Edit tour

Windows Analysis Report
https://xinh.tiktokshopx.icu/

Overview

General Information

Sample URL:	https://xinh.tiktokshopx.icu/
Analysis ID:	1526839
Tags:	openphish
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected suspicious crossdomain redirect

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML title does not match URL

HTTP GET or POST without a user agent

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6656 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 --field-trial-handle=2264,i,11061162512646614340,6676546615686969498,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6664 --field-trial-handle=2264,i,11061162512646614340,6676546615686969498,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3788 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6656 --field-trial-handle=2264,i,11061162512646614340,6676546615686969498,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://xinh.tiktokshopx.icu/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /x/migrate HTTP/1.1Host: x.comConnection: keep-aliveContent-Length: 420Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://twitter.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A172822609850180579; guest_id_ads=v1%3A172822609850180579; personalization_id="v1_bQ6+Dqosml/eOiCKrQY9kw=="; guest_id=v1%3A172822609850180579

Source: https://www.linkedin.com/	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=outline&type=undefined&width=392&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_145362_556309&as=gVuTWbcX%2F0%2BoyBT5vIug1w&hl=en_US
Source: https://www.linkedin.com/	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=outline&type=undefined&width=392&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_145362_556309&as=gVuTWbcX%2F0%2BoyBT5vIug1w&hl=en_US

Source: https://xinh.tiktokshopx.icu/	HTTP Parser: Number of links: 0
Source: https://x.com/	HTTP Parser: Number of links: 0
Source: https://www.linkedin.com/	HTTP Parser: Number of links: 0

Source: https://x.com/	HTTP Parser: Title: Sign In - Google Accounts does not match URL
Source: https://www.linkedin.com/	HTTP Parser: Title: Sign In - Google Accounts does not match URL

Source: https://xinh.tiktokshopx.icu/	HTTP Parser: No favicon
Source: https://x.com/	HTTP Parser: No favicon
Source: https://www.linkedin.com/	HTTP Parser: No favicon

Source: https://xinh.tiktokshopx.icu/	HTTP Parser: No <meta name="author".. found
Source: https://x.com/	HTTP Parser: No <meta name="author".. found
Source: https://github.com/	HTTP Parser: No <meta name="author".. found
Source: https://github.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="author".. found

Source: https://xinh.tiktokshopx.icu/	HTTP Parser: No <meta name="copyright".. found
Source: https://x.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://github.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://github.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50126 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50435 version: TLS 1.2

Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2

Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: chromecache_412.2.dr	String found in binary or memory: <a href="https://www.linkedin.com" target="_blank">LinkedIn</a> equals www.linkedin.com (Linkedin)
Source: chromecache_412.2.dr	String found in binary or memory: <a href="https://www.twitter.com" target="_blank">Twitter</a> equals www.twitter.com (Twitter)
Source: chromecache_697.2.dr	String found in binary or memory: <a href="https://www.facebook.com/GitHub" class="footer-social-icon d-block Link--outlineOffset" data-analytics-event="{"category":"Footer","action":"go to Facebook","label":"text:text:facebook"}"> equals www.facebook.com (Facebook)
Source: chromecache_697.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/github" class="footer-social-icon d-block Link--outlineOffset" data-analytics-event="{"category":"Footer","action":"go to Linkedin","label":"text:text:linkedin"}"> equals www.linkedin.com (Linkedin)
Source: chromecache_697.2.dr	String found in binary or memory: <a href="https://www.youtube.com/github" class="footer-social-icon d-block Link--outlineOffset" data-analytics-event="{"category":"Footer","action":"go to YouTube","label":"text:text:youtube"}"> equals www.youtube.com (Youtube)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 06 Oct 2024 14:47:54 GMTContent-Type: text/htmlContent-Length: 148Connection: closeETag: "6701632f-94"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Sun, 06 Oct 2024 14:48:26 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 04ca51fca5b360e2x-rate-limit-limit: 100x-rate-limit-reset: 1728227006x-rate-limit-remaining: 99strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 6x-connection-hash: 65925cf2e41d70436ec8e751a3e588706abc08a1988ad0f6a755c9dda58e247cconnection: close

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 --field-trial-handle=2264,i,11061162512646614340,6676546615686969498,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://xinh.tiktokshopx.icu/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6664 --field-trial-handle=2264,i,11061162512646614340,6676546615686969498,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6656 --field-trial-handle=2264,i,11061162512646614340,6676546615686969498,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 --field-trial-handle=2264,i,11061162512646614340,6676546615686969498,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://xinh.tiktokshopx.icu/"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6664 --field-trial-handle=2264,i,11061162512646614340,6676546615686969498,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6656 --field-trial-handle=2264,i,11061162512646614340,6676546615686969498,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
http://underscorejs.org	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11751_Global_miHoYo_Final_Hashmoji_v2/BF-11751_Global_miHoYo_Fina	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	0%	URL Reputation	safe
https://meet.google.com	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe

Source: global traffic	DNS traffic detected: DNS query: xinh.tiktokshopx.icu
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: shopseller.vip
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: lf16-tiktok-web.tiktokcdn-us.com
Source: global traffic	DNS traffic detected: DNS query: lf16-cdn-tos.tiktokcdn-us.com
Source: global traffic	DNS traffic detected: DNS query: www.twitter.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: x.com
Source: global traffic	DNS traffic detected: DNS query: lf16-tiktok-common.tiktokcdn-us.com
Source: global traffic	DNS traffic detected: DNS query: abs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.twitter.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: pbs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.x.com
Source: global traffic	DNS traffic detected: DNS query: mon16-normal-useast5.tiktokv.us
Source: global traffic	DNS traffic detected: DNS query: video.twimg.com
Source: global traffic	DNS traffic detected: DNS query: abs-0.twimg.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: sf16-website-login.neutral.ttwstatic.com
Source: global traffic	DNS traffic detected: DNS query: lf16-tiktok-common.ibytedtos.com
Source: global traffic	DNS traffic detected: DNS query: www.github.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: github.githubassets.com
Source: global traffic	DNS traffic detected: DNS query: avatars.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: github-cloud.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: user-images.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: collector.github.com
Source: global traffic	DNS traffic detected: DNS query: api.github.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: static.licdn.com
Source: global traffic	DNS traffic detected: DNS query: platform.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: ponf.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: stun.l.google.com

Name	IP	Active	Malicious	Reputation
avatars.githubusercontent.com	185.199.108.133	true	false	unknown
dualstack.video.twitter.map.fastly.net	146.75.120.158	true	false	unknown
glb-db52c2cf8be544.github.com	140.82.112.22	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
github.githubassets.com	185.199.111.154	true	false	unknown
tpop-api.twitter.com	104.244.42.194	true	false	unknown
t.co	162.159.140.229	true	false	unknown
code.jquery.com	151.101.66.137	true	false	unknown
twimg.twitter.map.fastly.net	146.75.120.159	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
shopseller.vip	45.195.52.22	true	false	unknown
twitter.com	104.244.42.193	true	false	unknown
google.com	142.250.186.110	true	false	unknown
github.com	140.82.121.3	true	false	unknown
tpop-api.x.com	104.244.42.194	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	unknown
api.github.com	140.82.121.6	true	false	unknown
ponf.linkedin.com	144.2.9.1	true	false	unknown
s3-w.us-east-1.amazonaws.com	16.182.38.185	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
play.google.com	216.58.206.78	true	false	unknown
dualstack.twimg.twitter.map.fastly.net	199.232.188.159	true	false	unknown
xinh.tiktokshopx.icu	43.240.239.85	true	false	unknown
abs-zero.twimg.com	104.244.43.131	true	false	unknown
cs1404.wpc.epsiloncdn.net	152.199.21.118	true	false	unknown
x.com	104.244.42.193	true	false	unknown
user-images.githubusercontent.com	185.199.111.133	true	false	unknown
stun.l.google.com	74.125.250.129	true	false	unknown
github-cloud.s3.amazonaws.com	unknown	unknown	false	unknown
abs.twimg.com	unknown	unknown	false	unknown
static.licdn.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
abs-0.twimg.com	unknown	unknown	false	unknown
lf16-cdn-tos.tiktokcdn-us.com	unknown	unknown	false	unknown
lf16-tiktok-common.tiktokcdn-us.com	unknown	unknown	false	unknown
api.twitter.com	unknown	unknown	false	unknown
www.github.com	unknown	unknown	false	unknown
collector.github.com	unknown	unknown	false	unknown
mon16-normal-useast5.tiktokv.us	unknown	unknown	false	unknown
video.twimg.com	unknown	unknown	false	unknown
platform.linkedin.com	unknown	unknown	false	unknown
www.tiktok.com	unknown	unknown	false	unknown
pbs.twimg.com	unknown	unknown	false	unknown
api.x.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
lf16-tiktok-common.ibytedtos.com	unknown	unknown	false	unknown
sf16-website-login.neutral.ttwstatic.com	unknown	unknown	false	unknown
lf16-tiktok-web.tiktokcdn-us.com	unknown	unknown	false	unknown
www.twitter.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://static.licdn.com/aero-v1/sc/h/aj96axry4qqwypq4xdfd6cql9	false	unknown
https://github.githubassets.com/assets/chunk-ui_packages_ghcc-consent-element_ghcc-consent-element_ts-331bb20ac2eb.js	false	unknown
https://github.githubassets.com/assets/shape-0-df97fa6b0c27.svg	false	unknown
https://github.githubassets.com/assets/chunk-app_components_search_qbsearch-input-element_ts-ui_packages_trusted-types-policies_policy_ts--7cc11e-7e08c316f09f.js	false	unknown
https://api.github.com/_private/browser/stats	false	unknown
https://github.com/opensearch.xml	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8.js	false	unknown
https://x.com/x/migrate	false	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePee.8a7edc7a.js	false	unknown
https://github.githubassets.com/assets/ui_packages_failbot_failbot_ts-aabfa4ec15fe.js	false	unknown
https://github.githubassets.com/assets/home-339181319b7e.css	false	unknown
https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-900dde-ab87c1d6c5c8.js	false	unknown
https://static.licdn.com/aero-v1/sc/h/ddi43qwelxeqjxdd45pe3fvs1	false	unknown
https://github.githubassets.com/assets/illu-copilot-editor-6474457a5b19.png	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-b73fdff77a4e.js	false	unknown
https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.1004095a.js	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76.js	false	unknown
https://github.githubassets.com/assets/primer-react-c2abd9301d38.js	false	unknown
https://static.licdn.com/aero-v1/sc/h/51t74mlo1ty7vakn3a80a9jcp	false	unknown
https://github.githubassets.com/assets/primer-react.a38d782b719dc67594c9.module.css	false	unknown
https://github.githubassets.com/favicons/favicon.png	false	unknown
https://x.com/	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_emotion_is-prop-valid_dist_emotion-is-prop-valid_esm_js-node_modules_emo-41da55-1851acd376ff.js	false	unknown
https://abs.twimg.com/responsive-web/client-web/loader.AudioOnlyVideoPlayer.f013ad8a.js	false	unknown
https://github.githubassets.com/images/modules/site/home/globe/flag.obj	false	unknown
https://abs.twimg.com/responsive-web/client-web/ondemand.s.4243d62a.js	false	unknown
https://github.githubassets.com/assets/chunk-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_stack-tra-600f89-7a5d1736c364.js	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_combobox-nav_dist_index_js-node_modules_github_g-emoji-element_di-6ce195-53781cbc550f.js	false	unknown
https://github.githubassets.com/assets/chunk-app_components_search_parsing_parsing_ts-0dbb4d051f34.js	false	unknown
https://abs.twimg.com/responsive-web/client-web/loader.AppModules.d89da73a.js	false	unknown
https://abs.twimg.com/responsive-web/client-web/i18n/en.a2da60ca.js	false	unknown
https://github.githubassets.com/favicons/favicon.svg	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/solutions/industries/financial-services	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/illu-dependabot-d98c73cc6724.png?width=604	chromecache_697.2.dr	false		unknown
https://www.linkedin.com	chromecache_412.2.dr	false		unknown
https://github.githubassets.com/assets/vendors-node_modules_braintree_browser-detection_dist_browser	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_mo	chromecache_697.2.dr	false		unknown
https://github.com/github/roadmap	chromecache_697.2.dr	false		unknown
http://underscorejs.org	chromecache_375.2.dr, chromecache_530.2.dr	false	URL Reputation: safe	unknown
https://github.githubassets.com/assets/illu-codespaces-1d2d17e8b2b7.png?width=604	chromecache_697.2.dr	false		unknown
https://github.com/features/code-review	chromecache_697.2.dr	false		unknown
https://github.com/features	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/illu-dependabot-d98c73cc6724.png?width=483&format=webpll	chromecache_697.2.dr	false		unknown
https://github.com/mobile	chromecache_697.2.dr	false		unknown
http://polymer.github.io/AUTHORS.txt	chromecache_505.2.dr, chromecache_548.2.dr	false	URL Reputation: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_	chromecache_697.2.dr	false		unknown
https://github.com/solutions/industries/manufacturing	chromecache_697.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_744.2.dr, chromecache_594.2.dr	false		unknown
https://github.githubassets.com/assets/illu-dependabot-d98c73cc6724.png?width=604&format=webpll	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/issues-plan-2-46d1ce1d4519.png?width=999&format=webpll	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/illu-codespaces-1d2d17e8b2b7.png?width=241&format=webpll	chromecache_697.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	chromecache_695.2.dr	false	URL Reputation: safe	unknown
https://github.githubassets.com/assets/illu-secret-scanning-2-88fb429376d6.png	chromecache_697.2.dr	false		unknown
http://primer.style/css	chromecache_447.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11949_GlicoThailandPockyBox_Hashmoji2024_/BF-11949_GlicoThailandP	chromecache_695.2.dr	false		unknown
https://github.githubassets.com/assets/commandpost-18d45fffda67.png	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/illu-pull-requests-2-280cc958fc05.png?width=302	chromecache_697.2.dr	false		unknown
https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax	chromecache_697.2.dr	false		unknown
http://schema.org/EventScheduled	chromecache_641.2.dr, chromecache_708.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	chromecache_695.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_505.2.dr, chromecache_548.2.dr	false	URL Reputation: safe	unknown
https://docs.github.com/get-started/accessibility/keyboard-shortcuts	chromecache_697.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	chromecache_695.2.dr	false	URL Reputation: safe	unknown
https://github.githubassets.com/assets/footer-blur-8bc8e1f23df6.png	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/apple-touch-icon-72x72-e090c8a282d0.png	chromecache_539.2.dr	false		unknown
https://github.githubassets.com/assets/illu-actions-2-c5178134f381.png?width=1306&format=webpll	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modu	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/illu-mobile-chat-9e7549906574.webp	chromecache_697.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11751_Global_miHoYo_Final_Hashmoji_v2/BF-11751_Global_miHoYo_Fina	chromecache_695.2.dr	false	URL Reputation: safe	unknown
https://github.com/trending	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/illu-codespaces-1d2d17e8b2b7.png?width=967&format=webpll	chromecache_697.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	chromecache_695.2.dr	false	URL Reputation: safe	unknown
https://github.githubassets.com/assets/illu-codespaces-1d2d17e8b2b7.png	chromecache_697.2.dr	false		unknown
https://www.figma.com/file/egkKv7mudRwk2dVPM0WCR6/NBA-Digest-Email?type=design&node-id=2927-186236&t	chromecache_476.2.dr, chromecache_681.2.dr	false		unknown
https://github.githubassets.com/assets/illu-actions-2-c5178134f381.png?width=1044&format=webpll	chromecache_697.2.dr	false		unknown
https://api.github.com/_private/browser/errors	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-7ace7	chromecache_697.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11950_Riyadhseason_Hashmoji2024_/BF-11950_Riyadhseason_Hashmoji20	chromecache_695.2.dr	false		unknown
https://github.githubassets.com/assets/illu-actions-2-c5178134f381.png?width=653&format=webpll	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/globe-500.hevc-42032a395ff1.mp4	chromecache_697.2.dr	false		unknown
https://github.com/features/discussions	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/illu-codespaces-1d2d17e8b2b7.png?width=1209&format=webpll	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/app-icon-192-bcc967ab9829.png	chromecache_539.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	chromecache_436.2.dr	false	URL Reputation: safe	unknown
https://resources.github.com/forrester/	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/illu-pull-requests-2-280cc958fc05.png	chromecache_697.2.dr	false		unknown
https://x.com/en/privacy	chromecache_598.2.dr, chromecache_427.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	chromecache_383.2.dr, chromecache_437.2.dr, chromecache_709.2.dr, chromecache_620.2.dr, chromecache_680.2.dr, chromecache_506.2.dr, chromecache_655.2.dr, chromecache_740.2.dr, chromecache_609.2.dr, chromecache_449.2.dr	false	URL Reputation: safe	unknown
https://github.githubassets.com/assets/illu-codespaces-1d2d17e8b2b7.png?width=725&format=webpll	chromecache_697.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SideNav.e8d0899a.	chromecache_448.2.dr, chromecache_582.2.dr	false		unknown
https://github.githubassets.com/assets/illu-secret-scanning-2-88fb429376d6.png?width=604&format=	chromecache_697.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF_12060_MOC_2024_SND_Hashmoji/BF_12060_MOC_2024_SND_Hashmoji.png	chromecache_695.2.dr	false		unknown
https://meet.google.com	chromecache_474.2.dr, chromecache_691.2.dr, chromecache_673.2.dr, chromecache_543.2.dr	false	URL Reputation: safe	unknown
https://github.githubassets.com/assets/issues-plan-2-46d1ce1d4519.png?width=499&format=webpll	chromecache_697.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.InlinePl	chromecache_342.2.dr, chromecache_577.2.dr	false		unknown
https://github.githubassets.com/assets/git-branch-collaboration-2-e46b1fb1d363.svg	chromecache_697.2.dr	false		unknown
https://github.githubassets.com/assets/light_tritanopia-31d17ba3e139.css	chromecache_697.2.dr	false		unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_505.2.dr, chromecache_548.2.dr	false	URL Reputation: safe	unknown
https://github.githubassets.com/assets/apple-touch-icon-76x76-a4523d80afb4.png	chromecache_539.2.dr	false		unknown
https://github.githubassets.com/assets/illu-pull-requests-2-280cc958fc05.png?width=966&format=we	chromecache_697.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
152.199.21.118	cs1404.wpc.epsiloncdn.net	United States	15133	EDGECASTUS	false
146.75.120.159	twimg.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
146.75.120.158	dualstack.video.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
43.240.239.85	xinh.tiktokshopx.icu	China	136800	XIAOZHIYUN1-AS-APICIDCNETWORKUS	false
185.199.111.154	github.githubassets.com	Netherlands	54113	FASTLYUS	false
142.250.185.142	unknown	United States	15169	GOOGLEUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
104.244.43.131	abs-zero.twimg.com	United States	54113	FASTLYUS	false
142.250.186.110	google.com	United States	15169	GOOGLEUS	false
185.199.110.154	unknown	Netherlands	54113	FASTLYUS	false
162.159.140.229	t.co	United States	13335	CLOUDFLARENETUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
144.2.9.1	ponf.linkedin.com	Netherlands	14413	LINKEDINUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
140.82.112.22	glb-db52c2cf8be544.github.com	United States	36459	GITHUBUS	false
199.232.188.159	dualstack.twimg.twitter.map.fastly.net	United States	54113	FASTLYUS	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.78	play.google.com	United States	15169	GOOGLEUS	false
74.125.250.129	stun.l.google.com	United States	15169	GOOGLEUS	false
104.244.42.1	unknown	United States	13414	TWITTERUS	false
172.217.16.206	unknown	United States	15169	GOOGLEUS	false
140.82.121.3	github.com	United States	36459	GITHUBUS	false
45.195.52.22	shopseller.vip	Seychelles	132813	AISI-AS-APHKAISICLOUDCOMPUTINGLIMITEDHK	false
140.82.121.4	unknown	United States	36459	GITHUBUS	false
140.82.121.6	api.github.com	United States	36459	GITHUBUS	false
104.244.42.194	tpop-api.twitter.com	United States	13414	TWITTERUS	false
104.244.42.193	twitter.com	United States	13414	TWITTERUS	false
185.199.108.133	avatars.githubusercontent.com	Netherlands	54113	FASTLYUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526839
Start date and time:	2024-10-06 16:46:54 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://xinh.tiktokshopx.icu/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@34/641@117/32
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://xinh.tiktokshopx.icu/#home Browse: https://xinh.tiktokshopx.icu/#shop Browse: https://xinh.tiktokshopx.icu/#contact Browse: https://www.tiktok.com/ Browse: https://www.twitter.com/ Browse: https://www.github.com/ Browse: https://www.linkedin.com/

Input	Output
URL: https://xinh.tiktokshopx.icu/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://xinh.tiktokshopx.icu/#home Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://xinh.tiktokshopx.icu/#contact Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://x.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://github.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://github.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://github.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.linkedin.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.linkedin.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71365
Entropy (8bit):	5.434388742232653
Encrypted:	false
SSDEEP:	1536:DlZAbLK//S5aumwWYAsmXYzlMxbOL150NBbCZVp:DLa5VmOOWH
MD5:	8C56DEA6998A620D92EE3EC1B029F36E
SHA1:	73CD99B5893E5FD1DAF2256BF75EB37E115EC88E
SHA-256:	CBE571FA451678B6BC298265E050B2C77C73D3C70DF042F801C9FAFDC4B351BF
SHA-512:	08D463FE4356C2DC5AC10BF2349188E740639E132BE69814CF52CB83493E9DFF53F06D0181C4FD733F45F891BF71D936B9E5BEC29F81F0653919AC6B5EDA2C64
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV~bundle.Accoun.a10c715a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV~bundle.Accoun"],{907187:(t,e,i)=>{i.d(e,{Z:()=>De});i(334115),i(200634),i(320796),i(449228),i(438695),i(827233),i(374083),i(418145),i(315735),i(543450),i(743108),i(332501),i(24895),i(499120),i(865584),i(326936),i(271245),i(414586),i(458143),i(43105),i(334769),i(358188),i(73439),i(477950),i(888233),i(428673),i(201939),i(906886),i(154226);var n,r,a,o,s=i(580753),c=i(981665),u=i(256666),l=i(22699),d=i.n(l);function h(t,e){var i;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(i=function(t,e){if(!t)return;if("string"==typeof t)return f(t,e);var i=Object.prototype.toString.call(t).slice(8,-1);"Object"===i&&t.constructor&&(i=t.constructor.name);if("Map"===i\|\|"Set"===i)return Array.from(t);if("Arguments"===i\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(i))re

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 16:47:49.125626087 CEST	192.168.2.6	1.1.1.1	0x28df	Standard query (0)	xinh.tiktokshopx.icu	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:47:49.125730991 CEST	192.168.2.6	1.1.1.1	0x3ce8	Standard query (0)	xinh.tiktokshopx.icu	65	IN (0x0001)	false
Oct 6, 2024 16:47:49.470308065 CEST	192.168.2.6	1.1.1.1	0x133f	Standard query (0)	xinh.tiktokshopx.icu	65	IN (0x0001)	false
Oct 6, 2024 16:47:51.470566034 CEST	192.168.2.6	1.1.1.1	0x8b4d	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:47:51.470566034 CEST	192.168.2.6	1.1.1.1	0x5f40	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Oct 6, 2024 16:47:51.470835924 CEST	192.168.2.6	1.1.1.1	0x5549	Standard query (0)	shopseller.vip	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:47:51.471327066 CEST	192.168.2.6	1.1.1.1	0xbfea	Standard query (0)	shopseller.vip	65	IN (0x0001)	false
Oct 6, 2024 16:47:51.471327066 CEST	192.168.2.6	1.1.1.1	0x9b48	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:47:51.471493006 CEST	192.168.2.6	1.1.1.1	0x244	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 6, 2024 16:47:51.474818945 CEST	192.168.2.6	1.1.1.1	0x6d57	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:47:51.475406885 CEST	192.168.2.6	1.1.1.1	0x4f1b	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 6, 2024 16:47:51.878561974 CEST	192.168.2.6	1.1.1.1	0x8b01	Standard query (0)	shopseller.vip	65	IN (0x0001)	false
Oct 6, 2024 16:47:51.921525955 CEST	192.168.2.6	1.1.1.1	0x5ea	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:47:51.921525955 CEST	192.168.2.6	1.1.1.1	0xfafa	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 16:47:52.943586111 CEST	192.168.2.6	1.1.1.1	0x5c92	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:47:52.944613934 CEST	192.168.2.6	1.1.1.1	0x90f3	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 6, 2024 16:47:52.947092056 CEST	192.168.2.6	1.1.1.1	0xf894	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:47:52.947412014 CEST	192.168.2.6	1.1.1.1	0xa912	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 6, 2024 16:47:52.948431015 CEST	192.168.2.6	1.1.1.1	0x5550	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:47:52.948736906 CEST	192.168.2.6	1.1.1.1	0x4af5	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Oct 6, 2024 16:47:54.397617102 CEST	192.168.2.6	1.1.1.1	0x2840	Standard query (0)	shopseller.vip	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:47:54.398173094 CEST	192.168.2.6	1.1.1.1	0x851d	Standard query (0)	shopseller.vip	65	IN (0x0001)	false
Oct 6, 2024 16:48:09.756362915 CEST	192.168.2.6	1.1.1.1	0x9f63	Standard query (0)	www.tiktok.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:09.756701946 CEST	192.168.2.6	1.1.1.1	0xe7e6	Standard query (0)	www.tiktok.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:12.688973904 CEST	192.168.2.6	1.1.1.1	0x5096	Standard query (0)	lf16-tiktok-web.tiktokcdn-us.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:12.690359116 CEST	192.168.2.6	1.1.1.1	0x1353	Standard query (0)	lf16-tiktok-web.tiktokcdn-us.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:12.759196043 CEST	192.168.2.6	1.1.1.1	0xe256	Standard query (0)	lf16-cdn-tos.tiktokcdn-us.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:12.759588957 CEST	192.168.2.6	1.1.1.1	0x9eae	Standard query (0)	lf16-cdn-tos.tiktokcdn-us.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:13.385189056 CEST	192.168.2.6	1.1.1.1	0x566f	Standard query (0)	lf16-tiktok-web.tiktokcdn-us.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:13.385724068 CEST	192.168.2.6	1.1.1.1	0x2c52	Standard query (0)	lf16-tiktok-web.tiktokcdn-us.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:13.429646969 CEST	192.168.2.6	1.1.1.1	0x31ae	Standard query (0)	lf16-cdn-tos.tiktokcdn-us.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:13.430615902 CEST	192.168.2.6	1.1.1.1	0x50ce	Standard query (0)	lf16-cdn-tos.tiktokcdn-us.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:16.174128056 CEST	192.168.2.6	1.1.1.1	0x8338	Standard query (0)	www.twitter.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:16.174786091 CEST	192.168.2.6	1.1.1.1	0xecf5	Standard query (0)	www.twitter.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:16.936494112 CEST	192.168.2.6	1.1.1.1	0x2faa	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:16.936599970 CEST	192.168.2.6	1.1.1.1	0x83b0	Standard query (0)	twitter.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:17.816298008 CEST	192.168.2.6	1.1.1.1	0x7120	Standard query (0)	x.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:17.816437960 CEST	192.168.2.6	1.1.1.1	0xb4ed	Standard query (0)	x.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:18.271437883 CEST	192.168.2.6	1.1.1.1	0x234a	Standard query (0)	lf16-tiktok-common.tiktokcdn-us.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:18.271635056 CEST	192.168.2.6	1.1.1.1	0x64fb	Standard query (0)	lf16-tiktok-common.tiktokcdn-us.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:18.641913891 CEST	192.168.2.6	1.1.1.1	0xaab9	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:18.642241955 CEST	192.168.2.6	1.1.1.1	0x6fe0	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:18.653249979 CEST	192.168.2.6	1.1.1.1	0xf2c0	Standard query (0)	api.twitter.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:18.653249979 CEST	192.168.2.6	1.1.1.1	0x7a7b	Standard query (0)	api.twitter.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:18.657294035 CEST	192.168.2.6	1.1.1.1	0x8e09	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:18.657294035 CEST	192.168.2.6	1.1.1.1	0x4e0	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 6, 2024 16:48:18.662693977 CEST	192.168.2.6	1.1.1.1	0x54e8	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:18.662693977 CEST	192.168.2.6	1.1.1.1	0xbe14	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:18.667373896 CEST	192.168.2.6	1.1.1.1	0x9087	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:18.667891979 CEST	192.168.2.6	1.1.1.1	0x6693	Standard query (0)	api.x.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:20.254935026 CEST	192.168.2.6	1.1.1.1	0x61b6	Standard query (0)	mon16-normal-useast5.tiktokv.us	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:20.255225897 CEST	192.168.2.6	1.1.1.1	0xef92	Standard query (0)	mon16-normal-useast5.tiktokv.us	65	IN (0x0001)	false
Oct 6, 2024 16:48:20.618428946 CEST	192.168.2.6	1.1.1.1	0xe301	Standard query (0)	video.twimg.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:20.618561983 CEST	192.168.2.6	1.1.1.1	0xb297	Standard query (0)	video.twimg.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:20.663974047 CEST	192.168.2.6	1.1.1.1	0x2e33	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:20.664242029 CEST	192.168.2.6	1.1.1.1	0x2585	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:21.330981970 CEST	192.168.2.6	1.1.1.1	0x2408	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:21.331140995 CEST	192.168.2.6	1.1.1.1	0x29ae	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:22.066790104 CEST	192.168.2.6	1.1.1.1	0x2681	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:22.066975117 CEST	192.168.2.6	1.1.1.1	0xfc16	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:25.409055948 CEST	192.168.2.6	1.1.1.1	0xbdb8	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:25.409157991 CEST	192.168.2.6	1.1.1.1	0xc7ad	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:25.412693977 CEST	192.168.2.6	1.1.1.1	0x88de	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:25.412781000 CEST	192.168.2.6	1.1.1.1	0x87ea	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:26.203376055 CEST	192.168.2.6	1.1.1.1	0xcab0	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:26.203672886 CEST	192.168.2.6	1.1.1.1	0x28c6	Standard query (0)	api.x.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:26.336026907 CEST	192.168.2.6	1.1.1.1	0xc3ad	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:26.336252928 CEST	192.168.2.6	1.1.1.1	0x6f68	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:26.383656025 CEST	192.168.2.6	1.1.1.1	0x1f5b	Standard query (0)	sf16-website-login.neutral.ttwstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:26.383812904 CEST	192.168.2.6	1.1.1.1	0x6964	Standard query (0)	sf16-website-login.neutral.ttwstatic.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:26.421942949 CEST	192.168.2.6	1.1.1.1	0xb8eb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:26.422293901 CEST	192.168.2.6	1.1.1.1	0x9110	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:26.625971079 CEST	192.168.2.6	1.1.1.1	0x641c	Standard query (0)	lf16-tiktok-common.ibytedtos.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:26.626125097 CEST	192.168.2.6	1.1.1.1	0xf4b3	Standard query (0)	lf16-tiktok-common.ibytedtos.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:35.780412912 CEST	192.168.2.6	1.1.1.1	0xf2d3	Standard query (0)	www.github.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:35.780463934 CEST	192.168.2.6	1.1.1.1	0x91f7	Standard query (0)	www.github.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:35.781394958 CEST	192.168.2.6	1.1.1.1	0xe6d5	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:35.781956911 CEST	192.168.2.6	1.1.1.1	0x3231	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:36.693357944 CEST	192.168.2.6	1.1.1.1	0xd314	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:36.693567991 CEST	192.168.2.6	1.1.1.1	0xaa8	Standard query (0)	github.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:37.863405943 CEST	192.168.2.6	1.1.1.1	0xc70	Standard query (0)	github.githubassets.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:37.863513947 CEST	192.168.2.6	1.1.1.1	0xe3b0	Standard query (0)	github.githubassets.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:37.863991976 CEST	192.168.2.6	1.1.1.1	0xc6dd	Standard query (0)	avatars.githubusercontent.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:37.864447117 CEST	192.168.2.6	1.1.1.1	0x3750	Standard query (0)	avatars.githubusercontent.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:37.911302090 CEST	192.168.2.6	1.1.1.1	0xc89f	Standard query (0)	github-cloud.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:37.917412043 CEST	192.168.2.6	1.1.1.1	0xa27e	Standard query (0)	github-cloud.s3.amazonaws.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:37.955420971 CEST	192.168.2.6	1.1.1.1	0x5db1	Standard query (0)	user-images.githubusercontent.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:37.955676079 CEST	192.168.2.6	1.1.1.1	0x9303	Standard query (0)	user-images.githubusercontent.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:41.629396915 CEST	192.168.2.6	1.1.1.1	0x7d2f	Standard query (0)	github.githubassets.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:41.629664898 CEST	192.168.2.6	1.1.1.1	0xe52e	Standard query (0)	github.githubassets.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:46.087665081 CEST	192.168.2.6	1.1.1.1	0x7ad4	Standard query (0)	collector.github.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:46.087665081 CEST	192.168.2.6	1.1.1.1	0x2b98	Standard query (0)	collector.github.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:48.130542994 CEST	192.168.2.6	1.1.1.1	0x475e	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:48.130868912 CEST	192.168.2.6	1.1.1.1	0x185c	Standard query (0)	github.com	65	IN (0x0001)	false
Oct 6, 2024 16:48:59.073899984 CEST	192.168.2.6	1.1.1.1	0xb265	Standard query (0)	api.github.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:48:59.074043036 CEST	192.168.2.6	1.1.1.1	0x6b7a	Standard query (0)	api.github.com	65	IN (0x0001)	false
Oct 6, 2024 16:49:00.166516066 CEST	192.168.2.6	1.1.1.1	0x39c6	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:49:00.166989088 CEST	192.168.2.6	1.1.1.1	0x83cf	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 6, 2024 16:49:01.286211014 CEST	192.168.2.6	1.1.1.1	0x5edb	Standard query (0)	static.licdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:49:01.286447048 CEST	192.168.2.6	1.1.1.1	0xce14	Standard query (0)	static.licdn.com	65	IN (0x0001)	false
Oct 6, 2024 16:49:02.628427982 CEST	192.168.2.6	1.1.1.1	0x7703	Standard query (0)	static.licdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:49:02.628762007 CEST	192.168.2.6	1.1.1.1	0xebbd	Standard query (0)	static.licdn.com	65	IN (0x0001)	false
Oct 6, 2024 16:49:04.255268097 CEST	192.168.2.6	1.1.1.1	0x29ab	Standard query (0)	platform.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:49:04.256128073 CEST	192.168.2.6	1.1.1.1	0xb634	Standard query (0)	platform.linkedin.com	65	IN (0x0001)	false
Oct 6, 2024 16:49:05.164916992 CEST	192.168.2.6	1.1.1.1	0xfaa8	Standard query (0)	ponf.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:49:05.166026115 CEST	192.168.2.6	1.1.1.1	0x617f	Standard query (0)	ponf.linkedin.com	65	IN (0x0001)	false
Oct 6, 2024 16:49:05.920825005 CEST	192.168.2.6	1.1.1.1	0x556f	Standard query (0)	stun.l.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:49:05.921638012 CEST	192.168.2.6	1.1.1.1	0xf59d	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Oct 6, 2024 16:49:06.186394930 CEST	192.168.2.6	1.1.1.1	0xe096	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:49:06.186733007 CEST	192.168.2.6	1.1.1.1	0xdc3d	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 6, 2024 16:49:06.350044012 CEST	192.168.2.6	1.1.1.1	0x122f	Standard query (0)	stun.l.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:49:06.350380898 CEST	192.168.2.6	1.1.1.1	0x47e2	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Oct 6, 2024 16:49:06.589843988 CEST	192.168.2.6	1.1.1.1	0xc02d	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Oct 6, 2024 16:49:18.594868898 CEST	192.168.2.6	1.1.1.1	0x97b8	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:49:18.595150948 CEST	192.168.2.6	1.1.1.1	0x37b5	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 6, 2024 16:49:20.533472061 CEST	192.168.2.6	1.1.1.1	0x8b23	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 16:49:20.533639908 CEST	192.168.2.6	1.1.1.1	0x79a3	Standard query (0)	play.google.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:47:49 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 59 61 31 6a 63 52 35 55 55 30 61 33 68 31 58 6d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 38 61 64 33 32 62 38 64 63 39 30 65 35 34 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Ya1jcR5UU0a3h1Xm.1Context: 88ad32b8dc90e54f
2024-10-06 14:47:49 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-06 14:47:49 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 59 61 31 6a 63 52 35 55 55 30 61 33 68 31 58 6d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 38 61 64 33 32 62 38 64 63 39 30 65 35 34 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 41 57 59 31 35 79 4e 45 6f 7a 30 2b 6e 33 62 6b 6e 39 6c 75 4a 62 2b 44 4a 46 6e 79 66 6e 44 46 6b 41 72 47 55 53 76 34 6e 6f 46 6a 64 51 55 6c 39 30 47 6a 38 4d 41 35 52 4a 64 6a 36 43 75 63 51 75 39 54 38 4a 71 73 77 57 36 6f 66 70 57 2b 7a 71 77 54 73 53 73 65 6d 6d 6d 4b 4a 4e 59 63 66 62 33 36 36 6d 48 65 78 36 57 51 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Ya1jcR5UU0a3h1Xm.2Context: 88ad32b8dc90e54f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXAWY15yNEoz0+n3bkn9luJb+DJFnyfnDFkArGUSv4noFjdQUl90Gj8MA5RJdj6CucQu9T8JqswW6ofpW+zqwTsSsemmmKJNYcfb366mHex6WQ
2024-10-06 14:47:49 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 59 61 31 6a 63 52 35 55 55 30 61 33 68 31 58 6d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 38 61 64 33 32 62 38 64 63 39 30 65 35 34 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Ya1jcR5UU0a3h1Xm.3Context: 88ad32b8dc90e54f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-06 14:47:49 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-06 14:47:49 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 38 77 72 6c 69 51 57 6c 43 30 2b 79 41 68 36 65 38 6a 4c 4e 58 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 8wrliQWlC0+yAh6e8jLNXQ.0Payload parsing failed.

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://xinh.tiktokshopx.icu/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 342

Chrome Cache Entry: 343

Chrome Cache Entry: 344

Chrome Cache Entry: 345

Chrome Cache Entry: 346

Chrome Cache Entry: 347

Chrome Cache Entry: 348

Chrome Cache Entry: 349

Chrome Cache Entry: 350

Chrome Cache Entry: 351

Chrome Cache Entry: 352

Chrome Cache Entry: 353

Chrome Cache Entry: 354

Chrome Cache Entry: 355

Chrome Cache Entry: 356

Chrome Cache Entry: 357

Chrome Cache Entry: 358

Chrome Cache Entry: 359

Chrome Cache Entry: 360

Chrome Cache Entry: 361

Chrome Cache Entry: 362

Chrome Cache Entry: 363

Chrome Cache Entry: 364

Chrome Cache Entry: 365

Chrome Cache Entry: 366

Chrome Cache Entry: 367

Chrome Cache Entry: 368

Chrome Cache Entry: 369

Windows Analysis Report
https://xinh.tiktokshopx.icu/

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:47:50 UTC	663	OUT	GET / HTTP/1.1 Host: xinh.tiktokshopx.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:47:51 UTC	296	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 14:47:50 GMT Content-Type: text/html Content-Length: 8216 Last-Modified: Sat, 05 Oct 2024 16:03:27 GMT Connection: close Vary: Accept-Encoding ETag: "6701634f-2018" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-06 14:47:51 UTC	8216	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 2d 43 4e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 69 6b 54 6f 6b 20 53 68 6f 70 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 e5 bc 95 e5 85 a5 42 6f 6f 74 73 74 72 61 70 20 43 53 53 e5 ba 93 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 Data Ascii: <!DOCTYPE html><html lang="zh-CN"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>TikTok Shop</title> ... Bootstrap CSS --> <link href="https://maxcdn.boots

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:47:51 UTC	543	OUT	GET /jquery-3.5.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xinh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:47:52 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72380 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-11abc" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 06 Oct 2024 14:47:52 GMT Age: 362138 X-Served-By: cache-lga21954-LGA, cache-nyc-kteb1890099-NYC X-Cache: HIT, HIT X-Cache-Hits: 72, 32 X-Timer: S1728226072.013170,VS0,VE0 Vary: Accept-Encoding
2024-10-06 14:47:52 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 Data Ascii: /*! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other c
2024-10-06 14:47:52 UTC	16384	IN	Data Raw: 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 62 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 64 29 7b 70 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 41 5d 7c 7c 28 61 5b 41 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b Data Ascii: if(c){if(y){while(l){a=e;while(a=a[l])if(b?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&d){p=(s=(r=(i=(o=(a=c)[A]\|\|(a[A]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[
2024-10-06 14:47:52 UTC	16384	IN	Data Raw: 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 54 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 62 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 45 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 Data Ascii: ength,l=null==n;if("object"===T(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,b(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(E(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t
2024-10-06 14:47:52 UTC	16384	IN	Data Raw: 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 67 65 28 65 29 2c 61 3d 61 7c 7c 67 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 67 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 76 65 28 61 2c 21 66 26 26 67 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 Data Ascii: ed=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ge(e),a=a\|\|ge(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ge(c,"script")).length&&ve(a,!f&&ge(e,"script")),c},cleanData:function(e){for(var t
2024-10-06 14:47:52 UTC	6844	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2c 74 3d 59 2e 61 63 63 65 73 73 28 65 2c 72 29 2d 31 3b 74 3f 59 2e 61 63 63 65 73 73 28 65 2c 72 2c 74 29 3a 28 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6e 2c 69 2c 21 30 29 2c 59 2e 72 65 6d 6f 76 65 28 65 2c 72 29 29 7d 7d 7d 29 2c 45 2e 70 61 72 73 65 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 21 65 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 74 3d 28 6e 65 77 20 67 2e 44 4f 4d 50 61 72 73 65 72 29 2e 70 61 72 73 65 46 72 6f 6d 53 74 72 69 6e 67 28 65 2c 22 74 65 78 Data Ascii: unction(){var e=this.ownerDocument\|\|this.document\|\|this,t=Y.access(e,r)-1;t?Y.access(e,r,t):(e.removeEventListener(n,i,!0),Y.remove(e,r))}}}),E.parseXML=function(e){var t;if(!e\|\|"string"!=typeof e)return null;try{t=(new g.DOMParser).parseFromString(e,"tex

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:47:51 UTC	578	OUT	GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xinh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:47:52 UTC	902	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 14:47:52 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"816af0eddd3b4822c2756227c7e7b7ee" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 19:21:59 CDN-EdgeStorageId: 940 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 55f4a395c7dea2e058d61e94e15c895f CDN-Cache: HIT CF-Cache-Status: HIT Age: 8612255 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ce672f64bde15cb-EWR
2024-10-06 14:47:52 UTC	467	IN	Data Raw: 37 63 31 61 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 Data Ascii: 7c1a/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e 73 2d 73 65 72 69 66 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 Data Ascii: d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMac
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 Data Ascii: ine dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 Data Ascii: lect,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-a
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d Data Ascii: ine-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:6rem;font-weight:300;line-height:1.2}
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 2e 70 72 65 2d 73 63 72 6f 6c 6c Data Ascii: ing:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#212529}pre code{font-size:inherit;color:inherit;word-break:normal}.pre-scroll
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 6f 6c 2d 78 6c 2d 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 30 2c 2e 63 6f 6c 2d 78 6c 2d 31 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 32 Data Ascii: ol-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col-xl-1,.col-xl-10,.col-xl-11,.col-xl-12
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 Data Ascii: :0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.c
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 31 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 32 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 34 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 66 6c 65 78 3a 30 20 30 20 32 Data Ascii: 00%}.row-cols-sm-1>{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-sm-2>{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-sm-3>{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.row-cols-sm-4>{-ms-flex:0 0 25%;flex:0 0 2
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 73 6d 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 73 6d 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 34 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 34 3b 6f 72 64 65 72 3a 34 7d 2e 6f 72 64 65 72 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 35 3b 6f 72 64 65 72 3a 35 7d 2e 6f 72 64 65 72 2d 73 6d 2d 36 7b Data Ascii: ex-order:13;order:13}.order-sm-0{-ms-flex-order:0;order:0}.order-sm-1{-ms-flex-order:1;order:1}.order-sm-2{-ms-flex-order:2;order:2}.order-sm-3{-ms-flex-order:3;order:3}.order-sm-4{-ms-flex-order:4;order:4}.order-sm-5{-ms-flex-order:5;order:5}.order-sm-6{

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:47:52 UTC	562	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xinh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:47:52 UTC	915	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 14:47:52 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 18:51:50 CDN-EdgeStorageId: 871 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: b3bd091d36d3aaa8ce89af0da90a6662 CDN-Cache: HIT CF-Cache-Status: HIT Age: 831313 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ce672f8fd0a43c7-EWR
2024-10-06 14:47:52 UTC	454	IN	Data Raw: 37 63 30 65 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7c0e/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: ned"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 Data Ascii: [0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement:function(t){return(t[0]\|\|t).nod
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 Data Ascii: ,delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.prototype;return n.close=function(t){var e=this._element
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e Data Ascii: ",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){function t(t){this._element=t}var n=t.prototype;return n
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 2e 70 72 65 76 65 6e 74 44 Data Ascii: n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.classList.contains("disabled")))return void t.preventD
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 6f Data Ascii: an\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!1,this.touchTimeout=null,this.to
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: ,n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(this._element).one("slid.bs.carousel",(function(){re
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 2d 74 2e 74 6f 75 63 68 53 74 61 72 74 58 29 2c 74 2e 5f 68 61 Data Ascii: pperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.touchDeltaX=e.originalEvent.clientX-t.touchStartX),t._ha
2024-10-06 14:47:52 UTC	1369	IN	Data Raw: 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 30 3d 3d 3d 6f 7c 7c 6e 26 26 6f 3d 3d 3d 73 29 26 26 21 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 77 72 61 70 29 72 65 74 75 Data Ascii: ode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.length-1;if((i&&0===o\|\|n&&o===s)&&!this._config.wrap)retu

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:47:52 UTC	641	OUT	GET /public/uploads/all/YN7XJzRe8oXfwayrxdHmUsPS8sCODN6FIU0xyOBr.png HTTP/1.1 Host: shopseller.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xinh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:47:53 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 14:47:53 GMT Content-Type: image/png Content-Length: 19012 Last-Modified: Mon, 27 May 2024 10:38:24 GMT Connection: close Vary: Accept-Encoding ETag: "665462a0-4a44" Expires: Tue, 05 Nov 2024 14:47:53 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-06 14:47:53 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7c 00 00 00 5a 08 06 00 00 00 bb 65 ed 55 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 79 98 5c 57 79 ee fb 5b 7b aa b9 7a 1e d4 1a ac c1 96 27 c9 16 f2 24 db d8 98 d8 04 12 64 62 2e 76 4e 08 24 18 02 e4 e6 24 39 31 71 72 13 1e ce 01 42 9e 24 f7 1c 42 20 97 93 cb 0d 3e 1c c8 48 c0 60 43 64 27 84 c9 06 6c 10 b6 2c 5b 1e 24 59 d6 64 75 ab d5 f3 50 73 d5 1e be fb c7 de bb ba ba 55 dd 5d 2d b5 ac 81 7a fd 94 ab ab 6a ed bd d7 ae 56 bf eb 5b df f0 7e 4a 44 38 d7 31 05 9b 3c f8 4d 0f b6 6a 70 4c 60 00 18 d7 e1 f9 da 71 02 17 db f0 4b 1e b4 ea b0 cb 84 3f 6b 85 63 67 69 da 4d 34 d1 44 13 e7 14 8c b3 3d 81 85 b0 6b aa 7c c5 60 a1 f0 81 69 b1 ef 2b 2a f0 Data Ascii: PNGIHDR\|ZeUpHYs+ IDATxy\Wy[{z'$db.vN$$91qrB$B >H`Cd'l,[$YduPsU]-zjV[~JD81<MjpL`qK?kcgiM4D=k\|`i+*
2024-10-06 14:47:53 UTC	2997	IN	Data Raw: a0 6a 8c 6a 02 f9 77 4f 03 44 d0 00 53 34 ec c9 3c ee 8b 87 f1 6e b9 0a 8d ae 45 af 7b 12 e1 a7 e0 c5 75 11 eb 93 bf 71 d5 a6 4d 9f 7c ba b4 aa 74 db 1d 1c d9 ff 0a f6 c0 ab 18 65 c1 f5 ea ca d8 cc 03 41 d7 35 94 5b c1 1b 1f a1 fc a3 61 46 7e fc 24 23 f1 18 24 63 10 4f 82 d9 02 15 07 b2 59 ff 51 cc 83 b8 7e 0a 90 ab fc 8b 05 72 0f 20 78 9e 8b 01 44 35 88 7a 1e 17 29 83 5f 6c bb 88 db bb d6 92 f4 7c e1 66 d1 a0 a0 3c 64 d3 06 22 b7 df f0 14 e9 f8 d1 46 66 7b 2e 20 ac c6 5b 2a 44 84 72 b9 7c 06 66 74 ea 48 24 12 95 42 a1 50 59 4a 69 7b 8d 52 a0 87 2f e5 db c4 cf 38 f2 48 6f 05 c5 50 a6 48 01 13 d1 d4 ec 5a 1c f1 02 77 af ef 5c 56 e0 77 e5 93 c0 c6 13 5f 6d 57 82 ac 97 c9 9c 30 51 10 a4 f1 0e 63 cb 8b bc f4 7a a5 32 52 ae a0 3c 0f 4d 6a d2 50 6a 0c 69 6d ee Data Ascii: jjwODS4<nE{uqM\|teA5[aF~$#$cOYQ~r xD5z)_l\|f<d"Ff{. [*Dr\|ftH$BPYJi{R/8HoPHZw\Vw_mW0Qcz2R<MjPjim

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:47:52 UTC	604	OUT	GET /public/assets/img/play.png HTTP/1.1 Host: shopseller.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xinh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:47:53 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 14:47:53 GMT Content-Type: image/png Content-Length: 13567 Last-Modified: Mon, 18 Jul 2022 17:58:10 GMT Connection: close Vary: Accept-Encoding ETag: "62d59f32-34ff" Expires: Tue, 05 Nov 2024 14:47:53 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-06 14:47:53 UTC	13567	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 59 08 06 00 00 00 84 e5 19 b3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 05 da 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR,YpHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:47:52 UTC	603	OUT	GET /public/assets/img/app.png HTTP/1.1 Host: shopseller.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xinh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:47:53 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 14:47:53 GMT Content-Type: image/png Content-Length: 19667 Last-Modified: Mon, 18 Jul 2022 17:58:10 GMT Connection: close Vary: Accept-Encoding ETag: "62d59f32-4cd3" Expires: Tue, 05 Nov 2024 14:47:53 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-06 14:47:53 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 59 08 06 00 00 00 84 e5 19 b3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 05 e3 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR,YpHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD
2024-10-06 14:47:53 UTC	3652	IN	Data Raw: 28 42 08 84 aa 72 c6 f0 e1 8c a9 63 c5 f4 f9 7c 7c f4 e1 87 56 bb 86 70 97 91 a6 25 50 27 03 46 68 b1 d8 d9 51 2a 00 7d b1 78 31 40 c3 d6 59 49 42 68 1a f1 46 4c 9f e6 f7 e3 ab ad a5 ba a6 16 59 92 ad 0f b4 be 42 89 d2 52 5d 24 ba f3 ce 3b 23 32 32 ec dc b9 d3 18 52 0e fb b0 7b bd 91 51 0e dd 7b e8 f1 81 82 c3 4c 80 10 ba 38 66 b3 d9 59 b8 f0 83 08 23 c2 d0 a1 43 19 3b 76 2c 95 95 95 61 73 e8 9e 3e 0a 65 65 a5 f4 ef df 9f c9 97 4d 8e 98 ef e5 97 4d 6b ba d4 a0 48 68 9e 0f 1d db 3c dc ee 58 fc 7e 3f 9f 7e fa 69 58 9f ce 5d 3a f3 e0 83 0f e1 f7 fb a9 ae f6 44 ac 2d 74 3e 55 d5 a8 ad f5 ea d5 98 43 d6 72 fc 0f 5d 87 d5 e4 04 4b 08 c3 39 51 d3 18 53 47 97 d3 54 78 e4 d1 47 f9 6e ed 5a dd ff e9 78 b1 bb 42 d0 2a 33 93 93 eb 88 83 6b d7 ae 65 d7 8e 1d f0 33 e9 Data Ascii: (Brc\|\|Vp%P'FhQ}x1@YIBhFLYBR]$;#22R{Q{L8fY#C;v,as>eeMMkHh<X~?~iX]:D-t>UCr]K9QSGTxGnZxB3ke3

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:47:53 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 14:47:53 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 14:47:53 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T144753Z-1657d5bbd48xsz2nuzq4vfrzg800000001z000000000d1m8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 14:47:53 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-06 14:47:53 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-06 14:47:53 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-06 14:47:53 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-06 14:47:53 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-06 14:47:53 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-06 14:47:53 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-06 14:47:53 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-06 14:47:53 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-06 14:47:53 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:47:54 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-06 14:47:54 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF17) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=7051 Date: Sun, 06 Oct 2024 14:47:54 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-06 14:47:54 UTC	596	OUT	GET /favicon.ico HTTP/1.1 Host: xinh.tiktokshopx.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xinh.tiktokshopx.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 14:47:54 UTC	164	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 06 Oct 2024 14:47:54 GMT Content-Type: text/html Content-Length: 148 Connection: close ETag: "6701632f-94"
2024-10-06 14:47:54 UTC	148	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>