Edit tour

Windows Analysis Report
http://innerglowjourney.com

Overview

General Information

Sample URL:	http://innerglowjourney.com
Analysis ID:	1523564
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

Phishing site detected (based on image similarity)

Found iframes

HTML body contains low number of good links

HTML body with high number of embedded SVGs detected

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2084 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2044 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2036,i,10266987139398668018,8552859055958779289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6976 --field-trial-handle=2036,i,10266987139398668018,8552859055958779289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7132 --field-trial-handle=2036,i,10266987139398668018,8552859055958779289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://innerglowjourney.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (innerglowjourney .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-01T19:27:32.319368+0200	2056348	1	Exploit Kit Activity Detected	192.168.2.4	49198	1.1.1.1	53	UDP
2024-10-01T19:27:32.322729+0200	2056348	1	Exploit Kit Activity Detected	192.168.2.4	64376	1.1.1.1	53	UDP
2024-10-01T19:27:32.840611+0200	2056348	1	Exploit Kit Activity Detected	192.168.2.4	59238	1.1.1.1	53	UDP
2024-10-01T19:27:32.840664+0200	2056348	1	Exploit Kit Activity Detected	192.168.2.4	58151	1.1.1.1	53	UDP
2024-10-01T19:27:38.576883+0200	2056348	1	Exploit Kit Activity Detected	192.168.2.4	58849	1.1.1.1	53	UDP
2024-10-01T19:27:38.577015+0200	2056348	1	Exploit Kit Activity Detected	192.168.2.4	58690	1.1.1.1	53	UDP
2024-10-01T19:27:39.595894+0200	2056348	1	Exploit Kit Activity Detected	192.168.2.4	58569	1.1.1.1	53	UDP
2024-10-01T19:27:39.596314+0200	2056348	1	Exploit Kit Activity Detected	192.168.2.4	65121	1.1.1.1	53	UDP

ET EXPLOIT_KIT ZPHP Domain in TLS SNI (innerglowjourney .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-01T19:27:33.338127+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49738	79.141.162.18	443	TCP
2024-10-01T19:27:34.136840+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49741	79.141.162.18	443	TCP
2024-10-01T19:27:34.173190+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49744	79.141.162.18	443	TCP
2024-10-01T19:27:34.185827+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49743	79.141.162.18	443	TCP
2024-10-01T19:27:34.185832+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49747	79.141.162.18	443	TCP
2024-10-01T19:27:34.185834+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49742	79.141.162.18	443	TCP
2024-10-01T19:27:34.192364+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49740	79.141.162.18	443	TCP
2024-10-01T19:27:34.966087+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49749	79.141.162.18	443	TCP
2024-10-01T19:27:34.966759+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49753	79.141.162.18	443	TCP
2024-10-01T19:27:34.967403+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49752	79.141.162.18	443	TCP
2024-10-01T19:27:34.967632+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49750	79.141.162.18	443	TCP
2024-10-01T19:27:34.982749+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49751	79.141.162.18	443	TCP
2024-10-01T19:27:35.176674+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49754	79.141.162.18	443	TCP
2024-10-01T19:27:35.819795+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49758	79.141.162.18	443	TCP
2024-10-01T19:27:35.820062+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49759	79.141.162.18	443	TCP
2024-10-01T19:27:35.988921+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49760	79.141.162.18	443	TCP
2024-10-01T19:27:35.989548+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49761	79.141.162.18	443	TCP
2024-10-01T19:27:36.359487+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49764	79.141.162.18	443	TCP
2024-10-01T19:27:36.382280+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49766	79.141.162.18	443	TCP
2024-10-01T19:27:36.688359+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49768	79.141.162.18	443	TCP
2024-10-01T19:27:36.719890+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49767	79.141.162.18	443	TCP
2024-10-01T19:27:36.731952+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49769	79.141.162.18	443	TCP
2024-10-01T19:27:36.846019+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49771	79.141.162.18	443	TCP
2024-10-01T19:27:37.280251+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49772	79.141.162.18	443	TCP
2024-10-01T19:27:37.281366+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49773	79.141.162.18	443	TCP
2024-10-01T19:27:37.331137+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49774	79.141.162.18	443	TCP
2024-10-01T19:27:37.394657+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49775	79.141.162.18	443	TCP
2024-10-01T19:27:37.688197+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49776	79.141.162.18	443	TCP
2024-10-01T19:27:37.690489+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49777	79.141.162.18	443	TCP
2024-10-01T19:27:38.544269+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49784	79.141.162.18	443	TCP
2024-10-01T19:27:38.544705+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49785	79.141.162.18	443	TCP
2024-10-01T19:27:38.544709+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49782	79.141.162.18	443	TCP
2024-10-01T19:27:38.546633+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49783	79.141.162.18	443	TCP
2024-10-01T19:27:39.663326+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49787	79.141.162.18	443	TCP
2024-10-01T19:27:39.671098+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49788	79.141.162.18	443	TCP
2024-10-01T19:27:40.128751+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49792	79.141.162.18	443	TCP
2024-10-01T19:27:40.135924+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49790	79.141.162.18	443	TCP
2024-10-01T19:27:40.136532+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49793	79.141.162.18	443	TCP
2024-10-01T19:27:40.136630+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49791	79.141.162.18	443	TCP
2024-10-01T19:27:40.154910+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49789	79.141.162.18	443	TCP
2024-10-01T19:27:40.181109+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49794	79.141.162.18	443	TCP
2024-10-01T19:27:40.182219+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49798	79.141.162.18	443	TCP
2024-10-01T19:27:40.182394+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49797	79.141.162.18	443	TCP
2024-10-01T19:27:40.183840+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49799	79.141.162.18	443	TCP
2024-10-01T19:27:40.247616+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49800	79.141.162.18	443	TCP
2024-10-01T19:27:40.294262+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49805	79.141.162.18	443	TCP
2024-10-01T19:27:40.337203+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49807	79.141.162.18	443	TCP
2024-10-01T19:27:40.706478+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49811	79.141.162.18	443	TCP
2024-10-01T19:27:40.807949+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49812	79.141.162.18	443	TCP
2024-10-01T19:27:40.839171+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49813	79.141.162.18	443	TCP
2024-10-01T19:27:40.852642+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49815	79.141.162.18	443	TCP
2024-10-01T19:27:40.855151+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49814	79.141.162.18	443	TCP
2024-10-01T19:27:41.130998+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49817	79.141.162.18	443	TCP
2024-10-01T19:27:41.171502+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49820	79.141.162.18	443	TCP
2024-10-01T19:27:41.176871+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49816	79.141.162.18	443	TCP
2024-10-01T19:27:41.181624+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49821	79.141.162.18	443	TCP
2024-10-01T19:27:41.184990+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49819	79.141.162.18	443	TCP
2024-10-01T19:27:41.187650+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49818	79.141.162.18	443	TCP
2024-10-01T19:27:41.284785+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49823	79.141.162.18	443	TCP
2024-10-01T19:27:42.427463+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49826	79.141.162.18	443	TCP
2024-10-01T19:27:42.431635+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49828	79.141.162.18	443	TCP
2024-10-01T19:27:42.432685+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49830	79.141.162.18	443	TCP
2024-10-01T19:27:42.433422+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49832	79.141.162.18	443	TCP
2024-10-01T19:27:43.166060+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49834	79.141.162.18	443	TCP
2024-10-01T19:27:43.166542+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49835	79.141.162.18	443	TCP
2024-10-01T19:27:43.167620+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49836	79.141.162.18	443	TCP
2024-10-01T19:27:43.382041+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49837	79.141.162.18	443	TCP
2024-10-01T19:27:43.382483+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49839	79.141.162.18	443	TCP
2024-10-01T19:27:43.383474+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49838	79.141.162.18	443	TCP
2024-10-01T19:27:43.759927+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49840	79.141.162.18	443	TCP
2024-10-01T19:27:43.926721+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49841	79.141.162.18	443	TCP
2024-10-01T19:27:44.010473+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49842	79.141.162.18	443	TCP
2024-10-01T19:27:44.016278+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49843	79.141.162.18	443	TCP
2024-10-01T19:27:44.063913+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49844	79.141.162.18	443	TCP
2024-10-01T19:27:44.253526+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49845	79.141.162.18	443	TCP
2024-10-01T19:27:44.483310+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49846	79.141.162.18	443	TCP
2024-10-01T19:27:44.728258+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49847	79.141.162.18	443	TCP
2024-10-01T19:27:44.728592+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49848	79.141.162.18	443	TCP
2024-10-01T19:27:44.735129+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49849	79.141.162.18	443	TCP
2024-10-01T19:27:44.970593+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49850	79.141.162.18	443	TCP
2024-10-01T19:27:45.218180+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49851	79.141.162.18	443	TCP
2024-10-01T19:27:53.450983+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49861	79.141.162.18	443	TCP
2024-10-01T19:27:53.450987+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49860	79.141.162.18	443	TCP
2024-10-01T19:27:54.389847+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49863	79.141.162.18	443	TCP
2024-10-01T19:27:54.390029+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49864	79.141.162.18	443	TCP
2024-10-01T19:27:54.390228+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49862	79.141.162.18	443	TCP
2024-10-01T19:27:54.394192+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49865	79.141.162.18	443	TCP
2024-10-01T19:27:54.758946+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49866	79.141.162.18	443	TCP
2024-10-01T19:27:54.777022+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49867	79.141.162.18	443	TCP
2024-10-01T19:27:55.966204+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49869	79.141.162.18	443	TCP
2024-10-01T19:27:56.393051+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49871	79.141.162.18	443	TCP
2024-10-01T19:27:56.394541+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49876	79.141.162.18	443	TCP
2024-10-01T19:27:56.397999+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49878	79.141.162.18	443	TCP
2024-10-01T19:27:56.398567+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49870	79.141.162.18	443	TCP
2024-10-01T19:27:56.399069+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49879	79.141.162.18	443	TCP
2024-10-01T19:27:56.399691+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49874	79.141.162.18	443	TCP
2024-10-01T19:27:56.410744+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49880	79.141.162.18	443	TCP
2024-10-01T19:27:56.415260+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49875	79.141.162.18	443	TCP
2024-10-01T19:27:56.424043+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49872	79.141.162.18	443	TCP
2024-10-01T19:27:56.424320+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49877	79.141.162.18	443	TCP
2024-10-01T19:27:57.563258+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49881	79.141.162.18	443	TCP
2024-10-01T19:27:58.094047+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49883	79.141.162.18	443	TCP
2024-10-01T19:27:58.101536+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49882	79.141.162.18	443	TCP
2024-10-01T19:27:58.245655+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49886	79.141.162.18	443	TCP
2024-10-01T19:27:58.245655+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49885	79.141.162.18	443	TCP
2024-10-01T19:27:58.261664+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49884	79.141.162.18	443	TCP
2024-10-01T19:27:58.262858+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49887	79.141.162.18	443	TCP
2024-10-01T19:27:59.949417+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49888	79.141.162.18	443	TCP
2024-10-01T19:28:00.725508+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49890	79.141.162.18	443	TCP
2024-10-01T19:28:00.726443+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49889	79.141.162.18	443	TCP
2024-10-01T19:28:02.124261+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49893	79.141.162.18	443	TCP
2024-10-01T19:28:03.582202+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49895	79.141.162.18	443	TCP
2024-10-01T19:28:03.610275+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49894	79.141.162.18	443	TCP
2024-10-01T19:28:05.156897+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49898	79.141.162.18	443	TCP
2024-10-01T19:28:05.157921+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49896	79.141.162.18	443	TCP
2024-10-01T19:28:05.159729+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49900	79.141.162.18	443	TCP
2024-10-01T19:28:05.160314+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49897	79.141.162.18	443	TCP
2024-10-01T19:28:05.160513+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49899	79.141.162.18	443	TCP
2024-10-01T19:28:05.505809+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49901	79.141.162.18	443	TCP
2024-10-01T19:28:06.416530+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49902	79.141.162.18	443	TCP
2024-10-01T19:28:06.537793+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49905	79.141.162.18	443	TCP
2024-10-01T19:28:06.540097+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49908	79.141.162.18	443	TCP
2024-10-01T19:28:06.540098+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49906	79.141.162.18	443	TCP
2024-10-01T19:28:06.551993+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49904	79.141.162.18	443	TCP
2024-10-01T19:28:06.552782+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49909	79.141.162.18	443	TCP
2024-10-01T19:28:06.558866+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49907	79.141.162.18	443	TCP
2024-10-01T19:28:06.561127+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49903	79.141.162.18	443	TCP
2024-10-01T19:28:07.384956+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49910	79.141.162.18	443	TCP
2024-10-01T19:28:07.821412+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49911	79.141.162.18	443	TCP
2024-10-01T19:28:07.867070+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49912	79.141.162.18	443	TCP
2024-10-01T19:28:11.473673+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49914	79.141.162.18	443	TCP
2024-10-01T19:28:11.477190+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49913	79.141.162.18	443	TCP
2024-10-01T19:28:12.417205+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49915	79.141.162.18	443	TCP
2024-10-01T19:28:12.417629+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49917	79.141.162.18	443	TCP
2024-10-01T19:28:12.459399+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49918	79.141.162.18	443	TCP
2024-10-01T19:28:12.459621+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49919	79.141.162.18	443	TCP
2024-10-01T19:28:12.491934+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49916	79.141.162.18	443	TCP
2024-10-01T19:28:12.828426+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49920	79.141.162.18	443	TCP
2024-10-01T19:28:12.832016+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49921	79.141.162.18	443	TCP
2024-10-01T19:28:13.068919+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49922	79.141.162.18	443	TCP
2024-10-01T19:28:13.107824+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49923	79.141.162.18	443	TCP
2024-10-01T19:28:13.228217+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49924	79.141.162.18	443	TCP
2024-10-01T19:28:13.236448+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49925	79.141.162.18	443	TCP
2024-10-01T19:28:13.254227+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49926	79.141.162.18	443	TCP
2024-10-01T19:28:13.792351+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49927	79.141.162.18	443	TCP
2024-10-01T19:28:15.604489+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49929	79.141.162.18	443	TCP
2024-10-01T19:28:15.690051+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49928	79.141.162.18	443	TCP
2024-10-01T19:28:17.036631+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49933	79.141.162.18	443	TCP
2024-10-01T19:28:17.036889+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49932	79.141.162.18	443	TCP
2024-10-01T19:28:17.037103+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49931	79.141.162.18	443	TCP
2024-10-01T19:28:17.037280+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49930	79.141.162.18	443	TCP
2024-10-01T19:28:18.084335+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49935	79.141.162.18	443	TCP
2024-10-01T19:28:18.084521+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49936	79.141.162.18	443	TCP
2024-10-01T19:28:18.088887+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49934	79.141.162.18	443	TCP
2024-10-01T19:28:18.089622+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49937	79.141.162.18	443	TCP
2024-10-01T19:28:18.089919+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49938	79.141.162.18	443	TCP
2024-10-01T19:28:21.987654+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49940	79.141.162.18	443	TCP
2024-10-01T19:28:21.987655+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49939	79.141.162.18	443	TCP
2024-10-01T19:28:27.929995+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49958	79.141.162.18	443	TCP
2024-10-01T19:28:31.133961+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49967	79.141.162.18	443	TCP
2024-10-01T19:28:36.841186+0200	2056351	1	Exploit Kit Activity Detected	192.168.2.4	49988	79.141.162.18	443	TCP

HTTP traffic detected: POST /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveContent-Length: 2887sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-wow64: ?0sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-platform: "Windows"X-Youtube-Bootstrap-Logged-In: falsesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonsec-ch-ua-full-version: "117.0.5938.132"X-Youtube-Client-Name: 1X-Youtube-Client-Version: 2.20240930.01.00X-Goog-Visitor-Id: Cgs4YjRqM3R6c0oxRSjH4vC3BjIKCgJVUxIEGgAgIA%3D%3DAccept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=X_9VoqR5ojMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=yRHg6bZGh0Y; VISITOR_INFO1_LIVE=8b4j3tzsJ1E; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgIA%3D%3D

Source: https://innerglowjourney.com/contact.html	HTTP Parser: Iframe src: https://www.google.com/maps/embed?pb=!1m10!1m8!1m3!1d188618.51311104256!2d-71.236572!3d42.381647!3m2!1i1024!2i768!4f13.1!5e0!3m2!1sen!2sbd!4v1576756626784!5m2!1sen!2sbd
Source: https://innerglowjourney.com/contact.html	HTTP Parser: Iframe src: https://www.google.com/maps/embed?pb=!1m10!1m8!1m3!1d188618.51311104256!2d-71.236572!3d42.381647!3m2!1i1024!2i768!4f13.1!5e0!3m2!1sen!2sbd!4v1576756626784!5m2!1sen!2sbd

Source: https://innerglowjourney.com/blog-single.html	HTTP Parser: Number of links: 0
Source: https://innerglowjourney.com/contact.html	HTTP Parser: Number of links: 0

Source: https://innerglowjourney.com/blog-single.html	HTTP Parser: Title: Activitar \| Template does not match URL
Source: https://innerglowjourney.com/contact.html	HTTP Parser: Title: Activitar \| Template does not match URL

Source: https://innerglowjourney.com/blog-single.html	HTTP Parser: Invalid link: Jan 31, 2019 Help Finding Information Online
Source: https://innerglowjourney.com/blog-single.html	HTTP Parser: Invalid link: Jan 31, 2019 Help Finding Information Online

Source: https://innerglowjourney.com/	HTTP Parser: No favicon
Source: https://innerglowjourney.com/	HTTP Parser: No favicon
Source: https://innerglowjourney.com/	HTTP Parser: No favicon
Source: https://innerglowjourney.com/	HTTP Parser: No favicon
Source: https://innerglowjourney.com/	HTTP Parser: No favicon
Source: https://innerglowjourney.com/blog-single.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/blog-single.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/schedule.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/schedule.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/gallery.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/gallery.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/about-us.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/about-us.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/blog.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/blog.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/contact.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/contact.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/contact.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/contact.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/contact.html	HTTP Parser: No favicon
Source: https://innerglowjourney.com/index.html	HTTP Parser: No favicon
Source: https://www.youtube.com/watch?v=X_9VoqR5ojM	HTTP Parser: No favicon

Source: https://innerglowjourney.com/blog-single.html	HTTP Parser: No <meta name="author".. found
Source: https://innerglowjourney.com/blog-single.html	HTTP Parser: No <meta name="author".. found
Source: https://innerglowjourney.com/contact.html	HTTP Parser: No <meta name="author".. found
Source: https://innerglowjourney.com/contact.html	HTTP Parser: No <meta name="author".. found

Source: https://innerglowjourney.com/blog-single.html	HTTP Parser: No <meta name="copyright".. found
Source: https://innerglowjourney.com/blog-single.html	HTTP Parser: No <meta name="copyright".. found
Source: https://innerglowjourney.com/contact.html	HTTP Parser: No <meta name="copyright".. found
Source: https://innerglowjourney.com/contact.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49786 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: innerglowjourney.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: rr2---sn-ab5sznzy.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rr5---sn-q4fzen7r.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: rr1---sn-q4fzen7r.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com

Source: chromecache_837.2.dr, chromecache_443.2.dr	String found in binary or memory: <a href="https://www.youtube.com/watch?v=X_9VoqR5ojM" class="play-in-btn video-popup"> equals www.youtube.com (Youtube)
Source: chromecache_837.2.dr	String found in binary or memory: <a href="https://www.youtube.com/watch?v=X_9VoqR5ojM" class="play-btn video-popup"> equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: "&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: "&sig="+Oc+"&ad_cpn=[AD_CPN]&id="+Ai+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+ea},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Ai+"&avm="+ea+"&dc_pubid="+ea+"&dc_exteid="+bc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Jd+"&cid="+ca+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: "&uga="+xb+"&vm="+vf},videostatsDelayplayUrl:{baseUrl:"https://s.youtube.com/api/stats/delayplay?cl="+Ab+"&docid="+y+"&ei="+U+"&feature="+m+"&fexp="+mf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Yd+"&el="+lh+"&len="+vc+"&of="+ec+"&uga="+xb+"&vm="+vf},videostatsWatchtimeUrl:{baseUrl:"https://s.youtube.com/api/stats/watchtime?cl="+Ab+"&docid="+y+"&ei="+U+"&feature="+m+"&fexp="+mf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+ equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: "=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Xc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(RI.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+Gh,RI),trackingParams:Xa+"="}},popupType:"DIALOG"}},trackingParams:Xa+"="}}, equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: "="},trackingParams:Xa+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:qe},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],layoutId:"1ID7Gdwk2vV7OZ1A"}}, equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: "="}},hoverText:{runs:[{text:Jn}]},trackingParams:Xa+"="}},adVideoId:Jd,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=video_companion_reshow_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:cb},isContentVideoCompanion:!0,associatedCompositePlayerBytesLayoutId:qe}},adSlotLoggingData:{serializedSlotAdServingDataEntry:qe}}}],adBreakHeartbeatParams:"Q0FBJTNE",frameworkUpdates:{entityBatchUpdate:{mutations:[{entityKey:Gc, equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+Gh,dga),trackingParams:Xa+"="}},popupType:"DIALOG"}},trackingParams:Xa+"="}},hoverText:{runs:[{text:Ux}]},trackingParams:Xa+"="}},adVideoId:Jd,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Xq},associatedCompositePlayerBytesLayoutId:qe}}, equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+Gh,r0),trackingParams:Xa+"="}},popupType:"DIALOG"}},icon:{iconType:"INFO_OUTLINE"},trackingParams:Xa+"="}},hoverText:{runs:[{text:Rp}]},trackingParams:Xa+"="}},flyoutCtaRenderer:{flyoutCtaRenderer:{image:{thumbnail:{thumbnails:[{url:"https://yt3.ggpht.com/ytc/"+Wi+"=s176-c-k-c0x00ffffff-no-rj"}]},trackingParams:Xa+"="},headline:{text:Vx,isTemplated:!1,trackingParams:Xa+"="},description:{text:Sp, equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: $M.prototype.publish=function(a,b){return this.isDisposed()?!1:this.pubSub_.publish.apply(this.pubSub_,arguments)};var QZb=ka(["https://www.youtube.com/iframe_api"]),aN=function(){this.playerResolver_=yi();this.playerPromise_=this.playerResolver_.promise;this.playerVars_=null;this.playbackEndedCallback_=Ig;this.playbackDurationSeconds_=0},RZb=function(a){var b=function(){return window.YT&&typeof window.YT.ready==="function"}; equals www.youtube.com (Youtube)
Source: chromecache_572.2.dr	String found in binary or memory: (g.tk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.tk(c,"www.youtube.com"),d=c.toString()):(c=ewa(d),lE(c)&&(d=c));c=new g.ZL(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_572.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=kE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|kE(this.mf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=ks(d,h,DJa):h&&(d="embedded");this.Ja=d;Mqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(EJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Vb(EJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_552.2.dr	String found in binary or memory: ;var Q=A.window,R,S,T=(Q==null?void 0:(R=Q.yt)==null?void 0:R.config_)\|\|(Q==null?void 0:(S=Q.ytcfg)==null?void 0:S.data_)\|\|{};B("yt.config_",T);var U=Object.freeze("document.appendChild document.body.appendChild document.querySelector document.querySelectorAll history.back history.go".split(" ")),V=Object.freeze("fonts.googleapis.com s0.2mdn.net securepubads.g.doubleclick.net ssl.google-analytics.com static.doubleclick.net www.google-analytics.com www.googletagservices.com www.youtube.com youtube.com".split(" ")),W=Object.freeze(["pkedcjkdefgpdelpbcmbmeomcjbeemfm","fjhoaacokmgbjemoflkofnenfaiekifl","enhhojjnijigcajfphajepfemndkmdlo"]),X= equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: Ab+";dc_dbm_token="+w+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ea+";ord="+Ab+";dc_rui="+ea+";dc_exteid="+bc+";dc_av="+ea+";dc_sk="+ea+";dc_ctype="+xb+";dc_pubid="+ea+";dc_btype=3?gclid="+Na+"&ase=2"},{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=video_card_endcap_action_headline_click"}],commandMetadata:{webCommandMetadata:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+ equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: Ai+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Ai+"&dc_pubid="+ea+"&dc_exteid="+bc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Jd+"&cid="+ca+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+ equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Jd+"&cid="+ca+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+ea+"&ns="+ea+"&event="+ea+"&device="+ea+"&content_v="+y+"&el="+lh+"&ei="+U+"&devicever="+c+"&bti="+Gb+"&format="+Td+"&break_type="+ea+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+ea+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+Lb+"&slot_pos="+ea+"&slot_len="+ea+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+wc+"&ad_len="+Wc+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+ equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Jd+"&cid="+ca+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Jd+"&cid="+ca+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: Cr(nsb);Cr(osb);function qsb(a){var b=a.animatedIconType;var c=a.active;var d=a.themeOverride;var e=a.animationRef===void 0?{}:a.animationRef;var g=a.staticIconFn;var k=function(){a:{var N=b();var O=d==null?void 0:d(),U;O=(O==null?void 0:O.useDarkTheme)\|\|((U=Rl().resolve(Ql(nB)))==null?void 0:U());U=z("enable_cairo_refresh_signature_moments_web");switch(N){case"LIKE":N="animated_like_icon_";N=U?N+(O?"dark_v4":"light_v4"):N+(O?"v2_dark":"v2_light");N={lottiePlayerProps:{animationConfig:{name:N,path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+ equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: HE.prototype.getUrl=function(a,b){return"https://www.gstatic.com/youtube/img/icons/web/"+b.style+"/"+a+"/v"+b.version+"/"+b.size+"px.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_572.2.dr	String found in binary or memory: IIa=function(a,b){if(!a.j["0"]){var c=new XF("0","fakesb",{video:new TF(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new qN(new g.ZL("http://www.youtube.com/videoplayback"),c,"fake"):new HN(new g.ZL("http://www.youtube.com/videoplayback"),c,new bN(0,0),new bN(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: Jd+"&aqi="+U+"&ad_rmp="+ea+"&sli="+ea}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ equals www.youtube.com (Youtube)
Source: chromecache_572.2.dr	String found in binary or memory: Ko.prototype.Ia=function(){return this.C};var gna=(new Date).getTime();var tla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),ula=/\bocr\b/;var wla=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Qab=0,Rab=0,Sab=0;var To;g.Mo=null;g.Oo=!1;g.Uo=1;To=Symbol("SIGNAL");g.Vo={version:0,s_:0,Pm:!1,eg:void 0,Ry:void 0,Cn:void 0,ML:0,hj:void 0,Pu:void 0,XE:!1,pP:!1,P1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: N+".json",loop:!1,autoplay:!1,rendererSettings:{viewBoxOnly:!0,className:"animated-like-icon"}}},totalFrames:U?60:119,lazyLoad:!0};break a;case"NOTIFICATION_BELL":N={lottiePlayerProps:{animationConfig:{name:O?"notification_bell_dark":"notification_bell_light",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_"+(O?"dark":"light")+".json",loop:!1,autoplay:!1,rendererSettings:{className:"animated-subscribe-icon"}}},totalFrames:79,lazyLoad:!1};break a;}N=void 0}return N}, equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: Object.assign({},{name:"INCORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_LightTheme_01a.json",renderer:"svg"},$4b,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"26 26 80 80"}});a.correctnessAnimationProps=[];a.correctnessAnimationRefs=[];return a}; equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: Yd+"&el="+lh+"&len="+vc+"&of="+ec+"&uga="+xb+"&vm="+vf},ptrackingUrl:{baseUrl:"https://www.youtube.com/ptracking?ei="+U+"&m="+gb+"&oid="+ec+"&plid="+N+"&pltype="+Ux+"&ptchn="+ec+"&ptk="+H+"&video_id="+y},qoeUrl:{baseUrl:"https://s.youtube.com/api/stats/qoe?cl="+Ab+"&docid="+y+"&ei="+U+"&event="+Jn+"&feature="+m+"&fexp="+mf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Yd},atrUrl:{baseUrl:"https://s.youtube.com/api/stats/atr?docid="+y+"&ei="+U+"&feature="+ equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: Yx&&Yx.JSC$7552_snapshotAndFlush()}},b),(c.flush_logs={callback:function(){bm()}},c))}},jHb);var lHb={},mHb=(lHb.rendered={priority:0,callback:function(){var a=new gza;a.increment("STARTED");if(Bj("LOGGED_IN")&&Bj("SERVER_VERSION")!=="test"&&Bj("SERVER_VERSION")!=="dev"&&!Oia()&&!Nia()){a.increment("EXECUTING");var b=document.createElement("iframe");b.style.display="none";sba(b,2,Nb("https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid="+Bj("INNERTUBE_CONTEXT_CLIENT_NAME")));document.body&&document.body.appendChild(b);a.increment("DONE")}}},lHb);var nHb={},oHb=(nHb.rendered={callback:function(){eCb().resume()}},nHb);var pHb={acknowledgeChannelTouStrikeCommand:Gz(JG),addToPlaylistServiceEndpoint:Gz(FH),addToPlaylistEndpoint:Gz(FH),addUpcomingEventReminderEndpoint:Gz(YG),browseEndpoint:Gz(IBb),channelCreationFormEndpoint:Gz(CG),channelCreationServiceEndpoint:Gz(DG),claimLegacyYoutubeChannelEndpoint:Gz(pG),clearSearchHistoryEndpoint:Gz(QG),clearWatchHistoryEndpoint:Gz(RG),commerceActionCommand:Hz(bI),createBackstagePostEndpoint:Gz(jG),createCommentEndpoint:Gz(yG),createCommentReplyEndpoint:Gz(xG),createLiveChatPollEndpoint:Gz(ZG), equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: Zx.prototype.remove=function(a){this.JSC$9679_expiringStorage.remove(a)};var Aab=ka(["https://www.youtube.com/",""]),Bab=ka(["https://studio.youtube.com/",""]);function Cab(){if(Dab())dm(Error("persist identity iframe is inserted more than once"));else{var a=document.createElement("iframe");a.style.display="none";var b=b===void 0?window.location.href:b;var c=uj(Bj("PERSIST_IDENTITY_IFRAME_URL"));b=c?c:new URL(b).host.indexOf("studio")===0?Ug(Aab,"persist_identity"):Ug(Bab,"persist_identity");sba(a,1,b);a.id="persist_identity";var d;(d=document.body)==null\|\|d.appendChild(a)}} equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: ["NOTIFICATION_BELL",{name:"notification_bell_light",nameDarkTheme:"notification_bell_dark",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_light.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_dark.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"NOTIFICATION_BELL",totalFrames:79,lazyLoad:!1}]]);var nlb=ka(["https://www.gstatic.com/external_hosted/lottie/lottie_light.js"]),olb=Ug(nlb),FA;function plb(){return FA?FA:window.lottie?FA=Promise.resolve(window.lottie):FA=new Promise(function(a,b){var c=document.createElement("script");c.addEventListener("load",function(){a(lottie)}); equals www.youtube.com (Youtube)
Source: chromecache_572.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Wi(a,{hl:d})),this.Dd(sY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Dd(g.qY(a.errorMessage)):this.Dd(sY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Wi(c, equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: a.content.firstChild);return Eic=a},{mode:1});var Hic;var Iic=function(){var a=J.apply(this,arguments)\|\|this;a.rightSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_dark_v1.svg";a.rightSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_light_v1.svg";a.leftSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_dark_v1.svg";a.leftSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_light_v1.svg";a.leftSquiggly=a.leftSquigglyLight;a.rightSquiggly=a.rightSquigglyLight; equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: a.content.firstChild);return Hic=a},{mode:1});var Jic;var Kic=function(){var a=J.apply(this,arguments)\|\|this;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.image0DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_dark.svg";a.image0LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_light.svg";a.image1DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_dark.svg";a.image1LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_light.svg"; equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: a.content.firstChild);return Opc=a},{mode:xz("kevlar_poly_si_batch_j044")?1:2});var Qpc;var Rpc=Hw(wv("DELETE_FROM_DOWNLOADS",{},"Delete from downloads"));var Spc={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr	String found in binary or memory: a.content.firstChild);return hCc=a},{mode:1});var jCc;var Y_=function(){var a=J.apply(this,arguments)\|\|this;a.dark=!1;a.headerBackgroundLight="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.headerBackgroundDark="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: a.content.insertBefore(W().content.cloneNode(!0),a.content.firstChild);return Lic=a},{mode:1});var Mic;var JV=function(){var a=J.apply(this,arguments)\|\|this;a.JSC$15317_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_dark_v1.svg";a.JSC$15317_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_light_v1.svg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.squigglyBackground=a.JSC$15317_squigglyBackgroundLight;return a}; equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: a.content.insertBefore(W().content.cloneNode(!0),a.content.firstChild);return Mic=a},{mode:xz("kevlar_poly_si_batch_j056")?1:2});var Nic;var Oic=function(){var a=J.apply(this,arguments)\|\|this;a.JSC$15320_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_dark.svg";a.JSC$15320_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_light.svg";a.squigglyBackground=a.JSC$15320_squigglyBackgroundLight;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: a.content.insertBefore(W().content.cloneNode(!0),a.content.firstChild);return V4b=a},{mode:2});var Z4b;var $4b={autoplay:!1,loop:!1},a5b={simpleText:""},b5b=function(){var a=J.apply(this,arguments)\|\|this;a.isLoading=!1;a.usesPanelLockup=!1;a.enableRefreshWeb=z("enable_cairo_refresh_web");a.selectedItemIndex=-1;a.baseCorrectLottiePlayerAnimationConfig=Object.assign({},{name:"CORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_LightTheme_01a.json",renderer:"svg"},$4b,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"12 20 80 80"}});a.baseIncorrectLottiePlayerAnimationConfig= equals www.youtube.com (Youtube)
Source: chromecache_572.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,FF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Gd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Kt)(),jT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Gd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_435.2.dr	String found in binary or memory: a.image3DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_dark.svg";a.image3LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_light_v2.svg";a.image0SquigglyBackground=a.image0LightSquigglyBackground;a.image1SquigglyBackground=a.image1LightSquigglyBackground;a.image3SquigglyBackground=a.image3LightSquigglyBackground;return a}; equals www.youtube.com (Youtube)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 17:27:43 GMTServer: Apache/2.4.52 (Ubuntu)Content-Length: 283Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: OriginTiming-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originContent-Type: image/jpegDate: Tue, 01 Oct 2024 17:28:40 GMTExpires: Tue, 01 Oct 2024 17:29:10 GMTCache-Control: public, max-age=30X-Content-Type-Options: nosniffServer: sffeContent-Length: 1097X-XSS-Protection: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 01 Oct 2024 17:28:49 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 01 Oct 2024 17:28:49 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 01 Oct 2024 17:28:49 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 01 Oct 2024 17:28:49 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 01 Oct 2024 17:28:50 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 01 Oct 2024 17:28:50 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 01 Oct 2024 17:28:50 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 01 Oct 2024 17:28:50 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 01 Oct 2024 17:28:50 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 01 Oct 2024 17:28:50 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 01 Oct 2024 17:28:51 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 01 Oct 2024 17:28:51 GMTServer: gvs 1.0

Source: chromecache_550.2.dr, chromecache_392.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by-nc/3.0/
Source: chromecache_444.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_768.2.dr, chromecache_829.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: http://i1.ytimg.com/vi/
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: http://mths.be/fromcodepoint
Source: chromecache_435.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_435.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_435.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_435.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_572.2.dr, chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_435.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_768.2.dr, chromecache_510.2.dr, chromecache_829.2.dr, chromecache_435.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: http://www.youtube.com/
Source: chromecache_435.2.dr	String found in binary or memory: http://www.youtube.com/video/
Source: chromecache_572.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_572.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_572.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_572.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_572.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: https://accounts.google.com/AddSession
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid=
Source: chromecache_435.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackclk/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_435.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid=
Source: chromecache_572.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_789.2.dr, chromecache_729.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/spf/2.4.0/LICENSE
Source: chromecache_572.2.dr, chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_510.2.dr, chromecache_435.2.dr	String found in binary or memory: https://clients2.google.com/gr/gr_sync.js
Source: chromecache_837.2.dr, chromecache_735.2.dr, chromecache_678.2.dr, chromecache_711.2.dr, chromecache_443.2.dr	String found in binary or memory: https://colorlib.com
Source: chromecache_829.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_768.2.dr, chromecache_829.2.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_768.2.dr, chromecache_829.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_633.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2036,i,10266987139398668018,8552859055958779289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://innerglowjourney.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6976 --field-trial-handle=2036,i,10266987139398668018,8552859055958779289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7132 --field-trial-handle=2036,i,10266987139398668018,8552859055958779289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2036,i,10266987139398668018,8552859055958779289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6976 --field-trial-handle=2036,i,10266987139398668018,8552859055958779289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7132 --field-trial-handle=2036,i,10266987139398668018,8552859055958779289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://admin.youtube.com	0%	URL Reputation	safe
https://goo.gle/js-api-loading	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	0%	URL Reputation	safe
https://yurt.corp.google.com	0%	URL Reputation	safe
https://support.google.com/fusiontables/answer/9185417).	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
http://tools.ietf.org/html/rfc1950	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	0%	URL Reputation	safe
https://support.google.com/youtube/?p=report_playback	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
rr1.sn-q4fzen7r.googlevideo.com	173.194.141.70	true	false	unknown
i.ytimg.com	142.250.185.118	true	false	unknown
rr2.sn-ab5sznzy.googlevideo.com	74.125.174.135	true	false	unknown
innerglowjourney.com	79.141.162.18	true	true	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.27	true	false	unknown
static.doubleclick.net	172.217.23.102	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
rr5.sn-q4fzen7r.googlevideo.com	173.194.141.74	true	false	unknown
youtube.com	142.250.186.78	true	false	unknown
youtube-ui.l.google.com	142.250.185.78	true	false	unknown
googleads.g.doubleclick.net	216.58.212.162	true	false	unknown
play.google.com	142.250.185.78	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
rr1---sn-q4fzen7r.googlevideo.com	unknown	unknown	false	unknown
rr2---sn-ab5sznzy.googlevideo.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
rr5---sn-q4fzen7r.googlevideo.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://www.youtube.com/s/player/d9418494/player_ias.vflset/en_US/miniplayer.js	false	unknown
https://www.youtube.com/sw.js	false	unknown
https://www.youtube.com/s/desktop/6e5f8289/jsbin/network.vflset/network.js	false	unknown
https://innerglowjourney.com/	false	unknown
https://innerglowjourney.com/schedule.html	false	unknown
https://www.youtube.com/s/desktop/6e5f8289/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js	false	unknown
https://innerglowjourney.com/img/feature/feature-2.jpg	true	unknown
https://innerglowjourney.com/img/blog/blog-5.jpg	true	unknown
https://innerglowjourney.com/img/gallery/gallery-1.jpg	true	unknown
https://www.youtube.com/generate_204?NUUp0A	false	unknown
http://innerglowjourney.com/	true	unknown
https://www.youtube.com/s/desktop/6e5f8289/jsbin/webcomponents-sd.vflset/webcomponents-sd.js	false	unknown
https://innerglowjourney.com/js/jquery.nice-select.min.js	true	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i10!2i310!3i378!4i256!2m3!1e0!2sm!3i707458325!3m12!2sen!3sBD!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502&client=google-maps-embed&token=66875	false	unknown
https://innerglowjourney.com/img/gallery/gallery-8.jpg	true	unknown
https://innerglowjourney.com/js/owl.carousel.min.js	true	unknown
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false	unknown
https://innerglowjourney.com/js/bootstrap.min.js	true	unknown
https://www.youtube.com/s/desktop/6e5f8289/cssbin/www-main-desktop-home-page-skeleton.css	false	unknown
https://innerglowjourney.com/img/icons/chose-icon-2.png	true	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i10!2i309!3i379!4i256!2m3!1e0!2sm!3i707458325!3m12!2sen!3sBD!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502&client=google-maps-embed&token=11862	false	unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	unknown
https://innerglowjourney.com/index.html	false	unknown
https://youtube.com/	false	unknown
https://innerglowjourney.com/css/slicknav.min.css	true	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i10!2i308!3i377!4i256!2m3!1e0!2sm!3i707458325!3m12!2sen!3sBD!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502&client=google-maps-embed&token=104341	false	unknown
https://innerglowjourney.com/img/br-recent-4.jpg	true	unknown
https://www.youtube.com/cspreport/common	false	unknown
https://innerglowjourney.com/img/icons/chose-icon-5.png	true	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i10!2i308!3i378!4i256!2m3!1e0!2sm!3i707458325!3m12!2sen!3sBD!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502&client=google-maps-embed&token=28388	false	unknown
https://innerglowjourney.com/img/blog/blog-page-4.jpg	true	unknown
https://innerglowjourney.com/img/recent-1.jpg	true	unknown
https://innerglowjourney.com/img/hero-slider/hero-1.jpg	true	unknown
https://www.youtube.com/s/desktop/6e5f8289/cssbin/www-onepick.css	false	unknown
https://innerglowjourney.com/css/bootstrap.min.css	true	unknown
https://www.youtube.com/generate_204?4LyiOA	false	unknown
https://innerglowjourney.com/img/blog-single-hero.jpg	true	unknown
https://innerglowjourney.com/img/classes/class-3.jpg	true	unknown
https://innerglowjourney.com/img/gallery/gallery-4.jpg	true	unknown
https://www.youtube.com/s/player/d9418494/www-player.css	false	unknown
https://www.youtube.com/youtubei/v1/notification_registration/set_registration?prettyPrint=false	false	unknown
https://innerglowjourney.com/img/blog/blog-1.jpg	true	unknown
https://www.youtube.com/s/player/d9418494/player_ias.vflset/en_US/endscreen.js	false	unknown
https://www.youtube.com/app_shell	false	unknown
https://innerglowjourney.com/js/jquery.magnific-popup.min.js	true	unknown
https://www.youtube.com/s/search/audio/success.mp3	false	unknown
https://www.google.com/pagead/lvz?evtid=ACd6KtxzJdWwDbqqo6939ocvkl1pF_NQ9Ie1NeKeDixhHOZfAky9aEPf7Qmb4psQ-ZjW9jZX8u0a6P_yoHKQCmXRuFwgtrh9SQ&req_ts=1727803719&pg=MainAppBootstrap%3AWatch&az=1&sigh=AB9vU43HvQ-BKF9fYZTBoOxttJw1-_qNfQ	false	unknown
https://innerglowjourney.com/img/blog-single-4.jpg	true	unknown
https://innerglowjourney.com/contact.html	true	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i10!2i311!3i378!4i256!2m3!1e0!2sm!3i707458193!3m12!2sen!3sBD!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502&client=google-maps-embed&token=11952	false	unknown
https://innerglowjourney.com/js/jquery-3.3.1.min.js	true	unknown
https://innerglowjourney.com/img/icons/chose-icon-1.png	true	unknown
https://innerglowjourney.com/css/nice-select.css	true	unknown
https://innerglowjourney.com/img/feature/feature-3.jpg	true	unknown
https://innerglowjourney.com/img/gallery/gallery-2.jpg	true	unknown
https://innerglowjourney.com/img/classes/class-2.jpg	true	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/hernansartorio/jquery-nice-select	chromecache_476.2.dr, chromecache_416.2.dr	false		unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_572.2.dr, chromecache_510.2.dr, chromecache_435.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/delayplay?cl=	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
https://support.google.com	chromecache_510.2.dr, chromecache_435.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/embed/	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
http://g.co/dev/maps-no-account	chromecache_768.2.dr, chromecache_829.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_435.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com	chromecache_435.2.dr	false		unknown
https://www.google.com/get/videoqualityreport/?v=	chromecache_435.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_632.2.dr	false		unknown
https://admin.youtube.com	chromecache_572.2.dr	false	URL Reputation: safe	unknown
https://goo.gle/js-api-loading	chromecache_768.2.dr, chromecache_829.2.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_572.2.dr, chromecache_510.2.dr, chromecache_435.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
https://i.ytimg.com/an/	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
https://www.youtube.com/api/stats/ads?ver=	chromecache_435.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_829.2.dr	false	URL Reputation: safe	unknown
http://creativecommons.org/licenses/by-nc/3.0/	chromecache_550.2.dr, chromecache_392.2.dr	false		unknown
https://yurt.corp.google.com	chromecache_572.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/fusiontables/answer/9185417).	chromecache_768.2.dr, chromecache_829.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_768.2.dr, chromecache_829.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=f	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
https://www.youtube.com/pagead/interaction/?ai=C	chromecache_435.2.dr	false		unknown
https://www.youtube.com/generate_204?cpn=	chromecache_572.2.dr	false		unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_435.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_510.2.dr, chromecache_435.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_435.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/qoe?cl=	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
https://docs.google.com/picker	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
https://schema.org	chromecache_510.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
http://mathiasbynens.be/	chromecache_510.2.dr, chromecache_435.2.dr	false	URL Reputation: safe	unknown
https://youtube.com/watch?v=	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
https://www.youtube.com/ptracking?ei=	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
http://tools.ietf.org/html/rfc1950	chromecache_572.2.dr, chromecache_510.2.dr, chromecache_435.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/pcs/activeview?xai=	chromecache_435.2.dr	false		unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_632.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	chromecache_768.2.dr, chromecache_829.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A	chromecache_435.2.dr	false		unknown
https://s.youtube.com/api/stats/watchtime?cl=	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
https://play.google.com	chromecache_510.2.dr, chromecache_435.2.dr	false		unknown
https://support.google.com/youtube/?p=report_playback	chromecache_572.2.dr	false	URL Reputation: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.78	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
173.194.141.74	rr5.sn-q4fzen7r.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.78	youtube.com	United States	15169	GOOGLEUS	false
142.250.185.118	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.184.198	unknown	United States	15169	GOOGLEUS	false
74.125.174.135	rr2.sn-ab5sznzy.googlevideo.com	United States	15169	GOOGLEUS	false
172.217.16.206	unknown	United States	15169	GOOGLEUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
173.194.141.70	rr1.sn-q4fzen7r.googlevideo.com	United States	15169	GOOGLEUS	false
79.141.162.18	innerglowjourney.com	Bulgaria	202015	HZ-US-ASBG	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.130	unknown	United States	15169	GOOGLEUS	false
172.217.23.102	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
216.58.212.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523564
Start date and time:	2024-10-01 19:26:36 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://innerglowjourney.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@31/739@42/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://innerglowjourney.com/blog-single.html Browse: https://innerglowjourney.com/schedule.html Browse: https://innerglowjourney.com/gallery.html Browse: https://innerglowjourney.com/about-us.html Browse: https://innerglowjourney.com/blog.html Browse: https://innerglowjourney.com/contact.html Browse: https://innerglowjourney.com/index.html Browse: https://www.youtube.com/watch?v=X_9VoqR5ojM

Input	Output
URL: https://innerglowjourney.com/ Model: jbxai	{ "brand":["ACTIVITAR"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"READ MORE", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://innerglowjourney.com/gallery.html Model: jbxai	{ "brand":["Rogue"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://innerglowjourney.com/schedule.html Model: jbxai	{ "brand":["ACTIVITAR"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.youtube.com/watch?v=X_9VoqR5ojM Model: jbxai	{ "brand":["YouTube"], "contains_trigger_text":true, "trigger_text":"This video isn't available anymore", "prominent_button_name":"GOTO HOME", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://innerglowjourney.com/about-us.html Model: jbxai	{ "brand":["ACTIVITAR"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.youtube.com/watch?v=X_9VoqR5ojM Model: jbxai	{ "phishing_score":1, "brands":"YouTube", "legit_domain":"youtube.com", "classification":"wellknown", "reasons":["The URL matches the legitimate domain name for YouTube.", "YouTube is a well-known brand.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions."], "brand_matches":[true], "url_match":true, "brand_input":"YouTube", "input_fields":"unknown"}

URL: https://innerglowjourney.com/contact.html Model: jbxai	{ "brand":["ACTIVITAR"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://innerglowjourney.com/blog.html Model: jbxai	{ "brand":["ACTIVITAR"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://innerglowjourney.com/index.html Model: jbxai	{ "brand":["ACTIVITAR"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"READ MORE", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://innerglowjourney.com/blog-single.html Model: jbxai	{ "brand":["Lowe's"], "contains_trigger_text":true, "trigger_text":"A CLOSER LOOK AT OUR FRONT PORCH ITEMS FROM LOWE'S", "prominent_button_name":"BLOG", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

URL: https://innerglowjourney.com/contact.html Model: jbxai	{ "brand":["ACTIVITAR"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"Name, Email", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 110x90, components 3
Category:	downloaded
Size (bytes):	4802
Entropy (8bit):	7.8135607082583185
Encrypted:	false
SSDEEP:	96:MkzM5/W/AMaLUsadToknEqbv1AEfi7L0F+ffgRZ:wlEt3Eq7SQGoAngf
MD5:	1D60FF31E29676EA04B2A14BEB4378E2
SHA1:	4EC53D23AAE7526C872DF2EBD43284E15C855525
SHA-256:	CAA730D20A9B1408E3C89485F7281004347924CEF768C25FB0B32FB03841AC30
SHA-512:	0A1803C053A098887F932E42D2E6D56C16E8A3A36149F0E082F794D3F26C505E7C3F2E7230ABC889039E0E47ED996D2E0D1823B9306836FB938359F96E93B031
Malicious:	false
Reputation:	low
URL:	https://innerglowjourney.com/img/br-recent-2.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F65137AC4ECEE211A152DFEC6E280D1C" xmpMM:DocumentID="xmp.did:32F1AA1B213B11EAB3B0FAF2FC46ABA8" xmpMM:InstanceID="xmp.iid:32F1AA1A213B11EAB3B0FAF2FC46ABA8" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:04732080-eeae-449c-9b70-97f7a5fdd2b4" stRef:documentID="adobe:docid:photoshop:1d98ff53-617a-117a-a3b0-813d74d808c5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 1, 2024 19:27:32.319367886 CEST	192.168.2.4	1.1.1.1	0xd01c	Standard query (0)	innerglowjourney.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:32.322729111 CEST	192.168.2.4	1.1.1.1	0x1e35	Standard query (0)	innerglowjourney.com	65	IN (0x0001)	false
Oct 1, 2024 19:27:32.840610981 CEST	192.168.2.4	1.1.1.1	0x9ae3	Standard query (0)	innerglowjourney.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:32.840663910 CEST	192.168.2.4	1.1.1.1	0xde3d	Standard query (0)	innerglowjourney.com	65	IN (0x0001)	false
Oct 1, 2024 19:27:33.815072060 CEST	192.168.2.4	1.1.1.1	0x9c5b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:33.815476894 CEST	192.168.2.4	1.1.1.1	0xcd1f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 19:27:35.046060085 CEST	192.168.2.4	1.1.1.1	0xd39d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:35.056313992 CEST	192.168.2.4	1.1.1.1	0x646d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 19:27:38.576883078 CEST	192.168.2.4	1.1.1.1	0x2c48	Standard query (0)	innerglowjourney.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:38.577014923 CEST	192.168.2.4	1.1.1.1	0x697a	Standard query (0)	innerglowjourney.com	65	IN (0x0001)	false
Oct 1, 2024 19:27:39.595894098 CEST	192.168.2.4	1.1.1.1	0xdf38	Standard query (0)	innerglowjourney.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:39.596313953 CEST	192.168.2.4	1.1.1.1	0x38dd	Standard query (0)	innerglowjourney.com	65	IN (0x0001)	false
Oct 1, 2024 19:28:30.918351889 CEST	192.168.2.4	1.1.1.1	0x5603	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:30.918885946 CEST	192.168.2.4	1.1.1.1	0xf207	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 19:28:38.413485050 CEST	192.168.2.4	1.1.1.1	0xd172	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.413750887 CEST	192.168.2.4	1.1.1.1	0xf2f5	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 1, 2024 19:28:39.567284107 CEST	192.168.2.4	1.1.1.1	0x234b	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.567447901 CEST	192.168.2.4	1.1.1.1	0x6b1b	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 1, 2024 19:28:39.997224092 CEST	192.168.2.4	1.1.1.1	0xf742	Standard query (0)	rr2---sn-ab5sznzy.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.998231888 CEST	192.168.2.4	1.1.1.1	0xbc16	Standard query (0)	rr2---sn-ab5sznzy.googlevideo.com	65	IN (0x0001)	false
Oct 1, 2024 19:28:41.624721050 CEST	192.168.2.4	1.1.1.1	0x9ba2	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.625217915 CEST	192.168.2.4	1.1.1.1	0x5e57	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 1, 2024 19:28:44.277852058 CEST	192.168.2.4	1.1.1.1	0x6434	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:44.278474092 CEST	192.168.2.4	1.1.1.1	0xefd8	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 19:28:46.651057005 CEST	192.168.2.4	1.1.1.1	0xd9c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:46.651299953 CEST	192.168.2.4	1.1.1.1	0x13cd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 19:28:47.800190926 CEST	192.168.2.4	1.1.1.1	0xc2e1	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:47.800344944 CEST	192.168.2.4	1.1.1.1	0x9e5b	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 19:28:48.349251032 CEST	192.168.2.4	1.1.1.1	0x457e	Standard query (0)	rr5---sn-q4fzen7r.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:48.349483013 CEST	192.168.2.4	1.1.1.1	0x316b	Standard query (0)	rr5---sn-q4fzen7r.googlevideo.com	65	IN (0x0001)	false
Oct 1, 2024 19:28:48.451644897 CEST	192.168.2.4	1.1.1.1	0x44b4	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:48.452039957 CEST	192.168.2.4	1.1.1.1	0x7318	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 19:28:48.714196920 CEST	192.168.2.4	1.1.1.1	0x3a0	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:48.714384079 CEST	192.168.2.4	1.1.1.1	0x69b1	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 1, 2024 19:28:49.287493944 CEST	192.168.2.4	1.1.1.1	0x9bf6	Standard query (0)	rr1---sn-q4fzen7r.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:49.287791967 CEST	192.168.2.4	1.1.1.1	0x436b	Standard query (0)	rr1---sn-q4fzen7r.googlevideo.com	65	IN (0x0001)	false
Oct 1, 2024 19:28:49.319303989 CEST	192.168.2.4	1.1.1.1	0x7086	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:49.319622040 CEST	192.168.2.4	1.1.1.1	0x6499	Standard query (0)	youtube.com	65	IN (0x0001)	false
Oct 1, 2024 19:28:50.570930004 CEST	192.168.2.4	1.1.1.1	0x970d	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:50.571167946 CEST	192.168.2.4	1.1.1.1	0x313f	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 19:28:50.596597910 CEST	192.168.2.4	1.1.1.1	0xff9d	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:50.596750975 CEST	192.168.2.4	1.1.1.1	0x89a6	Standard query (0)	play.google.com	65	IN (0x0001)	false

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://innerglowjourney.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 372

Chrome Cache Entry: 373

Chrome Cache Entry: 374

Chrome Cache Entry: 375

Chrome Cache Entry: 376

Chrome Cache Entry: 377

Chrome Cache Entry: 378

Chrome Cache Entry: 379

Chrome Cache Entry: 380

Chrome Cache Entry: 381

Chrome Cache Entry: 382

Chrome Cache Entry: 383

Chrome Cache Entry: 384

Chrome Cache Entry: 385

Chrome Cache Entry: 386

Chrome Cache Entry: 387

Chrome Cache Entry: 388

Chrome Cache Entry: 389

Chrome Cache Entry: 390

Chrome Cache Entry: 391

Chrome Cache Entry: 392

Chrome Cache Entry: 393

Chrome Cache Entry: 394

Chrome Cache Entry: 395

Chrome Cache Entry: 396

Chrome Cache Entry: 397

Chrome Cache Entry: 398

Chrome Cache Entry: 399

Windows Analysis Report
http://innerglowjourney.com

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 1, 2024 19:27:32.356606960 CEST	1.1.1.1	192.168.2.4	0xd01c	No error (0)	innerglowjourney.com		79.141.162.18	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:32.848368883 CEST	1.1.1.1	192.168.2.4	0x9ae3	No error (0)	innerglowjourney.com		79.141.162.18	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:33.822139025 CEST	1.1.1.1	192.168.2.4	0x9c5b	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:33.822439909 CEST	1.1.1.1	192.168.2.4	0xcd1f	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 19:27:35.052969933 CEST	1.1.1.1	192.168.2.4	0xd39d	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:35.064235926 CEST	1.1.1.1	192.168.2.4	0x646d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 19:27:39.658365011 CEST	1.1.1.1	192.168.2.4	0x2c48	No error (0)	innerglowjourney.com		79.141.162.18	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:39.699462891 CEST	1.1.1.1	192.168.2.4	0xdf38	No error (0)	innerglowjourney.com		79.141.162.18	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:46.100662947 CEST	1.1.1.1	192.168.2.4	0xf88b	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:27:46.100662947 CEST	1.1.1.1	192.168.2.4	0xf88b	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.27	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:46.100662947 CEST	1.1.1.1	192.168.2.4	0xf88b	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.42	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:46.100662947 CEST	1.1.1.1	192.168.2.4	0xf88b	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.24	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:46.100662947 CEST	1.1.1.1	192.168.2.4	0xf88b	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.26	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:46.100662947 CEST	1.1.1.1	192.168.2.4	0xf88b	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.38	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:46.100662947 CEST	1.1.1.1	192.168.2.4	0xf88b	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.41	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:46.100662947 CEST	1.1.1.1	192.168.2.4	0xf88b	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.22	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:27:46.804522991 CEST	1.1.1.1	192.168.2.4	0x8bf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:27:46.804522991 CEST	1.1.1.1	192.168.2.4	0x8bf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:00.144665003 CEST	1.1.1.1	192.168.2.4	0xe933	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:28:00.144665003 CEST	1.1.1.1	192.168.2.4	0xe933	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:24.797267914 CEST	1.1.1.1	192.168.2.4	0x6de9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:28:24.797267914 CEST	1.1.1.1	192.168.2.4	0x6de9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:31.134118080 CEST	1.1.1.1	192.168.2.4	0x5603	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:31.134123087 CEST	1.1.1.1	192.168.2.4	0xf207	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 19:28:38.420273066 CEST	1.1.1.1	192.168.2.4	0xf2f5	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420273066 CEST	1.1.1.1	192.168.2.4	0xf2f5	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:38.420326948 CEST	1.1.1.1	192.168.2.4	0xd172	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:39.574188948 CEST	1.1.1.1	192.168.2.4	0x234b	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:40.005517960 CEST	1.1.1.1	192.168.2.4	0xf742	No error (0)	rr2---sn-ab5sznzy.googlevideo.com	rr2.sn-ab5sznzy.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:28:40.005517960 CEST	1.1.1.1	192.168.2.4	0xf742	No error (0)	rr2.sn-ab5sznzy.googlevideo.com		74.125.174.135	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:40.031120062 CEST	1.1.1.1	192.168.2.4	0xbc16	No error (0)	rr2---sn-ab5sznzy.googlevideo.com	rr2.sn-ab5sznzy.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:28:40.031120062 CEST	1.1.1.1	192.168.2.4	0xbc16	No error (0)	rr2.sn-ab5sznzy.googlevideo.com			65	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632134914 CEST	1.1.1.1	192.168.2.4	0x9ba2	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632708073 CEST	1.1.1.1	192.168.2.4	0x5e57	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:28:41.632708073 CEST	1.1.1.1	192.168.2.4	0x5e57	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Oct 1, 2024 19:28:44.284822941 CEST	1.1.1.1	192.168.2.4	0x6434	No error (0)	static.doubleclick.net		172.217.23.102	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:46.658293009 CEST	1.1.1.1	192.168.2.4	0x13cd	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 19:28:46.658618927 CEST	1.1.1.1	192.168.2.4	0xd9c	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:47.807830095 CEST	1.1.1.1	192.168.2.4	0xc2e1	No error (0)	static.doubleclick.net		142.250.184.198	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:48.515626907 CEST	1.1.1.1	192.168.2.4	0x7318	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 1, 2024 19:28:48.515639067 CEST	1.1.1.1	192.168.2.4	0x316b	No error (0)	rr5---sn-q4fzen7r.googlevideo.com	rr5.sn-q4fzen7r.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:28:48.515639067 CEST	1.1.1.1	192.168.2.4	0x316b	No error (0)	rr5.sn-q4fzen7r.googlevideo.com			65	IN (0x0001)	false
Oct 1, 2024 19:28:48.515901089 CEST	1.1.1.1	192.168.2.4	0x457e	No error (0)	rr5---sn-q4fzen7r.googlevideo.com	rr5.sn-q4fzen7r.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:28:48.515901089 CEST	1.1.1.1	192.168.2.4	0x457e	No error (0)	rr5.sn-q4fzen7r.googlevideo.com		173.194.141.74	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:48.516243935 CEST	1.1.1.1	192.168.2.4	0x44b4	No error (0)	googleads.g.doubleclick.net		216.58.212.162	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:48.720917940 CEST	1.1.1.1	192.168.2.4	0x3a0	No error (0)	play.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:49.294732094 CEST	1.1.1.1	192.168.2.4	0x9bf6	No error (0)	rr1---sn-q4fzen7r.googlevideo.com	rr1.sn-q4fzen7r.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:28:49.294732094 CEST	1.1.1.1	192.168.2.4	0x9bf6	No error (0)	rr1.sn-q4fzen7r.googlevideo.com		173.194.141.70	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:49.295420885 CEST	1.1.1.1	192.168.2.4	0x436b	No error (0)	rr1---sn-q4fzen7r.googlevideo.com	rr1.sn-q4fzen7r.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 19:28:49.295420885 CEST	1.1.1.1	192.168.2.4	0x436b	No error (0)	rr1.sn-q4fzen7r.googlevideo.com			65	IN (0x0001)	false
Oct 1, 2024 19:28:49.326924086 CEST	1.1.1.1	192.168.2.4	0x7086	No error (0)	youtube.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:49.327435970 CEST	1.1.1.1	192.168.2.4	0x6499	No error (0)	youtube.com			65	IN (0x0001)	false
Oct 1, 2024 19:28:50.578840971 CEST	1.1.1.1	192.168.2.4	0x313f	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 1, 2024 19:28:50.578922987 CEST	1.1.1.1	192.168.2.4	0x970d	No error (0)	googleads.g.doubleclick.net		142.250.185.130	A (IP address)	IN (0x0001)	false
Oct 1, 2024 19:28:50.603447914 CEST	1.1.1.1	192.168.2.4	0xff9d	No error (0)	play.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 19:27:32.381414890 CEST	435	OUT	GET / HTTP/1.1 Host: innerglowjourney.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 19:27:32.838252068 CEST	589	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 01 Oct 2024 17:27:32 GMT Server: Apache/2.4.52 (Ubuntu) Location: https://innerglowjourney.com/ Content-Length: 323 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 6e 65 72 67 6c 6f 77 6a 6f 75 72 6e 65 79 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 69 6e 6e 65 72 67 6c 6f 77 6a 6f 75 72 6e 65 79 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://innerglowjourney.com/">here</a>.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at innerglowjourney.com Port 80</address></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-10-01 17:27:33 UTC	663	OUT	GET / HTTP/1.1 Host: innerglowjourney.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 17:27:33 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 17:27:33 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Sat, 28 Sep 2024 13:33:34 GMT ETag: "8e8f-6232e04b1d412" Accept-Ranges: bytes Content-Length: 36495 Vary: Accept-Encoding Connection: close Content-Type: text/html
2024-10-01 17:27:33 UTC	7918	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 78 78 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 41 63 74 69 76 69 74 61 72 20 54 65 6d 70 6c 61 74 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 41 63 74 69 76 69 74 61 72 2c 20 75 6e 69 63 61 2c 20 63 72 65 61 74 69 76 65 2c 20 68 74 6d 6c 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 Data Ascii: <!DOCTYPE html><html lang="zxx"><head> <meta charset="UTF-8"> <meta name="description" content="Activitar Template"> <meta name="keywords" content="Activitar, unica, creative, html"> <meta name="viewport" content="width=device-wi
2024-10-01 17:27:33 UTC	8000	IN	Data Raw: 20 53 65 63 74 69 6f 6e 20 42 65 67 69 6e 20 2d 2d 3e 0d 0a 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 61 73 73 65 73 2d 73 65 63 74 69 6f 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 61 73 73 2d 74 69 74 6c 65 20 73 65 74 2d 62 67 22 20 64 61 74 61 2d 73 65 74 62 67 3d 22 69 6d 67 2f 63 6c 61 73 73 65 73 2d 74 69 74 6c 65 2d 62 67 2e 6a 70 67 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 37 20 6d 2d 61 Data Ascii: Section Begin --> <section class="classes-section"> <div class="class-title set-bg" data-setbg="img/classes-title-bg.jpg"> <div class="container"> <div class="row"> <div class="col-lg-7 m-a
2024-10-01 17:27:33 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 36 3e 57 61 6c 6c 73 20 74 6f 20 4b 6e 65 65 73 3c 2f 68 36 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 64 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 64 20 63 6c 61 73 73 3d 22 68 6f 76 65 72 2d 62 67 20 74 73 2d 69 74 65 6d 22 20 64 61 74 61 2d 74 73 6d 65 74 61 3d 22 70 70 73 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 31 38 2e 30 30 20 2d 20 32 30 2e 30 30 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <h6>Walls to Knees</h6> </td> <td class="hover-bg ts-item" data-tsmeta="ppsr"> <span>18.00 - 20.00</span>
2024-10-01 17:27:33 UTC	8000	IN	Data Raw: 20 63 6f 6c 2d 73 6d 2d 36 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 68 6f 6f 73 65 2d 69 74 65 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 69 6d 67 2f 69 63 6f 6e 73 2f 63 68 6f 73 65 2d 69 63 6f 6e 2d 34 2e 70 6e 67 22 20 61 6c 74 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 35 3e 4f 75 72 20 65 71 75 69 70 6d 65 6e 74 3c 2f 68 35 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 52 75 67 62 79 20 61 6e 64 20 53 74 72 61 74 66 6f 72 64 2d 75 70 6f 6e 2d 41 76 6f 6e 2e 20 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 74 68 65 72 Data Ascii: col-sm-6"> <div class="choose-item"> <img src="img/icons/chose-icon-4.png" alt=""> <h5>Our equipment</h5> <p>Rugby and Stratford-upon-Avon. Additionally, ther
2024-10-01 17:27:33 UTC	4577	IN	Data Raw: 76 65 72 74 69 73 69 6e 67 20 63 6f 6e 74 69 6e 75 65 73 2e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 36 3e 46 6f 6c 6c 6f 77 20 75 73 3c 2f 68 36 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 66 61 63 65 62 6f 6f 6b 22 3e 3c 2f 69 3e 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 Data Ascii: vertising continues.</p> <div class="social-links"> <h6>Follow us</h6> <a href="#"><i class="fa fa-facebook"></i></a> <a href="#"><i class="fa

Timestamp	Bytes transferred	Direction	Data
2024-10-01 17:27:34 UTC	560	OUT	GET /css/bootstrap.min.css HTTP/1.1 Host: innerglowjourney.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://innerglowjourney.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 17:27:34 UTC	275	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 17:27:34 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Sat, 28 Sep 2024 13:33:44 GMT ETag: "26f1b-6232e054d4904" Accept-Ranges: bytes Content-Length: 159515 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-10-01 17:27:34 UTC	7917	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 32 3b 2d 2d Data Ascii: /! Bootstrap v4.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610f2;--
2024-10-01 17:27:34 UTC	8000	IN	Data Raw: 2d 78 6c 2d 35 2c 2e 63 6f 6c 2d 78 6c 2d 36 2c 2e 63 6f 6c 2d 78 6c 2d 37 2c 2e 63 6f 6c 2d 78 6c 2d 38 2c 2e 63 6f 6c 2d 78 6c 2d 39 2c 2e 63 6f 6c 2d 78 6c 2d 61 75 74 6f 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 7d 2e 63 6f 6c 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 31 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 Data Ascii: -xl-5,.col-xl-6,.col-xl-7,.col-xl-8,.col-xl-9,.col-xl-auto{position:relative;width:100%;padding-right:15px;padding-left:15px}.col{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.row-cols-1>*{-ms-flex:0 0 100%;flex:0
2024-10-01 17:27:34 UTC	8000	IN	Data Raw: 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 35 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 36 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 6c 67 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 Data Ascii: 333333%}.col-lg-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-lg-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-lg-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-lg-8{-ms-flex:0 0 66.666667%;flex:0 0
2024-10-01 17:27:34 UTC	8000	IN	Data Raw: 74 61 62 6c 65 2d 68 6f 76 65 72 20 74 62 6f 64 79 20 74 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 30 37 35 29 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 37 35 2e 39 38 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 2d 73 6d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 2d 73 6d 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 7b 62 6f 72 64 65 72 3a 30 7d 7d 40 6d 65 64 69 61 20 Data Ascii: table-hover tbody tr:hover{color:#fff;background-color:rgba(255,255,255,.075)}@media (max-width:575.98px){.table-responsive-sm{display:block;width:100%;overflow-x:auto;-webkit-overflow-scrolling:touch}.table-responsive-sm>.table-bordered{border:0}}@media
2024-10-01 17:27:34 UTC	8000	IN	Data Raw: 6d 2d 63 6f 6e 74 72 6f 6c 3a 69 6e 76 61 6c 69 64 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 2e 37 35 72 65 6d 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 77 69 64 74 68 3d 27 31 32 27 20 68 65 69 67 68 74 3d 27 31 32 27 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 73 74 72 6f 6b 65 3d 27 25 32 33 64 63 33 35 34 35 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 32 20 31 32 27 25 33 65 25 33 63 63 69 72 63 6c 65 20 63 78 3d 27 36 27 20 63 79 3d 27 36 Data Ascii: m-control:invalid{border-color:#dc3545;padding-right:calc(1.5em + .75rem);background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' fill='none' stroke='%23dc3545' viewBox='0 0 12 12'%3e%3ccircle cx='6' cy='6
2024-10-01 17:27:34 UTC	8000	IN	Data Raw: 74 69 76 65 2c 2e 62 74 6e 2d 69 6e 66 6f 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 69 6e 66 6f 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 31 37 61 38 62 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 30 37 30 37 66 7d 2e 62 74 6e 2d 69 6e 66 6f 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 69 6e 66 6f 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 73 68 6f 77 3e 2e 62 Data Ascii: tive,.btn-info:not(:disabled):not(.disabled):active,.show>.btn-info.dropdown-toggle{color:#fff;background-color:#117a8b;border-color:#10707f}.btn-info:not(:disabled):not(.disabled).active:focus,.btn-info:not(:disabled):not(.disabled):active:focus,.show>.b
2024-10-01 17:27:34 UTC	8000	IN	Data Raw: 39 2c 2e 35 29 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 7b 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 32 34 38 2c 32 34 39 2c 32 35 30 2c 2e 35 29 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 Data Ascii: 9,.5)}.btn-outline-light{color:#f8f9fa;border-color:#f8f9fa}.btn-outline-light:hover{color:#212529;background-color:#f8f9fa;border-color:#f8f9fa}.btn-outline-light.focus,.btn-outline-light:focus{box-shadow:0 0 0 .2rem rgba(248,249,250,.5)}.btn-outline-lig
2024-10-01 17:27:34 UTC	8000	IN	Data Raw: 72 6f 75 70 2d 74 6f 67 67 6c 65 3e 2e 62 74 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 74 6f 67 67 6c 65 3e 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 62 74 6e 2d 67 72 6f 75 70 2d 74 6f 67 67 6c 65 3e 2e 62 74 6e 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 74 6f 67 67 6c 65 3e 2e 62 74 6e 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 74 6f 67 67 6c 65 3e 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 74 6f 67 67 6c 65 3e 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 Data Ascii: roup-toggle>.btn,.btn-group-toggle>.btn-group>.btn{margin-bottom:0}.btn-group-toggle>.btn input[type=checkbox],.btn-group-toggle>.btn input[type=radio],.btn-group-toggle>.btn-group>.btn input[type=checkbox],.btn-group-toggle>.btn-group>.btn input[type=rad
2024-10-01 17:27:34 UTC	8000	IN	Data Raw: 78 29 3b 6c 65 66 74 3a 63 61 6c 63 28 2d 32 2e 32 35 72 65 6d 20 2b 20 32 70 78 29 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 72 65 6d 20 2d 20 34 70 78 29 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 72 65 6d 20 2d 20 34 70 78 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 64 62 35 62 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 35 72 65 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d Data Ascii: x);left:calc(-2.25rem + 2px);width:calc(1rem - 4px);height:calc(1rem - 4px);background-color:#adb5bd;border-radius:.5rem;transition:background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out,-webkit-transform .15s ease-in-
2024-10-01 17:27:34 UTC	8000	IN	Data Raw: 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 6a 75 73 74 69 66 79 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 31 72 65 6d 7d 2e 6e 61 76 62 61 72 20 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 6e 61 76 62 61 72 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 2c 2e 6e 61 76 62 61 72 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 6e 61 76 62 61 72 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 6e 61 76 62 61 Data Ascii: x;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;-ms-flex-align:center;align-items:center;-ms-flex-pack:justify;justify-content:space-between;padding:.5rem 1rem}.navbar .container,.navbar .container-fluid,.navbar .container-lg,.navbar .container-md,.navba

Timestamp	Bytes transferred	Direction	Data
2024-10-01 17:27:34 UTC	563	OUT	GET /css/font-awesome.min.css HTTP/1.1 Host: innerglowjourney.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://innerglowjourney.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 17:27:34 UTC	273	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 17:27:34 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Sat, 28 Sep 2024 13:33:46 GMT ETag: "7918-6232e0569c9e8" Accept-Ranges: bytes Content-Length: 31000 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-10-01 17:27:34 UTC	7919	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');s
2024-10-01 17:27:34 UTC	8000	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 31 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 32 22 7d 2e 66 61 2d 63 61 6d 65 72 61 2d 72 65 74 72 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 33 22 7d 2e 66 61 2d 6b 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 34 22 7d 2e 66 61 2d 67 65 61 72 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6f 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 35 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 36 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 6f 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 37 22 7d 2e 66 Data Ascii: ontent:"\f081"}.fa-facebook-square:before{content:"\f082"}.fa-camera-retro:before{content:"\f083"}.fa-key:before{content:"\f084"}.fa-gears:before,.fa-cogs:before{content:"\f085"}.fa-comments:before{content:"\f086"}.fa-thumbs-o-up:before{content:"\f087"}.f
2024-10-01 17:27:34 UTC	8000	IN	Data Raw: 36 31 22 7d 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 61 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 32 22 7d 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 64 65 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 33 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 34 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 35 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 36 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 37 22 7d 2e 66 61 2d 78 69 6e 67 3a Data Ascii: 61"}.fa-sort-numeric-asc:before{content:"\f162"}.fa-sort-numeric-desc:before{content:"\f163"}.fa-thumbs-up:before{content:"\f164"}.fa-thumbs-down:before{content:"\f165"}.fa-youtube-square:before{content:"\f166"}.fa-youtube:before{content:"\f167"}.fa-xing:
2024-10-01 17:27:34 UTC	7081	IN	Data Raw: 5c 66 32 33 38 22 7d 2e 66 61 2d 73 75 62 77 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 39 22 7d 2e 66 61 2d 6d 65 64 69 75 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 61 22 7d 2e 66 61 2d 79 63 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 79 2d 63 6f 6d 62 69 6e 61 74 6f 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 62 22 7d 2e 66 61 2d 6f 70 74 69 6e 2d 6d 6f 6e 73 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 63 22 7d 2e 66 61 2d 6f 70 65 6e 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 64 22 7d 2e 66 61 2d 65 78 70 65 64 69 74 65 64 73 73 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 65 22 7d 2e 66 61 2d 62 61 74 74 65 Data Ascii: \f238"}.fa-subway:before{content:"\f239"}.fa-medium:before{content:"\f23a"}.fa-yc:before,.fa-y-combinator:before{content:"\f23b"}.fa-optin-monster:before{content:"\f23c"}.fa-opencart:before{content:"\f23d"}.fa-expeditedssl:before{content:"\f23e"}.fa-batte

Timestamp	Bytes transferred	Direction	Data
2024-10-01 17:27:34 UTC	560	OUT	GET /css/elegant-icons.css HTTP/1.1 Host: innerglowjourney.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://innerglowjourney.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 17:27:34 UTC	273	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 17:27:34 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Sat, 28 Sep 2024 13:33:45 GMT ETag: "62a4-6232e055f2b26" Accept-Ranges: bytes Content-Length: 25252 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-10-01 17:27:34 UTC	7919	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 45 6c 65 67 61 6e 74 49 63 6f 6e 73 27 3b 0a 09 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 45 6c 65 67 61 6e 74 49 63 6f 6e 73 2e 65 6f 74 27 29 3b 0a 09 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 45 6c 65 67 61 6e 74 49 63 6f 6e 73 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 09 09 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 45 6c 65 67 61 6e 74 49 63 6f 6e 73 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 09 09 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 45 6c 65 67 61 6e 74 49 63 6f 6e 73 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 Data Ascii: @font-face {font-family: 'ElegantIcons';src:url('../fonts/ElegantIcons.eot');src:url('../fonts/ElegantIcons.eot?#iefix') format('embedded-opentype'),url('../fonts/ElegantIcons.woff') format('woff'),url('../fonts/ElegantIcons.ttf') format('true
2024-10-01 17:27:34 UTC	8000	IN	Data Raw: 20 22 5c 32 35 22 3b 0a 7d 0a 2e 61 72 72 6f 77 5f 72 69 67 68 74 2d 75 70 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 32 36 22 3b 0a 7d 0a 2e 61 72 72 6f 77 5f 72 69 67 68 74 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 32 37 22 3b 0a 7d 0a 2e 61 72 72 6f 77 5f 6c 65 66 74 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 32 38 22 3b 0a 7d 0a 2e 61 72 72 6f 77 2d 75 70 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 32 39 22 3b 0a 7d 0a 2e 61 72 72 6f 77 5f 75 70 2d 64 6f 77 6e 5f 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 32 61 22 3b 0a 7d 0a 2e 61 72 72 6f 77 5f 6c 65 66 74 2d 72 69 67 68 74 5f 61 6c Data Ascii: "\25";}.arrow_right-up:before {content: "\26";}.arrow_right-down:before {content: "\27";}.arrow_left-down:before {content: "\28";}.arrow-up-down:before {content: "\29";}.arrow_up-down_alt:before {content: "\2a";}.arrow_left-right_al
2024-10-01 17:27:34 UTC	8000	IN	Data Raw: 68 65 63 6b 5f 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 35 32 22 3b 0a 7d 0a 2e 69 63 6f 6e 5f 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 35 33 22 3b 0a 7d 0a 2e 69 63 6f 6e 5f 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 35 34 22 3b 0a 7d 0a 2e 69 63 6f 6e 5f 73 74 6f 70 5f 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 35 35 22 3b 0a 7d 0a 2e 69 63 6f 6e 5f 6d 65 6e 75 2d 73 71 75 61 72 65 5f 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 35 36 22 3b 0a 7d 0a 2e 69 63 6f 6e 5f 6d 65 6e 75 2d 63 69 72 63 6c 65 5f 61 6c 74 3a 62 65 66 6f 72 65 20 7b Data Ascii: heck_alt:before {content: "\e052";}.icon_zoom-out:before {content: "\e053";}.icon_zoom-in:before {content: "\e054";}.icon_stop_alt:before {content: "\e055";}.icon_menu-square_alt:before {content: "\e056";}.icon_menu-circle_alt:before {
2024-10-01 17:27:34 UTC	1333	IN	Data Raw: 30 66 39 22 3b 0a 7d 0a 2e 69 63 6f 6e 5f 6c 69 6b 65 5f 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 64 64 22 3b 0a 7d 0a 2e 69 63 6f 6e 5f 64 69 73 6c 69 6b 65 5f 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 66 31 22 3b 0a 7d 0a 2e 69 63 6f 6e 5f 6d 75 67 5f 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 64 63 22 3b 0a 7d 0a 2e 69 63 6f 6e 5f 63 75 72 72 65 6e 63 79 5f 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 66 33 22 3b 0a 7d 0a 2e 69 63 6f 6e 5f 77 61 6c 6c 65 74 5f 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 64 38 22 3b 0a 7d 0a 2e 69 63 6f 6e 5f 70 65 6e 73 5f 61 6c 74 Data Ascii: 0f9";}.icon_like_alt:before {content: "\e0dd";}.icon_dislike_alt:before {content: "\e0f1";}.icon_mug_alt:before {content: "\e0dc";}.icon_currency_alt:before {content: "\e0f3";}.icon_wallet_alt:before {content: "\e0d8";}.icon_pens_alt

Timestamp	Bytes transferred	Direction	Data
2024-10-01 17:27:34 UTC	558	OUT	GET /css/nice-select.css HTTP/1.1 Host: innerglowjourney.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://innerglowjourney.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 17:27:34 UTC	271	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 17:27:34 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Sat, 28 Sep 2024 13:33:48 GMT ETag: "fa7-6232e0585ae8b" Accept-Ranges: bytes Content-Length: 4007 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-10-01 17:27:34 UTC	4007	IN	Data Raw: 2e 6e 69 63 65 2d 73 65 6c 65 63 74 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 65 38 65 38 65 38 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 Data Ascii: .nice-select { -webkit-tap-highlight-color: transparent; background-color: #fff; border-radius: 5px; border: solid 1px #e8e8e8; box-sizing: border-box; clear: both; cursor: pointer; display: block; float: left; font-family: inherit;

Timestamp	Bytes transferred	Direction	Data
2024-10-01 17:27:34 UTC	563	OUT	GET /css/owl.carousel.min.css HTTP/1.1 Host: innerglowjourney.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://innerglowjourney.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 17:27:34 UTC	271	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 17:27:34 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Sat, 28 Sep 2024 13:33:48 GMT ETag: "d17-6232e0589a62c" Accept-Ranges: bytes Content-Length: 3351 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-10-01 17:27:34 UTC	3351	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:r

Timestamp	Bytes transferred	Direction	Data
2024-10-01 17:27:34 UTC	561	OUT	GET /css/magnific-popup.css HTTP/1.1 Host: innerglowjourney.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://innerglowjourney.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 17:27:34 UTC	272	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 17:27:34 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Sat, 28 Sep 2024 13:33:47 GMT ETag: "1b27-6232e057ef7ca" Accept-Ranges: bytes Content-Length: 6951 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-10-01 17:27:34 UTC	6951	IN	Data Raw: 2f 2a 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 43 53 53 20 2a 2f 0a 2e 6d 66 70 2d 62 67 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 32 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 62 30 62 30 62 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 20 7d 0a 0a 2e 6d 66 70 2d 77 72 61 70 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e Data Ascii: /* Magnific Popup CSS */.mfp-bg { top: 0; left: 0; width: 100%; height: 100%; z-index: 1042; overflow: hidden; position: fixed; background: #0b0b0b; opacity: 0.8; }.mfp-wrap { top: 0; left: 0; width: 100%; height: 100%; z-in

Timestamp	Bytes transferred	Direction	Data
2024-10-01 17:27:34 UTC	559	OUT	GET /css/slicknav.min.css HTTP/1.1 Host: innerglowjourney.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://innerglowjourney.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 17:27:35 UTC	271	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 17:27:35 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Sat, 28 Sep 2024 13:33:49 GMT ETag: "9c9-6232e0594642d" Accept-Ranges: bytes Content-Length: 2505 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-10-01 17:27:35 UTC	2505	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6c 69 63 6b 4e 61 76 20 52 65 73 70 6f 6e 73 69 76 65 20 4d 6f 62 69 6c 65 20 4d 65 6e 75 20 76 31 2e 30 2e 31 30 0a 20 2a 20 28 63 29 20 32 30 31 36 20 4a 6f 73 68 20 43 6f 70 65 0a 20 2a 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 0a 20 2a 2f 2e 73 6c 69 63 6b 6e 61 76 5f 62 74 6e 2c 2e 73 6c 69 63 6b 6e 61 76 5f 6e 61 76 20 2e 73 6c 69 63 6b 6e 61 76 5f 69 74 65 6d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 73 6c 69 63 6b 6e 61 76 5f 6d 65 6e 75 2c 2e 73 6c 69 63 6b 6e 61 76 5f 6d 65 6e 75 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 73 6c 69 63 6b 6e 61 76 5f 62 74 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 76 65 72 Data Ascii: /! SlickNav Responsive Mobile Menu v1.0.10 * (c) 2016 Josh Cope * licensed under MIT /.slicknav_btn,.slicknav_nav .slicknav_item{cursor:pointer}.slicknav_menu,.slicknav_menu {box-sizing:border-box}.slicknav_btn{position:relative;display:block;ver