Edit tour

Windows Analysis Report
https://anh.tiktokshopx.icu/

Overview

General Information

Sample URL:	https://anh.tiktokshopx.icu/
Analysis ID:	1526834
Tags:	openphish
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML title does not match URL

HTTP GET or POST without a user agent

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6112 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2208,i,17833416116260942534,4380458043213033307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7120 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6628 --field-trial-handle=2208,i,17833416116260942534,4380458043213033307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6780 --field-trial-handle=2208,i,17833416116260942534,4380458043213033307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6392 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://anh.tiktokshopx.icu/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /x/migrate HTTP/1.1Host: x.comConnection: keep-aliveContent-Length: 436Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://twitter.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A172822586458353453; guest_id_ads=v1%3A172822586458353453; personalization_id="v1_99GxE8jUMBYC0PBHORqp1Q=="; guest_id=v1%3A172822586458353453

Source: https://www.linkedin.com/	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=outline&type=undefined&width=400&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_892753_693279&as=g5oez28GWcLAXGY38F23DQ&hl=en_US
Source: https://www.linkedin.com/	HTTP Parser: Iframe src: https://lnkd.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.linkedin.com

Source: https://anh.tiktokshopx.icu/	HTTP Parser: Number of links: 0
Source: https://x.com/	HTTP Parser: Number of links: 0
Source: https://www.linkedin.com/	HTTP Parser: Number of links: 0

Source: https://x.com/	HTTP Parser: Title: Sign In - Google Accounts does not match URL
Source: https://www.linkedin.com/	HTTP Parser: Title: Sign In - Google Accounts does not match URL

Source: https://anh.tiktokshopx.icu/	HTTP Parser: No favicon
Source: https://www.tiktok.com/explore	HTTP Parser: No favicon
Source: https://x.com/	HTTP Parser: No favicon
Source: https://www.linkedin.com/	HTTP Parser: No favicon

Source: https://anh.tiktokshopx.icu/	HTTP Parser: No <meta name="author".. found
Source: https://x.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="author".. found

Source: https://anh.tiktokshopx.icu/	HTTP Parser: No <meta name="copyright".. found
Source: https://x.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:55757 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.4:55798 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:55626 -> 162.159.36.2:53

Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.39
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.39
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.39
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.39
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_552.2.dr	String found in binary or memory: <a href="https://www.linkedin.com" target="_blank">LinkedIn</a> equals www.linkedin.com (Linkedin)
Source: chromecache_552.2.dr	String found in binary or memory: <a href="https://www.twitter.com" target="_blank">Twitter</a> equals www.twitter.com (Twitter)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 06 Oct 2024 14:43:54 GMTContent-Type: text/htmlContent-Length: 148Connection: closeETag: "6701642e-94"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Sun, 06 Oct 2024 14:44:33 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 4ecddcdc2fa69301x-rate-limit-limit: 100x-rate-limit-reset: 1728226773x-rate-limit-remaining: 99strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 7x-connection-hash: ca250af64a34481eb107e997375646727e9f63a0f46ff1922dc372ef2c461bfaconnection: close

Source: chromecache_491.2.dr, chromecache_418.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_312.2.dr, chromecache_457.2.dr	String found in binary or memory: http://git.io/TrdQbw
Source: chromecache_432.2.dr, chromecache_475.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_432.2.dr, chromecache_475.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_432.2.dr, chromecache_475.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_432.2.dr, chromecache_475.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_378.2.dr	String found in binary or memory: http://primer.style/css
Source: chromecache_551.2.dr, chromecache_617.2.dr	String found in binary or memory: http://schema.org/EventScheduled
Source: chromecache_551.2.dr, chromecache_617.2.dr	String found in binary or memory: http://schema.org/OnlineEventAttendanceMode
Source: chromecache_312.2.dr, chromecache_457.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/100ThievesEmoji2024/100ThievesEmoji2024.png
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11588_Loreal_Lancome_JP_Hashmoji2024/BF-11588_Loreal_Lancome_JP_H
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11611_MOC_Q324_Hashmoji/BF-11611_MOC_Q324_Hashmoji.png
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11618_SportsBoulevard_Q324_Hashmoji/BF-11618_SportsBoulevard_Q324
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11686_NetflixJP_Hashmoji_20240803-20241103_Jimenshi/BF-11686_Netf
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11687_NetflixJP_Gokuaku_Hashmoji2024/BF-11687_NetflixJP_Gokuaku_H
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11709_GenshinPaimon_Hashmoji2024/BF-11709_GenshinPaimon_Hashmoji2
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11710_GenshinKachina_Hashmoji2024/BF-11710_GenshinKachina_Hashmoj
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11711_GenshinKinich_Hashmoji2024/BF-11711_GenshinKinich_Hashmoji2
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11713_Genshin_NatlanSunSign_Hashmoji2024/BF-11713_Genshin_NatlanS
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11751_Global_miHoYo_Final_Hashmoji_v2/BF-11751_Global_miHoYo_Fina
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11770_RacingMaster_JPLaunch_Hashmoji2024/BF-11770_RacingMaster_JP
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11790_COLOPL_Hashmoji/BF-11790_COLOPL_Hashmoji.png
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11804_NetEase_RacingMaster_2024Hashmoji2/BF-11804_NetEase_RacingM
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11821_lake_official__Custom_Like_after/BF-11821_lake_official__Cu
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11868_Schick_Hashmoji2024_V2/BF-11868_Schick_Hashmoji2024_V2.png
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11871_FANCLNew_calolimit_Hashmoji2024/BF-11871_FANCLNew_calolimit
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11901_AlatTechIce_Hashmoji2024/BF-11901_AlatTechIce_Hashmoji2024.
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11949_GlicoThailandPockyBox_Hashmoji2024_/BF-11949_GlicoThailandP
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11950_Riyadhseason_Hashmoji2024_/BF-11950_Riyadhseason_Hashmoji20
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11952_drama_wowow_GoldenKamuyDrama_Hashmoji2024/BF-11952_drama_wo
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12013_SportsBlvdSA_SND24_HashmojiAfter/BF-12013_SportsBlvdSA_SND2
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12041_ATLUS_stud_zero_launch_Hashmoji2024_V2/BF-12041_ATLUS_stud_
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12061_iriam_official_Hashmoji2024_V2/BF-12061_iriam_official_Hash
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12090_silenthill_jp_Hashmoji2024/BF-12090_silenthill_jp_Hashmoji2
Source: chromecache_608.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12168_Aljazeera_Hashmoji2024_v1/BF-12168_Aljazeera_Hashmoji2024_v

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2208,i,17833416116260942534,4380458043213033307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://anh.tiktokshopx.icu/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6628 --field-trial-handle=2208,i,17833416116260942534,4380458043213033307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6780 --field-trial-handle=2208,i,17833416116260942534,4380458043213033307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2208,i,17833416116260942534,4380458043213033307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6628 --field-trial-handle=2208,i,17833416116260942534,4380458043213033307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6780 --field-trial-handle=2208,i,17833416116260942534,4380458043213033307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: global traffic	DNS traffic detected: DNS query: anh.tiktokshopx.icu
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: shopseller.vip
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: lf16-tiktok-web.tiktokcdn-us.com
Source: global traffic	DNS traffic detected: DNS query: lf16-cdn-tos.tiktokcdn-us.com
Source: global traffic	DNS traffic detected: DNS query: sf16-sg.tiktokcdn.com
Source: global traffic	DNS traffic detected: DNS query: lf16-tiktok-common.tiktokcdn-us.com
Source: global traffic	DNS traffic detected: DNS query: mon16-normal-useast5.tiktokv.us
Source: global traffic	DNS traffic detected: DNS query: www.twitter.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: x.com
Source: global traffic	DNS traffic detected: DNS query: abs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.twitter.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: pbs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.x.com
Source: global traffic	DNS traffic detected: DNS query: video.twimg.com
Source: global traffic	DNS traffic detected: DNS query: abs-0.twimg.com
Source: global traffic	DNS traffic detected: DNS query: sf16-website-login.neutral.ttwstatic.com
Source: global traffic	DNS traffic detected: DNS query: lf16-tiktok-common.ibytedtos.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.github.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: github.githubassets.com
Source: global traffic	DNS traffic detected: DNS query: avatars.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: user-images.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: github-cloud.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: static.licdn.com
Source: global traffic	DNS traffic detected: DNS query: platform.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: stun.l.google.com
Source: global traffic	DNS traffic detected: DNS query: ponf.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: lnkd.demdex.net
Source: global traffic	DNS traffic detected: DNS query: trkn.us
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
http://underscorejs.org	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11588_Loreal_Lancome_JP_Hashmoji2024/BF-11588_Loreal_Lancome_JP_H	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/heavenburnsred_July2024_BF-11558_after_v2/heavenburnsred_July2024_BF	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11686_NetflixJP_Hashmoji_20240803-20241103_Jimenshi/BF-11686_Netf	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	0%	URL Reputation	safe
https://abs-0.twimg.com/emoji/v2/svg/26a0.svg	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AudioDock~	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11751_Global_miHoYo_Final_Hashmoji_v2/BF-11751_Global_miHoYo_Fina	0%	URL Reputation	safe
https://abs.twimg.com/responsive-web/client-web/i18n/emoji-en.3afd1e4a.js	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11711_GenshinKinich_Hashmoji2024/BF-11711_GenshinKinich_Hashmoji2	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/EWCWorldCupEmojiV2/EWCWorldCupEmojiV2.png	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/ParamountPlusJA_TLR_June2024/ParamountPlusJA_TLR_June2024.png	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11710_GenshinKachina_Hashmoji2024/BF-11710_GenshinKachina_Hashmoj	0%	URL Reputation	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.Birdwatch~bundle.Communities~bundle.Twitte.862ae2fa.js	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF_11905_Hashmoji_Only_After_Aeromexico_90anos/BF_11905_Hashmoji_Onl	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	unknown
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
avatars.githubusercontent.com	185.199.111.133	true	false	unknown
dualstack.video.twitter.map.fastly.net	146.75.120.158	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
github.githubassets.com	185.199.108.154	true	false	unknown
tpop-api.twitter.com	104.244.42.2	true	false	unknown
t.co	162.159.140.229	true	false	unknown
code.jquery.com	151.101.2.137	true	false	unknown
twimg.twitter.map.fastly.net	146.75.120.159	true	false	unknown
cm.g.doubleclick.net	142.250.184.226	true	false	unknown
www.google.com	142.250.184.228	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	52.31.23.243	true	false	unknown
shopseller.vip	45.195.52.22	true	false	unknown
twitter.com	104.244.42.129	true	false	unknown
google.com	142.250.185.206	true	false	unknown
github.com	140.82.121.4	true	false	unknown
tpop-api.x.com	104.244.42.130	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	unknown
ponf.linkedin.com	144.2.9.1	true	false	unknown
s3-w.us-east-1.amazonaws.com	52.216.110.147	true	false	unknown
play.google.com	142.250.184.206	true	false	unknown
dualstack.twimg.twitter.map.fastly.net	146.75.120.159	true	false	unknown
anh.tiktokshopx.icu	43.240.239.85	true	false	unknown
abs-zero.twimg.com	104.244.43.131	true	false	unknown
cs767.wpc.epsiloncdn.net	152.199.22.144	true	false	unknown
x.com	104.244.42.129	true	false	unknown
user-images.githubusercontent.com	185.199.109.133	true	false	unknown
trkn.us	95.101.111.156	true	false	unknown
stun.l.google.com	74.125.250.129	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
github-cloud.s3.amazonaws.com	unknown	unknown	false	unknown
abs.twimg.com	unknown	unknown	false	unknown
static.licdn.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
lnkd.demdex.net	unknown	unknown	false	unknown
abs-0.twimg.com	unknown	unknown	false	unknown
lf16-cdn-tos.tiktokcdn-us.com	unknown	unknown	false	unknown
lf16-tiktok-common.tiktokcdn-us.com	unknown	unknown	false	unknown
api.twitter.com	unknown	unknown	false	unknown
www.github.com	unknown	unknown	false	unknown
mon16-normal-useast5.tiktokv.us	unknown	unknown	false	unknown
video.twimg.com	unknown	unknown	false	unknown
platform.linkedin.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
www.tiktok.com	unknown	unknown	false	unknown
pbs.twimg.com	unknown	unknown	false	unknown
api.x.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
lf16-tiktok-common.ibytedtos.com	unknown	unknown	false	unknown
sf16-sg.tiktokcdn.com	unknown	unknown	false	unknown
sf16-website-login.neutral.ttwstatic.com	unknown	unknown	false	unknown
lf16-tiktok-web.tiktokcdn-us.com	unknown	unknown	false	unknown
www.twitter.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://github.githubassets.com/assets/kpmg-c249f20c5173.svg	false		unknown
https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-9a621ecbf672.js	false		unknown
https://github.githubassets.com/assets/discussions-adf1d1b8b95c.css	false		unknown
https://anh.tiktokshopx.icu/	false		unknown
https://api.x.com/1.1/jot/client_event.json	false		unknown
https://trkn.us/pixel/conv/ppt=10786;g=linkedin_flagship_homepage;gid=32238	false		unknown
https://github.githubassets.com/assets/dashboard-a70f6c490d6e.css	false		unknown
https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=NjE1MDQ4MjEyNDkzOTQ4MDEwNDQxNTA1Nzk4NDQ3NTAzMDI4NTY=	false		unknown
https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-bae876-be1aefe93b66.js	false		unknown
https://github.githubassets.com/assets/sap-96248a56d312.svg	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.SideNav~bundle.JobSearch.47c4804a.js	false		unknown
https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-21f158-7d460d5f7704.js	false		unknown
https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESELmv7FBzq7Tg8hMT-vzzsbQ&google_cver=1?gdpr=0&gdpr_consent=	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Bird.333c30ea.js	false		unknown
https://abs.twimg.com/fonts/v1/chirp-extended-heavy-web.woff2	false		unknown
https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome.66aa7aaa.js	false		unknown
https://anh.tiktokshopx.icu/favicon.ico	false		unknown
https://x.com/x/migrate	false		unknown
https://platform.linkedin.com/litms/utag/homepage-guest-frontend/utag.js?cb=1728225600000	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePee.8a7edc7a.js	false		unknown
https://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-112600808cf9.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.335f05da.js	false		unknown
https://abs-0.twimg.com/emoji/v2/svg/26a0.svg	false	URL Reputation: safe	unknown
https://github.githubassets.com/assets/ui_packages_failbot_failbot_ts-aabfa4ec15fe.js	false		unknown
https://github.githubassets.com/assets/home-339181319b7e.css	false		unknown
https://platform.linkedin.com/litms/utag/homepage-guest-frontend/utag.123.js?utv=ut4.51.202405021958	false		unknown
https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_index_mjs-4aa4b0e95669.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/i18n/emoji-en.3afd1e4a.js	false	URL Reputation: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hotkey_dist_index_js-no-d67c7f-bd7d077cdcb1.js	false		unknown
https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-900dde-ab87c1d6c5c8.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.TwitterArticles~bundle.ComposeMedia~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlaye.6162375a.js	false		unknown
https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-b73fdff77a4e.js	false		unknown
https://github.githubassets.com/assets/hero-mobile-7163f4f5de41.webp	false		unknown
https://dpm.demdex.net/ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE	false		unknown
https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.1004095a.js	false		unknown
https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76.js	false		unknown
https://github.githubassets.com/assets/primer-react-c2abd9301d38.js	false		unknown
https://github.githubassets.com/assets/primer-react.a38d782b719dc67594c9.module.css	false		unknown
https://github.githubassets.com/assets/light-3e154969b9f9.css	false		unknown
https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover-fn_js-46e1f260cd63.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.Birdwatch~bundle..1585834a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.DMDrawer~bundle.Grok~bundle.Account~bundle.AccountAnalytics~bu.0bfa6c2a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/bundle.LoggedOutHome.076c73fa.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.Communities~ondemand.SettingsMonetization~bu.4fd68dca.js	false		unknown
https://x.com/	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.AudioSp.3b86bcfa.js	false		unknown
https://github.githubassets.com/assets/home-fa7c9cc8a53c.js	false		unknown
https://api.x.com/1.1/jot/ces/p2	false		unknown
https://trkn.us/pixel/conv/ppt=14086;g=linkedin_flagship_homepage;gid=36535	false		unknown
https://cdn.jsdelivr.net/npm/@popperjs/core@2.5.4/dist/umd/popper.min.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.Birdwatch~bundle.Communities~bundle.Twitte.862ae2fa.js	false	URL Reputation: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_emotion_is-prop-valid_dist_emotion-is-prop-valid_esm_js-node_modules_emo-41da55-1851acd376ff.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/loader.AudioOnlyVideoPlayer.f013ad8a.js	false		unknown
https://github.githubassets.com/assets/behaviors-f5e67dbe7c99.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/loader.SideNav.e8d0899a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/ondemand.s.4243d62a.js	false		unknown
https://github.githubassets.com/assets/wp-runtime-9bee736947cd.js	false		unknown
https://api.x.com/graphql/HC-1ZetsBT1HKVUOvnLE8Q/Viewer?variables=%7B%22withCommunitiesMemberships%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%7D&fieldToggles=%7B%22isDelegate%22%3Afalse%2C%22withAuxiliaryUserLabels%22%3Afalse%7D	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.linkedin.com	chromecache_552.2.dr	false		unknown
http://underscorejs.org	chromecache_312.2.dr, chromecache_457.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/en.a2da60ca.js.map	chromecache_361.2.dr, chromecache_518.2.dr	false		unknown
http://polymer.github.io/AUTHORS.txt	chromecache_432.2.dr, chromecache_475.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_515.2.dr, chromecache_650.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF_12081_Matarat_ksa_Hashmoji_2024_/BF_12081_Matarat_ksa_Hashmoji_20	chromecache_608.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	chromecache_608.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-12168_Aljazeera_Hashmoji2024_v1/BF-12168_Aljazeera_Hashmoji2024_v	chromecache_608.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11588_Loreal_Lancome_JP_Hashmoji2024/BF-11588_Loreal_Lancome_JP_H	chromecache_608.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/heavenburnsred_July2024_BF-11558_after_v2/heavenburnsred_July2024_BF	chromecache_608.2.dr	false	URL Reputation: safe	unknown
http://primer.style/css	chromecache_378.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11949_GlicoThailandPockyBox_Hashmoji2024_/BF-11949_GlicoThailandP	chromecache_608.2.dr	false		unknown
https://www.twitter.com	chromecache_552.2.dr	false		unknown
https://github.com/emn178/js-md5	chromecache_550.2.dr, chromecache_516.2.dr	false		unknown
https://abs.twimg.com/hashflags/FureruMovie/FureruMovie.png	chromecache_608.2.dr	false		unknown
http://schema.org/EventScheduled	chromecache_551.2.dr, chromecache_617.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	chromecache_608.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_432.2.dr, chromecache_475.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11686_NetflixJP_Hashmoji_20240803-20241103_Jimenshi/BF-11686_Netf	chromecache_608.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	chromecache_608.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AudioDock~	chromecache_293.2.dr, chromecache_424.2.dr, chromecache_431.2.dr, chromecache_540.2.dr, chromecache_615.2.dr, chromecache_404.2.dr, chromecache_308.2.dr, chromecache_325.2.dr	false	URL Reputation: safe	unknown
https://turbo.hotwired.dev/handbook/building#working-with-script-elements	chromecache_508.2.dr, chromecache_489.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11751_Global_miHoYo_Final_Hashmoji_v2/BF-11751_Global_miHoYo_Fina	chromecache_608.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11711_GenshinKinich_Hashmoji2024/BF-11711_GenshinKinich_Hashmoji2	chromecache_608.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-12041_ATLUS_stud_zero_launch_Hashmoji2024_V2/BF-12041_ATLUS_stud_	chromecache_608.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	chromecache_608.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF_11915_Sabic_Homeland_Hashmoji_24_/BF_11915_Sabic_Homeland_Hashmoj	chromecache_608.2.dr	false		unknown
https://www.figma.com/file/egkKv7mudRwk2dVPM0WCR6/NBA-Digest-Email?type=design&node-id=2927-186236&t	chromecache_403.2.dr, chromecache_591.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.audio.2a5bb19a.j	chromecache_640.2.dr, chromecache_376.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11950_Riyadhseason_Hashmoji2024_/BF-11950_Riyadhseason_Hashmoji20	chromecache_608.2.dr	false		unknown
https://abs.twimg.com/hashflags/EWCWorldCupEmojiV2/EWCWorldCupEmojiV2.png	chromecache_608.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.LoggedOutHome.076	chromecache_334.2.dr, chromecache_307.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	chromecache_369.2.dr, chromecache_292.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/ParamountPlusJA_TLR_June2024/ParamountPlusJA_TLR_June2024.png	chromecache_608.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AudioDock.af72bcb	chromecache_657.2.dr, chromecache_542.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11710_GenshinKachina_Hashmoji2024/BF-11710_GenshinKachina_Hashmoj	chromecache_608.2.dr	false	URL Reputation: safe	unknown
https://x.com/en/privacy	chromecache_361.2.dr, chromecache_518.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	chromecache_589.2.dr, chromecache_380.2.dr, chromecache_321.2.dr, chromecache_566.2.dr, chromecache_370.2.dr, chromecache_539.2.dr, chromecache_433.2.dr, chromecache_645.2.dr, chromecache_528.2.dr, chromecache_618.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF_11905_Hashmoji_Only_After_Aeromexico_90anos/BF_11905_Hashmoji_Onl	chromecache_608.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SideNav.e8d0899a.	chromecache_506.2.dr, chromecache_379.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF_12060_MOC_2024_SND_Hashmoji/BF_12060_MOC_2024_SND_Hashmoji.png	chromecache_608.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
104.244.42.129	twitter.com	United States	13414	TWITTERUS	false
146.75.120.159	twimg.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
146.75.120.158	dualstack.video.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
43.240.239.85	anh.tiktokshopx.icu	China	136800	XIAOZHIYUN1-AS-APICIDCNETWORKUS	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
185.199.111.154	unknown	Netherlands	54113	FASTLYUS	false
104.244.43.131	abs-zero.twimg.com	United States	54113	FASTLYUS	false
95.101.111.156	trkn.us	European Union	12956	TELEFONICATELXIUSES	false
142.250.184.226	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
162.159.140.229	t.co	United States	13335	CLOUDFLARENETUS	false
52.31.82.54	unknown	United States	16509	AMAZON-02US	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
104.244.42.130	tpop-api.x.com	United States	13414	TWITTERUS	false
144.2.9.1	ponf.linkedin.com	Netherlands	14413	LINKEDINUS	false
108.128.136.169	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
99.81.250.169	unknown	United States	16509	AMAZON-02US	false
185.199.108.154	github.githubassets.com	Netherlands	54113	FASTLYUS	false
172.217.18.100	unknown	United States	15169	GOOGLEUS	false
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
142.250.185.206	google.com	United States	15169	GOOGLEUS	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
185.199.111.133	avatars.githubusercontent.com	Netherlands	54113	FASTLYUS	false
34.249.181.141	unknown	United States	16509	AMAZON-02US	false
142.250.184.206	play.google.com	United States	15169	GOOGLEUS	false
74.125.250.129	stun.l.google.com	United States	15169	GOOGLEUS	false
104.244.42.1	unknown	United States	13414	TWITTERUS	false
104.244.42.2	tpop-api.twitter.com	United States	13414	TWITTERUS	false
140.82.121.3	unknown	United States	36459	GITHUBUS	false
45.195.52.22	shopseller.vip	Seychelles	132813	AISI-AS-APHKAISICLOUDCOMPUTINGLIMITEDHK	false
140.82.121.4	github.com	United States	36459	GITHUBUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	unknown	United States	13335	CLOUDFLARENETUS	false
152.199.22.144	cs767.wpc.epsiloncdn.net	United States	15133	EDGECASTUS	false
52.31.23.243	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.246.173.101	unknown	United States	16509	AMAZON-02US	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526834
Start date and time:	2024-10-06 16:42:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://anh.tiktokshopx.icu/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@34/596@135/41
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://anh.tiktokshopx.icu/#home Browse: https://anh.tiktokshopx.icu/#shop Browse: https://anh.tiktokshopx.icu/#contact Browse: https://www.tiktok.com/ Browse: https://www.twitter.com/ Browse: https://www.github.com/ Browse: https://www.linkedin.com/

Input	Output
URL: https://anh.tiktokshopx.icu/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://anh.tiktokshopx.icu/#home Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://anh.tiktokshopx.icu/#contact Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://x.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.linkedin.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71365
Entropy (8bit):	5.434388742232653
Encrypted:	false
SSDEEP:	1536:DlZAbLK//S5aumwWYAsmXYzlMxbOL150NBbCZVp:DLa5VmOOWH
MD5:	8C56DEA6998A620D92EE3EC1B029F36E
SHA1:	73CD99B5893E5FD1DAF2256BF75EB37E115EC88E
SHA-256:	CBE571FA451678B6BC298265E050B2C77C73D3C70DF042F801C9FAFDC4B351BF
SHA-512:	08D463FE4356C2DC5AC10BF2349188E740639E132BE69814CF52CB83493E9DFF53F06D0181C4FD733F45F891BF71D936B9E5BEC29F81F0653919AC6B5EDA2C64
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV~bundle.Accoun.a10c715a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV~bundle.Accoun"],{907187:(t,e,i)=>{i.d(e,{Z:()=>De});i(334115),i(200634),i(320796),i(449228),i(438695),i(827233),i(374083),i(418145),i(315735),i(543450),i(743108),i(332501),i(24895),i(499120),i(865584),i(326936),i(271245),i(414586),i(458143),i(43105),i(334769),i(358188),i(73439),i(477950),i(888233),i(428673),i(201939),i(906886),i(154226);var n,r,a,o,s=i(580753),c=i(981665),u=i(256666),l=i(22699),d=i.n(l);function h(t,e){var i;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(i=function(t,e){if(!t)return;if("string"==typeof t)return f(t,e);var i=Object.prototype.toString.call(t).slice(8,-1);"Object"===i&&t.constructor&&(i=t.constructor.name);if("Map"===i\|\|"Set"===i)return Array.from(t);if("Arguments"===i\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(i))re

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://anh.tiktokshopx.icu/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Windows Analysis Report
https://anh.tiktokshopx.icu/

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 16:43:49.834074020 CEST	192.168.2.4	1.1.1.1	0xbdb1	Standard query (0)	anh.tiktokshopx.icu	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:43:49.834228992 CEST	192.168.2.4	1.1.1.1	0xcaef	Standard query (0)	anh.tiktokshopx.icu	65	IN (0x0001)	false
Oct 6, 2024 16:43:50.197271109 CEST	192.168.2.4	1.1.1.1	0xe5c6	Standard query (0)	anh.tiktokshopx.icu	65	IN (0x0001)	false
Oct 6, 2024 16:43:51.865268946 CEST	192.168.2.4	1.1.1.1	0xd90f	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:43:51.866604090 CEST	192.168.2.4	1.1.1.1	0x1544	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Oct 6, 2024 16:43:51.867237091 CEST	192.168.2.4	1.1.1.1	0x9330	Standard query (0)	shopseller.vip	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:43:51.867822886 CEST	192.168.2.4	1.1.1.1	0x6a3d	Standard query (0)	shopseller.vip	65	IN (0x0001)	false
Oct 6, 2024 16:43:51.881598949 CEST	192.168.2.4	1.1.1.1	0x63d1	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:43:51.881970882 CEST	192.168.2.4	1.1.1.1	0xa3db	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 6, 2024 16:43:51.882811069 CEST	192.168.2.4	1.1.1.1	0x7978	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:43:51.883291006 CEST	192.168.2.4	1.1.1.1	0x267c	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 6, 2024 16:43:52.254271984 CEST	192.168.2.4	1.1.1.1	0xf5aa	Standard query (0)	shopseller.vip	65	IN (0x0001)	false
Oct 6, 2024 16:43:52.730139971 CEST	192.168.2.4	1.1.1.1	0x54be	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:43:52.730355978 CEST	192.168.2.4	1.1.1.1	0x1c8f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 16:43:53.072434902 CEST	192.168.2.4	1.1.1.1	0x88da	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:43:53.073297977 CEST	192.168.2.4	1.1.1.1	0xf9fd	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 6, 2024 16:43:53.076354980 CEST	192.168.2.4	1.1.1.1	0x4ec8	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:43:53.076814890 CEST	192.168.2.4	1.1.1.1	0xffd6	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 6, 2024 16:43:53.083162069 CEST	192.168.2.4	1.1.1.1	0xc1c4	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:43:53.083462000 CEST	192.168.2.4	1.1.1.1	0x72dc	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Oct 6, 2024 16:43:55.174774885 CEST	192.168.2.4	1.1.1.1	0x701	Standard query (0)	shopseller.vip	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:43:55.175739050 CEST	192.168.2.4	1.1.1.1	0xd13d	Standard query (0)	shopseller.vip	65	IN (0x0001)	false
Oct 6, 2024 16:44:12.912516117 CEST	192.168.2.4	1.1.1.1	0x99a8	Standard query (0)	www.tiktok.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:12.913024902 CEST	192.168.2.4	1.1.1.1	0x6941	Standard query (0)	www.tiktok.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:15.059115887 CEST	192.168.2.4	1.1.1.1	0xf888	Standard query (0)	lf16-tiktok-web.tiktokcdn-us.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:15.059391975 CEST	192.168.2.4	1.1.1.1	0x5273	Standard query (0)	lf16-tiktok-web.tiktokcdn-us.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:15.113837004 CEST	192.168.2.4	1.1.1.1	0x9708	Standard query (0)	lf16-cdn-tos.tiktokcdn-us.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:15.114394903 CEST	192.168.2.4	1.1.1.1	0x7a68	Standard query (0)	lf16-cdn-tos.tiktokcdn-us.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:16.985891104 CEST	192.168.2.4	1.1.1.1	0xb329	Standard query (0)	lf16-cdn-tos.tiktokcdn-us.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:16.986278057 CEST	192.168.2.4	1.1.1.1	0x3064	Standard query (0)	lf16-cdn-tos.tiktokcdn-us.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:16.987416029 CEST	192.168.2.4	1.1.1.1	0xd899	Standard query (0)	lf16-tiktok-web.tiktokcdn-us.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:16.987983942 CEST	192.168.2.4	1.1.1.1	0xc3ba	Standard query (0)	lf16-tiktok-web.tiktokcdn-us.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:19.899838924 CEST	192.168.2.4	1.1.1.1	0x594d	Standard query (0)	www.tiktok.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:19.900007963 CEST	192.168.2.4	1.1.1.1	0xbda1	Standard query (0)	www.tiktok.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:20.327342987 CEST	192.168.2.4	1.1.1.1	0x1617	Standard query (0)	sf16-sg.tiktokcdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:20.327744007 CEST	192.168.2.4	1.1.1.1	0x7d7f	Standard query (0)	sf16-sg.tiktokcdn.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:20.407044888 CEST	192.168.2.4	1.1.1.1	0xb42f	Standard query (0)	lf16-tiktok-common.tiktokcdn-us.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:20.407205105 CEST	192.168.2.4	1.1.1.1	0xa0de	Standard query (0)	lf16-tiktok-common.tiktokcdn-us.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:21.430526972 CEST	192.168.2.4	1.1.1.1	0x92b6	Standard query (0)	mon16-normal-useast5.tiktokv.us	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:21.430732965 CEST	192.168.2.4	1.1.1.1	0x4568	Standard query (0)	mon16-normal-useast5.tiktokv.us	65	IN (0x0001)	false
Oct 6, 2024 16:44:22.323908091 CEST	192.168.2.4	1.1.1.1	0x142f	Standard query (0)	www.twitter.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:22.324162960 CEST	192.168.2.4	1.1.1.1	0x54	Standard query (0)	www.twitter.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:22.418775082 CEST	192.168.2.4	1.1.1.1	0x113c	Standard query (0)	sf16-sg.tiktokcdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:22.419045925 CEST	192.168.2.4	1.1.1.1	0xd5a1	Standard query (0)	sf16-sg.tiktokcdn.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:23.065427065 CEST	192.168.2.4	1.1.1.1	0x57c5	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:23.065655947 CEST	192.168.2.4	1.1.1.1	0x15b	Standard query (0)	twitter.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:23.932501078 CEST	192.168.2.4	1.1.1.1	0x6e83	Standard query (0)	x.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:23.932708025 CEST	192.168.2.4	1.1.1.1	0x72c6	Standard query (0)	x.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:24.785835028 CEST	192.168.2.4	1.1.1.1	0x6338	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:24.786509991 CEST	192.168.2.4	1.1.1.1	0x9b0a	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:24.788163900 CEST	192.168.2.4	1.1.1.1	0x520a	Standard query (0)	api.twitter.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:24.788444996 CEST	192.168.2.4	1.1.1.1	0x5e13	Standard query (0)	api.twitter.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:24.843215942 CEST	192.168.2.4	1.1.1.1	0xcff0	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:24.843806982 CEST	192.168.2.4	1.1.1.1	0xa9b2	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 6, 2024 16:44:24.844759941 CEST	192.168.2.4	1.1.1.1	0x84df	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:24.845169067 CEST	192.168.2.4	1.1.1.1	0x5149	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:24.855046988 CEST	192.168.2.4	1.1.1.1	0xe105	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:24.855745077 CEST	192.168.2.4	1.1.1.1	0x94a4	Standard query (0)	api.x.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:26.904705048 CEST	192.168.2.4	1.1.1.1	0x2ed	Standard query (0)	video.twimg.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:26.905397892 CEST	192.168.2.4	1.1.1.1	0xb838	Standard query (0)	video.twimg.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:26.986967087 CEST	192.168.2.4	1.1.1.1	0x368a	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:26.987797976 CEST	192.168.2.4	1.1.1.1	0x38af	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:27.729592085 CEST	192.168.2.4	1.1.1.1	0xd986	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:27.729979038 CEST	192.168.2.4	1.1.1.1	0xbe93	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:29.355627060 CEST	192.168.2.4	1.1.1.1	0x53f	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:29.357078075 CEST	192.168.2.4	1.1.1.1	0x8579	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:31.217784882 CEST	192.168.2.4	1.1.1.1	0x5821	Standard query (0)	sf16-website-login.neutral.ttwstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:31.218053102 CEST	192.168.2.4	1.1.1.1	0x35fd	Standard query (0)	sf16-website-login.neutral.ttwstatic.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:31.316443920 CEST	192.168.2.4	1.1.1.1	0xbe5e	Standard query (0)	lf16-tiktok-common.ibytedtos.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:31.316592932 CEST	192.168.2.4	1.1.1.1	0xd688	Standard query (0)	lf16-tiktok-common.ibytedtos.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:32.955360889 CEST	192.168.2.4	1.1.1.1	0xae63	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:32.955598116 CEST	192.168.2.4	1.1.1.1	0xe1d8	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:32.958524942 CEST	192.168.2.4	1.1.1.1	0x6b05	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:32.958524942 CEST	192.168.2.4	1.1.1.1	0x3b8c	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:33.481865883 CEST	192.168.2.4	1.1.1.1	0x625c	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:33.482004881 CEST	192.168.2.4	1.1.1.1	0x5466	Standard query (0)	api.x.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:33.883500099 CEST	192.168.2.4	1.1.1.1	0x5524	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:33.883685112 CEST	192.168.2.4	1.1.1.1	0x9c26	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:33.892581940 CEST	192.168.2.4	1.1.1.1	0x78bf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:33.892788887 CEST	192.168.2.4	1.1.1.1	0xba22	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:42.932070971 CEST	192.168.2.4	1.1.1.1	0x7686	Standard query (0)	www.github.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:42.932410955 CEST	192.168.2.4	1.1.1.1	0x84b6	Standard query (0)	www.github.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:42.951066971 CEST	192.168.2.4	1.1.1.1	0x7073	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:42.951066971 CEST	192.168.2.4	1.1.1.1	0x240a	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:43.891784906 CEST	192.168.2.4	1.1.1.1	0x3a72	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:43.891999960 CEST	192.168.2.4	1.1.1.1	0x9ad	Standard query (0)	github.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:44.853244066 CEST	192.168.2.4	1.1.1.1	0x42a5	Standard query (0)	github.githubassets.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:44.854044914 CEST	192.168.2.4	1.1.1.1	0x17b8	Standard query (0)	github.githubassets.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:44.854760885 CEST	192.168.2.4	1.1.1.1	0x71df	Standard query (0)	avatars.githubusercontent.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:44.855500937 CEST	192.168.2.4	1.1.1.1	0x3c1c	Standard query (0)	avatars.githubusercontent.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:44.867103100 CEST	192.168.2.4	1.1.1.1	0xf327	Standard query (0)	user-images.githubusercontent.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:44.867300034 CEST	192.168.2.4	1.1.1.1	0xd8ed	Standard query (0)	user-images.githubusercontent.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:44.867597103 CEST	192.168.2.4	1.1.1.1	0x6e15	Standard query (0)	github-cloud.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:44.867738962 CEST	192.168.2.4	1.1.1.1	0xb26a	Standard query (0)	github-cloud.s3.amazonaws.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:47.194559097 CEST	192.168.2.4	1.1.1.1	0x4c1d	Standard query (0)	github.githubassets.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:47.195183992 CEST	192.168.2.4	1.1.1.1	0x9695	Standard query (0)	github.githubassets.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:47.345632076 CEST	192.168.2.4	1.1.1.1	0xb3fc	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:47.346067905 CEST	192.168.2.4	1.1.1.1	0x26ef	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:49.195097923 CEST	192.168.2.4	1.1.1.1	0x77ce	Standard query (0)	static.licdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:49.196027040 CEST	192.168.2.4	1.1.1.1	0xc5e4	Standard query (0)	static.licdn.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:52.300415993 CEST	192.168.2.4	1.1.1.1	0x46da	Standard query (0)	static.licdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:52.300549984 CEST	192.168.2.4	1.1.1.1	0xadb2	Standard query (0)	static.licdn.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:52.449645042 CEST	192.168.2.4	1.1.1.1	0x448	Standard query (0)	platform.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:52.450012922 CEST	192.168.2.4	1.1.1.1	0x821b	Standard query (0)	platform.linkedin.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:53.368586063 CEST	192.168.2.4	1.1.1.1	0xe22f	Standard query (0)	stun.l.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:53.369012117 CEST	192.168.2.4	1.1.1.1	0xbec2	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Oct 6, 2024 16:44:53.376883984 CEST	192.168.2.4	1.1.1.1	0xfd9	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Oct 6, 2024 16:44:53.377878904 CEST	192.168.2.4	1.1.1.1	0x1790	Standard query (0)	ponf.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:53.378057003 CEST	192.168.2.4	1.1.1.1	0x8b70	Standard query (0)	ponf.linkedin.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:53.671428919 CEST	192.168.2.4	1.1.1.1	0x5250	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:53.671428919 CEST	192.168.2.4	1.1.1.1	0x1747	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:54.068553925 CEST	192.168.2.4	1.1.1.1	0x6235	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:54.068880081 CEST	192.168.2.4	1.1.1.1	0x62c4	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 6, 2024 16:44:54.493896961 CEST	192.168.2.4	1.1.1.1	0xeaa6	Standard query (0)	platform.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:54.494100094 CEST	192.168.2.4	1.1.1.1	0x20ba	Standard query (0)	platform.linkedin.com	65	IN (0x0001)	false
Oct 6, 2024 16:44:55.316545010 CEST	192.168.2.4	1.1.1.1	0x9ba8	Standard query (0)	lnkd.demdex.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:55.316921949 CEST	192.168.2.4	1.1.1.1	0xaa0	Standard query (0)	lnkd.demdex.net	65	IN (0x0001)	false
Oct 6, 2024 16:44:55.325896025 CEST	192.168.2.4	1.1.1.1	0x23bc	Standard query (0)	lnkd.demdex.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:55.326062918 CEST	192.168.2.4	1.1.1.1	0x22e3	Standard query (0)	lnkd.demdex.net	65	IN (0x0001)	false
Oct 6, 2024 16:44:55.375605106 CEST	192.168.2.4	1.1.1.1	0xecad	Standard query (0)	trkn.us	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:55.376024008 CEST	192.168.2.4	1.1.1.1	0xb0dd	Standard query (0)	trkn.us	65	IN (0x0001)	false
Oct 6, 2024 16:44:55.394877911 CEST	192.168.2.4	1.1.1.1	0x9e85	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:55.395016909 CEST	192.168.2.4	1.1.1.1	0xd4a0	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 6, 2024 16:44:56.390161037 CEST	192.168.2.4	1.1.1.1	0x23fc	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:56.390620947 CEST	192.168.2.4	1.1.1.1	0x7a0e	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 16:44:57.024055958 CEST	192.168.2.4	1.1.1.1	0x7c3	Standard query (0)	lnkd.demdex.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:57.024673939 CEST	192.168.2.4	1.1.1.1	0x5a9a	Standard query (0)	lnkd.demdex.net	65	IN (0x0001)	false
Oct 6, 2024 16:44:57.209449053 CEST	192.168.2.4	1.1.1.1	0x31b4	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:57.209641933 CEST	192.168.2.4	1.1.1.1	0x56f9	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 6, 2024 16:44:57.547938108 CEST	192.168.2.4	1.1.1.1	0xc191	Standard query (0)	trkn.us	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:44:57.548191071 CEST	192.168.2.4	1.1.1.1	0x78aa	Standard query (0)	trkn.us	65	IN (0x0001)	false
Oct 6, 2024 16:45:05.233839035 CEST	192.168.2.4	1.1.1.1	0xee85	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:45:05.234050989 CEST	192.168.2.4	1.1.1.1	0x9d02	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 6, 2024 16:45:07.218647003 CEST	192.168.2.4	1.1.1.1	0x4f55	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:45:07.219022036 CEST	192.168.2.4	1.1.1.1	0x6c45	Standard query (0)	play.google.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:43:51 UTC	662	OUT	GET / HTTP/1.1 Host: anh.tiktokshopx.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:43:51 UTC	296	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 14:43:51 GMT Content-Type: text/html Content-Length: 8489 Last-Modified: Sat, 05 Oct 2024 16:07:45 GMT Connection: close Vary: Accept-Encoding ETag: "67016451-2129" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-06 14:43:51 UTC	8489	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 2d 43 4e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 69 6b 54 6f 6b 20 53 68 6f 70 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 e5 bc 95 e5 85 a5 42 6f 6f 74 73 74 72 61 70 20 43 53 53 e5 ba 93 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 Data Ascii: <!DOCTYPE html><html lang="zh-CN"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>TikTok Shop</title> ... Bootstrap CSS --> <link href="https://maxcdn.boots

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:43:52 UTC	577	OUT	GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://anh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:43:52 UTC	902	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 14:43:52 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"816af0eddd3b4822c2756227c7e7b7ee" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 19:21:59 CDN-EdgeStorageId: 940 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 55f4a395c7dea2e058d61e94e15c895f CDN-Cache: HIT CF-Cache-Status: HIT Age: 8612015 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ce66d1edc8f7c7b-EWR
2024-10-06 14:43:52 UTC	467	IN	Data Raw: 37 63 31 61 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 Data Ascii: 7c1a/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e 73 2d 73 65 72 69 66 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 Data Ascii: d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMac
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 Data Ascii: ine dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 Data Ascii: lect,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-a
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d Data Ascii: ine-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:6rem;font-weight:300;line-height:1.2}
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 2e 70 72 65 2d 73 63 72 6f 6c 6c Data Ascii: ing:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#212529}pre code{font-size:inherit;color:inherit;word-break:normal}.pre-scroll
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 6f 6c 2d 78 6c 2d 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 30 2c 2e 63 6f 6c 2d 78 6c 2d 31 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 32 Data Ascii: ol-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col-xl-1,.col-xl-10,.col-xl-11,.col-xl-12
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 Data Ascii: :0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.c
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 31 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 32 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 34 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 66 6c 65 78 3a 30 20 30 20 32 Data Ascii: 00%}.row-cols-sm-1>{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-sm-2>{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-sm-3>{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.row-cols-sm-4>{-ms-flex:0 0 25%;flex:0 0 2
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 73 6d 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 73 6d 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 34 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 34 3b 6f 72 64 65 72 3a 34 7d 2e 6f 72 64 65 72 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 35 3b 6f 72 64 65 72 3a 35 7d 2e 6f 72 64 65 72 2d 73 6d 2d 36 7b Data Ascii: ex-order:13;order:13}.order-sm-0{-ms-flex-order:0;order:0}.order-sm-1{-ms-flex-order:1;order:1}.order-sm-2{-ms-flex-order:2;order:2}.order-sm-3{-ms-flex-order:3;order:3}.order-sm-4{-ms-flex-order:4;order:4}.order-sm-5{-ms-flex-order:5;order:5}.order-sm-6{

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:43:52 UTC	561	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://anh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:43:52 UTC	915	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 14:43:52 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 18:51:50 CDN-EdgeStorageId: 871 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: b3bd091d36d3aaa8ce89af0da90a6662 CDN-Cache: HIT CF-Cache-Status: HIT Age: 831073 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ce66d1ede4172b6-EWR
2024-10-06 14:43:52 UTC	454	IN	Data Raw: 37 63 30 65 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7c0e/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: ned"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 Data Ascii: [0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement:function(t){return(t[0]\|\|t).nod
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 Data Ascii: ,delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.prototype;return n.close=function(t){var e=this._element
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e Data Ascii: ",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){function t(t){this._element=t}var n=t.prototype;return n
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 2e 70 72 65 76 65 6e 74 44 Data Ascii: n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.classList.contains("disabled")))return void t.preventD
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 6f Data Ascii: an\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!1,this.touchTimeout=null,this.to
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: ,n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(this._element).one("slid.bs.carousel",(function(){re
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 2d 74 2e 74 6f 75 63 68 53 74 61 72 74 58 29 2c 74 2e 5f 68 61 Data Ascii: pperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.touchDeltaX=e.originalEvent.clientX-t.touchStartX),t._ha
2024-10-06 14:43:52 UTC	1369	IN	Data Raw: 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 30 3d 3d 3d 6f 7c 7c 6e 26 26 6f 3d 3d 3d 73 29 26 26 21 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 77 72 61 70 29 72 65 74 75 Data Ascii: ode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.length-1;if((i&&0===o\|\|n&&o===s)&&!this._config.wrap)retu

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:43:52 UTC	542	OUT	GET /jquery-3.5.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://anh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:43:52 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72380 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-11abc" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 952527 Date: Sun, 06 Oct 2024 14:43:52 GMT X-Served-By: cache-lga21954-LGA, cache-ewr-kewr1740050-EWR X-Cache: HIT, HIT X-Cache-Hits: 464, 0 X-Timer: S1728225833.778969,VS0,VE1 Vary: Accept-Encoding
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 Data Ascii: /*! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other c
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 22 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 45 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3d 21 21 65 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 65 26 26 65 2e 6c 65 6e 67 74 68 2c 6e 3d 54 28 65 29 3b 72 65 74 75 72 6e 21 62 28 65 29 26 26 21 78 28 65 29 26 26 28 22 61 72 72 61 79 22 3d 3d 3d 6e 7c 7c 30 3d 3d 3d Data Ascii: query,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector",E=function(e,t){return new E.fn.init(e,t)};function d(e){var t=!!e&&"length"in e&&e.length,n=T(e);return!b(e)&&!x(e)&&("array"===n\|\|0===
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 74 26 26 61 21 3d 3d 72 26 26 28 6c 26 26 72 26 26 28 45 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 72 29 7c 7c 28 69 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 29 3f 28 6e 3d 61 5b 74 5d 2c 6f 3d 69 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 5b 5d 3a 69 7c 7c 45 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 6e 29 3f 6e 3a 7b 7d 2c 69 3d 21 31 2c 61 5b 74 5d 3d 45 2e 65 78 74 65 6e 64 28 6c 2c 6f 2c 72 29 29 3a 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 61 5b 74 5d 3d 72 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 45 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 Data Ascii: !=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(E.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i\|\|E.isPlainObject(n)?n:{},i=!1,a[t]=E.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},E.extend({expando:"jQuer
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 6c 26 26 28 45 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 45 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 5d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 70 2c 78 2c 6f 2c 69 2c 68 2c 66 2c 67 2c 77 2c 75 2c 6c 2c 43 2c 54 2c 61 2c 45 2c 76 2c 73 2c 63 2c 79 2c 41 3d 22 73 69 7a 7a 6c Data Ascii: l&&(E.fn[Symbol.iterator]=t[Symbol.iterator]),E.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var p=function(n){var e,p,x,o,i,h,f,g,w,u,l,C,T,a,E,v,s,c,y,A="sizzl
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 52 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 52 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 52 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 52 2b 22 2a 5c 5c 29 7c 29 22 2c 22 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 49 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 52 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 52 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 52 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d Data Ascii: ype)(?:\\("+R+"(even\|odd\|(([+-]\|)(\\d)n\|)"+R+"(?:([+-]\|)"+R+"(\\d+)\|))"+R+"\\)\|)","i"),bool:new RegExp("^(?:"+I+")$","i"),needsContext:new RegExp("^"+R+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\\("+R+"((?:-\\d)?\\d)"+R+"*\\)\|)(?=[^-]\|$)","i")}
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 6e 20 6e 2e 70 75 73 68 28 61 29 2c 6e 7d 65 6c 73 65 20 69 66 28 66 26 26 28 61 3d 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 26 26 79 28 65 2c 61 29 26 26 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 61 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 75 5b 32 5d 29 72 65 74 75 72 6e 20 4f 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 29 2c 6e 3b 69 66 28 28 69 3d 75 5b 33 5d 29 26 26 70 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 4f 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 69 29 29 2c Data Ascii: n n.push(a),n}else if(f&&(a=f.getElementById(i))&&y(e,a)&&a.id===i)return n.push(a),n}else{if(u[2])return O.apply(n,e.getElementsByTagName(t)),n;if((i=u[3])&&p.getElementsByClassName&&e.getElementsByClassName)return O.apply(n,e.getElementsByClassName(i)),
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 74 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 74 29 26 26 65 2e 74 79 70 65 3d 3d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 21 31 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 74 7c 7c 65 2e 69 73 Data Ascii: r t=e.nodeName.toLowerCase();return("input"===t\|\|"button"===t)&&e.type===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t\|\|e.is
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 70 2e 67 65 74 42 79 49 64 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 41 2c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 41 29 2e 6c 65 6e 67 74 68 7d 29 2c 70 2e 67 65 74 42 79 49 64 3f 28 78 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 78 2e 66 69 6e 64 2e 49 44 3d Data Ascii: .getElementsByClassName),p.getById=ce(function(e){return a.appendChild(e).id=A,!T.getElementsByName\|\|!T.getElementsByName(A).length}),p.getById?(x.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},x.find.ID=
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 52 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 52 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 49 2b 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 41 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 7e 3d 22 29 2c Data Ascii: ption selected=''></option></select>",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[^$]="+R+"(?:''\|\"\")"),e.querySelectorAll("[selected]").length\|\|v.push("\\["+R+"*(?:value\|"+I+")"),e.querySelectorAll("[id~="+A+"-]").length\|\|v.push("~="),
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 2c 74 3d 4a 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4a 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 72 29 Data Ascii: ,t=J.test(a.compareDocumentPosition),y=t\|\|J.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:43:52 UTC	566	OUT	GET /npm/@popperjs/core@2.5.4/dist/umd/popper.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://anh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:43:52 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18362 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 2.5.4 X-JSD-Version-Type: version ETag: W/"47ba-iedqcPSKLctTWaW2pXutv3fMUjk" Accept-Ranges: bytes Age: 2094169 Date: Sun, 06 Oct 2024 14:43:52 GMT X-Served-By: cache-fra-eddf8230149-FRA, cache-nyc-kteb1890061-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 20 76 32 2e 35 2e 34 20 2d 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 65 7c 7c 73 65 6c 66 29 2e 50 6f 70 70 65 72 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 Data Ascii: /** * @popperjs/core v2.5.4 - MIT License */"use strict";!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e=e\|\|self).Popper={})}(this,(function(e){function t(
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 64 2e 73 63 72 6f 6c 6c 54 6f 70 2d 6d 2e 79 2c 77 69 64 74 68 3a 65 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 65 2e 68 65 69 67 68 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 7b 78 3a 65 2e 6f 66 66 73 65 74 4c 65 66 74 2c 79 3a 65 2e 6f 66 66 73 65 74 54 6f 70 2c 77 69 64 74 68 3a 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 68 65 69 67 68 74 3a 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 22 68 74 6d 6c 22 3d 3d 3d 61 28 65 29 3f 65 3a 65 2e 61 73 73 69 67 6e 65 64 53 6c 6f 74 7c 7c 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7c 7c 73 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 5b 5d 29 3b 76 Data Ascii: d.scrollTop-m.y,width:e.width,height:e.height}}function u(e){return{x:e.offsetLeft,y:e.offsetTop,width:e.offsetWidth,height:e.offsetHeight}}function d(e){return"html"===a(e)?e:e.assignedSlot\|\|e.parentNode\|\|e.host\|\|s(e)}function m(e,t){void 0===t&&(t=[]);v
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 6e 29 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 76 6f 69 64 20 30 2c 6e 28 65 28 29 29 7d 29 29 7d 29 29 29 2c 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 29 7b 76 61 72 20 72 2c 6f 3d 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 26 26 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 3b 69 66 28 65 2e 63 6f 6e 74 61 69 6e 73 28 74 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 28 72 3d 6f 29 26 26 28 72 3d 6f 20 69 6e 73 74 61 6e 63 65 6f 66 28 72 3d 6e 28 6f 29 2e 53 68 61 64 6f 77 52 6f 6f 74 29 7c 7c 6f 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 68 61 64 6f 77 Data Ascii: unction(n){Promise.resolve().then((function(){t=void 0,n(e())}))}))),t}}function y(e){return e.split("-")[0]}function O(e,t){var r,o=t.getRootNode&&t.getRootNode();if(e.contains(t))return!0;if((r=o)&&(r=o instanceof(r=n(o).ShadowRoot)\|\|o instanceof Shadow
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 66 28 63 28 65 29 2e 70 6f 73 69 74 69 6f 6e 29 26 26 69 28 65 29 3f 67 28 65 29 3a 65 3b 72 65 74 75 72 6e 20 6f 28 6e 29 3f 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 65 29 26 26 4f 28 65 2c 6e 29 26 26 22 62 6f 64 79 22 21 3d 3d 61 28 65 29 7d 29 29 3a 5b 5d 7d 28 65 29 3a 5b 5d 2e 63 6f 6e 63 61 74 28 74 29 2c 28 6e 3d 28 6e 3d 5b 5d 2e 63 6f 6e 63 61 74 28 74 2c 5b 6e 5d 29 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 78 28 65 2c 6e 29 2c 74 2e 74 6f 70 3d 4d 61 74 68 2e 6d 61 78 28 6e 2e 74 6f 70 2c 74 2e 74 6f 70 29 2c 74 2e 72 69 67 68 74 3d 4d 61 74 68 2e 6d 69 6e 28 6e 2e 72 69 67 68 74 2c 74 2e 72 69 67 68 74 29 2c 74 2e 62 6f 74 74 6f 6d 3d Data Ascii: f(c(e).position)&&i(e)?g(e):e;return o(n)?t.filter((function(e){return o(e)&&O(e,n)&&"body"!==a(e)})):[]}(e):[].concat(t),(n=(n=[].concat(t,[n])).reduce((function(t,n){return n=x(e,n),t.top=Math.max(n.top,t.top),t.right=Math.min(n.right,t.right),t.bottom=
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 76 61 72 20 63 3d 72 2e 61 6c 74 42 6f 75 6e 64 61 72 79 2c 70 3d 76 6f 69 64 20 30 21 3d 3d 63 26 26 63 3b 72 3d 44 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 28 72 3d 76 6f 69 64 20 30 3d 3d 3d 28 72 3d 72 2e 70 61 64 64 69 6e 67 29 3f 30 3a 72 29 3f 72 3a 50 28 72 2c 54 29 29 3b 76 61 72 20 6c 3d 65 2e 65 6c 65 6d 65 6e 74 73 2e 72 65 66 65 72 65 6e 63 65 3b 63 3d 65 2e 72 65 63 74 73 2e 70 6f 70 70 65 72 2c 61 3d 6a 28 6f 28 70 3d 65 2e 65 6c 65 6d 65 6e 74 73 5b 70 3f 22 70 6f 70 70 65 72 22 3d 3d 3d 69 3f 22 72 65 66 65 72 65 6e 63 65 22 3a 22 70 6f 70 70 65 72 22 3a 69 5d 29 3f 70 3a 70 2e 63 6f 6e 74 65 78 74 45 6c 65 6d 65 6e 74 7c 7c 73 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 70 6f 70 70 65 72 29 2c 61 2c 66 29 2c 70 3d 45 28 7b 72 65 66 65 Data Ascii: var c=r.altBoundary,p=void 0!==c&&c;r=D("number"!=typeof(r=void 0===(r=r.padding)?0:r)?r:P(r,T));var l=e.elements.reference;c=e.rects.popper,a=j(o(p=e.elements[p?"popper"===i?"reference":"popper":i])?p:p.contextElement\|\|s(e.elements.popper),a,f),p=E({refe
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 72 65 66 65 72 65 6e 63 65 3a 6f 28 65 29 3f 6d 28 65 29 3a 65 2e 63 6f 6e 74 65 78 74 45 6c 65 6d 65 6e 74 3f 6d 28 65 2e 63 6f 6e 74 65 78 74 45 6c 65 6d 65 6e 74 29 3a 5b 5d 2c 70 6f 70 70 65 72 3a 6d 28 74 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 76 28 65 29 3b 72 65 74 75 72 6e 20 4e 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 68 61 73 65 3d 3d 3d 6e 7d 29 29 29 7d 29 2c 5b 5d 29 7d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 5b 74 2e 6e 61 6d 65 5d 3b Data Ascii: reference:o(e)?m(e):e.contextElement?m(e.contextElement):[],popper:m(t)},i=function(e){var t=v(e);return N.reduce((function(e,n){return e.concat(t.filter((function(e){return e.phase===n})))}),[])}(function(e){var t=e.reduce((function(e,t){var n=e[t.name];
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 70 2e 66 6f 72 63 65 55 70 64 61 74 65 28 29 2c 65 28 73 29 7d 29 29 7d 29 29 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 29 2c 63 3d 21 30 7d 7d 3b 72 65 74 75 72 6e 20 6b 28 65 2c 74 29 3f 28 70 2e 73 65 74 4f 70 74 69 6f 6e 73 28 69 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 63 26 26 69 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 26 26 69 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 28 65 29 7d 29 29 2c 70 29 3a 70 7d 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 29 7b 76 61 72 20 74 2c 72 3d 65 2e 70 6f 70 70 65 72 2c 6f 3d 65 2e 70 6f 70 70 65 72 52 65 63 74 2c 69 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2c 61 3d 65 2e 6f 66 66 73 65 74 73 2c 66 3d 65 2e 70 6f 73 69 74 69 6f 6e 2c 63 3d 65 2e 67 70 75 41 63 63 65 6c 65 72 61 Data Ascii: p.forceUpdate(),e(s)}))})),destroy:function(){a(),c=!0}};return k(e,t)?(p.setOptions(i).then((function(e){!c&&i.onFirstUpdate&&i.onFirstUpdate(e)})),p):p}}function W(e){var t,r=e.popper,o=e.popperRect,i=e.placement,a=e.offsets,f=e.position,c=e.gpuAccelera
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 6e 20 65 2e 63 6f 6e 63 61 74 28 5b 74 2b 22 2d 73 74 61 72 74 22 2c 74 2b 22 2d 65 6e 64 22 5d 29 7d 29 2c 5b 5d 29 2c 43 3d 5b 5d 2e 63 6f 6e 63 61 74 28 54 2c 5b 22 61 75 74 6f 22 5d 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 5b 74 2c 74 2b 22 2d 73 74 61 72 74 22 2c 74 2b 22 2d 65 6e 64 22 5d 29 7d 29 2c 5b 5d 29 2c 4e 3d 22 62 65 66 6f 72 65 52 65 61 64 20 72 65 61 64 20 61 66 74 65 72 52 65 61 64 20 62 65 66 6f 72 65 4d 61 69 6e 20 6d 61 69 6e 20 61 66 74 65 72 4d 61 69 6e 20 62 65 66 6f 72 65 57 72 69 74 65 20 77 72 69 74 65 20 61 66 74 65 72 57 72 69 74 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 56 3d 7b 70 6c 61 63 65 6d 65 6e 74 3a 22 62 6f 74 74 6f 6d 22 2c 6d 6f 64 69 Data Ascii: n e.concat([t+"-start",t+"-end"])}),[]),C=[].concat(T,["auto"]).reduce((function(e,t){return e.concat([t,t+"-start",t+"-end"])}),[]),N="beforeRead read afterRead beforeMain main afterMain beforeWrite write afterWrite".split(" "),V={placement:"bottom",modi
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 73 26 26 28 74 2e 73 74 79 6c 65 73 2e 70 6f 70 70 65 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 73 74 79 6c 65 73 2e 70 6f 70 70 65 72 29 2c 57 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 7b 7d 2c 7b 6f 66 66 73 65 74 73 3a 74 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 70 6f 70 70 65 72 4f 66 66 73 65 74 73 2c 70 6f 73 69 74 69 6f 6e 3a 74 2e 6f 70 74 69 6f 6e 73 2e 73 74 72 61 74 65 67 79 2c 61 64 61 70 74 69 76 65 3a 6e 7d 29 29 29 29 2c 6e 75 6c 6c 21 3d 74 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 61 72 72 6f 77 26 26 28 74 2e 73 74 79 6c 65 73 2e 61 72 72 6f 77 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 Data Ascii: s&&(t.styles.popper=Object.assign(Object.assign({},t.styles.popper),W(Object.assign(Object.assign({},e),{},{offsets:t.modifiersData.popperOffsets,position:t.options.strategy,adaptive:n})))),null!=t.modifiersData.arrow&&(t.styles.arrow=Object.assign(Object
2024-10-06 14:43:52 UTC	1378	IN	Data Raw: 6e 28 65 29 7b 72 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 65 29 7d 29 29 29 7d 29 29 7d 7d 2c 72 65 71 75 69 72 65 73 3a 5b 22 63 6f 6d 70 75 74 65 53 74 79 6c 65 73 22 5d 7d 2c 59 3d 7b 6e 61 6d 65 3a 22 6f 66 66 73 65 74 22 2c 65 6e 61 62 6c 65 64 3a 21 30 2c 70 68 61 73 65 3a 22 6d 61 69 6e 22 2c 72 65 71 75 69 72 65 73 3a 5b 22 70 6f 70 70 65 72 4f 66 66 73 65 74 73 22 5d 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 74 61 74 65 2c 6e 3d 65 2e 6e 61 6d 65 2c 72 3d 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 65 2e 6f 70 74 69 6f 6e 73 2e 6f 66 66 73 65 74 29 3f 5b 30 2c 30 5d 3a 65 2c 6f 3d 28 65 3d 43 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 6f 3d 74 2e 72 65 63 74 73 2c 69 3d 79 Data Ascii: n(e){r.removeAttribute(e)})))}))}},requires:["computeStyles"]},Y={name:"offset",enabled:!0,phase:"main",requires:["popperOffsets"],fn:function(e){var t=e.state,n=e.name,r=void 0===(e=e.options.offset)?[0,0]:e,o=(e=C.reduce((function(e,n){var o=t.rects,i=y

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:43:53 UTC	603	OUT	GET /public/assets/img/play.png HTTP/1.1 Host: shopseller.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://anh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:43:53 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 14:43:53 GMT Content-Type: image/png Content-Length: 13567 Last-Modified: Mon, 18 Jul 2022 17:58:10 GMT Connection: close Vary: Accept-Encoding ETag: "62d59f32-34ff" Expires: Tue, 05 Nov 2024 14:43:53 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-06 14:43:53 UTC	13567	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 59 08 06 00 00 00 84 e5 19 b3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 05 da 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR,YpHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:43:53 UTC	640	OUT	GET /public/uploads/all/YN7XJzRe8oXfwayrxdHmUsPS8sCODN6FIU0xyOBr.png HTTP/1.1 Host: shopseller.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://anh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:43:54 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 14:43:53 GMT Content-Type: image/png Content-Length: 19012 Last-Modified: Mon, 27 May 2024 10:38:24 GMT Connection: close Vary: Accept-Encoding ETag: "665462a0-4a44" Expires: Tue, 05 Nov 2024 14:43:53 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-06 14:43:54 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7c 00 00 00 5a 08 06 00 00 00 bb 65 ed 55 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 79 98 5c 57 79 ee fb 5b 7b aa b9 7a 1e d4 1a ac c1 96 27 c9 16 f2 24 db d8 98 d8 04 12 64 62 2e 76 4e 08 24 18 02 e4 e6 24 39 31 71 72 13 1e ce 01 42 9e 24 f7 1c 42 20 97 93 cb 0d 3e 1c c8 48 c0 60 43 64 27 84 c9 06 6c 10 b6 2c 5b 1e 24 59 d6 64 75 ab d5 f3 50 73 d5 1e be fb c7 de bb ba ba 55 dd 5d 2d b5 ac 81 7a fd 94 ab ab 6a ed bd d7 ae 56 bf eb 5b df f0 7e 4a 44 38 d7 31 05 9b 3c f8 4d 0f b6 6a 70 4c 60 00 18 d7 e1 f9 da 71 02 17 db f0 4b 1e b4 ea b0 cb 84 3f 6b 85 63 67 69 da 4d 34 d1 44 13 e7 14 8c b3 3d 81 85 b0 6b aa 7c c5 60 a1 f0 81 69 b1 ef 2b 2a f0 Data Ascii: PNGIHDR\|ZeUpHYs+ IDATxy\Wy[{z'$db.vN$$91qrB$B >H`Cd'l,[$YduPsU]-zjV[~JD81<MjpL`qK?kcgiM4D=k\|`i+*
2024-10-06 14:43:54 UTC	2997	IN	Data Raw: a0 6a 8c 6a 02 f9 77 4f 03 44 d0 00 53 34 ec c9 3c ee 8b 87 f1 6e b9 0a 8d ae 45 af 7b 12 e1 a7 e0 c5 75 11 eb 93 bf 71 d5 a6 4d 9f 7c ba b4 aa 74 db 1d 1c d9 ff 0a f6 c0 ab 18 65 c1 f5 ea ca d8 cc 03 41 d7 35 94 5b c1 1b 1f a1 fc a3 61 46 7e fc 24 23 f1 18 24 63 10 4f 82 d9 02 15 07 b2 59 ff 51 cc 83 b8 7e 0a 90 ab fc 8b 05 72 0f 20 78 9e 8b 01 44 35 88 7a 1e 17 29 83 5f 6c bb 88 db bb d6 92 f4 7c e1 66 d1 a0 a0 3c 64 d3 06 22 b7 df f0 14 e9 f8 d1 46 66 7b 2e 20 ac c6 5b 2a 44 84 72 b9 7c 06 66 74 ea 48 24 12 95 42 a1 50 59 4a 69 7b 8d 52 a0 87 2f e5 db c4 cf 38 f2 48 6f 05 c5 50 a6 48 01 13 d1 d4 ec 5a 1c f1 02 77 af ef 5c 56 e0 77 e5 93 c0 c6 13 5f 6d 57 82 ac 97 c9 9c 30 51 10 a4 f1 0e 63 cb 8b bc f4 7a a5 32 52 ae a0 3c 0f 4d 6a d2 50 6a 0c 69 6d ee Data Ascii: jjwODS4<nE{uqM\|teA5[aF~$#$cOYQ~r xD5z)_l\|f<d"Ff{. [*Dr\|ftH$BPYJi{R/8HoPHZw\Vw_mW0Qcz2R<MjPjim

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:43:53 UTC	602	OUT	GET /public/assets/img/app.png HTTP/1.1 Host: shopseller.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://anh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:43:54 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 14:43:53 GMT Content-Type: image/png Content-Length: 19667 Last-Modified: Mon, 18 Jul 2022 17:58:10 GMT Connection: close Vary: Accept-Encoding ETag: "62d59f32-4cd3" Expires: Tue, 05 Nov 2024 14:43:53 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-06 14:43:54 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 59 08 06 00 00 00 84 e5 19 b3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 05 e3 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR,YpHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD
2024-10-06 14:43:54 UTC	3652	IN	Data Raw: 28 42 08 84 aa 72 c6 f0 e1 8c a9 63 c5 f4 f9 7c 7c f4 e1 87 56 bb 86 70 97 91 a6 25 50 27 03 46 68 b1 d8 d9 51 2a 00 7d b1 78 31 40 c3 d6 59 49 42 68 1a f1 46 4c 9f e6 f7 e3 ab ad a5 ba a6 16 59 92 ad 0f b4 be 42 89 d2 52 5d 24 ba f3 ce 3b 23 32 32 ec dc b9 d3 18 52 0e fb b0 7b bd 91 51 0e dd 7b e8 f1 81 82 c3 4c 80 10 ba 38 66 b3 d9 59 b8 f0 83 08 23 c2 d0 a1 43 19 3b 76 2c 95 95 95 61 73 e8 9e 3e 0a 65 65 a5 f4 ef df 9f c9 97 4d 8e 98 ef e5 97 4d 6b ba d4 a0 48 68 9e 0f 1d db 3c dc ee 58 fc 7e 3f 9f 7e fa 69 58 9f ce 5d 3a f3 e0 83 0f e1 f7 fb a9 ae f6 44 ac 2d 74 3e 55 d5 a8 ad f5 ea d5 98 43 d6 72 fc 0f 5d 87 d5 e4 04 4b 08 c3 39 51 d3 18 53 47 97 d3 54 78 e4 d1 47 f9 6e ed 5a dd ff e9 78 b1 bb 42 d0 2a 33 93 93 eb 88 83 6b d7 ae 65 d7 8e 1d f0 33 e9 Data Ascii: (Brc\|\|Vp%P'FhQ}x1@YIBhFLYBR]$;#22R{Q{L8fY#C;v,as>eeMMkHh<X~?~iX]:D-t>UCr]K9QSGTxGnZxB3ke3

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:43:54 UTC	594	OUT	GET /favicon.ico HTTP/1.1 Host: anh.tiktokshopx.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://anh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:43:54 UTC	164	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 06 Oct 2024 14:43:54 GMT Content-Type: text/html Content-Length: 148 Connection: close ETag: "6701642e-94"
2024-10-06 14:43:54 UTC	148	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>