d 2c 31 36 30 36 33 3a Data Ascii: tion o(e){return e&&e.__esModule?e:{default:e}}var i=function(e,t){return e.filter((function(e){return!(0,a.default)(e)})).map((function(e,n){if("function"===typeof t){var a=t(e,n);if(null===a\|\|a)return a}return(0,r.default)(e,n,t)}))};t.default=i},16063:

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:12 UTC	675	OUT	GET /sdk.config.get?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa&httpStatusCodes=true&ver=1744031640000 HTTP/1.1 Host: identity.rac.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.rac.co.uk Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.rac.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:14:12 UTC	710	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 5007 Connection: close access-control-allow-origin: * Cache-Control: public, s-maxage=120, max-age=60 edge-cache-tag: siteid_807894263556 p3p: CP="IDC COR PSA DEV ADM OUR IND ONL" x-error-code: 0 x-soa: true, Gator x-server: gator-eu1-prod-7f99cb54df-9xqkh x-callid: 6e68e125c0004f0ea32076edff0fc7fe x-robots-tag: none Date: Mon, 07 Apr 2025 13:14:12 GMT Accept-Ranges: bytes x-robots-tag: none Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 55c4f7128709ec1132b875a94abd9a88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P6 X-Amz-Cf-Id: V_gm-hCQxlSX4EKVVYpkZRu-KeB8T3H9m7-BIHHzFCUPeRlk_6eR8w==
2025-04-07 13:14:12 UTC	5007	IN	Data Raw: 7b 0d 0a 20 20 22 63 61 6c 6c 49 64 22 3a 20 22 36 65 36 38 65 31 32 35 63 30 30 30 34 66 30 65 61 33 32 30 37 36 65 64 66 66 30 66 63 37 66 65 22 2c 0d 0a 20 20 22 65 72 72 6f 72 43 6f 64 65 22 3a 20 30 2c 0d 0a 20 20 22 61 70 69 56 65 72 73 69 6f 6e 22 3a 20 32 2c 0d 0a 20 20 22 73 74 61 74 75 73 43 6f 64 65 22 3a 20 32 30 30 2c 0d 0a 20 20 22 73 74 61 74 75 73 52 65 61 73 6f 6e 22 3a 20 22 4f 4b 22 2c 0d 0a 20 20 22 74 69 6d 65 22 3a 20 22 32 30 32 35 2d 30 34 2d 30 37 54 31 33 3a 31 34 3a 30 30 2e 36 39 35 5a 22 2c 0d 0a 20 20 22 66 6c 61 67 73 22 3a 20 7b 0d 0a 20 20 20 20 22 61 64 64 47 69 67 53 6f 63 69 61 6c 4c 6f 67 69 6e 50 61 72 61 6d 54 6f 52 65 64 69 72 65 63 74 55 72 6c 22 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 22 63 68 65 63 6b 54 6f 6b Data Ascii: { "callId": "6e68e125c0004f0ea32076edff0fc7fe", "errorCode": 0, "apiVersion": 2, "statusCode": 200, "statusReason": "OK", "time": "2025-04-07T13:14:00.695Z", "flags": { "addGigSocialLoginParamToRedirectUrl": false, "checkTok

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://t.go.rac.co.uk/r/?id=hdbca1b06,4986fb17,b63dba

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Windows Analysis Report
https://t.go.rac.co.uk/r/?id=hdbca1b06,4986fb17,b63dba

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:12 UTC	621	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive Origin: https://www.rac.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.rac.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:14:12 UTC	373	IN	HTTP/1.1 200 OK Date: Mon, 07 Apr 2025 13:14:12 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 92c9c965aec95f74-EWR
2025-04-07 13:14:12 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2025-04-07 13:14:12 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:12 UTC	600	OUT	GET /resolve?type=PTR&name=www.rac.co.uk.query.publicsuffix.zone HTTP/1.1 Host: doh.cq0.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.rac.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.rac.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:14:12 UTC	720	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * Date: Sat, 05 Apr 2025 03:05:41 GMT Expires: Sat, 05 Apr 2025 03:05:41 GMT Cache-Control: max-age=300 Server: HTTP server (unknown) X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Accept-Ranges: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4bcc80622a10d0ee4a55e5fd4f387c84.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Rb83JCMZLXcr5NNZS0WUEb46oD-iwDdG31jnA1J50rLhctWDIJnt2Q== Age: 209311
2025-04-07 13:14:12 UTC	386	IN	Data Raw: 31 37 62 0d 0a 7b 22 53 74 61 74 75 73 22 3a 30 2c 22 54 43 22 3a 66 61 6c 73 65 2c 22 52 44 22 3a 74 72 75 65 2c 22 52 41 22 3a 74 72 75 65 2c 22 41 44 22 3a 74 72 75 65 2c 22 43 44 22 3a 66 61 6c 73 65 2c 22 51 75 65 73 74 69 6f 6e 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 77 77 2e 72 61 63 2e 63 6f 2e 75 6b 2e 71 75 65 72 79 2e 70 75 62 6c 69 63 73 75 66 66 69 78 2e 7a 6f 6e 65 2e 22 2c 22 74 79 70 65 22 3a 31 32 7d 5d 2c 22 41 6e 73 77 65 72 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 77 77 2e 72 61 63 2e 63 6f 2e 75 6b 2e 71 75 65 72 79 2e 70 75 62 6c 69 63 73 75 66 66 69 78 2e 7a 6f 6e 65 2e 22 2c 22 74 79 70 65 22 3a 35 2c 22 54 54 4c 22 3a 32 31 36 30 30 2c 22 64 61 74 61 22 3a 22 63 6f 2e 75 6b 2e 71 75 65 72 79 2e 70 75 62 6c 69 63 73 75 66 66 69 78 2e Data Ascii: 17b{"Status":0,"TC":false,"RD":true,"RA":true,"AD":true,"CD":false,"Question":[{"name":"www.rac.co.uk.query.publicsuffix.zone.","type":12}],"Answer":[{"name":"www.rac.co.uk.query.publicsuffix.zone.","type":5,"TTL":21600,"data":"co.uk.query.publicsuffix.
2025-04-07 13:14:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:12 UTC	567	OUT	GET /v3/vendor-list.json HTTP/1.1 Host: iab.ensighten.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.rac.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.rac.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:14:12 UTC	1003	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 692555 Connection: close Date: Thu, 03 Apr 2025 16:25:09 GMT Last-Modified: Thu, 03 Apr 2025 16:07:59 GMT ETag: "3b71dee3ad1ea5a08d9ff63afe4151a5" x-amz-server-side-encryption: AES256 Cache-Control: max-age=604800 x-amz-version-id: T_bN_9UdUIoXfpjWUnOP9dXa5gpHazSF Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 76f3fedc86826a7b266250e33ee41082.cloudfront.net (CloudFront), 1.1 9d75edcf5a40394118428c99809b7ff6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P1 Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK52-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 3raLMHD5JxKBjQ84lgWydWpilbMeRmOQQ46Jv6njaWiXF5_0VyrIZg== Age: 334144 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2025-04-07 13:14:12 UTC	16384	IN	Data Raw: 7b 22 67 76 6c 53 70 65 63 69 66 69 63 61 74 69 6f 6e 56 65 72 73 69 6f 6e 22 3a 33 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 31 30 30 2c 22 74 63 66 50 6f 6c 69 63 79 56 65 72 73 69 6f 6e 22 3a 35 2c 22 6c 61 73 74 55 70 64 61 74 65 64 22 3a 22 32 30 32 35 2d 30 34 2d 30 33 54 31 36 3a 30 37 3a 35 38 5a 22 2c 22 70 75 72 70 6f 73 65 73 22 3a 7b 22 31 22 3a 7b 22 69 64 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 53 74 6f 72 65 20 61 6e 64 2f 6f 72 20 61 63 63 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 61 20 64 65 76 69 63 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6f 6b 69 65 73 2c 20 64 65 76 69 63 65 20 6f 72 20 73 69 6d 69 6c 61 72 20 6f 6e 6c 69 6e 65 20 69 64 65 6e 74 69 66 69 65 72 73 20 28 65 2e 67 2e 20 Data Ascii: {"gvlSpecificationVersion":3,"vendorListVersion":100,"tcfPolicyVersion":5,"lastUpdated":"2025-04-03T16:07:58Z","purposes":{"1":{"id":1,"name":"Store and/or access information on a device","description":"Cookies, device or similar online identifiers (e.g.
2025-04-07 13:14:12 UTC	16384	IN	Data Raw: 65 63 61 75 73 65 20 79 6f 75 20 61 72 65 20 6c 6f 67 67 65 64 20 69 6e 20 74 6f 20 74 68 65 20 73 61 6d 65 20 73 65 72 76 69 63 65 20 6f 6e 20 62 6f 74 68 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 2c 20 6f 72 20 62 65 63 61 75 73 65 20 79 6f 75 20 6d 61 79 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 49 6e 74 65 72 6e 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 62 6f 74 68 20 64 65 76 69 63 65 73 29 2e 22 2c 22 69 6c 6c 75 73 74 72 61 74 69 6f 6e 73 22 3a 5b 5d 7d 2c 22 33 22 3a 7b 22 69 64 22 3a 33 2c 22 6e 61 6d 65 22 3a 22 49 64 65 6e 74 69 66 79 20 64 65 76 69 63 65 73 20 62 61 73 65 64 20 6f 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 72 61 6e 73 6d 69 74 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c Data Ascii: ecause you are logged in to the same service on both your phone and your computer, or because you may use the same Internet connection on both devices).","illustrations":[]},"3":{"id":3,"name":"Identify devices based on information transmitted automatical
2025-04-07 13:14:12 UTC	16384	IN	Data Raw: 6e 20 79 6f 75 72 20 61 63 74 69 76 69 74 79 20 61 6e 64 20 74 68 6f 73 65 20 6f 66 20 6f 74 68 65 72 73 2e 20 59 6f 75 72 20 61 63 74 69 76 69 74 79 20 6f 6e 20 74 68 69 73 20 73 65 72 76 69 63 65 20 63 61 6e 20 68 65 6c 70 20 64 65 76 65 6c 6f 70 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 70 72 6f 64 75 63 74 73 20 61 6e 64 20 73 65 72 76 69 63 65 73 2e 22 7d 2c 22 34 31 22 3a 7b 22 69 64 22 3a 34 31 2c 22 70 75 72 70 6f 73 65 73 22 3a 5b 32 2c 33 2c 34 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 5d 2c 22 73 70 65 63 69 61 6c 46 65 61 74 75 72 65 73 22 3a 5b 5d 2c 22 6e 61 6d 65 22 3a 22 50 65 72 73 6f 6e 61 6c 69 73 65 64 20 61 64 76 65 72 74 69 73 69 6e 67 2c 20 73 65 6c 65 63 74 69 6f 6e 20 6f 66 20 70 65 72 73 6f 6e 61 6c 69 73 65 64 20 63 6f 6e 74 65 6e Data Ascii: n your activity and those of others. Your activity on this service can help develop and improve products and services."},"41":{"id":41,"purposes":[2,3,4,6,7,8,9,10,11],"specialFeatures":[],"name":"Personalised advertising, selection of personalised conten
2025-04-07 13:14:12 UTC	16384	IN	Data Raw: 30 2c 22 70 75 72 70 6f 73 65 73 22 3a 7b 22 32 22 3a 33 30 2c 22 33 22 3a 31 32 30 2c 22 34 22 3a 31 32 30 7d 2c 22 73 70 65 63 69 61 6c 50 75 72 70 6f 73 65 73 22 3a 7b 7d 7d 2c 22 64 61 74 61 44 65 63 6c 61 72 61 74 69 6f 6e 22 3a 5b 31 2c 32 2c 33 2c 34 2c 36 2c 38 2c 31 30 2c 31 31 5d 2c 22 64 65 76 69 63 65 53 74 6f 72 61 67 65 44 69 73 63 6c 6f 73 75 72 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 73 2e 61 6d 6f 62 65 65 2e 63 6f 6d 2f 66 69 6c 65 73 2f 54 43 46 44 69 73 63 6c 6f 73 75 72 65 22 7d 2c 22 32 34 22 3a 7b 22 69 64 22 3a 32 34 2c 22 6e 61 6d 65 22 3a 22 45 70 73 69 6c 6f 6e 22 2c 22 70 75 72 70 6f 73 65 73 22 3a 5b 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 5d 2c 22 6c 65 67 49 6e 74 50 75 Data Ascii: 0,"purposes":{"2":30,"3":120,"4":120},"specialPurposes":{}},"dataDeclaration":[1,2,3,4,6,8,10,11],"deviceStorageDisclosureUrl":"https://services.amobee.com/files/TCFDisclosure"},"24":{"id":24,"name":"Epsilon","purposes":[1,2,3,4,5,6,7,8,9,10,11],"legIntPu
2025-04-07 13:14:13 UTC	16384	IN	Data Raw: 22 65 6e 22 2c 22 70 72 69 76 61 63 79 22 3a 22 68 74 74 70 73 3a 2f 2f 65 71 75 61 74 69 76 2e 63 6f 6d 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 2c 22 6c 65 67 49 6e 74 43 6c 61 69 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 65 71 75 61 74 69 76 2e 63 6f 6d 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 7d 5d 2c 22 75 73 65 73 4e 6f 6e 43 6f 6f 6b 69 65 41 63 63 65 73 73 22 3a 74 72 75 65 2c 22 64 61 74 61 52 65 74 65 6e 74 69 6f 6e 22 3a 7b 22 73 74 64 52 65 74 65 6e 74 69 6f 6e 22 3a 35 30 2c 22 70 75 72 70 6f 73 65 73 22 3a 7b 7d 2c 22 73 70 65 63 69 61 6c 50 75 72 70 6f 73 65 73 22 3a 7b 7d 7d 2c 22 64 61 74 61 44 65 63 6c 61 72 61 74 69 6f 6e 22 3a 5b 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 38 2c 39 2c 31 30 2c 31 31 5d 2c 22 64 65 76 69 63 65 53 Data Ascii: "en","privacy":"https://equativ.com/privacy-policy/","legIntClaim":"https://equativ.com/privacy-policy/"}],"usesNonCookieAccess":true,"dataRetention":{"stdRetention":50,"purposes":{},"specialPurposes":{}},"dataDeclaration":[1,2,3,4,5,6,8,9,10,11],"deviceS
2025-04-07 13:14:13 UTC	16384	IN	Data Raw: 61 74 65 6e 73 63 68 75 74 7a 2f 22 2c 22 6c 65 67 49 6e 74 43 6c 61 69 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 69 65 6c 64 6c 61 62 2e 63 6f 6d 2f 64 61 74 65 6e 73 63 68 75 74 7a 2f 22 7d 2c 7b 22 6c 61 6e 67 49 64 22 3a 22 65 6e 22 2c 22 70 72 69 76 61 63 79 22 3a 22 68 74 74 70 73 3a 2f 2f 79 69 65 6c 64 6c 61 62 2e 63 6f 6d 2f 70 72 69 76 61 63 79 2d 70 6c 61 74 66 6f 72 6d 2f 22 2c 22 6c 65 67 49 6e 74 43 6c 61 69 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 79 69 65 6c 64 6c 61 62 2e 63 6f 6d 2f 70 72 69 76 61 63 79 2d 70 6c 61 74 66 6f 72 6d 2f 22 7d 5d 2c 22 75 73 65 73 4e 6f 6e 43 6f 6f 6b 69 65 41 63 63 65 73 73 22 3a 74 72 75 65 2c 22 64 61 74 61 52 65 74 65 6e 74 69 6f 6e 22 3a 7b 22 73 74 64 52 65 74 65 6e 74 69 6f 6e 22 3a 39 30 2c 22 70 Data Ascii: atenschutz/","legIntClaim":"https://www.yieldlab.com/datenschutz/"},{"langId":"en","privacy":"https://yieldlab.com/privacy-platform/","legIntClaim":"https://yieldlab.com/privacy-platform/"}],"usesNonCookieAccess":true,"dataRetention":{"stdRetention":90,"p
2025-04-07 13:14:13 UTC	16384	IN	Data Raw: 64 22 2c 22 70 75 72 70 6f 73 65 73 22 3a 5b 31 2c 32 2c 33 2c 34 2c 37 2c 39 2c 31 30 5d 2c 22 6c 65 67 49 6e 74 50 75 72 70 6f 73 65 73 22 3a 5b 5d 2c 22 66 6c 65 78 69 62 6c 65 50 75 72 70 6f 73 65 73 22 3a 5b 5d 2c 22 73 70 65 63 69 61 6c 50 75 72 70 6f 73 65 73 22 3a 5b 31 2c 32 5d 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 31 2c 32 2c 33 5d 2c 22 73 70 65 63 69 61 6c 46 65 61 74 75 72 65 73 22 3a 5b 31 5d 2c 22 63 6f 6f 6b 69 65 4d 61 78 41 67 65 53 65 63 6f 6e 64 73 22 3a 33 31 35 34 30 30 30 30 2c 22 75 73 65 73 43 6f 6f 6b 69 65 73 22 3a 74 72 75 65 2c 22 63 6f 6f 6b 69 65 52 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 75 72 6c 73 22 3a 5b 7b 22 6c 61 6e 67 49 64 22 3a 22 65 6e 22 2c 22 70 72 69 76 61 63 79 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e Data Ascii: d","purposes":[1,2,3,4,7,9,10],"legIntPurposes":[],"flexiblePurposes":[],"specialPurposes":[1,2],"features":[1,2,3],"specialFeatures":[1],"cookieMaxAgeSeconds":31540000,"usesCookies":true,"cookieRefresh":true,"urls":[{"langId":"en","privacy":"https://www.
2025-04-07 13:14:13 UTC	11087	IN	Data Raw: 75 65 2c 22 64 61 74 61 52 65 74 65 6e 74 69 6f 6e 22 3a 7b 22 73 74 64 52 65 74 65 6e 74 69 6f 6e 22 3a 37 33 30 2c 22 70 75 72 70 6f 73 65 73 22 3a 7b 7d 2c 22 73 70 65 63 69 61 6c 50 75 72 70 6f 73 65 73 22 3a 7b 7d 7d 2c 22 64 61 74 61 44 65 63 6c 61 72 61 74 69 6f 6e 22 3a 5b 31 2c 32 2c 33 2c 34 2c 36 2c 37 2c 38 2c 31 30 2c 31 31 5d 2c 22 64 65 76 69 63 65 53 74 6f 72 61 67 65 44 69 73 63 6c 6f 73 75 72 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 74 72 6f 65 65 72 2e 64 65 2f 53 74 72 6f 65 65 72 44 53 50 5f 64 65 76 69 63 65 53 74 6f 72 61 67 65 2e 6a 73 6f 6e 22 7d 2c 22 31 33 38 22 3a 7b 22 69 64 22 3a 31 33 38 2c 22 6e 61 6d 65 22 3a 22 43 6f 6e 6e 65 63 74 41 64 20 44 65 6d 61 6e 64 20 47 6d 62 48 22 2c 22 70 75 72 70 6f 73 65 Data Ascii: ue,"dataRetention":{"stdRetention":730,"purposes":{},"specialPurposes":{}},"dataDeclaration":[1,2,3,4,6,7,8,10,11],"deviceStorageDisclosureUrl":"https://www.stroeer.de/StroeerDSP_deviceStorage.json"},"138":{"id":138,"name":"ConnectAd Demand GmbH","purpose
2025-04-07 13:14:13 UTC	4096	IN	Data Raw: 49 6e 74 50 75 72 70 6f 73 65 73 22 3a 5b 5d 2c 22 66 6c 65 78 69 62 6c 65 50 75 72 70 6f 73 65 73 22 3a 5b 5d 2c 22 73 70 65 63 69 61 6c 50 75 72 70 6f 73 65 73 22 3a 5b 31 2c 32 5d 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 5d 2c 22 73 70 65 63 69 61 6c 46 65 61 74 75 72 65 73 22 3a 5b 5d 2c 22 63 6f 6f 6b 69 65 4d 61 78 41 67 65 53 65 63 6f 6e 64 73 22 3a 33 31 35 33 36 30 30 30 2c 22 75 73 65 73 43 6f 6f 6b 69 65 73 22 3a 74 72 75 65 2c 22 63 6f 6f 6b 69 65 52 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 75 72 6c 73 22 3a 5b 7b 22 6c 61 6e 67 49 64 22 3a 22 65 6e 22 2c 22 70 72 69 76 61 63 79 22 3a 22 68 74 74 70 73 3a 2f 2f 75 6e 64 65 72 64 6f 67 6d 65 64 69 61 2e 63 6f 6d 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 2c 22 6c 65 67 49 6e 74 43 6c 61 Data Ascii: IntPurposes":[],"flexiblePurposes":[],"specialPurposes":[1,2],"features":[],"specialFeatures":[],"cookieMaxAgeSeconds":31536000,"usesCookies":true,"cookieRefresh":true,"urls":[{"langId":"en","privacy":"https://underdogmedia.com/privacy-policy/","legIntCla
2025-04-07 13:14:13 UTC	16384	IN	Data Raw: 63 6f 6f 6b 69 65 52 65 66 72 65 73 68 22 3a 66 61 6c 73 65 2c 22 75 72 6c 73 22 3a 5b 7b 22 6c 61 6e 67 49 64 22 3a 22 65 6e 22 2c 22 70 72 69 76 61 63 79 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 67 6e 69 74 65 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 61 64 76 65 72 74 69 73 69 6e 67 2d 74 65 63 68 6e 6f 6c 6f 67 79 2d 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 2c 22 6c 65 67 49 6e 74 43 6c 61 69 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 67 6e 69 74 65 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 61 64 76 65 72 74 69 73 69 6e 67 2d 74 65 63 68 6e 6f 6c 6f 67 79 2d 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 7d 5d 2c 22 75 73 65 73 4e 6f 6e 43 6f 6f 6b 69 65 41 63 63 65 73 73 22 3a 74 72 75 65 2c 22 64 61 74 61 52 65 74 65 6e 74 69 6f 6e 22 3a Data Ascii: cookieRefresh":false,"urls":[{"langId":"en","privacy":"https://www.magnite.com/legal/advertising-technology-privacy-policy/","legIntClaim":"https://www.magnite.com/legal/advertising-technology-privacy-policy/"}],"usesNonCookieAccess":true,"dataRetention":

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:13 UTC	969	OUT	GET /gs/webSdk/Api.aspx?apiKey=3_XE1UzW6Ribis2wghqXOTfrWWUYjpYC-_M0SoLFJsRH8e06hJkHnkhllrLjTas8Xa&version=latest&build=17250&serviceName=apiService HTTP/1.1 Host: identity.rac.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.rac.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AMCV_6797C27A57DFC4097F000101%40AdobeOrg=MCMID%7C57646075230342348791702254968590827519; nlid=dbca1b06\|4986fb17; nllastdelid=4986fb17
2025-04-07 13:14:13 UTC	865	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 131736 Connection: close access-control-allow-origin: * Cache-Control: public, s-maxage=3600, max-age=900 edge-cache-tag: siteid_807894263556,ver_latest strict-transport-security: max-age=63072000; includeSubDomains; preload x-sdk-version: latest p3p: CP="IDC COR PSA DEV ADM OUR IND ONL" x-error-code: 0 x-soa: true, Gator x-server: gator-eu1-prod-7f99cb54df-hdgtd x-callid: 94177a7a10a34542b4b5c1063f2af154 x-robots-tag: none ETag: W/6c61746573747c31373434303239383732363830 Date: Mon, 07 Apr 2025 13:14:13 GMT Accept-Ranges: bytes x-robots-tag: none Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1b4fcdcf534aed5a7a4dae6e1d54fc52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P6 X-Amz-Cf-Id: J_VT0Jrbv39wWgxgPg6cKvEIAmT0IjhDO0aqCAgqRdrQcR9WPD9FYw==
2025-04-07 13:14:13 UTC	7887	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 76 61 72 20 67 69 67 79 61 20 3d 20 77 69 6e 64 6f 77 2e 67 69 67 79 61 3b 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 67 69 67 79 61 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 21 67 69 67 79 61 2e 69 73 47 69 67 79 61 29 20 7b 0d 0a 20 20 20 20 67 69 67 79 61 20 3d 20 7b 69 73 47 69 67 79 61 3a 20 74 72 75 65 7d 3b 0d 0a 7d 0d 0a 67 69 67 79 61 2e 61 70 69 4b 65 79 20 3d 20 27 33 5f 58 45 31 55 7a 57 36 52 69 62 69 73 32 77 67 68 71 58 4f 54 66 72 57 57 55 59 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><title></title><script>var gigya = window.gigya;if (typeof gigya == 'undefined' \|\| !gigya.isGigya) { gigya = {isGigya: true};}gigya.apiKey = '3_XE1UzW6Ribis2wghqXOTfrWWUY
2025-04-07 13:14:13 UTC	16384	IN	Data Raw: 65 3b 76 61 72 20 74 3d 7b 7d 3b 69 66 28 6e 75 6c 6c 21 3d 65 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 3d 65 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 2c 74 29 7b 69 66 28 21 74 2e 68 61 73 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 67 65 74 20 70 72 69 76 61 74 65 20 66 69 65 6c 64 20 6f 6e 20 6e 6f 6e 2d 69 6e 73 74 61 6e 63 65 22 29 3b 72 65 Data Ascii: e;var t={};if(null!=e)for(var n in e)Object.hasOwnProperty.call(e,n)&&(t[n]=e[n]);return t.default=e,t}function S(e){return e&&e.__esModule?e:{default:e}}function P(e,t){if(!t.has(e))throw new TypeError("attempted to get private field on non-instance");re
2025-04-07 13:14:13 UTC	10872	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 2b 2b 61 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 2c 6e 29 7b 65 26 26 6e 26 26 28 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 21 30 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 2c 6e 29 7b 65 26 26 6e 26 26 28 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 21 30 29 3a 65 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 73 26 26 28 6c 28 77 69 6e 64 6f 77 2c 22 68 61 73 68 63 68 Data Ascii: ;function u(){return++a}function c(e,t,n){e&&n&&(e.addEventListener?e.addEventListener(t,n,!0):e.attachEvent("on"+t,n))}function l(e,t,n){e&&n&&(e.removeEventListener?e.removeEventListener(t,n,!0):e.detachEvent("on"+t,n))}function d(){s&&(l(window,"hashch
2025-04-07 13:14:13 UTC	16384	IN	Data Raw: 29 2c 5b 33 2c 35 5d 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 5b 32 2c 64 5d 7d 7d 29 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 75 70 57 69 74 68 53 74 6f 72 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 72 2e 5f 5f 61 77 61 69 74 65 72 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 6f 2c 73 2c 75 2c 63 2c 6c 3b 72 65 74 75 72 6e 20 72 2e 5f 5f 67 65 6e 65 72 61 74 6f 72 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 73 77 69 74 63 68 28 72 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 69 3d 74 68 69 73 2e 5f 73 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 74 2e 54 6f 6b 65 6e 4b 65 79 73 2e 47 4d Data Ascii: ),[3,5];case 5:return[2,d]}}))}))},e.prototype.setupWithStorage=function(e){var n;return r.__awaiter(this,void 0,void 0,(function(){var i,o,s,u,c,l;return r.__generator(this,(function(r){switch(r.label){case 0:return i=this._storage.getItem(t.TokenKeys.GM
2025-04-07 13:14:13 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 28 22 66 6f 72 63 65 45 72 72 6f 72 52 65 70 6f 72 74 22 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 73 6b 69 70 53 61 6d 65 53 63 72 65 65 6e 43 68 65 63 6b 4f 6e 53 77 69 74 63 68 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 28 22 73 6b 69 70 53 61 6d 65 53 63 72 65 65 6e 43 68 65 63 6b 4f 6e 53 77 69 74 63 68 22 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 75 70 64 61 74 65 41 63 63 Data Ascii: ){return this.get("forceErrorReport")},enumerable:!0,configurable:!0}),Object.defineProperty(e,"skipSameScreenCheckOnSwitch",{get:function(){return this.get("skipSameScreenCheckOnSwitch")},enumerable:!0,configurable:!0}),Object.defineProperty(e,"updateAcc
2025-04-07 13:14:13 UTC	15596	IN	Data Raw: 3a 65 26 26 74 26 26 74 21 3d 3d 72 3f 65 2b 22 2e 22 2b 74 3a 66 28 76 6f 69 64 20 30 2c 6e 2c 72 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 72 65 74 75 72 6e 20 63 2e 64 65 66 61 75 6c 74 2e 67 65 74 28 22 70 61 67 65 73 5f 61 70 69 44 6f 6d 61 69 6e 5f 22 2b 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 61 70 69 4b 65 79 29 7d 74 2e 61 70 69 44 6f 6d 61 69 6e 46 61 63 74 6f 72 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 70 28 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 64 65 66 61 75 6c 74 41 70 69 44 6f 6d 61 69 6e 29 3b 76 61 72 20 6e 3d 61 2e 55 72 69 2e 70 61 72 73 65 28 65 29 2e 69 73 49 6e 28 61 2e 55 72 69 2e 70 61 72 73 65 28 74 29 29 3b 72 65 74 75 Data Ascii: :e&&t&&t!==r?e+"."+t:f(void 0,n,r))}function h(){return c.default.get("pages_apiDomain_"+window.gigya.apiKey)}t.apiDomainFactory=function(e,t){void 0===e&&(e=p()),void 0===t&&(t=window.gigya.defaultApiDomain);var n=a.Uri.parse(e).isIn(a.Uri.parse(t));retu
2025-04-07 13:14:13 UTC	3816	IN	Data Raw: 29 2c 65 28 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 75 74 69 6c 73 2e 6f 62 6a 65 63 74 2c 64 29 2c 65 28 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 75 74 69 6c 73 2e 73 63 72 69 70 74 2c 66 29 2c 65 28 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 75 74 69 6c 73 2e 73 65 73 73 69 6f 6e 43 61 63 68 65 2c 67 29 2c 65 28 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 75 74 69 6c 73 2e 6c 6f 63 61 6c 43 61 63 68 65 2c 70 29 2c 65 28 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 75 74 69 6c 73 2e 55 52 4c 2c 76 29 2c 65 28 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 75 74 69 6c 73 2e 76 61 6c 69 64 61 74 69 6f 6e 2c 79 29 2c 65 28 77 69 6e 64 6f 77 2e 67 69 67 79 61 2e 75 74 69 6c 73 2c 6c 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 28 30 29 2e 5f 5f 61 73 73 69 67 6e 29 7d 2c 33 37 30 3a Data Ascii: ),e(window.gigya.utils.object,d),e(window.gigya.utils.script,f),e(window.gigya.utils.sessionCache,g),e(window.gigya.utils.localCache,p),e(window.gigya.utils.URL,v),e(window.gigya.utils.validation,y),e(window.gigya.utils,l)}).call(this,n(0).__assign)},370:
2025-04-07 13:14:13 UTC	16384	IN	Data Raw: 6e 26 26 76 6f 69 64 20 30 21 3d 3d 65 5b 72 5d 7c 7c 28 65 5b 72 5d 3d 74 5b 72 5d 29 7d 2c 74 2e 67 65 74 48 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 7b 76 61 72 20 69 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 5b 6e 5d 3f 69 3d 72 2e 73 65 72 69 61 6c 69 7a 65 28 65 5b 6e 5d 2c 21 31 29 3a 65 5b 6e 5d 26 26 28 69 3d 65 5b 6e 5d 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 74 2e 70 75 73 68 28 6e 2b 22 3d 22 2b 69 29 7d 72 65 74 75 72 6e 20 74 2e 73 6f 72 74 28 29 2e 6a 6f 69 6e 28 22 26 22 29 7d 2c 74 2e 67 65 74 4d 75 72 6d 75 72 48 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 63 3b 66 6f 72 28 74 7c 7c Data Ascii: n&&void 0!==e[r]\|\|(e[r]=t[r])},t.getHash=function(e){var t=[];for(var n in e){var i;"object"==typeof e[n]?i=r.serialize(e[n],!1):e[n]&&(i=e[n].toString()),t.push(n+"="+i)}return t.sort().join("&")},t.getMurmurHash=function(e,t){var n,r,i,o,a,s,u,c;for(t\|\|
2025-04-07 13:14:13 UTC	16384	IN	Data Raw: 6f 75 70 45 6e 64 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 69 73 45 6e 61 62 6c 65 64 26 26 65 3e 3d 74 68 69 73 2e 6c 6f 67 4c 65 76 65 6c 7c 7c 65 3e 3d 63 26 26 74 68 69 73 2e 6c 6f 67 4c 65 76 65 6c 3c 63 29 7b 76 61 72 20 74 3d 6f 2e 4c 6f 67 4c 65 76 65 6c 5b 65 5d 2c 6e 3d 65 3d 3d 3d 6f 2e 4c 6f 67 4c 65 76 65 6c 2e 64 65 62 75 67 3f 6f 2e 4c 6f 67 4c 65 76 65 6c 5b 6f 2e 4c 6f 67 4c 65 76 65 6c 2e 69 6e 66 6f 5d 3a 74 2c 72 3d 74 68 69 73 2e 67 65 74 46 6f 72 6d 61 74 74 65 64 4c 6f 67 41 72 67 73 28 22 20 25 63 5b 22 2b 74 2b 22 5d 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 6f 6e 73 6f 6c 65 5b 6e 5d 2e 62 69 6e 64 28 74 68 69 73 2e 5f 63 6f 6e 73 6f 6c 65 2c Data Ascii: oupEnd()},e.prototype.log=function(e){if(this.isEnabled&&e>=this.logLevel\|\|e>=c&&this.logLevel<c){var t=o.LogLevel[e],n=e===o.LogLevel.debug?o.LogLevel[o.LogLevel.info]:t,r=this.getFormattedLogArgs(" %c["+t+"]");return this._console[n].bind(this._console,
2025-04-07 13:14:13 UTC	11645	IN	Data Raw: 2c 6d 3d 6e 65 77 20 79 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 79 2e 62 79 74 65 4c 65 6e 67 74 68 29 2c 6e 65 77 20 6a 28 6d 29 2e 73 65 74 28 6e 65 77 20 6a 28 79 29 29 2c 6d 29 3a 68 2e 62 75 66 66 65 72 2c 6c 3d 6e 65 77 20 68 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 76 2c 68 2e 62 79 74 65 4f 66 66 73 65 74 2c 68 2e 6c 65 6e 67 74 68 29 29 3a 6c 3d 5b 5d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 4f 65 28 65 29 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 6e 65 28 65 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 4c 28 65 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 6e 3d 50 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b Data Ascii: ,m=new y.constructor(y.byteLength),new j(m).set(new j(y)),m):h.buffer,l=new h.constructor(v,h.byteOffset,h.length)):l=[]:function(e){if(!Oe(e)\|\|"[object Object]"!=ne(e))return!1;var t=L(e);if(null===t)return!0;var n=P.call(t,"constructor")&&t.constructor;

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:13 UTC	794	OUT	GET /rac/myracprod/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/rac/myracprod/code/&publishedOn=Fri%20Mar%2021%2016:40:36%20GMT%202025&ClientID=709&PageID=https%3A%2F%2Fwww.rac.co.uk%2Fmyrac%3Froute%3Dprize-draw HTTP/1.1 Host: nexus.ensighten.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.rac.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:14:13 UTC	478	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 734 Connection: close Server: CloudFront Date: Mon, 07 Apr 2025 13:14:13 GMT Expires: Mon, 07 Apr 2025 13:14:12 GMT Cache-Control: no-cache Cache-Control: no-store X-Cache: Miss from cloudfront Via: 1.1 d98647edce17345f3d148190339e9d8c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: A2r9D0z3YUEVUCEsi7JYYDOtobYhoO0H-5cBZFz_MdX--fnPgZHUQQ== Vary: Origin
2025-04-07 13:14:13 UTC	734	IN	Data Raw: 0a 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 5f 73 65 72 76 65 72 54 69 6d 65 20 3d 20 27 32 30 32 35 2d 30 34 2d 30 37 20 31 33 3a 31 34 3a 31 33 27 3b 20 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 5f 63 6c 69 65 6e 74 49 50 20 3d 20 27 31 36 31 2e 37 37 2e 31 33 2e 32 27 3b 20 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 69 6e 73 65 72 74 50 61 67 65 46 69 6c 65 73 28 5b 27 68 74 74 70 73 3a 2f 2f 6e 65 78 75 73 2e 65 6e 73 69 67 68 74 65 6e 2e 63 6f 6d 2f 72 61 63 2f 6d 79 72 61 63 70 72 6f 64 2f 63 6f 64 65 2f 64 34 33 30 31 35 66 31 37 34 34 39 32 64 61 65 37 38 30 65 33 37 33 39 33 61 38 63 65 65 66 64 2e 6a 73 3f 63 6f 6e 64 69 74 69 6f 6e 49 64 30 3d 34 35 35 31 30 36 27 2c 27 68 74 74 70 73 3a 2f 2f 6e 65 78 75 73 2e 65 6e 73 69 67 68 74 65 6e 2e 63 6f 6d 2f Data Ascii: Bootstrapper._serverTime = '2025-04-07 13:14:13'; Bootstrapper._clientIP = '161.77.13.2'; Bootstrapper.insertPageFiles(['https://nexus.ensighten.com/rac/myracprod/code/d43015f174492dae780e37393a8ceefd.js?conditionId0=455106','https://nexus.ensighten.com/

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:13 UTC	584	OUT	GET /rac/myrac/u/detector-dom.min.js HTTP/1.1 Host: cdn2.gbqofs.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.rac.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:14:13 UTC	702	IN	HTTP/1.1 200 OK Date: Mon, 07 Apr 2025 13:14:13 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Ray: 92c9c9696aac37a9-EWR Server: cloudflare Last-Modified: Mon, 15 Jul 2024 16:12:15 GMT Etag: W/"4e59c665fef58d894531e745d0289107" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: p01LD.Tnj3y27ctl1nU7klrrac0ANfoH Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5d1a51a1eb09caa5b28051dd961c7c40.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 X-Amz-Cf-Id: psb3smb8pQFoSL7LZa_DAJiFlZmHy7C3N12iTNNglowbHLbfhNZMwQ== Cf-Cache-Status: HIT Age: 1361 Expires: Mon, 07 Apr 2025 17:14:13 GMT Cache-Control: public, max-age=14400
2025-04-07 13:14:13 UTC	667	IN	Data Raw: 35 63 65 31 0d 0a 2f 2a 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 20 36 2e 36 2e 31 30 38 42 32 34 39 20 20 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 31 36 2d 30 37 2d 32 30 32 33 20 47 6c 61 73 73 42 6f 78 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6c 61 73 73 62 6f 78 64 69 67 69 74 61 6c 2e 63 6f 6d 0a 20 2a 2f 0a 0a 69 66 28 74 79 70 65 6f 66 20 5f 63 6c 73 5f 63 6f 6e 66 69 67 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 5f 63 6c 73 5f 63 6f 6e 66 69 67 20 3d 20 7b 7d 3b 0a 0a 2f 2f 20 68 74 74 70 73 3a 2f 2f 67 6c 61 73 73 62 6f 78 64 69 67 69 74 61 6c 73 75 70 70 6f 72 74 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 61 67 65 6e 74 2f 74 69 63 6b 65 74 73 2f 31 37 37 39 36 34 0a 5f 63 6c 73 5f 63 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 64 42 79 Data Ascii: 5ce1/* * Version: 6.6.108B249 * Copyright (c) 16-07-2023 GlassBox http://www.glassboxdigital.com */if(typeof _cls_config === "undefined") _cls_config = {};// https://glassboxdigitalsupport.zendesk.com/agent/tickets/177964_cls_config.enabledBy
2025-04-07 13:14:13 UTC	1369	IN	Data Raw: 0a 0a 0a 2f 2a 42 45 47 49 4e 20 4d 41 53 4b 49 4e 47 2a 2f 0a 0a 2f 2f 56 61 6c 75 65 20 4d 61 73 6b 69 6e 67 20 28 49 4e 50 55 54 29 0a 5f 63 6c 73 5f 63 6f 6e 66 69 67 2e 76 61 6c 75 65 4d 61 73 6b 69 6e 67 4d 6f 64 65 20 3d 20 22 77 68 69 74 65 6c 69 73 74 22 3b 0a 5f 63 6c 73 5f 63 6f 6e 66 69 67 2e 6d 61 73 6b 57 68 69 74 65 6c 69 73 74 56 61 6c 75 65 42 79 49 64 20 3d 20 5b 5d 3b 20 2f 2f 45 76 65 72 79 74 68 69 6e 67 20 69 73 20 6d 61 73 6b 65 64 20 45 58 43 45 50 54 20 46 4f 52 20 6c 69 73 74 65 64 20 69 6e 70 75 74 73 20 74 68 61 74 20 6d 61 74 63 68 20 61 6e 20 49 64 20 2c 20 54 68 69 73 20 69 73 20 6f 6e 6c 79 20 61 70 70 6c 69 65 64 20 77 68 65 6e 20 76 61 6c 75 65 4d 61 73 6b 69 6e 67 4d 6f 64 65 20 69 73 20 73 65 74 20 74 6f 20 27 77 68 69 Data Ascii: /BEGIN MASKING///Value Masking (INPUT)_cls_config.valueMaskingMode = "whitelist";_cls_config.maskWhitelistValueById = []; //Everything is masked EXCEPT FOR listed inputs that match an Id , This is only applied when valueMaskingMode is set to 'whi
2025-04-07 13:14:13 UTC	1369	IN	Data Raw: 69 6e 67 4d 6f 64 65 20 69 73 20 73 65 74 20 74 6f 20 27 77 68 69 74 65 6c 69 73 74 27 2e 0a 5f 63 6c 73 5f 63 6f 6e 66 69 67 2e 64 6f 6d 42 6c 61 63 6b 6c 69 73 74 4d 61 73 6b 43 6f 6e 74 65 6e 74 42 79 49 64 20 3d 20 5b 5d 3b 20 2f 2f 4f 4e 4c 59 20 74 65 78 74 20 6d 61 74 63 68 65 64 20 74 6f 20 74 68 69 73 20 6c 69 73 74 20 6f 66 20 49 64 73 20 69 73 20 6d 61 73 6b 65 64 2e 20 54 68 69 73 20 73 75 70 70 6f 72 74 73 20 61 20 73 69 6e 67 6c 65 20 77 69 6c 64 63 61 72 64 2c 20 73 75 63 68 20 61 73 20 2a 2e 20 54 68 69 73 20 69 73 20 6f 6e 6c 79 20 61 70 70 6c 69 65 64 20 77 68 65 6e 20 64 6f 6d 4d 61 73 6b 69 6e 67 4d 6f 64 65 20 69 73 20 73 65 74 20 74 6f 20 27 62 6c 61 63 6b 6c 69 73 74 27 2e 0a 5f 63 6c 73 5f 63 6f 6e 66 69 67 2e 64 6f 6d 57 68 69 74 Data Ascii: ingMode is set to 'whitelist'._cls_config.domBlacklistMaskContentById = []; //ONLY text matched to this list of Ids is masked. This supports a single wildcard, such as *. This is only applied when domMaskingMode is set to 'blacklist'._cls_config.domWhit
2025-04-07 13:14:13 UTC	1369	IN	Data Raw: 52 65 63 6f 72 64 45 6e 61 62 6c 65 64 3d 74 72 75 65 3b 0a 5f 63 6c 73 5f 63 6f 6e 66 69 67 2e 72 65 73 6f 75 72 63 65 73 52 65 63 6f 72 64 43 6f 75 6e 74 3d 35 3b 0a 5f 63 6c 73 5f 63 6f 6e 66 69 67 2e 72 65 73 6f 75 72 63 65 73 52 65 63 6f 72 64 43 68 61 6e 63 65 3d 31 3b 0a 5f 63 6c 73 5f 63 6f 6e 66 69 67 2e 72 65 73 6f 75 72 63 65 73 52 65 63 6f 72 64 41 6c 6c 6f 77 43 6f 72 73 3d 74 72 75 65 3b 0a 5f 63 6c 73 5f 63 6f 6e 66 69 67 2e 64 6f 6d 50 72 65 63 69 73 65 53 74 79 6c 65 53 68 65 65 74 43 6c 6f 6e 69 6e 67 3d 74 72 75 65 3b 0a 5f 63 6c 73 5f 63 6f 6e 66 69 67 2e 72 65 73 6f 75 72 63 65 52 65 63 6f 72 64 43 73 73 4f 6e 6c 79 3d 66 61 6c 73 65 3b 0a 0a 2f 2a 20 42 45 47 49 4e 20 70 61 67 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 2a 2f 0a 5f 63 Data Ascii: RecordEnabled=true;_cls_config.resourcesRecordCount=5;_cls_config.resourcesRecordChance=1;_cls_config.resourcesRecordAllowCors=true;_cls_config.domPreciseStyleSheetCloning=true;_cls_config.resourceRecordCssOnly=false;/* BEGIN page performance */_c
2025-04-07 13:14:13 UTC	1369	IN	Data Raw: 6e 7d 28 49 2c 6b 29 29 7b 76 61 72 20 62 2c 6e 2c 77 2c 45 2c 53 2c 54 2c 78 2c 72 2c 6c 2c 64 2c 68 2c 4d 2c 41 2c 52 2c 46 2c 42 2c 6a 2c 55 2c 56 2c 74 2c 69 2c 48 2c 7a 2c 71 2c 57 2c 47 2c 4a 2c 67 2c 58 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 73 65 6c 66 2c 66 65 3d 28 62 3d 6f 2c 61 3d 75 65 2c 28 6e 3d 7b 62 65 61 63 6f 6e 56 65 72 73 69 6f 6e 3a 22 32 22 7d 29 2e 64 65 74 65 63 74 6f 72 56 65 72 73 69 6f 6e 3d 79 2c 6e 2e 64 65 74 65 63 74 6f 72 53 63 72 69 70 74 3d 61 3f 28 74 3d 61 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2c 4a 3d 22 64 61 74 61 2d 63 6c 73 63 6f 6e 66 69 67 22 2c 74 3f 21 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 4a 29 26 26 61 2e 71 75 65 72 79 53 65 Data Ascii: n}(I,k)){var b,n,w,E,S,T,x,r,l,d,h,M,A,R,F,B,j,U,V,t,i,H,z,q,W,G,J,g,X,o="undefined"!=typeof window?window:self,fe=(b=o,a=ue,(n={beaconVersion:"2"}).detectorVersion=y,n.detectorScript=a?(t=a.currentScript,J="data-clsconfig",t?!t.hasAttribute(J)&&a.querySe
2025-04-07 13:14:13 UTC	1369	IN	Data Raw: 6d 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 22 2c 22 75 6e 6c 6f 61 64 22 2c 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 2c 22 73 65 67 6d 65 6e 74 43 68 61 6e 67 65 64 22 2c 22 64 6f 6d 54 61 6d 70 65 72 65 64 22 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 5d 2c 6e 2e 72 65 70 6f 72 74 42 61 73 65 36 34 55 52 4c 73 3d 21 31 2c 6e 2e 6e 6f 62 65 6c 45 76 65 6e 74 54 79 70 65 73 3d 5b 22 70 61 67 65 53 6e 61 70 73 68 6f 74 22 5d 2c 6e 2e 73 6f 63 69 61 6c 4e 6f 62 65 6c 45 76 65 6e 74 54 79 70 65 73 3d 5b 22 72 65 73 6f 75 72 63 65 43 6f 6e 74 65 6e 74 22 5d 2c 6e 2e 65 6e 63 72 79 70 74 69 6f 6e 50 72 65 66 69 78 3d 22 5f 5f 45 4e 43 5f 22 2c 6e 2e 65 6e 63 6f 64 65 53 65 6c 65 63 74 6f 72 73 3d 21 30 Data Ascii: mValidationError","navigation","unload","beforeunload","segmentChanged","domTampered","visibilitychange"],n.reportBase64URLs=!1,n.nobelEventTypes=["pageSnapshot"],n.socialNobelEventTypes=["resourceContent"],n.encryptionPrefix="__ENC_",n.encodeSelectors=!0
2025-04-07 13:14:13 UTC	1369	IN	Data Raw: 2c 74 68 69 72 64 70 61 72 74 79 3a 33 31 2c 63 75 73 74 6f 6d 3a 33 32 2c 68 6f 76 65 72 3a 33 33 2c 74 68 69 72 64 70 61 72 74 79 6d 61 70 3a 33 34 2c 70 65 72 66 6f 72 6d 61 6e 63 65 3a 33 35 2c 72 65 73 6f 75 72 63 65 3a 33 36 2c 63 6c 73 64 65 62 75 67 3a 33 37 2c 72 65 73 69 7a 65 3a 33 38 2c 74 68 69 72 64 50 61 72 74 79 41 74 74 72 69 62 75 74 65 3a 33 39 2c 61 6a 61 78 53 74 61 74 73 3a 34 30 2c 61 6a 61 78 4c 69 6d 69 74 52 65 61 63 68 65 64 3a 34 31 2c 64 61 74 61 4c 61 79 65 72 4d 61 70 3a 34 32 2c 70 61 67 65 53 6e 61 70 73 68 6f 74 3a 39 31 2c 70 61 67 65 55 70 64 61 74 65 3a 39 32 2c 72 65 73 6f 75 72 63 65 43 6f 6e 74 65 6e 74 3a 39 33 2c 63 6f 72 73 44 65 6e 69 65 64 52 65 73 6f 75 72 63 65 3a 39 34 2c 66 6f 72 6d 41 6e 61 6c 79 73 69 73 Data Ascii: ,thirdparty:31,custom:32,hover:33,thirdpartymap:34,performance:35,resource:36,clsdebug:37,resize:38,thirdPartyAttribute:39,ajaxStats:40,ajaxLimitReached:41,dataLayerMap:42,pageSnapshot:91,pageUpdate:92,resourceContent:93,corsDeniedResource:94,formAnalysis
2025-04-07 13:14:13 UTC	1369	IN	Data Raw: 6e 74 73 29 7d 2c 65 6e 63 6f 64 65 45 6e 63 6f 64 69 6e 67 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 2e 64 69 63 74 69 6f 6e 61 72 79 2e 65 6e 63 6f 64 65 28 65 2c 66 65 2e 64 69 63 74 69 6f 6e 61 72 79 2e 65 6e 63 6f 64 69 6e 67 54 79 70 65 73 29 7d 2c 65 6e 63 6f 64 65 50 65 72 66 6f 72 6d 61 6e 63 65 54 69 6d 69 6e 67 4d 65 61 73 75 72 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 2e 64 69 63 74 69 6f 6e 61 72 79 2e 65 6e 63 6f 64 65 28 65 2c 66 65 2e 64 69 63 74 69 6f 6e 61 72 79 2e 70 65 72 66 6f 72 6d 61 6e 63 65 54 69 6d 69 6e 67 45 76 65 6e 74 73 29 7d 7d 2c 77 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 7b 69 73 46 75 6e 63 74 69 6f 6e 3a Data Ascii: nts)},encodeEncodingType:function(e){return fe.dictionary.encode(e,fe.dictionary.encodingTypes)},encodePerformanceTimingMeasurement:function(e){return fe.dictionary.encode(e,fe.dictionary.performanceTimingEvents)}},w=Object.prototype.toString,{isFunction:
2025-04-07 13:14:13 UTC	1369	IN	Data Raw: 29 3f 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 28 63 6f 6e 73 6f 6c 65 2c 65 29 3a 53 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 54 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 7c 7c 28 65 3d 65 2e 6a 6f 69 6e 28 22 20 22 29 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 29 29 7d 2c 74 72 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 78 2e 74 72 61 63 65 4d 6f 64 65 26 26 74 68 69 73 2e 6c 6f 67 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 2c 24 3d 22 65 72 72 6f 72 20 77 61 73 20 64 65 74 65 63 74 65 64 20 22 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 73 65 6c 66 2c 51 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 7b 7d 2c 61 3d 5b 5d 3b Data Ascii: )?console.log.apply(console,e):S.isUndefined(T.console.log)\|\|(e=e.join(" "),console.log(e)))},trace:function(){x.traceMode&&this.log.apply(this,arguments)}}),$="error was detected ",o="undefined"!=typeof window?window:self,Q=new function(e){var o={},a=[];
2025-04-07 13:14:13 UTC	1369	IN	Data Raw: 53 45 4c 45 43 54 3a 21 30 2c 4f 50 54 49 4f 4e 3a 21 30 2c 42 55 54 54 4f 4e 3a 21 30 2c 41 3a 21 30 7d 2c 69 3d 64 26 26 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 48 3d 6c 26 26 6c 2e 63 6f 6e 73 6f 6c 65 26 26 6c 2e 63 6f 6e 73 6f 6c 65 2e 74 69 6d 65 26 26 6c 2e 63 6f 6e 73 6f 6c 65 2e 74 69 6d 65 45 6e 64 26 26 6c 2e 63 6f 6e 73 6f 6c 65 2e 74 69 6d 65 53 74 61 6d 70 2c 7a 3d 6c 2e 53 74 72 69 6e 67 26 26 6c 2e 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 26 26 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 6c 2e 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 29 2c 71 3d 6c 26 26 64 26 26 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 2e 45 76 65 6e 74 26 26 6c 2e 45 76 65 6e 74 2e 70 72 6f 74 6f 74 79 Data Ascii: SELECT:!0,OPTION:!0,BUTTON:!0,A:!0},i=d&&d.createElement("a"),H=l&&l.console&&l.console.time&&l.console.timeEnd&&l.console.timeStamp,z=l.String&&l.String.prototype&&r.isFunction(l.String.prototype.startsWith),q=l&&d&&function(){if(l.Event&&l.Event.prototy

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:13 UTC	553	OUT	OPTIONS /sdk/goals/5d161ac563b5940767d737da HTTP/1.1 Host: app.launchdarkly.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-launchdarkly-user-agent Origin: https://www.rac.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.rac.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:14:13 UTC	767	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags Access-Control-Allow-Methods: GET, OPTIONS, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Allow: GET, OPTIONS, HEAD Ld-Region: us-east-1 Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Date: Mon, 07 Apr 2025 13:14:13 GMT Via: 1.1 varnish X-Served-By: cache-lga21985-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1744031654.919354,VS0,VE8 Vary: Accept-Encoding Age: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:13 UTC	701	OUT	OPTIONS /sdk/evalx/5d161ac563b5940767d737da/contexts/eyJrZXkiOiJyYWN1c2VyIiwiZW1haWwiOiJyYWN1c2VyQGVtYWlsLmNvbSIsIm5hbWUiOiJteXJhYyB1c2VyIiwiZmlyc3ROYW1lIjoibXlyYWMiLCJsYXN0TmFtZSI6InVzZXIifQ HTTP/1.1 Host: app.launchdarkly.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-launchdarkly-user-agent Origin: https://www.rac.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.rac.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:14:14 UTC	767	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags Access-Control-Allow-Methods: GET, OPTIONS, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Allow: GET, OPTIONS, HEAD Ld-Region: us-east-1 Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Date: Mon, 07 Apr 2025 13:14:14 GMT Via: 1.1 varnish X-Served-By: cache-lga21976-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1744031654.024680,VS0,VE8 Vary: Accept-Encoding Age: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:13 UTC	1288	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.rac.co.uk Connection: keep-alive Content-Length: 478 sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 baggage: sentry-environment=prd,sentry-release=%24npm_package_version,sentry-public_key=f01c33c32f394fe3542950332b162038,sentry-trace_id=db84c7c2f6694bea9349082ecf008627,sentry-sample_rate=0.1,sentry-sampled=false Request-Id: \|b3af729abd554e019451ee18b7c4765e.d1a239584a7e486b sentry-trace: db84c7c2f6694bea9349082ecf008627-813a0ffa7232e7c0-0 traceparent: 00-b3af729abd554e019451ee18b7c4765e-d1a239584a7e486b-01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.rac.co.uk Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.rac.co.uk/myrac?route=prize-draw Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AMCV_6797C27A57DFC4097F000101%40AdobeOrg=MCMID%7C57646075230342348791702254968590827519; nlid=dbca1b06\|4986fb17; nllastdelid=4986fb17; ai_user=mV6XQBk50zNrsrQpFscPz8\|2025-04-07T13:14:12.684Z; RAC_ENSIGHTEN_PRIVACY_BANNER_LOADED=1
2025-04-07 13:14:13 UTC	478	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 30 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 30 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 34 34 30 33 31 36 34 36 31 31 32 2e 35 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 32 30 32 35 2e 33 2e 30 22 2c 22 6a 73 22 3a 22 32 30 32 34 2e 36 2e 31 22 2c 22 74 69 6d 69 6e 67 73 22 3a 31 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 61 64 32 61 30 62 35 34 2d 36 33 37 62 2d 34 37 63 66 2d 62 63 34 34 2d 38 37 31 36 33 35 31 39 39 36 34 36 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 61 63 2e 63 6f 2e 75 6b 2f Data Ascii: {"resources":[],"referrer":"","eventType":1,"firstPaint":0,"firstContentfulPaint":0,"startTime":1744031646112.5,"versions":{"fl":"2025.3.0","js":"2024.6.1","timings":1},"pageloadId":"ad2a0b54-637b-47cf-bc44-871635199646","location":"https://www.rac.co.uk/
2025-04-07 13:14:14 UTC	370	IN	HTTP/1.1 204 No Content Date: Mon, 07 Apr 2025 13:14:14 GMT Connection: close access-control-allow-origin: https://www.rac.co.uk access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 92c9c96d4878c44d-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:14:13 UTC	680	OUT	OPTIONS /v3/content_types/footer/entries/?include[]=footeritems&include[]=sociallinks&include[]=columns.items&locale=en&limit=1&environment=production HTTP/1.1 Host: cdn.contentstack.io Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: access_token,api_key,content-type,x-user-agent Origin: https://www.rac.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.rac.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:14:14 UTC	737	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 access-control-allow-credentials: true access-control-expose-headers: access_token,api_key,content-type,x-user-agent access-control-allow-methods: GET, HEAD, PUT, POST, DELETE, OPTIONS, PATCH x-runtime: 0ms x-request-id: ff10b2e5-e675-4972-a23f-1624aaef490d server: contentstack Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 07 Apr 2025 13:14:14 GMT Age: 375 X-Served-By: cache-bur-kbur8200078-BUR, cache-lga21925-LGA X-Cache: HIT, HIT X-Cache-Hits: 2970, 26 X-Timer: S1744031654.121154,VS0,VE0 Access-Control-Allow-Headers: access_token,api_key,content-type,x-user-agent Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31557600