Edit tour

Windows Analysis Report
https://www.kpmgperformanceinsights.com/

Overview

General Information

Sample URL:	https://www.kpmgperformanceinsights.com/
Analysis ID:	1500513
Infos:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Phishing site detected (based on logo match)

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

HTTP GET or POST without a user agent

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1908,i,4566057270408581483,12660699784688311549,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6152 --field-trial-handle=1908,i,4566057270408581483,12660699784688311549,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.kpmgperformanceinsights.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-22LQCMCKFG&gtm=45je48r0h2v898777436za200&_p=1724852686039&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=0&cid=49732202.1724852688&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1724852687&sct=1&seg=0&dl=https%3A%2F%2Fwww.kpmgperformanceinsights.com%2F&dt=KPMG%20Performance%20Insights&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3104 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.kpmgperformanceinsights.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.kpmgperformanceinsights.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.facebook.com/hashtag/lpgastats	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/hashtag/lpgastats	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/hashtag/lpgastats	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/hashtag/lpgastats	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/hashtag/lpgastats	HTTP Parser: No <meta name="author".. found
Source: https://x.com/i/flow/login?redirect_after_login=%2Fsearch%3Fq%3D%2523LPGAstats%26src%3Dtyped_query%26mx%3D2	HTTP Parser: No <meta name="author".. found

Source: https://www.facebook.com/hashtag/lpgastats	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/hashtag/lpgastats	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/hashtag/lpgastats	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/hashtag/lpgastats	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/hashtag/lpgastats	HTTP Parser: No <meta name="copyright".. found
Source: https://x.com/i/flow/login?redirect_after_login=%2Fsearch%3Fq%3D%2523LPGAstats%26src%3Dtyped_query%26mx%3D2	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49770 version: TLS 1.2

Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.kpmgperformanceinsights.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.lpga.com
Source: global traffic	DNS traffic detected: DNS query: www.instagram.com
Source: global traffic	DNS traffic detected: DNS query: static.cdninstagram.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: scontent-hou1-1.cdninstagram.com
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: scontent.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: video.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: scontent-hou1-1.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: video-hou1-1.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: x.com
Source: global traffic	DNS traffic detected: DNS query: abs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.twitter.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: pbs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.x.com
Source: global traffic	DNS traffic detected: DNS query: video.twimg.com
Source: global traffic	DNS traffic detected: DNS query: abs-0.twimg.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 28 Aug 2024 13:45:12 GMTContent-Type: text/htmlContent-Length: 555Connection: closeServer: nginx/1.27.0Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 28 Aug 2024 13:45:13 GMTContent-Type: text/htmlContent-Length: 555Connection: closeServer: nginx/1.27.0Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 28 Aug 2024 13:45:14 GMTContent-Type: text/htmlContent-Length: 555Connection: closeServer: nginx/1.27.0Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 28 Aug 2024 13:45:16 GMTContent-Type: text/htmlContent-Length: 555Connection: closeServer: nginx/1.27.0Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1724852720; path=/; domain=.instagram.com; httponlySet-Cookie: _js_ig_did=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1724852720; path=/; domain=.instagram.com; httponlySet-Cookie: datr=6SnPZiD1BjDzOGEQhMiA_shH; expires=Thu, 02-Oct-2025 13:45:21 GMT; Max-Age=34560000; path=/; domain=.instagram.com; secure; httponly; SameSite=NoneSet-Cookie: ig_did=6A9BA72C-A6B1-45C4-825D-84E70DB51520; expires=Thu, 28-Aug-2025 13:45:21 GMT; Max-Age=31536000; path=/; domain=.instagram.com; secure; httponly; SameSite=Noneaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy-report-only: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy-report-only: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: Ohy6q58ofhKryIHw7zmibDpSb8vwF5MWm+CjXtVDFcyj9a5NYb3vDVQKFsCeFnYFvTTlCyLgmdRFCdEi3mcVcQ==x-fb-server-load: 31Date: Wed, 28 Aug 2024 13:45:29 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: EaNxQA2VN/0Cc+ah1m4i2tNLQt1NWd6gXHvhIFhIAmt3Lhi9NqtRHmNC5VjSwI23Tka55pXAAUWRZu3bA8+ESQ==x-fb-server-load: 30Date: Wed, 28 Aug 2024 13:45:30 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1724852731; path=/; domain=.facebook.com; httponlySet-Cookie: datr=8inPZjWLHs9HfcpEYQ7lMXzK; expires=Thu, 02-Oct-2025 13:45:32 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: vihMFvIF/i8VZme8uIhOYlJKCQYmezqR9u6RX+j3B+RLmsXzFkep8Os5QGK2BTYm74T/OoSZTlCwXzCBo/j9aw==x-fb-server-load: 42Date: Wed, 28 Aug 2024 13:45:32 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: n6q/h3+8cLfvMHtrjVZ4s8Ypnf8bYNU54cl+XU9kYnR55pol1HeFoaCM2pL31F3nCzu5kvBSYa4K/9FTOgUQ9w==x-fb-server-load: 51Date: Wed, 28 Aug 2024 13:45:33 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1724852732; path=/; domain=.facebook.com; httponlySet-Cookie: datr=8inPZjWLHs9HfcpEYQ7lMXzK; expires=Thu, 02-Oct-2025 13:45:33 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: MY4zjL0yzZ7KzhanB4O2uTb21T2HKM4NA6NyoO94/J05l20yWKDkCfKKAuzpIVJuXZ2KRYaSdQ7q1slcwussrg==x-fb-server-load: 35Date: Wed, 28 Aug 2024 13:45:33 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: 77D5wQ2VylUZvH0/Jf5VGDd0Y+/RwYCQYBf/4VEL04AtGVtA2jbrk/PQAFq5aMY2yUZU7V1XCxnlKo3NmtrusQ==x-fb-server-load: 70Date: Wed, 28 Aug 2024 13:45:34 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: YmjEu1UhGFXfA2MZpMvGTtLAqT2VzX56Gp5v5cfCko1WOAYHtfRttOoeM+GW0dsfOcxcx3busO2G0LqplnuF1Q==x-fb-server-load: 35Date: Wed, 28 Aug 2024 13:45:43 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: APiP9FSl/sPcZPesX2FfZkSdJq6qKGvUyZIzTjBz+pQcMarJCINZpHoawGQE7FUtiQTcIerwDkBkVAhgeS06ww==x-fb-server-load: 59Date: Wed, 28 Aug 2024 13:46:03 GMTTransfer-Encoding: chunked

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1908,i,4566057270408581483,12660699784688311549,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.kpmgperformanceinsights.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6152 --field-trial-handle=1908,i,4566057270408581483,12660699784688311549,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1908,i,4566057270408581483,12660699784688311549,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6152 --field-trial-handle=1908,i,4566057270408581483,12660699784688311549,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
http://underscorejs.org	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11471_Anime_ABEMA_18ce54aqujn_Hashmoji_20240705_20241007_Monogata	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://help.instagram.com/222826637847963	0%	URL Reputation	safe
https://youradchoices.ca/	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	0%	URL Reputation	safe
https://about.instagram.com/blog/	0%	URL Reputation	safe
https://help.instagram.com/626057554667531	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11254_BANDAI_ride_kamens_Applaunch_2024May_Hashmoji/BF-11254_BAND	0%	URL Reputation	safe
https://fburl.com/wiki/xrzohrqb	0%	URL Reputation	safe
https://about.instagram.com	0%	URL Reputation	safe
https://help.instagram.com/126382350847838	0%	URL Reputation	safe
https://edge-chat.instagram.com/mqtt/pull	0%	URL Reputation	safe
https://familycenter.instagram.com/accounts/	0%	URL Reputation	safe
https://x.com/en/privacy	0%	URL Reputation	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpace.58818b4a.js	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	0%	URL Reputation	safe
https://meet.google.com	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Birdwatch~	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11479_Zenless_Zone_Zero_Launch2024_Nicole_Livestream/BF-11479_Zen	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Communitie	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.InlinePl	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11387_LOreal_Maybelline_TH_hashmoji_after/BF-11387_LOreal_Maybell	0%	URL Reputation	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.Brande.def10c6a.js	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/icons/kpmg-performance.svg	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Ocf~bundle.LoggedOutHome~loader.TimelineRenderer~loader.SignupModule.f80d028a.js	0%	Avira URL Cloud	safe
https://i.instagram.com	0%	URL Reputation	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Grok~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bun.f39400ca.js	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/profiles/102709.png	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/profiles/98455.png	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/profiles/98811.png	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/runtime.86c1889cbfad0b82.js	0%	Avira URL Cloud	safe
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=19963.HYP%3Ainstagram_web_pkg.2.1..0.0&__hsi=7408186003085360610&__req=3&__rev=1016035497&__s=qz7c47%3Acv8rdc%3Awqp1ck&__spin_b=trunk&__spin_r=1016035497&__spin_t=1724852713&__user=0&dpr=1&jazoest=2896&lsd=AVrSPIX9O8s&ph=C3	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/icons/june_2021.svg	0%	Avira URL Cloud	safe
https://static.cdninstagram.com/rsrc.php/v3iZxj4/ya/l/en_US/YzFfd1AenoeooMAQgagoSsxUyH-w7rn2vRXk0tlAyiEuzuTxHCH_Xe8GLQCaee48MNRsQdTRGWxjOwQOBLL_ktx2Qa_6doViWiKs9kkVBwNxb8vjr4P6SQiJvtlqQ92kTA-FB8SKZZfUgEt88VoA1yp1nnGUT1EF5dFbLV7KRakQ3KXkFYkAhAzC_d3Vrzd74E74aeZkE4pfs2WJ06vVhLfGuByFaQcEh83IDq-EyEJp2xE87ivsWqehdEtWwnMQD9_db8f7zf8GpZHhWF2k8w9oFpyOtJ12LiJjUdcQGCH-OEV-4Wj0n8ya2W-EmpcCcMX5ABpjcZ.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/ngsw.json?ngsw-cache-bust=0.7190758020076715	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/ngsw.json?ngsw-cache-bust=0.8105820094260929	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/ya/l/0,cross/D8gMdAN_ZRiVWgg-YkpZuD.css?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://static.cdninstagram.com/rsrc.php/v3/y8/r/ZWR9C7_JdnP.png	0%	Avira URL Cloud	safe
https://abs.twimg.com/hashflags/BF-11675_30ebr_BPC_Gilberto_Gil_Hashmoji_2024/BF-11675_30ebr_BPC_Gil	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/yt/r/EUNHXg17Vg2.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19963.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408186033505436278&__req=o&__rev=1016036106&__s=nec1sk%3A8tyttl%3Anb01ci&__spin_b=trunk&__spin_r=1016036106&__spin_t=1724852722&__user=0&dpr=1&jazoest=21088&lsd=AVpsJcaqltg&ph=C3	0%	Avira URL Cloud	safe
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	0%	Avira URL Cloud	safe
https://static.cdninstagram.com/rsrc.php/v3iwEp4/yO/l/en_US/ZsL5ssOFMgj.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/profiles/default/default.png	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/modules.audio.9936ba0a.js	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/icons/sept_2023.svg	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/profiles/102684.png	0%	Avira URL Cloud	safe
https://x.com/x/migrate	0%	Avira URL Cloud	safe
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	0%	Avira URL Cloud	safe
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19963.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408186033505436278&__req=a&__rev=1016036106&__s=nec1sk%3A8tyttl%3Anb01ci&__spin_b=trunk&__spin_r=1016036106&__spin_t=1724852722&__user=0&dpr=1&jazoest=21088&lsd=AVpsJcaqltg&ph=C3	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYDF2chtF01HZXVtxHca_oEhSajwZiwZQ4fXYK2i58CcpQ&oe=66F6A3CB&_nc_sid=7da55a	0%	Avira URL Cloud	safe
https://static.cdninstagram.com/rsrc.php/v3iUkp4/yO/l/en_US/3JIveumUY72.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/profiles/98350.png	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3izA14/yc/l/en_US/EB8whpZISFH.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/api/v1/seasons/2024/stats/strokes-gained/all	0%	Avira URL Cloud	safe
https://scontent-hou1-1.cdninstagram.com/v/t51.29350-15/453500889_1232254718128661_6560880523413177063_n.jpg?stp=dst-jpg_e15_fr_s1080x1080&_nc_ht=scontent-hou1-1.cdninstagram.com&_nc_cat=105&_nc_ohc=fIt0m6zk1GkQ7kNvgEMFQtG&_nc_gid=0cb776f7cfdc4225bb71689a5ff5b23d&edm=AOUPxh0BAAAA&ccb=7-5&oh=00_AYCkj2VePkURTfJDOpa008PQUy1nl51jLJXJGoHeaZOJQg&oe=66D500DD&_nc_sid=9dc660	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/profiles/98109.png	0%	Avira URL Cloud	safe
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=19963.HYP%3Ainstagram_web_pkg.2.1..0.0&__hsi=7408186003085360610&__req=c&__rev=1016035497&__s=qz7c47%3Acv8rdc%3Awqp1ck&__spin_b=trunk&__spin_r=1016035497&__spin_t=1724852713&__user=0&dpr=1&jazoest=2896&lsd=AVrSPIX9O8s&ph=C3	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3iQGS4/yD/l/en_US/jTBNPl0hVqM26XM3Gr1dZLB0hO_r8WZ5imQs3gOu2sLNERz6pNGhHp8TcGIlLeklG1yHq4ld5fVOk7ubvH-PKUKR.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/v/t51.2885-15/451985068_1188122549094605_4334205858289329501_n.jpg?_nc_cat=104&ccb=1-7&_nc_sid=9a7156&_nc_ohc=OS73iBOSBjgQ7kNvgFpqCDx&_nc_ht=scontent-hou1-1.xx&oh=00_AYCd4-ld6ewQMzK7D3KCTUvDkA3GEHrJclD_w8z7IJp_xg&oe=66D4E99A	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.ReaderMode~bu.a51fd31a.js	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.e8147eda.js	0%	Avira URL Cloud	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.common.d1ac2f3a.	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/profiles/98230.png	0%	Avira URL Cloud	safe
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	0%	Avira URL Cloud	safe
https://static.cdninstagram.com/rsrc.php/v3/y7/r/ZVhFC-3u4Av.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=19963.HYP%3Ainstagram_web_pkg.2.1..0.0&__hsi=7408186003085360610&__req=8&__rev=1016035497&__s=qz7c47%3Acv8rdc%3Awqp1ck&__spin_b=trunk&__spin_r=1016035497&__spin_t=1724852713&__user=0&dpr=1&jazoest=2896&lsd=AVrSPIX9O8s&ph=C3	0%	Avira URL Cloud	safe
https://scontent-hou1-1.cdninstagram.com/v/t51.2885-15/290631653_549857660057427_3817242198002617930_n.jpg?stp=dst-jpg_e15_fr_s1080x1080&_nc_ht=scontent-hou1-1.cdninstagram.com&_nc_cat=103&_nc_ohc=jv6BlUIJD90Q7kNvgFB9don&edm=AOUPxh0BAAAA&ccb=7-5&oh=00_AYC6Fz_QU5F_qF-8FjoOEpK2f69ZxTHHHQ2gQJKYpOigGA&oe=66D50080&_nc_sid=9dc660	0%	Avira URL Cloud	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Ocf.27c653ca.js.m	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Grok~bundle.Account~bundle.R.1dec1c4a.js	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/profiles/98843.png	0%	Avira URL Cloud	safe
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19963.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408186033505436278&__req=h&__rev=1016036106&__s=nec1sk%3A8tyttl%3Anb01ci&__spin_b=trunk&__spin_r=1016036106&__spin_t=1724852722&__user=0&dpr=1&jazoest=21088&lsd=AVpsJcaqltg&ph=C3	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/profiles/102175.png	0%	Avira URL Cloud	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	0%	Avira URL Cloud	safe
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19963.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408186033505436278&__req=l&__rev=1016036106&__s=nec1sk%3A8tyttl%3Anb01ci&__spin_b=trunk&__spin_r=1016036106&__spin_t=1724852722&__user=0&dpr=1&jazoest=21088&lsd=AVpsJcaqltg&ph=C3	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/vendor.eac7fcfa.js	0%	Avira URL Cloud	safe
https://www.instagram.com/ajax/bulk-route-definitions/	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/ondemand.Dropdown.05f2d88a.js	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/bcd1f224/www-player.css	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Grok~bundle.BrandedLikesPreview~bundle.TwitterArticles~bundle.Compose~bundle.Co.9662c42a.js	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/profiles/102009.png	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3i7M54/yq/l/en_US/OcgJMmetGCj.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/v/t51.36329-10/355220090_593078789597389_1945668536878674864_n.jpg?_nc_cat=105&ccb=1-7&_nc_sid=c3bc4c&_nc_ohc=59HXYldWsmQQ7kNvgGLUX9-&_nc_ht=scontent-hou1-1.xx&oh=00_AYCtbTqnf55j9Xm0zSgYBHSj0iEW-l8r3pXomD09hXDC_Q&oe=66D4E6C6	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/icons/info_icon.svg	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/arrow.3f5dbfc9e4d93498.svg	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3iMBQ4/yc/l/en_US/_kSuY21dryz.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://video.xx.fbcdn.net/v/t39.25447-2/447297696_8039664322719893_6740129461511305187_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=9a5d50&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdnA5LWJhc2ljLWdlbjJfMzYwcCIsInZpZGVvX2lkIjo3NDY4NzMxMTQyNzc1ODV9&_nc_ohc=u3WIoiLJ3_kQ7kNvgH9pEGe&_nc_ht=video-hou1-1.xx&oh=00_AYCOJ8TqB1YIAOD-y96ht6Ftg_S2nj_Ns46Cme8PS1MQsQ&oe=66D5057C&bytestart=328313&byteend=464758	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/profiles/100312.png	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/yb/r/hLRJ1GG_y0J.ico	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/ya/l/0	0%	Avira URL Cloud	safe
https://github.com/google/shaka-packager	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AYC_V9Gl5IfFFUPhIQWiOE4oKkoWQ76LQM8761RASVObjw&oe=66F68457&_nc_sid=7da55a	0%	Avira URL Cloud	safe
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=19963.HYP%3Ainstagram_web_pkg.2.1..0.0&__hsi=7408186003085360610&__req=e&__rev=1016035497&__s=qz7c47%3Acv8rdc%3Awqp1ck&__spin_b=trunk&__spin_r=1016035497&__spin_t=1724852713&__user=0&dpr=1&jazoest=2896&lsd=AVrSPIX9O8s&ph=C3	0%	Avira URL Cloud	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/vendor.eac7fcfa.js.map	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/profiles/98440.png	0%	Avira URL Cloud	safe
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19963.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408186033505436278&__req=e&__rev=1016036106&__s=nec1sk%3A8tyttl%3Anb01ci&__spin_b=trunk&__spin_r=1016036106&__spin_t=1724852722&__user=0&dpr=1&jazoest=21088&lsd=AVpsJcaqltg&ph=C3	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/y9/r/cBfAkP0T1tP.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://www.kpmgperformanceinsights.com/assets/icons/march_2024.svg	0%	Avira URL Cloud	safe

Source: chromecache_814.2.dr, chromecache_857.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/-chchjkxRCr/ equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr, chromecache_722.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/5RZXhVZje9T/ equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr, chromecache_722.2.dr, chromecache_492.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/9cisb7Fe7ih/ equals www.facebook.com (Facebook)
Source: chromecache_732.2.dr, chromecache_591.2.dr, chromecache_462.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr, chromecache_722.2.dr, chromecache_725.2.dr, chromecache_382.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/CCT5pM3qiNk/ equals www.facebook.com (Facebook)
Source: chromecache_732.2.dr, chromecache_591.2.dr, chromecache_462.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_448.2.dr, chromecache_671.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/HAC-_9WTKIm/ equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr, chromecache_722.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/KRXTwBoPvVj/ equals www.facebook.com (Facebook)
Source: chromecache_600.2.dr, chromecache_524.2.dr, chromecache_814.2.dr, chromecache_722.2.dr, chromecache_434.2.dr, chromecache_725.2.dr, chromecache_382.2.dr, chromecache_857.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr, chromecache_814.2.dr, chromecache_722.2.dr, chromecache_725.2.dr, chromecache_382.2.dr, chromecache_857.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_697.2.dr, chromecache_781.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V8_l6oUwABQ/ equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr, chromecache_722.2.dr, chromecache_725.2.dr, chromecache_382.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V9vdYColc4k/ equals www.facebook.com (Facebook)
Source: chromecache_814.2.dr, chromecache_857.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/VZYwkcc3BWr/ equals www.facebook.com (Facebook)
Source: chromecache_844.2.dr, chromecache_640.2.dr, chromecache_714.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Vkd8AdLnKqZ/ equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr, chromecache_722.2.dr, chromecache_725.2.dr, chromecache_382.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr, chromecache_722.2.dr, chromecache_725.2.dr, chromecache_382.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/aJoeSHn7XcN/ equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr, chromecache_722.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/cr2jmG-CdKo/ equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr, chromecache_814.2.dr, chromecache_722.2.dr, chromecache_725.2.dr, chromecache_382.2.dr, chromecache_492.2.dr, chromecache_857.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_564.2.dr, chromecache_712.2.dr, chromecache_817.2.dr, chromecache_475.2.dr	String found in binary or memory: </span><a href="https://www.facebook.com/" data-gt="{"target":"home","marketing_page_click":"1","conversion":"1"}">Go to Feed</a><span role="presentation" aria-hidden="true"> equals www.facebook.com (Facebook)
Source: chromecache_712.2.dr	String found in binary or memory: <i class="_3jii img sp_PEqIp1jvkJq sx_17d8b9" id="u_0_1_6l"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_kP"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1" onsubmit=""><input type="hidden" name="jazoest" value="21017" autocomplete="off" /><input type="hidden" name="lsd" value="AVpsJcaqdWE" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgot account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log In</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_A1" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_+a" /><input type="hidden" name="lgnrnd" value="064534_-TYs" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_US" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI0ODUyNzM0LCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_US">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_PEqIp1jvkJq sx_82a77e"></i><div class="mbl pvl _4-d
Source: chromecache_817.2.dr	String found in binary or memory: <i class="_3jii img sp_PEqIp1jvkJq sx_17d8b9" id="u_0_1_7x"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_mO"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1" onsubmit=""><input type="hidden" name="jazoest" value="2982" autocomplete="off" /><input type="hidden" name="lsd" value="AVpsJcaqdA8" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgot account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log In</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_O1" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_Rf" /><input type="hidden" name="lgnrnd" value="064533_jHjY" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_US" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI0ODUyNzMzLCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_US">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_PEqIp1jvkJq sx_82a77e"></i><div class="mbl pvl _4-dr
Source: chromecache_564.2.dr	String found in binary or memory: <i class="_3jii img sp_PEqIp1jvkJq sx_17d8b9" id="u_0_1_lf"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_PA"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1" onsubmit=""><input type="hidden" name="jazoest" value="21013" autocomplete="off" /><input type="hidden" name="lsd" value="AVpsJcaq8Qs" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgot account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log In</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_9l" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_74" /><input type="hidden" name="lgnrnd" value="064543_MIWD" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_US" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI0ODUyNzQyLCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_US">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_PEqIp1jvkJq sx_82a77e"></i><div class="mbl pvl _4-d
Source: chromecache_475.2.dr	String found in binary or memory: <i class="_3jii img sp_PEqIp1jvkJq sx_17d8b9" id="u_0_1_yA"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_gL"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1" onsubmit=""><input type="hidden" name="jazoest" value="21027" autocomplete="off" /><input type="hidden" name="lsd" value="AVpsJcaqdv0" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgot account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log In</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_of" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_bY" /><input type="hidden" name="lgnrnd" value="064603_1QAm" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_US" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI0ODUyNzYzLCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_US">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_PEqIp1jvkJq sx_82a77e"></i><div class="mbl pvl _4-d
Source: chromecache_817.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fajax%2Fbulk-route-definitions%2F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_XmNN8RBUWF5 sx_35dd01"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign Up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log into Facebook">Log In</a></li><li><a href="https://messenger.com/" title="Check out Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Check out popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Check out Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Meta Ray-Ban" target="_blank">Meta Ray-Ban</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT2o3_hqe_kcgTJ6BIJHiuxqZEDA1Q8Tq6vE5RrSJLA3GA8c5Yx__guSqrwDXUnOtUJOADgMcSVGM_uOVFA9PoAG-0zvfAdZhNOtHJqCsPS2B3KtTxQVQWGEwBNumQg3KAscS9fXIrp-rz3Pak-wJg" title="Check out Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Center</a></li><li><a href="/groups/discover/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource center, and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&campaign_id=4020
Source: chromecache_475.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fajax%2Fwebstorage%2Fprocess_keys%2F%3Fstate%3D1&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_XmNN8RBUWF5 sx_35dd01"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign Up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log into Facebook">Log In</a></li><li><a href="https://messenger.com/" title="Check out Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Check out popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Check out Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Meta Ray-Ban" target="_blank">Meta Ray-Ban</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT1u_LbVlTuui6Mm1FOf0oIArfoHovxwNI-r6nrgwsCJsvyyScVldl8FNJfikmvDfJleUQCesrTmWXBJSsOky6TGA-EI-lMgXwc21DjConTpOJDEoVB8vhJ9x90Mpf9bVSnAV_jdnpG6oV_ZEqPbyQ" title="Check out Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Center</a></li><li><a href="/groups/discover/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource center, and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&c
Source: chromecache_564.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fshared%2Fuser_preferences%2F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_XmNN8RBUWF5 sx_35dd01"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign Up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log into Facebook">Log In</a></li><li><a href="https://messenger.com/" title="Check out Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Check out popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Check out Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Meta Ray-Ban" target="_blank">Meta Ray-Ban</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT10QjV7y3jWJCAlK0G0nuUNLIaF-ZBJnrb38yIbQXfk7aEG_o1uk-WEk1coGbilAyQEH1GpfVq5g9bUdXjiKUSmM89kHZq9MwrdgITMBhxgMixMNcLTxexUW42gGbtGPob-Z-ZW1zVfAy6XbYWONA" title="Check out Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Center</a></li><li><a href="/groups/discover/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource center, and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&campaign_id=40204744
Source: chromecache_712.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fvideo%2Funified_cvc%2F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_XmNN8RBUWF5 sx_35dd01"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign Up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log into Facebook">Log In</a></li><li><a href="https://messenger.com/" title="Check out Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Check out popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Check out Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Meta Ray-Ban" target="_blank">Meta Ray-Ban</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT1LJPwTnfj94lDPwwSi_nYLpRXnS14yRJ24dZcAKce2ojMIr5wRMA2UAcHQqmFpb-lIH7YsrB6W7CkEiVCV4VeAAXms0yt9Pxll1guCij6OKdTVoSsVBtmSlEbvp2EJApP1EVq1V0ABb5Zt-AyukQ" title="Check out Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Center</a></li><li><a href="/groups/discover/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource center, and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&campaign_id=402047449186&a
Source: chromecache_564.2.dr	String found in binary or memory: <script>requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"define":[["cr:7736",["FBLynxLogging"],{"__rc":["FBLynxLogging",null]},-1],["LinkshimHandlerConfig",[],{"supports_meta_referrer":true,"default_meta_referrer_policy":"origin-when-crossorigin","switched_meta_referrer_policy":"origin","non_linkshim_lnfb_mode":null,"link_react_default_hash":"AT0d8azKyDIokJrmaCv0GeEYlFCt1Jf9i4LZ7JwWbOl0u4kJZB9z2uhuqYc7i3-FVeNjCWCB986QjsUC1qNSLFq0C3POGRuwHpOjfEhphOeP571g1pW_mzDWb5JdetVWqgD_ZZftm5wnWgEZkQbOUA","untrusted_link_default_hash":"AT2f2d4-VieEPmkbAn0Qvw8ezvA4y3_FsRFlo1_N4qK_7_rfWX8-YK3EtDTMoSMrGmXZznzRuuT_HzongbZCdi4jPfZf_o688cWJ3uyG7IGKrj9igflSDFmTfLwlYdY8G8n0oJpUZ9VqKlrMOouAjw","linkshim_host":"l.facebook.com","linkshim_path":"\/l.php","linkshim_enc_param":"h","linkshim_url_param":"u","use_rel_no_opener":true,"use_rel_no_referrer":true,"always_use_https":true,"onion_always_shim":true,"middle_click_requires_event":true,"www_safe_js_mode":"asynclazy","m_safe_js_mode":"MLynx_asynclazy","ghl_param_link_shim":false,"click_ids":[],"is_linkshim_supported":true,"current_domain":"facebook.com","blocklisted_domains":["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"elements":[["__elem_072b8e64_0_0_Yh","u_0_0_0e",1],["__elem_94c15385_0_0_+q","u_0_1_lf",1],["__elem_a588f507_0_3_OL","u_0_2_PA",1],["__elem_835c633a_0_0_V\/","login_form",1],["__elem_efa9dffa_0_0_TF","email",1],["__elem_45d73b5d_0_0_ZK","loginbutton",1],["__elem_f46f4946_0_0_46","u_0_3_9l",1],["__elem_f46f4946_0_1_Hm","u_0_4_74",1],["__elem_a588f507_0_1_X4","u_0_5_d\/",1],["__elem_9f5fac15_0_0_1E","pagelet_bluebar",1],["__elem_a588f507_0_0_yO","globalContainer",1],["__elem_a588f507_0_2_jS","content",1]],"require":[["WebPixelRatioDetector","startDetecting",[],[false]],["ScriptPath","set",[],["X4oh4Controller","a1f3c513",{"imp_id":"0N8MzXYdl4j2UhwMM","ef_page":null,"uri":"https:\/\/www.facebook.com\/shared\/user_preferences\/"}]],["UITinyViewportAction","init",[],[]],["ResetScrollOnUnload","init",["__elem_a588f507_0_0_yO"],[{"__m":"__elem_a588f507_0_0_yO"}]],["KeyboardActivityLogger","init",[],[]],["FocusRing","init",[],[]],["ErrorMessageConsole","listenForUncaughtErrors",[],[]],["HardwareCSS","init",[],[]],["AsyncRequestNectarLogging"],["FourOhFourJSLogger","log",[],[]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["LoginbarPopover","init",["__elem_94c15385_0_0_+q","__elem_072b8e64_0_0_Yh","__elem_a588f507_0_3_OL"],[{"__m":"__elem_94c15385_0_0_+q"},{"__m":"__elem_072b8e64_0_0_Yh"},{"__m":"__elem_a588f507_0_3_OL"}]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_46"],[{"__m":"__elem_f46f4946_0_0_46"},1724852742]],["ScreenDimensionsAutoSet","setInputValue",["__elem_f46f4946_0_1_Hm"],[{"__m":"__elem_f46f4946_0_1_Hm"}]],["LoginFormController","init",["__elem_835c633a_0_0_V\/","__elem_45d
Source: chromecache_712.2.dr	String found in binary or memory: <script>requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"define":[["cr:7736",["FBLynxLogging"],{"__rc":["FBLynxLogging",null]},-1],["LinkshimHandlerConfig",[],{"supports_meta_referrer":true,"default_meta_referrer_policy":"origin-when-crossorigin","switched_meta_referrer_policy":"origin","non_linkshim_lnfb_mode":null,"link_react_default_hash":"AT1CBTJ67pioPJ47gMMjlQBkM_1LSxz_-BrZwzY1LTUhFfhCGyIDFXK25J4bValtnyGOLdCUHx9-ol0KviJIUkzDSKKQjP3htvPdPgiQr3f-Nprwb_ph0vgJq-t2ilbU0Y_YaLyoRS1AOcXgOTpL0g","untrusted_link_default_hash":"AT3tQRaVjP6ugGxhGkQ9aCsZTRu8iQ-U6GaByBQz4MneX5YSd6zXDGTY_8i_3SvPcwFg6eLi6Elmqz4k2afvsWWd0Jv7metk6RA4r7EY2oB0Y_bkFv2ss9EWLYTIKAUeM1WMQbqlZXtnDxns1RJ0Zg","linkshim_host":"l.facebook.com","linkshim_path":"\/l.php","linkshim_enc_param":"h","linkshim_url_param":"u","use_rel_no_opener":true,"use_rel_no_referrer":true,"always_use_https":true,"onion_always_shim":true,"middle_click_requires_event":true,"www_safe_js_mode":"asynclazy","m_safe_js_mode":"MLynx_asynclazy","ghl_param_link_shim":false,"click_ids":[],"is_linkshim_supported":true,"current_domain":"facebook.com","blocklisted_domains":["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"elements":[["__elem_072b8e64_0_0_U0","u_0_0_QP",1],["__elem_94c15385_0_0_fy","u_0_1_6l",1],["__elem_a588f507_0_3_AJ","u_0_2_kP",1],["__elem_835c633a_0_0_9x","login_form",1],["__elem_efa9dffa_0_0_WZ","email",1],["__elem_45d73b5d_0_0_OX","loginbutton",1],["__elem_f46f4946_0_0_D3","u_0_3_A1",1],["__elem_f46f4946_0_1_Um","u_0_4_+a",1],["__elem_a588f507_0_1_C2","u_0_5_BC",1],["__elem_9f5fac15_0_0_DS","pagelet_bluebar",1],["__elem_a588f507_0_0_aG","globalContainer",1],["__elem_a588f507_0_2_7i","content",1]],"require":[["WebPixelRatioDetector","startDetecting",[],[false]],["ScriptPath","set",[],["X4oh4Controller","a1f3c513",{"imp_id":"0MhQGyrOnoXZniecy","ef_page":null,"uri":"https:\/\/www.facebook.com\/video\/unified_cvc\/"}]],["UITinyViewportAction","init",[],[]],["ResetScrollOnUnload","init",["__elem_a588f507_0_0_aG"],[{"__m":"__elem_a588f507_0_0_aG"}]],["KeyboardActivityLogger","init",[],[]],["FocusRing","init",[],[]],["ErrorMessageConsole","listenForUncaughtErrors",[],[]],["HardwareCSS","init",[],[]],["AsyncRequestNectarLogging"],["FourOhFourJSLogger","log",[],[]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["LoginbarPopover","init",["__elem_94c15385_0_0_fy","__elem_072b8e64_0_0_U0","__elem_a588f507_0_3_AJ"],[{"__m":"__elem_94c15385_0_0_fy"},{"__m":"__elem_072b8e64_0_0_U0"},{"__m":"__elem_a588f507_0_3_AJ"}]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_D3"],[{"__m":"__elem_f46f4946_0_0_D3"},1724852734]],["ScreenDimensionsAutoSet","setInputValue",["__elem_f46f4946_0_1_Um"],[{"__m":"__elem_f46f4946_0_1_Um"}]],["LoginFormController","init",["__elem_835c633a_0_0_9x","__elem_45d73b5d_0_0
Source: chromecache_817.2.dr	String found in binary or memory: <script>requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"define":[["cr:7736",["FBLynxLogging"],{"__rc":["FBLynxLogging",null]},-1],["LinkshimHandlerConfig",[],{"supports_meta_referrer":true,"default_meta_referrer_policy":"origin-when-crossorigin","switched_meta_referrer_policy":"origin","non_linkshim_lnfb_mode":null,"link_react_default_hash":"AT1HAJzMS4S3ZtJlVE3nfFSwZHLEWvf5LecUP6aNWthKFj3KReBUus1bCxiLUol3Zj6YR-2DvPFwKjRnqU24WA8DL6lzwxgqu_XfgkernpoE6C3-HS7IhOtCPhcUsRlWI3hFLQcmohYDCOHpB9-baA","untrusted_link_default_hash":"AT2Holb75noDkJUuswXrf9FrPAuyHkgzqY9sNhshzbgK2z1ihznuU2Y7X2Si_0T3xnLoEE0nTmGsLl5r0-x7VbJCpxKEpkZqLvcGBx9C6f0QyaC7X7WbGLaGWCpY_eFmGtrBSqoC6mbfQxeiNJ42LQ","linkshim_host":"l.facebook.com","linkshim_path":"\/l.php","linkshim_enc_param":"h","linkshim_url_param":"u","use_rel_no_opener":true,"use_rel_no_referrer":true,"always_use_https":true,"onion_always_shim":true,"middle_click_requires_event":true,"www_safe_js_mode":"asynclazy","m_safe_js_mode":"MLynx_asynclazy","ghl_param_link_shim":false,"click_ids":[],"is_linkshim_supported":true,"current_domain":"facebook.com","blocklisted_domains":["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"elements":[["__elem_072b8e64_0_0_Sp","u_0_0_iZ",1],["__elem_94c15385_0_0_LI","u_0_1_7x",1],["__elem_a588f507_0_3_N9","u_0_2_mO",1],["__elem_835c633a_0_0_gP","login_form",1],["__elem_efa9dffa_0_0_ez","email",1],["__elem_45d73b5d_0_0_co","loginbutton",1],["__elem_f46f4946_0_0_Z4","u_0_3_O1",1],["__elem_f46f4946_0_1_9w","u_0_4_Rf",1],["__elem_a588f507_0_1_VE","u_0_5_9n",1],["__elem_9f5fac15_0_0_X9","pagelet_bluebar",1],["__elem_a588f507_0_0_kY","globalContainer",1],["__elem_a588f507_0_2_SM","content",1]],"require":[["WebPixelRatioDetector","startDetecting",[],[false]],["ScriptPath","set",[],["X4oh4Controller","a1f3c513",{"imp_id":"0qIbQ8BBaXLIKwP5M","ef_page":null,"uri":"https:\/\/www.facebook.com\/ajax\/bulk-route-definitions\/"}]],["UITinyViewportAction","init",[],[]],["ResetScrollOnUnload","init",["__elem_a588f507_0_0_kY"],[{"__m":"__elem_a588f507_0_0_kY"}]],["KeyboardActivityLogger","init",[],[]],["FocusRing","init",[],[]],["ErrorMessageConsole","listenForUncaughtErrors",[],[]],["HardwareCSS","init",[],[]],["AsyncRequestNectarLogging"],["FourOhFourJSLogger","log",[],[]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["LoginbarPopover","init",["__elem_94c15385_0_0_LI","__elem_072b8e64_0_0_Sp","__elem_a588f507_0_3_N9"],[{"__m":"__elem_94c15385_0_0_LI"},{"__m":"__elem_072b8e64_0_0_Sp"},{"__m":"__elem_a588f507_0_3_N9"}]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_Z4"],[{"__m":"__elem_f46f4946_0_0_Z4"},1724852733]],["ScreenDimensionsAutoSet","setInputValue",["__elem_f46f4946_0_1_9w"],[{"__m":"__elem_f46f4946_0_1_9w"}]],["LoginFormController","init",["__elem_835c633a_0_0_gP","__elem_45
Source: chromecache_475.2.dr	String found in binary or memory: <script>requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"define":[["cr:7736",["FBLynxLogging"],{"__rc":["FBLynxLogging",null]},-1],["LinkshimHandlerConfig",[],{"supports_meta_referrer":true,"default_meta_referrer_policy":"origin-when-crossorigin","switched_meta_referrer_policy":"origin","non_linkshim_lnfb_mode":null,"link_react_default_hash":"AT3y6RZhO_GWvezfFYaWZfqg0egw115yw4clK_pn5bgwwLuUYz5w59rpBF5RW5NDgYxOCVMo7GDYQXf_NK2LtL5rY76hKO0ulaehW5XzxdoNRFA2x73XvfBsH_A2gFHcj_G1eICHyVzYAIjpygzWBw","untrusted_link_default_hash":"AT0kc7m2teJHrGNPkpMd3Q7Hba7p0cEzPiXo8GoJOFngaNFtWhfxxE6PvyO7QXYhwuxcXQuKvBVqJe37ZO7yKSkh86cN6HLtIubiKTytaX7o4YPysLnbx6iEd2sKu_8JJeA00MdUgZvVhsdZOMVSiQ","linkshim_host":"l.facebook.com","linkshim_path":"\/l.php","linkshim_enc_param":"h","linkshim_url_param":"u","use_rel_no_opener":true,"use_rel_no_referrer":true,"always_use_https":true,"onion_always_shim":true,"middle_click_requires_event":true,"www_safe_js_mode":"asynclazy","m_safe_js_mode":"MLynx_asynclazy","ghl_param_link_shim":false,"click_ids":[],"is_linkshim_supported":true,"current_domain":"facebook.com","blocklisted_domains":["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"elements":[["__elem_072b8e64_0_0_Mj","u_0_0_dl",1],["__elem_94c15385_0_0_qT","u_0_1_yA",1],["__elem_a588f507_0_3_bT","u_0_2_gL",1],["__elem_835c633a_0_0_cn","login_form",1],["__elem_efa9dffa_0_0_ZY","email",1],["__elem_45d73b5d_0_0_PA","loginbutton",1],["__elem_f46f4946_0_0_2i","u_0_3_of",1],["__elem_f46f4946_0_1_F4","u_0_4_bY",1],["__elem_a588f507_0_1_bk","u_0_5_KT",1],["__elem_9f5fac15_0_0_+A","pagelet_bluebar",1],["__elem_a588f507_0_0_1+","globalContainer",1],["__elem_a588f507_0_2_m4","content",1]],"require":[["WebPixelRatioDetector","startDetecting",[],[false]],["ScriptPath","set",[],["X4oh4Controller","a1f3c513",{"imp_id":"0AuvpWwwUxzsHmw9g","ef_page":null,"uri":"https:\/\/www.facebook.com\/ajax\/webstorage\/process_keys\/?state=1"}]],["UITinyViewportAction","init",[],[]],["ResetScrollOnUnload","init",["__elem_a588f507_0_0_1+"],[{"__m":"__elem_a588f507_0_0_1+"}]],["KeyboardActivityLogger","init",[],[]],["FocusRing","init",[],[]],["ErrorMessageConsole","listenForUncaughtErrors",[],[]],["HardwareCSS","init",[],[]],["AsyncRequestNectarLogging"],["FourOhFourJSLogger","log",[],[]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["LoginbarPopover","init",["__elem_94c15385_0_0_qT","__elem_072b8e64_0_0_Mj","__elem_a588f507_0_3_bT"],[{"__m":"__elem_94c15385_0_0_qT"},{"__m":"__elem_072b8e64_0_0_Mj"},{"__m":"__elem_a588f507_0_3_bT"}]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_2i"],[{"__m":"__elem_f46f4946_0_0_2i"},1724852763]],["ScreenDimensionsAutoSet","setInputValue",["__elem_f46f4946_0_1_F4"],[{"__m":"__elem_f46f4946_0_1_F4"}]],["LoginFormController","init",["__elem_835c633a_0_0_cn",
Source: chromecache_857.2.dr	String found in binary or memory: __d("Chromedome",["fbt"],(function(a,b,c,d,e,f,g,h){function i(){if(document.domain==null)return null;var a=document.domain,b=/^intern\./.test(a);if(b)return null;b=/(^\|\.)facebook\.(com\|sg)$/.test(a);if(b)return"facebook";b=/(^\|\.)instagram\.com$/.test(a);if(b)return"instagram";b=/(^\|\.)threads\.net$/.test(a);if(b)return"threads";b=/(^\|\.)messenger\.com$/.test(a);return b?"messenger":null}function j(a){if(a==="instagram")return h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable an Instagram feature or \"hack\" someone's account, it is a scam and will give them access to your Instagram account.");return a==="threads"?h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Threads feature or \"hack\" someone's account, it is a scam and will give them access to your Threads account."):h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Facebook feature or \"hack\" someone's account, it is a scam and will give them access to your Facebook account.")}function a(a){if(top!==window)return;a=i();if(a==null)return;var b=h._("Stop!");a=j(a);var c=h._("See {url} for more information.",[h._param("url","https://www.facebook.com/selfxss")]),d="font-family:helvetica; font-size:20px; ";[[b,d+"font-size:50px; font-weight:bold; color:red; -webkit-text-stroke:1px black;"],[a,d],[c,d],["",""]].map(function(a){window.setTimeout(console.log.bind(console,"\n%c"+a[0].toString(),a[1]))})}g.start=a}),226); equals www.facebook.com (Facebook)
Source: chromecache_570.2.dr	String found in binary or memory: __d("CometLegalFooter.react",["fbt","ix","BaseMiddot.react","CometErrorBoundary.react","CometLink.react","CometPressable.react","FBCookieSettingsLoggedOutConfig","FDSLazyPopoverTrigger.react","FDSText.react","JSResourceForInteraction","ServerTime","TetraIcon.react","XHealthPolicyCometControllerRouteBuilder","XPrivacyPolicyCometControllerRouteBuilder","fbicon","gkx","react","useCurrentRoute"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j,k=j\|\|d("react"),l=c("JSResourceForInteraction")("CometLegalFooterMoreMenu.react").__setRef("CometLegalFooter.react");function m(){try{var a;return(a=new Date(d("ServerTime").getMillis()))==null?void 0:a.getFullYear()}catch(a){return null}}function a(a){var b=a.isHelpCenter;b=b===void 0?!1:b;var e=a.isPage;e=e===void 0?!1:e;var f=a.onClick;a=d("FBCookieSettingsLoggedOutConfig").should_show_cookie_settings;var g=c("useCurrentRoute")(),j=m(),n=c("XPrivacyPolicyCometControllerRouteBuilder").buildUri({entry_point:"comet_dropdown"}),o=c("XHealthPolicyCometControllerRouteBuilder").buildUri({});e=[{href:"https://www.facebook.com/legal/terms/information_about_page_insights_data",label:h._("Information about Page Insights Data"),render:e&&c("gkx")("22806")},{href:n.toString(),label:h._("Privacy"),testid:"CometDropdownPrivacy"},{href:o.toString(),label:h._("Consumer Health Privacy"),render:c("gkx")("2828"),testid:"CometDropdownHealthPrivacy"},{href:"/terms?ref=pf",label:"Impressum/Terms/NetzDG/UrhDaG",render:c("gkx")("22807")&&!c("gkx")("22808")},{href:"/terms?ref=pf",label:h._("Imprint\/Terms"),render:c("gkx")("22808")},{href:"/legal/germany/",label:"UrhDaG/MStV",render:c("gkx")("22808")},{href:"/policies?ref=pf",label:h._("Terms"),render:!c("gkx")("22807")&&!c("gkx")("22808"),testid:"CometDropdownTerms"},{href:"/business/",label:h._("Advertising")},{href:"/help/568137493302217",label:k.jsxs(k.Fragment,{children:[h._("Ad Choices")," ",k.jsx(c("CometErrorBoundary.react"),{children:k.jsx("span",{className:"x1n2onr6 x1qiirwl",children:k.jsx(c("TetraIcon.react"),{color:"secondary",icon:d("fbicon")._(i("871692"),12)})})})]})},{href:"/policies/cookies/",label:h._("Cookies"),testid:"CometDropdownCookies"},{href:"/privacy/cookie_settings/",label:h._("Cookie Settings"),render:a},{href:"https://www.facebook.com/help/cancelcontracts?source=facebook.com",label:h._("Cancel contracts here"),open_in_new_tab:!0,render:c("gkx")("4387")}].filter(function(a){return a.render==null\|\|a.render===!0});var p=[];if((g==null?void 0:(n=g.rootView.props)==null?void 0:n.seoCrawlingPool)&&(g==null?void 0:(o=g.rootView.props)==null?void 0:o.seoCrawlingPool.url)){Array.from(Array((g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.multiple_links)\|\|0)).forEach(function(a,b){p.push(k.jsxs("li",{className:"xt0psk2",children:[k.jsx(c("CometLink.react"),{color_DEPRECATED:"secondary",href:g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.url,onClick:f,weight_DEPRECATED:"normal",children:g==null?void 0:(a=g.rootView.props)==null
Source: chromecache_832.2.dr, chromecache_687.2.dr	String found in binary or memory: __d("FBReelsURLUtils",["ConstUriUtils","XCometFBReelControllerRouteBuilder","gkx"],(function(a,b,c,d,e,f,g){"use strict";function h(a,b,d,e,f,g,h,i){b=(b=b)!=null?b:"UNKNOWN";var j="group_other",k=void 0;if(Boolean(e)){switch(d){case"group":case"group_mall":j="group";k=f==null?void 0:f;break;case"groups_tab":j="groups_tab";break;default:break}b=j}e={group_id:k,hide_next:h==null?void 0:h,page_id:i==null\|\|i===""?void 0:i,s:b,stack_idx:g==null?void 0:g,video_id:a==null?void 0:a};return c("XCometFBReelControllerRouteBuilder").buildURL(e)}function a(a,b,c,e,f,g){a=h(a,b,c,e,f,g);if(i()){f=(b=d("ConstUriUtils").getUri(a))==null?void 0:(c=b.getQualifiedUri())==null?void 0:(e=c.setDomain("www.facebook.com"))==null?void 0:e.toString();if(f!=null)return f}return a}function b(a){return["fb_shorts_video_deep_dive","fb_shorts_profile_video_deep_dive"].includes(a)}function i(){return c("gkx")("21034")\|\|c("gkx")("24206")}g.getReelsURL=h;g.getReelsAbsoluteURL=a;g.isReelsRenderLocationVDD=b;g.isBizSurface=i}),98); equals www.facebook.com (Facebook)
Source: chromecache_725.2.dr, chromecache_382.2.dr	String found in binary or memory: __d("FacebookCookieConsentCustomization",["fbt","ix","JSResourceForInteraction","XCookiesPolicyControllerRouteBuilder","isBaseline4EnabledForLoggedOut","isCNILEnabledForLoggedOut","lazyLoadComponent"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j=c("lazyLoadComponent")(c("JSResourceForInteraction")("FacebookCometCookieConsentDialogDataSettings.react").__setRef("FacebookCookieConsentCustomization"));a=function(){var a,b,d,e=null;c("isBaseline4EnabledForLoggedOut")()\|\|c("isCNILEnabledForLoggedOut")()?(b=i("1954651"),d=i("1954649"),e=h._("More options")):(b=i("856481"),d=i("856481"),e=h._("Manage Data Settings"));a=(a=(a=c("XCookiesPolicyControllerRouteBuilder").buildUri({}).getQualifiedUri())==null?void 0:(a=a.setDomain("www.facebook.com"))==null?void 0:a.toString())!=null?a:"";return{essentialCookiesOnly:!1,faviconDark:d,faviconLight:b,policyUrl:a,productName:"FACEBOOK",secondaryAction:{label:e,viewReference:j}}};b=a;g["default"]=b}),226); equals www.facebook.com (Facebook)
Source: chromecache_722.2.dr	String found in binary or memory: __d("PolarisExternalRoutes",["PolarisLocales","URI"],(function(a,b,c,d,e,f,g){"use strict";var h;function a(a){return new(h\|\|(h=c("URI")))(a).addQueryData({locale:c("PolarisLocales").locale}).toString()}b=a("https://help.instagram.com/581066165581870/");d="https://about.instagram.com/blog/";e="https://about.instagram.com";f="https://about.meta.com";var i="https://www.meta.com/smart-glasses/",j="https://developers.facebook.com/docs/instagram",k="https://help.instagram.com",l="https://www.facebook.com/privacy/policy",m="https://privacycenter.instagram.com/policy/",n="https://www.instagram.com/privacy/cookie_settings/",o="/legal/cookies/",p=a("https://help.instagram.com/416323267314424/"),q="https://www.facebook.com/policies/cookies",r="https://privacycenter.instagram.com/policies/cookies/",s="https://privacycenter.instagram.com/policies/cookies/?annotations[0]=explanation%2F3_companies_list",t="https://www.facebook.com/help/instagram/261704639352628",u="https://www.whatsapp.com/legal/commerce-policy/",v="https://about.meta.com/technologies/meta-verified/",w=a("https://help.instagram.com/contact/543840232909258/"),x=a("https://help.instagram.com/contact/598671977756435/"),y=a("https://help.instagram.com/contact/406206379945942/");a=a("https://help.instagram.com/contact/383679321740945");var z="https://help.instagram.com/116024195217477",A="https://www.facebook.com/help/instagram/1164377657035425/",B="https://familycenter.instagram.com/supervision",C="https://familycenter.instagram.com/education",D="https://business.facebook.com/latest/creator_marketplace?source=ig_web_profile&nav_ref=ig_web_profile",E="https://business.facebook.com/latest?nav_ref=ig_web_more_nav_menu",F="https://business.facebook.com/billing_hub/payment_settings?",G="https://m.facebook.com/billing_hub/payment_settings?",H="https://indonesia.fb.com/panduan-digital/",I="https://www.facebook.com/help/cancelcontracts?source=instagram.com",J="https://about.instagram.com/about-us/careers";g.NEW_LEGAL_TERMS_PATH=b;g.INSTAGRAM_PRESS_SITE_PATH=d;g.INSTAGRAM_ABOUT_SITE_PATH=e;g.META_ABOUT_SITE_PATH=f;g.META_RAY_BAN_SITE_PATH=i;g.INSTAGRAM_API_SITE_PATH=j;g.INSTAGRAM_HELP_SITE_PATH=k;g.NEW_PRIVACY_POLICY_PATH=l;g.INSTAGRAM_PRIVACY_POLICY_PATH=m;g.INSTAGRAM_COOKIE_SETTINGS_PATH=n;g.NEW_COOKIE_POLICY_PATH=o;g.NETZDG_URHDAG_RANKING_OF_CONTENT_PATH=p;g.FACEBOOK_COOKIE_POLICY_PATH=q;g.INSTAGRAM_COOKIE_POLICY_PATH_UPDATED=r;g.INSTAGRAM_COOKIE_POLICY_OTHER_COMPANIES_PATH=s;g.FACEBOOK_CONTACT_UPLOADING_AND_NON_USERS=t;g.WHATSAPP_COMMERCE_POLICY_PATH=u;g.META_VERIFIED_MARKETING_PATH=v;g.NETZDG_REPORT_CONTACT_FORM_PATH=w;g.CPA_REPORT_CONTACT_FORM_PATH=x;g.DSA_REPORT_CONTACT_FORM_PATH=y;g.COMMUNITY_VIOLATIONS_GUIDELINES_CONTACT_FORM_PATH=a;g.ACCOUNT_PRIVACY_HELP_PATH=z;g.ACTIVITY_STATUS_HELP_PATH=A;g.FAMILY_CENTER_HOME_PATH=B;g.EDUCATION_HUB_PATH=C;g.CREATOR_MARKETPLACE_PATH=D;g.MORE_NAV_MENU_META_BUSINESS_SUITE_PATH=E;g.BILLING_HUB_DESKTOP_PATH=F;g.BILLING_HUB_MSITE_PATH=G;g.META_IN_INDONESIA_PATH=H;g.C
Source: chromecache_722.2.dr	String found in binary or memory: __d("PolarisFBConnectHelpers",["FbSdkConsts","InstagramQueryParamsHelper","PolarisConfig","PolarisConfigConstants","PolarisFBSignupQEHelpers","PolarisIGWebStorage","PolarisLocales","PolarisLoggedOutCtaLogger","PolarisOneTapLoginStorage","PolarisRoutes","PolarisUA","PolarisWebStorage","Promise","Random","asyncToGeneratorRuntime","browserHistory_DO_NOT_USE","cometAsyncFetch","emptyFunction","isStringNullOrEmpty","nullthrows","polarisFBReady","polarisLogAction"],(function(a,b,c,d,e,f,g){"use strict";var h,i=[0,0,0,0,0,0,0,0],j="https://m.facebook.com/dialog/oauth",k="https://www.facebook.com/dialog/oauth",l="https://www.facebook.com/oidc/",m="NewUserInterstitial.profile_picture_url",n="fbAccessToken",o="fbLoginKey",p="fbLoginReturnURL",q="fbPlainToken";function r(a,e){e===void 0&&(e=[]);var f=c("PolarisWebStorage").getSessionStorage(),g=i.reduce(function(a){return a+d("Random").uint32().toString(36)},"");f!=null&&f.setItem(o,g);f="https://www.instagram.com"+d("PolarisRoutes").SIGNUP_PATH;var h="https://www.instagram.com"+d("PolarisRoutes").FACEBOOK_V2_SIGNUP_PATH,j=t(),k=d("PolarisFBSignupQEHelpers").shouldUseOIDCSignupFlow();if(!k){g=(k={},k[o]=g,k[p]=a,k);a={client_id:d("PolarisConfigConstants").instagramFBAppId,locale:c("PolarisLocales").locale,redirect_uri:f,response_type:"code,granted_scopes",scope:e.concat(d("FbSdkConsts").PERMISSIONS.EMAIL).join(","),state:JSON.stringify(g)};k=d("InstagramQueryParamsHelper").appendQueryParams(j,a);d("browserHistory_DO_NOT_USE").redirect(k)}else{f=function(){var a=b("asyncToGeneratorRuntime").asyncToGenerator(function(){var a=(yield c("cometAsyncFetch")("/oidc/state/",{data:{},method:"POST"}));return a});return function(){return a.apply(this,arguments)}}();f().then(function(a){a=a.state;a={app_id:d("PolarisConfigConstants").instagramFBAppId,redirect_uri:h,response_type:"code",scope:"openid email profile",state:a};a=d("InstagramQueryParamsHelper").appendQueryParams(j,a);d("browserHistory_DO_NOT_USE").redirect(a)})["catch"](function(a){return c("emptyFunction")()})}}function s(){var a=c("PolarisWebStorage").getSessionStorage(),b=null;a!=null&&(b=a.getItem(o),a.removeItem(o));return c("isStringNullOrEmpty")(b)?null:b}function t(){return d("PolarisUA").isMobile()?j:d("PolarisFBSignupQEHelpers").shouldUseOIDCSignupFlow()?l:k}function a(a){var b=s();return b==null\|\|b===""?!1:a===b}function e(){var a;return(a=d("PolarisIGWebStorage").getStorageForUser(d("PolarisConfig").getViewerId()))==null?void 0:a.getItem(n)}function f(a){return u.apply(this,arguments)}function u(){u=b("asyncToGeneratorRuntime").asyncToGenerator(function(a){var e=(yield new(h\|\|(h=b("Promise")))(function(a,b){c("polarisFBReady").sdkReady(function(){c("polarisFBReady").getLoginStatus(!0).then(function(c){c.status===d("FbSdkConsts").STATUS.CONNECTED?a(c):b()})["catch"](function(a){b(a)})})}));if(a){a=(a=e.authResponse)==null?void 0:a.accessToken;w(a)}return e});return u.apply(this,arguments)}function v(){return new(h\|\|(h=b("Promise")))(function(a,b
Source: chromecache_722.2.dr	String found in binary or memory: __d("PolarisLinkshimURI",["PolarisInstapi","URI","promiseDone"],(function(a,b,c,d,e,f,g){"use strict";var h,i=["l.facebook.com","l.instagram.com"],j=["help.instagram.com","www.facebook.com","business.facebook.com"];function k(a){var b;try{b=new(h\|\|(h=c("URI")))(a)}catch(a){return!1}a=b.getDomain();var d=b.getProtocol().toLowerCase();return d!=null&&!d.startsWith("http")?!0:i.includes(a)&&!!b.getQueryData().u\|\|j.includes(a)}function a(a,b,e){e===void 0&&(e=""),k(a)&&b(a),c("promiseDone")(d("PolarisInstapi").apiPost("/api/v1/web/linkshim/link/",{body:{cs:e,u:a}}).then(function(a){b(a.data.uri)}))}g.shouldSkipLinkShim=k;g.asyncGet=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr, chromecache_807.2.dr, chromecache_722.2.dr	String found in binary or memory: __d("RealtimeGraphQLRequest",["invariant","RequestStreamCommonRequestStreamCommonTypes","TransportSelectingClientSingleton","nullthrows","regeneratorRuntime"],(function(a,b,c,d,e,f,g,h){"use strict";a=function(){function a(a){var b=this,e=a.method,f=a.doc_id,g=a.is_intern,i=a.extra_headers,j=a.body,k=a.instrumentation_data;a=a.sandbox;this.$12=function(a){switch(a){case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Started:if(b.$10){b.$9!=null\|\|h(0,13576);a=Date.now()-c("nullthrows")(b.$9);b.$7!=null&&b.$7(a)}else b.$10=!0,b.$5!=null&&b.$5();break;case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Stopped:b.$9=Date.now();b.$6!=null&&b.$6(!1,!1);break;default:break}};this.$10=!1;e={method:e,doc_id:f};g===!0&&(e=babelHelpers["extends"]({},e,{www_tier:"intern"}));a!=null&&(e=babelHelpers["extends"]({},e,{www_sandbox:a.replace(/^not-www\.(\d+\|\w+)\.(od\|sb)\.internalfb\.com$/,"www.$1.$2.facebook.com")}));i!=null&&(e=babelHelpers["extends"]({},e,i));this.$1=e;this.$2=JSON.stringify(j);this.$11=k}var e=a.prototype;e.onResponse=function(a){this.$3=a;return this};e.onError=function(a){this.$4=a;return this};e.onActive=function(a){this.$5=a;return this};e.onPause=function(a){this.$6=a;return this};e.onResume=function(a){this.$7=a;return this};e.onRetryUpdateRequestBody=function(a){this.$8=a;this.$1=babelHelpers["extends"]({},this.$1,{request_stream_retry:"false"});return this};e.send=function(){var a,d;return b("regeneratorRuntime").async(function(e){while(1)switch(e.prev=e.next){case 0:this.$3!=null\|\|h(0,33593);a={onData:c("nullthrows")(this.$3)};this.$4!=null&&(a=babelHelpers["extends"]({},a,{onTermination:this.$4}));a=babelHelpers["extends"]({},a,{onFlowStatus:this.$12});this.$8!=null&&(a=babelHelpers["extends"]({},a,{onRetryUpdateRequestBody:this.$8}));e.next=7;return b("regeneratorRuntime").awrap(c("TransportSelectingClientSingleton").requestStream(this.$1,this.$2,a,this.$11));case 7:d=e.sent;return e.abrupt("return",{cancel:function(){d.cancel()},amendExperimental:function(a){try{d.amendWithoutAck(JSON.stringify(a));return!0}catch(a){return!1}}});case 9:case"end":return e.stop()}},null,this)};return a}();g["default"]=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_832.2.dr, chromecache_687.2.dr	String found in binary or memory: __d("SearchCometInterestsDeepDiveErrorState.react",["fbt","CometLink.react","FDSTextPairing.react","NullStateGeneral","NullStateNoResults","NullStatePermissions","TetraNullState.react","react"],(function(a,b,c,d,e,f,g,h){"use strict";var i,j=i\|\|d("react");function a(a){var b,d=a.errorState;a=a.hashtagName;var e,f,g;switch(d){case"EMPTY_RESULT_PAGE":e=h._("We didn't find anything");f=h._("Make sure everything is spelled correctly, or try searching for a different hashtag.");g=c("NullStateNoResults");break;case"INTEGRITY_ISSUE_PAGE":e=h._("Keeping our community safe");f=j.jsxs(j.Fragment,{children:[h._("Posts with {hashtag_name} are temporarily hidden here. Some content in those posts goes against our Community Standards.",[h._param("hashtag_name",a)]),j.jsx("div",{className:"x1sy10c2",children:j.jsx(c("FDSTextPairing.react"),{headline:j.jsx(c("CometLink.react"),{href:"https://www.facebook.com/communitystandards/",target:"_blank",children:h._("Learn More")}),level:3,reduceEmphasis:!0})})]});g=c("NullStatePermissions");break;default:e=h._("This content isn't available");f=h._("This may be because of a technical error we're trying to fix, or because the content was removed.");g=c("NullStateGeneral");break}return j.jsx("div",{className:"x65f84u",children:j.jsx(c("TetraNullState.react"),{body:f,"data-testid":void 0,headline:e,icon:g})})}a.displayName=a.name+" [from "+f.id+"]";function b(a){switch(a){case"INTEGRITY_ISSUE_PAGE":return"blocked";default:return null}}g["default"]=a}),226); equals www.facebook.com (Facebook)

Source: chromecache_524.2.dr, chromecache_722.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_472.2.dr, chromecache_690.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_474.2.dr, chromecache_672.2.dr	String found in binary or memory: http://git.io/TrdQbw
Source: chromecache_380.2.dr, chromecache_446.2.dr	String found in binary or memory: http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
Source: chromecache_474.2.dr, chromecache_672.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_815.2.dr	String found in binary or memory: http://www.imagemagick.org
Source: chromecache_380.2.dr, chromecache_446.2.dr	String found in binary or memory: http://www.inkscape.org/)
Source: chromecache_380.2.dr, chromecache_446.2.dr	String found in binary or memory: http://www.inkscape.org/namespaces/inkscape
Source: chromecache_494.2.dr, chromecache_789.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_600.2.dr, chromecache_434.2.dr	String found in binary or memory: http://www.windowsphone.com/s?appid=3222a126-7f20-4273-ab4a-161120b21aea
Source: chromecache_524.2.dr, chromecache_722.2.dr	String found in binary or memory: https://about.instagram.com
Source: chromecache_524.2.dr, chromecache_722.2.dr	String found in binary or memory: https://about.instagram.com/blog/
Source: chromecache_524.2.dr, chromecache_722.2.dr	String found in binary or memory: https://about.meta.com
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/100ThievesEmoji2024/100ThievesEmoji2024.png
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11253_ABEMA_jumptoonoffl_18ce55op18n_2024Hashmoji/BF-11253_ABEMA_
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11254_BANDAI_ride_kamens_Applaunch_2024May_Hashmoji/BF-11254_BAND
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11326_MH_Now_Jun2024Hashmoji/BF-11326_MH_Now_Jun2024Hashmoji.png
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11376_Shiseido_elixir_TW_Hashmoji_Q22024/BF-11376_Shiseido_elixir
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11380_Qiddiya_Hashmoji2024_v3/BF-11380_Qiddiya_Hashmoji2024_v3.pn
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11381_MWLORG_Hashmoji_June2024_V2_/BF-11381_MWLORG_Hashmoji_June2
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11383_FF_XIV_JP_Jun_2024Hashmoji/BF-11383_FF_XIV_JP_Jun_2024Hashm
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11387_LOreal_Maybelline_TH_hashmoji_after/BF-11387_LOreal_Maybell
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11408_NetflixJP18ce54ua4fy_Hashmoji2024_Yomeboku/BF-11408_Netflix
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11415_Digital_Video_Support_Summer_2024_/BF-11415_Digital_Video_S
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11461_ZenlessZoneZero_Hashmoji_after/BF-11461_ZenlessZoneZero_Has
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11462_Zenless_Zone_Zero_Launch_2024_Bangboo_01/BF-11462_Zenless_Z
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11463_Zenless_Zone_Zero_Launch_2024_Ellen_Joe_Character/BF-11463_
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11470_ABEMA_18ce549twrx_Hashmoji_20240629-20240930_Oshinoko/BF-11
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11471_Anime_ABEMA_18ce54aqujn_Hashmoji_20240705_20241007_Monogata
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11479_Zenless_Zone_Zero_Launch2024_Nicole_Livestream/BF-11479_Zen
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11480_Zenless_Zone_Zero_Launch_2024_Golden_Bangboo/BF-11480_Zenle
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11485_SaudiBanks_Hashmoji_24/BF-11485_SaudiBanks_Hashmoji_24.png
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11588_Loreal_Lancome_JP_Hashmoji2024/BF-11588_Loreal_Lancome_JP_H
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11611_MOC_Q324_Hashmoji/BF-11611_MOC_Q324_Hashmoji.png
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11618_SportsBoulevard_Q324_Hashmoji/BF-11618_SportsBoulevard_Q324
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11675_30ebr_BPC_Gilberto_Gil_Hashmoji_2024/BF-11675_30ebr_BPC_Gil
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11686_NetflixJP_Hashmoji_20240803-20241103_Jimenshi/BF-11686_Netf
Source: chromecache_812.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm

IP	Domain	Country	ASN	ASN Name	Malicious
146.75.120.159	dualstack.twimg.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
146.75.120.158	dualstack.video.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
157.240.252.174	z-p42-instagram.c10r.instagram.com	United States	32934	FACEBOOKUS	false
104.244.43.131	abs-zero.twimg.com	United States	54113	FASTLYUS	false
142.250.185.110	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
142.250.184.238	play.google.com	United States	15169	GOOGLEUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
157.240.24.13	scontent-hou1-1.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
74.125.133.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.24.20	video-hou1-1.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
157.240.24.63	scontent-hou1-1.cdninstagram.com	United States	32934	FACEBOOKUS	false
157.240.0.63	scontent.cdninstagram.com	United States	32934	FACEBOOKUS	false
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false
152.199.21.141	cs510.wpc.edgecastcdn.net	United States	15133	EDGECASTUS	false
63.32.63.24	www.kpmgperformanceinsights.com	United States	16509	AMAZON-02US	false
142.250.184.206	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
34.247.109.241	unknown	United States	16509	AMAZON-02US	false
104.244.42.66	tpop-api.twitter.com	United States	13414	TWITTERUS	false
104.244.42.65	twitter.com	United States	13414	TWITTERUS	false
104.244.42.1	x.com	United States	13414	TWITTERUS	false
172.217.16.206	analytics.google.com	United States	15169	GOOGLEUS	false
104.244.42.194	tpop-api.x.com	United States	13414	TWITTERUS	false
104.244.42.193	unknown	United States	13414	TWITTERUS	false
142.250.181.226	td.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
93.184.221.165	t.co	European Union	15133	EDGECASTUS	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
157.240.251.2	video.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false

IP
192.168.2.4
192.168.2.17
192.168.2.16

Name	IP	Active	Malicious	Reputation
dualstack.video.twitter.map.fastly.net	146.75.120.158	true	false	unknown
z-p42-instagram.c10r.instagram.com	157.240.252.174	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	74.125.133.157	true	false	unknown
tpop-api.twitter.com	104.244.42.66	true	false	unknown
scontent.xx.fbcdn.net	157.240.251.9	true	false	unknown
t.co	93.184.221.165	true	false	unknown
scontent-hou1-1.xx.fbcdn.net	157.240.24.13	true	false	unknown
www.kpmgperformanceinsights.com	63.32.63.24	true	false	unknown
www.google.com	172.217.16.196	true	false	unknown
cs510.wpc.edgecastcdn.net	152.199.21.141	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
twitter.com	104.244.42.65	true	false	unknown
video.xx.fbcdn.net	157.240.251.2	true	false	unknown
tpop-api.x.com	104.244.42.194	true	false	unknown
scontent.cdninstagram.com	157.240.0.63	true	false	unknown
scontent-hou1-1.cdninstagram.com	157.240.24.63	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
youtube-ui.l.google.com	142.250.184.206	true	false	unknown
play.google.com	142.250.184.238	true	false	unknown
dualstack.twimg.twitter.map.fastly.net	146.75.120.159	true	false	unknown
abs-zero.twimg.com	104.244.43.131	true	false	unknown
analytics.google.com	172.217.16.206	true	false	unknown
td.doubleclick.net	142.250.181.226	true	false	unknown
x.com	104.244.42.1	true	false	unknown
video-hou1-1.xx.fbcdn.net	157.240.24.20	true	false	unknown
abs.twimg.com	unknown	unknown	false	unknown
abs-0.twimg.com	unknown	unknown	false	unknown
api.twitter.com	unknown	unknown	false	unknown
static.cdninstagram.com	unknown	unknown	false	unknown
www.lpga.com	unknown	unknown	false	unknown
video.twimg.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
pbs.twimg.com	unknown	unknown	false	unknown
api.x.com	unknown	unknown	false	unknown
static.xx.fbcdn.net	unknown	unknown	false	unknown
www.instagram.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Ocf~bundle.LoggedOutHome~loader.TimelineRenderer~loader.SignupModule.f80d028a.js	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/icons/june_2021.svg	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Grok~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bun.f39400ca.js	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/profiles/98455.png	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/icons/kpmg-performance.svg	false	Avira URL Cloud: safe	unknown
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=19963.HYP%3Ainstagram_web_pkg.2.1..0.0&__hsi=7408186003085360610&__req=3&__rev=1016035497&__s=qz7c47%3Acv8rdc%3Awqp1ck&__spin_b=trunk&__spin_r=1016035497&__spin_t=1724852713&__user=0&dpr=1&jazoest=2896&lsd=AVrSPIX9O8s&ph=C3	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.Brande.def10c6a.js	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/profiles/98811.png	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/profiles/102709.png	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/runtime.86c1889cbfad0b82.js	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/ngsw.json?ngsw-cache-bust=0.7190758020076715	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19963.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408186033505436278&__req=o&__rev=1016036106&__s=nec1sk%3A8tyttl%3Anb01ci&__spin_b=trunk&__spin_r=1016036106&__spin_t=1724852722&__user=0&dpr=1&jazoest=21088&lsd=AVpsJcaqltg&ph=C3	false	Avira URL Cloud: safe	unknown
https://static.cdninstagram.com/rsrc.php/v3iZxj4/ya/l/en_US/YzFfd1AenoeooMAQgagoSsxUyH-w7rn2vRXk0tlAyiEuzuTxHCH_Xe8GLQCaee48MNRsQdTRGWxjOwQOBLL_ktx2Qa_6doViWiKs9kkVBwNxb8vjr4P6SQiJvtlqQ92kTA-FB8SKZZfUgEt88VoA1yp1nnGUT1EF5dFbLV7KRakQ3KXkFYkAhAzC_d3Vrzd74E74aeZkE4pfs2WJ06vVhLfGuByFaQcEh83IDq-EyEJp2xE87ivsWqehdEtWwnMQD9_db8f7zf8GpZHhWF2k8w9oFpyOtJ12LiJjUdcQGCH-OEV-4Wj0n8ya2W-EmpcCcMX5ABpjcZ.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/ngsw.json?ngsw-cache-bust=0.8105820094260929	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/ya/l/0,cross/D8gMdAN_ZRiVWgg-YkpZuD.css?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://static.cdninstagram.com/rsrc.php/v3/y8/r/ZWR9C7_JdnP.png	false	Avira URL Cloud: safe	unknown
https://static.cdninstagram.com/rsrc.php/v3iwEp4/yO/l/en_US/ZsL5ssOFMgj.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yt/r/EUNHXg17Vg2.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/modules.audio.9936ba0a.js	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/icons/sept_2023.svg	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/profiles/default/default.png	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/profiles/102684.png	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYDF2chtF01HZXVtxHca_oEhSajwZiwZQ4fXYK2i58CcpQ&oe=66F6A3CB&_nc_sid=7da55a	false	Avira URL Cloud: safe	unknown
https://x.com/x/migrate	false	Avira URL Cloud: safe	unknown
https://static.cdninstagram.com/rsrc.php/v3iUkp4/yO/l/en_US/3JIveumUY72.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19963.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408186033505436278&__req=a&__rev=1016036106&__s=nec1sk%3A8tyttl%3Anb01ci&__spin_b=trunk&__spin_r=1016036106&__spin_t=1724852722&__user=0&dpr=1&jazoest=21088&lsd=AVpsJcaqltg&ph=C3	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/profiles/98350.png	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/api/v1/seasons/2024/stats/strokes-gained/all	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3izA14/yc/l/en_US/EB8whpZISFH.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.cdninstagram.com/v/t51.29350-15/453500889_1232254718128661_6560880523413177063_n.jpg?stp=dst-jpg_e15_fr_s1080x1080&_nc_ht=scontent-hou1-1.cdninstagram.com&_nc_cat=105&_nc_ohc=fIt0m6zk1GkQ7kNvgEMFQtG&_nc_gid=0cb776f7cfdc4225bb71689a5ff5b23d&edm=AOUPxh0BAAAA&ccb=7-5&oh=00_AYCkj2VePkURTfJDOpa008PQUy1nl51jLJXJGoHeaZOJQg&oe=66D500DD&_nc_sid=9dc660	false	Avira URL Cloud: safe	unknown
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=19963.HYP%3Ainstagram_web_pkg.2.1..0.0&__hsi=7408186003085360610&__req=c&__rev=1016035497&__s=qz7c47%3Acv8rdc%3Awqp1ck&__spin_b=trunk&__spin_r=1016035497&__spin_t=1724852713&__user=0&dpr=1&jazoest=2896&lsd=AVrSPIX9O8s&ph=C3	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.e8147eda.js	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/profiles/98109.png	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/v/t51.2885-15/451985068_1188122549094605_4334205858289329501_n.jpg?_nc_cat=104&ccb=1-7&_nc_sid=9a7156&_nc_ohc=OS73iBOSBjgQ7kNvgFpqCDx&_nc_ht=scontent-hou1-1.xx&oh=00_AYCd4-ld6ewQMzK7D3KCTUvDkA3GEHrJclD_w8z7IJp_xg&oe=66D4E99A	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3iQGS4/yD/l/en_US/jTBNPl0hVqM26XM3Gr1dZLB0hO_r8WZ5imQs3gOu2sLNERz6pNGhHp8TcGIlLeklG1yHq4ld5fVOk7ubvH-PKUKR.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.ReaderMode~bu.a51fd31a.js	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/profiles/98230.png	false	Avira URL Cloud: safe	unknown
https://static.cdninstagram.com/rsrc.php/v3/y7/r/ZVhFC-3u4Av.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=19963.HYP%3Ainstagram_web_pkg.2.1..0.0&__hsi=7408186003085360610&__req=8&__rev=1016035497&__s=qz7c47%3Acv8rdc%3Awqp1ck&__spin_b=trunk&__spin_r=1016035497&__spin_t=1724852713&__user=0&dpr=1&jazoest=2896&lsd=AVrSPIX9O8s&ph=C3	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.cdninstagram.com/v/t51.2885-15/290631653_549857660057427_3817242198002617930_n.jpg?stp=dst-jpg_e15_fr_s1080x1080&_nc_ht=scontent-hou1-1.cdninstagram.com&_nc_cat=103&_nc_ohc=jv6BlUIJD90Q7kNvgFB9don&edm=AOUPxh0BAAAA&ccb=7-5&oh=00_AYC6Fz_QU5F_qF-8FjoOEpK2f69ZxTHHHQ2gQJKYpOigGA&oe=66D50080&_nc_sid=9dc660	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19963.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408186033505436278&__req=h&__rev=1016036106&__s=nec1sk%3A8tyttl%3Anb01ci&__spin_b=trunk&__spin_r=1016036106&__spin_t=1724852722&__user=0&dpr=1&jazoest=21088&lsd=AVpsJcaqltg&ph=C3	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Grok~bundle.Account~bundle.R.1dec1c4a.js	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/profiles/98843.png	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/profiles/102175.png	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19963.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408186033505436278&__req=l&__rev=1016036106&__s=nec1sk%3A8tyttl%3Anb01ci&__spin_b=trunk&__spin_r=1016036106&__spin_t=1724852722&__user=0&dpr=1&jazoest=21088&lsd=AVpsJcaqltg&ph=C3	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/vendor.eac7fcfa.js	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/ondemand.Dropdown.05f2d88a.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/bcd1f224/www-player.css	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/profiles/102009.png	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3i7M54/yq/l/en_US/OcgJMmetGCj.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://www.instagram.com/ajax/bulk-route-definitions/	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpace.58818b4a.js	false	URL Reputation: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Grok~bundle.BrandedLikesPreview~bundle.TwitterArticles~bundle.Compose~bundle.Co.9662c42a.js	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/icons/info_icon.svg	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/v/t51.36329-10/355220090_593078789597389_1945668536878674864_n.jpg?_nc_cat=105&ccb=1-7&_nc_sid=c3bc4c&_nc_ohc=59HXYldWsmQQ7kNvgGLUX9-&_nc_ht=scontent-hou1-1.xx&oh=00_AYCtbTqnf55j9Xm0zSgYBHSj0iEW-l8r3pXomD09hXDC_Q&oe=66D4E6C6	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/arrow.3f5dbfc9e4d93498.svg	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3iMBQ4/yc/l/en_US/_kSuY21dryz.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://video.xx.fbcdn.net/v/t39.25447-2/447297696_8039664322719893_6740129461511305187_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=9a5d50&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdnA5LWJhc2ljLWdlbjJfMzYwcCIsInZpZGVvX2lkIjo3NDY4NzMxMTQyNzc1ODV9&_nc_ohc=u3WIoiLJ3_kQ7kNvgH9pEGe&_nc_ht=video-hou1-1.xx&oh=00_AYCOJ8TqB1YIAOD-y96ht6Ftg_S2nj_Ns46Cme8PS1MQsQ&oe=66D5057C&bytestart=328313&byteend=464758	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/	false		unknown
https://www.kpmgperformanceinsights.com/assets/profiles/100312.png	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AYC_V9Gl5IfFFUPhIQWiOE4oKkoWQ76LQM8761RASVObjw&oe=66F68457&_nc_sid=7da55a	false	Avira URL Cloud: safe	unknown
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=19963.HYP%3Ainstagram_web_pkg.2.1..0.0&__hsi=7408186003085360610&__req=e&__rev=1016035497&__s=qz7c47%3Acv8rdc%3Awqp1ck&__spin_b=trunk&__spin_r=1016035497&__spin_t=1724852713&__user=0&dpr=1&jazoest=2896&lsd=AVrSPIX9O8s&ph=C3	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/icons/march_2024.svg	false	Avira URL Cloud: safe	unknown
https://www.kpmgperformanceinsights.com/assets/profiles/98440.png	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19963.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408186033505436278&__req=e&__rev=1016036106&__s=nec1sk%3A8tyttl%3Anb01ci&__spin_b=trunk&__spin_r=1016036106&__spin_t=1724852722&__user=0&dpr=1&jazoest=21088&lsd=AVpsJcaqltg&ph=C3	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
http://underscorejs.org	chromecache_474.2.dr, chromecache_672.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11471_Anime_ABEMA_18ce54aqujn_Hashmoji_20240705_20241007_Monogata	chromecache_812.2.dr	false	URL Reputation: safe	unknown
https://www.internalfb.com/intern/invariant/	chromecache_732.2.dr, chromecache_591.2.dr, chromecache_462.2.dr	false	URL Reputation: safe	unknown
https://help.instagram.com/222826637847963	chromecache_524.2.dr, chromecache_722.2.dr	false	URL Reputation: safe	unknown
https://youradchoices.ca/	chromecache_697.2.dr, chromecache_781.2.dr, chromecache_725.2.dr, chromecache_382.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	chromecache_812.2.dr	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/hashflags/BF-11675_30ebr_BPC_Gilberto_Gil_Hashmoji_2024/BF-11675_30ebr_BPC_Gil	chromecache_812.2.dr	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	chromecache_812.2.dr	false	URL Reputation: safe	unknown
https://about.instagram.com/blog/	chromecache_524.2.dr, chromecache_722.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	chromecache_812.2.dr	false	Avira URL Cloud: safe	unknown
https://help.instagram.com/626057554667531	chromecache_524.2.dr, chromecache_722.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.common.d1ac2f3a.	chromecache_771.2.dr, chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/hashflags/BF-11254_BANDAI_ride_kamens_Applaunch_2024May_Hashmoji/BF-11254_BAND	chromecache_812.2.dr	false	URL Reputation: safe	unknown
https://fburl.com/wiki/xrzohrqb	chromecache_586.2.dr, chromecache_524.2.dr, chromecache_448.2.dr, chromecache_722.2.dr, chromecache_671.2.dr, chromecache_861.2.dr	false	URL Reputation: safe	unknown
https://about.instagram.com	chromecache_524.2.dr, chromecache_722.2.dr	false	URL Reputation: safe	unknown
https://help.instagram.com/126382350847838	chromecache_524.2.dr, chromecache_722.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	chromecache_812.2.dr	false	Avira URL Cloud: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Ocf.27c653ca.js.m	chromecache_865.2.dr	false	Avira URL Cloud: safe	unknown
https://edge-chat.instagram.com/mqtt/pull	chromecache_814.2.dr, chromecache_857.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	chromecache_508.2.dr, chromecache_401.2.dr	false	Avira URL Cloud: safe	unknown
https://familycenter.instagram.com/accounts/	chromecache_857.2.dr	false	URL Reputation: safe	unknown
https://x.com/en/privacy	chromecache_692.2.dr, chromecache_398.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	chromecache_755.2.dr, chromecache_445.2.dr, chromecache_713.2.dr, chromecache_830.2.dr, chromecache_667.2.dr, chromecache_481.2.dr, chromecache_639.2.dr, chromecache_669.2.dr, chromecache_833.2.dr	false	URL Reputation: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/yb/r/hLRJ1GG_y0J.ico	chromecache_564.2.dr, chromecache_712.2.dr, chromecache_817.2.dr, chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://meet.google.com	chromecache_566.2.dr, chromecache_791.2.dr	false	URL Reputation: safe	unknown
https://github.com/google/shaka-packager	chromecache_611.2.dr, chromecache_754.2.dr	false	Avira URL Cloud: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Birdwatch~	chromecache_426.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11479_Zenless_Zone_Zero_Launch2024_Nicole_Livestream/BF-11479_Zen	chromecache_812.2.dr	false	URL Reputation: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/ya/l/0	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Communitie	chromecache_578.2.dr, chromecache_642.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.InlinePl	chromecache_788.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11387_LOreal_Maybelline_TH_hashmoji_after/BF-11387_LOreal_Maybell	chromecache_812.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/vendor.eac7fcfa.js.map	chromecache_474.2.dr, chromecache_672.2.dr	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/y9/r/cBfAkP0T1tP.js?_nc_x=Ij3Wp8lg5Kz	chromecache_564.2.dr, chromecache_712.2.dr, chromecache_817.2.dr, chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://i.instagram.com	chromecache_600.2.dr, chromecache_434.2.dr	false	URL Reputation: safe	unknown

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1500513
Start date and time:	2024-08-28 15:43:45 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.kpmgperformanceinsights.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus22.phis.win@29/793@86/34
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.kpmgperformanceinsights.com/season/2024/player Browse: https://www.kpmgperformanceinsights.com/tournament Browse: https://www.kpmgperformanceinsights.com/season/2024/summary Browse: https://www.instagram.com/explore/tags/lpgastats/ Browse: https://www.facebook.com/hashtag/lpgastats Browse: https://twitter.com/search?q=%23LPGAstats&src=typed_query

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18529)
Category:	dropped
Size (bytes):	18719
Entropy (8bit):	5.396024238506273
Encrypted:	false
SSDEEP:	384:GbqhvWde6j0n7fvEuTB9MhNEn5i2HtjlqxvmVEFyC9sv/:GbqhvWQ6QD7t9UE5i2Hexe2gksv/
MD5:	4772F50994B9C5EE9E54B2001A7FB0DC
SHA1:	4C63F3383DED24B25282D188E3A403305F856016
SHA-256:	3CA99EECA15811820D8802BCE891164E0D9E495EE5A4C9C4E3602CDEBB51F561
SHA-512:	1AC367F4277C2C7EFAC7798D27259ECE910826316B7197EEAD430B03975B603F6BE91D78F0CB3688EF236B689E91393F46F548F4C64E7C8E6253D26830DF261C
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Ocf~bundle.Payments~ondemand.Insights~bundle.TV~bundle.Account"],{839515:(t,r,e)=>{var n=e(638761)(e(137772),"DataView");t.exports=n},989612:(t,r,e)=>{var n=e(752118),o=e(196909),a=e(198138),u=e(704174),i=e(507942);function s(t){var r=-1,e=null==t?0:t.length;for(this.clear();++r<e;){var n=t[r];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=o,s.prototype.get=a,s.prototype.has=u,s.prototype.set=i,t.exports=s},180235:(t,r,e)=>{var n=e(103945),o=e(221846),a=e(988028),u=e(572344),i=e(594769);function s(t){var r=-1,e=null==t?0:t.length;for(this.clear();++r<e;){var n=t[r];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=o,s.prototype.get=a,s.prototype.has=u,s.prototype.set=i,t.exports=s},510326:(t,r,e)=>{var n=e(638761)(e(137772),"Map");t.exports=n},896738:(t,r,e)=>{var n=e(792411),o=e(436417),a=e(586928),u=e(479493),i=e(724150);function s(t){var r=-1,e=null==t

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 28, 2024 15:44:45.343875885 CEST	192.168.2.4	1.1.1.1	0x5cbe	Standard query (0)	www.kpmgperformanceinsights.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:45.344115973 CEST	192.168.2.4	1.1.1.1	0x9d71	Standard query (0)	www.kpmgperformanceinsights.com	65	IN (0x0001)	false
Aug 28, 2024 15:44:47.717288971 CEST	192.168.2.4	1.1.1.1	0x7790	Standard query (0)	www.kpmgperformanceinsights.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:47.717808008 CEST	192.168.2.4	1.1.1.1	0x34ee	Standard query (0)	www.kpmgperformanceinsights.com	65	IN (0x0001)	false
Aug 28, 2024 15:44:47.951853037 CEST	192.168.2.4	1.1.1.1	0xd630	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:47.952333927 CEST	192.168.2.4	1.1.1.1	0xc225	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 28, 2024 15:44:48.414709091 CEST	192.168.2.4	1.1.1.1	0x4bd0	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:48.415023088 CEST	192.168.2.4	1.1.1.1	0x4e55	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Aug 28, 2024 15:44:48.416671991 CEST	192.168.2.4	1.1.1.1	0x91a5	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:48.417222023 CEST	192.168.2.4	1.1.1.1	0x7873	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Aug 28, 2024 15:44:48.505747080 CEST	192.168.2.4	1.1.1.1	0x211	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:48.506210089 CEST	192.168.2.4	1.1.1.1	0xfeae	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Aug 28, 2024 15:44:49.621022940 CEST	192.168.2.4	1.1.1.1	0xcdc6	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.621267080 CEST	192.168.2.4	1.1.1.1	0x596c	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:03.341648102 CEST	192.168.2.4	1.1.1.1	0x8805	Standard query (0)	www.lpga.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:03.342010021 CEST	192.168.2.4	1.1.1.1	0xc45a	Standard query (0)	www.lpga.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:12.070642948 CEST	192.168.2.4	1.1.1.1	0x81ec	Standard query (0)	www.instagram.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:12.070873976 CEST	192.168.2.4	1.1.1.1	0x6610	Standard query (0)	www.instagram.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:15.522311926 CEST	192.168.2.4	1.1.1.1	0x19bb	Standard query (0)	static.cdninstagram.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:15.522583961 CEST	192.168.2.4	1.1.1.1	0x76f6	Standard query (0)	static.cdninstagram.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:16.739978075 CEST	192.168.2.4	1.1.1.1	0x7f73	Standard query (0)	static.cdninstagram.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:16.740191936 CEST	192.168.2.4	1.1.1.1	0xcf01	Standard query (0)	static.cdninstagram.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:19.782339096 CEST	192.168.2.4	1.1.1.1	0xe624	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:19.782500029 CEST	192.168.2.4	1.1.1.1	0xe518	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:20.823246002 CEST	192.168.2.4	1.1.1.1	0xe3e	Standard query (0)	www.instagram.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:20.824198008 CEST	192.168.2.4	1.1.1.1	0xd9db	Standard query (0)	www.instagram.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:20.890089989 CEST	192.168.2.4	1.1.1.1	0x8c4e	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:20.891746044 CEST	192.168.2.4	1.1.1.1	0x74a2	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:22.006681919 CEST	192.168.2.4	1.1.1.1	0x4213	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:22.006894112 CEST	192.168.2.4	1.1.1.1	0xd3b8	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:23.142755985 CEST	192.168.2.4	1.1.1.1	0x8939	Standard query (0)	scontent-hou1-1.cdninstagram.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:23.142926931 CEST	192.168.2.4	1.1.1.1	0x3262	Standard query (0)	scontent-hou1-1.cdninstagram.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:23.434154987 CEST	192.168.2.4	1.1.1.1	0x2418	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:23.434406996 CEST	192.168.2.4	1.1.1.1	0xc9e2	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Aug 28, 2024 15:45:23.439237118 CEST	192.168.2.4	1.1.1.1	0x425c	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:23.439465046 CEST	192.168.2.4	1.1.1.1	0x3243	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
Aug 28, 2024 15:45:23.440078020 CEST	192.168.2.4	1.1.1.1	0xe986	Standard query (0)	video.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:23.440288067 CEST	192.168.2.4	1.1.1.1	0x13a3	Standard query (0)	video.xx.fbcdn.net	65	IN (0x0001)	false
Aug 28, 2024 15:45:24.001394987 CEST	192.168.2.4	1.1.1.1	0x8f1f	Standard query (0)	scontent-hou1-1.cdninstagram.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:24.001526117 CEST	192.168.2.4	1.1.1.1	0xa10a	Standard query (0)	scontent-hou1-1.cdninstagram.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:24.584789038 CEST	192.168.2.4	1.1.1.1	0xa0ae	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:24.584911108 CEST	192.168.2.4	1.1.1.1	0xded7	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Aug 28, 2024 15:45:24.732692957 CEST	192.168.2.4	1.1.1.1	0xa604	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:24.732826948 CEST	192.168.2.4	1.1.1.1	0x7d2f	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
Aug 28, 2024 15:45:25.678210974 CEST	192.168.2.4	1.1.1.1	0xbc7f	Standard query (0)	video-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:25.678388119 CEST	192.168.2.4	1.1.1.1	0x87c0	Standard query (0)	video-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
Aug 28, 2024 15:45:25.826890945 CEST	192.168.2.4	1.1.1.1	0xf70	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:25.827097893 CEST	192.168.2.4	1.1.1.1	0x4cd1	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
Aug 28, 2024 15:45:27.490381002 CEST	192.168.2.4	1.1.1.1	0xe1d5	Standard query (0)	video-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:27.490648031 CEST	192.168.2.4	1.1.1.1	0x16a0	Standard query (0)	video-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
Aug 28, 2024 15:45:28.357042074 CEST	192.168.2.4	1.1.1.1	0x1537	Standard query (0)	video.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:28.357290983 CEST	192.168.2.4	1.1.1.1	0x41c2	Standard query (0)	video.xx.fbcdn.net	65	IN (0x0001)	false
Aug 28, 2024 15:45:33.712697983 CEST	192.168.2.4	1.1.1.1	0x808e	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:33.712862015 CEST	192.168.2.4	1.1.1.1	0xef6c	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
Aug 28, 2024 15:45:36.150213957 CEST	192.168.2.4	1.1.1.1	0x9ee3	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:36.150418043 CEST	192.168.2.4	1.1.1.1	0x1146	Standard query (0)	twitter.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:36.928750038 CEST	192.168.2.4	1.1.1.1	0x4ebe	Standard query (0)	x.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:36.928958893 CEST	192.168.2.4	1.1.1.1	0x4787	Standard query (0)	x.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:37.797506094 CEST	192.168.2.4	1.1.1.1	0x247c	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:37.797506094 CEST	192.168.2.4	1.1.1.1	0x2368	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:37.798222065 CEST	192.168.2.4	1.1.1.1	0x58d	Standard query (0)	api.twitter.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:37.798541069 CEST	192.168.2.4	1.1.1.1	0xf1fb	Standard query (0)	api.twitter.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:37.808845997 CEST	192.168.2.4	1.1.1.1	0x4586	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:37.809222937 CEST	192.168.2.4	1.1.1.1	0x4a88	Standard query (0)	t.co	65	IN (0x0001)	false
Aug 28, 2024 15:45:37.811203957 CEST	192.168.2.4	1.1.1.1	0x7651	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:37.811544895 CEST	192.168.2.4	1.1.1.1	0x3134	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:37.817783117 CEST	192.168.2.4	1.1.1.1	0x31b2	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:37.818030119 CEST	192.168.2.4	1.1.1.1	0x9428	Standard query (0)	api.x.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:39.865173101 CEST	192.168.2.4	1.1.1.1	0x14ea	Standard query (0)	video.twimg.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:39.866091013 CEST	192.168.2.4	1.1.1.1	0xed54	Standard query (0)	video.twimg.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:41.510499954 CEST	192.168.2.4	1.1.1.1	0x3550	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:41.510667086 CEST	192.168.2.4	1.1.1.1	0x7e76	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:41.517822027 CEST	192.168.2.4	1.1.1.1	0x2d58	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:41.518006086 CEST	192.168.2.4	1.1.1.1	0x72de	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:42.203408957 CEST	192.168.2.4	1.1.1.1	0x93f3	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:42.203573942 CEST	192.168.2.4	1.1.1.1	0xa615	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Aug 28, 2024 15:45:46.218415022 CEST	192.168.2.4	1.1.1.1	0xea51	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:46.218596935 CEST	192.168.2.4	1.1.1.1	0x5bd7	Standard query (0)	api.x.com	65	IN (0x0001)	false
Aug 28, 2024 15:46:03.363815069 CEST	192.168.2.4	1.1.1.1	0x5aba	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:46:03.363982916 CEST	192.168.2.4	1.1.1.1	0xcb43	Standard query (0)	twitter.com	65	IN (0x0001)	false
Aug 28, 2024 15:46:04.513298035 CEST	192.168.2.4	1.1.1.1	0xe665	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:46:04.513540030 CEST	192.168.2.4	1.1.1.1	0x7915	Standard query (0)	twitter.com	65	IN (0x0001)	false
Aug 28, 2024 15:46:17.674210072 CEST	192.168.2.4	1.1.1.1	0x7601	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:46:17.674438000 CEST	192.168.2.4	1.1.1.1	0x2854	Standard query (0)	play.google.com	65	IN (0x0001)	false
Aug 28, 2024 15:46:19.624331951 CEST	192.168.2.4	1.1.1.1	0x37b8	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:46:19.624596119 CEST	192.168.2.4	1.1.1.1	0x8868	Standard query (0)	play.google.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 28, 2024 15:44:45.525177956 CEST	1.1.1.1	192.168.2.4	0x5cbe	No error (0)	www.kpmgperformanceinsights.com		63.32.63.24	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:45.525177956 CEST	1.1.1.1	192.168.2.4	0x5cbe	No error (0)	www.kpmgperformanceinsights.com		34.247.109.241	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:45.525177956 CEST	1.1.1.1	192.168.2.4	0x5cbe	No error (0)	www.kpmgperformanceinsights.com		52.211.143.43	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:47.742774963 CEST	1.1.1.1	192.168.2.4	0x7790	No error (0)	www.kpmgperformanceinsights.com		34.247.109.241	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:47.742774963 CEST	1.1.1.1	192.168.2.4	0x7790	No error (0)	www.kpmgperformanceinsights.com		52.211.143.43	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:47.742774963 CEST	1.1.1.1	192.168.2.4	0x7790	No error (0)	www.kpmgperformanceinsights.com		63.32.63.24	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:47.958848953 CEST	1.1.1.1	192.168.2.4	0xd630	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:47.959374905 CEST	1.1.1.1	192.168.2.4	0xc225	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 28, 2024 15:44:48.421901941 CEST	1.1.1.1	192.168.2.4	0x4e55	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:44:48.422637939 CEST	1.1.1.1	192.168.2.4	0x4bd0	No error (0)	analytics.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:48.423616886 CEST	1.1.1.1	192.168.2.4	0x91a5	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:48.423616886 CEST	1.1.1.1	192.168.2.4	0x91a5	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:48.423616886 CEST	1.1.1.1	192.168.2.4	0x91a5	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:48.423616886 CEST	1.1.1.1	192.168.2.4	0x91a5	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:48.515506983 CEST	1.1.1.1	192.168.2.4	0x211	No error (0)	td.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627662897 CEST	1.1.1.1	192.168.2.4	0xcdc6	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627788067 CEST	1.1.1.1	192.168.2.4	0x596c	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:44:49.627788067 CEST	1.1.1.1	192.168.2.4	0x596c	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Aug 28, 2024 15:44:57.246620893 CEST	1.1.1.1	192.168.2.4	0xb7c5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:44:57.246620893 CEST	1.1.1.1	192.168.2.4	0xb7c5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:03.356992960 CEST	1.1.1.1	192.168.2.4	0x8805	No error (0)	www.lpga.com	n.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:03.362735033 CEST	1.1.1.1	192.168.2.4	0xc45a	No error (0)	www.lpga.com	n.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:12.406735897 CEST	1.1.1.1	192.168.2.4	0x6610	No error (0)	www.instagram.com	z-p42-instagram.c10r.instagram.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:12.407459021 CEST	1.1.1.1	192.168.2.4	0x81ec	No error (0)	www.instagram.com	z-p42-instagram.c10r.instagram.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:12.407459021 CEST	1.1.1.1	192.168.2.4	0x81ec	No error (0)	z-p42-instagram.c10r.instagram.com		157.240.252.174	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:15.534754038 CEST	1.1.1.1	192.168.2.4	0x19bb	No error (0)	static.cdninstagram.com	scontent.cdninstagram.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:15.534754038 CEST	1.1.1.1	192.168.2.4	0x19bb	No error (0)	scontent.cdninstagram.com		157.240.0.63	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:15.543134928 CEST	1.1.1.1	192.168.2.4	0x76f6	No error (0)	static.cdninstagram.com	scontent.cdninstagram.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:15.543134928 CEST	1.1.1.1	192.168.2.4	0x76f6	No error (0)	scontent.cdninstagram.com			65	IN (0x0001)	false
Aug 28, 2024 15:45:15.543134928 CEST	1.1.1.1	192.168.2.4	0x76f6	No error (0)	scontent.cdninstagram.com			65	IN (0x0001)	false
Aug 28, 2024 15:45:16.747653008 CEST	1.1.1.1	192.168.2.4	0x7f73	No error (0)	static.cdninstagram.com	scontent.cdninstagram.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:16.747653008 CEST	1.1.1.1	192.168.2.4	0x7f73	No error (0)	scontent.cdninstagram.com		157.240.0.63	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:16.747786999 CEST	1.1.1.1	192.168.2.4	0xcf01	No error (0)	static.cdninstagram.com	scontent.cdninstagram.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:16.747786999 CEST	1.1.1.1	192.168.2.4	0xcf01	No error (0)	scontent.cdninstagram.com			65	IN (0x0001)	false
Aug 28, 2024 15:45:16.747786999 CEST	1.1.1.1	192.168.2.4	0xcf01	No error (0)	scontent.cdninstagram.com			65	IN (0x0001)	false
Aug 28, 2024 15:45:19.789047003 CEST	1.1.1.1	192.168.2.4	0xe518	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:19.789455891 CEST	1.1.1.1	192.168.2.4	0xe624	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:19.789455891 CEST	1.1.1.1	192.168.2.4	0xe624	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:20.836291075 CEST	1.1.1.1	192.168.2.4	0xe3e	No error (0)	www.instagram.com	z-p42-instagram.c10r.instagram.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:20.836291075 CEST	1.1.1.1	192.168.2.4	0xe3e	No error (0)	z-p42-instagram.c10r.instagram.com		157.240.252.174	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:20.837028027 CEST	1.1.1.1	192.168.2.4	0xd9db	No error (0)	www.instagram.com	z-p42-instagram.c10r.instagram.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:20.896992922 CEST	1.1.1.1	192.168.2.4	0x8c4e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:20.896992922 CEST	1.1.1.1	192.168.2.4	0x8c4e	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:20.898305893 CEST	1.1.1.1	192.168.2.4	0x74a2	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:22.013643026 CEST	1.1.1.1	192.168.2.4	0x4213	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:22.013643026 CEST	1.1.1.1	192.168.2.4	0x4213	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:22.014031887 CEST	1.1.1.1	192.168.2.4	0xd3b8	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:23.151005030 CEST	1.1.1.1	192.168.2.4	0x8939	No error (0)	scontent-hou1-1.cdninstagram.com		157.240.24.63	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:23.157701969 CEST	1.1.1.1	192.168.2.4	0x3262	No error (0)	scontent-hou1-1.cdninstagram.com			65	IN (0x0001)	false
Aug 28, 2024 15:45:23.441978931 CEST	1.1.1.1	192.168.2.4	0xc9e2	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:23.441978931 CEST	1.1.1.1	192.168.2.4	0xc9e2	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:23.441978931 CEST	1.1.1.1	192.168.2.4	0xc9e2	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:23.443030119 CEST	1.1.1.1	192.168.2.4	0x2418	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:23.443030119 CEST	1.1.1.1	192.168.2.4	0x2418	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:23.447376966 CEST	1.1.1.1	192.168.2.4	0x425c	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:23.447555065 CEST	1.1.1.1	192.168.2.4	0x3243	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:23.447555065 CEST	1.1.1.1	192.168.2.4	0x3243	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:23.449116945 CEST	1.1.1.1	192.168.2.4	0xe986	No error (0)	video.xx.fbcdn.net		157.240.251.2	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:23.450128078 CEST	1.1.1.1	192.168.2.4	0x13a3	No error (0)	video.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:23.450128078 CEST	1.1.1.1	192.168.2.4	0x13a3	No error (0)	video.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:24.009073973 CEST	1.1.1.1	192.168.2.4	0x8f1f	No error (0)	scontent-hou1-1.cdninstagram.com		157.240.24.63	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:24.017170906 CEST	1.1.1.1	192.168.2.4	0xa10a	No error (0)	scontent-hou1-1.cdninstagram.com			65	IN (0x0001)	false
Aug 28, 2024 15:45:24.591598988 CEST	1.1.1.1	192.168.2.4	0xded7	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:24.591598988 CEST	1.1.1.1	192.168.2.4	0xded7	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:24.591598988 CEST	1.1.1.1	192.168.2.4	0xded7	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:24.591799974 CEST	1.1.1.1	192.168.2.4	0xa0ae	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:24.591799974 CEST	1.1.1.1	192.168.2.4	0xa0ae	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:24.739958048 CEST	1.1.1.1	192.168.2.4	0xa604	No error (0)	scontent-hou1-1.xx.fbcdn.net		157.240.24.13	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:24.739972115 CEST	1.1.1.1	192.168.2.4	0x7d2f	No error (0)	scontent-hou1-1.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:25.692069054 CEST	1.1.1.1	192.168.2.4	0x87c0	No error (0)	video-hou1-1.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:25.692157030 CEST	1.1.1.1	192.168.2.4	0xbc7f	No error (0)	video-hou1-1.xx.fbcdn.net		157.240.24.20	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:25.834506989 CEST	1.1.1.1	192.168.2.4	0xf70	No error (0)	scontent-hou1-1.xx.fbcdn.net		157.240.24.13	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:25.836069107 CEST	1.1.1.1	192.168.2.4	0x4cd1	No error (0)	scontent-hou1-1.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:27.505039930 CEST	1.1.1.1	192.168.2.4	0x16a0	No error (0)	video-hou1-1.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:27.505053997 CEST	1.1.1.1	192.168.2.4	0xe1d5	No error (0)	video-hou1-1.xx.fbcdn.net		157.240.24.20	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:28.536350965 CEST	1.1.1.1	192.168.2.4	0x41c2	No error (0)	video.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:28.536350965 CEST	1.1.1.1	192.168.2.4	0x41c2	No error (0)	video.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:28.536396027 CEST	1.1.1.1	192.168.2.4	0x1537	No error (0)	video.xx.fbcdn.net		157.240.251.2	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:33.720377922 CEST	1.1.1.1	192.168.2.4	0xef6c	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:33.720377922 CEST	1.1.1.1	192.168.2.4	0xef6c	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Aug 28, 2024 15:45:33.720505953 CEST	1.1.1.1	192.168.2.4	0x808e	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:36.156932116 CEST	1.1.1.1	192.168.2.4	0x9ee3	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:36.938072920 CEST	1.1.1.1	192.168.2.4	0x4ebe	No error (0)	x.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:36.938072920 CEST	1.1.1.1	192.168.2.4	0x4ebe	No error (0)	x.com		104.244.42.129	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:36.938072920 CEST	1.1.1.1	192.168.2.4	0x4ebe	No error (0)	x.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:36.938072920 CEST	1.1.1.1	192.168.2.4	0x4ebe	No error (0)	x.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:37.181360960 CEST	1.1.1.1	192.168.2.4	0xb167	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:37.181360960 CEST	1.1.1.1	192.168.2.4	0xb167	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:37.804877996 CEST	1.1.1.1	192.168.2.4	0x58d	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:37.804877996 CEST	1.1.1.1	192.168.2.4	0x58d	No error (0)	tpop-api.twitter.com		104.244.42.66	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:37.805205107 CEST	1.1.1.1	192.168.2.4	0x2368	No error (0)	abs.twimg.com	cs510.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:37.805299997 CEST	1.1.1.1	192.168.2.4	0x247c	No error (0)	abs.twimg.com	cs510.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:37.805299997 CEST	1.1.1.1	192.168.2.4	0x247c	No error (0)	cs510.wpc.edgecastcdn.net		152.199.21.141	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:37.805577993 CEST	1.1.1.1	192.168.2.4	0xf1fb	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:37.815711975 CEST	1.1.1.1	192.168.2.4	0x4586	No error (0)	t.co		93.184.221.165	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:37.818137884 CEST	1.1.1.1	192.168.2.4	0x3134	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:37.818171978 CEST	1.1.1.1	192.168.2.4	0x7651	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:37.818171978 CEST	1.1.1.1	192.168.2.4	0x7651	No error (0)	dualstack.twimg.twitter.map.fastly.net		146.75.120.159	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:37.824829102 CEST	1.1.1.1	192.168.2.4	0x9428	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:37.825325966 CEST	1.1.1.1	192.168.2.4	0x31b2	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:37.825325966 CEST	1.1.1.1	192.168.2.4	0x31b2	No error (0)	tpop-api.x.com		104.244.42.194	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:39.872037888 CEST	1.1.1.1	192.168.2.4	0x14ea	No error (0)	video.twimg.com	dualstack.video.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:39.872037888 CEST	1.1.1.1	192.168.2.4	0x14ea	No error (0)	dualstack.video.twitter.map.fastly.net		146.75.120.158	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:39.873171091 CEST	1.1.1.1	192.168.2.4	0xed54	No error (0)	video.twimg.com	cs296.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:39.873171091 CEST	1.1.1.1	192.168.2.4	0xed54	No error (0)	cs296.wpc.edgecastcdn.net	cs2-wpc.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:39.873171091 CEST	1.1.1.1	192.168.2.4	0xed54	No error (0)	cs2-wpc-eu.8315.ecdns.net	cs189.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:41.517698050 CEST	1.1.1.1	192.168.2.4	0x7e76	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:41.517713070 CEST	1.1.1.1	192.168.2.4	0x3550	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:41.517713070 CEST	1.1.1.1	192.168.2.4	0x3550	No error (0)	abs-zero.twimg.com		104.244.43.131	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:41.524686098 CEST	1.1.1.1	192.168.2.4	0x72de	No error (0)	abs.twimg.com	cs510.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:41.525955915 CEST	1.1.1.1	192.168.2.4	0x2d58	No error (0)	abs.twimg.com	cs510.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:41.525955915 CEST	1.1.1.1	192.168.2.4	0x2d58	No error (0)	cs510.wpc.edgecastcdn.net		152.199.21.141	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:42.210747004 CEST	1.1.1.1	192.168.2.4	0x93f3	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:42.210747004 CEST	1.1.1.1	192.168.2.4	0x93f3	No error (0)	abs-zero.twimg.com		104.244.43.131	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:42.211324930 CEST	1.1.1.1	192.168.2.4	0xa615	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:46.224910975 CEST	1.1.1.1	192.168.2.4	0xea51	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:45:46.224910975 CEST	1.1.1.1	192.168.2.4	0xea51	No error (0)	tpop-api.x.com		104.244.42.194	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:45:46.225423098 CEST	1.1.1.1	192.168.2.4	0x5bd7	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 15:46:03.372329950 CEST	1.1.1.1	192.168.2.4	0x5aba	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:46:04.520366907 CEST	1.1.1.1	192.168.2.4	0xe665	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:46:17.687052011 CEST	1.1.1.1	192.168.2.4	0x7601	No error (0)	play.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:46:19.631302118 CEST	1.1.1.1	192.168.2.4	0x37b8	No error (0)	play.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:44:46 UTC	674	OUT	GET / HTTP/1.1 Host: www.kpmgperformanceinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:44:46 UTC	374	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:44:46 GMT Content-Type: text/html Content-Length: 4043 Connection: close Server: nginx/1.27.0 Last-Modified: Tue, 13 Aug 2024 15:23:08 GMT Vary: Accept-Encoding ETag: "66bb7a5c-fcb" Pragma: no-cache Cache-Control: no-store strict-transport-security: max-age=31536000 X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes
2024-08-28 13:44:46 UTC	4043	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 63 72 69 74 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4b 50 4d 47 20 50 65 72 66 6f 72 6d 61 6e 63 65 20 49 6e 73 69 67 68 74 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 61 Data Ascii: <!DOCTYPE html><html lang="en" data-critters-container> <head> <meta charset="utf-8"> <title>KPMG Performance Insights</title> <base href="/"> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta http-equiv="ca

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:44:46 UTC	620	OUT	GET /runtime.86c1889cbfad0b82.js HTTP/1.1 Host: www.kpmgperformanceinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.kpmgperformanceinsights.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.kpmgperformanceinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:44:46 UTC	511	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:44:46 GMT Content-Type: application/javascript Content-Length: 910 Connection: close Server: nginx/1.27.0 Last-Modified: Tue, 13 Aug 2024 15:23:05 GMT Vary: Accept-Encoding ETag: "66bb7a59-38e" Content-Security-Policy: upgrade-insecure-requests; X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Permissions-Policy: geolocation=() Accept-Ranges: bytes
2024-08-28 13:44:46 UTC	910	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 5f 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 6c 3d 76 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6c 29 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 76 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 5f 5b 65 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 5f 2c 65 3d 5b 5d 2c 6e 2e 4f 3d 28 6c 2c 72 2c 6f 2c 66 29 3d 3e 7b 69 66 28 21 72 29 7b 76 61 72 20 74 3d 31 2f 30 3b 66 6f 72 28 61 3d 30 3b 61 3c 65 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 66 6f 72 28 76 61 72 5b 72 2c 6f 2c 66 5d 3d 65 5b 61 5d 2c 63 3d 21 30 2c 73 3d 30 3b 73 3c 72 2e 6c 65 Data Ascii: (()=>{"use strict";var e,_={},v={};function n(e){var l=v[e];if(void 0!==l)return l.exports;var r=v[e]={exports:{}};return _[e](r,r.exports,n),r.exports}n.m=_,e=[],n.O=(l,r,o,f)=>{if(!r){var t=1/0;for(a=0;a<e.length;a++){for(var[r,o,f]=e[a],c=!0,s=0;s<r.le

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:44:47 UTC	622	OUT	GET /polyfills.dae86153823e3ba3.js HTTP/1.1 Host: www.kpmgperformanceinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.kpmgperformanceinsights.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.kpmgperformanceinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:44:47 UTC	514	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:44:47 GMT Content-Type: application/javascript Content-Length: 34185 Connection: close Server: nginx/1.27.0 Last-Modified: Tue, 13 Aug 2024 15:23:05 GMT Vary: Accept-Encoding ETag: "66bb7a59-8589" Content-Security-Policy: upgrade-insecure-requests; X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Permissions-Policy: geolocation=() Accept-Ranges: bytes
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6b 70 6d 67 5f 77 65 62 73 69 74 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6b 70 6d 67 5f 77 65 62 73 69 74 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 31 5d 2c 7b 39 33 35 3a 28 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 66 75 6e 63 74 69 6f 6e 20 69 28 4c 29 7b 6e 26 26 6e 2e 6d 61 72 6b 26 26 6e 2e 6d 61 72 6b 28 4c 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 4c 2c 54 29 7b 6e 26 26 6e 2e 6d 65 61 73 75 72 65 26 26 6e 2e 6d 65 61 73 75 72 65 28 4c 2c 54 29 7d 69 28 22 5a 6f 6e 65 22 29 3b 63 6f 6e 73 74 20 63 3d 74 2e 5f 5f 5a 6f 6e 65 5f 73 79 6d 62 Data Ascii: "use strict";(self.webpackChunkkpmg_website_web=self.webpackChunkkpmg_website_web\|\|[]).push([[461],{935:()=>{!function(t){const n=t.performance;function i(L){n&&n.mark&&n.mark(L)}function o(L,T){n&&n.measure&&n.measure(L,T)}i("Zone");const c=t.__Zone_symb
2024-08-28 13:44:47 UTC	1514	IN	Data Raw: 73 74 20 6c 3d 6e 5b 55 5d 3b 6c 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6c 26 26 6c 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 65 6a 65 63 74 69 6f 6e 3a 75 5b 52 5d 2c 70 72 6f 6d 69 73 65 3a 75 7d 29 7d 63 61 74 63 68 7b 7d 75 5b 71 5d 3d 47 3b 66 6f 72 28 6c 65 74 20 6c 3d 30 3b 6c 3c 64 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 75 3d 3d 3d 64 5b 6c 5d 2e 70 72 6f 6d 69 73 65 26 26 64 2e 73 70 6c 69 63 65 28 6c 2c 31 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 65 28 75 2c 6c 2c 73 2c 66 2c 67 29 7b 6f 65 28 75 29 3b 63 6f 6e 73 74 20 50 3d 75 5b 71 5d 2c 6d 3d 50 3f 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 3f 66 3a 48 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 67 3f 67 3a 4b 3b 6c 2e 73 63 68 65 64 75 6c 65 Data Ascii: st l=n[U];l&&"function"==typeof l&&l.call(this,{rejection:u[R],promise:u})}catch{}u[q]=G;for(let l=0;l<d.length;l++)u===d[l].promise&&d.splice(l,1)}}function te(u,l,s,f,g){oe(u);const P=u[q],m=P?"function"==typeof f?f:H:"function"==typeof g?g:K;l.schedule
2024-08-28 13:44:47 UTC	16287	IN	Data Raw: 6c 6c 62 61 63 6b 3a 66 3d 3e 28 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 66 7d 29 2c 65 72 72 6f 72 43 61 6c 6c 62 61 63 6b 3a 66 3d 3e 28 7b 73 74 61 74 75 73 3a 22 72 65 6a 65 63 74 65 64 22 2c 72 65 61 73 6f 6e 3a 66 7d 29 7d 29 7d 73 74 61 74 69 63 20 61 6c 6c 57 69 74 68 43 61 6c 6c 62 61 63 6b 28 6c 2c 73 29 7b 6c 65 74 20 66 2c 67 2c 50 3d 6e 65 77 20 74 68 69 73 28 28 5a 2c 56 29 3d 3e 7b 66 3d 5a 2c 67 3d 56 7d 29 2c 6d 3d 32 2c 53 3d 30 3b 63 6f 6e 73 74 20 44 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 5a 20 6f 66 20 6c 29 7b 42 28 5a 29 7c 7c 28 5a 3d 74 68 69 73 2e 72 65 73 6f 6c 76 65 28 5a 29 29 3b 63 6f 6e 73 74 20 56 3d 53 3b 74 72 79 7b 5a 2e 74 68 65 6e 28 46 3d 3e 7b 44 5b 56 5d 3d 73 3f 73 2e 74 68 65 6e Data Ascii: llback:f=>({status:"fulfilled",value:f}),errorCallback:f=>({status:"rejected",reason:f})})}static allWithCallback(l,s){let f,g,P=new this((Z,V)=>{f=Z,g=V}),m=2,S=0;const D=[];for(let Z of l){B(Z)\|\|(Z=this.resolve(Z));const V=S;try{Z.then(F=>{D[V]=s?s.then

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.kpmgperformanceinsights.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 377

Chrome Cache Entry: 378

Chrome Cache Entry: 379

Chrome Cache Entry: 380

Chrome Cache Entry: 381

Chrome Cache Entry: 382

Chrome Cache Entry: 383

Chrome Cache Entry: 384

Chrome Cache Entry: 385

Chrome Cache Entry: 386

Chrome Cache Entry: 387

Chrome Cache Entry: 388

Chrome Cache Entry: 389

Chrome Cache Entry: 390

Chrome Cache Entry: 391

Chrome Cache Entry: 392

Chrome Cache Entry: 393

Chrome Cache Entry: 394

Chrome Cache Entry: 395

Chrome Cache Entry: 396

Chrome Cache Entry: 397

Chrome Cache Entry: 398

Chrome Cache Entry: 399

Chrome Cache Entry: 400

Chrome Cache Entry: 401

Chrome Cache Entry: 402

Chrome Cache Entry: 403

Chrome Cache Entry: 404

Chrome Cache Entry: 405

Windows Analysis Report
https://www.kpmgperformanceinsights.com/

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:44:47 UTC	617	OUT	GET /main.9b2b63d7548e4f0b.js HTTP/1.1 Host: www.kpmgperformanceinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.kpmgperformanceinsights.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.kpmgperformanceinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:44:47 UTC	516	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:44:47 GMT Content-Type: application/javascript Content-Length: 644106 Connection: close Server: nginx/1.27.0 Last-Modified: Tue, 13 Aug 2024 15:23:05 GMT Vary: Accept-Encoding ETag: "66bb7a59-9d40a" Content-Security-Policy: upgrade-insecure-requests; X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Permissions-Policy: geolocation=() Accept-Ranges: bytes
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6b 70 6d 67 5f 77 65 62 73 69 74 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6b 70 6d 67 5f 77 65 62 73 69 74 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 32 5d 2c 7b 34 38 36 3a 28 29 3d 3e 7b 6c 65 74 20 76 74 3d 6e 75 6c 6c 2c 6f 6f 3d 31 3b 63 6f 6e 73 74 20 68 32 3d 53 79 6d 62 6f 6c 28 22 53 49 47 4e 41 4c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 65 28 65 29 7b 63 6f 6e 73 74 20 6e 3d 76 74 3b 72 65 74 75 72 6e 20 76 74 3d 65 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 55 32 28 65 29 7b 69 66 28 28 21 48 69 28 65 29 7c 7c 65 2e 64 69 72 74 79 29 26 26 28 65 2e 64 69 72 74 79 7c 7c 65 2e 6c 61 73 74 43 6c 65 61 6e 45 70 6f 63 68 Data Ascii: "use strict";(self.webpackChunkkpmg_website_web=self.webpackChunkkpmg_website_web\|\|[]).push([[792],{486:()=>{let vt=null,oo=1;const h2=Symbol("SIGNAL");function _e(e){const n=vt;return vt=e,n}function U2(e){if((!Hi(e)\|\|e.dirty)&&(e.dirty\|\|e.lastCleanEpoch
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 72 5d 3b 72 2b 3d 32 29 69 66 28 22 63 6c 61 73 73 22 3d 3d 3d 6e 5b 72 5d 26 26 2d 31 21 3d 3d 44 49 28 6e 5b 72 2b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 74 2c 30 29 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 69 66 28 52 6c 28 65 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 72 3d 6e 2e 69 6e 64 65 78 4f 66 28 31 2c 72 29 2c 72 3e 2d 31 29 7b 6c 65 74 20 73 3b 66 6f 72 28 3b 2b 2b 72 3c 6e 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 73 3d 6e 5b 72 5d 29 3b 29 69 66 28 73 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 74 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 6c 28 65 29 7b 72 65 74 75 72 6e 20 34 3d Data Ascii: &"string"==typeof n[r];r+=2)if("class"===n[r]&&-1!==DI(n[r+1].toLowerCase(),t,0))return!0}else if(Rl(e))return!1;if(r=n.indexOf(1,r),r>-1){let s;for(;++r<n.length&&"string"==typeof(s=n[r]);)if(s.toLowerCase()===t)return!0}return!1}function Rl(e){return 4=
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 6f 72 28 3b 74 3e 30 3b 29 69 3d 69 5b 49 72 5d 2c 74 2d 2d 3b 72 65 74 75 72 6e 20 69 7d 6c 65 74 20 67 38 3d 21 30 3b 66 75 6e 63 74 69 6f 6e 20 77 34 28 65 29 7b 63 6f 6e 73 74 20 6e 3d 67 38 3b 72 65 74 75 72 6e 20 67 38 3d 65 2c 6e 7d 63 6f 6e 73 74 20 4b 68 3d 32 35 35 2c 5a 68 3d 35 3b 6c 65 74 20 24 4f 3d 30 3b 63 6f 6e 73 74 20 52 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 34 28 65 2c 6e 29 7b 63 6f 6e 73 74 20 74 3d 51 68 28 65 2c 6e 29 3b 69 66 28 2d 31 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 3b 63 6f 6e 73 74 20 69 3d 6e 5b 52 5d 3b 69 2e 66 69 72 73 74 43 72 65 61 74 65 50 61 73 73 26 26 28 65 2e 69 6e 6a 65 63 74 6f 72 49 6e 64 65 78 3d 6e 2e 6c 65 6e 67 74 68 2c 76 38 28 69 2e 64 61 74 61 2c 65 29 2c 76 38 28 6e 2c 6e 75 6c 6c 29 2c 76 38 Data Ascii: or(;t>0;)i=i[Ir],t--;return i}let g8=!0;function w4(e){const n=g8;return g8=e,n}const Kh=255,Zh=5;let $O=0;const Rn={};function S4(e,n){const t=Qh(e,n);if(-1!==t)return t;const i=n[R];i.firstCreatePass&&(e.injectorIndex=n.length,v8(i.data,e),v8(n,null),v8
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 78 3a 6f 2c 64 69 72 65 63 74 69 76 65 53 74 61 72 74 3a 2d 31 2c 64 69 72 65 63 74 69 76 65 45 6e 64 3a 2d 31 2c 64 69 72 65 63 74 69 76 65 53 74 79 6c 69 6e 67 4c 61 73 74 3a 2d 31 2c 63 6f 6d 70 6f 6e 65 6e 74 4f 66 66 73 65 74 3a 2d 31 2c 70 72 6f 70 65 72 74 79 42 69 6e 64 69 6e 67 73 3a 6e 75 6c 6c 2c 66 6c 61 67 73 3a 61 2c 70 72 6f 76 69 64 65 72 49 6e 64 65 78 65 73 3a 30 2c 76 61 6c 75 65 3a 72 2c 61 74 74 72 73 3a 73 2c 6d 65 72 67 65 64 41 74 74 72 73 3a 6e 75 6c 6c 2c 6c 6f 63 61 6c 4e 61 6d 65 73 3a 6e 75 6c 6c 2c 69 6e 69 74 69 61 6c 49 6e 70 75 74 73 3a 76 6f 69 64 20 30 2c 69 6e 70 75 74 73 3a 6e 75 6c 6c 2c 6f 75 74 70 75 74 73 3a 6e 75 6c 6c 2c 74 56 69 65 77 3a 6e 75 6c 6c 2c 6e 65 78 74 3a 6e 75 6c 6c 2c 70 72 65 76 3a 6e 75 6c 6c 2c Data Ascii: x:o,directiveStart:-1,directiveEnd:-1,directiveStylingLast:-1,componentOffset:-1,propertyBindings:null,flags:a,providerIndexes:0,value:r,attrs:s,mergedAttrs:null,localNames:null,initialInputs:void 0,inputs:null,outputs:null,tView:null,next:null,prev:null,
2024-08-28 13:44:47 UTC	15005	IN	Data Raw: 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 49 64 3d 2d 31 2c 72 2e 6e 61 74 69 76 65 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 20 58 52 28 29 7b 63 6f 6e 73 74 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6a 65 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 6c 65 74 20 6e 3d 6a 65 5b 65 3f 22 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 3a 22 73 65 74 54 69 6d 65 6f 75 74 22 5d 2c 74 3d 6a 65 5b 65 3f 22 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 3a 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 22 5d 3b 69 66 28 74 79 70 65 6f 66 20 5a 6f 6e 65 3c 22 75 22 26 26 6e 26 26 74 29 7b 63 6f 6e 73 74 20 69 3d 6e 5b 5a 6f Data Ascii: equestAnimationFrameId=-1,r.nativeRequestAnimationFrame=function XR(){const e="function"==typeof je.requestAnimationFrame;let n=je[e?"requestAnimationFrame":"setTimeout"],t=je[e?"cancelAnimationFrame":"clearTimeout"];if(typeof Zone<"u"&&n&&t){const i=n[Zo
2024-08-28 13:44:47 UTC	1379	IN	Data Raw: 74 69 6f 6e 20 48 46 28 65 2c 6e 2c 74 2c 69 29 7b 72 65 74 75 72 6e 2d 31 3d 3d 3d 74 3f 66 75 6e 63 74 69 6f 6e 20 44 46 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 31 31 26 65 2e 74 79 70 65 3f 24 72 28 65 2c 6e 29 3a 34 26 65 2e 74 79 70 65 3f 65 63 28 65 2c 6e 29 3a 6e 75 6c 6c 7d 28 6e 2c 65 29 3a 2d 32 3d 3d 3d 74 3f 66 75 6e 63 74 69 6f 6e 20 56 46 28 65 2c 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 53 65 3f 24 72 28 6e 2c 65 29 3a 74 3d 3d 3d 67 65 3f 65 63 28 6e 2c 65 29 3a 74 3d 3d 3d 4e 31 3f 76 67 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 65 2c 6e 2c 69 29 3a 49 69 28 65 2c 65 5b 52 5d 2c 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 67 28 65 2c 6e 2c 74 2c 69 29 7b 63 6f 6e 73 74 20 72 3d 6e 5b 62 32 5d 2e 71 75 65 72 69 65 73 5b 69 5d 3b 69 Data Ascii: tion HF(e,n,t,i){return-1===t?function DF(e,n){return 11&e.type?$r(e,n):4&e.type?ec(e,n):null}(n,e):-2===t?function VF(e,n,t){return t===Se?$r(n,e):t===ge?ec(n,e):t===N1?vg(n,e):void 0}(e,n,i):Ii(e,e[R],t,n)}function Mg(e,n,t,i){const r=n[b2].queries[i];i
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2e 70 72 6f 74 6f 74 79 70 65 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7d 28 65 2e 74 79 70 65 29 2c 74 3d 21 30 3b 63 6f 6e 73 74 20 69 3d 5b 65 5d 3b 66 6f 72 28 3b 6e 3b 29 7b 6c 65 74 20 72 3b 69 66 28 64 6e 28 65 29 29 72 3d 6e 2e 5c 75 30 32 37 35 63 6d 70 7c 7c 6e 2e 5c 75 30 32 37 35 64 69 72 3b 65 6c 73 65 7b 69 66 28 6e 2e 5c 75 30 32 37 35 63 6d 70 29 74 68 72 6f 77 20 6e 65 77 20 4c 28 39 30 33 2c 21 31 29 3b 72 3d 6e 2e 5c 75 30 32 37 35 64 69 72 7d 69 66 28 72 29 7b 69 66 28 74 29 7b 69 2e 70 75 73 68 28 72 29 3b 63 6f 6e 73 74 20 6f 3d 65 3b 6f 2e 69 6e 70 75 74 73 3d 6c 63 28 65 2e 69 6e 70 75 74 73 29 2c 6f 2e 69 6e 70 75 74 54 72 61 6e 73 66 6f 72 6d 73 3d 6c 63 28 65 2e Data Ascii: Object.getPrototypeOf(e.prototype).constructor}(e.type),t=!0;const i=[e];for(;n;){let r;if(dn(e))r=n.\u0275cmp\|\|n.\u0275dir;else{if(n.\u0275cmp)throw new L(903,!1);r=n.\u0275dir}if(r){if(t){i.push(r);const o=e;o.inputs=lc(e.inputs),o.inputTransforms=lc(e.
2024-08-28 13:44:47 UTC	15005	IN	Data Raw: 65 29 2c 5a 6c 28 65 29 26 26 6e 2e 71 75 65 72 69 65 73 2e 65 6c 65 6d 65 6e 74 45 6e 64 28 65 29 29 2c 56 32 7d 66 75 6e 63 74 69 6f 6e 20 62 63 28 65 2c 6e 2c 74 29 7b 72 65 74 75 72 6e 20 48 32 28 65 2c 6e 2c 74 29 2c 56 32 28 29 2c 62 63 7d 6c 65 74 20 47 76 3d 28 65 2c 6e 2c 74 2c 69 29 3d 3e 28 50 6e 28 21 30 29 2c 51 38 28 6e 5b 72 65 5d 2c 22 22 29 29 3b 66 75 6e 63 74 69 6f 6e 20 45 74 28 29 7b 72 65 74 75 72 6e 20 7a 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 31 28 65 2c 6e 2c 74 29 7b 63 6f 6e 73 74 20 69 3d 7a 28 29 3b 72 65 74 75 72 6e 20 56 74 28 69 2c 68 6e 28 29 2c 6e 29 26 26 54 31 28 48 65 28 29 2c 73 74 28 29 2c 69 2c 65 2c 6e 2c 69 5b 72 65 5d 2c 74 2c 21 30 29 2c 6a 31 7d 63 6f 6e 73 74 20 55 69 3d 76 6f 69 64 20 30 3b 76 61 72 20 48 55 Data Ascii: e),Zl(e)&&n.queries.elementEnd(e)),V2}function bc(e,n,t){return H2(e,n,t),V2(),bc}let Gv=(e,n,t,i)=>(Pn(!0),Q8(n[re],""));function Et(){return z()}function j1(e,n,t){const i=z();return Vt(i,hn(),n)&&T1(He(),st(),i,e,n,i[re],t,!0),j1}const Ui=void 0;var HU
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 20 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 65 64 7d 67 65 74 20 69 6e 6a 65 63 74 6f 72 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 6a 65 63 74 6f 72 7d 62 6f 6f 74 73 74 72 61 70 28 74 2c 69 29 7b 63 6f 6e 73 74 20 72 3d 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 58 6d 3b 69 66 28 21 74 68 69 73 2e 5f 69 6e 6a 65 63 74 6f 72 2e 67 65 74 28 4d 75 29 2e 64 6f 6e 65 29 74 68 72 6f 77 21 72 26 26 66 75 6e 63 74 69 6f 6e 20 57 32 28 65 29 7b 63 6f 6e 73 74 20 6e 3d 4d 65 28 65 29 7c 7c 52 74 28 65 29 7c 7c 58 74 28 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 6e 26 26 6e 2e 73 74 61 6e 64 61 6c 6f 6e 65 7d 28 74 29 2c 6e 65 77 20 4c 28 34 30 35 2c 21 31 29 3b 6c 65 74 20 6f 3b 6f 3d 72 3f 74 3a 74 68 69 73 2e 5f 69 6e 6a 65 63 74 6f 72 2e 67 65 74 Data Ascii: this._destroyed}get injector(){return this._injector}bootstrap(t,i){const r=t instanceof Xm;if(!this._injector.get(Mu).done)throw!r&&function W2(e){const n=Me(e)\|\|Rt(e)\|\|Xt(e);return null!==n&&n.standalone}(t),new L(405,!1);let o;o=r?t:this._injector.get
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 74 3d 6e 2c 74 2e 5f 70 72 65 76 3d 69 2c 6e 2e 5f 70 72 65 76 3d 74 2c 69 26 26 28 69 2e 5f 6e 65 78 74 3d 74 29 2c 6e 3d 3d 3d 74 68 69 73 2e 5f 6d 61 70 48 65 61 64 26 26 28 74 68 69 73 2e 5f 6d 61 70 48 65 61 64 3d 74 29 2c 74 68 69 73 2e 5f 61 70 70 65 6e 64 41 66 74 65 72 3d 6e 2c 6e 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 70 70 65 6e 64 41 66 74 65 72 3f 28 74 68 69 73 2e 5f 61 70 70 65 6e 64 41 66 74 65 72 2e 5f 6e 65 78 74 3d 74 2c 74 2e 5f 70 72 65 76 3d 74 68 69 73 2e 5f 61 70 70 65 6e 64 41 66 74 65 72 29 3a 74 68 69 73 2e 5f 6d 61 70 48 65 61 64 3d 74 2c 74 68 69 73 2e 5f 61 70 70 65 6e 64 41 66 74 65 72 3d 74 2c 6e 75 6c 6c 7d 5f 67 65 74 4f 72 43 72 65 61 74 65 52 65 63 6f 72 64 46 6f 72 4b 65 79 28 6e 2c 74 29 7b 69 66 28 74 68 69 73 Data Ascii: t=n,t._prev=i,n._prev=t,i&&(i._next=t),n===this._mapHead&&(this._mapHead=t),this._appendAfter=n,n}return this._appendAfter?(this._appendAfter._next=t,t._prev=this._appendAfter):this._mapHead=t,this._appendAfter=t,null}_getOrCreateRecordForKey(n,t){if(this

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:44:47 UTC	588	OUT	GET /styles.262506b4c3a3eb02.css HTTP/1.1 Host: www.kpmgperformanceinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.kpmgperformanceinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:44:47 UTC	502	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:44:47 GMT Content-Type: text/css Content-Length: 204099 Connection: close Server: nginx/1.27.0 Last-Modified: Tue, 13 Aug 2024 15:23:05 GMT Vary: Accept-Encoding ETag: "66bb7a59-31d43" Content-Security-Policy: upgrade-insecure-requests; X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Permissions-Policy: geolocation=() Accept-Ranges: bytes
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 2e 6e 67 2d 73 65 6c 65 63 74 2e 6e 67 2d 73 65 6c 65 63 74 2d 6f 70 65 6e 65 64 3e 2e 6e 67 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 62 33 62 33 62 33 20 23 63 63 63 20 23 64 39 64 39 64 39 7d 2e 6e 67 2d 73 65 6c 65 63 74 2e 6e 67 2d 73 65 6c 65 63 74 2d 6f 70 65 6e 65 64 3e 2e 6e 67 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 61 69 6e 65 72 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 6e 67 2d 73 65 6c 65 63 74 2e 6e 67 2d 73 65 6c 65 63 74 2d 6f 70 65 6e 65 64 3e 2e 6e 67 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 67 2d 61 72 72 6f 77 7b 74 6f 70 3a 2d 32 70 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e Data Ascii: .ng-select.ng-select-opened>.ng-select-container{background:#fff;border-color:#b3b3b3 #ccc #d9d9d9}.ng-select.ng-select-opened>.ng-select-container:hover{box-shadow:none}.ng-select.ng-select-opened>.ng-select-container .ng-arrow{top:-2px;border-color:tran
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 67 68 74 3a 61 75 74 6f 7d 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 37 35 72 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 66 69 67 75 72 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 66 69 67 75 72 65 2d 69 6d 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 69 67 75 72 65 2d 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 Data Ascii: ght:auto}.img-thumbnail{padding:.25rem;background-color:#fff;border:1px solid var(--bs-border-color);border-radius:.375rem;max-width:100%;height:auto}.figure{display:inline-block}.figure-img{margin-bottom:.5rem;line-height:1}.figure-caption{font-size:.875
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 39 39 2e 39 38 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 2d 78 6c 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 33 39 39 2e 39 38 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 2d 78 78 6c 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 7d 7d 2e 66 6f 72 6d 2d 6c 61 62 65 6c 7b 6d 61 72 67 69 6e Data Ascii: -webkit-overflow-scrolling:touch}}@media (max-width: 1199.98px){.table-responsive-xl{overflow-x:auto;-webkit-overflow-scrolling:touch}}@media (max-width: 1399.98px){.table-responsive-xxl{overflow-x:auto;-webkit-overflow-scrolling:touch}}.form-label{margin
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 6b 2d 69 6e 70 75 74 7e 2e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 65 6d 7d 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 6e 6f 74 28 3a 66 6f 63 75 73 29 3a 76 61 6c 69 64 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 6e 6f 74 28 3a 66 6f 63 75 73 29 2e 69 73 2d 76 61 6c 69 64 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 3e 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 3a 6e 6f 74 28 3a 66 6f 63 75 73 29 3a 76 61 6c 69 64 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 3e 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 3a 6e 6f 74 28 3a 66 6f 63 75 73 29 2e 69 73 2d 76 61 6c 69 64 2c Data Ascii: k-input~.valid-feedback{margin-left:.5em}.was-validated .input-group>.form-control:not(:focus):valid,.input-group>.form-control:not(:focus).is-valid,.was-validated .input-group>.form-select:not(:focus):valid,.input-group>.form-select:not(:focus).is-valid,
2024-08-28 13:44:47 UTC	15005	IN	Data Raw: 20 23 65 39 65 63 65 66 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 6c 69 6e 6b 2d 61 63 74 69 76 65 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 6c 69 6e 6b 2d 61 63 74 69 76 65 2d 62 67 3a 20 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 6c 69 6e 6b 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 3a 20 23 61 64 62 35 62 64 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 70 61 64 64 69 6e 67 2d 78 3a 20 31 72 65 6d 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 70 61 64 64 69 6e 67 2d 79 3a 20 2e 32 35 72 65 6d 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 68 65 61 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 63 37 35 37 64 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 68 65 61 64 65 Data Ascii: #e9ecef;--bs-dropdown-link-active-color: #fff;--bs-dropdown-link-active-bg: #0d6efd;--bs-dropdown-link-disabled-color: #adb5bd;--bs-dropdown-item-padding-x: 1rem;--bs-dropdown-item-padding-y: .25rem;--bs-dropdown-header-color: #6c757d;--bs-dropdown-heade
2024-08-28 13:44:47 UTC	1379	IN	Data Raw: 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 6e 61 76 2d 6c 69 6e 6b 2d 70 61 64 64 69 6e 67 2d 78 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 6e 61 76 2d 6c 69 6e 6b 2d 70 61 64 64 69 6e 67 2d 78 29 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 76 62 61 72 2d 6e 61 76 2d 73 63 72 6f 6c 6c 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 65 78 2d 62 61 Data Ascii: vbar-expand-md .navbar-nav .nav-link{padding-right:var(--bs-navbar-nav-link-padding-x);padding-left:var(--bs-navbar-nav-link-padding-x)}.navbar-expand-md .navbar-nav-scroll{overflow:visible}.navbar-expand-md .navbar-collapse{display:flex!important;flex-ba
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6c 67 20 2e 6f 66 66 63 61 6e 76 61 73 20 2e 6f 66 66 63 61 6e 76 61 73 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6c 67 20 2e 6f 66 66 63 61 6e 76 61 73 20 2e 6f 66 66 63 61 6e 76 61 73 2d 62 6f 64 79 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 76 69 73 69 62 6c 65 7d 7d 40 6d 65 64 69 61 20 Data Ascii: color:transparent!important;border:0!important;transform:none!important;transition:none}.navbar-expand-lg .offcanvas .offcanvas-header{display:none}.navbar-expand-lg .offcanvas .offcanvas-body{display:flex;flex-grow:0;padding:0;overflow-y:visible}}@media
2024-08-28 13:44:47 UTC	15005	IN	Data Raw: 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 62 61 64 67 65 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 7d 2e 62 61 64 67 65 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 62 74 6e 20 2e 62 61 64 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 31 70 78 7d 2e 61 6c 65 72 74 7b 2d 2d 62 73 2d 61 6c 65 72 74 2d 62 67 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 2d 62 73 2d 61 6c 65 72 74 2d 70 61 64 64 69 6e 67 2d 78 3a 20 31 72 65 6d 3b 2d 2d 62 73 2d 61 6c 65 72 74 2d 70 61 64 64 69 6e 67 2d 79 3a 20 31 72 65 6d 3b 2d 2d 62 73 2d 61 6c 65 72 74 2d 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 2d 2d 62 73 2d 61 6c 65 72 74 2d 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 2d 2d 62 Data Ascii: rder-radius:var(--bs-badge-border-radius)}.badge:empty{display:none}.btn .badge{position:relative;top:-1px}.alert{--bs-alert-bg: transparent;--bs-alert-padding-x: 1rem;--bs-alert-padding-y: 1rem;--bs-alert-margin-bottom: 1rem;--bs-alert-color: inherit;--b
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 28 2d 2d 62 73 2d 74 6f 61 73 74 2d 68 65 61 64 65 72 2d 62 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 2d 62 6f 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 62 73 2d 74 6f 61 73 74 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 74 6f 61 73 74 2d 68 65 61 64 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 73 2d 74 6f 61 73 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 20 2d 20 76 61 72 28 2d 2d 62 73 2d 74 6f 61 73 74 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 29 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 63 61 6c 63 28 Data Ascii: (--bs-toast-header-bg);background-clip:padding-box;border-bottom:var(--bs-toast-border-width) solid var(--bs-toast-header-border-color);border-top-left-radius:calc(var(--bs-toast-border-radius) - var(--bs-toast-border-width));border-top-right-radius:calc(
2024-08-28 13:44:47 UTC	16384	IN	Data Raw: 65 6d 2d 73 74 61 72 74 2c 2e 63 61 72 6f 75 73 65 6c 2d 66 61 64 65 20 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 65 6e 64 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2d 70 72 65 76 2c 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2d 6e 65 78 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 35 25 3b 70 61 64 64 69 6e 67 3a 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 Data Ascii: em-start,.carousel-fade .active.carousel-item-end{transition:none}}.carousel-control-prev,.carousel-control-next{position:absolute;top:0;bottom:0;z-index:1;display:flex;align-items:center;justify-content:center;width:15%;padding:0;color:#fff;text-align:ce

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:44:48 UTC	574	OUT	GET /scripts.9380cbcddbc3009a.js HTTP/1.1 Host: www.kpmgperformanceinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.kpmgperformanceinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:44:48 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:44:48 GMT Content-Type: application/javascript Content-Length: 79288 Connection: close Server: nginx/1.27.0 Last-Modified: Tue, 13 Aug 2024 15:23:05 GMT Vary: Accept-Encoding ETag: "66bb7a59-135b8" Content-Security-Policy: upgrade-insecure-requests; X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Permissions-Policy: geolocation=() Accept-Ranges: bytes
2024-08-28 13:44:48 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 62 65 2c 76 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3c 22 75 22 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 76 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 76 65 29 3a 28 62 65 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3c 22 75 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 62 65 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 76 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 62 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 76 65 3d 69 3d 3e 7b 6c Data Ascii: !function(be,ve){"object"==typeof exports&&typeof module<"u"?module.exports=ve():"function"==typeof define&&define.amd?define(ve):(be=typeof globalThis<"u"?globalThis:be\|\|self).bootstrap=ve()}(this,function(){"use strict";const be="transitionend",ve=i=>{l
2024-08-28 13:44:48 UTC	16384	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 45 65 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 68 69 73 2c 65 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 5b 65 5d 7c 7c 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 5f 22 29 7c 7c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 3d 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 24 7b 65 7d 22 60 29 3b 74 5b 65 5d 28 29 7d 7d 65 6c 73 65 20 74 2e 74 6f 28 65 29 7d 29 7d 7d 6c 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 Data Ascii: (e){return this.each(function(){const t=Ee.getOrCreateInstance(this,e);if("number"!=typeof e){if("string"==typeof e){if(void 0===t[e]\|\|e.startsWith("_")\|\|"constructor"===e)throw new TypeError(`No method named "${e}"`);t[e]()}}else t.to(e)})}}l.on(document
2024-08-28 13:44:48 UTC	16384	IN	Data Raw: 66 6c 69 70 56 61 72 69 61 74 69 6f 6e 73 3a 67 2c 61 6c 6c 6f 77 65 64 41 75 74 6f 50 6c 61 63 65 6d 65 6e 74 73 3a 70 7d 29 3a 4d 29 7d 2c 5b 5d 29 2c 41 3d 65 2e 72 65 63 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 76 3d 65 2e 72 65 63 74 73 2e 70 6f 70 70 65 72 2c 77 3d 6e 65 77 20 4d 61 70 2c 45 3d 21 30 2c 4f 3d 79 5b 30 5d 2c 43 3d 30 3b 43 3c 79 2e 6c 65 6e 67 74 68 3b 43 2b 2b 29 7b 76 61 72 20 4c 3d 79 5b 43 5d 2c 42 3d 55 28 4c 29 2c 59 3d 44 65 28 4c 29 3d 3d 3d 68 65 2c 50 3d 5b 49 2c 48 5d 2e 69 6e 64 65 78 4f 66 28 42 29 3e 3d 30 2c 52 3d 50 3f 22 77 69 64 74 68 22 3a 22 68 65 69 67 68 74 22 2c 6a 3d 53 65 28 65 2c 7b 70 6c 61 63 65 6d 65 6e 74 3a 4c 2c 62 6f 75 6e 64 61 72 79 3a 75 2c 72 6f 6f 74 42 6f 75 6e 64 61 72 79 3a 68 2c 61 6c 74 42 6f Data Ascii: flipVariations:g,allowedAutoPlacements:p}):M)},[]),A=e.rects.reference,v=e.rects.popper,w=new Map,E=!0,O=y[0],C=0;C<y.length;C++){var L=y[C],B=U(L),Y=De(L)===he,P=[I,H].indexOf(B)>=0,R=P?"width":"height",j=Se(e,{placement:L,boundary:u,rootBoundary:h,altBo
2024-08-28 13:44:48 UTC	16384	IN	Data Raw: 74 65 6e 64 73 20 50 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 65 29 2c 74 68 69 73 2e 5f 69 73 41 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 5f 6c 61 73 74 54 61 62 4e 61 76 44 69 72 65 63 74 69 6f 6e 3d 6e 75 6c 6c 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 28 29 7b 72 65 74 75 72 6e 20 67 73 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 7b 72 65 74 75 72 6e 20 6d 73 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 72 65 74 75 72 6e 22 66 6f 63 75 73 74 72 61 70 22 7d 61 63 74 69 76 61 74 65 28 29 7b 74 68 69 73 2e 5f 69 73 41 63 74 69 76 65 7c 7c 28 74 68 69 73 2e 5f 63 6f 6e 66 69 67 Data Ascii: tends Pe{constructor(e){super(),this._config=this._getConfig(e),this._isActive=!1,this._lastTabNavDirection=null}static get Default(){return gs}static get DefaultType(){return ms}static get NAME(){return"focustrap"}activate(){this._isActive\|\|(this._config
2024-08-28 13:44:48 UTC	13752	IN	Data Raw: 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 3a 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 6c 61 63 65 6d 65 6e 74 2c 6e 3d 44 73 5b 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3b 72 65 74 75 72 6e 20 57 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 65 2c 74 68 69 73 2e 5f 67 65 74 50 6f 70 70 65 72 43 6f 6e 66 69 67 28 6e 29 29 7d 5f 67 65 74 4f 66 66 73 65 74 28 29 7b 63 6f 6e 73 74 7b 6f 66 66 73 65 74 3a 65 7d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 74 3d 3e 4e 75 6d 62 65 72 2e 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 74 3d 3e 65 28 74 2c 74 68 69 73 Data Ascii: ,this._element):this._config.placement,n=Ds[t.toUpperCase()];return Wt(this._element,e,this._getPopperConfig(n))}_getOffset(){const{offset:e}=this._config;return"string"==typeof e?e.split(",").map(t=>Number.parseInt(t,10)):"function"==typeof e?t=>e(t,this

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:44:49 UTC	1221	OUT	POST /g/collect?v=2&tid=G-22LQCMCKFG&gtm=45je48r0h2v898777436za200&_p=1724852686039&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=0&cid=49732202.1724852688&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1724852687&sct=1&seg=0&dl=https%3A%2F%2Fwww.kpmgperformanceinsights.com%2F&dt=KPMG%20Performance%20Insights&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3104 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.kpmgperformanceinsights.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.kpmgperformanceinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:44:49 UTC	465	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.kpmgperformanceinsights.com Date: Wed, 28 Aug 2024 13:44:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:44:49 UTC	959	OUT	GET /td/ga/rul?tid=G-22LQCMCKFG&gacid=49732202.1724852688&gtm=45je48r0h2v898777436za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=0&z=817570286 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.kpmgperformanceinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:44:49 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 28 Aug 2024 13:44:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 28-Aug-2024 13:59:49 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-28 13:44:49 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-08-28 13:44:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:44:49 UTC	838	OUT	POST /g/collect?v=2&tid=G-22LQCMCKFG&cid=49732202.1724852688&gtm=45je48r0h2v898777436za200&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.kpmgperformanceinsights.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.kpmgperformanceinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:44:49 UTC	465	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.kpmgperformanceinsights.com Date: Wed, 28 Aug 2024 13:44:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:44:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-28 13:44:50 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=244267 Date: Wed, 28 Aug 2024 13:44:50 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:44:50 UTC	727	OUT	GET /assets/icons/lpga-logo.svg HTTP/1.1 Host: www.kpmgperformanceinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.kpmgperformanceinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.49732202.1724852688; _ga_22LQCMCKFG=GS1.1.1724852687.1.1.1724852688.59.0.0
2024-08-28 13:44:50 UTC	348	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:44:50 GMT Content-Type: image/svg+xml Content-Length: 8845 Connection: close Server: nginx/1.27.0 Last-Modified: Tue, 13 Aug 2024 15:23:07 GMT ETag: "66bb7a5b-228d" Expires: Fri, 27 Sep 2024 13:44:50 GMT Cache-Control: max-age=2592000 Cache-Control: public, no-transform Accept-Ranges: bytes
2024-08-28 13:44:50 UTC	8845	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 2d 2d 20 43 72 65 61 74 65 64 20 77 69 74 68 20 49 6e 6b 73 63 61 70 65 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 2f 29 20 2d 2d 3e 0a 0a 3c 73 76 67 0a 20 20 20 77 69 64 74 68 3d 22 31 32 38 2e 32 34 31 22 0a 20 20 20 68 65 69 67 68 74 3d 22 31 38 30 22 0a 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 2e 39 33 30 34 33 20 34 37 2e 36 32 35 30 30 31 22 0a 20 20 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 0a 20 20 20 69 64 3d 22 73 76 67 38 35 22 0a 20 20 20 69 6e 6b 73 63 61 70 65 3a 76 65 72 73 69 6f 6e 3d 22 31 2e 31 20 28 63 36 38 65 32 32 63 33 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?>... Created with Inkscape (http://www.inkscape.org/) --><svg width="128.241" height="180" viewBox="0 0 33.93043 47.625001" version="1.1" id="svg85" inkscape:version="1.1 (c68e22c3

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:44:50 UTC	734	OUT	GET /assets/icons/kpmg-performance.svg HTTP/1.1 Host: www.kpmgperformanceinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.kpmgperformanceinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.49732202.1724852688; _ga_22LQCMCKFG=GS1.1.1724852687.1.1.1724852688.59.0.0
2024-08-28 13:44:50 UTC	349	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:44:50 GMT Content-Type: image/svg+xml Content-Length: 16869 Connection: close Server: nginx/1.27.0 Last-Modified: Tue, 13 Aug 2024 15:23:07 GMT ETag: "66bb7a5b-41e5" Expires: Fri, 27 Sep 2024 13:44:50 GMT Cache-Control: max-age=2592000 Cache-Control: public, no-transform Accept-Ranges: bytes
2024-08-28 13:44:50 UTC	16384	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 2d 2d 20 43 72 65 61 74 65 64 20 77 69 74 68 20 49 6e 6b 73 63 61 70 65 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 2f 29 20 2d 2d 3e 0a 0a 3c 73 76 67 0a 20 20 20 77 69 64 74 68 3d 22 38 37 22 0a 20 20 20 68 65 69 67 68 74 3d 22 34 35 22 0a 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 33 2e 30 31 38 37 34 39 20 31 31 2e 39 30 36 32 35 22 0a 20 20 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 0a 20 20 20 69 64 3d 22 73 76 67 31 31 33 22 0a 20 20 20 69 6e 6b 73 63 61 70 65 3a 76 65 72 73 69 6f 6e 3d 22 31 2e 31 20 28 63 36 38 65 32 32 63 33 38 37 2c 20 32 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?>... Created with Inkscape (http://www.inkscape.org/) --><svg width="87" height="45" viewBox="0 0 23.018749 11.90625" version="1.1" id="svg113" inkscape:version="1.1 (c68e22c387, 2
2024-08-28 13:44:50 UTC	485	IN	Data Raw: 36 37 37 33 20 2d 30 2e 39 30 39 37 32 2c 2d 31 2e 33 32 39 35 39 20 2d 30 2e 36 35 37 38 2c 2d 30 2e 34 36 31 38 36 20 2d 31 2e 38 38 39 34 32 2c 2d 30 2e 34 36 31 38 36 20 2d 31 2e 35 35 33 35 32 2c 30 20 2d 32 2e 32 32 35 33 32 2c 30 2e 34 33 33 38 37 20 2d 30 2e 34 34 37 38 36 2c 30 2e 33 30 37 39 31 20 2d 30 2e 34 34 37 38 36 2c 30 2e 37 39 37 37 35 20 30 2c 30 2e 34 31 39 38 38 20 30 2e 33 39 31 38 38 2c 30 2e 37 31 33 37 39 20 30 2e 35 33 31 38 34 2c 30 2e 33 39 31 38 38 20 33 2e 36 36 36 38 37 2c 31 2e 31 30 35 36 36 20 33 2e 31 34 39 30 34 2c 30 2e 37 31 33 37 38 20 34 2e 33 39 34 36 35 2c 31 2e 37 34 39 34 36 20 31 2e 32 33 31 36 33 2c 31 2e 30 34 39 36 38 20 31 2e 32 33 31 36 33 2c 32 2e 39 32 35 31 20 30 2c 32 2e 30 34 33 33 37 20 2d 31 2e 37 Data Ascii: 6773 -0.90972,-1.32959 -0.6578,-0.46186 -1.88942,-0.46186 -1.55352,0 -2.22532,0.43387 -0.44786,0.30791 -0.44786,0.79775 0,0.41988 0.39188,0.71379 0.53184,0.39188 3.66687,1.10566 3.14904,0.71378 4.39465,1.74946 1.23163,1.04968 1.23163,2.9251 0,2.04337 -1.7

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:44:50 UTC	727	OUT	GET /assets/icons/sept_2023.svg HTTP/1.1 Host: www.kpmgperformanceinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.kpmgperformanceinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.49732202.1724852688; _ga_22LQCMCKFG=GS1.1.1724852687.1.1.1724852688.59.0.0
2024-08-28 13:44:50 UTC	348	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:44:50 GMT Content-Type: image/svg+xml Content-Length: 4308 Connection: close Server: nginx/1.27.0 Last-Modified: Tue, 13 Aug 2024 15:23:07 GMT ETag: "66bb7a5b-10d4" Expires: Fri, 27 Sep 2024 13:44:50 GMT Cache-Control: max-age=2592000 Cache-Control: public, no-transform Accept-Ranges: bytes
2024-08-28 13:44:50 UTC	4308	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 35 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 35 20 32 30 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 35 39 34 34 20 31 37 38 2e 33 38 39 4c 33 2e 37 34 32 31 39 20 31 35 35 2e 39 34 33 48 32 32 32 2e 39 35 34 4c 32 33 35 2e 35 34 33 20 31 37 38 2e 33 38 39 4c 32 32 33 2e 37 37 35 20 31 39 39 2e 33 37 48 33 2e 37 34 32 31 39 4c 31 33 2e 35 39 34 34 20 31 37 38 2e 33 38 39 5a 22 20 66 69 6c 6c 3d 22 23 30 42 32 39 35 46 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 34 2e 37 38 32 32 20 31 39 2e 36 43 31 30 2e 37 38 32 32 20 Data Ascii: <svg width="255" height="200" viewBox="0 0 255 200" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M13.5944 178.389L3.74219 155.943H222.954L235.543 178.389L223.775 199.37H3.74219L13.5944 178.389Z" fill="#0B295F"/><path d="M14.7822 19.6C10.7822