Edit tour

Windows Analysis Report
http://www.birchcreative.com.au

Overview

General Information

Sample URL:	http://www.birchcreative.com.au
Analysis ID:	1523110
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Found iframes

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4400 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4280 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2376,i,7306959455890154535,15269366421934464640,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6516 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.birchcreative.com.au" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-EMV8JD0EQ3&cid=1232985746.1727752590&gtm=45je49u0v892897562z8892891457za200zb892891457&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101671035~101686685~101747727 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.birchcreative.com.auX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.birchcreative.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NKVZGLJ
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://e.issuu.com/embed.html?d=birch_creative_newsletter_-_september_2024_-_no_pr&hideIssuuLogo=true&u=birchcreative
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://e.issuu.com/embed.html?d=rowan_spring_summer_for_web&hideIssuuLogo=true&u=birchcreative
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://e.issuu.com/embed.html?d=magazines&hideIssuuLogo=true&u=birchcreative
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://e.issuu.com/embed.html?d=birch_creative_newsletter_-_august_2024_-_no_price&hideIssuuLogo=true&u=birchcreative
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NKVZGLJ
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://e.issuu.com/embed.html?d=birch_creative_newsletter_-_september_2024_-_no_pr&hideIssuuLogo=true&u=birchcreative
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://e.issuu.com/embed.html?d=rowan_spring_summer_for_web&hideIssuuLogo=true&u=birchcreative
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://e.issuu.com/embed.html?d=magazines&hideIssuuLogo=true&u=birchcreative
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://e.issuu.com/embed.html?d=birch_creative_newsletter_-_august_2024_-_no_price&hideIssuuLogo=true&u=birchcreative
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NKVZGLJ
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://e.issuu.com/embed.html?d=birch_creative_newsletter_-_september_2024_-_no_pr&hideIssuuLogo=true&u=birchcreative
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://e.issuu.com/embed.html?d=rowan_spring_summer_for_web&hideIssuuLogo=true&u=birchcreative
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://e.issuu.com/embed.html?d=magazines&hideIssuuLogo=true&u=birchcreative
Source: https://www.birchcreative.com.au/	HTTP Parser: Iframe src: https://e.issuu.com/embed.html?d=birch_creative_newsletter_-_august_2024_-_no_price&hideIssuuLogo=true&u=birchcreative

Source: https://www.birchcreative.com.au/	HTTP Parser: No favicon
Source: https://www.birchcreative.com.au/	HTTP Parser: No favicon
Source: https://www.birchcreative.com.au/	HTTP Parser: No favicon
Source: https://www.birchcreative.com.au/resources/	HTTP Parser: No favicon
Source: https://www.birchcreative.com.au/resources/	HTTP Parser: No favicon
Source: https://www.birchcreative.com.au/resources/	HTTP Parser: No favicon
Source: https://www.birchcreative.com.au/resources/	HTTP Parser: No favicon

Source: https://www.birchcreative.com.au/	HTTP Parser: No <meta name="author".. found
Source: https://www.birchcreative.com.au/	HTTP Parser: No <meta name="author".. found
Source: https://www.birchcreative.com.au/	HTTP Parser: No <meta name="author".. found

Source: https://www.birchcreative.com.au/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.birchcreative.com.au/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.birchcreative.com.au/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49740 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.birchcreative.com.au
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: g10300385420.co
Source: global traffic	DNS traffic detected: DNS query: cdn.doofinder.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: us1-layer.doofinder.com
Source: global traffic	DNS traffic detected: DNS query: e.issuu.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: secure.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: o4505883345354752.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: reader3.isu.pub
Source: global traffic	DNS traffic detected: DNS query: issuu.com
Source: global traffic	DNS traffic detected: DNS query: static.isu.pub
Source: global traffic	DNS traffic detected: DNS query: api.issuu.com
Source: global traffic	DNS traffic detected: DNS query: assets.isu.pub
Source: global traffic	DNS traffic detected: DNS query: pingback.issuu.com
Source: global traffic	DNS traffic detected: DNS query: layers.isu.pub
Source: global traffic	DNS traffic detected: DNS query: image.isu.pub
Source: global traffic	DNS traffic detected: DNS query: rules.quantcount.com
Source: global traffic	DNS traffic detected: DNS query: pixel.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: api.pico.bendingspoonsapps.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2376,i,7306959455890154535,15269366421934464640,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.birchcreative.com.au"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2376,i,7306959455890154535,15269366421934464640,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_796.2.dr, chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon- elementor-repeater-item-8aa82b8" href="https://www.facebook.com/BirchCreativeAU/" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_796.2.dr, chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-facebook-f elementor-repeater-item-8aa82b8" href="https://www.facebook.com/BirchCreativeAU/" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_338.2.dr, chromecache_453.2.dr	String found in binary or memory: !function(t){window.ShareLink=function(e,r){var i,n={},l=function(t){var e="";if(n.width&&n.height){var r=screen.width/2-n.width/2,i=screen.height/2-n.height/2;e="toolbar=0,status=0,width="+n.width+",height="+n.height+",top="+i+",left="+r}var l=ShareLink.getNetworkLink(t,n),s=/^https?:\/\//.test(l);open(l,s?"":"_self",e)},s=function(){t.each(e.classList,(function(){var t,e=(t=this).substr(0,n.classPrefixLength)===n.classPrefix?t.substr(n.classPrefixLength):null;if(e)return function(t){i.on("click",(function(){l(t)})),"button"===i.attr("role")&&i.on("keyup",(e=>{13!==e.keyCode&&32!==e.keyCode\|\|(e.preventDefault(),l(t))}))}(e),!1}))};t.extend(n,ShareLink.defaultSettings,r),["title","text"].forEach((function(t){n[t]=n[t].replace("#","")})),n.classPrefixLength=n.classPrefix.length,i=t(e),s()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text} {url}","x-twitter":"https://x.com/intent/tweet?text={text} {url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",threads:"https://threads.net/intent/post?text={text} {url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}%0A{text}%0A{url}",xing:"https://www.xing.com/spi/shares/new?url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}%0A{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(t,e){var r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,r){return e[r]\|\|""}));if("email"===t){if(-1<e.title.indexOf("&")\|\|-1<e.text.indexOf("&")){var i={text:e.text.replace(new RegExp("&","g"),"%26"),title:e.title.replace(new RegExp("&","g"),"%26"),url:e.url};r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,e){return i[e]}))}return r.indexOf("?subject=&body")&&(r=r.replace("subject=&","")),r}return r},t.fn.shareLink=function(e){return this.each((function(){t(this).data("shareLink",new ShareLink(this,e))}))}}(jQuery); equals www.facebook.com (Facebook)
Source: chromecache_338.2.dr, chromecache_453.2.dr	String found in binary or memory: !function(t){window.ShareLink=function(e,r){var i,n={},l=function(t){var e="";if(n.width&&n.height){var r=screen.width/2-n.width/2,i=screen.height/2-n.height/2;e="toolbar=0,status=0,width="+n.width+",height="+n.height+",top="+i+",left="+r}var l=ShareLink.getNetworkLink(t,n),s=/^https?:\/\//.test(l);open(l,s?"":"_self",e)},s=function(){t.each(e.classList,(function(){var t,e=(t=this).substr(0,n.classPrefixLength)===n.classPrefix?t.substr(n.classPrefixLength):null;if(e)return function(t){i.on("click",(function(){l(t)})),"button"===i.attr("role")&&i.on("keyup",(e=>{13!==e.keyCode&&32!==e.keyCode\|\|(e.preventDefault(),l(t))}))}(e),!1}))};t.extend(n,ShareLink.defaultSettings,r),["title","text"].forEach((function(t){n[t]=n[t].replace("#","")})),n.classPrefixLength=n.classPrefix.length,i=t(e),s()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text} {url}","x-twitter":"https://x.com/intent/tweet?text={text} {url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",threads:"https://threads.net/intent/post?text={text} {url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}%0A{text}%0A{url}",xing:"https://www.xing.com/spi/shares/new?url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}%0A{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(t,e){var r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,r){return e[r]\|\|""}));if("email"===t){if(-1<e.title.indexOf("&")\|\|-1<e.text.indexOf("&")){var i={text:e.text.replace(new RegExp("&","g"),"%26"),title:e.title.replace(new RegExp("&","g"),"%26"),url:e.url};r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,e){return i[e]}))}return r.indexOf("?subject=&body")&&(r=r.replace("subject=&","")),r}return r},t.fn.shareLink=function(e){return this.each((function(){t(this).data("shareLink",new ShareLink(this,e))}))}}(jQuery); equals www.linkedin.com (Linkedin)
Source: chromecache_338.2.dr, chromecache_453.2.dr	String found in binary or memory: !function(t){window.ShareLink=function(e,r){var i,n={},l=function(t){var e="";if(n.width&&n.height){var r=screen.width/2-n.width/2,i=screen.height/2-n.height/2;e="toolbar=0,status=0,width="+n.width+",height="+n.height+",top="+i+",left="+r}var l=ShareLink.getNetworkLink(t,n),s=/^https?:\/\//.test(l);open(l,s?"":"_self",e)},s=function(){t.each(e.classList,(function(){var t,e=(t=this).substr(0,n.classPrefixLength)===n.classPrefix?t.substr(n.classPrefixLength):null;if(e)return function(t){i.on("click",(function(){l(t)})),"button"===i.attr("role")&&i.on("keyup",(e=>{13!==e.keyCode&&32!==e.keyCode\|\|(e.preventDefault(),l(t))}))}(e),!1}))};t.extend(n,ShareLink.defaultSettings,r),["title","text"].forEach((function(t){n[t]=n[t].replace("#","")})),n.classPrefixLength=n.classPrefix.length,i=t(e),s()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text} {url}","x-twitter":"https://x.com/intent/tweet?text={text} {url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",threads:"https://threads.net/intent/post?text={text} {url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}%0A{text}%0A{url}",xing:"https://www.xing.com/spi/shares/new?url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}%0A{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(t,e){var r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,r){return e[r]\|\|""}));if("email"===t){if(-1<e.title.indexOf("&")\|\|-1<e.text.indexOf("&")){var i={text:e.text.replace(new RegExp("&","g"),"%26"),title:e.title.replace(new RegExp("&","g"),"%26"),url:e.url};r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,e){return i[e]}))}return r.indexOf("?subject=&body")&&(r=r.replace("subject=&","")),r}return r},t.fn.shareLink=function(e){return this.each((function(){t(this).data("shareLink",new ShareLink(this,e))}))}}(jQuery); equals www.twitter.com (Twitter)
Source: chromecache_338.2.dr, chromecache_453.2.dr	String found in binary or memory: !function(t){window.ShareLink=function(e,r){var i,n={},l=function(t){var e="";if(n.width&&n.height){var r=screen.width/2-n.width/2,i=screen.height/2-n.height/2;e="toolbar=0,status=0,width="+n.width+",height="+n.height+",top="+i+",left="+r}var l=ShareLink.getNetworkLink(t,n),s=/^https?:\/\//.test(l);open(l,s?"":"_self",e)},s=function(){t.each(e.classList,(function(){var t,e=(t=this).substr(0,n.classPrefixLength)===n.classPrefix?t.substr(n.classPrefixLength):null;if(e)return function(t){i.on("click",(function(){l(t)})),"button"===i.attr("role")&&i.on("keyup",(e=>{13!==e.keyCode&&32!==e.keyCode\|\|(e.preventDefault(),l(t))}))}(e),!1}))};t.extend(n,ShareLink.defaultSettings,r),["title","text"].forEach((function(t){n[t]=n[t].replace("#","")})),n.classPrefixLength=n.classPrefix.length,i=t(e),s()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text} {url}","x-twitter":"https://x.com/intent/tweet?text={text} {url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",threads:"https://threads.net/intent/post?text={text} {url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}%0A{text}%0A{url}",xing:"https://www.xing.com/spi/shares/new?url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}%0A{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(t,e){var r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,r){return e[r]\|\|""}));if("email"===t){if(-1<e.title.indexOf("&")\|\|-1<e.text.indexOf("&")){var i={text:e.text.replace(new RegExp("&","g"),"%26"),title:e.title.replace(new RegExp("&","g"),"%26"),url:e.url};r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,e){return i[e]}))}return r.indexOf("?subject=&body")&&(r=r.replace("subject=&","")),r}return r},t.fn.shareLink=function(e){return this.each((function(){t(this).data("shareLink",new ShareLink(this,e))}))}}(jQuery); equals www.vkontakte.ru (VKontakte)
Source: chromecache_796.2.dr, chromecache_369.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/BirchCreativeAU/" /> equals www.facebook.com (Facebook)
Source: chromecache_442.2.dr	String found in binary or memory: <script type="application/ld+json" class="rank-math-schema">{"@context":"https://schema.org","@graph":[{"@type":"Place","@id":"https://www.birchcreative.com.au/#place","geo":{"@type":"GeoCoordinates","latitude":"-37.7344746","longitude":"145.048945"},"hasMap":"https://www.google.com/maps/search/?api=1&query=-37.7344746,145.048945","address":{"@type":"PostalAddress","streetAddress":"104 Dougharty Rd","addressLocality":"Heidelberg West","addressRegion":"VIC","postalCode":"3081","addressCountry":"Australia"}},{"@type":["WholesaleStore","Organization"],"@id":"https://www.birchcreative.com.au/#organization","name":"Birch Wholesale","url":"https://www.birchcreative.com.au","sameAs":["https://www.facebook.com/BirchCreativeAU/"],"email":"order@birchcreative.com.au","address":{"@type":"PostalAddress","streetAddress":"104 Dougharty Rd","addressLocality":"Heidelberg West","addressRegion":"VIC","postalCode":"3081","addressCountry":"Australia"},"logo":{"@type":"ImageObject","@id":"https://www.birchcreative.com.au/#logo","url":"https://www.birchcreative.com.au/wp-content/uploads/2020/09/birch-logo.svg","contentUrl":"https://www.birchcreative.com.au/wp-content/uploads/2020/09/birch-logo.svg","caption":"Birch Wholesale","inLanguage":"en-AU"},"openingHours":["Monday,Tuesday,Wednesday,Thursday,Friday 08:15-16:30"],"location":{"@id":"https://www.birchcreative.com.au/#place"},"image":{"@id":"https://www.birchcreative.com.au/#logo"},"telephone":"+61394508900"},{"@type":"WebSite","@id":"https://www.birchcreative.com.au/#website","url":"https://www.birchcreative.com.au","name":"Birch Wholesale","publisher":{"@id":"https://www.birchcreative.com.au/#organization"},"inLanguage":"en-AU","potentialAction":{"@type":"SearchAction","target":"https://www.birchcreative.com.au/?s={search_term_string}","query-input":"required name=search_term_string"}},{"@type":"ImageObject","@id":"https://www.birchcreative.com.au/wp-content/uploads/2024/08/ECO-VITA-WEB.jpg","url":"https://www.birchcreative.com.au/wp-content/uploads/2024/08/ECO-VITA-WEB.jpg","width":"200","height":"200","inLanguage":"en-AU"},{"@type":"AboutPage","@id":"https://www.birchcreative.com.au/#webpage","url":"https://www.birchcreative.com.au/","name":"Craft and Haberdashery Supplies - Birch Creative","datePublished":"2022-01-20T15:12:40+11:00","dateModified":"2024-09-09T11:16:00+10:00","about":{"@id":"https://www.birchcreative.com.au/#organization"},"isPartOf":{"@id":"https://www.birchcreative.com.au/#website"},"primaryImageOfPage":{"@id":"https://www.birchcreative.com.au/wp-content/uploads/2024/08/ECO-VITA-WEB.jpg"},"inLanguage":"en-AU"}]}</script> equals www.facebook.com (Facebook)
Source: chromecache_369.2.dr	String found in binary or memory: <script type="application/ld+json" class="rank-math-schema">{"@context":"https://schema.org","@graph":[{"@type":"Place","@id":"https://www.birchcreative.com.au/#place","geo":{"@type":"GeoCoordinates","latitude":"-37.7344746","longitude":"145.048945"},"hasMap":"https://www.google.com/maps/search/?api=1&query=-37.7344746,145.048945","address":{"@type":"PostalAddress","streetAddress":"104 Dougharty Rd","addressLocality":"Heidelberg West","addressRegion":"VIC","postalCode":"3081","addressCountry":"Australia"}},{"@type":["WholesaleStore","Organization"],"@id":"https://www.birchcreative.com.au/#organization","name":"Birch Wholesale","url":"https://www.birchcreative.com.au","sameAs":["https://www.facebook.com/BirchCreativeAU/"],"email":"order@birchcreative.com.au","address":{"@type":"PostalAddress","streetAddress":"104 Dougharty Rd","addressLocality":"Heidelberg West","addressRegion":"VIC","postalCode":"3081","addressCountry":"Australia"},"logo":{"@type":"ImageObject","@id":"https://www.birchcreative.com.au/#logo","url":"https://www.birchcreative.com.au/wp-content/uploads/2020/09/birch-logo.svg","contentUrl":"https://www.birchcreative.com.au/wp-content/uploads/2020/09/birch-logo.svg","caption":"Birch Wholesale","inLanguage":"en-AU"},"openingHours":["Monday,Tuesday,Wednesday,Thursday,Friday 08:15-16:30"],"location":{"@id":"https://www.birchcreative.com.au/#place"},"image":{"@id":"https://www.birchcreative.com.au/#logo"},"telephone":"+61394508900"},{"@type":"WebSite","@id":"https://www.birchcreative.com.au/#website","url":"https://www.birchcreative.com.au","name":"Birch Wholesale","publisher":{"@id":"https://www.birchcreative.com.au/#organization"},"inLanguage":"en-AU"},{"@type":"BreadcrumbList","@id":"https://www.birchcreative.com.au/resources/#breadcrumb","itemListElement":[{"@type":"ListItem","position":"1","item":{"@id":"https://www.birchcreative.com.au","name":"Home"}},{"@type":"ListItem","position":"2","item":{"@id":"https://www.birchcreative.com.au/resources/","name":"Collections"}}]},{"@type":"WebPage","@id":"https://www.birchcreative.com.au/resources/#webpage","url":"https://www.birchcreative.com.au/resources/","name":"View All Collections - Birch Creative","datePublished":"2022-01-20T15:14:36+11:00","dateModified":"2024-01-28T23:23:13+11:00","isPartOf":{"@id":"https://www.birchcreative.com.au/#website"},"inLanguage":"en-AU","breadcrumb":{"@id":"https://www.birchcreative.com.au/resources/#breadcrumb"}},{"@type":"Person","@id":"https://www.birchcreative.com.au/resources/#author","name":"jbirch","image":{"@type":"ImageObject","@id":"https://secure.gravatar.com/avatar/fb3d4547a00a519fd3616160494ff89d?s=96&d=mm&r=g","url":"https://secure.gravatar.com/avatar/fb3d4547a00a519fd3616160494ff89d?s=96&d=mm&r=g","caption":"jbirch","inLanguage":"en-AU"},"worksFor":{"@id":"https://www.birchcreative.com.au/#organization"}},{"@type":"Article","headline":"View All Collections - Birch Creative","keywords":"collections","datePublished":"2022-01-
Source: chromecache_796.2.dr	String found in binary or memory: <script type="application/ld+json" class="rank-math-schema">{"@context":"https://schema.org","@graph":[{"@type":"Place","@id":"https://www.birchcreative.com.au/#place","geo":{"@type":"GeoCoordinates","latitude":"-37.7344746","longitude":"145.048945"},"hasMap":"https://www.google.com/maps/search/?api=1&query=-37.7344746,145.048945","address":{"@type":"PostalAddress","streetAddress":"104 Dougharty Rd","addressLocality":"Heidelberg West","addressRegion":"VIC","postalCode":"3081","addressCountry":"Australia"}},{"@type":["WholesaleStore","Organization"],"@id":"https://www.birchcreative.com.au/#organization","name":"Birch Wholesale","url":"https://www.birchcreative.com.au","sameAs":["https://www.facebook.com/BirchCreativeAU/"],"email":"order@birchcreative.com.au","address":{"@type":"PostalAddress","streetAddress":"104 Dougharty Rd","addressLocality":"Heidelberg West","addressRegion":"VIC","postalCode":"3081","addressCountry":"Australia"},"logo":{"@type":"ImageObject","@id":"https://www.birchcreative.com.au/#logo","url":"https://www.birchcreative.com.au/wp-content/uploads/2020/09/birch-logo.svg","contentUrl":"https://www.birchcreative.com.au/wp-content/uploads/2020/09/birch-logo.svg","caption":"Birch Wholesale","inLanguage":"en-AU"},"openingHours":["Monday,Tuesday,Wednesday,Thursday,Friday 08:15-16:30"],"location":{"@id":"https://www.birchcreative.com.au/#place"},"image":{"@id":"https://www.birchcreative.com.au/#logo"},"telephone":"+61394508900"},{"@type":"WebSite","@id":"https://www.birchcreative.com.au/#website","url":"https://www.birchcreative.com.au","name":"Birch Wholesale","publisher":{"@id":"https://www.birchcreative.com.au/#organization"},"inLanguage":"en-AU"},{"@type":"BreadcrumbList","@id":"https://www.birchcreative.com.au/stockists/#breadcrumb","itemListElement":[{"@type":"ListItem","position":"1","item":{"@id":"https://www.birchcreative.com.au","name":"Home"}},{"@type":"ListItem","position":"2","item":{"@id":"https://www.birchcreative.com.au/stockists/","name":"Store Locations"}}]},{"@type":"WebPage","@id":"https://www.birchcreative.com.au/stockists/#webpage","url":"https://www.birchcreative.com.au/stockists/","name":"Find a Store Near You - Birch Creative","datePublished":"2022-01-20T15:13:02+11:00","dateModified":"2022-12-06T10:40:37+11:00","isPartOf":{"@id":"https://www.birchcreative.com.au/#website"},"inLanguage":"en-AU","breadcrumb":{"@id":"https://www.birchcreative.com.au/stockists/#breadcrumb"}},{"@type":"Person","@id":"https://www.birchcreative.com.au/stockists/#author","name":"jbirch","image":{"@type":"ImageObject","@id":"https://secure.gravatar.com/avatar/fb3d4547a00a519fd3616160494ff89d?s=96&d=mm&r=g","url":"https://secure.gravatar.com/avatar/fb3d4547a00a519fd3616160494ff89d?s=96&d=mm&r=g","caption":"jbirch","inLanguage":"en-AU"},"worksFor":{"@id":"https://www.birchcreative.com.au/#organization"}},{"@type":"Article","headline":"Find a Store Near You - Birch Creative","keywords":"store,birch creative","datePubli
Source: chromecache_748.2.dr	String found in binary or memory: <script type="application/ld+json" class="rank-math-schema">{"@context":"https://schema.org","@graph":[{"@type":"Place","@id":"https://www.birchcreative.com.au/#place","geo":{"@type":"GeoCoordinates","latitude":"-37.7344746","longitude":"145.048945"},"hasMap":"https://www.google.com/maps/search/?api=1&query=-37.7344746,145.048945","address":{"@type":"PostalAddress","streetAddress":"104 Dougharty Rd","addressLocality":"Heidelberg West","addressRegion":"VIC","postalCode":"3081","addressCountry":"Australia"}},{"@type":["WholesaleStore","Organization"],"@id":"https://www.birchcreative.com.au/#organization","name":"Birch Wholesale","url":"https://www.birchcreative.com.au","sameAs":["https://www.facebook.com/BirchCreativeAU/"],"email":"order@birchcreative.com.au","address":{"@type":"PostalAddress","streetAddress":"104 Dougharty Rd","addressLocality":"Heidelberg West","addressRegion":"VIC","postalCode":"3081","addressCountry":"Australia"},"logo":{"@type":"ImageObject","@id":"https://www.birchcreative.com.au/#logo","url":"https://www.birchcreative.com.au/wp-content/uploads/2020/09/birch-logo.svg","contentUrl":"https://www.birchcreative.com.au/wp-content/uploads/2020/09/birch-logo.svg","caption":"Birch Wholesale","inLanguage":"en-AU"},"openingHours":["Monday,Tuesday,Wednesday,Thursday,Friday 08:15-16:30"],"location":{"@id":"https://www.birchcreative.com.au/#place"},"image":{"@id":"https://www.birchcreative.com.au/#logo"},"telephone":"+61394508900"},{"@type":"WebSite","@id":"https://www.birchcreative.com.au/#website","url":"https://www.birchcreative.com.au","name":"Birch Wholesale","publisher":{"@id":"https://www.birchcreative.com.au/#organization"},"inLanguage":"en-AU"},{"@type":"ImageObject","@id":"https://www.birchcreative.com.au/wp-content/uploads/2024/06/119313-001.jpg","url":"https://www.birchcreative.com.au/wp-content/uploads/2024/06/119313-001.jpg","width":"900","height":"900","inLanguage":"en-AU"},{"@type":"BreadcrumbList","@id":"https://www.birchcreative.com.au/p/dmc-eco-vita-organic-wool-thread-skein-box-6/#breadcrumb","itemListElement":[{"@type":"ListItem","position":"1","item":{"@id":"https://www.birchcreative.com.au","name":"Home"}},{"@type":"ListItem","position":"2","item":{"@id":"https://www.birchcreative.com.au/product-category/quilting-needlework/42-dmc-threads/","name":"Dmc Threads"}},{"@type":"ListItem","position":"3","item":{"@id":"https://www.birchcreative.com.au/p/dmc-eco-vita-organic-wool-thread-skein-box-6/","name":"DMC ECO VITA ORGANIC WOOL THREAD SKEIN/BOX 6"}}]},{"@type":"ItemPage","@id":"https://www.birchcreative.com.au/p/dmc-eco-vita-organic-wool-thread-skein-box-6/#webpage","url":"https://www.birchcreative.com.au/p/dmc-eco-vita-organic-wool-thread-skein-box-6/","name":"DMC ECO VITA ORGANIC WOOL THREAD SKEIN/BOX 6 » Birch Wholesale","datePublished":"2024-06-12T18:28:04+10:00","dateModified":"2024-09-29T22:22:04+10:00","isPartOf":{"@id":"https://www.birchcreative.com.au/#website"},"primaryImageOfPage":{"@id":"https://
Source: chromecache_314.2.dr, chromecache_504.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},dk:function(){e=zb()},od:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_314.2.dr, chromecache_504.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={ih:e,gh:f,hh:g,Sh:k,Th:m,Ie:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(VC(w,"iframe_api")\|\|VC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!MC&&TC(x[A],p.Ie))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_734.2.dr, chromecache_658.2.dr	String found in binary or memory: return b}IC.F="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)

Source: chromecache_362.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_362.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_796.2.dr, chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_508.2.dr, chromecache_395.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_315.2.dr, chromecache_466.2.dr	String found in binary or memory: http://www.smartmenus.org/
Source: chromecache_464.2.dr, chromecache_470.2.dr	String found in binary or memory: https://api.jqueryui.com/position/
Source: chromecache_796.2.dr, chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_369.2.dr	String found in binary or memory: https://birchcreative.net.au/resources/
Source: chromecache_796.2.dr	String found in binary or memory: https://birchcreative.net.au/stockists/
Source: chromecache_505.2.dr, chromecache_697.2.dr, chromecache_447.2.dr, chromecache_560.2.dr, chromecache_460.2.dr, chromecache_675.2.dr, chromecache_599.2.dr, chromecache_609.2.dr	String found in binary or memory: https://cdn.doofinder.com/livelayer/1
Source: chromecache_796.2.dr, chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	String found in binary or memory: https://cdn.doofinder.com/livelayer/1/js/loader.min.js
Source: chromecache_746.2.dr, chromecache_437.2.dr, chromecache_646.2.dr, chromecache_465.2.dr, chromecache_324.2.dr, chromecache_468.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/react-dom/17.0.2/umd/react-dom.production.min.js
Source: chromecache_746.2.dr, chromecache_437.2.dr, chromecache_646.2.dr, chromecache_465.2.dr, chromecache_324.2.dr, chromecache_468.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/react-is/17.0.2/umd/react-is.production.min.js
Source: chromecache_746.2.dr, chromecache_437.2.dr, chromecache_646.2.dr, chromecache_465.2.dr, chromecache_324.2.dr, chromecache_468.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/react/17.0.2/umd/react.production.min.js
Source: chromecache_746.2.dr, chromecache_437.2.dr, chromecache_646.2.dr, chromecache_465.2.dr, chromecache_324.2.dr, chromecache_468.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/styled-components/5.3.11/styled-components.min.js
Source: chromecache_583.2.dr, chromecache_673.2.dr, chromecache_373.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_583.2.dr, chromecache_673.2.dr, chromecache_373.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_353.2.dr, chromecache_785.2.dr, chromecache_580.2.dr, chromecache_774.2.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_502.2.dr, chromecache_403.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages
Source: chromecache_574.2.dr, chromecache_335.2.dr, chromecache_316.2.dr, chromecache_423.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_660.2.dr, chromecache_663.2.dr, chromecache_580.2.dr, chromecache_774.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_353.2.dr, chromecache_785.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages?utm_source=places_js&utm_
Source: chromecache_502.2.dr, chromecache_403.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/webgl/support
Source: chromecache_583.2.dr, chromecache_673.2.dr, chromecache_373.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_583.2.dr, chromecache_673.2.dr, chromecache_373.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_583.2.dr, chromecache_673.2.dr, chromecache_373.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_337.2.dr, chromecache_806.2.dr	String found in binary or memory: https://docs.woocommerce.com/document/override-loop-template-and-show-quantities-next-to-add-to-cart
Source: chromecache_369.2.dr, chromecache_442.2.dr	String found in binary or memory: https://e.issuu.com/embed.html?d=birch_creative_newsletter_-_august_2024_-_no_price&hideIssuuLo
Source: chromecache_369.2.dr, chromecache_442.2.dr	String found in binary or memory: https://e.issuu.com/embed.html?d=birch_creative_newsletter_-_august_2024_-_no_price&hideIssuuLogo=tr
Source: chromecache_369.2.dr	String found in binary or memory: https://e.issuu.com/embed.html?d=birch_creative_newsletter_-_july_2024_-_no_prices&hideIssuuLog
Source: chromecache_369.2.dr	String found in binary or memory: https://e.issuu.com/embed.html?d=birch_creative_newsletter_-_july_2024_-_no_prices&hideIssuuLogo=tru
Source: chromecache_369.2.dr, chromecache_442.2.dr	String found in binary or memory: https://e.issuu.com/embed.html?d=birch_creative_newsletter_-_september_2024_-_no_pr&hideIssuuLo
Source: chromecache_369.2.dr, chromecache_442.2.dr	String found in binary or memory: https://e.issuu.com/embed.html?d=birch_creative_newsletter_-_september_2024_-_no_pr&hideIssuuLogo=tr
Source: chromecache_369.2.dr	String found in binary or memory: https://e.issuu.com/embed.html?d=dmc_eco_vita_-_no_prices&hideIssuuLogo=true&u=birchcreati
Source: chromecache_369.2.dr	String found in binary or memory: https://e.issuu.com/embed.html?d=dmc_eco_vita_-_no_prices&hideIssuuLogo=true&u=birchcreative
Source: chromecache_369.2.dr, chromecache_442.2.dr	String found in binary or memory: https://e.issuu.com/embed.html?d=magazines&hideIssuuLogo=true&u=birchcreative
Source: chromecache_369.2.dr, chromecache_442.2.dr	String found in binary or memory: https://e.issuu.com/embed.html?d=magazines&hideIssuuLogo=true&u=birchcreative
Source: chromecache_369.2.dr, chromecache_442.2.dr	String found in binary or memory: https://e.issuu.com/embed.html?d=rowan_spring_summer_for_web&hideIssuuLogo=true&u=birchcre
Source: chromecache_369.2.dr, chromecache_442.2.dr	String found in binary or memory: https://e.issuu.com/embed.html?d=rowan_spring_summer_for_web&hideIssuuLogo=true&u=birchcreative
Source: chromecache_595.2.dr, chromecache_495.2.dr, chromecache_788.2.dr, chromecache_390.2.dr, chromecache_531.2.dr, chromecache_542.2.dr, chromecache_341.2.dr, chromecache_623.2.dr	String found in binary or memory: https://fontawesome.com

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Link
1648062886.rsc.cdn77.org	0%	Virustotal	Browse
api.pico.bendingspoonsapps.com	0%	Virustotal	Browse
maxcdn.bootstrapcdn.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
global.px.quantserve.com	0%	Virustotal	Browse
d2fashanjl7d9f.cloudfront.net	0%	Virustotal	Browse
issuu.com	0%	Virustotal	Browse
bigpingback.issuu.com	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
g10300385420.co	0%	Virustotal	Browse
o4505883345354752.ingest.sentry.io	0%	Virustotal	Browse
analytics.google.com	0%	Virustotal	Browse
stats.g.doubleclick.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
static.isu.pub	0%	Virustotal	Browse
secure.quantserve.com	0%	Virustotal	Browse
us1-layer.doofinder.com	0%	Virustotal	Browse
pixel.quantserve.com	0%	Virustotal	Browse
td.doubleclick.net	0%	Virustotal	Browse
www.birchcreative.com.au	0%	Virustotal	Browse
reader3.isu.pub	0%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse
assets.isu.pub	0%	Virustotal	Browse
layers.isu.pub	0%	Virustotal	Browse
cdn.doofinder.com	0%	Virustotal	Browse
e.issuu.com	0%	Virustotal	Browse
rules.quantcount.com	0%	Virustotal	Browse
api.issuu.com	0%	Virustotal	Browse
image.isu.pub	0%	Virustotal	Browse
pingback.issuu.com	0%	Virustotal	Browse

Source	Detection	Scanner	Label
https://swiperjs.com	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
http://gmpg.org/xfn/11	0%	URL Reputation	safe
https://jqueryui.com	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://reactjs.org/link/react-polyfills	0%	URL Reputation	safe

Name	IP	Active	Malicious	Antivirus Detection	Reputation
d2fashanjl7d9f.cloudfront.net	18.66.102.66	true	false	0%, Virustotal, Browse	unknown
1648062886.rsc.cdn77.org	212.102.56.179	true	false	0%, Virustotal, Browse	unknown
global.px.quantserve.com	91.228.74.159	true	false	0%, Virustotal, Browse	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	0%, Virustotal, Browse	unknown
bigpingback.issuu.com	35.241.35.151	true	false	0%, Virustotal, Browse	unknown
api.pico.bendingspoonsapps.com	34.102.204.67	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	64.233.184.154	true	false	0%, Virustotal, Browse	unknown
issuu.com	151.101.65.55	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
o4505883345354752.ingest.sentry.io	34.120.195.249	true	false	0%, Virustotal, Browse	unknown
g10300385420.co	34.120.31.228	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.36	true	false	0%, Virustotal, Browse	unknown
analytics.google.com	142.250.186.46	true	false	0%, Virustotal, Browse	unknown
td.doubleclick.net	142.250.184.226	true	false	0%, Virustotal, Browse	unknown
us1-layer.doofinder.com	54.147.109.148	true	false	0%, Virustotal, Browse	unknown
dvlwfcygzz.wpdns.site	104.17.145.110	true	false		unknown
reader3.isu.pub	unknown	unknown	false	0%, Virustotal, Browse	unknown
secure.quantserve.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
static.isu.pub	unknown	unknown	false	0%, Virustotal, Browse	unknown
pixel.quantserve.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.birchcreative.com.au	unknown	unknown	false	0%, Virustotal, Browse	unknown
layers.isu.pub	unknown	unknown	false	0%, Virustotal, Browse	unknown
rules.quantcount.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
e.issuu.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
assets.isu.pub	unknown	unknown	false	0%, Virustotal, Browse	unknown
pingback.issuu.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
api.issuu.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
image.isu.pub	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn.doofinder.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Name	Malicious	Reputation
https://www.birchcreative.com.au/wp-content/uploads/elementor/css/post-98113.css?ver=1727342653	false	unknown
https://www.birchcreative.com.au/wp-content/plugins/customwcgallery/assets/photoswipe-lightbox.esm.js?ver=1.0.5	false	unknown
https://www.birchcreative.com.au/wp-content/uploads/2024/06/119313-101-A-600x600.jpg	false	unknown
https://www.birchcreative.com.au/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.24.4	false	unknown
https://pixel.quantserve.com/pixel;r=444599619;rf=3;a=p-5cvC4NOeGmtNA;url=https%3A%2F%2Fe.issuu.com%2Fembed.html%3Fd%3Dbirch_creative_newsletter_-_july_2024_-_no_prices%26hideIssuuLogo%3Dtrue%26u%3Dbirchcreative;ref=https%3A%2F%2Fwww.birchcreative.com.au%2F;ns=1;ce=1;qjs=1;qv=fd657345-20240925114642;d=e.issuu.com;dst=1;et=1727752645156;tzo=240;ogl=;ses=fb5d0be6-5d47-472a-824b-710e1183dccc;uht=2;fpan=1;fpa=P0-2119238974-1727752638757;pbc=;cm=undefined;gdpr=0;mdl=	false	unknown
https://pixel.quantserve.com/pixel;r=579825867;rf=3;a=p-5cvC4NOeGmtNA;url=https%3A%2F%2Fe.issuu.com%2Fembed.html%3Fd%3Dbirch_creative_newsletter_-_september_2024_-_no_pr%26hideIssuuLogo%3Dtrue%26u%3Dbirchcreative;ref=https%3A%2F%2Fwww.birchcreative.com.au%2F;ns=1;ce=1;qjs=1;qv=fd657345-20240925114642;d=e.issuu.com;dst=1;et=1727752645175;tzo=240;ogl=;ses=fb5d0be6-5d47-472a-824b-710e1183dccc;uht=2;fpan=1;fpa=P0-648938791-1727752638758;pbc=;cm=undefined;gdpr=0;mdl=	false	unknown
https://www.birchcreative.com.au/wp-includes/js/underscore.min.js?ver=1.13.4	false	unknown
https://www.birchcreative.com.au/wp-content/plugins/yith-store-locator-for-wordpress/assets/js/frontend/woocommerce.min.js?ver=2.36.0	false	unknown
https://cdn.doofinder.com/livelayer/1/js/dflayer.min.js?vsn=1.4.224	false	unknown
https://www.birchcreative.com.au/wp-content/plugins/customwcgallery/assets/ajax-loader.gif	false	unknown
https://www.birchcreative.com.au/wp-includes/js/wp-util.min.js?ver=6.6.2	false	unknown
https://www.birchcreative.com.au/wp-content/cache/min/1/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=1727622085	false	unknown
https://www.birchcreative.com.au/wp-content/plugins/gravityforms/assets/js/dist/vendor-theme.min.js?ver=54e7080aa7a02c83aa61fae430b9d869	false	unknown
https://rules.quantcount.com/rules-p-5cvC4NOeGmtNA.js	false	unknown
https://us1-layer.doofinder.com/api/1/installation/2bcd779a-7454-4949-a7c9-8d47e4d1fd35?source_url=https%3A%2F%2Fwww.birchcreative.com.au%2F&session_id=c9d40afcf1874276981559d597cab1a4&session_alive=false&user_id=add75d39-d9c3-4bfc-9618-255afceeefc4&language=en-AU&ga_client_id=1232985746.1727752590&vsn=1.4.224&layer_type=search	false	unknown
https://www.birchcreative.com.au/wp-content/plugins/customwcgallery/assets/photoswipe.esm.js?ver=1.0.5	false	unknown
https://www.birchcreative.com.au/wp-content/plugins/elementor-pro/assets/js/media-carousel.afbaabb756a7c18ddb09.bundle.min.js	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/react-is/17.0.2/umd/react-is.production.min.js	false	unknown
https://www.birchcreative.com.au/wp-content/cache/min/1/wp-content/plugins/gravityforms/assets/css/dist/basic.min.css?ver=1727622189	false	unknown
https://www.birchcreative.com.au/wp-content/uploads/2024/06/119313-005-A-600x600.jpg	false	unknown
https://www.birchcreative.com.au/wp-content/plugins/woocommerce/assets/js/selectWoo/selectWoo.full.min.js?ver=1.0.9-wc.9.3.3	false	unknown
https://www.birchcreative.com.au/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.9.3.3	false	unknown
https://www.birchcreative.com.au/wp-content/plugins/gravityforms/js/placeholders.jquery.min.js?ver=2.8.17	false	unknown
https://us1-layer.doofinder.com/api/1/installation/2bcd779a-7454-4949-a7c9-8d47e4d1fd35?source_url=https%3A%2F%2Fwww.birchcreative.com.au%2Fp%2Fdmc-eco-vita-organic-wool-thread-skein-box-6%2F&session_id=c9d40afcf1874276981559d597cab1a4&session_alive=false&user_id=add75d39-d9c3-4bfc-9618-255afceeefc4&language=en-AU&ga_client_id=1232985746.1727752590&vsn=1.4.224&layer_type=search	false	unknown
https://www.birchcreative.com.au/wp-content/uploads/2024/06/119313-004-A-600x600.jpg	false	unknown
https://www.birchcreative.com.au/wp-content/uploads/2022/05/Bec-BIRCH-CREATIVE.png	false	unknown
https://www.birchcreative.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.24.4	false	unknown
https://www.birchcreative.com.au/wp-content/uploads/2024/09/B4854-B-400x400.jpg	false	unknown
https://www.birchcreative.com.au/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=9.3.3	false	unknown
https://www.birchcreative.com.au/	false	unknown
https://www.birchcreative.com.au/wp-content/cache/min/1/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=1727622085	false	unknown
https://www.birchcreative.com.au/wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=3.24.4	false	unknown
https://www.birchcreative.com.au/wp-content/uploads/2022/05/Bec-Prym.png	false	unknown
https://www.birchcreative.com.au/wp-content/cache/min/1/wp-content/themes/jtheme-jello-child-master/style.css?ver=1727622085	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.birchcreative.com.au/brands/taylor-seville/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/sewing/67-thread-rasant/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/blumenthal/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/wholesale-craft/121-diamond-dotz/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
http://www.smartmenus.org/	chromecache_315.2.dr, chromecache_466.2.dr	false		unknown
https://www.birchcreative.com.au/brands/vlieseline/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/wholesale-craft/121-spray-paints/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/sewing/67-sewing-accessories/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://swiperjs.com	chromecache_716.2.dr, chromecache_709.2.dr, chromecache_506.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/error-messages?utm_source=places_js&utm_	chromecache_353.2.dr, chromecache_785.2.dr	false		unknown
https://www.birchcreative.com.au/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.j	chromecache_796.2.dr, chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/quilting-needlework/42-embroidery-kits/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/liberty/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.mi	chromecache_796.2.dr, chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/we-r-memory-keepers/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/gutermann/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_583.2.dr, chromecache_673.2.dr, chromecache_373.2.dr	false	URL Reputation: safe	unknown
https://www.birchcreative.com.au/brands/tsukineko/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/fabrics/23-leutenegger/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/thermoweb/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/quilting-needlework/42-rotary-cutters-and-sets/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/hotp/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_583.2.dr, chromecache_673.2.dr, chromecache_373.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_353.2.dr, chromecache_785.2.dr, chromecache_580.2.dr, chromecache_774.2.dr	false	URL Reputation: safe	unknown
https://www.birchcreative.com.au/product-category/trimmings/206-laces-nylon/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/bohin/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/wholesale-craft/121-plaid-mod-podge-royal-coat/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/the-warm-company/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/sewing/67-sewing-kits/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/wholesale-craft/121-craft-tools/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/milward/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/wholesale-craft/121-clover-makers/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/wp-content/plugins/yith-woocommerce-catalog-mode-premium/assets/js/	chromecache_796.2.dr, chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/knitting/29-crochet-hooks/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/click-clack/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/trimmings/206-laces-guipure/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/bucilla/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/quilting-needlework/42-long-stitch/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/sewing/67-hemline-sewing-accessories/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
http://gmpg.org/xfn/11	chromecache_796.2.dr, chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false	URL Reputation: safe	unknown
https://www.birchcreative.com.au/product-category/knitting/29-clover-knitting-needles/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/fabrics/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/quilting-needlework/42-dmc-accessories/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/quilting-needlework/42-needlework-frames-and-hoops	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/brother/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/john-james/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://jqueryui.com	chromecache_464.2.dr, chromecache_380.2.dr, chromecache_470.2.dr, chromecache_750.2.dr	false	URL Reputation: safe	unknown
https://www.birchcreative.com.au/product-category/trimmings/206-ribbon-premier/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/punch-n-learn/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/knitting/29-yarns-birch/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/trimmings/206-braids-basic/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/mundial/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/quilting-needlework/42-quilting-patterns-templates	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_660.2.dr, chromecache_663.2.dr, chromecache_580.2.dr, chromecache_774.2.dr	false	URL Reputation: safe	unknown
https://www.birchcreative.com.au/brands/beacon/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/trimmings/206-motifs/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/wp-content/plugins/yith-store-locator-for-wordpress/assets/js/front	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/brands/lykke/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_583.2.dr, chromecache_673.2.dr, chromecache_373.2.dr	false	URL Reputation: safe	unknown
https://photoswipe.com	chromecache_607.2.dr, chromecache_476.2.dr, chromecache_500.2.dr, chromecache_648.2.dr	false		unknown
https://fontawesome.com/license/free	chromecache_595.2.dr, chromecache_495.2.dr, chromecache_788.2.dr, chromecache_390.2.dr, chromecache_531.2.dr, chromecache_542.2.dr, chromecache_341.2.dr, chromecache_623.2.dr	false	URL Reputation: safe	unknown
https://reactjs.org/link/react-polyfills	chromecache_432.2.dr	false	URL Reputation: safe	unknown
https://www.birchcreative.com.au/product-category/quilting-needlework/42-wadding/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/knitting/29-clover-knitting-accessories/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/fabrics/23-liberty/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown
https://www.birchcreative.com.au/product-category/wholesale-craft/121-atd/	chromecache_369.2.dr, chromecache_442.2.dr, chromecache_748.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.46	analytics.google.com	United States	15169	GOOGLEUS	false
142.250.185.228	unknown	United States	15169	GOOGLEUS	false
91.228.74.166	unknown	United Kingdom	27281	QUANTCASTUS	false
64.233.184.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.17.144.110	unknown	United States	13335	CLOUDFLARENETUS	false
34.102.204.67	api.pico.bendingspoonsapps.com	United States	15169	GOOGLEUS	false
18.66.102.121	unknown	United States	3	MIT-GATEWAYSUS	false
35.241.35.151	bigpingback.issuu.com	United States	15169	GOOGLEUS	false
142.250.184.226	td.doubleclick.net	United States	15169	GOOGLEUS	false
104.17.145.110	dvlwfcygzz.wpdns.site	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.66.102.66	d2fashanjl7d9f.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
34.120.31.228	g10300385420.co	United States	15169	GOOGLEUS	false
212.102.56.179	1648062886.rsc.cdn77.org	Italy	60068	CDN77GB	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
91.228.74.159	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
54.147.109.148	us1-layer.doofinder.com	United States	14618	AMAZON-AESUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
169.150.255.184	unknown	United States	2711	SPIRITTEL-ASUS	false
34.120.195.249	o4505883345354752.ingest.sentry.io	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523110
Start date and time:	2024-10-01 05:15:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.birchcreative.com.au
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@23/823@90/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.birchcreative.com.au/p/dmc-eco-vita-organic-wool-thread-skein-box-6/ Browse: https://www.birchcreative.com.au/stockists/ Browse: https://www.birchcreative.com.au/resources/

Input	Output
URL: https://www.birchcreative.com.au/ Model: jbxai	{ "brand":["BIRCH"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"SEARCH", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.birchcreative.com.au/ Model: jbxai	{ "brand":["Birch Creative"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"SEARCH", "text_input_field_labels":["Search for products"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.birchcreative.com.au/ Model: jbxai	{ "brand":["Birch Creative"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"SEARCH", "text_input_field_labels":["Search for products"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.birchcreative.com.au/ Model: jbxai	{ "brand":["Birch Creative"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"SEARCH", "text_input_field_labels":["Search for products"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.birchcreative.com.au/stockists/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.birchcreative.com.au/stockists/ Model: jbxai	{ "phishing_score":0, "reason":"No text found on page."}
	{ "phishing_score":0, "reason":"No text found on page."}
URL: https://www.birchcreative.com.au/ Model: jbxai	{ "brand":["BIRCH CREATIVE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"SEARCH", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.birchcreative.com.au/p/dmc-eco-vita-organic-wool-thread-skein-box-6/ Model: jbxai	{ "brand":["Birch Creative"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"SEARCH", "text_input_field_labels":["Box"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.birchcreative.com.au/resources/ Model: jbxai	{ "brand":["BIRCH"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.birchcreative.com.au/stockists/ Model: jbxai	{ "brand":["BIRCH"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"SEARCH", "text_input_field_labels":["Enter address/city", "Use my position"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.birchcreative.com.au/resources/ Model: jbxai	{ "brand":["BIRCH"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"SEARCH", "text_input_field_labels":["September Newsletter", "Rowan Spring / Summer", "Rowan Magazines"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.birchcreative.com.au/p/dmc-eco-vita-organic-wool-thread-skein-box-6/ Model: jbxai	{ "brand":["Birch Creative"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"SEARCH", "text_input_field_labels":["Woolmark Certified", "100% Organic, non-mulesed wool", "100% Natural dyes"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.birchcreative.com.au/resources/ Model: jbxai	{ "brand":["BIRCH"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"SEARCH", "text_input_field_labels":["September Newsletter", "Rowan Spring / Summer", "Rowan Magazines"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 02:16:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9746668766300095
Encrypted:	false
SSDEEP:	48:87odtQTN0AbqHoidAKZdA19ehwiZUklqehdy+3:87YQJlbp6y
MD5:	7C305356B5E7743F4E5A152E8062CEB1
SHA1:	73CCF63B9DE8C1BD2D5018C6663C622DBEA44A34
SHA-256:	D91C9263193424E50DE093AD9AE198DD285EE1BBF0D84E244F1C77C8183AD791
SHA-512:	40209FB42E9EC71CB21CEDFE6E8A155702A9965B667B05BE05F617A13C37F2F56AE4890E529B85DCD43947E7A5920D2C54098A60CDC913C0FAED1250A48AB650
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....m.G....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IAY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........r7.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 1, 2024 05:16:17.955914974 CEST	192.168.2.5	1.1.1.1	0x68b	Standard query (0)	www.birchcreative.com.au	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:17.956048965 CEST	192.168.2.5	1.1.1.1	0x8633	Standard query (0)	www.birchcreative.com.au	65	IN (0x0001)	false
Oct 1, 2024 05:16:18.479234934 CEST	192.168.2.5	1.1.1.1	0x8fda	Standard query (0)	www.birchcreative.com.au	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:18.479403973 CEST	192.168.2.5	1.1.1.1	0xc413	Standard query (0)	www.birchcreative.com.au	65	IN (0x0001)	false
Oct 1, 2024 05:16:20.424617052 CEST	192.168.2.5	1.1.1.1	0x38f6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:20.426431894 CEST	192.168.2.5	1.1.1.1	0x9ae	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 05:16:20.557276011 CEST	192.168.2.5	1.1.1.1	0x887c	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:20.557418108 CEST	192.168.2.5	1.1.1.1	0x94e0	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Oct 1, 2024 05:16:26.661670923 CEST	192.168.2.5	1.1.1.1	0xbbca	Standard query (0)	www.birchcreative.com.au	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:26.662091970 CEST	192.168.2.5	1.1.1.1	0xf8fb	Standard query (0)	www.birchcreative.com.au	65	IN (0x0001)	false
Oct 1, 2024 05:16:27.369643927 CEST	192.168.2.5	1.1.1.1	0xd652	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:27.370327950 CEST	192.168.2.5	1.1.1.1	0xe65b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 05:16:27.374865055 CEST	192.168.2.5	1.1.1.1	0x3f51	Standard query (0)	g10300385420.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:27.375443935 CEST	192.168.2.5	1.1.1.1	0xaa9e	Standard query (0)	g10300385420.co	65	IN (0x0001)	false
Oct 1, 2024 05:16:28.007874012 CEST	192.168.2.5	1.1.1.1	0xed0b	Standard query (0)	g10300385420.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:28.008001089 CEST	192.168.2.5	1.1.1.1	0x7924	Standard query (0)	g10300385420.co	65	IN (0x0001)	false
Oct 1, 2024 05:16:29.173871994 CEST	192.168.2.5	1.1.1.1	0xce38	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:29.174029112 CEST	192.168.2.5	1.1.1.1	0x13b3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 05:16:29.731048107 CEST	192.168.2.5	1.1.1.1	0xa5e9	Standard query (0)	cdn.doofinder.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:29.731448889 CEST	192.168.2.5	1.1.1.1	0x25dd	Standard query (0)	cdn.doofinder.com	65	IN (0x0001)	false
Oct 1, 2024 05:16:30.476202011 CEST	192.168.2.5	1.1.1.1	0x7c89	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:30.476430893 CEST	192.168.2.5	1.1.1.1	0x8168	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 1, 2024 05:16:30.477134943 CEST	192.168.2.5	1.1.1.1	0xef75	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:30.477354050 CEST	192.168.2.5	1.1.1.1	0xfe57	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 05:16:30.581921101 CEST	192.168.2.5	1.1.1.1	0x8717	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:30.582134962 CEST	192.168.2.5	1.1.1.1	0xfd50	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 05:16:30.798798084 CEST	192.168.2.5	1.1.1.1	0x36fb	Standard query (0)	us1-layer.doofinder.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:30.799221039 CEST	192.168.2.5	1.1.1.1	0x917c	Standard query (0)	us1-layer.doofinder.com	65	IN (0x0001)	false
Oct 1, 2024 05:16:31.000705957 CEST	192.168.2.5	1.1.1.1	0xc13b	Standard query (0)	cdn.doofinder.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:31.002640963 CEST	192.168.2.5	1.1.1.1	0x7dee	Standard query (0)	cdn.doofinder.com	65	IN (0x0001)	false
Oct 1, 2024 05:16:31.836663008 CEST	192.168.2.5	1.1.1.1	0xc8e9	Standard query (0)	us1-layer.doofinder.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:31.836802006 CEST	192.168.2.5	1.1.1.1	0x898e	Standard query (0)	us1-layer.doofinder.com	65	IN (0x0001)	false
Oct 1, 2024 05:16:35.220516920 CEST	192.168.2.5	1.1.1.1	0x3360	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:16:35.220750093 CEST	192.168.2.5	1.1.1.1	0x1896	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:16.309745073 CEST	192.168.2.5	1.1.1.1	0x2171	Standard query (0)	e.issuu.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:16.310303926 CEST	192.168.2.5	1.1.1.1	0x9397	Standard query (0)	e.issuu.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:16.989721060 CEST	192.168.2.5	1.1.1.1	0xa1a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:16.989721060 CEST	192.168.2.5	1.1.1.1	0x56c4	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:18.009649038 CEST	192.168.2.5	1.1.1.1	0x803b	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:18.009804010 CEST	192.168.2.5	1.1.1.1	0x18a7	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:18.155493021 CEST	192.168.2.5	1.1.1.1	0x6dfe	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:18.155757904 CEST	192.168.2.5	1.1.1.1	0x6b78	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:18.654266119 CEST	192.168.2.5	1.1.1.1	0x5f6a	Standard query (0)	o4505883345354752.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:18.654500008 CEST	192.168.2.5	1.1.1.1	0xe7f	Standard query (0)	o4505883345354752.ingest.sentry.io	65	IN (0x0001)	false
Oct 1, 2024 05:17:18.660414934 CEST	192.168.2.5	1.1.1.1	0xf0c7	Standard query (0)	reader3.isu.pub	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:18.660592079 CEST	192.168.2.5	1.1.1.1	0x1fd8	Standard query (0)	reader3.isu.pub	65	IN (0x0001)	false
Oct 1, 2024 05:17:18.661202908 CEST	192.168.2.5	1.1.1.1	0x1cbb	Standard query (0)	issuu.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:18.661490917 CEST	192.168.2.5	1.1.1.1	0xedc2	Standard query (0)	issuu.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:18.893982887 CEST	192.168.2.5	1.1.1.1	0xed1e	Standard query (0)	static.isu.pub	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:18.894191027 CEST	192.168.2.5	1.1.1.1	0x502a	Standard query (0)	static.isu.pub	65	IN (0x0001)	false
Oct 1, 2024 05:17:19.093745947 CEST	192.168.2.5	1.1.1.1	0x9702	Standard query (0)	e.issuu.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:19.094197035 CEST	192.168.2.5	1.1.1.1	0x448f	Standard query (0)	e.issuu.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:19.448498964 CEST	192.168.2.5	1.1.1.1	0x3070	Standard query (0)	api.issuu.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:19.448719978 CEST	192.168.2.5	1.1.1.1	0xfefc	Standard query (0)	api.issuu.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:19.451263905 CEST	192.168.2.5	1.1.1.1	0x6f92	Standard query (0)	assets.isu.pub	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:19.451550961 CEST	192.168.2.5	1.1.1.1	0x528f	Standard query (0)	assets.isu.pub	65	IN (0x0001)	false
Oct 1, 2024 05:17:19.575217009 CEST	192.168.2.5	1.1.1.1	0x8ee	Standard query (0)	pingback.issuu.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:19.575937033 CEST	192.168.2.5	1.1.1.1	0x570a	Standard query (0)	pingback.issuu.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:20.668538094 CEST	192.168.2.5	1.1.1.1	0x23a	Standard query (0)	layers.isu.pub	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:20.669009924 CEST	192.168.2.5	1.1.1.1	0x4bb1	Standard query (0)	layers.isu.pub	65	IN (0x0001)	false
Oct 1, 2024 05:17:20.712893009 CEST	192.168.2.5	1.1.1.1	0xd524	Standard query (0)	image.isu.pub	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:20.713382959 CEST	192.168.2.5	1.1.1.1	0x42a6	Standard query (0)	image.isu.pub	65	IN (0x0001)	false
Oct 1, 2024 05:17:21.120625019 CEST	192.168.2.5	1.1.1.1	0xecc7	Standard query (0)	rules.quantcount.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:21.121373892 CEST	192.168.2.5	1.1.1.1	0xa2fb	Standard query (0)	rules.quantcount.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:21.121913910 CEST	192.168.2.5	1.1.1.1	0x5b57	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:21.124169111 CEST	192.168.2.5	1.1.1.1	0xa252	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:29.332374096 CEST	192.168.2.5	1.1.1.1	0xa1ad	Standard query (0)	api.pico.bendingspoonsapps.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:29.332779884 CEST	192.168.2.5	1.1.1.1	0x5bcd	Standard query (0)	api.pico.bendingspoonsapps.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:30.628665924 CEST	192.168.2.5	1.1.1.1	0x9c4b	Standard query (0)	reader3.isu.pub	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:30.628865004 CEST	192.168.2.5	1.1.1.1	0x350a	Standard query (0)	reader3.isu.pub	65	IN (0x0001)	false
Oct 1, 2024 05:17:30.633430004 CEST	192.168.2.5	1.1.1.1	0xbb6f	Standard query (0)	o4505883345354752.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:30.633518934 CEST	192.168.2.5	1.1.1.1	0x62be	Standard query (0)	o4505883345354752.ingest.sentry.io	65	IN (0x0001)	false
Oct 1, 2024 05:17:30.648710012 CEST	192.168.2.5	1.1.1.1	0x460d	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:30.648896933 CEST	192.168.2.5	1.1.1.1	0x5456	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:30.654591084 CEST	192.168.2.5	1.1.1.1	0x6fa	Standard query (0)	issuu.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:30.654884100 CEST	192.168.2.5	1.1.1.1	0xb430	Standard query (0)	issuu.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:30.674413919 CEST	192.168.2.5	1.1.1.1	0x4d4a	Standard query (0)	assets.isu.pub	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:30.674644947 CEST	192.168.2.5	1.1.1.1	0xe3b	Standard query (0)	assets.isu.pub	65	IN (0x0001)	false
Oct 1, 2024 05:17:30.680289984 CEST	192.168.2.5	1.1.1.1	0x46b2	Standard query (0)	api.issuu.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:30.680648088 CEST	192.168.2.5	1.1.1.1	0xfe4f	Standard query (0)	api.issuu.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:30.707128048 CEST	192.168.2.5	1.1.1.1	0x87f0	Standard query (0)	image.isu.pub	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:30.707503080 CEST	192.168.2.5	1.1.1.1	0x49f6	Standard query (0)	image.isu.pub	65	IN (0x0001)	false
Oct 1, 2024 05:17:30.716126919 CEST	192.168.2.5	1.1.1.1	0xd02c	Standard query (0)	layers.isu.pub	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:30.716289997 CEST	192.168.2.5	1.1.1.1	0x8e6a	Standard query (0)	layers.isu.pub	65	IN (0x0001)	false
Oct 1, 2024 05:17:30.790049076 CEST	192.168.2.5	1.1.1.1	0x2144	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:30.790236950 CEST	192.168.2.5	1.1.1.1	0xc43b	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:30.794034004 CEST	192.168.2.5	1.1.1.1	0xa3d3	Standard query (0)	rules.quantcount.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:30.794342041 CEST	192.168.2.5	1.1.1.1	0xc2ad	Standard query (0)	rules.quantcount.com	65	IN (0x0001)	false
Oct 1, 2024 05:17:31.741291046 CEST	192.168.2.5	1.1.1.1	0x7978	Standard query (0)	api.pico.bendingspoonsapps.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 05:17:31.741460085 CEST	192.168.2.5	1.1.1.1	0xcebb	Standard query (0)	api.pico.bendingspoonsapps.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 05:16:18.000770092 CEST	439	OUT	GET / HTTP/1.1 Host: www.birchcreative.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 05:16:18.476624966 CEST	538	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 01 Oct 2024 03:16:18 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Tue, 01 Oct 2024 04:16:18 GMT Location: https://www.birchcreative.com.au/ Vary: Accept-Encoding Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cb94b0f09ea4352-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 1, 2024 05:17:03.490021944 CEST	6	OUT	Data Raw: 00 Data Ascii:

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.birchcreative.com.au

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Chrome Cache Entry: 320

Chrome Cache Entry: 321

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Chrome Cache Entry: 324

Chrome Cache Entry: 325

Chrome Cache Entry: 326

Chrome Cache Entry: 327

Chrome Cache Entry: 328

Chrome Cache Entry: 329

Chrome Cache Entry: 330

Chrome Cache Entry: 331

Windows Analysis Report
http://www.birchcreative.com.au

Timestamp	Bytes transferred	Direction	Data
2024-10-01 03:16:19 UTC	667	OUT	GET / HTTP/1.1 Host: www.birchcreative.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 03:16:20 UTC	623	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 03:16:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding link: <https://www.birchcreative.com.au/wp-json/>; rel="https://api.w.org/", <https://www.birchcreative.com.au/wp-json/wp/v2/pages/56>; rel="alternate"; title="JSON"; type="application/json", <https://www.birchcreative.com.au/>; rel=shortlink last-modified: Tue, 01 Oct 2024 03:16:03 GMT Cache-Control: public, max-age=0, s-maxage=2592000 CF-Cache-Status: HIT Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cb94b135e9c4251-EWR
2024-10-01 03:16:20 UTC	746	IN	Data Raw: 37 64 33 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 41 55 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 20 76 61 72 20 67 66 6f 72 6d 3b 67 66 6f 72 6d 7c 7c 28 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 67 66 6f 72 6d 5f 6d 61 69 6e 5f 73 63 72 69 70 74 73 5f 6c 6f 61 64 65 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 67 66 6f 72 6d 2e 73 63 72 69 70 74 73 4c 6f 61 64 65 Data Ascii: 7d30<!doctype html><html lang="en-AU" prefix="og: https://ogp.me/ns#"><head><meta charset="UTF-8"><script type="text/javascript">/* <![CDATA[ */ var gform;gform\|\|(document.addEventListener("gform_main_scripts_loaded",function(){gform.scriptsLoade
2024-10-01 03:16:20 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 67 66 6f 72 6d 2e 64 6f 48 6f 6f 6b 28 22 61 63 74 69 6f 6e 22 2c 6f 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 61 70 70 6c 79 46 69 6c 74 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 67 66 6f 72 6d 2e 64 6f 48 6f 6f 6b 28 22 66 69 6c 74 65 72 22 2c 6f 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 72 65 6d 6f 76 65 41 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 6e 29 7b 67 66 6f 72 6d 2e 72 65 6d 6f 76 65 48 6f 6f 6b 28 22 61 63 74 69 6f 6e 22 2c 6f 2c 6e 29 7d 2c 72 65 6d 6f 76 65 46 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 6e 2c 72 29 7b 67 66 6f 72 6d 2e 72 65 6d 6f 76 65 48 6f 6f 6b 28 22 66 69 6c 74 65 72 22 2c 6f 2c 6e 2c 72 29 7d 2c 61 64 64 48 6f 6f 6b 3a 66 75 6e 63 74 69 6f 6e Data Ascii: :function(o){gform.doHook("action",o,arguments)},applyFilters:function(o){return gform.doHook("filter",o,arguments)},removeAction:function(o,n){gform.removeHook("action",o,n)},removeFilter:function(o,n,r){gform.removeHook("filter",o,n,r)},addHook:function
2024-10-01 03:16:20 UTC	1369	IN	Data Raw: 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6a 2c 66 29 3b 0a 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 64 61 74 61 4c 61 79 65 72 27 2c 27 47 54 4d 2d 4e 4b 56 5a 47 4c 4a 27 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 45 6e 64 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 09 3c 74 69 74 6c 65 3e 43 72 61 66 74 20 61 6e 64 20 48 61 62 65 72 64 61 73 68 65 72 79 20 53 75 70 70 6c 69 65 73 20 2d 20 42 69 72 63 68 20 43 72 65 61 74 69 76 65 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 64 61 74 61 2d 72 6f 63 6b 65 74 2d 70 72 65 6c 6f 61 64 20 61 73 3d 22 73 74 79 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f Data Ascii: .parentNode.insertBefore(j,f);})(window,document,'script','dataLayer','GTM-NKVZGLJ');</script>... End Google Tag Manager --><title>Craft and Haberdashery Supplies - Birch Creative</title><link rel="preload" data-rocket-preload as="style" href="https:/
2024-10-01 03:16:20 UTC	1369	IN	Data Raw: 30 69 74 61 6c 69 63 25 32 43 35 30 30 25 32 43 35 30 30 69 74 61 6c 69 63 25 32 43 36 30 30 25 32 43 36 30 30 69 74 61 6c 69 63 25 32 43 37 30 30 25 32 43 37 30 30 69 74 61 6c 69 63 25 32 43 38 30 30 25 32 43 38 30 30 69 74 61 6c 69 63 25 32 43 39 30 30 25 32 43 39 30 30 69 74 61 6c 69 63 25 37 43 52 6f 62 6f 74 6f 25 33 41 34 30 30 25 32 43 34 30 30 69 74 61 6c 69 63 25 32 43 37 30 30 25 32 43 37 30 30 69 74 61 6c 69 63 26 23 30 33 38 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 6d 65 64 69 61 3d 22 70 72 69 6e 74 22 20 6f 6e 6c 6f 61 64 3d 22 74 68 69 73 2e 6d 65 64 69 61 3d 27 61 6c 6c 27 22 20 2f 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 Data Ascii: 0italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto%3A400%2C400italic%2C700%2C700italic&display=swap" media="print" onload="this.media='all'" /><noscript><link rel="stylesheet" href="https://font
2024-10-01 03:16:20 UTC	1369	IN	Data Raw: 4f 2d 57 45 42 2d 37 36 38 78 32 34 33 2e 6a 70 67 20 37 36 38 77 2c 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 72 63 68 63 72 65 61 74 69 76 65 2e 63 6f 6d 2e 61 75 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 34 2f 30 38 2f 50 4f 52 54 4f 46 49 4e 4f 2d 57 45 42 2d 31 35 33 36 78 34 38 35 2e 6a 70 67 20 31 35 33 36 77 2c 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 72 63 68 63 72 65 61 74 69 76 65 2e 63 6f 6d 2e 61 75 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 34 2f 30 38 2f 50 4f 52 54 4f 46 49 4e 4f 2d 57 45 42 2d 31 32 30 30 78 33 37 39 2e 6a 70 67 20 31 32 30 30 77 2c 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 72 63 68 63 72 65 61 74 69 76 65 2e 63 6f 6d 2e 61 75 2f 77 70 2d 63 6f 6e 74 65 6e 74 Data Ascii: O-WEB-768x243.jpg 768w, https://www.birchcreative.com.au/wp-content/uploads/2024/08/PORTOFINO-WEB-1536x485.jpg 1536w, https://www.birchcreative.com.au/wp-content/uploads/2024/08/PORTOFINO-WEB-1200x379.jpg 1200w, https://www.birchcreative.com.au/wp-content
2024-10-01 03:16:20 UTC	1369	IN	Data Raw: 61 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 43 72 61 66 74 20 61 6e 64 20 48 61 62 65 72 64 61 73 68 65 72 79 20 53 75 70 70 6c 69 65 73 20 2d 20 42 69 72 63 68 20 43 72 65 61 74 69 76 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 20 61 72 65 20 61 20 63 72 65 61 74 69 76 65 20 73 70 65 63 69 61 6c 69 73 74 20 70 72 6f 64 75 63 74 20 63 6f 6d 70 61 6e 79 20 77 69 74 68 20 6f 76 65 72 20 32 32 2c 30 30 30 20 69 74 65 6d 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 61 6c 6c 20 79 6f 75 72 20 63 72 61 66 74 20 61 6e 64 20 68 61 62 65 72 64 61 73 68 65 72 79 20 6e 65 Data Ascii: age" /><meta name="twitter:title" content="Craft and Haberdashery Supplies - Birch Creative" /><meta name="twitter:description" content="We are a creative specialist product company with over 22,000 items available for all your craft and haberdashery ne
2024-10-01 03:16:20 UTC	1369	IN	Data Raw: 67 20 57 65 73 74 22 2c 22 61 64 64 72 65 73 73 52 65 67 69 6f 6e 22 3a 22 56 49 43 22 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 33 30 38 31 22 2c 22 61 64 64 72 65 73 73 43 6f 75 6e 74 72 79 22 3a 22 41 75 73 74 72 61 6c 69 61 22 7d 2c 22 6c 6f 67 6f 22 3a 7b 22 40 74 79 70 65 22 3a 22 49 6d 61 67 65 4f 62 6a 65 63 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 72 63 68 63 72 65 61 74 69 76 65 2e 63 6f 6d 2e 61 75 2f 23 6c 6f 67 6f 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 72 63 68 63 72 65 61 74 69 76 65 2e 63 6f 6d 2e 61 75 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 30 2f 30 39 2f 62 69 72 63 68 2d 6c 6f 67 6f 2e 73 76 67 22 2c 22 63 6f 6e 74 65 6e 74 55 72 6c 22 3a 22 68 Data Ascii: g West","addressRegion":"VIC","postalCode":"3081","addressCountry":"Australia"},"logo":{"@type":"ImageObject","@id":"https://www.birchcreative.com.au/#logo","url":"https://www.birchcreative.com.au/wp-content/uploads/2020/09/birch-logo.svg","contentUrl":"h
2024-10-01 03:16:20 UTC	1369	IN	Data Raw: 72 79 20 53 75 70 70 6c 69 65 73 20 2d 20 42 69 72 63 68 20 43 72 65 61 74 69 76 65 22 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 32 2d 30 31 2d 32 30 54 31 35 3a 31 32 3a 34 30 2b 31 31 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 34 2d 30 39 2d 30 39 54 31 31 3a 31 36 3a 30 30 2b 31 30 3a 30 30 22 2c 22 61 62 6f 75 74 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 72 63 68 63 72 65 61 74 69 76 65 2e 63 6f 6d 2e 61 75 2f 23 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 7d 2c 22 69 73 50 61 72 74 4f 66 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 72 63 68 63 72 65 61 74 69 76 65 2e 63 6f 6d 2e 61 75 2f 23 77 65 62 73 69 74 65 22 7d 2c 22 70 72 69 6d 61 72 79 49 6d Data Ascii: ry Supplies - Birch Creative","datePublished":"2022-01-20T15:12:40+11:00","dateModified":"2024-09-09T11:16:00+10:00","about":{"@id":"https://www.birchcreative.com.au/#organization"},"isPartOf":{"@id":"https://www.birchcreative.com.au/#website"},"primaryIm
2024-10-01 03:16:20 UTC	1369	IN	Data Raw: 63 6f 75 6e 74 65 72 73 28 69 74 65 6d 2c 20 22 2e 22 29 20 22 2e 20 22 3b 63 6f 75 6e 74 65 72 2d 69 6e 63 72 65 6d 65 6e 74 3a 69 74 65 6d 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 Data Ascii: counters(item, ".") ". ";counter-increment:item}</style><style id='classic-theme-styles-inline-css' type='text/css'>/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text
2024-10-01 03:16:20 UTC	1369	IN	Data Raw: 2c 31 29 20 30 25 2c 72 67 62 28 31 35 35 2c 38 31 2c 32 32 34 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c 32 32 30 2c 31 38 30 29 20 30 25 2c 72 67 62 28 30 2c 32 30 38 2c 31 33 30 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 Data Ascii: ,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(2

Timestamp	Bytes transferred	Direction	Data
2024-10-01 03:16:21 UTC	648	OUT	GET /wp-content/plugins/woocommerce-product-price-based-on-countries/assets/css/frontend.min.css?ver=3.4.9 HTTP/1.1 Host: www.birchcreative.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.birchcreative.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 03:16:21 UTC	398	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 03:16:21 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Sat, 10 Aug 2024 17:19:20 GMT expires: Tue, 30 Sep 2025 23:00:17 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 15355 Server: cloudflare CF-RAY: 8cb94b206c015e5f-EWR alt-svc: h3=":443"; ma=86400
2024-10-01 03:16:21 UTC	971	IN	Data Raw: 38 63 33 0d 0a 2e 77 63 70 62 63 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 63 70 62 63 2d 70 72 69 63 65 2e 6c 6f 61 64 69 6e 67 20 2a 3a 6e 6f 74 28 2e 77 63 70 62 63 2d 70 6c 61 63 65 68 6f 6c 64 65 72 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 63 70 62 63 2d 70 72 69 63 65 2e 6c 6f 61 64 69 6e 67 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 77 63 2d 70 72 69 63 65 2d 62 61 73 65 64 2d 63 6f 75 6e 74 72 79 2d 72 65 66 72 65 73 68 2d 61 72 65 61 5b 64 61 74 61 2d 61 72 65 61 3d 22 77 63 73 61 74 74 22 5d 3a 6e 6f 74 28 2e 72 65 66 72 65 73 68 65 64 29 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 77 63 2d 70 72 69 63 65 2d 62 61 73 65 64 2d 63 6f Data Ascii: 8c3.wcpbc-content{display:none}.wcpbc-price.loading *:not(.wcpbc-placeholder){display:none}.wcpbc-price.loading{visibility:hidden;color:inherit}.wc-price-based-country-refresh-area[data-area="wcsatt"]:not(.refreshed){visibility:hidden}.wc-price-based-co
2024-10-01 03:16:21 UTC	1279	IN	Data Raw: 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 63 75 72 72 65 6e 74 43 6f 6c 6f 72 2c 23 66 35 66 35 66 35 34 64 2c 63 75 72 72 65 6e 74 43 6f 6c 6f 72 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 25 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 77 63 70 62 63 5f 73 6b 65 6c 65 74 6f 6e 5f 61 6e 69 6d 61 74 69 6f 6e 20 31 2e 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 77 63 70 62 63 2d 70 72 69 63 65 2e 6c 6f 61 64 69 6e 67 20 2e 77 63 70 62 63 2d 70 6c 61 63 65 68 6f 6c 64 65 Data Ascii: t;background-image:linear-gradient(90deg,currentColor,#f5f5f54d,currentColor);transform:translateX(-100%);animation:wcpbc_skeleton_animation 1.5s ease-in-out infinite}@media screen and (prefers-reduced-motion:reduce){.wcpbc-price.loading .wcpbc-placeholde
2024-10-01 03:16:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-01 03:16:21 UTC	629	OUT	GET /wp-content/cache/min/1/font-awesome/latest/css/font-awesome.min.css?ver=1727622085 HTTP/1.1 Host: www.birchcreative.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.birchcreative.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 03:16:21 UTC	367	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 03:16:21 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Sun, 29 Sep 2024 15:01:25 GMT expires: Tue, 30 Sep 2025 23:04:29 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 5901 Server: cloudflare CF-RAY: 8cb94b206f8741d3-EWR
2024-10-01 03:16:21 UTC	1002	IN	Data Raw: 37 61 36 35 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 Data Ascii: 7a65/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-display:swap;font-family:'FontAwesome';src:url(https://maxcdn.bootst
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 31 20 46 6f 6e 74 41 77 65 73 6f 6d 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 2e 66 61 2d 6c 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 33 33 33 33 33 33 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 37 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 31 35 25 7d 2e 66 61 2d 32 78 7b Data Ascii: al}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 31 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 Data Ascii: m:rotate(359deg)}}.fa-rotate-90{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=1)";-webkit-transform:rotate(90deg);-ms-transform:rotate(90deg);transform:rotate(90deg)}.fa-rotate-180{-ms-filter:"progid:DXImageTransform.Microsoft.BasicIma
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 33 22 7d 2e 66 61 2d 68 65 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 34 22 7d 2e 66 61 2d 73 74 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 35 22 7d 2e 66 61 2d 73 74 61 72 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 36 22 7d 2e 66 61 2d 75 73 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 37 22 7d 2e 66 61 2d 66 69 6c 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 38 22 7d 2e 66 61 2d 74 68 2d 6c 61 72 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 39 22 7d 2e 66 61 2d 74 68 3a 62 Data Ascii: t:"\f002"}.fa-envelope-o:before{content:"\f003"}.fa-heart:before{content:"\f004"}.fa-star:before{content:"\f005"}.fa-star-o:before{content:"\f006"}.fa-user:before{content:"\f007"}.fa-film:before{content:"\f008"}.fa-th-large:before{content:"\f009"}.fa-th:b
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 62 22 7d 2e 66 61 2d 74 61 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 63 22 7d 2e 66 61 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 64 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 65 22 7d 2e 66 61 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 66 22 7d 2e 66 61 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 30 22 7d 2e 66 61 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 31 22 7d Data Ascii: e:before{content:"\f02a"}.fa-tag:before{content:"\f02b"}.fa-tags:before{content:"\f02c"}.fa-book:before{content:"\f02d"}.fa-bookmark:before{content:"\f02e"}.fa-print:before{content:"\f02f"}.fa-camera:before{content:"\f030"}.fa-font:before{content:"\f031"}
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 31 22 7d 2e 66 61 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 32 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 33 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 34 22 7d 2e 66 61 2d 70 6c 75 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 35 22 7d 2e 66 61 2d 6d 69 6e 75 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 36 22 7d Data Ascii: efore{content:"\f050"}.fa-step-forward:before{content:"\f051"}.fa-eject:before{content:"\f052"}.fa-chevron-left:before{content:"\f053"}.fa-chevron-right:before{content:"\f054"}.fa-plus-circle:before{content:"\f055"}.fa-minus-circle:before{content:"\f056"}
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 37 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 38 22 7d 2e 66 61 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 39 22 7d 2e 66 61 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 61 22 7d 2e 66 61 2d 66 6f 6c 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 62 22 7d 2e 66 61 2d 66 6f 6c 64 65 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 63 22 Data Ascii: agnet:before{content:"\f076"}.fa-chevron-up:before{content:"\f077"}.fa-chevron-down:before{content:"\f078"}.fa-retweet:before{content:"\f079"}.fa-shopping-cart:before{content:"\f07a"}.fa-folder:before{content:"\f07b"}.fa-folder-open:before{content:"\f07c"
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 6e 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 63 22 7d 2e 66 61 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 64 22 7d 2e 66 61 2d 66 65 65 64 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 65 22 7d 2e 66 61 2d 68 64 64 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 30 22 7d 2e 66 61 2d 62 75 6c 6c 68 6f 72 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 31 22 7d 2e 66 61 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 33 22 7d 2e 66 61 2d 63 65 72 74 69 66 69 Data Ascii: before{content:"\f09b"}.fa-unlock:before{content:"\f09c"}.fa-credit-card:before{content:"\f09d"}.fa-feed:before,.fa-rss:before{content:"\f09e"}.fa-hdd-o:before{content:"\f0a0"}.fa-bullhorn:before{content:"\f0a1"}.fa-bell:before{content:"\f0f3"}.fa-certifi
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 64 22 7d 2e 66 61 2d 74 61 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 65 22 7d 2e 66 61 2d 6d 61 67 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 30 22 7d 2e 66 61 2d 74 72 75 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 31 22 7d 2e 66 61 2d 70 69 6e 74 65 72 65 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 32 22 7d 2e 66 61 2d 70 69 6e 74 65 72 65 73 74 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 33 22 7d 2e 66 61 2d 67 6f 6f 67 6c 65 Data Ascii: ough:before{content:"\f0cc"}.fa-underline:before{content:"\f0cd"}.fa-table:before{content:"\f0ce"}.fa-magic:before{content:"\f0d0"}.fa-truck:before{content:"\f0d1"}.fa-pinterest:before{content:"\f0d2"}.fa-pinterest-square:before{content:"\f0d3"}.fa-google
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 65 74 68 6f 73 63 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 31 22 7d 2e 66 61 2d 73 75 69 74 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 32 22 7d 2e 66 61 2d 62 65 6c 6c 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 32 22 7d 2e 66 61 2d 63 6f 66 66 65 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 34 22 7d 2e 66 61 2d 63 75 74 6c 65 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 35 22 7d 2e 66 61 2d 66 69 6c 65 2d 74 65 78 74 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 36 22 7d 2e 66 61 2d 62 75 69 6c 64 69 6e 67 2d 6f 3a 62 Data Ascii: efore{content:"\f0f0"}.fa-stethoscope:before{content:"\f0f1"}.fa-suitcase:before{content:"\f0f2"}.fa-bell-o:before{content:"\f0a2"}.fa-coffee:before{content:"\f0f4"}.fa-cutlery:before{content:"\f0f5"}.fa-file-text-o:before{content:"\f0f6"}.fa-building-o:b

Timestamp	Bytes transferred	Direction	Data
2024-10-01 03:16:21 UTC	665	OUT	GET /wp-content/cache/min/1/wp-content/plugins/country-restrictions-for-woocommerce/assets/css/cor_front.css?ver=1727622085 HTTP/1.1 Host: www.birchcreative.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.birchcreative.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 03:16:21 UTC	359	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 03:16:21 GMT Content-Type: text/css; charset=utf-8 Content-Length: 238 Connection: close last-modified: Sun, 29 Sep 2024 15:01:25 GMT expires: Tue, 30 Sep 2025 23:04:29 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 5901 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb94b206a7542af-EWR
2024-10-01 03:16:21 UTC	238	IN	Data Raw: 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 68 69 64 65 2d 6f 6e 2d 64 65 73 6b 74 6f 70 2c 2a 20 5b 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 27 68 69 64 65 2d 6f 6e 2d 64 65 73 6b 74 6f 70 27 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 6d 61 78 2d 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 7d 6c 69 20 75 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 2e 38 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 66 63 6f 72 74 65 78 74 7b 77 69 64 74 68 3a 31 30 30 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c 7d Data Ascii: @media only screen and (min-width:600px){.hide-on-desktop,* [aria-labelledby='hide-on-desktop']{display:none;max-height:0;overflow:hidden}}li ul{margin-left:0.8em!important}.afcortext{width:100%;float:left;text-align:center;color:initial}

Timestamp	Bytes transferred	Direction	Data
2024-10-01 03:16:21 UTC	646	OUT	GET /wp-content/plugins/yith-store-locator-for-wordpress/assets/css/frontend/frontend.min.css?ver=2.36.0 HTTP/1.1 Host: www.birchcreative.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.birchcreative.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 03:16:21 UTC	397	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 03:16:21 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Thu, 22 Aug 2024 16:47:06 GMT expires: Tue, 30 Sep 2025 23:00:17 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 5901 Server: cloudflare CF-RAY: 8cb94b24aea91a07-EWR alt-svc: h3=":443"; ma=86400
2024-10-01 03:16:21 UTC	972	IN	Data Raw: 34 39 31 37 0d 0a 23 79 69 74 68 2d 73 6c 2d 77 72 61 70 2d 6c 6f 61 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 79 69 74 68 2d 73 6c 2d 6c 6f 61 64 65 72 7b 7a 2d 69 6e 64 65 78 3a 31 35 30 30 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 2e 77 72 61 70 70 65 72 2d 66 69 6c 74 65 72 20 3a 3a 73 65 Data Ascii: 4917#yith-sl-wrap-loader{position:fixed;left:0;top:0;width:100%;height:100%;z-index:1000;display:none}#yith-sl-loader{z-index:1500;position:fixed;top:50%;left:50%}@keyframes spin{0%{transform:rotate(0)}100%{transform:rotate(360deg)}}.wrapper-filter ::se
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 33 62 33 62 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 61 64 64 72 65 73 73 2d 74 6f 6f 6c 74 69 70 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 35 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 35 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 30 70 78 20 73 6f 6c 69 64 20 23 33 62 33 62 33 62 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 2d 31 30 Data Ascii: 3b3b;color:#fff;text-align:center;line-height:15px;padding:10px;display:none}#address-tooltip:after{content:'';width:0;height:0;border-left:5px solid transparent;border-right:5px solid transparent;border-top:10px solid #3b3b3b;position:absolute;bottom:-10
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 37 30 37 30 37 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 79 69 74 68 2d 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 20 73 65 6c 65 63 74 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 23 79 69 74 68 2d 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 20 2e 73 65 63 74 69 6f 6e 2d 74 69 74 6c 65 2c 23 79 69 74 68 2d 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 20 2e 77 72 61 70 2d 73 65 61 72 63 68 2d 63 61 74 65 67 6f 72 69 65 73 2c 23 79 69 74 68 2d 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 20 2e 77 72 61 70 2d 73 65 61 72 63 68 2d 66 69 6c 74 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 23 79 69 74 68 2d 73 65 61 72 63 68 2d 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 73 7b 6d 61 72 67 Data Ascii: tom:1px solid #707070;padding-bottom:10px}#yith-store-locator select:focus{outline:0}#yith-store-locator .section-title,#yith-store-locator .wrap-search-categories,#yith-store-locator .wrap-search-filter{margin-bottom:20px}#yith-search-store-locators{marg
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 23 79 69 74 68 2d 73 6c 2d 72 65 73 75 6c 74 73 20 2e 73 74 6f 72 65 2d 69 6d 61 67 65 2c 2e 79 69 74 68 2d 73 6c 2d 69 6d 61 67 65 2d 72 69 67 68 74 20 23 79 69 74 68 2d 73 6c 2d 72 65 73 75 6c 74 73 20 2e 73 74 6f 72 65 2d 69 6e 66 6f 7b 6f 72 64 65 72 3a 31 7d 2e 79 69 74 68 2d 73 6c 2d 69 6d 61 67 65 2d 6c 65 66 74 20 23 79 69 74 68 2d 73 6c 2d 72 65 73 75 6c 74 73 20 2e 73 74 6f 72 65 2d 69 6d 61 67 65 2c 2e 79 69 74 68 2d 73 6c 2d 69 6d 61 67 65 2d 72 69 67 68 74 20 23 79 69 74 68 2d 73 6c 2d 72 65 73 75 6c 74 73 20 2e 73 74 6f 72 65 2d 69 6d 61 67 65 7b 77 69 64 74 68 3a 34 30 25 7d 2e 79 69 74 68 2d 73 6c 2d 69 6d 61 67 65 2d 6c 65 66 74 20 23 79 69 74 68 2d 73 6c 2d 72 65 73 75 6c 74 73 20 2e 73 74 6f 72 65 2d 69 6e 66 6f 2c 2e 79 69 74 68 2d 73 Data Ascii: #yith-sl-results .store-image,.yith-sl-image-right #yith-sl-results .store-info{order:1}.yith-sl-image-left #yith-sl-results .store-image,.yith-sl-image-right #yith-sl-results .store-image{width:40%}.yith-sl-image-left #yith-sl-results .store-info,.yith-s
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 74 6f 70 3a 2d 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 70 78 7d 23 79 69 74 68 2d 73 6c 2d 72 65 73 75 6c 74 73 20 2e 66 65 61 74 75 72 65 64 2d 73 74 6f 72 65 20 69 6d 67 2c 2e 79 69 74 68 2d 73 6c 2d 70 69 6e 2d 6d 6f 64 61 6c 20 2e 66 65 61 74 75 72 65 64 2d 73 74 6f 72 65 20 69 6d 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 70 78 7d 2e 79 69 74 68 2d 73 6c 2d 70 69 6e 2d 6d 6f 64 61 6c 20 2e 66 65 61 74 75 72 65 64 2d 73 74 6f 72 65 20 69 6d 67 7b 74 6f 70 3a 31 70 78 7d 2e 79 69 74 68 2d 73 6c 2d 69 6d 61 67 65 2d 74 6f 70 20 23 79 69 74 Data Ascii: form:uppercase;top:-2px;position:relative;display:inline-block;line-height:15px}#yith-sl-results .featured-store img,.yith-sl-pin-modal .featured-store img{position:relative;width:10px}.yith-sl-pin-modal .featured-store img{top:1px}.yith-sl-image-top #yit
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 70 78 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 79 69 74 68 2d 73 6c 2d 70 69 6e 2d 6d 6f 64 61 6c 20 2e 63 75 73 74 6f 6d 2d 6c 69 6e 6b 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 7d 23 79 69 74 68 2d 73 6c 2d 72 65 73 75 6c 74 73 20 2e 63 75 73 74 6f 6d 2d 6c 69 6e 6b 2e 62 75 74 74 6f 6e 2c 2e 79 69 74 68 2d 73 6c 2d 70 69 6e 2d 6d 6f 64 61 6c 20 2e 63 75 73 74 6f 6d 2d 6c 69 6e 6b 2e 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 35 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: ze:12px;line-height:18px;font-weight:700;display:block;box-shadow:none;margin-bottom:2px;text-decoration:none}.yith-sl-pin-modal .custom-link{margin-bottom:4px}#yith-sl-results .custom-link.button,.yith-sl-pin-modal .custom-link.button{width:150px;padding
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 79 3a 6e 6f 6e 65 7d 23 79 69 74 68 2d 73 6c 2d 6d 61 69 6e 2d 66 69 6c 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 61 79 6f 75 74 2d 64 72 6f 70 64 6f 77 6e 20 2e 77 72 61 70 70 65 72 2d 66 69 6c 74 65 72 2e 61 63 74 69 76 65 20 2e 6f 70 65 6e 2d 64 72 6f 70 64 6f 77 6e 2c 23 79 69 74 68 2d 73 6c 2d 6d 61 69 6e 2d 66 69 6c 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 61 79 6f 75 74 2d 64 72 6f 70 64 6f 77 6e 20 2e 77 72 61 70 70 65 72 2d 66 69 6c 74 65 72 2e 73 65 6c 65 63 74 65 64 20 2e 6f 70 65 6e 2d 64 72 6f 70 64 6f 77 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 23 79 69 74 68 2d 73 6c 2d 6d 61 69 6e 2d 66 69 6c 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 61 79 6f 75 74 2d 64 72 6f 70 64 6f 77 6e 20 2e 77 72 61 70 Data Ascii: y:none}#yith-sl-main-filters-container.layout-dropdown .wrapper-filter.active .open-dropdown,#yith-sl-main-filters-container.layout-dropdown .wrapper-filter.selected .open-dropdown{color:#fff!important}#yith-sl-main-filters-container.layout-dropdown .wrap
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 23 79 69 74 68 2d 73 6c 2d 6d 61 69 6e 2d 66 69 6c 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 7b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 3b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 7d 23 79 69 74 68 2d 73 6c 2d 6d 61 69 6e 2d 66 69 6c 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 20 6c 61 62 65 6c 2e 74 65 72 6d 2d 6c 61 62 65 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 37 70 78 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 Data Ascii: :10px;font-size:14px}#yith-sl-main-filters-container input[type=checkbox]{z-index:1000;opacity:0;position:absolute;top:0}#yith-sl-main-filters-container label.term-label{position:relative;padding-left:28px;font-size:14px;line-height:17px;align-self:center
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 6c 63 28 31 30 30 25 20 2b 20 32 30 70 78 29 3b 77 69 64 74 68 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 34 30 30 70 78 7d 2e 6d 61 70 2d 6c 65 66 74 20 23 79 69 74 68 2d 73 6c 2d 6d 61 69 6e 2d 66 69 6c 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 61 79 6f 75 74 2d 64 72 6f 70 64 6f 77 6e 20 2e 77 72 61 70 70 65 72 2d 6f 70 74 69 6f 6e 73 2c 2e 6d 61 70 2d 6c 65 66 74 20 2e 77 72 61 70 70 65 72 2d 66 69 6c 74 65 72 2e 74 79 70 65 2d 64 72 6f 70 64 6f 77 6e 20 2e 77 72 61 70 70 65 72 2d 6f 70 74 69 6f 6e 73 7b 72 69 67 68 74 3a 30 7d 23 79 69 74 68 2d 73 6c 2d 6d 61 69 6e 2d 66 69 6c 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 61 79 6f 75 74 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 2c 2e 77 72 61 70 70 65 72 2d 66 69 6c 74 65 Data Ascii: lc(100% + 20px);width:max-content;max-width:400px}.map-left #yith-sl-main-filters-container.layout-dropdown .wrapper-options,.map-left .wrapper-filter.type-dropdown .wrapper-options{right:0}#yith-sl-main-filters-container.layout-dropdown ul,.wrapper-filte
2024-10-01 03:16:21 UTC	1369	IN	Data Raw: 20 33 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 7d 23 79 69 74 68 2d 73 6c 2d 6d 61 69 6e 2d 66 69 6c 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 77 72 61 70 70 65 72 2d 66 69 6c 74 65 72 20 2e 66 69 6c 74 65 72 2d 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 69 64 74 68 3a 31 35 70 78 7d 23 79 69 74 68 2d 73 6c 2d 6d 61 69 6e 2d 66 69 6c 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 77 72 61 70 70 65 72 2d 66 69 6c 74 65 72 20 2e 6f 70 65 6e 2d 64 72 6f 70 64 6f 77 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 79 69 74 68 2d Data Ascii: 30px;margin-right:10px;line-height:18px}#yith-sl-main-filters-container .wrapper-filter .filter-icon{margin-right:5px;vertical-align:middle;width:15px}#yith-sl-main-filters-container .wrapper-filter .open-dropdown{position:relative;margin-bottom:0}#yith-

Timestamp	Bytes transferred	Direction	Data
2024-10-01 03:16:21 UTC	642	OUT	GET /wp-content/plugins/yith-woocommerce-catalog-mode-premium/assets/css/frontend.min.css?ver=2.38.0 HTTP/1.1 Host: www.birchcreative.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.birchcreative.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 03:16:21 UTC	357	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 03:16:21 GMT Content-Type: text/css; charset=utf-8 Content-Length: 0 Connection: close last-modified: Sat, 21 Sep 2024 15:43:01 GMT expires: Tue, 30 Sep 2025 23:04:47 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 5901 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb94b24a9480f71-EWR

Timestamp	Bytes transferred	Direction	Data
2024-10-01 03:16:21 UTC	662	OUT	GET /wp-content/cache/min/1/wp-content/plugins/woocommerce-side-cart-premium/assets/css/xoo-wsc-fonts.css?ver=1727622085 HTTP/1.1 Host: www.birchcreative.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.birchcreative.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 03:16:22 UTC	356	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 03:16:22 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Sun, 29 Sep 2024 15:01:25 GMT expires: Tue, 30 Sep 2025 23:04:29 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Server: cloudflare CF-RAY: 8cb94b25cb2a80d6-EWR
2024-10-01 03:16:22 UTC	1013	IN	Data Raw: 64 32 34 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 57 6f 6f 2d 53 69 64 65 2d 43 61 72 74 27 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 70 6c 75 67 69 6e 73 2f 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 73 69 64 65 2d 63 61 72 74 2d 70 72 65 6d 69 75 6d 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 6f 6e 74 73 2f 57 6f 6f 2d 53 69 64 65 2d 43 61 72 74 2e 65 6f 74 3f 66 69 71 31 79 64 29 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 70 6c 75 67 69 6e 73 2f 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 73 69 64 65 2d 63 61 72 74 2d 70 72 65 6d 69 75 6d 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 6f 6e 74 73 2f 57 6f 6f 2d 53 69 64 65 2d 43 Data Ascii: d24@font-face{font-family:'Woo-Side-Cart';src:url(../../../../../../../../plugins/woocommerce-side-cart-premium/assets/css/fonts/Woo-Side-Cart.eot?fiq1yd);src:url('../../../../../../../../plugins/woocommerce-side-cart-premium/assets/css/fonts/Woo-Side-C
2024-10-01 03:16:22 UTC	1369	IN	Data Raw: 77 73 63 2d 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 62 22 7d 2e 78 6f 6f 2d 77 73 63 2d 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 63 22 7d 2e 78 6f 6f 2d 77 73 63 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 6c 6f 6e 67 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 30 30 22 7d 2e 78 6f 6f 2d 77 73 63 2d 69 63 6f 6e 2d 62 61 73 6b 65 74 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 30 31 22 7d 2e 78 6f 6f 2d 77 73 63 2d 69 63 6f 6e 2d 62 61 73 6b 65 74 34 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 30 32 22 7d 2e 78 6f 6f 2d 77 73 63 2d 69 63 6f 6e 2d Data Ascii: wsc-icon-chevron-right:before{content:"\e92b"}.xoo-wsc-icon-chevron-left1:before{content:"\e92c"}.xoo-wsc-icon-arrow-long-right:before{content:"\e900"}.xoo-wsc-icon-basket5:before{content:"\e901"}.xoo-wsc-icon-basket4:before{content:"\e902"}.xoo-wsc-icon-
2024-10-01 03:16:22 UTC	989	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 62 22 7d 2e 78 6f 6f 2d 77 73 63 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 63 22 7d 2e 78 6f 6f 2d 77 73 63 2d 69 63 6f 6e 2d 63 6f 75 70 6f 6e 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 64 22 7d 2e 78 6f 6f 2d 77 73 63 2d 69 63 6f 6e 2d 63 6f 75 70 6f 6e 2d 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 65 22 7d 2e 78 6f 6f 2d 77 73 63 2d 69 63 6f 6e 2d 63 6f 75 70 6f 6e 2d 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 66 22 7d 2e 78 6f 6f 2d 77 73 63 2d 69 63 6f 6e 2d 63 6f 75 70 6f 6e 2d 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 30 22 7d 2e Data Ascii: efore{content:"\e91b"}.xoo-wsc-icon-arrow-left:before{content:"\e91c"}.xoo-wsc-icon-coupon-1:before{content:"\e91d"}.xoo-wsc-icon-coupon-2:before{content:"\e91e"}.xoo-wsc-icon-coupon-3:before{content:"\e91f"}.xoo-wsc-icon-coupon-5:before{content:"\e920"}.
2024-10-01 03:16:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-01 03:16:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 03:16:22 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=221368 Date: Tue, 01 Oct 2024 03:16:22 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-01 03:16:22 UTC	641	OUT	GET /wp-content/cache/min/1/wp-content/themes/elementor-hello-theme-master/style.css?ver=1727622085 HTTP/1.1 Host: www.birchcreative.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.birchcreative.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 03:16:22 UTC	367	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 03:16:22 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Sun, 29 Sep 2024 15:01:25 GMT expires: Tue, 30 Sep 2025 23:04:29 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 5902 Server: cloudflare CF-RAY: 8cb94b28bd997cb2-EWR
2024-10-01 03:16:22 UTC	1002	IN	Data Raw: 61 39 39 0d 0a 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 68 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 70 72 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f Data Ascii: a99/! normalize.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css /html{-webkit-text-size-adjust:100%}hr{box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace;font-size:1em}abbr[title]{border-bottom:none;text-decoratio
2024-10-01 03:16:22 UTC	1369	IN	Data Raw: 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 70 72 6f 67 72 65 73 73 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e Data Ascii: -space:normal}progress{vertical-align:baseline}textarea{overflow:auto}[type=checkbox],[type=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearan
2024-10-01 03:16:22 UTC	349	IN	Data Raw: 6f 72 6d 5f 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 66 69 65 6c 64 73 20 2e 67 66 69 65 6c 64 20 73 65 6c 65 63 74 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 66 6f 72 6d 20 2e 67 66 6f 72 6d 5f 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 66 69 65 6c 64 73 20 2e 67 66 69 65 6c 64 20 74 65 78 74 61 72 65 61 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 66 6f 72 6d 20 2e 67 66 6f 72 6d 5f 66 6f 6f 74 65 72 20 2e 67 66 6f 72 6d 5f 62 75 74 74 6f 6e 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6c 69 67 68 74 62 6f 78 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 3a 30 7d 3a 77 68 65 72 65 28 62 6f 64 79 Data Ascii: orm_body .gform_fields .gfield select,.gform_wrapper form .gform_body .gform_fields .gfield textarea{outline:none}.gform_wrapper form .gform_footer .gform_button{cursor:pointer}.elementor-lightbox .elementor-swiper-button:focus{outline-width:0}:where(body
2024-10-01 03:16:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-01 03:16:22 UTC	614	OUT	GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.24.4 HTTP/1.1 Host: www.birchcreative.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.birchcreative.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 03:16:22 UTC	367	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 03:16:22 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Thu, 26 Sep 2024 09:23:57 GMT expires: Tue, 30 Sep 2025 23:00:16 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 5902 Server: cloudflare CF-RAY: 8cb94b2ab94f8c6b-EWR
2024-10-01 03:16:22 UTC	1002	IN	Data Raw: 37 65 33 30 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 34 2e 30 20 2d 20 32 33 2d 30 39 2d 32 30 32 34 20 2a 2f 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 73 69 62 69 6c 69 74 79 2d 68 69 64 64 65 6e 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 63 72 65 65 6e 2d 6f 6e 6c 79 2c 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 2c 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 20 73 70 61 6e 2c 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 31 30 30 30 30 65 6d 3b 77 69 64 Data Ascii: 7e30/! elementor - v3.24.0 - 23-09-2024 /.elementor-hidden{display:none}.elementor-visibility-hidden{visibility:hidden}.elementor-screen-only,.screen-reader-text,.screen-reader-text span,.ui-helper-hidden-accessible{position:absolute;top:-10000em;wid
2024-10-01 03:16:22 UTC	1369	IN	Data Raw: 66 72 61 6d 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 20 6f 62 6a 65 63 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 20 76 69 64 65 6f 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 65 6c 65 6d 65 6e 74 6f 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 65 6c 65 6d 65 6e 74 6f 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 68 6f 6c 64 65 72 2c 2e 65 6c 65 6d 65 6e 74 6f 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 6f 70 3a 30 3b 6c 65 Data Ascii: frame,.elementor object,.elementor video{max-width:100%;width:100%;margin:0;line-height:1;border:none}.elementor .elementor-background,.elementor .elementor-background-holder,.elementor .elementor-background-video-container{height:100%;width:100%;top:0;le
2024-10-01 03:16:22 UTC	1369	IN	Data Raw: 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 78 65 64 2c 2e 65 2d 63 6f 6e 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 78 65 64 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 78 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 5f 5f 77 69 64 74 68 2d 61 75 74 6f 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 2e 65 6c 65 6d 65 6e 74 Data Ascii: er>.elementor-element.elementor-fixed,.e-con>.elementor-element.elementor-fixed,.elementor-widget-wrap>.elementor-element.elementor-fixed{position:fixed}.elementor-widget-wrap .elementor-element.elementor-widget__width-auto,.elementor-widget-wrap .element
2024-10-01 03:16:22 UTC	1369	IN	Data Raw: 73 29 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 76 61 72 28 2d 2d 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 29 3b 67 61 70 3a 76 61 72 28 2d 2d 67 61 70 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 6e 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6c 69 67 6e 2d 72 69 67 68 74 20 2e 65 6c 65 6d Data Ascii: s);align-content:var(--align-content);gap:var(--gap)}.elementor-invisible{visibility:hidden}.elementor-align-center{text-align:center}.elementor-align-center .elementor-button{width:auto}.elementor-align-right{text-align:right}.elementor-align-right .elem
2024-10-01 03:16:22 UTC	1369	IN	Data Raw: 76 65 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6b 65 6e 2d 62 75 72 6e 73 2d 2d 6f 75 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6b 65 6e 2d 62 75 72 6e 73 2d 2d 61 63 74 69 76 65 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6b 65 6e 2d 62 75 72 6e 73 2d 2d 69 6e 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 33 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 2d 31 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 65 73 63 72 65 65 6e 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 65 73 63 72 65 65 6e 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a Data Ascii: ve.elementor-ken-burns--out{transform:scale(1)}.elementor-ken-burns--active.elementor-ken-burns--in{transform:scale(1.3)}@media (min-width:-1){.elementor-widescreen-align-center{text-align:center}.elementor-widescreen-align-center .elementor-button{width:
2024-10-01 03:16:22 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 Data Ascii: lementor-button{width:100%}}@media (max-width:1024px){.elementor-tablet-align-center{text-align:center}.elementor-tablet-align-center .elementor-button{width:auto}.elementor-tablet-align-right{text-align:right}.elementor-tablet-align-right .elementor-butt
2024-10-01 03:16:22 UTC	1369	IN	Data Raw: 67 65 2d 74 69 74 6c 65 2d 64 69 73 70 6c 61 79 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 65 69 63 6f 6e 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 65 69 63 6f 6e 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 70 69 6e 7b 61 6e 69 6d 61 74 69 6f 6e 3a 65 69 63 6f 6e 2d 73 70 69 6e 20 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 2d 72 Data Ascii: ge-title-display)}@keyframes eicon-spin{0%{transform:rotate(0deg)}to{transform:rotate(359deg)}}.eicon-animation-spin{animation:eicon-spin 2s linear infinite}.elementor-section{position:relative}.elementor-section .elementor-container{display:flex;margin-r
2024-10-01 03:16:22 UTC	1369	IN	Data Raw: 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 7b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 3a 6e 6f 74 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 63 Data Ascii: entor-widget-wrap{align-items:flex-end}.elementor-row{width:100%;display:flex}@media (max-width:1024px){.elementor-row{flex-wrap:wrap}}.elementor-widget-wrap{position:relative;width:100%;flex-wrap:wrap;align-content:flex-start}.elementor:not(.elementor-bc
2024-10-01 03:16:22 UTC	1369	IN	Data Raw: 72 2d 73 65 63 74 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2d 67 61 70 2d 6e 6f 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 70 6f 70 75 6c 61 74 65 64 7b 70 61 64 64 69 6e 67 3a 30 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 31 30 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 31 30 22 5d 7b 77 69 64 74 68 3a 31 30 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 31 31 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 31 31 22 5d 7b 77 69 64 74 68 3a 31 31 2e 31 Data Ascii: r-section .elementor-column-gap-no .elementor-element-populated{padding:0}@media (min-width:768px){.elementor-column.elementor-col-10,.elementor-column[data-col="10"]{width:10%}.elementor-column.elementor-col-11,.elementor-column[data-col="11"]{width:11.1
2024-10-01 03:16:22 UTC	1369	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 38 33 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 38 33 22 5d 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 39 30 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 39 30 22 5d 7b 77 69 64 74 68 3a 39 30 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 31 30 30 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 31 30 30 22 5d 7b 77 69 64 74 68 3a 31 30 30 25 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 Data Ascii: .elementor-column.elementor-col-83,.elementor-column[data-col="83"]{width:83.333%}.elementor-column.elementor-col-90,.elementor-column[data-col="90"]{width:90%}.elementor-column.elementor-col-100,.elementor-column[data-col="100"]{width:100%}}@media (max-w