Edit tour

Windows Analysis Report
http://celerysticksva.com/

Overview

General Information

Sample URL:	http://celerysticksva.com/
Analysis ID:	1526002
Tags:	urlscan
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

HTML body with high number of embedded SVGs detected

HTML page contains hidden javascript code

HTML page contains string obfuscation

Javascript checks online IP of machine

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6112 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2028,i,16578763605277697240,10979081761154446079,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1628 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6380 --field-trial-handle=2028,i,16578763605277697240,10979081761154446079,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6716 --field-trial-handle=2028,i,16578763605277697240,10979081761154446079,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://celerysticksva.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw

HTTP Parser: Total embedded SVG size: 128429

Source: http://celerysticksva.com/

HTTP Parser: Base64 decoded: 1728054420.000000

Source: https://celerysticksva.com/	HTTP Parser: Found new string: script .( HTMLScriptElement.supports && HTMLScriptElement.supports("importmap") ) \|\| document.write( '<script src="https://celerysticksva.com/wp-includes/js/dist/vendor/wp-polyfill-importmap.min.js?ver=1.8.2"></scr' + 'ipt>' );...
Source: http://celerysticksva.com/	HTTP Parser: Found new string: script .( HTMLScriptElement.supports && HTMLScriptElement.supports("importmap") ) \|\| document.write( '<script src="http://celerysticksva.com/wp-includes/js/dist/vendor/wp-polyfill-importmap.min.js?ver=1.8.2"></scr' + 'ipt>' );...

Source: https://cdn.metadata.io/site-insights.js

HTTP Parser: (function () { /** * @type {string} key for the visitor id cookie. */ const visitoridkey = "metadata_visitor_id"; /** * @type {string} key for the session id cookie. */ const sessionidkey = "metadata_session_id"; /** * @type {string} ip address of the client. */ let ip; /** * account configuration object. */ const config = { invalid: true }; /** * options object. */ const opts = { /** * @type {string} base url for the cdn. */ cdnbaseurl: "https://cdn.metadata.io/pixel/config", /** * @type {string} base url for the api. */ baseurl: "https://api-gw.metadata.io", /** * @type {string} account id. */ accountid: null }; /** * get the value of a cookie. * @param {string} key - the key of the cookie. * @returns {string|null} the value of the cookie, or null if not found. */ const getcookievalue = (key) => { const cookie = document.cookie.split("; ").find(function (cookie) { ...

Source: http://celerysticksva.com/	HTTP Parser: No favicon
Source: http://celerysticksva.com/	HTTP Parser: No favicon
Source: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=shared	HTTP Parser: No favicon
Source: https://celerysticksva.com/	HTTP Parser: No favicon
Source: https://celerysticksva.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49784 version: TLS 1.2

Source:	Binary string: !1}onCanPlay(a){var b;null===(b=this.$v)\|\|void 0===b?void 0:b.ndb(a)}onError(a){var b;this.Vt(a);null===(b=this.$v)\|\|void 0===b?void 0:b.pdb(a)}gva(a){const b=this.getState(a);b.RC=1;b.vD=this.Lb(a);this.Vt(a)}seek(a,b,c){v(isFinite(b));const d=this.getState(a),e=b*this.getPlaybackRate(a);d.currentTime=e;const f=!!this.xP(a).length;d.sources.forEach(g=>{const h=1===d.RC&&d.kL.includes(g);!g.seek\|\|!f&&h\|\|g.seek(e,c)})}nva(a){const b=this.getState(a);b.RC=2;b.sources.forEach(c=>{var d;null===(d=c.seek)\|\| source: chromecache_827.2.dr
Source:	Binary string: b,HJb(c=>__c.pdb(c)),HJb(c=>{if(c=__c.odb.gB(c)){var d;(d=c.s.length)\|\|(d=new IJb,d.visit(c),d=!!d.lX);c=d?{result:"syntax-error",suffix:c.s}:{result:"success",tokens:__c.GZ(c.value)}}else c={result:"error"};return c}))},NJb=function(a,b,c){c=c.ZD.slice(1).trim();a=a.wba(c);x("success"===a.result);const d={cta:new Map(KJb(a.WN,b).map(e=>[e.VK,e])),sheet:b};return LJb(a.WN,e=>MJb(e,d))},PJb=function(a,b,c){const d=new Set,e=[];a=__c.pZ(a.parse(b,c));jJb(a,f=>{14===f.type&&(f=OJb(b,f.value),null!=f&& source: chromecache_481.2.dr, chromecache_492.2.dr
Source:	Binary string: __c.pdb=function(a){const b={bga:A_,qga:A_,jga:A_,zga:A_,aga:A_},c=AZ(b,{A7:!0,M$:a}),d=AZ(b,{A7:!1,M$:a});return(e,f={Vza:!1})=>{const g=c.gB(e);e=gZ(d.gB,e);return g&&(f.Vza\|\|e)?e?{result:"success",WN:g}:(OY(0===g.s.length,`could not parse: ${g.s}`),{result:"syntax-error",WN:g}):{result:"error"}}}(mdb);__c.qdb=iZ(/^(?:<=\|>=\|<>\|[=<>])/);__c.rdb=Object.freeze({"af-ZA":",",ar:".","ar-AE":".","ar-EG":".","ar-SA":".","as-IN":".","az-AZ":",","bg-BG":",","bn-BD":".","ca-ES":",","ceb-PH":".","cs-CZ":",","cy-GB":".","da-DK":",","de-DE":",","el-GR":",",en:".","en-AU":".","en-GB":".","en-IN":".","en-PH":".","en-psaccent":".","es-419":".","es-AR":",","es-CO":",","es-ES":",","es-MX":".","es-US":".","et-EE":",","eu-ES":",","fa-IR":".","ff-SN":",","fi-FI":",","fr-BE":",","fr-CA":",","fr-FR":",","gl-ES":",","gu-IN":".","ha-NG":".","he-IL":".", source: chromecache_561.2.dr, chromecache_443.2.dr

Source: global traffic

TCP traffic: 192.168.2.5:49907 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 04 Oct 2024 15:06:58 GMTContent-Type: text/cssContent-Length: 11953Connection: keep-aliveLast-Modified: Wed, 25 Sep 2024 15:23:32 GMTCache-Control: max-age=2592000Expires: Sun, 27 Oct 2024 20:20:23 GMTVary: Accept-EncodingContent-Encoding: gziphost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2X-Endurance-Cache-Level: 2X-nginx-cache: WordPressCF-Cache-Status: HITAge: 1302Accept-Ranges: bytesServer: cloudflareCF-RAY: 8cd61434cf4f7d00-EWRData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 eb b8 95 ed e7 99 5f c1 3e 29 57 8b 8e c0 26 29 c9 0f b8 7c 2a 33 49 26 e9 a9 f4 54 1e 53 49 a7 4f 5c 2e 90 00 49 b4 41 80 01 20 51 32 cb f7 4f dc af f7 d7 dd 5f 72 c1 87 64 be f4 f0 e3 74 77 e6 a6 dd 47 04 36 f6 5e 7b ed b5 97 c3 23 0c 24 61 48 d3 15 29 32 a1 a8 a6 82 c3 6d e4 0b 9a 66 42 6a c4 f5 93 03 ca d4 40 68 2d 52 e0 15 f5 01 02 c7 5f 48 92 0e f2 b4 c8 80 fb 37 67 51 98 83 49 f2 f6 67 79 4d ca 20 63 97 e0 56 19 be 33 96 10 0a 06 94 46 52 1b 9c 58 d2 2a b0 4c 79 1d 83 de fe 74 7f 24 dd df 9f 3e 1b 49 9f ed 4f 9f 8f a4 cf f7 a7 2f 46 d2 17 fb d3 2f 46 d2 2f f6 a7 5f 8e a4 5f 8e a5 13 8e 4b b5 db d9 26 04 3d 77 6f b2 37 4c 1e d5 bc 4a f6 87 c9 a3 8a 57 c9 b3 61 f2 a8 de 65 f2 e5 20 77 ef 78 57 83 d4 ab 7d a9 d7 83 d4 eb 7e aa 14 79 d7 7d bb 40 d7 7a 95 d9 d3 35 f0 21 17 7a f2 49 e9 0d 23 e7 b7 29 92 31 e5 77 76 51 1f 00 23 91 86 a0 67 f3 9b e6 51 d2 38 19 be d6 34 d2 0d 70 0f 22 07 42 6b 91 42 77 08 ab 45 06 07 eb 4d 03 70 75 0a 9e 3f c6 45 1f a9 2d 3b ee 29 fc db 27 63 3f 37 5b ff ed ee 28 42 9d d8 c7 28 77 50 60 aa 32 86 36 b0 bc f4 13 12 10 2d 19 2b 12 52 a9 69 30 ce fa 19 79 9d 91 53 ac 93 d1 04 95 48 ca 1f 80 5b 44 8c ac 9b db 50 c2 d8 38 a1 ce 28 4f 5d 37 6c 99 96 d6 52 c0 6b ac a3 49 6a 68 6b d2 18 4e 41 49 32 82 f4 c4 f3 a6 29 e5 29 5a 4f dc a9 17 49 db 3e 00 e5 1f 81 f2 4f 86 3a 82 74 12 90 19 dc 70 ea 01 95 c1 1d 9f 23 28 d4 54 29 10 12 ae 89 2c 10 a3 31 af 43 b0 0e 0d 9a a2 0c 6c 8c 31 0a d3 a3 bc 40 df 59 8c 18 4d ac 88 8c 98 49 49 28 c6 84 17 db 3b ac ef fd f4 40 48 4c 24 08 8a ed 41 68 2d 52 d0 18 64 e8 c1 0c b8 1d f7 66 08 63 ca 63 63 df e6 34 34 4b 66 48 1f a9 19 1f 25 03 fe 91 ba 3d 65 f3 23 65 de 68 d5 d5 31 92 63 55 eb 63 7a 00 46 22 dd 16 e5 66 fb 20 69 9c e8 11 b9 d6 c7 f8 d7 90 dd 21 7a a8 a3 13 ae 8f 8d 58 03 fb 87 80 47 45 d8 1c 15 a1 b6 d5 a8 0c 5a 64 23 22 6c 8e 8a d0 40 ee 91 a1 44 1d 15 61 03 16 27 02 3b fe e2 00 76 ff b5 81 d7 47 a5 18 9d 57 93 b5 ae d4 2f aa 13 62 34 e6 b0 bc f7 13 f3 10 64 52 e0 65 a8 55 a1 08 8b 9a d4 88 91 35 50 1a c9 56 c1 4d 15 8c a5 c8 87 fd 5a 30 1f 97 ac 30 39 20 46 19 0c 11 0b 27 2b 24 27 00 e4 1c 07 a0 0c 02 Data Ascii: rks_>)W&)\|3I&TSIO\.IA Q2O_rdtwG6^{#$aH)2mfBj@h-R_H7gQIgyM cV3FRXLyt$>IO/F/F/__K&=wo7LJWae wxW}~y}@z5!zI#)1wvQ#gQ84
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 04 Oct 2024 15:06:58 GMTContent-Type: text/cssContent-Length: 3248Connection: keep-aliveLast-Modified: Tue, 23 Jul 2024 17:11:01 GMTCache-Control: max-age=2592000Expires: Sun, 03 Nov 2024 14:45:15 GMTVary: Accept-EncodingContent-Encoding: gziphost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2X-Endurance-Cache-Level: 2X-nginx-cache: WordPressCF-Cache-Status: HITAge: 1302Accept-Ranges: bytesServer: cloudflareCF-RAY: 8cd61434cf2c5e7e-EWRData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 52 eb 8e db 38 96 7e 15 cf 04 01 6c 4c d1 50 d5 76 27 3d 24 a6 11 a0 9f 62 b1 58 18 94 78 24 9d 14 45 12 e4 91 2f 11 bc cf be 14 25 db 55 89 5c 65 57 aa 92 ee c1 f8 87 2c 91 e7 f2 dd 96 1b c7 72 6d 8b 7b 66 e4 1a 2b 49 68 4d e7 6c c0 fe 85 7b d0 f1 64 0d 82 3d b8 66 5a ee 6c 4b ec 73 1b 08 4b 2c 86 c3 00 44 68 2a 5e 6a d8 b2 40 d2 d3 64 93 42 0f c5 30 db 6e 26 2b 36 5e 3a de 3f 9e 58 ba 7b 6e 8d d4 58 19 5e 80 21 f0 fb e5 04 c7 59 ab bb 46 fa 0a 0d cb 2d 91 6d 78 26 c6 6f 0d 25 9d be c8 ba f8 e1 a4 52 91 dd 78 77 6e e2 cd 99 f3 99 c6 4e 63 a0 08 78 a7 81 1b 6b e0 30 f1 dc b0 a9 43 86 04 4d 97 a8 a5 d7 30 12 14 b9 2c ee 2b 6f 5b a3 58 61 b5 f5 1c 4d 0d 1e 49 28 0c 2e 2a 92 d4 12 df b8 7a e5 e6 c9 9b d5 2a b4 79 03 a6 8d 9b 0d 49 34 e0 39 34 8e 76 dd 61 77 cf f6 ca 4d ab 55 3f 2c 72 3b 0e 49 65 2f 9d 72 c1 9e 47 b2 4d ee 59 d6 32 30 82 6d 8c 30 14 d6 0f 43 a2 e2 e0 75 24 7d 01 8a c9 70 7c f7 54 2e 8b de ca 37 1a 5e da a2 0d dd 57 23 f8 71 c4 e5 42 f5 d5 8c ea 98 d1 aa 7e 55 ad ae 1c 7c b5 5c d7 ce 9f 56 ec e1 94 e9 14 f3 4d 8c 1e cc e5 62 12 da f1 7a c4 ff 5c 55 42 b1 f8 06 86 b1 67 3c 9b 64 b6 5a 85 36 6f c0 b4 0c 23 bb 4e 6a ac 0c 0b a0 4b 5e 44 a6 e0 45 2e 8b fb 2a 72 32 8a 15 56 5b cf d1 c4 fd 48 22 b7 3e 26 24 ad 13 c3 4d d1 7a 1f 9b fe e8 3f 84 c2 e0 b4 dc c5 f2 a4 4b da 2b ca 28 20 0b f8 05 8e 53 6a c0 aa 26 be fc 00 8d 48 85 e3 41 26 1a e9 2b 8c de 40 19 af ef 7e 8d f7 4e 2a 85 a6 8a 77 1b 54 54 a7 a6 97 32 9d 85 75 d5 4d 62 0c e4 ed 3d 3c 26 33 82 3a 80 1e a1 91 75 7c 99 7d ec a1 0d 80 c6 fb 49 4c 4b 0c 6c 0d 9e b0 90 ba 63 0f b3 15 11 d8 36 5a 88 1e 8a e4 60 54 b3 6d 8c 98 2a fa dc 06 c2 b2 47 8c 84 52 4f d6 24 0f 79 a9 61 cb 02 49 7f 06 8e b1 6c e3 a5 9b 84 d2 5f 44 63 fb bf 33 5c 08 9a 30 82 41 88 c9 48 59 99 9c 35 16 15 c3 61 00 a2 de c2 31 5c 4f 51 1c 4a ae d9 ff ac c4 83 32 d7 0c f6 bd ef 57 f0 4a aa 83 51 4f 32 3b 14 5d 01 e1 42 6a d7 4d 0e 4e 16 31 f5 40 1b 00 73 05 c9 47 7d 4f 32 7d 54 39 09 6a b6 ac 65 60 45 8d 5a cd a6 ee 57 ab d0 e6 0d 98 96 15 d6 90 44 13 63 96 b8 b2 c4 26 a6 d4 37 52 8b 5c 16 f7 95 b7 ad 89 59 b0 da 7a 8e a6 06 8f 24 1e 7f 29 0c 2e 42 4c 3a 89 Data Ascii: R8~lLPv'=$bXx$E/%U\eW,rm{f+IhMl{d=fZlKsK,Dh^j@dB0n&+6^:?X{nX^!YF-mx&o%RxwnNcxk0CM0,+o[XaMI(.z*yI494vawMU?,r;Ie/rGMY20m0Cu$}
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 04 Oct 2024 15:06:59 GMTContent-Type: application/javascriptContent-Length: 936Connection: keep-aliveLast-Modified: Fri, 04 Oct 2024 03:18:55 GMTCache-Control: max-age=21600Expires: Fri, 04 Oct 2024 20:45:16 GMTVary: Accept-EncodingContent-Encoding: gziphost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2X-Endurance-Cache-Level: 2X-nginx-cache: WordPressCF-Cache-Status: HITAge: 1303Accept-Ranges: bytesServer: cloudflareCF-RAY: 8cd614371c9443e7-EWRData Raw: 1f 8b 08 00 00 00 00 00 00 03 9d 52 4b 6f e3 36 10 be f7 57 d8 3c 04 24 40 b1 e9 55 86 6a a4 6e 16 08 d0 74 0f 7b 2c 0a 83 12 47 36 61 8a 74 49 ca ae 61 fb bf 77 a8 87 ad 16 46 ba bb 27 51 e4 cc 7c f3 3d 28 65 c5 cf e7 83 f4 33 53 54 46 86 70 ae 9c 0d d1 b7 55 74 9e 9e 2b a3 c1 c6 37 95 47 2e 84 b0 d7 e2 7c 65 e7 b8 d5 41 b8 7d d4 58 59 9c 65 15 f5 01 56 a9 37 27 b6 56 d9 b1 cc a4 d5 8d 8c a0 32 6d 09 f7 ce c5 dc b6 c6 74 a7 77 e9 37 da e6 e4 79 ff 37 e1 71 eb 21 6c 9d 51 f9 73 3f ff ea ca 00 fe 00 af 06 1a 04 0e 34 72 5b 74 bd 50 cc 7f 62 67 5d d3 39 25 6f 36 82 0f 50 a5 0d 3e f7 0d 9e 68 3b 3b 6a ab dc 91 5d 2e f3 b8 14 06 ec 26 6e 2f 17 e5 aa 36 cd 12 e3 61 98 2d 3a ba bf e9 80 27 67 a3 d4 36 50 52 1a 57 ed 32 50 1a d9 67 fd cf de c3 41 c3 71 bd 4e 55 d8 97 e9 da cb 06 08 63 1e 62 eb ed a2 6e 6d b7 c9 4c 52 cf f5 20 cf ba 69 a3 4c b7 2b 69 4c 29 ab 5d 7a e3 96 5d 0d c4 99 2b 2c 1c 67 8f 58 d0 be 79 2b ad 32 30 2d 10 25 72 eb 5e 19 9f ea cf b8 ea 86 bd 0f 70 b7 41 72 d2 c1 78 fb b8 68 8a d6 39 38 56 4c 9b 17 51 d4 ce bf ca 6a 4b 3d 66 25 11 d0 85 5f f8 87 02 0e 01 40 cd 40 9a cc eb cd 36 12 f6 f4 44 b1 43 ec a5 bf cb cf b8 13 83 d9 54 33 0e 58 d3 de 2f f8 59 c6 e8 75 d9 46 08 f9 fc 99 df fe 3e 69 83 a2 e4 7f 90 0e 9c fc 79 45 01 be ab 8d 5d d9 f5 81 ce 29 70 68 e1 8d 31 20 63 10 3a dc 6b ec 06 57 05 11 31 c7 30 0d 91 54 bd 60 a3 33 42 62 f1 a1 97 15 f9 8d 0d 7f b5 e0 4f 5f c0 e0 28 e7 5f 8c a1 44 0c 9a 49 ab 1b 19 31 58 37 70 89 e0 f2 6b 21 50 09 2b 5a 3b 6a 31 02 4e 89 fe cb 62 1a a7 3c 2d 42 e9 9a da a5 88 a7 3d 14 45 41 ee 4a 12 d6 99 0e 85 1d 66 2e e0 23 ef 07 1e 2a d3 96 b0 cb 05 fe 43 e0 61 d9 35 2d d9 0c 9b ad a4 31 a5 ac 76 c9 0b 8e a8 ad 31 d3 55 65 bf aa fc 60 55 57 c8 db aa 4f 4f a9 c6 09 fc 79 19 eb 28 51 32 ca ac 34 ae da 75 f1 7c f8 ec 61 6f e4 69 58 14 f7 22 0c 07 a5 6d ba 86 f0 15 0d 7c fe cc b8 07 f4 3c c4 97 f1 f6 93 97 0d 50 ca 90 86 13 1e 1a 77 80 ff 47 c6 c0 a2 bd 4a 07 94 db 62 76 28 eb 34 bb 2e 94 ab da 06 6c a7 ed eb 01 0f 49 68 b0 e0 29 f9 f5 f3 fb 0a cd 49 77 4e 2a 50 84 77 a0 15 c5 69 1f f5 1d 9d 55 e0 7b 75 c2 8f d1 39 74 03 7f db 18 9d cd b0 fc 7b 27 Data Ascii: RKo6W<$@Ujnt{,G6atIawF'Q\|=(e3STFpUt+7G.\|eA}XYeV7'V2mtw7y7q!lQs?4r[tPbg]9%o6P>h;;j].&n/6a-:'g6PRW2PgAqNUcbnmLR iL+iL)]z]+,gXy+20-%r^pAr
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 04 Oct 2024 15:06:59 GMTContent-Type: application/javascriptContent-Length: 15898Connection: keep-aliveLast-Modified: Tue, 16 Jul 2024 17:28:53 GMTCache-Control: max-age=21600Expires: Fri, 04 Oct 2024 20:45:15 GMTVary: Accept-EncodingContent-Encoding: gziphost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2X-Endurance-Cache-Level: 2X-nginx-cache: WordPressCF-Cache-Status: HITAge: 1304Accept-Ranges: bytesServer: cloudflareCF-RAY: 8cd61437186d437e-EWRData Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 b2 eb 76 db 38 b6 2d fc ff 3c 05 c5 91 8f 07 68 c3 8c 9c 74 d7 ae 22 0b d1 49 a5 9c ae 5b 9c 74 9c 54 ba 5b a5 56 28 72 49 42 4c 01 2c 10 94 ac 88 7c f7 6f 01 24 75 b1 9d da bd f7 19 63 ff 39 19 b1 08 2c ac cb 5c 73 ce c7 7f 1a 78 ef 96 a2 f4 e6 22 07 0f bf 49 65 d4 f9 02 24 e8 c4 40 e6 fd e9 f1 ff 5a 27 da 33 7c 97 45 04 98 a4 fc d9 6e ae 34 b1 41 ed 09 e9 49 6a 42 45 24 d3 34 08 06 f6 08 ee f8 7a f6 09 52 13 66 30 17 12 de 68 55 80 36 5b fb c6 76 20 ab 15 76 9f e5 10 0d 86 6c 01 26 92 63 3d 69 68 c3 54 44 0c 03 1c d1 55 17 5a 19 65 b6 05 84 cb a4 7c bd 91 7d 9f 30 4d f2 dc a5 36 0c f8 ae 89 71 10 f6 de 7d fe 14 11 ac de 00 bb fe de 9d 3e 01 fb f5 2b 77 fa 01 d8 a7 99 3b bd 93 6c fb ce 9d 7e 06 f6 6a ea 4e 37 c0 96 ed 2b 48 b6 fe c9 9d fe 09 4c 14 ee f4 0f 60 57 73 77 32 92 fd ac dd 49 4a 96 0b 77 9a 1a f6 d3 d0 9d 84 61 2f 7f 70 a7 bf 03 5b ff d9 9d fe 06 0d 8d 2d 59 c8 10 53 4c b0 92 55 6c ca 52 96 b0 9c cd 59 c1 96 88 9f 65 7c 3c 61 6b fe 38 49 85 a9 e1 96 8c a2 b2 5e d4 b2 2e ea 47 b4 d6 c5 b2 5e 68 91 d5 6a 53 d6 2b 99 d6 d2 6c 6a 64 75 9c 2e 27 f5 67 a5 ea 7f 29 9d d5 c2 20 a7 8f 05 db f2 e7 5a 27 db 50 94 ee 1b cf 2b 99 1a a1 a4 b7 70 84 ed c5 93 56 3c a0 66 2c 27 1c f0 27 d6 60 2a 2d 3d d3 ec 2b 56 c4 d0 9d cd 05 8e 5a 24 1a a4 b9 52 19 c4 10 04 10 6a 58 a9 35 bc 58 8a 3c c3 b4 43 d1 c6 8e 41 0b b8 c2 6e 61 2b 91 9d 5b b6 33 fd 1b d8 fa 9c 97 23 85 93 cb 49 e4 6b 98 bb bb 68 ef 15 fe b8 53 2c e6 24 d1 0b b4 8b 34 65 98 83 5c 98 e5 b3 27 41 40 aa 30 b5 83 11 11 bf f7 fe 74 24 5b 7f ec 5f d8 13 1a 69 ca fc 1e 23 ce b2 a6 52 73 cf 04 81 ac f2 7c c0 9d 53 93 2a 37 d6 62 25 dd 83 bd 13 5f 2b 91 79 43 ce b9 85 68 71 58 a4 a7 39 18 a1 3d 97 33 e4 a2 72 aa db 29 47 24 cd 1c 49 d2 b2 d3 12 85 14 59 48 91 61 85 6d 12 01 43 8e 22 f4 0c cc 23 c1 a6 d3 9b c8 76 c0 43 ff 9d 45 43 fc 85 fe 9a 45 2d 34 3c a6 6d 2c 55 b2 34 ba 4a 8d d2 87 b7 b5 7b b3 54 9f 9d a9 a8 c4 88 88 ce 2f f0 53 45 c3 a6 47 dd a5 f4 d4 e8 70 2d 51 f5 20 e8 0e a4 a2 ac 3a ac 72 63 4d d2 7b 67 2f cb e1 fd b6 b5 9d 59 8a 32 74 bb 71 c3 dc 05 01 1a b8 35 1c 0e b9 d7 6d 2e aa de 62 Data Ascii: v8-<ht"I[tT[V(rIBL,\|o$uc9,\sx"Ie$@Z'3\|En4AIjBE$4zRf0hU6[v vl&c=ihTDUZe\|}0M6q}>+w;l~jN7+HL`Wsw2IJwa/p[-YSLUlRYe\|<ak8I
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 04 Oct 2024 15:06:59 GMTContent-Type: application/javascriptContent-Length: 1166Connection: keep-aliveLast-Modified: Tue, 30 Apr 2024 15:05:15 GMTCache-Control: max-age=21600Expires: Fri, 04 Oct 2024 20:45:16 GMTVary: Accept-EncodingContent-Encoding: gziphost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2X-Endurance-Cache-Level: 2X-nginx-cache: WordPressCF-Cache-Status: HITAge: 1303Accept-Ranges: bytesServer: cloudflareCF-RAY: 8cd614373f6fc333-EWRData Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 52 db 8e db 36 10 fd 15 af 1e 14 a9 e0 32 ce ab 0c c5 4d d2 0d 0a 24 c1 06 68 de 0c 17 a0 a5 91 cd 2c 4d ba e4 c8 1b 43 d6 bf 77 a8 8b 2d 3b ea 76 93 be 74 b1 80 a9 e1 f0 cc b9 8c dc ee 8c c5 5f 84 9b c0 a4 b0 66 1b fc fa 68 6c be b3 e0 dc 4b a9 11 ac c8 50 ee 25 1e 82 d9 5e d8 09 a6 55 9e 44 c0 74 9c be ae 0a 63 23 5f 34 13 a9 27 3a 46 6e 22 cd 4c 1c 86 37 fe 08 cd f1 7e f5 15 32 e4 39 14 52 c3 67 6b 76 60 f1 e0 ef 58 05 ba dc 12 fe 4a 41 72 33 65 6b c0 44 2f cc b2 8e 6b 66 fc 08 a4 11 dd eb 9d 35 68 f0 b0 03 be 11 ee fe 51 f7 38 3c 13 4a 35 ad f5 2c 33 da e1 44 a7 11 10 33 cf 4a a7 55 3d b3 80 a5 d5 13 22 40 d4 20 66 ba 8e a3 8a 46 bd 33 a4 ed 1b 26 11 0d 01 7e 2e 78 1a 77 0a b6 a0 07 77 5d 81 39 34 16 ba 72 73 ae 63 66 d2 45 20 16 1b 0b c5 32 60 2f a4 de 95 24 c3 60 b4 c8 a5 f3 d2 f2 65 dc 7e 7b fa 69 b0 91 79 0e 3a e8 8b c2 4a 71 db d6 96 f1 0b 16 38 50 a4 77 1c e0 a2 37 60 81 a7 2b 2c 88 e7 75 af 4a 44 a3 9f d7 bb c8 bc 19 f4 9f 4b f4 8d 5e d9 82 4e 52 e7 f0 6d d9 c9 e9 3e ff 4c 83 5b 92 f3 62 39 cb 4d 56 7a 9b b8 c8 f3 bb 3d 1d 3e 4a 47 28 60 a3 20 53 32 7b 08 58 e4 ad ab ea 38 6e c3 aa 1c 0a 84 44 31 bf 62 54 48 b2 3a 8d a6 4c b7 de c6 f4 8c 7e 5e 6a b1 97 6b e1 1b 02 d6 bd f0 01 4e ac 51 f0 06 d1 4a 52 06 51 5c b5 49 07 66 0f 56 89 43 90 a6 2d d6 39 da 38 8a b9 0f 21 0c 15 97 ee 13 6d df fd 0e f4 3c c8 a5 50 66 1d 24 ba 54 aa f6 f9 4f bc 1f 9f 4c 2e d4 7f 81 45 5b c2 35 e8 47 b1 02 0f da ee 2a 8c 40 cd be 9f 07 63 f0 c0 4f 78 83 19 e7 86 13 f3 c9 fd ea 2b ad 14 df 0b 55 82 8b 14 df 76 1d 90 bf 3d c4 bc 90 0a 29 a1 b7 86 dc 14 3a e6 0a f4 1a 37 af a7 2d de b0 f7 e7 68 13 d1 ae d6 e3 24 c0 5d b9 1a 22 d7 f5 69 03 2a 43 b5 46 83 fe dd bf eb 87 56 1e 2b 01 76 8d 85 f5 18 99 a0 1b d0 d0 08 c3 29 fd 5c ba 80 c7 23 ad e1 3f 88 0f c3 8c f7 34 a2 60 e3 47 06 71 cd 32 65 1c fc 0f a8 9d 78 0c b8 9d 5d 7b a7 64 f6 f0 64 54 8c 16 a3 18 b2 bb 53 40 8c 1a 76 c0 77 16 f6 d2 94 ee bd c9 4a 97 22 1b 5a 91 79 ec 2b 2b 4e f3 86 bc ba 46 76 51 2c 3c e2 25 d9 66 48 f3 f8 3c e4 d4 86 66 bd 56 d7 53 7e 4a d5 a3 d4 b9 79 e4 39 21 fb 12 f7 cb b6 87 ae e1 26 4d 31 Data Ascii: R62M$h,MCw-;vt_fhlKP%^UDtc#_4':Fn"L7~29Rgkv`XJAr3ekD/kf5hQ8<J5,3D3JU="@ fF3&~.xww]94rscfE 2`/$`e~{iy:Jq8Pw7`+,uJDK^
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 04 Oct 2024 15:06:59 GMTContent-Type: application/javascriptContent-Length: 5365Connection: keep-aliveLast-Modified: Tue, 30 Apr 2024 15:05:14 GMTCache-Control: max-age=21600Expires: Fri, 04 Oct 2024 20:45:17 GMTVary: Accept-EncodingContent-Encoding: gziphost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2X-Endurance-Cache-Level: 2X-nginx-cache: WordPressCF-Cache-Status: HITAge: 1302Accept-Ranges: bytesServer: cloudflareCF-RAY: 8cd6143a5b01c333-EWRData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 52 69 73 db 48 92 fd de bf 82 c2 4c d0 c0 18 04 71 10 17 69 b4 c6 96 ad 89 8e 9d 76 77 8c bd bd 1f 64 ce 46 a1 2a 8b 82 1b 02 b8 38 2c b9 45 fe f7 ad ca e2 01 8a d4 41 5b d3 8a d0 63 a1 2a f3 65 e6 cb 37 fc db 49 ef e3 65 56 f7 78 96 43 4f fc 92 b6 29 07 33 28 a0 22 0d b0 de df 86 3f 0c 87 bd 0f 65 5b 51 18 f7 ae e7 83 ac a0 79 cb a0 1e 7e ae 87 cd 35 5c 95 9f 33 eb 2a 2b ac cf f5 0f 5f 48 d5 5b 5d 25 bc 2d 68 93 95 85 6e dc 6a 6d 0d bd ba a9 32 da 68 13 19 73 99 dc a6 a4 86 b1 76 d9 34 f3 7a 3c 1c 52 26 f3 19 e4 d9 97 ca 2a a0 19 ce 2e 87 9f 19 d0 df 81 ad 6b fc dd f1 2d db f2 86 a4 ae a1 a9 87 9a 09 37 cd 58 b3 e6 c5 4c 33 eb ec 0f 41 16 ba 37 a1 ab 99 34 17 21 ef c9 95 b8 c1 44 71 53 16 5f a0 6a c6 b7 bc 2a af ce 4a 06 bf 96 59 d1 8c 37 1d 32 e3 96 25 9a 6c 50 90 25 49 f3 75 0e 25 ef b1 d3 39 a9 6a f8 a9 68 74 66 3a 81 31 66 93 8c eb ec 55 e0 fb 5e 60 54 d0 b4 55 d1 03 91 3c d9 9c 7d df 8d 83 97 ba ce 06 89 8a fa f1 47 c7 36 4c 3f f0 5c fb a5 ee d8 ae d7 67 86 b1 34 9b 72 db 45 b9 34 4b a1 75 55 56 e3 8e 64 8d d8 88 25 ea 43 d1 bc 17 a1 fd fe 9d 0b ab 82 79 4e 28 9c 5d 66 39 d3 6f 74 7c 26 79 63 9e 38 86 29 3f 44 15 6c bf 33 a5 d9 1a b7 6d bf af ad 6f b4 93 f5 a8 ed 62 a1 b7 c9 2d 25 79 9e 12 fa fb b8 5d 6e 86 ba b4 58 f9 be 6c 7e 95 5c 49 db f9 30 f5 03 8a 75 8a 11 e3 76 45 21 bf ba 5a 4b 07 b4 26 37 69 c2 4c 48 de 8b 2b 33 4d 88 b5 ae ae 83 c8 95 52 8b a9 53 e3 96 97 95 ce 7b 59 d1 a3 89 f6 2a bb 9a f5 34 4b ec 93 92 46 7f 81 9b 4e b4 17 a6 48 5e 2f dd 7c a1 f5 5e 98 2f 58 45 66 33 92 e6 90 68 9c e4 35 e0 a5 d0 47 46 33 11 23 be 7a 75 45 e5 67 2a 3f 0d b3 15 2d 90 46 4c 94 b6 0d d4 a2 65 30 8c d6 ba 24 f5 2f d7 c5 af 55 39 17 06 fa aa 73 a3 df b7 4f 92 84 5b 59 c1 e0 e6 17 ae 6b 42 47 71 39 70 92 24 a1 db db 9e f6 92 bf d4 12 f9 a4 53 f1 b0 6a 59 dc 8b c1 5f c8 b2 ed 05 9f ae b7 a8 37 66 65 60 1b c6 a4 1b 3d fc 51 33 96 2b 15 e9 d2 58 de 59 a6 14 52 c8 68 82 98 81 98 82 c3 2c cc d2 ac cd cc cc 93 75 64 8f e9 42 6b 15 8b 91 62 89 54 9a 46 ba a8 36 49 92 5a 39 14 b3 e6 72 22 85 9e 90 c1 60 62 d0 24 bd 20 53 d3 13 23 e9 20 da 29 44 e8 47 b1 62 Data Ascii: RisHLqivwdF8,EA[ce7IeVxCO)3("?e[Qy~5\3+_H[]%-hnjm2hsv4z<R&.k-7XL3A74!DqS_j*JY72%lP%Iu%9jhtf:1fU^`TU<}G6L?\
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 04 Oct 2024 15:07:02 GMTContent-Type: application/javascriptContent-Length: 5365Connection: keep-aliveLast-Modified: Tue, 30 Apr 2024 15:05:14 GMTCache-Control: max-age=21600Expires: Fri, 04 Oct 2024 20:45:17 GMTVary: Accept-EncodingContent-Encoding: gziphost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2X-Endurance-Cache-Level: 2X-nginx-cache: WordPressCF-Cache-Status: HITAge: 1305Accept-Ranges: bytesSet-Cookie: __cf_bm=coSGHcoyNnSgV62wq524Qr5OvsuEOAR3qn6vrliBb9I-1728054422-1.0.1.1-nUKhQQEAMgjXzg7M.tod8SD.ESDUcX5Q_bSXyDC5Zr3p.u0frc6l0fLkh9pJy8HnGnEK86nMa3nhMl9QWY0WZg; path=/; expires=Fri, 04-Oct-24 15:37:02 GMT; domain=.celerysticksva.com; HttpOnlySet-Cookie: _cfuvid=vVYnoMxzuSTlPjNTI095tFvhoUEmGJtT84JDxHla.Sg-1728054422353-0.0.1.1-604800000; path=/; domain=.celerysticksva.com; HttpOnlyServer: cloudflareCF-RAY: 8cd6144b8a320f77-EWRData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 52 69 73 db 48 92 fd de bf 82 c2 4c d0 c0 18 04 71 10 17 69 b4 c6 96 ad 89 8e 9d 76 77 8c bd bd 1f 64 ce 46 a1 2a 8b 82 1b 02 b8 38 2c b9 45 fe f7 ad ca e2 01 8a d4 41 5b d3 8a d0 63 a1 2a f3 65 e6 cb 37 fc db 49 ef e3 65 56 f7 78 96 43 4f fc 92 b6 29 07 33 28 a0 22 0d b0 de df 86 3f 0c 87 bd 0f 65 5b 51 18 f7 ae e7 83 ac a0 79 cb a0 1e 7e ae 87 cd 35 5c 95 9f 33 eb 2a 2b ac cf f5 0f 5f 48 d5 5b 5d 25 bc 2d 68 93 95 85 6e dc 6a 6d 0d bd ba a9 32 da 68 13 19 73 99 dc a6 a4 86 b1 76 d9 34 f3 7a 3c 1c 52 26 f3 19 e4 d9 97 ca 2a a0 19 ce 2e 87 9f 19 d0 df 81 ad 6b fc dd f1 2d db f2 86 a4 ae a1 a9 87 9a 09 37 cd 58 b3 e6 c5 4c 33 eb ec 0f 41 16 ba 37 a1 ab 99 34 17 21 ef c9 95 b8 c1 44 71 53 16 5f a0 6a c6 b7 bc 2a af ce 4a 06 bf 96 59 d1 8c 37 1d 32 e3 96 25 9a 6c 50 90 25 49 f3 75 0e 25 ef b1 d3 39 a9 6a f8 a9 68 74 66 3a 81 31 66 93 8c eb ec 55 e0 fb 5e 60 54 d0 b4 55 d1 03 91 3c Data Ascii: RisHLqivwdF8,EA[ce7IeVxCO)3("?e[Qy~5\3+_H[]%-hnjm2hsv4z<R&.k-7XL3A74!DqS_j*JY72%lP%Iu%9jhtf:1fU^`TU<
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 04 Oct 2024 15:07:02 GMTContent-Type: application/javascriptContent-Length: 936Connection: keep-aliveLast-Modified: Fri, 04 Oct 2024 03:18:55 GMTCache-Control: max-age=21600Expires: Fri, 04 Oct 2024 20:45:16 GMTVary: Accept-EncodingContent-Encoding: gziphost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2X-Endurance-Cache-Level: 2X-nginx-cache: WordPressCF-Cache-Status: HITAge: 1306Accept-Ranges: bytesSet-Cookie: __cf_bm=mGdsbJLwEaqU50eLsG6fuzMys5ea11s9eOZtY2Bf3ac-1728054422-1.0.1.1-N4tzR0AGvIDQDoMYQhdxhbQGgO7Prgvdia9YOeUNqL7olU2.V7brs47.vqfPpMTG4Wyyv0Wn27e97GFUzqE_.g; path=/; expires=Fri, 04-Oct-24 15:37:02 GMT; domain=.celerysticksva.com; HttpOnlySet-Cookie: _cfuvid=_VmcagS2.5VF1FgJ42.r8MW1ntUeTHtzesY6eQkQAoY-1728054422360-0.0.1.1-604800000; path=/; domain=.celerysticksva.com; HttpOnlyServer: cloudflareCF-RAY: 8cd6144b9b208c4e-EWRData Raw: 1f 8b 08 00 00 00 00 00 00 03 9d 52 4b 6f e3 36 10 be f7 57 d8 3c 04 24 40 b1 e9 55 86 6a a4 6e 16 08 d0 74 0f 7b 2c 0a 83 12 47 36 61 8a 74 49 ca ae 61 fb bf 77 a8 87 ad 16 46 ba bb 27 51 e4 cc 7c f3 3d 28 65 c5 cf e7 83 f4 33 53 54 46 86 70 ae 9c 0d d1 b7 55 74 9e 9e 2b a3 c1 c6 37 95 47 2e 84 b0 d7 e2 7c 65 e7 b8 d5 41 b8 7d d4 58 59 9c 65 15 f5 01 56 a9 37 27 b6 56 d9 b1 cc a4 d5 8d 8c a0 32 6d 09 f7 ce c5 dc b6 c6 74 a7 77 e9 37 da e6 e4 79 ff 37 e1 71 eb 21 6c 9d 51 f9 73 3f ff ea ca 00 fe 00 af 06 1a 04 0e 34 72 5b 74 bd 50 cc 7f 62 67 5d d3 39 25 6f 36 82 0f 50 a5 0d 3e f7 0d 9e 68 3b 3b 6a ab dc 91 5d 2e f3 b8 14 06 ec 26 6e 2f 17 e5 aa 36 cd 12 e3 61 98 2d 3a ba bf e9 80 27 67 a3 d4 36 50 52 1a 57 ed 32 50 1a d9 67 fd cf de c3 41 c3 71 bd 4e 55 d8 97 e9 da cb 06 08 63 1e 62 eb ed a2 6e 6d b7 c9 4c 52 cf f5 20 cf ba 69 a3 4c b7 2b 69 4c 29 ab 5d 7a e3 96 5d 0d c4 99 2b 2c 1c 67 8f 58 d0 be 79 2b ad 32 30 Data Ascii: RKo6W<$@Ujnt{,G6atIawF'Q\|=(e3STFpUt+7G.\|eA}XYeV7'V2mtw7y7q!lQs?4r[tPbg]9%o6P>h;;j].&n/6a-:'g6PRW2PgAqNUcbnmLR iL+iL)]z]+,gXy+20
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 04 Oct 2024 15:07:16 GMTContent-Type: application/javascriptContent-Length: 1166Connection: keep-aliveLast-Modified: Tue, 30 Apr 2024 15:05:15 GMTCache-Control: max-age=21600Expires: Fri, 04 Oct 2024 21:07:15 GMTVary: Accept-EncodingContent-Encoding: gziphost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2X-Endurance-Cache-Level: 2X-nginx-cache: WordPressCF-Cache-Status: MISSAccept-Ranges: bytesSet-Cookie: __cf_bm=wxbbA2TmqgCsq3EEqL4DrGww0v_A2uVTprw09phrwN8-1728054436-1.0.1.1-BzWeu6XHTwE4JnF5n4WnmEeO1fQimPCW8PcDliEv0IHKo0fiUVpadudphYNsoAIwQnj2hMai_CAVCAa0ZAseKw; path=/; expires=Fri, 04-Oct-24 15:37:16 GMT; domain=.celerysticksva.com; HttpOnlySet-Cookie: _cfuvid=k6bfLnSo3gsbtQwzNVbM2DEL3X_MG7k8VuttVqEohl8-1728054436196-0.0.1.1-604800000; path=/; domain=.celerysticksva.com; HttpOnlyServer: cloudflareCF-RAY: 8cd6144b996b4405-EWRData Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 52 db 8e db 36 10 fd 15 af 1e 14 a9 e0 32 ce ab 0c c5 4d d2 0d 0a 24 c1 06 68 de 0c 17 a0 a5 91 cd 2c 4d ba e4 c8 1b 43 d6 bf 77 a8 8b 2d 3b ea 76 93 be 74 b1 80 a9 e1 f0 cc b9 8c dc ee 8c c5 5f 84 9b c0 a4 b0 66 1b fc fa 68 6c be b3 e0 dc 4b a9 11 ac c8 50 ee 25 1e 82 d9 5e d8 09 a6 55 9e 44 c0 74 9c be ae 0a 63 23 5f 34 13 a9 27 3a 46 6e 22 cd 4c 1c 86 37 fe 08 cd f1 7e f5 15 32 e4 39 14 52 c3 67 6b 76 60 f1 e0 ef 58 05 ba dc 12 fe 4a 41 72 33 65 6b c0 44 2f cc b2 8e 6b 66 fc 08 a4 11 dd eb 9d 35 68 f0 b0 03 be 11 ee fe 51 f7 38 3c 13 4a 35 ad f5 2c 33 da e1 44 a7 11 10 33 cf 4a a7 55 3d b3 80 a5 d5 13 22 40 d4 20 66 ba 8e a3 8a 46 bd 33 a4 ed 1b 26 11 0d 01 7e 2e 78 1a 77 0a b6 a0 07 77 5d 81 39 34 16 ba 72 73 ae 63 66 d2 45 20 16 1b 0b c5 32 60 2f a4 de 95 24 c3 60 b4 c8 a5 f3 d2 f2 65 dc 7e 7b fa 69 b0 91 79 0e 3a e8 8b c2 4a 71 db d6 96 f1 0b 16 38 50 a4 77 1c e0 a2 37 60 81 a7 2b 2c 88 e7 75 af 4a 44 Data Ascii: R62M$h,MCw-;vt_fhlKP%^UDtc#_4':Fn"L7~29Rgkv`XJAr3ekD/kf5hQ8<J5,3D3JU="@ fF3&~.xww]94rscfE 2`/$`e~{iy:Jq8Pw7`+,uJD
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 04 Oct 2024 15:07:16 GMTContent-Type: application/javascriptContent-Length: 15898Connection: keep-aliveLast-Modified: Tue, 16 Jul 2024 17:28:53 GMTCache-Control: max-age=21600Expires: Fri, 04 Oct 2024 21:07:15 GMTVary: Accept-EncodingContent-Encoding: gziphost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2X-Endurance-Cache-Level: 2X-nginx-cache: WordPressCF-Cache-Status: MISSAccept-Ranges: bytesSet-Cookie: __cf_bm=7e8tH5QiNLjq1c4kQeb4HSKhagDljpyUpINKjQ2UjdM-1728054436-1.0.1.1-DR0fN9ANrxO3o5CmS9tXsbcrpmULUcAAqh8p9cYIa41UzEeVvyYwW44SFpjg8Jvgf6LIPjfruWODJJpyQVvutQ; path=/; expires=Fri, 04-Oct-24 15:37:16 GMT; domain=.celerysticksva.com; HttpOnlySet-Cookie: _cfuvid=_tenDJE0yD_.YNSjaIy6UberdJWwZ6VxIo0taO3telk-1728054436210-0.0.1.1-604800000; path=/; domain=.celerysticksva.com; HttpOnlyServer: cloudflareCF-RAY: 8cd6144b9ac84387-EWRData Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 b2 eb 76 db 38 b6 2d fc ff 3c 05 c5 91 8f 07 68 c3 8c 9c 74 d7 ae 22 0b d1 49 a5 9c ae 5b 9c 74 9c 54 ba 5b a5 56 28 72 49 42 4c 01 2c 10 94 ac 88 7c f7 6f 01 24 75 b1 9d da bd f7 19 63 ff 39 19 b1 08 2c ac cb 5c 73 ce c7 7f 1a 78 ef 96 a2 f4 e6 22 07 0f bf 49 65 d4 f9 02 24 e8 c4 40 e6 fd e9 f1 ff 5a 27 da 33 7c 97 45 04 98 a4 fc d9 6e ae 34 b1 41 ed 09 e9 49 6a 42 45 24 d3 34 08 06 f6 08 ee f8 7a f6 09 52 13 66 30 17 12 de 68 55 80 36 5b fb c6 76 20 ab 15 76 9f e5 10 0d 86 6c 01 26 92 63 3d 69 68 c3 54 44 0c 03 1c d1 55 17 5a 19 65 b6 05 84 cb a4 7c bd 91 7d 9f 30 4d f2 dc a5 36 0c f8 ae 89 71 10 f6 de 7d fe 14 11 ac de 00 bb fe de 9d 3e 01 fb f5 2b 77 fa 01 d8 a7 99 3b bd 93 6c fb ce 9d 7e 06 f6 6a ea 4e 37 c0 96 ed 2b 48 b6 fe c9 9d fe 09 4c 14 ee f4 0f 60 57 73 77 32 92 fd ac dd 49 4a 96 0b 77 9a 1a f6 d3 d0 9d 84 61 2f 7f 70 a7 bf 03 5b ff d9 9d fe 06 0d 8d 2d 59 c8 10 53 4c b0 92 55 6c ca 52 96 b0 Data Ascii: v8-<ht"I[tT[V(rIBL,\|o$uc9,\sx"Ie$@Z'3\|En4AIjBE$4zRf0hU6[v vl&c=ihTDUZe\|}0M6q}>+w;l~jN7+HL`Wsw2IJwa/p[-YSLUlR

Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/Untitled38_20240505102749-removebg-preview.png HTTP/1.1Host: celerysticksva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /design/DAGG6U9mKKc/nm6DM_OA9EWr4TduD9lCVA/view?embed HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /design/DAGG6YPVj0I/WIrqiu3tkmQpk5Au_OFXeA/view?embed HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /design/DAGG6Q3459s/8FBNjjeoexSjUxqjC7x4CQ/view?embed HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /design/DAGG6SqehUY/2TcrLDgpiqaFZRMvvzRRTA/view?embed HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/a0684b0780c739e9.vendor.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/14770deaa5eaaf1c.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/c98a3fa3613d5cf9.strings.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/lib/sentry/7.16.0.min.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/3ab1cf1de09e5673.en.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/2215e5e11bcef919.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/4af0e43f4ef393f1.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/9fd55eff40782881.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/9136954c24b9aa82.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/Untitled38_20240505102749-removebg-preview.png HTTP/1.1Host: celerysticksva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /web/2ed5447f64612738.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/118052af16110a6a.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/df5565bbf3a7a2dd.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/8dd0cb1e0979d988.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/897b683ca2227427.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/981d5a1f7f6f816b.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/3ab1cf1de09e5673.en.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /_fb/s/41d36c36b634199c0ebf5e807fda38d0.css HTTP/1.1Host: font-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/2215e5e11bcef919.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/c98a3fa3613d5cf9.strings.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/4af0e43f4ef393f1.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/lib/sentry/7.16.0.min.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /api/6081839/envelope/?sentry_key=3daf58e34a9945fe9c5defceb4bfcb59&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/9fd55eff40782881.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/FW-SBuJ17DU HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/696cef482bcd0628.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/iSfnyV0BncY HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/16dcebf40d948459.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/b5a760f6899bcab7.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/5264941c1fd4724f.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/db9dd30bae331521.strings.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/c54f49802fcd86bd.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /api/6081839/envelope/?sentry_key=3daf58e34a9945fe9c5defceb4bfcb59&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/9136954c24b9aa82.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/897b683ca2227427.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /Sap7A/MADtGqSap7A/1/screen.svg HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Sap7A/MADtGqSap7A/1/thumbnail.png HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a0jWk/MAEKo0a0jWk/1/s.svg HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/981d5a1f7f6f816b.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /9Gh80/MADtGo9Gh80/2/s2-1.svg HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yLubo/MADtGlyLubo/2/s2-1.svg HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/d305a840cf8a403f.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /yLubo/MADtGlyLubo/2/s.png HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:200/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FpDojQ%2FMAGG0OpDojQ%2F1%2Fp.png/watermark:F/width:171?csig=AAAAAAAAAAAAAAAAAAAAABT9STzoj7MVnOb-wGuoczlgxz-tOt4RBVPrd8WHOQXp&exp=1728071239&osig=AAAAAAAAAAAAAAAAAAAAAGC6SrlfL4zZj2CGw2M0dGrWTfw1zbScSPmvtg176piS&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/be34c0c45d782924.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:732/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FjMpyk%2FMAGG6PjMpyk%2F1%2Fp.png/watermark:F/width:689?csig=AAAAAAAAAAAAAAAAAAAAAJvISEcYvDX8gFUjuFRL0SEgRkGbybZp1N7Dkpv3dvAF&exp=1728069677&osig=AAAAAAAAAAAAAAAAAAAAAEbZQl7JkdBoHYpKslFqqqmR2ewBrhTh2qIWlEFAn_HF&signer=media-rpc&x-canva-quality=screen HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:200/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FjMpyk%2FMAGG6PjMpyk%2F1%2Fp.png/watermark:F/width:188?csig=AAAAAAAAAAAAAAAAAAAAAKkx-xcMW4iUpK83V4u-oUhpJ9i7E-MTSxVgafegHSbn&exp=1728069677&osig=AAAAAAAAAAAAAAAAAAAAAAAL4I8I34wumUt3IMWJzSYYxoEqbr6cvgqvaZGgwq5Q&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:200/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2Fw18eo%2FMAGGvpw18eo%2F1%2Fp.png/watermark:F/width:154?csig=AAAAAAAAAAAAAAAAAAAAALeq4IaTWFJzilrW0nWMdiVBhsA6PEhBThcEtYEgpovi&exp=1728069993&osig=AAAAAAAAAAAAAAAAAAAAANdObaHPVDargHk2Ot5lhBdzA-efEZy-YHi7TIOOj10u&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:192/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FnBc7I%2FMAGGvfnBc7I%2F1%2Fp.png/watermark:F/width:199?csig=AAAAAAAAAAAAAAAAAAAAAJaFEIzZ4-quOQVtn9evqt982EKwyWcoEGKVqU3KaD1w&exp=1728071359&osig=AAAAAAAAAAAAAAAAAAAAAD6zqJ26xYQGRq5B50Ijd4VmpcTA4WWxtUq6CAERKKrh&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/FW-SBuJ17DUAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=oFnp89nZdP8; VISITOR_INFO1_LIVE=CoOXHjteT-U; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSg%3D%3D
Source: global traffic	HTTP traffic detected: GET /api/6081839/envelope/?sentry_key=3daf58e34a9945fe9c5defceb4bfcb59&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9Gh80/MADtGo9Gh80/2/s.png HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iFvoc/MAFPSLiFvoc/1/s-1.svg HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:432/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FXWYHM%2FMAGGveXWYHM%2F1%2Fp.png/watermark:F/width:268?csig=AAAAAAAAAAAAAAAAAAAAAKEERi17fdVcKfUrNpSAjbPcKfYHFPppfAegEcX-geA9&exp=1728069413&osig=AAAAAAAAAAAAAAAAAAAAAMr80A1_FwF8B_ob84TQ3SoLZKC_pwW1TULoXplIXirA&signer=media-rpc&x-canva-quality=screen HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gAmTQ/MADtGggAmTQ/2/s2-1.svg HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gAmTQ/MADtGggAmTQ/2/s.png HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/FW-SBuJ17DUAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=PSZSmhCZxwQ; VISITOR_INFO1_LIVE=7RZnCN14g4g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/FW-SBuJ17DUAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=PSZSmhCZxwQ; VISITOR_INFO1_LIVE=7RZnCN14g4g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/FW-SBuJ17DUAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=PSZSmhCZxwQ; VISITOR_INFO1_LIVE=7RZnCN14g4g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSA%3D%3D
Source: global traffic	HTTP traffic detected: GET /web/images/b46630e470f4040eba7033cf2435edce.woff HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.canva.com/web/14770deaa5eaaf1c.ltr.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/cff149ee1e9d2be50ac77bcd86769d05.woff2 HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /29qjU/MADtGh29qjU/1/screen.svg HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chunk-batch/91ad7f658c55222b.js+2a5654383629d09a.js+7e39b44fc8a680c5.js+ee7e6dcfa014bd3c.js+e2170d2c1a511090.js+24ad14e11d9733cb.js+e13cddd4eaa12c2d.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /YAD_Q_TxnIk/0/NF-OneLittleFont-Regular.a8afc4159db7077.a58e572c9dfda64596b89372ef51ab57.woff2 HTTP/1.1Host: font-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YAFdJi-0PQg/0/Garet-Bold.6086fe0b22642fe6ba7de76edbe7c.d769594df7501703a01b15c58fc23317.woff2 HTTP/1.1Host: font-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YAFdJi-0PQg/0/Garet-Regular.026b1d7ff12d809c3e8a84bed1.0d6b73825ffb53723442c5660e87b4d4.woff2 HTTP/1.1Host: font-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YAEQ9mrBUNo/0/RTL-BalabelooPro-Regular.1f713689d459702.19c5fc8ca197a9a3973f3493b8bfa43d.woff2 HTTP/1.1Host: font-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:200/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FXWYHM%2FMAGGveXWYHM%2F1%2Fp.png/watermark:F/width:124?csig=AAAAAAAAAAAAAAAAAAAAAIFOTDf38xE-mTn_7Vz_HBRNgDN1PSD26bMJkyD5z-1F&exp=1728069413&osig=AAAAAAAAAAAAAAAAAAAAAEq-m9k3w43L1MCKvlizxsFqiMz84x_vlZQlSvyQaArs&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UEBEU/MADtGmUEBEU/1/screen.svg HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:208/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2F8sSp8%2FMAGG6A8sSp8%2F1%2Fp.png/watermark:F/width:220?csig=AAAAAAAAAAAAAAAAAAAAAGT16ZA_Ay_494YVxgE6RT_yo4-TbJpwQXqb98hhQ38w&exp=1728069665&osig=AAAAAAAAAAAAAAAAAAAAAOKEnZNLjMjLQRWZVbzAJ__x6dSezF6gzJyuGumut-wj&signer=media-rpc&x-canva-quality=screen HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:189/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2F8sSp8%2FMAGG6A8sSp8%2F1%2Fp.png/watermark:F/width:200?csig=AAAAAAAAAAAAAAAAAAAAAEM3jLdKvxcr_Jc6S3OQhvLtN3hbWONSAu36ZOrgzNJj&exp=1728069665&osig=AAAAAAAAAAAAAAAAAAAAAMXhwIKM2AwBSfyp_xyu-AsOSQXTwLelgIq_RHnACTpT&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:364/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FEK8p4%2FMAGGvXEK8p4%2F1%2Fp.png/watermark:F/width:292?csig=AAAAAAAAAAAAAAAAAAAAAF9l9Tv24kxBE7et45oZCRhQ_yOTP5tKgGqW9YDoFzrv&exp=1728072277&osig=AAAAAAAAAAAAAAAAAAAAAKpuVNS8l2KrEb3y_QPEr7JbSP1MXjRPZ8EGwTXGC53Q&signer=media-rpc&x-canva-quality=screen HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YAFdJi-0PQg/0/Garet-RegularItalic15681328946949529740..c82410ef3725a1a75f07e3c8fbc9e797.woff2 HTTP/1.1Host: font-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:200/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FEK8p4%2FMAGGvXEK8p4%2F1%2Fp.png/watermark:F/width:160?csig=AAAAAAAAAAAAAAAAAAAAAOYltg0WHdtIT-a3LMGPuTFu5Tk76U1KX27vDgTblT5x&exp=1728072277&osig=AAAAAAAAAAAAAAAAAAAAAGQT6PO3P3k9svxctbxEsjaOZAOiw6U9hAu0BZQEJAOT&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/6081839/envelope/?sentry_key=3daf58e34a9945fe9c5defceb4bfcb59&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/ae HTTP/1.1Host: www.canva.comConnection: keep-aliveX-Canva-Brand: BAAAAAAAAAAX-Canva-App: embedsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Canva-Build-Sha: 770ed44X-Canva-User: UAAAAAAAAAAX-Canva-Analytics: AAMABUVNQkVEAA==sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Canva-Request: recordanalyticseventbatchX-Canva-Locale: enX-Canva-Build-Name: 20241002-22sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/design/DAGG6U9mKKc/nm6DM_OA9EWr4TduD9lCVA/view?embedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q
Source: global traffic	HTTP traffic detected: GET /GjvBA/MADsXzGjvBA/2/s2-1.svg HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GjvBA/MADsXzGjvBA/2/s.png HTTP/1.1Host: media-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /site-insights.js HTTP/1.1Host: cdn.metadata.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=813264806 HTTP/1.1Host: p.tvpixel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=498278555 HTTP/1.1Host: p.tvpixel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=985172801 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=1171806581 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=5381141 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1343881488 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/iSfnyV0BncY/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/FW-SBuJ17DU/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/iSfnyV0BncYAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=PSZSmhCZxwQ; VISITOR_INFO1_LIVE=7RZnCN14g4g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pixel/config/1721.json HTTP/1.1Host: cdn.metadata.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/KZ9qBfv2Fvj8--thF3jkrqmjFIXwxVfodGy5wvrcirQ.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pWB1yepfYaQe4jcoRXaOJHhorxlMKkFAvxdConEUSPBaoa8twaHwfu3NRfu1ucKp5DVaCFHW0Q=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /web/db9dd30bae331521.strings.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/5264941c1fd4724f.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/b5a760f6899bcab7.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/16dcebf40d948459.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=67277430 HTTP/1.1Host: p.tvpixel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=16f0b498-eefa-47cf-a326-323f57f703e8
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=602852120 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBKAEAGcCEKOXe6-JOAgEKi3o0Sm8ZowFEgEBAQFWAWcJZ9xA0iMA_eMAAA&S=AQAAAhth_rGfrKWB-pb9_fjbU40
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=2038828220 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1F8dbe7cb35e549951839cd1728054432; XID=1F8dbe7cb35e549951839cd1728054432
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=5381141 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1F8dbe7cb35e549951839cd1728054432; XID=1F8dbe7cb35e549951839cd1728054432
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1343881488 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1F8dbe7cb35e549951839cd1728054432; XID=1F8dbe7cb35e549951839cd1728054432
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /generate_204?-IIqgQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/iSfnyV0BncYAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=PSZSmhCZxwQ; VISITOR_INFO1_LIVE=7RZnCN14g4g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSA%3D%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?9fXBHQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/FW-SBuJ17DUAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=PSZSmhCZxwQ; VISITOR_INFO1_LIVE=7RZnCN14g4g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSA%3D%3D
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1405467724 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1F8dbe7cb35e549951839cd1728054432; XID=1F8dbe7cb35e549951839cd1728054432
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=1296077705 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBKAEAGcCEKOXe6-JOAgEKi3o0Sm8ZowFEgEBAQFWAWcJZ9xA0iMA_eMAAA&S=AQAAAhth_rGfrKWB-pb9_fjbU40
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=660439770 HTTP/1.1Host: p.tvpixel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=16f0b498-eefa-47cf-a326-323f57f703e8
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/Untitled38_20240505102749-removebg-preview-150x150.png HTTP/1.1Host: celerysticksva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /_online?1728054441082 HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/design/DAGG6SqehUY/2TcrLDgpiqaFZRMvvzRRTA/view?embedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=IbtGtcr-ZaqpwjVszluOLA; cf_clearance=r3lIw72ISt3caqT6e3NHBHDAVf07kk.XE3s.JBTA240-1728054431-1.2.1.1-8v.vqho_mBykZWeW49FPMbOtZUFFveHUf3H6k339SlI8kBV5uzoKRC2BE08bzfmdYmytxjIfsqTA.DodVOfQ0GwQ0w5nz7.2.0_c0IRyV29zNZWzhRdQv0msOsukk4GSHVYrCVnkSvdIInrmWf9EGW58XusZXyGPil.w2zFjA.IwlYYj_j4fwM.uE9Dj_ER8HzFk1Vs4fDNCFR08yLK2m7ViVop38W9.pSLQp1ftLy_uTbi9Sanh7zQbcalLBj7FkOCJOXcLgXaS3ZaxOIG3b18xCsOSg764fWFzboTVT1EvIr7xZe9kjp9G8vCK2f13da6ci.Qg.OFck9YPCXjeMyHrXsJAGvn2SBo8lKsgIjxBJtPF.2KFyHfeL.QAzNQJ
Source: global traffic	HTTP traffic detected: GET /web/c54f49802fcd86bd.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/696cef482bcd0628.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/be34c0c45d782924.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:200/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FjMpyk%2FMAGG6PjMpyk%2F1%2Fp.png/watermark:F/width:188?csig=AAAAAAAAAAAAAAAAAAAAAKkx-xcMW4iUpK83V4u-oUhpJ9i7E-MTSxVgafegHSbn&exp=1728069677&osig=AAAAAAAAAAAAAAAAAAAAAAAL4I8I34wumUt3IMWJzSYYxoEqbr6cvgqvaZGgwq5Q&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /a0jWk/MAEKo0a0jWk/1/s.svg HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /9Gh80/MADtGo9Gh80/2/s2-1.svg HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:200/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FpDojQ%2FMAGG0OpDojQ%2F1%2Fp.png/watermark:F/width:171?csig=AAAAAAAAAAAAAAAAAAAAABT9STzoj7MVnOb-wGuoczlgxz-tOt4RBVPrd8WHOQXp&exp=1728071239&osig=AAAAAAAAAAAAAAAAAAAAAGC6SrlfL4zZj2CGw2M0dGrWTfw1zbScSPmvtg176piS&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /Sap7A/MADtGqSap7A/1/thumbnail.png HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /Sap7A/MADtGqSap7A/1/screen.svg HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:732/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FjMpyk%2FMAGG6PjMpyk%2F1%2Fp.png/watermark:F/width:689?csig=AAAAAAAAAAAAAAAAAAAAAJvISEcYvDX8gFUjuFRL0SEgRkGbybZp1N7Dkpv3dvAF&exp=1728069677&osig=AAAAAAAAAAAAAAAAAAAAAEbZQl7JkdBoHYpKslFqqqmR2ewBrhTh2qIWlEFAn_HF&signer=media-rpc&x-canva-quality=screen HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:200/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2Fw18eo%2FMAGGvpw18eo%2F1%2Fp.png/watermark:F/width:154?csig=AAAAAAAAAAAAAAAAAAAAALeq4IaTWFJzilrW0nWMdiVBhsA6PEhBThcEtYEgpovi&exp=1728069993&osig=AAAAAAAAAAAAAAAAAAAAANdObaHPVDargHk2Ot5lhBdzA-efEZy-YHi7TIOOj10u&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /yLubo/MADtGlyLubo/2/s2-1.svg HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/d305a840cf8a403f.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /yLubo/MADtGlyLubo/2/s.png HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:192/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FnBc7I%2FMAGGvfnBc7I%2F1%2Fp.png/watermark:F/width:199?csig=AAAAAAAAAAAAAAAAAAAAAJaFEIzZ4-quOQVtn9evqt982EKwyWcoEGKVqU3KaD1w&exp=1728071359&osig=AAAAAAAAAAAAAAAAAAAAAD6zqJ26xYQGRq5B50Ijd4VmpcTA4WWxtUq6CAERKKrh&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:432/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FXWYHM%2FMAGGveXWYHM%2F1%2Fp.png/watermark:F/width:268?csig=AAAAAAAAAAAAAAAAAAAAAKEERi17fdVcKfUrNpSAjbPcKfYHFPppfAegEcX-geA9&exp=1728069413&osig=AAAAAAAAAAAAAAAAAAAAAMr80A1_FwF8B_ob84TQ3SoLZKC_pwW1TULoXplIXirA&signer=media-rpc&x-canva-quality=screen HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/ae HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=IbtGtcr-ZaqpwjVszluOLA
Source: global traffic	HTTP traffic detected: GET /chunk-batch/91ad7f658c55222b.js+2a5654383629d09a.js+7e39b44fc8a680c5.js+ee7e6dcfa014bd3c.js+e2170d2c1a511090.js+24ad14e11d9733cb.js+e13cddd4eaa12c2d.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=IbtGtcr-ZaqpwjVszluOLA
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=IbtGtcr-ZaqpwjVszluOLA
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/8cd61440c89643af HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=IbtGtcr-ZaqpwjVszluOLA
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/8cd614410de0c425 HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=IbtGtcr-ZaqpwjVszluOLA
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/8cd614410fcd1906 HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=IbtGtcr-ZaqpwjVszluOLA
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=498278555 HTTP/1.1Host: p.tvpixel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=16f0b498-eefa-47cf-a326-323f57f703e8
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=813264806 HTTP/1.1Host: p.tvpixel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=16f0b498-eefa-47cf-a326-323f57f703e8
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=985172801 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBKAEAGcCEKOXe6-JOAgEKi3o0Sm8ZowFEgEBAQFWAWcJZ9xA0iMA_eMAAA&S=AQAAAhth_rGfrKWB-pb9_fjbU40
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=1171806581 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBKAEAGcCEKOXe6-JOAgEKi3o0Sm8ZowFEgEBAQFWAWcJZ9xA0iMA_eMAAA&S=AQAAAhth_rGfrKWB-pb9_fjbU40
Source: global traffic	HTTP traffic detected: GET /site-insights.js HTTP/1.1Host: cdn.metadata.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/iSfnyV0BncY/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/FW-SBuJ17DU/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/KZ9qBfv2Fvj8--thF3jkrqmjFIXwxVfodGy5wvrcirQ.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=I0YQfl-RQIJD5YBcGsiurB079AuxzHYKRB0QO3cM19TR43uOV9pS10QyQX6wzb6zxncWqvMmkPLNBMKotodHa5QlJ9QyrwRjligr5AUzu-qAuZaG5PNn1PQCQEQS7yzQileyaBomen02ilzykUWJ6DuxX9Z8IziTd9VPibQH1v9aLnR2SpM
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/config/1721.json HTTP/1.1Host: cdn.metadata.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:200/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FXWYHM%2FMAGGveXWYHM%2F1%2Fp.png/watermark:F/width:124?csig=AAAAAAAAAAAAAAAAAAAAAIFOTDf38xE-mTn_7Vz_HBRNgDN1PSD26bMJkyD5z-1F&exp=1728069413&osig=AAAAAAAAAAAAAAAAAAAAAEq-m9k3w43L1MCKvlizxsFqiMz84x_vlZQlSvyQaArs&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /9Gh80/MADtGo9Gh80/2/s.png HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /iFvoc/MAFPSLiFvoc/1/s-1.svg HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /gAmTQ/MADtGggAmTQ/2/s2-1.svg HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /gAmTQ/MADtGggAmTQ/2/s.png HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /29qjU/MADtGh29qjU/1/screen.svg HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/8cd614410def178c HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=IbtGtcr-ZaqpwjVszluOLA
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=IbtGtcr-ZaqpwjVszluOLA
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=67277430 HTTP/1.1Host: p.tvpixel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=16f0b498-eefa-47cf-a326-323f57f703e8
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:208/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2F8sSp8%2FMAGG6A8sSp8%2F1%2Fp.png/watermark:F/width:220?csig=AAAAAAAAAAAAAAAAAAAAAGT16ZA_Ay_494YVxgE6RT_yo4-TbJpwQXqb98hhQ38w&exp=1728069665&osig=AAAAAAAAAAAAAAAAAAAAAOKEnZNLjMjLQRWZVbzAJ__x6dSezF6gzJyuGumut-wj&signer=media-rpc&x-canva-quality=screen HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:364/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FEK8p4%2FMAGGvXEK8p4%2F1%2Fp.png/watermark:F/width:292?csig=AAAAAAAAAAAAAAAAAAAAAF9l9Tv24kxBE7et45oZCRhQ_yOTP5tKgGqW9YDoFzrv&exp=1728072277&osig=AAAAAAAAAAAAAAAAAAAAAKpuVNS8l2KrEb3y_QPEr7JbSP1MXjRPZ8EGwTXGC53Q&signer=media-rpc&x-canva-quality=screen HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /UEBEU/MADtGmUEBEU/1/screen.svg HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:189/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2F8sSp8%2FMAGG6A8sSp8%2F1%2Fp.png/watermark:F/width:200?csig=AAAAAAAAAAAAAAAAAAAAAEM3jLdKvxcr_Jc6S3OQhvLtN3hbWONSAu36ZOrgzNJj&exp=1728069665&osig=AAAAAAAAAAAAAAAAAAAAAMXhwIKM2AwBSfyp_xyu-AsOSQXTwLelgIq_RHnACTpT&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=602852120 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBKAEAGcCEKOXe6-JOAgEKi3o0Sm8ZowFEgEBAQFWAWcJZ9xA0iMA_eMAAA&S=AQAAAhth_rGfrKWB-pb9_fjbU40
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/image-resize/format:PNG/height:200/quality:100/uri:s3%3A%2F%2Fmedia-private.canva.com%2FEK8p4%2FMAGGvXEK8p4%2F1%2Fp.png/watermark:F/width:160?csig=AAAAAAAAAAAAAAAAAAAAAOYltg0WHdtIT-a3LMGPuTFu5Tk76U1KX27vDgTblT5x&exp=1728072277&osig=AAAAAAAAAAAAAAAAAAAAAGQT6PO3P3k9svxctbxEsjaOZAOiw6U9hAu0BZQEJAOT&signer=media-rpc&x-canva-quality=thumbnail HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=660439770 HTTP/1.1Host: p.tvpixel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=16f0b498-eefa-47cf-a326-323f57f703e8
Source: global traffic	HTTP traffic detected: GET /pWB1yepfYaQe4jcoRXaOJHhorxlMKkFAvxdConEUSPBaoa8twaHwfu3NRfu1ucKp5DVaCFHW0Q=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/Untitled38_20240505102749-removebg-preview-150x150.png HTTP/1.1Host: celerysticksva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=I0YQfl-RQIJD5YBcGsiurB079AuxzHYKRB0QO3cM19TR43uOV9pS10QyQX6wzb6zxncWqvMmkPLNBMKotodHa5QlJ9QyrwRjligr5AUzu-qAuZaG5PNn1PQCQEQS7yzQileyaBomen02ilzykUWJ6DuxX9Z8IziTd9VPibQH1v9aLnR2SpM
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=2038828220 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1F8dbe7cb35e549951839cd1728054432
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=5381141 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1F8dbe7cb35e549951839cd1728054432
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1343881488 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1F8dbe7cb35e549951839cd1728054432
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=1296077705 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBKAEAGcCEKOXe6-JOAgEKi3o0Sm8ZowFEgEBAQFWAWcJZ9xA0iMA_eMAAA&S=AQAAAhth_rGfrKWB-pb9_fjbU40
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1405467724 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1F8dbe7cb35e549951839cd1728054432
Source: global traffic	HTTP traffic detected: GET /GjvBA/MADsXzGjvBA/2/s2-1.svg HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /GjvBA/MADsXzGjvBA/2/s.png HTTP/1.1Host: media-public.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=bjgZD38nsolLpf9h1jRhIQ
Source: global traffic	HTTP traffic detected: GET /_online?1728054441082 HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=bjgZD38nsolLpf9h1jRhIQ
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=I0YQfl-RQIJD5YBcGsiurB079AuxzHYKRB0QO3cM19TR43uOV9pS10QyQX6wzb6zxncWqvMmkPLNBMKotodHa5QlJ9QyrwRjligr5AUzu-qAuZaG5PNn1PQCQEQS7yzQileyaBomen02ilzykUWJ6DuxX9Z8IziTd9VPibQH1v9aLnR2SpM
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=2038828220 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1F8dbe7cb35e549951839cd1728054432; XID=1F8dbe7cb35e549951839cd1728054432
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=I0YQfl-RQIJD5YBcGsiurB079AuxzHYKRB0QO3cM19TR43uOV9pS10QyQX6wzb6zxncWqvMmkPLNBMKotodHa5QlJ9QyrwRjligr5AUzu-qAuZaG5PNn1PQCQEQS7yzQileyaBomen02ilzykUWJ6DuxX9Z8IziTd9VPibQH1v9aLnR2SpM
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1405467724 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1F8dbe7cb35e549951839cd1728054432; XID=1F8dbe7cb35e549951839cd1728054432
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=I0YQfl-RQIJD5YBcGsiurB079AuxzHYKRB0QO3cM19TR43uOV9pS10QyQX6wzb6zxncWqvMmkPLNBMKotodHa5QlJ9QyrwRjligr5AUzu-qAuZaG5PNn1PQCQEQS7yzQileyaBomen02ilzykUWJ6DuxX9Z8IziTd9VPibQH1v9aLnR2SpM
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=IbtGtcr-ZaqpwjVszluOLA
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=I0YQfl-RQIJD5YBcGsiurB079AuxzHYKRB0QO3cM19TR43uOV9pS10QyQX6wzb6zxncWqvMmkPLNBMKotodHa5QlJ9QyrwRjligr5AUzu-qAuZaG5PNn1PQCQEQS7yzQileyaBomen02ilzykUWJ6DuxX9Z8IziTd9VPibQH1v9aLnR2SpM
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=I0YQfl-RQIJD5YBcGsiurB079AuxzHYKRB0QO3cM19TR43uOV9pS10QyQX6wzb6zxncWqvMmkPLNBMKotodHa5QlJ9QyrwRjligr5AUzu-qAuZaG5PNn1PQCQEQS7yzQileyaBomen02ilzykUWJ6DuxX9Z8IziTd9VPibQH1v9aLnR2SpM
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=shared HTTP/1.1Host: youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=shared HTTP/1.1Host: www.youtube.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/cssbin/www-onepick.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/_/ytmainappweb/_/ss/k=ytmainappweb.kevlar_base.n0gJH8moC0U.L.B1.O/am=AAAQKA/d=0/rs=AGKMywFZsyobjSMwHnjNHkL9KtYSXrhXVw HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/desktop_polymer.vflset/desktop_polymer.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/webcomponents-sd.vflset/webcomponents-sd.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/cssbin/www-main-desktop-watch-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/intersection-observer.min.vflset/intersection-observer.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/scheduler.vflset/scheduler.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/www-tampering.vflset/www-tampering.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/spf.vflset/spf.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/network.vflset/network.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/webcomponents-sd.vflset/webcomponents-sd.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/scheduler.vflset/scheduler.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/intersection-observer.min.vflset/intersection-observer.min.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=IbtGtcr-ZaqpwjVszluOLA
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/www-tampering.vflset/www-tampering.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/network.vflset/network.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/spf.vflset/spf.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/search/audio/failure.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=6070264540&ei=bgQwiD2FSnYGepERiPDdZGh&ip=69.83.14.54&id=o-AF9JLyqsNf7Aot0AaACqvbFDVMnSbRGK7McMK0gsIqjgK&itag=18&source=youtube&requiressl=yes&mh=X6&mm=005%2C26886%2C98836&mn=Xl4rr%2CWTCc5%2CsAAIR&ms=Xl4rr%2CWTCc5%2CsAAIR&mv=o&mvi=5&pl=67&ctier=L&initcwndbps=3221046&siu=5&spc=Z2DvTyFHCcW8HFTc_echrP4gezJTx6JmUmyaClhQhp3e&vprv=5&svpuc=5&mime=video%2Fmp4&ns=Y1nIJ334fK1XClRNVOtKJKgE&cnr=67&ratebypass=yes&dur=33881946&lmt=3680360561648365&mt=6070264540&fvip=3&c=WEB&txp=3221046&n=t_xkEbhxFeNrI2l3&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=ynJyEs1nK1kzutXl23MKKI8q3uUvt_GwQFGGzmVRnB1JGYyEDY96AvLKisgjOVTX4DTT3SDOh_BcWDBnjqmZQso1ZYo8rmlC6B894yY6eERK&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ynJyEs1nK1kzutXl23MKKI8q3uUvt_GwQFGGzmVRnB1JGYyEDY96AvLKisgjOVTX4DTT3SDOh_BcWDBnjqmZQso1ZYo8rmlC6B894yY6eERK HTTP/1.1Host: rr2---sn-aigl6ney.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=6070264540&ei=bgQwiD2FSnYGepERiPDdZGh&ip=69.83.14.54&id=o-AF9JLyqsNf7Aot0AaACqvbFDVMnSbRGK7McMK0gsIqjgK&itag=18&source=youtube&requiressl=yes&mh=X6&mm=005%2C26886%2C98836&mn=Xl4rr%2CWTCc5%2CsAAIR&ms=Xl4rr%2CWTCc5%2CsAAIR&mv=o&mvi=5&pl=67&initcwndbps=3221046&siu=5&spc=Z2DvTyFHCcW8HFTc_echrP4gezJTx6JmUmyaClhQhp3e&vprv=5&svpuc=5&mime=video%2Fmp4&ns=Y1nIJ334fK1XClRNVOtKJKgE&cnr=67&ratebypass=yes&dur=33881946&lmt=3680360561648365&mt=6070264540&fvip=3&c=WEB&txp=3221046&n=t_xkEbhxFeNrI2l3&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=ynJyEs1nK1kzutXl23MKKI8q3uUvt_GwQFGGzmVRnB1JGYyEDY96AvLKisgjOVTX4DTT3SDOh_BcWDBnjqmZQso1ZYo8rmlC6B894yY6eERK&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ynJyEs1nK1kzutXl23MKKI8q3uUvt_GwQFGGzmVRnB1JGYyEDY96AvLKisgjOVTX4DTT3SDOh_BcWDBnjqmZQso1ZYo8rmlC6B894yY6eERK HTTP/1.1Host: rr2---sn-aigl6ney.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1QwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/FW-SBuJ17DU/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCGI2tEgTIp74QpqAcBCsJqYNZN_w HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/iSfnyV0BncY/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDH82vr4cxvzIu5BO187Y6738zpxw HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtxJKp59oRaZT10-YLlCKDnZRIEZGrsJqE36T2UCLBVBh5qmJ8wRAs6lzMAX9wvy9edi14W1ww8NWOtojBHWMgWNYdN6Mw&req_ts=1728054452&pg=MainAppBootstrap%3APlaylists&az=1&sigh=AB9vU43-8XgD_sAsgWhdQ6ngR4YNxcBJ-g HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=I0YQfl-RQIJD5YBcGsiurB079AuxzHYKRB0QO3cM19TR43uOV9pS10QyQX6wzb6zxncWqvMmkPLNBMKotodHa5QlJ9QyrwRjligr5AUzu-qAuZaG5PNn1PQCQEQS7yzQileyaBomen02ilzykUWJ6DuxX9Z8IziTd9VPibQH1v9aLnR2SpM
Source: global traffic	HTTP traffic detected: GET /vi/FW-SBuJ17DU/hqdefault.jpg?sqp=-oaymwEXCNACELwBSFryq4qpAwkIARUAAIhCGAE=&rs=AOn4CLD_GCljnJ0FJGMQv6LxCgNzMPxB6w HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: youtube.comConnection: keep-alivePragma: no-cacheCache-Control: no-cachesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pWB1yepfYaQe4jcoRXaOJHhorxlMKkFAvxdConEUSPBaoa8twaHwfu3NRfu1ucKp5DVaCFHW0Q=s48-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/search/audio/no_input.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/search/audio/open.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/search/audio/success.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/desktop_polymer.vflset/desktop_polymer.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1QwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=sharedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=6070264540&ei=bgQwiD2FSnYGepERiPDdZGh&ip=69.83.14.54&id=o-AF9JLyqsNf7Aot0AaACqvbFDVMnSbRGK7McMK0gsIqjgK&itag=18&source=youtube&requiressl=yes&mh=X6&mm=005%2C26886%2C98836&mn=Xl4rr%2CWTCc5%2CsAAIR&ms=Xl4rr%2CWTCc5%2CsAAIR&mv=o&mvi=5&pl=67&ctier=L&initcwndbps=3221046&siu=5&spc=Z2DvTyFHCcW8HFTc_echrP4gezJTx6JmUmyaClhQhp3e&vprv=5&svpuc=5&mime=video%2Fmp4&ns=Y1nIJ334fK1XClRNVOtKJKgE&cnr=67&ratebypass=yes&dur=33881946&lmt=3680360561648365&mt=6070264540&fvip=3&c=WEB&txp=3221046&n=t_xkEbhxFeNrI2l3&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=ynJyEs1nK1kzutXl23MKKI8q3uUvt_GwQFGGzmVRnB1JGYyEDY96AvLKisgjOVTX4DTT3SDOh_BcWDBnjqmZQso1ZYo8rmlC6B894yY6eERK&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ynJyEs1nK1kzutXl23MKKI8q3uUvt_GwQFGGzmVRnB1JGYyEDY96AvLKisgjOVTX4DTT3SDOh_BcWDBnjqmZQso1ZYo8rmlC6B894yY6eERK HTTP/1.1Host: rr2---sn-aigl6ney.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=6070264540&ei=bgQwiD2FSnYGepERiPDdZGh&ip=69.83.14.54&id=o-AF9JLyqsNf7Aot0AaACqvbFDVMnSbRGK7McMK0gsIqjgK&itag=18&source=youtube&requiressl=yes&mh=X6&mm=005%2C26886%2C98836&mn=Xl4rr%2CWTCc5%2CsAAIR&ms=Xl4rr%2CWTCc5%2CsAAIR&mv=o&mvi=5&pl=67&initcwndbps=3221046&siu=5&spc=Z2DvTyFHCcW8HFTc_echrP4gezJTx6JmUmyaClhQhp3e&vprv=5&svpuc=5&mime=video%2Fmp4&ns=Y1nIJ334fK1XClRNVOtKJKgE&cnr=67&ratebypass=yes&dur=33881946&lmt=3680360561648365&mt=6070264540&fvip=3&c=WEB&txp=3221046&n=t_xkEbhxFeNrI2l3&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=ynJyEs1nK1kzutXl23MKKI8q3uUvt_GwQFGGzmVRnB1JGYyEDY96AvLKisgjOVTX4DTT3SDOh_BcWDBnjqmZQso1ZYo8rmlC6B894yY6eERK&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ynJyEs1nK1kzutXl23MKKI8q3uUvt_GwQFGGzmVRnB1JGYyEDY96AvLKisgjOVTX4DTT3SDOh_BcWDBnjqmZQso1ZYo8rmlC6B894yY6eERK HTTP/1.1Host: rr2---sn-aigl6ney.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=6070264540&ei=bgQwiD2FSnYGepERiPDdZGh&ip=69.83.14.54&id=o-AF9JLyqsNf7Aot0AaACqvbFDVMnSbRGK7McMK0gsIqjgK&itag=18&source=youtube&requiressl=yes&mh=X6&mm=005%2C26886%2C98836&mn=Xl4rr%2CWTCc5%2CsAAIR&ms=Xl4rr%2CWTCc5%2CsAAIR&mv=o&mvi=5&pl=67&ctier=L&initcwndbps=3221046&siu=5&spc=Z2DvTyFHCcW8HFTc_echrP4gezJTx6JmUmyaClhQhp3e&vprv=5&svpuc=5&mime=video%2Fmp4&ns=Y1nIJ334fK1XClRNVOtKJKgE&cnr=67&ratebypass=yes&dur=33881946&lmt=3680360561648365&mt=6070264540&fvip=3&c=WEB&txp=3221046&n=t_xkEbhxFeNrI2l3&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=ynJyEs1nK1kzutXl23MKKI8q3uUvt_GwQFGGzmVRnB1JGYyEDY96AvLKisgjOVTX4DTT3SDOh_BcWDBnjqmZQso1ZYo8rmlC6B894yY6eERK&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ynJyEs1nK1kzutXl23MKKI8q3uUvt_GwQFGGzmVRnB1JGYyEDY96AvLKisgjOVTX4DTT3SDOh_BcWDBnjqmZQso1ZYo8rmlC6B894yY6eERK HTTP/1.1Host: rr2---sn-aigl6ney.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=6070264540&ei=bgQwiD2FSnYGepERiPDdZGh&ip=69.83.14.54&id=o-AF9JLyqsNf7Aot0AaACqvbFDVMnSbRGK7McMK0gsIqjgK&itag=18&source=youtube&requiressl=yes&mh=X6&mm=005%2C26886%2C98836&mn=Xl4rr%2CWTCc5%2CsAAIR&ms=Xl4rr%2CWTCc5%2CsAAIR&mv=o&mvi=5&pl=67&initcwndbps=3221046&siu=5&spc=Z2DvTyFHCcW8HFTc_echrP4gezJTx6JmUmyaClhQhp3e&vprv=5&svpuc=5&mime=video%2Fmp4&ns=Y1nIJ334fK1XClRNVOtKJKgE&cnr=67&ratebypass=yes&dur=33881946&lmt=3680360561648365&mt=6070264540&fvip=3&c=WEB&txp=3221046&n=t_xkEbhxFeNrI2l3&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=ynJyEs1nK1kzutXl23MKKI8q3uUvt_GwQFGGzmVRnB1JGYyEDY96AvLKisgjOVTX4DTT3SDOh_BcWDBnjqmZQso1ZYo8rmlC6B894yY6eERK&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ynJyEs1nK1kzutXl23MKKI8q3uUvt_GwQFGGzmVRnB1JGYyEDY96AvLKisgjOVTX4DTT3SDOh_BcWDBnjqmZQso1ZYo8rmlC6B894yY6eERK HTTP/1.1Host: rr2---sn-aigl6ney.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/serviceworker-kevlar-appshell.vflset/serviceworker-kevlar-appshell.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/guide?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtxJKp59oRaZT10-YLlCKDnZRIEZGrsJqE36T2UCLBVBh5qmJ8wRAs6lzMAX9wvy9edi14W1ww8NWOtojBHWMgWNYdN6Mw&req_ts=1728054452&pg=MainAppBootstrap%3APlaylists&az=1&sigh=AB9vU43-8XgD_sAsgWhdQ6ngR4YNxcBJ-g HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=I0YQfl-RQIJD5YBcGsiurB079AuxzHYKRB0QO3cM19TR43uOV9pS10QyQX6wzb6zxncWqvMmkPLNBMKotodHa5QlJ9QyrwRjligr5AUzu-qAuZaG5PNn1PQCQEQS7yzQileyaBomen02ilzykUWJ6DuxX9Z8IziTd9VPibQH1v9aLnR2SpM
Source: global traffic	HTTP traffic detected: GET /pWB1yepfYaQe4jcoRXaOJHhorxlMKkFAvxdConEUSPBaoa8twaHwfu3NRfu1ucKp5DVaCFHW0Q=s48-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/iSfnyV0BncY/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDH82vr4cxvzIu5BO187Y6738zpxw HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/FW-SBuJ17DU/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCGI2tEgTIp74QpqAcBCsJqYNZN_w HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/FW-SBuJ17DU/hqdefault.jpg?sqp=-oaymwEXCNACELwBSFryq4qpAwkIARUAAIhCGAE=&rs=AOn4CLD_GCljnJ0FJGMQv6LxCgNzMPxB6w HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/browse?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=qRmxMgX0VZ2XETvJJDCsb8Bc9f2yjIcYbIVqJYh8QpyhYN4H2JswLwi1w9zUlycy3ih6Us49KwnjxYp6MWjuQ1dF9I7PYn43OQSz9KsNPTOq3sgTG7URrnxmjhjEVls3UjWqQqkHo9NWBYTJJp_2uHJeBNDoJIDQL6A2b3FxfPci_IRlA-oagGyGtT0
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=qRmxMgX0VZ2XETvJJDCsb8Bc9f2yjIcYbIVqJYh8QpyhYN4H2JswLwi1w9zUlycy3ih6Us49KwnjxYp6MWjuQ1dF9I7PYn43OQSz9KsNPTOq3sgTG7URrnxmjhjEVls3UjWqQqkHo9NWBYTJJp_2uHJeBNDoJIDQL6A2b3FxfPci_IRlA-oagGyGtT0
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /app_shell HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/cssbin/www-main-desktop-home-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/jsbin/www-searchbox.vflset/www-searchbox.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/captions.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/endscreen.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /js/th/KZ9qBfv2Fvj8--thF3jkrqmjFIXwxVfodGy5wvrcirQ.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=qRmxMgX0VZ2XETvJJDCsb8Bc9f2yjIcYbIVqJYh8QpyhYN4H2JswLwi1w9zUlycy3ih6Us49KwnjxYp6MWjuQ1dF9I7PYn43OQSz9KsNPTOq3sgTG7URrnxmjhjEVls3UjWqQqkHo9NWBYTJJp_2uHJeBNDoJIDQL6A2b3FxfPci_IRlA-oagGyGtT0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=qRmxMgX0VZ2XETvJJDCsb8Bc9f2yjIcYbIVqJYh8QpyhYN4H2JswLwi1w9zUlycy3ih6Us49KwnjxYp6MWjuQ1dF9I7PYn43OQSz9KsNPTOq3sgTG7URrnxmjhjEVls3UjWqQqkHo9NWBYTJJp_2uHJeBNDoJIDQL6A2b3FxfPci_IRlA-oagGyGtT0
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/miniplayer.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/offline.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1QwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: celerysticksva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /wp-includes/blocks/navigation/style.min.css?ver=6.6.2 HTTP/1.1Host: celerysticksva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=qRmxMgX0VZ2XETvJJDCsb8Bc9f2yjIcYbIVqJYh8QpyhYN4H2JswLwi1w9zUlycy3ih6Us49KwnjxYp6MWjuQ1dF9I7PYn43OQSz9KsNPTOq3sgTG7URrnxmjhjEVls3UjWqQqkHo9NWBYTJJp_2uHJeBNDoJIDQL6A2b3FxfPci_IRlA-oagGyGtT0
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.css?ver=2.4.1 HTTP/1.1Host: celerysticksva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.js?ver=2.4.1 HTTP/1.1Host: celerysticksva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /wp-includes/blocks/navigation/view.min.js?ver=6.6.2 HTTP/1.1Host: celerysticksva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://celerysticksva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/interactivity.min.js?ver=6.6.2 HTTP/1.1Host: celerysticksva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://celerysticksva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/Untitled38_20240505102749-removebg-preview.png HTTP/1.1Host: celerysticksva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/offline.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/desktop/72b8c307/img/favicon.ico HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.js?ver=2.4.1 HTTP/1.1Host: celerysticksva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /design/DAGG6U9mKKc/nm6DM_OA9EWr4TduD9lCVA/view?embed HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=bjgZD38nsolLpf9h1jRhIQ
Source: global traffic	HTTP traffic detected: GET /design/DAGG6YPVj0I/WIrqiu3tkmQpk5Au_OFXeA/view?embed HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=bjgZD38nsolLpf9h1jRhIQ
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=qRmxMgX0VZ2XETvJJDCsb8Bc9f2yjIcYbIVqJYh8QpyhYN4H2JswLwi1w9zUlycy3ih6Us49KwnjxYp6MWjuQ1dF9I7PYn43OQSz9KsNPTOq3sgTG7URrnxmjhjEVls3UjWqQqkHo9NWBYTJJp_2uHJeBNDoJIDQL6A2b3FxfPci_IRlA-oagGyGtT0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt,wght.woff2 HTTP/1.1Host: celerysticksva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://celerysticksva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: celerysticksva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/interactivity.min.js?ver=6.6.2 HTTP/1.1Host: celerysticksva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /wp-includes/blocks/navigation/view.min.js?ver=6.6.2 HTTP/1.1Host: celerysticksva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /design/DAGG6SqehUY/2TcrLDgpiqaFZRMvvzRRTA/view?embed HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=bjgZD38nsolLpf9h1jRhIQ
Source: global traffic	HTTP traffic detected: GET /design/DAGG6Q3459s/8FBNjjeoexSjUxqjC7x4CQ/view?embed HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; _cfuvid=HPqBoPdQ4XXfJdBlpzy3joQAwX1ThUDXCjRxvyOQOFc-1728054420813-0.0.1.1-604800000; ASI=01J9C13Z4PD3RPXEF5P6YPJV8Q; CDI=f222549a-c391-4ba5-b399-4fd776bf6d1b; CPA=cnvanBECENgFpXB8Gk9tHGrThAS7MsFs3Z-j8u0BmuTJbddUEcz1b1ZqCG1Af6gd2bc1vh2j7BHSmNLZbbsqY1dinA0pXOxrt00dMTHQkJewMXAl0WiX1wXEZ-SqvI0-RrNrJdrFzetC3CHMNnbGt-QUDpyhFh0p8iTyz4NYrtgEOO7rbBqacb9mGn2t_m6qsH9Y7Qvzrk1iKUYzgwvX79ymW_nEVFBxxatJ2p2R8ubwq3AdWpLPIP8uRRTSakQiH4K4wcE06lhw8ldoyBZ9yOobumW2W6UvSx5IntPQJPTApZtl42RCgTPKam-3RZVyH1YezHS15zGxVXVqZymyRBiWoR0LUiqrYrzyht7YAgN6BwDiBQzZo3GX7ad8kqKGSY0hDEZCx2H3tPtbw3NcvzdkF-XyvvQV5Ebj2r__G8iqXWtDvtyoKedfbea98; CCK=bjgZD38nsolLpf9h1jRhIQ
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=OWsNWBfkCq0; VISITOR_INFO1_LIVE=FCMOk5HZHz4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgSQ%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.6.2 HTTP/1.1Host: celerysticksva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://celerysticksva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000

Source: chromecache_672.2.dr	String found in binary or memory: "&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: "&sig="+Lc+"&ad_cpn=[AD_CPN]&id="+Ti+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+ca},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Ti+"&avm="+ca+"&dc_pubid="+ca+"&dc_exteid="+Zb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: "&uga="+yb+"&vm="+uf},videostatsDelayplayUrl:{baseUrl:"https://s.youtube.com/api/stats/delayplay?cl="+Ab+"&docid="+y+"&ei="+V+"&feature="+m+"&fexp="+lf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Wd+"&el="+Ug+"&len="+rc+"&of="+cc+"&uga="+yb+"&vm="+uf},videostatsWatchtimeUrl:{baseUrl:"https://s.youtube.com/api/stats/watchtime?cl="+Ab+"&docid="+y+"&ei="+V+"&feature="+m+"&fexp="+lf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: "=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Vc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(MI.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+fg,MI),trackingParams:Va+"="}},popupType:"DIALOG"}},trackingParams:Va+"="}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: "="},trackingParams:Va+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:Mo},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],layoutId:"1ID7Gdwk2vV7OZ1A"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: "="}},hoverText:{runs:[{text:na}]},trackingParams:Va+"="}},adVideoId:Fd,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=video_companion_reshow_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Mo},isContentVideoCompanion:!0,associatedCompositePlayerBytesLayoutId:ye}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Ti}}}],adBreakHeartbeatParams:"Q0FBJTNE",frameworkUpdates:{entityBatchUpdate:{mutations:[{entityKey:Fc, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+fg,gga),trackingParams:Va+"="}},popupType:"DIALOG"}},trackingParams:Va+"="}},hoverText:{runs:[{text:Hn}]},trackingParams:Va+"="}},adVideoId:Fd,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Ti},associatedCompositePlayerBytesLayoutId:ye}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+fg,p0),trackingParams:Va+"="}},popupType:"DIALOG"}},icon:{iconType:"INFO_OUTLINE"},trackingParams:Va+"="}},hoverText:{runs:[{text:fg}]},trackingParams:Va+"="}},flyoutCtaRenderer:{flyoutCtaRenderer:{image:{thumbnail:{thumbnails:[{url:"https://yt3.ggpht.com/ytc/"+Si+"=s176-c-k-c0x00ffffff-no-rj"}]},trackingParams:Va+"="},headline:{text:fg,isTemplated:!1,trackingParams:Va+"="},description:{text:Bs, equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr, chromecache_634.2.dr	String found in binary or memory: (g.sk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.sk(c,"www.youtube.com"),d=c.toString()):(c=nwa(d),xE(c)&&(d=c));c=new g.kM(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr, chromecache_634.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=wE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|wE(this.nf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=xs(d,h,MJa):h&&(d="embedded");this.Ja=d;Vqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(NJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Vb(NJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_554.2.dr	String found in binary or memory: ;var Q=A.window,R,S,T=(Q==null?void 0:(R=Q.yt)==null?void 0:R.config_)\|\|(Q==null?void 0:(S=Q.ytcfg)==null?void 0:S.data_)\|\|{};B("yt.config_",T);var U=Object.freeze("document.appendChild document.body.appendChild document.querySelector document.querySelectorAll history.back history.go".split(" ")),V=Object.freeze("fonts.googleapis.com s0.2mdn.net securepubads.g.doubleclick.net ssl.google-analytics.com static.doubleclick.net www.google-analytics.com www.googletagservices.com www.youtube.com youtube.com".split(" ")),W=Object.freeze(["pkedcjkdefgpdelpbcmbmeomcjbeemfm","fjhoaacokmgbjemoflkofnenfaiekifl","enhhojjnijigcajfphajepfemndkmdlo"]),X= equals www.youtube.com (Youtube)
Source: chromecache_865.2.dr	String found in binary or memory: <li style="color: #ffffff; background-color: #3962e3; " class="wp-social-link wp-social-link-youtube wp-block-social-link"><a href="https://www.youtube.com/@Celery_Stick" class="wp-block-social-link-anchor"><svg width="24" height="24" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false"><path d="M21.8,8.001c0,0-0.195-1.378-0.795-1.985c-0.76-0.797-1.613-0.801-2.004-0.847c-2.799-0.202-6.997-0.202-6.997-0.202 h-0.009c0,0-4.198,0-6.997,0.202C4.608,5.216,3.756,5.22,2.995,6.016C2.395,6.623,2.2,8.001,2.2,8.001S2,9.62,2,11.238v1.517 c0,1.618,0.2,3.237,0.2,3.237s0.195,1.378,0.795,1.985c0.761,0.797,1.76,0.771,2.205,0.855c1.6,0.153,6.8,0.201,6.8,0.201 s4.203-0.006,7.001-0.209c0.391-0.047,1.243-0.051,2.004-0.847c0.6-0.607,0.795-1.985,0.795-1.985s0.2-1.618,0.2-3.237v-1.517 C22,9.62,21.8,8.001,21.8,8.001z M9.935,14.594l-0.001-5.62l5.404,2.82L9.935,14.594z"></path></svg><span class="wp-block-social-link-label screen-reader-text">YouTube</span></a></li></ul> equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: Ab+";dc_dbm_token="+w+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ca+";ord="+Ab+";dc_rui="+ca+";dc_exteid="+Zb+";dc_av="+ca+";dc_sk="+ca+";dc_ctype="+yb+";dc_pubid="+ca+";dc_btype=3?gclid="+ib+"&ase=2"},{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=video_card_endcap_action_headline_click"}],commandMetadata:{webCommandMetadata:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: Ab+";dc_trk_cid="+Ab+";dc_dbm_token="+w+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ca+";ord="+Ab+";dc_rui="+ca+";dc_exteid="+be+";dc_av="+ca+";dc_sk="+ca+";dc_ctype="+yb+";dc_pubid="+ca+";dc_btype=3?gclid="+ib+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}],fullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=adfullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+ca+"&ns="+ca+"&event="+ca+"&device="+ca+"&content_v="+y+"&el="+Ug+"&ei="+V+"&devicever="+c+"&bti="+Gb+"&format="+Rd+"&break_type="+ca+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+ca+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+Xb+"&slot_pos="+ca+"&slot_len="+ca+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+sc+"&ad_len="+Uc+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: Dr(Ysb);Dr(Zsb);function atb(a){var b=a.animatedIconType;var c=a.active;var d=a.themeOverride;var e=a.animationRef===void 0?{}:a.animationRef;var g=a.staticIconFn;var k=function(){a:{var N=b();var O=d==null?void 0:d(),V;O=(O==null?void 0:O.useDarkTheme)\|\|((V=Tl().resolve(Sl(rB)))==null?void 0:V());V=z("enable_cairo_refresh_signature_moments_web");switch(N){case"LIKE":N="animated_like_icon_";N=V?N+(O?"dark_v4":"light_v4"):N+(O?"v2_dark":"v2_light");N={lottiePlayerProps:{animationConfig:{name:N,path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: Fd+"&aqi="+V+"&ad_rmp="+ca+"&sli="+ca}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: IE.prototype.getUrl=function(a,b){return"https://www.gstatic.com/youtube/img/icons/web/"+b.style+"/"+a+"/v"+b.version+"/"+b.size+"px.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_634.2.dr	String found in binary or memory: Jo.prototype.Ia=function(){return this.C};var pna=(new Date).getTime();var ula="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),vla=/\bocr\b/;var xla=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var abb=0,bbb=0,cbb=0;var So;g.Lo=null;g.No=!1;g.To=1;So=Symbol("SIGNAL");g.Uo={version:0,r_:0,Qm:!1,fg:void 0,Ry:void 0,Dn:void 0,KL:0,ij:void 0,Ru:void 0,ZE:!1,oP:!1,O1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_827.2.dr	String found in binary or memory: M:500,ea:500,Gf:!1,icon:wN},{name:"Gfycat",vf:["https?://.gfycat.com/","https?://gfycat.com/"].map(Kx),M:960,ea:540,Gf:!1,icon:wN},{name:"Twitter",vf:["https?://twitter.com/","https?://www.twitter.com/"].map(Kx),M:270,ea:440,Gf:!1,icon:wN},{name:"Facebook",vf:["https?://facebook.com/","https?://www.facebook.com/"].map(Kx),M:500,ea:500,Gf:!1,icon:wN},{name:"Tumblr",vf:["https?://.tumblr.com/"].map(Kx),M:510,ea:450,Gf:!1,icon:wN},{name:"Pinterest",vf:["https?://pinterest.com","https?://www.pinterest.com*"].map(Kx), equals www.facebook.com (Facebook)
Source: chromecache_827.2.dr	String found in binary or memory: M:500,ea:500,Gf:!1,icon:wN},{name:"Gfycat",vf:["https?://.gfycat.com/","https?://gfycat.com/"].map(Kx),M:960,ea:540,Gf:!1,icon:wN},{name:"Twitter",vf:["https?://twitter.com/","https?://www.twitter.com/"].map(Kx),M:270,ea:440,Gf:!1,icon:wN},{name:"Facebook",vf:["https?://facebook.com/","https?://www.facebook.com/"].map(Kx),M:500,ea:500,Gf:!1,icon:wN},{name:"Tumblr",vf:["https?://.tumblr.com/"].map(Kx),M:510,ea:450,Gf:!1,icon:wN},{name:"Pinterest",vf:["https?://pinterest.com","https?://www.pinterest.com*"].map(Kx), equals www.twitter.com (Twitter)
Source: chromecache_810.2.dr, chromecache_547.2.dr, chromecache_726.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: N+".json",loop:!1,autoplay:!1,rendererSettings:{viewBoxOnly:!0,className:"animated-like-icon"}}},totalFrames:V?60:119,lazyLoad:!0};break a;case"NOTIFICATION_BELL":N={lottiePlayerProps:{animationConfig:{name:O?"notification_bell_dark":"notification_bell_light",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_"+(O?"dark":"light")+".json",loop:!1,autoplay:!1,rendererSettings:{className:"animated-subscribe-icon"}}},totalFrames:79,lazyLoad:!1};break a;}N=void 0}return N}, equals www.youtube.com (Youtube)
Source: chromecache_634.2.dr	String found in binary or memory: RIa=function(a,b){if(!a.j["0"]){var c=new iG("0","fakesb",{video:new eG(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new CN(new g.kM("http://www.youtube.com/videoplayback"),c,"fake"):new TN(new g.kM("http://www.youtube.com/videoplayback"),c,new nN(0,0),new nN(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: Ti+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Ti+"&dc_pubid="+ca+"&dc_exteid="+Zb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: Wd+"&el="+Ug+"&len="+rc+"&of="+cc+"&uga="+yb+"&vm="+uf},ptrackingUrl:{baseUrl:"https://www.youtube.com/ptracking?ei="+V+"&m="+Bb+"&oid="+cc+"&plid="+N+"&pltype="+Bs+"&ptchn="+cc+"&ptk="+H+"&video_id="+y},qoeUrl:{baseUrl:"https://s.youtube.com/api/stats/qoe?cl="+Ab+"&docid="+y+"&ei="+V+"&event="+Gn+"&feature="+m+"&fexp="+lf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Wd},atrUrl:{baseUrl:"https://s.youtube.com/api/stats/atr?docid="+y+"&ei="+V+"&feature="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: Zb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewFullyViewableAudibleHalfDurationPings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: ["NOTIFICATION_BELL",{name:"notification_bell_light",nameDarkTheme:"notification_bell_dark",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_light.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_dark.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"NOTIFICATION_BELL",totalFrames:79,lazyLoad:!1}]]);var Xlb=ka(["https://www.gstatic.com/external_hosted/lottie/lottie_light.js"]),Ylb=Zg(Xlb),IA;function Zlb(){return IA?IA:window.lottie?IA=Promise.resolve(window.lottie):IA=new Promise(function(a,b){var c=document.createElement("script");c.addEventListener("load",function(){a(lottie)}); equals www.youtube.com (Youtube)
Source: chromecache_634.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Vi(a,{hl:d})),this.Dd(DY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Dd(g.BY(a.errorMessage)):this.Dd(DY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Vi(c, equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr, chromecache_634.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,RF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Gd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Wt)(),uT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Gd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_634.2.dr	String found in binary or memory: a.ismb);this.cq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=GP(this.Ca)\|\|"www.youtube.com")):r="video.google.com";this.Tn=r;HP(this,a,!0);this.La=new bP;g.P(this,this.La);q=b?b.innertubeApiKey:zs("",a.innertube_api_key);p=b?b.innertubeApiVersion:zs("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:zs("",a.innertube_context_client_version);q=g.nr("INNERTUBE_API_KEY")\|\|q;p=g.nr("INNERTUBE_API_VERSION")\|\|p;l=g.nr("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=VO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"LigQMVuP3nAx3LwQfSGhgYmqsEWANi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"65",offsetEndMilliseconds:"30"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"51",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"LigQMVuP3nAx3LwQfSGhgYmqsEWANi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_START",adTimeOffset:{offsetStartMilliseconds:"330100",offsetEndMilliseconds:"594666"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"0",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"by"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"73",offsetEndMilliseconds:"64"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"67",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"cn"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"59",offsetEndMilliseconds:"8"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"26",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"fp"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"66",offsetEndMilliseconds:"35"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"98",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"go"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"14",offsetEndMilliseconds:"87"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"79",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"nh"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_END",adTimeOffset:{offsetStartMilliseconds:"25",offsetEndMilliseconds:"13"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"32",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"nl"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"50",offsetEndMilliseconds:"67"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"96",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"ov"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"13",offsetEndMilliseconds:"2"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"52",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"ti"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"47",offsetEndMilliseconds:"84"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"uc"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"10",offsetEndMilliseconds:"zo"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"22",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wg"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"56",offsetEndMilliseconds:"86"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"25",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"34",offsetEndMilliseconds:"12"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"27",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wz"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"84",offsetEndMilliseconds:"90"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"92",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: animationConfig:{name:"animated-actions-background",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_container_"+($sb()?"dark":"light")+(z("enable_cairo_refresh_signature_moments_web")?"_v5":"")+".json"}}})}),d),Co(a,function(){return F(Zsb,{lottiePlayerProps:{animationRef:c, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: animationConfig:{name:"animated-actions-foreground",autoplay:!1,loop:!1,path:z("enable_cairo_refresh_signature_moments_web")?"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkles_"+($sb()?"dark":"light")+"_v4.json":"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkle_"+($sb()?"dark":"light")+".json"}}})}))} equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: b.includes("switchScreenSizeHack")\|\|b.includes("yt_main_big_banner.js")\|\|b.includes("YouTubeCenter.js")\|\|b.includes("/mytube.js")\|\|b.includes("JSON.parseWrapper")\|\|b.includes("/inj_js/common.js")\|\|b.includes("firebug-lite")\|\|b.includes(".repl.co/")\|\|b.includes("linkfix")\|\|a.message.includes("Access is denied for this document")&&b.includes("<anonymous>")\|\|a.message.includes("cannot be created in a document with origin 'https://www.youtube.com' and URL 'about:blank'")&&b.includes("<anonymous>"))return!0; equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: b:{d=/api\/stats\/ads/;var p,q,r,w;e=(m=ix().objectRepresentation.adPlacements)==null?void 0:(p=m[0])==null?void 0:(q=p.adPlacementRenderer)==null?void 0:(r=q.renderer)==null?void 0:(w=r.linearAdSequenceRenderer)==null?void 0:w.linearAds;if(e!=null&&e.length&&(m=A(e[0],qVa))&&(m=m.pings,m!=null&&m.impressionPings))for(p=[].concat(oa(m.impressionPings)),m.progressPings&&(p=[].concat(oa(p),oa(m.progressPings))),m=h(p),p=m.next();!p.done;p=m.next())if(p=p.value,p.baseUrl&&d.test(p.baseUrl)){m=p.baseUrl.replace("https://www.youtube.com", equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr, chromecache_634.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.LP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.RR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.OE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: c+"&m_pos_ms="+Rd}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Sx}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:Rd,offsetEndMilliseconds:Rd},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+$b+"&token=ALHj"+W+"&index="+ca+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: c+"&m_pos_ms="+Rd}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Ug}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_END",adTimeOffset:{offsetStartMilliseconds:yb,offsetEndMilliseconds:yb},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+yb+"&token=ALHj"+W+"&index="+ca+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: c+"&m_pos_ms="+Rd}},adSlotLoggingData:{serializedSlotAdServingDataEntry:ya}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:Rd,offsetEndMilliseconds:Rd},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+$b+"&token=ALHj"+W+"&index="+ca+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: c+"&m_pos_ms="+Rd}},adSlotLoggingData:{serializedSlotAdServingDataEntry:ye}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:Rd,offsetEndMilliseconds:yb},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+$b+"&token=ALHj"+W+"&index="+ca+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: ca+"&cid="+da+"&ad_cpn=%5BAD_CPN%5D&sig="+U+"&adurl="+mf+"&label=video_click_to_advertiser_site&ctype="+$b+"&ms=[CLICK_MS]",target:"TARGET_NEW_WINDOW",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}},trackingParams:Va+"=",backgroundImage:{thumbnail:{thumbnails:[{url:""}]},trackingParams:Va+"="},abandonCommands:{commands:[{clickTrackingParams:Vc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],thirdQuartilePings:[{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+Rd+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],completePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=videoplaytime100&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],unmutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=adunmute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+Rd+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],unmutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=adunmute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+Rd+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pausePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pingingEndpoint:{hack:!0}}]},adRendererCommands:{impressionCommand:{clickTrackingParams:Vc,commandExecutorCommand:{commands:[{clickTrackingParams:Vc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=video_card_endcap_impression"}],pingingEndpoint:{hack:!0}}]}}},skipButton:{skipButtonRenderer:{message:{text:fg,isTemplated:!1,trackingParams:Va+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: completePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=videoplaytime100&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewTracking:{trafficType:"ACTIVE_VIEW_TRAFFIC_TYPE_VIDEO"}},clickthroughEndpoint:{clickTrackingParams:Vc, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: da+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],resumePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=adresume&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Lc+"&ad_cpn=[AD_CPN]&id="+Ti+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+ca},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Ti+"&avm="+ca+"&dc_pubid="+ca+"&dc_exteid="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: fullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=adfullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewViewablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Lc+"&ad_cpn=[AD_CPN]&id="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: function W8a(){var a,b,c,d,e,g,k,m,p,q,r;return t(function(w){switch(w.nextAddress){case 1:ua(w,2),a=h(k9a()),b=a.next();case 4:if(b.done)return w.return(1);d=c=b.value;e=d.jsonRepresentation;g=d.objectRepresentation;k=btoa(e);m="data:application/json;base64,"+k;p=new Request(m);Object.defineProperty(p,"url",{get:function(){return"https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false"}}); equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: fy&&fy.JSC$7550_snapshotAndFlush()}},b),(c.flush_logs={callback:function(){dm()}},c))}},BHb);var DHb={},EHb=(DHb.rendered={priority:0,callback:function(){var a=new iza;a.increment("STARTED");if(Ej("LOGGED_IN")&&Ej("SERVER_VERSION")!=="test"&&Ej("SERVER_VERSION")!=="dev"&&!Pia()&&!Oia()){a.increment("EXECUTING");var b=document.createElement("iframe");b.style.display="none";rba(b,2,Ob("https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid="+Ej("INNERTUBE_CONTEXT_CLIENT_NAME")));document.body&&document.body.appendChild(b);a.increment("DONE")}}},DHb);var FHb={},GHb=(FHb.rendered={callback:function(){wCb().resume()}},FHb);var HHb={acknowledgeChannelTouStrikeCommand:Oz(KG),addToPlaylistServiceEndpoint:Oz(GH),addToPlaylistEndpoint:Oz(GH),addUpcomingEventReminderEndpoint:Oz(ZG),browseEndpoint:Oz($Bb),channelCreationFormEndpoint:Oz(DG),channelCreationServiceEndpoint:Oz(EG),claimLegacyYoutubeChannelEndpoint:Oz(qG),clearSearchHistoryEndpoint:Oz(RG),clearWatchHistoryEndpoint:Oz(SG),commerceActionCommand:Pz(cI),createBackstagePostEndpoint:Oz(kG),createCommentEndpoint:Oz(zG),createCommentReplyEndpoint:Oz(yG),createLiveChatPollEndpoint:Oz($G), equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr, chromecache_634.2.dr	String found in binary or memory: g.LP=function(a){a=GP(a.Ca);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr, chromecache_634.2.dr	String found in binary or memory: g.YP=function(a){var b=g.LP(a);XJa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_634.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.LP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.CP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),ou&&(a=fna())&&(b.ebc=a));return g.Vi(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: gy.prototype.remove=function(a){this.JSC$9702_expiringStorage.remove(a)};var zbb=ka(["https://www.youtube.com/",""]),Abb=ka(["https://studio.youtube.com/",""]);function Bbb(){if(Cbb())fm(Error("persist identity iframe is inserted more than once"));else{var a=document.createElement("iframe");a.style.display="none";var b=b===void 0?window.location.href:b;var c=xj(Ej("PERSIST_IDENTITY_IFRAME_URL"));b=c?c:new URL(b).host.indexOf("studio")===0?Zg(zbb,"persist_identity"):Zg(Abb,"persist_identity");rba(a,1,b);a.id="persist_identity";var d;(d=document.body)==null\|\|d.appendChild(a)}} equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: hoverText:{runs:[{text:Bs}]},trackingParams:Va+"="}},adVideoId:Fd,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Pp},associatedCompositePlayerBytesLayoutId:ye}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Sx}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_SELF_START"}},renderer:{actionCompanionAdRenderer:{headline:{text:ye, equals www.youtube.com (Youtube)
Source: chromecache_810.2.dr, chromecache_547.2.dr, chromecache_726.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: if(b){var c=Slb.get(b);c\|\|(c=[],Slb.set(b,c));var d=Ej("ELEMENT_POOL_CONFIG")\|\|{};c.length>=(d[b]!==void 0?d[b]:Ej("ELEMENT_POOL_DEFAULT_CAP",0))\|\|c.push(a)}else fm(new kk("Element pool should only handle custom elements:",a.nodeName))},Slb=new Map,Ulb=0,Tlb=0;var Wlb=z("enable_cairo_refresh_signature_moments_web"),HA=new Map([["FACE_HAPPY",{name:"animated_face_happy_light",nameDarkTheme:"animated_face_happy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_happy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_happy.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_HAPPY",totalFrames:121,lazyLoad:!1}],["FACE_MEH",{name:"animated_face_meh_light", equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: if(b.includes("https://www.youtube.com"))return!1;a=b.split("\n");if(!a.length)return!1;if(a.length<=3&&b.includes("s.onloadeddata"))return!0;b=0;for(var c=h(a),d=c.next();!d.done;d=c.next())d=d.value,(d.includes("https://")\|\|d.includes("http://"))&&b++;return b/a.length>.95}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: isTemplated:!0,trackingParams:Va+"="}},trackingParams:Va+"="}},adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,serviceEndpoint:{clickTrackingParams:Vc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(LI.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+fg,LI),trackingParams:Va+"="}},popupType:"DIALOG"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: lottiePlayerProps:function(){var N="loading_animation_"+w();return{animationConfig:{name:N,path:"https://www.gstatic.com/youtube/img/lottie/playables_loading_animation/"+N+".json",loop:!0,autoplay:!0}}}})),F("div",{class:"mini-app-splash-screen-view-model-wiz__timeout-message-container"},F(gr,{cond:D},function(){return F("h3",{class:"mini-app-splash-screen-view-model-wiz__timeout-heading"},D)}),F("p",{class:WA("mini-app-splash-screen-view-model-wiz__timeout-message",(H["mini-app-splash-screen-view-model-wiz__timeout-message-fade-out"]= equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_UNHAPPY",totalFrames:121,lazyLoad:!1}],["FACE_VERY_HAPPY",{name:"animated_face_very_happy_light",nameDarkTheme:"animated_face_very_happy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_very_happy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_very_happy.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_VERY_HAPPY", equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: lottiePlayerProps:{animationRef:k,animationConfig:{name:e.uniqueId+"-background",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_container_"+(Srb()?"dark":"light")+".json",rendererSettings:{viewBoxOnly:!0}}}}))}),F("div",{class:"smartimation__content"},a))} equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: loudnessDb:-3.7800007}]},playerAds:[{playerLegacyDesktopWatchAdsRenderer:{playerAdParams:{showContentThumbnail:!0,enabledEngageTypes:"3,6,4,5,17,1"},gutParams:{tag:"\\4061\\ytpwmpu"},showCompanion:!0,showInstream:!0,useGut:!0}}],playbackTracking:{videostatsPlaybackUrl:{baseUrl:"https://s.youtube.com/api/stats/playback?cl="+Ab+"&docid="+y+"&ei="+V+"&feature="+m+"&fexp="+lf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Wd+"&el="+Ug+"&len="+rc+"&of="+cc+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: m+"&len="+rc+"&ns="+Ga+"&plid="+N+"&ver="+ca,elapsedMediaTimeSeconds:5},videostatsScheduledFlushWalltimeSeconds:[10,20,30],videostatsDefaultFlushIntervalSeconds:40},captions:{playerCaptionsTracklistRenderer:{captionTracks:[{baseUrl:"https://www.youtube.com/api/timedtext?v="+y+"&caps="+Ea+"&opi="+Ab+"&xoaf="+ca+"&hl="+Ga+"&ip="+Xb+"&ipbits="+ca+"&expire="+mc+"&sparams=ip,ipbits,expire,v,caps,opi,xoaf&signature="+Xb+"&key="+Ea+"&lang="+Da,name:{simpleText:ye},vssId:".en-US",languageCode:"en-US",isTranslatable:!0, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: nameDarkTheme:"animated_face_meh_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_meh.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_meh.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_MEH",totalFrames:121,lazyLoad:!1}],["FACE_SAD",{name:"animated_face_sad_light",nameDarkTheme:"animated_face_sad_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_sad.json", equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: null?void 0:H.baseUrl);var N;q.push(p==null?void 0:(N=p.qoeUrl)==null?void 0:N.baseUrl);var O;q.push(p==null?void 0:(O=p.atrUrl)==null?void 0:O.baseUrl);y=h(q);for(C=y.next();!C.done;C=y.next())if((C=C.value)&&m.test(C)){y=C.replace("https://www.youtube.com","").replace("https://s.youtube.com","");break b}}y=void 0}y&&c.push({testUrl:""+Ja.location.origin+y,baseUrl:Ja.location.origin+"/feed/download",method:"GET"})}c=c.length!==0?c[Math.floor(Math.random()*c.length)]:void 0;return(a=c)?b.return(o9a(a.testUrl, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_sad.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_SAD",totalFrames:121,lazyLoad:!1}],["FACE_UNHAPPY",{name:"animated_face_unhappy_light",nameDarkTheme:"animated_face_unhappy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_unhappy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_unhappy.json", equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: pausePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: pingingEndpoint:{hack:!0}}]}}},skipButton:{skipButtonRenderer:{message:{text:fg,isTemplated:!1,trackingParams:Va+"="},trackingParams:Va+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:ye},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: pings:{impressionPings:[{baseUrl:"https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid="+Ab+";dc_trk_cid="+Ab+";dc_dbm_token="+w+";ord="+mc+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ca+";dc_rui="+ca+";dc_exteid="+Zb+";dc_av="+$b+";dc_sk="+ca+";dc_ctype="+yb+";dc_ref=http://www.youtube.com/video/"+Fd+";dc_pubid="+ca+";dc_btype=23?gclid="+ib+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"},{baseUrl:"https://www.youtube.com/pagead/adview?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=video_skip_shown&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]",offsetMilliseconds:5E3},{baseUrl:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+D+"AxAA&ase=2&num="+ca+"&cid="+da+"&ad_cpn=%5BAD_CPN%5D&sig="+U+"&adurl="+mf+"&ctype="+$b+"&ms=[CLICK_MS]&label=video_10s_engaged_view&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=",offsetMilliseconds:1E4, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+yb+"&token=ALHj"+W+"&index="+ca+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+c+"&m_pos_ms="+Uc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Fd}}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: resumePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=adresume&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: return F("yt-smartimation",{class:csb(p,r,e)},Co(e.experimentEnabled,function(){return F("div",{class:"smartimation__border"},F(YA,{className:"smartimation__border-gradient",lottiePlayerProps:{animationRef:g,animationConfig:{name:e.uniqueId+"-border",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_border_"+(Srb()?"dark":"light")+(z("enable_cairo_refresh_signature_moments_web")?"_v2":"")+".json"}}}))}),Co(e.experimentEnabled&&r,function(){return F("div", equals www.youtube.com (Youtube)
Source: chromecache_785.2.dr, chromecache_847.2.dr, chromecache_871.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: rootVe:83769}},urlEndpoint:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+D+"AxAA&ase=2&num="+ca+"&cid="+da+"&ad_cpn=%5BAD_CPN%5D&sig="+U+"&adurl="+mf+"&label=video_click_to_advertiser_site&ctype="+$b+"&ms=[CLICK_MS]",target:"TARGET_NEW_WINDOW",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}},trackingParams:Va+"="}},durationMilliseconds:7E3,countdownRenderer:{timedPieCountdownRenderer:{trackingParams:Va+"="}},navigationEndpoint:{clickTrackingParams:Vc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: sFb.prototype.openToast=function(){var a;(a=this.currentToast)!=null&&a.opened\|\|(this.queue.length?(this.currentToast=this.queue.shift(),this.currentToast.open()):this.currentPersistentToast&&this.currentPersistentToast.open())};var vFb=new Rl("TOAST_MANAGER_TOKEN");var wFb=["https://fonts.gstatic.com","https://tv.youtube.com","https://www.gstatic.com","https://www.youtube.com"],xFb=Sj("wil_icon_max_concurrent_fetches",Infinity),NI=function(a,b){var c=this;this.iconSet=a;this.appDirection=b;this.responsePromises={};this.iconCache={};this.queuedResponseResolvers={};this.numFetches=this.counter=0;this.cacheStorageAvailable=!!Ja.caches;this.cacheStorageAsync=Promise.resolve(void 0);this.cacheStorageSync=void 0;this.requestAninmationFrameResolver=null;this.renderingMode= equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: sc+"&ad_len="+Uc+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+Fd+"&aqi="+V+"&ad_rmp="+ca+"&sli="+ca}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr, chromecache_634.2.dr	String found in binary or memory: this.Y.Aa&&(a.authuser=this.Y.Aa);this.Y.pageId&&(a.pageid=this.Y.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Bb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(XO(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.zO(this.B)?yO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: this.bgChallenge=pxb(a.bgChallenge);this.ttlSeconds=qxb(kE(a.challenge\|\|""));this.fetcher=function(b,c,d){return new NFb(b,c,d)}(this.requestKey,z("par_at_ep")?["www.youtube.com", equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: totalFrames:121,lazyLoad:!1}],["LIKE",{name:"animated_like_light",nameDarkTheme:"animated_like_dark",path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+(Wlb?"animated_like_icon_light_v4":"animated_like_icon_v2_light")+".json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+(Wlb?"animated_like_icon_dark_v4":"animated_like_icon_v2_dark")+".json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"LIKE",totalFrames:Wlb?60:119,lazyLoad:!0}], equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: trackName:""},{baseUrl:"https://www.youtube.com/api/timedtext?v="+y+"&caps="+Ea+"&opi="+Ab+"&xoaf="+ca+"&hl="+Ga+"&ip="+Xb+"&ipbits="+ca+"&expire="+mc+"&sparams=ip,ipbits,expire,v,caps,opi,xoaf&signature="+Xb+"&key="+Ea+"&kind="+Ea+"&lang="+Ga,name:{simpleText:Ti},vssId:"a.it",languageCode:"it",kind:"asr",isTranslatable:!0,trackName:""}],audioTracks:[{captionTrackIndices:[0,1],defaultCaptionTrackIndex:0,visibility:"UNKNOWN",hasDefaultTrack:!0,captionsInitialState:"CAPTIONS_INITIAL_STATE_OFF_RECOMMENDED"}], equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: trackingParams:Va+"=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Vc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(q0.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+fg,q0),trackingParams:Va+"="}},popupType:"DIALOG"}},trackingParams:Va+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: trackingParams:Va+"=",backgroundImage:{thumbnail:{thumbnails:[{url:""}]},trackingParams:Va+"="},abandonCommands:{commands:[{clickTrackingParams:Vc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: var FBb={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.gif"}; equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr, chromecache_634.2.dr	String found in binary or memory: var Q2={};var beb={Gs:[{Fs:/Unable to load player module/,weight:20},{Fs:/Failed to fetch/,weight:500},{Fs:/XHR API fetch failed/,weight:10},{Fs:/JSON parsing failed after XHR fetch/,weight:10},{Fs:/Retrying OnePlatform request/,weight:10},{Fs:/CSN Missing or undefined during playback association/,weight:100},{Fs:/Non-recoverable error. Do not retry./,weight:0},{Fs:/Internal Error. Retry with an exponential backoff./,weight:0},{Fs:/API disabled by application./,weight:0}],Mr:[{callback:U7a,weight:500}]};var g8a=/[&\?]action_proxy=1/,f8a=/[&\?]token=([\w-])/,h8a=/[&\?]video_id=([\w-])/,i8a=/[&\?]index=([\d-])/,j8a=/[&\?]m_pos_ms=([\d-])/,l8a=/[&\?]vvt=([\w-]*)/,Y7a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),k8a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),a8a={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_785.2.dr, chromecache_847.2.dr, chromecache_871.2.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)
Source: chromecache_672.2.dr	String found in binary or memory: weight:0},{messageRegExp:/.wtd-div./,weight:0},{messageRegExp:/.Blocked a frame with origin "https:\/\/www.youtube.com" from accessing a cross-origin frame./,weight:0},{messageRegExp:/.disguiseToken./,weight:0},{messageRegExp:/Identifier 'YTNonstop' has already been declared/,weight:1E3},{messageRegExp:/Cannot read properties of undefined (reading 'setTimeout')/,weight:0},{messageRegExp:/undefined is not an object $evaluating 'this.\w+.setTimeout'$/,weight:0},{messageRegExp:/BWB:Timeout/, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: weight:500},{callback:function(a){if(!a.stack)return!1;var b=a.stack.trim().split("\n");b.length&&b[0].endsWith("Error: "+a.message)&&b.shift();b.length&&b[b.length-1].includes("at window.onerror (")&&b.pop();if(!b.length)return!0;if(a.message==="Script error.")return b[0].includes("www.youtube.com")\|\|b.length>=2&&b[0].startsWith("at new")&&b[1].startsWith("at window.onerror");if(a.message==="Unexpected token")return!0;a=h(b);for(b=a.next();!b.done;b=a.next())if(b=b.value,!(b.includes("<anonymous>")\|\| equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: y+"/maxresdefault.jpg",width:1280,height:720}]},embed:{iframeUrl:"https://www.youtube.com/embed/"+Fd,width:1280,height:720},title:{simpleText:$a},description:{simpleText:Bs},lengthSeconds:"1156",ownerProfileUrl:"http://www.youtube.com/@"+UA,externalChannelId:oc,isFamilySafe:!0,availableCountries:"AD AE AF AG AI AL AM AO AQ AR AS AT AU AW AX AZ BA BB BD BE BF BG BH BI BJ BL BM BN BO BQ BR BS BT BV BW BY BZ CA CC CD CF CG CH CI CK CL CM CN CO CR CU CV CW CX CY CZ DE DJ DK DM DO DZ EC EE EG EH ER ES ET FI FJ FK FM FO FR GA GB GD GE GF GG GH GI GL GM GN GP GQ GR GS GT GU GW GY HK HM HN HR HT HU ID IE IL IM IN IO IQ IR IS IT JE JM JO JP KE KG KH KI KM KN KP KR KW KY KZ LA LB LC LI LK LR LS LT LU LV LY MA MC MD ME MF MG MH MK ML MM MN MO MP MQ MR MS MT MU MV MW MX MY MZ NA NC NE NF NG NI NL NO NP NR NU NZ OM PA PE PF PG PH P equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: y,target:"TARGET_NEW_WINDOW"}},trackingParams:Va+"="}},trackingParams:Va+"="}}}},endscreen:{endscreenRenderer:{elements:[{endscreenElementRenderer:{style:"CHANNEL",image:{thumbnails:[{url:"https://yt3.ggpht.com/"+Na+"=s250-c-k-c0x00ffffff-no-rj",width:250,height:250},{url:"https://yt3.ggpht.com/"+Na+"=s400-c-k-c0x00ffffff-no-rj",width:400,height:400}]},icon:{thumbnails:[{url:"https://www.gstatic.com/youtube/img/annotations/youtube.png"}]},left:.030214407,width:.15438597,top:.37587035,aspectRatio:1, equals www.youtube.com (Youtube)
Source: chromecache_910.2.dr	String found in binary or memory: {"name":"YouTube","short_name":"YouTube","background_color":"#FFFFFF","display":"minimal-ui","start_url":"/?feature\u003dytca","scope":"/","icons":[{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png","sizes":"144x144","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_192x192.png","sizes":"192x192","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_16x16.png","sizes":"16x16","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_32x32.png","sizes":"32x32","type":"image/png","purpose":"monochrome"},{"src":"https://fonts.gstatic.com/s/i/googlematerialicons/video_youtube/v11/white-48dp/1x/gm_video_youtube_white_48dp.png","sizes":"48x48","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_512x512.png","sizes":"512x512","type":"image/png","purpose":"monochrome"}],"theme_color":"#FF0000","gcm_sender_id":"402845223712","gcm_user_visible_only":true,"related_applications":[],"capture_links":"none","shortcuts":[{"name":"Subscriptions","url":"/feed/subscriptions?feature\u003dapp_shortcuts","icons":[{"src":"https://www.gstatic.com/youtube/img/web/shortcuts/subscriptions_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]},{"name":"Explore","url":"/feed/explore?feature\u003dapp_shortcuts","icons":[{"src":"https://www.gstatic.com/youtube/img/web/shortcuts/explore_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]}]} equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: {adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:Rd,offsetEndMilliseconds:Rd},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+$b+"&token=ALHj"+W+"&index="+ca+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: {adPlacementRenderer:{config:{adPlacementConfig:{kind:"zf",adTimeOffset:{offsetStartMilliseconds:"63",offsetEndMilliseconds:"83"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"59",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewFullyViewableAudibleHalfDurationPings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Lc+"&ad_cpn=[AD_CPN]&id="+Ti+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avgm="+ca},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Ti+"&dc_pubid="+ca+"&dc_exteid="+Zb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewViewablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Lc+"&ad_cpn=[AD_CPN]&id="+Ti+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Ti+"&dc_pubid="+ca+"&dc_exteid="+Zb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pingingEndpoint:{hack:!0}}]},adRendererCommands:{impressionCommand:{clickTrackingParams:Vc,commandExecutorCommand:{commands:[{clickTrackingParams:Vc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=video_card_endcap_impression"}], equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: {baseUrl:"https://www.youtube.com/pagead/adview?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+ca+"&ns="+ca+"&event="+ca+"&device="+ca+"&content_v="+y+"&el="+Ug+"&ei="+V+"&devicever="+c+"&bti="+Gb+"&format="+Rd+"&break_type="+ca+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+ca+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+Xb+"&slot_pos="+ca+"&slot_len="+ca+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+ equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: {instreamVideoAdRenderer:{skipOffsetMilliseconds:5E3,pings:{impressionPings:[{baseUrl:"https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid="+Ab+";dc_trk_cid="+Ab+";ord="+mc+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ca+";dc_rui="+ca+";dc_exteid="+Zb+";dc_av="+$b+";dc_sk="+ca+";dc_ctype="+yb+";dc_ref=http://www.youtube.com/video/"+Fd+";dc_pubid="+ca+";dc_btype=23?gclid="+ib+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}, equals www.youtube.com (Youtube)
Source: chromecache_672.2.dr	String found in binary or memory: {query:a.browseEndpoint.query})),e&&a.browseEndpoint.params&&(e=sr(e,{params:a.browseEndpoint.params}));else{if(a.urlEndpoint)return a.urlEndpoint.url;a.signInEndpoint?(e="https://accounts.google.com/ServiceLogin",d={},Tg.extend(d,b\|\|{},{"continue":window.location.href.split("#")[0],action_handle_signin:!0,passive:!0}),b=d):a.uploadEndpoint?e="//www.youtube.com/upload":a.liveChatEndpoint?(e=a.liveChatEndpoint,d=Tg.clone(e),Ya(e.continuation)&&(g=Object.keys(e.continuation)[0],d.continuation=e.continuation[g].continuation), equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: celerysticksva.com
Source: global traffic	DNS traffic detected: DNS query: www.canva.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: static.canva.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: o13855.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: font-public.canva.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: media-public.canva.com
Source: global traffic	DNS traffic detected: DNS query: media.canva.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: chunk-composing.canva.com
Source: global traffic	DNS traffic detected: DNS query: telemetry.canva.com
Source: global traffic	DNS traffic detected: DNS query: cdn.metadata.io
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: p.tvpixel.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: sdk.iad-01.braze.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: rr2---sn-aigl6ney.googlevideo.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=PtJ3m86uw8k7eb4IvbEUb%2BjiHE9K1h6AwL%2BqNORy4Eet2GhnTvxU3HITLSCBq65sMPKs8HyQPIDnUbRsD9QRdeMnLKAcebyKboQGaU0gh7dNrRbVUsaiQT4vRyzdPBDtPpM%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 433Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 15:07:23 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8cd614cdaf081a0f-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTSet-Cookie: CCK=bjgZD38nsolLpf9h1jRhIQ; Path=/; Max-Age=10800; Expires=Fri, 04 Oct 2024 18:07:23 GMT; Secure; HttpOnly; SameSite=NONEStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8cd614cdaf081a0fx-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H%2BRq%2BTy0PSjsJdoQgX23DrrdZkJoE2sq%2BycyUjuxFWuHlMqaXp5EUCmyhN0xLijBv2kLF%2BPjeoCLIdfmJaAex%2FvLfIg0nDRQwKhI3zhWJYNKANTSpiaolZgXjiADScc%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 15:07:23 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8cd614d1afa4c47c-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTSet-Cookie: CCK=bjgZD38nsolLpf9h1jRhIQ; Path=/; Max-Age=10800; Expires=Fri, 04 Oct 2024 18:07:23 GMT; Secure; HttpOnly; SameSite=NONEStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8cd614d1afa4c47cx-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xiluzbU4WZKheNYZbikcazqFMcTKWU3NLkO%2BuPVQD0RiB3nbGh3jzw%2FvxQ0NafN3EGGqXogKDTHtE3meK8OCizIvlvcdQJ40IsGzQYdk2Lo5GK7KvAFDSkyEMKakhqQ%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 15:07:24 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8cd614d5e9a641a1-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8cd614d5e9a641a1x-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iYfxcAcB6mb8A86UO5koVETzg%2FF7wkrDv%2F%2BCZATFQmUVvsDS%2BxDPZpBnzTS7KXFiKDKHW4C8JAELNfWqwrGsDkmj3m%2FmWa%2FWpSdmzuNlTUI9FdWN5NHYDtBbtI3tlTY%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 15:07:27 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8cd614eb5e9d43ed-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTSet-Cookie: CCK=bjgZD38nsolLpf9h1jRhIQ; Path=/; Max-Age=10800; Expires=Fri, 04 Oct 2024 18:07:27 GMT; Secure; HttpOnly; SameSite=NONEStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8cd614eb5e9d43edx-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lJ9F%2FLvR3EgXKzHTKJmqrNk3Rv5mr3CcGfE0F66HFdb0i4AoOLUxMuniBZwwr5uOTo3tcrPnDxqRpTlzM0CZA8cDX%2B8qKAePusfmsNvsZCiT9USjjGvocJdQtQ2pOXQ%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 15:07:39 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8cd61534bcc1436e-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTSet-Cookie: CCK=bjgZD38nsolLpf9h1jRhIQ; Path=/; Max-Age=10800; Expires=Fri, 04 Oct 2024 18:07:39 GMT; Secure; HttpOnly; SameSite=NONEStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8cd61534bcc1436ex-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z8Mev6InTjMdfSkN5XlxoR4BzE2n7x2V47hk%2Fsr0o6Mq48mnXLr7xwcAtGeCEreIRbjKH3vv6kz7Rkuq1PJ8VCjh0DLliTWf%2FA1QhFKUfufVZqp4by6FKOlVVu2gCbM%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 04 Oct 2024 15:07:46 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 04 Oct 2024 15:07:46 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 04 Oct 2024 15:07:48 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 04 Oct 2024 15:07:48 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 04 Oct 2024 15:07:49 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 04 Oct 2024 15:07:49 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 15:08:13 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8cd616065ff98c93-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTSet-Cookie: CCK=bjgZD38nsolLpf9h1jRhIQ; Path=/; Max-Age=10800; Expires=Fri, 04 Oct 2024 18:08:13 GMT; Secure; HttpOnly; SameSite=NONEStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8cd616065ff98c93x-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BMZW88r%2F%2BMmTn301PW%2BH%2F6h6KleLDQqeOloD1riCPK8UuGOdrM6qggpIIRycDqG5YDsfZILWKoT2CVLaGvZx%2B6b5Br8aJOO%2FCT0j6U4fYxw1gVguiC1%2BjUHGr0JzgjI%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 15:08:15 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8cd616123c9a43f7-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8cd616123c9a43f7x-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zK0VGJ3a8jFO%2FuqZVhYQ2hw%2BLrepaoy03AxrqnZyb6%2FzeUUXmcMnnBDrOtTrp9B%2Bulc9jUIg1uXkq%2FrMN9CdPIdZBws1ynLMSgs7MsDlDkJ%2BHhF1m7qKYuq1sJoq8EY%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 15:08:23 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8cd61647b9824288-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTSet-Cookie: CCK=bjgZD38nsolLpf9h1jRhIQ; Path=/; Max-Age=10800; Expires=Fri, 04 Oct 2024 18:08:23 GMT; Secure; HttpOnly; SameSite=NONEStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8cd61647b9824288x-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jQSaH36OFfqX9vlecGzoJILaIpVhgxeltC5tFLato9C1uXAsAawhg%2BeqcXnGitp%2FFWnnFXdPhqK%2B0GcS89KqujxOfxRCGHDF4mnL82ANNfIyVmETeTONeLuc7SLqLlA%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 15:08:24 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8cd6164beb0543ec-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTSet-Cookie: CCK=bjgZD38nsolLpf9h1jRhIQ; Path=/; Max-Age=10800; Expires=Fri, 04 Oct 2024 18:08:24 GMT; Secure; HttpOnly; SameSite=NONEStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8cd6164beb0543ecx-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uw4gr6L8uNdYINgyQYGN6fwFN5TJ9WwuRiTaZDJ8OjjfhLa5IMa9o2K9ZPUeTaz%2BW0pkTJVUi6StoYqiy6L1McqymrYFFxEmq5tOjXnT5gFEPq8ypy7RBS05yPoFXf0%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 15:08:25 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8cd616545eca42c6-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTSet-Cookie: CCK=bjgZD38nsolLpf9h1jRhIQ; Path=/; Max-Age=10800; Expires=Fri, 04 Oct 2024 18:08:25 GMT; Secure; HttpOnly; SameSite=NONEStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8cd616545eca42c6x-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qrFkW6ze29sGskaQjSliGCIhI9eMqXxJijEua374UX%2Bc0jOkMZsws0MbG47T52RskVyak0WcXANjdwZXxwC93H2Xd93YnzWaTyp5%2F%2FVvfByhM%2Fr9KqWYKqVk0pK8ZNA%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2028,i,16578763605277697240,10979081761154446079,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://celerysticksva.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6380 --field-trial-handle=2028,i,16578763605277697240,10979081761154446079,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6716 --field-trial-handle=2028,i,16578763605277697240,10979081761154446079,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2028,i,16578763605277697240,10979081761154446079,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6380 --field-trial-handle=2028,i,16578763605277697240,10979081761154446079,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6716 --field-trial-handle=2028,i,16578763605277697240,10979081761154446079,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://support.google.com	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://angular.dev/license	0%	URL Reputation	safe
https://youtu.be/	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
static.cloudflareinsights.com	104.16.79.73	true	false	unknown
i.ytimg.com	142.250.181.246	true	false	unknown
rr2.sn-aigl6ney.googlevideo.com	173.194.183.167	true	false	unknown
p.tvpixel.com	75.2.57.54	true	false	unknown
www.canva.com	104.16.102.112	true	false	unknown
spdc-global.pbp.gysm.yahoodns.net	54.171.122.26	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
celerysticksva.com	66.235.200.146	true	false	unknown
d1w725hft9421a.cloudfront.net	18.66.102.114	true	false	unknown
static.canva.com	104.16.102.112	true	false	unknown
media.canva.com	104.16.103.112	true	false	unknown
font-public.canva.com	104.16.102.112	true	false	unknown
photos-ugc.l.googleusercontent.com	172.217.18.97	true	false	unknown
www.google.com	142.250.185.68	true	false	unknown
media-public.canva.com	104.16.102.112	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
o13855.ingest.sentry.io	34.120.195.249	true	false	unknown
chunk-composing.canva.com	104.16.103.112	true	false	unknown
static.doubleclick.net	142.250.186.166	true	false	unknown
youtube.com	142.250.185.238	true	false	unknown
youtube-ui.l.google.com	142.250.185.110	true	false	unknown
telemetry.canva.com	104.16.103.112	true	false	unknown
googleads.g.doubleclick.net	172.217.16.194	true	false	unknown
play.google.com	216.58.206.46	true	false	unknown
sb.scorecardresearch.com	18.244.18.38	true	false	unknown
api.ipify.org	104.26.12.205	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
sp.analytics.yahoo.com	unknown	unknown	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
sdk.iad-01.braze.com	unknown	unknown	false	unknown
rr2---sn-aigl6ney.googlevideo.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
cdn.metadata.io	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://font-public.canva.com/YAFdJi-0PQg/0/Garet-Regular.026b1d7ff12d809c3e8a84bed1.0d6b73825ffb53723442c5660e87b4d4.woff2	false	unknown
https://www.canva.com/design/DAGG6YPVj0I/WIrqiu3tkmQpk5Au_OFXeA/view?embed	false	unknown
https://static.canva.com/web/16dcebf40d948459.js	false	unknown
https://static.canva.com/web/14770deaa5eaaf1c.ltr.css	false	unknown
https://celerysticksva.com/wp-includes/js/dist/interactivity.min.js?ver=6.6.2	false	unknown
https://font-public.canva.com/YAFdJi-0PQg/0/Garet-RegularItalic15681328946949529740..c82410ef3725a1a75f07e3c8fbc9e797.woff2	false	unknown
https://yt3.ggpht.com/pWB1yepfYaQe4jcoRXaOJHhorxlMKkFAvxdConEUSPBaoa8twaHwfu3NRfu1ucKp5DVaCFHW0Q=s48-c-k-c0x00ffffff-no-rj	false	unknown
https://media-public.canva.com/Sap7A/MADtGqSap7A/1/screen.svg	false	unknown
https://sb.scorecardresearch.com/p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=784950325	false	unknown
https://sb.scorecardresearch.com/p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=784950325	false	unknown
https://media-public.canva.com/29qjU/MADtGh29qjU/1/screen.svg	false	unknown
https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10137834&gtmcb=810456693	false	unknown
https://www.canva.com/_ajax/ae/createBatch	false	unknown
https://www.youtube.com/s/player/96d06116/www-player.css	false	unknown
https://static.canva.com/web/images/b46630e470f4040eba7033cf2435edce.woff	false	unknown
https://celerysticksva.com/wp-includes/blocks/navigation/style.min.css?ver=6.6.2	false	unknown
https://p.tvpixel.com/i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=67277430	false	unknown
https://www.youtube.com/app_shell	false	unknown
https://www.youtube.com/s/search/audio/success.mp3	false	unknown
https://i.ytimg.com/vi/FW-SBuJ17DU/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCGI2tEgTIp74QpqAcBCsJqYNZN_w	false	unknown
https://sb.scorecardresearch.com/p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=2006963479	false	unknown
https://celerysticksva.com/wp-includes/blocks/navigation/view.min.js?ver=6.6.2	false	unknown
https://sb.scorecardresearch.com/p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=2038828220	false	unknown
https://media-public.canva.com/gAmTQ/MADtGggAmTQ/2/s.png	false	unknown
https://www.youtube.com/s/desktop/72b8c307/cssbin/www-main-desktop-home-page-skeleton.css	false	unknown
https://sb.scorecardresearch.com/p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1343881488	false	unknown
https://i.ytimg.com/vi_webp/iSfnyV0BncY/maxresdefault.webp	false	unknown
https://media-public.canva.com/9Gh80/MADtGo9Gh80/2/s2-1.svg	false	unknown
https://p.tvpixel.com/i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=810491109	false	unknown
https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=shared	false	unknown
https://www.youtube.com/s/desktop/72b8c307/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js	false	unknown
https://font-public.canva.com/_fb/s/41d36c36b634199c0ebf5e807fda38d0.css	false	unknown
https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10137834&gtmcb=170152888	false	unknown
http://celerysticksva.com/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.css?ver=2.4.1	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://support.google.com	chromecache_672.2.dr	false	URL Reputation: safe	unknown
https://font-public.canva.com/_fb/0/17.woff2)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/31.woff)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/04.woff)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/71.woff)	chromecache_585.2.dr	false		unknown
http://polymer.github.io/AUTHORS.txt	chromecache_672.2.dr	false	URL Reputation: safe	unknown
https://font-public.canva.com/_fb/0/02.ttf)	chromecache_585.2.dr	false		unknown
https://s.youtube.com	chromecache_672.2.dr	false		unknown
https://i.ytimg.com/an/	chromecache_672.2.dr	false		unknown
https://font-public.canva.com/_fb/0/2E.ttf)	chromecache_585.2.dr	false		unknown
https://cdn.iframe.ly	chromecache_827.2.dr	false		unknown
https://font-public.canva.com/_fb/0/76.ttf)	chromecache_585.2.dr	false		unknown
https://www.youtube.com/generate_204?cpn=	chromecache_524.2.dr, chromecache_634.2.dr	false		unknown
https://font-public.canva.com/_fb/0/0B.woff2)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/61.woff2)	chromecache_585.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_672.2.dr	false	URL Reputation: safe	unknown
https://font-public.canva.com/_fb/0/28.woff2)	chromecache_585.2.dr	false		unknown
http://polymer.github.io/PATENTS.txt	chromecache_672.2.dr	false	URL Reputation: safe	unknown
https://font-public.canva.com/_fb/0/7E-quadratic.woff)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/31.ttf)	chromecache_585.2.dr	false		unknown
https://s.youtube.com/api/stats/qoe?cl=	chromecache_672.2.dr	false		unknown
https://font-public.canva.com/_fb/0/24.woff2)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/2D.woff2)	chromecache_585.2.dr	false		unknown
https://px.ads.linkedin.com/collect/?pid=	chromecache_785.2.dr, chromecache_847.2.dr, chromecache_871.2.dr	false		unknown
https://font-public.canva.com/_fb/0/4C.woff2)	chromecache_585.2.dr	false		unknown
http://mathiasbynens.be/	chromecache_672.2.dr	false	URL Reputation: safe	unknown
https://font-public.canva.com/_fb/0/47.woff2)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/6F.woff)	chromecache_585.2.dr	false		unknown
https://youtube.com/watch?v=	chromecache_672.2.dr	false		unknown
https://api-gw.metadata.io	chromecache_807.2.dr, chromecache_459.2.dr	false		unknown
https://font-public.canva.com/_fb/0/3D.ttf)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/02.woff2)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/17.woff)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/60.ttf)	chromecache_585.2.dr	false		unknown
https://www.youtube.com/pcs/activeview?xai=	chromecache_672.2.dr	false		unknown
https://font-public.canva.com/_fb/0/47.ttf)	chromecache_585.2.dr	false		unknown
https://s.youtube.com/api/stats/watchtime?cl=	chromecache_672.2.dr	false		unknown
https://font-public.canva.com/_fb/0/39.woff2)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/09.ttf)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/6F.ttf)	chromecache_585.2.dr	false		unknown
http://youtu.be/	chromecache_827.2.dr	false		unknown
https://font-public.canva.com/_fb/0/26.ttf)	chromecache_585.2.dr	false		unknown
https://play.google.com	chromecache_672.2.dr	false		unknown
https://font-public.canva.com/_fb/0/76.woff2)	chromecache_585.2.dr	false		unknown
https://angular.dev/license	chromecache_524.2.dr, chromecache_634.2.dr, chromecache_672.2.dr	false	URL Reputation: safe	unknown
https://font-public.canva.com/_fb/0/31.woff2)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/32.woff2)	chromecache_585.2.dr	false		unknown
https://vimeo.com/album/	chromecache_827.2.dr	false		unknown
https://font-public.canva.com/_fb/0/27.ttf)	chromecache_585.2.dr	false		unknown
https://youtu.be/	chromecache_827.2.dr, chromecache_524.2.dr, chromecache_634.2.dr	false	URL Reputation: safe	unknown
http://mths.be/fromcodepoint	chromecache_672.2.dr	false		unknown
https://font-public.canva.com/_fb/0/23.woff)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/2D.woff)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/60.woff)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/09.woff2)	chromecache_585.2.dr	false		unknown
https://apis.google.com	chromecache_672.2.dr	false	URL Reputation: safe	unknown
https://github.com/getsentry/sentry-javascript	chromecache_544.2.dr	false		unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_672.2.dr	false	URL Reputation: safe	unknown
https://codesandbox.io/	chromecache_827.2.dr	false		unknown
https://font-public.canva.com/_fb/0/55.woff)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/56.ttf)	chromecache_585.2.dr	false		unknown
https://www.youtube.com/get_midroll_info?ei=	chromecache_672.2.dr	false		unknown
https://font-public.canva.com/_fb/0/16.otf)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/3C.ttf)	chromecache_585.2.dr	false		unknown
https://font-public.canva.com/_fb/0/0A.woff2)	chromecache_585.2.dr	false		unknown
https://www.youtube.com/pagead/adview?ai=C	chromecache_672.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
173.194.183.167	rr2.sn-aigl6ney.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.186.150	unknown	United States	15169	GOOGLEUS	false
104.16.102.112	www.canva.com	United States	13335	CLOUDFLARENETUS	false
142.250.184.225	unknown	United States	15169	GOOGLEUS	false
142.250.184.226	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
142.250.186.34	unknown	United States	15169	GOOGLEUS	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
104.26.12.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
142.250.185.118	unknown	United States	15169	GOOGLEUS	false
142.250.184.230	unknown	United States	15169	GOOGLEUS	false
142.250.185.110	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
54.171.122.26	spdc-global.pbp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
18.244.18.38	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
142.250.185.238	youtube.com	United States	15169	GOOGLEUS	false
18.66.102.114	d1w725hft9421a.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
216.58.206.46	play.google.com	United States	15169	GOOGLEUS	false
142.250.181.246	i.ytimg.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
172.217.16.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
54.246.144.89	unknown	United States	16509	AMAZON-02US	false
172.217.16.193	unknown	United States	15169	GOOGLEUS	false
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
142.250.185.206	unknown	United States	15169	GOOGLEUS	false
142.250.181.230	unknown	United States	15169	GOOGLEUS	false
18.244.18.27	unknown	United States	16509	AMAZON-02US	false
18.66.102.102	unknown	United States	3	MIT-GATEWAYSUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
172.217.18.97	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
99.83.205.94	unknown	United States	16509	AMAZON-02US	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
104.26.13.205	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.74.198	unknown	United States	15169	GOOGLEUS	false
142.250.186.54	unknown	United States	15169	GOOGLEUS	false
18.66.102.64	unknown	United States	3	MIT-GATEWAYSUS	false
104.16.103.112	media.canva.com	United States	13335	CLOUDFLARENETUS	false
66.235.200.146	celerysticksva.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
142.250.186.166	static.doubleclick.net	United States	15169	GOOGLEUS	false
75.2.57.54	p.tvpixel.com	United States	16509	AMAZON-02US	false
34.120.195.249	o13855.ingest.sentry.io	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526002
Start date and time:	2024-10-04 17:05:57 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://celerysticksva.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@25/826@158/44
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=shared Browse: https://celerysticksva.com/

Input	Output
URL: http://celerysticksva.com/ Model: jbxai	{ "brand":["Celery Sticks"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://celerysticksva.com/ Model: jbxai	{ "brand":["Celery Sticks"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://celerysticksva.com/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw&feature=shared Model: jbxai	{ "brand":["YouTube"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Play all", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw Model: jbxai	{ "brand":["YouTube"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Play all", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.youtube.com/playlist?list=PL1AEBGq0awl21lpCWfMm9s6aneHBbv1Qw Model: jbxai	{ "brand":["YouTube"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 14:06:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.971426901453897
Encrypted:	false
SSDEEP:	48:8YdEToYWl/+HYidAKZdA19ehwiZUklqehZy+3:8LfiN6y
MD5:	102CD7EF8D3D44710451E01C02948EBD
SHA1:	1AFFD5C0EA54C1773D546CF077570F66F774AF17
SHA-256:	A1A9F67E12AA80E4421476360F8196C8C424310B256862C9683F5BC263A0D0CD
SHA-512:	8811D6E028E0E3FC9FD4EAEE9B79A6BF9653F6DEEB778853B5B55D013317C103DCA16648067D0BF5E2BAA02952330AF9CD6968103D1D613CDA3930C0AD4B3F03
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..... '.o...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.x...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............J......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 4, 2024 17:06:57.875200033 CEST	192.168.2.5	1.1.1.1	0x881c	Standard query (0)	celerysticksva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:06:57.875410080 CEST	192.168.2.5	1.1.1.1	0x2792	Standard query (0)	celerysticksva.com	65	IN (0x0001)	false
Oct 4, 2024 17:06:58.618436098 CEST	192.168.2.5	1.1.1.1	0x7897	Standard query (0)	celerysticksva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:06:58.618798018 CEST	192.168.2.5	1.1.1.1	0xa45e	Standard query (0)	celerysticksva.com	65	IN (0x0001)	false
Oct 4, 2024 17:06:59.372395992 CEST	192.168.2.5	1.1.1.1	0x7640	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:06:59.373059034 CEST	192.168.2.5	1.1.1.1	0x4a5c	Standard query (0)	www.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:00.651990891 CEST	192.168.2.5	1.1.1.1	0x3590	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:00.652328014 CEST	192.168.2.5	1.1.1.1	0x40a1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:00.926055908 CEST	192.168.2.5	1.1.1.1	0x7a67	Standard query (0)	static.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:00.926451921 CEST	192.168.2.5	1.1.1.1	0x84df	Standard query (0)	static.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:01.548424006 CEST	192.168.2.5	1.1.1.1	0x9ae1	Standard query (0)	celerysticksva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:01.548903942 CEST	192.168.2.5	1.1.1.1	0xbc0d	Standard query (0)	celerysticksva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:01.579371929 CEST	192.168.2.5	1.1.1.1	0x898d	Standard query (0)	celerysticksva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:01.579808950 CEST	192.168.2.5	1.1.1.1	0xdb83	Standard query (0)	celerysticksva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:02.017154932 CEST	192.168.2.5	1.1.1.1	0x4649	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:02.017338037 CEST	192.168.2.5	1.1.1.1	0xc36a	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:02.343626976 CEST	192.168.2.5	1.1.1.1	0x9a21	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:02.344321966 CEST	192.168.2.5	1.1.1.1	0x84c8	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:03.406191111 CEST	192.168.2.5	1.1.1.1	0x4e10	Standard query (0)	o13855.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:03.420597076 CEST	192.168.2.5	1.1.1.1	0xf48b	Standard query (0)	o13855.ingest.sentry.io	65	IN (0x0001)	false
Oct 4, 2024 17:07:06.266633034 CEST	192.168.2.5	1.1.1.1	0x3440	Standard query (0)	font-public.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:06.266819954 CEST	192.168.2.5	1.1.1.1	0x8d12	Standard query (0)	font-public.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:06.284373999 CEST	192.168.2.5	1.1.1.1	0x351e	Standard query (0)	static.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:06.284574032 CEST	192.168.2.5	1.1.1.1	0x4ef7	Standard query (0)	static.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:06.318002939 CEST	192.168.2.5	1.1.1.1	0xc146	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:06.318175077 CEST	192.168.2.5	1.1.1.1	0x224	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:06.353502035 CEST	192.168.2.5	1.1.1.1	0x9807	Standard query (0)	o13855.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:06.353802919 CEST	192.168.2.5	1.1.1.1	0x172e	Standard query (0)	o13855.ingest.sentry.io	65	IN (0x0001)	false
Oct 4, 2024 17:07:06.531702995 CEST	192.168.2.5	1.1.1.1	0x48e7	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:06.531934977 CEST	192.168.2.5	1.1.1.1	0xcee4	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:07.166264057 CEST	192.168.2.5	1.1.1.1	0x13a9	Standard query (0)	media-public.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:07.166264057 CEST	192.168.2.5	1.1.1.1	0xb39	Standard query (0)	media-public.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:07.495311022 CEST	192.168.2.5	1.1.1.1	0x26dd	Standard query (0)	media.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:07.495639086 CEST	192.168.2.5	1.1.1.1	0x4422	Standard query (0)	media.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:07.793739080 CEST	192.168.2.5	1.1.1.1	0x8ef4	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:07.793879986 CEST	192.168.2.5	1.1.1.1	0x3b8e	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:08.016695976 CEST	192.168.2.5	1.1.1.1	0xa02c	Standard query (0)	chunk-composing.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:08.016908884 CEST	192.168.2.5	1.1.1.1	0xd53a	Standard query (0)	chunk-composing.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:08.325932026 CEST	192.168.2.5	1.1.1.1	0xb255	Standard query (0)	telemetry.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:08.326505899 CEST	192.168.2.5	1.1.1.1	0x15e6	Standard query (0)	telemetry.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:10.334011078 CEST	192.168.2.5	1.1.1.1	0xd8e9	Standard query (0)	cdn.metadata.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:10.334150076 CEST	192.168.2.5	1.1.1.1	0x6344	Standard query (0)	cdn.metadata.io	65	IN (0x0001)	false
Oct 4, 2024 17:07:11.387892008 CEST	192.168.2.5	1.1.1.1	0xe20d	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:11.388134956 CEST	192.168.2.5	1.1.1.1	0x8939	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:11.389368057 CEST	192.168.2.5	1.1.1.1	0xd5ce	Standard query (0)	p.tvpixel.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:11.389713049 CEST	192.168.2.5	1.1.1.1	0x32a5	Standard query (0)	p.tvpixel.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:11.390254974 CEST	192.168.2.5	1.1.1.1	0x734b	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:11.390505075 CEST	192.168.2.5	1.1.1.1	0x209c	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:13.691162109 CEST	192.168.2.5	1.1.1.1	0x1828	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:13.691919088 CEST	192.168.2.5	1.1.1.1	0x1cf6	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 17:07:13.697877884 CEST	192.168.2.5	1.1.1.1	0x5add	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:13.698172092 CEST	192.168.2.5	1.1.1.1	0x708e	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 17:07:13.714632034 CEST	192.168.2.5	1.1.1.1	0x87cb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:13.717825890 CEST	192.168.2.5	1.1.1.1	0x8f9e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:13.729962111 CEST	192.168.2.5	1.1.1.1	0x5650	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:13.730844975 CEST	192.168.2.5	1.1.1.1	0xc669	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:13.732268095 CEST	192.168.2.5	1.1.1.1	0xc7f6	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:13.732819080 CEST	192.168.2.5	1.1.1.1	0x7576	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Oct 4, 2024 17:07:16.609210968 CEST	192.168.2.5	1.1.1.1	0xa384	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:16.609452963 CEST	192.168.2.5	1.1.1.1	0x1b8	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:19.798595905 CEST	192.168.2.5	1.1.1.1	0xaf7	Standard query (0)	sdk.iad-01.braze.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:19.798979998 CEST	192.168.2.5	1.1.1.1	0xc326	Standard query (0)	sdk.iad-01.braze.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:22.461252928 CEST	192.168.2.5	1.1.1.1	0xd425	Standard query (0)	media-public.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:22.461467028 CEST	192.168.2.5	1.1.1.1	0xd2e	Standard query (0)	media-public.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:22.473464012 CEST	192.168.2.5	1.1.1.1	0x2fc0	Standard query (0)	media.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:22.473670006 CEST	192.168.2.5	1.1.1.1	0x5069	Standard query (0)	media.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:22.524955988 CEST	192.168.2.5	1.1.1.1	0x1a63	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:22.525171995 CEST	192.168.2.5	1.1.1.1	0xd343	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:22.527143955 CEST	192.168.2.5	1.1.1.1	0x359d	Standard query (0)	chunk-composing.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:22.527458906 CEST	192.168.2.5	1.1.1.1	0x5c0b	Standard query (0)	chunk-composing.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:22.537148952 CEST	192.168.2.5	1.1.1.1	0xb0ee	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:22.537489891 CEST	192.168.2.5	1.1.1.1	0xd098	Standard query (0)	www.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:22.565433979 CEST	192.168.2.5	1.1.1.1	0xefbb	Standard query (0)	cdn.metadata.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:22.565627098 CEST	192.168.2.5	1.1.1.1	0x802a	Standard query (0)	cdn.metadata.io	65	IN (0x0001)	false
Oct 4, 2024 17:07:22.572249889 CEST	192.168.2.5	1.1.1.1	0x2da8	Standard query (0)	p.tvpixel.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:22.572426081 CEST	192.168.2.5	1.1.1.1	0xaa7c	Standard query (0)	p.tvpixel.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:22.574350119 CEST	192.168.2.5	1.1.1.1	0x9d9e	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:22.574651003 CEST	192.168.2.5	1.1.1.1	0x78fc	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:22.935308933 CEST	192.168.2.5	1.1.1.1	0x540e	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:22.935564995 CEST	192.168.2.5	1.1.1.1	0x23e6	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:22.940084934 CEST	192.168.2.5	1.1.1.1	0x9a59	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:22.940480947 CEST	192.168.2.5	1.1.1.1	0xd67a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:22.942193031 CEST	192.168.2.5	1.1.1.1	0x280c	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:22.942378998 CEST	192.168.2.5	1.1.1.1	0x24c0	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Oct 4, 2024 17:07:22.942894936 CEST	192.168.2.5	1.1.1.1	0x4252	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:22.943367958 CEST	192.168.2.5	1.1.1.1	0xaf36	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 17:07:23.133744955 CEST	192.168.2.5	1.1.1.1	0x5e87	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:23.133980036 CEST	192.168.2.5	1.1.1.1	0xa2a7	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:23.142292976 CEST	192.168.2.5	1.1.1.1	0xc4b2	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:23.142704964 CEST	192.168.2.5	1.1.1.1	0x917c	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 17:07:23.145926952 CEST	192.168.2.5	1.1.1.1	0xb099	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:23.146080017 CEST	192.168.2.5	1.1.1.1	0x9649	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:23.253209114 CEST	192.168.2.5	1.1.1.1	0xeea6	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:23.253209114 CEST	192.168.2.5	1.1.1.1	0x5751	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:30.037599087 CEST	192.168.2.5	1.1.1.1	0xed2d	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:30.038047075 CEST	192.168.2.5	1.1.1.1	0xf836	Standard query (0)	youtube.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:31.154962063 CEST	192.168.2.5	1.1.1.1	0x7980	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:31.155486107 CEST	192.168.2.5	1.1.1.1	0xd47c	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:32.649663925 CEST	192.168.2.5	1.1.1.1	0x7e54	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:32.649912119 CEST	192.168.2.5	1.1.1.1	0xc70a	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:44.150979042 CEST	192.168.2.5	1.1.1.1	0x7c04	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:44.156294107 CEST	192.168.2.5	1.1.1.1	0xf6b9	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 17:07:44.275486946 CEST	192.168.2.5	1.1.1.1	0x8d90	Standard query (0)	rr2---sn-aigl6ney.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:44.275913000 CEST	192.168.2.5	1.1.1.1	0xe02e	Standard query (0)	rr2---sn-aigl6ney.googlevideo.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:45.827956915 CEST	192.168.2.5	1.1.1.1	0x8f34	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:45.828151941 CEST	192.168.2.5	1.1.1.1	0xa693	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:45.828902006 CEST	192.168.2.5	1.1.1.1	0xfd3e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:45.829195023 CEST	192.168.2.5	1.1.1.1	0x5a66	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:51.765758038 CEST	192.168.2.5	1.1.1.1	0x1d10	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:51.765901089 CEST	192.168.2.5	1.1.1.1	0x213d	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:55.268518925 CEST	192.168.2.5	1.1.1.1	0x8ac5	Standard query (0)	celerysticksva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:55.268518925 CEST	192.168.2.5	1.1.1.1	0x8613	Standard query (0)	celerysticksva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:57.072815895 CEST	192.168.2.5	1.1.1.1	0xf5b0	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:57.073033094 CEST	192.168.2.5	1.1.1.1	0x28aa	Standard query (0)	www.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:57.423636913 CEST	192.168.2.5	1.1.1.1	0x60e5	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:57.424870014 CEST	192.168.2.5	1.1.1.1	0x25f9	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 17:07:57.967463970 CEST	192.168.2.5	1.1.1.1	0x4cf8	Standard query (0)	static.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:57.967586994 CEST	192.168.2.5	1.1.1.1	0x9885	Standard query (0)	static.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:07:59.047395945 CEST	192.168.2.5	1.1.1.1	0xc898	Standard query (0)	o13855.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:07:59.047749996 CEST	192.168.2.5	1.1.1.1	0x4c95	Standard query (0)	o13855.ingest.sentry.io	65	IN (0x0001)	false
Oct 4, 2024 17:08:00.935406923 CEST	192.168.2.5	1.1.1.1	0xfceb	Standard query (0)	font-public.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:00.935442924 CEST	192.168.2.5	1.1.1.1	0x9db5	Standard query (0)	font-public.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:01.894752979 CEST	192.168.2.5	1.1.1.1	0xf32f	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:01.894876003 CEST	192.168.2.5	1.1.1.1	0x57e2	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:01.926867962 CEST	192.168.2.5	1.1.1.1	0xa6a6	Standard query (0)	media-public.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:01.926984072 CEST	192.168.2.5	1.1.1.1	0x8a4f	Standard query (0)	media-public.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:02.609859943 CEST	192.168.2.5	1.1.1.1	0xfa8	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:02.609997988 CEST	192.168.2.5	1.1.1.1	0x8209	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:02.843209028 CEST	192.168.2.5	1.1.1.1	0x85ed	Standard query (0)	media.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:02.843343973 CEST	192.168.2.5	1.1.1.1	0xf018	Standard query (0)	media.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:03.265186071 CEST	192.168.2.5	1.1.1.1	0xd63b	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:03.265886068 CEST	192.168.2.5	1.1.1.1	0x78c7	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:03.553915024 CEST	192.168.2.5	1.1.1.1	0x4497	Standard query (0)	chunk-composing.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:03.554094076 CEST	192.168.2.5	1.1.1.1	0xbb77	Standard query (0)	chunk-composing.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:03.570923090 CEST	192.168.2.5	1.1.1.1	0x8c86	Standard query (0)	telemetry.canva.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:03.571176052 CEST	192.168.2.5	1.1.1.1	0x9855	Standard query (0)	telemetry.canva.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:06.666239977 CEST	192.168.2.5	1.1.1.1	0x75f3	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:06.666294098 CEST	192.168.2.5	1.1.1.1	0xeef4	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 17:08:06.666757107 CEST	192.168.2.5	1.1.1.1	0x69fd	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:06.666892052 CEST	192.168.2.5	1.1.1.1	0x3911	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 17:08:07.644073009 CEST	192.168.2.5	1.1.1.1	0x67c1	Standard query (0)	cdn.metadata.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:07.644260883 CEST	192.168.2.5	1.1.1.1	0x1034	Standard query (0)	cdn.metadata.io	65	IN (0x0001)	false
Oct 4, 2024 17:08:07.710355997 CEST	192.168.2.5	1.1.1.1	0x752	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:07.710850954 CEST	192.168.2.5	1.1.1.1	0x5217	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:07.769061089 CEST	192.168.2.5	1.1.1.1	0x6a8f	Standard query (0)	p.tvpixel.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:07.769529104 CEST	192.168.2.5	1.1.1.1	0x1bc	Standard query (0)	p.tvpixel.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:07.770287991 CEST	192.168.2.5	1.1.1.1	0xc51	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:07.770457983 CEST	192.168.2.5	1.1.1.1	0x8cea	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:07.776154041 CEST	192.168.2.5	1.1.1.1	0x410c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:07.776390076 CEST	192.168.2.5	1.1.1.1	0x4e37	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:08.592243910 CEST	192.168.2.5	1.1.1.1	0xdb34	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:08.592243910 CEST	192.168.2.5	1.1.1.1	0xe460	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Oct 4, 2024 17:08:08.926868916 CEST	192.168.2.5	1.1.1.1	0x1eab	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:08.927428007 CEST	192.168.2.5	1.1.1.1	0x9b64	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:14.012039900 CEST	192.168.2.5	1.1.1.1	0x4b5e	Standard query (0)	sdk.iad-01.braze.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:14.012039900 CEST	192.168.2.5	1.1.1.1	0x5fe3	Standard query (0)	sdk.iad-01.braze.com	65	IN (0x0001)	false
Oct 4, 2024 17:08:24.228641987 CEST	192.168.2.5	1.1.1.1	0xb7a8	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:08:24.229273081 CEST	192.168.2.5	1.1.1.1	0x2cc5	Standard query (0)	play.google.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 17:06:57.917152882 CEST	433	OUT	GET / HTTP/1.1 Host: celerysticksva.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 4, 2024 17:06:58.396554947 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:06:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Link: <https://celerysticksva.com/wp-json/>; rel="https://api.w.org/" Cache-Control: max-age=7200 Expires: Fri, 04 Oct 2024 16:36:23 GMT Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Last-Modified: Fri, 04 Oct 2024 14:36:23 GMT CF-Cache-Status: HIT Age: 1835 Set-Cookie: __cf_bm=j5nuV6KyGKv7pk8PDgyUL71yP0dm5EmX3oThrc0oBCM-1728054418-1.0.1.1-Q4QBBBnKx.cOBlpYHIS_FS7t7vzJEXXA0ccg_kAzo.zONEG6ycQM_3LowXkOoDLjnDxJ9Z1Z3gfm5G_AXZZAvQ; path=/; expires=Fri, 04-Oct-24 15:36:58 GMT; domain=.celerysticksva.com; HttpOnly Set-Cookie: _cfuvid=v7ZtYV_qImtWndGcjonHPG_XPymvp44A0K4b1kZoRyc-1728054418346-0.0.1.1-604800000; path=/; domain=.celerysticksva.com; HttpOnly Server: cloudflare CF-RAY: 8cd614328c425e7e-EWR Content-Encoding: gzip Data Raw: 32 66 39 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 7b b7 9b 38 b2 ef df d9 9f 42 61 af d9 db 74 03 06 0c f8 15 ef 9e 3c 67 72 4e 67 ba a7 93 74 df b9 9d 5e 59 32 08 9b 04 03 0d f2 63 b7 67 7f f7 bb 4a 02 0c 18 e3 c7 b6 67 e6 dc 75 26 93 b4 11 a5 5f 95 4a af 52 51 92 9e 3d 7d f5 c3 cb 0f ff f8 f1 35 9a d2 99 7f 77 f5 0c fe 83 7c 1c 4c 46 02 09 e4 8f ef 05 48 23 d8 b9 bb 7a f2 6c 46 28 46 f6 14 c7 09 a1 23 e1 e3 87 37 72 4f 40 ed fc 4d 80 67 64 24 2c 3c b2 8c c2 98 0a c8 0e 03 4a 02 3a 12 96 9e 43 a7 23 87 2c 3c 9b c8 ec 41 42 5e e0 51 0f fb 72 62 63 9f 8c 34 86 53 80 b9 8d c3 71 48 93 db 1c e4 76 86 57 b2 37 c3 13 22 47 31 01 26 03 1f c7 13 72 cb 32 52 8f fa e4 ee 25 f1 49 7c 8f de 53 cf fe 9a 3c 6b f3 c4 ab 67 be 17 7c 45 31 f1 47 02 f6 29 89 Data Ascii: 2f9f}{8Bat<grNgt^Y2cgJgu&_JRQ=}5w\|LFH#zlF(F#7rO@Mgd$,<J:C#,<AB^Qrbc4SqHvW7"G1&r2R%I\|S<kg\|E1G)
Oct 4, 2024 17:06:58.396581888 CEST	1236	IN	Data Raw: 03 4c 89 80 e8 7d 44 46 02 8e 22 df b3 31 f5 c2 a0 1d 27 c9 b7 ab 99 2f 20 96 6f 24 94 d0 d0 4d 8c 7f 9f 87 43 f4 86 10 47 40 d3 98 b8 23 61 4a 69 94 0c da 6d 9b 51 26 8c 70 81 15 3b 9c b5 5d 42 9c 36 2f d4 59 d9 bf 0c 67 33 12 d0 e4 50 39 ec 94 Data Ascii: L}DF"1'/ o$MCG@#aJimQ&p;]B6/Yg3P9(Pb^D^K2"PZ\|}ajj'R6Sc2jk*O$A4d1ahb&c`)3mm\|j/#l/K`'Dy%nAX
Oct 4, 2024 17:06:58.396594048 CEST	1236	IN	Data Raw: c6 cb 34 2a b6 61 bb 15 8c 48 3a 39 c3 00 11 cf 3c b0 5a 5b a2 44 5b d0 af 0b 55 08 a4 6e 2b 91 e6 52 24 8a 0f fc b5 42 a7 24 28 75 0a 37 8c 5b ac ef 23 2f 40 44 dc 74 b8 5f e9 6f 23 f2 2b 2d f6 41 65 d3 e9 46 b5 a9 37 37 a5 fc 12 ef ce 4f 47 23 Data Ascii: 4aH:9<Z[D[Un+R$B$(u7[#/@Dt_o#+-AeF77OG#M.`G=-PR(1\|}^$TEj^F[/?0mR@IED`SG<<KetJQ\|hCrB{(Xgl,`t;e$'%NB
Oct 4, 2024 17:06:58.396605015 CEST	1236	IN	Data Raw: f7 d4 0b d5 2b a1 49 5d 4b 72 0d b3 a7 5e a6 a7 ba d8 26 e3 30 ac 1b 90 b4 6e b7 e7 ea 97 e1 ea 2d c8 74 1e 38 31 71 a2 3a 15 ab 97 2a ad ef d9 5f e3 3a 86 86 a5 39 ce 65 78 86 f3 38 f9 7d 8e e3 da 06 6c 99 56 b7 77 11 be 13 8f 4e e7 e3 1a 9e ba Data Ascii: +I]Kr^&0n-t81q:*_:9ex8}lVwNuQoT~1.S/0uIsWpY]"l}P'~?9,2'4tj9)+X8#,42T2[iLj5{RF,@IBk_U/Jjyf^q
Oct 4, 2024 17:06:58.396619081 CEST	1236	IN	Data Raw: 7f b8 93 08 e2 e3 07 86 1e ad d2 b1 97 8d 6c b0 2b 50 f6 a1 0f c1 aa fe 7e 6b 90 ab fb 8c 0d c6 6a 05 01 2a f0 60 80 8e 06 7f 9a a4 e0 39 0f e2 57 22 ad 41 f6 16 9e 23 4f d8 0e 0a fb 1e 07 32 0d d3 34 f6 04 5e 55 c0 71 3c a6 fb 5c d4 a2 af 1c fa Data Ascii: l+P~kj*`9W"A#O24^Uq<\"s12UQ{tZE<\|"<1N;F'5%%VSc=Jv2;s-.&tmuJ3adx1~>sw:jIvl> k']4Z
Oct 4, 2024 17:06:58.396630049 CEST	1236	IN	Data Raw: 1b 4f c6 b8 65 49 9a d1 95 74 bd 2b 69 22 52 ff 04 89 2d cd 34 a5 9e 26 e9 ba 21 22 b0 23 c4 9d ac ab 9d 7f c3 bb d8 c3 77 f3 6f 81 63 4f d7 55 49 eb a9 39 7b 55 d2 d5 9e a4 75 d4 bd dc 6b 46 2b 90 60 c7 c8 d7 a4 06 dd d4 25 ad 67 4a ea 46 0d 90 Data Ascii: OeIt+i"R-4&!"#wocOUI9{UukF+`%gJFhJ&%gXzdXac^uf~j6`%gHZCx.q<LgwB$MH/j*uzaaeiY5~OD<t'uooaUw:)z7fj'C
Oct 4, 2024 17:06:58.396641970 CEST	1236	IN	Data Raw: f2 b4 62 d0 74 81 11 e8 ea 9b 8d 8a d2 b0 3b 7e 30 b2 c6 0c a9 61 f9 1d 01 67 ad da 88 37 70 bd 38 a1 b2 0d 57 87 ec 80 de 03 00 5b c7 ea f3 6f d8 d7 8d 81 e9 79 df 38 da 08 5f 89 7b de 6e 61 45 69 d7 f5 b2 ee c7 d8 08 bc ae 13 77 2f c0 37 eb 86 Data Ascii: bt;~0ag7p8W[oy8_{naEiw/78x#KW:vuwNbVT95dpyQi$E7j(bk.`=&>W%tRV1261<_D&:sN^<Hn`(Jc;04GXg
Oct 4, 2024 17:06:58.396965027 CEST	1236	IN	Data Raw: 8f b4 48 4f 67 74 b8 25 7a 3a 8f 43 2d d0 d3 39 1c 64 79 3e 02 7e 87 c5 b9 e7 c8 93 7d 47 7d d6 f0 3d f8 38 95 43 ac 8b 9a 53 50 1e 25 d2 21 0c 0e b5 b2 76 9d 8f f2 38 01 8f e1 74 b0 05 5a 3c 3e e5 9c e2 d5 c0 d7 b5 b1 fd a7 aa 3c ae 9d ed c7 af Data Ascii: HOgt%z:C-9dy>~}G}=8CSP%!v8tZ<><wk[y1)bgvXePMmG9Os];;Ql605<<O',7r@j7$<~zyxtxa40la{&5Ggj#sukuu~H8x
Oct 4, 2024 17:06:58.396976948 CEST	1236	IN	Data Raw: a9 d6 47 c2 2f 61 ec fc 08 5a 46 ec fe 66 9e 27 ad 3c 50 d2 32 92 fd 10 3b 72 14 fa f7 2e 5c a3 cd 5b f6 0c 47 c2 dd 55 0b fd f5 c3 bb ef df 33 ea d7 7c 6a 50 b2 79 07 dd dc 34 bc 6d 09 1b 1c 11 89 e8 9f ff 44 4e 68 cf 19 cd 32 f6 28 69 a1 db c3 Data Ascii: G/aZFf'<P2;r.\[GU3\|jPy4mDNh2(iP~Ox2]ZM)zZ[t}US1x%mST:}jkx8jXO/'VFbB."YnseZ]]=uG/@s+k}7e"'T
Oct 4, 2024 17:06:58.396989107 CEST	1236	IN	Data Raw: 77 cf c0 53 8a 56 23 c1 10 d0 fd 48 e8 2a a6 90 89 a1 15 06 73 0d d2 db 55 6a ad 99 18 44 bb 7b d6 e6 d5 76 c7 54 53 3b 51 ee ab 12 84 04 c4 56 c7 b3 d0 c1 be ac 55 2a 87 c1 c9 32 0b be 61 04 50 29 23 21 a1 98 12 c5 4b 58 f5 44 24 10 ea 32 79 10 Data Ascii: wSV#HsUjD{vTS;QVU2aP)#!KXD$2y"'#NWReZi_9&}R<f. kTRSY+dRA<r>F<))K(DF\%x?k(GHxu)=R4R:&5d)
Oct 4, 2024 17:06:58.403640985 CEST	844	IN	Data Raw: 9a 9c 66 6d 6e b2 64 b0 9a 62 15 ef 10 cc 23 a8 fb 90 ba 1d be 84 2a 57 81 f4 e0 5a d2 25 84 23 d8 53 d8 ed 3d 40 34 c6 41 02 5f ef 86 c2 dd 15 42 cf 3c 37 c6 33 82 c0 05 c9 5c a8 3e fe e3 5e d8 d6 46 16 fb b4 43 1b fc 89 5f bd 31 44 f9 4d 91 59 Data Ascii: fmndb#WZ%#S=@4A_B<73\>^FC_1DMY AQBU^o_lp#'9$&_boy/oy~=j>!;gcKhH$#[o\`o4fw2_M"wn>\aA
Oct 4, 2024 17:06:58.619507074 CEST	628	OUT	GET /wp-includes/blocks/navigation/style.min.css?ver=6.6.2 HTTP/1.1 Host: celerysticksva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://celerysticksva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=j5nuV6KyGKv7pk8PDgyUL71yP0dm5EmX3oThrc0oBCM-1728054418-1.0.1.1-Q4QBBBnKx.cOBlpYHIS_FS7t7vzJEXXA0ccg_kAzo.zONEG6ycQM_3LowXkOoDLjnDxJ9Z1Z3gfm5G_AXZZAvQ; _cfuvid=v7ZtYV_qImtWndGcjonHPG_XPymvp44A0K4b1kZoRyc-1728054418346-0.0.1.1-604800000
Oct 4, 2024 17:06:58.751367092 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:06:58 GMT Content-Type: text/css Content-Length: 3248 Connection: keep-alive Last-Modified: Tue, 23 Jul 2024 17:11:01 GMT Cache-Control: max-age=2592000 Expires: Sun, 03 Nov 2024 14:45:15 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress CF-Cache-Status: HIT Age: 1302 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cd61434cf2c5e7e-EWR Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 52 eb 8e db 38 96 7e 15 cf 04 01 6c 4c d1 50 d5 76 27 3d 24 a6 11 a0 9f 62 b1 58 18 94 78 24 9d 14 45 12 e4 91 2f 11 bc cf be 14 25 db 55 89 5c 65 57 aa 92 ee c1 f8 87 2c 91 e7 f2 dd 96 1b c7 72 6d 8b 7b 66 e4 1a 2b 49 68 4d e7 6c c0 fe 85 7b d0 f1 64 0d 82 3d b8 66 5a ee 6c 4b ec 73 1b 08 4b 2c 86 c3 00 44 68 2a 5e 6a d8 b2 40 d2 d3 64 93 42 0f c5 30 db 6e 26 2b 36 5e 3a de 3f 9e 58 ba 7b 6e 8d d4 58 19 5e 80 21 f0 fb e5 04 c7 59 ab bb 46 fa 0a 0d cb 2d 91 6d 78 26 c6 6f 0d 25 9d be c8 ba f8 e1 a4 52 91 dd 78 77 6e e2 cd 99 f3 99 c6 4e 63 a0 08 78 a7 81 1b 6b e0 30 f1 dc b0 a9 43 86 04 4d 97 a8 a5 d7 30 12 14 b9 2c ee 2b 6f 5b a3 58 61 b5 f5 1c 4d 0d 1e 49 28 0c 2e 2a 92 d4 12 df b8 7a e5 e6 c9 9b d5 2a b4 79 03 a6 8d 9b 0d 49 34 e0 39 34 8e 76 dd 61 77 cf f6 ca 4d ab 55 3f 2c 72 3b 0e 49 65 2f 9d 72 c1 9e 47 b2 4d ee 59 d6 32 30 82 6d 8c 30 14 d6 0f 43 a2 e2 e0 75 24 7d 01 8a c9 70 7c f7 54 2e 8b de ca 37 1a 5e da a2 0d dd 57 23 f8 71 c4 e5 42 f5 d5 8c ea 98 d1 aa [TRUNCATED] Data Ascii: R8~lLPv'=$bXx$E/%U\eW,rm{f+IhMl{d=fZlKsK,Dh^j@dB0n&+6^:?X{nX^!YF-mx&o%RxwnNcxk0CM0,+o[XaMI(.zyI494vawMU?,r;Ie/rGMY20m0Cu$}p\|T.7^W#qB~U\|\VMbz\UBg<dZ6o#NjK^DE.r2V[H">&$Mz?K+( Sj&HA&+@~NwTT2uMb=<&3:u\|}ILKlc6Z`TmGRO$yaIl_Dc3\0AHY5a1\OQJ2WJQO2;]BjMN1@sG}O2}T9je`EZWDc&7R\Yz$).BL:
Oct 4, 2024 17:06:58.764400005 CEST	622	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: celerysticksva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://celerysticksva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=j5nuV6KyGKv7pk8PDgyUL71yP0dm5EmX3oThrc0oBCM-1728054418-1.0.1.1-Q4QBBBnKx.cOBlpYHIS_FS7t7vzJEXXA0ccg_kAzo.zONEG6ycQM_3LowXkOoDLjnDxJ9Z1Z3gfm5G_AXZZAvQ; _cfuvid=v7ZtYV_qImtWndGcjonHPG_XPymvp44A0K4b1kZoRyc-1728054418346-0.0.1.1-604800000
Oct 4, 2024 17:06:58.865608931 CEST	1130	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:06:58 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Tue, 01 Oct 2024 14:50:16 GMT ETag: W/"66fc0c28-4d7" Vary: Accept-Encoding Server: cloudflare CF-RAY: 8cd61435a8315e7e-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 06 Oct 2024 15:06:58 GMT Cache-Control: max-age=172800 Cache-Control: public Content-Encoding: gzip Data Raw: 32 38 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 8d 54 5d 6b db 30 14 7d df af c8 34 68 24 ac 38 6d 1f f6 50 47 1d 25 0c 56 d8 07 ac dd 53 c8 82 2a 5d 27 02 45 72 af af 4b 4b e2 ff 3e e4 d8 4d b6 3d 6c 60 30 3e 57 f7 9e 73 ee 11 7e 5b 36 c1 90 8b 81 8b 1d 6b 6a 18 d5 84 ce 10 2b 06 7c 04 1c c4 8e f0 65 e7 4a ce 9a 60 a1 74 01 2c 53 8a 5e 2a 88 e5 c8 c4 50 47 0f 02 81 1a 0c 05 03 c4 88 cc 85 a1 f0 a1 7f e7 5d 81 83 b8 1a 00 1f d7 1c 44 6b 34 99 4d 22 69 db 57 52 4a df 87 89 23 9b bb 10 00 3f dd 7f f9 ac c6 33 3d da 20 94 8a 8d 33 c8 11 2a af 0d f0 29 9b ae 25 3b 7b 6c 22 15 4c 64 63 76 3d 9b ea eb b1 b4 b9 d9 38 6f bf 46 0b f5 e2 7c 99 af 81 6e 88 d0 3d 34 04 9c a5 39 4c ec f7 8c 1d 79 91 83 24 b1 7b d2 38 42 05 79 dd 3c d4 84 9c e4 a5 28 7a 35 95 c6 1a 6e 03 71 94 17 ef c5 b1 33 f0 20 8d d8 95 11 79 ea 8e 8a 31 a9 15 76 a8 74 ca 64 97 85 9b 85 dc 43 58 d3 a6 70 99 ba 3c d0 f8 ee 8c 13 3f 75 11 33 75 47 e8 c2 3a 2f 31 6e e7 1b 8d f3 68 81 7b d1 a6 f5 47 65 c1 44 0b 3f be df ce e3 b6 8a 01 02 71 a8 8d ae [TRUNCATED] Data Ascii: 28fT]k0}4h$8mPG%VS]'ErKK>M=l`0>Ws~[6kj+\|eJ`t,S^PG]Dk4M"iWRJ#?3= 3)%;{l"Ldcv=8oF\|n=49Ly${8By<(z5nq3 y1vtdCXp<?u3uG:/1nh{GeD?qG1;h{Fx0{4pjL$[0KUr,<+\CAvBI~Z:q\|V!P_:+!<M@Am2I666?m0m52"@hId%i21Gljl)&Fn;&Z1Y*f5);g=1Q8><$z8im0sgUu?~9e'g)fk0

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 17:06:58.619508028 CEST	695	OUT	GET /wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.css?ver=2.4.1 HTTP/1.1 Host: celerysticksva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://celerysticksva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=j5nuV6KyGKv7pk8PDgyUL71yP0dm5EmX3oThrc0oBCM-1728054418-1.0.1.1-Q4QBBBnKx.cOBlpYHIS_FS7t7vzJEXXA0ccg_kAzo.zONEG6ycQM_3LowXkOoDLjnDxJ9Z1Z3gfm5G_AXZZAvQ; _cfuvid=v7ZtYV_qImtWndGcjonHPG_XPymvp44A0K4b1kZoRyc-1728054418346-0.0.1.1-604800000
Oct 4, 2024 17:06:58.747212887 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:06:58 GMT Content-Type: text/css Content-Length: 11953 Connection: keep-alive Last-Modified: Wed, 25 Sep 2024 15:23:32 GMT Cache-Control: max-age=2592000 Expires: Sun, 27 Oct 2024 20:20:23 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress CF-Cache-Status: HIT Age: 1302 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cd61434cf4f7d00-EWR Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 eb b8 95 ed e7 99 5f c1 3e 29 57 8b 8e c0 26 29 c9 0f b8 7c 2a 33 49 26 e9 a9 f4 54 1e 53 49 a7 4f 5c 2e 90 00 49 b4 41 80 01 20 51 32 cb f7 4f dc af f7 d7 dd 5f 72 c1 87 64 be f4 f0 e3 74 77 e6 a6 dd 47 04 36 f6 5e 7b ed b5 97 c3 23 0c 24 61 48 d3 15 29 32 a1 a8 a6 82 c3 6d e4 0b 9a 66 42 6a c4 f5 93 03 ca d4 40 68 2d 52 e0 15 f5 01 02 c7 5f 48 92 0e f2 b4 c8 80 fb 37 67 51 98 83 49 f2 f6 67 79 4d ca 20 63 97 e0 56 19 be 33 96 10 0a 06 94 46 52 1b 9c 58 d2 2a b0 4c 79 1d 83 de fe 74 7f 24 dd df 9f 3e 1b 49 9f ed 4f 9f 8f a4 cf f7 a7 2f 46 d2 17 fb d3 2f 46 d2 2f f6 a7 5f 8e a4 5f 8e a5 13 8e 4b b5 db d9 26 04 3d 77 6f b2 37 4c 1e d5 bc 4a f6 87 c9 a3 8a 57 c9 b3 61 f2 a8 de 65 f2 e5 20 77 ef 78 57 83 d4 ab 7d a9 d7 83 d4 eb 7e aa 14 79 d7 7d bb 40 d7 7a 95 d9 d3 35 f0 21 17 7a f2 49 e9 0d 23 e7 b7 29 92 31 e5 77 76 51 1f 00 23 91 86 a0 67 f3 9b e6 51 d2 38 19 be d6 34 d2 0d 70 0f 22 07 42 6b 91 42 77 08 ab 45 06 07 eb 4d 03 70 75 0a 9e 3f c6 45 1f a9 2d 3b [TRUNCATED] Data Ascii: rks_>)W&)\|3I&TSIO\.IA Q2O_rdtwG6^{#$aH)2mfBj@h-R_H7gQIgyM cV3FRXLyt$>IO/F/F/__K&=wo7LJWae wxW}~y}@z5!zI#)1wvQ#gQ84p"BkBwEMpu?E-;)'c?7[(B(wP`26-+Ri0ySH[DP8(O]7lRkIjhkNAI2))ZOI>O:tp#(T),1Cl1@YMII(;@HL$Ah-Rdfccc44KfH%=e#eh1cUczF"f i!zXGEZd#"l@Da';vGW/b4dReU5PVMZ009 F'+$'
Oct 4, 2024 17:06:58.747237921 CEST	1236	IN	Data Raw: e0 af 99 7d 3e 88 2a 93 4c 40 84 42 2d a4 6d 1f 68 60 39 e6 12 30 11 3e 18 32 14 df df 37 0f 80 a6 28 26 85 58 11 19 31 43 32 a1 18 13 fe 6a 20 8b a6 71 a1 25 e2 8a 6a 2a 38 ac 8e 91 90 a9 e5 5c 28 8b 20 45 00 e5 40 2c 0f 49 7a bc 03 4c 4a be c5 Data Ascii: }>L@B-mh`90>27(&X1C2j q%j8\( E@,IzLJV2L<;QP,NVWJ! '>`)2Q[<[c&;uk~E'OHl lm)(0HRlf&HsIcNhhx\|y"S/:X,o?Z*ChS2C>4
Oct 4, 2024 17:06:58.747248888 CEST	1236	IN	Data Raw: 52 75 6b c4 68 cc 41 68 d6 4f e4 0b 89 8d 83 18 ba d2 ac 09 50 5e da 11 a2 a5 16 6f 65 57 9b f8 6d e4 2a 8c 2e 37 e3 17 24 75 9f e1 be 36 76 51 dd 72 89 32 d8 84 fa 73 b5 d3 3f 26 de 74 24 e8 8f 05 67 63 c1 f9 48 30 3b 91 43 26 89 d6 9b 69 3f d0 Data Ascii: RukhAhOP^oeWm*.7$u6vQr2s?&t$gcH0;C&i?#Hl>6<)8D+s}.9dj^!)vZI[)1Rh?gbnYV5MmB9ATs$=<\H)#,6/#5
Oct 4, 2024 17:06:58.747364044 CEST	1236	IN	Data Raw: f9 b2 1a 69 82 8d fa 90 0b 3d f9 84 91 46 40 92 cc 80 34 8f 06 f4 ce fe 14 32 a4 d4 f9 6d 7b 61 77 bb 95 7b 5f d0 34 33 ab 43 5c f7 1b 7f 3b f1 ec e7 d7 27 4c 57 30 41 6a f2 71 4b 40 e7 54 69 d3 dd 2e 32 22 55 46 cc 88 2b 02 3d df 75 b3 f5 53 3f Data Ascii: i=F@42m{aw{_43C\;'LW0AjqK@Ti.2"UF+=uS?kx?qeU'fHo[&mI$^'Vp`kngGLh9vXAH'.8.<R"'39d4H"zZYF#\|;!o9X
Oct 4, 2024 17:06:58.747375965 CEST	1236	IN	Data Raw: b7 dc 7d 19 34 da 86 ce c2 31 12 98 bf eb d2 2c 15 91 92 e0 dc e0 5e 19 23 cd c1 dc ba ac 3b 59 a5 27 af aa 2d 57 df 72 4f 65 6e b5 3d af ff af ea 5b 76 aa bf b5 cd bc ca 56 d7 86 fb 45 b9 c9 6a 68 73 b7 2e 6a 31 aa 6f a9 65 29 ce 65 69 18 b3 fe Data Ascii: }41,^#;Y'-WrOen=[vVEjhs.j1oe)ei,UFz5/Cbw0k[cq*~U#3&H~%,]Jn+8\T3,y0"V3Wg_~Zq}!b1$#HI>
Oct 4, 2024 17:06:58.747395992 CEST	1236	IN	Data Raw: 0a ca 8d 71 a0 3b 86 82 02 25 d8 52 b7 51 2a 75 1d aa 80 14 42 57 44 90 d1 d4 6c 74 1f bc 26 6b 6d 94 c7 25 5f 70 6d fe cb d6 c7 48 c1 80 18 51 49 01 72 12 3c 50 0d 02 14 3e 60 29 32 10 51 66 e6 85 01 5b ca 49 d7 3f 37 a7 e6 c4 52 2c 39 86 89 59 Data Ascii: q;%RQ*uBWDlt&km%_pmHQIr<P>`)2Qf[I?7R,9YgS5?NH KVZ8p#NPHziF@VW99m7Zd=GV\Y'6Y,T<X'+Aj`"V{fwOi"#^L#EpZfRJI#0Z
Oct 4, 2024 17:06:58.747406960 CEST	1236	IN	Data Raw: eb ee 77 76 d1 be b6 9b 6f e9 a9 65 a0 19 39 ac cc e7 f0 f7 b8 3c 9f 85 47 cb 6e 07 8d b6 a5 54 4b a6 3e 37 97 71 bb 34 cd 0f ac ea 09 e6 09 91 64 02 a5 10 da de d5 ab 04 61 91 03 b0 56 d0 b5 bc 6c 6d f9 e6 9f 6b c9 38 40 13 ef 6a 6a fe f7 67 53 Data Ascii: wvoe9<GnTK>7q4daVlmk8@jjgSX76%l+]on^/n/$otDO'$%8Nl&=DS1[Wm0]zm$br0&`A?}Rz0Y'\+ (0
Oct 4, 2024 17:06:58.747560978 CEST	1236	IN	Data Raw: 09 4e b8 56 40 12 45 1f 51 c0 88 01 59 df df 87 82 6b 44 39 91 bb e1 7e aa 53 f4 ad f3 93 26 7b c8 26 f5 1c 75 58 69 29 78 6c 4f b7 73 50 05 2a 50 50 e6 e8 84 a4 e4 ce ea b6 b9 fb 07 98 fb 7f f0 80 1f 69 1a 1f 5a ee 4f 95 f7 3f 17 f0 63 f3 76 42 Data Ascii: NV@EQYkD9~S&{&uXi)xlOsP*PPiZO?cvBfDG-b}DNqF?i,34a]9#IW,Uji_<P$CiLK[<5Y#,lZ3)F$?QA}z:zz0oidw2IS$7
Oct 4, 2024 17:06:58.747571945 CEST	1236	IN	Data Raw: 23 a1 06 b2 54 05 5a de 85 f5 95 75 fd e1 ce 7e f6 e2 d9 2b 9b ed 3a b4 b8 5b a5 1a c9 87 bb e9 5b 81 1a 9c 8e 2e ae 9b ad df 93 eb e5 fb 50 bd 1c 30 5d 5c bc 33 d3 c5 fb 30 5d 0c 98 ce df 5b d3 d9 e2 5d 98 d6 30 6d a6 fe d5 7b 33 7d 1f 4d 67 03 Data Ascii: #TZu~+:[[.P0]\30][]0m{3}MgM;37`GYE @Gc^;Y)@FKU$d@5/U@A('cEkw5z)dH%w0h6+F;hN5kBr@q@fF"`h#D
Oct 4, 2024 17:06:58.747582912 CEST	1236	IN	Data Raw: 4b 09 54 ba f3 c7 ee 21 a2 cc 78 0a 96 ef 93 79 b6 6e af fc 84 9c b1 2e 29 3e dc e5 ea 84 2e 57 23 5d 50 a0 04 5b 6a 02 12 82 30 91 45 7f 7d 37 99 50 b4 b2 c5 36 b3 f5 26 ab 45 b4 b3 1f 01 e5 98 ac 8d 6c ed 46 04 53 2d 64 6d 21 05 72 89 b2 8c 48 Data Ascii: KT!xyn.)>.W#]P[j0E}7P6&ElFS-dm!rHk=Z>E2.C]rlUyy.SO$hP<+k89>rRjab9y ngK]Dk#'DRb0<Jw~z!="
Oct 4, 2024 17:06:58.760221958 CEST	113	IN	Data Raw: 03 47 66 95 62 c9 31 c1 80 c5 1d ab 02 89 30 5d 2a e3 d5 a0 76 7a 7d 87 ce 3e 76 4d 5a e9 b5 6d 49 05 b5 d7 7d 19 70 3b 1d 33 84 31 e5 b1 e9 d8 9c a0 3b 5a b6 3e 56 07 18 89 74 bb f8 66 fb 20 69 9c e8 3d b0 9b a3 b0 81 d0 5a a4 a3 c0 5a 64 e3 b0 Data Ascii: Gfb10]*vz}>vMZmI}p;31;Z>Vtf i=ZZduNV`yx>

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 17:06:58.628516912 CEST	679	OUT	GET /wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.js?ver=2.4.1 HTTP/1.1 Host: celerysticksva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://celerysticksva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=j5nuV6KyGKv7pk8PDgyUL71yP0dm5EmX3oThrc0oBCM-1728054418-1.0.1.1-Q4QBBBnKx.cOBlpYHIS_FS7t7vzJEXXA0ccg_kAzo.zONEG6ycQM_3LowXkOoDLjnDxJ9Z1Z3gfm5G_AXZZAvQ; _cfuvid=v7ZtYV_qImtWndGcjonHPG_XPymvp44A0K4b1kZoRyc-1728054418346-0.0.1.1-604800000
Oct 4, 2024 17:06:59.117629051 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:06:59 GMT Content-Type: application/javascript Content-Length: 936 Connection: keep-alive Last-Modified: Fri, 04 Oct 2024 03:18:55 GMT Cache-Control: max-age=21600 Expires: Fri, 04 Oct 2024 20:45:16 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress CF-Cache-Status: HIT Age: 1303 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cd614371c9443e7-EWR Data Raw: 1f 8b 08 00 00 00 00 00 00 03 9d 52 4b 6f e3 36 10 be f7 57 d8 3c 04 24 40 b1 e9 55 86 6a a4 6e 16 08 d0 74 0f 7b 2c 0a 83 12 47 36 61 8a 74 49 ca ae 61 fb bf 77 a8 87 ad 16 46 ba bb 27 51 e4 cc 7c f3 3d 28 65 c5 cf e7 83 f4 33 53 54 46 86 70 ae 9c 0d d1 b7 55 74 9e 9e 2b a3 c1 c6 37 95 47 2e 84 b0 d7 e2 7c 65 e7 b8 d5 41 b8 7d d4 58 59 9c 65 15 f5 01 56 a9 37 27 b6 56 d9 b1 cc a4 d5 8d 8c a0 32 6d 09 f7 ce c5 dc b6 c6 74 a7 77 e9 37 da e6 e4 79 ff 37 e1 71 eb 21 6c 9d 51 f9 73 3f ff ea ca 00 fe 00 af 06 1a 04 0e 34 72 5b 74 bd 50 cc 7f 62 67 5d d3 39 25 6f 36 82 0f 50 a5 0d 3e f7 0d 9e 68 3b 3b 6a ab dc 91 5d 2e f3 b8 14 06 ec 26 6e 2f 17 e5 aa 36 cd 12 e3 61 98 2d 3a ba bf e9 80 27 67 a3 d4 36 50 52 1a 57 ed 32 50 1a d9 67 fd cf de c3 41 c3 71 bd 4e 55 d8 97 e9 da cb 06 08 63 1e 62 eb ed a2 6e 6d b7 c9 4c 52 cf f5 20 cf ba 69 a3 4c b7 2b 69 4c 29 ab 5d 7a e3 96 5d 0d c4 99 2b 2c 1c 67 8f 58 d0 be 79 2b ad 32 30 2d 10 25 72 eb 5e 19 9f ea cf b8 ea 86 bd 0f 70 b7 41 72 d2 c1 78 fb b8 68 8a d6 39 38 [TRUNCATED] Data Ascii: RKo6W<$@Ujnt{,G6atIawF'Q\|=(e3STFpUt+7G.\|eA}XYeV7'V2mtw7y7q!lQs?4r[tPbg]9%o6P>h;;j].&n/6a-:'g6PRW2PgAqNUcbnmLR iL+iL)]z]+,gXy+20-%r^pArxh98VLQjK=f%_@@6DCT3X/YuF>iyE])ph1 c:kW10T`3BbO_(_DI1X7pk!P+Z;j1Nb<-B=EAJf.#Ca5-1v1Ue`UWOOy(Q24u\|aoiX"m\|<PwGJbv(4.lIh)IwNPwiU{u9t{'
Oct 4, 2024 17:06:59.117820024 CEST	230	IN	Data Raw: dd e8 64 15 e6 71 93 c6 04 9c 92 0c 8b 45 58 0a 05 18 24 b3 c4 bc 68 9c f2 a6 16 15 66 f4 5b 00 ba 4f e6 7c ba ba 41 4c 36 3d 6a ab dc 51 38 6b 50 8f a2 6e 6d 95 b6 a1 ac 7b 5e 8c ff b3 8a 86 21 74 fd 6a 37 fc d2 a9 d3 24 cd 68 45 ec 93 df 03 83 Data Ascii: dqEX$hf[O\|AL6=jQ8kPnm{^!tj7$hEl/7?{u^jqy)/`}Fk}-+wizw.uF(M{ywj /Ub{"VJW'o1-~P
Oct 4, 2024 17:07:44.216062069 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 4, 2024 17:08:29.227960110 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 17:06:58.629492998 CEST	646	OUT	GET /wp-includes/blocks/navigation/view.min.js?ver=6.6.2 HTTP/1.1 Host: celerysticksva.com Connection: keep-alive Origin: http://celerysticksva.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://celerysticksva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=j5nuV6KyGKv7pk8PDgyUL71yP0dm5EmX3oThrc0oBCM-1728054418-1.0.1.1-Q4QBBBnKx.cOBlpYHIS_FS7t7vzJEXXA0ccg_kAzo.zONEG6ycQM_3LowXkOoDLjnDxJ9Z1Z3gfm5G_AXZZAvQ; _cfuvid=v7ZtYV_qImtWndGcjonHPG_XPymvp44A0K4b1kZoRyc-1728054418346-0.0.1.1-604800000
Oct 4, 2024 17:06:59.167027950 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:06:59 GMT Content-Type: application/javascript Content-Length: 1166 Connection: keep-alive Last-Modified: Tue, 30 Apr 2024 15:05:15 GMT Cache-Control: max-age=21600 Expires: Fri, 04 Oct 2024 20:45:16 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress CF-Cache-Status: HIT Age: 1303 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cd614373f6fc333-EWR Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 52 db 8e db 36 10 fd 15 af 1e 14 a9 e0 32 ce ab 0c c5 4d d2 0d 0a 24 c1 06 68 de 0c 17 a0 a5 91 cd 2c 4d ba e4 c8 1b 43 d6 bf 77 a8 8b 2d 3b ea 76 93 be 74 b1 80 a9 e1 f0 cc b9 8c dc ee 8c c5 5f 84 9b c0 a4 b0 66 1b fc fa 68 6c be b3 e0 dc 4b a9 11 ac c8 50 ee 25 1e 82 d9 5e d8 09 a6 55 9e 44 c0 74 9c be ae 0a 63 23 5f 34 13 a9 27 3a 46 6e 22 cd 4c 1c 86 37 fe 08 cd f1 7e f5 15 32 e4 39 14 52 c3 67 6b 76 60 f1 e0 ef 58 05 ba dc 12 fe 4a 41 72 33 65 6b c0 44 2f cc b2 8e 6b 66 fc 08 a4 11 dd eb 9d 35 68 f0 b0 03 be 11 ee fe 51 f7 38 3c 13 4a 35 ad f5 2c 33 da e1 44 a7 11 10 33 cf 4a a7 55 3d b3 80 a5 d5 13 22 40 d4 20 66 ba 8e a3 8a 46 bd 33 a4 ed 1b 26 11 0d 01 7e 2e 78 1a 77 0a b6 a0 07 77 5d 81 39 34 16 ba 72 73 ae 63 66 d2 45 20 16 1b 0b c5 32 60 2f a4 de 95 24 c3 60 b4 c8 a5 f3 d2 f2 65 dc 7e 7b fa 69 b0 91 79 0e 3a e8 8b c2 4a 71 db d6 96 f1 0b 16 38 50 a4 77 1c e0 a2 37 60 81 a7 2b 2c 88 e7 75 af 4a 44 a3 9f d7 bb c8 bc 19 f4 9f 4b f4 8d 5e d9 82 4e 52 e7 f0 6d [TRUNCATED] Data Ascii: R62M$h,MCw-;vt_fhlKP%^UDtc#_4':Fn"L7~29Rgkv`XJAr3ekD/kf5hQ8<J5,3D3JU="@ fF3&~.xww]94rscfE 2`/$`e~{iy:Jq8Pw7`+,uJDK^NRm>L[b9MVz=>JG(` S2{X8nD1bTH:L~^jkNQJRQ\IfVC-98!m<Pf$TOL.E[5G@cOx+Uv=):7-h$]"iCFV+v)\#?4`Gq2ex]{ddTS@vwJ"Zy++NFvQ,<%fH<fVS~Jy9!&M1
Oct 4, 2024 17:06:59.167042017 CEST	461	IN	Data Raw: 0c 91 17 2d 97 59 9b e9 70 3d 13 53 a7 6a 66 78 a3 ea 78 34 6d eb 3c 7a b6 e4 38 89 9e 65 2c 89 de 08 9d b7 a2 3f c0 81 48 eb 08 2e d6 0c 59 21 ad c3 06 44 ac 54 2f 22 31 4c 89 91 72 39 ba 83 b2 88 14 1f 2a 6c a5 c5 15 5d 04 77 2e 13 3b 68 d6 73 Data Ascii: -Yp=Sjfxx4m<z8e,?H.Y!DT/"1Lr9*l]w.;hs[dL,j0=dn#?yg}(ReX<-)41lM.aFtT#ax9'R6C2NW\|RC/`kv;Ht0X7
Oct 4, 2024 17:06:59.505506992 CEST	608	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=6.6.2 HTTP/1.1 Host: celerysticksva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://celerysticksva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=j5nuV6KyGKv7pk8PDgyUL71yP0dm5EmX3oThrc0oBCM-1728054418-1.0.1.1-Q4QBBBnKx.cOBlpYHIS_FS7t7vzJEXXA0ccg_kAzo.zONEG6ycQM_3LowXkOoDLjnDxJ9Z1Z3gfm5G_AXZZAvQ; _cfuvid=v7ZtYV_qImtWndGcjonHPG_XPymvp44A0K4b1kZoRyc-1728054418346-0.0.1.1-604800000
Oct 4, 2024 17:06:59.687930107 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:06:59 GMT Content-Type: application/javascript Content-Length: 5365 Connection: keep-alive Last-Modified: Tue, 30 Apr 2024 15:05:14 GMT Cache-Control: max-age=21600 Expires: Fri, 04 Oct 2024 20:45:17 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress CF-Cache-Status: HIT Age: 1302 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cd6143a5b01c333-EWR Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 52 69 73 db 48 92 fd de bf 82 c2 4c d0 c0 18 04 71 10 17 69 b4 c6 96 ad 89 8e 9d 76 77 8c bd bd 1f 64 ce 46 a1 2a 8b 82 1b 02 b8 38 2c b9 45 fe f7 ad ca e2 01 8a d4 41 5b d3 8a d0 63 a1 2a f3 65 e6 cb 37 fc db 49 ef e3 65 56 f7 78 96 43 4f fc 92 b6 29 07 33 28 a0 22 0d b0 de df 86 3f 0c 87 bd 0f 65 5b 51 18 f7 ae e7 83 ac a0 79 cb a0 1e 7e ae 87 cd 35 5c 95 9f 33 eb 2a 2b ac cf f5 0f 5f 48 d5 5b 5d 25 bc 2d 68 93 95 85 6e dc 6a 6d 0d bd ba a9 32 da 68 13 19 73 99 dc a6 a4 86 b1 76 d9 34 f3 7a 3c 1c 52 26 f3 19 e4 d9 97 ca 2a a0 19 ce 2e 87 9f 19 d0 df 81 ad 6b fc dd f1 2d db f2 86 a4 ae a1 a9 87 9a 09 37 cd 58 b3 e6 c5 4c 33 eb ec 0f 41 16 ba 37 a1 ab 99 34 17 21 ef c9 95 b8 c1 44 71 53 16 5f a0 6a c6 b7 bc 2a af ce 4a 06 bf 96 59 d1 8c 37 1d 32 e3 96 25 9a 6c 50 90 25 49 f3 75 0e 25 ef b1 d3 39 a9 6a f8 a9 68 74 66 3a 81 31 66 93 8c eb ec 55 e0 fb 5e 60 54 d0 b4 55 d1 03 91 3c d9 9c 7d df 8d 83 97 ba ce 06 89 8a fa f1 47 c7 36 4c 3f f0 5c fb a5 ee d8 ae d7 67 86 b1 [TRUNCATED] Data Ascii: RisHLqivwdF8,EA[ce7IeVxCO)3("?e[Qy~5\3+_H[]%-hnjm2hsv4z<R&.k-7XL3A74!DqS_jJY72%lP%Iu%9jhtf:1fU^`TU<}G6L?\g4rE4KuUVd%CyN(]f9ot\|&yc8)?Dl3mob-%y]nXl~\I0uvE!ZK&7iLH+3MRS{Y4KFNH^/\|^/XEf3h5GF3#zuEg*?-FLe0$/U9sO[YkBGq9p$SjY_7fe`=Q3+XYRh,udBkbTF6IZ9r"`b$ S# )DGb
Oct 4, 2024 17:06:59.687947989 CEST	1236	IN	Data Raw: e3 94 5b f3 b6 be d4 a9 31 76 84 0a b0 58 68 e5 b5 30 ef 87 df fe f1 2e 87 2b e1 4d 4d 2e 6a b1 b8 b2 84 86 8d ae 52 e5 5a ac a6 fc 67 79 0d d5 19 a9 41 37 8c c5 a2 eb ab 7e bf fb 25 d8 17 0b a6 53 d1 f5 da 84 7c 29 06 be 98 1a e6 3c c9 77 da 9d Data Ascii: [1vXh0.+MM.jRZgyA7~%S\|)<wv"8b8VVaHoWW7\|j6bHY%LfCpYRbJ"9LU^efybY&=5krITT[/{?]V)TJNfa^T6
Oct 4, 2024 17:06:59.687961102 CEST	1236	IN	Data Raw: 34 d8 91 c8 95 34 cc f3 11 43 94 cb 8b 11 19 22 7a 21 8d 10 f1 9e 32 0c a2 1c 4d 82 2a b1 00 af 98 90 f6 31 cb 1c 92 67 6b c6 b5 17 65 e4 83 37 c1 fe cd e2 48 8a b0 7b 73 b1 66 95 0f d3 87 a9 e2 ef ef 66 9f e2 89 dd ec 27 1e dd cd 53 28 be 59 9b Data Ascii: 44C"z!2M*1gke7H{sff'S(YJyvz(r:HnZnar`!} YhkwN6KIK7h=r&x">d.6.H-v<\| fn7>
Oct 4, 2024 17:06:59.688234091 CEST	1236	IN	Data Raw: fb f4 5b 1b ac f5 8b ee 75 5b 7a ef de f7 d6 ae a8 c8 4e 3a ed a6 ab 26 a3 9d 00 d6 39 db dd 07 d8 5f 4c bc 93 c9 f7 3a 5b 8d b4 d9 96 7c a2 54 c6 b1 08 5b 8c 1d d4 2f 26 9d d5 21 0f d8 d2 b3 e0 b9 03 fc 09 10 23 f5 21 83 c1 b7 11 65 14 b7 d1 7a Data Ascii: [u[zN:&9_L:[\|T[/&!#!ezqq<Xj"F1b3@ep,<RWu1VF=9.#DY(# r~80Q7$FDR7zv<D\|GEG!WGq&@9
Oct 4, 2024 17:06:59.688246965 CEST	952	IN	Data Raw: 92 74 23 97 f2 bd 11 ef 67 a2 59 71 27 14 e7 3a 31 96 cb a5 61 95 69 0d d5 17 10 01 69 c9 be 9a b7 54 d2 fd 33 ab 9b b1 30 42 dd a6 4d 05 20 8e 4b c3 e4 ab 18 91 b7 71 28 93 ce 50 fa 9d 9c b4 fd be 3e bc f8 d4 be 3d b3 ed 81 f8 39 3f 3f 9f 0e 45 Data Ascii: t#gYq':1aiiT30BM Kq(P>=9??EZpOIy'?^+\|-m7Hbxv.],s1R2ct&K@d[?#DrDq\|DFt=5"2,4uM>H3("X,12@
Oct 4, 2024 17:07:44.824064016 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 4, 2024 17:08:29.849920988 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 17:06:58.629570961 CEST	645	OUT	GET /wp-includes/js/dist/interactivity.min.js?ver=6.6.2 HTTP/1.1 Host: celerysticksva.com Connection: keep-alive Origin: http://celerysticksva.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://celerysticksva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=j5nuV6KyGKv7pk8PDgyUL71yP0dm5EmX3oThrc0oBCM-1728054418-1.0.1.1-Q4QBBBnKx.cOBlpYHIS_FS7t7vzJEXXA0ccg_kAzo.zONEG6ycQM_3LowXkOoDLjnDxJ9Z1Z3gfm5G_AXZZAvQ; _cfuvid=v7ZtYV_qImtWndGcjonHPG_XPymvp44A0K4b1kZoRyc-1728054418346-0.0.1.1-604800000
Oct 4, 2024 17:06:59.123805046 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:06:59 GMT Content-Type: application/javascript Content-Length: 15898 Connection: keep-alive Last-Modified: Tue, 16 Jul 2024 17:28:53 GMT Cache-Control: max-age=21600 Expires: Fri, 04 Oct 2024 20:45:15 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress CF-Cache-Status: HIT Age: 1304 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cd61437186d437e-EWR Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 b2 eb 76 db 38 b6 2d fc ff 3c 05 c5 91 8f 07 68 c3 8c 9c 74 d7 ae 22 0b d1 49 a5 9c ae 5b 9c 74 9c 54 ba 5b a5 56 28 72 49 42 4c 01 2c 10 94 ac 88 7c f7 6f 01 24 75 b1 9d da bd f7 19 63 ff 39 19 b1 08 2c ac cb 5c 73 ce c7 7f 1a 78 ef 96 a2 f4 e6 22 07 0f bf 49 65 d4 f9 02 24 e8 c4 40 e6 fd e9 f1 ff 5a 27 da 33 7c 97 45 04 98 a4 fc d9 6e ae 34 b1 41 ed 09 e9 49 6a 42 45 24 d3 34 08 06 f6 08 ee f8 7a f6 09 52 13 66 30 17 12 de 68 55 80 36 5b fb c6 76 20 ab 15 76 9f e5 10 0d 86 6c 01 26 92 63 3d 69 68 c3 54 44 0c 03 1c d1 55 17 5a 19 65 b6 05 84 cb a4 7c bd 91 7d 9f 30 4d f2 dc a5 36 0c f8 ae 89 71 10 f6 de 7d fe 14 11 ac de 00 bb fe de 9d 3e 01 fb f5 2b 77 fa 01 d8 a7 99 3b bd 93 6c fb ce 9d 7e 06 f6 6a ea 4e 37 c0 96 ed 2b 48 b6 fe c9 9d fe 09 4c 14 ee f4 0f 60 57 73 77 32 92 fd ac dd 49 4a 96 0b 77 9a 1a f6 d3 d0 9d 84 61 2f 7f 70 a7 bf 03 5b ff d9 9d fe 06 0d 8d 2d 59 c8 10 53 4c b0 92 55 6c ca 52 96 b0 9c cd 59 c1 96 88 9f 65 7c 3c 61 6b fe 38 49 85 a9 e1 96 8c a2 [TRUNCATED] Data Ascii: v8-<ht"I[tT[V(rIBL,\|o$uc9,\sx"Ie$@Z'3\|En4AIjBE$4zRf0hU6[v vl&c=ihTDUZe\|}0M6q}>+w;l~jN7+HL`Wsw2IJwa/p[-YSLUlRYe\|<ak8I^.G^hjS+ljdu.'g) Z'P+pV<f,''`-=+VZ$RjX5X<CAna+[3#IkhS,$4e\'A@0t$[_i#Rs\|S7b%_+yChqX9=3r)G$IYHamC"#vCECE-4<m,U4J{T/SEGp-Q :rcM{g/Y2tq5m.b
Oct 4, 2024 17:06:59.123831034 CEST	1236	IN	Data Raw: 00 ba 6f 3c 9d 8e f0 15 3f cc fe 88 b3 0b ea 56 89 f7 76 8e e1 5b fb 72 d3 d9 20 86 b3 33 da 35 1a 70 22 b9 7b 1c c3 84 f6 7b 49 0c ec 07 b8 4b 47 c0 43 3e 09 ed c1 22 68 c7 1e 20 5f da f5 2d 00 94 33 3e cc 33 6e 1e 3d d8 0b 75 a1 3b 0b d6 1e a1 Data Ascii: o<?Vv[r 35p"{{IKGC>"h _-3>3n=u;>o.24zes&[5%>Y]W.`r9TGAZZ+4~,qa!)R1[J+Nb%S\|Avqa.=G
Oct 4, 2024 17:06:59.123843908 CEST	1236	IN	Data Raw: 31 4c f8 51 c8 97 d5 6a 06 da 1f f4 fe 93 75 bd 0e 0d 94 86 00 1d c9 48 9e f9 c5 ad 7f 98 f8 a9 97 94 a9 56 54 11 9b c8 3a b9 34 db 1c 1c 08 da 5e 35 5a e6 60 6b 49 11 97 4d 09 d3 b2 7c 87 a6 e2 32 86 bc 84 dd 43 c9 e8 75 72 37 5d 73 df a7 e8 24 Data Ascii: 1LQjuHVT:4^5Z`kIM\|2Cur7]s$xBzJ4=!w}><gCQ99`<FL/<I<&o@a>.\|J-0i%pL]JTiUq)\'40k$p&P^&Gz$=$d
Oct 4, 2024 17:06:59.123856068 CEST	672	IN	Data Raw: 6d cb 79 5b 7e 2d 93 a2 5c 2a f3 1d 20 83 d0 2a 56 d7 64 fd e5 57 ab 27 b6 79 44 0c db 92 d7 bc 85 92 07 41 1e 5a 41 38 e7 37 41 d0 0e c8 c3 1b d8 8e f2 76 ef 30 b5 40 90 8b 28 a7 a3 d7 d1 f8 f5 84 01 93 4c 31 c1 4a 56 b1 29 4b 59 62 21 cf 92 12 Data Ascii: my[~-\* *VdW'yDAZA87Av0@(L1JV)KYb!8X0[/Ypgvqhh&&]CwY=\|y:j=}qLuro( h'sn've/~#&9a&s(RjLPMv[f\|Dc)VV
Oct 4, 2024 17:06:59.123868942 CEST	1236	IN	Data Raw: 83 60 d0 76 9f 51 c7 bf ef 86 fa ee c5 cf 60 9e 54 b9 f9 d5 85 6c 4e 5d e3 60 48 6f 20 3b cd 78 d1 05 5d 9f 54 49 23 24 22 ff 44 0c 4b 9c bb 58 c6 04 6d f6 9b cc 68 c6 67 f7 d6 18 15 3c 8b fe 68 83 51 6e 13 f6 00 47 6b 7b 3d c2 33 5a d8 80 dd 0c Data Ascii: `vQ`TlN]`Ho ;x]TI#$"DKXmhg<hQnGk{=3ZLJM^VBn!fhtZs4tNKfw>P,O7\|<3o;>etTDbitXO_SDo6p4Tzoy\|k`%X9I &)cw&
Oct 4, 2024 17:06:59.123912096 CEST	1236	IN	Data Raw: 61 90 fc 33 be fc 50 d7 c4 7d f9 6e 3a 8d 2c 83 d3 25 7e 1a 1a f7 3b 3e e3 12 df c3 1c e4 c2 60 3b 77 71 92 60 c1 af d1 df 1a 74 06 86 c6 66 d2 ec 11 08 63 a5 ed 1a fc cc 2f d8 31 7b 68 31 67 6b cd 11 e8 77 67 67 ec 09 8d c5 9c e8 10 3d c8 06 da Data Ascii: a3P}n:,%~;>`;wq`tfc/1{h1gkwgg=.f_>#!cW#;N"{/`wcp.W6hMk_]faE1]Ap-}vr5M1.`=Taz`~kI%k1%\pe.O{,g
Oct 4, 2024 17:06:59.123924971 CEST	1236	IN	Data Raw: f1 d0 dd fb 9d 66 4e ab 76 a9 21 ed 48 c5 3d e3 4b 8b d0 0e 39 c4 9a b9 40 4a f2 ed ce 12 d1 38 ee 6e fa 8d 62 7b bb 35 ec b0 e2 a5 9d eb 86 bf c0 9f 03 8b 8f fa 89 fb f5 6f f6 6e 31 a1 8c f7 2f 1c 4d 60 d5 37 6d 4a 2f 38 df 89 68 c8 ae 23 c3 8a Data Ascii: fNv!H=K9@J8nb{5on1/M`7mJ/8h#%Q7AufG-l?@=q`'A`k`_X(Cnx.Pn #u^9Rv;[[+0KWw%<Xbpq}Cu=%V}#f0
Oct 4, 2024 17:06:59.123936892 CEST	1236	IN	Data Raw: 97 c7 9c 5b e4 b6 ef 3c e0 e7 4f d9 45 d0 5e 68 4b c4 e0 22 c6 f7 a7 4f 38 27 4f bf ea 9f fa b7 61 7c 5c fb 97 16 ff 82 73 fe c2 dc 4f 59 60 b4 cd 98 d7 fc a2 db f5 d9 30 08 06 57 1d f7 f4 58 66 db f1 09 c3 fa bd 25 2c 15 ef ba 54 66 75 c7 43 7c Data Ascii: [<OE^hK"O8'Oa\|\sOY`0WXf%,TfuC\|-1AuKeZ=[']\|IVSa,iMazX'vL~xG1Oh^\5:zV?il}D"i{NnazW
Oct 4, 2024 17:06:59.124026060 CEST	1236	IN	Data Raw: ae 2a 83 be 44 41 c1 2b c5 42 26 79 e9 65 42 23 03 f9 16 37 6e 98 86 13 f6 ba 39 fb 10 30 c9 74 8b 49 59 4b fe c3 74 1e f0 de c2 3c ef d4 e9 b2 dc 3a 82 9b ba f6 1f f9 1c cd 3d 1e 4e 9c e5 4d 10 88 20 78 ae 75 b2 0d 45 e9 be 04 99 b4 52 75 99 7d Data Ascii: *DA+B&yeB#7n90tIYKt<:=NM xuERu}[e,en fmmftTbMYH<I0HK.~?f[Y9D[T7mL[qCK6/U]>A@:NvZ]
Oct 4, 2024 17:06:59.124037027 CEST	1236	IN	Data Raw: 2c cb 5d 9d 86 1c 92 12 42 3f ee f7 f7 6e 00 c1 ed 4a 83 cd 23 40 c3 30 dc 54 36 f6 b0 cb 55 7a 13 69 3e b8 b0 57 ba 43 36 d1 62 d6 f2 86 ba 9b 46 83 cc a0 ae 8b 43 b4 37 43 d1 6d e8 8c 3a d8 67 0e 86 03 ce 75 10 d8 3b 50 ea a4 f3 60 74 a9 35 ba Data Ascii: ,]B?nJ#@0T6Uzi>WC6bFC7Cm:gu;P`t5Hpeiy#KPv@TeA_^r>m /C\oUkDL~CGpv xA?I'G!]-LpV[?Y0YgGn3V+D{\Vy8^`S
Oct 4, 2024 17:06:59.128788948 CEST	1236	IN	Data Raw: 13 93 5a 27 ec 9a 86 12 cd 14 65 15 f7 e7 95 74 8e 47 f6 3a 3d ca 51 49 9c 94 51 d9 1b fa 17 1c cd c4 68 50 45 55 c3 3e 5b e5 33 a1 d1 e2 62 8d 2e 36 ac 77 cc 2f b0 86 bc 8c c6 ad 15 26 0c 72 58 a1 e5 d1 06 f8 bc 10 32 c9 df a0 98 65 a4 b0 02 d6 Data Ascii: Z'etG:=QIQhPEU>[3b.6w/&rX2eBU3pJk,,+XssChs1ns$K#ae4631hYeDXaraWsN[3\#ls7zN=yIc%i0c06QH
Oct 4, 2024 17:06:59.460236073 CEST	683	OUT	GET /wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt,wght.woff2 HTTP/1.1 Host: celerysticksva.com Connection: keep-alive Origin: http://celerysticksva.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://celerysticksva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=j5nuV6KyGKv7pk8PDgyUL71yP0dm5EmX3oThrc0oBCM-1728054418-1.0.1.1-Q4QBBBnKx.cOBlpYHIS_FS7t7vzJEXXA0ccg_kAzo.zONEG6ycQM_3LowXkOoDLjnDxJ9Z1Z3gfm5G_AXZZAvQ; _cfuvid=v7ZtYV_qImtWndGcjonHPG_XPymvp44A0K4b1kZoRyc-1728054418346-0.0.1.1-604800000
Oct 4, 2024 17:06:59.587945938 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:06:59 GMT Content-Type: font/woff2 Content-Length: 326628 Connection: keep-alive Last-Modified: Tue, 16 Jul 2024 17:28:45 GMT Cache-Control: max-age=21600 Expires: Fri, 04 Oct 2024 20:45:17 GMT host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress CF-Cache-Status: HIT Age: 1302 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 8cd6143a0b97437e-EWR Data Raw: 77 4f 46 32 00 01 00 00 00 04 fb e4 00 13 00 00 00 0c 4b 94 00 04 fb 6e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a ac 5b 1b 87 ba 30 1c 81 aa 78 3f 48 56 41 52 c4 3f 06 60 3f 53 54 41 54 81 46 00 81 cb 0a 2f 82 10 11 08 0a 88 cd 04 87 9e 04 0b cf 50 00 30 9a a6 02 01 36 02 24 03 cf 4a 04 20 05 91 7e 07 81 c9 1e 0c 07 5b f6 ca bb 92 a0 42 d4 ed 4b ae b0 8d fd 02 d0 5f 47 88 5e 2e 38 b4 21 85 b4 0c f8 f7 23 fe 3b 3b 6f 2a b8 22 34 fb 3d e6 13 98 c8 f4 6d c0 49 4a 7a 89 2b a0 6a 27 6e 9b 8e 21 e5 22 09 82 27 6a 6b 7f cf 9c 04 39 65 74 1d 35 6c 38 55 fc fc e7 f0 8f 1f 49 64 84 cf fe ff ff ff ff ff ff ff ff ff ff ff ff 5e 93 1f 4f b9 f9 66 92 9d 3f ff ef 6e 92 0d 39 6e cc 41 08 39 08 42 20 1c 09 84 53 94 43 10 af 82 50 45 a9 b6 5a 5b 08 0c 04 aa 0a 2b c4 a9 1f 84 89 64 0a 91 9f 4a cf 09 32 ce b9 6c 2e 4f e6 9c 43 21 4d 8a d6 a2 44 cb 3e 55 e2 2a 55 c6 96 6b 52 15 cc 97 cc b3 7a a3 59 6f c1 61 a1 d5 c6 22 b2 ae c3 2c a9 76 99 5e 5f 75 c0 2d f7 31 a4 c3 45 a1 2b cf 57 6b 6b [TRUNCATED] Data Ascii: wOF2Kn[0x?HVAR?`?STATF/P06$J ~[BK_G^.8!#;;o"4=mIJz+j'n!"'jk9et5l8UId^Of?n9nA9B SCPEZ[+dJ2l.OC!MD>UUkRzYoa",v^_u-1E+Wkk8-mRdZ~d3CnuVBT!6}V (9lPYaqS!'?gb?zu6w.Pa'f\&_cgRf.%\7V1UAT{\|cyyA0}ac33g;Nd*M8aHpoo<n1t(&wDn1P'9\|l_``$JIf){=[#~Iq{B^_kQ^I'5^;e14c_2>}E"nRG3I,}2iia,K4,a>YG

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 17:07:01.857940912 CEST	333	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: celerysticksva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 4, 2024 17:07:02.383500099 CEST	1130	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:07:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Tue, 01 Oct 2024 14:50:16 GMT ETag: W/"66fc0c28-4d7" Vary: Accept-Encoding Server: cloudflare CF-RAY: 8cd6144b78c78cdc-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 06 Oct 2024 15:07:02 GMT Cache-Control: max-age=172800 Cache-Control: public Content-Encoding: gzip Data Raw: 32 38 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 8d 54 5d 6b db 30 14 7d df af c8 34 68 24 ac 38 6d 1f f6 50 47 1d 25 0c 56 d8 07 ac dd 53 c8 82 2a 5d 27 02 45 72 af af 4b 4b e2 ff 3e e4 d8 4d b6 3d 6c 60 30 3e 57 f7 9e 73 ee 11 7e 5b 36 c1 90 8b 81 8b 1d 6b 6a 18 d5 84 ce 10 2b 06 7c 04 1c c4 8e f0 65 e7 4a ce 9a 60 a1 74 01 2c 53 8a 5e 2a 88 e5 c8 c4 50 47 0f 02 81 1a 0c 05 03 c4 88 cc 85 a1 f0 a1 7f e7 5d 81 83 b8 1a 00 1f d7 1c 44 6b 34 99 4d 22 69 db 57 52 4a df 87 89 23 9b bb 10 00 3f dd 7f f9 ac c6 33 3d da 20 94 8a 8d 33 c8 11 2a af 0d f0 29 9b ae 25 3b 7b 6c 22 15 4c 64 63 76 3d 9b ea eb b1 b4 b9 d9 38 6f bf 46 0b f5 e2 7c 99 af 81 6e 88 d0 3d 34 04 9c a5 39 4c ec f7 8c 1d 79 91 83 24 b1 7b d2 38 42 05 79 dd 3c d4 84 9c e4 a5 28 7a 35 95 c6 1a 6e 03 71 94 17 ef c5 b1 33 f0 20 8d d8 95 11 79 ea 8e 8a 31 a9 15 76 a8 74 ca 64 97 85 9b 85 dc 43 58 d3 a6 70 99 ba 3c d0 f8 ee 8c 13 3f 75 11 33 75 47 e8 c2 3a 2f 31 6e e7 1b 8d f3 68 81 7b d1 a6 f5 47 65 c1 44 0b 3f be df ce e3 b6 8a 01 02 71 a8 8d ae [TRUNCATED] Data Ascii: 28fT]k0}4h$8mPG%VS]'ErKK>M=l`0>Ws~[6kj+\|eJ`t,S^PG]Dk4M"iWRJ#?3= 3)%;{l"Ldcv=8oF\|n=49Ly${8By<(z5nq3 y1vtdCXp<?u3uG:/1nh{GeD?qG1;h{Fx0{4pjL$[0KUr,<+\CAvBI~Z:q\|V!P_:+!<M@Am2I666?m0m52"@hId%i21Gljl)&Fn;&Z1Y*f5);g=1Q8><$z8im0sgUu?~9e'g)fk0
Oct 4, 2024 17:07:47.539397001 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 4, 2024 17:08:32.550515890 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 17:07:01.858063936 CEST	390	OUT	GET /wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.js?ver=2.4.1 HTTP/1.1 Host: celerysticksva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 4, 2024 17:07:02.402535915 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:07:02 GMT Content-Type: application/javascript Content-Length: 936 Connection: keep-alive Last-Modified: Fri, 04 Oct 2024 03:18:55 GMT Cache-Control: max-age=21600 Expires: Fri, 04 Oct 2024 20:45:16 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress CF-Cache-Status: HIT Age: 1306 Accept-Ranges: bytes Set-Cookie: __cf_bm=mGdsbJLwEaqU50eLsG6fuzMys5ea11s9eOZtY2Bf3ac-1728054422-1.0.1.1-N4tzR0AGvIDQDoMYQhdxhbQGgO7Prgvdia9YOeUNqL7olU2.V7brs47.vqfPpMTG4Wyyv0Wn27e97GFUzqE_.g; path=/; expires=Fri, 04-Oct-24 15:37:02 GMT; domain=.celerysticksva.com; HttpOnly Set-Cookie: _cfuvid=_VmcagS2.5VF1FgJ42.r8MW1ntUeTHtzesY6eQkQAoY-1728054422360-0.0.1.1-604800000; path=/; domain=.celerysticksva.com; HttpOnly Server: cloudflare CF-RAY: 8cd6144b9b208c4e-EWR Data Raw: 1f 8b 08 00 00 00 00 00 00 03 9d 52 4b 6f e3 36 10 be f7 57 d8 3c 04 24 40 b1 e9 55 86 6a a4 6e 16 08 d0 74 0f 7b 2c 0a 83 12 47 36 61 8a 74 49 ca ae 61 fb bf 77 a8 87 ad 16 46 ba bb 27 51 e4 cc 7c f3 3d 28 65 c5 cf e7 83 f4 33 53 54 46 86 70 ae 9c 0d d1 b7 55 74 9e 9e 2b a3 c1 c6 37 95 47 2e 84 b0 d7 e2 7c 65 e7 b8 d5 41 b8 7d d4 58 59 9c 65 15 f5 01 56 a9 37 27 b6 56 d9 b1 cc a4 d5 8d 8c a0 32 6d 09 f7 ce c5 dc b6 c6 74 a7 77 e9 37 da e6 e4 79 ff 37 e1 71 eb 21 6c 9d 51 f9 73 3f ff ea ca 00 fe 00 af 06 1a 04 0e 34 72 5b 74 bd 50 cc 7f 62 67 5d d3 39 25 6f 36 82 0f 50 a5 0d 3e f7 0d 9e 68 3b 3b 6a ab dc 91 5d 2e f3 b8 14 06 ec 26 6e 2f 17 e5 aa 36 cd 12 e3 61 98 2d 3a ba bf e9 80 27 67 a3 d4 36 50 52 1a 57 ed 32 50 1a d9 67 fd cf de c3 41 c3 71 bd 4e 55 d8 97 e9 da cb 06 08 63 1e 62 eb ed a2 6e 6d b7 c9 4c 52 cf f5 20 cf ba 69 a3 4c b7 2b 69 4c 29 ab 5d 7a e3 96 5d 0d c4 99 2b 2c 1c 67 8f 58 d0 be 79 2b ad 32 30 Data Ascii: RKo6W<$@Ujnt{,G6atIawF'Q\|=(e3STFpUt+7G.\|eA}XYeV7'V2mtw7y7q!lQs?4r[tPbg]9%o6P>h;;j].&n/6a-:'g6PRW2PgAqNUcbnmLR iL+iL)]z]+,gXy+20
Oct 4, 2024 17:07:02.402565002 CEST	627	IN	Data Raw: 2d 10 25 72 eb 5e 19 9f ea cf b8 ea 86 bd 0f 70 b7 41 72 d2 c1 78 fb b8 68 8a d6 39 38 56 4c 9b 17 51 d4 ce bf ca 6a 4b 3d 66 25 11 d0 85 5f f8 87 02 0e 01 40 cd 40 9a cc eb cd 36 12 f6 f4 44 b1 43 ec a5 bf cb cf b8 13 83 d9 54 33 0e 58 d3 de 2f Data Ascii: -%r^pArxh98VLQjK=f%_@@6DCT3X/YuF>iyE])ph1 c:kW10T`3BbO_(_DI1X7pk!P+Z;j1Nb<-B=EAJf.#*Ca5-1
Oct 4, 2024 17:07:47.523075104 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 4, 2024 17:08:32.535279036 CEST	6	OUT	Data Raw: 00 Data Ascii:

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://celerysticksva.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 413

Chrome Cache Entry: 414

Chrome Cache Entry: 415

Chrome Cache Entry: 416

Chrome Cache Entry: 417

Chrome Cache Entry: 418

Chrome Cache Entry: 419

Chrome Cache Entry: 420

Chrome Cache Entry: 421

Chrome Cache Entry: 422

Chrome Cache Entry: 423

Chrome Cache Entry: 424

Chrome Cache Entry: 425

Chrome Cache Entry: 426

Chrome Cache Entry: 427

Chrome Cache Entry: 428

Chrome Cache Entry: 429

Chrome Cache Entry: 430

Chrome Cache Entry: 431

Chrome Cache Entry: 432

Chrome Cache Entry: 433

Windows Analysis Report
http://celerysticksva.com/

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 17:07:01.859205008 CEST	322	OUT	GET /wp-includes/blocks/navigation/view.min.js?ver=6.6.2 HTTP/1.1 Host: celerysticksva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 4, 2024 17:07:16.239082098 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:07:16 GMT Content-Type: application/javascript Content-Length: 1166 Connection: keep-alive Last-Modified: Tue, 30 Apr 2024 15:05:15 GMT Cache-Control: max-age=21600 Expires: Fri, 04 Oct 2024 21:07:15 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress CF-Cache-Status: MISS Accept-Ranges: bytes Set-Cookie: __cf_bm=wxbbA2TmqgCsq3EEqL4DrGww0v_A2uVTprw09phrwN8-1728054436-1.0.1.1-BzWeu6XHTwE4JnF5n4WnmEeO1fQimPCW8PcDliEv0IHKo0fiUVpadudphYNsoAIwQnj2hMai_CAVCAa0ZAseKw; path=/; expires=Fri, 04-Oct-24 15:37:16 GMT; domain=.celerysticksva.com; HttpOnly Set-Cookie: _cfuvid=k6bfLnSo3gsbtQwzNVbM2DEL3X_MG7k8VuttVqEohl8-1728054436196-0.0.1.1-604800000; path=/; domain=.celerysticksva.com; HttpOnly Server: cloudflare CF-RAY: 8cd6144b996b4405-EWR Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 52 db 8e db 36 10 fd 15 af 1e 14 a9 e0 32 ce ab 0c c5 4d d2 0d 0a 24 c1 06 68 de 0c 17 a0 a5 91 cd 2c 4d ba e4 c8 1b 43 d6 bf 77 a8 8b 2d 3b ea 76 93 be 74 b1 80 a9 e1 f0 cc b9 8c dc ee 8c c5 5f 84 9b c0 a4 b0 66 1b fc fa 68 6c be b3 e0 dc 4b a9 11 ac c8 50 ee 25 1e 82 d9 5e d8 09 a6 55 9e 44 c0 74 9c be ae 0a 63 23 5f 34 13 a9 27 3a 46 6e 22 cd 4c 1c 86 37 fe 08 cd f1 7e f5 15 32 e4 39 14 52 c3 67 6b 76 60 f1 e0 ef 58 05 ba dc 12 fe 4a 41 72 33 65 6b c0 44 2f cc b2 8e 6b 66 fc 08 a4 11 dd eb 9d 35 68 f0 b0 03 be 11 ee fe 51 f7 38 3c 13 4a 35 ad f5 2c 33 da e1 44 a7 11 10 33 cf 4a a7 55 3d b3 80 a5 d5 13 22 40 d4 20 66 ba 8e a3 8a 46 bd 33 a4 ed 1b 26 11 0d 01 7e 2e 78 1a 77 0a b6 a0 07 77 5d 81 39 34 16 ba 72 73 ae 63 66 d2 45 20 16 1b 0b c5 32 60 2f a4 de 95 24 c3 60 b4 c8 a5 f3 d2 f2 65 dc 7e 7b fa 69 b0 91 79 0e 3a e8 8b c2 4a 71 db d6 96 f1 0b 16 38 50 a4 77 1c e0 a2 37 60 81 a7 2b 2c 88 e7 75 af 4a 44 Data Ascii: R62M$h,MCw-;vt_fhlKP%^UDtc#_4':Fn"L7~29Rgkv`XJAr3ekD/kf5hQ8<J5,3D3JU="@ fF3&~.xww]94rscfE 2`/$`e~{iy:Jq8Pw7`+,uJD
Oct 4, 2024 17:07:16.239099979 CEST	848	IN	Data Raw: a3 9f d7 bb c8 bc 19 f4 9f 4b f4 8d 5e d9 82 4e 52 e7 f0 6d d9 c9 e9 3e ff 4c 83 5b 92 f3 62 39 cb 4d 56 7a 9b b8 c8 f3 bb 3d 1d 3e 4a 47 28 60 a3 20 53 32 7b 08 58 e4 ad ab ea 38 6e c3 aa 1c 0a 84 44 31 bf 62 54 48 b2 3a 8d a6 4c b7 de c6 f4 8c Data Ascii: K^NRm>L[b9MVz=>JG(` S2{X8nD1bTH:L~^jkNQJRQ\IfVC-98!m<Pf$TOL.E[5G@cOx+Uv=):7-h$]"i
Oct 4, 2024 17:08:01.246045113 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 17:07:01.859249115 CEST	321	OUT	GET /wp-includes/js/dist/interactivity.min.js?ver=6.6.2 HTTP/1.1 Host: celerysticksva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 4, 2024 17:07:16.253190994 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:07:16 GMT Content-Type: application/javascript Content-Length: 15898 Connection: keep-alive Last-Modified: Tue, 16 Jul 2024 17:28:53 GMT Cache-Control: max-age=21600 Expires: Fri, 04 Oct 2024 21:07:15 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress CF-Cache-Status: MISS Accept-Ranges: bytes Set-Cookie: __cf_bm=7e8tH5QiNLjq1c4kQeb4HSKhagDljpyUpINKjQ2UjdM-1728054436-1.0.1.1-DR0fN9ANrxO3o5CmS9tXsbcrpmULUcAAqh8p9cYIa41UzEeVvyYwW44SFpjg8Jvgf6LIPjfruWODJJpyQVvutQ; path=/; expires=Fri, 04-Oct-24 15:37:16 GMT; domain=.celerysticksva.com; HttpOnly Set-Cookie: _cfuvid=_tenDJE0yD_.YNSjaIy6UberdJWwZ6VxIo0taO3telk-1728054436210-0.0.1.1-604800000; path=/; domain=.celerysticksva.com; HttpOnly Server: cloudflare CF-RAY: 8cd6144b9ac84387-EWR Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 b2 eb 76 db 38 b6 2d fc ff 3c 05 c5 91 8f 07 68 c3 8c 9c 74 d7 ae 22 0b d1 49 a5 9c ae 5b 9c 74 9c 54 ba 5b a5 56 28 72 49 42 4c 01 2c 10 94 ac 88 7c f7 6f 01 24 75 b1 9d da bd f7 19 63 ff 39 19 b1 08 2c ac cb 5c 73 ce c7 7f 1a 78 ef 96 a2 f4 e6 22 07 0f bf 49 65 d4 f9 02 24 e8 c4 40 e6 fd e9 f1 ff 5a 27 da 33 7c 97 45 04 98 a4 fc d9 6e ae 34 b1 41 ed 09 e9 49 6a 42 45 24 d3 34 08 06 f6 08 ee f8 7a f6 09 52 13 66 30 17 12 de 68 55 80 36 5b fb c6 76 20 ab 15 76 9f e5 10 0d 86 6c 01 26 92 63 3d 69 68 c3 54 44 0c 03 1c d1 55 17 5a 19 65 b6 05 84 cb a4 7c bd 91 7d 9f 30 4d f2 dc a5 36 0c f8 ae 89 71 10 f6 de 7d fe 14 11 ac de 00 bb fe de 9d 3e 01 fb f5 2b 77 fa 01 d8 a7 99 3b bd 93 6c fb ce 9d 7e 06 f6 6a ea 4e 37 c0 96 ed 2b 48 b6 fe c9 9d fe 09 4c 14 ee f4 0f 60 57 73 77 32 92 fd ac dd 49 4a 96 0b 77 9a 1a f6 d3 d0 9d 84 61 2f 7f 70 a7 bf 03 5b ff d9 9d fe 06 0d 8d 2d 59 c8 10 53 4c b0 92 55 6c ca 52 96 b0 Data Ascii: v8-<ht"I[tT[V(rIBL,\|o$uc9,\sx"Ie$@Z'3\|En4AIjBE$4zRf0hU6[v vl&c=ihTDUZe\|}0M6q}>+w;l~jN7+HL`Wsw2IJwa/p[-YSLUlR
Oct 4, 2024 17:07:16.253222942 CEST	1236	IN	Data Raw: 9c cd 59 c1 96 88 9f 65 7c 3c 61 6b fe 38 49 85 a9 e1 96 8c a2 b2 5e d4 b2 2e ea 47 b4 d6 c5 b2 5e 68 91 d5 6a 53 d6 2b 99 d6 d2 6c 6a 64 75 9c 2e 27 f5 67 a5 ea 7f 29 9d d5 c2 20 a7 8f 05 db f2 e7 5a 27 db 50 94 ee 1b cf 2b 99 1a a1 a4 b7 70 84 Data Ascii: Ye\|<ak8I^.G^hjS+ljdu.'g) Z'P+pV<f,''`-=+VZ$RjX5X<CAna+[3#IkhS,$4e\'A@0t$[_i#Rs\|S7b%_+yChq
Oct 4, 2024 17:07:16.253243923 CEST	448	IN	Data Raw: 76 31 ca cf ce a2 ea 59 39 4a 9e 4d cf 4b bc f1 ea bc 8c b0 67 54 7d 5b 8e 30 a9 3c bf c0 ec dc 86 69 84 d6 61 b6 01 7a e4 5e 67 1a b9 15 4a bb 42 87 d8 52 16 04 16 2e 02 41 b2 49 bb 92 8b 54 fd a6 c0 1d 59 19 5e dd 97 5f 13 81 4b bf 24 02 9d 3c Data Ascii: v1Y9JMKgT}[0<iaz^gJBR.AITY^_K$<gKDc1'mm:vFi&tNSpq$]vaB#},cXMp6k04UNBw(6pgj6BZr!f)r -/5*wa~ve
Oct 4, 2024 17:07:16.253258944 CEST	1236	IN	Data Raw: 7c 87 a6 e2 32 86 bc 84 dd 43 c9 e8 75 72 37 5d 73 df a7 e8 24 ab 1c 78 42 7a 9a 4a 34 a8 3d 21 e4 77 7d 3e 82 c3 3c 67 a3 43 aa a4 d8 51 da cd 39 d7 f8 39 cd b7 0f b4 b1 60 3c 0b 46 f5 4c 06 81 2f db f3 c5 84 0a 0e 03 14 0d d0 f1 1a 8a 3c 49 81 Data Ascii: \|2Cur7]s$xBzJ4=!w}><gCQ99`<FL/<I<&o@a>.\|J-0i%pL]JTiUq)\'40k$p&P^&Gz$=$dE$ 7LQE_Z+/eZSDo6p4Tzp8\|\0tyC~%}
Oct 4, 2024 17:07:16.253271103 CEST	1236	IN	Data Raw: d7 d1 f8 f5 84 01 93 4c 31 c1 4a 56 b1 29 4b 59 62 21 cf 92 12 38 58 1f 30 fb 5b 05 fc fc e2 ab 8b 2f 59 9d ad 70 67 fb 76 e9 98 71 68 68 93 26 26 5d 12 43 77 b6 c3 da 05 59 da ae 3d e0 e5 88 b8 f6 7c da 0e a8 79 3a ba f8 6a 18 3d 7d c2 ca 71 19 Data Ascii: L1JV)KYb!8X0[/Ypgvqhh&&]CwY=\|y:j=}qLuro( h'sn've/~#&9a&s(RjLPMv[f\|Dc)VVDCcDCMXO;;tYhH$w@{,
Oct 4, 2024 17:07:16.253300905 CEST	1236	IN	Data Raw: 80 70 2e 74 69 5e 2c 45 9e 8d 64 98 26 79 4e 20 4c ed f5 4a 65 50 d2 c8 b5 ac ba 4a 85 75 a5 a5 e9 a4 90 09 36 a5 ec 03 a9 98 c1 c3 81 85 1f dd 9e bb 96 8c 1f 8f 1e 7e 75 11 bd 77 6b 4b 10 5f 90 5d 83 82 14 5a 15 25 8d ad ec a5 27 64 a7 61 10 b4 Data Ascii: p.ti^,Ed&yN LJePJu6~uwkK_]Z%'da0yRBW8lr8I])t:sBA^WhIEB7=+{aOh)22{@NBHe.Rd,=w-w=1pk9!Sk jvgc6"\X
Oct 4, 2024 17:07:16.253319025 CEST	1236	IN	Data Raw: 25 58 a6 4d 10 00 46 6f ba 0f fe ad 90 08 db 72 c5 f7 11 ca 34 e6 e9 56 9c b6 8d 3e 19 f4 cf 20 f8 27 7e d9 77 7c 18 b7 22 90 cf dc b1 4f 2d e2 18 b0 e7 4f 9c f3 cf 23 02 3d fc cf fd c1 46 f6 bb 93 e3 b6 b6 c3 55 07 c7 b5 bb 6a 89 f9 95 ff cd 7d Data Ascii: %XMFor4V> '~w\|"O-O#=FUj}0(Z6~B/v?vLlepic? .K\%.mPT+~j<b/u&/=^JxD Dc~CK]5cK;;+wqUL
Oct 4, 2024 17:07:16.253329992 CEST	896	IN	Data Raw: 1e db ca 9a 58 a2 84 59 62 12 a6 f9 be ed c1 98 a9 21 e4 68 5a 17 7d ed 04 a4 6c 3c a1 0d 91 34 d6 e1 3a c9 2b dc de 99 4f f1 3b 55 bd 5b 0c ae 32 9d ae 63 c4 85 df 98 3a 4b 4f a7 29 32 63 3f f8 f7 08 8d f8 e7 78 a6 21 b9 39 f0 83 e1 2a 4c f9 51 Data Ascii: XYb!hZ}l<4:+O;U[2c:KO)2c?x!9*LQC,DuEsfItPm\0K0&1@GUneE:h0L]>nT[v;'7LOHkBe+2NEuDAaaY=0Ae{
Oct 4, 2024 17:07:16.253343105 CEST	1236	IN	Data Raw: 62 9b e6 e0 65 60 b0 3b 64 3e ed dc f9 a8 d3 7f 6f f6 25 e9 e9 b2 f0 ac e5 42 d1 1b 90 ed 3d da f5 6f 6d 16 77 86 6a 6f 4d 43 d9 cb 63 92 d2 63 92 8e 68 b8 46 d7 1b bd b5 b0 bf ee db b6 9d e2 7b 16 bb ed 5f 8e 74 ba c5 7a bf 6f ed 63 22 0e 53 73 Data Ascii: be`;d>o%B=omwjoMCcchF{_tzoc"Ss,f^qYD#lwrK{>}d9;x1=K7gBfzS5'?i'+~munE_57_p,d{:Q@I^{q*Y]F^bQdC42gaK9ap-
Oct 4, 2024 17:07:16.253355026 CEST	1236	IN	Data Raw: c9 2b 68 1a 1c cf 77 18 8a 34 90 c1 05 ce c6 e3 b1 d3 ef 38 eb 3e 3d 27 8c 63 c1 31 e3 a5 65 fc 0e 42 bb 45 df 37 fe 4f 1d 21 0e 8e 88 f7 46 04 b4 2c dd e1 5a b2 34 89 4c ad 0c af d0 cf 12 48 6f 23 b8 63 9c 3d 11 6e 46 c9 24 65 a7 78 30 14 16 00 Data Ascii: +hw48>='c1eBE7O!F,Z4LHo#c=nF$ex07ZlGvj'[^;IS> <CY\\|:r,Z`=PY_[M7]{uE.m f-H7m6,m'FAZcB;sm%6GltA?<
Oct 4, 2024 17:07:16.258174896 CEST	1236	IN	Data Raw: d2 83 1d 4f 6a 5c 47 df 29 2e 47 a1 41 d7 bd 50 f8 8e 40 8d de ee ba 95 7e ba 7e 7d 15 16 89 2e 81 c8 93 9c 26 4d 4c ba dc 75 ab ef 9a 86 5d e3 1a b8 22 72 6a 46 ad 1a 88 e9 f5 ec 13 a4 26 c4 0a 2d 00 3d d7 3d 84 73 a5 2f 93 74 49 08 19 1b 06 13 Data Ascii: Oj\G).GAP@~~}.&MLu]"rjF&-==s/tI{;C}h`;5-_o+(2R4V42I(QSt!304Zd']{d)J+[(5uM$O9Y=RU6oU(t/P]ZeN

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 17:07:01.859298944 CEST	319	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=6.6.2 HTTP/1.1 Host: celerysticksva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 4, 2024 17:07:02.393850088 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:07:02 GMT Content-Type: application/javascript Content-Length: 5365 Connection: keep-alive Last-Modified: Tue, 30 Apr 2024 15:05:14 GMT Cache-Control: max-age=21600 Expires: Fri, 04 Oct 2024 20:45:17 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress CF-Cache-Status: HIT Age: 1305 Accept-Ranges: bytes Set-Cookie: __cf_bm=coSGHcoyNnSgV62wq524Qr5OvsuEOAR3qn6vrliBb9I-1728054422-1.0.1.1-nUKhQQEAMgjXzg7M.tod8SD.ESDUcX5Q_bSXyDC5Zr3p.u0frc6l0fLkh9pJy8HnGnEK86nMa3nhMl9QWY0WZg; path=/; expires=Fri, 04-Oct-24 15:37:02 GMT; domain=.celerysticksva.com; HttpOnly Set-Cookie: _cfuvid=vVYnoMxzuSTlPjNTI095tFvhoUEmGJtT84JDxHla.Sg-1728054422353-0.0.1.1-604800000; path=/; domain=.celerysticksva.com; HttpOnly Server: cloudflare CF-RAY: 8cd6144b8a320f77-EWR Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 52 69 73 db 48 92 fd de bf 82 c2 4c d0 c0 18 04 71 10 17 69 b4 c6 96 ad 89 8e 9d 76 77 8c bd bd 1f 64 ce 46 a1 2a 8b 82 1b 02 b8 38 2c b9 45 fe f7 ad ca e2 01 8a d4 41 5b d3 8a d0 63 a1 2a f3 65 e6 cb 37 fc db 49 ef e3 65 56 f7 78 96 43 4f fc 92 b6 29 07 33 28 a0 22 0d b0 de df 86 3f 0c 87 bd 0f 65 5b 51 18 f7 ae e7 83 ac a0 79 cb a0 1e 7e ae 87 cd 35 5c 95 9f 33 eb 2a 2b ac cf f5 0f 5f 48 d5 5b 5d 25 bc 2d 68 93 95 85 6e dc 6a 6d 0d bd ba a9 32 da 68 13 19 73 99 dc a6 a4 86 b1 76 d9 34 f3 7a 3c 1c 52 26 f3 19 e4 d9 97 ca 2a a0 19 ce 2e 87 9f 19 d0 df 81 ad 6b fc dd f1 2d db f2 86 a4 ae a1 a9 87 9a 09 37 cd 58 b3 e6 c5 4c 33 eb ec 0f 41 16 ba 37 a1 ab 99 34 17 21 ef c9 95 b8 c1 44 71 53 16 5f a0 6a c6 b7 bc 2a af ce 4a 06 bf 96 59 d1 8c 37 1d 32 e3 96 25 9a 6c 50 90 25 49 f3 75 0e 25 ef b1 d3 39 a9 6a f8 a9 68 74 66 3a 81 31 66 93 8c eb ec 55 e0 fb 5e 60 54 d0 b4 55 d1 03 91 3c Data Ascii: RisHLqivwdF8,EA[ce7IeVxCO)3("?e[Qy~5\3+_H[]%-hnjm2hsv4z<R&.k-7XL3A74!DqS_j*JY72%lP%Iu%9jhtf:1fU^`TU<
Oct 4, 2024 17:07:02.393910885 CEST	1236	IN	Data Raw: d9 9c 7d df 8d 83 97 ba ce 06 89 8a fa f1 47 c7 36 4c 3f f0 5c fb a5 ee d8 ae d7 67 86 b1 34 9b 72 db 45 b9 34 4b a1 75 55 56 e3 8e 64 8d d8 88 25 ea 43 d1 bc 17 a1 fd fe 9d 0b ab 82 79 4e 28 9c 5d 66 39 d3 6f 74 7c 26 79 63 9e 38 86 29 3f 44 15 Data Ascii: }G6L?\g4rE4KuUVd%CyN(]f9ot\|&yc8)?Dl3mob-%y]nXl~\I0uvE!ZK&7iLH+3MRS{Y4KFNH^/\|^/XEf3h5GF3#zuEg?-FLe
Oct 4, 2024 17:07:02.393924952 CEST	1236	IN	Data Raw: c3 33 90 1f 10 f6 69 e4 f0 ec ea 3e 85 f1 38 75 e1 68 75 07 6b e1 be 9b f7 50 a7 8f f1 f2 67 d7 f4 29 8c c7 69 ca bf 51 53 f8 2e c6 43 3d ae 19 31 87 39 1d c6 f4 c1 a9 77 e2 15 23 dd 9d fa 01 c6 83 3d 1e 60 4c 1f 63 a4 c7 f6 98 2a 0b 3d 99 f7 d9 Data Ascii: 3i>8uhukPg)iQS.C=19w#=`Lc*=:eJ?[ptu'O}N7vzQ z/7AXWwKLNC+Xjzec.}e,pZ}D=nnQG#c,"vr?RoU?0Qu
Oct 4, 2024 17:07:02.394066095 CEST	672	IN	Data Raw: 3a c2 ab 14 83 a9 8d b8 16 0f 50 3c 29 84 40 99 c3 9c 68 80 3f 78 e5 00 22 3e b8 32 9f 79 d8 31 f3 62 44 86 88 41 a1 2c cf 52 ec 0b 4b b1 34 42 c4 c8 54 ee 8c 51 86 c9 14 f9 18 0e 2a fe b0 21 0f 7b a4 3e 6e 0c 5f 80 47 53 dc 5c 68 13 c4 74 6a 18 Data Ascii: :P<)@h?x">2y1bDA,RK4BTQ*!{>n_GS\htj+8,\|jnWr?Hvnwp8>HCs9!JFA"8rKvX~>iGGL!9ZI:Zf=-v}-uVJ{j;9+
Oct 4, 2024 17:07:02.394078970 CEST	1236	IN	Data Raw: 6a 10 07 07 71 d5 87 eb 23 86 ea 03 6d 87 e6 61 ca b0 9e 52 05 17 c1 46 2a 2a 44 df 86 38 35 4b 51 8f 14 29 53 4c 4c b1 67 e1 61 89 cc 46 84 8e 6b 43 35 2d fa 6d 2d 57 24 3d 04 b1 fa 48 99 d2 49 29 84 a2 50 50 3a 28 05 54 18 44 d3 85 18 d1 f5 40 Data Ascii: jq#maRF*D85KQ)SLLgaFkC5-m-W$=HI)PP:(TD@@PmnD1}n$qDq(1EdjU\|83y2&*+fKR}lE/JO,kqirT@M8ThRAVEr6YYntf
Oct 4, 2024 17:07:02.394089937 CEST	677	IN	Data Raw: 99 ba c7 ea 6f 31 fe 2d 56 7f 8b 91 ef b0 e2 3b 64 3e 57 fa 9d 63 f2 79 a8 3e d4 8b ac 10 da 2e a2 8f 88 e3 87 b6 7a 90 e4 a1 83 cf a8 75 e8 04 88 f8 ea 3a 88 b2 99 d0 f3 10 31 66 a4 30 44 3c 43 94 ad 86 28 69 e8 e3 ab 8f c5 7c 8c 41 79 c3 00 ef Data Ascii: o1-V;d>Wcy>.zu:1f0D<C(i\|AycGB.DB%\|#J7QA'qd7(b<E+@a,y[&+[/5*Nrnjj@Y_mkuSo-Is(y],Z^f9{_2ET5,KInSR8SQ
Oct 4, 2024 17:07:47.540575027 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 4, 2024 17:08:32.550596952 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:06:59 UTC	652	OUT	GET /wp-content/uploads/2024/05/Untitled38_20240505102749-removebg-preview.png HTTP/1.1 Host: celerysticksva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://celerysticksva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:06:59 UTC	915	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:06:59 GMT Content-Type: image/png Content-Length: 217141 Connection: close Last-Modified: Tue, 28 May 2024 16:32:36 GMT Cache-Control: max-age=31536000 Expires: Fri, 03 Oct 2025 17:54:47 GMT host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress CF-Cache-Status: HIT Age: 76332 Accept-Ranges: bytes Set-Cookie: __cf_bm=yTwoUOuK_hETsgE3BWVTobI449OkKuLQsuis4WFcFp0-1728054419-1.0.1.1-kj5c8Rb.DHV_pNveHcrh1nCCdoirXbfmn9FkQK8tlBPkxFlGs1Q9lt.3Xk0GvRMgFl7k8HT2n.QXWifY.QOHLA; path=/; expires=Fri, 04-Oct-24 15:36:59 GMT; domain=.celerysticksva.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=m1Q3XryhyV7d8iqCJOmjd69Uj56h4z3hgBGcQ_tvFNY-1728054419257-0.0.1.1-604800000; path=/; domain=.celerysticksva.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8cd614384fde42f5-EWR
2024-10-04 15:06:59 UTC	454	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 be 00 00 02 1d 08 06 00 00 00 42 ed 18 34 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 01 be a0 03 00 04 00 00 00 01 00 00 02 1d 00 00 00 00 bb 54 a3 2d 00 00 40 00 49 44 41 54 78 01 ec bd 09 b4 6d 57 59 26 ba f7 e9 cf b9 37 37 7d df 5e 12 7a 12 8a 46 08 4f 4c 09 ca 03 81 92 92 1a 20 28 a0 22 42 21 52 3c 94 f1 b0 78 a2 19 58 35 d4 7a 5a d2 48 2b 96 94 22 58 94 03 87 f5 14 89 18 10 ca 20 62 40 11 91 24 40 08 84 24 a4 4f 6e 7b fa fd be 6f ae fd ed f3 9d ff ce 39 d7 de 27 f7 3a 80 ac 95 ec fb 77 df ff cf b9 e6 9a 67 fe 6b ae 35 d7 5a bd Data Ascii: PNGIHDRB4sRGBDeXIfMM*iT-@IDATxmWY&77}^zFOL ("B!R<xX5zZH+"X b@$@$On{o9':wgk5Z
2024-10-04 15:06:59 UTC	1369	IN	Data Raw: 26 da 24 8b 0a db 26 0b 97 a3 d1 d7 31 d1 26 59 54 d8 36 59 b8 1c 8d be 8e 89 36 c9 a2 c2 b6 c9 c2 e5 68 f4 75 4c b4 49 16 15 b6 4d 16 2e 47 a3 af 63 a2 4d b2 a8 b0 6d b2 70 39 1a 7d 1d 13 6d 92 45 85 6d 93 85 cb d1 e8 eb 98 68 93 2c 2a 6c 9b 2c 5c 91 c6 00 0e a4 ad 64 1f 47 5f c2 c4 32 5c 76 be 2b bf 6b ff 52 1f 1a 47 5f c2 c4 3e e6 b2 f3 5d ff eb fa 5f a9 0f 8d a3 2f 61 62 1f 73 d9 f9 ae ff 1d e5 fe 57 3a 20 25 bd 0e 86 db 9d a7 3d ca 39 9f 9a ae 16 23 e7 17 cb 8b 72 ce a7 a6 eb ca 2f 1f c3 5c bb c5 f6 8e 72 ce a7 a6 eb da bf 6b ff 52 1f ca f5 9b 88 8d 72 ce a7 a6 eb fa df fd a7 ff a9 1f 1c 41 bd 13 39 3f 4e e7 38 22 d8 50 11 e3 94 70 b1 8c e8 17 e5 5a 1c b7 4d e2 e7 58 e7 63 dd 3c 7e 1b 1f e3 d4 f0 8e 75 be 2b bf fd 8f b3 d4 ae b1 1d 4b b8 d8 c6 d1 2f Data Ascii: &$&1&YT6Y6huLIM.GcMmp9}mEmh,*l,\dG_2\v+kRG_>]_/absW: %=9#r/\rkRrA9?N8"PpZMXc<~u+K/
2024-10-04 15:06:59 UTC	1369	IN	Data Raw: be 84 97 be 84 2d e9 e5 27 2a 9c 28 f5 ce 0b 27 1a 6d 51 2e e1 a4 8f 54 fe a2 b4 3b 5f c2 4b 5f c2 96 f4 f2 13 15 4e 94 7a e7 85 13 8d b6 28 97 70 d2 47 2a 7f 51 da 9d 2f e1 a5 2f 61 4b 7a f9 89 0a 27 4a bd f3 c2 89 46 5b 94 4b 38 e9 23 95 bf 68 b4 b7 ca 6d 8e b2 8b b6 05 1c 17 a7 38 6d 78 d9 45 e5 57 a2 e3 e2 e4 df 86 97 5d 54 7e 25 3a 2e 4e fe 6d 78 d9 45 e5 57 a2 e3 e2 e4 df 86 97 5d 54 7e 25 3a 2e 4e fe 6d 78 d9 45 e5 57 a2 e3 e2 e4 df 86 97 5d 54 7e 25 3a 2e 4e fe 6d 78 d9 45 e5 57 a2 e3 e2 e4 df 86 97 5d 54 7e 25 3a 2e 4e fe 6d 78 d9 45 e5 57 a2 e3 e2 e4 df 86 97 5d 54 7e 25 3a 2e 4e fe 6d 78 d9 45 e5 57 a2 e3 e2 e4 df 86 97 5d 54 7e 25 3a 2e 4e fe 6d 78 d9 45 e5 d7 4a 73 0e 39 1d 03 95 f4 6d 85 d4 fc 72 b6 9c ae 2b bf 6b ff 52 bf e8 fa 5f bd 05 6a Data Ascii: -'('mQ.T;_K_Nz(pGQ//aKz'JF[K8#hm8mxEW]T~%:.NmxEW]T~%:.NmxEW]T~%:.NmxEW]T~%:.NmxEW]T~%:.NmxEW]T~%:.NmxEJs9mr+kR_j
2024-10-04 15:06:59 UTC	1369	IN	Data Raw: ca f2 8f 34 87 cb e9 e4 57 b2 45 7d 94 e5 1f 69 0e 97 d3 c9 af 64 8b fa 28 cb 3f d2 1c 2e a7 93 5f c9 16 f5 51 96 7f a4 39 5c 4e 27 bf 92 2d ea a3 2c ff 48 73 b8 9c 4e 7e 25 5b d4 47 59 fe 91 e6 70 39 9d fc 4a b6 a8 8f b2 fc 23 cd e1 72 3a f9 95 6c 51 1f 65 f9 47 9a c3 e5 74 f2 2b d9 a2 3e ca f2 8f 34 87 cb e9 e4 57 b2 45 7d 94 e5 7f 54 69 ad 90 68 8b f2 d1 a8 48 2d 66 b4 45 b9 2b ff be b7 40 ad 4d a3 2d ca f7 bd f4 fa e5 8d 58 5e 94 bb f2 ef 7b 0b d4 da 34 da a2 7c df 4b ef 8e 7f ad 4d a3 2d ca f7 b7 f6 1f ed af 1a 22 52 01 a4 a7 ec 7c 4e 2e e9 a8 2f 6d 8a 19 a9 f0 d2 53 76 3e 27 97 74 d4 97 36 c5 8c 54 78 e9 29 3b 9f 93 4b 3a ea 4b 9b 62 46 2a bc f4 94 9d cf c9 25 1d f5 a5 4d 31 23 15 5e 7a ca ce e7 e4 92 8e fa d2 a6 98 91 0a 2f 3d 65 e7 73 72 49 47 7d Data Ascii: 4WE}id(?._Q9\N'-,HsN~%[GYp9J#r:lQeGt+>4WE}TihH-fE+@M-X^{4\|KM-"R\|N./mSv>'t6Tx);K:KbF*%M1#^z/=esrIG}
2024-10-04 15:06:59 UTC	1369	IN	Data Raw: 3e 14 53 14 27 f1 c9 61 5d e7 7c b1 c0 60 98 c4 27 87 75 9d f3 a1 98 a2 38 89 4f 0e eb 3a e7 8b 05 06 c3 24 3e 39 ac eb 9c 0f c5 14 c5 49 7c 72 58 d7 39 5f 2c 30 18 26 f1 c9 61 5d e7 7c 28 a6 28 4e e2 93 c3 ba ce f9 62 81 c1 30 89 4f 0e eb 3a e7 43 31 45 71 22 9f 1c 38 a7 8b a5 39 c6 f9 88 6b 93 73 be 39 5d 8c e3 18 e7 23 ae 4d ce f9 e6 74 31 8e 63 9c 8f b8 36 39 e7 9b d3 c5 38 8e 71 3e e2 da e4 9c 6f 4e 17 e3 38 c6 f9 88 6b 93 73 be 39 5d 8c e3 18 e7 23 ae 4d ce f9 e6 74 31 8e 63 9c 8f b8 36 39 e7 9b d3 c5 38 8e 71 3e e2 da e4 9c 6f 4e 17 e3 38 c6 f9 88 6b 93 73 be 39 5d 8c e3 18 e7 23 ae 4d ce f9 e6 74 31 8e 63 9c 8f b8 36 39 e7 9b d3 c5 38 8e 71 3e e2 da e4 9c 6f 4e 17 e3 38 c6 f9 88 6b 93 73 be 39 5d 8c e3 18 e7 23 ae 28 cb 49 34 07 ac d9 72 f8 49 74 Data Ascii: >S'a]\|`'u8O:$>9I\|rX9_,0&a]\|((Nb0O:C1Eq"89ks9]#Mt1c698q>oN8ks9]#Mt1c698q>oN8ks9]#Mt1c698q>oN8ks9]#(I4rIt
2024-10-04 15:06:59 UTC	1369	IN	Data Raw: 14 a5 c1 f9 11 f0 18 31 2a 4b b4 2b bf 6b 7f ef 0b c7 a8 db 8d c2 aa 2c d1 ae ff 75 fd cf fb c2 a8 a3 1c 23 46 65 89 76 fd ef 18 f7 3f 6f e8 71 8e 69 0e 2f 9d 68 2e 4e c9 56 d2 e7 62 94 3a 83 62 88 e6 7c 4b b6 92 3e 17 a3 2b 3f df 19 d5 86 a2 b9 b6 2b d9 4a fa 5c 8c ae fd bb f6 cf f5 17 e9 44 73 7d a7 64 2b e9 73 31 ba fe f7 1d d2 ff fc a0 97 f8 78 b0 6b 38 c7 3a 6e 9c 4e e4 78 e7 3d 66 8d 57 19 f2 15 95 3e 47 1d 53 e2 6b 65 ba 8f e2 4b 27 2a 7d 8e 3a a6 c4 77 e5 6f ff 63 ab b5 93 b7 95 e3 72 6d ef d8 1a 5f b3 e5 ca 90 4e b4 54 f6 24 71 3d 56 89 57 39 b2 8b 4a 9f a3 8e 29 f1 93 d4 d3 b1 1e 2f 57 b6 63 6b 7c cd 96 2b 43 3a d1 52 d9 93 c4 f5 58 25 5e e5 c8 2e 2a 7d 8e 3a a6 c4 4f 52 4f c7 7a bc 5c d9 8e ad f1 35 5b ae 0c e9 44 4b 65 4f 12 d7 63 95 78 95 23 Data Ascii: 1K+k,u#Fev?oqi/h.NVb:b\|K>+?+J\Ds}d+s1xk8:nNx=fW>GSkeK'}:wocrm_NT$q=VW9J)/Wck\|+C:RX%^.*}:OROz\5[DKeOcx#
2024-10-04 15:06:59 UTC	1369	IN	Data Raw: 1a c0 be b9 07 b3 c2 25 c4 98 47 b2 c3 6f 30 3b 3b 3b c0 ac 6f 30 3d 3d ad 04 b8 76 d2 49 27 7d e2 35 af 79 cd f7 aa 4e ac 73 89 8f 36 ed 9f e3 a5 ab 51 e1 23 95 8f f4 94 9d cf c9 25 1d f5 a5 4d 31 23 15 5e 7a ca ce e7 e4 92 8e fa d2 a6 98 91 0a 2f 3d 65 e7 73 72 49 47 7d 69 53 cc 48 85 97 9e b2 f3 39 b9 a4 a3 be b4 29 66 a4 c2 4b 4f d9 f9 9c 5c d2 51 5f da 14 33 52 e1 a5 a7 ec 7c 4e 2e e9 a8 3f 62 8b c1 08 a0 2e a7 3f c2 b9 a0 98 c4 37 87 ed ca ef da 3f d7 2f 0a dd ed 08 f5 24 be c2 e2 9e db 03 ce 3e fb ec 0f 21 d8 1a 7e ba 4c b9 c9 24 77 dc c2 e2 e6 9e c5 a5 c1 f1 4b bb 06 27 1d b7 67 f3 e4 3d c7 0f 4e 5d 98 df 3c ef c4 13 06 e7 9f 74 e2 e0 f4 a5 c5 c1 69 8b 0b 83 73 4f 38 7e 40 dd 99 bb 77 0d ce 41 f2 23 4f dd d9 7b 8e 1b 9c 75 dc ee f4 a3 0d be 3e e3 Data Ascii: %Go0;;;o0==vI'}5yNs6Q#%M1#^z/=esrIG}iSH9)fKO\Q_3R\|N.?b.?7?/$>!~L$wK'g=N]<tisO8~@wA#O{u>
2024-10-04 15:06:59 UTC	1369	IN	Data Raw: e6 27 ff 52 bb b9 de 79 f9 45 5a c3 d0 46 fc 77 d2 f1 ef f6 7f 7b 0b dc 1f 8e ff e8 7c 55 1d 3a 76 6a d7 cb e6 9d 3e da bd 09 65 73 3c 79 e9 73 58 95 21 5b c4 d2 df e3 45 bb fc 48 65 73 7c 57 7e d7 fe ea 17 ec 23 6f 79 cb 5b 1e fb b5 af dd f0 a2 e5 95 e5 69 e8 71 1f af df 3b f9 c4 3d bd 39 d0 45 cc f8 f0 d8 42 6f d7 fc 5c 6f 71 7e 1e 0b 5d f0 c8 01 67 6e eb 6b 48 42 ab b8 8c b9 c6 87 d4 91 eb 06 e9 d7 1b 60 3e b7 b1 de a3 1d bf 3e 69 1f ba 69 d8 67 31 a3 e3 0c 92 97 4e f1 50 7b fa e1 a1 77 24 55 f8 23 ff e1 66 61 0f f7 15 f1 43 22 85 0f 32 4b 6f 0e 89 70 f7 ae 5d bd 85 85 59 24 bf b5 34 13 64 9d f7 ed 3b 70 c9 ab 5f fd ea 77 7e ec 63 1f 3b c7 f7 85 36 df 64 eb fa 3f 0e c0 70 eb fe fe bb bf 7f fe 5d 8c 4e 4f d5 31 4a 34 81 87 b3 3c e7 89 8f 72 29 46 d4 4f Data Ascii: 'RyEZFw{\|U:vj>es<ysX![EHes\|W~#oy[iq;=9EBo\oq~]gnkHB`>>iig1NP{w$U#faC"2Kop]Y$4d;p_w~c;6d?p]NO1J4<r)FO
2024-10-04 15:06:59 UTC	1369	IN	Data Raw: 57 e3 6b 3e 2a 43 fe 8e 95 cd 75 ce cb a7 8d d6 7c 54 86 62 38 56 36 d7 39 2f 9f 36 5a f3 51 19 8a e1 58 d9 5c e7 bc 7c da 68 cd 47 65 28 86 63 65 73 9d f3 f2 69 a3 35 1f 95 a1 18 8e 95 cd 75 ce cb a7 8d 46 9f 23 2e 75 32 40 ae 30 d7 89 2f 15 e6 85 88 6f f3 f1 58 c2 ca 37 d6 49 76 f7 71 de fd c4 b7 f9 b8 bf b0 f2 ed ca df de 27 d4 3e de 66 ce 7b bb 89 6f f3 71 7f 61 e5 7b 2c da 1f 9f 1b 3a 69 ff fe fd e7 61 c8 4f b7 d4 66 66 a6 9b 47 15 98 f4 50 20 33 01 ef da a5 25 99 78 6d 59 ba b1 07 6a 5b 4a 17 98 b7 f1 e1 f2 23 7e 43 9c 12 8a a8 b9 37 2c e7 76 9c b9 71 36 c7 d9 1f 2f 74 f2 b1 89 19 3c 18 9f 2e 87 a2 14 ae f6 44 e6 eb 21 df a5 59 1e 1f ad c0 cb b3 91 80 39 2b ec 4f df 73 cf 3d 17 63 91 cb 85 0a ee ed 26 5e 6d 2a 4c 8d 0a 2b 5f 62 5d 27 be 14 c3 fd c4 Data Ascii: Wk>Cu\|Tb8V69/6ZQX\\|hGe(cesi5uF#.u2@0/oX7Ivq'>f{oqa{,:iaOffGP 3%xmYj[J#~C7,vq6/t<.D!Y9+Os=c&^mL+_b]'
2024-10-04 15:06:59 UTC	1369	IN	Data Raw: 92 c7 e5 ce b5 97 bd ec 65 ff 27 de 44 f3 f1 58 a2 da 5d 94 76 e7 4b 78 e9 4b d8 92 5e 7e a2 c2 89 52 ef bc 70 a2 d1 16 e5 12 4e fa 48 e5 2f 4a bb f3 25 bc f4 25 6c 49 2f 3f 51 e1 44 a9 77 5e 38 d1 68 8b 72 09 27 7d a4 f2 17 a5 dd f9 12 5e fa 12 b6 a4 97 9f a8 70 a2 d4 3b 2f 9c 68 b4 45 b9 84 93 3e 52 f9 8b d2 9e fe d8 22 b0 24 bb 63 0e 23 bb 68 0e e3 ba 71 71 f2 69 c3 cb 2e 2a bf 12 1d 17 27 ff 36 bc ec a2 f2 2b d1 71 71 f2 6f c3 cb 2e 2a bf 12 1d 17 27 ff 36 bc ec a2 58 6d 78 2a 9e 31 3b 09 97 e1 98 e0 2e b8 fb ee bb cf c5 ef bc 5b 6e b9 e5 a1 48 70 8f 60 62 e3 2a 4a cc be e6 e0 93 16 30 32 a9 60 e3 3f e9 f9 38 ce 7e 60 4b a7 ac 5c ec 91 66 43 34 02 27 9e 0e b5 8d cf bf f1 b1 00 26 08 f8 31 6e 0a 49 9f 69 ce ae b0 31 4b 32 f1 4d e1 f1 83 e9 19 66 a2 d5 Data Ascii: e'DX]vKxK^~RpNH/J%%lI/?QDw^8hr'}^p;/hE>R"$c#hqqi.'6+qqo.'6Xmx1;.[nHp`bJ02`?8~`K\fC4'&1nIi1K2Mf

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:07:00 UTC	729	OUT	GET /design/DAGG6U9mKKc/nm6DM_OA9EWr4TduD9lCVA/view?embed HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://celerysticksva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:07:00 UTC	1158	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:07:00 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8cd61440c89643af-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Pragma: No-cache accept-ch: Sec-CH-UA-Platform-Version content-security-policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-Y9DClOoPzP2YvMfcNx0Few'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=8cd61440c89643af&app=embed&policyHash=e9ee400a p3p: CP=Canva does not have a P3P Policy. referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-request-id: 8cd61440c89643af x-robots-tag: noindex, nofollow x-xss-protection: 1; mode=block Set-Cookie: __cf_bm=Z_VpnKcNX8PkRR.xQgQnfJ9v4j7XbvFyOWW3vvaUEEw-1728054420-1.0.1.1-6CDwrxLgDNjpqeYB.suUAZo2GXAwEIeDSkl4_hqUItMl6VbZyp9Tj54xTknEFayc0o3.4BSHJYnEjI1cUH0oww; path=/; expires=Fri, 04-Oct-24 15:37:00 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None
2024-10-04 15:07:00 UTC	513	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 7a 33 6a 4b 4f 75 51 53 4b 56 4f 61 45 5a 56 39 59 78 6f 39 6d 35 43 6e 48 54 75 72 33 54 46 32 25 32 46 4d 64 35 4d 44 43 38 4d 6a 67 77 66 58 31 62 49 25 32 46 74 5a 6d 25 32 46 25 32 46 76 62 36 69 72 65 4a 47 51 4d 76 4d 70 79 25 32 42 34 6b 50 64 48 72 59 25 32 42 58 39 35 44 46 44 39 69 32 42 7a 72 37 67 62 4f 7a 43 53 68 46 34 75 77 45 72 71 4c 73 56 66 35 4e 7a 6c 33 45 48 78 79 63 4d 25 32 42 51 76 25 32 46 64 30 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z3jKOuQSKVOaEZV9Yxo9m5CnHTur3TF2%2FMd5MDC8MjgwfX1bI%2FtZm%2F%2Fvb6ireJGQMvMpy%2B4kPdHrY%2BX95DFD9i2Bzr7gbOzCShF4uwErqLsVf5Nzl3EHxycM%2BQv%2Fd00%3D"}],"group":"cf-nel","max_age":
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 37 66 62 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 20 6c 69 67 68 74 20 63 6c 61 73 73 69 63 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 50 61 79 6d 65 6e 74 20 26 61 6d 70 3b 20 53 65 74 75 70 20 50 61 67 65 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 62 65 64 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 76 69 65 77 70 Data Ascii: 7fbb<!DOCTYPE html><html dir="ltr" lang="en" class="theme light classic"><head><meta charset="utf-8"><title>Payment & Setup Page</title><meta name="app-name" content="embed" /><meta name="viewport" content="width=device-width, initial-scale=1, viewp
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 65 73 2f 64 39 37 61 36 66 66 61 35 30 37 62 36 37 30 61 35 62 31 36 36 34 66 39 38 66 63 31 31 38 33 64 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 69 6d 61 67 65 73 2f 31 64 65 37 34 33 34 64 38 36 31 36 36 62 30 36 31 34 66 66 33 64 36 31 63 64 61 31 31 61 35 34 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 30 61 31 2c 75 2b 30 30 61 61 2d 30 30 61 62 2c 75 2b 30 30 61 66 2c 75 2b 30 30 62 38 2c 75 2b 30 30 62 61 2d 30 30 62 62 2c 75 2b 30 30 62 66 2c 75 2b 30 30 63 30 2d 30 30 64 36 2c 75 2b 30 30 64 38 2d 30 30 66 36 2c 75 2b 30 30 66 38 2d 30 31 34 38 2c Data Ascii: es/d97a6ffa507b670a5b1664f98fc1183d.woff2) format("woff2"),url(https://static.canva.com/web/images/1de7434d86166b0614ff3d61cda11a54.woff) format("woff");unicode-range:u+00a1,u+00aa-00ab,u+00af,u+00b8,u+00ba-00bb,u+00bf,u+00c0-00d6,u+00d8-00f6,u+00f8-0148,
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 4f 76 62 64 6c 55 4c 79 6f 75 31 75 6c 74 59 4c 62 4b 6a 64 34 7a 2f 53 71 72 74 51 4a 69 36 39 50 66 39 45 41 70 33 35 59 61 55 44 30 4a 47 6f 50 71 4d 6b 4b 62 76 67 52 59 36 7a 50 6b 53 35 61 2f 55 30 49 5a 6d 2f 73 51 38 73 4f 73 77 39 56 43 51 30 67 3d 3d 22 20 6e 6f 6e 63 65 3d 22 59 39 44 43 6c 4f 6f 50 7a 50 32 59 76 4d 66 63 4e 78 30 46 65 77 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 32 32 31 35 65 35 65 31 31 62 63 65 66 39 31 39 2e 72 75 6e 74 69 6d 65 2e 6a 73 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 Data Ascii: OvbdlULyou1ultYLbKjd4z/SqrtQJi69Pf9EAp35YaUD0JGoPqMkKbvgRY6zPkS5a/U0IZm/sQ8sOsw9VCQ0g==" nonce="Y9DClOoPzP2YvMfcNx0Few"><link href="https://static.canva.com/web/2215e5e11bcef919.runtime.js" rel="preload" as="script" crossorigin="anonymous" integrity="sha5
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 50 61 79 6d 65 6e 74 20 26 61 6d 70 3b 20 53 65 74 75 70 20 50 61 67 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 64 65 73 69 67 6e 2f 44 41 47 47 36 55 39 6d 4b 4b 63 2f 6e 6d 36 44 4d 5f 4f 41 39 45 57 72 34 54 64 75 44 39 6c 43 56 41 2f 73 63 72 65 65 6e 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 77 69 64 74 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 30 32 34 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 68 65 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 35 37 36 22 20 2f Data Ascii: ty="og:title" content="Payment & Setup Page"><meta property="og:image" content="https://www.canva.com/design/DAGG6U9mKKc/nm6DM_OA9EWr4TduD9lCVA/screen" /><meta property="og:image:width" content="1024" /><meta property="og:image:height" content="576" /
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2d 31 2e 69 63 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 61 6e 64 72 6f 69 64 2d 31 39 32 78 31 39 32 2d 32 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 39 32 78 31 39 32 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 31 32 30 78 31 32 30 2d 31 2e 70 Data Ascii: f="https://static.canva.com/static/images/favicon-1.ico"><link rel="icon" href="https://static.canva.com/static/images/android-192x192-2.png" sizes="192x192"><link rel="apple-touch-icon" href="https://static.canva.com/static/images/apple-touch-120x120-1.p
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 2c 22 42 22 3a 66 61 6c 73 65 2c 22 47 22 3a 66 61 6c 73 65 2c 22 4e 22 3a 66 61 6c 73 65 2c 22 43 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 63 6f 6f 6b 69 65 73 2d 70 6f 6c 69 63 79 2f 22 2c 22 49 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2d 63 6f 6f 6b 69 65 73 2f 22 2c 22 4a 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 2c 22 45 22 3a 5b 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 43 61 6e 76 61 22 7d 2c 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 43 61 73 74 6c 65 22 7d 2c 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 43 6c 6f 75 64 66 6c 61 72 65 Data Ascii: ,"B":false,"G":false,"N":false,"C":"https://www.canva.com/policies/cookies-policy/","I":"https://www.canva.com/manage-cookies/","J":"https://www.canva.com/policies/privacy-policy/","E":[{"A":"B","B":"Canva"},{"A":"B","B":"Castle"},{"A":"B","B":"Cloudflare
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 3a 22 53 6e 61 70 63 68 61 74 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 54 69 6b 54 6f 6b 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 54 77 69 74 74 65 72 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 59 61 68 6f 6f 20 41 64 20 45 78 63 68 61 6e 67 65 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 59 6f 75 74 75 62 65 22 7d 5d 2c 22 50 22 3a 5b 5d 2c 22 51 22 3a 5b 5d 7d 2c 22 53 22 3a 74 72 75 65 2c 22 57 22 3a 66 61 6c 73 65 2c 22 54 22 3a 7b 22 41 3f 22 3a 22 41 22 2c 22 45 22 3a 74 72 75 65 2c 22 46 22 3a 31 30 30 30 2c 22 47 22 3a 32 30 2c 22 48 22 3a 32 30 2c 22 49 22 3a 74 72 75 65 2c 22 4a 22 3a 30 2e 30 2c 22 4b 22 3a 30 2e 31 2c 22 4d 22 3a 22 77 65 62 22 2c 22 53 22 3a 66 61 6c 73 65 2c 22 54 22 3a 66 61 6c 73 65 2c 22 Data Ascii: :"Snapchat"},{"A":"E","B":"TikTok"},{"A":"E","B":"Twitter"},{"A":"E","B":"Yahoo Ad Exchange"},{"A":"E","B":"Youtube"}],"P":[],"Q":[]},"S":true,"W":false,"T":{"A?":"A","E":true,"F":1000,"G":20,"H":20,"I":true,"J":0.0,"K":0.1,"M":"web","S":false,"T":false,"
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 22 3a 2d 35 2e 36 38 34 33 34 31 38 38 36 30 38 30 38 30 31 35 45 2d 31 34 2c 22 42 22 3a 2d 35 2e 36 38 34 33 34 31 38 38 36 30 38 30 38 30 31 35 45 2d 31 34 2c 22 44 22 3a 34 32 38 2e 35 34 32 31 33 33 35 33 36 36 36 35 32 33 2c 22 43 22 3a 35 30 30 2e 34 32 30 37 35 30 34 31 34 33 36 35 7d 2c 22 43 22 3a 7b 22 23 66 66 66 66 66 66 22 3a 22 23 65 35 64 32 62 38 22 2c 22 23 32 33 31 66 32 30 22 3a 22 23 66 66 66 66 66 66 22 7d 7d 7d 7d 2c 7b 22 41 3f 22 3a 22 4a 22 2c 22 42 22 3a 31 2e 39 38 39 35 31 39 36 36 30 31 32 38 32 38 30 35 45 2d 31 33 2c 22 44 22 3a 31 37 32 2e 37 39 39 39 39 39 39 39 39 39 39 39 39 38 2c 22 43 22 3a 37 36 38 2e 30 30 37 34 39 39 37 31 30 35 32 32 31 2c 22 61 22 3a 7b 22 44 22 3a 36 34 2e 30 2c 22 43 22 3a 36 34 2e 30 7d 2c 22 Data Ascii: ":-5.6843418860808015E-14,"B":-5.6843418860808015E-14,"D":428.54213353666523,"C":500.420750414365},"C":{"#ffffff":"#e5d2b8","#231f20":"#ffffff"}}}},{"A?":"J","B":1.9895196601282805E-13,"D":172.79999999999998,"C":768.0074997105221,"a":{"D":64.0,"C":64.0},"
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 73 74 2d 6d 61 72 6b 65 72 22 3a 7b 22 42 22 3a 22 6e 6f 6e 65 22 7d 2c 22 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 22 3a 7b 22 42 22 3a 22 6e 6f 6e 65 22 7d 2c 22 6c 69 73 74 2d 6c 65 76 65 6c 22 3a 7b 22 42 22 3a 22 30 2e 30 22 7d 2c 22 6c 65 61 64 69 6e 67 22 3a 7b 22 42 22 3a 22 31 34 30 30 2e 30 22 7d 2c 22 64 65 63 6f 72 61 74 69 6f 6e 22 3a 7b 22 42 22 3a 22 6e 6f 6e 65 22 7d 2c 22 6c 69 6e 6b 22 3a 7b 22 42 22 3a 22 22 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 42 22 3a 22 30 2e 30 22 7d 2c 22 73 74 72 69 6b 65 74 68 72 6f 75 67 68 22 3a 7b 22 42 22 3a 22 6e 6f 6e 65 22 7d 2c 22 73 74 79 6c 65 22 3a 7b 22 42 22 3a 22 62 6f 64 79 22 7d 2c 22 66 6f 6e 74 2d 77 65 69 67 68 74 22 3a 7b 22 42 22 3a 22 6e 6f 72 6d 61 6c 22 7d 2c 22 73 70 61 63 69 6e Data Ascii: st-marker":{"B":"none"},"text-transform":{"B":"none"},"list-level":{"B":"0.0"},"leading":{"B":"1400.0"},"decoration":{"B":"none"},"link":{"B":""},"tracking":{"B":"0.0"},"strikethrough":{"B":"none"},"style":{"B":"body"},"font-weight":{"B":"normal"},"spacin

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:07:00 UTC	729	OUT	GET /design/DAGG6YPVj0I/WIrqiu3tkmQpk5Au_OFXeA/view?embed HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://celerysticksva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:07:00 UTC	1158	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:07:00 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8cd614410fcd1906-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Pragma: No-cache accept-ch: Sec-CH-UA-Platform-Version content-security-policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-B7m9mQt+K/J8Y27+W0i0ng'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=8cd614410fcd1906&app=embed&policyHash=06cb9c1c p3p: CP=Canva does not have a P3P Policy. referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-request-id: 8cd614410fcd1906 x-robots-tag: noindex, nofollow x-xss-protection: 1; mode=block Set-Cookie: __cf_bm=3IzPavZW1QFsuqttFVLYjBsYypgGTEBICREM7Y8WjQE-1728054420-1.0.1.1-RjtX730lCN0xgoaza_gIw_7F5xLTQJ7cve3gZiyNp0TQZSPEE10HlWhP04XhzJDp_mfCqz6YAjA1sl4G_RGItw; path=/; expires=Fri, 04-Oct-24 15:37:00 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None
2024-10-04 15:07:00 UTC	507	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4d 42 65 71 4a 73 4c 78 70 74 55 49 48 64 75 4f 57 6a 54 75 61 75 4a 6f 31 67 4a 37 45 59 6d 48 78 6b 43 55 4a 4d 32 79 6e 6f 79 6b 53 66 73 6d 75 6d 75 39 70 6b 54 4e 4a 39 67 4d 78 4a 67 38 58 64 49 36 67 58 7a 6d 42 75 36 6c 67 70 37 62 31 47 57 47 25 32 42 64 43 4a 57 71 6d 25 32 42 64 57 69 75 4e 78 32 48 4b 25 32 46 70 50 35 33 75 25 32 46 71 54 45 78 64 77 34 6d 66 34 74 6c 4a 44 6c 48 4f 25 32 46 73 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MBeqJsLxptUIHduOWjTuauJo1gJ7EYmHxkCUJM2ynoykSfsmumu9pkTNJ9gMxJg8XdI6gXzmBu6lgp7b1GWG%2BdCJWqm%2BdWiuNx2HK%2FpP53u%2FqTExdw4mf4tlJDlHO%2Fs%3D"}],"group":"cf-nel","max_age":604800
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 20 6c 69 67 68 74 20 63 6c 61 73 73 69 63 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 62 6f 75 74 20 4d 65 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 62 65 64 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 3e 3c Data Ascii: 7ff2<!DOCTYPE html><html dir="ltr" lang="en" class="theme light classic"><head><meta charset="utf-8"><title>About Me</title><meta name="app-name" content="embed" /><meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover"><
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 37 30 61 35 62 31 36 36 34 66 39 38 66 63 31 31 38 33 64 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 69 6d 61 67 65 73 2f 31 64 65 37 34 33 34 64 38 36 31 36 36 62 30 36 31 34 66 66 33 64 36 31 63 64 61 31 31 61 35 34 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 30 61 31 2c 75 2b 30 30 61 61 2d 30 30 61 62 2c 75 2b 30 30 61 66 2c 75 2b 30 30 62 38 2c 75 2b 30 30 62 61 2d 30 30 62 62 2c 75 2b 30 30 62 66 2c 75 2b 30 30 63 30 2d 30 30 64 36 2c 75 2b 30 30 64 38 2d 30 30 66 36 2c 75 2b 30 30 66 38 2d 30 31 34 38 2c 75 2b 30 31 34 61 2d 30 31 37 65 2c 75 2b 30 31 Data Ascii: 70a5b1664f98fc1183d.woff2) format("woff2"),url(https://static.canva.com/web/images/1de7434d86166b0614ff3d61cda11a54.woff) format("woff");unicode-range:u+00a1,u+00aa-00ab,u+00af,u+00b8,u+00ba-00bb,u+00bf,u+00c0-00d6,u+00d8-00f6,u+00f8-0148,u+014a-017e,u+01
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 62 4b 6a 64 34 7a 2f 53 71 72 74 51 4a 69 36 39 50 66 39 45 41 70 33 35 59 61 55 44 30 4a 47 6f 50 71 4d 6b 4b 62 76 67 52 59 36 7a 50 6b 53 35 61 2f 55 30 49 5a 6d 2f 73 51 38 73 4f 73 77 39 56 43 51 30 67 3d 3d 22 20 6e 6f 6e 63 65 3d 22 42 37 6d 39 6d 51 74 2b 4b 2f 4a 38 59 32 37 2b 57 30 69 30 6e 67 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 32 32 31 35 65 35 65 31 31 62 63 65 66 39 31 39 2e 72 75 6e 74 69 6d 65 2e 6a 73 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 70 4f 55 66 48 69 42 53 44 53 55 46 72 Data Ascii: bKjd4z/SqrtQJi69Pf9EAp35YaUD0JGoPqMkKbvgRY6zPkS5a/U0IZm/sQ8sOsw9VCQ0g==" nonce="B7m9mQt+K/J8Y27+W0i0ng"><link href="https://static.canva.com/web/2215e5e11bcef919.runtime.js" rel="preload" as="script" crossorigin="anonymous" integrity="sha512-pOUfHiBSDSUFr
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 6e 74 65 6e 74 3d 22 41 62 6f 75 74 20 4d 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 64 65 73 69 67 6e 2f 44 41 47 47 36 59 50 56 6a 30 49 2f 57 49 72 71 69 75 33 74 6b 6d 51 70 6b 35 41 75 5f 4f 46 58 65 41 2f 73 63 72 65 65 6e 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 77 69 64 74 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 30 32 34 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 68 65 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 35 37 36 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 Data Ascii: ntent="About Me"><meta property="og:image" content="https://www.canva.com/design/DAGG6YPVj0I/WIrqiu3tkmQpk5Au_OFXeA/screen" /><meta property="og:image:width" content="1024" /><meta property="og:image:height" content="576" /><meta property="og:url" content
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 6e 2d 31 2e 69 63 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 61 6e 64 72 6f 69 64 2d 31 39 32 78 31 39 32 2d 32 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 39 32 78 31 39 32 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 31 32 30 78 31 32 30 2d 31 2e 70 6e 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 Data Ascii: n-1.ico"><link rel="icon" href="https://static.canva.com/static/images/android-192x192-2.png" sizes="192x192"><link rel="apple-touch-icon" href="https://static.canva.com/static/images/apple-touch-120x120-1.png"><link rel="apple-touch-icon" href="https://s
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 63 61 6e 76 61 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 63 6f 6f 6b 69 65 73 2d 70 6f 6c 69 63 79 2f 22 2c 22 49 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2d 63 6f 6f 6b 69 65 73 2f 22 2c 22 4a 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 2c 22 45 22 3a 5b 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 43 61 6e 76 61 22 7d 2c 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 43 61 73 74 6c 65 22 7d 2c 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 43 6c 6f 75 64 66 6c 61 72 65 22 7d 2c 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 47 6f 6f 67 6c 65 20 46 69 72 65 62 61 73 65 20 43 72 61 73 68 6c 79 74 69 63 73 22 7d 2c 7b Data Ascii: canva.com/policies/cookies-policy/","I":"https://www.canva.com/manage-cookies/","J":"https://www.canva.com/policies/privacy-policy/","E":[{"A":"B","B":"Canva"},{"A":"B","B":"Castle"},{"A":"B","B":"Cloudflare"},{"A":"B","B":"Google Firebase Crashlytics"},{
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 3a 22 54 77 69 74 74 65 72 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 59 61 68 6f 6f 20 41 64 20 45 78 63 68 61 6e 67 65 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 59 6f 75 74 75 62 65 22 7d 5d 2c 22 50 22 3a 5b 5d 2c 22 51 22 3a 5b 5d 7d 2c 22 53 22 3a 74 72 75 65 2c 22 57 22 3a 66 61 6c 73 65 2c 22 54 22 3a 7b 22 41 3f 22 3a 22 41 22 2c 22 45 22 3a 74 72 75 65 2c 22 46 22 3a 31 30 30 30 2c 22 47 22 3a 32 30 2c 22 48 22 3a 32 30 2c 22 49 22 3a 74 72 75 65 2c 22 4a 22 3a 30 2e 30 2c 22 4b 22 3a 30 2e 31 2c 22 4d 22 3a 22 77 65 62 22 2c 22 53 22 3a 66 61 6c 73 65 2c 22 54 22 3a 66 61 6c 73 65 2c 22 61 22 3a 22 65 6d 62 65 64 22 2c 22 62 22 3a 22 68 74 74 70 73 3a 2f 2f 74 65 6c 65 6d 65 74 72 79 2e 63 61 6e 76 61 2e 63 6f 6d 2f 76 31 2f 74 Data Ascii: :"Twitter"},{"A":"E","B":"Yahoo Ad Exchange"},{"A":"E","B":"Youtube"}],"P":[],"Q":[]},"S":true,"W":false,"T":{"A?":"A","E":true,"F":1000,"G":20,"H":20,"I":true,"J":0.0,"K":0.1,"M":"web","S":false,"T":false,"a":"embed","b":"https://telemetry.canva.com/v1/t
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 22 43 22 3a 32 39 37 2e 36 39 31 38 30 35 31 35 33 30 35 33 39 36 2c 22 44 22 3a 22 41 22 2c 22 45 22 3a 22 41 22 7d 2c 22 65 22 3a 7b 7d 2c 22 66 22 3a 5b 7b 22 41 22 3a 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 22 5c 5c 6e 22 7d 5d 2c 22 42 22 3a 5b 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 7b 22 63 6f 6c 6f 72 22 3a 7b 22 42 22 3a 22 23 30 30 30 30 30 30 22 7d 2c 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 22 3a 7b 22 42 22 3a 22 59 41 46 64 4a 6a 54 6b 35 55 55 2c 30 22 7d 2c 22 66 6f 6e 74 2d 73 69 7a 65 22 3a 7b 22 42 22 3a 22 31 33 2e 37 37 37 38 22 7d 2c 22 73 70 61 63 69 6e 67 22 3a 7b 22 42 22 3a 22 30 2e 30 22 7d 2c 22 74 65 78 74 2d 61 6c 69 67 6e 22 3a 7b 22 42 22 3a 22 63 65 6e 74 65 72 22 7d 7d 7d 2c 7b 22 41 3f 22 3a 22 42 22 2c Data Ascii: "C":297.69180515305396,"D":"A","E":"A"},"e":{},"f":[{"A":{"A":[{"A?":"A","A":"\\n"}],"B":[{"A?":"A","A":{"color":{"B":"#000000"},"font-family":{"B":"YAFdJjTk5UU,0"},"font-size":{"B":"13.7778"},"spacing":{"B":"0.0"},"text-align":{"B":"center"}}},{"A?":"B",
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 7b 7d 2c 22 64 65 63 6f 72 61 74 69 6f 6e 22 3a 7b 7d 2c 22 66 6f 6e 74 2d 77 65 69 67 68 74 22 3a 7b 7d 7d 7d 5d 7d 2c 22 62 22 3a 7b 7d 2c 22 6a 22 3a 7b 22 41 22 3a 5b 7b 22 41 22 3a 22 73 70 6c 69 63 65 22 2c 22 42 22 3a 7b 22 74 68 69 63 6b 6e 65 73 73 22 3a 22 30 2e 36 22 2c 22 6f 66 66 73 65 74 22 3a 22 31 22 2c 22 61 6e 67 6c 65 22 3a 22 2d 34 35 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 62 33 63 65 62 33 22 7d 7d 5d 7d 2c 22 64 22 3a 22 41 22 2c 22 68 22 3a 22 41 22 7d 2c 7b 22 41 3f 22 3a 22 4b 22 2c 22 41 22 3a 31 34 39 2e 35 37 36 30 35 33 34 39 37 30 37 36 36 39 2c 22 42 22 3a 32 34 37 2e 34 38 37 31 30 36 36 35 35 33 39 33 33 35 2c 22 44 22 3a 36 33 39 2e 37 39 31 39 36 31 31 35 33 38 34 39 35 2c 22 43 22 3a 31 39 32 2e 30 2c 22 61 22 3a 7b 22 41 Data Ascii: {},"decoration":{},"font-weight":{}}}]},"b":{},"j":{"A":[{"A":"splice","B":{"thickness":"0.6","offset":"1","angle":"-45","color":"#b3ceb3"}}]},"d":"A","h":"A"},{"A?":"K","A":149.57605349707669,"B":247.48710665539335,"D":639.7919611538495,"C":192.0,"a":{"A

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:07:00 UTC	729	OUT	GET /design/DAGG6Q3459s/8FBNjjeoexSjUxqjC7x4CQ/view?embed HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://celerysticksva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:07:00 UTC	1158	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:07:00 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8cd614410def178c-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Pragma: No-cache accept-ch: Sec-CH-UA-Platform-Version content-security-policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-7csS0bJJqv9EY7nI44GoXw'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=8cd614410def178c&app=embed&policyHash=491d761d p3p: CP=Canva does not have a P3P Policy. referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-request-id: 8cd614410def178c x-robots-tag: noindex, nofollow x-xss-protection: 1; mode=block Set-Cookie: __cf_bm=sE0quciOftiJi69zGEa7w.BsN2UW2cFdYA_lBXP6M6M-1728054420-1.0.1.1-yxHG9kIAadF6atipNdqcH04fCnkUAJ_mVeFAoFYQGRfALLRh9CymsYXXgUFLrQHSFsqkBQXaQYollcDIofVbJQ; path=/; expires=Fri, 04-Oct-24 15:37:00 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None
2024-10-04 15:07:00 UTC	511	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 50 56 70 75 66 37 63 35 49 4f 4e 67 36 70 62 5a 4a 52 69 64 77 67 6c 67 77 72 51 61 4e 68 31 74 41 65 38 74 4c 49 56 39 55 34 25 32 42 31 32 77 45 78 62 79 78 65 63 53 61 43 68 4e 6f 65 67 69 6f 41 63 73 6d 43 41 4d 77 72 72 48 5a 5a 73 64 6e 35 59 43 6e 37 6d 78 73 74 25 32 46 36 25 32 46 6b 44 25 32 42 5a 69 30 4f 52 53 25 32 42 79 6f 30 30 69 63 61 57 47 42 59 4c 56 36 25 32 46 56 63 50 4a 25 32 42 57 4a 56 52 73 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PVpuf7c5IONg6pbZJRidwglgwrQaNh1tAe8tLIV9U4%2B12wExbyxecSaChNoegioAcsmCAMwrrHZZsdn5YCn7mxst%2F6%2FkD%2BZi0ORS%2Byo00icaWGBYLV6%2FVcPJ%2BWJVRsg%3D"}],"group":"cf-nel","max_age":60
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 20 6c 69 67 68 74 20 63 6c 61 73 73 69 63 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 26 23 33 39 3b 43 6f 6e 74 61 63 74 73 20 26 61 6d 70 3b 20 53 6f 63 69 61 6c 73 26 23 33 39 3b 20 50 61 67 65 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 62 65 64 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 Data Ascii: 7ff2<!DOCTYPE html><html dir="ltr" lang="en" class="theme light classic"><head><meta charset="utf-8"><title>'Contacts & Socials' Page</title><meta name="app-name" content="embed" /><meta name="viewport" content="width=device-width, initial-s
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 2e 63 6f 6d 2f 77 65 62 2f 69 6d 61 67 65 73 2f 64 39 37 61 36 66 66 61 35 30 37 62 36 37 30 61 35 62 31 36 36 34 66 39 38 66 63 31 31 38 33 64 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 69 6d 61 67 65 73 2f 31 64 65 37 34 33 34 64 38 36 31 36 36 62 30 36 31 34 66 66 33 64 36 31 63 64 61 31 31 61 35 34 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 30 61 31 2c 75 2b 30 30 61 61 2d 30 30 61 62 2c 75 2b 30 30 61 66 2c 75 2b 30 30 62 38 2c 75 2b 30 30 62 61 2d 30 30 62 62 2c 75 2b 30 30 62 66 2c 75 2b 30 30 63 30 2d 30 30 64 36 2c 75 2b 30 30 64 38 2d 30 30 66 36 Data Ascii: .com/web/images/d97a6ffa507b670a5b1664f98fc1183d.woff2) format("woff2"),url(https://static.canva.com/web/images/1de7434d86166b0614ff3d61cda11a54.woff) format("woff");unicode-range:u+00a1,u+00aa-00ab,u+00af,u+00b8,u+00ba-00bb,u+00bf,u+00c0-00d6,u+00d8-00f6
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 69 74 79 3d 22 73 68 61 35 31 32 2d 56 4f 76 62 64 6c 55 4c 79 6f 75 31 75 6c 74 59 4c 62 4b 6a 64 34 7a 2f 53 71 72 74 51 4a 69 36 39 50 66 39 45 41 70 33 35 59 61 55 44 30 4a 47 6f 50 71 4d 6b 4b 62 76 67 52 59 36 7a 50 6b 53 35 61 2f 55 30 49 5a 6d 2f 73 51 38 73 4f 73 77 39 56 43 51 30 67 3d 3d 22 20 6e 6f 6e 63 65 3d 22 37 63 73 53 30 62 4a 4a 71 76 39 45 59 37 6e 49 34 34 47 6f 58 77 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 32 32 31 35 65 35 65 31 31 62 63 65 66 39 31 39 2e 72 75 6e 74 69 6d 65 2e 6a 73 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 69 6e Data Ascii: ity="sha512-VOvbdlULyou1ultYLbKjd4z/SqrtQJi69Pf9EAp35YaUD0JGoPqMkKbvgRY6zPkS5a/U0IZm/sQ8sOsw9VCQ0g==" nonce="7csS0bJJqv9EY7nI44GoXw"><link href="https://static.canva.com/web/2215e5e11bcef919.runtime.js" rel="preload" as="script" crossorigin="anonymous" in
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 26 23 33 39 3b 43 6f 6e 74 61 63 74 73 20 26 61 6d 70 3b 20 53 6f 63 69 61 6c 73 26 23 33 39 3b 20 50 61 67 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 64 65 73 69 67 6e 2f 44 41 47 47 36 51 33 34 35 39 73 2f 38 46 42 4e 6a 6a 65 6f 65 78 53 6a 55 78 71 6a 43 37 78 34 43 51 2f 73 63 72 65 65 6e 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 77 69 64 74 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 30 32 34 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 Data Ascii: ><meta property="og:title" content="'Contacts & Socials' Page"><meta property="og:image" content="https://www.canva.com/design/DAGG6Q3459s/8FBNjjeoexSjUxqjC7x4CQ/screen" /><meta property="og:image:width" content="1024" /><meta property="og:ima
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 20 53 74 69 63 6b 73 2e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2d 31 2e 69 63 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 61 6e 64 72 6f 69 64 2d 31 39 32 78 31 39 32 2d 32 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 39 32 78 31 39 32 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f Data Ascii: Sticks."><link rel="shortcut icon" href="https://static.canva.com/static/images/favicon-1.ico"><link rel="icon" href="https://static.canva.com/static/images/android-192x192-2.png" sizes="192x192"><link rel="apple-touch-icon" href="https://static.canva.co
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 22 4f 22 3a 66 61 6c 73 65 2c 22 4c 22 3a 66 61 6c 73 65 2c 22 4d 22 3a 66 61 6c 73 65 2c 22 41 22 3a 66 61 6c 73 65 2c 22 42 22 3a 66 61 6c 73 65 2c 22 47 22 3a 66 61 6c 73 65 2c 22 4e 22 3a 66 61 6c 73 65 2c 22 43 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 63 6f 6f 6b 69 65 73 2d 70 6f 6c 69 63 79 2f 22 2c 22 49 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2d 63 6f 6f 6b 69 65 73 2f 22 2c 22 4a 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 2c 22 45 22 3a 5b 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 43 61 6e 76 61 22 7d 2c 7b 22 41 22 3a 22 42 22 Data Ascii: "O":false,"L":false,"M":false,"A":false,"B":false,"G":false,"N":false,"C":"https://www.canva.com/policies/cookies-policy/","I":"https://www.canva.com/manage-cookies/","J":"https://www.canva.com/policies/privacy-policy/","E":[{"A":"B","B":"Canva"},{"A":"B"
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 22 3a 22 45 22 2c 22 42 22 3a 22 50 69 6e 74 65 72 65 73 74 20 41 64 73 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 53 6e 61 70 63 68 61 74 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 54 69 6b 54 6f 6b 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 54 77 69 74 74 65 72 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 59 61 68 6f 6f 20 41 64 20 45 78 63 68 61 6e 67 65 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 59 6f 75 74 75 62 65 22 7d 5d 2c 22 50 22 3a 5b 5d 2c 22 51 22 3a 5b 5d 7d 2c 22 53 22 3a 74 72 75 65 2c 22 57 22 3a 66 61 6c 73 65 2c 22 54 22 3a 7b 22 41 3f 22 3a 22 41 22 2c 22 45 22 3a 74 72 75 65 2c 22 46 22 3a 31 30 30 30 2c 22 47 22 3a 32 30 2c 22 48 22 3a 32 30 2c 22 49 22 3a 74 72 75 65 2c 22 4a 22 3a 30 2e 30 2c Data Ascii: ":"E","B":"Pinterest Ads"},{"A":"E","B":"Snapchat"},{"A":"E","B":"TikTok"},{"A":"E","B":"Twitter"},{"A":"E","B":"Yahoo Ad Exchange"},{"A":"E","B":"Youtube"}],"P":[],"Q":[]},"S":true,"W":false,"T":{"A?":"A","E":true,"F":1000,"G":20,"H":20,"I":true,"J":0.0,
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 69 76 65 22 2c 22 61 22 3a 7b 22 41 22 3a 66 61 6c 73 65 2c 22 42 22 3a 7b 22 41 22 3a 7b 22 41 22 3a 22 4d 41 44 74 47 6c 79 4c 75 62 6f 22 2c 22 42 22 3a 32 7d 2c 22 42 22 3a 7b 22 41 22 3a 2d 31 2e 34 32 31 30 38 35 34 37 31 35 32 30 32 30 30 34 45 2d 31 34 2c 22 44 22 3a 32 30 30 2e 38 33 39 30 30 38 34 34 34 35 36 35 35 36 2c 22 43 22 3a 31 39 37 2e 30 37 33 32 37 37 30 33 36 32 32 39 39 37 7d 2c 22 43 22 3a 7b 22 23 65 39 33 37 32 39 22 3a 22 23 62 33 62 37 39 32 22 7d 7d 7d 7d 2c 7b 22 41 3f 22 3a 22 4a 22 2c 22 41 22 3a 34 30 35 2e 32 31 36 36 32 31 33 32 32 33 32 33 37 2c 22 42 22 3a 31 35 37 2e 39 39 33 37 33 38 39 38 37 37 31 32 37 33 2c 22 44 22 3a 31 36 34 2e 35 33 39 33 30 31 39 31 34 34 37 37 33 33 2c 22 43 22 3a 32 39 2e 38 37 36 31 35 35 Data Ascii: ive","a":{"A":false,"B":{"A":{"A":"MADtGlyLubo","B":2},"B":{"A":-1.4210854715202004E-14,"D":200.83900844456556,"C":197.07327703622997},"C":{"#e93729":"#b3b792"}}}},{"A?":"J","A":405.2166213223237,"B":157.99373898771273,"D":164.53930191447733,"C":29.876155
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 22 42 22 3a 22 23 30 30 30 30 30 30 22 7d 2c 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 22 3a 7b 22 42 22 3a 22 59 41 46 64 4a 6a 54 6b 35 55 55 2c 30 22 7d 2c 22 66 6f 6e 74 2d 73 69 7a 65 22 3a 7b 22 42 22 3a 22 31 33 2e 37 37 37 38 22 7d 7d 7d 2c 7b 22 41 3f 22 3a 22 42 22 2c 22 41 22 3a 31 7d 2c 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 7b 22 73 70 61 63 69 6e 67 22 3a 7b 7d 2c 22 74 65 78 74 2d 61 6c 69 67 6e 22 3a 7b 7d 2c 22 63 6f 6c 6f 72 22 3a 7b 7d 2c 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 22 3a 7b 7d 2c 22 66 6f 6e 74 2d 73 69 7a 65 22 3a 7b 7d 7d 7d 5d 7d 2c 22 42 22 3a 7b 7d 2c 22 44 22 3a 7b 22 44 22 3a 36 34 2e 30 2c 22 43 22 3a 36 34 2e 30 7d 2c 22 45 22 3a 5b 31 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 5d 2c 22 46 22 3a 22 42 22 7d 5d 2c Data Ascii: "B":"#000000"},"font-family":{"B":"YAFdJjTk5UU,0"},"font-size":{"B":"13.7778"}}},{"A?":"B","A":1},{"A?":"A","A":{"spacing":{},"text-align":{},"color":{},"font-family":{},"font-size":{}}}]},"B":{},"D":{"D":64.0,"C":64.0},"E":[1.3333333333333333],"F":"B"}],

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:07:00 UTC	729	OUT	GET /design/DAGG6SqehUY/2TcrLDgpiqaFZRMvvzRRTA/view?embed HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://celerysticksva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:07:00 UTC	1158	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:07:00 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8cd614410de0c425-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Pragma: No-cache accept-ch: Sec-CH-UA-Platform-Version content-security-policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-jxGrdmW7wvvZnFOGbIfhsw'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=8cd614410de0c425&app=embed&policyHash=3a5f5804 p3p: CP=Canva does not have a P3P Policy. referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-request-id: 8cd614410de0c425 x-robots-tag: noindex, nofollow x-xss-protection: 1; mode=block Set-Cookie: __cf_bm=H6eKRDK1Ja3SV00eN0EqN5iKvEk39lxbzScLdgITyKg-1728054420-1.0.1.1-6_naam7QucCxYLhSDdhdePrYV3vSq_hJ2ihJoTxGRRoF.I7q_cC7m.Ac0N8jb8cZMYnKeTErisleENutRVcezQ; path=/; expires=Fri, 04-Oct-24 15:37:00 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None
2024-10-04 15:07:00 UTC	505	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 79 70 58 55 59 4c 47 31 4b 6c 33 58 42 55 34 71 72 44 25 32 46 46 74 67 5a 69 48 49 41 39 66 30 61 58 52 6f 58 6d 54 72 6f 55 46 7a 39 59 38 25 32 46 37 47 56 69 6c 42 50 35 68 4b 42 68 6a 67 39 35 71 34 30 5a 55 38 6d 35 30 79 6d 6d 46 61 4b 6e 72 55 4b 43 59 69 63 68 61 37 6e 73 32 25 32 46 70 6d 33 55 51 66 6c 31 75 42 56 6f 37 57 78 44 33 5a 56 69 45 4b 52 46 55 34 25 32 46 58 4f 67 6a 46 6a 4b 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ypXUYLG1Kl3XBU4qrD%2FFtgZiHIA9f0aXRoXmTroUFz9Y8%2F7GVilBP5hKBhjg95q40ZU8m50ymmFaKnrUKCYicha7ns2%2Fpm3UQfl1uBVo7WxD3ZViEKRFU4%2FXOgjFjKI%3D"}],"group":"cf-nel","max_age":604800}
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 20 6c 69 67 68 74 20 63 6c 61 73 73 69 63 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 26 23 33 39 3b 56 6f 69 63 65 20 44 65 6d 6f 73 26 23 33 39 3b 20 50 61 67 65 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 62 65 64 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 76 69 65 Data Ascii: 7ff2<!DOCTYPE html><html dir="ltr" lang="en" class="theme light classic"><head><meta charset="utf-8"><title>'Voice Demos' Page</title><meta name="app-name" content="embed" /><meta name="viewport" content="width=device-width, initial-scale=1, vie
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 61 67 65 73 2f 64 39 37 61 36 66 66 61 35 30 37 62 36 37 30 61 35 62 31 36 36 34 66 39 38 66 63 31 31 38 33 64 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 69 6d 61 67 65 73 2f 31 64 65 37 34 33 34 64 38 36 31 36 36 62 30 36 31 34 66 66 33 64 36 31 63 64 61 31 31 61 35 34 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 30 61 31 2c 75 2b 30 30 61 61 2d 30 30 61 62 2c 75 2b 30 30 61 66 2c 75 2b 30 30 62 38 2c 75 2b 30 30 62 61 2d 30 30 62 62 2c 75 2b 30 30 62 66 2c 75 2b 30 30 63 30 2d 30 30 64 36 2c 75 2b 30 30 64 38 2d 30 30 66 36 2c 75 2b 30 30 66 38 2d 30 31 34 Data Ascii: ages/d97a6ffa507b670a5b1664f98fc1183d.woff2) format("woff2"),url(https://static.canva.com/web/images/1de7434d86166b0614ff3d61cda11a54.woff) format("woff");unicode-range:u+00a1,u+00aa-00ab,u+00af,u+00b8,u+00ba-00bb,u+00bf,u+00c0-00d6,u+00d8-00f6,u+00f8-014
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 2d 56 4f 76 62 64 6c 55 4c 79 6f 75 31 75 6c 74 59 4c 62 4b 6a 64 34 7a 2f 53 71 72 74 51 4a 69 36 39 50 66 39 45 41 70 33 35 59 61 55 44 30 4a 47 6f 50 71 4d 6b 4b 62 76 67 52 59 36 7a 50 6b 53 35 61 2f 55 30 49 5a 6d 2f 73 51 38 73 4f 73 77 39 56 43 51 30 67 3d 3d 22 20 6e 6f 6e 63 65 3d 22 6a 78 47 72 64 6d 57 37 77 76 76 5a 6e 46 4f 47 62 49 66 68 73 77 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 32 32 31 35 65 35 65 31 31 62 63 65 66 39 31 39 2e 72 75 6e 74 69 6d 65 2e 6a 73 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 Data Ascii: -VOvbdlULyou1ultYLbKjd4z/SqrtQJi69Pf9EAp35YaUD0JGoPqMkKbvgRY6zPkS5a/U0IZm/sQ8sOsw9VCQ0g==" nonce="jxGrdmW7wvvZnFOGbIfhsw"><link href="https://static.canva.com/web/2215e5e11bcef919.runtime.js" rel="preload" as="script" crossorigin="anonymous" integrity="sh
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 26 23 33 39 3b 56 6f 69 63 65 20 44 65 6d 6f 73 26 23 33 39 3b 20 50 61 67 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 64 65 73 69 67 6e 2f 44 41 47 47 36 53 71 65 68 55 59 2f 32 54 63 72 4c 44 67 70 69 71 61 46 5a 52 4d 76 76 7a 52 52 54 41 2f 73 63 72 65 65 6e 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 77 69 64 74 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 30 32 34 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 68 65 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 35 37 Data Ascii: erty="og:title" content="'Voice Demos' Page"><meta property="og:image" content="https://www.canva.com/design/DAGG6SqehUY/2TcrLDgpiqaFZRMvvzRRTA/screen" /><meta property="og:image:width" content="1024" /><meta property="og:image:height" content="57
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2d 31 2e 69 63 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 61 6e 64 72 6f 69 64 2d 31 39 32 78 31 39 32 2d 32 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 39 32 78 31 39 32 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 31 32 30 78 31 Data Ascii: n" href="https://static.canva.com/static/images/favicon-1.ico"><link rel="icon" href="https://static.canva.com/static/images/android-192x192-2.png" sizes="192x192"><link rel="apple-touch-icon" href="https://static.canva.com/static/images/apple-touch-120x1
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 42 22 3a 66 61 6c 73 65 2c 22 47 22 3a 66 61 6c 73 65 2c 22 4e 22 3a 66 61 6c 73 65 2c 22 43 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 63 6f 6f 6b 69 65 73 2d 70 6f 6c 69 63 79 2f 22 2c 22 49 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2d 63 6f 6f 6b 69 65 73 2f 22 2c 22 4a 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 2c 22 45 22 3a 5b 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 43 61 6e 76 61 22 7d 2c 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 43 61 73 74 6c 65 22 7d 2c 7b 22 41 22 3a 22 42 22 2c 22 42 22 3a 22 43 6c 6f 75 Data Ascii: :false,"B":false,"G":false,"N":false,"C":"https://www.canva.com/policies/cookies-policy/","I":"https://www.canva.com/manage-cookies/","J":"https://www.canva.com/policies/privacy-policy/","E":[{"A":"B","B":"Canva"},{"A":"B","B":"Castle"},{"A":"B","B":"Clou
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 45 22 2c 22 42 22 3a 22 53 6e 61 70 63 68 61 74 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 54 69 6b 54 6f 6b 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 54 77 69 74 74 65 72 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 59 61 68 6f 6f 20 41 64 20 45 78 63 68 61 6e 67 65 22 7d 2c 7b 22 41 22 3a 22 45 22 2c 22 42 22 3a 22 59 6f 75 74 75 62 65 22 7d 5d 2c 22 50 22 3a 5b 5d 2c 22 51 22 3a 5b 5d 7d 2c 22 53 22 3a 74 72 75 65 2c 22 57 22 3a 66 61 6c 73 65 2c 22 54 22 3a 7b 22 41 3f 22 3a 22 41 22 2c 22 45 22 3a 74 72 75 65 2c 22 46 22 3a 31 30 30 30 2c 22 47 22 3a 32 30 2c 22 48 22 3a 32 30 2c 22 49 22 3a 74 72 75 65 2c 22 4a 22 3a 30 2e 30 2c 22 4b 22 3a 30 2e 31 2c 22 4d 22 3a 22 77 65 62 22 2c 22 53 22 3a 66 61 6c 73 65 2c 22 54 22 3a 66 Data Ascii: E","B":"Snapchat"},{"A":"E","B":"TikTok"},{"A":"E","B":"Twitter"},{"A":"E","B":"Yahoo Ad Exchange"},{"A":"E","B":"Youtube"}],"P":[],"Q":[]},"S":true,"W":false,"T":{"A?":"A","E":true,"F":1000,"G":20,"H":20,"I":true,"J":0.0,"K":0.1,"M":"web","S":false,"T":f
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 3a 7b 22 41 22 3a 7b 22 44 22 3a 36 34 2e 30 2c 22 43 22 3a 36 34 2e 30 7d 2c 22 42 22 3a 36 34 2e 30 2c 22 43 22 3a 32 39 34 2e 36 38 31 30 34 31 33 35 35 36 34 32 38 2c 22 44 22 3a 22 41 22 2c 22 45 22 3a 22 41 22 7d 2c 22 65 22 3a 7b 7d 2c 22 66 22 3a 5b 7b 22 41 22 3a 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 22 5c 5c 6e 22 7d 5d 2c 22 42 22 3a 5b 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 7b 22 63 6f 6c 6f 72 22 3a 7b 22 42 22 3a 22 23 30 30 30 30 30 30 22 7d 2c 22 74 65 78 74 2d 61 6c 69 67 6e 22 3a 7b 22 42 22 3a 22 63 65 6e 74 65 72 22 7d 2c 22 73 70 61 63 69 6e 67 22 3a 7b 22 42 22 3a 22 30 2e 30 22 7d 2c 22 66 6f 6e 74 2d 73 69 7a 65 22 3a 7b 22 42 22 3a 22 31 33 2e 37 37 37 38 22 7d 2c 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 22 3a Data Ascii: :{"A":{"D":64.0,"C":64.0},"B":64.0,"C":294.6810413556428,"D":"A","E":"A"},"e":{},"f":[{"A":{"A":[{"A?":"A","A":"\\n"}],"B":[{"A?":"A","A":{"color":{"B":"#000000"},"text-align":{"B":"center"},"spacing":{"B":"0.0"},"font-size":{"B":"13.7778"},"font-family":
2024-10-04 15:07:00 UTC	1369	IN	Data Raw: 72 22 3a 7b 7d 2c 22 73 70 61 63 69 6e 67 22 3a 7b 7d 2c 22 68 65 61 64 2d 69 6e 64 65 6e 74 22 3a 7b 7d 2c 22 6b 65 72 6e 69 6e 67 22 3a 7b 7d 2c 22 6c 69 73 74 2d 6d 61 72 6b 65 72 22 3a 7b 7d 7d 7d 5d 7d 2c 22 62 22 3a 7b 22 41 22 3a 5b 35 5d 7d 2c 22 64 22 3a 22 41 22 2c 22 68 22 3a 22 42 22 7d 2c 7b 22 41 3f 22 3a 22 55 22 2c 22 41 22 3a 31 34 35 2e 31 32 35 38 30 31 38 34 38 32 39 31 37 2c 22 42 22 3a 33 36 37 2e 30 30 35 37 32 30 32 37 34 33 31 34 39 2c 22 44 22 3a 31 30 32 32 2e 34 39 34 36 30 30 32 37 34 33 36 35 38 2c 22 43 22 3a 36 2e 30 2c 22 45 22 3a 2d 30 2e 30 38 34 30 35 31 34 36 30 38 35 30 37 39 38 35 38 2c 22 61 22 3a 36 2c 22 62 22 3a 7b 22 41 22 3a 22 42 22 2c 22 43 22 3a 7b 22 41 22 3a 31 34 38 2e 38 37 35 37 38 38 34 35 30 38 38 38 Data Ascii: r":{},"spacing":{},"head-indent":{},"kerning":{},"list-marker":{}}}]},"b":{"A":[5]},"d":"A","h":"B"},{"A?":"U","A":145.1258018482917,"B":367.0057202743149,"D":1022.4946002743658,"C":6.0,"E":-0.08405146085079858,"a":6,"b":{"A":"B","C":{"A":148.875788450888

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:07:01 UTC	589	OUT	GET /web/a0684b0780c739e9.vendor.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:07:01 UTC	1350	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:07:01 GMT Content-Type: text/css Content-Length: 10359 Connection: close CF-Ray: 8cd614463afb0c8e-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 15855754 Cache-Control: public, max-age=31556926 ETag: "4eb0cc037aa215c5fa2eb3c1b342613d" Expires: Sat, 04 Oct 2025 20:55:47 GMT Last-Modified: Thu, 04 Apr 2024 02:44:12 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 05 Apr 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: expnQzcpy75P6KMvnGrPRs/yJqYlJj5unDj9XoE3egJOiyFzcw3n5w/9GCjoXniK6ZAQ1OknN/4= x-amz-replication-status: PENDING x-amz-request-id: QT4NW2SGZDAEKCXN x-amz-server-side-encryption: AES256 x-amz-version-id: foX5A.lohFrGauqUzttfkAcYci._nTEq X-Content-Type-Options: nosniff
2024-10-04 15:07:01 UTC	781	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 52 38 31 5a 6c 4b 48 65 50 43 62 63 56 58 43 61 74 56 30 6c 32 4f 6d 35 6b 64 30 70 49 51 41 6b 45 62 71 45 4c 4e 6a 45 58 63 55 2d 31 37 32 38 30 35 34 34 32 31 2d 31 2e 30 2e 31 2e 31 2d 6a 75 32 79 62 78 55 49 6f 67 78 77 6d 2e 30 4e 6f 52 41 33 31 5a 31 79 43 53 63 31 45 6f 37 6f 5f 47 6a 5a 72 65 6b 72 78 67 39 75 39 71 38 66 43 38 32 67 78 51 49 51 6f 4f 49 6a 59 66 77 6a 72 71 48 49 6c 65 45 35 51 69 51 6d 4a 76 65 5f 46 70 48 6a 7a 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 34 2d 4f 63 74 2d 32 34 20 31 35 3a 33 37 3a 30 31 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=R81ZlKHePCbcVXCatV0l2Om5kd0pIQAkEbqELNjEXcU-1728054421-1.0.1.1-ju2ybxUIogxwm.0NoRA31Z1yCSc1Eo7o_GjZrekrxg9u9q8fC82gxQIQoOIjYfwjrqHIleE5QiQmJve_FpHjzA; path=/; expires=Fri, 04-Oct-24 15:37:01 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-04 15:07:01 UTC	607	IN	Data Raw: 2f 2a 21 0a 20 2a 20 51 75 69 6c 6c 20 45 64 69 74 6f 72 20 76 32 2e 30 2e 30 2d 64 65 76 2e 34 36 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 71 75 69 6c 6c 6a 73 2e 63 6f 6d 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 2c 20 4a 61 73 6f 6e 20 43 68 65 6e 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 2c 20 73 61 6c 65 73 66 6f 72 63 65 2e 63 6f 6d 0a 20 2a 2f 2e 71 6c 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 Data Ascii: /! Quill Editor v2.0.0-dev.46 * https://quilljs.com/ * Copyright (c) 2014, Jason Chen * Copyright (c) 2013, salesforce.com */.ql-container{box-sizing:border-box;font-family:Helvetica,Arial,sans-serif;font-size:13px;height:100%;margin:0;position:re
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 6c 69 73 74 2d 30 20 6c 69 73 74 2d 31 20 6c 69 73 74 2d 32 20 6c 69 73 74 2d 33 20 6c 69 73 74 2d 34 20 6c 69 73 74 2d 35 20 6c 69 73 74 2d 36 20 6c 69 73 74 2d 37 20 6c 69 73 74 2d 38 20 6c 69 73 74 2d 39 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 31 35 70 78 3b 74 61 62 2d 73 69 7a 65 3a 34 3b 2d 6d 6f 7a 2d 74 61 62 2d 73 69 7a 65 3a 34 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 2d 77 72 61 70 7d 2e 71 6c 2d 65 64 69 74 Data Ascii: ;box-sizing:border-box;counter-reset:list-0 list-1 list-2 list-3 list-4 list-5 list-6 list-7 list-8 list-9;height:100%;line-height:1.42;outline:none;overflow-y:auto;padding:12px 15px;tab-size:4;-moz-tab-size:4;text-align:left;white-space:pre-wrap}.ql-edit
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 69 5b 64 61 74 61 2d 6c 69 73 74 3d 75 6e 63 68 65 63 6b 65 64 5d 3e 2e 71 6c 2d 75 69 7b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 6c 69 5b 64 61 74 61 2d 6c 69 73 74 3d 62 75 6c 6c 65 74 5d 3e 2e 71 6c 2d 75 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 32 30 32 32 22 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 6c 69 5b 64 61 74 61 2d 6c 69 73 74 3d 63 68 65 63 6b 65 64 5d 3e 2e 71 6c 2d 75 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 32 36 31 31 22 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 6c 69 5b 64 61 74 61 2d 6c 69 73 74 3d 75 6e 63 68 65 63 6b 65 64 5d 3e 2e 71 6c 2d 75 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 32 36 31 30 22 7d 40 73 75 70 70 6f 72 74 73 20 28 63 6f 75 6e 74 65 72 2d 73 65 74 3a 6e Data Ascii: i[data-list=unchecked]>.ql-ui{color:#777}.ql-editor li[data-list=bullet]>.ql-ui:before{content:"\2022"}.ql-editor li[data-list=checked]>.ql-ui:before{content:"\2611"}.ql-editor li[data-list=unchecked]>.ql-ui:before{content:"\2610"}@supports (counter-set:n
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 69 73 74 2d 38 20 6c 69 73 74 2d 39 7d 7d 40 73 75 70 70 6f 72 74 73 20 6e 6f 74 20 28 63 6f 75 6e 74 65 72 2d 73 65 74 3a 6e 6f 6e 65 29 7b 2e 71 6c 2d 65 64 69 74 6f 72 20 6c 69 5b 64 61 74 61 2d 6c 69 73 74 5d 2e 71 6c 2d 69 6e 64 65 6e 74 2d 32 7b 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 6c 69 73 74 2d 33 20 6c 69 73 74 2d 34 20 6c 69 73 74 2d 35 20 6c 69 73 74 2d 36 20 6c 69 73 74 2d 37 20 6c 69 73 74 2d 38 20 6c 69 73 74 2d 39 7d 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 6c 69 5b 64 61 74 61 2d 6c 69 73 74 3d 6f 72 64 65 72 65 64 5d 2e 71 6c 2d 69 6e 64 65 6e 74 2d 33 7b 63 6f 75 6e 74 65 72 2d 69 6e 63 72 65 6d 65 6e 74 3a 6c 69 73 74 2d 33 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 6c 69 5b 64 61 74 61 2d 6c 69 73 74 3d 6f 72 64 65 72 65 64 5d 2e 71 6c 2d 69 Data Ascii: ist-8 list-9}}@supports not (counter-set:none){.ql-editor li[data-list].ql-indent-2{counter-reset:list-3 list-4 list-5 list-6 list-7 list-8 list-9}}.ql-editor li[data-list=ordered].ql-indent-3{counter-increment:list-3}.ql-editor li[data-list=ordered].ql-i
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 5b 64 61 74 61 2d 6c 69 73 74 3d 6f 72 64 65 72 65 64 5d 2e 71 6c 2d 69 6e 64 65 6e 74 2d 36 7b 63 6f 75 6e 74 65 72 2d 69 6e 63 72 65 6d 65 6e 74 3a 6c 69 73 74 2d 36 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 6c 69 5b 64 61 74 61 2d 6c 69 73 74 3d 6f 72 64 65 72 65 64 5d 2e 71 6c 2d 69 6e 64 65 6e 74 2d 36 3e 2e 71 6c 2d 75 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 63 6f 75 6e 74 65 72 28 6c 69 73 74 2d 36 2c 64 65 63 69 6d 61 6c 29 20 22 2e 20 22 7d 40 73 75 70 70 6f 72 74 73 20 28 63 6f 75 6e 74 65 72 2d 73 65 74 3a 6e 6f 6e 65 29 7b 2e 71 6c 2d 65 64 69 74 6f 72 20 6c 69 5b 64 61 74 61 2d 6c 69 73 74 5d 2e 71 6c 2d 69 6e 64 65 6e 74 2d 36 7b 63 6f 75 6e 74 65 72 2d 73 65 74 3a 6c 69 73 74 2d 37 20 6c 69 73 74 2d 38 20 6c 69 73 74 2d 39 7d 7d 40 73 Data Ascii: [data-list=ordered].ql-indent-6{counter-increment:list-6}.ql-editor li[data-list=ordered].ql-indent-6>.ql-ui:before{content:counter(list-6,decimal) ". "}@supports (counter-set:none){.ql-editor li[data-list].ql-indent-6{counter-set:list-7 list-8 list-9}}@s
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 6c 2d 65 64 69 74 6f 72 20 2e 71 6c 2d 69 6e 64 65 6e 74 2d 31 2e 71 6c 2d 64 69 72 65 63 74 69 6f 6e 2d 72 74 6c 2e 71 6c 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 65 6d 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 6c 69 2e 71 6c 2d 69 6e 64 65 6e 74 2d 31 2e 71 6c 2d 64 69 72 65 63 74 69 6f 6e 2d 72 74 6c 2e 71 6c 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 2e 35 65 6d 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 2e 71 6c 2d 69 6e 64 65 6e 74 2d 32 3a 6e 6f 74 28 2e 71 6c 2d 64 69 72 65 63 74 69 6f 6e 2d 72 74 6c 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 65 6d 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 6c 69 2e 71 6c 2d 69 6e 64 65 6e 74 2d 32 3a 6e 6f 74 28 2e 71 6c 2d 64 69 72 65 63 74 69 Data Ascii: l-editor .ql-indent-1.ql-direction-rtl.ql-align-right{padding-right:3em}.ql-editor li.ql-indent-1.ql-direction-rtl.ql-align-right{padding-right:4.5em}.ql-editor .ql-indent-2:not(.ql-direction-rtl){padding-left:6em}.ql-editor li.ql-indent-2:not(.ql-directi
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 6f 72 20 6c 69 2e 71 6c 2d 69 6e 64 65 6e 74 2d 36 3a 6e 6f 74 28 2e 71 6c 2d 64 69 72 65 63 74 69 6f 6e 2d 72 74 6c 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 39 2e 35 65 6d 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 2e 71 6c 2d 69 6e 64 65 6e 74 2d 36 2e 71 6c 2d 64 69 72 65 63 74 69 6f 6e 2d 72 74 6c 2e 71 6c 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 38 65 6d 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 6c 69 2e 71 6c 2d 69 6e 64 65 6e 74 2d 36 2e 71 6c 2d 64 69 72 65 63 74 69 6f 6e 2d 72 74 6c 2e 71 6c 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 39 2e 35 65 6d 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 2e 71 6c 2d 69 6e 64 65 6e 74 2d 37 3a 6e 6f 74 28 2e 71 6c 2d 64 69 72 65 63 74 69 6f Data Ascii: or li.ql-indent-6:not(.ql-direction-rtl){padding-left:19.5em}.ql-editor .ql-indent-6.ql-direction-rtl.ql-align-right{padding-right:18em}.ql-editor li.ql-indent-6.ql-direction-rtl.ql-align-right{padding-right:19.5em}.ql-editor .ql-indent-7:not(.ql-directio
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 2d 65 64 69 74 6f 72 20 2e 71 6c 2d 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 2e 71 6c 2d 76 69 64 65 6f 2e 71 6c 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 2e 71 6c 2d 76 69 64 65 6f 2e 71 6c 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 61 75 74 6f 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 2e 71 6c 2d 62 67 2d 62 6c 61 63 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 71 6c 2d 65 64 69 74 6f 72 20 2e 71 6c 2d 62 67 2d 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 36 30 30 30 30 7d 2e 71 6c 2d 65 64 69 74 6f 72 Data Ascii: -editor .ql-video{display:block;max-width:100%}.ql-editor .ql-video.ql-align-center{margin:0 auto}.ql-editor .ql-video.ql-align-right{margin:0 0 0 auto}.ql-editor .ql-bg-black{background-color:#000}.ql-editor .ql-bg-red{background-color:#e60000}.ql-editor
2024-10-04 15:07:01 UTC	169	IN	Data Raw: 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 35 70 78 7d 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 61 30 36 38 34 62 30 37 38 30 63 37 33 39 65 39 2e 76 65 6e 64 6f 72 2e 6c 74 72 2e 63 73 73 2e 6d 61 70 20 2a 2f 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 61 30 36 38 34 62 30 37 38 30 63 37 33 39 65 39 2e 76 65 6e 64 6f 72 2e 6c 74 72 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: ents:none;position:absolute;right:15px}/# sourceMappingURL=a0684b0780c739e9.vendor.ltr.css.map //# sourceMappingURL=sourcemaps/a0684b0780c739e9.vendor.ltr.css.map/

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:07:01 UTC	582	OUT	GET /web/14770deaa5eaaf1c.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:07:01 UTC	1338	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:07:01 GMT Content-Type: text/css Content-Length: 122704 Connection: close CF-Ray: 8cd614466f277c84-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 222154 Cache-Control: public, max-age=31556926 ETag: "0cc70fc2b98d838fd137bd382586873a" Expires: Sat, 04 Oct 2025 20:55:47 GMT Last-Modified: Wed, 02 Oct 2024 01:15:27 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 03 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: sqS+a1NvQHbIaEiUKpQQzHcAPpQwlcWGV4YAf6F+C03tqsfYOOMhIkIN77LGjmSYquTS5XMCjH1C7+nBdXWYrhLC2mZMXzVO x-amz-replication-status: COMPLETED x-amz-request-id: 62716CQENPJNS76F x-amz-server-side-encryption: AES256 x-amz-version-id: EaBEzf5CD8qSCu2BBkH9UWMvraS0gooo
2024-10-04 15:07:01 UTC	810	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 53 54 39 52 47 79 74 78 41 42 4b 77 54 36 73 68 63 2e 68 62 4f 35 50 48 45 69 36 34 31 4b 76 4f 43 6a 47 34 63 71 6c 6d 5f 39 30 2d 31 37 32 38 30 35 34 34 32 31 2d 31 2e 30 2e 31 2e 31 2d 52 70 47 39 4c 75 77 66 44 46 51 79 44 6d 62 48 43 77 47 59 4f 55 31 75 34 70 55 33 46 5f 65 65 78 30 30 4a 64 4d 6c 71 69 5a 45 57 48 78 6b 63 41 6a 74 5a 5a 58 68 31 53 2e 72 78 6d 6b 72 51 78 45 52 4a 54 6e 35 6a 66 2e 35 53 51 71 77 52 48 5f 35 44 50 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 34 2d 4f 63 74 2d 32 34 20 31 35 3a 33 37 3a 30 31 20 47 4d 54 3b 20 64 6f 6d 61 69 6e Data Ascii: X-Content-Type-Options: nosniffSet-Cookie: __cf_bm=ST9RGytxABKwT6shc.hbO5PHEi641KvOCjG4cqlm_90-1728054421-1.0.1.1-RpG9LuwfDFQyDmbHCwGYOU1u4pU3F_eex00JdMlqiZEWHxkcAjtZZXh1S.rxmkrQxERJTn5jf.5SQqwRH_5DPg; path=/; expires=Fri, 04-Oct-24 15:37:01 GMT; domain
2024-10-04 15:07:01 UTC	590	IN	Data Raw: 2e 74 68 65 6d 65 7b 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 76 61 72 28 2d 2d 34 68 2d 6d 5f 41 29 7d 2e 6c 69 67 68 74 7b 2d 2d 34 68 2d 6d 5f 41 3a 6c 69 67 68 74 3b 2d 2d 5a 70 61 2d 4b 41 3a 23 30 30 63 34 63 63 3b 2d 2d 65 47 56 62 6e 67 3a 23 38 62 33 64 66 66 3b 2d 2d 4d 35 5f 70 76 41 3a 23 37 37 33 31 64 38 3b 2d 2d 62 6f 4b 4b 57 67 3a 23 36 31 32 64 61 65 3b 2d 2d 6f 71 75 72 64 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 64 31 70 39 39 77 3a 23 66 66 66 3b 2d 2d 31 37 4c 66 48 77 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 45 67 57 67 66 67 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 58 33 2d 2d 5a 67 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 78 66 79 38 Data Ascii: .theme{color-scheme:var(--4h-m_A)}.light{--4h-m_A:light;--Zpa-KA:#00c4cc;--eGVbng:#8b3dff;--M5_pvA:#7731d8;--boKKWg:#612dae;--oqurdw:rgba(64,87,109,.07);--d1p99w:#fff;--17LfHw:rgba(36,49,61,.4);--EgWgfg:rgba(13,18,22,0);--X3--Zg:rgba(64,87,109,.07);--xfy8
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 2e 31 35 29 3b 2d 2d 54 77 69 4c 63 67 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 51 65 51 30 44 77 3a 23 30 64 31 32 31 36 3b 2d 2d 54 5a 4f 49 37 41 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 53 5a 4d 6b 58 41 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 31 35 29 3b 2d 2d 31 7a 65 73 45 41 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 31 35 29 3b 2d 2d 41 4d 78 52 67 77 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 32 29 3b 2d 2d 42 5a 36 30 4a 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 38 45 78 35 67 41 3a 23 36 31 32 64 61 65 3b 2d 2d 73 70 49 50 32 41 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 74 58 6c 52 67 3a 72 67 62 61 28 31 Data Ascii: .15);--TwiLcg:rgba(13,18,22,0);--QeQ0Dw:#0d1216;--TZOI7A:rgba(36,49,61,.4);--SZMkXA:rgba(165,112,255,.15);--1zesEA:rgba(165,112,255,.15);--AMxRgw:rgba(165,112,255,.2);--BZ60Jw:rgba(64,87,109,.07);--8Ex5gA:#612dae;--spIP2A:rgba(36,49,61,.4);--KtXlRg:rgba(1
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 54 70 35 34 56 77 3a 23 65 62 65 63 66 30 3b 2d 2d 70 66 5f 4a 52 51 3a 72 67 62 61 28 32 33 35 2c 32 33 36 2c 32 34 30 2c 2e 37 29 3b 2d 2d 79 73 35 58 47 67 3a 72 67 62 61 28 32 33 35 2c 32 33 36 2c 32 34 30 2c 30 29 3b 2d 2d 64 56 75 63 4a 77 3a 23 66 36 66 37 66 38 3b 2d 2d 75 36 56 55 4c 67 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 2e 37 29 3b 2d 2d 63 6d 35 4f 65 51 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 30 29 3b 2d 2d 43 2d 71 36 49 67 3a 23 66 66 66 3b 2d 2d 50 6a 36 47 5a 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 3b 2d 2d 72 36 4d 48 58 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 34 52 61 53 6a 67 3a 23 66 66 66 3b 2d 2d 46 Data Ascii: gba(36,49,61,.4);--Tp54Vw:#ebecf0;--pf_JRQ:rgba(235,236,240,.7);--ys5XGg:rgba(235,236,240,0);--dVucJw:#f6f7f8;--u6VULg:rgba(246,247,248,.7);--cm5OeQ:rgba(246,247,248,0);--C-q6Ig:#fff;--Pj6GZQ:hsla(0,0%,100%,.7);--r6MHXQ:hsla(0,0%,100%,0);--4RaSjg:#fff;--F
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 54 77 69 4c 63 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 51 65 51 30 44 77 3a 23 66 66 66 3b 2d 2d 54 5a 4f 49 37 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 53 5a 4d 6b 58 41 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 33 29 3b 2d 2d 31 7a 65 73 45 41 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 33 29 3b 2d 2d 41 4d 78 52 67 77 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 32 29 3b 2d 2d 42 5a 36 30 4a 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 38 45 78 35 67 41 3a 23 66 66 66 3b 2d 2d 73 70 49 50 32 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 4b 74 58 6c 52 67 3a Data Ascii: (0,0%,100%,.15);--TwiLcg:hsla(0,0%,100%,0);--QeQ0Dw:#fff;--TZOI7A:hsla(0,0%,100%,.4);--SZMkXA:rgba(165,112,255,.3);--1zesEA:rgba(165,112,255,.3);--AMxRgw:rgba(165,112,255,.2);--BZ60Jw:hsla(0,0%,100%,.15);--8Ex5gA:#fff;--spIP2A:hsla(0,0%,100%,.4);--KtXlRg:
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 54 70 35 34 56 77 3a 23 30 64 31 32 31 36 3b 2d 2d 70 66 5f 4a 52 51 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 2e 37 29 3b 2d 2d 79 73 35 58 47 67 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 64 56 75 63 4a 77 3a 23 31 38 31 39 31 62 3b 2d 2d 75 36 56 55 4c 67 3a 72 67 62 61 28 32 34 2c 32 35 2c 32 37 2c 2e 37 29 3b 2d 2d 63 6d 35 4f 65 51 3a 72 67 62 61 28 32 34 2c 32 35 2c 32 37 2c 30 29 3b 2d 2d 43 2d 71 36 49 67 3a 23 31 38 31 39 31 62 3b 2d 2d 50 6a 36 47 5a 51 3a 72 67 62 61 28 32 34 2c 32 35 2c 32 37 2c 2e 37 29 3b 2d 2d 72 36 4d 48 58 51 3a 72 67 62 61 28 32 34 2c 32 35 2c 32 37 2c 30 29 3b 2d 2d 34 52 61 53 6a 67 3a 23 32 35 32 36 32 37 3b 2d 2d 46 36 46 32 4e 51 3a 72 67 62 Data Ascii: a(0,0%,100%,.4);--Tp54Vw:#0d1216;--pf_JRQ:rgba(13,18,22,.7);--ys5XGg:rgba(13,18,22,0);--dVucJw:#18191b;--u6VULg:rgba(24,25,27,.7);--cm5OeQ:rgba(24,25,27,0);--C-q6Ig:#18191b;--Pj6GZQ:rgba(24,25,27,.7);--r6MHXQ:rgba(24,25,27,0);--4RaSjg:#252627;--F6F2NQ:rgb
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 7d 2e 64 6b 57 79 70 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 30 30 32 30 30 42 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 77 69 64 74 68 3a 30 7d 2e 64 6b 57 79 70 77 3e 73 76 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 52 33 42 55 70 77 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 77 69 64 74 68 3a 31 32 70 78 7d 2e 75 52 57 78 56 41 7b 68 65 69 67 68 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 36 70 78 7d 2e 4e 41 5f 49 6d 67 7b 68 65 69 67 68 74 3a 32 34 70 78 3b 77 69 64 74 68 3a 32 34 70 78 7d 2e 4a 52 6b 7a 32 41 7b 68 65 69 67 68 74 3a 33 32 70 78 3b 77 69 64 74 68 Data Ascii: g:border-box;display:inline-flex}.dkWypw:before{content:"\00200B";line-height:1;width:0}.dkWypw>svg{display:block;height:100%;width:100%}.R3BUpw{height:12px;width:12px}.uRWxVA{height:16px;width:16px}.NA_Img{height:24px;width:24px}.JRkz2A{height:32px;width
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 39 66 5a 51 3a 76 61 72 28 2d 2d 33 42 79 62 71 51 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 30 30 70 78 29 7b 2e 55 4b 73 4c 77 67 7b 2d 2d 42 63 62 73 74 77 3a 76 61 72 28 2d 2d 68 54 50 7a 71 67 29 3b 2d 2d 78 65 61 4e 51 41 3a 76 61 72 28 2d 2d 42 63 62 73 74 77 29 3b 2d 2d 38 39 6e 6f 4d 67 3a 76 61 72 28 2d 2d 72 64 4e 50 59 67 29 3b 2d 2d 49 42 6a 4a 65 77 3a 76 61 72 28 2d 2d 38 39 6e 6f 4d 67 29 3b 2d 2d 6d 61 38 75 78 77 3a 76 61 72 28 2d 2d 4e 6b 49 38 36 77 29 3b 2d 2d 6f 57 4d 45 6a 51 3a 76 61 72 28 2d 2d 6d 61 38 75 78 77 29 3b 2d 2d 78 66 42 74 4a 77 3a 76 61 72 28 2d 2d 43 73 4e 7a 56 41 29 3b 2d 2d 6d 58 46 2d 6b 41 3a 76 61 72 28 2d 2d 78 66 42 74 4a 77 29 3b 2d 2d 75 4f 77 45 56 77 3a 76 61 72 28 2d 2d 71 55 55 Data Ascii: 9fZQ:var(--3BybqQ)}}@media (min-width:900px){.UKsLwg{--Bcbstw:var(--hTPzqg);--xeaNQA:var(--Bcbstw);--89noMg:var(--rdNPYg);--IBjJew:var(--89noMg);--ma8uxw:var(--NkI86w);--oWMEjQ:var(--ma8uxw);--xfBtJw:var(--CsNzVA);--mXF-kA:var(--xfBtJw);--uOwEVw:var(--qUU
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 2d 2d 70 2d 39 36 4e 67 29 3b 2d 2d 4b 43 64 4b 56 77 3a 76 61 72 28 2d 2d 57 34 50 79 32 41 29 3b 2d 2d 56 7a 45 73 74 67 3a 76 61 72 28 2d 2d 4b 43 64 4b 56 77 29 3b 2d 2d 6f 53 4d 5f 32 41 3a 76 61 72 28 2d 2d 6b 49 57 45 34 77 29 3b 2d 2d 70 45 61 5a 43 51 3a 76 61 72 28 2d 2d 6f 53 4d 5f 32 41 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 4a 79 42 5f 76 77 7b 2d 2d 43 4b 30 72 68 67 3a 76 61 72 28 2d 2d 70 2d 39 36 4e 67 29 3b 2d 2d 4e 48 76 67 43 67 3a 76 61 72 28 2d 2d 43 4b 30 72 68 67 29 3b 2d 2d 63 32 54 34 4d 67 3a 76 61 72 28 2d 2d 4b 43 64 4b 56 77 29 3b 2d 2d 56 7a 45 73 74 67 3a 76 61 72 28 2d 2d 63 32 54 34 4d 67 29 3b 2d 2d 41 33 52 43 58 41 3a 76 61 72 28 2d 2d 6f 53 4d 5f 32 41 29 3b 2d 2d 70 Data Ascii: --p-96Ng);--KCdKVw:var(--W4Py2A);--VzEstg:var(--KCdKVw);--oSM_2A:var(--kIWE4w);--pEaZCQ:var(--oSM_2A)}}@media (min-width:1200px){.JyB_vw{--CK0rhg:var(--p-96Ng);--NHvgCg:var(--CK0rhg);--c2T4Mg:var(--KCdKVw);--VzEstg:var(--c2T4Mg);--A3RCXA:var(--oSM_2A);--p
2024-10-04 15:07:01 UTC	1369	IN	Data Raw: 3b 2d 2d 34 6c 70 6c 63 77 3a 76 61 72 28 2d 2d 45 34 71 4b 4f 51 29 3b 2d 2d 52 6d 76 76 75 77 3a 76 61 72 28 2d 2d 45 34 71 4b 4f 51 29 3b 2d 2d 5a 42 45 7a 6b 51 3a 76 61 72 28 2d 2d 34 6c 70 6c 63 77 29 3b 2d 2d 2d 66 6d 31 76 77 3a 76 61 72 28 2d 2d 52 6d 76 76 75 77 29 3b 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 67 61 70 3a 76 61 72 28 2d 2d 5a 42 45 7a 6b 51 29 3b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 76 61 72 28 2d 2d 2d 66 6d 31 76 77 29 3b 2d 2d 57 5a 51 30 5a 41 3a 31 3b 2d 2d 71 44 71 57 4b 77 3a 76 61 72 28 2d 2d 57 5a 51 30 5a 41 29 3b 2d 2d 73 73 37 63 38 77 3a 61 75 74 6f 3b 2d 2d 4b 74 61 68 48 67 3a 76 61 72 28 2d 2d 73 73 37 63 38 77 29 3b 2d 2d 56 65 39 45 6f 51 3a 73 74 72 65 74 63 68 3b 2d 2d 4b 6f 55 7a 51 41 3a 76 61 72 28 2d 2d 56 65 Data Ascii: ;--4lplcw:var(--E4qKOQ);--Rmvvuw:var(--E4qKOQ);--ZBEzkQ:var(--4lplcw);---fm1vw:var(--Rmvvuw);grid-column-gap:var(--ZBEzkQ);grid-row-gap:var(---fm1vw);--WZQ0ZA:1;--qDqWKw:var(--WZQ0ZA);--ss7c8w:auto;--KtahHg:var(--ss7c8w);--Ve9EoQ:stretch;--KoUzQA:var(--Ve