Edit tour

Windows Analysis Report
https://pilgrimpierun.com/

Overview

General Information

Sample URL:	https://pilgrimpierun.com/
Analysis ID:	1522192
Tags:	urlscan
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected suspicious crossdomain redirect

Found iframes

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2764 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2176,i,611481037860998982,14740471387259191257,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pilgrimpierun.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-RPKHKMLV8Q&gtm=45je49p0v885410863z877051166za200zb77051166&_p=1727612540054&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101671035~101747727&cid=1047593261.1727612542&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1727612542&sct=1&seg=0&dl=https%3A%2F%2Fpilgrimpierun.enmotive.com%2Fevents%2Fview%2F24th-annual-pilgrim-pie-run-for-rotary&dt=Home%20%7C%20Pilgrim%20Pie%20Run&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=5328 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://pilgrimpierun.enmotive.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://pilgrimpierun.enmotive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-RPKHKMLV8Q&gacid=1047593261.1727612542&gtm=45je49p0v885410863z877051166za200zb77051166&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=425763264
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://maps.google.com/maps?q=Lyons+Twp+High+School++1045+W+COSSITT+AVE+%2C+LA+GRANGE%2C+IL%2C+60525%2C+US&output=embed
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-RPKHKMLV8Q&gacid=1047593261.1727612542&gtm=45je49p0v885410863z877051166za200zb77051166&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=425763264
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://maps.google.com/maps?q=Lyons+Twp+High+School++1045+W+COSSITT+AVE+%2C+LA+GRANGE%2C+IL%2C+60525%2C+US&output=embed
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-RPKHKMLV8Q&gacid=1047593261.1727612542&gtm=45je49p0v885410863z877051166za200zb77051166&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=425763264
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://maps.google.com/maps?q=Lyons+Twp+High+School++1045+W+COSSITT+AVE+%2C+LA+GRANGE%2C+IL%2C+60525%2C+US&output=embed
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-RPKHKMLV8Q&gacid=1047593261.1727612542&gtm=45je49p0v885410863z877051166za200zb77051166&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=425763264
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://maps.google.com/maps?q=Lyons+Twp+High+School++1045+W+COSSITT+AVE+%2C+LA+GRANGE%2C+IL%2C+60525%2C+US&output=embed
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-RPKHKMLV8Q&gacid=1047593261.1727612542&gtm=45je49p0v885410863z877051166za200zb77051166&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=425763264
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://maps.google.com/maps?q=Lyons+Twp+High+School++1045+W+COSSITT+AVE+%2C+LA+GRANGE%2C+IL%2C+60525%2C+US&output=embed
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-RPKHKMLV8Q&gacid=1047593261.1727612542&gtm=45je49p0v885410863z877051166za200zb77051166&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=425763264
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://maps.google.com/maps?q=Lyons+Twp+High+School++1045+W+COSSITT+AVE+%2C+LA+GRANGE%2C+IL%2C+60525%2C+US&output=embed
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/course-map	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/course-map	HTTP Parser: Iframe src: https://maps.google.com/maps?q=Lyons+Twp+High+School++1045+W+COSSITT+AVE+%2C+LA+GRANGE%2C+IL%2C+60525%2C+US&output=embed
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/results-and-photos	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/faq	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/packet-pick-up	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/sponsorship	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://maps.google.com/maps?q=Lyons+Twp+High+School++1045+W+COSSITT+AVE+%2C+LA+GRANGE%2C+IL%2C+60525%2C+US&output=embed
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://maps.google.com/maps?q=Lyons+Twp+High+School++1045+W+COSSITT+AVE+%2C+LA+GRANGE%2C+IL%2C+60525%2C+US&output=embed
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://maps.google.com/maps?q=Lyons+Twp+High+School++1045+W+COSSITT+AVE+%2C+LA+GRANGE%2C+IL%2C+60525%2C+US&output=embed
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-TH55DMJ
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: Iframe src: https://maps.google.com/maps?q=Lyons+Twp+High+School++1045+W+COSSITT+AVE+%2C+LA+GRANGE%2C+IL%2C+60525%2C+US&output=embed

Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: <input type="password" .../> found
Source: https://www.instagram.com/pilgrimpierun/	HTTP Parser: <input type="password" .../> found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/course-map	HTTP Parser: <input type="password" .../> found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/results-and-photos	HTTP Parser: <input type="password" .../> found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/faq	HTTP Parser: <input type="password" .../> found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/packet-pick-up	HTTP Parser: <input type="password" .../> found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/sponsorship	HTTP Parser: <input type="password" .../> found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: <input type="password" .../> found

Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No favicon
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No favicon
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No favicon
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No favicon
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No favicon
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No favicon
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No favicon
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No favicon
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/course-map	HTTP Parser: No favicon
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No favicon

Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="author".. found
Source: https://www.instagram.com/pilgrimpierun/	HTTP Parser: No <meta name="author".. found
Source: https://www.instagram.com/pilgrimpierun/	HTTP Parser: No <meta name="author".. found
Source: https://www.instagram.com/pilgrimpierun/	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/course-map	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/results-and-photos	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/faq	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/packet-pick-up	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/sponsorship	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="author".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="author".. found

Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="copyright".. found
Source: https://www.instagram.com/pilgrimpierun/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.instagram.com/pilgrimpierun/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.instagram.com/pilgrimpierun/	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/course-map	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/results-and-photos	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/faq	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/packet-pick-up	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/sponsorship	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="copyright".. found
Source: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49733 version: TLS 1.2

Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_884.2.dr, chromecache_794.2.dr, chromecache_632.2.dr, chromecache_734.2.dr, chromecache_430.2.dr, chromecache_683.2.dr	String found in binary or memory: <a href="https://www.facebook.com/pilgrimpierun" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_884.2.dr, chromecache_794.2.dr, chromecache_632.2.dr, chromecache_734.2.dr, chromecache_430.2.dr, chromecache_683.2.dr	String found in binary or memory: <a href="https://www.twitter.com/pilgrimpierun" target="_blank"> equals www.twitter.com (Twitter)
Source: chromecache_511.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/-chchjkxRCr/ equals www.facebook.com (Facebook)
Source: chromecache_511.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/5RZXhVZje9T/ equals www.facebook.com (Facebook)
Source: chromecache_511.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/9cisb7Fe7ih/ equals www.facebook.com (Facebook)
Source: chromecache_756.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_511.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/CCT5pM3qiNk/ equals www.facebook.com (Facebook)
Source: chromecache_756.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_511.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/KRXTwBoPvVj/ equals www.facebook.com (Facebook)
Source: chromecache_865.2.dr, chromecache_641.2.dr, chromecache_829.2.dr, chromecache_511.2.dr, chromecache_783.2.dr, chromecache_582.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: chromecache_511.2.dr, chromecache_582.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_865.2.dr, chromecache_829.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V8_l6oUwABQ/ equals www.facebook.com (Facebook)
Source: chromecache_865.2.dr, chromecache_829.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V9vdYColc4k/ equals www.facebook.com (Facebook)
Source: chromecache_511.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/VZYwkcc3BWr/ equals www.facebook.com (Facebook)
Source: chromecache_644.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Vkd8AdLnKqZ/ equals www.facebook.com (Facebook)
Source: chromecache_511.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_511.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/aJoeSHn7XcN/ equals www.facebook.com (Facebook)
Source: chromecache_865.2.dr, chromecache_829.2.dr, chromecache_511.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/cr2jmG-CdKo/ equals www.facebook.com (Facebook)
Source: chromecache_865.2.dr, chromecache_829.2.dr, chromecache_511.2.dr, chromecache_556.2.dr, chromecache_582.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_412.2.dr, chromecache_441.2.dr, chromecache_906.2.dr, chromecache_872.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_665.2.dr	String found in binary or memory: __d("Chromedome",["fbt"],(function(a,b,c,d,e,f,g,h){function i(){if(document.domain==null)return null;var a=document.domain,b=/^intern\./.test(a);if(b)return null;b=/(^\|\.)facebook\.(com\|sg)$/.test(a);if(b)return"facebook";b=/(^\|\.)instagram\.com$/.test(a);if(b)return"instagram";b=/(^\|\.)threads\.net$/.test(a);if(b)return"threads";b=/(^\|\.)messenger\.com$/.test(a);return b?"messenger":null}function j(a){if(a==="instagram")return h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable an Instagram feature or \"hack\" someone's account, it is a scam and will give them access to your Instagram account.");return a==="threads"?h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Threads feature or \"hack\" someone's account, it is a scam and will give them access to your Threads account."):h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Facebook feature or \"hack\" someone's account, it is a scam and will give them access to your Facebook account.")}function a(a){if(top!==window)return;a=i();if(a==null)return;var b=h._("Stop!");a=j(a);var c=h._("See {url} for more information.",[h._param("url","https://www.facebook.com/selfxss")]),d="font-family:helvetica; font-size:20px; ";[[b,d+"font-size:50px; font-weight:bold; color:red; -webkit-text-stroke:1px black;"],[a,d],[c,d],["",""]].map(function(a){window.setTimeout(console.log.bind(console,"\n%c"+a[0].toString(),a[1]))})}g.start=a}),226); equals www.facebook.com (Facebook)
Source: chromecache_511.2.dr	String found in binary or memory: __d("PolarisExternalRoutes",["PolarisLocales","URI"],(function(a,b,c,d,e,f,g){"use strict";var h;function a(a){return new(h\|\|(h=c("URI")))(a).addQueryData({locale:c("PolarisLocales").locale}).toString()}b=a("https://help.instagram.com/581066165581870/");d="https://about.instagram.com/blog/";e="https://about.instagram.com";f="https://about.meta.com";var i="https://www.meta.com/smart-glasses/",j="https://developers.facebook.com/docs/instagram",k="https://help.instagram.com",l="https://www.facebook.com/privacy/policy",m="https://privacycenter.instagram.com/policy/",n="https://www.instagram.com/privacy/cookie_settings/",o="/legal/cookies/",p="https://www.facebook.com/policies/cookies",q="https://privacycenter.instagram.com/policies/cookies/",r="https://privacycenter.instagram.com/policies/cookies/?annotations[0]=explanation%2F3_companies_list",s="https://www.facebook.com/help/instagram/261704639352628",t="https://www.whatsapp.com/legal/commerce-policy/",u="https://about.meta.com/technologies/meta-verified/",v=a("https://help.instagram.com/contact/543840232909258/"),w=a("https://help.instagram.com/contact/598671977756435/"),x=a("https://help.instagram.com/contact/406206379945942/");a=a("https://help.instagram.com/contact/383679321740945");var y="https://help.instagram.com/116024195217477",z="https://www.facebook.com/help/instagram/1164377657035425/",A="https://familycenter.instagram.com/supervision",B="https://familycenter.instagram.com/education",C="https://business.facebook.com/latest/creator_marketplace?source=ig_web_profile&nav_ref=ig_web_profile",D="https://business.facebook.com/latest?nav_ref=ig_web_more_nav_menu",E="https://business.facebook.com/billing_hub/payment_settings?",F="https://m.facebook.com/billing_hub/payment_settings?",G="https://indonesia.fb.com/panduan-digital/",H="https://www.facebook.com/help/cancelcontracts?source=instagram.com",I="https://about.instagram.com/about-us/careers";g.NEW_LEGAL_TERMS_PATH=b;g.INSTAGRAM_PRESS_SITE_PATH=d;g.INSTAGRAM_ABOUT_SITE_PATH=e;g.META_ABOUT_SITE_PATH=f;g.META_RAY_BAN_SITE_PATH=i;g.INSTAGRAM_API_SITE_PATH=j;g.INSTAGRAM_HELP_SITE_PATH=k;g.NEW_PRIVACY_POLICY_PATH=l;g.INSTAGRAM_PRIVACY_POLICY_PATH=m;g.INSTAGRAM_COOKIE_SETTINGS_PATH=n;g.NEW_COOKIE_POLICY_PATH=o;g.FACEBOOK_COOKIE_POLICY_PATH=p;g.INSTAGRAM_COOKIE_POLICY_PATH_UPDATED=q;g.INSTAGRAM_COOKIE_POLICY_OTHER_COMPANIES_PATH=r;g.FACEBOOK_CONTACT_UPLOADING_AND_NON_USERS=s;g.WHATSAPP_COMMERCE_POLICY_PATH=t;g.META_VERIFIED_MARKETING_PATH=u;g.NETZDG_REPORT_CONTACT_FORM_PATH=v;g.CPA_REPORT_CONTACT_FORM_PATH=w;g.DSA_REPORT_CONTACT_FORM_PATH=x;g.COMMUNITY_VIOLATIONS_GUIDELINES_CONTACT_FORM_PATH=a;g.ACCOUNT_PRIVACY_HELP_PATH=y;g.ACTIVITY_STATUS_HELP_PATH=z;g.FAMILY_CENTER_HOME_PATH=A;g.EDUCATION_HUB_PATH=B;g.CREATOR_MARKETPLACE_PATH=C;g.MORE_NAV_MENU_META_BUSINESS_SUITE_PATH=D;g.BILLING_HUB_DESKTOP_PATH=E;g.BILLING_HUB_MSITE_PATH=F;g.META_IN_INDONESIA_PATH=G;g.CANCEL_SUBSCRIPTION=H;g.INSTAGRAM_JOBS_PATH=I}),98); equals www.facebook.com (Facebook)
Source: chromecache_511.2.dr	String found in binary or memory: __d("PolarisFBConnectHelpers",["FbSdkConsts","InstagramQueryParamsHelper","PolarisConfig","PolarisConfigConstants","PolarisFBSignupQEHelpers","PolarisIGWebStorage","PolarisLocales","PolarisLoggedOutCtaLogger","PolarisOneTapLoginStorage","PolarisRoutes","PolarisUA","PolarisWebStorage","Promise","Random","asyncToGeneratorRuntime","browserHistory_DO_NOT_USE","cometAsyncFetch","emptyFunction","isStringNullOrEmpty","nullthrows","polarisFBReady","polarisLogAction"],(function(a,b,c,d,e,f,g){"use strict";var h,i=[0,0,0,0,0,0,0,0],j="https://m.facebook.com/dialog/oauth",k="https://www.facebook.com/dialog/oauth",l="https://www.facebook.com/oidc/",m="NewUserInterstitial.profile_picture_url",n="fbAccessToken",o="fbLoginKey",p="fbLoginReturnURL",q="fbPlainToken";function r(a,e){e===void 0&&(e=[]);var f=c("PolarisWebStorage").getSessionStorage(),g=i.reduce(function(a){return a+d("Random").uint32().toString(36)},"");f!=null&&f.setItem(o,g);f="https://www.instagram.com"+d("PolarisRoutes").SIGNUP_PATH;var h="https://www.instagram.com"+d("PolarisRoutes").FACEBOOK_V2_SIGNUP_PATH,j=t(),k=d("PolarisFBSignupQEHelpers").shouldUseOIDCSignupFlow();if(!k){g=(k={},k[o]=g,k[p]=a,k);a={client_id:d("PolarisConfigConstants").instagramFBAppId,locale:c("PolarisLocales").locale,redirect_uri:f,response_type:"code,granted_scopes",scope:e.concat(d("FbSdkConsts").PERMISSIONS.EMAIL).join(","),state:JSON.stringify(g)};k=d("InstagramQueryParamsHelper").appendQueryParams(j,a);d("browserHistory_DO_NOT_USE").redirect(k)}else{f=function(){var a=b("asyncToGeneratorRuntime").asyncToGenerator(function(){var a=(yield c("cometAsyncFetch")("/oidc/state/",{data:{},method:"POST"}));return a});return function(){return a.apply(this,arguments)}}();f().then(function(a){a=a.state;a={app_id:d("PolarisConfigConstants").instagramFBAppId,redirect_uri:h,response_type:"code",scope:"openid email profile linking",state:a};a=d("InstagramQueryParamsHelper").appendQueryParams(j,a);d("browserHistory_DO_NOT_USE").redirect(a)})["catch"](function(a){return c("emptyFunction")()})}}function s(){var a=c("PolarisWebStorage").getSessionStorage(),b=null;a!=null&&(b=a.getItem(o),a.removeItem(o));return c("isStringNullOrEmpty")(b)?null:b}function t(){return d("PolarisUA").isMobile()?j:d("PolarisFBSignupQEHelpers").shouldUseOIDCSignupFlow()?l:k}function a(a){var b=s();return b==null\|\|b===""?!1:a===b}function e(){var a;return(a=d("PolarisIGWebStorage").getStorageForUser(d("PolarisConfig").getViewerId()))==null?void 0:a.getItem(n)}function f(a){return u.apply(this,arguments)}function u(){u=b("asyncToGeneratorRuntime").asyncToGenerator(function(a){var e=(yield new(h\|\|(h=b("Promise")))(function(a,b){c("polarisFBReady").sdkReady(function(){c("polarisFBReady").getLoginStatus(!0).then(function(c){c.status===d("FbSdkConsts").STATUS.CONNECTED?a(c):b()})["catch"](function(a){b(a)})})}));if(a){a=(a=e.authResponse)==null?void 0:a.accessToken;w(a)}return e});return u.apply(this,arguments)}function v(){return new(h\|\|(h=b("Promise")))(func
Source: chromecache_511.2.dr	String found in binary or memory: __d("PolarisLinkshimURI",["PolarisInstapi","URI","promiseDone"],(function(a,b,c,d,e,f,g){"use strict";var h,i=["l.facebook.com","l.instagram.com"],j=["help.instagram.com","www.facebook.com","business.facebook.com"];function k(a){var b;try{b=new(h\|\|(h=c("URI")))(a)}catch(a){return!1}a=b.getDomain();var d=b.getProtocol().toLowerCase();return d!=null&&!d.startsWith("http")?!0:i.includes(a)&&!!b.getQueryData().u\|\|j.includes(a)}function a(a,b,e){e===void 0&&(e=""),k(a)&&b(a),c("promiseDone")(d("PolarisInstapi").apiPost("/api/v1/web/linkshim/link/",{body:{cs:e,u:a}}).then(function(a){b(a.data.uri)}))}g.shouldSkipLinkShim=k;g.asyncGet=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_641.2.dr, chromecache_783.2.dr	String found in binary or memory: __d("RealtimeGraphQLRequest",["invariant","RequestStreamCommonRequestStreamCommonTypes","TransportSelectingClientSingleton","nullthrows","regeneratorRuntime"],(function(a,b,c,d,e,f,g,h){"use strict";a=function(){function a(a){var b=this,e=a.method,f=a.doc_id,g=a.is_intern,i=a.extra_headers,j=a.body,k=a.instrumentation_data;a=a.sandbox;this.$12=function(a){switch(a){case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Started:if(b.$10){b.$9!=null\|\|h(0,13576);a=Date.now()-c("nullthrows")(b.$9);b.$7!=null&&b.$7(a)}else b.$10=!0,b.$5!=null&&b.$5();break;case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Stopped:b.$9=Date.now();b.$6!=null&&b.$6(!1,!1);break;default:break}};this.$10=!1;e={method:e,doc_id:f};g===!0&&(e=babelHelpers["extends"]({},e,{www_tier:"intern"}));a!=null&&(e=babelHelpers["extends"]({},e,{www_sandbox:a.replace(/^not-www\.(\d+\|\w+)\.(od\|sb)\.internalfb\.com$/,"www.$1.$2.facebook.com")}));i!=null&&(e=babelHelpers["extends"]({},e,i));this.$1=e;this.$2=JSON.stringify(j);this.$11=k}var e=a.prototype;e.onResponse=function(a){this.$3=a;return this};e.onError=function(a){this.$4=a;return this};e.onActive=function(a){this.$5=a;return this};e.onPause=function(a){this.$6=a;return this};e.onResume=function(a){this.$7=a;return this};e.onRetryUpdateRequestBody=function(a){this.$8=a;this.$1=babelHelpers["extends"]({},this.$1,{request_stream_retry:"false"});return this};e.send=function(){var a,d;return b("regeneratorRuntime").async(function(e){while(1)switch(e.prev=e.next){case 0:this.$3!=null\|\|h(0,33593);a={onData:c("nullthrows")(this.$3)};this.$4!=null&&(a=babelHelpers["extends"]({},a,{onTermination:this.$4}));a=babelHelpers["extends"]({},a,{onFlowStatus:this.$12});this.$8!=null&&(a=babelHelpers["extends"]({},a,{onRetryUpdateRequestBody:this.$8}));e.next=7;return b("regeneratorRuntime").awrap(c("TransportSelectingClientSingleton").requestStream(this.$1,this.$2,a,this.$11));case 7:d=e.sent;return e.abrupt("return",{cancel:function(){d.cancel()},amendExperimental:function(a){try{d.amendWithoutAck(JSON.stringify(a));return!0}catch(a){return!1}}});case 9:case"end":return e.stop()}},null,this)};return a}();g["default"]=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_511.2.dr	String found in binary or memory: __d("VideoPlayerFallbackLearnMoreLink.react",["fbt","CometLink.react","FDSText.react","gkx","react"],(function(a,b,c,d,e,f,g,h){"use strict";var i,j=i\|\|d("react");function a(){var a=c("gkx")("20836")?"/help/work/1876956335887765/i-cant-view-or-play-videos-on-workplace":"https://www.facebook.com/help/396404120401278/list";return j.jsx(c("FDSText.react"),{color:"primaryOnMedia",type:"headlineEmphasized3",children:j.jsx(c("CometLink.react"),{href:a,target:"_blank",children:h._("Learn more")})})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),226); equals www.facebook.com (Facebook)
Source: chromecache_511.2.dr	String found in binary or memory: __d("isPolarisAdLink",["URI"],(function(a,b,c,d,e,f,g){"use strict";var h,i="www.facebook.com",j=/www\.[\w\-]+\.(od\|(sandcastle\|twshared)(\w+\.)+\w+)?\.?facebook\.com/,k="/ads/ig_redirect/";function a(a){a=new(h\|\|(h=c("URI")))(a);var b=a.getDomain();if(a.getPath()!==k)return!1;return b===i?!0:a.getDomain().match(j)!=null}g["default"]=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_412.2.dr, chromecache_441.2.dr, chromecache_906.2.dr, chromecache_872.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={eh:e,ah:f,bh:g,Ph:k,Qh:m,Ge:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(QC(w,"iframe_api")\|\|QC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!HC&&OC(x[A],p.Ge))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_488.2.dr, chromecache_474.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_556.2.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (__fb_err) {var __fb_i = new Image();__fb_i.crossOrigin = 'anonymous';__fb_i.dataset.testid = 'fbSDKErrorReport';__fb_i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+__fb_err.name+'","line":"'+(__fb_err.lineNumber\|\|__fb_err.line)+'","script":"'+(__fb_err.fileName\|\|__fb_err.sourceURL\|\|__fb_err.script\|\|"sdk.js")+'","stack":"'+(__fb_err.stackTrace\|\|__fb_err.stack)+'","revision":"1016902172","namespace":"FB","message":"'+__fb_err.message+'"}}');document.body.appendChild(__fb_i);} equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: pilgrimpierun.com
Source: global traffic	DNS traffic detected: DNS query: pilgrimpierun.enmotive.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: maps.google.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: www.instagram.com
Source: global traffic	DNS traffic detected: DNS query: static.cdninstagram.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: scontent-msp1-1.cdninstagram.com
Source: global traffic	DNS traffic detected: DNS query: graph.instagram.com
Source: global traffic	DNS traffic detected: DNS query: www.twitter.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: x.com
Source: global traffic	DNS traffic detected: DNS query: abs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.twitter.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: pbs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.x.com
Source: global traffic	DNS traffic detected: DNS query: video.twimg.com
Source: global traffic	DNS traffic detected: DNS query: abs-0.twimg.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1727612565; path=/; domain=.instagram.com; httponlySet-Cookie: _js_ig_did=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1727612565; path=/; domain=.instagram.com; httponlySet-Cookie: datr=jkb5ZsLOilXEry3YmqavMsxZ; expires=Mon, 03-Nov-2025 12:22:46 GMT; Max-Age=34560000; path=/; domain=.instagram.com; secure; httponly; SameSite=NoneSet-Cookie: ig_did=D38F3C50-F199-44BA-910A-10D42538DB11; expires=Mon, 29-Sep-2025 12:22:46 GMT; Max-Age=31536000; path=/; domain=.instagram.com; secure; httponly; SameSite=Noneaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy-report-only: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy-report-only: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy-report-only: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy-report-only: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy-report-only: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy-report-only: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy-report-only: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Sun, 29 Sep 2024 12:23:46 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: c2fd1ecc8cf2074bx-rate-limit-limit: 500x-rate-limit-reset: 1727613526x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 8x-connection-hash: f77a21f1c6c74af9399603f6afb071d30ee7546220ad0b89cfc27ec726eafde3connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenperf: 7402827104cache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: d44fbaf4fb292255access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 2x-connection-hash: 4c36437ebd8e18cd9b159dd728ab9a1ccea0a8626c14222f7baa84aa6a776aa8date: Sun, 29 Sep 2024 12:23:48 GMTserver: tsa_bconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Sun, 29 Sep 2024 12:23:49 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 91cdcf1847a78eb0x-rate-limit-limit: 500x-rate-limit-reset: 1727613529x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 9x-connection-hash: 704a0872a99d10055690d83010aa83838cbbcd6f7ee0edc477a1791f058de0b4connection: close

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2176,i,611481037860998982,14740471387259191257,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pilgrimpierun.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2176,i,611481037860998982,14740471387259191257,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Grok~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bun.f39400ca.js	0%	URL Reputation	safe
http://underscorejs.org	0%	URL Reputation	safe
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11471_Anime_ABEMA_18ce54aqujn_Hashmoji_20240705_20241007_Monogata	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	0%	URL Reputation	safe
https://support.google.com/fusiontables/answer/9185417).	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/libraries	0%	URL Reputation	safe
https://meet.google.com	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
dualstack.video.twitter.map.fastly.net	151.101.8.158	true	false	unknown
z-p42-instagram.c10r.instagram.com	157.240.0.174	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	173.194.76.157	true	false	unknown
tpop-api.twitter.com	104.244.42.2	true	false	unknown
scontent.xx.fbcdn.net	157.240.251.9	true	false	unknown
s3.amazonaws.com	52.217.205.40	true	false	unknown
t.co	162.159.140.229	true	false	unknown
twimg.twitter.map.fastly.net	199.232.188.159	true	false	unknown
pilgrimpierun.com	15.197.225.128	true	false	unknown
maps.google.com	142.250.186.46	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
scontent-msp1-1.cdninstagram.com	157.240.26.63	true	false	unknown
pilgrimpierun.enmotive.com	34.238.9.139	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
twitter.com	104.244.42.65	true	false	unknown
js-agent.newrelic.com	162.247.243.39	true	false	unknown
tpop-api.x.com	104.244.42.66	true	false	unknown
scontent.cdninstagram.com	157.240.251.63	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
dualstack.twimg.twitter.map.fastly.net	199.232.188.159	true	false	unknown
abs-zero.twimg.com	104.244.43.131	true	false	unknown
analytics.google.com	142.250.181.238	true	false	unknown
td.doubleclick.net	172.217.16.130	true	false	unknown
x.com	104.244.42.193	true	false	unknown
instagram.c10r.instagram.com	157.240.253.63	true	false	unknown
abs.twimg.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
abs-0.twimg.com	unknown	unknown	false	unknown
graph.instagram.com	unknown	unknown	false	unknown
api.twitter.com	unknown	unknown	false	unknown
static.cdninstagram.com	unknown	unknown	false	unknown
video.twimg.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
pbs.twimg.com	unknown	unknown	false	unknown
api.x.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
bam.nr-data.net	unknown	unknown	false	unknown
www.instagram.com	unknown	unknown	false	unknown
www.twitter.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://scontent-msp1-1.cdninstagram.com/v/t51.2885-19/275443255_1102136547273672_300356402635037756_n.jpg?stp=dst-jpg_s150x150&_nc_ht=scontent-msp1-1.cdninstagram.com&_nc_cat=100&_nc_ohc=N1tmocQuwqkQ7kNvgFQwMp-&_nc_gid=e7fe3ffd6ed84051aae654746738d9e9&edm=AOQ1c0wBAAAA&ccb=7-5&oh=00_AYASGLHy38ZZsxZMzLBGKAUWtUoiUi81jVGvClISRTuWaw&oe=66FF2BF0&_nc_sid=8b3546	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.AudioSp.e8e5825a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Grok~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bun.f39400ca.js	false	URL Reputation: safe	unknown
https://abs.twimg.com/responsive-web/client-web/loader.NewTweetsPill.1180970a.js	false		unknown
https://static.cdninstagram.com/rsrc.php/v3idBq4/yt/l/en_US/g80cL-YoGJU.js	false		unknown
https://scontent-msp1-1.cdninstagram.com/v/t51.29350-15/400073433_197668063378803_1460464206847110659_n.jpg?stp=dst-jpg_e35_s320x320&efg=eyJ2ZW5jb2RlX3RhZyI6ImltYWdlX3VybGdlbi4xMDczeDEwNzMuc2RyLmYyOTM1MC5kZWZhdWx0X2ltYWdlIn0&_nc_ht=scontent-msp1-1.cdninstagram.com&_nc_cat=103&_nc_ohc=-nJPTe_i234Q7kNvgHh-KH8&edm=AOQ1c0wBAAAA&ccb=7-5&oh=00_AYBFJVfOM6oqI9l4CvEuXCRjEI8FWRFjOrbAtOTkgJHWIA&oe=66FEFF4F&_nc_sid=8b3546	false		unknown
https://s3.amazonaws.com/media.racebx.com/transfer/img/f/a/3/fa340e82-520c-4fa9-b1ac-d381a603febf.jpg	false		unknown
https://scontent-msp1-1.cdninstagram.com/v/t51.29350-15/403811548_24613005875012186_6162559357564518744_n.jpg?stp=c0.1.1057.1057a_dst-jpg_e35_s640x640_sh0.08&_nc_ht=scontent-msp1-1.cdninstagram.com&_nc_cat=102&_nc_ohc=TgA-_y3cTl4Q7kNvgFXzumy&_nc_gid=e7fe3ffd6ed84051aae654746738d9e9&edm=AOQ1c0wBAAAA&ccb=7-5&oh=00_AYBSi1NvxdGm2PwcaPsMLCTI7VKTQt90l4CHeAyS_5GjoQ&oe=66FF16A1&_nc_sid=8b3546	false		unknown
https://static.cdninstagram.com/rsrc.php/v3i3mP4/y9/l/en_US/iUNq-19PmYe.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/ondemand.ProfileSidebar.2b5e5e2a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~bundle.Ocf~bundle.RichTextCompose.e5c7ed2a.js	false		unknown
https://static.cdninstagram.com/rsrc.php/v3iyQM4/yo/l/en_US/KaNfpE9FPZc.js	false		unknown
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=19995.HYP%3Ainstagram_web_pkg.2.1..0.0&__hsi=7420039442954114908&__req=4&__rev=1016902172&__s=bkugk5%3Af9o5x9%3Ai791te&__spin_b=trunk&__spin_r=1016902172&__spin_t=1727612558&__user=0&dpr=1&jazoest=21053&lsd=AVpvKhrVakY&ph=C3	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.LiveEvent~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle..5b89ca6a.js	false		unknown
https://static.cdninstagram.com/rsrc.php/v3/yE/r/t98ZFitznKQ.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.WideLayout~loader.ProfileClusterFollow.d0bbc1ea.js	false		unknown
https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/faq	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.DirectMessages~bundl.5455e27a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.ExtendedUserProfile~bundle.UserProfile.7c0c4f4a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~ondemand.SettingsInternals~bundle.UserLists~loader.EventSummaryHandler~loader.topicHa.bbc1529a.js	false		unknown
https://pbs.twimg.com/profile_banners/913423506297237504/1662813890/600x200	false		unknown
https://x.com/x/migrate	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePee.8a7edc7a.js	false		unknown
https://scontent-msp1-1.cdninstagram.com/v/t51.29350-15/403691689_891934152503631_2324273520904725902_n.jpg?stp=dst-jpg_e35_s640x640_sh0.08&_nc_ht=scontent-msp1-1.cdninstagram.com&_nc_cat=103&_nc_ohc=NU4KCGx0_kgQ7kNvgGEJeUQ&edm=AOQ1c0wBAAAA&ccb=7-5&oh=00_AYCG95lUYxBKAIQ1Yr5i_gdvfjPd-jawCgZnSZzuuzJWCQ&oe=66FF0C9A&_nc_sid=8b3546	false		unknown
https://bam.nr-data.net/events/1/70008aeecc?a=373011511,1004244944&v=1.267.0&to=bgcANxdUCBFQARcKW1dNIRYWQQkPHgcVBlpNESIVDFAR&rst=57758&ck=0&s=1412a13e7cac1ee3&ref=https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary&ptid=97c8a89c7a50d1a3	false		unknown
https://bam.nr-data.net/events/1/70008aeecc?a=373011511,1004244944&v=1.267.0&to=bgcANxdUCBFQARcKW1dNIRYWQQkPHgcVBlpNESIVDFAR&rst=7418&ck=0&s=1412a13e7cac1ee3&ref=https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/sponsorship&ptid=f8518264b0c246c2	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Communities~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfi.20a474da.js	false		unknown
https://scontent-msp1-1.cdninstagram.com/v/t51.2885-19/51742137_398684357362795_5644607004367388672_n.jpg?stp=dst-jpg_s150x150&_nc_ht=scontent-msp1-1.cdninstagram.com&_nc_cat=107&_nc_ohc=O1qfvy7J0fcQ7kNvgE4q6-t&_nc_gid=e7fe3ffd6ed84051aae654746738d9e9&edm=AOQ1c0wBAAAA&ccb=7-5&oh=00_AYCKw0CYyj-bLZ_kA0bWnvn4mWwyb7dxdKaqReACdVmvDQ&oe=66FF2D7A&_nc_sid=8b3546	false		unknown
https://www.instagram.com/graphql/query	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.DirectMessages~bundle.LiveEvent~bundle.UserProfile~loader.TimelineRenderer.8137c55a.js	false		unknown
https://www.instagram.com/pilgrimpierun/	false		unknown
https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.1004095a.js	false		unknown
https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary	false		unknown
https://pilgrimpierun.enmotive.com/fonts/roboto/Roboto-Regular.ttf	false		unknown
https://scontent-msp1-1.cdninstagram.com/v/t51.2885-19/28765060_220921268464263_6812029027235135488_n.jpg?stp=dst-jpg_s150x150&_nc_ht=scontent-msp1-1.cdninstagram.com&_nc_cat=103&_nc_ohc=fZ69qGUu_50Q7kNvgE9qI3I&_nc_gid=e7fe3ffd6ed84051aae654746738d9e9&edm=AOQ1c0wBAAAA&ccb=7-5&oh=00_AYBkssDlWMov4pR2yD5CT0qbTD1ewec1MVqGmZzdzPg6Wg&oe=66FF199E&_nc_sid=8b3546	false		unknown
https://scontent-msp1-1.cdninstagram.com/v/t51.29350-15/394064083_856386535979265_5698535391037384799_n.jpg?stp=dst-jpg_e35_s320x320&efg=eyJ2ZW5jb2RlX3RhZyI6ImltYWdlX3VybGdlbi4xMDgweDEwODAuc2RyLmYyOTM1MC5kZWZhdWx0X2ltYWdlIn0&_nc_ht=scontent-msp1-1.cdninstagram.com&_nc_cat=109&_nc_ohc=0cfhWRBbvnEQ7kNvgEMblsX&edm=AOQ1c0wBAAAA&ccb=7-5&oh=00_AYAcVjT9ez4IzUPJqn8wV0AMA84VrQAmEvYDkxj1MlxVVg&oe=66FF0D00&_nc_sid=8b3546	false		unknown
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=19995.HYP%3Ainstagram_web_pkg.2.1..0.0&__hsi=7420039442954114908&__req=m&__rev=1016902172&__s=bkugk5%3Af9o5x9%3Ai791te&__spin_b=trunk&__spin_r=1016902172&__spin_t=1727612558&__user=0&dpr=1&jazoest=21053&lsd=AVpvKhrVakY&ph=C3	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~.411de41a.js	false		unknown
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=19995.HYP%3Ainstagram_web_pkg.2.1..0.0&__hsi=7420039442954114908&__req=j&__rev=1016902172&__s=bkugk5%3Af9o5x9%3Ai791te&__spin_b=trunk&__spin_r=1016902172&__spin_t=1727612558&__user=0&dpr=1&jazoest=21053&lsd=AVpvKhrVakY&ph=C3	false		unknown
https://pilgrimpierun.com/	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfile~bundle.UserProfile.6ba4be2a.js	false		unknown
https://www.instagram.com/ajax/bulk-route-definitions/	false		unknown
https://abs.twimg.com/responsive-web/client-web/loader.TimelineCardHandler.4010b5aa.js	false		unknown
https://scontent-msp1-1.cdninstagram.com/v/t51.2885-19/393113866_867083591470105_2555736574402836844_n.jpg?stp=dst-jpg_s150x150&_nc_ht=scontent-msp1-1.cdninstagram.com&_nc_cat=101&_nc_ohc=s_nmyuybt6wQ7kNvgHuT1WD&edm=AOQ1c0wBAAAA&ccb=7-5&oh=00_AYC7ZXlNB-OGdIx4COZAwkUk5HyNCOzX5ZlVcRcfiujliA&oe=66FF31AE&_nc_sid=8b3546	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfile~bundle.Ocf.d7cc349a.js	false		unknown
https://s3.amazonaws.com/media.racebx.com/transfer/img/d/0/e/d0ea86ea-b193-4e83-b1ad-0234c4afd78b.png	false		unknown
https://scontent-msp1-1.cdninstagram.com/v/t51.2885-19/403967315_1034239377798992_5577271907498417151_n.jpg?stp=dst-jpg_s150x150&_nc_ht=scontent-msp1-1.cdninstagram.com&_nc_cat=108&_nc_ohc=BQQWgjEVB40Q7kNvgGyXk6t&_nc_gid=e7fe3ffd6ed84051aae654746738d9e9&edm=AOQ1c0wBAAAA&ccb=7-5&oh=00_AYBfI9aqFPlONlXsFdPQpZJX_Wddo5IkxBOCEoYEgSTWog&oe=66FF02AA&_nc_sid=8b3546	false		unknown
https://static.cdninstagram.com/rsrc.php/v3iVg64/yO/l/en_US/eFLgKRUJcTs.js	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.audio.8d83897a.j	chromecache_759.2.dr, chromecache_813.2.dr	false		unknown
http://underscorejs.org	chromecache_649.2.dr, chromecache_452.2.dr	false	URL Reputation: safe	unknown
http://g.co/dev/maps-no-account	chromecache_880.2.dr	false	URL Reputation: safe	unknown
https://pilgrimpierun.enmotive.com/events/fundraising/23rd-annual-pilgrim-pie-run-for-rotary	chromecache_683.2.dr	false		unknown
https://s3.amazonaws.com/media.racebx.com/transfer/img/d/0/e/d0ea86ea-b193-4e83-b1ad-0234c4afd78b.pn	chromecache_794.2.dr	false		unknown
https://support.x.com/articles/14016	chromecache_679.2.dr, chromecache_660.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11471_Anime_ABEMA_18ce54aqujn_Hashmoji_20240705_20241007_Monogata	chromecache_854.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.TimelineRenderer.	chromecache_737.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.common.0481c12a.	chromecache_677.2.dr	false		unknown
https://www.internalfb.com/intern/invariant/	chromecache_756.2.dr, chromecache_556.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_556.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_729.2.dr, chromecache_570.2.dr	false		unknown
https://help.instagram.com/222826637847963	chromecache_511.2.dr	false		unknown
https://youradchoices.ca/	chromecache_511.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SignupModule.b618	chromecache_808.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	chromecache_854.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_880.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11949_GlicoThailandPockyBox_Hashmoji2024_/BF-11949_GlicoThailandP	chromecache_854.2.dr	false		unknown
https://support.google.com/fusiontables/answer/9185417).	chromecache_880.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_880.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	chromecache_854.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.ProfileSidebar.	chromecache_702.2.dr, chromecache_496.2.dr	false		unknown
https://enmotive.com/terms	chromecache_884.2.dr, chromecache_794.2.dr, chromecache_632.2.dr, chromecache_734.2.dr, chromecache_430.2.dr, chromecache_683.2.dr	false		unknown
https://about.instagram.com/blog/	chromecache_511.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	chromecache_854.2.dr	false	URL Reputation: safe	unknown
https://protect-us.mimecast.com/s/jlNRClYkB5h1NJv9BCjP1jq?domain=peakrunningco.com	chromecache_683.2.dr	false		unknown
https://github.com/twbs/icons/blob/main/LICENSE)	chromecache_444.2.dr	false		unknown
https://www.google.com/maps/place/Lyons	chromecache_683.2.dr	false		unknown
https://help.instagram.com/626057554667531	chromecache_511.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11751_Global_miHoYo_Final_Hashmoji_v2/BF-11751_Global_miHoYo_Fina	chromecache_854.2.dr	false		unknown
https://raceday.enmotive.com/#/events/23rd-annual-pilgrim-pie-run-for-rotary/gallery	chromecache_683.2.dr	false		unknown
https://fburl.com/wiki/xrzohrqb	chromecache_511.2.dr	false		unknown
https://about.instagram.com	chromecache_511.2.dr	false		unknown
https://help.instagram.com/126382350847838	chromecache_511.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	chromecache_854.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11950_Riyadhseason_Hashmoji2024_/BF-11950_Riyadhseason_Hashmoji20	chromecache_854.2.dr	false		unknown
https://edge-chat.instagram.com/mqtt/pull	chromecache_582.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	chromecache_425.2.dr	false	URL Reputation: safe	unknown
https://s3.amazonaws.com/media.racebx.com/transfer/img/8/0/7/807fc3f3-fcec-4ee4-b06b-1f547f25c763.jp	chromecache_884.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.s.7346fe0a.js.m	chromecache_642.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.DividerHandler.f6	chromecache_713.2.dr, chromecache_825.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_880.2.dr	false	URL Reputation: safe	unknown
https://familycenter.instagram.com/accounts/	chromecache_511.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	chromecache_910.2.dr, chromecache_838.2.dr, chromecache_624.2.dr, chromecache_866.2.dr	false		unknown
https://x.com/i/broadcasts/$	chromecache_532.2.dr, chromecache_417.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-12102_SND2024_OrganicHashmojiMENA/BF-12102_SND2024_OrganicHashmoj	chromecache_854.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SideNav.e8d0899a.	chromecache_725.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF_12060_MOC_2024_SND_Hashmoji/BF_12060_MOC_2024_SND_Hashmoji.png	chromecache_854.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_880.2.dr	false	URL Reputation: safe	unknown
https://meet.google.com	chromecache_835.2.dr, chromecache_576.2.dr	false	URL Reputation: safe	unknown
https://s3.amazonaws.com/media.racebx.com/transfer/img/e/5/0/e5009808-257b-45d2-84b3-279b52480c5a.jp	chromecache_430.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Birdwatch~	chromecache_600.2.dr, chromecache_814.2.dr, chromecache_907.2.dr, chromecache_685.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
15.197.225.128	pilgrimpierun.com	United States	7430	TANDEMUS	false
173.194.76.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.26.63	scontent-msp1-1.cdninstagram.com	United States	32934	FACEBOOKUS	false
157.240.253.63	instagram.c10r.instagram.com	United States	32934	FACEBOOKUS	false
104.244.43.131	abs-zero.twimg.com	United States	54113	FASTLYUS	false
157.240.0.174	z-p42-instagram.c10r.instagram.com	United States	32934	FACEBOOKUS	false
162.159.140.229	t.co	United States	13335	CLOUDFLARENETUS	false
151.101.8.158	dualstack.video.twitter.map.fastly.net	United States	54113	FASTLYUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.244.42.130	unknown	United States	13414	TWITTERUS	false
18.235.145.158	unknown	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
199.232.188.159	twimg.twitter.map.fastly.net	United States	54113	FASTLYUS	false
157.240.0.63	unknown	United States	32934	FACEBOOKUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false
142.250.181.238	analytics.google.com	United States	15169	GOOGLEUS	false
157.240.251.63	scontent.cdninstagram.com	United States	32934	FACEBOOKUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
104.244.42.66	tpop-api.x.com	United States	13414	TWITTERUS	false
104.244.42.65	twitter.com	United States	13414	TWITTERUS	false
104.244.42.1	unknown	United States	13414	TWITTERUS	false
104.244.42.2	tpop-api.twitter.com	United States	13414	TWITTERUS	false
34.238.9.139	pilgrimpierun.enmotive.com	United States	14618	AMAZON-AESUS	false
104.244.42.193	x.com	United States	13414	TWITTERUS	false
52.217.205.40	s3.amazonaws.com	United States	16509	AMAZON-02US	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
52.216.218.248	unknown	United States	16509	AMAZON-02US	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
172.217.16.130	td.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522192
Start date and time:	2024-09-29 14:21:21 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://pilgrimpierun.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@30/782@90/34
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.instagram.com/pilgrimpierun Browse: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/course-map Browse: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/results-and-photos Browse: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/faq Browse: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/packet-pick-up Browse: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/sponsorship Browse: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary Browse: https://www.twitter.com/pilgrimpierun

Input	Output
URL: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary Model: jbxai	{ "brand":["Pilgrim Pie Run for Rotary"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Log in", "text_input_field_labels":["EVENT SCHEDULE", "EVENT LOCATION", "EVENT COUNTDOWN"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary Model: jbxai	{ "brand":["Pilgrim Pie Run for Rotary"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Donate", "text_input_field_labels":["EVENT SCHEDULE", "EVENT LOCATION", "EVENT COUNTDOWN"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary Model: jbxai	{ "brand":["Pilgrim Pie Run for Rotary"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Log in", "text_input_field_labels":["EVENT SCHEDULE", "EVENT LOCATION", "EVENT COUNTDOWN"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary Model: jbxai	{ "brand":["Pilgrim Pie Run for Rotary"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Log in", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary Model: jbxai	{ "brand":["Pilgrim Pie Run for Rotary"], "contains_trigger_text":true, "trigger_text":"Run", "prominent_button_name":"Register Now!", "text_input_field_labels":["EVENT SCHEDULE", "EVENT LOCATION", "EVENT COUNTDOWN"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/course-map Model: jbxai	{ "brand":["USATF Certified Course"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Donate", "text_input_field_labels":["Elm Ave.", "Blackston", "Park R", "Brainard", "Madison", "Sunst", "Edgewo", "Leic"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/results-and-photos Model: jbxai	{ "brand":["Pilgrim Pie Run for Rotary"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"Log in", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/packet-pick-up Model: jbxai	{ "brand":["Pilgrim Pie Run for Rotary"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Log in", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/faq Model: jbxai	{ "brand":["Pilgrim Pie Run for Rotary"], "contains_trigger_text":true, "trigger_text":"click here", "prominent_button_name":"Donate", "text_input_field_labels":["Please contact pilgrimpierun@lagrangerotary.org", "Please contact helg@enmotive.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/faq Model: jbxai	{ "phishing_score":2, "brands":"Pilgrim Pie Run for Rotary", "legit_domain":"enmotive.com", "classification":"unknown", "reasons":["The URL 'pilgrimpierun.enmotive.com' is a subdomain of 'enmotive.com'.", "The brand 'Pilgrim Pie Run for Rotary' is not widely recognized and is classified as 'unknown'.", "The domain 'enmotive.com' appears to be a legitimate domain, likely associated with event management or similar services.", "The email addresses provided ('pilgrimpierun@lagrangerotary.org' and 'helg@enmotive.com') do not raise immediate red flags and seem to be associated with the event and the service provider respectively.", "No suspicious elements such as misspellings, extra characters, or unusual domain extensions were found in the URL."], "brand_matches":[true], "url_match":true, "brand_input":"Pilgrim Pie Run for Rotary", "input_fields":"Please contact pilgrimpierun@lagrangerotary.org, Please contact helg@enmotive.com"}

URL: https://x.com/pilgrimpierun?mx=2 Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign up", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary Model: jbxai	{ "brand":["Pilgrim Pie Run for Rotary"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Log in", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://x.com/i/flow/login?redirect_after_login=%2Fpilgrimpierun Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary Model: jbxai	{ "brand":["Pilgrim Pie Run for Rotary"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Donate", "text_input_field_labels":["EVENT SCHEDULE", "EVENT LOCATION", "EVENT COUNTDOWN"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pilgrimpierun.enmotive.com/events/24th-annual-pilgrim-pie-run-for-rotary/page/sponsorship Model: jbxai	{ "brand":["Pilgrim Pie", "Run for Rotary"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"Donate", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 11:22:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9731185462584877
Encrypted:	false
SSDEEP:	48:8pdVT91hgHeWidAKZdA19ehwiZUklqehny+3:8Bbhz8Uy
MD5:	36B956892284B60D5A8F1919D036714E
SHA1:	9E43F9CEF8220FA5A76D85C6F48227FE050FC266
SHA-256:	4B4116DDC03DAC519B4D9C00ADB500F58F825C5146BBCFB098B766946DB2BF2B
SHA-512:	B2B64872A47DD5E3A20A1C677FB8EBA507E8692E0C2F7161579B9D71BC14E806632DBC66BF2017721874ABCEBBA4B09A6AA33C140A8B418ADF5339895E2C9759
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....N.o9j...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y.b....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y.b....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y.b....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y.b..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y.b...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............F.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://pilgrimpierun.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 404

Chrome Cache Entry: 405

Chrome Cache Entry: 408

Chrome Cache Entry: 409

Chrome Cache Entry: 410

Chrome Cache Entry: 411

Chrome Cache Entry: 412

Chrome Cache Entry: 413

Chrome Cache Entry: 414

Chrome Cache Entry: 415

Chrome Cache Entry: 416

Chrome Cache Entry: 417

Chrome Cache Entry: 418

Chrome Cache Entry: 419

Chrome Cache Entry: 420

Chrome Cache Entry: 421

Chrome Cache Entry: 422

Chrome Cache Entry: 423

Chrome Cache Entry: 424

Chrome Cache Entry: 425

Windows Analysis Report
https://pilgrimpierun.com/

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 14:22:18.145632029 CEST	192.168.2.5	1.1.1.1	0x725d	Standard query (0)	pilgrimpierun.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:18.146136999 CEST	192.168.2.5	1.1.1.1	0x435	Standard query (0)	pilgrimpierun.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:19.144185066 CEST	192.168.2.5	1.1.1.1	0xd9	Standard query (0)	pilgrimpierun.enmotive.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:19.144695997 CEST	192.168.2.5	1.1.1.1	0xe5ab	Standard query (0)	pilgrimpierun.enmotive.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:20.128693104 CEST	192.168.2.5	1.1.1.1	0xabf8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:20.128876925 CEST	192.168.2.5	1.1.1.1	0x3198	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:21.159897089 CEST	192.168.2.5	1.1.1.1	0x48f	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:21.160079956 CEST	192.168.2.5	1.1.1.1	0xaacc	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 29, 2024 14:22:21.179954052 CEST	192.168.2.5	1.1.1.1	0xebca	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:21.180614948 CEST	192.168.2.5	1.1.1.1	0x6fdf	Standard query (0)	s3.amazonaws.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:23.882602930 CEST	192.168.2.5	1.1.1.1	0x48cc	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:23.882827997 CEST	192.168.2.5	1.1.1.1	0x9bd4	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:23.887290001 CEST	192.168.2.5	1.1.1.1	0xfa1c	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:23.887567997 CEST	192.168.2.5	1.1.1.1	0xfd23	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Sep 29, 2024 14:22:23.925071001 CEST	192.168.2.5	1.1.1.1	0xb9fa	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:23.925340891 CEST	192.168.2.5	1.1.1.1	0x14e5	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Sep 29, 2024 14:22:24.451772928 CEST	192.168.2.5	1.1.1.1	0x63d3	Standard query (0)	pilgrimpierun.enmotive.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:24.451921940 CEST	192.168.2.5	1.1.1.1	0x934	Standard query (0)	pilgrimpierun.enmotive.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:24.468031883 CEST	192.168.2.5	1.1.1.1	0x655f	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:24.468456030 CEST	192.168.2.5	1.1.1.1	0x4394	Standard query (0)	s3.amazonaws.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:24.580622911 CEST	192.168.2.5	1.1.1.1	0xff20	Standard query (0)	maps.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:24.581290960 CEST	192.168.2.5	1.1.1.1	0xeb92	Standard query (0)	maps.google.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:25.762649059 CEST	192.168.2.5	1.1.1.1	0x358a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:25.762794018 CEST	192.168.2.5	1.1.1.1	0x636d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:26.074470997 CEST	192.168.2.5	1.1.1.1	0xf475	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:26.074800014 CEST	192.168.2.5	1.1.1.1	0x7271	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Sep 29, 2024 14:22:26.147064924 CEST	192.168.2.5	1.1.1.1	0xae38	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:26.147480011 CEST	192.168.2.5	1.1.1.1	0x3ac6	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 29, 2024 14:22:27.356374979 CEST	192.168.2.5	1.1.1.1	0xa3a9	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:27.356586933 CEST	192.168.2.5	1.1.1.1	0x92a6	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Sep 29, 2024 14:22:30.521945000 CEST	192.168.2.5	1.1.1.1	0xc6f2	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:30.522357941 CEST	192.168.2.5	1.1.1.1	0xe419	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:31.537251949 CEST	192.168.2.5	1.1.1.1	0xc8a5	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:31.537801027 CEST	192.168.2.5	1.1.1.1	0x1be0	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Sep 29, 2024 14:22:34.628757000 CEST	192.168.2.5	1.1.1.1	0x465d	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:34.629151106 CEST	192.168.2.5	1.1.1.1	0x34b3	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:34.647504091 CEST	192.168.2.5	1.1.1.1	0xb98b	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:34.647659063 CEST	192.168.2.5	1.1.1.1	0xa88c	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Sep 29, 2024 14:22:37.396457911 CEST	192.168.2.5	1.1.1.1	0x8255	Standard query (0)	www.instagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:37.397226095 CEST	192.168.2.5	1.1.1.1	0xdd0	Standard query (0)	www.instagram.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:39.404932022 CEST	192.168.2.5	1.1.1.1	0x70a1	Standard query (0)	static.cdninstagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:39.405606031 CEST	192.168.2.5	1.1.1.1	0x1af2	Standard query (0)	static.cdninstagram.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:41.001796961 CEST	192.168.2.5	1.1.1.1	0x4ae4	Standard query (0)	static.cdninstagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:41.001929998 CEST	192.168.2.5	1.1.1.1	0xba84	Standard query (0)	static.cdninstagram.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:45.150249958 CEST	192.168.2.5	1.1.1.1	0x306a	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:45.150249958 CEST	192.168.2.5	1.1.1.1	0x173f	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:45.963761091 CEST	192.168.2.5	1.1.1.1	0x1088	Standard query (0)	www.instagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:45.964140892 CEST	192.168.2.5	1.1.1.1	0xc092	Standard query (0)	www.instagram.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:46.219830990 CEST	192.168.2.5	1.1.1.1	0x23ea	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:46.220160961 CEST	192.168.2.5	1.1.1.1	0xcf04	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:50.495506048 CEST	192.168.2.5	1.1.1.1	0xde11	Standard query (0)	scontent-msp1-1.cdninstagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:50.496268034 CEST	192.168.2.5	1.1.1.1	0x3874	Standard query (0)	scontent-msp1-1.cdninstagram.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:54.569570065 CEST	192.168.2.5	1.1.1.1	0x6629	Standard query (0)	scontent-msp1-1.cdninstagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:54.570020914 CEST	192.168.2.5	1.1.1.1	0x3ff4	Standard query (0)	scontent-msp1-1.cdninstagram.com	65	IN (0x0001)	false
Sep 29, 2024 14:22:54.859100103 CEST	192.168.2.5	1.1.1.1	0x5d4	Standard query (0)	graph.instagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:22:54.859600067 CEST	192.168.2.5	1.1.1.1	0xd12b	Standard query (0)	graph.instagram.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:22.657809973 CEST	192.168.2.5	1.1.1.1	0xdf12	Standard query (0)	www.twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:22.658063889 CEST	192.168.2.5	1.1.1.1	0x3ddd	Standard query (0)	www.twitter.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:23.380502939 CEST	192.168.2.5	1.1.1.1	0x66db	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:23.380646944 CEST	192.168.2.5	1.1.1.1	0x268f	Standard query (0)	twitter.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:24.193142891 CEST	192.168.2.5	1.1.1.1	0xce86	Standard query (0)	x.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:24.193459988 CEST	192.168.2.5	1.1.1.1	0x7262	Standard query (0)	x.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:25.034384012 CEST	192.168.2.5	1.1.1.1	0x51bc	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:25.034982920 CEST	192.168.2.5	1.1.1.1	0xd619	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:25.036106110 CEST	192.168.2.5	1.1.1.1	0x7dee	Standard query (0)	api.twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:25.036643982 CEST	192.168.2.5	1.1.1.1	0x1d9c	Standard query (0)	api.twitter.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:25.116667986 CEST	192.168.2.5	1.1.1.1	0xc44e	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:25.116898060 CEST	192.168.2.5	1.1.1.1	0xbc23	Standard query (0)	t.co	65	IN (0x0001)	false
Sep 29, 2024 14:23:25.126775980 CEST	192.168.2.5	1.1.1.1	0x8efc	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:25.127265930 CEST	192.168.2.5	1.1.1.1	0xcf7d	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:25.186815023 CEST	192.168.2.5	1.1.1.1	0x85c2	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:25.187378883 CEST	192.168.2.5	1.1.1.1	0x3ff4	Standard query (0)	api.x.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:26.788785934 CEST	192.168.2.5	1.1.1.1	0xa61	Standard query (0)	video.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:26.789227962 CEST	192.168.2.5	1.1.1.1	0xf0f8	Standard query (0)	video.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:26.859760046 CEST	192.168.2.5	1.1.1.1	0xe300	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:26.862469912 CEST	192.168.2.5	1.1.1.1	0xe38a	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:27.546715975 CEST	192.168.2.5	1.1.1.1	0xa1fb	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:27.546928883 CEST	192.168.2.5	1.1.1.1	0xc1e3	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:28.279393911 CEST	192.168.2.5	1.1.1.1	0x2ca4	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:28.279539108 CEST	192.168.2.5	1.1.1.1	0xab84	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:32.584903002 CEST	192.168.2.5	1.1.1.1	0x347c	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:32.585197926 CEST	192.168.2.5	1.1.1.1	0xc093	Standard query (0)	api.x.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:45.883778095 CEST	192.168.2.5	1.1.1.1	0x742e	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:45.883980989 CEST	192.168.2.5	1.1.1.1	0xc83	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 14:23:50.660227060 CEST	192.168.2.5	1.1.1.1	0x7f35	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:50.660645008 CEST	192.168.2.5	1.1.1.1	0x8067	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Sep 29, 2024 14:23:59.869430065 CEST	192.168.2.5	1.1.1.1	0xb72c	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:23:59.869529963 CEST	192.168.2.5	1.1.1.1	0x16e4	Standard query (0)	twitter.com	65	IN (0x0001)	false
Sep 29, 2024 14:24:00.775146961 CEST	192.168.2.5	1.1.1.1	0xddbe	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 14:24:00.775299072 CEST	192.168.2.5	1.1.1.1	0x2cc4	Standard query (0)	twitter.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-29 12:22:19 UTC	660	OUT	GET / HTTP/1.1 Host: pilgrimpierun.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 12:22:19 UTC	357	IN	HTTP/1.1 301 Moved Permanently Content-Length: 115 Content-Type: text/html; charset=utf-8 Date: Sun, 29 Sep 2024 12:22:19 GMT Location: https://pilgrimpierun.enmotive.com/events/23rd-annual-pilgrim-pie-run-for-rotary Server: ip-10-123-124-69.ec2.internal Vary: Accept-Encoding X-Request-Id: f853b628-2840-4a0f-b1ba-5f100d4fc8f3 Connection: close
2024-09-29 12:22:19 UTC	115	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 6c 67 72 69 6d 70 69 65 72 75 6e 2e 65 6e 6d 6f 74 69 76 65 2e 63 6f 6d 2f 65 76 65 6e 74 73 2f 32 33 72 64 2d 61 6e 6e 75 61 6c 2d 70 69 6c 67 72 69 6d 2d 70 69 65 2d 72 75 6e 2d 66 6f 72 2d 72 6f 74 61 72 79 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pilgrimpierun.enmotive.com/events/23rd-annual-pilgrim-pie-run-for-rotary">Moved Permanently</a>.

Timestamp	Bytes transferred	Direction	Data
2024-09-29 12:22:19 UTC	714	OUT	GET /events/23rd-annual-pilgrim-pie-run-for-rotary HTTP/1.1 Host: pilgrimpierun.enmotive.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 12:22:20 UTC	892	IN	HTTP/1.1 302 Found Date: Sun, 29 Sep 2024 12:22:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=yi4lDFoTWj/msCL6icrbNKc4ZchoVfFwd8vwAkRoq0v0TwS223Q/3XIOeF9Mz4fIDs2BLdq5/Xm5bOcKSX+rFHoW5ueOGnBAbLJpJHpcuatHYz1kgTQ73m7ef1NO; Expires=Sun, 06 Oct 2024 12:22:19 GMT; Path=/ Set-Cookie: AWSALBCORS=yi4lDFoTWj/msCL6icrbNKc4ZchoVfFwd8vwAkRoq0v0TwS223Q/3XIOeF9Mz4fIDs2BLdq5/Xm5bOcKSX+rFHoW5ueOGnBAbLJpJHpcuatHYz1kgTQ73m7ef1NO; Expires=Sun, 06 Oct 2024 12:22:19 GMT; Path=/; SameSite=None; Secure Server: nginx Set-Cookie: ENMOTIVE=5atcf32tb8tsavfamqgd57doal; expires=Thu, 28-Nov-2024 12:22:19 GMT; Max-Age=5184000; path=/; domain=.enmotive.com; HttpOnly X-Content-Type-Options: nosniff Location: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary Strict-Transport-Security: max-age=63072000
2024-09-29 12:22:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-29 12:22:20 UTC	1034	OUT	GET /events/view/24th-annual-pilgrim-pie-run-for-rotary HTTP/1.1 Host: pilgrimpierun.enmotive.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=yi4lDFoTWj/msCL6icrbNKc4ZchoVfFwd8vwAkRoq0v0TwS223Q/3XIOeF9Mz4fIDs2BLdq5/Xm5bOcKSX+rFHoW5ueOGnBAbLJpJHpcuatHYz1kgTQ73m7ef1NO; AWSALBCORS=yi4lDFoTWj/msCL6icrbNKc4ZchoVfFwd8vwAkRoq0v0TwS223Q/3XIOeF9Mz4fIDs2BLdq5/Xm5bOcKSX+rFHoW5ueOGnBAbLJpJHpcuatHYz1kgTQ73m7ef1NO; ENMOTIVE=5atcf32tb8tsavfamqgd57doal
2024-09-29 12:22:20 UTC	642	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 12:22:20 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 73041 Connection: close Set-Cookie: AWSALB=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT; Expires=Sun, 06 Oct 2024 12:22:20 GMT; Path=/ Set-Cookie: AWSALBCORS=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT; Expires=Sun, 06 Oct 2024 12:22:20 GMT; Path=/; SameSite=None; Secure Server: nginx X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-09-29 12:22:20 UTC	15742	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 37 30 30 30 38 61 65 65 63 63 22 2c 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 3a 22 33 37 33 30 31 31 35 31 31 22 7d 3b 3b 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e Data Ascii: <!DOCTYPE html><html lang="en"><head><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"70008aeecc",applicationID:"373011511"};;/*! For license in
2024-09-29 12:22:20 UTC	8714	IN	Data Raw: 63 74 22 3b 72 2e 64 28 74 2c 7b 57 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 6e 3d 72 28 37 38 33 36 29 3b 63 6c 61 73 73 20 69 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 72 29 7b 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3d 65 2c 74 68 69 73 2e 61 67 67 72 65 67 61 74 6f 72 3d 74 2c 74 68 69 73 2e 65 65 3d 6e 2e 65 65 2e 67 65 74 28 65 29 2c 74 68 69 73 2e 66 65 61 74 75 72 65 4e 61 6d 65 3d 72 2c 74 68 69 73 2e 62 6c 6f 63 6b 65 64 3d 21 31 7d 7d 7d 2c 37 36 30 33 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 6a 3a 28 29 3d 3e 50 7d 29 3b 76 61 72 20 6e 3d 72 28 38 36 30 29 2c 69 3d 72 28 32 35 35 35 29 2c 6f 3d 72 28 33 33 37 31 29 2c 61 3d 72 28 39 39 30 38 29 2c 73 3d 72 28 37 38 Data Ascii: ct";r.d(t,{W:()=>i});var n=r(7836);class i{constructor(e,t,r){this.agentIdentifier=e,this.aggregator=t,this.ee=n.ee.get(e),this.featureName=r,this.blocked=!1}}},7603:(e,t,r)=>{"use strict";r.d(t,{j:()=>P});var n=r(860),i=r(2555),o=r(3371),a=r(9908),s=r(78
2024-09-29 12:22:20 UTC	16384	IN	Data Raw: 75 73 65 20 73 74 72 69 63 74 22 3b 69 28 38 33 37 34 29 3b 76 61 72 20 65 3d 69 28 39 34 34 29 2c 74 3d 69 28 36 33 34 34 29 2c 72 3d 69 28 39 35 36 36 29 3b 63 6c 61 73 73 20 6e 7b 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 28 30 2c 72 2e 4c 41 29 28 31 36 29 29 7b 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3d 65 7d 23 65 28 74 2c 2e 2e 2e 72 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 61 70 69 3f 2e 5b 74 5d 29 72 65 74 75 72 6e 20 74 68 69 73 2e 61 70 69 5b 74 5d 28 2e 2e 2e 72 29 3b 28 30 2c 65 2e 52 29 28 33 35 2c 74 29 7d 61 64 64 50 61 67 65 41 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 65 28 22 61 64 64 50 61 67 Data Ascii: use strict";i(8374);var e=i(944),t=i(6344),r=i(9566);class n{agentIdentifier;constructor(e=(0,r.LA)(16)){this.agentIdentifier=e}#e(t,...r){if("function"==typeof this.api?.[t])return this.api[t](...r);(0,e.R)(35,t)}addPageAction(e,t){return this.#e("addPag
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 2d 63 6f 6c 6f 72 29 3b 0a 09 66 69 6c 74 65 72 3a 20 62 72 69 67 68 74 6e 65 73 73 28 31 2e 32 29 3b 0a 7d 0a 23 73 69 74 65 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 0a 2e 6d 6f 62 69 6c 65 2d 6e 61 76 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 20 7b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 30 2e 32 35 72 65 6d 20 76 61 72 28 2d 2d 73 69 74 65 2d 70 72 69 6d 61 72 79 2d 73 68 61 64 6f 77 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2f 2a 2a 20 53 65 63 6f 6e 64 61 72 79 20 42 75 74 74 6f 6e 20 2a 2f 0a 23 73 69 74 65 20 2e 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 20 7b 0a 09 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 69 74 65 2d 73 65 63 6f 6e 64 61 72 79 2d 62 74 6e 2d 74 65 78 74 29 3b 0a 09 62 61 Data Ascii: -color);filter: brightness(1.2);}#site .btn-primary:focus,.mobile-nav .btn-primary:focus {box-shadow: 0 0 0 0.25rem var(--site-primary-shadow) !important;}/** Secondary Button */#site .btn-secondary {color: var(--site-secondary-btn-text);ba
2024-09-29 12:22:21 UTC	15816	IN	Data Raw: 6c 28 2f 2f 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 6d 65 64 69 61 2e 72 61 63 65 62 78 2e 63 6f 6d 2f 74 72 61 6e 73 66 65 72 2f 69 6d 67 2f 33 2f 62 2f 64 2f 33 62 64 66 64 30 34 38 2d 30 65 35 63 2d 34 33 64 30 2d 62 35 65 38 2d 32 63 63 38 63 63 39 35 31 37 32 34 2e 6a 70 67 29 3b 22 3e 0a 09 09 3c 68 31 20 63 6c 61 73 73 3d 22 68 65 72 6f 2d 62 61 6e 6e 65 72 2d 6c 61 62 65 6c 22 3e 0a 09 09 09 32 34 74 68 20 41 6e 6e 75 61 6c 20 50 69 6c 67 72 69 6d 20 50 69 65 20 52 75 6e 20 66 6f 72 20 52 6f 74 61 72 79 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 2d 62 6c 6f 63 6b 20 73 6d 61 6c 6c 22 3e 52 75 6e 3c 2f 73 70 61 6e 3e 0a 09 09 3c 2f 68 31 3e 0a 09 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0d 0a 3c 73 65 63 74 69 6f 6e Data Ascii: l(//s3.amazonaws.com/media.racebx.com/transfer/img/3/b/d/3bdfd048-0e5c-43d0-b5e8-2cc8cc951724.jpg);"><h1 class="hero-banner-label">24th Annual Pilgrim Pie Run for Rotary<span class="d-block small">Run</span></h1></div></section><section
2024-09-29 12:22:21 UTC	1	IN	Data Raw: 3e Data Ascii: >

Timestamp	Bytes transferred	Direction	Data
2024-09-29 12:22:21 UTC	950	OUT	GET /css/flourish.bundle.css?1727192886 HTTP/1.1 Host: pilgrimpierun.enmotive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ENMOTIVE=5atcf32tb8tsavfamqgd57doal; AWSALB=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT; AWSALBCORS=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT
2024-09-29 12:22:21 UTC	709	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 12:22:21 GMT Content-Type: text/css Content-Length: 104375 Connection: close Set-Cookie: AWSALB=MOk8F4dDOgoKXRaNhWKN+bODUfVtFnRhq/DvdeWV7Amspl4duTJc/GBhj3dY9aaUmABkpheauEhZY+awJpvRWgsD+ScUIu0QKMwtOyEKmncWF2S+HiAm9WtDMNi9; Expires=Sun, 06 Oct 2024 12:22:21 GMT; Path=/ Set-Cookie: AWSALBCORS=MOk8F4dDOgoKXRaNhWKN+bODUfVtFnRhq/DvdeWV7Amspl4duTJc/GBhj3dY9aaUmABkpheauEhZY+awJpvRWgsD+ScUIu0QKMwtOyEKmncWF2S+HiAm9WtDMNi9; Expires=Sun, 06 Oct 2024 12:22:21 GMT; Path=/; SameSite=None; Secure Server: nginx Last-Modified: Mon, 23 Sep 2024 17:09:53 GMT Vary: Accept-Encoding ETag: "66f1a0e1-197b7" Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-09-29 12:22:21 UTC	15675	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 43 53 53 20 46 72 61 6d 65 77 6f 72 6b 20 31 2e 31 33 2e 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 61 70 69 2e 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 63 61 74 65 67 6f 72 79 2f 74 68 65 6d 69 6e 67 2f 0a 20 2a 2f 0a 0a 2f 2a 20 4c 61 79 6f 75 74 20 68 65 6c 70 65 72 73 0a 2d 2d Data Ascii: /! jQuery UI CSS Framework 1.13.2 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license * * http://api.jqueryui.com/category/theming/ // Layout helpers--
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 41 43 48 35 42 41 6b 42 41 41 45 41 4c 41 41 41 41 41 41 6f 41 43 67 41 41 41 4b 56 6a 42 2b 67 75 2b 6a 47 34 6b 4f 52 54 56 72 56 68 52 6c 73 6e 6e 32 64 4a 33 5a 6c 65 46 61 70 74 46 72 62 2b 43 58 6d 4f 39 4f 6f 7a 65 4c 35 56 66 50 39 39 48 76 41 57 68 70 69 55 64 63 77 6b 70 42 48 33 38 32 35 41 77 59 64 55 38 78 54 71 6c 4c 47 68 74 43 6f 73 41 72 4b 4d 70 76 66 61 31 6d 4d 52 61 65 39 56 76 57 5a 66 65 42 32 58 66 50 6b 65 4c 6d 6d 31 38 6c 55 63 42 6a 2b 70 35 64 6e 4e 38 6a 58 5a 33 59 49 47 45 68 59 75 4f 55 6e 34 35 61 6f 43 44 6b 70 31 36 68 6c 35 49 6a 59 4a 76 6a 57 4b 63 6e 6f 47 51 70 71 79 50 6c 70 4f 68 72 33 61 45 6c 61 71 72 71 35 36 42 71 37 56 41 41 41 4f 77 3d 3d 22 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 2d 6d 73 Data Ascii: ACH5BAkBAAEALAAAAAAoACgAAAKVjB+gu+jG4kORTVrVhRlsnn2dJ3ZleFaptFrb+CXmO9OozeL5VfP99HvAWhpiUdcwkpBH3825AwYdU8xTqlLGhtCosArKMpvfa1mMRae9VvWZfeB2XfPkeLmm18lUcBj+p5dnN8jXZ3YIGEhYuOUn45aoCDkp16hl5IjYJvjWKcnoGQpqyPlpOhr3aElaqrq56Bq7VAAAOw==");height: 100%;-ms
2024-09-29 12:22:21 UTC	406	IN	Data Raw: 6e 3a 20 2d 38 30 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 31 2d 77 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 39 36 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 31 2d 6e 77 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 31 32 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 32 2d 6e 2d 73 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 32 38 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 32 2d 6e 65 2d 73 77 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 Data Ascii: n: -80px -48px; }.ui-icon-arrowthick-1-w { background-position: -96px -48px; }.ui-icon-arrowthick-1-nw { background-position: -112px -48px; }.ui-icon-arrowthick-2-n-s { background-position: -128px -48px; }.ui-icon-arrowthick-2-ne-sw { background-posit
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 73 74 6f 70 2d 31 2d 6e 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 39 32 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 73 74 6f 70 2d 31 2d 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 32 30 38 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 73 74 6f 70 2d 31 2d 73 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 32 32 34 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 73 74 6f 70 2d 31 2d 77 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d Data Ascii: }.ui-icon-arrowthickstop-1-n { background-position: -192px -48px; }.ui-icon-arrowthickstop-1-e { background-position: -208px -48px; }.ui-icon-arrowthickstop-1-s { background-position: -224px -48px; }.ui-icon-arrowthickstop-1-w { background-position: -
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 34 70 78 7d 2e 64 72 6f 70 7a 6f 6e 65 20 2e 64 7a 2d 70 72 65 76 69 65 77 2e 64 7a 2d 70 72 6f 63 65 73 73 69 6e 67 20 2e 64 7a 2d 70 72 6f 67 72 65 73 73 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 32 73 20 6c 69 6e 65 61 72 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 32 73 20 6c 69 6e 65 61 72 3b 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 32 73 20 6c 69 6e 65 61 72 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 32 73 20 6c 69 6e 65 61 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 32 73 20 6c 69 6e 65 61 72 7d 2e 64 72 6f 70 7a 6f 6e 65 20 2e 64 7a 2d 70 72 65 76 69 65 77 2e 64 7a 2d 63 6f 6d 70 6c 65 74 65 20 2e 64 7a Data Ascii: 4px}.dropzone .dz-preview.dz-processing .dz-progress{opacity:1;-webkit-transition:all 0.2s linear;-moz-transition:all 0.2s linear;-ms-transition:all 0.2s linear;-o-transition:all 0.2s linear;transition:all 0.2s linear}.dropzone .dz-preview.dz-complete .dz
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 65 74 3a 20 2d 32 38 35 33 70 78 3b 0a 7d 0a 0a 2e 69 74 69 5f 5f 6b 77 20 7b 0a 20 20 2d 2d 69 74 69 2d 66 6c 61 67 2d 6f 66 66 73 65 74 3a 20 2d 32 38 37 35 70 78 3b 0a 7d 0a 0a 2e 69 74 69 5f 5f 6b 79 20 7b 0a 20 20 2d 2d 69 74 69 2d 66 6c 61 67 2d 6f 66 66 73 65 74 3a 20 2d 32 38 39 37 70 78 3b 0a 7d 0a 0a 2e 69 74 69 5f 5f 6b 7a 20 7b 0a 20 20 2d 2d 69 74 69 2d 66 6c 61 67 2d 6f 66 66 73 65 74 3a 20 2d 32 39 31 39 70 78 3b 0a 7d 0a 0a 2e 69 74 69 5f 5f 6c 61 20 7b 0a 20 20 2d 2d 69 74 69 2d 66 6c 61 67 2d 6f 66 66 73 65 74 3a 20 2d 32 39 34 31 70 78 3b 0a 7d 0a 0a 2e 69 74 69 5f 5f 6c 62 20 7b 0a 20 20 2d 2d 69 74 69 2d 66 6c 61 67 2d 6f 66 66 73 65 74 3a 20 2d 32 39 36 33 70 78 3b 0a 7d 0a 0a 2e 69 74 69 5f 5f 6c 63 20 7b 0a 20 20 2d 2d 69 74 69 2d Data Ascii: et: -2853px;}.iti__kw { --iti-flag-offset: -2875px;}.iti__ky { --iti-flag-offset: -2897px;}.iti__kz { --iti-flag-offset: -2919px;}.iti__la { --iti-flag-offset: -2941px;}.iti__lb { --iti-flag-offset: -2963px;}.iti__lc { --iti-
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 66 6f 72 6d 3a 6e 6f 6e 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 62 74 6e 2d 77 68 69 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 2e 31 32 35 72 65 6d 20 2e 32 35 72 65 6d 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 37 35 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 72 65 6d 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 67 72 61 79 29 7d 2e 62 74 6e 2d 6f 72 61 6e 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 65 6d 2d 6f 72 61 6e 67 65 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 2e 31 32 35 72 65 6d 20 2e 32 35 72 65 6d 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 37 35 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 72 65 6d 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 62 74 6e 2e Data Ascii: form:none;white-space:nowrap}.btn-white{background:#fff;box-shadow:0 .125rem .25rem rgba(0,0,0,.075);font-size:.9rem;color:var(--bs-gray)}.btn-orange{background:var(--em-orange);box-shadow:0 .125rem .25rem rgba(0,0,0,.075);font-size:.9rem;color:#fff}.btn.
2024-09-29 12:22:21 UTC	6374	IN	Data Raw: 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 3a 74 68 69 6e 7d 2e 66 61 6e 63 79 2d 73 63 72 6f 6c 6c 62 61 72 73 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 7b 77 69 64 74 68 3a 31 30 70 78 7d 2e 66 61 6e 63 79 2d 73 63 72 6f 6c 6c 62 61 72 73 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 72 61 63 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 65 6d 2d 63 61 74 73 6b 69 6c 6c 29 7d 2e 66 61 6e 63 79 2d 73 63 72 6f 6c 6c 62 61 72 73 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 29 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 65 6d 2d 63 61 74 73 6b 69 6c 6c 29 3b 62 6f 72 64 65 Data Ascii: rollbar-width:thin}.fancy-scrollbars::-webkit-scrollbar{width:10px}.fancy-scrollbars::-webkit-scrollbar-track{background:var(--em-catskill)}.fancy-scrollbars::-webkit-scrollbar-thumb{background:var(--bs-secondary);border:2px solid var(--em-catskill);borde

Timestamp	Bytes transferred	Direction	Data
2024-09-29 12:22:21 UTC	949	OUT	GET /css/tinymce.bundle.css?1727192886 HTTP/1.1 Host: pilgrimpierun.enmotive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ENMOTIVE=5atcf32tb8tsavfamqgd57doal; AWSALB=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT; AWSALBCORS=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT
2024-09-29 12:22:21 UTC	708	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 12:22:21 GMT Content-Type: text/css Content-Length: 91912 Connection: close Set-Cookie: AWSALB=TFW/zIewVsQfHXiHX7bfz3rVORMApiE/i3/vsK4ZgS3LamC+LX0SBxVh226o7iZDD7I42DNc+JbRitCLpowjPm0b6pnJG9K3YbAB4joMniDDwzvpUXU6i3Y3Fo3c; Expires=Sun, 06 Oct 2024 12:22:21 GMT; Path=/ Set-Cookie: AWSALBCORS=TFW/zIewVsQfHXiHX7bfz3rVORMApiE/i3/vsK4ZgS3LamC+LX0SBxVh226o7iZDD7I42DNc+JbRitCLpowjPm0b6pnJG9K3YbAB4joMniDDwzvpUXU6i3Y3Fo3c; Expires=Sun, 06 Oct 2024 12:22:21 GMT; Path=/; SameSite=None; Secure Server: nginx Last-Modified: Mon, 23 Sep 2024 17:09:53 GMT Vary: Accept-Encoding ETag: "66f1a0e1-16708" Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-09-29 12:22:21 UTC	15676	IN	Data Raw: 2e 74 6f 78 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 32 32 66 33 65 3b 0a 20 20 63 75 72 73 6f 72 3a 20 61 75 74 6f 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 52 6f 62 6f 74 6f 2c 20 4f 78 79 67 65 6e 2d 53 61 6e 73 2c 20 55 62 75 6e 74 75 2c 20 43 61 6e 74 61 72 65 6c 6c 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f Data Ascii: .tox { box-shadow: none; box-sizing: content-box; color: #222f3e; cursor: auto; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen-Sans, Ubuntu, Cantarell, "Helvetica Neue", sans-serif; font-size: 16px; font-style: no
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 61 28 33 34 2c 20 34 37 2c 20 36 32 2c 20 30 2e 35 29 3b 0a 20 20 63 75 72 73 6f 72 3a 20 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 0a 7d 0a 2e 74 6f 78 20 2e 74 6f 78 2d 63 68 65 63 6b 62 6f 78 2d 2d 64 69 73 61 62 6c 65 64 20 2e 74 6f 78 2d 63 68 65 63 6b 62 6f 78 5f 5f 69 63 6f 6e 73 20 2e 74 6f 78 2d 63 68 65 63 6b 62 6f 78 2d 69 63 6f 6e 5f 5f 63 68 65 63 6b 65 64 20 73 76 67 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 61 28 33 34 2c 20 34 37 2c 20 36 32 2c 20 30 2e 35 29 3b 0a 7d 0a 2e 74 6f 78 20 2e 74 6f 78 2d 63 68 65 63 6b 62 6f 78 2d 2d 64 69 73 61 62 6c 65 64 20 2e 74 6f 78 2d 63 68 65 63 6b 62 6f 78 5f 5f 69 63 6f 6e 73 20 2e 74 6f 78 2d 63 68 65 63 6b 62 6f 78 2d 69 63 6f 6e 5f 5f 75 6e 63 68 65 63 6b 65 64 20 73 76 67 20 7b 0a 20 20 66 69 6c 6c 3a Data Ascii: a(34, 47, 62, 0.5); cursor: not-allowed;}.tox .tox-checkbox--disabled .tox-checkbox__icons .tox-checkbox-icon__checked svg { fill: rgba(34, 47, 62, 0.5);}.tox .tox-checkbox--disabled .tox-checkbox__icons .tox-checkbox-icon__unchecked svg { fill:
2024-09-29 12:22:21 UTC	406	IN	Data Raw: 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 7d 0a 2e 74 6f 78 20 2e 74 6f 78 2d 75 73 65 72 5f 5f 61 76 61 74 61 72 20 73 76 67 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 61 28 33 34 2c 20 34 37 2c 20 36 32 2c 20 30 2e 37 29 3b 0a 7d 0a 2e 74 6f 78 20 2e 74 6f 78 2d 75 73 65 72 5f 5f 61 76 61 74 61 72 20 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0a 20 20 6f 62 6a 65 63 74 2d 66 69 74 3a 20 63 6f 76 65 72 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 77 69 64 74 68 3a 20 33 36 70 78 3b 0a 7d 0a 2e 74 6f 78 20 2e 74 6f 78 2d 75 73 65 72 5f 5f 6e 61 6d 65 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 Data Ascii: s: center; display: flex;}.tox .tox-user__avatar svg { fill: rgba(34, 47, 62, 0.7);}.tox .tox-user__avatar img { border-radius: 50%; height: 36px; object-fit: cover; vertical-align: middle; width: 36px;}.tox .tox-user__name { color:
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 61 74 61 72 20 73 76 67 2c 0a 2e 74 6f 78 3a 6e 6f 74 28 5b 64 69 72 3d 72 74 6c 5d 29 20 2e 74 6f 78 2d 75 73 65 72 5f 5f 61 76 61 74 61 72 20 69 6d 67 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 7d 0a 2e 74 6f 78 3a 6e 6f 74 28 5b 64 69 72 3d 72 74 6c 5d 29 20 2e 74 6f 78 2d 75 73 65 72 5f 5f 61 76 61 74 61 72 20 2b 20 2e 74 6f 78 2d 75 73 65 72 5f 5f 6e 61 6d 65 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 74 6f 78 5b 64 69 72 3d 72 74 6c 5d 20 2e 74 6f 78 2d 75 73 65 72 5f 5f 61 76 61 74 61 72 20 73 76 67 2c 0a 2e 74 6f 78 5b 64 69 72 3d 72 74 6c 5d 20 2e 74 6f 78 2d 75 73 65 72 5f 5f 61 76 61 74 61 72 20 69 6d 67 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e Data Ascii: atar svg,.tox:not([dir=rtl]) .tox-user__avatar img { margin-right: 8px;}.tox:not([dir=rtl]) .tox-user__avatar + .tox-user__name { margin-left: 8px;}.tox[dir=rtl] .tox-user__avatar svg,.tox[dir=rtl] .tox-user__avatar img { margin-left: 8px;}.
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 34 70 78 3b 0a 7d 0a 2e 74 6f 78 20 2e 74 6f 78 2d 66 6f 72 6d 2d 67 72 6f 75 70 2d 2d 6d 61 78 69 6d 69 7a 65 20 7b 0a 20 20 66 6c 65 78 3a 20 31 3b 0a 7d 0a 2e 74 6f 78 20 2e 74 6f 78 2d 66 6f 72 6d 5f 5f 67 72 6f 75 70 2d 2d 65 72 72 6f 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 30 30 3b 0a 7d 0a 2e 74 6f 78 20 2e 74 6f 78 2d 66 6f 72 6d 5f 5f 67 72 6f 75 70 2d 2d 63 6f 6c 6c 65 63 74 69 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 7d 0a 2e 74 6f 78 20 2e 74 6f 78 2d 66 6f 72 6d 5f 5f 67 72 69 64 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 20 20 6a 75 73 Data Ascii: gin-bottom: 4px;}.tox .tox-form-group--maximize { flex: 1;}.tox .tox-form__group--error { color: #c00;}.tox .tox-form__group--collection { display: flex;}.tox .tox-form__grid { display: flex; flex-direction: row; flex-wrap: wrap; jus
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 38 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 38 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 70 78 3b 0a 7d 0a 2e 74 6f 78 20 2e 74 6f 78 2d 70 6f 70 2e 74 6f 78 2d 70 6f 70 2d 2d 62 6f 74 74 6f 6d 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 65 65 65 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 39 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 39 70 78 3b 0a 7d 0a 2e 74 6f 78 20 2e 74 6f 78 2d 70 6f 70 2e 74 6f 78 2d 70 6f 70 2d 2d 74 6f 70 3a 3a 62 65 66 6f Data Ascii: transparent; border-width: 8px; margin-left: -8px; margin-top: -1px;}.tox .tox-pop.tox-pop--bottom::before { border-color: #eeeeee transparent transparent transparent; border-width: 9px; margin-left: -9px;}.tox .tox-pop.tox-pop--top::befo
2024-09-29 12:22:21 UTC	10294	IN	Data Raw: 6e 67 29 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 0a 2e 74 6f 78 20 2e 74 6f 78 2d 74 6f 6f 6c 62 61 72 2d 6f 76 65 72 6c 6f 72 64 20 2e 74 6f 78 2d 74 6f 6f 6c 62 61 72 5f 5f 70 72 69 6d 61 72 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 74 6f 70 20 33 39 70 78 3b 0a 7d 0a 2e 74 6f 78 20 2e 74 6f 78 2d 65 64 69 74 6f 72 2d 68 65 61 64 65 72 20 3e 20 2e 74 6f 78 2d 74 6f 6f 6c 62 61 72 2d 2d 73 63 72 6f 6c 6c 69 6e 67 2c 0a 2e 74 6f 78 20 2e 74 6f 78 2d 74 6f 6f 6c 62 61 72 2d 6f 76 65 72 6c 6f 72 64 20 2e 74 6f 78 2d 74 6f 6f 6c 62 61 72 2d 2d 73 63 72 6f 6c 6c 69 6e 67 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e Data Ascii: ng):first-child,.tox .tox-toolbar-overlord .tox-toolbar__primary { background-position: center top 39px;}.tox .tox-editor-header > .tox-toolbar--scrolling,.tox .tox-toolbar-overlord .tox-toolbar--scrolling:first-child { background-image: none;}.

Timestamp	Bytes transferred	Direction	Data
2024-09-29 12:22:21 UTC	941	OUT	GET /css/themed.css?1727192886 HTTP/1.1 Host: pilgrimpierun.enmotive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ENMOTIVE=5atcf32tb8tsavfamqgd57doal; AWSALB=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT; AWSALBCORS=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT
2024-09-29 12:22:21 UTC	677	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 12:22:21 GMT Content-Type: text/css Content-Length: 0 Connection: close Set-Cookie: AWSALB=d2OAqXUNfbydXWAejFfB6k4LwSflUgSVJU3qVRGGNXntyyslFWk+9H8yeMnLd2PoPUQHLSXbHSu7r6F1B4j/COiBPSDQvWPtzSKx3qhIAuNyISa4hVLJUTxEfulL; Expires=Sun, 06 Oct 2024 12:22:21 GMT; Path=/ Set-Cookie: AWSALBCORS=d2OAqXUNfbydXWAejFfB6k4LwSflUgSVJU3qVRGGNXntyyslFWk+9H8yeMnLd2PoPUQHLSXbHSu7r6F1B4j/COiBPSDQvWPtzSKx3qhIAuNyISa4hVLJUTxEfulL; Expires=Sun, 06 Oct 2024 12:22:21 GMT; Path=/; SameSite=None; Secure Server: nginx Last-Modified: Mon, 23 Sep 2024 17:07:20 GMT ETag: "66f1a048-0" Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes

Timestamp	Bytes transferred	Direction	Data
2024-09-29 12:22:21 UTC	922	OUT	GET /js/ga4.js?1727192886 HTTP/1.1 Host: pilgrimpierun.enmotive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ENMOTIVE=5atcf32tb8tsavfamqgd57doal; AWSALB=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT; AWSALBCORS=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT
2024-09-29 12:22:21 UTC	719	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 12:22:21 GMT Content-Type: application/javascript Content-Length: 2980 Connection: close Set-Cookie: AWSALB=GKzI040O0x8GNPwOcg2lM5sX6Edr+Tp6KcDQRK/u9kvVG+KkQmB8c8lBHDlRV8sKpkXpncD0wX9AtBGAakaj8tv9WzabwsEMd2Lu5lXYYkcJ5astnA2y9tLerpIp; Expires=Sun, 06 Oct 2024 12:22:21 GMT; Path=/ Set-Cookie: AWSALBCORS=GKzI040O0x8GNPwOcg2lM5sX6Edr+Tp6KcDQRK/u9kvVG+KkQmB8c8lBHDlRV8sKpkXpncD0wX9AtBGAakaj8tv9WzabwsEMd2Lu5lXYYkcJ5astnA2y9tLerpIp; Expires=Sun, 06 Oct 2024 12:22:21 GMT; Path=/; SameSite=None; Secure Server: nginx Last-Modified: Mon, 23 Sep 2024 16:10:15 GMT Vary: Accept-Encoding ETag: "66f192e7-ba4" Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-09-29 12:22:21 UTC	2980	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 68 65 63 6b 20 69 66 20 47 41 34 20 66 6f 72 20 64 61 74 61 4c 61 79 65 72 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 69 73 47 41 34 28 29 7b 0a 09 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 3b 0a 7d 0a 0a 0a 0a 2f 2a 2a 0a 20 2a 20 45 76 65 6e 74 20 52 65 67 69 73 74 65 72 20 43 61 74 65 67 6f 72 79 0a 20 2a 20 45 76 65 6e 74 73 2f 5f 72 65 67 69 73 74 65 72 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 67 61 34 45 76 65 6e 74 52 65 67 69 73 74 65 72 43 61 74 65 67 6f 72 79 46 6f 72 6d 28 29 7b 0a 09 69 66 20 28 21 69 73 47 41 34 28 29 29 20 72 65 74 75 72 6e 3b 0a 0a 09 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 7b 20 65 63 6f 6d 6d 65 72 63 65 3a 20 6e 75 6c 6c 20 7d 29 3b 0a 0a 09 2f 2f 20 53 65 6c 65 63 Data Ascii: /** * Check if GA4 for dataLayer /function isGA4(){return window.dataLayer;}/* * Event Register Category * Events/_register */function ga4EventRegisterCategoryForm(){if (!isGA4()) return;dataLayer.push({ ecommerce: null });// Selec

Timestamp	Bytes transferred	Direction	Data
2024-09-29 12:22:21 UTC	934	OUT	GET /js/flourish.bundle.js?1727192886 HTTP/1.1 Host: pilgrimpierun.enmotive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ENMOTIVE=5atcf32tb8tsavfamqgd57doal; AWSALB=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT; AWSALBCORS=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT
2024-09-29 12:22:21 UTC	723	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 12:22:21 GMT Content-Type: application/javascript Content-Length: 320323 Connection: close Set-Cookie: AWSALB=8z69vrvUsAP7Yds+OJuvC+yOedgdtgoWhw4H+pSZHejKsTBTXS5zKBcbc/BG6WhMdyEOa/HPrXl1Tj791SBQei+u23YpdT+fCOnuGmMZScbp6222uBBJv22M1OFp; Expires=Sun, 06 Oct 2024 12:22:21 GMT; Path=/ Set-Cookie: AWSALBCORS=8z69vrvUsAP7Yds+OJuvC+yOedgdtgoWhw4H+pSZHejKsTBTXS5zKBcbc/BG6WhMdyEOa/HPrXl1Tj791SBQei+u23YpdT+fCOnuGmMZScbp6222uBBJv22M1OFp; Expires=Sun, 06 Oct 2024 12:22:21 GMT; Path=/; SameSite=None; Secure Server: nginx Last-Modified: Mon, 23 Sep 2024 17:09:53 GMT Vary: Accept-Encoding ETag: "66f1a0e1-4e343" Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-09-29 12:22:21 UTC	15661	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 73 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 73 2e 65 78 70 6f 72 74 73 2c 73 2c 73 2e 65 78 70 6f 72 74 73 2c 69 29 2c 73 2e 6c 3d 21 30 2c 73 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 65 2c 69 2e 63 3d 74 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 69 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function i(n){if(t[n])return t[n].exports;var s=t[n]={i:n,l:!1,exports:{}};return e[n].call(s.exports,s,s.exports,i),s.l=!0,s.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=fun
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 5b 5d 2c 69 3d 5b 5d 2c 6e 3d 76 65 28 65 2e 72 65 70 6c 61 63 65 28 50 2c 22 24 31 22 29 29 3b 72 65 74 75 72 6e 20 6e 5b 76 5d 3f 74 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 73 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 3d 6e 28 65 2c 6e 75 6c 6c 2c 73 2c 5b 5d 29 2c 61 3d 65 2e 6c 65 6e 67 74 68 3b 61 2d 2d 3b 29 28 72 3d 6f 5b 61 5d 29 26 26 28 65 5b 61 5d 3d 21 28 74 5b 61 5d 3d 72 29 29 7d 29 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 73 2c 72 29 7b 72 65 74 75 72 6e 20 74 5b 30 5d 3d 65 2c 6e 28 74 2c 6e 75 6c 6c 2c 72 2c 69 29 2c 74 5b 30 5d 3d 6e 75 6c 6c 2c 21 69 2e 70 6f 70 28 29 7d 7d 29 29 2c 68 61 73 3a 74 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 Data Ascii: ((function(e){var t=[],i=[],n=ve(e.replace(P,"$1"));return n[v]?te((function(e,t,i,s){for(var r,o=n(e,null,s,[]),a=e.length;a--;)(r=o[a])&&(e[a]=!(t[a]=r))})):function(e,s,r){return t[0]=e,n(t,null,r,i),t[0]=null,!i.pop()}})),has:te((function(e){return fu
2024-09-29 12:22:21 UTC	406	IN	Data Raw: 74 2c 69 29 7d 65 6c 73 65 20 69 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 69 7d 44 2e 65 78 74 65 6e 64 28 7b 68 61 73 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 65 2e 68 61 73 44 61 74 61 28 65 29 7c 7c 6f 65 2e 68 61 73 44 61 74 61 28 65 29 7d 2c 64 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 61 65 2e 61 63 63 65 73 73 28 65 2c 74 2c 69 29 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 65 2e 72 65 6d 6f 76 65 28 65 2c 74 29 7d 2c 5f 64 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 6f 65 2e 61 63 63 65 73 73 28 65 2c 74 2c 69 29 7d 2c 5f 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b Data Ascii: t,i)}else i=void 0;return i}D.extend({hasData:function(e){return ae.hasData(e)\|\|oe.hasData(e)},data:function(e,t,i){return ae.access(e,t,i)},removeData:function(e,t){ae.remove(e,t)},_data:function(e,t,i){return oe.access(e,t,i)},_removeData:function(e,t){
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 2e 67 65 74 28 72 2c 22 68 61 73 44 61 74 61 41 74 74 72 73 22 29 29 29 7b 66 6f 72 28 69 3d 6f 2e 6c 65 6e 67 74 68 3b 69 2d 2d 3b 29 6f 5b 69 5d 26 26 30 3d 3d 3d 28 6e 3d 6f 5b 69 5d 2e 6e 61 6d 65 29 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 26 26 28 6e 3d 6e 65 28 6e 2e 73 6c 69 63 65 28 35 29 29 2c 68 65 28 72 2c 6e 2c 73 5b 6e 5d 29 29 3b 6f 65 2e 73 65 74 28 72 2c 22 68 61 73 44 61 74 61 41 74 74 72 73 22 2c 21 30 29 7d 72 65 74 75 72 6e 20 73 7d 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 65 2e 73 65 74 28 74 68 69 73 2c 65 29 7d 29 29 3a 4a 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3b 69 66 28 72 26 26 76 6f Data Ascii: .get(r,"hasDataAttrs"))){for(i=o.length;i--;)o[i]&&0===(n=o[i].name).indexOf("data-")&&(n=ne(n.slice(5)),he(r,n,s[n]));oe.set(r,"hasDataAttrs",!0)}return s}return"object"==typeof e?this.each((function(){ae.set(this,e)})):J(this,(function(t){var i;if(r&&vo
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 29 29 7d 2c 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 59 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 68 69 73 29 7d 29 29 7d 2c 61 66 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 59 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 68 69 73 2e 6e 65 78 74 53 69 62 Data Ascii: fore(e,t.firstChild)}}))},before:function(){return Ye(this,arguments,(function(e){this.parentNode&&this.parentNode.insertBefore(e,this)}))},after:function(){return Ye(this,arguments,(function(e){this.parentNode&&this.parentNode.insertBefore(e,this.nextSib
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 65 41 74 74 72 69 62 75 74 65 28 69 29 7d 7d 29 2c 62 74 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 21 31 3d 3d 3d 74 3f 44 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 69 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 69 2c 69 29 2c 69 7d 7d 2c 44 2e 65 61 63 68 28 44 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 73 6f 75 72 63 65 2e 6d 61 74 63 68 28 2f 5c 77 2b 2f 67 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 77 74 5b 74 5d 7c 7c 44 2e 66 69 6e 64 2e 61 74 74 72 3b 77 74 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 73 2c 72 2c 6f 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 72 3d 77 74 5b 6f 5d 2c 77 74 5b 6f 5d 3d Data Ascii: eAttribute(i)}}),bt={set:function(e,t,i){return!1===t?D.removeAttr(e,i):e.setAttribute(i,i),i}},D.each(D.expr.match.bool.source.match(/\w+/g),(function(e,t){var i=wt[t]\|\|D.find.attr;wt[t]=function(e,t,n){var s,r,o=t.toLowerCase();return n\|\|(r=wt[o],wt[o]=
2024-09-29 12:22:22 UTC	16384	IN	Data Raw: 61 63 63 65 70 74 73 3a 7b 73 63 72 69 70 74 3a 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 65 63 6d 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 22 7d 2c 63 6f 6e 74 65 6e 74 73 3a 7b 73 63 72 69 70 74 3a 2f 5c 62 28 3f 3a 6a 61 76 61 7c 65 63 6d 61 29 73 63 72 69 70 74 5c 62 2f 7d 2c 63 6f 6e 76 65 72 74 65 72 73 3a 7b 22 74 65 78 74 20 73 63 72 69 70 74 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 44 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 65 29 2c 65 7d 7d 7d 29 2c 44 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 22 73 63 72 69 70 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/\b(?:java\|ecma)script\b/},converters:{"text script":function(e){return D.globalEval(e),e}}}),D.ajaxPrefilter("script",(function(
2024-09-29 12:22:22 UTC	16384	IN	Data Raw: 61 74 65 29 7d 2c 5f 6d 6f 75 73 65 44 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 21 74 29 7b 74 68 69 73 2e 5f 6d 6f 75 73 65 4d 6f 76 65 64 3d 21 31 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 26 26 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 28 69 29 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 44 6f 77 6e 45 76 65 6e 74 3d 69 3b 76 61 72 20 6e 3d 74 68 69 73 2c 73 3d 31 3d 3d 3d 69 2e 77 68 69 63 68 2c 72 3d 21 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 61 6e 63 65 6c 7c 7c 21 69 2e 74 61 72 67 65 74 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 65 28 69 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 61 6e 63 65 6c 29 2e 6c 65 6e 67 74 68 3b 72 65 74 Data Ascii: ate)},_mouseDown:function(i){if(!t){this._mouseMoved=!1,this._mouseStarted&&this._mouseUp(i),this._mouseDownEvent=i;var n=this,s=1===i.which,r=!("string"!=typeof this.options.cancel\|\|!i.target.nodeName)&&e(i.target).closest(this.options.cancel).length;ret
2024-09-29 12:22:22 UTC	16384	IN	Data Raw: 2e 32 34 35 32 31 30 31 2c 31 36 2e 31 32 37 33 37 32 39 20 31 35 2e 36 38 36 32 39 31 35 2c 31 37 2e 36 38 36 32 39 31 35 20 43 31 34 2e 31 32 34 31 39 34 33 2c 31 39 2e 32 34 38 33 38 38 37 20 31 34 2e 31 32 32 38 39 37 39 2c 32 31 2e 37 37 39 37 35 32 31 20 31 35 2e 36 38 39 33 30 32 32 2c 32 33 2e 33 34 36 31 35 36 34 20 4c 32 31 2e 33 34 33 31 34 35 38 2c 32 39 20 4c 31 35 2e 36 38 39 33 30 32 32 2c 33 34 2e 36 35 33 38 34 33 36 20 43 31 34 2e 31 32 32 38 39 37 39 2c 33 36 2e 32 32 30 32 34 37 39 20 31 34 2e 31 32 34 31 39 34 33 2c 33 38 2e 37 35 31 36 31 31 33 20 31 35 2e 36 38 36 32 39 31 35 2c 34 30 2e 33 31 33 37 30 38 35 20 43 31 37 2e 32 34 35 32 31 30 31 2c 34 31 2e 38 37 32 36 32 37 31 20 31 39 2e 37 38 32 33 39 36 35 2c 34 31 2e 38 37 34 34 Data Ascii: .2452101,16.1273729 15.6862915,17.6862915 C14.1241943,19.2483887 14.1228979,21.7797521 15.6893022,23.3461564 L21.3431458,29 L15.6893022,34.6538436 C14.1228979,36.2202479 14.1241943,38.7516113 15.6862915,40.3137085 C17.2452101,41.8726271 19.7823965,41.8744
2024-09-29 12:22:22 UTC	16384	IN	Data Raw: 73 41 74 74 72 69 62 75 74 65 28 22 6d 75 6c 74 69 70 6c 65 22 29 29 66 6f 72 28 43 3d 30 2c 41 3d 28 4f 3d 75 2e 6f 70 74 69 6f 6e 73 29 2e 6c 65 6e 67 74 68 3b 43 3c 41 3b 43 2b 2b 29 28 6d 3d 4f 5b 43 5d 29 2e 73 65 6c 65 63 74 65 64 26 26 72 2e 61 70 70 65 6e 64 28 70 2c 6d 2e 76 61 6c 75 65 29 3b 65 6c 73 65 28 21 64 7c 7c 22 63 68 65 63 6b 62 6f 78 22 21 3d 3d 28 7a 3d 64 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 22 72 61 64 69 6f 22 21 3d 3d 7a 7c 7c 75 2e 63 68 65 63 6b 65 64 29 26 26 72 2e 61 70 70 65 6e 64 28 70 2c 75 2e 76 61 6c 75 65 29 3b 66 6f 72 28 68 3d 4d 3d 30 2c 46 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 46 3f 4d 3c 3d 46 3a 4d 3e 3d 46 3b 68 3d 30 3c 3d 46 3f 2b 2b 4d 3a 2d 2d 4d 29 72 2e 61 70 70 65 6e 64 28 74 68 69 73 Data Ascii: sAttribute("multiple"))for(C=0,A=(O=u.options).length;C<A;C++)(m=O[C]).selected&&r.append(p,m.value);else(!d\|\|"checkbox"!==(z=d.toLowerCase())&&"radio"!==z\|\|u.checked)&&r.append(p,u.value);for(h=M=0,F=e.length-1;0<=F?M<=F:M>=F;h=0<=F?++M:--M)r.append(this

Timestamp	Bytes transferred	Direction	Data
2024-09-29 12:22:21 UTC	933	OUT	GET /js/tinymce.bundle.js?1727192886 HTTP/1.1 Host: pilgrimpierun.enmotive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pilgrimpierun.enmotive.com/events/view/24th-annual-pilgrim-pie-run-for-rotary Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ENMOTIVE=5atcf32tb8tsavfamqgd57doal; AWSALB=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT; AWSALBCORS=+YfmLJ8GZdGuHAg/lGuOdwEyDXIp53xBrVJmONdDfymOOHeKc5vf4srYJGjGYW3yXeGzO/ROWpHE+D/sKGxfvW2jLFD5qAYF6OaSwSMdx4ljfmpB7g2h++AQZCcT
2024-09-29 12:22:21 UTC	725	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 12:22:21 GMT Content-Type: application/javascript Content-Length: 1506673 Connection: close Set-Cookie: AWSALB=DuTe0jp1+aIjlX/15GEE85988BFoNUq2SIqsw2oVo5a+1E4GjL89jREfbnZTPvsqJtKRqbgHXdXxhumQ5udFklwA8l53gmSMRmGBP57XG0kcDMyV3cRWlAtHDVd1; Expires=Sun, 06 Oct 2024 12:22:21 GMT; Path=/ Set-Cookie: AWSALBCORS=DuTe0jp1+aIjlX/15GEE85988BFoNUq2SIqsw2oVo5a+1E4GjL89jREfbnZTPvsqJtKRqbgHXdXxhumQ5udFklwA8l53gmSMRmGBP57XG0kcDMyV3cRWlAtHDVd1; Expires=Sun, 06 Oct 2024 12:22:21 GMT; Path=/; SameSite=None; Secure Server: nginx Last-Modified: Mon, 23 Sep 2024 17:09:53 GMT Vary: Accept-Encoding ETag: "66f1a0e1-16fd71" Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-09-29 12:22:21 UTC	15659	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 6e 2e 6c 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6f 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6f 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function o(r){if(t[r])return t[r].exports;var n=t[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,o),n.l=!0,n.exports}o.m=e,o.c=t,o.d=function(e,t,r){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},o.r=fun
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 63 6f 6e 73 74 20 6f 3d 65 2e 64 6f 6d 2c 72 3d 74 2e 64 6f 6d 3b 72 65 74 75 72 6e 20 6f 21 3d 3d 72 26 26 6f 2e 63 6f 6e 74 61 69 6e 73 28 72 29 7d 2c 78 6f 3d 65 3d 3e 70 6f 28 65 2e 64 6f 6d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 2c 6b 6f 3d 65 3d 3e 5a 74 28 65 29 3f 65 3a 78 6f 28 65 29 2c 77 6f 3d 65 3d 3e 70 6f 28 6b 6f 28 65 29 2e 64 6f 6d 2e 64 65 66 61 75 6c 74 56 69 65 77 29 2c 5f 6f 3d 65 3d 3e 48 2e 66 72 6f 6d 28 65 2e 64 6f 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2e 6d 61 70 28 70 6f 29 2c 43 6f 3d 65 3d 3e 48 2e 66 72 6f 6d 28 65 2e 64 6f 6d 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 6d 61 70 28 70 6f 29 2c 53 6f 3d 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 77 28 74 29 3f 74 3a 4c 3b 6c 65 74 20 72 3d 65 2e 64 6f 6d 3b 63 Data Ascii: const o=e.dom,r=t.dom;return o!==r&&o.contains(r)},xo=e=>po(e.dom.ownerDocument),ko=e=>Zt(e)?e:xo(e),wo=e=>po(ko(e).dom.defaultView),_o=e=>H.from(e.dom.parentNode).map(po),Co=e=>H.from(e.dom.parentElement).map(po),So=(e,t)=>{const o=w(t)?t:L;let r=e.dom;c
2024-09-29 12:22:21 UTC	406	IN	Data Raw: 69 2c 75 39 2c 6f 6d 65 67 61 2c 75 68 2c 74 68 65 74 61 73 79 6d 2c 75 69 2c 75 70 73 69 68 2c 75 6d 2c 70 69 76 2c 38 31 32 2c 62 75 6c 6c 2c 38 31 36 2c 68 65 6c 6c 69 70 2c 38 31 69 2c 70 72 69 6d 65 2c 38 31 6a 2c 50 72 69 6d 65 2c 38 31 75 2c 6f 6c 69 6e 65 2c 38 32 34 2c 66 72 61 73 6c 2c 38 38 6f 2c 77 65 69 65 72 70 2c 38 38 68 2c 69 6d 61 67 65 2c 38 38 73 2c 72 65 61 6c 2c 38 39 32 2c 74 72 61 64 65 2c 38 39 6c 2c 61 6c 65 66 73 79 6d 2c 38 63 67 2c 6c 61 72 72 2c 38 63 68 2c 75 61 72 72 2c 38 63 69 2c 72 61 72 72 2c 38 63 6a 2c 64 61 72 72 2c 38 63 6b 2c 68 61 72 72 2c 38 64 6c 2c 63 72 61 72 72 2c 38 65 67 2c 6c 41 72 72 2c 38 65 68 2c 75 41 72 72 2c 38 65 69 2c 72 41 72 72 2c 38 65 6a 2c 64 41 72 72 2c 38 65 6b 2c 68 41 72 72 2c 38 67 30 2c Data Ascii: i,u9,omega,uh,thetasym,ui,upsih,um,piv,812,bull,816,hellip,81i,prime,81j,Prime,81u,oline,824,frasl,88o,weierp,88h,image,88s,real,892,trade,89l,alefsym,8cg,larr,8ch,uarr,8ci,rarr,8cj,darr,8ck,harr,8dl,crarr,8eg,lArr,8eh,uArr,8ei,rArr,8ej,dArr,8ek,hArr,8g0,
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 61 6e 64 2c 38 68 38 2c 6f 72 2c 38 68 39 2c 63 61 70 2c 38 68 61 2c 63 75 70 2c 38 68 62 2c 69 6e 74 2c 38 68 6b 2c 74 68 65 72 65 34 2c 38 68 73 2c 73 69 6d 2c 38 69 35 2c 63 6f 6e 67 2c 38 69 38 2c 61 73 79 6d 70 2c 38 6a 30 2c 6e 65 2c 38 6a 31 2c 65 71 75 69 76 2c 38 6a 34 2c 6c 65 2c 38 6a 35 2c 67 65 2c 38 6b 32 2c 73 75 62 2c 38 6b 33 2c 73 75 70 2c 38 6b 34 2c 6e 73 75 62 2c 38 6b 36 2c 73 75 62 65 2c 38 6b 37 2c 73 75 70 65 2c 38 6b 6c 2c 6f 70 6c 75 73 2c 38 6b 6e 2c 6f 74 69 6d 65 73 2c 38 6c 35 2c 70 65 72 70 2c 38 6d 35 2c 73 64 6f 74 2c 38 6f 38 2c 6c 63 65 69 6c 2c 38 6f 39 2c 72 63 65 69 6c 2c 38 6f 61 2c 6c 66 6c 6f 6f 72 2c 38 6f 62 2c 72 66 6c 6f 6f 72 2c 38 70 39 2c 6c 61 6e 67 2c 38 70 61 2c 72 61 6e 67 2c 39 65 61 2c 6c 6f 7a 2c 39 Data Ascii: and,8h8,or,8h9,cap,8ha,cup,8hb,int,8hk,there4,8hs,sim,8i5,cong,8i8,asymp,8j0,ne,8j1,equiv,8j4,le,8j5,ge,8k2,sub,8k3,sup,8k4,nsub,8k6,sube,8k7,supe,8kl,oplus,8kn,otimes,8l5,perp,8m5,sdot,8o8,lceil,8o9,rceil,8oa,lfloor,8ob,rfloor,8p9,lang,8pa,rang,9ea,loz,9
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 74 20 6e 3d 73 5b 65 2b 22 2d 72 69 67 68 74 22 2b 74 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 61 3d 73 5b 65 2b 22 2d 62 6f 74 74 6f 6d 22 2b 74 5d 3b 69 66 28 21 61 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 69 3d 73 5b 65 2b 22 2d 6c 65 66 74 22 2b 74 5d 3b 69 66 28 21 69 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 6c 3d 5b 72 2c 6e 2c 61 2c 69 5d 3b 6c 65 74 20 63 3d 6c 2e 6c 65 6e 67 74 68 2d 31 3b 66 6f 72 28 3b 63 2d 2d 26 26 6c 5b 63 5d 3d 3d 3d 6c 5b 63 2b 31 5d 3b 29 3b 63 3e 2d 31 26 26 6f 7c 7c 28 73 5b 65 2b 74 5d 3d 2d 31 3d 3d 3d 63 3f 6c 5b 30 5d 3a 6c 2e 6a 6f 69 6e 28 22 20 22 29 2c 64 65 6c 65 74 65 20 73 5b 65 2b 22 2d 74 6f 70 22 2b 74 5d 2c 64 65 6c 65 74 65 20 73 5b 65 2b 22 2d 72 69 67 68 74 22 2b 74 5d 2c 64 65 Data Ascii: t n=s[e+"-right"+t];if(!n)return;const a=s[e+"-bottom"+t];if(!a)return;const i=s[e+"-left"+t];if(!i)return;const l=[r,n,a,i];let c=l.length-1;for(;c--&&l[c]===l[c+1];);c>-1&&o\|\|(s[e+t]=-1===c?l[0]:l.join(" "),delete s[e+"-top"+t],delete s[e+"-right"+t],de
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 65 2e 70 61 72 73 65 28 6f 29 29 7d 2c 67 65 74 3a 74 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 70 6f 28 74 29 2c 72 3d 4b 74 28 6f 2c 43 73 29 7c 7c 4b 74 28 6f 2c 22 73 74 79 6c 65 22 29 3b 72 65 74 75 72 6e 20 65 2e 73 65 72 69 61 6c 69 7a 65 28 65 2e 70 61 72 73 65 28 72 29 2c 49 74 28 6f 29 29 7d 7d 7d 3b 72 65 74 75 72 6e 20 72 26 26 28 61 2e 68 72 65 66 3d 61 2e 73 72 63 3d 6e 29 2c 61 7d 29 28 63 2c 74 2c 45 28 47 29 29 3b 72 65 74 75 72 6e 20 47 7d 3b 44 73 2e 44 4f 4d 3d 44 73 28 64 6f 63 75 6d 65 6e 74 29 2c 44 73 2e 6e 6f 64 65 49 6e 64 65 78 3d 45 73 3b 63 6f 6e 73 74 20 4e 73 3d 44 73 2e 44 4f 4d 3b 63 6c 61 73 73 20 4d 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 7b 7d 29 7b 74 68 69 73 2e 73 74 61 74 65 73 3d 7b 7d 2c 74 68 69 73 2e 71 75 65 75 Data Ascii: e.parse(o))},get:t=>{const o=po(t),r=Kt(o,Cs)\|\|Kt(o,"style");return e.serialize(e.parse(r),It(o))}}};return r&&(a.href=a.src=n),a})(c,t,E(G));return G};Ds.DOM=Ds(document),Ds.nodeIndex=Es;const Ns=Ds.DOM;class Ms{constructor(e={}){this.states={},this.queu
2024-09-29 12:22:21 UTC	16384	IN	Data Raw: 61 6d 65 64 20 63 61 74 61 20 28 73 6f 72 72 79 29 22 29 3b 69 66 28 21 66 28 69 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 63 61 73 65 20 61 72 67 75 6d 65 6e 74 73 20 6d 75 73 74 20 62 65 20 61 6e 20 61 72 72 61 79 22 29 3b 74 2e 70 75 73 68 28 73 29 2c 6f 5b 73 5d 3d 28 2e 2e 2e 6f 29 3d 3e 7b 63 6f 6e 73 74 20 72 3d 6f 2e 6c 65 6e 67 74 68 3b 69 66 28 72 21 3d 3d 69 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 57 72 6f 6e 67 20 6e 75 6d 62 65 72 20 6f 66 20 61 72 67 75 6d 65 6e 74 73 20 74 6f 20 63 61 73 65 20 22 2b 73 2b 22 2e 20 45 78 70 65 63 74 65 64 20 22 2b 69 2e 6c 65 6e 67 74 68 2b 22 20 28 22 2b 69 2b 22 29 2c 20 67 6f 74 20 22 2b 72 29 3b 72 65 74 75 72 6e 7b 66 6f 6c 64 3a 28 2e 2e 2e 74 29 3d 3e Data Ascii: amed cata (sorry)");if(!f(i))throw new Error("case arguments must be an array");t.push(s),o[s]=(...o)=>{const r=o.length;if(r!==i.length)throw new Error("Wrong number of arguments to case "+s+". Expected "+i.length+" ("+i+"), got "+r);return{fold:(...t)=>
2024-09-29 12:22:22 UTC	16384	IN	Data Raw: 65 74 4e 6f 64 65 28 29 29 26 26 4c 72 28 61 29 29 7b 63 6f 6e 73 74 20 69 3d 61 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 6c 3d 65 2e 67 65 74 52 6f 6f 74 28 29 3b 6c 65 74 20 63 3b 69 66 28 73 3c 69 2e 6c 65 6e 67 74 68 29 7b 63 6f 6e 73 74 20 74 3d 69 5b 73 5d 3b 63 3d 6e 65 77 20 4d 72 28 74 2c 6e 75 6c 6c 21 3d 3d 28 6f 3d 65 2e 67 65 74 50 61 72 65 6e 74 28 74 2c 65 2e 69 73 42 6c 6f 63 6b 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 6c 29 7d 65 6c 73 65 7b 63 6f 6e 73 74 20 74 3d 69 5b 69 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 6e 65 77 20 4d 72 28 74 2c 6e 75 6c 6c 21 3d 3d 28 72 3d 65 2e 67 65 74 50 61 72 65 6e 74 28 74 2c 65 2e 69 73 42 6c 6f 63 6b 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 6c 29 2c 63 2e 6e 65 78 74 28 21 30 29 7d 66 6f Data Ascii: etNode())&&Lr(a)){const i=a.childNodes,l=e.getRoot();let c;if(s<i.length){const t=i[s];c=new Mr(t,null!==(o=e.getParent(t,e.isBlock))&&void 0!==o?o:l)}else{const t=i[i.length-1];c=new Mr(t,null!==(r=e.getParent(t,e.isBlock))&&void 0!==r?r:l),c.next(!0)}fo
2024-09-29 12:22:22 UTC	16384	IN	Data Raw: 67 2e 64 6f 6d 52 61 6e 67 65 2c 72 65 6c 61 74 69 76 65 3a 69 67 2e 72 65 6c 61 74 69 76 65 2c 65 78 61 63 74 3a 69 67 2e 65 78 61 63 74 2c 65 78 61 63 74 46 72 6f 6d 52 61 6e 67 65 3a 65 3d 3e 69 67 2e 65 78 61 63 74 28 65 2e 73 74 61 72 74 2c 65 2e 73 6f 66 66 73 65 74 2c 65 2e 66 69 6e 69 73 68 2c 65 2e 66 6f 66 66 73 65 74 29 2c 67 65 74 57 69 6e 3a 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 28 65 3d 3e 65 2e 6d 61 74 63 68 28 7b 64 6f 6d 52 61 6e 67 65 3a 65 3d 3e 70 6f 28 65 2e 73 74 61 72 74 43 6f 6e 74 61 69 6e 65 72 29 2c 72 65 6c 61 74 69 76 65 3a 28 65 2c 74 29 3d 3e 73 67 2e 67 65 74 53 74 61 72 74 28 65 29 2c 65 78 61 63 74 3a 28 65 2c 74 2c 6f 2c 72 29 3d 3e 65 7d 29 29 28 65 29 3b 72 65 74 75 72 6e 20 77 6f 28 74 29 7d 2c 72 61 6e 67 65 3a 72 67 Data Ascii: g.domRange,relative:ig.relative,exact:ig.exact,exactFromRange:e=>ig.exact(e.start,e.soffset,e.finish,e.foffset),getWin:e=>{const t=(e=>e.match({domRange:e=>po(e.startContainer),relative:(e,t)=>sg.getStart(e),exact:(e,t,o,r)=>e}))(e);return wo(t)},range:rg
2024-09-29 12:22:22 UTC	16384	IN	Data Raw: 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2c 6e 3d 21 30 29 2c 6f 28 72 29 29 7d 29 2c 72 7d 2c 55 70 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 44 72 28 65 2c 22 5b 64 61 74 61 2d 6d 63 65 2d 62 6f 67 75 73 5d 22 29 3b 57 28 74 2c 65 3d 3e 7b 22 61 6c 6c 22 3d 3d 3d 4b 74 28 65 2c 22 64 61 74 61 2d 6d 63 65 2d 62 6f 67 75 73 22 29 3f 68 72 28 65 29 3a 68 6e 28 65 29 3f 28 6c 72 28 65 2c 67 6f 28 22 5c 75 66 65 66 66 22 29 29 2c 68 72 28 65 29 29 3a 66 72 28 65 29 7d 29 7d 2c 71 70 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 44 72 28 65 2c 22 69 6e 70 75 74 22 29 3b 57 28 74 2c 65 3d 3e 7b 4a 74 28 65 2c 22 6e 61 6d 65 22 29 7d 29 7d 2c 57 70 3d 54 74 2e 6d 61 6b 65 4d 61 70 2c 24 70 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 5b 5d 2c 6f 3d 28 65 3d 65 7c 7c 7b 7d 29 2e 69 Data Ascii: loneNode(!0),n=!0),o(r))}),r},Up=e=>{const t=Dr(e,"[data-mce-bogus]");W(t,e=>{"all"===Kt(e,"data-mce-bogus")?hr(e):hn(e)?(lr(e,go("\ufeff")),hr(e)):fr(e)})},qp=e=>{const t=Dr(e,"input");W(t,e=>{Jt(e,"name")})},Wp=Tt.makeMap,$p=e=>{const t=[],o=(e=e\|\|{}).i