Edit tour

Windows Analysis Report
http://csgoempire.com/

Overview

General Information

Sample URL:	http://csgoempire.com/
Analysis ID:	1526264
Tags:	urlscan
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

HTML body with high number of embedded SVGs detected

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2296 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1916,i,10322918714743301448,16586368576820629983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://csgoempire.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /cdn-cgi/rum? HTTP/1.1Host: csgoempire.comConnection: keep-aliveContent-Length: 1484sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: */*Origin: https://csgoempire.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://csgoempire.com/rouletteAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=EMkHtN_oxLyQZke0ARh1SZCy.qYxYQR9JxFvILsBoC0-1728081828-1.0.1.1-JzASQSRZLjLb8tgnbnGsTMDFxn1mZzexB78gTm4.VoXKAwiN_EmR9MwP3L8iZNvlLfFoHL3m1._FeHP2hBX5XQ; _cfuvid=A70PhkkGypgdkrtgYmAlfctrO..mL1or0FSx4Sd3HSQ-1728081828753-0.0.1.1-604800000; env_class=green; csgoempire=yMUdzRqmrBYQXmySYFTctibpTYritlCrWaY9Q9Vs; _clck=bn44r3%7C2%7Cfpq%7C0%7C1738; _clsk=pm76ds%7C1728081836488%7C1%7C0%7Ct.clarity.ms%2Fcollect; _gcl_au=1.1.541290989.1728081841

Source: https://csgoempire.com/roulette	HTTP Parser: Total embedded image size: 23382
Source: https://csgoempire.com/case-battles	HTTP Parser: Total embedded image size: 23382
Source: https://csgoempire.com/match-betting	HTTP Parser: Total embedded image size: 23382
Source: https://csgoempire.com/faq	HTTP Parser: Total embedded image size: 23382
Source: https://csgoempire.com/#daily-coins	HTTP Parser: Total embedded image size: 23382

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:59434 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:59449 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:59487 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.5:49709 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:59428 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_734.2.dr, chromecache_394.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_734.2.dr, chromecache_394.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=rA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},uA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_734.2.dr, chromecache_394.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_480.2.dr, chromecache_377.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_734.2.dr, chromecache_394.2.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: csgoempire.com
Source: global traffic	DNS traffic detected: DNS query: d86bd89c-f627-4e38-8144-b1c3c8b4745a.snippet.antillephone.com
Source: global traffic	DNS traffic detected: DNS query: e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com
Source: global traffic	DNS traffic detected: DNS query: cdn.seondf.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: consent.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: roulette.csgoempire.com
Source: global traffic	DNS traffic detected: DNS query: t.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: consentcdn.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: imgsct.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: avatars.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: imagedelivery.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: sports-proxy.csgoempire.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Fri, 04 Oct 2024 22:43:51 GMTContent-Type: text/htmlContent-Length: 986Connection: closeX-Cache: Error from cloudfrontVia: 1.1 5dbbe1c6db9a003131a63be8ded250a4.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P8X-Amz-Cf-Id: eRqpCOTvSs6cgwBYdILFtZLfbyHHVCLwnaDRQTrDYJs6BnJK3Z0x9A==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:43:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: no-cache, private, no-storeExpires: Fri, 04 Oct 2024 22:44:12 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b19e6b544358-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:43:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 04 Oct 2024 22:44:12 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b19e7f338c8f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Fri, 04 Oct 2024 22:44:11 GMTContent-Type: text/htmlContent-Length: 986Connection: closeX-Cache: Error from cloudfrontVia: 1.1 b5baf61905dac15e74c27872e28ce3ae.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P8X-Amz-Cf-Id: 3WkWKW_fdeviKVwJPKR5y7hrrKKdLs3TgtIoDiyGGi7FGe6WvmKqSA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:44:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: no-cache, private, no-storeExpires: Fri, 04 Oct 2024 22:44:32 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b21bf9598c4e-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:44:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 04 Oct 2024 22:44:33 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b21caa1a8ca8-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:44:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: no-cache, private, no-storeExpires: Fri, 04 Oct 2024 22:44:38 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b23c98e7c33b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:44:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 04 Oct 2024 22:44:38 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b23c9e358cbf-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Fri, 04 Oct 2024 22:44:23 GMTContent-Type: text/htmlContent-Length: 986Connection: closeX-Cache: Error from cloudfrontVia: 1.1 7b85fc567b776c0d31c5ac07cc6c2ae6.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P8X-Amz-Cf-Id: _FRrd0dCjziHVr07skPguabestAUpPz2E46YmeDOM5PXpeFvyd4E0Q==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:44:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: no-cache, private, no-storeExpires: Fri, 04 Oct 2024 22:44:43 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b26068dd0fa5-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Fri, 04 Oct 2024 22:44:33 GMTContent-Type: text/htmlContent-Length: 986Connection: closeX-Cache: Error from cloudfrontVia: 1.1 b81e506afc0d8b7cd6094e636331ca78.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P8X-Amz-Cf-Id: bfapVsr7J4B3RjlzIEbHNRDQrQ64NsbfmMmuMkjuScJSmjCD3D-tDw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:44:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 04 Oct 2024 22:44:48 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b27d5bb05e78-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:44:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: no-cache, private, no-storeExpires: Fri, 04 Oct 2024 22:44:50 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b28a0b9e425b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:44:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 04 Oct 2024 22:44:50 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b28a28395e76-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Fri, 04 Oct 2024 22:44:41 GMTContent-Type: text/htmlContent-Length: 986Connection: closeX-Cache: Error from cloudfrontVia: 1.1 edfa50bbeda89838b4ee2ce6eaea1b04.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P8X-Amz-Cf-Id: vvLt9tCJ-QneAoAR0SyZJXAKRn5-rjKdhEgdMRlF1j-iZoP81o8H2w==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:44:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: no-cache, private, no-storeExpires: Fri, 04 Oct 2024 22:45:01 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b2d13ea40cc4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:44:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: no-cache, private, no-storeExpires: Fri, 04 Oct 2024 22:45:02 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b2d74e7943cf-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:44:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: no-cache, private, no-storeExpires: Fri, 04 Oct 2024 22:45:08 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b2f84e544249-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:44:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: no-cache, private, no-storeExpires: Fri, 04 Oct 2024 22:45:11 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b30efe381760-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:45:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: no-cache, private, no-storeExpires: Fri, 04 Oct 2024 22:45:19 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b33f8b7b438e-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:45:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: no-cache, private, no-storeExpires: Fri, 04 Oct 2024 22:45:24 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b3601dd88cc0-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 22:45:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: no-cache, private, no-storeExpires: Fri, 04 Oct 2024 22:45:32 GMTContent-Security-Policy: upgrade-insecure-requestsCross-Origin-Embedder-Policy: credentiallessCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-siteServer: cloudflareCF-RAY: 8cd8b3903d0e43c1-EWR

Source: chromecache_624.2.dr, chromecache_554.2.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/
Source: chromecache_552.2.dr, chromecache_473.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_377.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_360.2.dr	String found in binary or memory: https://business.safety.google/privacy/
Source: chromecache_480.2.dr, chromecache_734.2.dr, chromecache_394.2.dr, chromecache_377.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_605.2.dr, chromecache_632.2.dr, chromecache_742.2.dr, chromecache_317.2.dr	String found in binary or memory: https://cdn.seondf.com/js/v5/agent.js
Source: chromecache_605.2.dr, chromecache_632.2.dr, chromecache_742.2.dr, chromecache_317.2.dr	String found in binary or memory: https://csgoempire.com/
Source: chromecache_605.2.dr, chromecache_632.2.dr, chromecache_742.2.dr, chromecache_317.2.dr	String found in binary or memory: https://csgoempire.com/img/csgoempire-banner.png
Source: chromecache_581.2.dr	String found in binary or memory: https://d1bvoel1nv172p.cloudfront.net/additional_images
Source: chromecache_581.2.dr	String found in binary or memory: https://d1bvoel1nv172p.cloudfront.net/competitors/images/normal
Source: chromecache_605.2.dr, chromecache_632.2.dr, chromecache_742.2.dr, chromecache_317.2.dr	String found in binary or memory: https://d86bd89c-f627-4e38-8144-b1c3c8b4745a.snippet.antillephone.com/apg-seal.js
Source: chromecache_367.2.dr, chromecache_706.2.dr	String found in binary or memory: https://e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com/54f396e0-b046-49b1-9cb3-0c69281d7
Source: chromecache_367.2.dr, chromecache_706.2.dr	String found in binary or memory: https://e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com/sealassets/5ad71c7cbd29ab392d64d5
Source: chromecache_552.2.dr, chromecache_473.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_677.2.dr, chromecache_412.2.dr	String found in binary or memory: https://files-immutable-4cbc033nbd3.gambite.me
Source: chromecache_552.2.dr, chromecache_473.2.dr	String found in binary or memory: https://gamban.com/
Source: chromecache_552.2.dr, chromecache_473.2.dr	String found in binary or memory: https://github.com/emn178/js-sha3
Source: chromecache_476.2.dr, chromecache_481.2.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_377.2.dr	String found in binary or memory: https://google.com
Source: chromecache_377.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_552.2.dr, chromecache_473.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_552.2.dr, chromecache_473.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_552.2.dr, chromecache_473.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_552.2.dr, chromecache_473.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_377.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_480.2.dr, chromecache_734.2.dr, chromecache_394.2.dr, chromecache_377.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_350.2.dr, chromecache_407.2.dr	String found in binary or memory: https://redux.js.org/Errors?code=
Source: chromecache_692.2.dr	String found in binary or memory: https://s5.sir.sportradar.com/sp77/en/5/season/123997/h2h/match/54200509
Source: chromecache_473.2.dr	String found in binary or memory: https://soccerstats.info/
Source: chromecache_528.2.dr	String found in binary or memory: https://sports-proxy.csgoempire.com
Source: chromecache_605.2.dr, chromecache_632.2.dr, chromecache_742.2.dr, chromecache_317.2.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Source: chromecache_734.2.dr, chromecache_394.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_480.2.dr, chromecache_734.2.dr, chromecache_394.2.dr, chromecache_377.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_367.2.dr, chromecache_706.2.dr	String found in binary or memory: https://validator-xcm.certria.com
Source: chromecache_367.2.dr, chromecache_706.2.dr	String found in binary or memory: https://validator-xcm.certria.com/validate?domain=
Source: chromecache_473.2.dr	String found in binary or memory: https://www.365scores.com/
Source: chromecache_605.2.dr, chromecache_632.2.dr, chromecache_742.2.dr, chromecache_317.2.dr	String found in binary or memory: https://www.clarity.ms/tag/
Source: chromecache_550.2.dr, chromecache_364.2.dr, chromecache_359.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_488.2.dr, chromecache_360.2.dr	String found in binary or memory: https://www.cookiebot.com
Source: chromecache_473.2.dr	String found in binary or memory: https://www.fifa.com/technical/football-technology
Source: chromecache_377.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_377.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_377.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_480.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_608.2.dr, chromecache_528.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_480.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_734.2.dr, chromecache_394.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_734.2.dr, chromecache_394.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1916,i,10322918714743301448,16586368576820629983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://csgoempire.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1916,i,10322918714743301448,16586368576820629983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	0%	URL Reputation	safe
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
http://ns.attribution.com/ads/1.0/	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://www.clarity.ms/s/0.7.47/clarity.js	0%	URL Reputation	safe
https://npms.io/search?q=ponyfill.	0%	URL Reputation	safe

IP	Domain	Country	ASN	ASN Name	Malicious
74.125.133.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.3.36	imagedelivery.net	United States	13335	CLOUDFLARENETUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
142.250.74.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
172.64.144.121	sports-proxy.csgoempire.com	United States	13335	CLOUDFLARENETUS	false
104.18.2.36	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.212.132	unknown	United States	15169	GOOGLEUS	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
52.222.214.90	unknown	United States	16509	AMAZON-02US	false
52.222.214.23	dk1ua3i3ii4px.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.43.135	roulette.csgoempire.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	cdn.seondf.com	European Union	13335	CLOUDFLARENETUS	false
18.245.31.103	d136ckvdki9cor.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
172.217.16.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

IP
192.168.2.4
192.168.2.6
192.168.2.5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Name	IP	Active	Malicious	Reputation
cdn.seondf.com	188.114.97.3	true	false	unknown
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
static.cloudflareinsights.com	104.16.80.73	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
d136ckvdki9cor.cloudfront.net	18.245.31.103	true	false	unknown
dk1ua3i3ii4px.cloudfront.net	52.222.214.23	true	false	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	74.125.133.156	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
analytics-alv.google.com	216.239.32.181	true	false	unknown
sports-proxy.csgoempire.com	172.64.144.121	true	false	unknown
imagedelivery.net	104.18.3.36	true	false	unknown
googleads.g.doubleclick.net	172.217.16.194	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
td.doubleclick.net	142.250.74.194	true	false	unknown
csgoempire.com	172.64.144.121	true	false	unknown
roulette.csgoempire.com	104.18.43.135	true	false	unknown
consentcdn.cookiebot.com	unknown	unknown	false	unknown
d86bd89c-f627-4e38-8144-b1c3c8b4745a.snippet.antillephone.com	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
t.clarity.ms	unknown	unknown	false	unknown
consent.cookiebot.com	unknown	unknown	false	unknown
e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com	unknown	unknown	false	unknown
bam.nr-data.net	unknown	unknown	false	unknown
avatars.steamstatic.com	unknown	unknown	false	unknown
imgsct.cookiebot.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
c.clarity.ms	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://csgoempire.com/icons/logo-preloader.svg	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/cd575d0f-5f46-49b0-080f-7e21eab31300/x184	false		unknown
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false	URL Reputation: safe	unknown
https://csgoempire.com/assets/Roulette-4H8D5vG6.css	false		unknown
https://roulette.csgoempire.com/s/?uid=guest&token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3MjgwODE4ODUsImV4cCI6MTcyODA4MTkxNSwic3ViIjoiMjIyMTBjYTczYmYxYWYyZWMyZWFjZTc0YTk2ZWUzNTYiLCJhdWQiOiJjc2dvZW1waXJlIiwianRpIjoiUzF6YzhrYlhNZE1yTEY2WFVudWt2RXI1QzdHb09adnVpb0Fzdy9MQi9pWGMifQ.s0875KCHm24qmjyrUcPaLVjK442phItqRKOWgmawWF4&EIO=4&transport=websocket	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/c05ac356-d4ad-478c-8f38-3a982048d400/x184	false		unknown
https://e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com/sealassets/5ad71c7cbd29ab392d64d5cff9340a8a-csgoempire.com-2499d2eabe384e816e59339424a59bfa358f27c57393df818b3c32a766283368386e74eda7c669f24c9e02f6df3d6e67-c2VhbC5wbmc%3D?status=valid	false		unknown
https://sports-proxy.csgoempire.com/static/js/63585.f9b62114.chunk.js	false		unknown
https://roulette.csgoempire.com/s/?uid=guest&token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3MjgwODE5MDMsImV4cCI6MTcyODA4MTkzMywic3ViIjoiMjIyMTBjYTczYmYxYWYyZWMyZWFjZTc0YTk2ZWUzNTYiLCJhdWQiOiJjc2dvZW1waXJlIiwianRpIjoibWFxMFVMTTVKazI1Vkp1MHlhaEIvRXJGSUlkN0w1aXJuL3JkTjVPS1IydzgifQ.2PMFwbB1iZKlylfc-abMSUzzBpbLOx6o1hU5JcsoLl8&EIO=4&transport=websocket	false		unknown
https://sports-proxy.csgoempire.com/static/js/DashboardPage.0293a664.chunk.js	false		unknown
https://csgoempire.com/assets/index-D9mCGtWq.js	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/ce2f26d8-2797-4632-7949-7fa41e171d00/x184	false		unknown
https://csgoempire.com/assets/icon-games-BbB3ZBvB.js	false		unknown
https://csgoempire.com/assets/apiAsync-E1unfV9x.js	false		unknown
https://csgoempire.com/api/v2/case-battle/all	false		unknown
https://csgoempire.com/assets/InvalidBetAmount-BNt0DQNX.js	false		unknown
https://sports-proxy.csgoempire.com/static/js/44317.eda0c702.chunk.js	false		unknown
https://csgoempire.com/#daily-coins	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/f37d1090-4b5e-441b-4c74-aa7ce8d2fd00/x184	false		unknown
https://roulette.csgoempire.com/s/?uid=guest&token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3MjgwODE4NjIsImV4cCI6MTcyODA4MTg5Miwic3ViIjoiMjIyMTBjYTczYmYxYWYyZWMyZWFjZTc0YTk2ZWUzNTYiLCJhdWQiOiJjc2dvZW1waXJlIiwianRpIjoibTB2UjdwTW1LUUpvM0swYVhwOGNMblRMUHdSaStHM0FtQnlvdWVDaldYd3IifQ.MQhMm1LJIXIULln8oLAU16_pHFxgVePA5jhaxdJygMw&EIO=4&transport=websocket	false		unknown
https://csgoempire.com/assets/icon-chevron-down-D8bwGYyZ.js	false		unknown
https://csgoempire.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/47e3f4d4-83af-487b-9d50-d7383540e600/x184	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/61727a3e-905a-4621-1706-4d60f1460600/x184	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/7dbf7fd1-ce81-4f37-4dd9-402f6e665400/x184	false		unknown
https://sports-proxy.csgoempire.com/api/v2/auth/brand/2432911154364948480/settings?lang=en	false		unknown
https://sports-proxy.csgoempire.com/static/js/51764.31047d24.chunk.js	false		unknown
https://bam.nr-data.net/events/1/NRJS-450186af0129d0ea365?a=1103338868&sa=1&v=1.260.0&t=Unnamed%20Transaction&rst=50314&ck=0&s=e536a59cc0871dfe&ref=https://csgoempire.com/match-betting&ptid=237f361462605bda	false		unknown
https://csgoempire.com/assets/icon-uno-reverse-B1JUVly8.js	false		unknown
https://roulette.csgoempire.com/s/?uid=guest&token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3MjgwODE4MzIsImV4cCI6MTcyODA4MTg2Miwic3ViIjoiMjIyMTBjYTczYmYxYWYyZWMyZWFjZTc0YTk2ZWUzNTYiLCJhdWQiOiJjc2dvZW1waXJlIiwianRpIjoibUJLdys2dER2cE9QRmk2allvZ0w5THZvQ1Y0d1k4RkxLZzE2OUcyQ3l5SVMifQ.wHbjoq2ZFY00uRPcwPGGdji9VNNWX1X4G_mc7gZyGMY&EIO=4&transport=websocket	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/5185ed6d-a04c-4264-a181-aeb51fe0b000/x184	false		unknown
https://csgoempire.com/assets/Head-CprsszUq.css	false		unknown
https://csgoempire.com/assets/aggregate-base-B5TUFeXh.js	false		unknown
https://csgoempire.com/assets/Head-C_WXMrRE.js	false		unknown
https://sports-proxy.csgoempire.com/static/js/385.c5a75c4b.chunk.js	false		unknown
https://csgoempire.com/site.webmanifest?v=5	false		unknown
https://csgoempire.com/assets/icon-group-IN7XyBQR.js	false		unknown
https://bam.nr-data.net/jserrors/1/NRJS-450186af0129d0ea365?a=1103338868&sa=1&v=1.260.0&t=Unnamed%20Transaction&rst=35243&ck=0&s=e536a59cc0871dfe&ref=https://csgoempire.com/roulette&ptid=9e87d5f0593e301e&ri=%7B%222024.39-4132c96a-green%22:%222024.39-4132c96a%22%7D	false		unknown
https://csgoempire.com/assets/InsufficientBalance-Bd9mdxCb.js	false		unknown
https://csgoempire.com/assets/GameIcon-qvlChGKZ.js	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/a8b2a8f2-ea08-46be-184d-ece01b4d9300/x184	false		unknown
https://csgoempire.com/assets/BattleListElement-DOf6zqfB.js	false		unknown
https://csgoempire.com/assets/Button.vue_vue_type_script_setup_true_lang-YwofnFYm.js	false		unknown
https://csgoempire.com/assets/match-betting-C4d91n44.js	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/cb7c218c-dd9f-4835-de54-ecc6c9089c00/x184	false		unknown
https://sports-proxy.csgoempire.com/static/js/77212.a94fd368.chunk.js	false		unknown
https://csgoempire.com/assets/FlamaSemibold-Regular-CWGqdE5t.woff2	false		unknown
https://bam.nr-data.net/jserrors/1/NRJS-450186af0129d0ea365?a=1103338868&sa=1&v=1.260.0&t=Unnamed%20Transaction&rst=85976&ck=0&s=e536a59cc0871dfe&ref=https://csgoempire.com/roulette&ptid=625a386d9d40b9f6&ri=%7B%222024.39-4132c96a-green%22:%222024.39-4132c96a%22%7D	false		unknown
https://csgoempire.com/api/v2/match-betting/betby/user-session/EMP/en	false		unknown
https://csgoempire.com/assets/question-answer-BULjialB.png	false		unknown
https://csgoempire.com/assets/index-LY9a2O9P.js	false		unknown
https://www.clarity.ms/s/0.7.47/clarity.js	false	URL Reputation: safe	unknown
https://csgoempire.com/cdn-cgi/rum?	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/3792cbb5-624c-44cf-63b5-cd6f88278e00/x184	false		unknown
https://csgoempire.com/assets/icon-gift-BmH1NNiF.js	false		unknown
https://csgoempire.com/assets/TablePagination.vue_vue_type_script_setup_true_lang-CSEd8dpi.js	false		unknown
https://csgoempire.com/icons/favicon.ico?v=5	false		unknown
https://csgoempire.com/assets/time-to-first-byte-BZJa3bK8.js	false		unknown
https://csgoempire.com/match-betting	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/8469338a-3bcc-4af9-d810-914fae943a00/x184	false		unknown
https://csgoempire.com/assets/BattlePlayerAvatar.vue_vue_type_script_setup_true_lang-29bvTqFI.js	false		unknown
https://sports-proxy.csgoempire.com/static/js/LiveEventPage.d133ddb9.chunk.js	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/da006b7b-5099-485a-cfd6-73ff9da55700/x184	false		unknown
https://sports-proxy.csgoempire.com/static/js/FavoritesPage.38a153c6.chunk.js	false		unknown
https://sports-proxy.csgoempire.com/static/js/58095.00b2c44f.chunk.js	false		unknown
https://csgoempire.com/assets/SessionStorageEntry-DejSJXIr.js	false		unknown
https://roulette.csgoempire.com/s/?uid=guest&token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3MjgwODE4OTUsImV4cCI6MTcyODA4MTkyNSwic3ViIjoiMjIyMTBjYTczYmYxYWYyZWMyZWFjZTc0YTk2ZWUzNTYiLCJhdWQiOiJjc2dvZW1waXJlIiwianRpIjoiQ3ZyMDRXVk95dVpxZUFNTnJZQTFubjBYMVNLNWJHSi9nbjFYbzJvYUVNbVMifQ.fbX6hyoNSRR3Sb-VQd8TTKazBjJ76D3cltKhV-7QfSU&EIO=4&transport=websocket	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/feeea04b-8dfc-4a7a-318a-845466528e00/x184	false		unknown
https://csgoempire.com/assets/MatchBettingIndex-ZPRAiCvr.js	false		unknown
https://cdn.seondf.com/js/v5/agent.js	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/d36e8c77-9d0f-44f1-21aa-e31cc6edf500/x184	false		unknown
https://sports-proxy.csgoempire.com/static/js/SportPage.9fdd3e83.chunk.js	false		unknown
https://sports-proxy.csgoempire.com/static/js/MyBetsPage.c4548846.chunk.js	false		unknown
https://sports-proxy.csgoempire.com/static/js/SearchPage.96002a1e.chunk.js	false		unknown
https://csgoempire.com/assets/index-Dj1U7Ss3.js	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/d59f271e-b406-42d1-0601-0078d62a9000/x184	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/26023dcf-f3dc-4e40-23e3-a5fd143c0f00/x184	false		unknown
https://sports-proxy.csgoempire.com/static/js/PromoTournamentPage.c4555a45.chunk.js	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/09c51162-8e0b-4343-5a9b-e7f4538a2a00/x184	false		unknown
https://csgoempire.com/assets/index-DmrYtuiX.js	false		unknown
https://bam.nr-data.net/events/1/NRJS-450186af0129d0ea365?a=1103338868&sa=1&v=1.260.0&t=Unnamed%20Transaction&rst=63069&ck=0&s=e536a59cc0871dfe&ref=https://csgoempire.com/case-battles&ptid=e85e68f181d24422	false		unknown
https://imagedelivery.net/0ZvaEKTSlKUc2DwR965Mvw/fc42ae9d-f392-4d1b-a762-ddfbe6ce4c00/x184	false		unknown
https://sports-proxy.csgoempire.com/api/v3/live/brand/2432911154364948480/en/0	false		unknown
https://e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com/xcm-seal.js	false		unknown
https://csgoempire.com/assets/agent-session-D7AW2-d5.js	false		unknown
https://csgoempire.com/roulette#daily-coins	false		unknown
https://csgoempire.com/assets/battles-BxLZAbLX.js	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://redux.js.org/Errors?code=	chromecache_350.2.dr, chromecache_407.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_734.2.dr, chromecache_394.2.dr	false	URL Reputation: safe	unknown
https://www.cookiebot.com	chromecache_488.2.dr, chromecache_360.2.dr	false		unknown
http://ns.attribution.com/ads/1.0/	chromecache_624.2.dr, chromecache_554.2.dr	false	URL Reputation: safe	unknown
https://openjsf.org/	chromecache_552.2.dr, chromecache_473.2.dr	false	URL Reputation: safe	unknown
https://github.com/microsoft/clarity	chromecache_476.2.dr, chromecache_481.2.dr	false		unknown
https://e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com/sealassets/5ad71c7cbd29ab392d64d5	chromecache_367.2.dr, chromecache_706.2.dr	false		unknown
https://www.cloudflare.com/5xx-error-landing	chromecache_550.2.dr, chromecache_364.2.dr, chromecache_359.2.dr	false		unknown
http://underscorejs.org/LICENSE	chromecache_552.2.dr, chromecache_473.2.dr	false	URL Reputation: safe	unknown
https://npms.io/search?q=ponyfill.	chromecache_552.2.dr, chromecache_473.2.dr	false	URL Reputation: safe	unknown
https://www.clarity.ms/tag/	chromecache_605.2.dr, chromecache_632.2.dr, chromecache_742.2.dr, chromecache_317.2.dr	false		unknown
https://gamban.com/	chromecache_552.2.dr, chromecache_473.2.dr	false		unknown
https://soccerstats.info/	chromecache_473.2.dr	false		unknown

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526264
Start date and time:	2024-10-05 00:42:47 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://csgoempire.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@28/734@78/22
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://csgoempire.com/case-battles Browse: https://csgoempire.com/match-betting Browse: https://csgoempire.com/faq Browse: https://csgoempire.com/#daily-coins

Input	Output
URL: https://csgoempire.com/ Model: jbxai	{ "brand":["CSGOEMPIRE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Deposit", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://csgoempire.com/ Model: jbxai	{ "brand":["CSGOEMPIRE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Deposit", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://csgoempire.com/ Model: jbxai	{ "brand":["CSGOEMPIRE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Deposit", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://csgoempire.com/roulette Model: jbxai	{ "brand":["CSGOEMPIRE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Deposit", "text_input_field_labels":["0 Bets Total", "0 Bets Total", "0 Bets Total"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://csgoempire.com/roulette Model: jbxai	{ "brand":["CSGOEMPIRE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Deposit", "text_input_field_labels":["Read more", "Accept"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://csgoempire.com/roulette Model: jbxai	{ "brand":["CSGOEMPIRE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Deposit", "text_input_field_labels":["Read more", "Accept"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://csgoempire.com/case-battles Model: jbxai	{ "brand":["CSGOEMPIRE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Deposit", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://csgoempire.com/case-battles Model: jbxai	{ "brand":["CSGOEMPIRE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Deposit", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://csgoempire.com/case-battles Model: jbxai	{ "brand":["CSGOEMPIRE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Deposit", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://csgoempire.com/match-betting Model: jbxai	{ "brand":["CSGOEMPIRE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Deposit", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://csgoempire.com/roulette#daily-coins Model: jbxai	{ "brand":["CSGOEMPIRE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Deposit", "text_input_field_labels":["0 Bets Total"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://csgoempire.com/roulette#daily-coins Model: jbxai	{ "brand":["CSGOEMPIRE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Deposit", "text_input_field_labels":["0 Bets Total", "0 Bets Total", "0 Bets Total"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://csgoempire.com/roulette#daily-coins Model: jbxai	{ "brand":["CSGOEMPIRE"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Deposit", "text_input_field_labels":["0 Bets Total", "0 Bets Total", "0 Bets Total"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 21:43:48 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9746193151766507
Encrypted:	false
SSDEEP:	48:8Ad9Tl1OHPidAKZdA19ehwiZUklqehNy+3:8K/WKy
MD5:	85A4DFC635B44B71A4309412E6F1D069
SHA1:	50C5BB667E579FD16E3A7818E7ACA3085A2AA5B0
SHA-256:	0A0959706F0063BE68E5C18E5E4A642004AB8BB2DEB82B515D320E45E9E0D0FB
SHA-512:	EE53F86F7DB247BDD7CE0CF03A05A7A44216D92046DEFF9E68F21B43EDF4E4099A5D35588663804CDF5F5E1662A7A8D3EA1C8EA0A9F56B07A0BBE6A1041B795D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......m....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDYv.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDYv.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDYv.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDYv............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDYy............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............no.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 5, 2024 00:43:48.016976118 CEST	192.168.2.5	1.1.1.1	0xf695	Standard query (0)	csgoempire.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:48.017519951 CEST	192.168.2.5	1.1.1.1	0xb639	Standard query (0)	csgoempire.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:48.031784058 CEST	192.168.2.5	1.1.1.1	0xf1d9	Standard query (0)	csgoempire.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:48.032090902 CEST	192.168.2.5	1.1.1.1	0x3db0	Standard query (0)	csgoempire.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:48.865186930 CEST	192.168.2.5	1.1.1.1	0x5dc6	Standard query (0)	d86bd89c-f627-4e38-8144-b1c3c8b4745a.snippet.antillephone.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:48.865309954 CEST	192.168.2.5	1.1.1.1	0x141a	Standard query (0)	d86bd89c-f627-4e38-8144-b1c3c8b4745a.snippet.antillephone.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:50.357626915 CEST	192.168.2.5	1.1.1.1	0x87d9	Standard query (0)	e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.358248949 CEST	192.168.2.5	1.1.1.1	0x3a47	Standard query (0)	e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:50.359235048 CEST	192.168.2.5	1.1.1.1	0xbb8a	Standard query (0)	cdn.seondf.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.359663010 CEST	192.168.2.5	1.1.1.1	0xc75f	Standard query (0)	cdn.seondf.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:50.360328913 CEST	192.168.2.5	1.1.1.1	0xde49	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.360730886 CEST	192.168.2.5	1.1.1.1	0x4983	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:50.364464045 CEST	192.168.2.5	1.1.1.1	0x2ae2	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.365396976 CEST	192.168.2.5	1.1.1.1	0x76f4	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 5, 2024 00:43:50.500473976 CEST	192.168.2.5	1.1.1.1	0xc06e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.501347065 CEST	192.168.2.5	1.1.1.1	0xd330	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:51.490222931 CEST	192.168.2.5	1.1.1.1	0x9566	Standard query (0)	csgoempire.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:51.493113995 CEST	192.168.2.5	1.1.1.1	0xe613	Standard query (0)	csgoempire.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:53.050733089 CEST	192.168.2.5	1.1.1.1	0x1b5b	Standard query (0)	consent.cookiebot.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:53.050880909 CEST	192.168.2.5	1.1.1.1	0xb663	Standard query (0)	consent.cookiebot.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:54.248400927 CEST	192.168.2.5	1.1.1.1	0xf28b	Standard query (0)	roulette.csgoempire.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:54.248400927 CEST	192.168.2.5	1.1.1.1	0x825e	Standard query (0)	roulette.csgoempire.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:54.659199953 CEST	192.168.2.5	1.1.1.1	0x73a4	Standard query (0)	t.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:54.659785032 CEST	192.168.2.5	1.1.1.1	0x8c4d	Standard query (0)	t.clarity.ms	65	IN (0x0001)	false
Oct 5, 2024 00:43:56.959883928 CEST	192.168.2.5	1.1.1.1	0xaa48	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:56.960043907 CEST	192.168.2.5	1.1.1.1	0xe51c	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:56.960437059 CEST	192.168.2.5	1.1.1.1	0x6dba	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:56.960613012 CEST	192.168.2.5	1.1.1.1	0xdede	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 5, 2024 00:43:56.972417116 CEST	192.168.2.5	1.1.1.1	0x6c8d	Standard query (0)	e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:56.972754002 CEST	192.168.2.5	1.1.1.1	0x3c8	Standard query (0)	e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:56.974114895 CEST	192.168.2.5	1.1.1.1	0xd330	Standard query (0)	consentcdn.cookiebot.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:56.974288940 CEST	192.168.2.5	1.1.1.1	0x824e	Standard query (0)	consentcdn.cookiebot.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:57.251892090 CEST	192.168.2.5	1.1.1.1	0xaaf	Standard query (0)	cdn.seondf.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:57.252041101 CEST	192.168.2.5	1.1.1.1	0x3b7d	Standard query (0)	cdn.seondf.com	65	IN (0x0001)	false
Oct 5, 2024 00:43:57.337600946 CEST	192.168.2.5	1.1.1.1	0x3778	Standard query (0)	consent.cookiebot.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:57.337945938 CEST	192.168.2.5	1.1.1.1	0x5129	Standard query (0)	consent.cookiebot.com	65	IN (0x0001)	false
Oct 5, 2024 00:44:02.522186041 CEST	192.168.2.5	1.1.1.1	0x8c6d	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.522417068 CEST	192.168.2.5	1.1.1.1	0x8f76	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 5, 2024 00:44:02.523035049 CEST	192.168.2.5	1.1.1.1	0x3215	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.524349928 CEST	192.168.2.5	1.1.1.1	0x4636	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 5, 2024 00:44:02.572074890 CEST	192.168.2.5	1.1.1.1	0x70f6	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.572292089 CEST	192.168.2.5	1.1.1.1	0x19ed	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 5, 2024 00:44:02.574641943 CEST	192.168.2.5	1.1.1.1	0xeae3	Standard query (0)	imgsct.cookiebot.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.575141907 CEST	192.168.2.5	1.1.1.1	0x11de	Standard query (0)	imgsct.cookiebot.com	65	IN (0x0001)	false
Oct 5, 2024 00:44:02.575779915 CEST	192.168.2.5	1.1.1.1	0xf1db	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.576041937 CEST	192.168.2.5	1.1.1.1	0xbebc	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 5, 2024 00:44:03.567027092 CEST	192.168.2.5	1.1.1.1	0xc0fa	Standard query (0)	imgsct.cookiebot.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:03.567027092 CEST	192.168.2.5	1.1.1.1	0x68c6	Standard query (0)	imgsct.cookiebot.com	65	IN (0x0001)	false
Oct 5, 2024 00:44:05.277184010 CEST	192.168.2.5	1.1.1.1	0xbea	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:05.277400017 CEST	192.168.2.5	1.1.1.1	0x91bb	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 5, 2024 00:44:05.759712934 CEST	192.168.2.5	1.1.1.1	0xe9b4	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:05.760768890 CEST	192.168.2.5	1.1.1.1	0xbbd8	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Oct 5, 2024 00:44:06.882932901 CEST	192.168.2.5	1.1.1.1	0x3b80	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:06.883213043 CEST	192.168.2.5	1.1.1.1	0xa167	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Oct 5, 2024 00:44:19.963800907 CEST	192.168.2.5	1.1.1.1	0xbbfc	Standard query (0)	consentcdn.cookiebot.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:19.964164019 CEST	192.168.2.5	1.1.1.1	0xa121	Standard query (0)	consentcdn.cookiebot.com	65	IN (0x0001)	false
Oct 5, 2024 00:44:21.085691929 CEST	192.168.2.5	1.1.1.1	0x1f9b	Standard query (0)	consentcdn.cookiebot.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:21.085998058 CEST	192.168.2.5	1.1.1.1	0xb55d	Standard query (0)	consentcdn.cookiebot.com	65	IN (0x0001)	false
Oct 5, 2024 00:44:22.316096067 CEST	192.168.2.5	1.1.1.1	0xcfc1	Standard query (0)	avatars.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:22.316534996 CEST	192.168.2.5	1.1.1.1	0x84ae	Standard query (0)	avatars.steamstatic.com	65	IN (0x0001)	false
Oct 5, 2024 00:44:22.317609072 CEST	192.168.2.5	1.1.1.1	0x95ce	Standard query (0)	imagedelivery.net	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:22.319590092 CEST	192.168.2.5	1.1.1.1	0xd668	Standard query (0)	imagedelivery.net	65	IN (0x0001)	false
Oct 5, 2024 00:44:23.046643019 CEST	192.168.2.5	1.1.1.1	0x4e7d	Standard query (0)	imagedelivery.net	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:23.046643019 CEST	192.168.2.5	1.1.1.1	0x412	Standard query (0)	imagedelivery.net	65	IN (0x0001)	false
Oct 5, 2024 00:44:24.049742937 CEST	192.168.2.5	1.1.1.1	0x5c23	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:24.050014019 CEST	192.168.2.5	1.1.1.1	0xfe53	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 5, 2024 00:44:25.354090929 CEST	192.168.2.5	1.1.1.1	0xda17	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:25.354249954 CEST	192.168.2.5	1.1.1.1	0xdfbd	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 5, 2024 00:44:26.579646111 CEST	192.168.2.5	1.1.1.1	0xc875	Standard query (0)	avatars.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:26.580025911 CEST	192.168.2.5	1.1.1.1	0x3b8	Standard query (0)	avatars.steamstatic.com	65	IN (0x0001)	false
Oct 5, 2024 00:44:32.552095890 CEST	192.168.2.5	1.1.1.1	0x3e84	Standard query (0)	sports-proxy.csgoempire.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:32.552095890 CEST	192.168.2.5	1.1.1.1	0xbc60	Standard query (0)	sports-proxy.csgoempire.com	65	IN (0x0001)	false
Oct 5, 2024 00:44:34.990870953 CEST	192.168.2.5	1.1.1.1	0xafe	Standard query (0)	sports-proxy.csgoempire.com	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:34.991094112 CEST	192.168.2.5	1.1.1.1	0xe93d	Standard query (0)	sports-proxy.csgoempire.com	65	IN (0x0001)	false
Oct 5, 2024 00:44:56.913837910 CEST	192.168.2.5	1.1.1.1	0xeda3	Standard query (0)	t.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:56.914614916 CEST	192.168.2.5	1.1.1.1	0x3239	Standard query (0)	t.clarity.ms	65	IN (0x0001)	false
Oct 5, 2024 00:45:13.097784042 CEST	192.168.2.5	1.1.1.1	0xecda	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:45:13.097872972 CEST	192.168.2.5	1.1.1.1	0x2e62	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 5, 2024 00:43:48.026015997 CEST	1.1.1.1	192.168.2.5	0xb639	No error (0)	csgoempire.com			65	IN (0x0001)	false
Oct 5, 2024 00:43:48.040718079 CEST	1.1.1.1	192.168.2.5	0xf1d9	No error (0)	csgoempire.com		172.64.144.121	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:48.040718079 CEST	1.1.1.1	192.168.2.5	0xf1d9	No error (0)	csgoempire.com		104.18.43.135	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:48.040925026 CEST	1.1.1.1	192.168.2.5	0x3db0	No error (0)	csgoempire.com			65	IN (0x0001)	false
Oct 5, 2024 00:43:48.878140926 CEST	1.1.1.1	192.168.2.5	0x5dc6	No error (0)	d86bd89c-f627-4e38-8144-b1c3c8b4745a.snippet.antillephone.com	d136ckvdki9cor.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:48.878140926 CEST	1.1.1.1	192.168.2.5	0x5dc6	No error (0)	d136ckvdki9cor.cloudfront.net		18.245.31.103	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:48.878140926 CEST	1.1.1.1	192.168.2.5	0x5dc6	No error (0)	d136ckvdki9cor.cloudfront.net		18.245.31.123	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:48.878140926 CEST	1.1.1.1	192.168.2.5	0x5dc6	No error (0)	d136ckvdki9cor.cloudfront.net		18.245.31.88	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:48.878140926 CEST	1.1.1.1	192.168.2.5	0x5dc6	No error (0)	d136ckvdki9cor.cloudfront.net		18.245.31.85	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:48.883884907 CEST	1.1.1.1	192.168.2.5	0x141a	No error (0)	d86bd89c-f627-4e38-8144-b1c3c8b4745a.snippet.antillephone.com	d136ckvdki9cor.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:50.978487968 CEST	1.1.1.1	192.168.2.5	0x4983	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Oct 5, 2024 00:43:50.978499889 CEST	1.1.1.1	192.168.2.5	0xde49	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.978499889 CEST	1.1.1.1	192.168.2.5	0xde49	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.978513002 CEST	1.1.1.1	192.168.2.5	0x2ae2	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:50.978513002 CEST	1.1.1.1	192.168.2.5	0x2ae2	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:50.978513002 CEST	1.1.1.1	192.168.2.5	0x2ae2	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:50.978513002 CEST	1.1.1.1	192.168.2.5	0x2ae2	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.978524923 CEST	1.1.1.1	192.168.2.5	0xc75f	No error (0)	cdn.seondf.com			65	IN (0x0001)	false
Oct 5, 2024 00:43:50.978535891 CEST	1.1.1.1	192.168.2.5	0x76f4	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:50.978535891 CEST	1.1.1.1	192.168.2.5	0x76f4	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:50.978753090 CEST	1.1.1.1	192.168.2.5	0xbb8a	No error (0)	cdn.seondf.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.978753090 CEST	1.1.1.1	192.168.2.5	0xbb8a	No error (0)	cdn.seondf.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.982603073 CEST	1.1.1.1	192.168.2.5	0xc06e	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.982615948 CEST	1.1.1.1	192.168.2.5	0xd330	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 5, 2024 00:43:50.990936995 CEST	1.1.1.1	192.168.2.5	0x87d9	No error (0)	e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com	dk1ua3i3ii4px.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:50.990936995 CEST	1.1.1.1	192.168.2.5	0x87d9	No error (0)	dk1ua3i3ii4px.cloudfront.net		52.222.214.23	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.990936995 CEST	1.1.1.1	192.168.2.5	0x87d9	No error (0)	dk1ua3i3ii4px.cloudfront.net		52.222.214.120	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.990936995 CEST	1.1.1.1	192.168.2.5	0x87d9	No error (0)	dk1ua3i3ii4px.cloudfront.net		52.222.214.90	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.990936995 CEST	1.1.1.1	192.168.2.5	0x87d9	No error (0)	dk1ua3i3ii4px.cloudfront.net		52.222.214.16	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:50.991792917 CEST	1.1.1.1	192.168.2.5	0x3a47	No error (0)	e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com	dk1ua3i3ii4px.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:51.497616053 CEST	1.1.1.1	192.168.2.5	0x9566	No error (0)	csgoempire.com		104.18.43.135	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:51.497616053 CEST	1.1.1.1	192.168.2.5	0x9566	No error (0)	csgoempire.com		172.64.144.121	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:51.502969027 CEST	1.1.1.1	192.168.2.5	0xe613	No error (0)	csgoempire.com			65	IN (0x0001)	false
Oct 5, 2024 00:43:53.060090065 CEST	1.1.1.1	192.168.2.5	0xb663	No error (0)	consent.cookiebot.com	consent.cookiebot.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:53.060247898 CEST	1.1.1.1	192.168.2.5	0x1b5b	No error (0)	consent.cookiebot.com	consent.cookiebot.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:54.259022951 CEST	1.1.1.1	192.168.2.5	0xf28b	No error (0)	roulette.csgoempire.com		104.18.43.135	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:54.259022951 CEST	1.1.1.1	192.168.2.5	0xf28b	No error (0)	roulette.csgoempire.com		172.64.144.121	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:54.259107113 CEST	1.1.1.1	192.168.2.5	0x825e	No error (0)	roulette.csgoempire.com			65	IN (0x0001)	false
Oct 5, 2024 00:43:54.667655945 CEST	1.1.1.1	192.168.2.5	0x73a4	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:54.668134928 CEST	1.1.1.1	192.168.2.5	0x8c4d	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:56.968570948 CEST	1.1.1.1	192.168.2.5	0xaa48	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:56.968570948 CEST	1.1.1.1	192.168.2.5	0xaa48	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:56.969402075 CEST	1.1.1.1	192.168.2.5	0xe51c	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Oct 5, 2024 00:43:56.969501972 CEST	1.1.1.1	192.168.2.5	0x6dba	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:56.969501972 CEST	1.1.1.1	192.168.2.5	0x6dba	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:56.969501972 CEST	1.1.1.1	192.168.2.5	0x6dba	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:56.969501972 CEST	1.1.1.1	192.168.2.5	0x6dba	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:56.969521046 CEST	1.1.1.1	192.168.2.5	0xdede	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:56.969521046 CEST	1.1.1.1	192.168.2.5	0xdede	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:56.983412981 CEST	1.1.1.1	192.168.2.5	0x824e	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:56.984652996 CEST	1.1.1.1	192.168.2.5	0xd330	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:56.985213041 CEST	1.1.1.1	192.168.2.5	0x3c8	No error (0)	e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com	dk1ua3i3ii4px.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:56.988708019 CEST	1.1.1.1	192.168.2.5	0x6c8d	No error (0)	e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com	dk1ua3i3ii4px.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:56.988708019 CEST	1.1.1.1	192.168.2.5	0x6c8d	No error (0)	dk1ua3i3ii4px.cloudfront.net		52.222.214.90	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:56.988708019 CEST	1.1.1.1	192.168.2.5	0x6c8d	No error (0)	dk1ua3i3ii4px.cloudfront.net		52.222.214.16	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:56.988708019 CEST	1.1.1.1	192.168.2.5	0x6c8d	No error (0)	dk1ua3i3ii4px.cloudfront.net		52.222.214.23	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:56.988708019 CEST	1.1.1.1	192.168.2.5	0x6c8d	No error (0)	dk1ua3i3ii4px.cloudfront.net		52.222.214.120	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:57.262279987 CEST	1.1.1.1	192.168.2.5	0x3b7d	No error (0)	cdn.seondf.com			65	IN (0x0001)	false
Oct 5, 2024 00:43:57.262309074 CEST	1.1.1.1	192.168.2.5	0xaaf	No error (0)	cdn.seondf.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:57.262309074 CEST	1.1.1.1	192.168.2.5	0xaaf	No error (0)	cdn.seondf.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:57.346060991 CEST	1.1.1.1	192.168.2.5	0x3778	No error (0)	consent.cookiebot.com	consent.cookiebot.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:57.346657991 CEST	1.1.1.1	192.168.2.5	0x5129	No error (0)	consent.cookiebot.com	consent.cookiebot.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:58.589279890 CEST	1.1.1.1	192.168.2.5	0x521d	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:43:58.589279890 CEST	1.1.1.1	192.168.2.5	0x521d	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:59.954355001 CEST	1.1.1.1	192.168.2.5	0x30e8	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:43:59.954355001 CEST	1.1.1.1	192.168.2.5	0x30e8	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:00.783235073 CEST	1.1.1.1	192.168.2.5	0x664d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:00.783235073 CEST	1.1.1.1	192.168.2.5	0x664d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588354111 CEST	1.1.1.1	192.168.2.5	0x70f6	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588354111 CEST	1.1.1.1	192.168.2.5	0x70f6	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588479996 CEST	1.1.1.1	192.168.2.5	0x8c6d	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588479996 CEST	1.1.1.1	192.168.2.5	0x8c6d	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588479996 CEST	1.1.1.1	192.168.2.5	0x8c6d	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588479996 CEST	1.1.1.1	192.168.2.5	0x8c6d	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588479996 CEST	1.1.1.1	192.168.2.5	0x8c6d	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588493109 CEST	1.1.1.1	192.168.2.5	0x3215	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588493109 CEST	1.1.1.1	192.168.2.5	0x3215	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588493109 CEST	1.1.1.1	192.168.2.5	0x3215	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588493109 CEST	1.1.1.1	192.168.2.5	0x3215	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588512897 CEST	1.1.1.1	192.168.2.5	0xf1db	No error (0)	td.doubleclick.net		142.250.74.194	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588666916 CEST	1.1.1.1	192.168.2.5	0x11de	No error (0)	imgsct.cookiebot.com	imgsct.cookiebot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588793039 CEST	1.1.1.1	192.168.2.5	0x19ed	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:02.588793039 CEST	1.1.1.1	192.168.2.5	0x19ed	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:02.589250088 CEST	1.1.1.1	192.168.2.5	0xeae3	No error (0)	imgsct.cookiebot.com	imgsct.cookiebot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:02.589262009 CEST	1.1.1.1	192.168.2.5	0x8f76	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:03.573864937 CEST	1.1.1.1	192.168.2.5	0x68c6	No error (0)	imgsct.cookiebot.com	imgsct.cookiebot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:03.573971033 CEST	1.1.1.1	192.168.2.5	0xc0fa	No error (0)	imgsct.cookiebot.com	imgsct.cookiebot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:05.283934116 CEST	1.1.1.1	192.168.2.5	0xbea	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:05.283934116 CEST	1.1.1.1	192.168.2.5	0xbea	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:05.284755945 CEST	1.1.1.1	192.168.2.5	0x91bb	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:05.284755945 CEST	1.1.1.1	192.168.2.5	0x91bb	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:05.767658949 CEST	1.1.1.1	192.168.2.5	0xe9b4	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:05.767658949 CEST	1.1.1.1	192.168.2.5	0xe9b4	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:05.768790960 CEST	1.1.1.1	192.168.2.5	0xbbd8	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:05.768790960 CEST	1.1.1.1	192.168.2.5	0xbbd8	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:06.890964985 CEST	1.1.1.1	192.168.2.5	0x3b80	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:06.890964985 CEST	1.1.1.1	192.168.2.5	0x3b80	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:06.891953945 CEST	1.1.1.1	192.168.2.5	0xa167	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:06.891953945 CEST	1.1.1.1	192.168.2.5	0xa167	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:16.907459974 CEST	1.1.1.1	192.168.2.5	0x58f0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:16.907459974 CEST	1.1.1.1	192.168.2.5	0x58f0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:19.972006083 CEST	1.1.1.1	192.168.2.5	0xbbfc	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:19.973814964 CEST	1.1.1.1	192.168.2.5	0xa121	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:21.094700098 CEST	1.1.1.1	192.168.2.5	0xb55d	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:21.094945908 CEST	1.1.1.1	192.168.2.5	0x1f9b	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:22.324553967 CEST	1.1.1.1	192.168.2.5	0xcfc1	No error (0)	avatars.steamstatic.com	avatars.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:22.326728106 CEST	1.1.1.1	192.168.2.5	0x84ae	No error (0)	avatars.steamstatic.com	avatars.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:22.326845884 CEST	1.1.1.1	192.168.2.5	0x95ce	No error (0)	imagedelivery.net		104.18.3.36	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:22.326845884 CEST	1.1.1.1	192.168.2.5	0x95ce	No error (0)	imagedelivery.net		104.18.2.36	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:22.328519106 CEST	1.1.1.1	192.168.2.5	0xd668	No error (0)	imagedelivery.net			65	IN (0x0001)	false
Oct 5, 2024 00:44:23.054944038 CEST	1.1.1.1	192.168.2.5	0x4e7d	No error (0)	imagedelivery.net		104.18.2.36	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:23.054944038 CEST	1.1.1.1	192.168.2.5	0x4e7d	No error (0)	imagedelivery.net		104.18.3.36	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:23.057162046 CEST	1.1.1.1	192.168.2.5	0x412	No error (0)	imagedelivery.net			65	IN (0x0001)	false
Oct 5, 2024 00:44:24.058056116 CEST	1.1.1.1	192.168.2.5	0x5c23	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:24.058129072 CEST	1.1.1.1	192.168.2.5	0xfe53	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 5, 2024 00:44:25.362097979 CEST	1.1.1.1	192.168.2.5	0xdfbd	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 5, 2024 00:44:25.362179995 CEST	1.1.1.1	192.168.2.5	0xda17	No error (0)	googleads.g.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:26.589171886 CEST	1.1.1.1	192.168.2.5	0xc875	No error (0)	avatars.steamstatic.com	avatars.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:26.589737892 CEST	1.1.1.1	192.168.2.5	0x3b8	No error (0)	avatars.steamstatic.com	avatars.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:32.565099955 CEST	1.1.1.1	192.168.2.5	0x3e84	No error (0)	sports-proxy.csgoempire.com		172.64.144.121	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:32.565099955 CEST	1.1.1.1	192.168.2.5	0x3e84	No error (0)	sports-proxy.csgoempire.com		104.18.43.135	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:32.566477060 CEST	1.1.1.1	192.168.2.5	0xbc60	No error (0)	sports-proxy.csgoempire.com			65	IN (0x0001)	false
Oct 5, 2024 00:44:34.998054028 CEST	1.1.1.1	192.168.2.5	0xe93d	No error (0)	sports-proxy.csgoempire.com			65	IN (0x0001)	false
Oct 5, 2024 00:44:34.999742031 CEST	1.1.1.1	192.168.2.5	0xafe	No error (0)	sports-proxy.csgoempire.com		172.64.144.121	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:34.999742031 CEST	1.1.1.1	192.168.2.5	0xafe	No error (0)	sports-proxy.csgoempire.com		104.18.43.135	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:44:56.922328949 CEST	1.1.1.1	192.168.2.5	0xeda3	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:44:56.923136950 CEST	1.1.1.1	192.168.2.5	0x3239	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:45:00.261353970 CEST	1.1.1.1	192.168.2.5	0xd38f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:45:00.261353970 CEST	1.1.1.1	192.168.2.5	0xd38f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 5, 2024 00:45:13.106676102 CEST	1.1.1.1	192.168.2.5	0x2e62	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:45:13.106676102 CEST	1.1.1.1	192.168.2.5	0x2e62	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:45:13.106690884 CEST	1.1.1.1	192.168.2.5	0xecda	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:45:13.106690884 CEST	1.1.1.1	192.168.2.5	0xecda	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2024 00:45:13.106690884 CEST	1.1.1.1	192.168.2.5	0xecda	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-04 22:43:48 UTC	657	OUT	GET / HTTP/1.1 Host: csgoempire.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 22:43:48 UTC	1301	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 22:43:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8cd8b164ac84c472-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Cache-Control: no-cache Last-Modified: Wed, 02 Oct 2024 14:22:48 GMT Set-Cookie: env_class=green;Max-Age=300;Path=/ Strict-Transport-Security: max-age=31536000; includeSubDomains; preload x-backend-server: csgoempire-site-frontend-green-897bfb989-ktmzs x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin content-security-policy: upgrade-insecure-requests x-frame-options: DENY Cross-Origin-Embedder-Policy: credentialless Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Content-Security-Policy: upgrade-insecure-requests Content-Security-Policy: upgrade-insecure-requests Cross-Origin-Embedder-Policy: credentialless Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Set-Cookie: __cf_bm=EMkHtN_oxLyQZke0ARh1SZCy.qYxYQR9JxFvILsBoC0-1728081828-1.0.1.1-JzASQSRZLjLb8tgnbnGsTMDFxn1mZzexB78gTm4.VoXKAwiN_EmR9MwP3L8iZNvlLfFoHL3m1._FeHP2hBX5XQ; path=/; expires=Fri, 04-Oct-24 23:13:48 GMT; domain=.csgoempire.com; HttpOnly; Secure; SameSite=None
2024-10-04 22:43:48 UTC	184	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 41 37 30 50 68 6b 6b 47 79 70 67 64 6b 72 74 67 59 6d 41 6c 66 63 74 72 4f 2e 2e 6d 4c 31 6f 72 30 46 53 78 34 53 64 33 48 53 51 2d 31 37 32 38 30 38 31 38 32 38 37 35 33 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 63 73 67 6f 65 6d 70 69 72 65 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=A70PhkkGypgdkrtgYmAlfctrO..mL1or0FSx4Sd3HSQ-1728081828753-0.0.1.1-604800000; path=/; domain=.csgoempire.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
2024-10-04 22:43:48 UTC	1369	IN	Data Raw: 31 35 38 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 69 63 6f 6e 73 2f 6c 6f 67 6f 2d 70 72 65 6c 6f 61 64 65 72 2e 73 76 67 22 20 61 73 3d 22 69 6d 61 67 65 22 20 74 79 70 65 3d 22 Data Ascii: 158e<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="preload" href="/icons/logo-preloader.svg" as="image" type="
2024-10-04 22:43:48 UTC	1369	IN	Data Raw: 6c 69 74 28 22 2e 22 29 2e 6c 65 6e 67 74 68 2d 31 3e 31 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2c 73 3d 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 6f 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 65 74 75 72 6e 20 6f 2e 61 73 79 6e 63 3d 31 2c 6f 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 61 2b 22 2e 73 65 61 6c 73 2d 78 63 6d 2e 63 65 72 74 72 69 61 2e 63 6f 6d 2f 78 63 6d 2d 73 65 61 6c 2e 6a 73 22 2c 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2c 61 7d 28 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 65 6f 6e 64 66 2e 63 6f 6d 2f 6a 73 Data Ascii: lit(".").length-1>1))return null;const n=document,s=n.getElementsByTagName("head")[0],o=n.createElement("script");return o.async=1,o.src="https://"+a+".seals-xcm.certria.com/xcm-seal.js",s.appendChild(o),a}()</script><script src="https://cdn.seondf.com/js
2024-10-04 22:43:48 UTC	1369	IN	Data Raw: 68 6f 75 74 20 4a 61 76 61 53 63 72 69 70 74 20 65 6e 61 62 6c 65 64 2e 20 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 69 74 20 74 6f 20 63 6f 6e 74 69 6e 75 65 2e 3c 2f 64 69 76 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 64 69 76 20 69 64 3d 22 70 6f 70 6f 76 65 72 73 22 20 63 6c 61 73 73 3d 22 72 65 6c 61 74 69 76 65 20 7a 2d 31 30 30 33 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 61 70 70 22 3e 3c 2f 64 69 76 3e 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 70 72 65 6c 6f 61 64 65 72 5f 5f 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 34 31 34 31 39 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a Data Ascii: hout JavaScript enabled. Please enable it to continue.</div></noscript><div id="popovers" class="relative z-1003"></div><div id="app"></div><style> .preloader__container{background:#141419;font-size:16px;width:100%;height:100%;display:
2024-10-04 22:43:48 UTC	1369	IN	Data Raw: 67 6f 2d 70 72 65 6c 6f 61 64 65 72 2e 73 76 67 22 20 61 6c 74 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 63 64 38 62 31 36 34 61 63 38 34 63 34 37 32 27 2c 74 3a 27 4d 54 63 79 4f 44 41 34 4d 54 67 79 4f 43 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e Data Ascii: go-preloader.svg" alt></div></div><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8cd8b164ac84c472',t:'MTcyODA4MTgyOC4wMDAwMDA='};var a=documen
2024-10-04 22:43:48 UTC	50	IN	Data Raw: 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: crossorigin="anonymous"></script></body></html>
2024-10-04 22:43:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://csgoempire.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Windows Analysis Report
http://csgoempire.com/

Timestamp	Bytes transferred	Direction	Data
2024-10-04 22:43:49 UTC	850	OUT	GET /assets/index-CopS2nao.css HTTP/1.1 Host: csgoempire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://csgoempire.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://csgoempire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: env_class=green; __cf_bm=EMkHtN_oxLyQZke0ARh1SZCy.qYxYQR9JxFvILsBoC0-1728081828-1.0.1.1-JzASQSRZLjLb8tgnbnGsTMDFxn1mZzexB78gTm4.VoXKAwiN_EmR9MwP3L8iZNvlLfFoHL3m1._FeHP2hBX5XQ; _cfuvid=A70PhkkGypgdkrtgYmAlfctrO..mL1or0FSx4Sd3HSQ-1728081828753-0.0.1.1-604800000
2024-10-04 22:43:49 UTC	1051	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 22:43:49 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close CF-Ray: 8cd8b16a2ed48cad-EWR CF-Cache-Status: HIT Age: 199096 Cache-Control: max-age=2592000, public Expires: Fri, 01 Nov 2024 15:25:21 GMT Last-Modified: Wed, 02 Oct 2024 14:22:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding x-backend-server: csgoempire-site-frontend-green-897bfb989-m7qdx x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin content-security-policy: upgrade-insecure-requests x-frame-options: DENY Cross-Origin-Embedder-Policy: credentialless Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Content-Security-Policy: upgrade-insecure-requests Content-Security-Policy: upgrade-insecure-requests Cross-Origin-Embedder-Policy: credentialless Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Server: cloudflare
2024-10-04 22:43:49 UTC	318	IN	Data Raw: 33 37 38 63 0d 0a 2e 6d 6f 64 61 6c 5f 5f 77 72 61 70 70 65 72 5b 64 61 74 61 2d 76 2d 32 31 65 36 37 63 38 65 5d 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 39 30 76 77 3b 6d 61 78 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 76 68 2c 20 31 76 68 29 20 2a 20 39 35 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 33 37 35 70 78 29 7b 2e 6d 6f 64 61 6c 5f 5f 77 72 61 70 70 65 72 5b 64 61 74 61 2d 76 2d 32 31 65 36 37 63 38 65 5d 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 63 75 73 74 6f 6d 57 69 64 74 68 29 7d 7d 2e 6d 61 73 6b 5b 64 61 74 61 2d 76 2d 31 61 34 65 39 66 32 30 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 6d 61 73 6b 2d 62 61 63 Data Ascii: 378c.modal__wrapper[data-v-21e67c8e]{margin-left:16px;margin-right:16px;width:90vw;max-height:calc(var(--vh, 1vh) * 95)}@media (min-width: 375px){.modal__wrapper[data-v-21e67c8e]{width:var(--customWidth)}}.mask[data-v-1a4e9f20]{background:var(--mask-bac
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 30 30 76 68 20 2d 20 76 61 72 28 2d 2d 73 69 74 65 2d 68 65 61 64 65 72 2d 68 65 69 67 68 74 29 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 37 36 70 78 29 7b 2e 6d 61 73 6b 5b 64 61 74 61 2d 76 2d 31 61 34 65 39 66 32 30 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 63 68 61 74 2d 74 61 62 5b 64 61 74 61 2d 76 2d 63 33 38 39 39 62 32 38 5d 7b 77 69 64 74 68 3a 33 2e 34 33 37 35 72 65 6d 3b 68 65 69 67 68 74 3a 33 2e 34 33 37 35 72 65 6d 3b 62 6f 74 74 6f 6d 3a 33 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 66 32 30 32 39 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 32 70 78 20 30 20 34 70 78 20 23 30 30 30 30 30 30 38 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 33 70 78 20 33 70 78 20 30 3b 74 72 61 6e 73 69 74 69 6f 6e Data Ascii: 00vh - var(--site-header-height))}@media (min-width: 576px){.mask[data-v-1a4e9f20]{display:none}}.chat-tab[data-v-c3899b28]{width:3.4375rem;height:3.4375rem;bottom:32px;background:#1f2029;box-shadow:2px 0 4px #00000080;border-radius:0 3px 3px 0;transition
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 69 65 6e 74 28 23 65 39 62 31 30 65 20 76 61 72 28 2d 2d 70 72 6f 67 72 65 73 73 29 2c 23 32 34 32 35 32 66 20 30 64 65 67 29 7d 2e 75 69 2d 70 6f 70 6f 76 65 72 2d 62 75 74 74 6f 6e 5b 64 61 74 61 2d 76 2d 38 35 32 38 63 36 62 39 5d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 3a 20 31 3b 63 6f 6c 6f 72 3a 72 67 62 28 31 34 36 20 31 34 37 20 31 36 36 20 2f 20 76 61 72 28 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 29 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 Data Ascii: ient(#e9b10e var(--progress),#24252f 0deg)}.ui-popover-button[data-v-8528c6b9]{display:flex;width:100%;align-items:center;font-size:.8125rem;font-weight:700;--tw-text-opacity: 1;color:rgb(146 147 166 / var(--tw-text-opacity));border-radius:.25rem;backgrou
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 33 38 70 78 3b 68 65 69 67 68 74 3a 33 38 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 63 6f 6e 69 63 2d 67 72 61 64 69 65 6e 74 28 23 65 39 62 31 30 65 20 76 61 72 28 2d 2d 70 72 6f 67 72 65 73 73 29 2c 23 32 34 32 35 32 66 20 30 64 65 67 29 7d 2e 73 74 65 61 6d 2d 6e 61 6d 65 5b 64 61 74 61 2d 76 2d 62 30 31 61 30 64 61 37 5d 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 77 69 64 Data Ascii: ter;justify-content:center;width:38px;height:38px;border-radius:50%;background:conic-gradient(#e9b10e var(--progress),#24252f 0deg)}.steam-name[data-v-b01a0da7]{margin-left:8px;margin-right:8px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;wid
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 70 61 64 64 69 6e 67 2d 74 6f 70 3a 76 61 72 28 2d 2d 73 69 74 65 2d 68 65 61 64 65 72 2d 68 65 69 67 68 74 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 32 38 30 70 78 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 34 73 7d 2e 66 6c 79 6f 75 74 2d 2d 6f 70 65 6e 5b 64 61 74 61 2d 76 2d 61 36 36 39 66 33 61 64 5d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 29 7d 2e 63 6f 69 6e 2d 67 72 61 70 68 69 63 5b 64 61 74 61 2d 76 2d 38 34 64 36 66 31 39 66 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 36 30 70 78 7d 2e 69 63 6f 6e 2d 69 6e 66 6f 5b 64 61 74 61 2d 76 2d 38 34 64 36 66 31 39 66 5d 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 70 78 3b 72 69 67 68 74 3a 31 31 Data Ascii: padding-top:var(--site-header-height);transform:translate(280px);transition:transform .4s}.flyout--open[data-v-a669f3ad]{transform:translate(0)}.coin-graphic[data-v-84d6f19f]{min-height:160px}.icon-info[data-v-84d6f19f]{position:absolute;top:10px;right:11
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 3a 32 30 70 78 7d 2e 66 6f 6f 74 65 72 20 2e 6d 61 73 74 65 72 63 61 72 64 2d 6c 6f 67 6f 5b 64 61 74 61 2d 76 2d 33 32 65 35 38 63 63 62 5d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 32 35 70 78 7d 2e 66 6f 6f 74 65 72 20 2e 65 69 67 68 74 65 65 6e 2d 63 65 72 74 69 66 69 63 61 74 65 5b 64 61 74 61 2d 76 2d 33 32 65 35 38 63 63 62 5d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 66 6f 6f 74 65 72 2d 77 72 61 70 5b 64 61 74 61 2d 76 2d 33 32 65 35 38 63 63 62 5d 7b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 61 72 65 61 73 3a 22 61 62 6f 75 74 20 63 6f 6d 6d 75 6e 69 74 79 22 20 22 65 6d 70 69 Data Ascii: :20px}.footer .mastercard-logo[data-v-32e58ccb]{display:block;width:auto;height:25px}.footer .eighteen-certificate[data-v-32e58ccb]{display:block;width:32px;height:32px}.footer-wrap[data-v-32e58ccb]{display:grid;grid-template-areas:"about community" "empi
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 5d 2c 62 75 74 74 6f 6e 5b 64 61 74 61 2d 76 2d 32 39 37 39 39 31 66 63 5d 3a 64 69 73 61 62 6c 65 64 7b 6f 70 61 63 69 74 79 3a 2e 33 7d 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 5b 64 61 74 61 2d 76 2d 32 39 37 39 39 31 66 63 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 36 63 33 31 7d 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 20 2e 66 72 6f 6e 74 5b 64 61 74 61 2d 76 2d 32 39 37 39 39 31 66 63 5d 7b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 20 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 33 33 20 31 37 37 20 31 34 20 2f 20 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 7d 40 6d 65 64 69 61 20 28 68 6f 76 65 72 3a 20 68 6f 76 65 72 29 20 61 6e 64 20 28 70 6f 69 Data Ascii: ],button[data-v-297991fc]:disabled{opacity:.3}button.btn-primary[data-v-297991fc]{background-color:#cc6c31}button.btn-primary .front[data-v-297991fc]{--tw-bg-opacity: 1;background-color:rgb(233 177 14 / var(--tw-bg-opacity))}@media (hover: hover) and (poi
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 62 67 2d 6f 70 61 63 69 74 79 29 29 3b 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 3a 20 31 3b 63 6f 6c 6f 72 3a 72 67 62 28 31 34 36 20 31 34 37 20 31 36 36 20 2f 20 76 61 72 28 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 29 29 7d 7d 62 75 74 74 6f 6e 2e 62 74 6e 2d 74 65 72 74 69 61 72 79 2e 61 63 74 69 76 65 20 2e 66 72 6f 6e 74 5b 64 61 74 61 2d 76 2d 32 39 37 39 39 31 66 63 5d 7b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 20 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 35 31 20 35 33 20 36 35 20 2f 20 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 3b 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 3a 20 31 3b 63 6f 6c 6f 72 3a 72 67 62 28 32 32 30 20 32 32 30 20 32 32 30 20 2f 20 76 61 72 Data Ascii: bg-opacity));--tw-text-opacity: 1;color:rgb(146 147 166 / var(--tw-text-opacity))}}button.btn-tertiary.active .front[data-v-297991fc]{--tw-bg-opacity: 1;background-color:rgb(51 53 65 / var(--tw-bg-opacity));--tw-text-opacity: 1;color:rgb(220 220 220 / var
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 3b 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 3a 20 31 3b 63 6f 6c 6f 72 3a 72 67 62 28 31 34 36 20 31 34 37 20 31 36 36 20 2f 20 76 61 72 28 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 29 29 7d 40 6d 65 64 69 61 20 28 68 6f 76 65 72 3a 20 68 6f 76 65 72 29 20 61 6e 64 20 28 70 6f 69 6e 74 65 72 3a 20 66 69 6e 65 29 7b 62 75 74 74 6f 6e 2e 62 74 6e 2d 72 6f 75 6e 64 65 64 5b 64 61 74 61 2d 76 2d 32 39 37 39 39 31 66 63 5d 3a 68 6f 76 65 72 7b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 20 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 35 31 20 35 33 20 36 35 20 2f 20 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 3b 2d 2d 74 77 2d 74 65 78 Data Ascii: ar(--tw-bg-opacity));--tw-text-opacity: 1;color:rgb(146 147 166 / var(--tw-text-opacity))}@media (hover: hover) and (pointer: fine){button.btn-rounded[data-v-297991fc]:hover{--tw-bg-opacity: 1;background-color:rgb(51 53 65 / var(--tw-bg-opacity));--tw-tex
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 33 36 20 33 37 20 34 37 20 2f 20 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 7d 7d 62 75 74 74 6f 6e 2e 62 74 6e 2d 74 61 62 2e 61 63 74 69 76 65 20 2e 66 72 6f 6e 74 5b 64 61 74 61 2d 76 2d 32 39 37 39 39 31 66 63 5d 7b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 20 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 33 36 20 33 37 20 34 37 20 2f 20 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 3b 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 3a 20 31 3b 63 6f 6c 6f 72 3a 72 67 62 28 32 32 30 20 32 32 30 20 32 32 30 20 2f 20 76 61 72 28 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 29 29 7d 62 75 74 74 6f 6e 2e 73 74 72 Data Ascii: 1;background-color:rgb(36 37 47 / var(--tw-bg-opacity))}}button.btn-tab.active .front[data-v-297991fc]{--tw-bg-opacity: 1;background-color:rgb(36 37 47 / var(--tw-bg-opacity));--tw-text-opacity: 1;color:rgb(220 220 220 / var(--tw-text-opacity))}button.str

Timestamp	Bytes transferred	Direction	Data
2024-10-04 22:43:49 UTC	835	OUT	GET /assets/index-Dj1U7Ss3.js HTTP/1.1 Host: csgoempire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://csgoempire.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://csgoempire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: env_class=green; __cf_bm=EMkHtN_oxLyQZke0ARh1SZCy.qYxYQR9JxFvILsBoC0-1728081828-1.0.1.1-JzASQSRZLjLb8tgnbnGsTMDFxn1mZzexB78gTm4.VoXKAwiN_EmR9MwP3L8iZNvlLfFoHL3m1._FeHP2hBX5XQ; _cfuvid=A70PhkkGypgdkrtgYmAlfctrO..mL1or0FSx4Sd3HSQ-1728081828753-0.0.1.1-604800000
2024-10-04 22:43:49 UTC	1080	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 22:43:49 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8cd8b16a38c17c9c-EWR CF-Cache-Status: HIT Age: 199096 Cache-Control: max-age=2592000, public Expires: Fri, 01 Nov 2024 15:25:33 GMT Last-Modified: Wed, 02 Oct 2024 14:22:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding x-backend-server: csgoempire-site-frontend-green-897bfb989-mrdjk x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin content-security-policy: upgrade-insecure-requests x-frame-options: DENY Cross-Origin-Embedder-Policy: credentialless Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Content-Security-Policy: upgrade-insecure-requests Content-Security-Policy: upgrade-insecure-requests Cross-Origin-Embedder-Policy: credentialless Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Server: cloudflare
2024-10-04 22:43:49 UTC	289	IN	Data Raw: 31 62 65 39 0d 0a 63 6f 6e 73 74 20 5f 5f 76 69 74 65 5f 5f 66 69 6c 65 44 65 70 73 3d 5b 22 61 73 73 65 74 73 2f 72 65 63 6f 72 64 65 72 2d 43 44 30 71 6e 73 6f 6c 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 2d 65 76 61 6c 75 61 74 6f 72 2d 42 77 46 68 74 44 66 69 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 4b 59 43 2d 43 42 66 45 31 77 36 59 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 49 6e 70 75 74 44 61 74 65 4f 66 42 69 72 74 68 2e 76 75 65 5f 76 75 65 5f 74 79 70 65 5f 73 63 72 69 70 74 5f 73 65 74 75 70 5f 74 72 75 65 5f 6c 61 6e 67 2d 42 67 77 49 4a 32 46 31 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 53 65 6c 65 63 74 2e 76 75 65 5f 76 75 65 5f 74 79 70 65 5f 73 63 72 69 70 74 5f 73 65 74 75 70 5f 74 72 75 65 5f 6c 61 6e 67 2d 44 49 70 Data Ascii: 1be9const __vite__fileDeps=["assets/recorder-CD0qnsol.js","assets/stylesheet-evaluator-BwFhtDfi.js","assets/KYC-CBfE1w6Y.js","assets/InputDateOfBirth.vue_vue_type_script_setup_true_lang-BgwIJ2F1.js","assets/Select.vue_vue_type_script_setup_true_lang-DIp
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 63 73 73 22 2c 22 61 73 73 65 74 73 2f 42 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 2d 74 71 4a 4b 52 53 6b 77 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 6b 79 63 2d 58 69 6e 71 59 77 35 70 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 48 65 61 64 2d 43 5f 57 58 4d 72 52 45 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 48 65 61 64 2d 43 70 72 73 73 7a 55 71 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 4d 65 73 73 61 67 65 2d 42 45 4d 73 37 4f 7a 6c 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 76 65 72 69 66 69 65 64 2d 42 4e 32 31 75 46 58 79 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 5f 62 61 73 65 50 72 6f 70 65 72 74 79 4f 66 2d 42 6e 5f 45 39 64 5f 41 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 43 6f 6e 74 61 69 6e 65 72 2d 44 63 61 43 73 70 37 6f 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f Data Ascii: css","assets/ButtonContainer-tqJKRSkw.js","assets/kyc-XinqYw5p.js","assets/Head-C_WXMrRE.js","assets/Head-CprsszUq.css","assets/Message-BEMs7Ozl.js","assets/verified-BN21uFXy.js","assets/_basePropertyOf-Bn_E9d_A.js","assets/Container-DcaCsp7o.js","assets/
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 73 65 74 73 2f 43 6f 6c 6c 61 70 73 69 62 6c 65 43 6f 6e 74 65 6e 74 2d 43 36 30 5a 47 55 7a 31 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 43 73 67 6f 57 65 61 72 54 69 65 72 2d 42 7a 52 77 70 4e 69 39 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 54 72 61 64 65 46 69 6c 74 65 72 73 53 69 64 65 62 61 72 2d 43 62 73 35 6a 42 66 57 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 53 6c 69 64 65 72 2d 44 4c 66 77 32 2d 50 5f 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 54 72 61 64 65 53 69 64 65 62 61 72 2d 79 51 63 69 6c 42 4e 77 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 53 74 65 61 6d 55 72 6c 2d 43 44 47 41 2d 4d 5a 48 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 69 63 6f 6e 2d 73 65 61 72 63 68 2d 42 57 41 5f 44 32 55 70 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 53 74 65 61 6d 55 72 Data Ascii: sets/CollapsibleContent-C60ZGUz1.css","assets/CsgoWearTier-BzRwpNi9.js","assets/TradeFiltersSidebar-Cbs5jBfW.css","assets/Slider-DLfw2-P_.css","assets/TradeSidebar-yQcilBNw.js","assets/SteamUrl-CDGA-MZH.js","assets/icon-search-BWA_D2Up.js","assets/SteamUr
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 61 72 2e 76 75 65 5f 76 75 65 5f 74 79 70 65 5f 73 63 72 69 70 74 5f 73 65 74 75 70 5f 74 72 75 65 5f 6c 61 6e 67 2d 32 39 62 76 54 71 46 49 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 42 61 74 74 6c 65 55 73 65 72 56 65 72 73 75 73 43 61 72 64 73 2d 35 50 39 72 62 66 4b 6b 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 54 6f 67 67 6c 65 2d 42 47 6d 6c 4d 73 74 50 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 54 6f 67 67 6c 65 2d 33 37 71 33 77 6a 65 44 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 54 61 62 6c 65 2d 42 78 55 4d 41 42 53 65 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 54 61 62 6c 65 2d 44 75 62 65 75 57 63 4c 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 43 6f 70 79 54 65 78 74 2d 72 64 53 30 36 4a 2d 70 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 43 6f 70 79 54 65 78 74 2d Data Ascii: ar.vue_vue_type_script_setup_true_lang-29bvTqFI.js","assets/BattleUserVersusCards-5P9rbfKk.css","assets/Toggle-BGmlMstP.js","assets/Toggle-37q3wjeD.css","assets/Table-BxUMABSe.js","assets/Table-DubeuWcL.css","assets/CopyText-rdS06J-p.js","assets/CopyText-
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 75 79 2d 6f 72 64 65 72 73 2d 43 47 54 6a 39 43 58 71 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 5f 69 64 5f 2d 44 34 38 56 37 68 6d 53 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 69 63 6f 6e 2d 63 6c 6f 63 6b 2d 42 41 69 76 30 48 71 64 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 50 72 69 63 65 44 69 73 70 6c 61 79 2e 76 75 65 5f 76 75 65 5f 74 79 70 65 5f 73 63 72 69 70 74 5f 73 65 74 75 70 5f 74 72 75 65 5f 6c 61 6e 67 2d 44 2d 46 76 52 79 68 30 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 43 61 72 64 2d 43 4e 42 79 2d 4a 61 70 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 43 61 72 64 2d 43 62 57 48 68 41 38 50 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 5f 69 64 5f 2d 44 4a 34 75 61 41 41 52 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 63 72 79 70 74 6f 2d 59 75 57 2d 39 2d 73 63 Data Ascii: uy-orders-CGTj9CXq.css","assets/_id_-D48V7hmS.js","assets/icon-clock-BAiv0Hqd.js","assets/PriceDisplay.vue_vue_type_script_setup_true_lang-D-FvRyh0.js","assets/Card-CNBy-Jap.js","assets/Card-CbWHhA8P.css","assets/_id_-DJ4uaAAR.css","assets/crypto-YuW-9-sc
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 65 64 2d 44 37 47 4b 6c 74 5a 62 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 73 77 61 70 70 65 64 2d 44 30 59 42 53 48 4d 2d 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 63 61 73 68 2d 49 6b 50 57 31 31 7a 46 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 63 61 73 68 2d 42 41 76 39 42 34 37 61 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 6b 69 6e 67 75 69 6e 2d 42 59 4a 39 7a 72 64 79 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 6b 69 6e 67 75 69 6e 2d 56 43 79 6a 5a 6d 68 32 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 7a 65 6e 2d 43 2d 42 4b 7a 47 55 35 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 7a 65 6e 2d 42 53 64 77 6e 39 63 5f 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 63 72 79 70 74 6f 2d 43 35 2d 32 6a 4e 6d 4e 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 62 72 6f 77 73 65 72 2d 43 65 Data Ascii: ed-D7GKltZb.js","assets/swapped-D0YBSHM-.css","assets/cash-IkPW11zF.js","assets/cash-BAv9B47a.css","assets/kinguin-BYJ9zrdy.js","assets/kinguin-VCyjZmh2.css","assets/zen-C-BKzGU5.js","assets/zen-BSdwn9c_.css","assets/crypto-C5-2jNmN.js","assets/browser-Ce
2024-10-04 22:43:49 UTC	19	IN	Data Raw: 2c 22 61 73 73 65 74 73 2f 75 73 65 43 61 73 65 73 0d 0a Data Ascii: ,"assets/useCases
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 35 31 61 36 0d 0a 41 75 74 6f 53 63 72 6f 6c 6c 43 6f 6e 74 72 6f 6c 2d 44 75 33 76 4c 34 31 4f 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 62 61 74 74 6c 65 63 61 73 65 73 2d 44 38 55 56 72 42 35 67 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 42 61 74 74 6c 65 4c 69 73 74 45 6c 65 6d 65 6e 74 2d 43 55 51 63 74 64 59 77 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 63 72 65 61 74 65 2d 42 5a 6e 46 46 36 49 33 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 63 61 73 65 73 2d 44 68 66 53 7a 54 34 35 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 75 73 65 42 61 74 74 6c 65 53 65 6c 65 63 74 65 64 43 61 73 65 73 2d 42 66 37 70 69 6e 77 59 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 75 73 65 43 61 73 65 54 61 67 73 2d 43 52 56 78 54 4c 74 42 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 63 72 65 61 74 Data Ascii: 51a6AutoScrollControl-Du3vL41O.js","assets/battlecases-D8UVrB5g.js","assets/BattleListElement-CUQctdYw.css","assets/create-BZnFF6I3.js","assets/cases-DhfSzT45.js","assets/useBattleSelectedCases-Bf7pinwY.js","assets/useCaseTags-CRVxTLtB.js","assets/creat
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 79 70 65 3d 3d 3d 22 63 68 69 6c 64 4c 69 73 74 22 29 66 6f 72 28 63 6f 6e 73 74 20 6f 20 6f 66 20 61 2e 61 64 64 65 64 4e 6f 64 65 73 29 6f 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 4c 49 4e 4b 22 26 26 6f 2e 72 65 6c 3d 3d 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 26 26 69 28 6f 29 7d 29 2e 6f 62 73 65 72 76 65 28 64 6f 63 75 6d 65 6e 74 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 63 6f 6e 73 74 20 61 3d 7b 7d 3b 72 65 74 75 72 6e 20 72 2e 69 6e 74 65 67 72 69 74 79 26 26 28 61 2e 69 6e 74 65 67 72 69 74 79 3d 72 2e 69 6e 74 65 67 72 69 74 79 29 2c 72 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 26 26 28 61 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3d 72 2e 72 65 66 65 Data Ascii: ype==="childList")for(const o of a.addedNodes)o.tagName==="LINK"&&o.rel==="modulepreload"&&i(o)}).observe(document,{childList:!0,subtree:!0});function n(r){const a={};return r.integrity&&(a.integrity=r.integrity),r.referrerPolicy&&(a.referrerPolicy=r.refe
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 2c 73 49 3d 65 3d 3e 4b 6e 28 65 29 26 26 65 21 3d 3d 22 4e 61 4e 22 26 26 65 5b 30 5d 21 3d 3d 22 2d 22 26 26 22 22 2b 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 3d 3d 3d 65 2c 77 66 3d 72 49 28 22 2c 6b 65 79 2c 72 65 66 2c 72 65 66 5f 66 6f 72 2c 72 65 66 5f 6b 65 79 2c 6f 6e 56 6e 6f 64 65 42 65 66 6f 72 65 4d 6f 75 6e 74 2c 6f 6e 56 6e 6f 64 65 4d 6f 75 6e 74 65 64 2c 6f 6e 56 6e 6f 64 65 42 65 66 6f 72 65 55 70 64 61 74 65 2c 6f 6e 56 6e 6f 64 65 55 70 64 61 74 65 64 2c 6f 6e 56 6e 6f 64 65 42 65 66 6f 72 65 55 6e 6d 6f 75 6e 74 2c 6f 6e 56 6e 6f 64 65 55 6e 6d 6f 75 6e 74 65 64 22 29 2c 63 31 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 72 65 74 75 72 Data Ascii: object Object]",sI=e=>Kn(e)&&e!=="NaN"&&e[0]!=="-"&&""+parseInt(e,10)===e,wf=rI(",key,ref,ref_for,ref_key,onVnodeBeforeMount,onVnodeMounted,onVnodeBeforeUpdate,onVnodeUpdated,onVnodeBeforeUnmount,onVnodeUnmounted"),c1=e=>{const t=Object.create(null);retur

Timestamp	Bytes transferred	Direction	Data
2024-10-04 22:43:49 UTC	866	OUT	GET /icons/logo-preloader.svg HTTP/1.1 Host: csgoempire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csgoempire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: env_class=green; __cf_bm=EMkHtN_oxLyQZke0ARh1SZCy.qYxYQR9JxFvILsBoC0-1728081828-1.0.1.1-JzASQSRZLjLb8tgnbnGsTMDFxn1mZzexB78gTm4.VoXKAwiN_EmR9MwP3L8iZNvlLfFoHL3m1._FeHP2hBX5XQ; _cfuvid=A70PhkkGypgdkrtgYmAlfctrO..mL1or0FSx4Sd3HSQ-1728081828753-0.0.1.1-604800000
2024-10-04 22:43:49 UTC	1074	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 22:43:49 GMT Content-Type: image/svg+xml Content-Length: 4127 Connection: close CF-Ray: 8cd8b16a5d65c3ff-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 684227 Cache-Control: public, max-age=31536000 Expires: Sat, 04 Oct 2025 22:43:49 GMT Last-Modified: Tue, 17 Sep 2024 08:44:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding x-backend-server: csgoempire-site-frontend-green-58556d4d49-mxht7 x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin content-security-policy: upgrade-insecure-requests x-frame-options: DENY Cross-Origin-Embedder-Policy: credentialless Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Content-Security-Policy: upgrade-insecure-requests Content-Security-Policy: upgrade-insecure-requests Cross-Origin-Embedder-Policy: credentialless Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Server: cloudflare
2024-10-04 22:43:49 UTC	295	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 38 20 37 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 39 2c 37 37 2e 37 41 33 38 2e 37 2c 33 38 2e 37 2c 30 2c 31 2c 31 2c 37 38 2c 33 39 22 20 66 69 6c 6c 3d 22 23 33 36 33 33 33 32 22 2f 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 38 2c 33 39 41 33 38 2e 38 35 2c 33 38 2e 38 35 2c 30 2c 30 2c 31 2c 33 39 2c 37 37 2e 37 22 20 66 69 6c 6c 3d 22 23 33 36 33 33 33 32 22 2f 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 36 39 2e 39 31 2c 33 37 41 33 33 2e 32 37 2c 33 33 2e 32 37 2c 30 2c 31 2c 31 2c 33 36 2e 36 35 2c 34 2c 33 33 2e 31 34 2c 33 33 2e 31 34 2c 30 2c 30 2c 31 2c 36 39 2e 39 31 2c 33 Data Ascii: <svg viewBox="0 0 78 78" xmlns="http://www.w3.org/2000/svg"> <path d="M39,77.7A38.7,38.7,0,1,1,78,39" fill="#363332"/> <path d="M78,39A38.85,38.85,0,0,1,39,77.7" fill="#363332"/> <path d="M69.91,37A33.27,33.27,0,1,1,36.65,4,33.14,33.14,0,0,1,69.91,3
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 2e 38 33 41 32 39 2e 36 36 2c 32 39 2e 36 36 2c 30 2c 31 2c 31 2c 33 33 2c 35 2e 33 39 2c 32 39 2e 35 35 2c 32 39 2e 35 35 2c 30 2c 30 2c 31 2c 36 32 2e 37 2c 33 34 2e 38 33 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 39 2e 31 2c 32 33 2e 31 37 6c 39 2d 37 2e 34 32 61 35 2e 38 38 2c 35 2e 38 38 2c 30 2c 30 2c 31 2c 33 2e 37 32 2d 31 2e 33 33 48 33 33 2e 32 61 32 2c 32 2c 30 2c 30 2c 31 2c 31 2e 38 38 2c 31 2e 34 32 4c 33 39 2e 39 32 2c 33 33 2c 32 38 2c 34 32 2e 37 39 2c 31 36 2e 37 38 2c 34 30 2e 31 36 61 33 2e 39 32 2c 33 2e 39 32 2c 30 2c 30 2c 31 2d 32 2e 36 38 2d 32 2e 32 32 4c 38 2e 35 36 2c 32 35 2e 34 38 41 32 2c 32 2c 30 2c 30 2c 31 2c 39 2e 31 2c 32 33 2e 31 37 5a 22 20 66 69 6c 6c 3d 22 23 65 39 62 31 Data Ascii: .83A29.66,29.66,0,1,1,33,5.39,29.55,29.55,0,0,1,62.7,34.83Z" fill="#fff"/> <path d="M9.1,23.17l9-7.42a5.88,5.88,0,0,1,3.72-1.33H33.2a2,2,0,0,1,1.88,1.42L39.92,33,28,42.79,16.78,40.16a3.92,3.92,0,0,1-2.68-2.22L8.56,25.48A2,2,0,0,1,9.1,23.17Z" fill="#e9b1
2024-10-04 22:43:49 UTC	1369	IN	Data Raw: 2c 30 2c 30 2d 31 2c 32 43 33 30 2e 37 31 2c 32 39 2e 37 38 2c 33 31 2e 34 32 2c 33 30 2e 34 36 2c 33 32 2e 31 32 2c 33 30 2e 33 33 5a 6d 2d 34 2d 31 2e 34 39 61 31 2e 35 38 2c 31 2e 35 38 2c 30 2c 30 2c 30 2c 31 2d 31 2e 39 35 63 2d 2e 31 37 2d 31 2d 2e 38 38 2d 31 2e 36 34 2d 31 2e 35 38 2d 31 2e 35 31 61 31 2e 35 37 2c 31 2e 35 37 2c 30 2c 30 2c 30 2d 31 2c 31 2e 39 35 43 32 36 2e 37 36 2c 32 38 2e 32 39 2c 32 37 2e 34 36 2c 32 39 2c 32 38 2e 31 36 2c 32 38 2e 38 34 5a 6d 35 2e 32 35 2d 35 2e 32 38 61 31 2e 35 38 2c 31 2e 35 38 2c 30 2c 30 2c 30 2c 31 2d 32 63 2d 2e 31 37 2d 31 2d 2e 38 37 2d 31 2e 36 33 2d 31 2e 35 38 2d 31 2e 35 31 61 31 2e 35 38 2c 31 2e 35 38 2c 30 2c 30 2c 30 2d 31 2c 32 43 33 32 2c 32 33 2c 33 32 2e 37 2c 32 33 2e 36 39 2c 33 33 Data Ascii: ,0,0-1,2C30.71,29.78,31.42,30.46,32.12,30.33Zm-4-1.49a1.58,1.58,0,0,0,1-1.95c-.17-1-.88-1.64-1.58-1.51a1.57,1.57,0,0,0-1,1.95C26.76,28.29,27.46,29,28.16,28.84Zm5.25-5.28a1.58,1.58,0,0,0,1-2c-.17-1-.87-1.63-1.58-1.51a1.58,1.58,0,0,0-1,2C32,23,32.7,23.69,33
2024-10-04 22:43:49 UTC	1094	IN	Data Raw: 2c 32 2e 32 39 2d 2e 37 34 73 2d 2e 38 31 2d 31 2e 31 38 2d 32 2d 31 2e 33 34 2d 32 2e 32 2e 31 36 2d 32 2e 32 38 2e 37 34 53 33 31 2c 33 30 2e 34 38 2c 33 32 2e 31 39 2c 33 30 2e 36 35 5a 6d 38 2e 35 39 2d 2e 37 31 63 31 2e 31 38 2e 31 37 2c 32 2e 32 2d 2e 31 37 2c 32 2e 32 38 2d 2e 37 34 73 2d 2e 38 31 2d 31 2e 31 38 2d 32 2d 31 2e 33 35 2d 32 2e 32 2e 31 37 2d 32 2e 32 38 2e 37 35 53 33 39 2e 36 2c 32 39 2e 37 37 2c 34 30 2e 37 38 2c 32 39 2e 39 34 5a 4d 32 37 2e 34 33 2c 33 37 63 2e 37 33 2c 30 2c 31 2e 32 39 2d 2e 39 33 2c 31 2e 32 35 2d 32 53 32 38 2c 33 33 2c 32 37 2e 33 2c 33 33 2e 30 35 2c 32 36 2c 33 34 2c 32 36 2c 33 35 2e 30 37 2c 32 36 2e 37 2c 33 37 2c 32 37 2e 34 33 2c 33 37 5a 6d 36 2e 37 35 2c 35 2e 30 39 63 2e 37 33 2c 30 2c 31 2e 32 39 Data Ascii: ,2.29-.74s-.81-1.18-2-1.34-2.2.16-2.28.74S31,30.48,32.19,30.65Zm8.59-.71c1.18.17,2.2-.17,2.28-.74s-.81-1.18-2-1.35-2.2.17-2.28.75S39.6,29.77,40.78,29.94ZM27.43,37c.73,0,1.29-.93,1.25-2S28,33,27.3,33.05,26,34,26,35.07,26.7,37,27.43,37Zm6.75,5.09c.73,0,1.29

Timestamp	Bytes transferred	Direction	Data
2024-10-04 22:43:50 UTC	570	OUT	GET /apg-seal.js HTTP/1.1 Host: d86bd89c-f627-4e38-8144-b1c3c8b4745a.snippet.antillephone.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://csgoempire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 22:43:51 UTC	346	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Fri, 04 Oct 2024 22:43:51 GMT Content-Type: text/html Content-Length: 986 Connection: close X-Cache: Error from cloudfront Via: 1.1 5dbbe1c6db9a003131a63be8ded250a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: eRqpCOTvSs6cgwBYdILFtZLfbyHHVCLwnaDRQTrDYJs6BnJK3Z0x9A==
2024-10-04 22:43:51 UTC	986	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 3e 0a 3c 54 49 54 4c 45 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 61 74 69 73 66 69 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"><TITLE>ERROR: The request could not be satisfied</TITLE></HEAD><BO

Timestamp	Bytes transferred	Direction	Data
2024-10-04 22:43:51 UTC	616	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://csgoempire.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://csgoempire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 22:43:51 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 22:43:51 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cd8b1775e217271-EWR
2024-10-04 22:43:51 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-10-04 22:43:51 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-10-04 22:43:51 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-10-04 22:43:51 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-10-04 22:43:51 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-10-04 22:43:51 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-10-04 22:43:51 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-10-04 22:43:51 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-10-04 22:43:51 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-10-04 22:43:51 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Timestamp	Bytes transferred	Direction	Data
2024-10-04 22:43:51 UTC	526	OUT	GET /tag/nelww7xky5 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://csgoempire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 22:43:51 UTC	528	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 22:43:51 GMT Content-Type: application/x-javascript Content-Length: 662 Connection: close Cache-Control: no-cache, no-store Expires: -1 Set-Cookie: CLID=55e4867fb2734019bf639e465f390701.20241004.20251004; expires=Sat, 04 Oct 2025 22:43:51 GMT; path=/; secure; samesite=none; httponly Request-Context: appId=cid-v1:67bc0b23-8423-4b52-b1ca-6a87709ceaa2 x-azure-ref: 20241004T224351Z-15767c5fc55tsfp92w7yna557w0000000d5000000000ech9 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-10-04 22:43:51 UTC	662	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 6f 6a 65 63 74 49 64 29 3b 61 5b 63 5d 2e 74 3d 21 30 2c 28 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 29 2e Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.projectId);a[c].t=!0,(t=l.createElement(r)).

Timestamp	Bytes transferred	Direction	Data
2024-10-04 22:43:51 UTC	567	OUT	GET /xcm-seal.js HTTP/1.1 Host: e3622118-dcd7-471d-8344-b3bb7ed94be0.seals-xcm.certria.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://csgoempire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 22:43:52 UTC	574	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 3026 Connection: close Date: Fri, 04 Oct 2024 22:43:52 GMT x-powered-by: Express Cache-Control: max-age=300 ETag: W/"bd2-eDQUirhfoiMJeK3R21RX5kbyEMY" strict-transport-security: max-age=15724800; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cd8b1798fff91dd-FRA X-Cache: Miss from cloudfront Via: 1.1 eaedf92fd05c53aa96f20b6322b473e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: nJQgQfF3yoxTGU-oNQVsCPQEfrL8fBrfqMXWt4NrYtvr5xE00sHQiQ==
2024-10-04 22:43:52 UTC	3026	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 32 66 34 28 5f 30 78 33 38 63 37 63 62 2c 5f 30 78 33 31 36 63 63 62 29 7b 76 61 72 20 5f 30 78 31 37 30 63 33 63 3d 5f 30 78 31 37 30 63 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 33 32 66 34 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 32 66 34 38 35 2c 5f 30 78 33 64 66 39 31 61 29 7b 5f 30 78 33 32 66 34 38 35 3d 5f 30 78 33 32 66 34 38 35 2d 30 78 31 63 38 3b 76 61 72 20 5f 30 78 34 61 36 66 37 35 3d 5f 30 78 31 37 30 63 33 63 5b 5f 30 78 33 32 66 34 38 35 5d 3b 72 65 74 75 72 6e 20 5f 30 78 34 61 36 66 37 35 3b 7d 2c 5f 30 78 33 32 66 34 28 5f 30 78 33 38 63 37 63 62 2c 5f 30 78 33 31 36 63 63 62 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 65 36 64 61 30 37 2c 5f 30 78 34 33 Data Ascii: 'use strict';function _0x32f4(_0x38c7cb,_0x316ccb){var _0x170c3c=_0x170c();return _0x32f4=function(_0x32f485,_0x3df91a){_0x32f485=_0x32f485-0x1c8;var _0x4a6f75=_0x170c3c[_0x32f485];return _0x4a6f75;},_0x32f4(_0x38c7cb,_0x316ccb);}(function(_0xe6da07,_0x43

Timestamp	Bytes transferred	Direction	Data
2024-10-04 22:43:51 UTC	526	OUT	GET /js/v5/agent.js HTTP/1.1 Host: cdn.seondf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://csgoempire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 22:43:52 UTC	999	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 22:43:52 GMT Content-Type: application/javascript Content-Length: 576526 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 23 Sep 2024 09:46:52 GMT ETag: "fbadce07e23bfd7fd5a5c66b271d798a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=14400 x-amz-version-id: _21zlJQgwR7CoT1deAfaJl1BeD3zVkoQ X-Cache: Miss from cloudfront Via: 1.1 17da55c14108bb8cae904f764f67c0e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-P1 X-Amz-Cf-Id: g3mvvnLwvbuWa1FwLfIwX5ibk9poQ3GrcVEvuSFpUrBluOwewp_W3w== CF-Cache-Status: HIT Age: 2318 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L0yXZ%2BuMkifz%2BFEiThyviszdwMjjwruKjnIByu%2BEfM3uABfoeY%2BaszZrWufk34E66Xyvavsie5AN5ZHGUx1BJrhVIyHzyOsG4yUCIM3m6ilbZMsx3mDFmRsyIMAoEdWr8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd8b17a5e2a41ba-EWR
2024-10-04 22:43:52 UTC	370	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 30 5f 30 78 33 32 38 37 28 29 7b 76 61 72 20 72 3d 5b 22 44 67 66 4e 22 2c 22 76 66 6a 6a 71 75 35 68 74 65 76 46 75 31 72 73 73 76 61 22 2c 22 75 67 76 59 7a 4d 39 59 42 77 66 55 79 32 76 6f 79 78 7a 50 7a 32 66 30 41 77 39 55 76 67 4c 54 41 77 35 4e 22 2c 22 7a 4d 39 55 44 66 39 53 41 78 6e 30 78 32 31 50 42 4d 4c 4d 41 77 76 4b 22 2c 22 78 32 31 48 42 67 58 56 79 57 22 2c 22 6c 4d 39 57 7a 77 34 55 43 68 76 5a 41 65 31 56 7a 67 66 53 22 2c 22 71 4d 66 4a 41 33 66 31 42 33 72 4c 22 2c 22 42 67 4c 5a 44 67 76 67 43 47 22 2c 22 44 32 76 49 7a 32 57 47 7a 67 76 57 44 67 47 47 79 4d 4c 30 43 5a 4f 22 2c 22 79 32 66 55 44 4d 66 5a 69 67 7a 57 6f 47 22 2c 22 75 31 7a 68 72 77 58 4c 42 77 76 55 44 61 22 2c 22 75 4d 76 5a 43 67 39 Data Ascii: function a0_0x3287(){var r=["DgfN","vfjjqu5htevFu1rssva","ugvYzM9YBwfUy2voyxzPz2f0Aw9UvgLTAw5N","zM9UDf9SAxn0x21PBMLMAwvK","x21HBgXVyW","lM9Wzw4UChvZAe1VzgfS","qMfJA3f1B3rL","BgLZDgvgCG","D2vIz2WGzgvWDgGGyML0CZO","y2fUDMfZigzWoG","u1zhrwXLBwvUDa","uMvZCg9
2024-10-04 22:43:52 UTC	1369	IN	Data Raw: 4d 58 48 43 32 47 22 2c 22 74 78 6a 5a 69 65 76 48 44 4d 76 5a 22 2c 22 75 31 7a 68 76 67 4c 30 42 67 76 66 42 67 76 54 7a 77 35 30 22 2c 22 75 68 76 5a 41 65 31 48 42 4d 66 4e 7a 78 69 22 2c 22 41 74 6d 59 22 2c 22 42 33 62 4c 42 4b 72 48 44 67 66 49 79 78 6e 4c 22 2c 22 43 32 76 55 44 61 22 2c 22 72 67 76 32 41 77 6e 4c 74 67 4c 4e 41 68 72 66 44 4d 76 55 44 61 22 2c 22 79 32 66 53 42 66 6e 4c 42 67 76 55 41 78 76 54 22 2c 22 74 4d 76 33 43 59 62 68 42 33 72 4f 41 77 6e 6e 76 61 22 2c 22 73 66 72 6e 74 65 72 4c 44 67 66 50 42 68 6e 66 42 67 76 54 7a 77 35 30 22 2c 22 79 4d 66 4a 41 32 44 59 42 33 76 55 7a 63 31 4a 42 32 58 56 43 47 22 2c 22 75 31 7a 68 76 4b 54 4c 43 4d 35 66 42 67 76 54 7a 77 35 30 22 2c 22 75 32 6e 59 7a 77 76 55 72 67 76 30 79 77 4c Data Ascii: MXHC2G","txjZievHDMvZ","u1zhvgL0BgvfBgvTzw50","uhvZAe1HBMfNzxi","AtmY","B3bLBKrHDgfIyxnL","C2vUDa","rgv2AwnLtgLNAhrfDMvUDa","y2fSBfnLBgvUAxvT","tMv3CYbhB3rOAwnnva","sfrnterLDgfPBhnfBgvTzw50","yMfJA2DYB3vUzc1JB2XVCG","u1zhvKTLCM5fBgvTzw50","u2nYzwvUrgv0ywL
2024-10-04 22:43:52 UTC	1369	IN	Data Raw: 76 59 43 57 22 2c 22 43 67 76 59 7a 4d 39 59 42 77 66 55 79 32 75 22 2c 22 75 32 76 4a 44 78 6a 50 44 68 4c 71 42 32 58 50 79 33 4c 77 41 77 39 53 79 78 72 50 42 32 35 66 44 4d 76 55 44 61 22 2c 22 75 4c 72 64 71 32 76 59 44 67 4c 4d 41 77 6e 48 44 67 75 22 2c 22 77 65 31 6d 73 68 72 30 43 66 6a 4c 43 78 76 4c 43 33 71 22 2c 22 43 67 4c 34 7a 77 58 73 79 78 72 50 42 57 22 2c 22 69 32 66 4b 79 4d 39 4b 45 71 22 2c 22 77 4e 76 59 41 77 6e 4f 69 65 6a 53 41 30 76 34 69 65 6a 75 22 2c 22 76 4d 58 48 7a 67 4c 54 41 78 69 47 75 32 6e 59 41 78 62 30 22 2c 22 73 32 76 35 79 4d 39 48 43 4d 72 66 44 4d 76 55 44 61 22 2c 22 43 32 4c 36 7a 71 22 2c 22 75 31 7a 68 71 77 35 50 42 77 66 30 7a 75 76 53 7a 77 31 4c 42 4e 71 22 2c 22 72 4d 4c 53 7a 75 76 34 79 32 76 57 44 Data Ascii: vYCW","CgvYzM9YBwfUy2u","u2vJDxjPDhLqB2XPy3LwAw9SyxrPB25fDMvUDa","uLrdq2vYDgLMAwnHDgu","we1mshr0CfjLCxvLC3q","CgL4zwXsyxrPBW","i2fKyM9KEq","wNvYAwnOiejSA0v4ieju","vMXHzgLTAxiGu2nYAxb0","s2v5yM9HCMrfDMvUDa","C2L6zq","u1zhqw5PBwf0zuvSzw1LBNq","rMLSzuv4y2vWD
2024-10-04 22:43:52 UTC	1369	IN	Data Raw: 4d 76 6e 79 77 35 48 7a 32 76 59 22 2c 22 6c 4e 62 56 43 68 76 57 6c 78 6e 56 79 32 4c 48 42 61 22 2c 22 41 77 31 4e 22 2c 22 79 32 39 54 6c 4e 6e 56 44 77 35 4b 79 32 58 56 44 77 71 55 76 67 39 31 79 32 48 62 43 68 61 22 2c 22 43 4e 76 55 44 67 4c 54 7a 71 22 2c 22 69 33 72 48 79 4d 39 56 42 67 65 54 79 4d 76 53 42 33 43 54 79 78 6a 30 41 77 6e 53 7a 71 22 2c 22 75 33 72 56 43 4e 4c 49 42 32 39 52 22 2c 22 6c 49 62 63 44 77 4c 53 7a 63 62 33 41 78 72 4f 69 63 31 5a 71 76 6e 74 72 76 6a 75 73 75 39 6f 75 59 62 4d 42 33 69 47 42 77 39 59 7a 73 62 50 42 4d 7a 56 6c 47 22 2c 22 76 65 31 71 78 30 72 6a 75 4c 39 64 75 4b 76 62 76 65 4c 70 74 4c 39 67 71 75 4c 6d 76 76 6a 66 22 2c 22 76 4d 4c 4b 7a 77 39 65 7a 77 6e 56 7a 67 76 59 22 2c 22 44 67 76 34 44 63 31 Data Ascii: Mvnyw5Hz2vY","lNbVChvWlxnVy2LHBa","Aw1N","y29TlNnVDw5Ky2XVDwqUvg91y2HbCha","CNvUDgLTzq","i3rHyM9VBgeTyMvSB3CTyxj0AwnSzq","u3rVCNLIB29R","lIbcDwLSzcb3AxrOic1Zqvntrvjusu9ouYbMB3iGBw9YzsbPBMzVlG","ve1qx0rjuL9duKvbveLptL9gquLmvvjf","vMLKzw9ezwnVzgvY","Dgv4Dc1
2024-10-04 22:43:52 UTC	1369	IN	Data Raw: 30 43 68 6d 36 6c 59 39 48 43 68 61 55 43 4d 76 48 7a 68 62 4c 79 77 53 55 79 32 39 54 6c 32 66 4b 43 59 6a 44 22 2c 22 79 78 76 4b 41 77 39 46 7a 4d 4c 55 7a 32 76 59 43 68 6a 50 42 4e 71 22 2c 22 76 4b 76 6f 72 65 39 73 22 2c 22 79 77 6e 30 44 77 66 53 71 4d 39 31 42 4d 72 50 42 4d 44 63 42 33 48 73 41 77 44 4f 44 61 22 2c 22 44 32 76 49 7a 32 57 47 42 77 66 34 69 67 7a 59 79 77 44 54 7a 77 35 30 69 68 76 55 41 77 7a 56 43 4d 30 47 44 4d 76 4a 44 67 39 59 43 5a 4f 22 2c 22 42 78 6e 65 42 30 35 56 44 66 72 59 79 77 6e 52 22 2c 22 79 78 76 4b 41 77 38 56 45 63 31 57 42 49 31 59 7a 77 66 53 79 78 76 4b 41 77 38 22 2c 22 77 4d 66 57 7a 49 62 65 41 77 35 4e 79 4d 66 30 43 57 22 2c 22 63 49 61 47 69 63 61 47 69 63 61 47 69 63 61 47 69 63 61 47 69 63 62 64 75 Data Ascii: 0Chm6lY9HChaUCMvHzhbLywSUy29Tl2fKCYjD","yxvKAw9FzMLUz2vYChjPBNq","vKvore9s","ywn0DwfSqM91BMrPBMDcB3HsAwDODa","D2vIz2WGBwf4igzYywDTzw50ihvUAwzVCM0GDMvJDg9YCZO","BxneB05VDfrYywnR","yxvKAw8VEc1WBI1YzwfSyxvKAw8","wMfWzIbeAw5NyMf0CW","cIaGicaGicaGicaGicaGicbdu
2024-10-04 22:43:52 UTC	1369	IN	Data Raw: 58 6e 5a 4b 50 22 2c 22 72 78 4c 4c 72 68 6a 56 43 68 62 4c 43 47 22 2c 22 72 32 76 56 75 32 58 48 79 49 61 33 6d 64 6d 47 77 65 6a 4b 69 65 6a 75 22 2c 22 43 33 72 48 44 68 76 5a 22 2c 22 41 78 6e 6e 42 32 6a 50 42 67 75 22 2c 22 7a 4d 66 55 79 4d 39 35 71 77 35 30 41 75 7a 48 79 32 76 49 42 32 39 52 22 2c 22 44 67 66 50 42 4e 72 4c 7a 63 62 49 45 73 62 4a 43 4d 39 5a 43 59 31 56 43 4d 4c 4e 41 77 34 47 7a 67 66 30 79 71 22 2c 22 73 65 4c 65 22 2c 22 76 68 6a 4c 79 4e 76 4a 41 67 76 30 69 65 31 74 69 65 6a 56 42 67 71 22 2c 22 76 32 4c 55 7a 67 39 33 43 57 22 2c 22 79 32 39 54 6c 4d 39 31 44 67 7a 50 44 64 43 55 42 78 4c 30 79 77 58 52 41 77 35 4e 44 67 39 54 7a 4e 6a 50 7a 77 35 4b 43 57 22 2c 22 41 77 35 4a 42 32 35 4e 42 4d 4c 30 42 57 22 2c 22 42 67 Data Ascii: XnZKP","rxLLrhjVChbLCG","r2vVu2XHyIa3mdmGwejKieju","C3rHDhvZ","AxnnB2jPBgu","zMfUyM95qw50AuzHy2vIB29R","DgfPBNrLzcbIEsbJCM9ZCY1VCMLNAw4Gzgf0yq","seLe","vhjLyNvJAgv0ie1tiejVBgq","v2LUzg93CW","y29TlM91DgzPDdCUBxL0ywXRAw5NDg9TzNjPzw5KCW","Aw5JB25NBML0BW","Bg
2024-10-04 22:43:52 UTC	1369	IN	Data Raw: 30 41 77 39 55 22 2c 22 72 77 35 4e 42 67 4c 5a 41 63 61 58 6d 74 65 47 76 4d 4c 32 79 77 6e 4c 69 65 6a 75 22 2c 22 44 67 39 65 79 78 72 48 76 76 6a 6d 22 2c 22 79 78 76 4b 41 77 38 56 45 63 31 54 41 77 72 50 22 2c 22 44 77 66 4b 79 78 72 48 78 32 66 59 79 32 48 50 44 67 76 4a 44 68 76 59 7a 71 22 2c 22 76 68 76 55 7a 32 65 22 2c 22 72 4e 6a 4c 7a 77 7a 59 42 74 43 59 6d 73 62 63 42 67 53 47 71 4c 71 22 2c 22 79 32 39 55 44 67 76 55 44 63 31 30 45 78 62 4c 22 2c 22 74 67 66 30 41 67 65 22 2c 22 75 31 7a 68 75 67 39 50 42 4e 71 22 2c 22 6d 74 72 57 45 63 61 4e 71 78 6a 50 79 77 57 4e 22 2c 22 73 67 4c 59 79 77 44 50 42 4d 38 47 74 77 4c 55 79 32 48 56 69 66 62 59 42 30 34 22 2c 22 7a 4d 39 55 44 64 4f 47 22 2c 22 79 4e 69 55 7a 32 39 32 6c 4d 31 4c 44 77 Data Ascii: 0Aw9U","rw5NBgLZAcaXmteGvML2ywnLieju","Dg9eyxrHvvjm","yxvKAw8VEc1TAwrP","DwfKyxrHx2fYy2HPDgvJDhvYzq","vhvUz2e","rNjLzwzYBtCYmsbcBgSGqLq","y29UDgvUDc10ExbL","tgf0Age","u1zhug9PBNq","mtrWEcaNqxjPywWN","sgLYywDPBM8GtwLUy2HVifbYB04","zM9UDdOG","yNiUz292lM1LDw
2024-10-04 22:43:52 UTC	1369	IN	Data Raw: 74 76 6d 47 75 32 66 55 43 59 62 74 7a 78 6a 50 7a 47 22 2c 22 71 31 6e 74 75 67 76 59 43 33 62 4c 79 33 72 50 44 4d 75 22 2c 22 79 78 76 4b 41 77 38 56 79 4d 66 5a 41 77 6d 22 2c 22 75 31 44 64 44 67 57 55 75 31 44 64 44 67 57 22 2c 22 71 32 48 4c 42 68 72 4f 42 75 4c 75 71 59 62 63 41 59 62 63 76 61 22 2c 22 76 67 76 34 44 65 7a 56 43 4d 31 48 44 61 22 2c 22 79 32 39 55 44 67 76 55 44 65 72 56 79 33 76 54 7a 77 35 30 22 2c 22 6d 74 4b 34 6c 4a 75 58 6c 4a 65 57 6d 63 34 57 6c 5a 69 30 22 2c 22 74 68 76 4a 41 77 72 48 69 65 6a 59 41 77 44 4f 44 61 22 2c 22 72 33 76 53 41 77 31 64 41 67 75 22 2c 22 43 33 76 49 43 33 72 59 22 2c 22 74 75 66 79 78 31 7a 66 75 4c 72 66 77 66 39 75 72 76 48 75 76 76 6a 66 78 30 4c 6e 71 75 44 66 78 31 76 6f 73 76 72 74 22 2c Data Ascii: tvmGu2fUCYbtzxjPzG","q1ntugvYC3bLy3rPDMu","yxvKAw8VyMfZAwm","u1DdDgWUu1DdDgW","q2HLBhrOBuLuqYbcAYbcva","vgv4DezVCM1HDa","y29UDgvUDerVy3vTzw50","mtK4lJuXlJeWmc4WlZi0","thvJAwrHiejYAwDODa","r3vSAw1dAgu","C3vIC3rY","tufyx1zfuLrfwf9urvHuvvjfx0LnquDfx1vosvrt",
2024-10-04 22:43:52 UTC	1369	IN	Data Raw: 44 77 72 50 42 31 6e 56 44 78 6a 4a 7a 75 35 56 7a 67 75 22 2c 22 74 4b 72 66 72 4b 31 4c 43 33 6e 48 7a 32 75 22 2c 22 77 66 6a 67 43 4d 66 54 7a 71 22 2c 22 6c 4d 31 48 41 77 35 56 43 33 72 50 42 67 65 22 2c 22 79 5a 79 34 6e 4d 6d 34 6e 64 79 34 6d 64 69 32 22 2c 22 79 78 62 57 42 67 4c 4a 79 78 72 50 42 32 34 56 44 4d 35 4b 6c 4d 66 57 43 67 58 4c 6c 4d 31 57 7a 77 44 31 43 4d 57 22 2c 22 46 4e 35 2b 22 2c 22 79 32 39 54 6c 4e 44 4c 41 4d 39 35 6c 4e 44 4c 43 67 58 48 45 71 22 2c 22 76 68 4c 57 7a 75 76 59 43 4d 39 59 22 2c 22 72 31 62 76 71 77 72 48 43 68 72 4c 43 4b 4c 55 7a 4d 38 22 2c 22 71 32 39 31 43 4d 4c 4c 43 47 22 2c 22 76 68 6a 48 41 4d 66 55 22 2c 22 79 32 39 54 6c 4d 44 59 79 77 6a 30 79 78 48 50 6c 4d 4c 57 41 67 39 55 7a 71 22 2c 22 41 Data Ascii: DwrPB1nVDxjJzu5Vzgu","tKrfrK1LC3nHz2u","wfjgCMfTzq","lM1HAw5VC3rPBge","yZy4nMm4ndy4mdi2","yxbWBgLJyxrPB24VDM5KlMfWCgXLlM1WzwD1CMW","FN5+","y29TlNDLAM95lNDLCgXHEq","vhLWzuvYCM9Y","r1bvqwrHChrLCKLUzM8","q291CMLLCG","vhjHAMfU","y29TlMDYywj0yxHPlMLWAg9Uzq","A
2024-10-04 22:43:52 UTC	1369	IN	Data Raw: 48 30 6c 77 66 55 7a 63 31 53 7a 77 7a 30 6c 78 6e 57 42 32 35 5a 7a 78 6a 5a 22 2c 22 72 67 76 51 79 76 7a 31 69 66 6e 4c 43 4d 4c 4d 22 2c 22 76 32 76 49 72 30 58 75 41 77 31 4c 43 4c 66 31 7a 78 6a 35 72 76 48 75 22 2c 22 71 31 6e 74 74 77 39 36 72 67 39 4a 44 77 31 4c 42 4e 72 73 44 77 58 4c 22 2c 22 76 32 76 49 73 32 4c 30 75 32 39 31 43 4d 6e 4c 71 4e 76 4d 7a 4d 76 59 22 2c 22 74 77 66 30 41 65 31 6d 72 77 58 4c 42 77 76 55 44 61 22 2c 22 71 32 66 53 41 78 6e 30 42 59 62 6e 76 61 22 2c 22 44 32 66 5a 42 75 31 4c 42 77 39 59 45 71 22 2c 22 71 4d 76 59 42 4d 48 48 43 4d 72 67 79 78 6e 4f 41 77 39 55 69 65 6a 75 22 2c 22 43 32 66 54 43 67 58 4c 75 4d 66 30 7a 71 22 2c 22 6c 4d 6e 4a 6e 74 69 33 6f 66 39 49 79 77 35 55 7a 78 6a 46 79 77 71 22 2c 22 6d Data Ascii: H0lwfUzc1Szwz0lxnWB25ZzxjZ","rgvQyvz1ifnLCMLM","v2vIr0XuAw1LCLf1zxj5rvHu","q1nttw96rg9JDw1LBNrsDwXL","v2vIs2L0u291CMnLqNvMzMvY","twf0Ae1mrwXLBwvUDa","q2fSAxn0BYbnva","D2fZBu1LBw9YEq","qMvYBMHHCMrgyxnOAw9Uieju","C2fTCgXLuMf0zq","lMnJnti3of9Iyw5UzxjFywq","m

Timestamp	Bytes transferred	Direction	Data
2024-10-04 22:43:52 UTC	596	OUT	GET /s/0.7.47/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://csgoempire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=55e4867fb2734019bf639e465f390701.20241004.20251004
2024-10-04 22:43:52 UTC	619	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 22:43:52 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 65577 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 04 Oct 2024 00:54:49 GMT ETag: "0x8DCE40F260567A1" x-ms-request-id: f46a6ca5-e01e-0003-6288-16cfbf000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20241004T224352Z-15767c5fc55fdfx81a30vtr1fw0000000dhg000000006pbm Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 51562430 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 22:43:52 UTC	15765	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 37 2e 34 37 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 73 72 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 63 72 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 6c 72 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 61 72 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f Data Ascii: /* clarity-js v0.7.47: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__pro
2024-10-04 22:43:52 UTC	16384	IN	Data Raw: 76 69 6f 75 73 3a 63 2c 63 68 69 6c 64 72 65 6e 3a 5b 5d 2c 64 61 74 61 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 6e 75 6c 6c 2c 68 61 73 68 3a 6e 75 6c 6c 2c 72 65 67 69 6f 6e 3a 6c 2c 6d 65 74 61 64 61 74 61 3a 7b 61 63 74 69 76 65 3a 21 30 2c 73 75 73 70 65 6e 64 3a 21 31 2c 70 72 69 76 61 63 79 3a 66 2c 70 6f 73 69 74 69 6f 6e 3a 6e 75 6c 6c 2c 66 72 61 75 64 3a 64 2c 73 69 7a 65 3a 6e 75 6c 6c 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 3d 65 2e 64 61 74 61 2c 72 3d 65 2e 6d 65 74 61 64 61 74 61 2c 69 3d 72 2e 70 72 69 76 61 63 79 2c 6f 3d 61 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 7b 7d 2c 75 3d 61 2e 74 61 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 73 77 69 74 63 68 28 21 30 29 7b 63 61 73 65 20 50 74 2e 69 6e 64 65 78 4f Data Ascii: vious:c,children:[],data:n,selector:null,hash:null,region:l,metadata:{active:!0,suspend:!1,privacy:f,position:null,fraud:d,size:null}},function(t,e,n){var a=e.data,r=e.metadata,i=r.privacy,o=a.attributes\|\|{},u=a.tag.toUpperCase();switch(!0){case Pt.indexO
2024-10-04 22:43:52 UTC	16384	IN	Data Raw: 72 72 65 6e 63 79 29 2c 47 72 28 31 32 2c 74 2e 73 6b 75 29 2c 57 28 31 33 2c 5a 6e 28 74 2e 70 72 69 63 65 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 62 72 61 6e 64 22 3a 47 72 28 36 2c 74 2e 6e 61 6d 65 29 7d 6e 75 6c 6c 21 3d 3d 72 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 4b 6e 28 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 5a 6e 28 74 2c 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 31 29 2c 6e 75 6c 6c 21 3d 3d 74 29 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 74 29 7b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 74 2a 65 29 3b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 70 61 72 73 65 46 6c 6f 61 74 28 74 2e 72 65 70 6c Data Ascii: rrency),Gr(12,t.sku),W(13,Zn(t.price));break;case"brand":Gr(6,t.name)}null!==r&&"object"==typeof r&&Kn(r)}}function Zn(t,e){if(void 0===e&&(e=1),null!==t)switch(typeof t){case"number":return Math.round(t*e);case"string":return Math.round(parseFloat(t.repl
2024-10-04 22:43:53 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6b 72 28 74 2c 65 2c 6e 2c 61 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 2c 76 6f 69 64 20 30 3d 3d 3d 61 26 26 28 61 3d 6e 75 6c 6c 29 2c 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 6e 75 6c 6c 29 3b 76 61 72 20 69 3d 6e 3f 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 7c 22 29 2e 63 6f 6e 63 61 74 28 61 29 3a 22 22 3b 74 20 69 6e 20 77 72 26 26 77 72 5b 74 5d 2e 69 6e 64 65 78 4f 66 28 69 29 3e 3d 30 7c 7c 28 62 72 3d 7b 63 6f 64 65 3a 74 2c 6e 61 6d 65 3a 6e 2c 6d 65 73 73 61 67 65 3a 61 2c 73 74 61 63 6b 3a 72 2c 73 65 76 65 72 69 74 79 3a 65 7d 2c 74 20 69 6e 20 77 72 3f 77 72 5b 74 5d 2e 70 75 73 68 28 69 29 3a 77 72 5b 74 5d 3d 5b 69 5d 2c 79 72 28 33 33 29 29 7d 76 61 72 20 53 72 2c 45 72 3d 7b 7d Data Ascii: function kr(t,e,n,a,r){void 0===n&&(n=null),void 0===a&&(a=null),void 0===r&&(r=null);var i=n?"".concat(n,"\|").concat(a):"";t in wr&&wr[t].indexOf(i)>=0\|\|(br={code:t,name:n,message:a,stack:r,severity:e},t in wr?wr[t].push(i):wr[t]=[i],yr(33))}var Sr,Er={}
2024-10-04 22:43:53 UTC	660	IN	Data Raw: 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 63 6f 6e 73 65 6e 74 3a 6f 69 2c 65 76 65 6e 74 3a 41 2c 68 61 73 68 54 65 78 74 3a 24 74 2c 69 64 65 6e 74 69 66 79 3a 75 74 2c 6d 65 74 61 64 61 74 61 3a 72 69 2c 70 61 75 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 50 69 28 29 26 26 28 41 28 22 63 6c 61 72 69 74 79 22 2c 22 70 61 75 73 65 22 29 2c 6e 75 6c 6c 3d 3d 3d 68 65 26 26 28 68 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 70 65 3d 74 7d 29 29 29 29 7d 2c 72 65 73 75 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 50 69 28 29 26 26 28 68 65 26 26 28 70 65 28 29 2c 68 65 3d 6e 75 6c 6c 2c 6e 75 6c 6c 3d 3d 3d 66 65 26 26 6d 65 28 29 29 2c 41 28 22 63 6c 61 72 69 74 79 22 2c 22 72 65 73 75 6d 65 22 29 29 7d 2c 73 65 74 3a 6f Data Ascii: __proto__:null,consent:oi,event:A,hashText:$t,identify:ut,metadata:ri,pause:function(){Pi()&&(A("clarity","pause"),null===he&&(he=new Promise((function(t){pe=t}))))},resume:function(){Pi()&&(he&&(pe(),he=null,null===fe&&me()),A("clarity","resume"))},set:o

Timestamp	Bytes transferred	Direction	Data
2024-10-04 22:43:52 UTC	909	OUT	GET /api/v2/metadata HTTP/1.1 Host: csgoempire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / x-empire-device-identifier: 698c9ecf-1cfe-4d5c-8bcb-6bd7e2d3797f x-env-class: green sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://csgoempire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=EMkHtN_oxLyQZke0ARh1SZCy.qYxYQR9JxFvILsBoC0-1728081828-1.0.1.1-JzASQSRZLjLb8tgnbnGsTMDFxn1mZzexB78gTm4.VoXKAwiN_EmR9MwP3L8iZNvlLfFoHL3m1._FeHP2hBX5XQ; _cfuvid=A70PhkkGypgdkrtgYmAlfctrO..mL1or0FSx4Sd3HSQ-1728081828753-0.0.1.1-604800000; env_class=green
2024-10-04 22:43:53 UTC	644	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 22:43:53 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding Cache-Control: no-cache, private, no-store x-env-class: green set-cookie: csgoempire=yMUdzRqmrBYQXmySYFTctibpTYritlCrWaY9Q9Vs; path=/; secure; httponly; samesite=lax x-backend-server: csgoempire-backend-green-84c4d9646c-426sn CF-Cache-Status: DYNAMIC Content-Security-Policy: upgrade-insecure-requests Cross-Origin-Embedder-Policy: credentialless Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Server: cloudflare CF-RAY: 8cd8b17f1cee8c4b-EWR
2024-10-04 22:43:53 UTC	725	IN	Data Raw: 32 39 66 65 0d 0a 7b 22 73 65 72 76 69 63 65 22 3a 22 63 73 67 6f 65 6d 70 69 72 65 22 2c 22 73 65 72 76 69 63 65 5f 64 6f 6d 61 69 6e 73 22 3a 5b 22 63 73 67 6f 65 6d 70 69 72 65 2e 63 6f 6d 22 2c 22 63 73 67 6f 65 6d 70 69 72 65 2e 67 67 22 2c 22 63 73 67 6f 65 6d 70 69 72 65 2e 74 76 22 2c 22 63 73 67 6f 65 6d 70 69 72 65 74 72 2e 63 6f 6d 22 2c 22 63 73 67 6f 65 6d 70 69 72 65 38 38 2e 63 6f 6d 22 2c 22 63 73 67 6f 65 6d 70 69 72 65 2e 63 61 6d 22 2c 22 63 73 67 6f 65 6d 70 69 72 65 76 32 2e 63 6f 6d 22 2c 22 63 73 67 6f 65 6d 70 69 72 65 2e 69 6f 22 2c 22 63 73 67 6f 65 6d 70 69 72 65 2e 69 6e 66 6f 22 2c 22 63 73 67 6f 65 6d 70 69 72 65 2e 76 69 70 22 2c 22 63 73 67 6f 65 6d 70 69 72 65 2e 66 75 6e 22 2c 22 63 73 67 6f 65 6d 70 69 72 65 2e 62 69 7a Data Ascii: 29fe{"service":"csgoempire","service_domains":["csgoempire.com","csgoempire.gg","csgoempire.tv","csgoempiretr.com","csgoempire88.com","csgoempire.cam","csgoempirev2.com","csgoempire.io","csgoempire.info","csgoempire.vip","csgoempire.fun","csgoempire.biz
2024-10-04 22:43:53 UTC	1369	IN	Data Raw: 2c 22 6d 69 6e 5f 64 65 70 6f 73 69 74 5f 74 6f 5f 63 68 61 74 22 3a 31 2c 22 69 6d 67 22 3a 6e 75 6c 6c 2c 22 6e 61 6d 65 22 3a 22 54 72 61 64 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 5f 61 63 74 69 76 65 22 3a 31 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 36 2d 31 31 54 30 39 3a 31 34 3a 32 30 2e 30 30 30 30 30 30 5a 22 2c 22 75 70 64 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 36 2d 31 31 54 30 39 3a 31 34 3a 32 30 2e 30 30 30 30 30 30 5a 22 7d 2c 7b 22 69 64 22 3a 32 32 2c 22 68 61 73 68 22 3a 22 30 22 2c 22 74 79 70 65 22 3a 22 67 6c 6f 62 61 6c 22 2c 22 65 78 70 69 72 65 73 5f 61 74 22 3a 6e 75 6c 6c 2c 22 6d 69 6e 5f 62 65 74 5f 74 6f 5f 63 68 61 74 22 3a 35 30 2c 22 6d 69 6e 5f 64 65 70 6f 73 69 Data Ascii: ,"min_deposit_to_chat":1,"img":null,"name":"Trading","country":null,"is_active":1,"created_at":"2024-06-11T09:14:20.000000Z","updated_at":"2024-06-11T09:14:20.000000Z"},{"id":22,"hash":"0","type":"global","expires_at":null,"min_bet_to_chat":50,"min_deposi
2024-10-04 22:43:53 UTC	1369	IN	Data Raw: 32 30 32 34 2d 30 36 2d 31 31 54 30 39 3a 31 34 3a 32 30 2e 30 30 30 30 30 30 5a 22 2c 22 75 70 64 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 36 2d 31 31 54 30 39 3a 31 34 3a 32 30 2e 30 30 30 30 30 30 5a 22 7d 2c 7b 22 69 64 22 3a 32 37 2c 22 68 61 73 68 22 3a 22 36 22 2c 22 74 79 70 65 22 3a 22 67 6c 6f 62 61 6c 22 2c 22 65 78 70 69 72 65 73 5f 61 74 22 3a 6e 75 6c 6c 2c 22 6d 69 6e 5f 62 65 74 5f 74 6f 5f 63 68 61 74 22 3a 31 30 30 2c 22 6d 69 6e 5f 64 65 70 6f 73 69 74 5f 74 6f 5f 63 68 61 74 22 3a 31 2c 22 69 6d 67 22 3a 22 52 75 73 73 69 61 2e 70 6e 67 22 2c 22 6e 61 6d 65 22 3a 22 52 75 73 73 69 61 6e 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 52 55 22 2c 22 69 73 5f 61 63 74 69 76 65 22 3a 31 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 Data Ascii: 2024-06-11T09:14:20.000000Z","updated_at":"2024-06-11T09:14:20.000000Z"},{"id":27,"hash":"6","type":"global","expires_at":null,"min_bet_to_chat":100,"min_deposit_to_chat":1,"img":"Russia.png","name":"Russian","country":"RU","is_active":1,"created_at":"202
2024-10-04 22:43:53 UTC	1369	IN	Data Raw: 22 67 6c 6f 62 61 6c 22 2c 22 65 78 70 69 72 65 73 5f 61 74 22 3a 6e 75 6c 6c 2c 22 6d 69 6e 5f 62 65 74 5f 74 6f 5f 63 68 61 74 22 3a 31 30 30 2c 22 6d 69 6e 5f 64 65 70 6f 73 69 74 5f 74 6f 5f 63 68 61 74 22 3a 31 2c 22 69 6d 67 22 3a 22 56 69 65 74 6e 61 6d 2e 70 6e 67 22 2c 22 6e 61 6d 65 22 3a 22 56 69 65 74 6e 61 6d 65 73 65 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 56 4e 22 2c 22 69 73 5f 61 63 74 69 76 65 22 3a 31 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 36 2d 31 31 54 30 39 3a 31 34 3a 32 30 2e 30 30 30 30 30 30 5a 22 2c 22 75 70 64 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 36 2d 31 31 54 30 39 3a 31 34 3a 32 30 2e 30 30 30 30 30 30 5a 22 7d 2c 7b 22 69 64 22 3a 33 33 2c 22 68 61 73 68 22 3a 22 31 32 22 2c 22 74 79 70 65 Data Ascii: "global","expires_at":null,"min_bet_to_chat":100,"min_deposit_to_chat":1,"img":"Vietnam.png","name":"Vietnamese","country":"VN","is_active":1,"created_at":"2024-06-11T09:14:20.000000Z","updated_at":"2024-06-11T09:14:20.000000Z"},{"id":33,"hash":"12","type
2024-10-04 22:43:53 UTC	1369	IN	Data Raw: 39 2e 65 79 4a 70 59 58 51 69 4f 6a 45 33 4d 6a 67 77 4f 44 45 34 4d 7a 49 73 49 6d 56 34 63 43 49 36 4d 54 63 79 4f 44 41 34 4d 54 67 32 4d 69 77 69 63 33 56 69 49 6a 6f 69 4d 6a 49 79 4d 54 42 6a 59 54 63 7a 59 6d 59 78 59 57 59 79 5a 57 4d 79 5a 57 46 6a 5a 54 63 30 59 54 6b 32 5a 57 55 7a 4e 54 59 69 4c 43 4a 68 64 57 51 69 4f 69 4a 6a 63 32 64 76 5a 57 31 77 61 58 4a 6c 49 69 77 69 61 6e 52 70 49 6a 6f 69 62 55 4a 4c 64 79 73 32 64 45 52 32 63 45 39 51 52 6d 6b 32 61 6c 6c 76 5a 30 77 35 54 48 5a 76 51 31 59 30 64 31 6b 34 52 6b 78 4c 5a 7a 45 32 4f 55 63 79 51 33 6c 35 53 56 4d 69 66 51 2e 77 48 62 6a 6f 71 32 5a 46 59 30 30 75 52 50 63 77 50 47 47 64 6a 69 39 56 4e 4e 57 58 31 58 34 47 5f 6d 63 37 67 5a 79 47 4d 59 22 2c 22 63 6f 75 6e 74 72 79 22 Data Ascii: 9.eyJpYXQiOjE3MjgwODE4MzIsImV4cCI6MTcyODA4MTg2Miwic3ViIjoiMjIyMTBjYTczYmYxYWYyZWMyZWFjZTc0YTk2ZWUzNTYiLCJhdWQiOiJjc2dvZW1waXJlIiwianRpIjoibUJLdys2dER2cE9QRmk2allvZ0w5THZvQ1Y0d1k4RkxLZzE2OUcyQ3l5SVMifQ.wHbjoq2ZFY00uRPcwPGGdji9VNNWX1X4G_mc7gZyGMY","country"
2024-10-04 22:43:53 UTC	1369	IN	Data Raw: 22 70 32 70 5f 74 65 6c 65 67 72 61 6d 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 50 32 70 20 54 65 6c 65 67 72 61 6d 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 70 32 70 5f 66 69 6c 74 65 72 5f 64 65 6c 69 76 65 72 79 5f 74 69 6d 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 50 32 70 20 46 69 6c 74 65 72 20 44 65 6c 69 76 65 72 79 20 54 69 6d 65 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 70 32 70 5f 69 6e 76 65 6e 74 6f 72 79 22 3a 7b 22 6e 61 6d 65 22 3a 22 50 32 70 20 49 6e 76 65 6e 74 6f 72 79 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 70 32 70 5f 64 65 70 6f 73 69 74 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 50 32 70 20 44 65 70 6f 73 69 74 73 22 2c 22 Data Ascii: "p2p_telegram_notifications":{"name":"P2p Telegram Notifications","enabled":true},"p2p_filter_delivery_time":{"name":"P2p Filter Delivery Time","enabled":true},"p2p_inventory":{"name":"P2p Inventory","enabled":true},"p2p_deposits":{"name":"P2p Deposits","
2024-10-04 22:43:53 UTC	1369	IN	Data Raw: 65 61 73 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 6d 61 72 6b 65 74 70 6c 61 63 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 4d 61 72 6b 65 74 70 6c 61 63 65 22 2c 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 5f 72 65 61 73 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 5f 66 69 6c 74 65 72 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 54 72 61 6e 73 61 63 74 69 6f 6e 20 46 69 6c 74 65 72 73 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 75 73 65 72 5f 72 65 73 70 6f 6e 73 69 62 6c 65 5f 67 61 6d 69 6e 67 5f 6c 69 6d 69 74 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 55 73 65 72 20 52 65 73 70 6f 6e 73 69 62 6c 65 20 47 61 6d 69 6e 67 20 4c 69 6d 69 74 73 22 2c 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 Data Ascii: eason":null},"marketplace":{"name":"Marketplace","enabled":false,"disabled_reason":null},"transaction_filters":{"name":"Transaction Filters","enabled":true},"user_responsible_gaming_limits":{"name":"User Responsible Gaming Limits","enabled":false,"disable
2024-10-04 22:43:53 UTC	1369	IN	Data Raw: 74 65 6d 20 66 6c 6f 61 74 20 6e 75 6d 62 65 72 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 68 61 74 5f 72 61 69 6e 22 3a 7b 22 6e 61 6d 65 22 3a 22 43 68 61 74 20 72 61 69 6e 22 2c 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 5f 72 65 61 73 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 6d 61 74 63 68 5f 62 65 74 74 69 6e 67 5f 66 65 5f 70 61 6e 64 61 5f 73 63 6f 72 65 5f 73 70 6f 72 74 69 6e 67 5f 73 6f 6c 75 74 69 6f 6e 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 4d 61 74 63 68 20 62 65 74 74 69 6e 67 20 46 72 6f 6e 74 65 6e 64 20 2d 20 50 61 6e 64 61 53 63 6f 72 65 5c 2f 53 70 6f 72 74 69 6e 67 20 53 6f 6c 75 74 69 6f 6e 73 22 2c 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 5f 72 65 61 73 6f 6e 22 Data Ascii: tem float number","enabled":true},"chat_rain":{"name":"Chat rain","enabled":false,"disabled_reason":null},"match_betting_fe_panda_score_sporting_solutions":{"name":"Match betting Frontend - PandaScore\/Sporting Solutions","enabled":false,"disabled_reason"
2024-10-04 22:43:53 UTC	450	IN	Data Raw: 74 68 65 20 69 73 73 75 65 20 61 6e 64 20 77 69 6c 6c 20 72 65 2d 65 6e 61 62 6c 65 20 74 68 69 73 20 61 73 20 73 6f 6f 6e 20 61 73 20 70 6f 73 73 69 62 6c 65 2e 22 2c 22 6c 69 6e 6b 5f 74 6f 22 3a 6e 75 6c 6c 2c 22 6c 69 6e 6b 5f 6c 61 62 65 6c 22 3a 6e 75 6c 6c 2c 22 75 70 64 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 31 30 2d 30 33 20 31 33 3a 34 39 3a 35 34 22 2c 22 70 61 67 65 73 22 3a 5b 5d 7d 2c 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 73 65 20 42 61 74 74 6c 65 73 20 61 72 65 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 20 64 75 65 20 74 6f 20 61 6e 20 69 73 73 75 65 20 77 69 74 68 20 6f 75 72 20 45 4f 53 20 62 6c 6f 63 6b 20 70 72 6f 76 69 64 65 72 2e 20 57 65 20 61 72 65 20 69 6e 76 65 73 74 69 67 61 74 69 6e 67 20 Data Ascii: the issue and will re-enable this as soon as possible.","link_to":null,"link_label":null,"updated_at":"2024-10-03 13:49:54","pages":[]},{"message":"Case Battles are temporarily unavailable due to an issue with our EOS block provider. We are investigating
2024-10-04 22:43:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0