Edit tour

Windows Analysis Report
https://www.wizardingworld.com/sorting-hat

Overview

General Information

Sample URL:	https://www.wizardingworld.com/sorting-hat
Analysis ID:	1520634
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Found iframes

HTML body contains password input but no form action

HTML body with high number of embedded images detected

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=2004,i,1820474452150383610,5901595658687404911,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.wizardingworld.com/sorting-hat" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST / HTTP/1.1Host: sessions.bugsnag.comConnection: keep-aliveContent-Length: 490sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0Bugsnag-Api-Key: 779c2d87262782f275d498bd9eb2cfa5User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonBugsnag-Payload-Version: 1Bugsnag-Sent-At: 2024-09-27T15:34:49.322Zsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.wizardingworld.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wizardingworld.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.wizardingworld.com/sorting-hat	HTTP Parser: Total embedded image size: 13500
Source: https://www.wizardingworld.com/	HTTP Parser: Total embedded image size: 18192
Source: https://www.wizardingworld.com/quiz/true-or-false-wand-edition	HTTP Parser: Total embedded image size: 16980

Source: https://www.wizardingworld.com/sorting-hat	HTTP Parser: No favicon
Source: https://www.wizardingworld.com/register	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49786 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_507.2.dr, chromecache_459.2.dr, chromecache_312.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_507.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=lA(a,c,e);N(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return N(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},oA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_507.2.dr, chromecache_459.2.dr, chromecache_312.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={eh:e,ah:f,bh:g,Ph:k,Qh:m,Ge:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(QC(w,"iframe_api")\|\|QC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!HC&&OC(x[A],p.Ge))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_269.2.dr, chromecache_476.2.dr, chromecache_544.2.dr, chromecache_430.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_507.2.dr	String found in binary or memory: var SB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var k=Oz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);N(121);if(m==="https://www.facebook.com/tr/")return N(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!wy(k,yy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.wizardingworld.com
Source: global traffic	DNS traffic detected: DNS query: platform.twitter.com
Source: global traffic	DNS traffic detected: DNS query: images.ctfassets.net
Source: global traffic	DNS traffic detected: DNS query: api.segment.io
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: sessions.bugsnag.com
Source: global traffic	DNS traffic detected: DNS query: api.wizardingworld.com
Source: global traffic	DNS traffic detected: DNS query: syndication.twitter.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: my.wizardingworld.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: 171.39.242.20.in-addr.arpa

Source: chromecache_504.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_373.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_415.2.dr	String found in binary or memory: http://optout.aboutads.info/?c=2&lang=EN);
Source: chromecache_415.2.dr	String found in binary or memory: http://www.youronlinechoices.com.au/);
Source: chromecache_415.2.dr	String found in binary or memory: http://www.youronlinechoices.eu/);
Source: chromecache_415.2.dr	String found in binary or memory: http://youradchoices.ca/choices/);
Source: chromecache_342.2.dr	String found in binary or memory: https://account.wbgames.com
Source: chromecache_312.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_607.2.dr, chromecache_417.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_342.2.dr	String found in binary or memory: https://api.int.wizardingworld.com/v3
Source: chromecache_342.2.dr	String found in binary or memory: https://api.wizardingworld.com/api
Source: chromecache_342.2.dr	String found in binary or memory: https://api.wizardingworld.com/search
Source: chromecache_342.2.dr	String found in binary or memory: https://api.wizardingworld.com/v3
Source: chromecache_586.2.dr	String found in binary or memory: https://app.castittalent.com/HPCasting?utm_source=wwd_web
Source: chromecache_463.2.dr	String found in binary or memory: https://app.castittalent.com/HPCasting?utm_source=wwd_web&utm_medium=homepage_tile&utm_campa
Source: chromecache_444.2.dr, chromecache_297.2.dr	String found in binary or memory: https://app.castittalent.com/HPCasting?utm_source=wwd_web&utm_medium=homepage_tile&utm_campaign=hbo&
Source: chromecache_342.2.dr	String found in binary or memory: https://assets.wizardingworld.com
Source: chromecache_510.2.dr, chromecache_269.2.dr, chromecache_507.2.dr, chromecache_476.2.dr, chromecache_544.2.dr, chromecache_459.2.dr, chromecache_430.2.dr, chromecache_312.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_432.2.dr, chromecache_285.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Document/cookie#write_a_new_cookie)
Source: chromecache_432.2.dr, chromecache_285.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/ga4/reference/config#)
Source: chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_342.2.dr	String found in binary or memory: https://embed-shop.wizardingworld.com/components/buy-button-component/latest/buy-button-component.js
Source: chromecache_510.2.dr, chromecache_476.2.dr, chromecache_544.2.dr, chromecache_430.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_453.2.dr	String found in binary or memory: https://help.wizardingworld.com/)
Source: chromecache_453.2.dr	String found in binary or memory: https://help.wizardingworld.com/hc/en-us)
Source: chromecache_429.2.dr	String found in binary or memory: https://help.wizardingworld.com/hc/en-us/articles/360040592192-Covid-19-Updates).
Source: chromecache_435.2.dr	String found in binary or memory: https://kids.scholastic.com/kid/books/harry-potter/
Source: chromecache_342.2.dr	String found in binary or memory: https://my.wizardingworld.com
Source: chromecache_312.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_510.2.dr, chromecache_269.2.dr, chromecache_507.2.dr, chromecache_476.2.dr, chromecache_544.2.dr, chromecache_459.2.dr, chromecache_430.2.dr, chromecache_312.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_317.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_440.2.dr, chromecache_582.2.dr, chromecache_373.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_317.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_494.2.dr, chromecache_358.2.dr, chromecache_326.2.dr, chromecache_344.2.dr	String found in binary or memory: https://sketch.com
Source: chromecache_507.2.dr, chromecache_459.2.dr, chromecache_312.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_417.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_432.2.dr, chromecache_285.2.dr	String found in binary or memory: https://support.google.com/analytics/answer/9976101?hl=en).
Source: chromecache_317.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_607.2.dr, chromecache_417.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_510.2.dr, chromecache_269.2.dr, chromecache_507.2.dr, chromecache_476.2.dr, chromecache_544.2.dr, chromecache_459.2.dr, chromecache_430.2.dr, chromecache_312.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_415.2.dr	String found in binary or memory: https://tinyurl.com/3f3a4x2c).
Source: chromecache_435.2.dr	String found in binary or memory: https://www.bloomsbury.com/uk/christmas-at-hogwarts-9781526677082/
Source: chromecache_415.2.dr	String found in binary or memory: https://www.dataprotection.ie))
Source: chromecache_607.2.dr, chromecache_417.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_607.2.dr, chromecache_417.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_607.2.dr, chromecache_417.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_312.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_607.2.dr, chromecache_417.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_473.2.dr, chromecache_307.2.dr, chromecache_591.2.dr, chromecache_317.2.dr, chromecache_549.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_510.2.dr, chromecache_269.2.dr, chromecache_507.2.dr, chromecache_476.2.dr, chromecache_544.2.dr, chromecache_459.2.dr, chromecache_430.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_312.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_607.2.dr, chromecache_417.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_432.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=$
Source: chromecache_586.2.dr, chromecache_471.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.
Source: chromecache_261.2.dr, chromecache_307.2.dr, chromecache_549.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Source: chromecache_507.2.dr, chromecache_459.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_453.2.dr	String found in binary or memory: https://www.namadr.com/
Source: chromecache_453.2.dr	String found in binary or memory: https://www.namadr.com/content/uploads/2020/09/Comprehensive-Demand-for-Arb-revised-9.18.19.pdf
Source: chromecache_453.2.dr	String found in binary or memory: https://www.namadr.com/content/uploads/2021/12/SupplementalRules12.22.21.pdf)
Source: chromecache_453.2.dr	String found in binary or memory: https://www.namadr.com/content/uploads/2022/04/Comprehensive-Rules-as-of-4.18.2022.pdf/)
Source: chromecache_453.2.dr	String found in binary or memory: https://www.namadr.com/resources/rules-fees-forms/)
Source: chromecache_342.2.dr	String found in binary or memory: https://www.wizardingworld.com
Source: chromecache_586.2.dr	String found in binary or memory: https://www.wizardingworld.com/
Source: chromecache_394.2.dr	String found in binary or memory: https://www.wizardingworld.com/discover/films/harry-potter-and-the-goblet-of-fire
Source: chromecache_391.2.dr	String found in binary or memory: https://www.wizardingworld.com/discover/films/harry-potter-and-the-order-of-the-phoenix
Source: chromecache_394.2.dr	String found in binary or memory: https://www.wizardingworld.com/discover/films/harry-potter-and-the-prisoner-of-azkaban
Source: chromecache_414.2.dr	String found in binary or memory: https://www.wizardingworld.com/features/debate-club-should-hermione-have-been-with-ron-or-harry
Source: chromecache_586.2.dr, chromecache_444.2.dr, chromecache_297.2.dr	String found in binary or memory: https://www.wizardingworld.com/features/debate-club-should-hermione-have-been-with-ron-or-harry).
Source: chromecache_586.2.dr, chromecache_444.2.dr, chromecache_297.2.dr, chromecache_414.2.dr	String found in binary or memory: https://www.wizardingworld.com/features/debate-club-trelawney-or-firenze-who-was-the-better-divinati
Source: chromecache_414.2.dr	String found in binary or memory: https://www.wizardingworld.com/features/sirius-black-role-model-or-bad-influence-the-debate
Source: chromecache_586.2.dr, chromecache_444.2.dr, chromecache_297.2.dr	String found in binary or memory: https://www.wizardingworld.com/features/sirius-black-role-model-or-bad-influence-the-debate)
Source: chromecache_586.2.dr, chromecache_444.2.dr, chromecache_297.2.dr	String found in binary or memory: https://www.wizardingworld.com/news/harry-potter-wizards-of-baking-releases-trailer-and-launch-date
Source: chromecache_463.2.dr	String found in binary or memory: https://www.wizardingworld.com/news/hbo-harry-potter-series-finds-writer-director
Source: chromecache_586.2.dr, chromecache_444.2.dr, chromecache_297.2.dr	String found in binary or memory: https://www.wizardingworld.com/news/hbo-harry-potter-series-finds-writer-director)
Source: chromecache_453.2.dr	String found in binary or memory: https://www.wizardingworld.com/privacy/)
Source: chromecache_453.2.dr	String found in binary or memory: https://www.wizardingworld.com/privacy/).
Source: chromecache_429.2.dr	String found in binary or memory: https://www.wizardingworld.com/terms/gold-purchase-terms-uk
Source: chromecache_429.2.dr	String found in binary or memory: https://www.wizardingworld.com/terms/gold-purchase-terms-uk-oct-2019
Source: chromecache_429.2.dr	String found in binary or memory: https://www.wizardingworld.com/terms/gold-purchase-terms-us
Source: chromecache_429.2.dr	String found in binary or memory: https://www.wizardingworld.com/terms/gold-purchase-terms-us-oct-2019
Source: chromecache_429.2.dr, chromecache_453.2.dr	String found in binary or memory: https://www.wizardingworld.com/terms/terms-row
Source: chromecache_453.2.dr	String found in binary or memory: https://www.wizardingworld.com/terms/terms-row)
Source: chromecache_429.2.dr, chromecache_453.2.dr	String found in binary or memory: https://www.wizardingworld.com/terms/terms-row-de
Source: chromecache_429.2.dr, chromecache_453.2.dr	String found in binary or memory: https://www.wizardingworld.com/terms/terms-row-es
Source: chromecache_429.2.dr, chromecache_453.2.dr	String found in binary or memory: https://www.wizardingworld.com/terms/terms-row-fr
Source: chromecache_429.2.dr, chromecache_453.2.dr	String found in binary or memory: https://www.wizardingworld.com/terms/terms-row-ja
Source: chromecache_287.2.dr, chromecache_359.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/vPnOJpqkXzQ?si=BGJopTkND4PY2VXO?rel=0
Source: chromecache_507.2.dr, chromecache_459.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_435.2.dr	String found in binary or memory: https://www.ziyigao.com/

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=2004,i,1820474452150383610,5901595658687404911,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.wizardingworld.com/sorting-hat"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=2004,i,1820474452150383610,5901595658687404911,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://cdn.cookielaw.org/logos/static/powered_by_logo.svg	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location	0%	URL Reputation	safe

IP	Domain	Country	ASN	ASN Name	Malicious
65.9.66.17	unknown	United States	16509	AMAZON-02US	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
35.160.35.184	unknown	United States	16509	AMAZON-02US	false
35.190.88.7	sessions.bugsnag.com	United States	15169	GOOGLEUS	false
104.244.42.72	unknown	United States	13414	TWITTERUS	false
13.33.187.16	d3orhvfyxudxxq.cloudfront.net	United States	16509	AMAZON-02US	false
65.9.66.100	api.wizardingworld.com	United States	16509	AMAZON-02US	false
66.102.1.154	unknown	United States	15169	GOOGLEUS	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
13.35.58.148	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
104.18.87.42	unknown	United States	13335	CLOUDFLARENETUS	false
35.166.226.67	api.segment.io	United States	16509	AMAZON-02US	false
104.244.42.136	syndication.twitter.com	United States	13414	TWITTERUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.33.187.102	unknown	United States	16509	AMAZON-02US	false
199.232.188.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
74.125.71.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
104.17.245.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
142.250.74.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
104.17.246.203	unknown	United States	13335	CLOUDFLARENETUS	false
13.224.189.25	my.wizardingworld.com	United States	16509	AMAZON-02US	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
104.17.247.203	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
65.9.66.4	unknown	United States	16509	AMAZON-02US	false
44.234.198.184	unknown	United States	16509	AMAZON-02US	false
104.18.86.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
172.217.16.132	unknown	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520634
Start date and time:	2024-09-27 17:33:47 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.wizardingworld.com/sorting-hat
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@21/572@80/33
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://my.wizardingworld.com/sorting-hat/question-1 Browse: https://www.wizardingworld.com/

Input	Output
URL: https://www.wizardingworld.com/sorting-hat Model: jbxai	{ "brand":["Wizarding World"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"START THE SORTING CEREMONY", "text_input_field_labels":["START THE SORTING CEREMONY"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.wizardingworld.com/sorting-hat Model: jbxai	{ "brand":["Wizarding World"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"START THE SORTING CEREMONY", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.wizardingworld.com/sorting-hat Model: jbxai	{ "brand":["WIZARDING WORLD"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"START THE SORTING CEREMONY", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.wizardingworld.com/sorting-hat Model: jbxai	{ "brand":["Wizarding World"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"START THE SORTING CEREMONY", "text_input_field_labels":["START THE SORTING CEREMONY"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.wizardingworld.com/register Model: jbxai	{ "brand":["Wizarding World"], "contains_trigger_text":false, "trigger_text":"unknown", "prominent_button_name":"SIGN UP", "text_input_field_labels":["DATE OF BIRTH", "EMAIL ADDRESS", "PASSWORD", "FIRST NAME", "LAST NAME"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.wizardingworld.com/ Model: jbxai	{ "brand":["WIZARDING WORLD"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"LEARN MORE", "text_input_field_labels":["POLL"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.wizardingworld.com/quiz/true-or-false-wand-edition Model: jbxai	{ "brand":["Wizarding World"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"START QUIZ", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.wizardingworld.com/register Model: jbxai	{ "phishing_score":1, "brands":"Wizarding World", "legit_domain":"wizardingworld.com", "classification":"known", "reasons":["The URL matches the brand name 'Wizarding World' exactly.", "The domain 'wizardingworld.com' is the legitimate domain for the Wizarding World brand.", "No suspicious elements such as misspellings, extra characters, or unusual domain extensions are present in the URL.", "The input fields (DATE OF BIRTH, EMAIL ADDRESS, PASSWORD, FIRST NAME, LAST NAME) are typical for a registration or login page, which is common for legitimate websites."], "brand_matches":[true], "url_match":true, "brand_input":"Wizarding World", "input_fields":"DATE OF BIRTH, EMAIL ADDRESS, PASSWORD, FIRST NAME, LAST NAME"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 150x150, segment length 16, baseline, precision 8, 595x595, components 3
Category:	dropped
Size (bytes):	121403
Entropy (8bit):	7.979557693040064
Encrypted:	false
SSDEEP:	3072:ULRtZgDnRzk6q3A20AJ3EsBKqdunBvFKlZPor42lmyy:ULynq3dlEsHEBNKlZPorBC
MD5:	80013CDE1DFE07DA8108EBB6B66A377F
SHA1:	D07D0E00FBC9BE15EA0715F459AED081E4B77AC0
SHA-256:	D4AE493BB41B126A43E9E2A0AC941382FD3F273973ACE03559FDE1C15A7532DF
SHA-512:	C1489E89FFBF30F5A910A84133B22E23731B8B7159D4AB6FE612A384B807822F87D057BB50384DE587AB7F66C657876A4F6B0B2166A62C95AA61319E2181FC2B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................S.S.............................................J.........................!1.AQ.."aq..2...#....B....3R.$br.C.%S...&'4.D...................................8........................!1A.."Qa2q.......#B.....3R$C.b............?.....Q.......CQTe3)&F...<.p{...P.I..r...w...Jij..L&.Q<..]...B,...:...g..Q"..E..F.}+.E.7G.s....rB...n..`A...B..j"AL.......2c.m.z...:.u......T$...Acp./.c ZI.>tU`G..,X.[....j].x..B-.i...s.>..f.m...1.......X.NMD.........L..6.u3=$Ps.....`IV=m..\|%GI..?O..fa;.2...2?r.D.L.JMi..B.\|..`..R......z.J.?x.@..H...F.5.Z..M...U..v.......u....~...;.c.....(...T.~.....&.<KK.....7....p....^u....$.....}[bv..wv...V$e.k6=..z..h+.!\|1..@.GCK...@....J...oA.J&6.]...G.."A.f..ORz.-..1.5....F.3$.w3..#..'.....cY..6...1B.E...Q.6..O..W..$z.a..~<.......$.J.....A.-.I'..Q..m....}.........<A..a..x....2.cRD,

Name	IP	Active	Malicious	Reputation
d3orhvfyxudxxq.cloudfront.net	13.33.187.16	true	false	unknown
sessions.bugsnag.com	35.190.88.7	true	false	unknown
my.wizardingworld.com	13.224.189.25	true	false	unknown
platform.twitter.map.fastly.net	199.232.188.157	true	false	unknown
syndication.twitter.com	104.244.42.136	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	74.125.71.156	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
d296je7bbdd650.cloudfront.net	13.35.58.148	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
analytics-alv.google.com	216.239.34.181	true	false	unknown
code.jquery.com	151.101.194.137	true	false	unknown
api.wizardingworld.com	65.9.66.100	true	false	unknown
api.segment.io	35.166.226.67	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
td.doubleclick.net	142.250.74.194	true	false	unknown
analytics.google.com	172.217.16.206	true	false	unknown
unpkg.com	104.17.245.203	true	false	unknown
cdn.cookielaw.org	104.18.86.42	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
images.ctfassets.net	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
cdn.segment.com	unknown	unknown	false	unknown
platform.twitter.com	unknown	unknown	false	unknown
www.wizardingworld.com	unknown	unknown	false	unknown
171.39.242.20.in-addr.arpa	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://images.ctfassets.net/usf1vwtuqyxm/7EGR5Rjsnfe8fG5gq18SR9/41e25fa6351b6b66f755033b887a75c0/Homepage_Flexible_Carousel_Designs-03.png	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/2wRsaDBWsaHaw40r7IuZof/a4c6ecb30522a5ec5d7e7a035e75d60e/Homepage_Flexible_Carousel_Designs-04.png	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/6caLuMBQVbLWX08kwfHaAF/a36151aee6ff317221b26ef34b7613b3/On_Stage_Discover_Flexible_Carousel_Promo_image_no_text___1_.png	false		unknown
https://www.wizardingworld.com/sorting-hat	false		unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-115471673-4&cid=1537971745.1727451294&jid=14315329&gjid=521698946&_gid=2073481639.1727451304&_u=aCDAgEADQAAAAGgCIAD~&z=1204473264	false		unknown
https://www.google.com/recaptcha/api.js?render=6LcRobIZAAAAADthvUTKcTpGbKdH-j0i7MPx0Hnb	false		unknown
https://my.wizardingworld.com/static/css/5.764ccc25.chunk.css	false		unknown
https://cdn.segment.com/next-integrations/actions/google-analytics-4-web/3d7967e6cef0f568aafa.js	false		unknown
https://www.wizardingworld.com/	false		unknown
https://cdn.cookielaw.org/logos/static/powered_by_logo.svg	false	URL Reputation: safe	unknown
https://images.ctfassets.net/usf1vwtuqyxm/71JqjFqxFPKBLmoFUGKYJD/22d4d28400d268c5d1382d675b5ce1ae/HP-F4-goblet-of-fire-mcgonagall-desk-web-landscape?w=595&h=595&fit=fill	false		unknown
https://cdn.cookielaw.org/consent/8458f511-3cee-4c34-be7d-667f562a8ae1/01922a3e-4a59-7f99-b0b4-aa897c65b489/en.json	false		unknown
https://cdn.cookielaw.org/scripttemplates/202409.1.0/assets/otCommonStyles.css	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/225vqSBkPxCAVo42uzHlRw/59421f5599c0f4584779187ed79ada4c/Homepage_Flexible_Carousel_Designs-06.png	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/1vSY5tKaArBRZ0tP9eG2TP/2b761d7cecb254e08f50fca88ca332bd/hp-f1-ron-giant-chess-knight-web-square.jpg?w=595&h=595&fit=fill	false		unknown
https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg	false	URL Reputation: safe	unknown
https://images.ctfassets.net/usf1vwtuqyxm/2Un9sJuzRPTXnflSX5OqVp/12689b71f93880d12c18801dc792d283/Homepage_Flexible_Carousel_Designs-07.png	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/69z917Pk83mrCFpunCiKVZ/ae24cce2fb9882dae4c6fd8c8334a3f7/youtube.svg	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/4bvgYof9YFdDOpmT3uFAlN/903ed895b33c1a7f42536d5dde49760e/Promo_module_August_Portrait_Maker_BTH_Free_Assets.png	false		unknown
https://cdn.cookielaw.org/scripttemplates/202409.1.0/otBannerSdk.js	false		unknown
https://my.wizardingworld.com/static/css/main.a5ac87b0.chunk.css	false		unknown
https://cdn.segment.com/next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/7iMm8WDiQrC1tAisfaCw7E/61916b81a033d56d454812f405889674/hp-f1-boats-to-hogwarts-lake-app-landscape.jpg	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/7bHE22HXZ043a0vlO4jy0T/d9235ddc587530cc9887bd847a619318/Homepage_Flexible_Carousel_Designs-02.png	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/1vSY5tKaArBRZ0tP9eG2TP/2b761d7cecb254e08f50fca88ca332bd/hp-f1-ron-giant-chess-knight-web-square.jpg	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/7oUyTOXuYlQzga0NLJmbuA/226f145030850ae961c63a340c5318e7/hp-f4-hermione-great-hall-smiling-book-web-landscape-16-x9.jpg?w=380&h=285&fit=fill&f=top	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/83fkBaedUUmL18ODR4I5g/340ce29247aa3dc80c9c3c7f76d257c7/HP-F5-order-of-the-phoenix-umbridge-office-desk-holding-pencil-web-landscape?w=380&h=285&fit=fill&f=top	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/4ht9iX9pzj37kWnaTkO4rN/9f78ffef066a5b01b51a0d5691643d9e/Books_Discover_Flexible_Carousel_Promo_image_no_next__1_.png	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/6BSHGLdOHX1hrrTf7kjlqU/95c1bdb82d5909cb062cf4afa63f22e2/HP-F5-order-of-the-phoenix-ginny-fred-george-ron-da-wand-web-landscape?w=325&h=325&fit=fill&f=top&fm=webp&q=70	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/4tGuMCJ6KswbN1mn3OLa8n/d4b975e10f4f95591e64bdb2063e44ea/Homepage_Flexible_Carousel_Designs-01.png	false		unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/WUx1kvexmpqZgExknksXb/393535f557b03c10615dc86e61c5a423/tiktok.svg	false		unknown
https://cdn.segment.com/next-integrations/integrations/visual-tagger/0.3.5/visual-tagger.dynamic.js.gz	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/4H3HLZMPB6ScQsw2AIKe6O/f324ccb325ed55ded43449620557d97f/CormacMcLaggen_WB_F6_CormacClose-UpInGoalHoopQuidditchKeeper_HP6-VFX-00070.jpg?w=380&h=285&fit=fill&f=top	false		unknown
https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js	false		unknown
https://my.wizardingworld.com/static/js/main.dd33070f.chunk.js	false		unknown
https://my.wizardingworld.com/static/js/5.e3d68c6b.chunk.js	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/6I3xsjXKPvzvBEuFnJWBOS/a4a4343c1ed9236b39c5208aefb45aa3/HP-F3-prisoner-of-azkaban-harry-ron-seamus-eat-sweets-in-gryffindor-common-room.jpg?w=380&h=285&fit=fill&f=top	false		unknown
https://cdn.cookielaw.org/logos/1b21e05d-c206-4e0b-970e-2d73a23e42e8/40b45eb7-3773-405d-9a4c-009d88ec0d77/26bc239a-e4a2-44a7-9d43-d51b593623ad/Wizarding_World_logo.png	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/2vfIFJmcAdcWFyCew2yXs1/4a4280298b05c87d351da4fb816f1077/Homepage_Flexible_Carousel_Designs-05.png	false		unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://www.google.com/js/bg/dubcxWuhhbqw8uaLSFFGvELnk5WmffD3wjoYeQZ33gk.js	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/6BSHGLdOHX1hrrTf7kjlqU/95c1bdb82d5909cb062cf4afa63f22e2/HP-F5-order-of-the-phoenix-ginny-fred-george-ron-da-wand-web-landscape?w=700&h=700&fit=fill&f=top&fm=jpg	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/AznhfDm2bhsnc9UIan7cu/07e5d51d70f791acda0bc4b87dae5344/Portkey_Games_Discover_Flexible_Carousel_imaged_no_text__1_.png	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/6ltJKChifM6jHN2ufFhvyN/04a216f41109f45f3d909b9353e329cf/WEB-HOMEPAGE-HERO-wizards-of-baking-trailer.png	false		unknown
https://api.segment.io/v1/i	false		unknown
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location	false	URL Reputation: safe	unknown
https://cdn.cookielaw.org/scripttemplates/202409.1.0/assets/v2/otPcCenter.json	false		unknown
https://images.ctfassets.net/usf1vwtuqyxm/5XUHoeDH8pV401oLqbhJMA/0e33f12e8139bac7c1759c1ecae18035/HP-F1-philosophers-stone-harry-sorting-ceremony-sorting-hat-eyes-closed-web-landscape?w=380&h=285&fit=fill&f=top	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.wizardingworld.com/terms/gold-purchase-terms-us-oct-2019	chromecache_429.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_507.2.dr, chromecache_459.2.dr, chromecache_312.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	false	URL Reputation: safe	unknown
https://www.ziyigao.com/	chromecache_435.2.dr	false		unknown
https://kids.scholastic.com/kid/books/harry-potter/	chromecache_435.2.dr	false		unknown
https://www.wizardingworld.com/features/debate-club-should-hermione-have-been-with-ron-or-harry	chromecache_414.2.dr	false		unknown
https://my.wizardingworld.com	chromecache_342.2.dr	false		unknown
https://support.google.com/recaptcha#6262736	chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	false	URL Reputation: safe	unknown
https://app.castittalent.com/HPCasting?utm_source=wwd_web	chromecache_586.2.dr	false		unknown
https://www.wizardingworld.com/terms/terms-row-ja	chromecache_429.2.dr, chromecache_453.2.dr	false		unknown
https://api.int.wizardingworld.com/v3	chromecache_342.2.dr	false		unknown
https://assets.wizardingworld.com	chromecache_342.2.dr	false		unknown
https://www.wizardingworld.com/terms/gold-purchase-terms-us	chromecache_429.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_607.2.dr, chromecache_417.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_312.2.dr	false		unknown
https://www.youtube.com/iframe_api	chromecache_507.2.dr, chromecache_459.2.dr, chromecache_312.2.dr	false		unknown
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	chromecache_440.2.dr, chromecache_582.2.dr, chromecache_373.2.dr	false		unknown
https://www.wizardingworld.com/privacy/).	chromecache_453.2.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	false	URL Reputation: safe	unknown
https://github.com/krux/postscribe/blob/master/LICENSE.	chromecache_510.2.dr, chromecache_476.2.dr, chromecache_544.2.dr, chromecache_430.2.dr	false		unknown
https://www.wizardingworld.com/news/harry-potter-wizards-of-baking-releases-trailer-and-launch-date	chromecache_586.2.dr, chromecache_444.2.dr, chromecache_297.2.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_417.2.dr	false	URL Reputation: safe	unknown
https://www.wizardingworld.com/terms/terms-row	chromecache_429.2.dr, chromecache_453.2.dr	false		unknown
https://tinyurl.com/3f3a4x2c).	chromecache_415.2.dr	false		unknown
https://www.wizardingworld.com/privacy/)	chromecache_453.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_317.2.dr	false	URL Reputation: safe	unknown
https://help.wizardingworld.com/hc/en-us)	chromecache_453.2.dr	false		unknown
https://www.namadr.com/	chromecache_453.2.dr	false		unknown
https://www.wizardingworld.com/news/hbo-harry-potter-series-finds-writer-director)	chromecache_586.2.dr, chromecache_444.2.dr, chromecache_297.2.dr	false		unknown
https://www.youtube-nocookie.com/embed/vPnOJpqkXzQ?si=BGJopTkND4PY2VXO?rel=0	chromecache_287.2.dr, chromecache_359.2.dr	false		unknown
https://api.wizardingworld.com/api	chromecache_342.2.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_510.2.dr, chromecache_269.2.dr, chromecache_507.2.dr, chromecache_476.2.dr, chromecache_544.2.dr, chromecache_459.2.dr, chromecache_430.2.dr, chromecache_312.2.dr	false	URL Reputation: safe	unknown
http://www.youronlinechoices.com.au/);	chromecache_415.2.dr	false		unknown
https://www.wizardingworld.com/news/hbo-harry-potter-series-finds-writer-director	chromecache_463.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_473.2.dr, chromecache_591.2.dr, chromecache_317.2.dr	false	URL Reputation: safe	unknown
https://www.wizardingworld.com/features/debate-club-should-hermione-have-been-with-ron-or-harry).	chromecache_586.2.dr, chromecache_444.2.dr, chromecache_297.2.dr	false		unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_317.2.dr	false		unknown
https://www.google.%/ads/ga-audiences	chromecache_607.2.dr, chromecache_417.2.dr	false		unknown
https://www.wizardingworld.com/terms/gold-purchase-terms-uk	chromecache_429.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/API/Document/cookie#write_a_new_cookie)	chromecache_432.2.dr, chromecache_285.2.dr	false		unknown
https://app.castittalent.com/HPCasting?utm_source=wwd_web&utm_medium=homepage_tile&utm_campa	chromecache_463.2.dr	false		unknown
https://www.wizardingworld.com/features/sirius-black-role-model-or-bad-influence-the-debate)	chromecache_586.2.dr, chromecache_444.2.dr, chromecache_297.2.dr	false		unknown
https://www.wizardingworld.com/discover/films/harry-potter-and-the-goblet-of-fire	chromecache_394.2.dr	false		unknown
http://youradchoices.ca/choices/);	chromecache_415.2.dr	false		unknown
https://www.namadr.com/content/uploads/2020/09/Comprehensive-Demand-for-Arb-revised-9.18.19.pdf	chromecache_453.2.dr	false		unknown
http://optout.aboutads.info/?c=2&lang=EN);	chromecache_415.2.dr	false		unknown
https://www.wizardingworld.com	chromecache_342.2.dr	false		unknown
https://sketch.com	chromecache_494.2.dr, chromecache_358.2.dr, chromecache_326.2.dr, chromecache_344.2.dr	false		unknown
https://www.namadr.com/content/uploads/2022/04/Comprehensive-Rules-as-of-4.18.2022.pdf/)	chromecache_453.2.dr	false		unknown
https://www.wizardingworld.com/features/sirius-black-role-model-or-bad-influence-the-debate	chromecache_414.2.dr	false		unknown

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 27, 2024 17:34:45.645555019 CEST	192.168.2.4	1.1.1.1	0x124f	Standard query (0)	www.wizardingworld.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:45.645684004 CEST	192.168.2.4	1.1.1.1	0x561d	Standard query (0)	www.wizardingworld.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:46.460438967 CEST	192.168.2.4	1.1.1.1	0x2478	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.460625887 CEST	192.168.2.4	1.1.1.1	0xd2ae	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:46.466794968 CEST	192.168.2.4	1.1.1.1	0xbfcb	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.467156887 CEST	192.168.2.4	1.1.1.1	0xeaa3	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Sep 27, 2024 17:34:46.467735052 CEST	192.168.2.4	1.1.1.1	0x1628	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.468087912 CEST	192.168.2.4	1.1.1.1	0xab8d	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Sep 27, 2024 17:34:46.491681099 CEST	192.168.2.4	1.1.1.1	0x8bca	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.492084980 CEST	192.168.2.4	1.1.1.1	0x567f	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:46.492589951 CEST	192.168.2.4	1.1.1.1	0xd6be	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.492733955 CEST	192.168.2.4	1.1.1.1	0x8323	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:46.493575096 CEST	192.168.2.4	1.1.1.1	0xcde2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.493884087 CEST	192.168.2.4	1.1.1.1	0x7369	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:46.532931089 CEST	192.168.2.4	1.1.1.1	0x354c	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.533659935 CEST	192.168.2.4	1.1.1.1	0x9446	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 17:34:46.539416075 CEST	192.168.2.4	1.1.1.1	0x9253	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.539736986 CEST	192.168.2.4	1.1.1.1	0x19b7	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Sep 27, 2024 17:34:48.175760031 CEST	192.168.2.4	1.1.1.1	0x4362	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:48.175985098 CEST	192.168.2.4	1.1.1.1	0x8d78	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:48.344738960 CEST	192.168.2.4	1.1.1.1	0x25bf	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:48.345068932 CEST	192.168.2.4	1.1.1.1	0x1303	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Sep 27, 2024 17:34:48.351886988 CEST	192.168.2.4	1.1.1.1	0x87af	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:48.352283955 CEST	192.168.2.4	1.1.1.1	0x41b1	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:49.995285034 CEST	192.168.2.4	1.1.1.1	0xae4d	Standard query (0)	sessions.bugsnag.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:49.995942116 CEST	192.168.2.4	1.1.1.1	0x98c0	Standard query (0)	sessions.bugsnag.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:50.070847034 CEST	192.168.2.4	1.1.1.1	0x972	Standard query (0)	api.wizardingworld.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:50.071293116 CEST	192.168.2.4	1.1.1.1	0xdbab	Standard query (0)	api.wizardingworld.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:50.113743067 CEST	192.168.2.4	1.1.1.1	0x95fb	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:50.114039898 CEST	192.168.2.4	1.1.1.1	0x2c48	Standard query (0)	syndication.twitter.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:50.139729023 CEST	192.168.2.4	1.1.1.1	0x6ac0	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:50.140027046 CEST	192.168.2.4	1.1.1.1	0x13ce	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:52.028614044 CEST	192.168.2.4	1.1.1.1	0x7878	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.028901100 CEST	192.168.2.4	1.1.1.1	0x318d	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:52.170370102 CEST	192.168.2.4	1.1.1.1	0x8567	Standard query (0)	www.wizardingworld.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.170530081 CEST	192.168.2.4	1.1.1.1	0x359d	Standard query (0)	www.wizardingworld.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:52.172388077 CEST	192.168.2.4	1.1.1.1	0x3050	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.172542095 CEST	192.168.2.4	1.1.1.1	0x92ab	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Sep 27, 2024 17:34:52.726988077 CEST	192.168.2.4	1.1.1.1	0xd7fe	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.727185965 CEST	192.168.2.4	1.1.1.1	0x6e80	Standard query (0)	syndication.twitter.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:52.728470087 CEST	192.168.2.4	1.1.1.1	0x421e	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.728689909 CEST	192.168.2.4	1.1.1.1	0xe2b5	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:52.776628017 CEST	192.168.2.4	1.1.1.1	0x765b	Standard query (0)	api.wizardingworld.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.776962996 CEST	192.168.2.4	1.1.1.1	0x65f8	Standard query (0)	api.wizardingworld.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:54.267329931 CEST	192.168.2.4	1.1.1.1	0x2d00	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:54.267460108 CEST	192.168.2.4	1.1.1.1	0x4b33	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:54.673486948 CEST	192.168.2.4	1.1.1.1	0x9913	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:54.673486948 CEST	192.168.2.4	1.1.1.1	0x3fbd	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:55.056572914 CEST	192.168.2.4	1.1.1.1	0x1d96	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:55.056572914 CEST	192.168.2.4	1.1.1.1	0x10f1	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Sep 27, 2024 17:34:55.085573912 CEST	192.168.2.4	1.1.1.1	0xf674	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 17:34:55.085589886 CEST	192.168.2.4	1.1.1.1	0xf71d	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:06.040796041 CEST	192.168.2.4	1.1.1.1	0xfeed	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:06.041136026 CEST	192.168.2.4	1.1.1.1	0xabc6	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Sep 27, 2024 17:35:06.129024982 CEST	192.168.2.4	1.1.1.1	0xef5e	Standard query (0)	my.wizardingworld.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:06.129626989 CEST	192.168.2.4	1.1.1.1	0xeaf4	Standard query (0)	my.wizardingworld.com	65	IN (0x0001)	false
Sep 27, 2024 17:35:07.017883062 CEST	192.168.2.4	1.1.1.1	0xfb59	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:07.018448114 CEST	192.168.2.4	1.1.1.1	0xb0ce	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 17:35:07.380594015 CEST	192.168.2.4	1.1.1.1	0x526b	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:07.380800962 CEST	192.168.2.4	1.1.1.1	0x9fd	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 27, 2024 17:35:09.541892052 CEST	192.168.2.4	1.1.1.1	0x6ba1	Standard query (0)	my.wizardingworld.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:09.541892052 CEST	192.168.2.4	1.1.1.1	0x287	Standard query (0)	my.wizardingworld.com	65	IN (0x0001)	false
Sep 27, 2024 17:35:14.904548883 CEST	192.168.2.4	1.1.1.1	0x9c00	Standard query (0)	171.39.242.20.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 27, 2024 17:35:17.650705099 CEST	192.168.2.4	1.1.1.1	0x4211	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:17.650856972 CEST	192.168.2.4	1.1.1.1	0x523a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 17:35:18.492542982 CEST	192.168.2.4	1.1.1.1	0x1bab	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:18.492690086 CEST	192.168.2.4	1.1.1.1	0x78cd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 17:35:18.532296896 CEST	192.168.2.4	1.1.1.1	0x7267	Standard query (0)	www.wizardingworld.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:18.844038963 CEST	192.168.2.4	1.1.1.1	0xfbf	Standard query (0)	api.wizardingworld.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:19.517374992 CEST	192.168.2.4	1.1.1.1	0x3e4	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:22.147584915 CEST	192.168.2.4	1.1.1.1	0x1a74	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:32.073589087 CEST	192.168.2.4	1.1.1.1	0xd1a2	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.835047007 CEST	192.168.2.4	1.1.1.1	0x516a	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.885474920 CEST	192.168.2.4	1.1.1.1	0x11ea	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.887995005 CEST	192.168.2.4	1.1.1.1	0xd6e4	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.922827959 CEST	192.168.2.4	1.1.1.1	0xa094	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.925724983 CEST	192.168.2.4	1.1.1.1	0xce8e	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:34.189471006 CEST	192.168.2.4	1.1.1.1	0xeb7d	Standard query (0)	sessions.bugsnag.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:34.197129011 CEST	192.168.2.4	1.1.1.1	0xf294	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:39.645096064 CEST	192.168.2.4	1.1.1.1	0x964e	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 27, 2024 17:34:45.656286955 CEST	1.1.1.1	192.168.2.4	0x124f	No error (0)	www.wizardingworld.com	www.wizardingworld.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:45.657433987 CEST	1.1.1.1	192.168.2.4	0x561d	No error (0)	www.wizardingworld.com	www.wizardingworld.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:46.467430115 CEST	1.1.1.1	192.168.2.4	0x2478	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:46.467430115 CEST	1.1.1.1	192.168.2.4	0x2478	No error (0)	platform.twitter.map.fastly.net		199.232.188.157	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.468935013 CEST	1.1.1.1	192.168.2.4	0xd2ae	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:46.473833084 CEST	1.1.1.1	192.168.2.4	0xeaa3	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:46.474757910 CEST	1.1.1.1	192.168.2.4	0xbfcb	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:46.474757910 CEST	1.1.1.1	192.168.2.4	0xbfcb	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.16	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.474757910 CEST	1.1.1.1	192.168.2.4	0xbfcb	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.2	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.474757910 CEST	1.1.1.1	192.168.2.4	0xbfcb	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.102	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.474757910 CEST	1.1.1.1	192.168.2.4	0xbfcb	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.474792004 CEST	1.1.1.1	192.168.2.4	0x1628	No error (0)	api.segment.io		35.166.226.67	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.474792004 CEST	1.1.1.1	192.168.2.4	0x1628	No error (0)	api.segment.io		54.69.251.6	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.474792004 CEST	1.1.1.1	192.168.2.4	0x1628	No error (0)	api.segment.io		35.160.151.220	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.498729944 CEST	1.1.1.1	192.168.2.4	0x8bca	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.498729944 CEST	1.1.1.1	192.168.2.4	0x8bca	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.498729944 CEST	1.1.1.1	192.168.2.4	0x8bca	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.498729944 CEST	1.1.1.1	192.168.2.4	0x8bca	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.498729944 CEST	1.1.1.1	192.168.2.4	0x8bca	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.499908924 CEST	1.1.1.1	192.168.2.4	0x567f	No error (0)	unpkg.com			65	IN (0x0001)	false
Sep 27, 2024 17:34:46.500492096 CEST	1.1.1.1	192.168.2.4	0xd6be	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:46.500492096 CEST	1.1.1.1	192.168.2.4	0xd6be	No error (0)	d296je7bbdd650.cloudfront.net		13.35.58.148	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.500983000 CEST	1.1.1.1	192.168.2.4	0xcde2	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.501276016 CEST	1.1.1.1	192.168.2.4	0x7369	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 17:34:46.501991034 CEST	1.1.1.1	192.168.2.4	0x8323	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:46.540915966 CEST	1.1.1.1	192.168.2.4	0x354c	No error (0)	stats.g.doubleclick.net		74.125.71.156	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.540915966 CEST	1.1.1.1	192.168.2.4	0x354c	No error (0)	stats.g.doubleclick.net		74.125.71.154	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.540915966 CEST	1.1.1.1	192.168.2.4	0x354c	No error (0)	stats.g.doubleclick.net		74.125.71.157	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.540915966 CEST	1.1.1.1	192.168.2.4	0x354c	No error (0)	stats.g.doubleclick.net		74.125.71.155	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.546782970 CEST	1.1.1.1	192.168.2.4	0x9253	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:46.546782970 CEST	1.1.1.1	192.168.2.4	0x9253	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:46.547504902 CEST	1.1.1.1	192.168.2.4	0x19b7	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:46.547504902 CEST	1.1.1.1	192.168.2.4	0x19b7	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Sep 27, 2024 17:34:46.547504902 CEST	1.1.1.1	192.168.2.4	0x19b7	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Sep 27, 2024 17:34:48.186181068 CEST	1.1.1.1	192.168.2.4	0x4362	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:48.186419964 CEST	1.1.1.1	192.168.2.4	0x8d78	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 17:34:48.352272034 CEST	1.1.1.1	192.168.2.4	0x1303	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Sep 27, 2024 17:34:48.352607965 CEST	1.1.1.1	192.168.2.4	0x25bf	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:48.352607965 CEST	1.1.1.1	192.168.2.4	0x25bf	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:48.361454964 CEST	1.1.1.1	192.168.2.4	0x87af	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:48.361454964 CEST	1.1.1.1	192.168.2.4	0x87af	No error (0)	platform.twitter.map.fastly.net		199.232.188.157	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:48.361469984 CEST	1.1.1.1	192.168.2.4	0x41b1	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:50.002882004 CEST	1.1.1.1	192.168.2.4	0xae4d	No error (0)	sessions.bugsnag.com		35.190.88.7	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:50.090876102 CEST	1.1.1.1	192.168.2.4	0x972	No error (0)	api.wizardingworld.com		65.9.66.100	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:50.090876102 CEST	1.1.1.1	192.168.2.4	0x972	No error (0)	api.wizardingworld.com		65.9.66.87	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:50.090876102 CEST	1.1.1.1	192.168.2.4	0x972	No error (0)	api.wizardingworld.com		65.9.66.17	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:50.090876102 CEST	1.1.1.1	192.168.2.4	0x972	No error (0)	api.wizardingworld.com		65.9.66.4	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:50.121036053 CEST	1.1.1.1	192.168.2.4	0x95fb	No error (0)	syndication.twitter.com		104.244.42.136	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:50.147330046 CEST	1.1.1.1	192.168.2.4	0x6ac0	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:50.147330046 CEST	1.1.1.1	192.168.2.4	0x6ac0	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:50.147713900 CEST	1.1.1.1	192.168.2.4	0x13ce	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Sep 27, 2024 17:34:52.036679983 CEST	1.1.1.1	192.168.2.4	0x7878	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:52.036679983 CEST	1.1.1.1	192.168.2.4	0x7878	No error (0)	platform.twitter.map.fastly.net		199.232.188.157	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.037533998 CEST	1.1.1.1	192.168.2.4	0x318d	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:52.179197073 CEST	1.1.1.1	192.168.2.4	0x359d	No error (0)	www.wizardingworld.com	www.wizardingworld.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:52.180252075 CEST	1.1.1.1	192.168.2.4	0x3050	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.180252075 CEST	1.1.1.1	192.168.2.4	0x3050	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.180592060 CEST	1.1.1.1	192.168.2.4	0x92ab	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Sep 27, 2024 17:34:52.182014942 CEST	1.1.1.1	192.168.2.4	0x8567	No error (0)	www.wizardingworld.com	www.wizardingworld.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:52.734425068 CEST	1.1.1.1	192.168.2.4	0xd7fe	No error (0)	syndication.twitter.com		104.244.42.72	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.735342026 CEST	1.1.1.1	192.168.2.4	0x421e	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.735342026 CEST	1.1.1.1	192.168.2.4	0x421e	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.737229109 CEST	1.1.1.1	192.168.2.4	0xe2b5	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Sep 27, 2024 17:34:52.795114040 CEST	1.1.1.1	192.168.2.4	0x765b	No error (0)	api.wizardingworld.com		65.9.66.4	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.795114040 CEST	1.1.1.1	192.168.2.4	0x765b	No error (0)	api.wizardingworld.com		65.9.66.87	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.795114040 CEST	1.1.1.1	192.168.2.4	0x765b	No error (0)	api.wizardingworld.com		65.9.66.100	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:52.795114040 CEST	1.1.1.1	192.168.2.4	0x765b	No error (0)	api.wizardingworld.com		65.9.66.17	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:54.277028084 CEST	1.1.1.1	192.168.2.4	0x2d00	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:54.277028084 CEST	1.1.1.1	192.168.2.4	0x2d00	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:54.277028084 CEST	1.1.1.1	192.168.2.4	0x2d00	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:54.277028084 CEST	1.1.1.1	192.168.2.4	0x2d00	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:54.277028084 CEST	1.1.1.1	192.168.2.4	0x2d00	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:54.277280092 CEST	1.1.1.1	192.168.2.4	0x4b33	No error (0)	unpkg.com			65	IN (0x0001)	false
Sep 27, 2024 17:34:54.680808067 CEST	1.1.1.1	192.168.2.4	0x3fbd	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:54.680808067 CEST	1.1.1.1	192.168.2.4	0x3fbd	No error (0)	d296je7bbdd650.cloudfront.net		13.35.58.148	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:54.681678057 CEST	1.1.1.1	192.168.2.4	0x9913	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:55.063920975 CEST	1.1.1.1	192.168.2.4	0x1d96	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:55.063920975 CEST	1.1.1.1	192.168.2.4	0x1d96	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:55.063920975 CEST	1.1.1.1	192.168.2.4	0x1d96	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:55.063920975 CEST	1.1.1.1	192.168.2.4	0x1d96	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:55.063920975 CEST	1.1.1.1	192.168.2.4	0x1d96	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:55.092847109 CEST	1.1.1.1	192.168.2.4	0xf71d	No error (0)	td.doubleclick.net		142.250.74.194	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:58.340076923 CEST	1.1.1.1	192.168.2.4	0x9f06	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:58.340076923 CEST	1.1.1.1	192.168.2.4	0x9f06	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:34:59.932718039 CEST	1.1.1.1	192.168.2.4	0x5e0a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:34:59.932718039 CEST	1.1.1.1	192.168.2.4	0x5e0a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:06.051234961 CEST	1.1.1.1	192.168.2.4	0xfeed	No error (0)	api.segment.io		44.234.198.184	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:06.051234961 CEST	1.1.1.1	192.168.2.4	0xfeed	No error (0)	api.segment.io		35.81.90.104	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:06.051234961 CEST	1.1.1.1	192.168.2.4	0xfeed	No error (0)	api.segment.io		34.223.74.168	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:06.148787975 CEST	1.1.1.1	192.168.2.4	0xef5e	No error (0)	my.wizardingworld.com		13.224.189.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:06.148787975 CEST	1.1.1.1	192.168.2.4	0xef5e	No error (0)	my.wizardingworld.com		13.224.189.58	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:06.148787975 CEST	1.1.1.1	192.168.2.4	0xef5e	No error (0)	my.wizardingworld.com		13.224.189.10	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:06.148787975 CEST	1.1.1.1	192.168.2.4	0xef5e	No error (0)	my.wizardingworld.com		13.224.189.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:07.025767088 CEST	1.1.1.1	192.168.2.4	0xfb59	No error (0)	stats.g.doubleclick.net		66.102.1.154	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:07.025767088 CEST	1.1.1.1	192.168.2.4	0xfb59	No error (0)	stats.g.doubleclick.net		66.102.1.155	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:07.025767088 CEST	1.1.1.1	192.168.2.4	0xfb59	No error (0)	stats.g.doubleclick.net		66.102.1.157	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:07.025767088 CEST	1.1.1.1	192.168.2.4	0xfb59	No error (0)	stats.g.doubleclick.net		66.102.1.156	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:07.411669970 CEST	1.1.1.1	192.168.2.4	0x526b	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:07.411669970 CEST	1.1.1.1	192.168.2.4	0x526b	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:07.411669970 CEST	1.1.1.1	192.168.2.4	0x526b	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:07.411669970 CEST	1.1.1.1	192.168.2.4	0x526b	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:09.561026096 CEST	1.1.1.1	192.168.2.4	0x6ba1	No error (0)	my.wizardingworld.com		13.224.189.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:09.561026096 CEST	1.1.1.1	192.168.2.4	0x6ba1	No error (0)	my.wizardingworld.com		13.224.189.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:09.561026096 CEST	1.1.1.1	192.168.2.4	0x6ba1	No error (0)	my.wizardingworld.com		13.224.189.58	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:09.561026096 CEST	1.1.1.1	192.168.2.4	0x6ba1	No error (0)	my.wizardingworld.com		13.224.189.10	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:12.070173979 CEST	1.1.1.1	192.168.2.4	0x7d3c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:35:12.070173979 CEST	1.1.1.1	192.168.2.4	0x7d3c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:14.914087057 CEST	1.1.1.1	192.168.2.4	0x9c00	Name error (3)	171.39.242.20.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Sep 27, 2024 17:35:17.657506943 CEST	1.1.1.1	192.168.2.4	0x4211	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:17.657541990 CEST	1.1.1.1	192.168.2.4	0x523a	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 17:35:18.499546051 CEST	1.1.1.1	192.168.2.4	0x78cd	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 17:35:18.499862909 CEST	1.1.1.1	192.168.2.4	0x1bab	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:18.539895058 CEST	1.1.1.1	192.168.2.4	0x7267	No error (0)	www.wizardingworld.com	www.wizardingworld.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:35:18.862920046 CEST	1.1.1.1	192.168.2.4	0xfbf	No error (0)	api.wizardingworld.com		65.9.66.17	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:18.862920046 CEST	1.1.1.1	192.168.2.4	0xfbf	No error (0)	api.wizardingworld.com		65.9.66.100	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:18.862920046 CEST	1.1.1.1	192.168.2.4	0xfbf	No error (0)	api.wizardingworld.com		65.9.66.4	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:18.862920046 CEST	1.1.1.1	192.168.2.4	0xfbf	No error (0)	api.wizardingworld.com		65.9.66.87	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:19.524385929 CEST	1.1.1.1	192.168.2.4	0x3e4	No error (0)	api.segment.io		35.160.35.184	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:19.524385929 CEST	1.1.1.1	192.168.2.4	0x3e4	No error (0)	api.segment.io		44.240.52.117	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:19.524385929 CEST	1.1.1.1	192.168.2.4	0x3e4	No error (0)	api.segment.io		35.155.246.37	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:22.154659986 CEST	1.1.1.1	192.168.2.4	0x1a74	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:32.081013918 CEST	1.1.1.1	192.168.2.4	0xd1a2	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:32.081013918 CEST	1.1.1.1	192.168.2.4	0xd1a2	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.842967987 CEST	1.1.1.1	192.168.2.4	0x516a	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:35:33.842967987 CEST	1.1.1.1	192.168.2.4	0x516a	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.102	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.842967987 CEST	1.1.1.1	192.168.2.4	0x516a	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.842967987 CEST	1.1.1.1	192.168.2.4	0x516a	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.16	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.842967987 CEST	1.1.1.1	192.168.2.4	0x516a	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.2	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.893652916 CEST	1.1.1.1	192.168.2.4	0x11ea	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.893652916 CEST	1.1.1.1	192.168.2.4	0x11ea	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.893652916 CEST	1.1.1.1	192.168.2.4	0x11ea	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.893652916 CEST	1.1.1.1	192.168.2.4	0x11ea	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.893652916 CEST	1.1.1.1	192.168.2.4	0x11ea	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.895590067 CEST	1.1.1.1	192.168.2.4	0xd6e4	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:35:33.895590067 CEST	1.1.1.1	192.168.2.4	0xd6e4	No error (0)	d296je7bbdd650.cloudfront.net		13.35.58.148	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.929843903 CEST	1.1.1.1	192.168.2.4	0xa094	No error (0)	stats.g.doubleclick.net		108.177.15.157	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.929843903 CEST	1.1.1.1	192.168.2.4	0xa094	No error (0)	stats.g.doubleclick.net		108.177.15.155	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.929843903 CEST	1.1.1.1	192.168.2.4	0xa094	No error (0)	stats.g.doubleclick.net		108.177.15.154	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.929843903 CEST	1.1.1.1	192.168.2.4	0xa094	No error (0)	stats.g.doubleclick.net		108.177.15.156	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:33.933288097 CEST	1.1.1.1	192.168.2.4	0xce8e	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 17:35:33.933288097 CEST	1.1.1.1	192.168.2.4	0xce8e	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:34.196876049 CEST	1.1.1.1	192.168.2.4	0xeb7d	No error (0)	sessions.bugsnag.com		35.190.88.7	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:34.204152107 CEST	1.1.1.1	192.168.2.4	0xf294	No error (0)	syndication.twitter.com		104.244.42.136	A (IP address)	IN (0x0001)	false
Sep 27, 2024 17:35:39.652077913 CEST	1.1.1.1	192.168.2.4	0x964e	No error (0)	analytics.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:47 UTC	536	OUT	GET /widgets.js HTTP/1.1 Host: platform.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wizardingworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 15:34:47 UTC	608	IN	HTTP/1.1 200 OK Connection: close Content-Length: 93065 Last-Modified: Mon, 11 Dec 2023 17:20:28 GMT ETag: "824beb891744db98ccbd3a456e59e0f7" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=1800 Content-Type: application/javascript; charset=utf-8 Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Accept-Ranges: bytes Date: Fri, 27 Sep 2024 15:34:47 GMT X-Served-By: cache-iad-kjyo7100044-IAD, cache-muc13944-MUC X-Cache: HIT, HIT Vary: Accept-Encoding TW-CDN: FT
2024-09-27 15:34:47 UTC	16384	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 26 26 28 2f 28 4d 53 49 45 20 28 5b 36 37 38 39 5d 7c 31 30 7c 31 31 29 29 7c 54 72 69 64 65 6e 74 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7c 7c 28 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 72 26 26 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 72 2e 77 69 64 67 65 74 73 26 26 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 72 2e 77 69 64 67 65 74 73 2e 6c 6f 61 64 65 64 26 26 77 69 6e 64 6f 77 2e 74 77 74 74 72 2e 77 69 64 67 65 74 73 2e 6c 6f 61 64 26 26 77 69 6e 64 6f 77 2e 74 77 74 74 72 2e 77 69 64 67 65 74 73 2e 6c 6f 61 64 28 29 2c 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 Data Ascii: Function&&Function.prototype&&Function.prototype.bind&&(/(MSIE ([6789]\|10\|11))\|Trident/.test(navigator.userAgent)\|\|(window.__twttr&&window.__twttr.widgets&&window.__twttr.widgets.loaded&&window.twttr.widgets.load&&window.twttr.widgets.load(),window.__twtt
2024-09-27 15:34:47 UTC	16384	IN	Data Raw: 65 29 29 2c 68 28 6f 2c 6e 29 2b 22 2e 68 74 6d 6c 22 29 7d 2c 65 6d 62 65 64 53 65 72 76 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 7c 7c 5b 5d 2c 6e 3d 6f 3b 72 65 74 75 72 6e 20 65 2e 75 6e 73 68 69 66 74 28 22 73 72 76 22 29 2c 68 28 6e 2c 65 29 7d 2c 65 76 65 6e 74 56 69 64 65 6f 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 75 6e 73 68 69 66 74 28 22 76 69 64 65 6f 2f 65 76 65 6e 74 22 29 2c 68 28 66 28 29 2c 65 29 7d 2c 67 72 69 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 75 6e 73 68 69 66 74 28 22 67 72 69 64 2f 63 6f 6c 6c 65 63 74 69 6f 6e 22 29 2c 68 28 66 28 29 2c 65 29 7d 2c 6d 6f 6d 65 6e 74 3a 66 75 Data Ascii: e)),h(o,n)+".html")},embedService:function(t){var e=t\|\|[],n=o;return e.unshift("srv"),h(n,e)},eventVideo:function(t){var e=t\|\|[];return e.unshift("video/event"),h(f(),e)},grid:function(t){var e=t\|\|[];return e.unshift("grid/collection"),h(f(),e)},moment:fu
2024-09-27 15:34:47 UTC	16384	IN	Data Raw: 6c 76 65 28 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 5b 6f 62 6a 65 63 74 20 50 72 6f 6d 69 73 65 5d 22 3d 3d 3d 6e 26 26 21 65 2e 63 61 73 74 29 72 65 74 75 72 6e 7d 74 2e 50 72 6f 6d 69 73 65 3d 55 7d 2c 55 2e 50 72 6f 6d 69 73 65 3d 55 2c 55 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 72 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 72 28 22 74 77 74 74 72 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 29 2c 69 3d 6e 28 30 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 69 2e 69 73 54 79 70 65 28 22 73 74 72 69 6e 67 22 2c 74 29 3f 74 2e 73 70 6c 69 74 28 22 2e 22 29 3a 69 2e 69 73 54 79 70 65 28 22 Data Ascii: lve())}catch(t){}if("[object Promise]"===n&&!e.cast)return}t.Promise=U},U.Promise=U,U},t.exports=r()},function(t,e,n){var r=n(47);t.exports=new r("twttr")},function(t,e,n){var r=n(1),i=n(0);function o(t){return i.isType("string",t)?t.split("."):i.isType("
2024-09-27 15:34:47 UTC	16384	IN	Data Raw: 3b 64 65 6c 65 74 65 20 74 68 69 73 2e 62 61 74 63 68 2e 68 61 73 68 5b 74 5d 2c 7e 72 26 26 6e 2e 73 70 6c 69 63 65 28 72 2c 31 29 7d 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 46 72 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 66 72 61 6d 65 73 2e 69 6e 64 65 78 4f 66 28 74 29 3b 7e 65 26 26 74 68 69 73 2e 66 72 61 6d 65 73 2e 73 70 6c 69 63 65 28 65 2c 31 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 68 65 64 75 6c 65 42 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 63 68 65 64 75 6c 65 28 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 62 61 74 63 68 2e 73 63 68 65 64 75 6c 65 64 3d 21 31 2c 74 2e 72 75 6e 42 61 74 63 68 28 29 7d 29 2c 74 68 69 73 Data Ascii: ;delete this.batch.hash[t],~r&&n.splice(r,1)}},o.prototype.clearFrame=function(t){var e=this.frames.indexOf(t);~e&&this.frames.splice(e,1)},o.prototype.scheduleBatch=function(){var t=this;this.schedule(0,function(){t.batch.scheduled=!1,t.runBatch()}),this
2024-09-27 15:34:47 UTC	16384	IN	Data Raw: 6c 29 3b 22 76 69 73 69 62 6c 65 22 3d 3d 74 2e 73 61 6e 64 62 6f 78 45 6c 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3f 74 2e 5f 77 69 64 74 68 3d 6e 2e 77 69 64 74 68 3a 28 65 3d 6c 28 74 2e 73 61 6e 64 62 6f 78 45 6c 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 77 69 64 74 68 2c 74 2e 5f 77 69 64 74 68 3d 4d 61 74 68 2e 6d 69 6e 28 6e 2e 77 69 64 74 68 2c 65 29 29 2c 74 2e 5f 68 65 69 67 68 74 3d 6e 2e 68 65 69 67 68 74 7d 29 7d 29 2c 74 2e 64 65 66 69 6e 65 28 22 5f 64 69 64 52 65 73 69 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 68 69 73 2e 5f 72 65 73 69 7a 65 48 61 6e 64 6c 65 72 73 2e 73 6c 69 63 65 28 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 75 70 64 61 74 65 43 61 63 68 65 64 44 69 6d Data Ascii: l);"visible"==t.sandboxEl.style.visibility?t._width=n.width:(e=l(t.sandboxEl.parentElement).width,t._width=Math.min(n.width,e)),t._height=n.height})}),t.define("_didResize",function(){var t=this,e=this._resizeHandlers.slice(0);return this._updateCachedDim
2024-09-27 15:34:47 UTC	11145	IN	Data Raw: 6e 65 72 2d 73 63 72 65 65 6e 2d 6e 61 6d 65 22 29 2c 6c 69 73 74 4f 77 6e 65 72 55 73 65 72 49 64 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 69 73 74 2d 6f 77 6e 65 72 2d 69 64 22 29 2c 6c 69 73 74 49 64 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 69 73 74 2d 69 64 22 29 2c 6c 69 73 74 53 6c 75 67 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 69 73 74 2d 73 6c 75 67 22 29 2c 63 75 73 74 6f 6d 54 69 6d 65 6c 69 6e 65 49 64 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 75 73 74 6f 6d 2d 74 69 6d 65 6c 69 6e 65 2d 69 64 22 29 2c 73 74 61 74 69 63 43 6f 6e 74 65 6e 74 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 74 61 74 69 63 2d 63 6f 6e Data Ascii: ner-screen-name"),listOwnerUserId:t.getAttribute("data-list-owner-id"),listId:t.getAttribute("data-list-id"),listSlug:t.getAttribute("data-list-slug"),customTimelineId:t.getAttribute("data-custom-timeline-id"),staticContent:t.getAttribute("data-static-con

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:48 UTC	551	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wizardingworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 15:34:48 UTC	903	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 15:34:48 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: jwlUUXc1HMPClYXMpY+NPQ== Last-Modified: Tue, 24 Sep 2024 06:41:29 GMT x-ms-request-id: d894fb67-d01e-0063-14b2-0ed5af000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Age: 4 Expires: Sat, 28 Sep 2024 15:34:48 GMT Cache-Control: public, max-age=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9c8f5be9c37c9a-EWR
2024-09-27 15:34:48 UTC	466	IN	Data Raw: 35 32 65 30 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52e0var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-09-27 15:34:48 UTC	1369	IN	Data Raw: 22 2c 22 49 54 22 2c 22 43 59 22 2c 22 4c 56 22 2c 22 4c 54 22 2c 22 4c 55 22 2c 22 48 55 22 2c 22 4d 54 22 2c 22 4e 4c 22 2c 22 41 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 Data Ascii: ","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMig
2024-09-27 15:34:48 UTC	1369	IN	Data Raw: 6e 67 74 68 3b 2b 2b 6e 29 69 66 28 2f 3a 2f 2e 74 65 73 74 28 69 5b 6e 5d 29 29 7b 69 66 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 Data Ascii: ngth;++n)if(/:/.test(i[n])){if(!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttrib
2024-09-27 15:34:48 UTC	1369	IN	Data Raw: 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 73 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 Data Ascii: tener("message",s.messageHandler,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(va
2024-09-27 15:34:48 UTC	1369	IN	Data Raw: 20 6e 7c 7c 28 69 2e 62 6f 64 79 3f 28 28 65 3d 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 Data Ascii: n\|\|(i.body?((e=i.createElement("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.eve
2024-09-27 15:34:48 UTC	1369	IN	Data Raw: 68 69 73 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 28 29 2c 74 68 69 73 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 28 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 Data Ascii: his.fetchBannerSDKDependency(),this.captureNonce()},h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this
2024-09-27 15:34:48 UTC	1369	IN	Data Raw: 6f 77 3b 69 2e 4f 6e 65 54 72 75 73 74 26 26 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 3f 28 69 3d 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 Data Ascii: ow;i.OneTrust&&i.OneTrust.geolocationResponse?(i=i.OneTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.spli
2024-09-27 15:34:48 UTC	1369	IN	Data Raw: 28 22 64 61 74 61 2d 64 4c 61 79 65 72 2d 6e 61 6d 65 22 29 7c 7c 22 64 61 74 61 4c 61 79 65 72 22 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f Data Ascii: ("data-dLayer-name")\|\|"dataLayer"}},h.prototype.setGeoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionSto
2024-09-27 15:34:48 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 65 28 29 7d 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 52 65 67 69 6f 6e 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c Data Ascii: ion(){e()})},h.prototype.getRegionSet=function(t){var e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.Rul
2024-09-27 15:34:49 UTC	1369	IN	Data Raw: 63 6f 70 65 3d 21 30 2c 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 29 3a 28 70 2e 68 61 73 49 41 42 47 6c 6f 62 61 6c 53 63 6f 70 65 3d 21 31 2c 70 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 Data Ascii: cope=!0,p.isStubReady=!1):(p.hasIABGlobalScope=!1,p.IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";"

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:49 UTC	792	OUT	GET /widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=https%3A%2F%2Fwww.wizardingworld.com HTTP/1.1 Host: platform.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.wizardingworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 15:34:49 UTC	601	IN	HTTP/1.1 200 OK Connection: close Content-Length: 327164 Last-Modified: Mon, 11 Dec 2023 17:19:49 GMT ETag: "81267302efdfb3e4524a22631a8fc99e" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=315360000 Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Accept-Ranges: bytes Date: Fri, 27 Sep 2024 15:34:49 GMT X-Served-By: cache-iad-kjyo7100176-IAD, cache-muc13951-MUC X-Cache: HIT, HIT Vary: Accept-Encoding TW-CDN: FT
2024-09-27 15:34:49 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 6d 65 74 61 20 63 68 61 72 74 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 54 77 69 74 74 65 72 20 57 69 64 67 65 74 20 49 66 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 46 75 6e 63 74 69 6f 6e 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 26 26 28 2f 28 4d 53 49 45 20 28 5b 36 37 38 39 5d 7c 31 30 7c 31 31 29 29 7c 54 72 69 64 65 6e 74 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 Data Ascii: <!DOCTYPE HTML><meta chartset="utf-8"><title>Twitter Widget Iframe</title><body><script type="text/javascript">!function(){Function&&Function.prototype&&Function.prototype.bind&&(/(MSIE ([6789]\|10\|11))\|Trident/.test(navigator.userAgent)\|\|function(e){v
2024-09-27 15:34:49 UTC	16384	IN	Data Raw: 70 2c 47 29 7c 30 2c 69 3d 28 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 70 2c 5a 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 62 2c 47 29 7c 30 2c 6f 3d 6f 2b 4d 61 74 68 2e 69 6d 75 6c 28 62 2c 5a 29 7c 30 3b 76 61 72 20 5f 65 3d 28 63 2b 28 6e 3d 6e 2b 4d 61 74 68 2e 69 6d 75 6c 28 75 2c 51 29 7c 30 29 7c 30 29 2b 28 28 38 31 39 31 26 28 69 3d 28 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 75 2c 65 65 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 64 2c 51 29 7c 30 29 29 3c 3c 31 33 29 7c 30 3b 63 3d 28 28 6f 3d 6f 2b 4d 61 74 68 2e 69 6d 75 6c 28 64 2c 65 65 29 7c 30 29 2b 28 69 3e 3e 3e 31 33 29 7c 30 29 2b 28 5f 65 3e 3e 3e 32 36 29 7c 30 2c 5f 65 26 3d 36 37 31 30 38 38 36 33 2c 6e 3d 4d 61 74 68 2e 69 6d 75 6c 28 6b 2c 7a 29 2c 69 3d 28 69 3d 4d 61 74 Data Ascii: p,G)\|0,i=(i=i+Math.imul(p,Z)\|0)+Math.imul(b,G)\|0,o=o+Math.imul(b,Z)\|0;var _e=(c+(n=n+Math.imul(u,Q)\|0)\|0)+((8191&(i=(i=i+Math.imul(u,ee)\|0)+Math.imul(d,Q)\|0))<<13)\|0;c=((o=o+Math.imul(d,ee)\|0)+(i>>>13)\|0)+(_e>>>26)\|0,_e&=67108863,n=Math.imul(k,z),i=(i=Mat
2024-09-27 15:34:49 UTC	16384	IN	Data Raw: 21 3d 3d 6e 2e 6e 65 67 61 74 69 76 65 3b 29 64 2d 2d 2c 6e 2e 6e 65 67 61 74 69 76 65 3d 30 2c 6e 2e 5f 69 73 68 6c 6e 73 75 62 6d 75 6c 28 69 2c 31 2c 75 29 2c 6e 2e 69 73 5a 65 72 6f 28 29 7c 7c 28 6e 2e 6e 65 67 61 74 69 76 65 5e 3d 31 29 3b 66 26 26 28 66 2e 77 6f 72 64 73 5b 75 5d 3d 64 29 7d 72 65 74 75 72 6e 20 66 26 26 66 2e 73 74 72 69 70 28 29 2c 6e 2e 73 74 72 69 70 28 29 2c 22 64 69 76 22 21 3d 3d 74 26 26 30 21 3d 3d 72 26 26 6e 2e 69 75 73 68 72 6e 28 72 29 2c 7b 64 69 76 3a 66 7c 7c 6e 75 6c 6c 2c 6d 6f 64 3a 6e 7d 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 76 6d 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 6e 28 21 65 2e 69 73 5a 65 72 6f 28 29 29 2c 74 68 69 73 2e 69 73 5a 65 72 6f 28 29 3f 7b 64 69 Data Ascii: !==n.negative;)d--,n.negative=0,n._ishlnsubmul(i,1,u),n.isZero()\|\|(n.negative^=1);f&&(f.words[u]=d)}return f&&f.strip(),n.strip(),"div"!==t&&0!==r&&n.iushrn(r),{div:f\|\|null,mod:n}},o.prototype.divmod=function(e,t,r){return n(!e.isZero()),this.isZero()?{di
2024-09-27 15:34:49 UTC	16384	IN	Data Raw: 6f 66 20 65 29 69 66 28 74 29 7b 69 66 28 22 68 65 78 22 3d 3d 3d 74 29 66 6f 72 28 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 61 2d 7a 30 2d 39 5d 2b 2f 67 69 2c 22 22 29 29 2e 6c 65 6e 67 74 68 25 32 21 3d 30 26 26 28 65 3d 22 30 22 2b 65 29 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 32 29 72 2e 70 75 73 68 28 70 61 72 73 65 49 6e 74 28 65 5b 6e 5d 2b 65 5b 6e 2b 31 5d 2c 31 36 29 29 7d 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 29 2c 6f 3d 69 3e 3e 38 2c 61 3d 32 35 35 26 69 3b 6f 3f 72 2e 70 75 73 68 28 6f 2c 61 29 3a 72 2e 70 75 73 68 28 61 29 7d 65 6c 73 65 20 66 6f 72 28 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b Data Ascii: of e)if(t){if("hex"===t)for((e=e.replace(/[^a-z0-9]+/gi,"")).length%2!=0&&(e="0"+e),n=0;n<e.length;n+=2)r.push(parseInt(e[n]+e[n+1],16))}else for(var n=0;n<e.length;n++){var i=e.charCodeAt(n),o=i>>8,a=255&i;o?r.push(o,a):r.push(a)}else for(n=0;n<e.length;
2024-09-27 15:34:49 UTC	16384	IN	Data Raw: 2d 31 36 6c 65 22 3a 72 65 74 75 72 6e 20 32 2a 72 3b 63 61 73 65 22 68 65 78 22 3a 72 65 74 75 72 6e 20 72 3e 3e 3e 31 3b 63 61 73 65 22 62 61 73 65 36 34 22 3a 72 65 74 75 72 6e 20 7a 28 65 29 2e 6c 65 6e 67 74 68 3b 64 65 66 61 75 6c 74 3a 69 66 28 6e 29 72 65 74 75 72 6e 20 71 28 65 29 2e 6c 65 6e 67 74 68 3b 74 3d 28 22 22 2b 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 3d 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 65 5b 74 5d 3b 65 5b 74 5d 3d 65 5b 72 5d 2c 65 5b 72 5d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 2c 72 2c 6e 2c 69 29 7b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 2d 31 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 3f 28 6e 3d 72 2c 72 Data Ascii: -16le":return 2*r;case"hex":return r>>>1;case"base64":return z(e).length;default:if(n)return q(e).length;t=(""+t).toLowerCase(),n=!0}}function b(e,t,r){var n=e[t];e[t]=e[r],e[r]=n}function y(e,t,r,n,i){if(0===e.length)return-1;if("string"==typeof r?(n=r,r
2024-09-27 15:34:49 UTC	16384	IN	Data Raw: 39 2c 31 39 31 2c 31 38 39 29 3b 69 66 28 69 3d 6e 75 6c 6c 2c 72 3c 31 32 38 29 7b 69 66 28 28 74 2d 3d 31 29 3c 30 29 62 72 65 61 6b 3b 6f 2e 70 75 73 68 28 72 29 7d 65 6c 73 65 20 69 66 28 72 3c 32 30 34 38 29 7b 69 66 28 28 74 2d 3d 32 29 3c 30 29 62 72 65 61 6b 3b 6f 2e 70 75 73 68 28 72 3e 3e 36 7c 31 39 32 2c 36 33 26 72 7c 31 32 38 29 7d 65 6c 73 65 20 69 66 28 72 3c 36 35 35 33 36 29 7b 69 66 28 28 74 2d 3d 33 29 3c 30 29 62 72 65 61 6b 3b 6f 2e 70 75 73 68 28 72 3e 3e 31 32 7c 32 32 34 2c 72 3e 3e 36 26 36 33 7c 31 32 38 2c 36 33 26 72 7c 31 32 38 29 7d 65 6c 73 65 7b 69 66 28 21 28 72 3c 31 31 31 34 31 31 32 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 63 6f 64 65 20 70 6f 69 6e 74 22 29 3b 69 66 28 28 74 2d Data Ascii: 9,191,189);if(i=null,r<128){if((t-=1)<0)break;o.push(r)}else if(r<2048){if((t-=2)<0)break;o.push(r>>6\|192,63&r\|128)}else if(r<65536){if((t-=3)<0)break;o.push(r>>12\|224,r>>6&63\|128,63&r\|128)}else{if(!(r<1114112))throw new Error("Invalid code point");if((t-
2024-09-27 15:34:49 UTC	16384	IN	Data Raw: 73 74 65 6e 65 72 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 7c 7c 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 61 3d 28 72 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 29 2e 6c 65 6e 67 74 68 2c 6f 3d 2d 31 2c 72 3d 3d 3d 74 7c 7c 6e 28 72 2e 6c 69 73 74 65 6e 65 72 29 26 26 72 2e 6c 69 73 74 65 6e 65 72 3d 3d 3d 74 29 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 26 26 74 68 69 73 2e 65 6d 69 74 28 22 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 22 2c 65 2c 74 29 3b 65 6c 73 65 20 69 66 28 69 28 72 29 29 7b 66 6f 72 28 66 3d 61 3b Data Ascii: stener must be a function");if(!this._events\|\|!this._events[e])return this;if(a=(r=this._events[e]).length,o=-1,r===t\|\|n(r.listener)&&r.listener===t)delete this._events[e],this._events.removeListener&&this.emit("removeListener",e,t);else if(i(r)){for(f=a;
2024-09-27 15:34:49 UTC	16384	IN	Data Raw: 2c 6e 2e 68 6d 61 63 3d 72 28 31 37 36 29 2c 6e 2e 73 68 61 31 3d 6e 2e 73 68 61 2e 73 68 61 31 2c 6e 2e 73 68 61 32 35 36 3d 6e 2e 73 68 61 2e 73 68 61 32 35 36 2c 6e 2e 73 68 61 32 32 34 3d 6e 2e 73 68 61 2e 73 68 61 32 32 34 2c 6e 2e 73 68 61 33 38 34 3d 6e 2e 73 68 61 2e 73 68 61 33 38 34 2c 6e 2e 73 68 61 35 31 32 3d 6e 2e 73 68 61 2e 73 68 61 35 31 32 2c 6e 2e 72 69 70 65 6d 64 31 36 30 3d 6e 2e 72 69 70 65 6d 64 2e 72 69 70 65 6d 64 31 36 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 3b 65 2e 65 78 70 6f 72 74 73 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 72 2e 63 61 6c 6c 28 65 29 Data Ascii: ,n.hmac=r(176),n.sha1=n.sha.sha1,n.sha256=n.sha.sha256,n.sha224=n.sha.sha224,n.sha384=n.sha.sha384,n.sha512=n.sha.sha512,n.ripemd160=n.ripemd.ripemd160},function(e,t){var r={}.toString;e.exports=Array.isArray\|\|function(e){return"[object Array]"==r.call(e)
2024-09-27 15:34:49 UTC	16384	IN	Data Raw: 69 73 2e 5f 77 2c 6e 3d 30 7c 74 68 69 73 2e 5f 61 2c 69 3d 30 7c 74 68 69 73 2e 5f 62 2c 6f 3d 30 7c 74 68 69 73 2e 5f 63 2c 66 3d 30 7c 74 68 69 73 2e 5f 64 2c 73 3d 30 7c 74 68 69 73 2e 5f 65 2c 70 3d 30 7c 74 68 69 73 2e 5f 66 2c 62 3d 30 7c 74 68 69 73 2e 5f 67 2c 79 3d 30 7c 74 68 69 73 2e 5f 68 2c 76 3d 30 3b 76 3c 31 36 3b 2b 2b 76 29 72 5b 76 5d 3d 65 2e 72 65 61 64 49 6e 74 33 32 42 45 28 34 2a 76 29 3b 66 6f 72 28 3b 76 3c 36 34 3b 2b 2b 76 29 72 5b 76 5d 3d 30 7c 28 28 28 74 3d 72 5b 76 2d 32 5d 29 3e 3e 3e 31 37 7c 74 3c 3c 31 35 29 5e 28 74 3e 3e 3e 31 39 7c 74 3c 3c 31 33 29 5e 74 3e 3e 3e 31 30 29 2b 72 5b 76 2d 37 5d 2b 6c 28 72 5b 76 2d 31 35 5d 29 2b 72 5b 76 2d 31 36 5d 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 36 34 3b 2b 2b 67 29 Data Ascii: is._w,n=0\|this._a,i=0\|this._b,o=0\|this._c,f=0\|this._d,s=0\|this._e,p=0\|this._f,b=0\|this._g,y=0\|this._h,v=0;v<16;++v)r[v]=e.readInt32BE(4*v);for(;v<64;++v)r[v]=0\|(((t=r[v-2])>>>17\|t<<15)^(t>>>19\|t<<13)^t>>>10)+r[v-7]+l(r[v-15])+r[v-16];for(var g=0;g<64;++g)
2024-09-27 15:34:49 UTC	16384	IN	Data Raw: 29 72 65 74 75 72 6e 21 31 7d 7d 72 65 74 75 72 6e 21 30 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 44 69 76 69 73 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 62 69 74 4c 65 6e 67 74 68 28 29 2c 69 3d 6e 2e 6d 6f 6e 74 28 65 29 2c 6f 3d 6e 65 77 20 6e 28 31 29 2e 74 6f 52 65 64 28 69 29 3b 74 7c 7c 28 74 3d 4d 61 74 68 2e 6d 61 78 28 31 2c 72 2f 34 38 7c 30 29 29 3b 66 6f 72 28 76 61 72 20 61 3d 65 2e 73 75 62 6e 28 31 29 2c 66 3d 30 3b 21 61 2e 74 65 73 74 6e 28 66 29 3b 66 2b 2b 29 3b 66 6f 72 28 76 61 72 20 73 3d 65 2e 73 68 72 6e 28 66 29 2c 63 3d 61 2e 74 6f 52 65 64 28 69 29 3b 74 3e 30 3b 74 2d 2d 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 5f 72 61 6e 64 72 61 6e 67 65 28 6e 65 77 20 6e 28 32 29 2c 61 29 2c 75 3d Data Ascii: )return!1}}return!0},o.prototype.getDivisor=function(e,t){var r=e.bitLength(),i=n.mont(e),o=new n(1).toRed(i);t\|\|(t=Math.max(1,r/48\|0));for(var a=e.subn(1),f=0;!a.testn(f);f++);for(var s=e.shrn(f),c=a.toRed(i);t>0;t--){var h=this._randrange(new n(2),a),u=

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:49 UTC	645	OUT	GET /consent/8458f511-3cee-4c34-be7d-667f562a8ae1/8458f511-3cee-4c34-be7d-667f562a8ae1.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wizardingworld.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wizardingworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 15:34:49 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 15:34:49 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8c9c8f61ddbb238e-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 78445 Cache-Control: public, max-age=86400 Expires: Sat, 28 Sep 2024 15:34:49 GMT Last-Modified: Wed, 25 Sep 2024 17:46:19 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: NCzgmijxUJwf3xh7wdCGdg== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 583f22d3-201e-007d-1072-0f0f42000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-09-27 15:34:49 UTC	387	IN	Data Raw: 31 63 62 64 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 39 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 38 34 35 38 Data Ascii: 1cbd{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202409.1.0","OptanonDataJSON":"8458
2024-09-27 15:34:49 UTC	1369	IN	Data Raw: 65 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 73 2d 64 61 74 61 2e 6f 6e 65 74 72 75 73 74 2e 69 6f 2f 62 61 6e 6e 65 72 73 64 6b 2f 76 31 2f 64 6f 6d 61 69 6e 67 72 6f 75 70 63 68 65 63 6b 22 2c 22 52 75 6c 65 53 65 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 39 32 32 61 34 33 2d 32 31 61 35 2d 37 35 38 33 2d 62 35 65 65 2d 63 64 63 39 64 66 61 38 31 61 64 32 22 2c 22 4e 61 6d 65 22 3a 22 44 4e 53 6f 53 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 5d 2c 22 53 74 61 74 65 73 22 3a 7b 22 75 73 22 3a 5b 22 76 61 22 2c 22 6d 74 22 2c 22 63 6f 22 2c 22 63 74 22 2c 22 74 78 22 2c 22 63 61 22 2c 22 6f 72 22 2c 22 75 74 22 5d 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 66 61 75 6c Data Ascii: eckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"01922a43-21a5-7583-b5ee-cdc9dfa81ad2","Name":"DNSoS","Countries":[],"States":{"us":["va","mt","co","ct","tx","ca","or","ut"]},"LanguageSwitcherPlaceholder":{"defaul
2024-09-27 15:34:49 UTC	1369	IN	Data Raw: 22 63 6f 22 2c 22 63 72 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 6e 6f 22 3a 22 6e 6f 22 2c 22 64 65 22 3a 22 64 65 22 2c 22 72 75 22 3a 22 72 75 22 2c 22 66 69 22 3a 22 66 69 22 2c 22 70 74 22 3a 22 70 74 22 2c 22 62 67 22 3a 22 62 67 22 2c 22 68 72 22 3a 22 68 72 22 2c 22 66 72 22 3a 22 66 72 22 2c 22 68 75 22 3a 22 68 75 22 2c 22 64 65 66 61 75 6c 74 22 3a 22 65 6e 22 2c 22 73 6b 22 3a 22 73 6b 22 2c 22 73 6c 22 3a 22 73 6c 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 6b 6f 22 3a 22 6b 6f 22 2c 22 70 74 2d 62 72 22 3a 22 70 74 2d 62 72 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 65 73 2d 6d 78 22 3a 22 65 73 2d 6d 78 22 2c 22 65 73 22 3a 22 65 73 22 2c 22 63 73 22 Data Ascii: "co","cr"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","de":"de","ru":"ru","fi":"fi","pt":"pt","bg":"bg","hr":"hr","fr":"fr","hu":"hu","default":"en","sk":"sk","sl":"sl","sv":"sv","ko":"ko","pt-br":"pt-br","it":"it","es-mx":"es-mx","es":"es","cs"
2024-09-27 15:34:49 UTC	1369	IN	Data Raw: 2d 38 36 31 34 36 61 65 36 35 62 30 62 22 2c 22 4e 61 6d 65 22 3a 22 47 44 50 52 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 6e 6f 22 2c 22 62 65 22 2c 22 66 69 22 2c 22 70 74 22 2c 22 62 67 22 2c 22 64 6b 22 2c 22 6c 74 22 2c 22 6c 75 22 2c 22 6c 76 22 2c 22 68 72 22 2c 22 68 75 22 2c 22 73 65 22 2c 22 73 69 22 2c 22 6d 63 22 2c 22 73 6b 22 2c 22 6d 66 22 2c 22 73 6d 22 2c 22 67 62 22 2c 22 79 74 22 2c 22 69 65 22 2c 22 67 66 22 2c 22 65 65 22 2c 22 6d 71 22 2c 22 6d 74 22 2c 22 67 70 22 2c 22 69 73 22 2c 22 67 72 22 2c 22 69 74 22 2c 22 65 73 22 2c 22 72 65 22 2c 22 63 79 22 2c 22 61 78 22 2c 22 63 7a 22 2c 22 70 6c 22 2c 22 72 6f 22 2c 22 6c 69 22 2c 22 6e 6c 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 Data Ascii: -86146ae65b0b","Name":"GDPR","Countries":["no","be","fi","pt","bg","dk","lt","lu","lv","hr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","gr","it","es","re","cy","ax","cz","pl","ro","li","nl"],"States":{},"LanguageSwitch
2024-09-27 15:34:49 UTC	1369	IN	Data Raw: 65 63 22 2c 22 75 73 22 2c 22 65 67 22 2c 22 65 68 22 2c 22 75 7a 22 2c 22 76 61 22 2c 22 65 72 22 2c 22 76 63 22 2c 22 65 74 22 2c 22 76 67 22 2c 22 76 69 22 2c 22 76 6e 22 2c 22 76 75 22 2c 22 66 6a 22 2c 22 66 6b 22 2c 22 66 6d 22 2c 22 66 6f 22 2c 22 77 66 22 2c 22 67 61 22 2c 22 77 73 22 2c 22 67 64 22 2c 22 67 65 22 2c 22 67 67 22 2c 22 67 68 22 2c 22 67 69 22 2c 22 67 6c 22 2c 22 67 6d 22 2c 22 67 6e 22 2c 22 67 71 22 2c 22 67 73 22 2c 22 67 74 22 2c 22 67 75 22 2c 22 67 77 22 2c 22 67 79 22 2c 22 78 6b 22 2c 22 68 6b 22 2c 22 68 6d 22 2c 22 68 6e 22 2c 22 68 74 22 2c 22 79 65 22 2c 22 69 64 22 2c 22 69 6c 22 2c 22 69 6d 22 2c 22 69 6e 22 2c 22 69 6f 22 2c 22 7a 61 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 Data Ascii: ec","us","eg","eh","uz","va","er","vc","et","vg","vi","vn","vu","fj","fk","fm","fo","wf","ga","ws","gd","ge","gg","gh","gi","gl","gm","gn","gq","gs","gt","gu","gw","gy","xk","hk","hm","hn","ht","ye","id","il","im","in","io","za","iq","ir","zm","je","zw","
2024-09-27 15:34:49 UTC	1369	IN	Data Raw: 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 32 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 39 2d 32 35 54 31 37 3a 34 36 3a 31 38 2e 34 30 32 39 35 39 39 30 30 22 2c 22 75 70 64 61 74 65 64 54 Data Ascii: reen":"1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2Data.json"},"Iab2V2Data":{"cookieVersion":"1","createdTime":"2024-09-25T17:46:18.402959900","updatedT
2024-09-27 15:34:49 UTC	133	IN	Data Raw: 72 6d 53 72 63 55 72 6c 22 3a 22 22 2c 22 57 65 62 46 6f 72 6d 57 6f 72 6b 65 72 55 72 6c 22 3a 22 22 2c 22 47 70 70 44 61 74 61 22 3a 7b 22 63 6d 70 49 64 22 3a 22 32 38 22 7d 2c 22 41 75 74 68 65 6e 74 69 63 61 74 65 64 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 43 44 4e 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 22 7d 0d 0a Data Ascii: rmSrcUrl":"","WebFormWorkerUrl":"","GppData":{"cmpId":"28"},"AuthenticatedConsent":false,"CDNLocation":"https://cdn.cookielaw.org"}
2024-09-27 15:34:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:50 UTC	620	OUT	GET /settings?session_id=41292341a9ae7a7a21edac7812eb81f6b584c46c HTTP/1.1 Host: syndication.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://platform.twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://platform.twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 15:34:50 UTC	567	IN	HTTP/1.1 200 OK date: Fri, 27 Sep 2024 15:34:50 GMT perf: 7402827104 vary: Origin server: tsa_b content-type: application/json; charset=utf-8 cache-control: must-revalidate, max-age=600 last-modified: Fri, 27 Sep 2024 15:34:50 GMT content-length: 870 x-transaction-id: 2498e54ff312e81f strict-transport-security: max-age=631138519 access-control-allow-origin: https://platform.twitter.com access-control-allow-credentials: true x-response-time: 7 x-connection-hash: 8bb10a5ac6160c6ba9529f74847e907affec0986c922a2cadd73f66d2c9ee1ce connection: close
2024-09-27 15:34:50 UTC	870	IN	Data Raw: 7b 22 73 68 6f 75 6c 64 5f 6f 62 74 61 69 6e 5f 63 6f 6f 6b 69 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 74 66 77 5f 74 69 6d 65 6c 69 6e 65 5f 6c 69 73 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 5b 5d 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 66 6f 6c 6c 6f 77 65 72 5f 63 6f 75 6e 74 5f 73 75 6e 73 65 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 74 72 75 65 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 74 77 65 65 74 5f 65 64 69 74 5f 62 61 63 6b 65 6e 64 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 72 65 66 73 72 63 5f 73 65 73 73 69 6f 6e 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 Data Ascii: {"should_obtain_cookie_consent":false,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","vers

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.wizardingworld.com/sorting-hat

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Windows Analysis Report
https://www.wizardingworld.com/sorting-hat

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:50 UTC	575	OUT	OPTIONS / HTTP/1.1 Host: sessions.bugsnag.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: bugsnag-api-key,bugsnag-payload-version,bugsnag-sent-at,content-type Origin: https://www.wizardingworld.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.wizardingworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 15:34:50 UTC	427	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, Content-Type, Accept, Authorization, User-Agent, Referer, X-Forwarded-For, Bugsnag-Api-Key, Bugsnag-Payload-Version, Bugsnag-Sent-At, Bugsnag-Integrity Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: * Date: Fri, 27 Sep 2024 15:34:50 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:50 UTC	611	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.wizardingworld.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wizardingworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 15:34:50 UTC	370	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 15:34:50 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c9c8f67ba637d06-EWR
2024-09-27 15:34:50 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:50 UTC	536	OUT	OPTIONS /v3 HTTP/1.1 Host: api.wizardingworld.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://www.wizardingworld.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.wizardingworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 15:34:51 UTC	743	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: close Date: Fri, 27 Sep 2024 15:34:50 GMT Access-Control-Allow-Credentials: true x-amzn-RequestId: 6fe02e05-10d5-4143-a31f-0fbbea377d66 Access-Control-Allow-Origin: https://www.wizardingworld.com Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token x-amz-apigw-id: exWIQE6FDoEEu3w= Access-Control-Allow-Methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT X-Amzn-Trace-Id: Root=1-66f6d09a-30060d94153295603993f6ec X-Cache: Miss from cloudfront Via: 1.1 1c5b98f7bd5001d6fe1040daa237afc6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: oqLMI3uFWV3m86uNwHOR-xK8XRukCUvA7B1bKMedqbXwPjgY-ZYNMg==

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 15:34:51 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=4251 Date: Fri, 27 Sep 2024 15:34:51 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:51 UTC	738	OUT	POST / HTTP/1.1 Host: sessions.bugsnag.com Connection: keep-alive Content-Length: 490 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 Bugsnag-Api-Key: 779c2d87262782f275d498bd9eb2cfa5 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Bugsnag-Payload-Version: 1 Bugsnag-Sent-At: 2024-09-27T15:34:49.322Z sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wizardingworld.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wizardingworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 15:34:51 UTC	490	OUT	Data Raw: 7b 22 6e 6f 74 69 66 69 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 42 75 67 73 6e 61 67 20 4a 61 76 61 53 63 72 69 70 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 32 32 2e 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 62 75 67 73 6e 61 67 2f 62 75 67 73 6e 61 67 2d 6a 73 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 Data Ascii: {"notifier":{"name":"Bugsnag JavaScript","version":"7.22.4","url":"https://github.com/bugsnag/bugsnag-js"},"device":{"locale":"en-US","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537
2024-09-27 15:34:51 UTC	299	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Origin: * Bugsnag-Session-Uuid: 0c9ddc64-3bdf-41bf-9b85-b453736e9044 Content-Type: application/json Date: Fri, 27 Sep 2024 15:34:51 GMT Content-Length: 21 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 15:34:51 UTC	21	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 61 63 63 65 70 74 65 64 22 7d Data Ascii: {"status":"accepted"}

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:51 UTC	564	OUT	GET /scripttemplates/202409.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wizardingworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 15:34:51 UTC	859	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 15:34:51 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: Mq8sWt7aN99kE/VZ97+T8Q== Last-Modified: Thu, 26 Sep 2024 06:47:49 GMT x-ms-request-id: fcdfc748-101e-0031-4180-10c85d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 48985 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9c8f6cefb29e08-EWR
2024-09-27 15:34:51 UTC	510	IN	Data Raw: 37 63 34 35 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 39 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 44 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c45/** * onetrust-banner-sdk * v202409.1.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var D=function(e,t){return(D=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-09-27 15:34:51 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 Data Ascii: ull===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(th
2024-09-27 15:34:51 UTC	1369	IN	Data Raw: 26 6c 2e 6c 61 62 65 6c 3c 61 5b 31 5d 29 6c 2e 6c 61 62 65 6c 3d 61 5b 31 5d 2c 61 3d 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 Data Ascii: &l.label<a[1])l.label=a[1],a=t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(
2024-09-27 15:34:51 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 6f 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 7a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 4a 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 51 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 4a 28 74 29 7d 63 61 74 63 68 28 65 29 7b 59 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f Data Ascii: nction"==typeof e)){var o=e.then;if(e instanceof z)return t._state=3,t._value=e,void J(t);if("function"==typeof o)return void Q((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,J(t)}catch(e){Y(t,e)}var n,r}function Y(e,t){e._state=2,e._
2024-09-27 15:34:51 UTC	1369	IN	Data Raw: 66 20 65 29 29 7b 76 61 72 20 6e 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 7a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 Data Ascii: f e)){var n=e.then;if("function"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},z.resolve=function(t){return t&&"object"==typeof t&&t.constructor===z?t:new z(function(e){e(t)})},z.reject=function(o){re
2024-09-27 15:34:51 UTC	1369	IN	Data Raw: 7c 7c 65 21 3d 65 26 26 73 21 3d 73 29 72 65 74 75 72 6e 21 30 3b 69 2b 2b 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 Data Ascii: \|\|e!=e&&s!=s)return!0;i++}}return!1},writable:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length
2024-09-27 15:34:51 UTC	1369	IN	Data Raw: 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 Data Ascii: },writable:!0,configurable:!0})},Z.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t
2024-09-27 15:34:51 UTC	1369	IN	Data Raw: 2e 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 3d 35 5d 3d 22 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 Data Ascii: .BannerSaveSettings=5]="BannerSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=ee=ee\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=te=te\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConse
2024-09-27 15:34:51 UTC	1369	IN	Data Raw: 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 5d 3d 34 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 Data Ascii: reference Center - Allow All"]=4]="Preference Center - Allow All",e[e["Preference Center - Reject All"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed"
2024-09-27 15:34:51 UTC	1369	IN	Data Raw: 6e 61 6c 69 7a 61 74 69 6f 6e 3d 22 61 64 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 2c 65 2e 72 65 67 69 6f 6e 3d 22 72 65 67 69 6f 6e 22 2c 65 2e 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 3d 22 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 22 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b Data Ascii: nalization="ad_personalization",e.region="region",e.wait_for_update="wait_for_update",(e=Ae=Ae\|\|{}).granted="granted",e.denied="denied",0,(e=Ie=Ie\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Le=Le\|\|{}).cookies="cook

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:51 UTC	641	OUT	POST /v3 HTTP/1.1 Host: api.wizardingworld.com Connection: keep-alive Content-Length: 2470 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: / content-type: application/json sec-ch-ua-mobile: ?0 Authorization: none User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.wizardingworld.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wizardingworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 15:34:51 UTC	2470	OUT	Data Raw: 7b 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 7d 2c 22 71 75 65 72 79 22 3a 22 7b 5c 6e 20 20 6d 65 20 7b 5c 6e 20 20 20 20 69 64 5c 6e 20 20 20 20 67 69 76 65 6e 4e 61 6d 65 5c 6e 20 20 20 20 66 61 6d 69 6c 79 4e 61 6d 65 5c 6e 20 20 20 20 65 6d 61 69 6c 5c 6e 20 20 20 20 65 6d 61 69 6c 56 65 72 69 66 69 65 64 5c 6e 20 20 20 20 68 6f 67 77 61 72 74 73 48 6f 75 73 65 5c 6e 20 20 20 20 75 6e 64 65 72 61 67 65 5c 6e 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 5c 6e 20 20 20 20 62 69 72 74 68 64 61 74 65 5c 6e 20 20 20 20 70 72 65 6d 69 75 6d 44 61 74 65 5c 6e 20 20 20 20 72 65 67 69 73 74 65 72 65 64 4f 6e 5c 6e 20 20 20 20 6d 61 72 6b 65 74 69 6e 67 4f 70 74 49 6e 57 57 5c 6e 20 20 20 20 73 6f 72 74 69 6e 67 48 6f 75 73 65 43 65 72 65 6d 6f 6e 79 44 61 74 Data Ascii: {"variables":{},"query":"{\n me {\n id\n givenName\n familyName\n email\n emailVerified\n hogwartsHouse\n underage\n subscription\n birthdate\n premiumDate\n registeredOn\n marketingOptInWW\n sortingHouseCeremonyDat
2024-09-27 15:34:52 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2604 Connection: close Date: Fri, 27 Sep 2024 15:34:51 GMT access-control-allow-credentials: true x-amzn-RequestId: cb731caa-c599-4342-8e51-3bfebc40ea6c access-control-allow-origin: * x-amzn-Remapped-Content-Length: 2604 x-amz-apigw-id: exWIZFvljoEEQqQ= X-Amzn-Trace-Id: Root=1-66f6d09b-088ecc8d2f8404f94b7b68df X-Cache: Miss from cloudfront Via: 1.1 cf2939e85531f45f3306f792ea104eaa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: kJeV_vdFVulPk5g-gclLsmrHtkBZ5kUsEHMiWT4gY1pl7iLSFfa9_Q==
2024-09-27 15:34:52 UTC	2604	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 74 20 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 2c 22 70 61 74 68 22 3a 5b 22 6d 65 22 5d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 63 6f 64 65 22 3a 22 55 4e 41 55 54 48 45 4e 54 49 43 41 54 45 44 22 2c 22 73 65 72 76 69 63 65 4e 61 6d 65 22 3a 22 76 32 22 2c 22 71 75 65 72 79 22 3a 22 7b 5c 6e 20 20 6d 65 20 7b 5c 6e 20 20 20 20 69 64 5c 6e 20 20 20 20 67 69 76 65 6e 4e 61 6d 65 5c 6e 20 20 20 20 66 61 6d 69 6c 79 4e 61 6d 65 5c 6e 20 20 20 20 65 6d 61 69 6c 5c 6e 20 20 20 20 65 6d 61 69 6c 56 65 72 69 66 69 65 64 5c 6e 20 20 20 20 68 6f 67 77 61 72 74 73 48 6f 75 73 65 5c 6e 20 20 20 20 75 6e 64 65 72 61 67 65 5c 6e 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 5c 6e 20 Data Ascii: {"errors":[{"message":"Not Authenticated","path":["me"],"extensions":{"code":"UNAUTHENTICATED","serviceName":"v2","query":"{\n me {\n id\n givenName\n familyName\n email\n emailVerified\n hogwartsHouse\n underage\n subscription\n

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 15:34:52 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25923 Date: Fri, 27 Sep 2024 15:34:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 15:34:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:53 UTC	648	OUT	GET /consent/8458f511-3cee-4c34-be7d-667f562a8ae1/01922a3e-4a59-7f99-b0b4-aa897c65b489/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wizardingworld.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wizardingworld.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 15:34:53 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 15:34:53 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8c9c8f76ee2bc413-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 78448 Cache-Control: public, max-age=86400 Expires: Sat, 28 Sep 2024 15:34:53 GMT Last-Modified: Wed, 25 Sep 2024 17:45:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 7TlWAfsQEM+TK7c50cFOuw== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 40f4a19d-901e-00ce-7b72-0ff5c5000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-09-27 15:34:53 UTC	387	IN	Data Raw: 37 62 63 61 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 22 2c 22 4d 61 69 6e 49 6e 66 6f Data Ascii: 7bca{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"","MainInfo
2024-09-27 15:34:53 UTC	1369	IN	Data Raw: 6f 6b 69 65 73 20 75 73 65 64 22 2c 22 43 6f 6f 6b 69 65 73 44 65 73 63 54 65 78 74 22 3a 22 44 65 73 63 72 69 70 74 69 6f 6e 22 2c 22 41 62 6f 75 74 4c 69 6e 6b 22 3a 22 22 2c 22 41 63 74 69 76 65 54 65 78 74 22 3a 22 41 63 74 69 76 65 22 2c 22 41 6c 77 61 79 73 41 63 74 69 76 65 54 65 78 74 22 3a 22 41 6c 77 61 79 73 20 41 63 74 69 76 65 22 2c 22 41 6c 77 61 79 73 49 6e 61 63 74 69 76 65 54 65 78 74 22 3a 22 41 6c 77 61 79 73 20 49 6e 61 63 74 69 76 65 22 2c 22 50 43 53 68 6f 77 41 6c 77 61 79 73 41 63 74 69 76 65 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 41 6c 65 72 74 4e 6f 74 69 63 65 54 65 78 74 22 3a 22 42 79 20 63 6c 69 63 6b 69 6e 67 20 e2 80 9c 41 63 63 65 70 74 20 41 6c 6c 20 43 6f 6f 6b 69 65 73 e2 80 9d 2c 20 79 6f 75 20 61 67 72 65 65 20 Data Ascii: okies used","CookiesDescText":"Description","AboutLink":"","ActiveText":"Active","AlwaysActiveText":"Always Active","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":false,"AlertNoticeText":"By clicking Accept All Cookies, you agree
2024-09-27 15:34:53 UTC	1369	IN	Data Raw: 79 6f 75 2c 20 73 75 63 68 20 61 73 20 79 6f 75 72 20 6c 61 6e 67 75 61 67 65 20 70 72 65 66 65 72 65 6e 63 65 20 6f 72 20 6c 6f 67 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 6f 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 73 65 74 20 62 79 20 75 73 20 61 6e 64 20 63 61 6c 6c 65 64 20 66 69 72 73 74 2d 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 2e 20 57 65 20 61 6c 73 6f 20 75 73 65 20 74 68 69 72 64 2d 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 20 e2 80 93 20 77 68 69 63 68 20 61 72 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 61 20 64 6f 6d 61 69 6e 20 64 69 66 66 65 72 65 6e 74 20 74 68 61 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 6f 66 20 74 68 65 20 77 65 62 73 69 74 65 20 79 6f 75 20 61 72 65 20 76 69 73 69 74 69 6e 67 20 e2 80 93 20 66 6f 72 20 6f Data Ascii: you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies which are cookies from a domain different than the domain of the website you are visiting for o
2024-09-27 15:34:53 UTC	1369	IN	Data Raw: 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 35 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 68 65 6c 70 73 20 74 72 61 63 6b 20 76 69 73 69 74 6f 72 20 75 73 61 67 65 2c 20 65 76 65 6e 74 73 2c 20 74 61 72 67 65 74 20 6d 61 72 6b 65 74 69 6e 67 2c 20 61 6e 64 20 63 61 6e 20 61 6c 73 6f 20 6d 65 61 73 75 72 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 61 6e 64 20 73 74 61 62 69 6c 69 74 79 2e 20 43 6f 6f 6b 69 65 73 20 69 6e 20 74 68 69 73 20 64 6f 6d 61 69 6e 20 68 61 76 65 20 6c 69 66 65 73 70 61 6e 20 6f 66 20 31 20 79 65 61 72 2e 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 Data Ascii: sion":false,"Length":"365","description":"This cookie helps track visitor usage, events, target marketing, and can also measure application performance and stability. Cookies in this domain have lifespan of 1 year.","thirdPartyDescription":null,"patternKe
2024-09-27 15:34:53 UTC	1369	IN	Data Raw: 73 69 74 65 20 62 79 20 6f 75 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 70 61 72 74 6e 65 72 73 2e 20 54 68 65 79 20 6d 61 79 20 62 65 20 75 73 65 64 20 62 79 20 74 68 6f 73 65 20 63 6f 6d 70 61 6e 69 65 73 20 74 6f 20 62 75 69 6c 64 20 61 20 70 72 6f 66 69 6c 65 20 6f 66 20 79 6f 75 72 20 69 6e 74 65 72 65 73 74 73 20 61 6e 64 20 73 68 6f 77 20 79 6f 75 20 72 65 6c 65 76 61 6e 74 20 61 64 76 65 72 74 73 20 6f 6e 20 6f 74 68 65 72 20 73 69 74 65 73 2e 20 54 68 65 79 20 64 6f 20 6e 6f 74 20 73 74 6f 72 65 20 64 69 72 65 63 74 6c 79 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 62 75 74 20 61 72 65 20 62 61 73 65 64 20 6f 6e 20 75 6e 69 71 75 65 6c 79 20 69 64 65 6e 74 69 66 79 69 6e 67 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 61 6e Data Ascii: site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser an
2024-09-27 15:34:53 UTC	1369	IN	Data Raw: 20 69 6e 74 65 72 6e 65 74 20 64 65 76 69 63 65 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 2c 20 79 6f 75 20 77 69 6c 6c 20 65 78 70 65 72 69 65 6e 63 65 20 6c 65 73 73 20 74 61 72 67 65 74 65 64 20 61 64 76 65 72 74 69 73 69 6e 67 2e 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 6d 61 79 20 62 65 20 73 65 74 20 74 68 72 6f 75 67 68 20 6f 75 72 20 73 69 74 65 20 62 79 20 6f 75 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 70 61 72 74 6e 65 72 73 2e 20 54 68 65 79 20 6d 61 79 20 62 65 20 75 73 65 64 20 62 79 20 74 68 6f 73 65 20 63 6f 6d 70 61 6e 69 65 73 20 74 6f 20 62 75 69 6c 64 20 61 20 70 72 6f 66 69 6c 65 20 6f 66 20 Data Ascii: internet device. If you do not allow these cookies, you will experience less targeted advertising.","thirdPartyDescription":"These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of
2024-09-27 15:34:53 UTC	1369	IN	Data Raw: 73 20 61 6e 64 20 73 68 6f 77 20 79 6f 75 20 72 65 6c 65 76 61 6e 74 20 61 64 76 65 72 74 73 20 6f 6e 20 6f 74 68 65 72 20 73 69 74 65 73 2e 20 54 68 65 79 20 64 6f 20 6e 6f 74 20 73 74 6f 72 65 20 64 69 72 65 63 74 6c 79 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 62 75 74 20 61 72 65 20 62 61 73 65 64 20 6f 6e 20 75 6e 69 71 75 65 6c 79 20 69 64 65 6e 74 69 66 79 69 6e 67 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 61 6e 64 20 69 6e 74 65 72 6e 65 74 20 64 65 76 69 63 65 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 2c 20 79 6f 75 20 77 69 6c 6c 20 65 78 70 65 72 69 65 6e 63 65 20 6c 65 73 73 20 74 61 72 67 65 74 65 64 20 61 64 76 65 72 74 69 73 69 6e 67 2e 22 2c 22 70 61 Data Ascii: s and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.","pa
2024-09-27 15:34:53 UTC	1369	IN	Data Raw: 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 34 32 33 64 64 39 32 34 2d 31 30 63 39 2d 34 33 39 30 2d 38 63 30 35 2d 66 34 38 37 39 66 31 34 63 36 31 36 22 2c 22 4e 61 6d 65 22 3a 22 61 6a 73 5f 67 72 6f 75 70 5f 69 64 22 2c 22 48 6f 73 74 22 3a 22 68 61 72 72 79 70 6f 74 74 65 72 73 68 6f 70 2e 63 6f 2e 75 6b 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 74 72 61 63 6b 20 76 69 73 69 74 6f 72 20 75 73 61 67 65 20 61 6e 64 20 65 76 65 6e 74 73 20 77 69 74 68 69 6e 20 74 68 65 20 77 65 62 73 69 74 65 2e 20 43 6f 6f 6b 69 65 73 20 69 6e 20 74 68 69 Data Ascii: ory":null,"isThirdParty":false},{"id":"423dd924-10c9-4390-8c05-f4879f14c616","Name":"ajs_group_id","Host":"harrypottershop.co.uk","IsSession":false,"Length":"0","description":"These cookies track visitor usage and events within the website. Cookies in thi
2024-09-27 15:34:53 UTC	1369	IN	Data Raw: 61 72 74 79 4b 65 79 22 3a 22 43 6f 6f 6b 69 65 7c 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 66 39 65 66 37 38 61 2d 38 36 61 39 2d 34 36 32 39 2d 39 32 30 31 2d 37 62 64 30 37 38 38 62 32 32 66 66 22 2c 22 4e 61 6d 65 22 3a 22 43 4f 4e 53 45 4e 54 22 2c 22 48 6f 73 74 22 3a 22 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 36 31 38 33 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 59 6f 75 54 75 62 65 20 69 73 20 61 20 47 6f 6f 67 6c 65 Data Ascii: artyKey":"Cookie\|youtube.com","firstPartyKey":"","DurationType":1,"category":null,"isThirdParty":false},{"id":"2f9ef78a-86a9-4629-9201-7bd0788b22ff","Name":"CONSENT","Host":"youtube.com","IsSession":false,"Length":"6183","description":"YouTube is a Google
2024-09-27 15:34:53 UTC	1369	IN	Data Raw: 64 20 61 64 76 65 72 74 69 73 69 6e 67 20 74 6f 20 77 65 62 20 76 69 73 69 74 6f 72 73 20 61 63 72 6f 73 73 20 61 20 62 72 6f 61 64 20 72 61 6e 67 65 20 6f 66 20 74 68 65 69 72 20 6f 77 6e 20 61 6e 64 20 6f 74 68 65 72 20 77 65 62 73 69 74 65 73 2e 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 59 6f 75 54 75 62 65 20 69 73 20 61 20 47 6f 6f 67 6c 65 20 6f 77 6e 65 64 20 70 6c 61 74 66 6f 72 6d 20 66 6f 72 20 68 6f 73 74 69 6e 67 20 61 6e 64 20 73 68 61 72 69 6e 67 20 76 69 64 65 6f 73 2e 20 59 6f 75 54 75 62 65 20 63 6f 6c 6c 65 63 74 73 20 75 73 65 72 20 64 61 74 61 20 74 68 72 6f 75 67 68 20 76 69 64 65 6f 73 20 65 6d 62 65 64 64 65 64 20 69 6e 20 77 65 62 73 69 74 65 73 2c 20 77 68 69 63 68 20 69 73 20 61 67 67 72 65 Data Ascii: d advertising to web visitors across a broad range of their own and other websites.","thirdPartyDescription":"YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggre

Timestamp	Bytes transferred	Direction	Data
2024-09-27 15:34:53 UTC	372	OUT	GET /v3 HTTP/1.1 Host: api.wizardingworld.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NEXT_LOCALE=en
2024-09-27 15:34:53 UTC	525	IN	HTTP/1.1 401 Unauthorized Content-Type: application/json Content-Length: 26 Connection: close Date: Fri, 27 Sep 2024 15:34:53 GMT X-Amzn-Trace-Id: Root=1-66f6d09d-641119284e03c1026e7d4f58 x-amzn-RequestId: 7bd4296e-d573-4ee9-84f1-612209f75d66 x-amzn-ErrorType: UnauthorizedException x-amz-apigw-id: exWIrFUdDoEEqSA= X-Cache: Error from cloudfront Via: 1.1 c2b4a332b09677da722930ae336c8bfc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: Ao1IR4ZemdWePHvzsDB8o7WO3FIcxCEQhrDrqienc-KUVQVAJRdzwA==
2024-09-27 15:34:53 UTC	26	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"message":"Unauthorized"}