Edit tour

Windows Analysis Report
http://www.cardsphere.com/

Overview

General Information

Sample URL:	http://www.cardsphere.com/
Analysis ID:	1523737
Tags:	urlscan
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected clear text password fields (password is not hidden)

Detected non-DNS traffic on DNS port

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 728 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2200,i,10273180344597573575,7193356096041806567,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.cardsphere.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /reports HTTP/1.1Host: w3-reporting-nel.reddit.comConnection: keep-aliveContent-Length: 698Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: <input type="text"... for password input
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: <input type="text"... for password input
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: <input type="text"... for password input
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: <input type="text"... for password input

Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fdisqus.com&rpcToken=940792341.4223597&clearCache=1
Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fdisqus.com&rpcToken=940792341.4223597&clearCache=1
Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: Iframe src: https://live.rezync.com/pixel.html?c=4656c20ee35215f78e9273796625d90b&cid=c78647jafa8s9t&pctry=US&referrer=https%3A%2F%2Fblog.cardsphere.com%2Fsphere-of-influence-september-27-2024%2F&cache_buster=0.0153821051471
Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: Iframe src: https://pippio.com/api/sync?pid=1391&ref=https%3A%2F%2Fblog.cardsphere.com%2Fsphere-of-influence-september-27-2024%2F&it=1&iv=c78647jafa8s9t
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fdisqus.com&rpcToken=846095690.4844774&clearCache=1
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fdisqus.com&rpcToken=846095690.4844774&clearCache=1
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: Iframe src: https://live.rezync.com/pixel.html?c=4656c20ee35215f78e9273796625d90b&cid=c78647jafa8s9t&pctry=US&referrer=https%3A%2F%2Fblog.cardsphere.com%2Ftop-trades-september-16-september-23%2F&cache_buster=0.313259210817
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: Iframe src: https://pippio.com/api/sync?pid=1391&ref=https%3A%2F%2Fblog.cardsphere.com%2Ftop-trades-september-16-september-23%2F&it=1&iv=c78647jafa8s9t
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fdisqus.com&rpcToken=741843907.0517875&clearCache=1
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fdisqus.com&rpcToken=741843907.0517875&clearCache=1
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: Iframe src: https://live.rezync.com/pixel.html?c=4656c20ee35215f78e9273796625d90b&cid=c78647jafa8s9t&pctry=US&referrer=https%3A%2F%2Fblog.cardsphere.com%2Fhow-to-improve-communication-on-cardsphere%2F&cache_buster=0.915125128224
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: Iframe src: https://pippio.com/api/sync?pid=1391&ref=https%3A%2F%2Fblog.cardsphere.com%2Fhow-to-improve-communication-on-cardsphere%2F&it=1&iv=c78647jafa8s9t
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fdisqus.com&rpcToken=877248554.3549452&clearCache=1
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fdisqus.com&rpcToken=877248554.3549452&clearCache=1
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: Iframe src: https://live.rezync.com/pixel.html?c=4656c20ee35215f78e9273796625d90b&cid=c78647jafa8s9t&pctry=US&referrer=https%3A%2F%2Fblog.cardsphere.com%2Fduskmourn-is-available-for-trade%2F&cache_buster=0.551802181686
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: Iframe src: https://pippio.com/api/sync?pid=1391&ref=https%3A%2F%2Fblog.cardsphere.com%2Fduskmourn-is-available-for-trade%2F&it=1&iv=c78647jafa8s9t

Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: Number of links: 0
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: Number of links: 0
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: Number of links: 0

Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: Title: Disqus Comments does not match URL
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: Title: Disqus Comments does not match URL
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: Title: Disqus Comments does not match URL
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: Title: Disqus Comments does not match URL

Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: No favicon
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: No favicon

Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: No <meta name="author".. found
Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: No <meta name="author".. found
Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: No <meta name="author".. found
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: No <meta name="author".. found
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: No <meta name="author".. found
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: No <meta name="author".. found
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: No <meta name="author".. found
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: No <meta name="author".. found
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: No <meta name="author".. found

Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: No <meta name="copyright".. found
Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: No <meta name="copyright".. found
Source: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/	HTTP Parser: No <meta name="copyright".. found
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: No <meta name="copyright".. found
Source: https://blog.cardsphere.com/top-trades-september-16-september-23/	HTTP Parser: No <meta name="copyright".. found
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: No <meta name="copyright".. found
Source: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/	HTTP Parser: No <meta name="copyright".. found
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: No <meta name="copyright".. found
Source: https://blog.cardsphere.com/duskmourn-is-available-for-trade/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49722 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_384.2.dr	String found in binary or memory: <a href="https://www.facebook.com/cardsphere/">Facebook</a> equals www.facebook.com (Facebook)
Source: chromecache_223.2.dr, chromecache_209.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_497.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},dk:function(){e=zb()},od:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=qA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},tA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_497.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={ih:e,gh:f,hh:g,Sh:k,Th:m,Ie:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(VC(w,"iframe_api")\|\|VC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!MC&&TC(x[A],p.Ie))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_437.2.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: var XB=function(a,b,c,d,e){var f=Oz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Oz("fsl","nv.ids",[]):Oz("fsl","ids",[]);if(!g.length)return!0;var k=Tz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!By(k,Dy(b, equals www.facebook.com (Facebook)
Source: chromecache_223.2.dr, chromecache_209.2.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (__fb_err) {var __fb_i = new Image();__fb_i.crossOrigin = 'anonymous';__fb_i.dataset.testid = 'fbSDKErrorReport';__fb_i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+__fb_err.name+'","line":"'+(__fb_err.lineNumber\|\|__fb_err.line)+'","script":"'+(__fb_err.fileName\|\|__fb_err.sourceURL\|\|__fb_err.script\|\|"sdk.js")+'","stack":"'+(__fb_err.stackTrace\|\|__fb_err.stack)+'","revision":"1016963720","namespace":"FB","message":"'+__fb_err.message+'"}}');document.body.appendChild(__fb_i);} equals www.facebook.com (Facebook)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:41:59 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 89cb19c6f2c9ed0983294d3b12e80e42.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: VkN3uvGU_cShOsuraR12ujZhw1sCWtZvvhEVzp2QVpvz0RH2dZXFEQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:41:59 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 80d90c7955dda88e3912960ead8e99d6.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: tkHN4uq7GbbQsiyfQGNHdUaTqUWgRRyd7SHyXzTRWQORCkNdM8v3xg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:00 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 befe3b8553d90339ecf78e5d7cefa60a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: T3xBuuahpbAW69GLrxSlxBN8Jq7FglDKCUO8KFmKVsklJbqwzz1I6g==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:00 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 befe3b8553d90339ecf78e5d7cefa60a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: SHCUhiLXbs0ApqYnjXEPrLotrZnRzbxUlfTyY572ffBvI3tr-HlaVg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:03 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 1764af62d635a1a6ee51aabc37405452.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: dYmrCEwOLHoG82hsiVA8STmYTRcCAcfYjuqq55VYSfadcUceeidSLg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:04 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 48391c4ed2c51e95dcabcb70cf613126.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: aPMRSbZShZhxvDJeefnHXEescG-rm6nDEXNWa2sTnXDUUXaRND0z_A==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:05 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 e7377cc861b31102786678df3616bf68.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: zpezPX8yNro15syjQ10lv3DLPceggPHzN4fyS-Ww_xz105L4LzGtBQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:06 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 f960fa0538fdb326fc338e984fa7ece8.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: 92mWXyU9P8uahx_9IBQDi4KH81gVh5VxL76_Ohhnmwis4THQL-AERQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:12 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 80d90c7955dda88e3912960ead8e99d6.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: ApnoEHCMnEKYZ43xN2QnEvmnN-aOeB2EFXaaOsRWvvSnxDglEkOKeA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:12 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 4809763494a078a525dc1a2dff5ddf6c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: RneqkMAat8GCfS-3cvoJYxz-kNoOnltksT7Rokysf-hwfCQhCy-0_Q==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:15 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 f8895de4463e8d120a0f4b4a1f7703e4.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: RduXzYzdis-nREPnDdvkPhlH-aiWqy0-edAbBP0Sttm-7QOmLEgZJw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:15 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 7549433a09d06354ea864d169b689e50.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: UnJKuwZqDCGMfH0B6ZP6tXt_VgoMq11z62LUVAVZCVZtZ9IuBUlQ2w==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:16 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 2d1e1e8dc0f3eb7773ec9d89a7d50ce2.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: GYn0bakwttNQ59gM1eYM6aeSqG92D4p4H6sSB91DDZZu2eNlX9sESg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:16 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 8b5bc0831e6dab612582614c3009efa6.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: v_TBnTxIdVkTZM__0hCAbmxozeZ4qasEF2dKMFkq9O8qm8TtFF3qXw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:16 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 89cb19c6f2c9ed0983294d3b12e80e42.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: UoRhVer_kPkD_XSygBdIfV6oHRzgAdELVyGbAstyHlzvwfyjhhoxBw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:16 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 2d1e1e8dc0f3eb7773ec9d89a7d50ce2.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: 5YKmnyc4EH09aLKW00skXg2C8f_nQq_ZUdBal26LrJLssSlNqdRuZg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:18 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 1764af62d635a1a6ee51aabc37405452.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: aWbYxgEdjKqXtMOceqK5VdH2wsHzhQamHWOg41m8sQLyus7MzkyU6A==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 979Content-Language: enContent-Type: text/html;charset=utf-8P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"Server: Apache-Coyote/1.1Date: Tue, 01 Oct 2024 22:42:18 GMTSet-Cookie: vglnk.Agent.p=2db0ec02ca36c160ca2638885e722637; Expires=Wed, 01 Oct 2025 22:42:18 GMT; path=/Set-Cookie: vglnk.PartnerRfsh.p=; Expires=Wed, 01 Oct 2025 22:42:18 GMT; path=/
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:18 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 cc77875ec7dfc885cffaa2ec6fa578f6.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: OGUfzeaI--7eX1waAW7GKkaJ1Ncwts7Dlegln5UddFfM0GeVHfCVfQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:18 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 1f5757b46371746e677236d4fc67d364.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: 4J_4-3hBeS1RCM7MPOdsWg4F7LxCKbBQ37t1SVJeO8kHcCDpsnKAgA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:18 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 660f4277d8fbef27985e8a4a97e362cc.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: IDD_0EmJCNcMtp3uQdPVpIEEA_WANoc_6bqSitFJ1yuKgzcOL2ehng==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:21 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 a3c2566f9e36ad3cdf79fc6307fcf566.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: pkvGqZlO-su3VLxM3vWXI5SVaCw5WAzWbmd9OK-RRQse2dGULrGeYQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 979Content-Language: enContent-Type: text/html;charset=utf-8P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"Server: Apache-Coyote/1.1Date: Tue, 01 Oct 2024 22:42:23 GMTSet-Cookie: vglnk.Agent.p=b1cd87e08d55940c1285d06afd23cb86; Expires=Wed, 01 Oct 2025 22:42:23 GMT; path=/Set-Cookie: vglnk.PartnerRfsh.p=; Expires=Wed, 01 Oct 2025 22:42:23 GMT; path=/
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:27 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 8d31bbd9d6638cdacab37047b8045da4.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: MlcFVH_c6BNWDC_XyB899UNFGvSH3AlXWeEbKA8QTDpvb1LyQSPM2Q==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:27 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 12c16baed6578bf50fb0eaa233f2bc84.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: rDYwsLnXW5fktodB3vIn2IvHwdfZCP9F4c3zQKYQyIC4GKlcvatP5A==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:27 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 89cb19c6f2c9ed0983294d3b12e80e42.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: hn76OkXvbjsWKHhNxkouTlO5QQlCuvLhal5O7FakHHhX_ey0ooCSRQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:27 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 3f6fbf009bb5cf969f92ba2e59576614.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: pJbb2qFnyb_0eGfLWmBvIV2TwqLgcDd3u4SRWYS7P3l_uhFAwjWhyA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:30 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 85dc19f43b2a0bd8840fdf8baf07d762.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: b9zupaZhsFq4pQ1dRGZUcq4MQ03hbak83jqIFhouiiXm6x5V4woNTA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:30 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 a3c2566f9e36ad3cdf79fc6307fcf566.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: MljWEDp-tGhgnS2Kq4iFLeD_u3mvOS8UdhssUDQSFybCCQFYlauxwQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:31 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 e7377cc861b31102786678df3616bf68.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: 69xVPAhPlXHHizLkRAG5HXhi794OHSylmuQe2gGHy7GtPcofHTg-fg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:32 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 1764af62d635a1a6ee51aabc37405452.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: AmIPzYwoFboVoVRvfoXCyOGjNSLR5p8s6RVQ5ggsqsRWlkXhU0hzSg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:35 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 7549433a09d06354ea864d169b689e50.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: ZL5PSsDO2oFv9kf5yjruBAWJXBPFiObxvTUYPJbmEQWlbKYOKFkZVA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 979Content-Language: enContent-Type: text/html;charset=utf-8P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"Server: Apache-Coyote/1.1Date: Tue, 01 Oct 2024 22:42:38 GMTSet-Cookie: vglnk.Agent.p=99aa178f5a13172b9372c6a8b6a8d7b2; Expires=Wed, 01 Oct 2025 22:42:38 GMT; path=/Set-Cookie: vglnk.PartnerRfsh.p=; Expires=Wed, 01 Oct 2025 22:42:38 GMT; path=/
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:38 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 89cb19c6f2c9ed0983294d3b12e80e42.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: X_Yrhy1TVau9AcgjJ4qjCtnIucPH7Hig-apOwIN9qrfDRyvCG7g1Sg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:39 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 48391c4ed2c51e95dcabcb70cf613126.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: tjSF2ghE4ncd9UaTH6WGk9A1KGeA9hJVmp6pt673HVCrhQr3YD2w6g==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:40 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 0cbb1ca51bf146be48b40804581e4466.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: tMcknI-rhUw-V2OSahpSTW6lgYhSsyFr71wkTyKCsM3CK-EiBxWDTw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:40 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 8b5bc0831e6dab612582614c3009efa6.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: bjS_ljwzf4u9OJj17AwJw_u2G0n8KXpWgm5mZGBu2u5s2vx8nqn3HA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:41 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 cc77875ec7dfc885cffaa2ec6fa578f6.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: FwNFk_cX5SbTqYv2SExBRU8oCOOX_Ae9y8jMY7Bm2BAI0yhb4WyMQw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:41 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 f960fa0538fdb326fc338e984fa7ece8.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: wfnUhJnFxvwmEE18IuqwyBKQ-QyBlgTYZD6RqFN4bHZlDjqGqbU0Qw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Tue, 01 Oct 2024 22:42:41 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://blog.cardsphere.com/wp-json/>; rel="https://api.w.org/"X-Cache: Error from cloudfrontVia: 1.1 9d27077cd67d98c0474b05ec9d68df4a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA53-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: VGQ02-YPu5IMjTMtGe27duwqr4IzVOfx8hYwqZ8CXy0ITGXIiWFjiw==

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2200,i,10273180344597573575,7193356096041806567,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.cardsphere.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2200,i,10273180344597573575,7193356096041806567,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: global traffic	DNS traffic detected: DNS query: www.cardsphere.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: blog.cardsphere.com
Source: global traffic	DNS traffic detected: DNS query: pixel-config.reddit.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: w3-reporting-nel.reddit.com
Source: global traffic	DNS traffic detected: DNS query: cardsphere-blog-media.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: secure.gravatar.com
Source: global traffic	DNS traffic detected: DNS query: cardsphere-1.disqus.com
Source: global traffic	DNS traffic detected: DNS query: disqus.com
Source: global traffic	DNS traffic detected: DNS query: c.disquscdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.viglink.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: links.services.disqus.com
Source: global traffic	DNS traffic detected: DNS query: json.edhrecstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: cards.scryfall.io
Source: global traffic	DNS traffic detected: DNS query: glitter.services.disqus.com
Source: global traffic	DNS traffic detected: DNS query: referrer.disqus.com
Source: global traffic	DNS traffic detected: DNS query: live.rezync.com
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: io.narrative.io
Source: global traffic	DNS traffic detected: DNS query: wt.rqtrk.eu
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: ei.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: rc.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: p.adsymptotic.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: bh.contextweb.com
Source: global traffic	DNS traffic detected: DNS query: crb.kargo.com
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: idsync.reson8.com
Source: global traffic	DNS traffic detected: DNS query: a.disquscdn.com
Source: global traffic	DNS traffic detected: DNS query: tags.rd.linksynergy.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: loadm.exelator.com
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: ads.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: sync.mathtag.com
Source: global traffic	DNS traffic detected: DNS query: beacon.walmart.com
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: segments.company-target.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: secure-gl.imrworldwide.com
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: ecqqpmkg.uriports.com
Source: global traffic	DNS traffic detected: DNS query: lrp.mxptint.net
Source: global traffic	DNS traffic detected: DNS query: cs.media.net
Source: global traffic	DNS traffic detected: DNS query: rtb.adentifi.com

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://w3-reporting-nel.reddit.com/reports	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://pay.google.com/gp/v/widget/save	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://npms.io/search?q=ponyfill.	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.204.74.118	true	false	unknown
segments.company-target.com	18.245.86.7	true	false	unknown
f.ssl.fastly.net	199.232.196.64	true	false	unknown
d-ams1.turn.com	46.228.164.13	true	false	unknown
live.rezync.com	13.32.27.28	true	false	unknown
disqus.com	151.101.128.134	true	false	unknown
cdn.w55c.net	18.198.84.9	true	false	unknown
crb.kargo.com	18.193.235.168	true	false	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.71.149.231	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
cm.g.doubleclick.net	142.250.186.130	true	false	unknown
idaas-ext.cph.liveintent.com	52.206.177.113	true	false	unknown
www.google.com	142.250.181.228	true	false	unknown
ut.linksynergy.com	34.98.67.3	true	false	unknown
ei.rlcdn.com	35.244.174.68	true	false	unknown
bcp.crwdcntrl.net	54.76.166.236	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	unknown
star-mini.c10r.facebook.com	157.240.251.35	true	false	unknown
match.prod.bidr.io	52.210.91.197	true	false	unknown
d8ghbpr3r4dzt.cloudfront.net	13.33.187.97	true	false	unknown
us-u.openx.net	35.244.159.8	true	false	unknown
plus.l.google.com	142.250.184.238	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	unknown
s3-w.us-east-1.amazonaws.com	3.5.28.98	true	false	unknown
cs.media.net	23.212.88.20	true	false	unknown
dualstack.reddit.map.fastly.net	151.101.1.140	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
wt.rqtrk.eu	57.129.18.105	true	false	unknown
reddit.map.fastly.net	151.101.129.140	true	false	unknown
io.narrative.io	54.195.88.203	true	false	unknown
pixel-origin.mathtag.com	216.200.232.249	true	false	unknown
secure.gravatar.com	192.0.73.2	true	false	unknown
l2.shared.us-eu.fastly.net	199.232.194.49	true	false	unknown
prod.disqus.map.fastlylb.net	199.232.192.134	true	false	unknown
am1-direct-bgp.contextweb.com	208.93.169.131	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
d1tcwf12y4kqv3.cloudfront.net	18.244.18.38	true	false	unknown
rtb.adentifi.com	52.200.121.93	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	18.202.150.204	true	false	unknown
sync.srv.stackadapt.com	54.157.37.140	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
pippio.com	107.178.254.65	true	false	unknown
s.amazon-adsystem.com	98.82.156.207	true	false	unknown
d231vab146qzfb.cloudfront.net	99.86.4.23	true	false	unknown
blog.cardsphere.com	143.204.215.15	true	false	unknown
www.cardsphere.com	108.138.7.114	true	false	unknown
cards.scryfall.io	104.26.5.5	true	false	unknown
gum.nl3.vip.prod.criteo.com	178.250.1.11	true	false	unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	unknown
dp2drdtly304p.cloudfront.net	143.204.215.65	true	false	unknown
rc-ext-geo.rlcdn.com	35.244.174.68	true	false	unknown
json.edhrecstatic.com	104.26.4.87	true	false	unknown
ib.anycast.adnxs.com	37.252.171.21	true	false	unknown
load-euw1.exelator.com	34.254.143.3	true	false	unknown
lrp.mxptint.net	38.98.69.175	true	false	unknown
alb.reddit.com	unknown	unknown	false	unknown
pm.w55c.net	unknown	unknown	false	unknown
cdn.viglink.com	unknown	unknown	false	unknown
secure.adnxs.com	unknown	unknown	false	unknown
links.services.disqus.com	unknown	unknown	false	unknown
www.redditstatic.com	unknown	unknown	false	unknown
a.disquscdn.com	unknown	unknown	false	unknown
glitter.services.disqus.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
secure-gl.imrworldwide.com	unknown	unknown	false	unknown
d.turn.com	unknown	unknown	false	unknown
bh.contextweb.com	unknown	unknown	false	unknown
sync.mathtag.com	unknown	unknown	false	unknown
sync-tm.everesttech.net	unknown	unknown	false	unknown
p.rfihub.com	unknown	unknown	false	unknown
rc.rlcdn.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
w3-reporting-nel.reddit.com	unknown	unknown	false	unknown
ups.analytics.yahoo.com	unknown	unknown	false	unknown
gum.criteo.com	unknown	unknown	false	unknown
p.adsymptotic.com	unknown	unknown	false	unknown
image2.pubmatic.com	unknown	unknown	false	unknown
pixel-config.reddit.com	unknown	unknown	false	unknown
idsync.reson8.com	unknown	unknown	false	unknown
ads.scorecardresearch.com	unknown	unknown	false	unknown
cardsphere-blog-media.s3.amazonaws.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
beacon.walmart.com	unknown	unknown	false	unknown
ecqqpmkg.uriports.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
referrer.disqus.com	unknown	unknown	false	unknown
i.liadm.com	unknown	unknown	false	unknown
cardsphere-1.disqus.com	unknown	unknown	false	unknown
tags.rd.linksynergy.com	unknown	unknown	false	unknown
c.disquscdn.com	unknown	unknown	false	unknown
tags.bluekai.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown
loadm.exelator.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://ib.adnxs.com/getuid?https%3A//live.rezync.com/sync%3Fc%3D4656c20ee35215f78e9273796625d90b%26p%3D093016b0419d19c905c78c859b815219%26pid%3D%24UID%26cache_buster%3D1727822562.17498	false		unknown
https://idsync.rlcdn.com/360947.gif?partner_uid=5133329533097890445	false		unknown
https://w3-reporting-nel.reddit.com/reports	false	URL Reputation: safe	unknown
https://pippio.com/api/sync?it=1&pid=500040&_=1727822567.7107992&iv=c78647jafa8s9t	false		unknown
https://rc.rlcdn.com/456809.gif?n=18&cparams=placement%3D1391	false		unknown
https://c.disquscdn.com/next/current/publisher-admin/assets/img/emoji/love-512x512.png	false		unknown
https://c.disquscdn.com/next/embed/assets/img/loader.ba7c86e8b4b6135bb668d05223f8f127.gif	false		unknown
https://c.disquscdn.com/next/embed/styles/lounge.4ea17c4c63c2f479303433492a2a08e8.css	false		unknown
https://rc.rlcdn.com/456809.gif?n=15&cparams=placement%3D1391	false		unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=c45135c4-7584-4299-8df8-77a8453270fa%252C%252C&gdpr=0&gdpr_consent=	false		unknown
https://blog.cardsphere.com/wp-content/plugins/edhrec-plugin/build/scripts.js?ver=2.3.9	false		unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=8401eaf5-5945-4a0c-a6f3-e019a4e7cbf6&ttd_puid=c45135c4-7584-4299-8df8-77a8453270fa%2C%2C	false		unknown
https://c.disquscdn.com/next/embed/common.bundle.14814e267412506a81edfbae9e14cec1.js	false		unknown
https://live.rezync.com/sync?c=4656c20ee35215f78e9273796625d90b&p=260a954059a0ab1986e4ee8c5c88c54c&pid=5133329533097890445	false		unknown
https://www.cardsphere.com/static/css/sets--c711be5a08a1b1051dfc.css	false		unknown
https://pixel-sync.sitescout.com/connectors/liveramp/usersync?redir=https%3A%2F%2Fidsync.rlcdn.com%2F384126.gif%3Fserved_by%3Devergreen%26partner_uid%3D$UUID	false		unknown
https://idsync.rlcdn.com/47154.gif?served_by=evergreen&partner_uid=8f4666fc-7aec-4400-bdfe-fe8db21df1a9	false		unknown
https://json.edhrecstatic.com/cards/optimistic-scavenger/dsk/21	false		unknown
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5133329533097890445&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3Dc78647jafa8s9t%26pid%3D500040%26it%3D1%26iv%3Dc78647jafa8s9t%26_%3D1727822567.6844015	false		unknown
https://pm.w55c.net/ping_match.gif?st=LIVERAMP&rurl=https%3A%2F%2Fidsync.rlcdn.com%2F360787.gif%3Fserved_by%3Devergreen%26partner_uid%3D_wfivefivec_	false		unknown
https://disqus.com/api/3.0/threadReactions/loadReactions?thread=10331671429&api_key=E8Uh5l5fHZ6gD8U3KycjAIAk46f68Zw7C6eW8WSjZvCLXebZ7p0r1yrYDrLilk2F	false		unknown
https://apis.google.com/js/api.js	false	URL Reputation: safe	unknown
https://disqus.com/api/3.0/threadReactions/loadReactions?thread=10324807456&api_key=E8Uh5l5fHZ6gD8U3KycjAIAk46f68Zw7C6eW8WSjZvCLXebZ7p0r1yrYDrLilk2F	false		unknown
https://blog.cardsphere.com/wp-content/themes/theme/dist/js/all.min.js?ver=5.15.4	false		unknown
https://us-u.openx.net/w/1.0/cm?cc=1&id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D	false		unknown
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5133329533097890445&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3Dc78647jafa8s9t%26pid%3D500040%26it%3D1%26iv%3Dc78647jafa8s9t%26_%3D1727822548.8727522	false		unknown
https://pippio.com/api/sync?it=1&pid=500040&_=1727822548.8725262&iv=c78647jafa8s9t	false		unknown
https://cm.g.doubleclick.net/pixel?google_nid=epsilon&google_cm	false		unknown
https://pippio.com/api/sync?it=1&pid=500040&_=1727822573.951841&iv=c78647jafa8s9t	false		unknown
https://cdn.viglink.com/images/pixel.gif?ch=1&rn=0.41188015478225437	false		unknown
https://www.cardsphere.com/static/img/favicon-32x32.png	false		unknown
https://cdn.viglink.com/images/pixel.gif?ch=1&rn=7.424849630936239	false		unknown
https://secure.gravatar.com/avatar/48949d137efba662dd5b14bfccd861a0?s=96&d=mm&r=g	false		unknown
https://i.liadm.com/s/56409?bidder_id=200442&bidder_uuid=c78647jafa8s9t&pid=500040&it=1&iv=c78647jafa8s9t&_=1727822573.951841	false		unknown
https://blog.cardsphere.com/wp-content/plugins/edhrec-plugin/build/styles.css?ver=2.3.9	false		unknown
https://blog.cardsphere.com/wp-content/themes/ch-theme/icons/favicon.ico	false		unknown
https://io.narrative.io/?companyId=1952&id=disqus_id%3Ac78647jafa8s9t&red=https%3A%2F%2Fpx.ads.linkedin.com%2Fdb_sync%3Fpid%3D16223%26puuid%3D%24%7Bnarrative.id.value%7D%26rand%3D0.90970056676	false		unknown
https://cards.scryfall.io/normal/front/9/f/9fdd7bdd-2ba8-4658-9825-741aecad5f42.jpg?1726286960	false		unknown
https://io.narrative.io/?io.narrative.guid.v2=6d7365c0-8046-11ef-b52f-060b8562d95f&companyId=19&id=disqus_id%3Ac78647jafa8s9t&ret=img&ref=https%3A%2F%2Fblog.cardsphere.com%2Ftop-trades-september-16-september-23%2F	false		unknown
https://gum.criteo.com/sync?c=6&r=1&a=1&u=https%3A%2F%2Fidsync.rlcdn.com%2F397676.gif%3Fserved_by%3Devergreen%26partner_uid%3D%40USERID%40	false		unknown
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%2F%2Flive.rezync.com%2Fsync%253Fc%253D4656c20ee35215f78e9273796625d90b%2526p%253D093016b0419d19c905c78c859b815219%2526pid%253D%2524UID%2526cache_buster%253D1727822544.280629	false		unknown
https://match.prod.bidr.io/cookie-sync/liveramp	false		unknown
https://wt.rqtrk.eu/?pid=afd6afd5-a807-471d-940d-aa3c19fc7dca&src=www&type=100&sid=1&cb=0.649818041797&uid=c78647jafa8s9t&url=https%3A%2F%2Fblog.cardsphere.com%2Fsphere-of-influence-september-27-2024%2F&gdpr=0&gdpr_pd=0&gdpr_consent=	false		unknown
https://pippio.com/api/sync?pid=5324&it=1&iv=92aeff1227b6460a85e1a002b996ecfcede9c866fd163b575235371fda511310791426b5417dce21&_=2	false		unknown
https://cards.scryfall.io/normal/front/a/d/ade32396-8841-4ba4-8852-d11146607f21.jpg?1722388218	false		unknown
https://blog.cardsphere.com/wp-content/themes/ch-theme/icons/site.webmanifest	false		unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=414636866454497629&pt=c45135c4-7584-4299-8df8-77a8453270fa%2C%2C	false		unknown
https://json.edhrecstatic.com/cards/optimistic-scavenger/dsk/288	false		unknown
https://rc.rlcdn.com/456809.gif?n=12&cparams=placement%3D1391	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://blog.cardsphere.com/tag/communication/	chromecache_234.2.dr	false		unknown
https://aetherhub.com/Meta/Format/Commander/?com=Stay%20Hidden%2C%20Stay%20Silent&updated=all-time	chromecache_290.2.dr	false		unknown
https://blog.cardsphere.com/top-trades-september-16-september-23/#breadcrumb	chromecache_257.2.dr	false		unknown
https://blog.cardsphere.com/author/john-sherwood/	chromecache_234.2.dr	false		unknown
https://blog.cardsphere.com/wp-content/uploads/2024/09/Improving-Communication.png	chromecache_234.2.dr	false		unknown
https://blog.cardsphere.com/wp-content/uploads/2024/06/mh3.png)	chromecache_369.2.dr	false		unknown
https://blog.cardsphere.com/wp-content/uploads/2024/09/Screenshot_20240920-084640_Chrome.jpg	chromecache_234.2.dr	false		unknown
https://blog.cardsphere.com/tag/picks/	chromecache_357.2.dr	false		unknown
https://www.internalfb.com/intern/invariant/	chromecache_223.2.dr, chromecache_209.2.dr	false	URL Reputation: safe	unknown
https://www.mtggoldfish.com/deck/custom?mformat=commander&commander=Transcendent	chromecache_321.2.dr	false		unknown
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_223.2.dr, chromecache_209.2.dr	false		unknown
https://www.artstation.com/liiga	chromecache_234.2.dr	false		unknown
https://blog.cardsphere.com/sphere-of-influence-september-6-2024/	chromecache_357.2.dr	false		unknown
https://pay.google.com/gp/v/widget/save	chromecache_437.2.dr	false	URL Reputation: safe	unknown
https://blog.cardsphere.com/wp-content/uploads/2024/09/Improving-Communication-720x0-c-default.png	chromecache_234.2.dr	false		unknown
https://www.facetofacegames.com/search/?keyword=Transcendent	chromecache_321.2.dr	false		unknown
http://getbootstrap.com)	chromecache_368.2.dr, chromecache_328.2.dr	false		unknown
https://cardsphere-blog-media.s3.amazonaws.com/commander.jpg);	chromecache_268.2.dr	false		unknown
https://openjsf.org/	chromecache_422.2.dr, chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://www.boldgrid.com/w3-total-cache/	chromecache_357.2.dr, chromecache_257.2.dr, chromecache_369.2.dr, chromecache_490.2.dr, chromecache_502.2.dr, chromecache_234.2.dr, chromecache_344.2.dr	false		unknown
https://blog.cardsphere.com/wp-content/uploads/2024/09/Screenshot_20240920-091126_Chrome-768x445.jpg	chromecache_234.2.dr	false		unknown
https://blog.cardsphere.com/wp-content/uploads/2024/09/Duskmourn-960x0-c-default.png	chromecache_369.2.dr	false		unknown
https://scryfall.com/card/dsk/21/optimistic-scavenger?utm_source=api	chromecache_211.2.dr	false		unknown
https://ib.adnxs.com/getuid?https%3A//live.rezync.com/sync%3Fc%3D4656c20ee35215f78e9273796625d90b%26	chromecache_350.2.dr, chromecache_322.2.dr, chromecache_283.2.dr, chromecache_221.2.dr	false		unknown
https://www.cardkingdom.com/mtg/march-of-the-machine/transcendent-message?partner=edhrec&utm_source=	chromecache_321.2.dr	false		unknown
https://blog.cardsphere.com/wp-content/uploads/2024/09/Cardsphere_AdminRed.jpg	chromecache_234.2.dr	false		unknown
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_437.2.dr	false		unknown
https://cardsphere-1.disqus.com/top_trades_september_16_september_23/latest.rss	chromecache_486.2.dr	false		unknown
https://www.cardsphere.com/trade-guide	chromecache_234.2.dr	false		unknown
https://blog.cardsphere.com/wp-content/uploads/2024/09/Cardsphere_Message-175x300.jpg	chromecache_234.2.dr	false		unknown
http://underscorejs.org/LICENSE	chromecache_422.2.dr, chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://c.disquscdn.com/next/embed/highlight.6fbf348532f299e045c254c49c4dbedf.js	chromecache_281.2.dr, chromecache_284.2.dr	false		unknown
https://blog.cardsphere.com/wp-content/uploads/2024/09/Screenshot_20240920-091126_Chrome-300x174.jpg	chromecache_234.2.dr	false		unknown
https://blog.cardsphere.com/tag/ban/	chromecache_357.2.dr	false		unknown
https://blog.cardsphere.com/tag/top-trades/	chromecache_257.2.dr	false		unknown
https://blog.cardsphere.com/tag/private-trade-mode/	chromecache_234.2.dr	false		unknown
https://twitter.com/realcardsphere	chromecache_384.2.dr	false		unknown
https://npms.io/search?q=ponyfill.	chromecache_422.2.dr, chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://blog.cardsphere.com/wp-content/uploads/2024/09/Sphere-of-Influence-9.27.24-1140x0-c-default.	chromecache_357.2.dr	false		unknown
https://blog.cardsphere.com/wp-content/plugins/disqus-comment-system/public/js/comment_count.js?ver=	chromecache_357.2.dr, chromecache_257.2.dr, chromecache_369.2.dr, chromecache_490.2.dr, chromecache_502.2.dr, chromecache_234.2.dr, chromecache_344.2.dr	false		unknown
https://blog.cardsphere.com/wp-content/uploads/2024/09/Screenshot_20240920-090045_Chrome-300x175.jpg	chromecache_234.2.dr	false		unknown
https://blog.cardsphere.com/bloomburrow-is-available-for-trade/	chromecache_369.2.dr	false		unknown
https://mtgcommander.net/index.php/2024/09/23/september-2024-quarterly-update/	chromecache_357.2.dr	false		unknown
https://disq.us/?url=https%3A%2F%2Fblog.cardsphere.com&key=67HFcu0RC6Hvq7wSvXrLMw	chromecache_233.2.dr, chromecache_516.2.dr, chromecache_486.2.dr, chromecache_232.2.dr, chromecache_236.2.dr	false		unknown
https://moxfield.com/decks/public?format=commander&filter=Transcendent%20Message	chromecache_321.2.dr	false		unknown
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_437.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/MIME_types/Common_types	chromecache_422.2.dr, chromecache_440.2.dr	false		unknown
https://blog.cardsphere.com/wp-content/uploads/2024/09/Duskmourn-540x0-c-default.png	chromecache_369.2.dr	false		unknown
https://blog.cardsphere.com/wp-content/uploads/2024/09/Screenshot_20240920-075010_Chrome-1536x731.jp	chromecache_234.2.dr	false		unknown
https://scryfall.com/card/dsk/74/stay-hidden-stay-silent?utm_source=api	chromecache_290.2.dr	false		unknown
https://blog.cardsphere.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fblog.cardsphere.com%2Fduskmou	chromecache_369.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
108.138.7.112	unknown	United States	16509	AMAZON-02US	false
151.101.0.134	unknown	United States	54113	FASTLYUS	false
104.26.4.5	unknown	United States	13335	CLOUDFLARENETUS	false
98.82.156.207	s.amazon-adsystem.com	United States	11351	TWC-11351-NORTHEASTUS	false
3.5.28.98	s3-w.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
151.101.193.140	unknown	United States	54113	FASTLYUS	false
57.129.18.113	unknown	Belgium	2686	ATGS-MMD-ASUS	false
52.210.91.197	match.prod.bidr.io	United States	16509	AMAZON-02US	false
108.138.7.114	www.cardsphere.com	United States	16509	AMAZON-02US	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
34.254.143.3	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
54.195.88.203	io.narrative.io	United States	16509	AMAZON-02US	false
54.157.37.140	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
18.196.164.227	unknown	United States	16509	AMAZON-02US	false
192.0.73.2	secure.gravatar.com	United States	2635	AUTOMATTICUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.89.211.84	unknown	Germany	29990	ASN-APPNEXUS	false
13.33.187.97	d8ghbpr3r4dzt.cloudfront.net	United States	16509	AMAZON-02US	false
23.212.88.20	cs.media.net	United States	16625	AKAMAI-ASUS	false
178.250.1.11	gum.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
35.244.174.68	ei.rlcdn.com	United States	15169	GOOGLEUS	false
143.204.215.15	blog.cardsphere.com	United States	16509	AMAZON-02US	false
142.250.186.130	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.26.5.5	cards.scryfall.io	United States	13335	CLOUDFLARENETUS	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States	26228	SERVEPATHUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
46.228.164.13	d-ams1.turn.com	United Kingdom	56396	TURNGB	false
199.232.194.49	l2.shared.us-eu.fastly.net	United States	54113	FASTLYUS	false
38.98.69.175	lrp.mxptint.net	United States	174	COGENT-174US	false
34.98.67.3	ut.linksynergy.com	United States	15169	GOOGLEUS	false
18.202.150.204	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
34.36.216.150	pixel-sync.sitescout.com	United States	2686	ATGS-MMD-ASUS	false
52.200.121.93	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
216.200.232.249	pixel-origin.mathtag.com	United States	30419	MEDIAMATH-INCUS	false
199.232.196.64	f.ssl.fastly.net	United States	54113	FASTLYUS	false
13.32.27.28	live.rezync.com	United States	7018	ATT-INTERNET4US	false
151.101.1.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
99.86.4.23	d231vab146qzfb.cloudfront.net	United States	16509	AMAZON-02US	false
104.26.5.87	unknown	United States	13335	CLOUDFLARENETUS	false
13.33.187.70	unknown	United States	16509	AMAZON-02US	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
143.204.215.9	unknown	United States	16509	AMAZON-02US	false
151.101.129.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
18.198.84.9	cdn.w55c.net	United States	16509	AMAZON-02US	false
37.252.171.21	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
108.138.7.4	unknown	United States	16509	AMAZON-02US	false
54.220.170.204	unknown	United States	16509	AMAZON-02US	false
52.206.177.113	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
18.245.86.101	unknown	United States	16509	AMAZON-02US	false
99.86.4.41	unknown	United States	16509	AMAZON-02US	false
151.101.128.134	disqus.com	United States	54113	FASTLYUS	false
18.244.18.38	d1tcwf12y4kqv3.cloudfront.net	United States	16509	AMAZON-02US	false
54.76.166.236	bcp.crwdcntrl.net	United States	16509	AMAZON-02US	false
142.250.184.238	plus.l.google.com	United States	15169	GOOGLEUS	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
143.204.215.67	unknown	United States	16509	AMAZON-02US	false
143.204.215.65	dp2drdtly304p.cloudfront.net	United States	16509	AMAZON-02US	false
35.204.74.118	um.simpli.fi	United States	15169	GOOGLEUS	false
199.232.196.134	unknown	United States	54113	FASTLYUS	false
3.71.149.231	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
18.244.18.27	unknown	United States	16509	AMAZON-02US	false
104.26.4.87	json.edhrecstatic.com	United States	13335	CLOUDFLARENETUS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
52.217.137.137	unknown	United States	16509	AMAZON-02US	false
98.82.157.231	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
172.217.16.206	unknown	United States	15169	GOOGLEUS	false
57.129.18.105	wt.rqtrk.eu	Belgium	2686	ATGS-MMD-ASUS	false
199.232.192.64	unknown	United States	54113	FASTLYUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
18.193.235.168	crb.kargo.com	United States	16509	AMAZON-02US	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
199.232.192.134	prod.disqus.map.fastlylb.net	United States	54113	FASTLYUS	false
18.245.86.7	segments.company-target.com	United States	16509	AMAZON-02US	false
157.240.251.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523737
Start date and time:	2024-10-02 00:40:50 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.cardsphere.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@26/493@233/79
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/ Browse: https://blog.cardsphere.com/top-trades-september-16-september-23/ Browse: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/ Browse: https://blog.cardsphere.com/duskmourn-is-available-for-trade/ Browse: https://www.cardsphere.com/sets

Input	Output
URL: https://blog.cardsphere.com/sphere-of-influence-september-27-2024/ Model: jbxai	{ "brand":["CardSphere"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://blog.cardsphere.com/top-trades-september-16-september-23/ Model: jbxai	{ "brand":["CardSphere"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.cardsphere.com/ Model: jbxai	{ "brand":["Cardsphere"], "contains_trigger_text":true, "trigger_text":"Sign up now to start trading!", "prominent_button_name":"Sign up now to start trading!", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://blog.cardsphere.com/how-to-improve-communication-on-cardsphere/ Model: jbxai	{ "brand":["Cardsphere"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://blog.cardsphere.com/top-trades-september-16-september-23/ Model: jbxai	{ "brand":["CardSphere"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.cardsphere.com/sets Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://blog.cardsphere.com/duskmourn-is-available-for-trade/ Model: jbxai

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 21:41:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9761601024130755
Encrypted:	false
SSDEEP:	48:80dTTbyk/H5idAKZdA19ehwiZUklqehTy+3:88akzIy
MD5:	E87F2D14FC129C75FE0ED4E12EBB5EF5
SHA1:	0D9A1BD6A1B44F4196593A7D95602D81A8B61586
SHA-256:	1E1151A339A7E06E1FDF04636084FE3F802567737A7421E4CDEC9BD73E02B0F8
SHA-512:	A5CBFEB53C7E0C2154D1805F93B267F69415510B4D6318996DDEB181827107261EDAC03A2AECFC78B0B25CC5AD262F079968C34BFAF268D90BE18BB159627EB4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....$.7.S...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IAY5.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY5.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY5.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY5............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY7............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.cardsphere.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Windows Analysis Report
http://www.cardsphere.com/

Timestamp	Bytes transferred	Direction	Data
Oct 2, 2024 00:41:44.563234091 CEST	433	OUT	GET / HTTP/1.1 Host: www.cardsphere.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 2, 2024 00:41:45.215226889 CEST	1046	IN	HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Tue, 01 Oct 2024 22:41:45 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Location: https://www.cardsphere.com/ X-Cache: Redirect from cloudfront Via: 1.1 e1f996a9009532eeea33edfd32ef3240.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: uyKx4eVyPkHL4OaAqWYzLv3J0g0EHIuH5skpQqgukgH3yh1Q96ZnLA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff NEL: {"report_to":"default","max_age":604800,"include_subdomains":true,"failure_fraction":1.0} Report-To: {"group":"default","max_age":604800,"endpoints":[{"url":"https://ecqqpmkg.uriports.com/reports"}],"include_subdomains":true} Reporting-Endpoints: default="https://ecqqpmkg.uriports.com/reports" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>CloudFront</center></body></html>
Oct 2, 2024 00:42:30.230194092 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-10-01 22:41:46 UTC	661	OUT	GET / HTTP/1.1 Host: www.cardsphere.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 22:41:47 UTC	1138	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 69312 Connection: close Vary: Accept-Encoding Date: Tue, 01 Oct 2024 22:41:47 GMT Content-Security-Policy: frame-ancestors 'none' Server: waitress Set-Cookie: cardsphere-session-5=85cdec86-3240-4b66-8686-dc2c583fa1f7; Domain=.cardsphere.com; Expires=Wed, 02-Oct-2024 22:41:47 GMT; Secure; HttpOnly; Path=/; SameSite=Strict Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Cache: Miss from cloudfront Via: 1.1 c3fc8d1fb362a6655af993732c376dc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: J-ngXnLTB_wxkhLk8e80xRuER4bHi2AL-eoePfRMAg1O_qoPDL_K9A== X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin NEL: {"report_to":"default","max_age":604800,"include_subdomains":true,"failure_fraction":1.0} Report-To: {"group":"default","max_age":604800,"endpoints":[{"url":"https://ecqqpmkg.uriports.com/reports"}],"include_subdomains":true} Reporting-Endpoints: default="https://ecqqpmkg.uriports.com/reports"
2024-10-01 22:41:47 UTC	15246	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no, user-scalable=no">
2024-10-01 22:41:47 UTC	631	IN	Data Raw: 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 63 6c 61 73 73 3d 22 73 73 20 73 73 2d 66 77 20 73 73 2d 6d 6b 6d 63 6d 64 72 20 73 73 2d 72 61 72 65 22 3e 3c 2f 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 63 61 72 64 70 65 65 6b 22 20 64 61 74 61 2d 69 6d 61 67 65 3d 22 2f 2f 63 61 72 64 69 6d 61 67 65 2e 63 61 72 64 73 70 68 65 72 65 2e 63 6f 6d 2f 70 6c 61 63 65 68 6f 6c 64 65 72 73 2f 4d 4b 4d 43 4d 44 52 2f 31 31 Data Ascii: <tr> <td> <i class="ss ss-fw ss-mkmcmdr ss-rare"></i> <a class="cardpeek" data-image="//cardimage.cardsphere.com/placeholders/MKMCMDR/11
2024-10-01 22:41:47 UTC	16384	IN	Data Raw: 20 73 73 2d 66 77 20 73 73 2d 6c 63 69 63 6d 64 72 20 73 73 2d 72 61 72 65 22 3e 3c 2f 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 63 61 72 64 70 65 65 6b 22 20 64 61 74 61 2d 69 6d 61 67 65 3d 22 2f 2f 63 61 72 64 69 6d 61 67 65 2e 63 61 72 64 73 70 68 65 72 65 2e 63 6f 6d 2f 70 6c 61 63 65 68 6f 6c 64 65 72 73 2f 4c 43 49 43 4d 44 52 2f 31 31 32 35 35 32 2e 6a 70 67 22 20 68 72 65 66 3d 22 2f 63 61 72 64 73 2f 31 31 32 35 35 32 22 3e 45 78 6f 74 69 63 20 4f 72 63 68 61 72 64 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ss-fw ss-lcicmdr ss-rare"></i> <a class="cardpeek" data-image="//cardimage.cardsphere.com/placeholders/LCICMDR/112552.jpg" href="/cards/112552">Exotic Orchard</a>
2024-10-01 22:41:47 UTC	24	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-10-01 22:41:47 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 74 69 74 6c 65 3d 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 74 6f 6f 6c 74 69 70 22 20 64 61 74 61 2d 70 6c 61 63 65 6d 65 6e 74 3d 22 74 6f 70 22 20 74 72 69 67 67 65 72 3d 22 68 6f 76 65 72 20 63 6c 69 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 2f 32 31 33 39 22 3e 43 79 72 69 63 3c 2f 61 3e 0a 20 20 20 20 20 20 Data Ascii: title="United States of America" data-toggle="tooltip" data-placement="top" trigger="hover click"> </span> <a href="/user/2139">Cyric</a>
2024-10-01 22:41:47 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 64 3e 24 37 32 30 2e 39 36 3c 2f 74 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 6c 61 67 2d 69 63 6f 6e 20 66 6c 61 67 2d 69 63 6f 6e 2d 75 73 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <td>$720.96</td> </tr> <tr> <td> <span class="flag-icon flag-icon-us"
2024-10-01 22:41:47 UTC	4259	IN	Data Raw: 23 22 3e 43 6f 6e 74 61 63 74 20 55 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 66 77 20 66 61 2d 72 65 64 64 69 74 2d 61 6c 69 65 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 2e 63 6f 6d 2f 72 2f 63 61 72 64 73 70 68 65 72 65 2f 22 3e 52 65 64 64 69 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: #">Contact Us</a> </li> <li> <i class="fa fa-fw fa-reddit-alien" aria-hidden="true"></i> <a href="https://www.reddit.com/r/cardsphere/">Reddit</a>

Timestamp	Bytes transferred	Direction	Data
2024-10-01 22:41:47 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 22:41:48 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=151442 Date: Tue, 01 Oct 2024 22:41:48 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-01 22:41:48 UTC	587	OUT	GET /ajax/libs/flag-icon-css/2.6.0/css/flag-icon.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cardsphere.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 22:41:48 UTC	908	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 22:41:48 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e5d-82c9" Last-Modified: Mon, 04 May 2020 16:10:05 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Sun, 21 Sep 2025 22:41:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AOzDOf%2BUe5sdFPlGFsQOCvbLTjPU4GgRqpeRRo08lVBsU7TKrVpMOJ%2FLV5AFsbg7zSQf0dTbhPUynUpM%2FISreS%2BJgle7niC6ZGUlY%2FJyyR8QDevxB5Zyi1moJkw%2BwYeKowkSxJDn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cbff6573e880f98-EWR
2024-10-01 22:41:48 UTC	461	IN	Data Raw: 33 38 61 39 0d 0a 2e 66 6c 61 67 2d 69 63 6f 6e 2c 2e 66 6c 61 67 2d 69 63 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 2e 66 6c 61 67 2d 69 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 2e 33 33 33 33 33 33 33 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 65 6d 7d 2e 66 6c 61 67 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 30 30 61 30 22 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2e 66 6c 61 67 2d 69 63 6f 6e 2d Data Ascii: 38a9.flag-icon,.flag-icon-background{background-size:contain;background-position:50%;background-repeat:no-repeat}.flag-icon{position:relative;display:inline-block;width:1.33333333em;line-height:1em}.flag-icon:before{content:"\00a0"}.flag-icon.flag-icon-
2024-10-01 22:41:48 UTC	1369	IN	Data Raw: 6c 61 67 2d 69 63 6f 6e 2d 61 65 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 61 65 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 61 66 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 61 66 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 61 66 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 61 66 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 61 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 61 67 2e 73 76 Data Ascii: lag-icon-ae.flag-icon-squared{background-image:url(../flags/1x1/ae.svg)}.flag-icon-af{background-image:url(../flags/4x3/af.svg)}.flag-icon-af.flag-icon-squared{background-image:url(../flags/1x1/af.svg)}.flag-icon-ag{background-image:url(../flags/4x3/ag.sv
2024-10-01 22:41:48 UTC	1369	IN	Data Raw: 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 61 75 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 61 75 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 61 75 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 61 75 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 61 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 61 77 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 61 77 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f Data Ascii: g)}.flag-icon-au{background-image:url(../flags/4x3/au.svg)}.flag-icon-au.flag-icon-squared{background-image:url(../flags/1x1/au.svg)}.flag-icon-aw{background-image:url(../flags/4x3/aw.svg)}.flag-icon-aw.flag-icon-squared{background-image:url(../flags/1x1/
2024-10-01 22:41:48 UTC	1369	IN	Data Raw: 2d 62 68 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 62 68 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 62 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 62 69 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 62 69 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 62 69 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 62 6a 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 62 6a 2e 73 76 67 29 7d 2e 66 6c 61 67 Data Ascii: -bh.flag-icon-squared{background-image:url(../flags/1x1/bh.svg)}.flag-icon-bi{background-image:url(../flags/4x3/bi.svg)}.flag-icon-bi.flag-icon-squared{background-image:url(../flags/1x1/bi.svg)}.flag-icon-bj{background-image:url(../flags/4x3/bj.svg)}.flag
2024-10-01 22:41:48 UTC	1369	IN	Data Raw: 2d 69 63 6f 6e 2d 62 76 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 62 76 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 62 76 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 62 76 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 62 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 62 77 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 62 77 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 62 77 2e 73 76 67 29 7d Data Ascii: -icon-bv{background-image:url(../flags/4x3/bv.svg)}.flag-icon-bv.flag-icon-squared{background-image:url(../flags/1x1/bv.svg)}.flag-icon-bw{background-image:url(../flags/4x3/bw.svg)}.flag-icon-bw.flag-icon-squared{background-image:url(../flags/1x1/bw.svg)}
2024-10-01 22:41:48 UTC	1369	IN	Data Raw: 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 63 69 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 63 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 63 6b 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 63 6b 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 63 6b 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 63 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 63 6c 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 63 6c Data Ascii: -icon-squared{background-image:url(../flags/1x1/ci.svg)}.flag-icon-ck{background-image:url(../flags/4x3/ck.svg)}.flag-icon-ck.flag-icon-squared{background-image:url(../flags/1x1/ck.svg)}.flag-icon-cl{background-image:url(../flags/4x3/cl.svg)}.flag-icon-cl
2024-10-01 22:41:48 UTC	1369	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 63 79 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 63 79 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 63 79 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 63 7a 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 63 7a 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 63 7a 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 63 7a 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 Data Ascii: {background-image:url(../flags/4x3/cy.svg)}.flag-icon-cy.flag-icon-squared{background-image:url(../flags/1x1/cy.svg)}.flag-icon-cz{background-image:url(../flags/4x3/cz.svg)}.flag-icon-cz.flag-icon-squared{background-image:url(../flags/1x1/cz.svg)}.flag-ic
2024-10-01 22:41:48 UTC	1369	IN	Data Raw: 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 65 67 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 65 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 65 68 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 65 68 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 65 68 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 65 72 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 65 72 2e 66 6c 61 67 2d 69 63 Data Ascii: uared{background-image:url(../flags/1x1/eg.svg)}.flag-icon-eh{background-image:url(../flags/4x3/eh.svg)}.flag-icon-eh.flag-icon-squared{background-image:url(../flags/1x1/eh.svg)}.flag-icon-er{background-image:url(../flags/4x3/er.svg)}.flag-icon-er.flag-ic
2024-10-01 22:41:48 UTC	1369	IN	Data Raw: 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 67 61 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 67 61 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 67 61 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 67 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 67 62 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 67 62 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 67 62 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 67 64 7b 62 61 Data Ascii: und-image:url(../flags/4x3/ga.svg)}.flag-icon-ga.flag-icon-squared{background-image:url(../flags/1x1/ga.svg)}.flag-icon-gb{background-image:url(../flags/4x3/gb.svg)}.flag-icon-gb.flag-icon-squared{background-image:url(../flags/1x1/gb.svg)}.flag-icon-gd{ba
2024-10-01 22:41:48 UTC	1369	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 67 6e 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 67 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 67 70 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 67 70 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 31 78 31 2f 67 70 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 67 71 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 66 6c 61 67 73 2f 34 78 33 2f 67 71 2e 73 76 67 29 7d 2e 66 6c 61 67 2d 69 63 6f 6e 2d 67 71 2e 66 6c 61 67 2d 69 63 6f 6e 2d 73 71 75 61 72 Data Ascii: ckground-image:url(../flags/1x1/gn.svg)}.flag-icon-gp{background-image:url(../flags/4x3/gp.svg)}.flag-icon-gp.flag-icon-squared{background-image:url(../flags/1x1/gp.svg)}.flag-icon-gq{background-image:url(../flags/4x3/gq.svg)}.flag-icon-gq.flag-icon-squar

Timestamp	Bytes transferred	Direction	Data
2024-10-01 22:41:48 UTC	645	OUT	GET /static/css/layout--45b124510f5503d40b0b.css HTTP/1.1 Host: www.cardsphere.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cardsphere.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cardsphere-session-5=85cdec86-3240-4b66-8686-dc2c583fa1f7
2024-10-01 22:41:49 UTC	1299	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 11268 Connection: close Vary: Accept-Encoding Date: Tue, 01 Oct 2024 22:41:49 GMT Cache-Control: public, max-age=3600 Content-Security-Policy: frame-ancestors 'none' Etag: "1727802836.0-11268-2054755221" Expires: Tue, 01 Oct 2024 23:41:49 GMT Last-Modified: Tue, 01 Oct 2024 17:13:56 GMT Server: waitress Set-Cookie: cardsphere-session-5=85cdec86-3240-4b66-8686-dc2c583fa1f7; Domain=.cardsphere.com; Expires=Wed, 02-Oct-2024 22:41:49 GMT; Secure; HttpOnly; Path=/; SameSite=Strict Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Cache: Miss from cloudfront Via: 1.1 149b1af6ad8d2c0fedea82bfb1c29c66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _LWbTLwWyjJUiK8ph30nZUlpN3n4wcSMN3_KfBPlmxukOWGV3DPRLg== X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin NEL: {"report_to":"default","max_age":604800,"include_subdomains":true,"failure_fraction":1.0} Report-To: {"group":"default","max_age":604800,"endpoints":[{"url":"https://ecqqpmkg.uriports.com/reports"}],"include_subdomains":true} Reporting-Endpoints: default="https://ecqqpmkg.uriports.com/reports"
2024-10-01 22:41:49 UTC	11268	IN	Data Raw: 2e 63 73 2d 66 6c 65 78 2d 69 74 65 6d 73 2d 74 6f 70 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 63 73 2d 66 6c 65 78 2d 69 74 65 6d 73 2d 6d 69 64 64 6c 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 63 73 2d 66 6c 65 78 2d 69 74 65 6d 73 2d 62 6f 74 74 6f 6d 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 2e 63 73 2d 66 6c 65 78 2d 69 74 65 6d 73 2d 73 74 72 65 74 63 68 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 7d 2e 63 73 2d 66 6c 65 78 2d 74 6f 70 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 63 73 2d 66 6c 65 78 2d 6d 69 64 64 6c 65 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 7d 2e 63 73 2d 66 6c 65 78 2d 62 6f 74 74 6f 6d 7b 61 Data Ascii: .cs-flex-items-top{align-items:flex-start}.cs-flex-items-middle{align-items:center}.cs-flex-items-bottom{align-items:flex-end}.cs-flex-items-stretch{align-items:stretch}.cs-flex-top{align-self:flex-start}.cs-flex-middle{align-self:center}.cs-flex-bottom{a

Timestamp	Bytes transferred	Direction	Data
2024-10-01 22:41:48 UTC	644	OUT	GET /static/css/light--7941b065f1e37aaf7cff.css HTTP/1.1 Host: www.cardsphere.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cardsphere.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cardsphere-session-5=85cdec86-3240-4b66-8686-dc2c583fa1f7
2024-10-01 22:41:49 UTC	1299	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 12031 Connection: close Vary: Accept-Encoding Date: Tue, 01 Oct 2024 22:41:49 GMT Cache-Control: public, max-age=3600 Content-Security-Policy: frame-ancestors 'none' Etag: "1727802836.0-12031-1755911150" Expires: Tue, 01 Oct 2024 23:41:49 GMT Last-Modified: Tue, 01 Oct 2024 17:13:56 GMT Server: waitress Set-Cookie: cardsphere-session-5=85cdec86-3240-4b66-8686-dc2c583fa1f7; Domain=.cardsphere.com; Expires=Wed, 02-Oct-2024 22:41:49 GMT; Secure; HttpOnly; Path=/; SameSite=Strict Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Cache: Miss from cloudfront Via: 1.1 dd09b3b5f5b8dc626e1ba6804a73af40.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: C2qhBa6-FChQL56gK9IelJnQ_VBT13IiAvD0QcwP0NUNegq5tYDHoQ== X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin NEL: {"report_to":"default","max_age":604800,"include_subdomains":true,"failure_fraction":1.0} Report-To: {"group":"default","max_age":604800,"endpoints":[{"url":"https://ecqqpmkg.uriports.com/reports"}],"include_subdomains":true} Reporting-Endpoints: default="https://ecqqpmkg.uriports.com/reports"
2024-10-01 22:41:49 UTC	12031	IN	Data Raw: 62 6f 64 79 2c 74 65 78 74 61 72 65 61 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 65 6c 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 63 66 30 66 31 7d 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 2c 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 6c 69 3e 61 2c 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 6c 69 3e 61 3a 66 6f 63 75 73 2c 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 6c 69 3e 61 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 34 34 39 35 65 3b 63 6f 6c 6f 72 3a 23 65 63 66 30 66 31 7d 2e 6e 61 76 62 61 72 2d 64 65 66 Data Ascii: body,textarea{color:#555;background-color:#fff}.well{background-color:#ecf0f1}.navbar-default,.navbar-default .navbar-nav>li>a,.navbar-default .navbar-nav>li>a:focus,.navbar-default .navbar-nav>li>a:hover{background-color:#34495e;color:#ecf0f1}.navbar-def

Timestamp	Bytes transferred	Direction	Data
2024-10-01 22:41:48 UTC	648	OUT	GET /static/css/indexauth--32a0a4d4f465581873bc.css HTTP/1.1 Host: www.cardsphere.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cardsphere.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cardsphere-session-5=85cdec86-3240-4b66-8686-dc2c583fa1f7
2024-10-01 22:41:49 UTC	1297	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 3567 Connection: close Vary: Accept-Encoding Date: Tue, 01 Oct 2024 22:41:49 GMT Cache-Control: public, max-age=3600 Content-Security-Policy: frame-ancestors 'none' Etag: "1727802836.0-3567-3344307463" Expires: Tue, 01 Oct 2024 23:41:49 GMT Last-Modified: Tue, 01 Oct 2024 17:13:56 GMT Server: waitress Set-Cookie: cardsphere-session-5=85cdec86-3240-4b66-8686-dc2c583fa1f7; Domain=.cardsphere.com; Expires=Wed, 02-Oct-2024 22:41:49 GMT; Secure; HttpOnly; Path=/; SameSite=Strict Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Cache: Miss from cloudfront Via: 1.1 bfb5bffe90e3b0e760933a7a07d850ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: gU7evhQyAMm3i2GlnU7_veOZt7NME5T5EehEKFvkrMZNoj8aAs3uCg== X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin NEL: {"report_to":"default","max_age":604800,"include_subdomains":true,"failure_fraction":1.0} Report-To: {"group":"default","max_age":604800,"endpoints":[{"url":"https://ecqqpmkg.uriports.com/reports"}],"include_subdomains":true} Reporting-Endpoints: default="https://ecqqpmkg.uriports.com/reports"
2024-10-01 22:41:49 UTC	3567	IN	Data Raw: 2e 63 61 72 64 70 65 65 6b 2d 66 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 3a 31 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 63 61 72 64 70 65 65 6b 2d 62 6f 64 79 2c 2e 63 61 72 64 70 65 65 6b 2d 66 6f 6f 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 63 61 72 64 70 65 65 6b 2d 69 6d 61 67 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 36 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 76 77 20 2d 20 32 30 70 78 29 3b 6d 61 78 2d 68 65 69 67 68 74 3a 33 30 30 70 78 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 Data Ascii: .cardpeek-footer{margin:10px;text-align:center}.cardpeek-body,.cardpeek-footer{position:relative;width:auto}.cardpeek-image{display:block;border:1px solid #000;border-radius:16px;margin:0 auto;max-width:calc(100vw - 20px);max-height:300px}@media (max-widt

Timestamp	Bytes transferred	Direction	Data
2024-10-01 22:41:48 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 22:41:49 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=151385 Date: Tue, 01 Oct 2024 22:41:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-01 22:41:49 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-01 22:41:49 UTC	576	OUT	GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cardsphere.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 22:41:49 UTC	933	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 22:41:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"ec3bb52a00e176a7181d454dffaea219" Last-Modified: Mon, 25 Jan 2021 22:03:59 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 19:15:06 CDN-EdgeStorageId: 940 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: c83fee2ffb8cb55535eaeb2520d7c34a CDN-Cache: HIT CF-Cache-Status: HIT Age: 16819909 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8cbff65a0dd7c34a-EWR alt-svc: h3=":443"; ma=86400
2024-10-01 22:41:49 UTC	436	IN	Data Raw: 37 63 30 64 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b Data Ascii: 7c0d/! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f Data Ascii: ry{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px do
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 Data Ascii: type=search]{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;-webkit-appearance:textfield}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance:none}fieldset{pad
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 6f 72 74 61 6e 74 7d 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6c 79 70 68 69 63 6f 6e 73 20 48 61 6c 66 6c 69 6e 67 73 27 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 Data Ascii: ortant}}@font-face{font-family:'Glyphicons Halflings';src:url(../fonts/glyphicons-halflings-regular.eot);src:url(../fonts/glyphicons-halflings-regular.eot?#iefix) format('embedded-opentype'),url(../fonts/glyphicons-halflings-regular.woff2) format('woff2')
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: h:before{content:"\e011"}.glyphicon-th-list:before{content:"\e012"}.glyphicon-ok:before{content:"\e013"}.glyphicon-remove:before{content:"\e014"}.glyphicon-zoom-in:before{content:"\e015"}.glyphicon-zoom-out:before{content:"\e016"}.glyphicon-off:before{con
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 68 65 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a Data Ascii: {content:"\e044"}.glyphicon-print:before{content:"\e045"}.glyphicon-camera:before{content:"\e046"}.glyphicon-font:before{content:"\e047"}.glyphicon-bold:before{content:"\e048"}.glyphicon-italic:before{content:"\e049"}.glyphicon-text-height:before{content:
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 69 6e 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 32 22 7d 2e 67 6c 79 70 68 69 Data Ascii: :before{content:"\e077"}.glyphicon-eject:before{content:"\e078"}.glyphicon-chevron-left:before{content:"\e079"}.glyphicon-chevron-right:before{content:"\e080"}.glyphicon-plus-sign:before{content:"\e081"}.glyphicon-minus-sign:before{content:"\e082"}.glyphi
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 36 22 7d 2e 67 6c 79 70 68 69 Data Ascii: t:before{content:"\e111"}.glyphicon-magnet:before{content:"\e112"}.glyphicon-chevron-up:before{content:"\e113"}.glyphicon-chevron-down:before{content:"\e114"}.glyphicon-retweet:before{content:"\e115"}.glyphicon-shopping-cart:before{content:"\e116"}.glyphi
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 5c 65 31 34 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 70 65 72 63 6c 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 72 74 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 75 73 68 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 73 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 38 22 Data Ascii: \e141"}.glyphicon-paperclip:before{content:"\e142"}.glyphicon-heart-empty:before{content:"\e143"}.glyphicon-link:before{content:"\e144"}.glyphicon-phone:before{content:"\e145"}.glyphicon-pushpin:before{content:"\e146"}.glyphicon-usd:before{content:"\e148"
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 75 74 6c 65 72 79 3a 62 65 66 6f 72 65 7b Data Ascii: .glyphicon-floppy-remove:before{content:"\e174"}.glyphicon-floppy-save:before{content:"\e175"}.glyphicon-floppy-open:before{content:"\e176"}.glyphicon-credit-card:before{content:"\e177"}.glyphicon-transfer:before{content:"\e178"}.glyphicon-cutlery:before{

Timestamp	Bytes transferred	Direction	Data
2024-10-01 22:41:49 UTC	582	OUT	GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cardsphere.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 22:41:49 UTC	903	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 22:41:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"269550530cc127b6aa5a35925a7de6ce" Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT CDN-CachedAt: 11/30/2023 17:43:30 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 755 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: ab8626e4b724b111058794b60ba8757c CDN-Cache: HIT CF-Cache-Status: HIT Age: 17464847 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8cbff65a0ffd425f-EWR
2024-10-01 22:41:49 UTC	466	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 31 20 46 Data Ascii: at('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 F
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e Data Ascii: (0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{-ms-filter:"progid:DXImageTran
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 33 22 7d 2e 66 61 2d 68 65 61 72 Data Ascii: th:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:before{content:"\f003"}.fa-hear
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 62 22 7d Data Ascii: 4"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.fa-tag:before{content:"\f02b"}
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: tent:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-step-forward:before{content:"\
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: :before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"}.fa-chevron-up:before{conte
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 6e 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 63 22 Data Ascii: {content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa-unlock:before{content:"\f09c"
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: ent:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc"}.fa-underline:before{content
2024-10-01 22:41:49 UTC	1369	IN	Data Raw: 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 65 74 68 6f 73 63 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 Data Ascii: board:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-stethoscope:before{content:"\f