Edit tour

Windows Analysis Report
http://footboi.com/

Overview

General Information

Sample URL:	http://footboi.com/
Analysis ID:	1540629
Tags:	urlscan
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected suspicious crossdomain redirect

HTML body with high number of embedded SVGs detected

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2264,i,15492527600073015673,5347263137129072150,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 2764 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5716 --field-trial-handle=2264,i,15492527600073015673,5347263137129072150,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 2972 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5996 --field-trial-handle=2264,i,15492527600073015673,5347263137129072150,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://footboi.com/" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2

HTTP Parser: Total embedded SVG size: 124019

Source: https://www.google.com/search?q=MAHADEV%20SOLUTIONS%20IN%20TEXAS&stick=H4sIAAAAAAAA_-NgU1I1qLAwM0k2SksyMDZMNUk2TzS1MqgwS041STJMMUhJSkk1S02yXMQq5evo4ejiGqYQ7O8TGuLp7xes4OmnEOIa4RgMAKkO97FGAAAA&hl=en&mat=CVQRu4gXOCuRElcBEKoLaWdOjq4TJdno4nxViy74uAG1sLRS3AEIR-IwF6cFkJiNrV-puB2zAvKg2o2NOfRFtXSKhfUWzInkf-MWDXzXcDEuo6l_fYsBx9hA0M3tfX-_saM&authuser=1&gad_source=5#scso=_lHYOZ7-JOIeywt0P3IybuQc_56:1058&gclid=EAIaIQobChMIp57XoMaliQMVz4CDBx1TIyzlEAAYASAAEgK1A_D_BwE

HTTP Parser: Total embedded image size: 105551

Source: http://www.footboi.com/

HTTP Parser: Base64 decoded: cre=1729722427&tcid=www.footboi.com6719783b57b595.58704780&task=search&domain=footboi.com&a_id=1&session=MUP1qEpQHS6SXkP7ZL6b&trackquery=1

Source: http://www.footboi.com/	HTTP Parser: No favicon
Source: http://www.footboi.com/	HTTP Parser: No favicon
Source: http://www.footboi.com/	HTTP Parser: No favicon
Source: http://www.footboi.com/	HTTP Parser: No favicon
Source: http://www.footboi.com/caf/?ses=Y3JlPTE3Mjk3MjI0MjcmdGNpZD13d3cuZm9vdGJvaS5jb202NzE5NzgzYjU3YjU5NS41ODcwNDc4MCZ0YXNrPXNlYXJjaCZkb21haW49Zm9vdGJvaS5jb20mYV9pZD0zJnNlc3Npb249TVVQMXFFcFFIUzZTWGtQN1pMNmI%3D&query=Psychicchat&afdToken=ChMI5Z-amMaliQMVZtkCBx13AzhfEmoBlLqpj1NEhxINBsQwzXDy_Gdt5wiyL46XN3_Zp11bC5KS7MdeT-JW5Pij_L5GtR6p4XLigrrLnvS-6GLFdSCoAHwudcw80G7FNjIjpVQpiptBV1zY3j6hSh3y4xi8lLzgZpRc2vcC8ARVIAE&pcsa=false&nb=0&nm=5&nx=238&ny=72&is=493x530&clkt=3	HTTP Parser: No favicon
Source: http://www.footboi.com/caf/?ses=Y3JlPTE3Mjk3MjI0MjcmdGNpZD13d3cuZm9vdGJvaS5jb202NzE5NzgzYjU3YjU5NS41ODcwNDc4MCZ0YXNrPXNlYXJjaCZkb21haW49Zm9vdGJvaS5jb20mYV9pZD0zJnNlc3Npb249TVVQMXFFcFFIUzZTWGtQN1pMNmI%3D&query=Psychicchat&afdToken=ChMI5Z-amMaliQMVZtkCBx13AzhfEmoBlLqpj1NEhxINBsQwzXDy_Gdt5wiyL46XN3_Zp11bC5KS7MdeT-JW5Pij_L5GtR6p4XLigrrLnvS-6GLFdSCoAHwudcw80G7FNjIjpVQpiptBV1zY3j6hSh3y4xi8lLzgZpRc2vcC8ARVIAE&pcsa=false&nb=0&nm=5&nx=238&ny=72&is=493x530&clkt=3	HTTP Parser: No favicon
Source: http://www.footboi.com/caf/?ses=Y3JlPTE3Mjk3MjI0MjcmdGNpZD13d3cuZm9vdGJvaS5jb202NzE5NzgzYjU3YjU5NS41ODcwNDc4MCZ0YXNrPXNlYXJjaCZkb21haW49Zm9vdGJvaS5jb20mYV9pZD0zJnNlc3Npb249TVVQMXFFcFFIUzZTWGtQN1pMNmI%3D&query=Psychicchat&afdToken=ChMI5Z-amMaliQMVZtkCBx13AzhfEmoBlLqpj1NEhxINBsQwzXDy_Gdt5wiyL46XN3_Zp11bC5KS7MdeT-JW5Pij_L5GtR6p4XLigrrLnvS-6GLFdSCoAHwudcw80G7FNjIjpVQpiptBV1zY3j6hSh3y4xi8lLzgZpRc2vcC8ARVIAE&pcsa=false&nb=0&nm=5&nx=238&ny=72&is=493x530&clkt=3	HTTP Parser: No favicon
Source: https://www.google.com/search?q=MAHADEV%20SOLUTIONS%20IN%20TEXAS&stick=H4sIAAAAAAAA_-NgU1I1qLAwM0k2SksyMDZMNUk2TzS1MqgwS041STJMMUhJSkk1S02yXMQq5evo4ejiGqYQ7O8TGuLp7xes4OmnEOIa4RgMAKkO97FGAAAA&hl=en&mat=CVQRu4gXOCuRElcBEKoLaWdOjq4TJdno4nxViy74uAG1sLRS3AEIR-IwF6cFkJiNrV-puB2zAvKg2o2NOfRFtXSKhfUWzInkf-MWDXzXcDEuo6l_fYsBx9hA0M3tfX-_saM&authuser=1&gad_source=5#scso=_lHYOZ7-JOIeywt0P3IybuQc_56:1058&gclid=EAIaIQobChMIp57XoMaliQMVz4CDBx1TIyzlEAAYASAAEgK1A_D_BwE	HTTP Parser: No favicon
Source: https://www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2	HTTP Parser: No favicon
Source: https://www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2	HTTP Parser: No favicon
Source: https://www.yelp.com/biz_redir?url=http%3A%2F%2Fwww.astrologermahadeva.com&cachebuster=1729722476&website_link_type=website&src_bizid=ogzSnQjr8XF5mSz_UeOLUw&s=2207119eabed8617875c81781c9d1fa96ee4e4b69e140c7b3b8de5eb0c5bdb2e	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.10:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.10:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.10:49931 version: TLS 1.2

Source:	Binary string: g.Qyd,g.yaa);_.au(h,"iqidx",g.ttb,g.KL);_.$t(h,"segment_text",g.Vtb,g.Ci);_.$t(h,"crust",g.Pdb,g.Id);_.bu(h,"scas",g.Ayd,g.vaa);_.$t(h,"dsq",g.Zsd,g.q0a);_.$t(h,"ddq",g.Tsd,g.lRa);_.$t(h,"prov",g.eub,g.Ok);_.$t(h,"serv",g.fub,g.Cl);_.$t(h,"tr",g.hub,g.Tl);_.$t(h,"webp",g.jub,g.In);_.Zt(h,"fpc",g.Lb,oBb,g.La);_.au(h,"sidx",g.wsd,g.kRa);_.au(h,"bidx",g.Lqd,g.VAa);_.au(h,"idx",g.Brd,g.WAa);_.au(h,"stmt",g.Vrd,g.XAa);_.$t(h,"item",g.U_a,g.Ld);_.Zt(h,"action",g.W_a,pBb,g.Je);_.$t(h,"hl",g.Fb,g.Da);_.Zt(h, source: chromecache_692.6.dr, chromecache_643.6.dr
Source:	Binary string: e.height=b.height;return{rect:e,status:g}};_.PDb=function(a,b){return(b&8&&_.G.zj(a)?b^4:b)&-9}; source: chromecache_735.6.dr, chromecache_349.6.dr
Source:	Binary string: _.ODb=function(a){if(a=a.offsetParent){var b=a.tagName=="HTML"\|\|a.tagName=="BODY";if(!b\|\|_.G.ZCa(a)!="static"){var c=_.G.BC(a);b\|\|(c=_.ll(c,new _.jl(_.G.El.getScrollLeft(a),a.scrollTop)))}}return c\|\|new _.jl};_.QDb=function(a,b,c,d,e,f,g){a=a.clone();var h=_.PDb(b,c);c=_.G.getSize(b);g=g?g.clone():c.clone();a=_.RDb(a,g,h,d,e,f);if(a.status&496)return a.status;_.G.setPosition(b,a.rect.lI());g=a.rect.getSize();_.mBa(c,g)\|\|_.G.pge(b,g);return a.status}; source: chromecache_735.6.dr, chromecache_349.6.dr
Source:	Binary string: _.lh.Vib=function(a){return(a=_.lh.SVc(a))?a[1]:""};_.lh.SVc=function(a){return a.exec(_.fa())};_.lh.VERSION=_.lh.RId();_.lh.PDb=function(a){return _.Vaa(_.lh.VERSION,a)>=0};_.G.El={};_.G.El.getScrollLeft=function(a){var b=_.G.zj(a);return b&&_.G.El.J7b()?-a.scrollLeft:b&&_.G.szb(a)!="visible"?a.scrollWidth-a.clientWidth-a.scrollLeft:a.scrollLeft};_.G.El.JD=function(a){var b=a.offsetLeft,c=a.offsetParent;c\|\|_.G.ZCa(a)!="fixed"\|\|(c=_.gf(a).documentElement);if(!c)return b;if(_.hh&&!_.Qwa(58)){var d=_.G.bwa(c);b+=d.left}return _.G.zj(c)?c.clientWidth-(b+a.offsetWidth):b}; source: chromecache_692.6.dr, chromecache_643.6.dr
Source:	Binary string: _.G.El.k9=function(a,b){b=Math.max(b,0);_.G.zj(a)?_.G.El.J7b()?a.scrollLeft=-b:a.scrollLeft=a.scrollWidth-b-a.clientWidth:a.scrollLeft=b};_.G.El.J7b=function(){var a=_.lh.r0a&&_.lh.PDb(10),b=_.Iwa&&_.Vaa(_.PCa,10)>=0;const c=_.lh.CHROME&&_.lh.PDb(85);return _.hh\|\|a\|\|b\|\|c};_.G.El.setPosition=function(a,b,c,d){c!==null&&(a.style.top=c+"px");d?(a.style.right=b+"px",a.style.left=""):(a.style.left=b+"px",a.style.right="")};var QCa;_.pm=function(a,b,c){_.om.call(this);this.target=a;this.handle=b\|\|a;this.La=c\|\|new _.Xl(NaN,NaN,NaN,NaN);this.Ba=_.gf(a);this.Do=new _.nm(this);this.Td(this.Do);this.deltaY=this.deltaX=this.HZ=this.lV=this.screenY=this.screenX=this.clientY=this.clientX=0;this.Da=!0;this.Ca=this.Aa=!1;_.we(this.handle,["touchstart","mousedown"],this.Qa,!1,this);this.Ha=QCa};_.bh(_.pm,_.om);QCa=_.da.document&&_.da.document.documentElement&&!!_.da.document.documentElement.setCapture&&!!_.da.document.releaseCapture; source: chromecache_692.6.dr, chromecache_643.6.dr
Source:	Binary string: _.vu=function(a,b,c,d,e,f,g,h,k){var m=_.ODb(c),n=_.G.getBounds(a),r=_.G.z2(a);r&&n.intersection(_.$Ba(r));_.G.Mne(n,_.Jf(a),_.Jf(c));a=_.PDb(a,b);b=n.left;a&4?b+=n.width:a&2&&(b+=n.width/2);n=new _.jl(b,n.top+(a&1?n.height:0));n=_.ll(n,m);e&&(n.x+=(a&4?-1:1)e.x,n.y+=(a&1?-1:1)e.y);if(g)if(k)var t=k;else if(t=_.G.z2(c))t.top-=m.y,t.right-=m.x,t.bottom-=m.y,t.left-=m.x;return _.QDb(n,c,d,f,t,g,h)}; source: chromecache_735.6.dr, chromecache_349.6.dr

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: monitor.clickcease.com to https://www.google.com/search?q=mahadev%20solutions%20in%20texas&stick=h4siaaaaaaaa_-ngu1i1qlawm0k2sksymdzmnuk2tzs1mqgws041stjmmuhjskk1s02yxmqq5evo4ejigqyq7o8tgulp7xes4omneoia4rgmakko97fgaaaa&hl=en&mat=cvqru4gxocurelcbekolawdojq4tjdno4nxviy74uag1slrs3aeir-iwf6cfkjinrv-pub2zavkg2o2nofrftxskhfuwzinkf-mwdxzxcdeuo6l_fysbx9ha0m3tfx-_sam&authuser=1&gad_source=5#scso=_lhyoz7-joieywt0p3iybuqc_56:1058&gclid=eaiaiqobchmip57xomaliqmvz4cdbx1tiyzleaayasaaegk1a_d_bwe

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:13 GMTcontent-type: text/csslast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 1122date: Wed, 23 Oct 2024 22:28:13 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 57 4b 6f e3 36 10 3e d7 bf 62 90 62 81 c4 08 6d 39 de 45 0b f9 d2 22 7b 28 8a a0 db 53 81 1e 69 71 24 b1 a1 48 81 a4 fc c8 a2 ff bd 20 29 c9 92 2d da c9 a9 40 e0 98 33 c3 e1 3c be 79 78 39 9f cf 60 0e df f6 02 9e a9 56 8d 41 01 bb a7 c5 d3 62 e5 c8 cf aa 3e 6a 5e 94 16 9e 92 d5 9a 3c 25 ab 9f e0 2b dd 71 06 5f b1 b1 26 2b 9d d0 0b cf 50 1a 64 d0 48 86 1a e0 fe 61 06 f3 e5 6c e9 15 8f 35 13 78 56 1a 3d 7b a1 f6 82 64 1d e3 fb 0c 80 71 53 0b 7a 4c 41 2a 89 9b 19 c0 9e 33 5b a6 b0 4a 92 4f ee 48 f6 b8 7d e5 96 58 5a 93 92 17 a5 70 86 91 4c 09 a5 53 b0 9a 4a 53 53 8d d2 3a d9 e5 1c 6a 65 b8 e5 4a 82 46 41 2d df 21 50 c9 e0 8d 70 c9 f0 00 39 3f 40 d0 07 1a 9d dd 5c 16 90 2b 69 0d 70 63 1a 74 26 42 af 23 ed 95 38 e5 ad 8e 14 56 1b f8 77 06 30 76 c5 9f 8c a5 05 7a af 62 4a 00 48 65 88 55 4d 56 12 9a 05 7e 4d 25 f9 bb 63 aa 37 b2 a5 d9 6b 4e 33 24 3b 6e f8 96 0b 6e 8f 29 94 9c 31 94 41 6a 39 f7 8e e4 5c 63 ae 0e 40 25 af a8 f7 b9 10 dc 66 25 cc 97 57 0d 4c 69 6e 51 b7 66 66 4a 5a 94 36 85 bb c5 5d d0 de 27 64 2b 54 f6 1a 68 99 40 aa 53 d8 2a 5b 06 42 cc 34 c1 25 92 12 5d 8e 52 48 02 ed 74 bc 6a 16 51 cd c9 ac 58 f4 d4 0e 75 2e d4 7e 3a 20 4a 43 2e a8 29 5d 56 5d 14 0b ad 1a c9 42 52 07 48 72 a0 c9 95 ae 5a fc 08 6a 71 cd ee 93 fa f0 08 dd c7 43 d4 d6 bd a6 75 8d fa 71 9a cb 2d 56 ad 0b dd 73 37 d3 f9 be a4 3b dc dc 16 ba e1 e2 23 b8 bf 87 c1 bb ef 94 34 37 05 63 f1 1a 44 24 96 d4 8a cb 1e 33 ab fa 10 88 b9 50 d4 a6 20 30 b7 9b 0f c6 f3 03 1d 63 20 ed 6b 32 a3 42 a8 c6 b6 dd e8 aa 4f bc 2a 5a bf a6 2a 66 d8 c5 62 6a 24 dd 2d 18 37 74 2b 90 45 f0 c4 94 35 bd 0c 7c 8f 2b 0a 5f 6a 8d bb 88 a6 5e 46 e2 c1 c6 5f eb da 42 a3 8d 0b 57 ad b8 b4 a8 37 23 62 49 25 1b 07 af 31 a8 89 41 81 99 3d 35 72 00 f2 5a da 4a 44 b9 0e 7f 51 9e 89 b1 2e c9 97 f1 f5 07 a1 28 73 41 9b ca d1 95 2b ae 79 84 3b aa a6 99 47 57 32 d9 19 23 3a 02 14 2f 55 44 c4 35 e6 1a 4d 79 51 2c 13 e8 8e 68 60 9a 16 d1 ee f3 3f c5 be d0 74 7b 06 a5 4a 75 f5 de 51 9c 50 34 2c 56 f4 99 d3 d8 4e 4a 6d c5 35 f9 f3 18 b4 2d c4 af 32 ee de 6c 39 87 3f 14 fc 6e fc 26 22 15 f9 c7 9c 55 c1 68 21 e9 b3 1c 59 Data Ascii: WKo6>bbm9E"{(Siq$H )-@3<yx9`VAb>j^<%+q_&+PdHal5xV={dqSzLA*3[JOH}XZpLSJSS:jeJFA-!Pp9?@\+ipct&B#8Vw0vzbJHeUMV~M%c7kN3$;nn)1Aj9\c@%f%WL
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:13 GMTcontent-type: text/csslast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 417date: Wed, 23 Oct 2024 22:28:13 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 95 53 db 6e db 30 0c 7d ae be 82 50 5f 92 a0 8a ed 3c 0c ab 83 62 05 06 ec 27 76 83 62 53 1e 31 59 32 24 e6 b6 20 ff 3e 28 b1 d3 34 c8 ba c6 0f 82 45 9e 73 24 92 47 77 d9 44 00 dc 7d b1 9a a9 f2 0e 0e 8b f1 8e 4b 18 62 29 ff 39 a0 66 f2 0e 6a cd 58 c2 ac c8 f2 8f d9 2c 2f 1e a1 c8 cb e2 43 82 4c 32 21 9e 13 53 19 5d 21 ec 04 40 bf 6b c9 6e 4b 90 83 9e 9c 0b 80 18 aa 12 96 c1 8e e4 74 9a 25 5c cc 22 35 ee e7 f1 77 80 4e d1 b3 1c df 86 ff 74 4f 68 68 23 c7 60 7c 68 35 8f 24 b6 0b ac 6b ac 95 ef d0 f1 b6 43 39 7e 10 70 fc fe 2f b9 f6 c6 cc ce d4 fa fd 8d 0a 17 02 37 f1 99 cf e9 1c 96 78 73 11 71 d5 dc 9f fa ff a2 15 57 cd b1 bd 87 49 ad 91 9a 5f 5c 82 4b 59 7b 0a 47 de 5a 7c 89 ee 85 78 6e b1 26 0d b1 0a 88 0e b4 ab 61 a4 d6 b8 f8 4d ac 5a 72 aa c6 15 55 a8 3a da a0 55 21 f9 a6 cc c7 07 43 5c f8 e3 4d 87 bc 9a f9 fb 2b d9 a7 0b 7e ad ac 8e f1 c7 93 34 3d 52 c9 ef e5 02 8d 0f f8 00 c7 e4 e4 49 c2 95 ec 75 aa 36 8c e1 5f cc 43 12 76 00 70 69 f9 e1 9e f3 61 50 7d 43 e9 4f 7a 43 79 b7 99 8b 6b 1d 6e 75 68 c8 29 8b 86 07 d8 5e 88 e9 e9 cc a8 1b 62 d6 81 96 51 e9 10 fc 5a a5 91 f7 15 c0 0e 2a ef 18 d3 0b 96 df 4c 91 e7 72 0e fb 33 76 47 b1 c2 a8 74 e4 e0 ad 6f a8 d2 f6 4d 7e 91 f8 7f 01 8c bd 81 fd 27 04 00 00 Data Ascii: Sn0}P_<b'vbS1Y2$ >(4Es$GwD}Kb)9fjX,/CL2!S]!@knKt%\"5wNtOhh#`\|h5$kC9~p/7xsqWI_\KY{GZ\|xn&aMZrU:U!C\M+~4=RIu6_CvpiaP}COzCyknuh)^bQZ*Lr3vGtoM~'
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:13 GMTcontent-type: text/csslast-modified: Thu, 04 Apr 2024 17:59:32 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 695date: Wed, 23 Oct 2024 22:28:13 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 95 93 db 4e dc 30 10 86 af 9b a7 b0 c2 0d 20 bc bb d9 16 4a b3 42 45 aa d4 97 e8 41 9a 38 93 64 b4 89 9d da de 13 68 df bd ca 1e 80 0e 0c d0 5c 44 b2 e7 9b f1 9c fe 0f e3 f3 44 a9 0f df 5b 88 64 9c 55 bb 5f e5 6c cc d5 f1 6e b0 7f f3 08 91 9c 55 25 44 cc 55 76 35 9e 4c c7 d3 c9 74 aa 26 d7 f9 65 36 20 e7 e3 24 b9 1d 3c 75 05 06 d5 7d a2 d4 e1 d4 51 bb c9 55 7a 8c 97 ce 12 a5 82 37 b9 5a f8 f6 34 1d 8d c6 03 17 c6 47 fb 08 5d 4c cf de 01 7d 3d 21 ac 68 9d 9e a9 ca f9 0e e2 69 8a 5d 81 65 89 a5 76 3d da b8 e9 31 3d bb 48 d4 fe 13 e2 ac 5c 55 3d 89 b0 3f be e5 14 e3 53 9f e8 17 f8 be c7 c2 b2 3e 79 68 c3 63 80 b0 ac f7 05 ef 1a b6 42 aa 9b 98 2b 3b 58 db 87 eb 10 37 2d 3e de 6e 93 e4 b6 c3 92 40 05 e3 11 ad 02 5b aa 53 bd c2 62 4e 51 77 64 75 89 4b 32 a8 7b 5a 63 ab fd 30 be 7c 72 b6 9b 0b 1b d3 ab 83 fa 67 0a ef af 64 3b 24 f8 c3 b4 10 c2 ef 9b b4 3a 90 3a fd 95 17 58 39 8f 17 6a 6f 3c bf 49 d5 0b d6 97 5d a1 8a e8 25 cf 9d f1 f9 da 1d 93 9c 1d 47 73 e8 26 dd 61 ae a6 93 7e 3d 4b 5e 6a 6f 07 be 26 ab 5b ac e2 11 db 26 c9 e8 e1 c1 9e ea 43 ae ea 5e 19 67 23 0e 92 49 7f 56 d9 64 92 ce d4 f6 09 5a 3a 11 cd 18 da a0 95 d0 29 43 3b 67 e7 b8 91 e8 8f 8c ae 1d 44 89 fd c4 d8 60 61 8e 12 7c c9 8b f3 50 3b 31 e9 2b 46 7b 28 0a 12 13 f9 cc e8 48 35 7a 09 be 66 b0 5b 4b e4 97 67 49 44 dd 3a 37 27 5b 6b bf 93 9a e0 08 bc 31 0d f4 18 24 ba 60 74 01 c5 46 af 28 36 ba 24 e8 e5 42 0c 1f 15 55 b1 70 6b f9 a1 92 39 80 a5 0e 5a 89 46 46 a3 ad a1 c6 0e 6d d4 9e ac b8 99 15 73 eb 3d d6 16 ac 91 36 2e e3 5b 4f a1 85 8e 8c 8e d8 f5 ad b4 4e 19 17 40 07 de 6f 74 27 f2 5c 05 61 61 0c 06 a9 55 19 97 01 fc 59 80 a7 45 d0 77 ae 24 30 3a 50 6d 75 d8 74 85 93 fa 97 71 75 18 e8 3d 19 e7 a5 9d cf b8 42 82 71 be 27 27 e1 5c 22 2d 15 1e 24 98 2b 64 49 be 76 1a 42 f4 ae 75 35 19 68 0f d5 ec 2a 93 a2 70 e9 b4 28 66 c7 b5 63 c0 1a 71 95 33 2e 98 1a 3b b2 f4 1f cd e6 1a 8a b0 f0 8b c0 0a 7c 3b 0c 97 14 78 c2 f0 6a 4b b8 a6 8c 23 2b 6e 15 97 14 2c 21 82 d8 14 ae a4 c6 89 eb 3d e5 22 6a 9c 0f a8 1b 84 52 f2 e0 02 0a 8d eb 25 76 2f 9e bf 7c 97 2f 03 f2 09 00 00 Data Ascii: N0 JBEA8dh\DD[dU_lnU%DUv5Lt&e6 $<u}QUz7Z4G]L}=!hi]ev=1=H\U=?S>yhcB+;X7->n@[SbNQwduK2{Zc0\|rgd;$::X9jo<I]%Gs&a~=K^jo&[&C
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:13 GMTcontent-type: text/csslast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 701date: Wed, 23 Oct 2024 22:28:13 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 95 c9 72 e2 30 10 86 ef 54 f1 0e be 91 4d 71 4b 5e 21 97 b1 8d 4d 12 b6 10 20 2c 17 ca 18 61 3c 78 01 db 38 c0 d4 bc fb 94 6d b2 1d 53 e1 30 3e 75 fd 6a 49 a5 fa fa ef 16 7b c5 58 87 d0 71 5d c7 42 74 1f 33 57 6c b9 f4 6b 19 f8 31 5a 9a 16 65 fe 94 4b 0c 73 92 9e e3 1e 6a 4c e5 39 98 07 71 50 b9 7b cf 44 f1 c1 a5 35 c6 0f 42 cf 74 3f 96 5f a9 63 af e2 1a c3 03 64 8b 51 68 d5 18 37 b0 4c f7 e2 ed 8e cb 9b af 0b e8 99 da 3b d7 0c d3 c4 2e 74 2f 56 71 bc 89 6a 2c 9b de 17 dd da 51 6c c6 8e 75 6b 05 1e 1b b1 61 76 82 4d b0 cc d2 35 6f 1f a7 a8 41 c7 ca 93 d5 9f df c7 1a ed 3d cc 68 34 1d 91 7d b7 87 f6 51 67 db e5 25 4f 10 ea ca ed 6b b0 5c 92 4b 66 99 3e 36 be a8 64 b2 72 99 3d 70 e7 3b 56 b0 a0 28 34 7d 9b d6 98 e1 35 f0 22 20 10 88 71 c3 0c af b1 26 03 c2 9a 2c a7 82 80 ca 67 b1 ae 03 22 75 23 db a1 88 3c 20 45 ac 66 c2 d0 89 8e 0c 9d 18 77 e5 d2 df 72 89 fd c0 5c 48 c4 9e 1e 26 2d 75 62 cf ac 71 83 0b 5b c9 30 6a 0e 66 cb 73 20 06 40 c0 0b 19 33 e0 ab a9 a8 e2 5c a8 a9 50 33 41 30 16 df 41 da 21 a5 eb c2 9a 15 11 9f 6c d0 6c 02 72 64 0b 92 d6 19 f5 96 cd 4e f2 73 92 d8 00 40 d8 30 8c af 9c 0a c9 68 07 83 ee c6 03 99 b4 3b eb be d0 84 1e 1f ae b6 67 60 04 9c 04 08 b8 4f 8c 12 87 c6 be e9 d1 88 16 12 54 67 61 54 db b1 df dd b4 8e 01 f2 83 76 d0 00 cf 79 3a 03 28 0c 04 01 06 2e eb 44 8c 01 01 c6 59 27 62 5d 01 84 75 a3 9a 8f 41 45 7d 47 e9 9a b1 e3 17 b6 2d 0d 6b 2f 8d 5e 13 b9 7b 1c 48 58 e1 74 3c ee 2a bf cf 61 39 9c 0e 38 c2 e7 03 8e 08 d5 1c 22 64 10 8d 13 44 40 29 c9 93 a8 23 02 5a 9e d1 44 40 44 93 f2 df 45 22 80 14 e9 93 77 33 e0 85 84 ad 8d 54 18 4f 14 79 7e 0c 60 dd 1f ac c6 30 1c ec be c9 15 52 ae 90 23 04 cc e5 7f 06 16 52 db 0a b9 6d 89 aa 22 20 aa 96 0b 4d cc 63 5d 39 45 2d e7 0d 29 7c f1 54 09 89 3f 15 21 4f 62 42 b2 48 f0 5b 14 72 fa df 36 7c 27 08 1d cb f4 7f 56 84 d3 25 cc 27 e8 5f 33 df 29 87 9f 1f 61 13 81 1d 0a 76 b4 e8 b7 a6 e4 7e 4b dd 56 68 5a 92 e0 69 4f 13 91 23 9c 77 3f 9c 1a 8f 6d 7b 90 ec cd 06 71 f4 a2 79 ff bf e6 fe 72 7c b0 36 ed c3 78 c1 cd 0f bd 97 d9 a2 37 6d 6e 39 bb 50 6d f0 0f 4e a9 a2 85 3f 0c 00 00 Data Ascii: r0TMqK^!M ,a<x8mS0>ujI{Xq]Bt3Wlk1ZeKsjL9qP{D5Bt?_cdQh7L;.t/Vqj,QlukavM5oA=h4}Qg%Ok\Kf>6dr=p;V(4}5" q&,g"u#< Efwr\H&-ubq[0jfs @3\P3A0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:14 GMTcontent-type: text/csslast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 522date: Wed, 23 Oct 2024 22:28:14 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 53 4d 8f da 30 10 3d 37 bf 62 a4 3d 6c 9b d6 21 61 3f e8 1a f5 04 e2 54 a9 87 3d 56 3d 38 f1 90 58 18 db b2 9d 00 5b ed 7f af 9c 84 8f 50 40 bd 34 be 58 6f c6 33 f3 de bc 8c e2 38 82 18 7e 6c 24 cc 98 d5 b5 43 09 cd 38 19 27 59 80 67 da ec ac 28 2b 0f e3 34 7b 20 e3 34 9b c0 9c 35 82 c3 1c 6b ef 8a 2a 24 7d 17 05 2a 87 1c 6a c5 d1 02 7c fc 14 41 3c 8a 46 6d e1 0f 73 5c b2 5a 7a f0 15 ae 11 c8 b0 d3 ec f5 15 16 42 62 fb 20 d1 1b 49 ba b4 f6 aa 58 03 bf 23 80 35 b3 a5 50 c4 6b 43 21 4b cd 76 1a 01 78 dc 7a c2 a4 28 15 85 02 95 47 1b 50 b2 c1 7c 25 3c f1 cc 90 4a 94 95 0c a3 93 42 4b 6d 29 78 cb 94 33 cc a2 f2 53 78 8f 00 2e f5 fb 59 48 e6 5c fc ed 3e 00 f7 bf da fe 00 7d 85 bb c5 62 31 6d 81 a5 56 9e 38 f1 86 14 b2 c7 6e a2 fd 9c 14 9e f6 80 61 9c 0b 55 52 78 34 5b 98 ec d1 9c 15 ab d2 ea 5a 71 0a 77 f3 e7 70 ba 00 17 ce 48 b6 a3 20 94 14 0a 49 2e 75 b1 ea 42 45 6d 5d 98 c0 68 b1 e7 0a 90 6b cb d1 12 cb b8 a8 1d 85 07 b3 ed 78 fd 13 33 5a e9 06 6d cf ef 6c a8 af cf 2f 93 97 6c da 87 fe 22 df ab cf b1 d0 96 79 a1 15 05 a5 15 5e 17 35 e1 c2 b1 5c 22 ef db 69 c3 0a e1 77 14 d2 e4 69 c8 8f 77 66 09 a5 2e d9 e1 58 e8 73 87 71 ed dd 65 8f 5c aa 70 c8 fe 1f ee 69 8b ef 6f 3d d1 1b 1b 7d d3 7a 4d a1 17 39 3e 4b bc b6 c7 61 0f 67 98 3a 2c 70 23 b8 af 8e ff 47 f8 2a 0c 04 86 d8 89 47 8f 8e bc e1 c9 13 0e 27 c3 1f b5 0a 0f 97 ac 40 d2 08 27 72 21 db b5 b6 77 89 07 b7 04 e9 44 67 94 7e f5 30 4e d3 b5 03 64 ee 90 75 ee e6 f4 ba 9d 07 32 24 ac f0 a2 c1 56 8d 2f b7 53 7b cf 0f 74 bb 64 7c 78 8f fe 00 bd 7e 53 bb 17 05 00 00 Data Ascii: SM0=7b=l!a?T=V=8X[P@4Xo38~l$C8'Yg(+4{ 45k$}j\|A<Fms\ZzBb IX#5PkC!Kvxz(GP\|%<JBKm)x3Sx.YH\>}b1mV8naURx4[ZqwpH I.uBEm]hkx3Zml/l"y^5\"iwiwf.Xsqe\pio=}zM9>Kag:,p#G*G'@'r!wDg~0Ndu2$V/S{td\|x~S
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:14 GMTcontent-type: text/csslast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 1811date: Wed, 23 Oct 2024 22:28:14 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 db 6e dc 36 10 7d f7 57 b0 08 82 24 86 69 6b bd 5e c7 91 5f da a4 c8 5b 81 a2 e9 0f 50 d2 ac 96 35 45 0a 14 65 af 5d f4 df 0b 5e 44 91 14 b5 36 d0 62 f3 60 0d 6f 67 6e 67 86 cc d5 39 fa 8d b4 9c ee 69 8d 7e 17 fd d8 a3 6f 3f 7e a0 f3 ab b3 cb 6e df e3 aa 45 7f 9f 21 a4 44 5f a2 e2 fe 0c 21 06 7b e5 fe 7c a2 8d 3a 94 68 53 14 ef f5 e7 01 68 7b 50 f3 f7 0b a6 bc 81 a3 16 dc 5c 6b 81 78 04 b9 67 e2 a9 44 07 da 34 c0 b5 ac 17 03 55 54 f0 12 ed e9 11 1a 2d aa 48 fd d0 4a 31 f2 a6 44 ef 8a 4a ff cc ea 9e d4 54 3d 97 a8 b8 bc bb 47 ff 9c 59 7c 4f 92 f4 ff 0b c2 ed 0a 1a 31 2a 46 39 94 88 0b 0e e8 27 da f5 42 2a c2 95 1e c3 4f 50 3d 50 85 35 e2 3d a9 01 3f d2 81 56 94 19 98 4e 47 8f b4 16 5c 11 ca 41 5a b8 70 54 98 30 da f2 12 d5 c0 15 c8 f8 7c 52 0d 82 8d 0a de a0 45 a0 ef 6c 84 9e 34 0d e5 6d 89 0a 74 d7 1f 8d 59 c5 11 0f f4 c5 08 2b 21 1b 90 b8 12 c7 0c be b2 82 bd 90 60 60 6a 21 70 55 a2 0f 1f f4 1e 0d 1d 7a 46 9e 4b 44 b9 36 0a ae 98 a8 1f 72 98 1e 41 2a 5a 13 36 a9 d8 d1 a6 61 30 1f 66 c4 58 89 1e ad 9f ed 0f d3 96 8f 71 02 57 66 ca 6c 2f 09 8c 28 fa 08 27 51 ae a0 3a 43 a8 23 b2 a5 5c 5b 8b 8c 4a dc 27 0e d2 16 4e e3 65 37 23 72 c7 1c 04 6b 40 a2 10 e4 85 d3 f6 2f 72 cc 0d 1b 1d 12 ef d6 a3 1c 84 2c 2d 8e d9 5e 7a 87 7a b4 b1 33 4d e9 a5 68 25 0c c3 3c ed 45 88 0e 8b 51 e9 a9 17 68 21 b2 12 da 91 36 41 cb c4 00 d1 d6 b8 13 2f 7e 69 08 6b 0a f9 dc 98 97 45 78 62 c8 82 4e b1 9e dd 91 f2 fb 2c 8a 58 3e 89 66 f3 8c 4a 60 3b ba 34 70 de a2 46 e7 c9 3f 52 8a 27 f7 77 2f 81 09 d2 80 bc 98 c2 6d d4 88 cd 4e 13 d4 71 00 89 07 60 50 2b 17 9d 7a 50 83 cd 8e 2c 85 1e 85 3e 8a f2 d6 fc bd a7 ed 78 3a f4 0f b4 c9 8c 87 a4 e4 a7 7a 35 5c 1a 33 6d 81 77 df be 7d 5b a7 19 43 1e 3b 1b 85 2e 28 73 c9 30 b3 95 4d 1a 6c d6 e1 e2 f2 0e ba 99 8e 1c e9 48 4b 0b ee 2b cc 9f 1b 8d 15 a1 04 2c 31 70 63 c0 66 de 72 66 79 d0 f5 c4 cd 9f 57 7c ff fe 7d b6 c2 80 25 90 e6 39 5d 7b c2 c4 03 06 29 73 51 b4 9c 5f 8d 4a 09 1e 06 53 20 31 21 65 16 ce 55 cf 54 07 cb 37 99 7c 08 cb 9e 92 84 0f 3d 91 60 eb 8c a5 6b c7 ec 53 10 92 be 07 22 09 af 61 8e 34 0f d2 53 5e 54 be e2 c2 90 7a Data Ascii: Yn6}W$ik^_[P5Ee]^D6b`ogng9i~o?~nE!D_!{\|:hSh{P\kxgD4UT-HJ1DJT=GY\|O1F9'BOP=P5=?VNG\AZpT0\|REl4mtY+!``j!pUzFKD6r
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:14 GMTcontent-type: text/csslast-modified: Sat, 04 May 2024 11:18:24 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 2095date: Wed, 23 Oct 2024 22:28:14 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 5a 5b 6f a3 38 14 7e 9e 4a fd 0f ac 46 23 b5 52 a9 62 12 42 c8 4a ab f9 27 c8 80 43 ac 82 8d 8c d3 66 b7 9a ff be 32 e6 62 1b 9b 4b 67 5f 76 fa 92 c1 e7 1c fb 7c 3e 77 f8 59 a1 1c c3 a7 0a 13 ff 03 e7 fc 7a f6 a2 e3 a9 be 3f 7b 90 e4 de 53 05 ef fd e3 38 0e ea fb f3 e7 e3 c3 b7 d7 6b 93 54 10 93 a4 42 e4 e6 41 f1 e8 5b 0d f3 1c 93 e2 ec 05 61 7d f7 c0 ae be 8f bf fe 7c 7c f8 f6 eb f1 e1 d7 e3 c3 e3 c3 cf 76 3b 4d 30 00 71 3c 6e 38 9e 23 8e 81 b2 61 ca 49 f2 c1 60 5d 23 d6 6e 58 41 56 60 e2 33 5c 5c f9 39 1c 36 69 69 39 ad 93 5b 83 58 52 33 7a c1 25 52 4f e8 97 e8 c2 cf 3b 95 fc 8a 60 8e 58 02 f3 dc b6 c3 48 ff 4d 1e 0c c4 9d 4e 3d 05 a7 f5 59 55 d4 14 8a 33 4a bc cf 51 80 b7 ef 05 5c 51 7b fc f1 41 89 09 f2 27 4f 2f 94 70 bf c1 ff a0 b3 07 a2 d9 6d 92 8c 12 ae a9 2b 0e 27 4f af 01 b0 42 8c 77 0d 3f f5 dd c1 61 05 57 6d 32 05 3a 53 f6 77 56 22 69 3f 2e b4 63 e3 3e 1b 5c 90 44 ac 24 1c a6 4d 92 52 26 b6 ed b8 81 d7 d4 90 9c e1 85 23 a6 a1 0c e2 a0 47 55 08 f5 fa ff b5 d7 75 d8 6d df 22 45 17 ca 90 7e 93 a0 13 ea f9 15 fd c7 e7 0c 92 e6 42 59 75 66 94 43 8e 9e 82 c3 31 47 c5 73 4b e2 7f a0 f4 0d f3 05 22 ba b0 5e 35 f3 04 e3 a2 67 5b 15 ba c7 40 c3 05 44 f1 06 2c 0e 4e b8 0f ba d8 e3 3c 32 e0 b8 5b 46 46 23 b2 20 a3 ad db 90 51 09 a6 c8 68 ab 02 19 3f 00 1b a0 08 dd 96 b7 d7 a0 f0 a3 05 2c d6 58 09 58 b0 12 b0 64 25 60 d6 4a 80 69 25 7e b8 df 80 c5 d1 85 45 00 62 1d 8b f8 7f 89 c5 16 17 39 3a c3 c5 61 bf a0 3c d8 af 50 5e 25 b2 29 af ae 5b 95 57 08 2c ca ab ab ad f2 e0 a0 07 52 70 b2 79 49 9b 89 b7 05 e8 e8 a4 9b 06 88 fa 8d 1c f0 84 a7 15 f0 a8 44 36 78 d4 75 2b 3c 0a 81 05 1e 75 d5 99 49 96 c0 b0 a5 92 70 5e 77 10 ad 31 8d 68 c1 34 a2 25 d3 88 66 4d 23 32 32 49 60 5c 60 1c 6c 01 c3 99 4b 86 0a ab 8f 9f a7 59 6c 02 b0 22 97 68 44 b6 2c 0b 16 72 89 4a 60 c9 b2 c0 cc 25 c0 16 33 9c 58 b8 93 49 04 0c 90 0f f3 5e 12 04 60 05 1a 2a 91 0d 0d 75 dd 8a 86 42 60 41 43 5d 6d d1 38 6c 42 c3 9d 4e 76 47 33 66 1c 17 6c 23 5e 63 1b f1 82 6d c4 4b b6 11 cf da 46 bc 26 9f 2c a1 31 97 50 ec ca 47 2b fc 22 9a 77 8b 68 c1 2b a2 39 a7 88 26 3e 71 88 8c eb 3b 19 11 e3 Data Ascii: Z[o8~JF#RbBJ'Cf2bKg_v\|>wYz?{S8kTBA[a}\|\|v;M0q<n8#aI`]#nXAV`3\\96ii9[XR3z%RO;`XHMN=YU3JQ\Q{A'O/pm+'OBw?aWm2:SwV"i?.c>\D$MR&#G
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:14 GMTcontent-type: application/javascriptlast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 29638date: Wed, 23 Oct 2024 22:28:14 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd fb 97 9b 46 b6 30 fa fb f9 2b 5a 8c 0f a1 ac 92 5a 72 92 b9 67 90 ab 59 8e 9d 4c 32 b1 f3 b2 33 49 86 96 b3 0a 28 10 dd 08 d4 42 72 b7 23 34 7f fb b7 f6 ae 07 05 42 76 e6 7c f7 ae 75 97 97 5b 50 d4 fb b1 6b bf f7 e5 e3 d1 c5 cd 8f 7b b1 7d 7f f1 ee c9 74 3e fd ec a2 b9 f0 62 72 f1 64 36 fb 9c 5e 3c 99 cd 3f d7 9f bf aa f6 65 c2 77 79 55 d2 8b 6f ca 78 7a d1 5c dc dc c1 97 69 b5 cd 2e 8b 3c 16 65 2d 2e 1e 5f fe d7 28 dd 97 31 e4 f3 38 8d c8 c1 a9 a2 1b 11 ef 1c c6 76 ef 37 a2 4a 2f d6 55 b2 2f 84 eb 9e f9 30 15 0f 9b 6a bb ab 83 ee 2b e3 d3 a4 8a f7 6b 51 ee 82 c8 e3 74 34 23 7e db 10 39 e4 a9 37 6a b3 90 dd 6a 5b dd 5f 94 e2 fe e2 cb ed b6 da 7a 8e 1a c5 56 dc ed f3 ad a8 2f f8 c5 7d 5e 26 d5 fd c5 7d be 5b 5d f0 0b 5d d2 21 8b ad d8 ed b7 e5 45 e4 71 72 f4 f1 af e7 ec cb 44 a4 79 29 12 67 a4 bb 2b cb 07 f2 c7 df ad f2 9a 76 47 fe 8e 6f 2f 62 16 2e 69 c2 e2 69 0d 33 44 05 8b a7 71 55 c6 7c 47 53 16 4f 37 fb 7a 45 33 16 4f f3 32 11 0f df a7 74 c5 0e 47 9a b3 d5 74 57 bd de 6d f3 32 a3 37 6c 35 5d f1 fa fb fb f2 87 6d b5 11 db dd 7b 7a 0b 99 0a 6b 42 e8 9a 39 b8 78 0e 2d 59 b7 0f 6a 2c 30 11 e5 34 2d a7 79 99 ef f0 cb 91 56 ec f2 6d 78 5d 5f ef bf fa f2 ab af ae 1f 9e cd 96 e3 a6 f7 fe e8 32 a3 1b 76 f9 76 b2 ae 27 97 f4 8e 5d 4e bc f0 3a e1 93 3f 96 e4 32 cb e9 76 b8 b1 68 ba ab 7e de 6c c4 f6 39 af 85 47 8e 0b 68 99 95 d3 cd b6 da 55 30 79 ec 20 77 8e bf a6 71 55 d6 bb ed 3e de 55 5b bf a4 b5 28 04 3e 3a 0e 2d 44 99 ed 56 fe 8c ee aa 67 db 2d 7f df ae b6 69 28 99 c6 bc 28 3c 98 7a 72 a4 99 d8 75 76 84 1e fa be 28 46 8c 07 b3 2b 1e 40 ce 90 8f e1 67 2a eb 5f fa 32 6d e9 77 2b 83 95 79 bd e3 f1 6d a7 4a 58 d1 88 95 d3 b5 d8 66 02 b3 4e ad 01 78 84 f2 76 f7 4c 37 5b f1 ee 7b dc e2 0c 37 47 04 79 77 e2 41 be ea 17 1a 1d a9 e0 f1 ca 1f 5e b7 29 7c c3 96 a8 5c b5 35 df 0c 8d 12 ab 34 9d f6 ca e9 9a 6f bc ee 9e 8c 68 6c b2 73 39 d8 88 c6 50 29 21 47 8a fb 73 60 8e 7b 15 27 53 be d9 14 ef 55 8f b6 19 ee bf 1a 2a 48 f3 6d bd 3b 57 81 b8 f3 66 e4 48 0b fe c1 2c 93 39 39 52 71 37 30 e5 d6 8a d1 98 8d f9 d8 83 Data Ascii: F0+ZZrgYL23I(Br#4Bv\|u[Pk{}t>brd6^<?ewyUoxz\i.<e-._(18v7J/U/0j+kQt4#~97jj[_zV/}^&}[]]!EqrDy)g+vGo/b.ii3DqU\|GSO7zE3O2tGtWm27l5]m{z
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:14 GMTcontent-type: application/javascriptlast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 8069date: Wed, 23 Oct 2024 22:28:14 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 3d 6b 77 db 36 b2 df f3 2b 60 b5 2b 92 35 44 c9 79 ec 43 0a eb 9b b8 cd 6e f7 34 6d 4f 9d 6e 3f a8 ea 1e 88 84 24 d8 14 c9 12 90 1f 31 75 7f fb 3d 83 07 09 be 24 3b ed de 73 af 3e 38 24 38 33 18 0c 06 83 c1 60 80 8c bf 40 ef d3 88 e6 09 fb 98 a3 e7 fe 5f fd 17 c8 bd d8 71 91 6e d1 db 1d 8b 23 0f 15 e8 fd 37 1f d0 10 bd bd fc ea 19 fa 42 95 4e d1 46 88 6c 3a 1e 6f 0d ae 1f a6 db 71 94 de 26 71 4a a2 f1 67 a3 55 9a 88 15 09 e9 68 49 c2 eb 75 9e ee 92 88 b3 8f 74 b4 4c f3 88 e6 6c 4b d6 e6 39 27 11 db f1 d1 32 bd e3 1b 12 a5 b7 a3 55 4c ef 96 e9 dd 68 c3 63 32 da ee 62 c1 b2 98 2e d7 7c 94 66 24 64 e2 7e 94 af 97 64 24 e8 9d d0 08 21 e7 24 61 5b 22 58 9a 70 78 0b d3 78 b7 4d f8 68 4d 13 9a 13 41 a3 30 4d 04 4d 04 7c 5b 43 7d 34 11 12 30 a7 ab 98 86 25 9e c8 49 c2 57 69 be 6d bc bd 88 ca 77 a6 80 49 96 c5 2c 94 35 86 24 dc d0 51 48 92 1b c2 f5 3f c0 db 28 ca c9 9a 24 51 94 a7 d9 68 43 f8 26 dc 90 64 4d 47 1b c6 45 9a df 8f c8 2e 62 e9 e8 86 45 34 1d b1 24 a2 77 34 8a 96 23 96 64 3b a1 fe 8a fb 8c f2 51 9c 86 24 06 0c 10 58 96 72 b1 a5 9c c3 33 a7 9c 03 2b fa d3 2d 5d f2 34 bc a6 82 cb c7 df e2 88 08 b2 24 5c 7e b9 4d f3 6b 9a 83 3c 52 a0 07 5c 8f 58 12 b3 84 f2 9b f5 88 6f 59 3c 92 0f 37 eb 30 66 59 46 c4 86 8f 44 ba 0b 37 80 bc 8e 47 7c c3 6e a4 5c 63 c2 39 e5 23 12 45 82 72 31 ca 72 ba 62 77 34 1a c1 1b 17 f7 31 e5 f2 31 83 36 c3 03 89 63 78 e6 20 00 7a 03 3d a0 51 f8 28 4a b7 e5 33 e8 cc 33 f4 c5 f8 d9 ec d9 b3 67 cf 6e 59 12 a5 b7 7e a5 96 01 72 57 bb 44 76 93 8b d4 57 8c a2 34 dc 6d 69 22 30 da 25 11 5d b1 84 46 c8 43 0f cf 9e 21 84 d0 0d c9 d1 0d cd 41 40 28 40 8e d4 6b 07 ab 6f 36 dd 87 bd 2e a4 09 59 c6 f4 42 b5 0f 05 48 e4 3b aa 3f 45 69 f8 75 4c a1 2a 14 94 b5 fa e6 41 7f d2 b0 db 34 82 fa ca 51 e1 60 53 0c 70 36 7e 98 53 22 a8 c6 76 b7 69 e4 69 d0 4b 10 23 0a 0c 8e 2f c5 aa c9 4b bd 90 94 fa 49 39 12 c8 f1 10 d2 48 d0 bd 40 d0 99 7a 46 04 22 bd 14 39 4b d6 52 02 be 79 d3 1f 4d af 00 0a 02 05 b8 66 62 84 46 db f4 e3 08 8d 52 78 e2 23 e4 f8 3c 8b 99 70 1d e4 78 18 3a 0d 30 d3 ed 0f 16 ee cf 12 13 bd Data Ascii: =kw6+`+5DyCn4mOn?$1u=$;s>8$83`@_qn#7BNFl:oq&qJgUhIutLlK9'2ULhc2b.\|f$d~d$!$a["XpxxMhMA0MM\|[C}40%IWimwI,5$QH?($QhC&dMGE.bE4$w4#d;Q$Xr
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:14 GMTcontent-type: application/javascriptlast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 3752date: Wed, 23 Oct 2024 22:28:14 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 1b 6b 93 db b6 f1 f3 e9 57 6c d4 9b 88 ba ea 28 77 3a 9d ce 9c 7b ee b8 3e b7 b9 a9 9d b4 b1 d3 34 d3 c9 78 20 72 25 a2 07 02 2c 01 ea 51 df fd f7 ce e2 c1 87 48 ca 72 93 e8 43 7c 12 80 c5 be 5f d8 2c af ae 26 70 05 39 ca ea 9a f1 1c b8 06 06 ff fe 7b 85 e5 01 0a 51 6d b8 84 b5 2a 21 2d 55 91 aa 9d b4 1b 35 98 8c 19 48 98 84 94 af d7 58 a2 34 9c 19 24 40 2b 34 3b 44 09 0c 2a 8d 25 98 f2 c0 e5 06 32 b5 c5 12 ec 7f 58 03 8b 1b cc 61 ab c3 26 a3 40 b2 2d df 30 83 c0 a5 51 04 8e 81 ae 56 74 e7 4c 43 a2 a4 41 69 74 3c 81 2e ce 4c eb 2a 47 8f d5 41 55 90 b1 2d 02 2b 11 2a 4d 80 99 dd 0a 3b 6e b2 00 ce 6f c6 7d c1 64 4a c0 8c 02 93 21 f8 ab 4a be c9 4c 0c f7 06 76 5c 08 58 f3 12 01 b7 74 39 ec 32 94 76 2b d1 37 d3 90 ab 4a 23 a0 34 58 12 eb 24 ee 08 5c 97 c6 2b 26 d3 ab 70 92 19 f7 23 d7 b0 42 42 8f 5b b2 b8 92 4c 88 83 63 15 a6 96 59 81 d2 0f a3 1f 5a 7d 84 b7 4a 3e e0 41 03 bc 78 04 80 bf a8 92 0b c1 00 1e dd aa ff ae dd ea 2b c7 c5 7a f5 55 c6 f3 42 83 3f fb 15 96 08 f4 71 ab ad 9b da 7f 7f 78 f4 88 dd 3b 56 b0 95 da 22 e0 9e e5 85 c0 05 4c c3 8d 53 22 52 a3 c0 c4 60 0a 4c a6 c0 8d 0e 22 08 f2 04 ae 9d e2 10 2f 74 46 4c 53 0e 6c 90 42 ce 36 5c a2 63 5d 8b f3 49 55 6a 55 d2 15 96 67 74 9c fe 25 60 35 06 f1 14 be f7 02 3b 40 4e 58 9a 0c 79 e9 a5 46 5a 66 21 86 fd 81 3b 53 d2 1e b6 b0 c7 ac aa b1 03 ac 4a 8e eb 20 20 a7 cb 53 c7 bc 78 0a ef 33 a2 34 53 95 48 e5 cc 40 22 94 c6 61 c8 56 ab 4b 64 41 b6 f6 64 51 aa 95 70 3a 21 55 99 5b 45 d0 4a 6c 31 f5 2a 6c 78 8e aa 32 da 32 31 45 c1 0e 3a 6e 0c c0 94 9c d4 df 5a 8c 3d 06 86 a0 ae 0e 90 a2 c1 c4 58 08 19 42 ca 4b fa a6 24 a8 75 5f 87 89 3d 39 4a 13 3b 9c 12 26 1d e9 0f 68 5d c0 7f 2a 9e 3c 58 93 66 52 73 82 e2 8d c1 1b 2d 5d 52 15 0e 41 12 62 30 27 02 67 5d 03 ee 0b 2c 39 ca 04 9d cc 0a 5c 57 96 50 9e 73 c1 4a 32 41 96 b3 ff 2a 19 27 2a 5f ce 34 4c df 65 aa 20 2a ee b0 60 a5 c9 03 fb 82 71 05 16 7e a7 11 04 7f 40 d0 ea c6 ff 64 3f 97 d1 f4 57 84 c1 74 1e d3 3f 2f 79 1e 7d ac 17 e9 c3 12 c3 b7 cc e0 0d 5c c6 52 a9 62 01 b0 5c 5a 6b 4f 49 07 4b b5 0b 5b b8 92 9d 93 Data Ascii: kWl(w:{>4x r%,QHrC\|_,&p9{Qm!-U5HX4$@+4;D%2Xa&@-0QVtLCAit<.LGAU-+M;no}dJ!JLv\Xt92v+7J#4X$\+&p#BB[LcYZ}J>Ax+zUB?qx;V"
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:14 GMTcontent-type: application/javascriptlast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 2310date: Wed, 23 Oct 2024 22:28:14 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 58 4b 93 db 36 12 be e7 57 48 a8 94 02 58 10 45 3a b5 39 50 03 cf da 93 b8 76 aa 1c ef ac c7 55 1b d5 ac 0e 10 09 89 70 28 82 0b 40 33 1a 0f f5 df b7 40 f0 01 50 52 ec e3 de f0 e8 6e 74 7f e8 17 30 7f 35 fe 61 f4 6a 54 52 49 f3 9c 1e 82 2f 6a f4 18 05 7f 0b c2 11 cc b4 2e e3 f9 bc e4 07 96 27 62 1b 6c b9 ce f6 eb 80 8b b9 43 3d 47 86 fd ef 89 28 9f 25 df 66 7a f4 3a 8c 7e 19 dd 19 9e 1b b1 c5 a3 db 22 09 6a 8a 9c 27 ac 50 6c f4 fb ed 67 2b 5a c5 f3 79 23 32 11 bb ee 18 4f f8 3a 17 eb f9 8e 2a cd e4 fc c3 ed cd 6f 1f ef 7f 33 e7 cd 7f 18 6f f6 45 a2 b9 28 a0 c6 1c 33 ac d0 4b bb 32 12 90 63 86 5e 1e a9 1c 65 44 67 5c 2d 80 58 7f 61 89 06 84 e8 e7 92 89 cd 88 4d 26 30 65 39 d3 6c c4 02 c9 36 92 a9 0c 3b 0b 45 ca 24 d6 01 3b 68 56 a4 d0 c8 c0 0c 21 6c 06 c1 8f 2c 67 3b 56 68 a2 21 47 78 5c af f1 1d dd b2 7b 99 4c 26 1e 49 c0 15 04 7c b7 05 68 32 81 1e 21 f1 e9 a8 d6 12 02 25 13 80 d0 c2 28 2e 89 a5 2f 85 e2 c6 a8 29 00 28 d0 e2 83 78 62 f2 86 2a 06 51 b0 a3 3a c9 e0 fc 3f f7 d3 f9 16 55 d5 c3 6a c1 37 50 06 39 2b b6 3a bb 8a 26 13 19 94 7b 95 41 90 b0 42 33 09 10 8e 08 69 f7 bb 5d f9 10 ae 10 06 5a 94 60 4c cc 64 32 01 6b a1 b5 d8 f5 f3 9c 6d 74 3d 8b cc ac be e6 66 5a 55 50 92 07 33 c2 86 76 d5 40 d4 6a fd c7 98 10 35 99 d4 87 10 7f c7 37 66 c0 b7 ec f8 a2 01 df 72 c8 97 f5 22 6b 75 9d 85 65 ad 22 6e d5 f7 cf 77 0c 19 6e 40 ae 3e d2 8f b0 a4 52 b1 db 42 fb 17 f1 07 42 d7 fe 02 69 01 8e 07 eb 17 05 b4 70 fb 96 b9 c0 0f 77 fe 52 a5 e5 50 a5 e5 05 95 96 17 54 5a 0e f1 1f 40 32 6d 8e 1f d8 71 0d 40 0c ca 03 40 53 30 02 53 5f e2 59 96 65 cf 82 0b fa c8 b7 54 0b 19 ec 15 93 6f b7 26 0a 1a 8f 86 fc 4e a4 15 bf cb 44 c1 2a 7e 47 53 34 47 48 32 bd 97 c5 e8 5c b4 71 a1 de f3 c3 64 32 be 18 7b fe 46 a2 14 7c 59 d3 e4 cf ad 14 fb 22 bd 35 d2 62 b0 97 39 6c ac 68 e5 4f 01 02 b8 27 bc e7 5f 59 0c 12 f1 c8 a4 bb 7c d7 58 e7 63 7d b4 90 9a 98 fc 2b 53 df 16 a9 14 fc 5b 16 52 4b f5 ff 6b a5 3d 7a c7 a5 14 92 68 08 ae 52 fe 38 9a bf 01 28 28 25 2b 59 91 7e 16 d6 15 2c c9 8d 28 34 e5 05 93 36 d9 d1 41 36 dc f0 22 85 e0 4d d0 Data Ascii: XK6WHXE:9PvUp(@3@PRnt05ajTRI/j.'blC=G(%fz:~"j'Plg+Zy#2O:o3oE(3K2c^eDg\-XaM&0e9l6;E$;hV!l,g;Vh!Gx\{L&I\|h2!%(./)(xbQ:?Uj7P9+:&
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:16 GMTcontent-type: application/javascriptlast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 910date: Wed, 23 Oct 2024 22:28:16 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 56 4d 73 db 38 0c 3d 4b bf 02 07 4f 2d 4d 54 39 bd 3a a3 bd 74 67 67 7a e8 a1 33 6d ef b4 04 46 dc 50 a4 87 84 ec a4 a9 ff 7b 87 5f 92 e5 d8 6d 73 70 2c 01 7c 00 1e 1e 08 17 7c 54 2d 09 ad a0 58 95 f0 9a 67 ab 9a ab ba d5 a3 a2 af 1a 1a 98 cd 7a ef fe 5b ef 94 c5 07 68 20 7d fb f9 13 5e 4f 0f 79 9e 65 06 69 34 0a 56 05 f5 c2 96 35 b2 b6 2f 66 98 70 3e db 6c c0 22 4d a7 b9 36 d0 8e c6 a0 22 40 89 03 2a 72 5e 07 66 9c 1b 09 f5 e8 62 ad 6a 7c 26 54 5d f1 7a aa e0 3c d1 ba 43 ce 46 49 b6 0a e8 19 37 7a d8 c2 d9 5f ca a6 63 c4 8a b5 33 af cb ca bb 92 5e 38 5e ba 92 4e 8e 76 8f d8 6d 6f 3a 7a 73 f2 35 c8 0d da fe 93 22 34 07 26 b7 17 be d1 fc 5e 44 7b 3a d6 61 2b 06 26 ed f6 7a 88 64 5e 97 ce fb 54 25 fa 4a cf bb e3 b4 d7 47 18 98 7a 01 12 03 5a 20 0d e3 be 63 84 40 3d c2 81 c9 11 2b 60 aa 0b 7e 63 db 3b 0f a1 5a e3 19 9f 9d 40 2b 70 7d 8b a7 53 2b a4 d6 7b d7 87 cf 8c fa ba 45 21 8b d4 9c da 57 0f 9b a9 5b f5 05 03 b1 c0 39 56 03 f3 61 d2 f0 7e 3e e9 9a 53 c2 26 44 9b 2a 33 c8 d1 a0 6a d1 c2 3b 38 30 23 d8 4e ba 0a 7b 46 70 14 52 42 db 33 f5 88 70 14 d4 5f cb dd a2 e4 d0 80 a3 33 a4 b2 8a 6f 22 c5 e1 a5 8b f9 d1 69 0a 1a b8 0f af 02 21 cd 32 bf d8 2e 46 cc 21 38 a4 d8 a2 28 c8 75 79 36 10 d9 35 87 0a dc f3 dc 39 c1 81 29 c0 67 61 5d 14 48 ca 80 96 29 d8 21 70 3d aa ae 82 56 22 33 20 08 b8 30 d6 8f 88 e0 50 38 a4 3a 9d 88 03 96 79 d7 44 ff 85 cb 83 d7 4f 1e 4b 98 de 87 2a a7 33 81 c0 af 62 40 53 dd 6e ec 5c 81 12 24 98 14 3f 82 da e2 18 87 86 b8 17 96 98 f1 b5 79 46 73 3f 25 aa 43 53 f8 e7 88 33 5d 14 67 c1 d3 9d 11 5b 71 d7 cc 92 7d 58 76 ed ee 2e a0 5c 43 f6 4c d1 cb 1e 35 9f 95 a7 d5 37 1f a7 84 a6 81 75 0a be 4e 01 b3 37 8e 75 cb a4 93 bd e4 15 24 f4 cc 93 39 c5 98 35 f4 4f 13 44 3c c1 79 1d 0f fa 10 18 4a b4 07 5b 10 49 30 ff bb d4 52 08 f1 e7 8e 5e 11 2b e9 58 fd 8d f2 3f ea 61 2f f1 36 01 d9 15 df 5b 1c 04 45 85 cf d3 b2 9b 8b 7e 4c dd 34 ee de 1f 18 11 76 df df 4c 59 b4 98 37 d1 66 2d c6 b8 81 39 c2 67 2a 96 78 b3 ce 4f ee ab 9f c6 ab 6b 03 1a 9f 53 d8 1a f7 d5 72 1f c0 66 e3 db a5 c6 61 87 66 a1 6d db eb Data Ascii: VMs8=KO-MT9:tggz3mFP{_msp,\|\|T-Xgz[h }^Oyei4V5/fp>l"M6"@r^fbj\|&T]z<CFI7z_c3^8^Nvmo:zs5"4&^D{:a+&zd^T%JGzZ c@=+`~c;Z@+p}S+{E!W[9Va~>S&D3j;80#N{FpR
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:16 GMTcontent-type: application/javascriptlast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 753date: Wed, 23 Oct 2024 22:28:16 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 53 5d 8b db 38 14 fd 2b 89 59 8c 44 ee 8a 99 c2 be 38 a3 e4 a1 0c ec 42 4b 29 5d d8 5d 86 3c 28 f2 75 ac a2 48 46 be f6 74 6a f9 bf 17 d9 f9 68 b2 7d b2 cf 91 ee 3d 47 f7 63 59 75 4e 93 f1 8e 11 1f ce ff 0b 64 7c e8 55 58 20 18 70 72 a8 d1 1c 6a 2a 94 30 ce 61 f8 73 42 f0 6a 4a aa cf dc 3f 09 8c eb 80 d4 05 b7 70 62 8e 88 91 a1 0c 42 fb 63 a3 e8 a3 2f 11 18 c6 b8 24 d1 76 4d e3 03 89 bd ff 96 68 cb f3 9c 19 99 bd ff f2 e5 f1 fd 74 39 93 52 e2 b6 2a 82 d8 fb f2 ed 27 0f 46 68 6b d0 d1 8d 89 33 39 bb e0 1c dc 78 79 8a 61 7c 98 6d 0d e4 9b 42 89 46 1d f0 bf 4f 55 d5 22 c5 58 89 56 07 6f ed df be 89 71 16 bb 32 60 b1 a2 53 c4 bf f7 11 1f b0 a2 bb 90 44 8d 57 65 77 2a a2 03 2b 89 71 08 f2 61 6d 2a 46 02 95 ae 59 09 d7 ca 03 ce 37 8d 44 51 2a 52 a2 45 8b 9a 7c 00 27 51 fc 86 16 8f e8 68 6d a5 15 aa 2c 99 d9 3a 51 19 57 32 c3 0b c7 47 0e 4e 5a 61 d1 1d a8 e6 95 0f cc 4b 1f 23 32 0e b5 ac 63 34 8c af dd 26 ac c3 6a c5 27 79 ed 1d 29 e3 5a 56 81 7d 09 3b 3e 6b 2b d0 d0 40 2b 89 4d 24 74 97 92 b7 a7 6e 32 7e 2a 77 2b a6 2f e3 23 1c 64 2b fc 54 19 c6 a1 97 ed 64 9f 65 c6 f5 06 5f 33 9e de bb ac 63 5c 7a 3e f7 60 7d 10 e4 9b 55 77 4a b9 a9 13 cc f3 89 7d 9a c0 ca 9f ce 12 9b 1a b0 ea 66 b9 4d 3d c1 33 fd 34 c3 95 9f 4f b7 4c c9 99 d9 cc e7 db 2c a4 2c 59 71 7b ef e9 36 e9 36 4b 28 2b b2 bd a7 3a 03 2d 27 0f 9b c9 cf 36 91 e4 8f 29 c5 cf c6 9e 6e df b0 cd c8 37 97 0c 8d 54 ab ec f7 6c a5 a1 cf f3 5e 4a d9 c4 78 57 15 68 b8 a0 60 0e 07 0c 57 ee 65 f9 00 0a f4 8e f3 a2 cf f3 fb 88 e5 e3 2f 43 1e 77 7c 1c 53 f3 3c d4 60 a1 94 c3 08 41 96 5e 77 69 5e 40 c9 57 e3 4a ff 0a 95 0c e2 cc 3e cf c3 04 5a 92 c0 6f 8d 72 a5 5f 93 c0 1e 1d 89 b6 41 6d 94 15 b3 82 1c 54 59 16 97 29 45 3e 94 2f 28 0e 9d 29 a7 17 52 6d da 17 bd db c9 21 79 2d 10 ce 73 5a 10 4b 67 7c 04 1b 23 09 d3 3e 1f 1b 7a fb b4 ff 8a 9a 58 c9 63 64 56 b6 48 7f 39 c2 d0 2b cb 1c bc fb e3 81 f3 11 02 1e 7d 8f 37 8a 14 de 86 12 2d 12 2e 7e 29 3e 6a 45 ba 66 86 0f e3 ff 95 f2 9c 69 8b 2a 5c 94 2c 07 2b 5d 67 2d 1f 47 20 a6 b8 d8 a7 35 ca e6 f5 5d 04 6c cd 77 5c cc a8 4d Data Ascii: mS]8+YD8BK)]]<(uHFtjh}=GcYuNd\|UX prj0asBjJ?pbBc/$vMht9R'Fhk39xya\|mBFOU"XVoq2`SDWew+qamFY7DQRE\|'Qhm,:QW2GNZaK#2c4&j'y)ZV};>k+@+M$tn2~w+/#d
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:16 GMTcontent-type: application/javascriptlast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 12481date: Wed, 23 Oct 2024 22:28:16 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 7d fb 77 db c6 95 f0 cf e4 5f 31 56 1d 03 b4 48 50 76 bb 6d 42 45 ce ca b2 9c a8 f5 6b 2d b5 69 d7 eb e3 05 89 21 09 0b 04 18 00 94 ac c4 fa df bf 73 1f 33 73 07 00 29 a5 df e6 9c d6 e2 bc 1f 77 ee fb 5e 8c 1f 3f 50 af e3 45 9e ce d3 99 7a 57 ac 37 6b 35 52 57 4f a2 27 d1 81 1a a9 a7 07 4f fe 3c 3a 78 3a 7a 7a d0 7f ac 96 75 bd 9e 8c c7 49 ba aa f4 4a e7 c5 55 34 2b 56 e3 75 b6 59 a4 79 35 5e f1 20 a3 35 0c 32 ee 3f 56 27 c5 fa a6 4c 17 cb 5a 85 b3 01 0e a5 5e ac d2 ba bc 51 e7 d4 ff 50 3d 1e f7 0f c3 f9 26 9f d5 69 91 ab 70 1e cf ea a2 bc 19 a8 df 54 3f 9d ab b0 be 59 eb 62 ae 12 3d 4f 73 ad 8e 8e 8e 54 60 1a 07 ea d1 23 ae 88 e2 55 82 5d d4 78 ac 8e 5f bf 88 d4 7b bd 48 ab 5a 97 2a ae 54 9c ab 38 2f f2 9b 55 b1 a9 d4 aa 48 36 99 8e 54 9f bb 86 1f 82 cf bf 6c 74 79 13 7c 1c 2a 33 fb a1 ea ab 5b a5 b3 4a 2b b1 08 fd 65 5d 94 75 45 ab 28 a6 9f f5 ac 0e ec ac 6f 8a 44 8f 4f 8a d5 aa c8 ff 7a ae fa 66 a8 b0 d4 bf 6c d2 52 87 66 96 81 1c 9c fb 3e 2f 8b eb 4a 97 6a 91 15 d3 38 ab 44 ef eb 34 4f 8a eb e8 f3 7f 41 5f f5 f5 ab e2 82 ff d6 eb ba e0 91 fa ea d6 1e 60 f8 10 17 d4 1f 3f 7e f6 6c 56 94 fa f1 b8 3f 7e fc b8 af 1e 2b f8 5f e3 96 4f 8a 52 ab bf 9e ab 79 9a 69 6e 32 ee f7 4d 87 77 65 7a 15 d7 5a 55 75 5c a7 33 35 2b f2 aa 8e f3 ba c2 56 57 71 a9 4e 5e bd 3d 3f fd 74 fa 8f d3 37 17 ea 48 05 27 59 51 e9 60 d8 ef 3d 3f 7d f9 f6 fd e9 a7 46 f5 73 3d 2f 4a 6d 1b 1d bf bc 38 7d df 6c 73 3c af 75 d9 1c e7 f8 dd bb d3 37 2f 9a 03 1d af d7 3a 4f a0 d9 eb e3 f7 7f fb fb bb 4f ef 8e df cb a1 5e c7 e5 e5 66 fd 2e 2e 69 ac b7 ef 4e df b8 ca b7 6b 9d 43 e9 c9 4f c7 6f 7e 94 5b 58 c6 f9 02 db bf 39 87 df ab f9 1a 7e 60 fd 27 2a 8a 02 b5 af de 9c 0f fb bd f7 a7 c7 2f fe f5 e9 e4 d5 f1 b9 69 3b 2a 75 9c dc 04 58 f7 fa ed 3f ce de fc d8 ac 5e 15 57 69 be 80 16 ef de d3 a8 74 02 5e b3 75 a9 af 74 5e 8f 66 78 10 87 ed 1b b9 8a cb 8a 2e 6b fc f8 73 b5 4c f3 5a 8d 7e 3e f8 cb 77 e6 62 56 f3 f5 10 1f 42 a5 ae b5 5a c6 57 5a 15 79 76 a3 8a 5c ab 14 6f 71 a6 55 31 b7 e0 40 d0 40 00 3d 84 2e fc da d2 5a 65 c5 2c ce b2 1b 55 17 Data Ascii: }w_1VHPvmBEk-i!s3s)w^?PEzW7k5RWO'O<:x:zzuIJU4+VuYy5^ 52?V'LZ^QP=&ipT?Yb=OsT`#U]x_{HZT8/UH6Tlty\|3[J+e]uE(oDOzflRf>/Jj8D4OA_
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:17 GMTcontent-type: application/javascriptlast-modified: Sat, 13 Apr 2024 09:29:52 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 1867date: Wed, 23 Oct 2024 22:28:17 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5a eb 6f e3 36 12 ff dc 02 fd 1f 06 de 00 92 73 b6 ec a4 db 1e e0 34 01 8a ec 16 e8 87 de e6 90 e0 1e 28 7a 06 2d 8d 64 6e 29 52 20 29 3b be 22 ff 7b 41 ea 61 3d 28 27 9b 2c ba 7b 3d f3 4b 24 72 5e 9c 99 df 70 28 c7 8f 73 1e 6a 2a b8 7f 32 86 df be fa 12 00 60 94 2b 04 a5 25 0d f5 e8 e2 ab 2f 8b c9 0d 91 a0 b3 f7 70 09 ef ff 9e a3 dc 5d ec a7 25 6e 48 46 cf 5f 97 53 b3 19 dc 48 64 82 44 28 a1 98 2a 58 fc 2d e5 91 d8 8e 03 c1 7d cf ac 7b 13 a8 d5 d7 da 1b f4 a3 57 4a 13 9d ab d1 38 88 49 84 ef 72 ed 8f 2f 1c 54 59 a5 6e 34 0e 22 64 64 e7 7f fd cd 7c cf 33 52 4c 6c 47 15 e7 c3 d8 ee a9 b6 55 70 90 48 a2 5d 6d 4a cb e4 48 84 79 8a 5c 8f 03 4b e4 77 dc b5 97 54 4a bb 34 03 6e 43 29 18 03 2d e0 4e 64 76 0e f6 54 27 b5 1f 94 25 f3 dd 3e 30 83 c6 e0 9f f8 7a 4d 55 45 7c 27 32 7f 0c 57 97 70 36 9f f7 c8 0b e9 de 2b 89 3a 97 7c aa c5 54 8b cc 2b 1c f1 23 f7 cf e7 f3 a6 fb ac 33 00 99 c2 0f 91 63 1c ea 12 b4 7f 7d 68 ae b9 c4 98 f0 87 8c 86 bf 0e c6 bf e4 5c 89 68 37 59 eb 94 79 e3 80 70 9a 12 8d be c3 d4 da 33 0b 98 77 ac 9a c0 37 6d 5b 5b d1 2f 63 f6 13 f2 1c de 2b 88 85 84 1b a1 a8 b1 07 62 7a 8f d1 b3 82 66 20 51 10 2f b5 89 7e 8f b7 88 e1 5f e0 ec a2 1f ed 06 e3 15 9c 7d 3b 18 e3 60 ad 96 9c 6c 68 42 8c 11 cb 35 9a f4 5f 6e 25 c9 32 94 c6 5d 51 74 cd 88 52 be 97 22 cf 97 76 37 50 fa 30 82 22 21 de 88 2d f7 3e 28 23 1e d3 2a 31 15 1b 7c a6 e2 47 82 44 28 87 5b 46 4d 51 f9 de 8a b3 50 dd d3 f4 a1 d9 94 3e 9b fd 50 2e 1b 54 96 f6 80 2a e4 85 24 33 2b 0a da 3c 95 40 88 44 ad 51 f9 c8 30 55 ce b0 cc 66 d7 24 5c 23 e8 35 96 1a a8 e0 c8 23 c0 0d 72 0d 94 03 31 c9 41 c9 8a 61 9f db a4 8d e1 7a cb a3 b7 1b b8 04 6f 8b ab 5f a9 ae 35 bf e5 51 4b aa 77 d1 dd a3 19 d6 ba 00 49 b8 3e 90 a1 4d 95 27 a6 ba d8 24 b5 65 66 e2 a6 b4 f1 af b5 df ed 32 34 2c 86 23 88 88 26 be 57 af f5 e2 5a b3 5b ea 3a 2f db d2 4c 51 40 bf de fe a1 ba d0 97 d9 cc ba 8e d8 01 5b 1e 5c 0b bd c9 87 7e 12 fd a3 0c 9f 32 c7 46 46 12 04 73 f0 40 bf 00 9c a4 bb 6b 22 45 ae 90 59 e7 7a af c2 f2 75 8a f7 24 cd 18 4e 13 e4 28 69 e8 b9 7c 7e 12 53 a9 aa d8 Data Ascii: Zo6s4(z-dn)R );"{Aa=(',{=K$r^p(sj2`+%/p]%nHF_SHdD(X-}{WJ8Ir/TYn4"dd\|3RLlGUpH]mJHy\KwTJ4nC)-NdvT'%>0zMUE\|'2Wp6+:\|T+#3c}h\h7Yyp3w7m[[
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:20 GMTcontent-type: application/javascriptlast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 2310date: Wed, 23 Oct 2024 22:28:20 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 58 4b 93 db 36 12 be e7 57 48 a8 94 02 58 10 45 3a b5 39 50 03 cf da 93 b8 76 aa 1c ef ac c7 55 1b d5 ac 0e 10 09 89 70 28 82 0b 40 33 1a 0f f5 df b7 40 f0 01 50 52 ec e3 de f0 e8 6e 74 7f e8 17 30 7f 35 fe 61 f4 6a 54 52 49 f3 9c 1e 82 2f 6a f4 18 05 7f 0b c2 11 cc b4 2e e3 f9 bc e4 07 96 27 62 1b 6c b9 ce f6 eb 80 8b b9 43 3d 47 86 fd ef 89 28 9f 25 df 66 7a f4 3a 8c 7e 19 dd 19 9e 1b b1 c5 a3 db 22 09 6a 8a 9c 27 ac 50 6c f4 fb ed 67 2b 5a c5 f3 79 23 32 11 bb ee 18 4f f8 3a 17 eb f9 8e 2a cd e4 fc c3 ed cd 6f 1f ef 7f 33 e7 cd 7f 18 6f f6 45 a2 b9 28 a0 c6 1c 33 ac d0 4b bb 32 12 90 63 86 5e 1e a9 1c 65 44 67 5c 2d 80 58 7f 61 89 06 84 e8 e7 92 89 cd 88 4d 26 30 65 39 d3 6c c4 02 c9 36 92 a9 0c 3b 0b 45 ca 24 d6 01 3b 68 56 a4 d0 c8 c0 0c 21 6c 06 c1 8f 2c 67 3b 56 68 a2 21 47 78 5c af f1 1d dd b2 7b 99 4c 26 1e 49 c0 15 04 7c b7 05 68 32 81 1e 21 f1 e9 a8 d6 12 02 25 13 80 d0 c2 28 2e 89 a5 2f 85 e2 c6 a8 29 00 28 d0 e2 83 78 62 f2 86 2a 06 51 b0 a3 3a c9 e0 fc 3f f7 d3 f9 16 55 d5 c3 6a c1 37 50 06 39 2b b6 3a bb 8a 26 13 19 94 7b 95 41 90 b0 42 33 09 10 8e 08 69 f7 bb 5d f9 10 ae 10 06 5a 94 60 4c cc 64 32 01 6b a1 b5 d8 f5 f3 9c 6d 74 3d 8b cc ac be e6 66 5a 55 50 92 07 33 c2 86 76 d5 40 d4 6a fd c7 98 10 35 99 d4 87 10 7f c7 37 66 c0 b7 ec f8 a2 01 df 72 c8 97 f5 22 6b 75 9d 85 65 ad 22 6e d5 f7 cf 77 0c 19 6e 40 ae 3e d2 8f b0 a4 52 b1 db 42 fb 17 f1 07 42 d7 fe 02 69 01 8e 07 eb 17 05 b4 70 fb 96 b9 c0 0f 77 fe 52 a5 e5 50 a5 e5 05 95 96 17 54 5a 0e f1 1f 40 32 6d 8e 1f d8 71 0d 40 0c ca 03 40 53 30 02 53 5f e2 59 96 65 cf 82 0b fa c8 b7 54 0b 19 ec 15 93 6f b7 26 0a 1a 8f 86 fc 4e a4 15 bf cb 44 c1 2a 7e 47 53 34 47 48 32 bd 97 c5 e8 5c b4 71 a1 de f3 c3 64 32 be 18 7b fe 46 a2 14 7c 59 d3 e4 cf ad 14 fb 22 bd 35 d2 62 b0 97 39 6c ac 68 e5 4f 01 02 b8 27 bc e7 5f 59 0c 12 f1 c8 a4 bb 7c d7 58 e7 63 7d b4 90 9a 98 fc 2b 53 df 16 a9 14 fc 5b 16 52 4b f5 ff 6b a5 3d 7a c7 a5 14 92 68 08 ae 52 fe 38 9a bf 01 28 28 25 2b 59 91 7e 16 d6 15 2c c9 8d 28 34 e5 05 93 36 d9 d1 41 36 dc f0 22 85 e0 4d d0 Data Ascii: XK6WHXE:9PvUp(@3@PRnt05ajTRI/j.'blC=G(%fz:~"j'Plg+Zy#2O:o3oE(3K2c^eDg\-XaM&0e9l6;E$;hV!l,g;Vh!Gx\{L&I\|h2!%(./)(xbQ:?Uj7P9+:&
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:21 GMTcontent-type: application/javascriptlast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 3752date: Wed, 23 Oct 2024 22:28:21 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 1b 6b 93 db b6 f1 f3 e9 57 6c d4 9b 88 ba ea 28 77 3a 9d ce 9c 7b ee b8 3e b7 b9 a9 9d b4 b1 d3 34 d3 c9 78 20 72 25 a2 07 02 2c 01 ea 51 df fd f7 ce e2 c1 87 48 ca 72 93 e8 43 7c 12 80 c5 be 5f d8 2c af ae 26 70 05 39 ca ea 9a f1 1c b8 06 06 ff fe 7b 85 e5 01 0a 51 6d b8 84 b5 2a 21 2d 55 91 aa 9d b4 1b 35 98 8c 19 48 98 84 94 af d7 58 a2 34 9c 19 24 40 2b 34 3b 44 09 0c 2a 8d 25 98 f2 c0 e5 06 32 b5 c5 12 ec 7f 58 03 8b 1b cc 61 ab c3 26 a3 40 b2 2d df 30 83 c0 a5 51 04 8e 81 ae 56 74 e7 4c 43 a2 a4 41 69 74 3c 81 2e ce 4c eb 2a 47 8f d5 41 55 90 b1 2d 02 2b 11 2a 4d 80 99 dd 0a 3b 6e b2 00 ce 6f c6 7d c1 64 4a c0 8c 02 93 21 f8 ab 4a be c9 4c 0c f7 06 76 5c 08 58 f3 12 01 b7 74 39 ec 32 94 76 2b d1 37 d3 90 ab 4a 23 a0 34 58 12 eb 24 ee 08 5c 97 c6 2b 26 d3 ab 70 92 19 f7 23 d7 b0 42 42 8f 5b b2 b8 92 4c 88 83 63 15 a6 96 59 81 d2 0f a3 1f 5a 7d 84 b7 4a 3e e0 41 03 bc 78 04 80 bf a8 92 0b c1 00 1e dd aa ff ae dd ea 2b c7 c5 7a f5 55 c6 f3 42 83 3f fb 15 96 08 f4 71 ab ad 9b da 7f 7f 78 f4 88 dd 3b 56 b0 95 da 22 e0 9e e5 85 c0 05 4c c3 8d 53 22 52 a3 c0 c4 60 0a 4c a6 c0 8d 0e 22 08 f2 04 ae 9d e2 10 2f 74 46 4c 53 0e 6c 90 42 ce 36 5c a2 63 5d 8b f3 49 55 6a 55 d2 15 96 67 74 9c fe 25 60 35 06 f1 14 be f7 02 3b 40 4e 58 9a 0c 79 e9 a5 46 5a 66 21 86 fd 81 3b 53 d2 1e b6 b0 c7 ac aa b1 03 ac 4a 8e eb 20 20 a7 cb 53 c7 bc 78 0a ef 33 a2 34 53 95 48 e5 cc 40 22 94 c6 61 c8 56 ab 4b 64 41 b6 f6 64 51 aa 95 70 3a 21 55 99 5b 45 d0 4a 6c 31 f5 2a 6c 78 8e aa 32 da 32 31 45 c1 0e 3a 6e 0c c0 94 9c d4 df 5a 8c 3d 06 86 a0 ae 0e 90 a2 c1 c4 58 08 19 42 ca 4b fa a6 24 a8 75 5f 87 89 3d 39 4a 13 3b 9c 12 26 1d e9 0f 68 5d c0 7f 2a 9e 3c 58 93 66 52 73 82 e2 8d c1 1b 2d 5d 52 15 0e 41 12 62 30 27 02 67 5d 03 ee 0b 2c 39 ca 04 9d cc 0a 5c 57 96 50 9e 73 c1 4a 32 41 96 b3 ff 2a 19 27 2a 5f ce 34 4c df 65 aa 20 2a ee b0 60 a5 c9 03 fb 82 71 05 16 7e a7 11 04 7f 40 d0 ea c6 ff 64 3f 97 d1 f4 57 84 c1 74 1e d3 3f 2f 79 1e 7d ac 17 e9 c3 12 c3 b7 cc e0 0d 5c c6 52 a9 62 01 b0 5c 5a 6b 4f 49 07 4b b5 0b 5b b8 92 9d 93 Data Ascii: kWl(w:{>4x r%,QHrC\|_,&p9{Qm!-U5HX4$@+4;D%2Xa&@-0QVtLCAit<.LGAU-+M;no}dJ!JLv\Xt92v+7J#4X$\+&p#BB[LcYZ}J>Ax+zUB?qx;V"
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:21 GMTcontent-type: application/javascriptlast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 753date: Wed, 23 Oct 2024 22:28:21 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 53 5d 8b db 38 14 fd 2b 89 59 8c 44 ee 8a 99 c2 be 38 a3 e4 a1 0c ec 42 4b 29 5d d8 5d 86 3c 28 f2 75 ac a2 48 46 be f6 74 6a f9 bf 17 d9 f9 68 b2 7d b2 cf 91 ee 3d 47 f7 63 59 75 4e 93 f1 8e 11 1f ce ff 0b 64 7c e8 55 58 20 18 70 72 a8 d1 1c 6a 2a 94 30 ce 61 f8 73 42 f0 6a 4a aa cf dc 3f 09 8c eb 80 d4 05 b7 70 62 8e 88 91 a1 0c 42 fb 63 a3 e8 a3 2f 11 18 c6 b8 24 d1 76 4d e3 03 89 bd ff 96 68 cb f3 9c 19 99 bd ff f2 e5 f1 fd 74 39 93 52 e2 b6 2a 82 d8 fb f2 ed 27 0f 46 68 6b d0 d1 8d 89 33 39 bb e0 1c dc 78 79 8a 61 7c 98 6d 0d e4 9b 42 89 46 1d f0 bf 4f 55 d5 22 c5 58 89 56 07 6f ed df be 89 71 16 bb 32 60 b1 a2 53 c4 bf f7 11 1f b0 a2 bb 90 44 8d 57 65 77 2a a2 03 2b 89 71 08 f2 61 6d 2a 46 02 95 ae 59 09 d7 ca 03 ce 37 8d 44 51 2a 52 a2 45 8b 9a 7c 00 27 51 fc 86 16 8f e8 68 6d a5 15 aa 2c 99 d9 3a 51 19 57 32 c3 0b c7 47 0e 4e 5a 61 d1 1d a8 e6 95 0f cc 4b 1f 23 32 0e b5 ac 63 34 8c af dd 26 ac c3 6a c5 27 79 ed 1d 29 e3 5a 56 81 7d 09 3b 3e 6b 2b d0 d0 40 2b 89 4d 24 74 97 92 b7 a7 6e 32 7e 2a 77 2b a6 2f e3 23 1c 64 2b fc 54 19 c6 a1 97 ed 64 9f 65 c6 f5 06 5f 33 9e de bb ac 63 5c 7a 3e f7 60 7d 10 e4 9b 55 77 4a b9 a9 13 cc f3 89 7d 9a c0 ca 9f ce 12 9b 1a b0 ea 66 b9 4d 3d c1 33 fd 34 c3 95 9f 4f b7 4c c9 99 d9 cc e7 db 2c a4 2c 59 71 7b ef e9 36 e9 36 4b 28 2b b2 bd a7 3a 03 2d 27 0f 9b c9 cf 36 91 e4 8f 29 c5 cf c6 9e 6e df b0 cd c8 37 97 0c 8d 54 ab ec f7 6c a5 a1 cf f3 5e 4a d9 c4 78 57 15 68 b8 a0 60 0e 07 0c 57 ee 65 f9 00 0a f4 8e f3 a2 cf f3 fb 88 e5 e3 2f 43 1e 77 7c 1c 53 f3 3c d4 60 a1 94 c3 08 41 96 5e 77 69 5e 40 c9 57 e3 4a ff 0a 95 0c e2 cc 3e cf c3 04 5a 92 c0 6f 8d 72 a5 5f 93 c0 1e 1d 89 b6 41 6d 94 15 b3 82 1c 54 59 16 97 29 45 3e 94 2f 28 0e 9d 29 a7 17 52 6d da 17 bd db c9 21 79 2d 10 ce 73 5a 10 4b 67 7c 04 1b 23 09 d3 3e 1f 1b 7a fb b4 ff 8a 9a 58 c9 63 64 56 b6 48 7f 39 c2 d0 2b cb 1c bc fb e3 81 f3 11 02 1e 7d 8f 37 8a 14 de 86 12 2d 12 2e 7e 29 3e 6a 45 ba 66 86 0f e3 ff 95 f2 9c 69 8b 2a 5c 94 2c 07 2b 5d 67 2d 1f 47 20 a6 b8 d8 a7 35 ca e6 f5 5d 04 6c cd 77 5c cc a8 4d Data Ascii: mS]8+YD8BK)]]<(uHFtjh}=GcYuNd\|UX prj0asBjJ?pbBc/$vMht9R'Fhk39xya\|mBFOU"XVoq2`SDWew+qamFY7DQRE\|'Qhm,:QW2GNZaK#2c4&j'y)ZV};>k+@+M$tn2~w+/#d
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:21 GMTcontent-type: application/javascriptlast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 910date: Wed, 23 Oct 2024 22:28:21 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 56 4d 73 db 38 0c 3d 4b bf 02 07 4f 2d 4d 54 39 bd 3a a3 bd 74 67 67 7a e8 a1 33 6d ef b4 04 46 dc 50 a4 87 84 ec a4 a9 ff 7b 87 5f 92 e5 d8 6d 73 70 2c 01 7c 00 1e 1e 08 17 7c 54 2d 09 ad a0 58 95 f0 9a 67 ab 9a ab ba d5 a3 a2 af 1a 1a 98 cd 7a ef fe 5b ef 94 c5 07 68 20 7d fb f9 13 5e 4f 0f 79 9e 65 06 69 34 0a 56 05 f5 c2 96 35 b2 b6 2f 66 98 70 3e db 6c c0 22 4d a7 b9 36 d0 8e c6 a0 22 40 89 03 2a 72 5e 07 66 9c 1b 09 f5 e8 62 ad 6a 7c 26 54 5d f1 7a aa e0 3c d1 ba 43 ce 46 49 b6 0a e8 19 37 7a d8 c2 d9 5f ca a6 63 c4 8a b5 33 af cb ca bb 92 5e 38 5e ba 92 4e 8e 76 8f d8 6d 6f 3a 7a 73 f2 35 c8 0d da fe 93 22 34 07 26 b7 17 be d1 fc 5e 44 7b 3a d6 61 2b 06 26 ed f6 7a 88 64 5e 97 ce fb 54 25 fa 4a cf bb e3 b4 d7 47 18 98 7a 01 12 03 5a 20 0d e3 be 63 84 40 3d c2 81 c9 11 2b 60 aa 0b 7e 63 db 3b 0f a1 5a e3 19 9f 9d 40 2b 70 7d 8b a7 53 2b a4 d6 7b d7 87 cf 8c fa ba 45 21 8b d4 9c da 57 0f 9b a9 5b f5 05 03 b1 c0 39 56 03 f3 61 d2 f0 7e 3e e9 9a 53 c2 26 44 9b 2a 33 c8 d1 a0 6a d1 c2 3b 38 30 23 d8 4e ba 0a 7b 46 70 14 52 42 db 33 f5 88 70 14 d4 5f cb dd a2 e4 d0 80 a3 33 a4 b2 8a 6f 22 c5 e1 a5 8b f9 d1 69 0a 1a b8 0f af 02 21 cd 32 bf d8 2e 46 cc 21 38 a4 d8 a2 28 c8 75 79 36 10 d9 35 87 0a dc f3 dc 39 c1 81 29 c0 67 61 5d 14 48 ca 80 96 29 d8 21 70 3d aa ae 82 56 22 33 20 08 b8 30 d6 8f 88 e0 50 38 a4 3a 9d 88 03 96 79 d7 44 ff 85 cb 83 d7 4f 1e 4b 98 de 87 2a a7 33 81 c0 af 62 40 53 dd 6e ec 5c 81 12 24 98 14 3f 82 da e2 18 87 86 b8 17 96 98 f1 b5 79 46 73 3f 25 aa 43 53 f8 e7 88 33 5d 14 67 c1 d3 9d 11 5b 71 d7 cc 92 7d 58 76 ed ee 2e a0 5c 43 f6 4c d1 cb 1e 35 9f 95 a7 d5 37 1f a7 84 a6 81 75 0a be 4e 01 b3 37 8e 75 cb a4 93 bd e4 15 24 f4 cc 93 39 c5 98 35 f4 4f 13 44 3c c1 79 1d 0f fa 10 18 4a b4 07 5b 10 49 30 ff bb d4 52 08 f1 e7 8e 5e 11 2b e9 58 fd 8d f2 3f ea 61 2f f1 36 01 d9 15 df 5b 1c 04 45 85 cf d3 b2 9b 8b 7e 4c dd 34 ee de 1f 18 11 76 df df 4c 59 b4 98 37 d1 66 2d c6 b8 81 39 c2 67 2a 96 78 b3 ce 4f ee ab 9f c6 ab 6b 03 1a 9f 53 d8 1a f7 d5 72 1f c0 66 e3 db a5 c6 61 87 66 a1 6d db eb Data Ascii: VMs8=KO-MT9:tggz3mFP{_msp,\|\|T-Xgz[h }^Oyei4V5/fp>l"M6"@r^fbj\|&T]z<CFI7z_c3^8^Nvmo:zs5"4&^D{:a+&zd^T%JGzZ c@=+`~c;Z@+p}S+{E!W[9Va~>S&D3j;80#N{FpR
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:21 GMTcontent-type: application/javascriptlast-modified: Sat, 23 Mar 2024 19:29:50 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 12481date: Wed, 23 Oct 2024 22:28:21 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 7d fb 77 db c6 95 f0 cf e4 5f 31 56 1d 03 b4 48 50 76 bb 6d 42 45 ce ca b2 9c a8 f5 6b 2d b5 69 d7 eb e3 05 89 21 09 0b 04 18 00 94 ac c4 fa df bf 73 1f 33 73 07 00 29 a5 df e6 9c d6 e2 bc 1f 77 ee fb 5e 8c 1f 3f 50 af e3 45 9e ce d3 99 7a 57 ac 37 6b 35 52 57 4f a2 27 d1 81 1a a9 a7 07 4f fe 3c 3a 78 3a 7a 7a d0 7f ac 96 75 bd 9e 8c c7 49 ba aa f4 4a e7 c5 55 34 2b 56 e3 75 b6 59 a4 79 35 5e f1 20 a3 35 0c 32 ee 3f 56 27 c5 fa a6 4c 17 cb 5a 85 b3 01 0e a5 5e ac d2 ba bc 51 e7 d4 ff 50 3d 1e f7 0f c3 f9 26 9f d5 69 91 ab 70 1e cf ea a2 bc 19 a8 df 54 3f 9d ab b0 be 59 eb 62 ae 12 3d 4f 73 ad 8e 8e 8e 54 60 1a 07 ea d1 23 ae 88 e2 55 82 5d d4 78 ac 8e 5f bf 88 d4 7b bd 48 ab 5a 97 2a ae 54 9c ab 38 2f f2 9b 55 b1 a9 d4 aa 48 36 99 8e 54 9f bb 86 1f 82 cf bf 6c 74 79 13 7c 1c 2a 33 fb a1 ea ab 5b a5 b3 4a 2b b1 08 fd 65 5d 94 75 45 ab 28 a6 9f f5 ac 0e ec ac 6f 8a 44 8f 4f 8a d5 aa c8 ff 7a ae fa 66 a8 b0 d4 bf 6c d2 52 87 66 96 81 1c 9c fb 3e 2f 8b eb 4a 97 6a 91 15 d3 38 ab 44 ef eb 34 4f 8a eb e8 f3 7f 41 5f f5 f5 ab e2 82 ff d6 eb ba e0 91 fa ea d6 1e 60 f8 10 17 d4 1f 3f 7e f6 6c 56 94 fa f1 b8 3f 7e fc b8 af 1e 2b f8 5f e3 96 4f 8a 52 ab bf 9e ab 79 9a 69 6e 32 ee f7 4d 87 77 65 7a 15 d7 5a 55 75 5c a7 33 35 2b f2 aa 8e f3 ba c2 56 57 71 a9 4e 5e bd 3d 3f fd 74 fa 8f d3 37 17 ea 48 05 27 59 51 e9 60 d8 ef 3d 3f 7d f9 f6 fd e9 a7 46 f5 73 3d 2f 4a 6d 1b 1d bf bc 38 7d df 6c 73 3c af 75 d9 1c e7 f8 dd bb d3 37 2f 9a 03 1d af d7 3a 4f a0 d9 eb e3 f7 7f fb fb bb 4f ef 8e df cb a1 5e c7 e5 e5 66 fd 2e 2e 69 ac b7 ef 4e df b8 ca b7 6b 9d 43 e9 c9 4f c7 6f 7e 94 5b 58 c6 f9 02 db bf 39 87 df ab f9 1a 7e 60 fd 27 2a 8a 02 b5 af de 9c 0f fb bd f7 a7 c7 2f fe f5 e9 e4 d5 f1 b9 69 3b 2a 75 9c dc 04 58 f7 fa ed 3f ce de fc d8 ac 5e 15 57 69 be 80 16 ef de d3 a8 74 02 5e b3 75 a9 af 74 5e 8f 66 78 10 87 ed 1b b9 8a cb 8a 2e 6b fc f8 73 b5 4c f3 5a 8d 7e 3e f8 cb 77 e6 62 56 f3 f5 10 1f 42 a5 ae b5 5a c6 57 5a 15 79 76 a3 8a 5c ab 14 6f 71 a6 55 31 b7 e0 40 d0 40 00 3d 84 2e fc da d2 5a 65 c5 2c ce b2 1b 55 17 Data Ascii: }w_1VHPvmBEk-i!s3s)w^?PEzW7k5RWO'O<:x:zzuIJU4+VuYy5^ 52?V'LZ^QP=&ipT?Yb=OsT`#U]x_{HZT8/UH6Tlty\|3[J+e]uE(oDOzflRf>/Jj8D4OA_
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Wed, 30 Oct 2024 22:28:21 GMTcontent-type: application/javascriptlast-modified: Sat, 13 Apr 2024 09:29:52 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 1867date: Wed, 23 Oct 2024 22:28:21 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5a eb 6f e3 36 12 ff dc 02 fd 1f 06 de 00 92 73 b6 ec a4 db 1e e0 34 01 8a ec 16 e8 87 de e6 90 e0 1e 28 7a 06 2d 8d 64 6e 29 52 20 29 3b be 22 ff 7b 41 ea 61 3d 28 27 9b 2c ba 7b 3d f3 4b 24 72 5e 9c 99 df 70 28 c7 8f 73 1e 6a 2a b8 7f 32 86 df be fa 12 00 60 94 2b 04 a5 25 0d f5 e8 e2 ab 2f 8b c9 0d 91 a0 b3 f7 70 09 ef ff 9e a3 dc 5d ec a7 25 6e 48 46 cf 5f 97 53 b3 19 dc 48 64 82 44 28 a1 98 2a 58 fc 2d e5 91 d8 8e 03 c1 7d cf ac 7b 13 a8 d5 d7 da 1b f4 a3 57 4a 13 9d ab d1 38 88 49 84 ef 72 ed 8f 2f 1c 54 59 a5 6e 34 0e 22 64 64 e7 7f fd cd 7c cf 33 52 4c 6c 47 15 e7 c3 d8 ee a9 b6 55 70 90 48 a2 5d 6d 4a cb e4 48 84 79 8a 5c 8f 03 4b e4 77 dc b5 97 54 4a bb 34 03 6e 43 29 18 03 2d e0 4e 64 76 0e f6 54 27 b5 1f 94 25 f3 dd 3e 30 83 c6 e0 9f f8 7a 4d 55 45 7c 27 32 7f 0c 57 97 70 36 9f f7 c8 0b e9 de 2b 89 3a 97 7c aa c5 54 8b cc 2b 1c f1 23 f7 cf e7 f3 a6 fb ac 33 00 99 c2 0f 91 63 1c ea 12 b4 7f 7d 68 ae b9 c4 98 f0 87 8c 86 bf 0e c6 bf e4 5c 89 68 37 59 eb 94 79 e3 80 70 9a 12 8d be c3 d4 da 33 0b 98 77 ac 9a c0 37 6d 5b 5b d1 2f 63 f6 13 f2 1c de 2b 88 85 84 1b a1 a8 b1 07 62 7a 8f d1 b3 82 66 20 51 10 2f b5 89 7e 8f b7 88 e1 5f e0 ec a2 1f ed 06 e3 15 9c 7d 3b 18 e3 60 ad 96 9c 6c 68 42 8c 11 cb 35 9a f4 5f 6e 25 c9 32 94 c6 5d 51 74 cd 88 52 be 97 22 cf 97 76 37 50 fa 30 82 22 21 de 88 2d f7 3e 28 23 1e d3 2a 31 15 1b 7c a6 e2 47 82 44 28 87 5b 46 4d 51 f9 de 8a b3 50 dd d3 f4 a1 d9 94 3e 9b fd 50 2e 1b 54 96 f6 80 2a e4 85 24 33 2b 0a da 3c 95 40 88 44 ad 51 f9 c8 30 55 ce b0 cc 66 d7 24 5c 23 e8 35 96 1a a8 e0 c8 23 c0 0d 72 0d 94 03 31 c9 41 c9 8a 61 9f db a4 8d e1 7a cb a3 b7 1b b8 04 6f 8b ab 5f a9 ae 35 bf e5 51 4b aa 77 d1 dd a3 19 d6 ba 00 49 b8 3e 90 a1 4d 95 27 a6 ba d8 24 b5 65 66 e2 a6 b4 f1 af b5 df ed 32 34 2c 86 23 88 88 26 be 57 af f5 e2 5a b3 5b ea 3a 2f db d2 4c 51 40 bf de fe a1 ba d0 97 d9 cc ba 8e d8 01 5b 1e 5c 0b bd c9 87 7e 12 fd a3 0c 9f 32 c7 46 46 12 04 73 f0 40 bf 00 9c a4 bb 6b 22 45 ae 90 59 e7 7a af c2 f2 75 8a f7 24 cd 18 4e 13 e4 28 69 e8 b9 7c 7e 12 53 a9 aa d8 Data Ascii: Zo6s4(z-dn)R );"{Aa=(',{=K$r^p(sj2`+%/p]%nHF_SHdD(X-}{WJ8Ir/TYn4"dd\|3RLlGUpH]mJHy\KwTJ4nC)-NdvT'%>0zMUE\|'2Wp6+:\|T+#3c}h\h7Yyp3w7m[[

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.footboi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /templates/images/hero_nc.svg HTTP/1.1Host: img.sedoparking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.footboi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /templates/images/hero_nc.svg HTTP/1.1Host: img.sedoparking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=gq19xle32kcv&aqid=PngZZ-_aG6fFjuwP_ZjzuQY&psid=3259787283&pbt=bs&adbx=385.203125&adby=413.015625&adbh=530&adbw=493&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=688160506&csala=25%7C0%7C1601%7C1636%7C131&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.footboi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=43famhw4k13j&aqid=PngZZ-_aG6fFjuwP_ZjzuQY&pbt=bs&adbx=481.5&adby=986.015625&adbh=16&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo80_3ph&errv=688160506&csala=4%7C0%7C1622%7C1636%7C133&lle=0&ifv=0&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.footboi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=8smluj89zel&aqid=PngZZ-_aG6fFjuwP_ZjzuQY&psid=3259787283&pbt=bv&adbx=385.203125&adby=413.015625&adbh=530&adbw=493&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=688160506&csala=25%7C0%7C1601%7C1636%7C131&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.footboi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=9uagjoufgsq&aqid=PngZZ-_aG6fFjuwP_ZjzuQY&pbt=bv&adbx=481.5&adby=986.015625&adbh=16&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo80_3ph&errv=688160506&csala=4%7C0%7C1622%7C1636%7C133&lle=0&ifv=0&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.footboi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=4urzf5v5ezqo&aqid=UHgZZ6e2DM-BjuwP08awqQ4&psid=3259787283&pbt=bs&adbx=442.0625&adby=373.359375&adbh=1390&adbw=379&adbah=539%2C430%2C421&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=688160506&csala=27%7C0%7C1661%7C21%7C113&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.footboi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=9myv4eqeq9gp&aqid=UHgZZ6e2DM-BjuwP08awqQ4&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1390&adbw=379&adbah=539%2C430%2C421&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=688160506&csala=27%7C0%7C1661%7C21%7C113&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.footboi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tracker/tracker.aspx?id=mgLmCy9WawPXh6&adpos=&locphisical=1026339&locinterest=&adgrp=172181985511&kw=psychic%20near%20me&nw=s&url=https://www.google.com/search%3Fq%3DMAHADEV%2BSOLUTIONS%2BIN%2BTEXAS%26stick%3DH4sIAAAAAAAA_-NgU1I1qLAwM0k2SksyMDZMNUk2TzS1MqgwS041STJMMUhJSkk1S02yXMQq5evo4ejiGqYQ7O8TGuLp7xes4OmnEOIa4RgMAKkO97FGAAAA%26hl%3Den%26mat%3DCVQRu4gXOCuRElcBEKoLaWdOjq4TJdno4nxViy74uAG1sLRS3AEIR-IwF6cFkJiNrV-puB2zAvKg2o2NOfRFtXSKhfUWzInkf-MWDXzXcDEuo6l_fYsBx9hA0M3tfX-_saM%26authuser%3D1%26gad_source%3D5%23scso%3D_lHYOZ7-JOIeywt0P3IybuQc_56:1058&cpn=21832517997&device=c&ccpturl=devspiritualtherapy.com&pl=&gclid=EAIaIQobChMIp57XoMaliQMVz4CDBx1TIyzlEAAYASAAEgK1A_D_BwE HTTP/1.1Host: monitor.clickcease.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tracker/tracker?id=mgLmCy9WawPXh6&adpos=&locphisical=1026339&locinterest=&adgrp=172181985511&kw=psychic%20near%20me&nw=s&url=https://www.google.com/search%3Fq%3DMAHADEV%2BSOLUTIONS%2BIN%2BTEXAS%26stick%3DH4sIAAAAAAAA_-NgU1I1qLAwM0k2SksyMDZMNUk2TzS1MqgwS041STJMMUhJSkk1S02yXMQq5evo4ejiGqYQ7O8TGuLp7xes4OmnEOIa4RgMAKkO97FGAAAA%26hl%3Den%26mat%3DCVQRu4gXOCuRElcBEKoLaWdOjq4TJdno4nxViy74uAG1sLRS3AEIR-IwF6cFkJiNrV-puB2zAvKg2o2NOfRFtXSKhfUWzInkf-MWDXzXcDEuo6l_fYsBx9hA0M3tfX-_saM%26authuser%3D1%26gad_source%3D5%23scso%3D_lHYOZ7-JOIeywt0P3IybuQc_56:1058&cpn=21832517997&device=c&ccpturl=devspiritualtherapy.com&pl=&gclid=EAIaIQobChMIp57XoMaliQMVz4CDBx1TIyzlEAAYASAAEgK1A_D_BwE HTTP/1.1Host: monitor.clickcease.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /search?q=MAHADEV%20SOLUTIONS%20IN%20TEXAS&stick=H4sIAAAAAAAA_-NgU1I1qLAwM0k2SksyMDZMNUk2TzS1MqgwS041STJMMUhJSkk1S02yXMQq5evo4ejiGqYQ7O8TGuLp7xes4OmnEOIa4RgMAKkO97FGAAAA&hl=en&mat=CVQRu4gXOCuRElcBEKoLaWdOjq4TJdno4nxViy74uAG1sLRS3AEIR-IwF6cFkJiNrV-puB2zAvKg2o2NOfRFtXSKhfUWzInkf-MWDXzXcDEuo6l_fYsBx9hA0M3tfX-_saM&authuser=1&gad_source=5 HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.JQvI3TbmN8g.L.B1.O/am=QOoQIAQAAAQAREADEAAAAAAAAAAAAAAAAAAAAAAgAQAAIAAAAAAAAAIAIAIAoEwCAADICwAAsAEAAQAAPkAAjgoAGAAAAAAAAEACAAAAAAIgAECFAAAAAAAAAAABAQAgAAARQAAAQCEAAAAAIAAAABgAAAAAQAgQAEAAAyAEAAKQgABQEIB-FAIAAAADAAAID-EAhgEIKgAYwFEAAAAAAAAAAAAAEACEAAAAgIAAACBAAIAegQAwAABpIAIABAEAARQBgAAAABAAAAAAEEAgAABiJgAOyAAEAAAAAAAAABIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAgA/d=1/ed=1/br=1/rs=ACT90oEh6kJdYmfESHG-JPbQVjjDSttVVg/m=X3N0Bf,attn,cdos,gwc,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,d,csi HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; NID=518=TVvgrkWR-ZGas4OjdPCjrAObQhPSJ_a8a2KQ5BDa7QKTtJsWmfj5Tr6sdfbpCMxZ1Ly0vsZLkW-6iidGwzIxsiaxy-bi39aVjmyHAA-I2rhyTZ91t9UT8jAOsrHUB3EhlayiILueH2ehyR_GDwRHexw4ON6mSAnxwAAtxB6S6mSW2kiUEJpjtzi8Fz8mucsGZCI
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/search?q=MAHADEV%20SOLUTIONS%20IN%20TEXAS&stick=H4sIAAAAAAAA_-NgU1I1qLAwM0k2SksyMDZMNUk2TzS1MqgwS041STJMMUhJSkk1S02yXMQq5evo4ejiGqYQ7O8TGuLp7xes4OmnEOIa4RgMAKkO97FGAAAA&hl=en&mat=CVQRu4gXOCuRElcBEKoLaWdOjq4TJdno4nxViy74uAG1sLRS3AEIR-IwF6cFkJiNrV-puB2zAvKg2o2NOfRFtXSKhfUWzInkf-MWDXzXcDEuo6l_fYsBx9hA0M3tfX-_saM&authuser=1&gad_source=5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; NID=518=TVvgrkWR-ZGas4OjdPCjrAObQhPSJ_a8a2KQ5BDa7QKTtJsWmfj5Tr6sdfbpCMxZ1Ly0vsZLkW-6iidGwzIxsiaxy-bi39aVjmyHAA-I2rhyTZ91t9UT8jAOsrHUB3EhlayiILueH2ehyR_GDwRHexw4ON6mSAnxwAAtxB6S6mSW2kiUEJpjtzi8Fz8mucsGZCI
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /-pfpw05DcePY/AAAAAAAAAAI/AAAAAAAAAAA/YEuhgalyecY/s40-c-k-mo/photo.jpg HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipPYIiAKpO5f_3pOAg3TQgXYD8-sMQl5WzXDo0eB=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/16521530460/?gad_source=1&adview_type=4&adview_query_id=CNGL8qjGpYkDFYCdgwcdGygt3A HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; NID=518=TVvgrkWR-ZGas4OjdPCjrAObQhPSJ_a8a2KQ5BDa7QKTtJsWmfj5Tr6sdfbpCMxZ1Ly0vsZLkW-6iidGwzIxsiaxy-bi39aVjmyHAA-I2rhyTZ91t9UT8jAOsrHUB3EhlayiILueH2ehyR_GDwRHexw4ON6mSAnxwAAtxB6S6mSW2kiUEJpjtzi8Fz8mucsGZCI
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipNd4UCFx5L4ynn8GGjNQdTlDIR3-ghOmD-xB4eJ=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipP6JHm6eGThtS1DiGEmE4n_nVrsUSVP8gcE2Nvv=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipOAFWLyHz0cR6tPQwh8ojwTh1XaPKFNjZZ4zLEI=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipMG1m9MHUH4x1uemA1dElxCJbBzLGIzbrUa8p7r=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/nav_logo321.webp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/search?q=MAHADEV%20SOLUTIONS%20IN%20TEXAS&stick=H4sIAAAAAAAA_-NgU1I1qLAwM0k2SksyMDZMNUk2TzS1MqgwS041STJMMUhJSkk1S02yXMQq5evo4ejiGqYQ7O8TGuLp7xes4OmnEOIa4RgMAKkO97FGAAAA&hl=en&mat=CVQRu4gXOCuRElcBEKoLaWdOjq4TJdno4nxViy74uAG1sLRS3AEIR-IwF6cFkJiNrV-puB2zAvKg2o2NOfRFtXSKhfUWzInkf-MWDXzXcDEuo6l_fYsBx9hA0M3tfX-_saM&authuser=1&gad_source=5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; NID=518=TVvgrkWR-ZGas4OjdPCjrAObQhPSJ_a8a2KQ5BDa7QKTtJsWmfj5Tr6sdfbpCMxZ1Ly0vsZLkW-6iidGwzIxsiaxy-bi39aVjmyHAA-I2rhyTZ91t9UT8jAOsrHUB3EhlayiILueH2ehyR_GDwRHexw4ON6mSAnxwAAtxB6S6mSW2kiUEJpjtzi8Fz8mucsGZCI
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAACAAAoICAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAICAAAEJCAAACAAAAAGABAIAAARBAAABAAAAAAAgQAAAAASKAfv8JAAAAAAAAAAAAAAgAEgAAAAAA4AIAgABQEAAAACAAAAADAAAADwAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAAAAAgQDQDwAAAAAAAAAAAAAgAAAAAACAARQAEMAPAAAAAAAAAgAAAAQBAAAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/d=1/ed=1/dg=3/br=1/rs=ACT90oFg8gimsvEj0owM6Fr4zNgZiKS64A/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;FqHJkd:yQamIb;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;SzQQ3e:dNhofb;TxfV6d:YORN0b;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:IvPZ6d;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YIZmRd:A1yn5d;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;Zen4yb:jMF88c;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aZ61od:arTwJ;af0EJf:ghinId;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eO3lse:nFClrf;euOXY:OZjbQ;flqRgb:ox2Q7c;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lkq0A:JyBE3e;mzW4Id:nYdusb;nAFL3:NTMZac,s39S4;nJw4Gd:dPFZH;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:ww04Df;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;ropkZ:UT1DG;sTsDMc:kHVSUb;sZmdvc:rdGEfc;tGdRVe:CS1mob;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uknmt:GkPrzb;uuQkY:u2V3ud;vEYCNb:FaqsVd;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;xtZeyf:ax1MVb;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=X3N0Bf,attn,cdos,gwc,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,d,csi HTTP/1.1Host: www.google.comConnection:
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; NID=518=TVvgrkWR-ZGas4OjdPCjrAObQhPSJ_a8a2KQ5BDa7QKTtJsWmfj5Tr6sdfbpCMxZ1Ly0vsZLkW-6iidGwzIxsiaxy-bi39aVjmyHAA-I2rhyTZ91t9UT8jAOsrHUB3EhlayiILueH2ehyR_GDwRHexw4ON6mSAnxwAAtxB6S6mSW2kiUEJpjtzi8Fz8mucsGZCI
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipPcaBjyUG8-srv-QadXR-suX5Kvq1UyPZtgXeUO=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /-pfpw05DcePY/AAAAAAAAAAI/AAAAAAAAAAA/YEuhgalyecY/s40-c-k-mo/photo.jpg HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipOgwxe_qncaEwLHlr8eM6c9CKIWIk2XXbt0kLG7=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipPYIiAKpO5f_3pOAg3TQgXYD8-sMQl5WzXDo0eB=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/nav_logo321.webp HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; NID=518=TVvgrkWR-ZGas4OjdPCjrAObQhPSJ_a8a2KQ5BDa7QKTtJsWmfj5Tr6sdfbpCMxZ1Ly0vsZLkW-6iidGwzIxsiaxy-bi39aVjmyHAA-I2rhyTZ91t9UT8jAOsrHUB3EhlayiILueH2ehyR_GDwRHexw4ON6mSAnxwAAtxB6S6mSW2kiUEJpjtzi8Fz8mucsGZCI
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipNd4UCFx5L4ynn8GGjNQdTlDIR3-ghOmD-xB4eJ=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipMG1m9MHUH4x1uemA1dElxCJbBzLGIzbrUa8p7r=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipOAFWLyHz0cR6tPQwh8ojwTh1XaPKFNjZZ4zLEI=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipP6JHm6eGThtS1DiGEmE4n_nVrsUSVP8gcE2Nvv=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipPY8tG2rZAn591jX95M_cSJwjixSkEY5z2YZKxX=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipMFi36GQVW09Qk8HA6ldzzCvP7JGCDSec1YmsLD=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipOWN0jG2rsSjXxIa_J_ebj3rtwjG8o6T2Uxdpjr=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipPcaBjyUG8-srv-QadXR-suX5Kvq1UyPZtgXeUO=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAACAAAoICAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAICAAAEJCAAACAAAAAGABAIAAARBAAABAAAAAAAgQAAAAASKAfv8JAAAAAAAAAAAAAAgAEgAAAAAA4AIAgABQEAAAACAAAAADAAAADwAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAAAAAgQDQDwAAAAAAAAAAAAAgAAAAAACAARQAEMAPAAAAAAAAAgAAAAQBAAAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/d=1/ed=1/dg=3/br=1/rs=ACT90oFg8gimsvEj0owM6Fr4zNgZiKS64A/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;FqHJkd:yQamIb;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;SzQQ3e:dNhofb;TxfV6d:YORN0b;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:IvPZ6d;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YIZmRd:A1yn5d;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;Zen4yb:jMF88c;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aZ61od:arTwJ;af0EJf:ghinId;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eO3lse:nFClrf;euOXY:OZjbQ;flqRgb:ox2Q7c;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lkq0A:JyBE3e;mzW4Id:nYdusb;nAFL3:NTMZac,s39S4;nJw4Gd:dPFZH;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:ww04Df;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;ropkZ:UT1DG;sTsDMc:kHVSUb;sZmdvc:rdGEfc;tGdRVe:CS1mob;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uknmt:GkPrzb;uuQkY:u2V3ud;vEYCNb:FaqsVd;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;xtZeyf:ax1MVb;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=X3N0Bf,attn,cdos,gwc,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,d,csi HTTP/1.1Host: www.google.comConnection:
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipOgwxe_qncaEwLHlr8eM6c9CKIWIk2XXbt0kLG7=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compressiontest/gzip.html HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; NID=518=TVvgrkWR-ZGas4OjdPCjrAObQhPSJ_a8a2KQ5BDa7QKTtJsWmfj5Tr6sdfbpCMxZ1Ly0vsZLkW-6iidGwzIxsiaxy-bi39aVjmyHAA-I2rhyTZ91t9UT8jAOsrHUB3EhlayiILueH2ehyR_GDwRHexw4ON6mSAnxwAAtxB6S6mSW2kiUEJpjtzi8Fz8mucsGZCI; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipPY8tG2rZAn591jX95M_cSJwjixSkEY5z2YZKxX=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipMFi36GQVW09Qk8HA6ldzzCvP7JGCDSec1YmsLD=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geougc/AF1QipOWN0jG2rsSjXxIa_J_ebj3rtwjG8o6T2Uxdpjr=w232-h130-p-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=YXgZZ8LxFJqH9u8P6dbR8Qo.1729722470486&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; NID=518=TVvgrkWR-ZGas4OjdPCjrAObQhPSJ_a8a2KQ5BDa7QKTtJsWmfj5Tr6sdfbpCMxZ1Ly0vsZLkW-6iidGwzIxsiaxy-bi39aVjmyHAA-I2rhyTZ91t9UT8jAOsrHUB3EhlayiILueH2ehyR_GDwRHexw4ON6mSAnxwAAtxB6S6mSW2kiUEJpjtzi8Fz8mucsGZCI; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /complete/search?q=MAHADEV%20SOLUTIONS%20IN%20TEXAS&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=MAHADEV%20SOLUTIONS%20IN%20TEXAS&psi=YXgZZ8LxFJqH9u8P6dbR8Qo.1729722470486&dpr=1&ofp=EAE HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; NID=518=TVvgrkWR-ZGas4OjdPCjrAObQhPSJ_a8a2KQ5BDa7QKTtJsWmfj5Tr6sdfbpCMxZ1Ly0vsZLkW-6iidGwzIxsiaxy-bi39aVjmyHAA-I2rhyTZ91t9UT8jAOsrHUB3EhlayiILueH2ehyR_GDwRHexw4ON6mSAnxwAAtxB6S6mSW2kiUEJpjtzi8Fz8mucsGZCI; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=2/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAACAAAoICAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAICAAAEJCAAACAAAAAGABAIAAARBAAABAAAAAAAgQAAAAASKAfv8JAAAAAAAAAAAAAAgAEgAAAAAA4AIAgABQEAAAACAAAAADAAAADwAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAAAAAgQDQDwAAAAAAAAAAAAAgAAAAAACAARQAEMAPAAAAAAAAAgAAAAQBAAAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/rs=ACT90oFg8gimsvEj0owM6Fr4zNgZiKS64A HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; NID=518=TVvgrkWR-ZGas4OjdPCjrAObQhPSJ_a8a2KQ5BDa7QKTtJsWmfj5Tr6sdfbpCMxZ1Ly0vsZLkW-6iidGwzIxsiaxy-bi39aVjmyHAA-I2rhyTZ91t9UT8jAOsrHUB3EhlayiILueH2ehyR_GDwRHexw4ON6mSAnxwAAtxB6S6mSW2kiUEJpjtzi8Fz8mucsGZCI; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQSYCXCglgDRLELuFp0BPAnkFBpUmsilm_FZe5L8AEQH1BvRcClrNnupKvUWY_PPwvYsW6Py5dJ_TngBZnJXlP1qJAt2WlHqoeMkIb0ITyA2jwengQfkCFEXwDqfaX2_veHkHMwC4n89jBshcqbnb9dsfRfqRlgvcsDiFI
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=YXgZZ8LxFJqH9u8P6dbR8Qo.1729722470486&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQSYCXCglgDRLELuFp0BPAnkFBpUmsilm_FZe5L8AEQH1BvRcClrNnupKvUWY_PPwvYsW6Py5dJ_TngBZnJXlP1qJAt2WlHqoeMkIb0ITyA2jwengQfkCFEXwDqfaX2_veHkHMwC4n89jBshcqbnb9dsfRfqRlgvcsDiFI
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/ck=xjs.s.JQvI3TbmN8g.L.B1.O/am=QOoQIAQAAAQAREADEAAAAAAAAAAAAAAAAAAAAAAgAQAAIAAAAAAAAAKAIAoIqEwCAADIKwAAsAEAAQAAPkAAjgoAGAAAICAAAEJCAAACAAIgAGCFAIAAARBAAABBAQAgAAgRQAAAQSOAfv8JIAAAABgAAAAAQAgQEkAAAyAE4AKQgABQEIB-FCIAAAADAAAID-EAhgEIKgAYwFEAAAAAAAAAAAAAEACEAAAAgYDQDyBAAIAegQAwAABpIAIABAGAARQBkMAPABAAAAAAEkAgAARjJgAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/d=0/dg=0/br=1/ujg=1/rs=ACT90oGimFrXs4zuzCzo8Xdpznq9n94XYA/m=UMk45c,bplExb,nMfLA,O19q8,xMHx5e,R6UkWb,tW711b,UX8qee,tDA9G,sy34i,sy34f,sy34e,sy34d,syz4,syz5,syz3,sy146,syzh,syz6,syz2,syzg,sy2s0,sy2s1,sy2s2,sy142,sy177,sy178,sy143,sy3uv,sy3uu,sy34b,sy140,sy13j,sy11x,sy11p,sy11y,sy11v,sy11t,sy2s3,sy13y,sy13u,sy13t,sy13v,sy13i,Eox39d,sy7w1,sy5so,sy2j6,sysd,tIj4fb,sy3sa,w4UyN,sy8y,sygt,sygq,sygr,sygp,syh1,sygz,sygy,sygx,sygu,sygo,syd5,syd6,sycc,sycd,syar,syam,syct,sycu,sybc,sybd,syb8,syb1,syb4,syb3,syb0,syaz,syap,syax,syb6,sybb,syb9,syak,syas,syaq,syao,syac,syaf,sya9,syae,sya8,sya6,sycw,sycp,sycg,syck,sych,syc0,syc1,syc7,syc6,syby,sybx,sybv,sybz,sybs,sybr,syc5,syc2,sybq,sybp,sybo,sybl,sybm,sybn,sybi,sybg,sybh,sybj,syah,syc3,sygc,sygn,sygl,sygh,sygi,sy8g,sy8c,sy8f,syge,sygk,sygd,sygb,syg8,syg7,syg5,sy8j,uxMpU,syg0,syd9,syd3,syd4,sycx,syd7,syd0,syag,sybk,syd1,sycq,sy9h,sy9g,sy9f,Mlhmy,QGR0gd,aurFic,sy9q,fKUV3e,OTA3Ae,sy90,OmgaI,EEDORb,PoEs9b,Pjplud,sy9b,sy97,sy95,A1yn5d,YIZmRd,uY49fb,sy89,sy87,sy88,sy86,sy84,byfTOb,lsjVmc,LEikZe,kWgXee,Ug7Xab,U0aPgd,ovKuLd,sgY6Zb,qafBPd,ebZ3mb,dowIGb,sy3vw,sy3vv,sy3vu,sy3vt,SJpD2c,sy5ow,sy15w,sy15v,sy15s,sy15x,sy14t,sy15u,sy127,sy129,sy122,sy124,syte,sytp,sy5ot,sy5os,sy1pl,syu5,sytx,sytv,sytj,sytu,sytm,sytl,sytk,syt4,syt2,sysw,sy1h7,syyy,sy5ou,bEGPrc,sy1hw,sy5oy,sy5ox,mBG1hd,sy5oz,mscaJf,sy5p3,sGwFce,HxbScf,eAR4Hf,sy5p4,h3zgVb,lRePd,sy3vn,nN2e1e,sy5p0,sy5p5,IRJCef,sy5p2,sy5p1,scFHte,pr5okc,IFqxxc,sy3vo,OXpAmf,sy5p6,sy3sc,sy3s5,sy3s4,sy1h9,sy1ha,sy174,sy176,sy175,sy171,sy172,sy16z,sy16y,sy16u,sy170,sy106,sy107,sy105,sy108,sy104,sy109,syzw,syzx,sy10a,sy10b,sywk,syw4,sywl,GElbSc,sysi,sysf,syse,sysc,DPreE,sy5pf,xdV1C,sy5yn,HYSCof,sy6ir,sy37d,sy1nf,sy1fm,KSk4yc,sy3ur,arTwJ,aZ61od,sy3ut,sy2km,hspDDf,sy82u,sy896,sy895,sy88x,sy1fz,syv0,sy1gh,sy18i,sy88u,sy894,sy890,sy36j,sy88t,sy88s,sy15z,syy8?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFo
Source: global traffic	HTTP traffic detected: GET /complete/search?q=MAHADEV%20SOLUTIONS%20IN%20TEXAS&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=MAHADEV%20SOLUTIONS%20IN%20TEXAS&psi=YXgZZ8LxFJqH9u8P6dbR8Qo.1729722470486&dpr=1&ofp=EAE HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQSYCXCglgDRLELuFp0BPAnkFBpUmsilm_FZe5L8AEQH1BvRcClrNnupKvUWY_PPwvYsW6Py5dJ_TngBZnJXlP1qJAt2WlHqoeMkIb0ITyA2jwengQfkCFEXwDqfaX2_veHkHMwC4n89jBshcqbnb9dsfRfqRlgvcsDiFI
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=2/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAACAAAoICAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAICAAAEJCAAACAAAAAGABAIAAARBAAABAAAAAAAgQAAAAASKAfv8JAAAAAAAAAAAAAAgAEgAAAAAA4AIAgABQEAAAACAAAAADAAAADwAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAAAAAgQDQDwAAAAAAAAAAAAAgAAAAAACAARQAEMAPAAAAAAAAAgAAAAQBAAAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/rs=ACT90oFg8gimsvEj0owM6Fr4zNgZiKS64A HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQSYCXCglgDRLELuFp0BPAnkFBpUmsilm_FZe5L8AEQH1BvRcClrNnupKvUWY_PPwvYsW6Py5dJ_TngBZnJXlP1qJAt2WlHqoeMkIb0ITyA2jwengQfkCFEXwDqfaX2_veHkHMwC4n89jBshcqbnb9dsfRfqRlgvcsDiFI
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/ck=xjs.s.JQvI3TbmN8g.L.B1.O/am=QOoQIAQAAAQAREADEAAAAAAAAAAAAAAAAAAAAAAgAQAAIAAAAAAAAAKAIAoIqEwCAADIKwAAsAEAAQAAPkAAjgoAGAAAICAAAEJCAAACAAIgAGCFAIAAARBAAABBAQAgAAgRQAAAQSOAfv8JIAAAABgAAAAAQAgQEkAAAyAE4AKQgABQEIB-FCIAAAADAAAID-EAhgEIKgAYwFEAAAAAAAAAAAAAEACEAAAAgYDQDyBAAIAegQAwAABpIAIABAGAARQBkMAPABAAAAAAEkAgAARjJgAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/d=0/dg=0/br=1/ujg=1/rs=ACT90oGimFrXs4zuzCzo8Xdpznq9n94XYA/m=sy88v,sy6zc,sy2jw,sy2jv,sy2jx,sy2kh,sy18n,fREC7d,sy88w,sy2kr,sy1ij,sy103,sy88z,sy88y,sy6yx,syzt,etGP4c,sy5ys,sy2ks,sy2kt,sy2ku,syye,syyd,syy5,syyc,syyf,sy2kv,syw7,syw6,m1Ro8b,sy36a,msmzHf,sy5xe,cSX9Xe,syvb,syvf,syvd,syve,syvh,syvg,syv8,syv3,syv2,SMquOb,sywr,sywp,sywq,rtH1bd,syx0,sywy,sywx,sywu,syww,d5EhJe,syz0,sy1hs,sy1hr,sy1hq,sy1hp,sy1ho,sy1hn,sy1bo,sy1bq,sy1bp,sy1bn,syx8,syvc,syx4,syx7,T1HOxc,syx5,syx3,zx30Y,sy1hv,sy1hk,Wo3n8,WphjT,GbREj,kKBQSb,alTYCe,rnvJOe,Htp9Dd,qiMqId,sy26i,rCcCxc,sy1a2,mzzZzc,sy80,NTMZac,s39S4,nAFL3,sy28g,sy28d,sy287,sy1uy,sy1d7,sy1d8,sy1cr,sy19h,sy1uw,sy1cq,sy1cy,sy1v6,sy1v5,sy1v7,sy1v2,sy1bm,sy1ac,sy19i,sy198,sy191,sy192,sy193,sy195,sy196,sy1v3,sy1ax,sy28e,sy26m,sy1cz,sy28b,sy1bl,sy1bk,sy18w,sy282,sy1ag,sy19n,sy19o,sy279,sy1av,sy1aq,sy1al,sy28a,sy289,sy1ay,sy28f,sy27w,sy27z,sywn,gJzDyc,sy3dn,AjY3nc,sy28h,PjgPye,sy3do,fadmnd,sy3dt,sy3cq,sydx,syda,sydb,syc4,sy3cp,sy2k4,sy2k2,sy2k3,sy2e1,sy1tu,sy1yq,sy28k,sy1y7,sy1y8,sy1y9,sy18x,sy28l,sy1db,sy19m,sy19u,sy1xd,sy1cu,sy1c9,sy19p,sy19v,sy1xi,sy1yg,sy1cv,sy18y,On4cbb,sy3dp,a3GOsd,sy3du,sy3dv,PEXgde,sy7zi,sy5x8,lvAdvf,sy247,sy245,sy246,sy242,sy24a,sy249,syxj,sy243,RsDQqe,bFZ6gf,sy24e,qjk5yc,sy1ix,EbPKJf,sy1i5,sy1i3,syib,sy1gx,CnSW2d,sy1j1,sy1j0,sy1iz,sy1i6,sywd,syw8,syw9,sywe,pFsdhd,sy6ym,nPaQu,iVxlmc,HrkLTd,sy13e,sy13d,L1AAkb,aW3pY,sy1wk,sy305,sy1vo,sy1vp,sy1wj,sy1wl,sy30i,sy1vj,sy30d,sy1vk,sy30e,sy1vv,sy1vu,sy1vs,sy1vr,sy1u8,sy1vx,sy1wg,sy30g,sy1vt,sy1vq,sy1vw,sy1wf,sy1we,sy30f,sy1u9,sy1vy,sy1vz,sy1wi,sy30h,sy308,sy307,sy26w,sy26s,fgj8Rb,sy2sl,sy2sm,L8KGxe,wV5Pjc,jn2sGd,Nyt6ic,syfq,btdpvd,sy7zu,sy680,E6foze,sy5ss,ncqIyf,sy5sr,pttite,sy7zv,sy5xd,sy365,sy2ky,sy367,LWZElb,sy7w2,sy37s,JjAYS,sy5sp,sy75g,XlKixc,sy6at,Fhpw9c,sy8cw,sy7wd,sy52c,sy253,sy8cu,sy78t,v06Lk,syg3,aLUfP,wQlYve,sy102,sy101,sy100,syzz,syzq,syzo,syqd,synb,symp,sylr,syqc,syfh,pgCXqb,syzm,TSZEqd,sy7kb,pHXghd?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1280&bih=907&ei=YXgZZ8LxFJqH9u8P6dbR8Qo&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQSYCXCglgDRLELuFp0BPAnkFBpUmsilm_FZe5L8AEQH1BvRcClrNnupKvUWY_PPwvYsW6Py5dJ_TngBZnJXlP1qJAt2WlHqoeMkIb0ITyA2jwengQfkCFEXwDqfaX2_veHkHMwC4n89jBshcqbnb9dsfRfqRlgvcsDiFI
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/ck=xjs.s.JQvI3TbmN8g.L.B1.O/am=QOoQIAQAAAQAREADEAAAAAAAAAAAAAAAAAAAAAAgAQAAIAAAAAAAAAKAIAoIqEwCAADIKwAAsAEAAQAAPkAAjgoAGAAAICAAAEJCAAACAAIgAGCFAIAAARBAAABBAQAgAAgRQAAAQSOAfv8JIAAAABgAAAAAQAgQEkAAAyAE4AKQgABQEIB-FCIAAAADAAAID-EAhgEIKgAYwFEAAAAAAAAAAAAAEACEAAAAgYDQDyBAAIAegQAwAABpIAIABAGAARQBkMAPABAAAAAAEkAgAARjJgAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/d=0/dg=0/br=1/ujg=1/rs=ACT90oGimFrXs4zuzCzo8Xdpznq9n94XYA/m=UMk45c,bplExb,nMfLA,O19q8,xMHx5e,R6UkWb,tW711b,UX8qee,tDA9G,sy34i,sy34f,sy34e,sy34d,syz4,syz5,syz3,sy146,syzh,syz6,syz2,syzg,sy2s0,sy2s1,sy2s2,sy142,sy177,sy178,sy143,sy3uv,sy3uu,sy34b,sy140,sy13j,sy11x,sy11p,sy11y,sy11v,sy11t,sy2s3,sy13y,sy13u,sy13t,sy13v,sy13i,Eox39d,sy7w1,sy5so,sy2j6,sysd,tIj4fb,sy3sa,w4UyN,sy8y,sygt,sygq,sygr,sygp,syh1,sygz,sygy,sygx,sygu,sygo,syd5,syd6,sycc,sycd,syar,syam,syct,sycu,sybc,sybd,syb8,syb1,syb4,syb3,syb0,syaz,syap,syax,syb6,sybb,syb9,syak,syas,syaq,syao,syac,syaf,sya9,syae,sya8,sya6,sycw,sycp,sycg,syck,sych,syc0,syc1,syc7,syc6,syby,sybx,sybv,sybz,sybs,sybr,syc5,syc2,sybq,sybp,sybo,sybl,sybm,sybn,sybi,sybg,sybh,sybj,syah,syc3,sygc,sygn,sygl,sygh,sygi,sy8g,sy8c,sy8f,syge,sygk,sygd,sygb,syg8,syg7,syg5,sy8j,uxMpU,syg0,syd9,syd3,syd4,sycx,syd7,syd0,syag,sybk,syd1,sycq,sy9h,sy9g,sy9f,Mlhmy,QGR0gd,aurFic,sy9q,fKUV3e,OTA3Ae,sy90,OmgaI,EEDORb,PoEs9b,Pjplud,sy9b,sy97,sy95,A1yn5d,YIZmRd,uY49fb,sy89,sy87,sy88,sy86,sy84,byfTOb,lsjVmc,LEikZe,kWgXee,Ug7Xab,U0aPgd,ovKuLd,sgY6Zb,qafBPd,ebZ3mb,dowIGb,sy3vw,sy3vv,sy3vu,sy3vt,SJpD2c,sy5ow,sy15w,sy15v,sy15s,sy15x,sy14t,sy15u,sy127,sy129,sy122,sy124,syte,sytp,sy5ot,sy5os,sy1pl,syu5,sytx,sytv,sytj,sytu,sytm,sytl,sytk,syt4,syt2,sysw,sy1h7,syyy,sy5ou,bEGPrc,sy1hw,sy5oy,sy5ox,mBG1hd,sy5oz,mscaJf,sy5p3,sGwFce,HxbScf,eAR4Hf,sy5p4,h3zgVb,lRePd,sy3vn,nN2e1e,sy5p0,sy5p5,IRJCef,sy5p2,sy5p1,scFHte,pr5okc,IFqxxc,sy3vo,OXpAmf,sy5p6,sy3sc,sy3s5,sy3s4,sy1h9,sy1ha,sy174,sy176,sy175,sy171,sy172,sy16z,sy16y,sy16u,sy170,sy106,sy107,sy105,sy108,sy104,sy109,syzw,syzx,sy10a,sy10b,sywk,syw4,sywl,GElbSc,sysi,sysf,syse,sysc,DPreE,sy5pf,xdV1C,sy5yn,HYSCof,sy6ir,sy37d,sy1nf,sy1fm,KSk4yc,sy3ur,arTwJ,aZ61od,sy3ut,sy2km,hspDDf,sy82u,sy896,sy895,sy88x,sy1fz,syv0,sy1gh,sy18i,sy88u,sy894,sy890,sy36j,sy88t,sy88s,sy15z,syy8?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQSYCXCglgDRLELuFp0BPAnkFBpUmsilm_FZe5L8AEQH1BvRcClrNnupKvUWY_PPwvYsW6Py5dJ_TngBZnJXlP1qJAt2WlHqoeMkIb0ITyA2jwengQfkCFEXwDqfaX2_veHkHMwC4n89jBshcqbnb9dsfRfqRlgvcsDiF
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/ck=xjs.s.JQvI3TbmN8g.L.B1.O/am=QOoQIAQAAAQAREADEAAAAAAAAAAAAAAAAAAAAAAgAQAAIAAAAAAAAAKAIAoIqEwCAADIKwAAsAEAAQAAPkAAjgoAGAAAICAAAEJCAAACAAIgAGCFAIAAARBAAABBAQAgAAgRQAAAQSOAfv8JIAAAABgAAAAAQAgQEkAAAyAE4AKQgABQEIB-FCIAAAADAAAID-EAhgEIKgAYwFEAAAAAAAAAAAAAEACEAAAAgYDQDyBAAIAegQAwAABpIAIABAGAARQBkMAPABAAAAAAEkAgAARjJgAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/d=0/dg=0/br=1/ujg=1/rs=ACT90oGimFrXs4zuzCzo8Xdpznq9n94XYA/m=sy88v,sy6zc,sy2jw,sy2jv,sy2jx,sy2kh,sy18n,fREC7d,sy88w,sy2kr,sy1ij,sy103,sy88z,sy88y,sy6yx,syzt,etGP4c,sy5ys,sy2ks,sy2kt,sy2ku,syye,syyd,syy5,syyc,syyf,sy2kv,syw7,syw6,m1Ro8b,sy36a,msmzHf,sy5xe,cSX9Xe,syvb,syvf,syvd,syve,syvh,syvg,syv8,syv3,syv2,SMquOb,sywr,sywp,sywq,rtH1bd,syx0,sywy,sywx,sywu,syww,d5EhJe,syz0,sy1hs,sy1hr,sy1hq,sy1hp,sy1ho,sy1hn,sy1bo,sy1bq,sy1bp,sy1bn,syx8,syvc,syx4,syx7,T1HOxc,syx5,syx3,zx30Y,sy1hv,sy1hk,Wo3n8,WphjT,GbREj,kKBQSb,alTYCe,rnvJOe,Htp9Dd,qiMqId,sy26i,rCcCxc,sy1a2,mzzZzc,sy80,NTMZac,s39S4,nAFL3,sy28g,sy28d,sy287,sy1uy,sy1d7,sy1d8,sy1cr,sy19h,sy1uw,sy1cq,sy1cy,sy1v6,sy1v5,sy1v7,sy1v2,sy1bm,sy1ac,sy19i,sy198,sy191,sy192,sy193,sy195,sy196,sy1v3,sy1ax,sy28e,sy26m,sy1cz,sy28b,sy1bl,sy1bk,sy18w,sy282,sy1ag,sy19n,sy19o,sy279,sy1av,sy1aq,sy1al,sy28a,sy289,sy1ay,sy28f,sy27w,sy27z,sywn,gJzDyc,sy3dn,AjY3nc,sy28h,PjgPye,sy3do,fadmnd,sy3dt,sy3cq,sydx,syda,sydb,syc4,sy3cp,sy2k4,sy2k2,sy2k3,sy2e1,sy1tu,sy1yq,sy28k,sy1y7,sy1y8,sy1y9,sy18x,sy28l,sy1db,sy19m,sy19u,sy1xd,sy1cu,sy1c9,sy19p,sy19v,sy1xi,sy1yg,sy1cv,sy18y,On4cbb,sy3dp,a3GOsd,sy3du,sy3dv,PEXgde,sy7zi,sy5x8,lvAdvf,sy247,sy245,sy246,sy242,sy24a,sy249,syxj,sy243,RsDQqe,bFZ6gf,sy24e,qjk5yc,sy1ix,EbPKJf,sy1i5,sy1i3,syib,sy1gx,CnSW2d,sy1j1,sy1j0,sy1iz,sy1i6,sywd,syw8,syw9,sywe,pFsdhd,sy6ym,nPaQu,iVxlmc,HrkLTd,sy13e,sy13d,L1AAkb,aW3pY,sy1wk,sy305,sy1vo,sy1vp,sy1wj,sy1wl,sy30i,sy1vj,sy30d,sy1vk,sy30e,sy1vv,sy1vu,sy1vs,sy1vr,sy1u8,sy1vx,sy1wg,sy30g,sy1vt,sy1vq,sy1vw,sy1wf,sy1we,sy30f,sy1u9,sy1vy,sy1vz,sy1wi,sy30h,sy308,sy307,sy26w,sy26s,fgj8Rb,sy2sl,sy2sm,L8KGxe,wV5Pjc,jn2sGd,Nyt6ic,syfq,btdpvd,sy7zu,sy680,E6foze,sy5ss,ncqIyf,sy5sr,pttite,sy7zv,sy5xd,sy365,sy2ky,sy367,LWZElb,sy7w2,sy37s,JjAYS,sy5sp,sy75g,XlKixc,sy6at,Fhpw9c,sy8cw,sy7wd,sy52c,sy253,sy8cu,sy78t,v06Lk,syg3,aLUfP,wQlYve,sy102,sy101,sy100,syzz,syzq,syzo,syqd,synb,symp,sylr,syqc,syfh,pgCXqb,syzm,TSZEqd,sy7kb,pHXghd?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQSYCXCglgDRLELuFp0BPAnkFBpUmsilm_FZe5L8AEQH1BvRcClrNnupKvUWY_PPwvYsW6Py5dJ
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.JQvI3TbmN8g.L.B1.O/am=QOoQIAQAAAQAREADEAAAAAAAAAAAAAAAAAAAAAAgAQAAIAAAAAAAAAIAIAIAoEwCAADICwAAsAEAAQAAPkAAjgoAGAAAAAAAAEACAAAAAAIgAECFAAAAAAAAAAABAQAgAAARQAAAQCEAAAAAIAAAABgAAAAAQAgQAEAAAyAEAAKQgABQEIB-FAIAAAADAAAID-EAhgEIKgAYwFEAAAAAAAAAAAAAEACEAAAAgIAAACBAAIAegQAwAABpIAIABAEAARQBgAAAABAAAAAAEEAgAABiJgAOyAAEAAAAAAAAABIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAgA/d=0/br=1/rs=ACT90oEh6kJdYmfESHG-JPbQVjjDSttVVg/m=sy1eh,sypj,syo1,sypk,sy1ew,sy1ev,sy1eu,synd,sync,symo,sy1et,sy1er,sy1eq,sy1ep,sy1en,sy1em,sy1el,sy1ek,sy1ej,sy1ei,sy3hk,sy3hj,sy1ud,sy1u4,sy21u,pa67Ne,JHI4cb,xh9Dkb,Pq506,z2eFcc,eTVOC,GRSrSe,KTfMfd,UTbeEe,UWPTnc,g0Ekse,U8HkDd,aVswRb,NeaQsb,NQ9Vxb,cpFMEb,fr3s0b,yN4Qsc,kV5eWc,aQA7ac,ts6oTe,f49kBd,YlMcGe,XTmxwe,OjtwQe,SQAZFd,MafjZe,BmbBtc,y05UD,sy90q,sy90e,sy90d,sy902,sy8zw,sy8zy,sy90b,sy2d9,sy1r2,sy2da,sy900,sy8qw,sy8qx,sy1qs,sy1qw,sy1s3,sy3rt,sy1rv,sy1qz,sy1su,sy1rm,sy1rn,sy1r1,sy1r3,sy11o,sy11c,syn7,syn6,symx,symv,symt,sym3,syld,sy11n,sy4bz,sy3fm,sy3fn,sy3fl,sy3fo,sy3fh,sy3fp,sy3d3,sy234,sy235,synn,synm,synl,synk,synj,syni,synh,syng,synf,syne,syna,syn9,syn8,syn5,syn4,syn3,syn2,syn1,syn0,symz,symw,symu,syms,symr,symq,symn,symm,syml,symk,symj,symi,symh,symf,syme,symd,symc,symb,syma,sym9,sym7,sym6,sym5,sym4,sym2,sym1,sym0,sylz,syly,sylx,sylw,sylv,sylt,syls,sylq,sylp,syln,sylm,syll,sylk,sylj,syli,sylh,syle,sylc,syk0,syl9,syl8,sy236,sy1ez,sy1ey,sy2fy,sy2g8,sy1wd,sy1wc,sy1w8,sy1w9,sy1wa,sy1vn,sy1w6,sy1w7,sy1w5,sy1wb,sy1w3,sy1th,sy1u3,sy8zs,sy219,sy20q,sy1zv,sy2ea,sy90l,sy1u7,sy90i,sy90j,sy1tv,sy90g,sy8zt,sy8zu,sy1ds,sy90h,sy90r,sy8r0,sy8r4,sy1yk,sy4kp,sypf,sy4c2,epYOx?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQSYCXCglgDRLELuFp0BPAnkFBpUmsilm_FZe5L8AEQH1BvRcClrNnupKvUWY_PPwvYsW6Py5dJ_TngBZnJXlP1qJAt2WlHqoeMkIb0ITyA2jwengQfkCFEXwDqfaX2_veHkHMwC4n89jBshcqbnb9dsfRfqRlgvcsDiFI
Source: global traffic	HTTP traffic detected: GET /glsgmb/AMnFcur5AxxNAHFMq_VfJzaf7xvhaA5iSeirFZVcOzvluEbtBllgHchhM0aZxDnmUr-jR776QlcERp1X_YLdY0Rq8tDKNA=w148-h100-p-k-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAACAAAoICAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAICAAAEJCAAACAAAAAGABAIAAARBAAABAAAAAAAgQAAAAASKAfv8JAAAAAAAAAAAAAAgAEgAAAAAA4AIAgABQEAAAACAAAAADAAAADwAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAAAAAgQDQDwAAAAAAAAAAAAAgAAAAAACAARQAEMAPAAAAAAAAAgAAAAQBAAAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/d=0/dg=0/br=1/rs=ACT90oFg8gimsvEj0owM6Fr4zNgZiKS64A/m=sy900,sy8qw,sy8qx,sy1qs,sy1qw,sy1s3,sy3rt,sy1rv,sy1qz,sy1su,sy1rm,sy1rn,sy1r1,sy1r3,sy11o,sy11c,syn7,syn6,symx,symv,symt,sym3,syld,sy11n,sy4bz,sy3fm,sy3fn,sy3fl,sy3fo,sy3fh,sy3fp,sy3d3,sy234,sy235,synn,synm,synl,synk,synj,syni,synh,syng,synf,syne,syna,syn9,syn8,syn5,syn4,syn3,syn2,syn1,syn0,symz,symw,symu,syms,symr,symq,symn,symm,syml,symk,symj,symi,symh,symf,syme,symd,symc,symb,syma,sym9,sym7,sym6,sym5,sym4,sym2,sym1,sym0,sylz,syly,sylx,sylw,sylv,sylt,syls,sylq,sylp,syln,sylm,syll,sylk,sylj,syli,sylh,syle,sylc,syk0,syl9,syl8,sy236,sy1ez,sy1ey,sy2fy,sy2g8,sy1wd,sy1wc,sy1w8,sy1w9,sy1wa,sy1vn,sy1w6,sy1w7,sy1w5,sy1wb,sy1w3,sy1th,sy1u3,sy8zs,sy219,sy20q,sy1zv,sy2ea,sy90l,sy1u7,sy90i,sy90j,sy1tv,sy90g,sy8zt,sy8zu,sy1ds,sy90h,sy1rg,sy2bb,sy8zv,sy8zq,sy8zm,sy2b9,sy2b7,sy2dd,sy1wq,sy1x1,sy1wt,sy8zx,sy8qm,sy8rq,sy8r7,sy8qa,sy1qv,sy4cv,sy1qt,sy2bj,sy2bf,sy1r7,sy3ru,sy2bm,sy2bh,sy2bc,sy17e,sy1re,sy1rc,sy2bd,sy1ru,sy2ba,sy1t7,sy1rt,sy4c0,sy2ee,sy16w,sy2fz,sy2ga,sy2di,sy1xu,sy1xt,sy1xp,sy2dh,sy1qh,sy2dg,sy2d4,sy1wy,sy1wx,sy1ww,sy1ws,sy1wr,sy1pm,sy1wu,sy1x0,sy8zi,sy2k1,sy2eq,sy10l,sy1fc,sy2er,sy2e9,sy2e5,sy2ep,sy2be,sy1rx,sy21e,sy2eb,sy90f,sy90r,sy90p,sy8r0,sy8r4,sy666,sy1yk,Yo9XHf,sy667,iP9a1d,sy1qd,sy269,sy266,sy268,sy265,sy263,sy262,sy25z,sy25w,sy25x,sy25u,sy25q,sy25k,sy25j,sy25l,sy260,sy25d,sy25b,sy259,sy255,sy24v,sy24x,sy24u,sy1yd,sy254,sy24y,sy1rr,sy15r,w1HaZb,sy7uw,sy7uv,sy6br,sy52t,sy51t,sy1pi,sy2au,QPRQHf,sy7v8,sy1pp,sy1po,sy1pn,sy1ph,sy7v1,sy7uz,sy7uy,sy1pv,sy1py,sy1ps,sy1pr,sy7vb,sy7vc,sy7v7,sy1y1,sy7v6,sy7v4,sy7v3,sy7v5,sy7um,sy73t,sy2ar,sy2at,sy1q1,syzp,Hjq1Uc,sy831,sy830,sy6da,I8LNlc,sy399,sy392,sy393,sy2t8,sy398,sy39o,sy39n,sy38z,sy39l,sy39k,KHourd,sy3wp,T5VV,sy2sa,aDVF7,sy6e9,rhYw1b,sy2jq,sy2jo,sy2kn,sy2ko,Tia57b,KpRAue,sy2kp,NyeqM,sy39e,sy39d,sy397,O9SqHb,M6QgBb,sy188,sy187,sy16e,sy166,sy165,sy186,sy185,sy183,sy169,syss,EO13pd,sy2mb,I9y8sd,MpJwZc,UUJqVe,sy81,sOXFj,oGtAuc,sy8w,sy8v,q0xTif,sy4kp,sypf,sy4c2,sy38r,sy4c4,sy1wo,sy1wp,epYOx,RagDlc?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-mo
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAACAAAoICAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAICAAAEJCAAACAAAAAGABAIAAARBAAABAAAAAAAgQAAAAASKAfv8JAAAAAAAAAAAAAAgAEgAAAAAA4AIAgABQEAAAACAAAAADAAAADwAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAAAAAgQDQDwAAAAAAAAAAAAAgAAAAAACAARQAEMAPAAAAAAAAAgAAAAQBAAAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/d=0/dg=0/br=1/rs=ACT90oFg8gimsvEj0owM6Fr4zNgZiKS64A/m=sb_wiz,aa,abd,sy2ms,async,sy1kx,bgd,sy7ro,foot,sy1p9,kyn,sy1z6,sy2jt,lli,sf,syy0,syy1,sy4k7,sonic,TxCJfd,sy80z,qzxzOb,IsdWVc,sy811,sy2o8,sy3ap,sy141,sy1nn,sy1no,spch,tl,sy36q,sy36o,syya,sy36p,syzn,EkevXb,sy1ms,fiAufb,sy1ir,SZXsif,sy7hd,sy7s2,sy5zf,sYEX8b,sy1n4,NEW1Qc,xBbsrc,sy1n7,sy1n6,IX53Tb,ma4xG,sy167,sy163,sy164,sy15q,sy161,syue,syud,syul,syuj,syug,syu8,syu9,syuc,syuo,sy17w,sysr,E9M6Uc,syuq,syup,NO84gd,b5lhvb,IoGlCf,sysk,sysj,C8HsP,syuu,syus,syub,syst,gOTY1,syvw,syvt,syvu,syvj,syvm,syvx,syvs,syvq,syvo,syv1,syuz,syvr,syvn,PbHo4e,sy5eb,sy16x,zGLm3b,sy369,hnlzI,sy1jb,sy1ja,ggQ0Zb,sy1g2,sy1g3,Qj0suc,JXS8fb,sy1g0,NdLnDf,sy1fs,QKZgZd,sy1gl,sy1gj,sy1fy,sy1gi,sy1gd,sy1gc,sy1ge,sy1g8,sy1gg,sy1ga,sy1gb,sy1g5,sy1fv,Wct42,sy1gn,sy1eh,sypj,syo1,sypk,sy1ew,sy1ev,sy1eu,synd,sync,symo,sy1et,sy1er,sy1eq,sy1ep,sy1en,sy1em,sy1el,sy1ek,sy1ej,sy1ei,sy1gm,LiBxPe,syg1,BYwJlf,sy13k,sy13h,sy13g,VEbNoe,sy13m,eX5ure,sy1x7,syzi,syzj,sy1j3,syzk,lWLF5b,sy37z,sy2su,sy2sv,sy1zb,sy24t,vH4ZEb,sy33k,RdVOmb,sy384,teJewe,sy383,sy31b,b1qkGc,sy1jd,sy1jc,aaBoAd,sy1ea,sy1eb,dt4g2b,w9w86d,sy38a,sy389,sy387,sy25g,sy250,sy1nx,sy2do,sy385,sy388,sy2ie,SHXTGd,sy5st,nLBNM,sy3hd,sy3hg,sy3he,sy3hf,E6S4tc,sy1pb,sy3hk,sy3hi,sy2ht,sy2hq,sy2hs,sy2hv,sy13z,sy3hl,sy3hj,sy3hh,yMbBpb,sy77x,HQESbc,sy8ci,sy8bv,sy267,sy28s,sy32m,sy8bw,sy781,sy2if,pE1Zse,sy780,Tzy10b,sy24f,OYRyoe,sy26y,sy26x,A4UTCb,e2QYhf,sy2zw,sy2zs,sy2zv,VXdfxd,sy270,V3dDOb,sy33h,sy1bj,eY7ywe,fPxN5b,sy30b,sy309,N5Lqpc,sy2i6,OjjPDd,sy33i,dgEsDd,sy1ud,sy33b,sy33a,sy1u4,sy1rd,sy2de,sy28i,sy28m,sy21u,pa67Ne,sy33n,sy33m,sy33l,sy33e,sy2oe,sy2b8,sy1j6,sy1j9,sy1j7,sy1bi,JHI4cb,sy33o,ObNzgb,x9N9ie,ucGLNb,LsNahb,sy1p6,eSZ0Oc,sy1p5,sy1p4,SLH9Ic,sy1pc,nlUz0e,sy1pa,riI83,sy1pd,HxvWab,sy8zn,sy64j,sy5qa,T4Tncb,xh9Dkb,Pq506,z2eFcc,eTVOC,GRSrSe,KTfMfd,UTbeEe,UWPTnc,g0Ekse,U8HkDd,aVswRb,NeaQsb,NQ9Vxb,cpFMEb,fr3s0b,yN4Qsc,kV5eWc,aQA7ac,ts6oTe,f49kBd,YlMcGe,XTmxwe,OjtwQe,SQAZFd,MafjZe,BmbBtc,y05UD,Oj465e,sy8zf,sy529,sy1qg,sy8zj,sy8zl,sy664,sy4dm,fm2FOd,sy637,r8Ivpf,sy90q,sy90m,sy90e,sy90d,sy902,sy8zw,sy8zy,sy90b,sy2d9,sy1r2,sy2da?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v
Source: global traffic	HTTP traffic detected: GET /biz/mahadev-solutions-in-texas-carrollton-2 HTTP/1.1Host: www.yelp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /glsgmb/AMnFcur5AxxNAHFMq_VfJzaf7xvhaA5iSeirFZVcOzvluEbtBllgHchhM0aZxDnmUr-jR776QlcERp1X_YLdY0Rq8tDKNA=w148-h100-p-k-no HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.JQvI3TbmN8g.L.B1.O/am=QOoQIAQAAAQAREADEAAAAAAAAAAAAAAAAAAAAAAgAQAAIAAAAAAAAAIAIAIAoEwCAADICwAAsAEAAQAAPkAAjgoAGAAAAAAAAEACAAAAAAIgAECFAAAAAAAAAAABAQAgAAARQAAAQCEAAAAAIAAAABgAAAAAQAgQAEAAAyAEAAKQgABQEIB-FAIAAAADAAAID-EAhgEIKgAYwFEAAAAAAAAAAAAAEACEAAAAgIAAACBAAIAegQAwAABpIAIABAEAARQBgAAAABAAAAAAEEAgAABiJgAOyAAEAAAAAAAAABIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAgA/d=0/br=1/rs=ACT90oEh6kJdYmfESHG-JPbQVjjDSttVVg/m=sy1eh,sypj,syo1,sypk,sy1ew,sy1ev,sy1eu,synd,sync,symo,sy1et,sy1er,sy1eq,sy1ep,sy1en,sy1em,sy1el,sy1ek,sy1ej,sy1ei,sy3hk,sy3hj,sy1ud,sy1u4,sy21u,pa67Ne,JHI4cb,xh9Dkb,Pq506,z2eFcc,eTVOC,GRSrSe,KTfMfd,UTbeEe,UWPTnc,g0Ekse,U8HkDd,aVswRb,NeaQsb,NQ9Vxb,cpFMEb,fr3s0b,yN4Qsc,kV5eWc,aQA7ac,ts6oTe,f49kBd,YlMcGe,XTmxwe,OjtwQe,SQAZFd,MafjZe,BmbBtc,y05UD,sy90q,sy90e,sy90d,sy902,sy8zw,sy8zy,sy90b,sy2d9,sy1r2,sy2da,sy900,sy8qw,sy8qx,sy1qs,sy1qw,sy1s3,sy3rt,sy1rv,sy1qz,sy1su,sy1rm,sy1rn,sy1r1,sy1r3,sy11o,sy11c,syn7,syn6,symx,symv,symt,sym3,syld,sy11n,sy4bz,sy3fm,sy3fn,sy3fl,sy3fo,sy3fh,sy3fp,sy3d3,sy234,sy235,synn,synm,synl,synk,synj,syni,synh,syng,synf,syne,syna,syn9,syn8,syn5,syn4,syn3,syn2,syn1,syn0,symz,symw,symu,syms,symr,symq,symn,symm,syml,symk,symj,symi,symh,symf,syme,symd,symc,symb,syma,sym9,sym7,sym6,sym5,sym4,sym2,sym1,sym0,sylz,syly,sylx,sylw,sylv,sylt,syls,sylq,sylp,syln,sylm,syll,sylk,sylj,syli,sylh,syle,sylc,syk0,syl9,syl8,sy236,sy1ez,sy1ey,sy2fy,sy2g8,sy1wd,sy1wc,sy1w8,sy1w9,sy1wa,sy1vn,sy1w6,sy1w7,sy1w5,sy1wb,sy1w3,sy1th,sy1u3,sy8zs,sy219,sy20q,sy1zv,sy2ea,sy90l,sy1u7,sy90i,sy90j,sy1tv,sy90g,sy8zt,sy8zu,sy1ds,sy90h,sy90r,sy8r0,sy8r4,sy1yk,sy4kp,sypf,sy4c2,epYOx?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQSYCXCglgDRLELuFp0BPAnkFBpUmsilm_FZe5L8AEQH1BvRcClrNnupKvUWY_PPwvYsW6Py5dJ_TngBZnJXlP1qJAt2WlHqoeMkIb0ITyA2jwengQfkCFEXwDqfaX2_veHkHMwC4n89jBshcqbnb9dsfRfqRlgvcsDiFI
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.JQvI3TbmN8g.L.B1.O/am=QOoQIAQAAAQAREADEAAAAAAAAAAAAAAAAAAAAAAgAQAAIAAAAAAAAAIAIAIAoEwCAADICwAAsAEAAQAAPkAAjgoAGAAAAAAAAEACAAAAAAIgAECFAAAAAAAAAAABAQAgAAARQAAAQCEAAAAAIAAAABgAAAAAQAgQAEAAAyAEAAKQgABQEIB-FAIAAAADAAAID-EAhgEIKgAYwFEAAAAAAAAAAAAAEACEAAAAgIAAACBAAIAegQAwAABpIAIABAEAARQBgAAAABAAAAAAEEAgAABiJgAOyAAEAAAAAAAAABIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAgA/d=0/br=1/rs=ACT90oEh6kJdYmfESHG-JPbQVjjDSttVVg/m=dOwROe,zCncvb,I6YDgd,g1ab0d,sy8vo,sy8tz,sy8u1,sy8tx,sy4jm,sy8ul,sy8ro,sy8vp,sy1ut,sy1uu,sy1ur,sy1us,sy1uv,sy1un,sy1uo,sy1up,sy1ug,sy1uh,sy1c1,sy1um,sy1uk,sy1uz,sy1uj,sy1ul,sy1v0,sy8ty,yPDigb,sy331,sy370,sy8zg,sy4a5,sy90n?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQSYCXCglgDRLELuFp0BPAnkFBpUmsilm_FZe5L8AEQH1BvRcClrNnupKvUWY_PPwvYsW6Py5dJ_TngBZnJXlP1qJAt2WlHqoeMkIb0ITyA2jwengQfkCFEXwDqfaX2_veHkHMwC4n89jBshcqbnb9dsfRfqRlgvcsDiFI
Source: global traffic	HTTP traffic detected: GET /async/bgasy?ei=YXgZZ8LxFJqH9u8P6dbR8Qo&opi=89978449&authuser=1&hl=en&mat=CVQRu4gXOCuRElcBEKoLaWdOjq4TJdno4nxViy74uAG1sLRS3AEIR-IwF6cFkJiNrV-puB2zAvKg2o2NOfRFtXSKhfUWzInkf-MWDXzXcDEuo6l_fYsBx9hA0M3tfX-_saM&stick=H4sIAAAAAAAA_-NgU1I1qLAwM0k2SksyMDZMNUk2TzS1MqgwS041STJMMUhJSkk1S02yXMQq5evo4ejiGqYQ7O8TGuLp7xes4OmnEOIa4RgMAKkO97FGAAAA&yv=3&cs=0&async=_fmt:jspb HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQSYCXCglgDRLELuFp0BPAnkFBpUmsilm_FZe5L8AEQH1BvRcClrNnupKvUWY_PPwvYsW6Py5dJ_TngBZnJXlP1qJAt2WlHqoeMkIb0ITyA2jwengQfkCFEXwDqfaX2_veHkHMwC4n89jBshcqbnb9dsfRfqRlgvcsDiFI
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAACAAAoICAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAICAAAEJCAAACAAAAAGABAIAAARBAAABAAAAAAAgQAAAAASKAfv8JAAAAAAAAAAAAAAgAEgAAAAAA4AIAgABQEAAAACAAAAADAAAADwAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAAAAAgQDQDwAAAAAAAAAAAAAgAAAAAACAARQAEMAPAAAAAAAAAgAAAAQBAAAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/d=0/dg=0/br=1/rs=ACT90oFg8gimsvEj0owM6Fr4zNgZiKS64A/m=sy900,sy8qw,sy8qx,sy1qs,sy1qw,sy1s3,sy3rt,sy1rv,sy1qz,sy1su,sy1rm,sy1rn,sy1r1,sy1r3,sy11o,sy11c,syn7,syn6,symx,symv,symt,sym3,syld,sy11n,sy4bz,sy3fm,sy3fn,sy3fl,sy3fo,sy3fh,sy3fp,sy3d3,sy234,sy235,synn,synm,synl,synk,synj,syni,synh,syng,synf,syne,syna,syn9,syn8,syn5,syn4,syn3,syn2,syn1,syn0,symz,symw,symu,syms,symr,symq,symn,symm,syml,symk,symj,symi,symh,symf,syme,symd,symc,symb,syma,sym9,sym7,sym6,sym5,sym4,sym2,sym1,sym0,sylz,syly,sylx,sylw,sylv,sylt,syls,sylq,sylp,syln,sylm,syll,sylk,sylj,syli,sylh,syle,sylc,syk0,syl9,syl8,sy236,sy1ez,sy1ey,sy2fy,sy2g8,sy1wd,sy1wc,sy1w8,sy1w9,sy1wa,sy1vn,sy1w6,sy1w7,sy1w5,sy1wb,sy1w3,sy1th,sy1u3,sy8zs,sy219,sy20q,sy1zv,sy2ea,sy90l,sy1u7,sy90i,sy90j,sy1tv,sy90g,sy8zt,sy8zu,sy1ds,sy90h,sy1rg,sy2bb,sy8zv,sy8zq,sy8zm,sy2b9,sy2b7,sy2dd,sy1wq,sy1x1,sy1wt,sy8zx,sy8qm,sy8rq,sy8r7,sy8qa,sy1qv,sy4cv,sy1qt,sy2bj,sy2bf,sy1r7,sy3ru,sy2bm,sy2bh,sy2bc,sy17e,sy1re,sy1rc,sy2bd,sy1ru,sy2ba,sy1t7,sy1rt,sy4c0,sy2ee,sy16w,sy2fz,sy2ga,sy2di,sy1xu,sy1xt,sy1xp,sy2dh,sy1qh,sy2dg,sy2d4,sy1wy,sy1wx,sy1ww,sy1ws,sy1wr,sy1pm,sy1wu,sy1x0,sy8zi,sy2k1,sy2eq,sy10l,sy1fc,sy2er,sy2e9,sy2e5,sy2ep,sy2be,sy1rx,sy21e,sy2eb,sy90f,sy90r,sy90p,sy8r0,sy8r4,sy666,sy1yk,Yo9XHf,sy667,iP9a1d,sy1qd,sy269,sy266,sy268,sy265,sy263,sy262,sy25z,sy25w,sy25x,sy25u,sy25q,sy25k,sy25j,sy25l,sy260,sy25d,sy25b,sy259,sy255,sy24v,sy24x,sy24u,sy1yd,sy254,sy24y,sy1rr,sy15r,w1HaZb,sy7uw,sy7uv,sy6br,sy52t,sy51t,sy1pi,sy2au,QPRQHf,sy7v8,sy1pp,sy1po,sy1pn,sy1ph,sy7v1,sy7uz,sy7uy,sy1pv,sy1py,sy1ps,sy1pr,sy7vb,sy7vc,sy7v7,sy1y1,sy7v6,sy7v4,sy7v3,sy7v5,sy7um,sy73t,sy2ar,sy2at,sy1q1,syzp,Hjq1Uc,sy831,sy830,sy6da,I8LNlc,sy399,sy392,sy393,sy2t8,sy398,sy39o,sy39n,sy38z,sy39l,sy39k,KHourd,sy3wp,T5VV,sy2sa,aDVF7,sy6e9,rhYw1b,sy2jq,sy2jo,sy2kn,sy2ko,Tia57b,KpRAue,sy2kp,NyeqM,sy39e,sy39d,sy397,O9SqHb,M6QgBb,sy188,sy187,sy16e,sy166,sy165,sy186,sy185,sy183,sy169,syss,EO13pd,sy2mb,I9y8sd,MpJwZc,UUJqVe,sy81,sOXFj,oGtAuc,sy8w,sy8v,q0xTif,sy4kp,sypf,sy4c2,sy38r,sy4c4,sy1wo,sy1wp,epYOx,RagDlc?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQS
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAACAAAoICAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAICAAAEJCAAACAAAAAGABAIAAARBAAABAAAAAAAgQAAAAASKAfv8JAAAAAAAAAAAAAAgAEgAAAAAA4AIAgABQEAAAACAAAAADAAAADwAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAAAAAgQDQDwAAAAAAAAAAAAAgAAAAAACAARQAEMAPAAAAAAAAAgAAAAQBAAAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/d=0/dg=0/br=1/rs=ACT90oFg8gimsvEj0owM6Fr4zNgZiKS64A/m=sb_wiz,aa,abd,sy2ms,async,sy1kx,bgd,sy7ro,foot,sy1p9,kyn,sy1z6,sy2jt,lli,sf,syy0,syy1,sy4k7,sonic,TxCJfd,sy80z,qzxzOb,IsdWVc,sy811,sy2o8,sy3ap,sy141,sy1nn,sy1no,spch,tl,sy36q,sy36o,syya,sy36p,syzn,EkevXb,sy1ms,fiAufb,sy1ir,SZXsif,sy7hd,sy7s2,sy5zf,sYEX8b,sy1n4,NEW1Qc,xBbsrc,sy1n7,sy1n6,IX53Tb,ma4xG,sy167,sy163,sy164,sy15q,sy161,syue,syud,syul,syuj,syug,syu8,syu9,syuc,syuo,sy17w,sysr,E9M6Uc,syuq,syup,NO84gd,b5lhvb,IoGlCf,sysk,sysj,C8HsP,syuu,syus,syub,syst,gOTY1,syvw,syvt,syvu,syvj,syvm,syvx,syvs,syvq,syvo,syv1,syuz,syvr,syvn,PbHo4e,sy5eb,sy16x,zGLm3b,sy369,hnlzI,sy1jb,sy1ja,ggQ0Zb,sy1g2,sy1g3,Qj0suc,JXS8fb,sy1g0,NdLnDf,sy1fs,QKZgZd,sy1gl,sy1gj,sy1fy,sy1gi,sy1gd,sy1gc,sy1ge,sy1g8,sy1gg,sy1ga,sy1gb,sy1g5,sy1fv,Wct42,sy1gn,sy1eh,sypj,syo1,sypk,sy1ew,sy1ev,sy1eu,synd,sync,symo,sy1et,sy1er,sy1eq,sy1ep,sy1en,sy1em,sy1el,sy1ek,sy1ej,sy1ei,sy1gm,LiBxPe,syg1,BYwJlf,sy13k,sy13h,sy13g,VEbNoe,sy13m,eX5ure,sy1x7,syzi,syzj,sy1j3,syzk,lWLF5b,sy37z,sy2su,sy2sv,sy1zb,sy24t,vH4ZEb,sy33k,RdVOmb,sy384,teJewe,sy383,sy31b,b1qkGc,sy1jd,sy1jc,aaBoAd,sy1ea,sy1eb,dt4g2b,w9w86d,sy38a,sy389,sy387,sy25g,sy250,sy1nx,sy2do,sy385,sy388,sy2ie,SHXTGd,sy5st,nLBNM,sy3hd,sy3hg,sy3he,sy3hf,E6S4tc,sy1pb,sy3hk,sy3hi,sy2ht,sy2hq,sy2hs,sy2hv,sy13z,sy3hl,sy3hj,sy3hh,yMbBpb,sy77x,HQESbc,sy8ci,sy8bv,sy267,sy28s,sy32m,sy8bw,sy781,sy2if,pE1Zse,sy780,Tzy10b,sy24f,OYRyoe,sy26y,sy26x,A4UTCb,e2QYhf,sy2zw,sy2zs,sy2zv,VXdfxd,sy270,V3dDOb,sy33h,sy1bj,eY7ywe,fPxN5b,sy30b,sy309,N5Lqpc,sy2i6,OjjPDd,sy33i,dgEsDd,sy1ud,sy33b,sy33a,sy1u4,sy1rd,sy2de,sy28i,sy28m,sy21u,pa67Ne,sy33n,sy33m,sy33l,sy33e,sy2oe,sy2b8,sy1j6,sy1j9,sy1j7,sy1bi,JHI4cb,sy33o,ObNzgb,x9N9ie,ucGLNb,LsNahb,sy1p6,eSZ0Oc,sy1p5,sy1p4,SLH9Ic,sy1pc,nlUz0e,sy1pa,riI83,sy1pd,HxvWab,sy8zn,sy64j,sy5qa,T4Tncb,xh9Dkb,Pq506,z2eFcc,eTVOC,GRSrSe,KTfMfd,UTbeEe,UWPTnc,g0Ekse,U8HkDd,aVswRb,NeaQsb,NQ9Vxb,cpFMEb,fr3s0b,yN4Qsc,kV5eWc,aQA7ac,ts6oTe,f49kBd,YlMcGe,XTmxwe,OjtwQe,SQAZFd,MafjZe,BmbBtc,y05UD,Oj465e,sy8zf,sy529,sy1qg,sy8zj,sy8zl,sy664,sy4dm,fm2FOd,sy637,r8Ivpf,sy90q,sy90m,sy90e,sy90d,sy902,sy8zw,sy8zy,sy90b,sy2d9,sy1r2,sy2da?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9Iz
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /client_204?cs=1&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQSYCXCglgDRLELuFp0BPAnkFBpUmsilm_FZe5L8AEQH1BvRcClrNnupKvUWY_PPwvYsW6Py5dJ_TngBZnJXlP1qJAt2WlHqoeMkIb0ITyA2jwengQfkCFEXwDqfaX2_veHkHMwC4n89jBshcqbnb9dsfRfqRlgvcsDiFI; DV=Q2KCjQvmivYSMLoqspk1c5Fn6-O3Kxk
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAACAAAoICAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAICAAAEJCAAACAAAAAGABAIAAARBAAABAAAAAAAgQAAAAASKAfv8JAAAAAAAAAAAAAAgAEgAAAAAA4AIAgABQEAAAACAAAAADAAAADwAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAAAAAgQDQDwAAAAAAAAAAAAAgAAAAAACAARQAEMAPAAAAAAAAAgAAAAQBAAAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/d=0/dg=0/br=1/rs=ACT90oFg8gimsvEj0owM6Fr4zNgZiKS64A/m=sy5z0,sy3t2,DpX64d,uKlGbf,sy5z1,EufiNb,sy1ne,P10Owf,sy1hl,sy1hi,gSZvdb,WlNQGd,sy3ld,sy3lc,nabPbb,sy5pc,sy5pb,sy1bs,sy1j5,VD4Qme,sy6yv,sy3dw,sG005c,sy7yk,sy6yy,ZYZddd,sy7yl,sy6yw,peG5,sy6yz,sywb,sywg,sywf,SrMpob,sy7eq,sy2sd,SC7lYd,sy36n,rhe7Pb,sy1fu,n7qy6d,sy1fw,HPGtmd,sy1fx,uLYJpc,sy37w,tuZ5Wc,sy37v,bbfkFf,sy38c,EqdXlc,syfv,pU86Hd,dOwROe,zCncvb,sy2dt,sy7wm,sy2dr,sy8hr,sy28r,sy28x,sy28t,sy28q,sy28w,sy7zl,sy7zn,sy7wg,sy7wk,sy7wl,sy7wh,sy68i,X53Qnb,sy26p,O6y8ed,ZgGg9b,dIoSBb,b6knsb,sy12s,sy2jm,sydi,sydg,sy9z,sydk,sy2k7,JKoKVe,pXdRYb,sy4d7,sya0,sy9y,sy9x,sy8i,O1Gjze,TtcOte,wR5FRb,sy8tj,sy68j,J8jp6c,sy482,I6YDgd,syew,sydc,syev,syeu,syet,syes,syer,syeq,syep,syeo,syen,sye9,syel,sydn,sydo,syek,sybf,sye7,syej,syds,sydt,syeh,sydr,syeg,sydq,sye6,syef,sye5,syee,sye4,syed,sydu,sye3,syeb,sye2,syea,sye1,sye0,sydp,sydz,sydl,sydy,sydw,sydv,sye8,sydm,syde,sya4,sy7w,zbML3c,sy68l,WV0Qzb,g1ab0d,iRGlHb,VJjNif,sy8vo,sy68n,sAKfwc,sFczq,heHB1,sy2af,tuC8xe,sy8ti,sy8tz,sy8u1,sy8tx,sy8v1,sy4jm,sy8ul,sy8ro,sy8vp,sy1ut,sy1uu,sy1ur,sy1us,sy1uv,sy1un,sy1uo,sy1up,sy1ug,sy1uh,sy1c1,sy1um,sy1uk,sy1uz,sy1uj,sy1ul,sy1v0,sy8ty,sy4ef,sy5qr,sy4ee,sy1c0,sy5qq,sy5qs,sy8v2,sy274,sy68p,sy68q,fd7wz,sy26t,i5H9N,sy275,i5dxUd,sy8jg,sy6g9,sy27g,sy26o,sy1a3,qNG0Fc,sy5rw,sy5rx,sy5rv,sy27q,sy27o,sy276,sy27c,PHUIyb,sy8jh,sy6ga,sy1b0,ywOR5c,wg1P6b,sy30z,QqJ8Gd,sy4f4,HdB3Vb,sy5q8,ovIBV,sy4f5,yPDigb,sy5q9,XHXkqb,sy77y,sy376,sy374,sy1f4,sy1f5,sy375,sy373,sy372,sy371,sy36z,sy331,sy370,h9yvRb,sy8zg,sy65h,VFLpVe,MZQCA,sy66b,fK8Ihd,sy4a5,sy4bf,sy90n,sy65b,spYpfd,sy90t,sy65c,siOBCb,sy66m,m1MA8,sy1mr,sy1mq,q00IXe,sy1mw,sy1mv,sy1mt,Fh0l0,sy3a7,qcH9Lc,sy39a,gCngrf,pjDTFb,sy39j,sy2gh,KgxeNb,sy39f,khkNpe?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /eu_cookie_notice?responsive HTTP/1.1Host: www.yelp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE
Source: global traffic	HTTP traffic detected: GET /async/bgasy?ei=YXgZZ8LxFJqH9u8P6dbR8Qo&opi=89978449&authuser=1&hl=en&mat=CVQRu4gXOCuRElcBEKoLaWdOjq4TJdno4nxViy74uAG1sLRS3AEIR-IwF6cFkJiNrV-puB2zAvKg2o2NOfRFtXSKhfUWzInkf-MWDXzXcDEuo6l_fYsBx9hA0M3tfX-_saM&stick=H4sIAAAAAAAA_-NgU1I1qLAwM0k2SksyMDZMNUk2TzS1MqgwS041STJMMUhJSkk1S02yXMQq5evo4ejiGqYQ7O8TGuLp7xes4OmnEOIa4RgMAKkO97FGAAAA&yv=3&cs=0&async=_fmt:jspb HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; NID=518=U8vo54PUOuR3Q3IX_PrwEsoR__GX25h_2keLzmQSYCXCglgDRLELuFp0BPAnkFBpUmsilm_FZe5L8AEQH1BvRcClrNnupKvUWY_PPwvYsW6Py5dJ_TngBZnJXlP1qJAt2WlHqoeMkIb0ITyA2jwengQfkCFEXwDqfaX2_veHkHMwC4n89jBshcqbnb9dsfRfqRlgvcsDiFI; DV=Q2KCjQvmivYSMLoqspk1c5Fn6-O3Kxk
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.JQvI3TbmN8g.L.B1.O/am=QOoQIAQAAAQAREADEAAAAAAAAAAAAAAAAAAAAAAgAQAAIAAAAAAAAAIAIAIAoEwCAADICwAAsAEAAQAAPkAAjgoAGAAAAAAAAEACAAAAAAIgAECFAAAAAAAAAAABAQAgAAARQAAAQCEAAAAAIAAAABgAAAAAQAgQAEAAAyAEAAKQgABQEIB-FAIAAAADAAAID-EAhgEIKgAYwFEAAAAAAAAAAAAAEACEAAAAgIAAACBAAIAegQAwAABpIAIABAEAARQBgAAAABAAAAAAEEAgAABiJgAOyAAEAAAAAAAAABIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAgA/d=0/br=1/rs=ACT90oEh6kJdYmfESHG-JPbQVjjDSttVVg/m=dOwROe,zCncvb,I6YDgd,g1ab0d,sy8vo,sy8tz,sy8u1,sy8tx,sy4jm,sy8ul,sy8ro,sy8vp,sy1ut,sy1uu,sy1ur,sy1us,sy1uv,sy1un,sy1uo,sy1up,sy1ug,sy1uh,sy1c1,sy1um,sy1uk,sy1uz,sy1uj,sy1ul,sy1v0,sy8ty,yPDigb,sy331,sy370,sy8zg,sy4a5,sy90n?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; DV=Q2KCjQvmivYSMLoqspk1c5Fn6-O3Kxk; NID=518=H4r1jtvMufy4SUTcxqkE9lS3UpOqwYu70NvA45MmmjltjXCZIydmJgR31bctb7LWOng7ERCusYMdhji4fpEiVQhNkoDqrUL8xAsOJ8P4uh3JE8NIMlTitB2xOPGJvS7XuNZolSP2DW20R8f5bcqnjeQOq1doNoPIE0YViFsNAU2DGfJ3WEwv84FV8LVDHPwBrXXGN5MIrw36qHQY6If9Cg
Source: global traffic	HTTP traffic detected: GET /consent/5fbcd417-fbc1-4fcc-abad-f622f1bba72d/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAACAAAoICAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAICAAAEJCAAACAAAAAGABAIAAARBAAABAAAAAAAgQAAAAASKAfv8JAAAAAAAAAAAAAAgAEgAAAAAA4AIAgABQEAAAACAAAAADAAAADwAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAAAAAgQDQDwAAAAAAAAAAAAAgAAAAAACAARQAEMAPAAAAAAAAAgAAAAQBAAAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/d=0/dg=0/br=1/rs=ACT90oFg8gimsvEj0owM6Fr4zNgZiKS64A/m=sy5z0,sy3t2,DpX64d,uKlGbf,sy5z1,EufiNb,sy1ne,P10Owf,sy1hl,sy1hi,gSZvdb,WlNQGd,sy3ld,sy3lc,nabPbb,sy5pc,sy5pb,sy1bs,sy1j5,VD4Qme,sy6yv,sy3dw,sG005c,sy7yk,sy6yy,ZYZddd,sy7yl,sy6yw,peG5,sy6yz,sywb,sywg,sywf,SrMpob,sy7eq,sy2sd,SC7lYd,sy36n,rhe7Pb,sy1fu,n7qy6d,sy1fw,HPGtmd,sy1fx,uLYJpc,sy37w,tuZ5Wc,sy37v,bbfkFf,sy38c,EqdXlc,syfv,pU86Hd,dOwROe,zCncvb,sy2dt,sy7wm,sy2dr,sy8hr,sy28r,sy28x,sy28t,sy28q,sy28w,sy7zl,sy7zn,sy7wg,sy7wk,sy7wl,sy7wh,sy68i,X53Qnb,sy26p,O6y8ed,ZgGg9b,dIoSBb,b6knsb,sy12s,sy2jm,sydi,sydg,sy9z,sydk,sy2k7,JKoKVe,pXdRYb,sy4d7,sya0,sy9y,sy9x,sy8i,O1Gjze,TtcOte,wR5FRb,sy8tj,sy68j,J8jp6c,sy482,I6YDgd,syew,sydc,syev,syeu,syet,syes,syer,syeq,syep,syeo,syen,sye9,syel,sydn,sydo,syek,sybf,sye7,syej,syds,sydt,syeh,sydr,syeg,sydq,sye6,syef,sye5,syee,sye4,syed,sydu,sye3,syeb,sye2,syea,sye1,sye0,sydp,sydz,sydl,sydy,sydw,sydv,sye8,sydm,syde,sya4,sy7w,zbML3c,sy68l,WV0Qzb,g1ab0d,iRGlHb,VJjNif,sy8vo,sy68n,sAKfwc,sFczq,heHB1,sy2af,tuC8xe,sy8ti,sy8tz,sy8u1,sy8tx,sy8v1,sy4jm,sy8ul,sy8ro,sy8vp,sy1ut,sy1uu,sy1ur,sy1us,sy1uv,sy1un,sy1uo,sy1up,sy1ug,sy1uh,sy1c1,sy1um,sy1uk,sy1uz,sy1uj,sy1ul,sy1v0,sy8ty,sy4ef,sy5qr,sy4ee,sy1c0,sy5qq,sy5qs,sy8v2,sy274,sy68p,sy68q,fd7wz,sy26t,i5H9N,sy275,i5dxUd,sy8jg,sy6g9,sy27g,sy26o,sy1a3,qNG0Fc,sy5rw,sy5rx,sy5rv,sy27q,sy27o,sy276,sy27c,PHUIyb,sy8jh,sy6ga,sy1b0,ywOR5c,wg1P6b,sy30z,QqJ8Gd,sy4f4,HdB3Vb,sy5q8,ovIBV,sy4f5,yPDigb,sy5q9,XHXkqb,sy77y,sy376,sy374,sy1f4,sy1f5,sy375,sy373,sy372,sy371,sy36z,sy331,sy370,h9yvRb,sy8zg,sy65h,VFLpVe,MZQCA,sy66b,fK8Ihd,sy4a5,sy4bf,sy90n,sy65b,spYpfd,sy90t,sy65c,siOBCb,sy66m,m1MA8,sy1mr,sy1mq,q00IXe,sy1mw,sy1mv,sy1mt,Fh0l0,sy3a7,qcH9Lc,sy39a,gCngrf,pjDTFb,sy39j,sy2gh,KgxeNb,sy39f,khkNpe?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; DV=Q2KCjQvmivYSMLoqspk1c5Fn6-O3Kxk; NID=518=H4r1jtvMufy4SUTcxqkE9lS3UpOqwYu70NvA45MmmjltjXCZIydmJgR31bctb7LWOng7ERCusYMdhji4fpEiVQhNkoDqrUL8xAsOJ8P4uh3JE8NIMlTitB2xOPGJvS7XuNZolSP2DW20R8f5bcqnjeQOq1doNoPIE0YViFsNAU2DGfJ3WEwv84FV8LVDHPwBrXXGN5MIrw36qHQY6If9Cg
Source: global traffic	HTTP traffic detected: GET /tags.js HTTP/1.1Host: js.datadome.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5fbcd417-fbc1-4fcc-abad-f622f1bba72d/5fbcd417-fbc1-4fcc-abad-f622f1bba72d.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yelp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/pixel/ndp.js HTTP/1.1Host: ads.nextdoor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yelp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5fbcd417-fbc1-4fcc-abad-f622f1bba72d/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5fbcd417-fbc1-4fcc-abad-f622f1bba72d/5fbcd417-fbc1-4fcc-abad-f622f1bba72d.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tags.js HTTP/1.1Host: js.datadome.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/?ad_log=referer&action=lead&pixid=2965db79-cd49-40fa-bba6-b0a211106cf5&gtmcb=592848751 HTTP/1.1Host: data.adxcel-ec2.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/pixel/ndp.js HTTP/1.1Host: ads.nextdoor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/ HTTP/1.1Host: api-js.datadome.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /biz_photos/get_ad_unit_biz_photos/ogzSnQjr8XF5mSz_UeOLUw HTTP/1.1Host: www.yelp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: application/x-www-form-urlencoded; charset=utf-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115
Source: global traffic	HTTP traffic detected: GET /pixel?pid=64139e27-5f3c-4fd5-aa5a-482b1b5ee7e7&vrs=8.4&ev=PAGE_VIEW&pl=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ndclid=&ndclid_src=0&rf=https%3A%2F%2Fwww.google.com%2F&sem=&tm=GTM&iid=350cd33e-1b60-4f03-94ba-07578ae2582b&pageid=4cc1f6ef-40ea-4275-911e-22af8dc1955e&sessionid=21829f7b-de0f-41f4-932e-635ce2678115&cd=%7B%7D HTTP/1.1Host: flask.nextdoor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /biz/ogzSnQjr8XF5mSz_UeOLUw/props?original_request_id=f38964b1b681aa49328bfac909653be7 HTTP/1.1Host: www.yelp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/jsonX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF
Source: global traffic	HTTP traffic detected: GET /398766.gif?partner_uid=E9B56B66A29D8FBF HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/action/21024895.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=6372968;type=invmedia;cat=qr3hlsqk;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=312432028697? HTTP/1.1Host: 6372968.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212312278&puid=b7ceb037ae5c46b19e0433d89f1785f064c01ff2a907ba7d6d1f07a3ff620242&gtmcb=27014005 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/951236402?random=1729722485397&cv=11&fst=1729722485397&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /config/com/d97be1bd-5f4b-475f-a6a7-72374d9cf914.json?v=3.33.0-2409301510 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yelp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/i?pid=d97be1bd-5f4b-475f-a6a7-72374d9cf914&u_scsid=711e9d7a-cc8e-44a2-a73b-d9b7976be5f7&u_sclid=8bb84306-0ed8-4e17-bbb7-6ef958d33135 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/977086696383000?v=2.9.173&r=stable&domain=www.yelp.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CK6rGBIcChgIARCSjQEaEEU5QjU2QjY2QTI5RDhGQkYQABoNCPbw5bgGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=Rvu+JK7bPSi6Clki/Ui46QYb2NJbWXaZF8bHg2dNWao=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /action/0?ti=21024895&tm=gtm002&Ver=2&mid=19ea4acb-3603-4c3d-a45d-68a8f2189d28&bo=1&sid=12ee32a0918e11ef9118bd6aec4b9a05&vid=12ee3c90918e11ef9d754f430dcb3c8f&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=MAHADEV%20SOLUTIONS%20IN%20TEXAS,%20Carrollton,%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&p=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&r=https%3A%2F%2Fwww.google.com%2F&lt=9850&evt=pageLoad&sv=1&cdb=AQAQ&rn=802714 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?gdpr=0&ttd_pid=ltgs34y&ttd_tpi=1&ttd_puid=n9v_evkC3AajooSqGUb1ITJnWF_-MCxHkLSywMb3qDQ&ttd_puid=E9B56B66A29D8FBF&ttd_puid=biz_details HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-bin/m?ci=us-804377h&cg=0&cc=1&si=https%3A//www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2&rp=https%3A//www.google.com/&ts=compact&rnd=1729722485445 HTTP/1.1Host: secure-us.imrworldwide.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bunsen/api/bunsen/events/v1 HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN
Source: global traffic	HTTP traffic detected: GET /ad_syndication_user_tracking HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN
Source: global traffic	HTTP traffic detected: GET /spice?r=1e0f3aa778224ab9&log_ad_spice=1&pagevis=0&gablock=0&webdriver=0&languages=2&plugins=5&chrome=1&permissionsSpoofed=0&headlessVarCount=0 HTTP/1.1Host: www.yelp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN
Source: global traffic	HTTP traffic detected: GET /p/action/21024895.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-AB=cc8f398e6c2d4b84b15908c5e6ccf9a3
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CIKXh7PGpYkDFdGJgwcdeU0U8Q;src=6372968;type=invmedia;cat=qr3hlsqk;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=312432028697? HTTP/1.1Host: 6372968.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/yelp?buyer_user_id=E9B56B66A29D8FBF&flow=biz_details&signature=WHasXwfzXSJpn5fQ4MfZyznT7fuAweNhesXWtuqgHAQ HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/?ad_log=referer&action=lead&pixid=2965db79-cd49-40fa-bba6-b0a211106cf5&gtmcb=592848751 HTTP/1.1Host: data.adxcel-ec2.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /biz_photos/get_ad_unit_biz_photos/ogzSnQjr8XF5mSz_UeOLUw HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel
Source: global traffic	HTTP traffic detected: GET /biz/ogzSnQjr8XF5mSz_UeOLUw/props?original_request_id=f38964b1b681aa49328bfac909653be7 HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel
Source: global traffic	HTTP traffic detected: GET /config/com/d97be1bd-5f4b-475f-a6a7-72374d9cf914.json?v=3.33.0-2409301510 HTTP/1.1Host: tr.snapchat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAAXBiQ0AIAgEsIlI+C6H46iRKRjett5J0kMMBUluSDVUOlQDnZe2Zoy+6J7F0Q9NlUXkMgAAAA==
Source: global traffic	HTTP traffic detected: GET /api/sync?pid=5324&it=1&iv=499e95a30926cd48d1bee49ad96b953832cf35d56478e474a9b1c29a9a40c6ca791426b5417dce21&_=2 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gql/batch HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-AB=cc8f398e6c2d4b84b15908c5e6ccf9a3
Source: global traffic	HTTP traffic detected: GET /cs/35382585/beacon.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_syndication_user_tracking HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?gdpr=0&ttd_pid=ltgs34y&ttd_tpi=1&ttd_puid=n9v_evkC3AajooSqGUb1ITJnWF_-MCxHkLSywMb3qDQ&ttd_puid=E9B56B66A29D8FBF&ttd_puid=biz_details HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=d7c57948-9bdf-462b-b924-29f49e3ed279; TDCPM=CAEYBSgCMgsIoseIspbvuT0QBTgB
Source: global traffic	HTTP traffic detected: GET /spice?r=1e0f3aa778224ab9&log_ad_spice=1&pagevis=0&gablock=0&webdriver=0&languages=2&plugins=5&chrome=1&permissionsSpoofed=0&headlessVarCount=0 HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/951236402/?random=1729722485397&cv=11&fst=1729720800000&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDpaXnfy6T6oVHAIHIloyfuayr-MrACtuYRxw&random=1824144605&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=H4r1jtvMufy4SUTcxqkE9lS3UpOqwYu70NvA45MmmjltjXCZIydmJgR31bctb7LWOng7ERCusYMdhji4fpEiVQhNkoDqrUL8xAsOJ8P4uh3JE8NIMlTitB2xOPGJvS7XuNZolSP2DW20R8f5bcqnjeQOq1doNoPIE0YViFsNAU2DGfJ3WEwv84FV8LVDHPwBrXXGN5MIrw36qHQY6If9Cg
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/951236402/?random=1729722485397&cv=11&fst=1729722485397&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212312278&puid=b7ceb037ae5c46b19e0433d89f1785f064c01ff2a907ba7d6d1f07a3ff620242&gtmcb=27014005 HTTP/1.1Host: aa.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3ADA8yPeXZa1ml6gIdPJWnPUeP9GWMCBHr
Source: global traffic	HTTP traffic detected: GET /cgi-bin/m?ci=us-804377h&cg=0&cc=1&si=https%3A//www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2&rp=https%3A//www.google.com/&ts=compact&rnd=1729722485445&ja=1 HTTP/1.1Host: secure-us.imrworldwide.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IMRID=13db7df0-918e-11ef-b3a7-b1d75391e158
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: sp.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; sp=496809f7-179c-4a96-9888-934a371c4fd7
Source: global traffic	HTTP traffic detected: GET /cm/yelp/out?guv=E9B56B66A29D8FBF&flow=biz_details&signature=kbG3wrtgrFCn9XO5tkJ6Xi5EIiWwGYHCXX9SnR65CbM&advertisable=BHPKS4B4ONEJJMGH4QCJZR HTTP/1.1Host: d.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5fbcd417-fbc1-4fcc-abad-f622f1bba72d/018e65ff-a67f-7f4f-b853-6344ac39b6b1/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yelp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/yelp?buyer_user_id=E9B56B66A29D8FBF&flow=biz_details&signature=WHasXwfzXSJpn5fQ4MfZyznT7fuAweNhesXWtuqgHAQ&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/977086696383000?v=2.9.173&r=stable&domain=www.yelp.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gql/batch HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://6372968.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /tr/?id=977086696383000&ev=PageView&dl=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&rl=https%3A%2F%2Fwww.google.com%2F&if=false&ts=1729722487588&sw=1280&sh=1024&v=2.9.173&r=stable&ec=0&o=4126&fbp=fb.1.1729722487587.201818684423825291&ler=other&cdl=API_unavailable&it=1729722485338&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=977086696383000&ev=PageView&dl=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&rl=https%3A%2F%2Fwww.google.com%2F&if=false&ts=1729722487588&sw=1280&sh=1024&v=2.9.173&r=stable&ec=0&o=4126&fbp=fb.1.1729722487587.201818684423825291&ler=other&cdl=API_unavailable&it=1729722485338&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /internal-cs/default/beacon.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_syndication_user_tracking HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN
Source: global traffic	HTTP traffic detected: GET /cookie_sync/?partner=TTD&ttd_puid=n9v_evkC3AajooSqGUb1ITJnWF_-MCxHkLSywMb3qDQ,E9B56B66A29D8FBF,biz_details&ttd_id=d7c57948-9bdf-462b-b924-29f49e3ed279 HTTP/1.1Host: www.yelp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291
Source: global traffic	HTTP traffic detected: GET /td/rul/951236402?random=1729722488554&cv=11&fst=1729722488554&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&label=9p_JCMzF7r8CELLuysUD&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yelp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yelp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yelp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/yelp/out?guv=E9B56B66A29D8FBF&flow=biz_details&signature=kbG3wrtgrFCn9XO5tkJ6Xi5EIiWwGYHCXX9SnR65CbM&advertisable=BHPKS4B4ONEJJMGH4QCJZR HTTP/1.1Host: d.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __adroll=ac79226d213f985e8181492836ed36e6-a_1729722488; receive-cookie-deprecation=1; receive-cookie-deprecation=1; __adroll_shared=ac79226d213f985e8181492836ed36e6-a_1729722488
Source: global traffic	HTTP traffic detected: GET /ad_syndication_user_tracking HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel
Source: global traffic	HTTP traffic detected: GET /b?c1=2&c2=35382585&cs_it=b9&cv=4.8.0%2B2408220935&ns__t=1729722489402&ns_c=UTF-8&cs_cfg=100&cs_fpid=E9B56B66A29D8FBF&cs_fpit=lo&c7=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&c8=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&c9=https%3A%2F%2Fwww.google.com%2F HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /biz_redir?url=http%3A%2F%2Fwww.astrologermahadeva.com&cachebuster=1729722476&website_link_type=website&src_bizid=ogzSnQjr8XF5mSz_UeOLUw&s=2207119eabed8617875c81781c9d1fa96ee4e4b69e140c7b3b8de5eb0c5bdb2e HTTP/1.1Host: www.yelp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0
Source: global traffic	HTTP traffic detected: GET /bunsen/api/bunsen/events/v1 HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2
Source: global traffic	HTTP traffic detected: GET /consent/5fbcd417-fbc1-4fcc-abad-f622f1bba72d/018e65ff-a67f-7f4f-b853-6344ac39b6b1/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-AB=cc8f398e6c2d4b84b15908c5e6ccf9a3If-None-Match: cc8f398e6c2d4b84b15908c5e6ccf9a3
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/951236402/?random=1729722485397&cv=11&fst=1729720800000&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDpaXnfy6T6oVHAIHIloyfuayr-MrACtuYRxw&random=1824144605&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; DV=Q2KCjQvmivYSMLoqspk1c5Fn6-O3Kxk; NID=518=H4r1jtvMufy4SUTcxqkE9lS3UpOqwYu70NvA45MmmjltjXCZIydmJgR31bctb7LWOng7ERCusYMdhji4fpEiVQhNkoDqrUL8xAsOJ8P4uh3JE8NIMlTitB2xOPGJvS7XuNZolSP2DW20R8f5bcqnjeQOq1doNoPIE0YViFsNAU2DGfJ3WEwv84FV8LVDHPwBrXXGN5MIrw36qHQY6If9Cg
Source: global traffic	HTTP traffic detected: GET /tr/?id=977086696383000&ev=PageView&dl=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&rl=https%3A%2F%2Fwww.google.com%2F&if=false&ts=1729722487588&sw=1280&sh=1024&v=2.9.173&r=stable&ec=0&o=4126&fbp=fb.1.1729722487587.201818684423825291&ler=other&cdl=API_unavailable&it=1729722485338&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=977086696383000&ev=PageView&dl=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&rl=https%3A%2F%2Fwww.google.com%2F&if=false&ts=1729722487588&sw=1280&sh=1024&v=2.9.173&r=stable&ec=0&o=4126&fbp=fb.1.1729722487587.201818684423825291&ler=other&cdl=API_unavailable&it=1729722485338&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=Zmxvb2RsaWdodF9jb25maWdfaWQ6IDYzNzI5NjgKYWR2ZXJ0aXNlcl9kb21haW46ICJodHRwczovL3llbHAuY29tIgp4ZmFfYXR0cmlidXRpb25faW50ZXJhY3Rpb25fdHlwZTogQ09OVkVSU0lPTgpkZWJ1Z19rZXk6IDE2MjE0NTA5MDkyMTczNDU3NjM4CmN0Y19jb252ZXJzaW9uX2J1Y2tldDogMwphcmNoZXR5cGVfaWQ6IDEyCmFyY2hldHlwZV9pZDogMTMKYXJjaGV0eXBlX2lkOiAxNAphcmNoZXR5cGVfaWQ6IDE1CmFyY2hldHlwZV9pZDogMTYKYXJjaGV0eXBlX2lkOiAxNwphcmNoZXR5cGVfaWQ6IDE4CmFyY2hldHlwZV9pZDogMTkKYXJjaGV0eXBlX2lkOiAyMAphcmNoZXR5cGVfaWQ6IDIxCmNvbnZlcnNpb25fbWVhc3VyZW1lbnRfZGltZW5zaW9uc19kYXRhIHsKICBtZWFzdXJlbWVudF9kaW1lbnNpb246IENPTlZFUlNJT05fRElNRU5TSU9OX0ZMT09ETElHSFRfQUNUSVZJVFlfSUQKICBtZWFzdXJlbWVudF9kaW1lbnNpb25fdmFsdWUgewogICAgaW50NjRfdmFsdWU6IDQ2NTAxMzkKICB9Cn0KY29udmVyc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogQ09OVkVSU0lPTl9ESU1FTlNJT05fQ09OVkVSU0lPTl9EQVRFCiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uX3ZhbHVlIHsKICAgIHN0cmluZ192YWx1ZTogIjIwMjQtMTAtMjMiCiAgfQp9CmJyb3dzZXJfYXR0cmlidXRpb25fYXBpX3JlcXVlc3RfcHJvY2Vzc2luZ19iaXRzOiA3Nzg3OTgzNjY3Mgp0cmlnZ2VyX2RlZHVwbGljYXRpb25fa2V5OiA3NjMwMDYxMDE3OTQ2Nzk0ODQxCmdhaWFfbW9kZTogZmFsc2UKZWNob19zZXJ2ZXJfYWN0aW9uOiBFQ0hPX1NFUlZFUl9BQ1RJT05fVVNFX0JFU1RfQVZBSUxBQkxFX0FSQQphZ2dyZWdhdGlvbl9jb29yZGluYXRvcjogQUdHUkVHQVRJT05fQ09PUkRJTkFUT1JfQVdTCg HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkZnp6F2S1ai1DotWz4Kd45MYneCjZyLTt-8FgKw-ziZqdyXtPUsuZJk-xG
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yelp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CIKXh7PGpYkDFdGJgwcdeU0U8Q;src=6372968;type=invmedia;cat=qr3hlsqk;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=312432028697 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; NID=518=H4r1jtvMufy4SUTcxqkE9lS3UpOqwYu70NvA45MmmjltjXCZIydmJgR31bctb7LWOng7ERCusYMdhji4fpEiVQhNkoDqrUL8xAsOJ8P4uh3JE8NIMlTitB2xOPGJvS7XuNZolSP2DW20R8f5bcqnjeQOq1doNoPIE0YViFsNAU2DGfJ3WEwv84FV8LVDHPwBrXXGN5MIrw36qHQY6If9Cg
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_company_logo.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie_sync/?partner=adroll&cookie_id=ac79226d213f985e8181492836ed36e6&guv=E9B56B66A29D8FBF&flow=biz_details&signature=kbG3wrtgrFCn9XO5tkJ6Xi5EIiWwGYHCXX9SnR65CbM&user_id= HTTP/1.1Host: www.yelp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0
Source: global traffic	HTTP traffic detected: GET /ad_syndication_user_tracking HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2
Source: global traffic	HTTP traffic detected: GET /cm/s?bt=1d53c387&pnid=140&cb=1729722490328&u_scsid=d0dae75b-0ca2-4a0b-8009-4b8149ff4e16&u_sclid=31386a3b-4363-4898-a776-065819170f4d HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tr.snapchat.com/cm/i?pid=d97be1bd-5f4b-475f-a6a7-72374d9cf914&u_scsid=711e9d7a-cc8e-44a2-a73b-d9b7976be5f7&u_sclid=8bb84306-0ed8-4e17-bbb7-6ef958d33135Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAAXBiQ0AIAgEsIlI+C6H46iRKRjett5J0kMMBUluSDVUOlQDnZe2Zoy+6J7F0Q9NlUXkMgAAAA==
Source: global traffic	HTTP traffic detected: GET /cgi-bin/m?ci=us-804377h&cg=0&cc=1&si=https%3A//www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2&rp=https%3A//www.google.com/&ts=compact&rnd=1729722485445&ja=1 HTTP/1.1Host: secure-us.imrworldwide.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IMRID=13db7df0-918e-11ef-b3a7-b1d75391e158
Source: global traffic	HTTP traffic detected: GET /cm/yelp/out?guv=E9B56B66A29D8FBF&flow=biz_details&signature=kbG3wrtgrFCn9XO5tkJ6Xi5EIiWwGYHCXX9SnR65CbM&advertisable=BHPKS4B4ONEJJMGH4QCJZR HTTP/1.1Host: d.adroll.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __adroll=ac79226d213f985e8181492836ed36e6-a_1729722488; __adroll_shared=ac79226d213f985e8181492836ed36e6-a_1729722488
Source: global traffic	HTTP traffic detected: GET /td/rul/951236402?random=1729722490188&cv=11&fst=1729722490188&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkZnp6F2S1ai1DotWz4Kd45MYneCjZyLTt-8FgKw-ziZqdyXtPUsuZJk-xG
Source: global traffic	HTTP traffic detected: GET /bunsen/api/bunsen/events/v1 HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; xcj=1\|xGIspgfVBaX8ukOGH8ZNEt-KVwpld_Hs05sUTWLw3QE; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722485..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722485.0.0.0; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2
Source: global traffic	HTTP traffic detected: GET /b2?c1=2&c2=35382585&cs_it=b9&cv=4.8.0%2B2408220935&ns__t=1729722489402&ns_c=UTF-8&cs_cfg=100&cs_fpid=E9B56B66A29D8FBF&cs_fpit=lo&c7=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&c8=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&c9=https%3A%2F%2Fwww.google.com%2F HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1299403e99619243c414fd11729722490; XID=1299403e99619243c414fd11729722490
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/864073483/?random=2034878431&cv=9&fst=1729722489205&num=1&label=SuCZCJq78m8Qi-6CnAM&bg=ffffff&hl=en&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=2&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2F6372968.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCIKXh7PGpYkDFdGJgwcdeU0U8Q%3Bsrc%3D6372968%3Btype%3Dinvmedia%3Bcat%3Dqr3hlsqk%3Bdc_lat%3D%3Bdc_rdid%3D%3Btag_for_child_directed_treatment%3D%3Bord%3D312432028697%3F&ref=https%3A%2F%2Fwww.yelp.com%2F&top=https%3A%2F%2Fwww.yelp.com%2F&capi=1&hn=www.googleadservices.com&fmt=1&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBKAFAAQ&pscrd=CIHBmYzL48Li_wEiEwiyl_60xqWJAxXF7REIHWh2CqMyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6JGh0dHBzOi8vNjM3Mjk2OC5mbHMuZG91YmxlY2xpY2submV0Lw HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://6372968.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkZnp6F2S1ai1DotWz4Kd45MYneCjZyLTt-8FgKw-ziZqdyXtPUsuZJk-xG
Source: global traffic	HTTP traffic detected: GET /internal-cs/default/beacon.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1299403e99619243c414fd11729722490
Source: global traffic	HTTP traffic detected: GET /cookie_sync/?partner=TTD&ttd_puid=n9v_evkC3AajooSqGUb1ITJnWF_-MCxHkLSywMb3qDQ,E9B56B66A29D8FBF,biz_details&ttd_id=d7c57948-9bdf-462b-b924-29f49e3ed279 HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1729699625151%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_syndication_user_tracking HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/951236402/?random=1310008035&cv=11&fst=1729722488554&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&label=9p_JCMzF7r8CELLuysUD&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&value=0&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBKAFAAUoVdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CJfA_K3AyMqjNiITCPba07TGpYkDFQ-Igwcd6GMTITICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoVaHR0cHM6Ly93d3cueWVscC5jb20vQldDaEVJOEwzaXVBWVFxc0h4b1BpNTlabnlBUklzQUlYRVI0WjI5TVlBcmpNWmZDc05GUmxhYkJvUjBGWjFtZW56T09lTFc4VGd4UDhWazZ5ZFh6UE1BMjg&is_vtc=1&cid=CAQSKQDpaXnfDRq12aEBGmCFkfUlvD4bn_DplW9ov7_WCA55DYhyQiLfi9uJ&eitems=ChAI8L3iuAYQspCI59jTx4IREh0AkdlsXhZjvsci_o4LEJg0AjcaROVO3oRioOjhuQ&random=3515892377 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=H4r1jtvMufy4SUTcxqkE9lS3UpOqwYu70NvA45MmmjltjXCZIydmJgR31bctb7LWOng7ERCusYMdhji4fpEiVQhNkoDqrUL8xAsOJ8P4uh3JE8NIMlTitB2xOPGJvS7XuNZolSP2DW20R8f5bcqnjeQOq1doNoPIE0YViFsNAU2DGfJ3WEwv84FV8LVDHPwBrXXGN5MIrw36qHQY6If9Cg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.yelp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU
Source: global traffic	HTTP traffic detected: GET /gql/batch HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie_sync/?partner=adroll&cookie_id=ac79226d213f985e8181492836ed36e6&guv=E9B56B66A29D8FBF&flow=biz_details&signature=kbG3wrtgrFCn9XO5tkJ6Xi5EIiWwGYHCXX9SnR65CbM&user_id= HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bunsen/api/bunsen/events/v1 HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_company_logo.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/864073483/?random=2034878431&cv=9&fst=1729722489205&num=1&label=SuCZCJq78m8Qi-6CnAM&bg=ffffff&hl=en&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=2&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2F6372968.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCIKXh7PGpYkDFdGJgwcdeU0U8Q%3Bsrc%3D6372968%3Btype%3Dinvmedia%3Bcat%3Dqr3hlsqk%3Bdc_lat%3D%3Bdc_rdid%3D%3Btag_for_child_directed_treatment%3D%3Bord%3D312432028697%3F&ref=https%3A%2F%2Fwww.yelp.com%2F&top=https%3A%2F%2Fwww.yelp.com%2F&capi=1&hn=www.googleadservices.com&fmt=1&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBKAFAAQ&pscrd=CIHBmYzL48Li_wEiEwiyl_60xqWJAxXF7REIHWh2CqMyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6JGh0dHBzOi8vNjM3Mjk2OC5mbHMuZG91YmxlY2xpY2submV0Lw&is_vtc=1&cid=CAQSKQDpaXnf9-VsYGYRd_KbPm7C8ni48h62sGm_XJ1Way_Ae6j61znjqn4v&random=3635528375&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://6372968.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=H4r1jtvMufy4SUTcxqkE9lS3UpOqwYu70NvA45MmmjltjXCZIydmJgR31bctb7LWOng7ERCusYMdhji4fpEiVQhNkoDqrUL8xAsOJ8P4uh3JE8NIMlTitB2xOPGJvS7XuNZolSP2DW20R8f5bcqnjeQOq1doNoPIE0YViFsNAU2DGfJ3WEwv84FV8LVDHPwBrXXGN5MIrw36qHQY6If9Cg
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: sp.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; sp=496809f7-179c-4a96-9888-934a371c4fd7; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push/check?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1729699625151%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1729722492575; TapAd_DID=48e68e70-e7c9-411c-b1a0-b4672c5f24da
Source: global traffic	HTTP traffic detected: GET /ad_syndication_user_tracking HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU
Source: global traffic	HTTP traffic detected: GET /cookie_sync/?partner=adroll&cookie_id=ac79226d213f985e8181492836ed36e6&guv=E9B56B66A29D8FBF&flow=biz_details&signature=kbG3wrtgrFCn9XO5tkJ6Xi5EIiWwGYHCXX9SnR65CbM&user_id= HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.10.0/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.astrologermahadeva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: http://www.astrologermahadeva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.10.0-10/css/fontawesome.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.astrologermahadeva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bunsen/api/bunsen/events/v1 HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.10.0-10/css/solid.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.astrologermahadeva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.10.0-10/css/brands.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.astrologermahadeva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/p?rand=1729699625151&pnid=140&pcid=48e68e70-e7c9-411c-b1a0-b4672c5f24da HTTP/1.1Host: tr.snapchat.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GyQ3AMAgEwIqQuFYL6caOQhUu3t/Ma+rbSXqIoSDJBamByoRqYPKl9bHUx+hN92w7v+oFfCLnJUAAAAA=
Source: global traffic	HTTP traffic detected: GET /ad_syndication_user_tracking HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/951236402/?random=1729722490188&cv=11&fst=1729720800000&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfR8UCIBLrYzWmI-fTBVmBuNO69mAEAej09VhiyXKoQnuFUAUr&random=2851491795&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=H4r1jtvMufy4SUTcxqkE9lS3UpOqwYu70NvA45MmmjltjXCZIydmJgR31bctb7LWOng7ERCusYMdhji4fpEiVQhNkoDqrUL8xAsOJ8P4uh3JE8NIMlTitB2xOPGJvS7XuNZolSP2DW20R8f5bcqnjeQOq1doNoPIE0YViFsNAU2DGfJ3WEwv84FV8LVDHPwBrXXGN5MIrw36qHQY6If9Cg
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/951236402/?random=1729722490188&cv=11&fst=1729722490188&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkZnp6F2S1ai1DotWz4Kd45MYneCjZyLTt-8FgKw-ziZqdyXtPUsuZJk-xG
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/951236402/?random=1310008035&cv=11&fst=1729722488554&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&label=9p_JCMzF7r8CELLuysUD&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&value=0&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBKAFAAUoVdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CJfA_K3AyMqjNiITCPba07TGpYkDFQ-Igwcd6GMTITICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoVaHR0cHM6Ly93d3cueWVscC5jb20vQldDaEVJOEwzaXVBWVFxc0h4b1BpNTlabnlBUklzQUlYRVI0WjI5TVlBcmpNWmZDc05GUmxhYkJvUjBGWjFtZW56T09lTFc4VGd4UDhWazZ5ZFh6UE1BMjg&is_vtc=1&cid=CAQSKQDpaXnfDRq12aEBGmCFkfUlvD4bn_DplW9ov7_WCA55DYhyQiLfi9uJ&eitems=ChAI8L3iuAYQspCI59jTx4IREh0AkdlsXhZjvsci_o4LEJg0AjcaROVO3oRioOjhuQ&random=3515892377 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; DV=Q2KCjQvmivYSMLoqspk1c5Fn6-O3Kxk; NID=518=H4r1jtvMufy4SUTcxqkE9lS3UpOqwYu70NvA45MmmjltjXCZIydmJgR31bctb7LWOng7ERCusYMdhji4fpEiVQhNkoDqrUL8xAsOJ8P4uh3JE8NIMlTitB2xOPGJvS7XuNZolSP2DW20R8f5bcqnjeQOq1doNoPIE0YViFsNAU2DGfJ3WEwv84FV8LVDHPwBrXXGN5MIrw36qHQY6If9Cg
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.10.0-10/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.astrologermahadeva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0-10/css/solid.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.10.0-10/webfonts/fa-brands-400.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.astrologermahadeva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0-10/css/brands.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_syndication_user_tracking HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: sp.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; sp=496809f7-179c-4a96-9888-934a371c4fd7; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU; _sctr=1%7C1729656000000
Source: global traffic	HTTP traffic detected: GET /td/rul/951236402?random=1729722497007&cv=11&fst=1729722497007&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&label=v8FUCO2blMACELLuysUD&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkZnp6F2S1ai1DotWz4Kd45MYneCjZyLTt-8FgKw-ziZqdyXtPUsuZJk-xG
Source: global traffic	HTTP traffic detected: GET /bunsen/api/bunsen/events/v1 HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU; _sctr=1%7C1729656000000
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/951236402/?random=1729722490188&cv=11&fst=1729720800000&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfR8UCIBLrYzWmI-fTBVmBuNO69mAEAej09VhiyXKoQnuFUAUr&random=2851491795&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; DV=Q2KCjQvmivYSMLoqspk1c5Fn6-O3Kxk; NID=518=H4r1jtvMufy4SUTcxqkE9lS3UpOqwYu70NvA45MmmjltjXCZIydmJgR31bctb7LWOng7ERCusYMdhji4fpEiVQhNkoDqrUL8xAsOJ8P4uh3JE8NIMlTitB2xOPGJvS7XuNZolSP2DW20R8f5bcqnjeQOq1doNoPIE0YViFsNAU2DGfJ3WEwv84FV8LVDHPwBrXXGN5MIrw36qHQY6If9Cg
Source: global traffic	HTTP traffic detected: GET /bunsen/api/bunsen/events/v1 HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; datadome=dCHwtvcfCfK5WzFSwWXECk8reS3NfFlVw1DRFjIX8gb7BAsTNehDJckVrZ5rdkaViNy0jcupwi_yzi2Gu~x93bywa29TJVcqLm4XsioREs_Sz91wecU0ThEn5MpqAQqN; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU; _sctr=1%7C1729656000000
Source: global traffic	HTTP traffic detected: GET /js/ HTTP/1.1Host: api-js.datadome.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/951236402/?random=1774765361&cv=11&fst=1729722497007&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&label=v8FUCO2blMACELLuysUD&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&value=0&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBKAFAAUoVZXZlbnQtc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CMHtjJXI8_jqdSITCNDCg7nGpYkDFaaOgwcduW0mOjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoVaHR0cHM6Ly93d3cueWVscC5jb20vQldDaEVJOEwzaXVBWVFxc0h4b1BpNTlabnlBUklzQUlYRVI0WnRWbGN1NmpCVTdKSEpEblcwYTJYUVFjdlBzRDBOdXpDb2YtdmZEV1dRQTQyaEhPbHB2Mkk&is_vtc=1&cid=CAQSKQDpaXnfTN0f4UBxokQwB0e4U4NsKft_5DpqNdvyfI9IbnyNONFopsLq&eitems=ChAI8L3iuAYQspCI59jTx4IREh0AkdlsXk7n-sHR0hBJPuNwTs_X85W5reHrKlO0_Q&random=550628778 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=H4r1jtvMufy4SUTcxqkE9lS3UpOqwYu70NvA45MmmjltjXCZIydmJgR31bctb7LWOng7ERCusYMdhji4fpEiVQhNkoDqrUL8xAsOJ8P4uh3JE8NIMlTitB2xOPGJvS7XuNZolSP2DW20R8f5bcqnjeQOq1doNoPIE0YViFsNAU2DGfJ3WEwv84FV8LVDHPwBrXXGN5MIrw36qHQY6If9Cg
Source: global traffic	HTTP traffic detected: GET /track/up?adv=igcouad&ref=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&upid=mvh4ai1&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=d7c57948-9bdf-462b-b924-29f49e3ed279; TDCPM=CAEYBSABKAIyCwiix4iylu-5PRAFOAE.
Source: global traffic	HTTP traffic detected: GET /track/up?adv=yi8ar6z&ref=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&upid=mtoaqgv&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=d7c57948-9bdf-462b-b924-29f49e3ed279; TDCPM=CAEYBSABKAIyCwiix4iylu-5PRAFOAE.
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/951236402/?random=1774765361&cv=11&fst=1729722497007&bg=ffffff&guid=ON&async=1&gtm=45be4al0h2z8834282230za201zb834282230&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823847&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&ref=https%3A%2F%2Fwww.google.com%2F&label=v8FUCO2blMACELLuysUD&hn=www.googleadservices.com&frm=0&tiba=MAHADEV%20SOLUTIONS%20IN%20TEXAS%2C%20Carrollton%2C%20Texas%20-%204132%20State%20Hwy%20121%20-%20Updated%20October%202024%20-%20Supernatural%20Readings%20-%20Phone%20Number%20-%20Yelp&value=0&npa=0&pscdl=noapi&auid=852335891.1729722483&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBKAFAAUoVZXZlbnQtc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CMHtjJXI8_jqdSITCNDCg7nGpYkDFaaOgwcduW0mOjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoVaHR0cHM6Ly93d3cueWVscC5jb20vQldDaEVJOEwzaXVBWVFxc0h4b1BpNTlabnlBUklzQUlYRVI0WnRWbGN1NmpCVTdKSEpEblcwYTJYUVFjdlBzRDBOdXpDb2YtdmZEV1dRQTQyaEhPbHB2Mkk&is_vtc=1&cid=CAQSKQDpaXnfTN0f4UBxokQwB0e4U4NsKft_5DpqNdvyfI9IbnyNONFopsLq&eitems=ChAI8L3iuAYQspCI59jTx4IREh0AkdlsXk7n-sHR0hBJPuNwTs_X85W5reHrKlO0_Q&random=550628778 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cpyGyv8Pd3cs7QgSTzkHIBP0_7Yk9IzzuoohNSZsVhRpWb8iiKPSQ; GZ=Z=0; DV=Q2KCjQvmivYSMLoqspk1c5Fn6-O3Kxk; NID=518=H4r1jtvMufy4SUTcxqkE9lS3UpOqwYu70NvA45MmmjltjXCZIydmJgR31bctb7LWOng7ERCusYMdhji4fpEiVQhNkoDqrUL8xAsOJ8P4uh3JE8NIMlTitB2xOPGJvS7XuNZolSP2DW20R8f5bcqnjeQOq1doNoPIE0YViFsNAU2DGfJ3WEwv84FV8LVDHPwBrXXGN5MIrw36qHQY6If9Cg
Source: global traffic	HTTP traffic detected: GET /track/up?adv=fdfm3qw&ref=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&upid=lr8je5k&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=d7c57948-9bdf-462b-b924-29f49e3ed279; TDCPM=CAEYBSABKAIyCwiix4iylu-5PRAFOAE.
Source: global traffic	HTTP traffic detected: GET /j/roundtrip.js HTTP/1.1Host: s.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; __adroll_shared=ac79226d213f985e8181492836ed36e6-a_1729722488
Source: global traffic	HTTP traffic detected: GET /ad_syndication_user_tracking HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722475897%7C1729722475897%7C1%7C7a3af5ebfa9e36a1; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722490..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.3; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU; _sctr=1%7C1729656000000; datadome=ETFlaZhRKi3nHRLJMf~cl7D_sszozX~5p7EXpR_u56bXdH0pZjBDq7XiPsjI6FMP~k5yjXdBRkLueZMITlxDstXqHVgCZgOhs5NfMPlXL3NvCIQ33bRbFZ~B4KTVbGM7
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=d7c57948-9bdf-462b-b924-29f49e3ed279; TDCPM=CAESEgoDYWFtEgsIkLvWpoHvuT0QBRIWCgdydWJpY29uEgsI2OXWpoHvuT0QBRIVCgZnb29nbGUSCwiUjNemge-5PRAFGAUoAzILCMiV2dOX77k9EAU4AUIEIgIIAVoHaWdjb3VhZGAB
Source: global traffic	HTTP traffic detected: GET /j/pre/BHPKS4B4ONEJJMGH4QCJZR/QB5JPFIKRZDSBOZSULG4YB/fpconsent.js HTTP/1.1Host: s.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; __adroll_shared=ac79226d213f985e8181492836ed36e6-a_1729722488
Source: global traffic	HTTP traffic detected: GET /j/pre/BHPKS4B4ONEJJMGH4QCJZR/QB5JPFIKRZDSBOZSULG4YB/index.js HTTP/1.1Host: s.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; __adroll_shared=ac79226d213f985e8181492836ed36e6-a_1729722488
Source: global traffic	HTTP traffic detected: GET /consent/check/BHPKS4B4ONEJJMGH4QCJZR?flg=1&pv=32582387593.18921&arrfrr=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&_s=12385e6b2534534460788442f4e53b3c&_b=2 HTTP/1.1Host: d.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __adroll=ac79226d213f985e8181492836ed36e6-a_1729722488; receive-cookie-deprecation=1; receive-cookie-deprecation=1; __adroll_shared=ac79226d213f985e8181492836ed36e6-a_1729722488
Source: global traffic	HTTP traffic detected: GET /j/roundtrip.js HTTP/1.1Host: s.adroll.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __adroll_shared=ac79226d213f985e8181492836ed36e6-a_1729722488; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=d7c57948-9bdf-462b-b924-29f49e3ed279 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bunsen/api/bunsen/events/v1 HTTP/1.1Host: www.yelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bse=6ffa543697254ba2949fff28d4410037; hl=en_US; wdi=2\|E9B56B66A29D8FBF\|0x1.9c65e1af95c36p+30\|966217f7aca938d4; _gcl_au=1.1.852335891.1729722483; ndp_session_id=21829f7b-de0f-41f4-932e-635ce2678115; spses.d161=*; _ga=GA1.2.E9B56B66A29D8FBF; _scid=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _scid_r=b3ADMmZFxKW4sAjJ9pFv4XKFz7wu8ZOo; _uetsid=12ee32a0918e11ef9118bd6aec4b9a05; _uetvid=12ee3c90918e11ef9d754f430dcb3c8f; _tt_enable_cookie=1; _ttp=tfIRJLPCBulGFNHaS-RpImrOhel; _fbp=fb.1.1729722487587.201818684423825291; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+23+2024+18%3A28%3A10+GMT-0400+(Eastern+Daylight+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&identifierType=Cookie+Unique+Id&hosts=&consentId=9db145a3-e4c9-4350-a8dc-da9afc418208&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&groups=BG122%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1%2CC0004%3A1; _ga_K9Z2ZEVC8C=GS1.2.1729722485.1.0.1729722490.0.0.0; xcj=1\|HsKeST_CNYeDyGCCVOBEFVETTpSaDAGsWO1EojCgCKU; _sctr=1%7C1729656000000; datadome=ETFlaZhRKi3nHRLJMf~cl7D_sszozX~5p7EXpR_u56bXdH0pZjBDq7XiPsjI6FMP~k5yjXdBRkLueZMITlxDstXqHVgCZgOhs5NfMPlXL3NvCIQ33bRbFZ~B4KTVbGM7; bsi=1%7Ca2252c92-1552-5786-b4dd-684b5e2343c0%7C1729722505975%7C1729722475897%7C1%7C5b93e2ca7563f345; spid.d161=ff81e09b-68f7-401b-8a40-d4db66c80808.1729722485.1.1729722506..5b495c69-3b68-41c9-8518-e3e952597c40..74dc9147-8fe3-4f4a-a014-5a1bcd7fa78c.1729722485013.4
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=d7c57948-9bdf-462b-b924-29f49e3ed279&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=d7c57948-9bdf-462b-b924-29f49e3ed279; TDCPM=CAESFwoIYXBwbmV4dXMSCwim0P-mge-5PRAFEhUKBmdvb2dsZRILCMj9_6aB77k9EAUSFgoHcnViaWNvbhILCIqggKeB77k9EAUYBSgDMgsIrJyC1JfvuT0QBUIPIg0IARIJCgV0aWVyMhABWgdmZGZtM3F3YAE.
Source: global traffic	HTTP traffic detected: GET /consent/check/BHPKS4B4ONEJJMGH4QCJZR?flg=1&pv=32582387593.18921&arrfrr=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&_s=12385e6b2534534460788442f4e53b3c&_b=2 HTTP/1.1Host: d.adroll.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __adroll=ac79226d213f985e8181492836ed36e6-a_1729722488; __adroll_shared=ac79226d213f985e8181492836ed36e6-a_1729722488; receive-cookie-deprecation=1; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /pixel/BHPKS4B4ONEJJMGH4QCJZR/QB5JPFIKRZDSBOZSULG4YB?adroll_fpc=0ba35a4484b87b533da39769f7eeaecf-1729722505953&flg=1&pv=32582387593.18921&arrfrr=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&cookie=&adroll_s_ref=https%3A//www.google.com/&keyw=&adroll_external_data=adroll_geoquad_v1%3D431807%26biz_id%3DogzSnQjr8XF5mSz_UeOLUw%26category_aliases%3Darts%252Cpsychic_astrology%26city%3DCarrollton%26flow%3Dbiz_details%26guv%3DE9B56B66A29D8FBF%26state%3DTX%26user_type%3D0%26adroll_shop_id%3DogzSnQjr8XF5mSz_UeOLUw&p0=27950 HTTP/1.1Host: d.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __adroll=ac79226d213f985e8181492836ed36e6-a_1729722488; receive-cookie-deprecation=1; receive-cookie-deprecation=1; __adroll_shared=ac79226d213f985e8181492836ed36e6-a_1729722488

Source: chromecache_730.6.dr, chromecache_287.6.dr	String found in binary or memory: "visibility",c?"visible":"hidden");this.Aa!==null&&this.Aa!==void 0\|\|this.Xa("R8pBHc").hide();c&&(this.Fa("pAZ6Ed").hide(),c=_.Weg(this.Ca),this.Fa("uu7Hed").toggle(c),this.Fa("axr9cd").toggle(!c))}Yia(a,b){this.trigger(_.wN,{button:""});_.Rn(a,{target:b?"_blank":"_self"});xHk(this,"fwibVc")}Pa(){var a={url:this.url};this.oa&&this.oa.length&&(a.text=this.oa);a=_.yHk("https://www.twitter.com/share",a);this.Yia(a,!0)}Qa(){const a=_.yHk("https://api.whatsapp.com/send",{text:(this.oa&&this.oa.length? equals www.twitter.com (Twitter)
Source: chromecache_726.6.dr	String found in binary or memory:  Mahadev Online Solutions</span></div><div class="byrV5b"><cite class="qLRx3b tjvcx GvPZzd cHaqb" role="text">20+ followers</cite></div></div></div></div><div class="csDOgf BCF2pd L48a4c"><div jscontroller="gOTY1" data-id="atritem-https://www.linkedin.com/company/mahadev-online-solutions" jsdata="PFrTzf;_;BPaS0I" data-viewer-group="1" jsaction="rcuQ6b:npT2md;aevozb:T2P31d;vcOT6c:C6KsF;k7WJpc:beCLof"><div><div jsdata="l7Bhpb;_;BPaS3w" jscontroller="PbHo4e" jsshadow="" jsaction="rcuQ6b:npT2md;h5M12e;jGQF0b:kNqZ1c;" data-viewer-entrypoint="1" data-ved="2ahUKEwiCpu2oxqWJAxWag_0HHWlrNK4Q2esEegQIZRAK"><div jsslot=""><div jsname="I3kE2c" class="MJ8UF iTPLzd rNSxBe eY4mx lUn2nc" style="position:absolute" aria-label="About this result" role="button" tabindex="0"><span jsname="czHhOd" class="D6lY4c mBswFe"><span jsname="Bil8Ae" class="xTFaxe z1asCe" style="height:18px;line-height:18px;width:18px"><svg focusable="false" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8c1.1 0 2-.9 2-2s-.9-2-2-2-2 .9-2 2 .9 2 2 2zm0 2c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2zm0 6c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2z"></path></svg></span></span></div></div></div></div></div></div></div></div></div></div><div class="kb0PBd A9Y9g" data-snf="nke7rc" data-sncf="1"><div class="VwiC3b yXK7lf lVm3ye r025kc hJNv6b Hdw6tb" style="-webkit-line-clamp:2"><span>External link for <em>Mahadev</em> Online <em>Solutions</em>. Industry: Spectator Sports. Company size: 11-50 employees. Headquarters: Woodway, <em>Texas</em>. Type: Self-Owned. Founded equals www.linkedin.com (Linkedin)
Source: chromecache_726.6.dr	String found in binary or memory: ...</span></div></div></div></div></div></div></div></div> <div class="TzHB6b j8lBAb p7kDMc cLjAic K7khPe" jsdata="PhoHd;_;BPaS1Q" data-hveid="CG4QAA" data-ved="2ahUKEwiCpu2oxqWJAxWag_0HHWlrNK4QubsFKAB6BAhuEAA"><div jsname="xQjRM"><div class="sATSHe"><div><div jscontroller="SC7lYd" class="g Ww4FFb vt6azd tF2Cxc asEBEc" lang="en" style="width:600px" jsaction="QyLbLe:OMITjf;ewaord:qsYrDe;xd28Mb:A6j43c" data-hveid="CGcQAA" data-ved="2ahUKEwiCpu2oxqWJAxWag_0HHWlrNK4QFSgAegQIZxAA"><div class="N54PNb BToiNc" data-snc="mImbHf"><div class="kb0PBd A9Y9g jGGQ5e" data-snf="x5WNvb" data-snhf="0"><div class="yuRUbf"><div><span jscontroller="msmzHf" jsaction="rcuQ6b:npT2md;PYDNKe:bLV6Bd;mLt3mc"><a jsname="UWckNb" href="https://www.linkedin.com/company/mahadev-online-solutions" data-ved="2ahUKEwiCpu2oxqWJAxWag_0HHWlrNK4QFnoECGUQAQ" ping="/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.linkedin.com/company/mahadev-online-solutions&ved=2ahUKEwiCpu2oxqWJAxWag_0HHWlrNK4QFnoECGUQAQ"><br><h3 class="LC20lb MBeuO DKV0Md">Mahadev Online Solutions</h3><div class="notranslate HGLrXd NJjxre iUh30 ojE3Fb"><div class="q0vns"><span class="H9lube"><div class="eqA2re NjwKYd Vwoesf" aria-hidden="true"><img class="XNo5Ab" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAm0lEQVR4AWP4//8/RRhMyLfs3sNQvOk/KRikB24ATNB2yhEQJtoQuAEwzVAAYtPVAMJe4Cjf8l+0bsd/RkIGQAGc/ej9t/+TDt/7/+vPXzD/6Yfv/+2nHSXWAAT49P33/z9//4HZl559JM2Aqm3XwXyXGcfA/H///pFmgFj9DjCfp3IrTIgkA5ADbbAbQA6mKDPp9x7YBTOAIgwAVba5DGceMlQAAAAASUVORK5CYII=" style="height:18px;width:18px" alt=""></div></span><div class="CA5RN"><div><span class="VuuXrf">LinkedIn  equals www.linkedin.com (Linkedin)
Source: chromecache_730.6.dr, chromecache_287.6.dr	String found in binary or memory: C3c(this);c.length&&(b.text=c);b=D3c("https://www.twitter.com/share",b);this.Yia(a,b,!0)}Ea(a){var b=C3c(this);let c;b=D3c("https://api.whatsapp.com/send",{text:this.cG(b,this.Ns(),((c=this.G1)==null?0:c.Aa())?"\n\n":" ")});this.Yia(a,b,!0)}Ca(a){const b=D3c("https://www.facebook.com/sharer/sharer.php",{u:this.Ns()});this.Yia(a,b,!0)}Ba(a){var b,c=(b=this.Ns())!=null?b:"",d;b=(d=C3c(this))!=null?d:"";d=this.W4();var e;c=this.cG(b,c,((e=this.G1)==null?0:e.Aa())?"\n\n":"\n");let f;if((f=this.Gn)==null? equals www.facebook.com (Facebook)
Source: chromecache_730.6.dr, chromecache_287.6.dr	String found in binary or memory: C3c(this);c.length&&(b.text=c);b=D3c("https://www.twitter.com/share",b);this.Yia(a,b,!0)}Ea(a){var b=C3c(this);let c;b=D3c("https://api.whatsapp.com/send",{text:this.cG(b,this.Ns(),((c=this.G1)==null?0:c.Aa())?"\n\n":" ")});this.Yia(a,b,!0)}Ca(a){const b=D3c("https://www.facebook.com/sharer/sharer.php",{u:this.Ns()});this.Yia(a,b,!0)}Ba(a){var b,c=(b=this.Ns())!=null?b:"",d;b=(d=C3c(this))!=null?d:"";d=this.W4();var e;c=this.cG(b,c,((e=this.G1)==null?0:e.Aa())?"\n\n":"\n");let f;if((f=this.Gn)==null? equals www.twitter.com (Twitter)
Source: chromecache_470.6.dr, chromecache_323.6.dr, chromecache_616.6.dr, chromecache_649.6.dr, chromecache_283.6.dr, chromecache_663.6.dr	String found in binary or memory: return b}jD.F="internal.enableAutoEventOnTimer";var hc=la(["data-gtm-yt-inspected-"]),lD=["www.youtube.com","www.youtube-nocookie.com"],mD,nD=!1; equals www.youtube.com (Youtube)
Source: chromecache_333.6.dr, chromecache_459.6.dr	String found in binary or memory: return b}nD.F="internal.enableAutoEventOnTimer";var gc=ma(["data-gtm-yt-inspected-"]),pD=["www.youtube.com","www.youtube-nocookie.com"],qD,rD=!1; equals www.youtube.com (Youtube)
Source: chromecache_363.6.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_363.6.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_363.6.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_730.6.dr, chromecache_287.6.dr	String found in binary or memory: this.oa+" ":"")+this.url});this.Yia(a,!0)}Na(){const a=_.yHk("https://www.facebook.com/sharer/sharer.php",{u:this.url});this.Yia(a,!0)}Sa(){const a=_.yHk("fb-messenger://share/",{link:this.url});this.Yia(_.fc(a,[_.Bk.asd]),!0)}Ba(){const a=_.yHk("sms:",{body:(this.oa&&this.oa.length?this.oa+" ":"")+this.url});this.Yia(_.fc(a,[_.Bk.zPb]),!1)}La(){if(this.Aa&&this.oa){var a=_.yHk("mailto:",{body:this.oa+"\n"+this.url+(this.Ga&&this.Da?"\n\n"+this.Da:""),subject:this.Aa});this.Yia(a,!0)}}}; equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: footboi.com
Source: global traffic	DNS traffic detected: DNS query: www.footboi.com
Source: global traffic	DNS traffic detected: DNS query: img.sedoparking.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: cc.sedoparking.com
Source: global traffic	DNS traffic detected: DNS query: monitor.clickcease.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: dns-tunnel-check.googlezip.net
Source: global traffic	DNS traffic detected: DNS query: tunnel.googlezip.net
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: www.yelp.com
Source: global traffic	DNS traffic detected: DNS query: s3-media0.fl.yelpcdn.com
Source: global traffic	DNS traffic detected: DNS query: js.datadome.co
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: ads.nextdoor.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: api-js.datadome.co
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: sc-static.net
Source: global traffic	DNS traffic detected: DNS query: data.adxcel-ec2.com
Source: global traffic	DNS traffic detected: DNS query: flask.nextdoor.com
Source: global traffic	DNS traffic detected: DNS query: sp.yelp.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: 6372968.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: secure-us.imrworldwide.com
Source: global traffic	DNS traffic detected: DNS query: tr.snapchat.com
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: d.adroll.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: www.astrologermahadeva.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: s.adroll.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net

Source: unknown

HTTP traffic detected: POST /search/cc.php?l=ogc1N_HoFBWDWzHiH-WH2WakAiRuJ-O92MyShJdxxr89B2yciNcZ32zquDdzueNmipWjJ13JIYKf-hGBkew9F2qTLxAAHNTISoRKbAl-sXpSs9HV4NCb02cAqomrDZktpu2k4mwVjHpR6yS71QCkzXsDBhWig5jLggqHQW1lm4BeV7ArH7kVGE1nHWib7XrGVIiLA6qmzqUMGetIitDiKuMt2uA3m98EmMizrXAoa2tCNe4hNhi07ZL3FmXXcLvHLe2arCs2kvwyFzZ8Day2v1KRb-PFZ19bhrtdYQ-KQsxOBXL_fK2WAlGSKuVZnNG-iJR9BKKrgePP3aKnf-FGK9aUvT2ySYSfilyHpZPEvfUWvKfzGAtwSb_fMkh07zcrLmWgvi0i77iEqsgwUFSbLrwKJErI1D9QVEbf6obVOFOzbc0jZ1Ua82PF0R9GiKsO_6G2gElzsUgB1DeuALcRq0lxdE87-7jSIgbK2v4VNoQj_Y31XA56ka8m3sCa7RqPRQ4Emvzv73dh_fxr7FKsLcw5Wo-OziECv2BrwdsJIYG2snrw6CaP1e0WkinE7qXjaWpSb-h7aGjR-73CCpKtDNdb1kT6Sl6ae0Ps2IARUGUul-ogiZudlmIMFNIo2Is&v=MmMwMDUxYTI3ZDU4NDllZjZiZTljOTdlZjVhOGY5N2QJMQl3d3cuZm9vdGJvaS5jb202NzE5NzgzYjU3YjU5NS41ODcwNDc4MAl3d3cuZm9vdGJvaS5jb202NzE5Nzg0ZWFjZDM2Ni40MTQ3MzUxNgkxNzI5NzIyNDQ2CTA%3D&nc=61776081729722460086 HTTP/1.1Host: cc.sedoparking.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://syndicatedsearch.googSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-116-225-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:07 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdal2120053-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722488.597342,VS0,VE82alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-136-169-useast1bprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:07 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdal2120094-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722488.604932,VS0,VE123alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-100-250-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:08 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdal2120088-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722488.092288,VS0,VE118alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-100-250-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:08 GMTVia: 1.1 varnishX-Served-By: cache-dfw-ktki8620061-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722488.263626,VS0,VE50alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-116-225-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:08 GMTVia: 1.1 varnishX-Served-By: cache-dfw-ktki8620041-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722488.494051,VS0,VE118alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-98-119-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:09 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdal2120062-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722489.115254,VS0,VE47alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-116-225-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:09 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdal2120021-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722490.788059,VS0,VE110alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-116-225-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:10 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdfw8210092-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722491.651931,VS0,VE117alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-177-147-useast1bprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:11 GMTVia: 1.1 varnishX-Served-By: cache-dfw-ktki8620027-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722491.032600,VS0,VE76alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-177-147-useast1bprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:11 GMTVia: 1.1 varnishX-Served-By: cache-dfw-ktki8620054-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722492.705901,VS0,VE105alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-130-184-useast1bprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:11 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdal2120143-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722492.868103,VS0,VE80alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-100-250-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:12 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdal2120047-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722493.548048,VS0,VE136alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-136-169-useast1bprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:12 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdal2120079-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722493.771039,VS0,VE79alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-98-119-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:13 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdal2120107-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722493.052340,VS0,VE42alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-100-250-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:13 GMTVia: 1.1 varnishX-Served-By: cache-dfw-ktki8620034-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722493.491226,VS0,VE107alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-98-141-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:14 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdal2120142-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722494.246800,VS0,VE57alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-98-141-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:15 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdfw8210057-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722495.105800,VS0,VE121alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-177-147-useast1bprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:17 GMTVia: 1.1 varnishX-Served-By: cache-dfw-ktki8620020-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722498.649151,VS0,VE113alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-177-147-useast1bprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:19 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdal2120117-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722499.184874,VS0,VE78alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-98-119-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:21 GMTVia: 1.1 varnishX-Served-By: cache-dfw-ktki8620031-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722501.370882,VS0,VE85alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-136-169-useast1bprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:25 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdfw8210026-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722505.391357,VS0,VE123alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 15058content-type: text/html; charset=UTF-8x-extlb: 10-65-116-225-useast1aprodAccept-Ranges: bytesDate: Wed, 23 Oct 2024 22:28:27 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdfw8210144-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1729722507.021763,VS0,VE76alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2264,i,15492527600073015673,5347263137129072150,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://footboi.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5716 --field-trial-handle=2264,i,15492527600073015673,5347263137129072150,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5996 --field-trial-handle=2264,i,15492527600073015673,5347263137129072150,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2264,i,15492527600073015673,5347263137129072150,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5716 --field-trial-handle=2264,i,15492527600073015673,5347263137129072150,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5996 --field-trial-handle=2264,i,15492527600073015673,5347263137129072150,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://syndicatedsearch.goog	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
http://ns.attribution.com/ads/1.0/	0%	URL Reputation	safe
https://js.adsrvr.org/up_loader.1.1.0.js	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://unifiedid.com/docs/sdks/client-side-identity#event-types-and-payload-details	0%	URL Reputation	safe
https://lens.google.com	0%	URL Reputation	safe
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
flask.us.nextdoor.com	52.26.233.33	true	false	unknown
yelpcdn.map.fastly.net	151.101.0.116	true	false	unknown
parkingpage.namecheap.com	91.195.240.19	true	false	unknown
vip1.g5.cachefly.net	204.93.142.142	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
cm.g.doubleclick.net	142.250.185.162	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
astrologermahadeva.com	212.1.210.18	true	false	unknown
match.adsrvr.org	3.33.220.150	true	false	unknown
star-mini.c10r.facebook.com	157.240.251.35	true	false	unknown
match.prod.bidr.io	34.241.33.46	true	false	unknown
d1qug1xf2dk5z6.cloudfront.net	18.245.86.97	true	false	unknown
data.adxcel-ec2.com	3.211.26.249	true	false	unknown
syndicatedsearch.goog	172.217.18.110	true	false	unknown
sc-static.net	3.163.248.4	true	false	unknown
sp-collector-lb-1480291537.us-west-2.elb.amazonaws.com	54.188.42.129	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	34.248.126.201	true	false	unknown
googleads.g.doubleclick.net	142.250.185.162	true	false	unknown
cc.sedoparking.com	64.190.63.210	true	false	unknown
footboi.com	162.255.119.221	true	false	unknown
sb.scorecardresearch.com	18.244.18.32	true	false	unknown
td.doubleclick.net	142.250.186.98	true	false	unknown
monitor.clickcease.com	20.234.104.33	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.185.193	true	false	unknown
cdn.cookielaw.org	104.18.87.42	true	false	unknown
adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com	34.249.102.174	true	false	unknown
dart.l.doubleclick.net	142.250.184.230	true	false	unknown
adservice.google.com	142.250.185.194	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.103.101	true	false	unknown
insight.adsrvr.org	52.223.40.198	true	false	unknown
scontent.xx.fbcdn.net	157.240.251.9	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
adserver-vpc-alb-1-1446435489.eu-west-1.elb.amazonaws.com	52.50.49.48	true	false	unknown
ads.us.nextdoor.com	35.161.222.164	true	false	unknown
tunnel.googlezip.net	216.239.34.157	true	false	unknown
gcp.api.sc-gw.com	35.190.43.134	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	52.208.241.210	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
pippio.com	107.178.254.65	true	false	unknown
ad.doubleclick.net	142.250.186.166	true	false	unknown
js.datadome.co	18.239.236.108	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
api-alb-eu-central-1.datadome.co	18.195.67.117	true	false	unknown
census.eu-west-1.nielsencollections.com	52.210.70.154	true	false	unknown
play.google.com	142.250.185.238	true	false	unknown
dns-tunnel-check.googlezip.net	216.239.34.159	true	false	unknown
ib.anycast.adnxs.com	37.252.171.52	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
ads.nextdoor.com	unknown	unknown	false	unknown
d.adroll.com	unknown	unknown	false	unknown
tr.snapchat.com	unknown	unknown	false	unknown
img.sedoparking.com	unknown	unknown	false	unknown
s3-media0.fl.yelpcdn.com	unknown	unknown	false	unknown
js.adsrvr.org	unknown	unknown	false	unknown
flask.nextdoor.com	unknown	unknown	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
6372968.fls.doubleclick.net	unknown	unknown	false	unknown
www.yelp.com	unknown	unknown	false	unknown
www.footboi.com	unknown	unknown	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	unknown
aa.agkn.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
s.adroll.com	unknown	unknown	false	unknown
sp.yelp.com	unknown	unknown	false	unknown
www.astrologermahadeva.com	unknown	unknown	false	unknown
analytics.tiktok.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
api-js.datadome.co	unknown	unknown	false	unknown
secure-us.imrworldwide.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://lh3.googleusercontent.com/geougc/AF1QipPYIiAKpO5f_3pOAg3TQgXYD8-sMQl5WzXDo0eB=w232-h130-p-no	false		unknown
https://www.google.com/gen_204?s=web&t=cap&atyp=csi&ei=YXgZZ8LxFJqH9u8P6dbR8Qo&rt=wsrt.5074,cbt.187,hst.185&opi=89978449&dt=&ts=300	false		unknown
https://lh3.googleusercontent.com/geougc/AF1QipNd4UCFx5L4ynn8GGjNQdTlDIR3-ghOmD-xB4eJ=w232-h130-p-no	false		unknown
https://sb.scorecardresearch.com/cs/35382585/beacon.js	false		unknown
https://d.adroll.com/consent/check/BHPKS4B4ONEJJMGH4QCJZR?flg=1&pv=32582387593.18921&arrfrr=https%3A%2F%2Fwww.yelp.com%2Fbiz%2Fmahadev-solutions-in-texas-carrollton-2&_s=12385e6b2534534460788442f4e53b3c&_b=2	false		unknown
https://tr.snapchat.com/cm/p?rand=1729699625151&pnid=140&pcid=48e68e70-e7c9-411c-b1a0-b4672c5f24da	false		unknown
https://tr.snapchat.com/cm/i?pid=d97be1bd-5f4b-475f-a6a7-72374d9cf914&u_scsid=711e9d7a-cc8e-44a2-a73b-d9b7976be5f7&u_sclid=8bb84306-0ed8-4e17-bbb7-6ef958d33135	false		unknown
https://www.google.com/gen_204?atyp=csi&ei=YXgZZ8LxFJqH9u8P6dbR8Qo&s=jsa&jsi=s,st.14557,t.0,at.7,et.click,n.msmzHf,cn.1,ie.1,vi.1&zx=1729722474661&opi=89978449	false		unknown
http://www.astrologermahadeva.com/js/parallax.min.js	false		unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=4&adview_query_id=CNGL8qjGpYkDFYCdgwcdGygt3A	false		unknown
https://www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true	false		unknown
https://cdn.cookielaw.org/consent/5fbcd417-fbc1-4fcc-abad-f622f1bba72d/otSDKStub.js	false		unknown
https://lh3.googleusercontent.com/geougc/AF1QipOAFWLyHz0cR6tPQwh8ojwTh1XaPKFNjZZ4zLEI=w232-h130-p-no	false		unknown
https://ad.doubleclick.net/ddm/activity/attribution_src_register;crd=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	false		unknown
https://js.datadome.co/tags.js	false		unknown
http://www.astrologermahadeva.com/css/flaticon.css	false		unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0-10/css/brands.min.css	false		unknown
https://www.google.com/xjs/_/js/md=2/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAACAAAoICAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAICAAAEJCAAACAAAAAGABAIAAARBAAABAAAAAAAgQAAAAASKAfv8JAAAAAAAAAAAAAAgAEgAAAAAA4AIAgABQEAAAACAAAAADAAAADwAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAAAAAgQDQDwAAAAAAAAAAAAAgAAAAAACAARQAEMAPAAAAAAAAAgAAAAQBAAAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/rs=ACT90oFg8gimsvEj0owM6Fr4zNgZiKS64A	false		unknown
http://www.footboi.com/caf/?ses=Y3JlPTE3Mjk3MjI0MjcmdGNpZD13d3cuZm9vdGJvaS5jb202NzE5NzgzYjU3YjU5NS41ODcwNDc4MCZ0YXNrPXNlYXJjaCZkb21haW49Zm9vdGJvaS5jb20mYV9pZD0zJnNlc3Npb249TVVQMXFFcFFIUzZTWGtQN1pMNmI%3D&query=Psychicchat&afdToken=ChMI5Z-amMaliQMVZtkCBx13AzhfEmoBlLqpj1NEhxINBsQwzXDy_Gdt5wiyL46XN3_Zp11bC5KS7MdeT-JW5Pij_L5GtR6p4XLigrrLnvS-6GLFdSCoAHwudcw80G7FNjIjpVQpiptBV1zY3j6hSh3y4xi8lLzgZpRc2vcC8ARVIAE&pcsa=false&nb=0&nm=5&nx=238&ny=72&is=493x530&clkt=3	false		unknown
https://www.google.com/complete/search?q=MAHADEV%20SOLUTIONS%20IN%20TEXAS&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=MAHADEV%20SOLUTIONS%20IN%20TEXAS&psi=YXgZZ8LxFJqH9u8P6dbR8Qo.1729722470486&dpr=1&ofp=EAE	false		unknown
https://cdn.cookielaw.org/consent/5fbcd417-fbc1-4fcc-abad-f622f1bba72d/018e65ff-a67f-7f4f-b853-6344ac39b6b1/en.json	false		unknown
http://www.astrologermahadeva.com/images/header/slide.jpg	false		unknown
https://www.google.com/xjs/_/ss/k=xjs.s.JQvI3TbmN8g.L.B1.O/am=QOoQIAQAAAQAREADEAAAAAAAAAAAAAAAAAAAAAAgAQAAIAAAAAAAAAIAIAIAoEwCAADICwAAsAEAAQAAPkAAjgoAGAAAAAAAAEACAAAAAAIgAECFAAAAAAAAAAABAQAgAAARQAAAQCEAAAAAIAAAABgAAAAAQAgQAEAAAyAEAAKQgABQEIB-FAIAAAADAAAID-EAhgEIKgAYwFEAAAAAAAAAAAAAEACEAAAAgIAAACBAAIAegQAwAABpIAIABAEAARQBgAAAABAAAAAAEEAgAABiJgAOyAAEAAAAAAAAABIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAgA/d=0/br=1/rs=ACT90oEh6kJdYmfESHG-JPbQVjjDSttVVg/m=sy1eh,sypj,syo1,sypk,sy1ew,sy1ev,sy1eu,synd,sync,symo,sy1et,sy1er,sy1eq,sy1ep,sy1en,sy1em,sy1el,sy1ek,sy1ej,sy1ei,sy3hk,sy3hj,sy1ud,sy1u4,sy21u,pa67Ne,JHI4cb,xh9Dkb,Pq506,z2eFcc,eTVOC,GRSrSe,KTfMfd,UTbeEe,UWPTnc,g0Ekse,U8HkDd,aVswRb,NeaQsb,NQ9Vxb,cpFMEb,fr3s0b,yN4Qsc,kV5eWc,aQA7ac,ts6oTe,f49kBd,YlMcGe,XTmxwe,OjtwQe,SQAZFd,MafjZe,BmbBtc,y05UD,sy90q,sy90e,sy90d,sy902,sy8zw,sy8zy,sy90b,sy2d9,sy1r2,sy2da,sy900,sy8qw,sy8qx,sy1qs,sy1qw,sy1s3,sy3rt,sy1rv,sy1qz,sy1su,sy1rm,sy1rn,sy1r1,sy1r3,sy11o,sy11c,syn7,syn6,symx,symv,symt,sym3,syld,sy11n,sy4bz,sy3fm,sy3fn,sy3fl,sy3fo,sy3fh,sy3fp,sy3d3,sy234,sy235,synn,synm,synl,synk,synj,syni,synh,syng,synf,syne,syna,syn9,syn8,syn5,syn4,syn3,syn2,syn1,syn0,symz,symw,symu,syms,symr,symq,symn,symm,syml,symk,symj,symi,symh,symf,syme,symd,symc,symb,syma,sym9,sym7,sym6,sym5,sym4,sym2,sym1,sym0,sylz,syly,sylx,sylw,sylv,sylt,syls,sylq,sylp,syln,sylm,syll,sylk,sylj,syli,sylh,syle,sylc,syk0,syl9,syl8,sy236,sy1ez,sy1ey,sy2fy,sy2g8,sy1wd,sy1wc,sy1w8,sy1w9,sy1wa,sy1vn,sy1w6,sy1w7,sy1w5,sy1wb,sy1w3,sy1th,sy1u3,sy8zs,sy219,sy20q,sy1zv,sy2ea,sy90l,sy1u7,sy90i,sy90j,sy1tv,sy90g,sy8zt,sy8zu,sy1ds,sy90h,sy90r,sy8r0,sy8r4,sy1yk,sy4kp,sypf,sy4c2,epYOx?xjs=s4	false		unknown
https://idsync.rlcdn.com/1000.gif?memo=CK6rGBIcChgIARCSjQEaEEU5QjU2QjY2QTI5RDhGQkYQABoNCPbw5bgGEgUI6AcQAEIASgA	false		unknown
https://www.google.com/xjs/_/ss/k=xjs.s.JQvI3TbmN8g.L.B1.O/am=QOoQIAQAAAQAREADEAAAAAAAAAAAAAAAAAAAAAAgAQAAIAAAAAAAAAIAIAIAoEwCAADICwAAsAEAAQAAPkAAjgoAGAAAAAAAAEACAAAAAAIgAECFAAAAAAAAAAABAQAgAAARQAAAQCEAAAAAIAAAABgAAAAAQAgQAEAAAyAEAAKQgABQEIB-FAIAAAADAAAID-EAhgEIKgAYwFEAAAAAAAAAAAAAEACEAAAAgIAAACBAAIAegQAwAABpIAIABAEAARQBgAAAABAAAAAAEEAgAABiJgAOyAAEAAAAAAAAABIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAgA/d=1/ed=1/br=1/rs=ACT90oEh6kJdYmfESHG-JPbQVjjDSttVVg/m=X3N0Bf,attn,cdos,gwc,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,d,csi	false		unknown
https://www.google.com/xjs/_/js/k=xjs.s.en_US.x1T1jtwu6lk.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAACAAAoICAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAICAAAEJCAAACAAAAAGABAIAAARBAAABAAAAAAAgQAAAAASKAfv8JAAAAAAAAAAAAAAgAEgAAAAAA4AIAgABQEAAAACAAAAADAAAADwAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAAAAAgQDQDwAAAAAAAAAAAAAgAAAAAACAARQAEMAPAAAAAAAAAgAAAAQBAAAOyAAEAAAAAAAA4D4AeDxgOKSwAAAAAAAAAAAAAAAAEIAEwRyQ_oIAEAAAAAAAAAAAAAAAAAAApAiauNwAQAI/d=0/dg=0/br=1/rs=ACT90oFg8gimsvEj0owM6Fr4zNgZiKS64A/m=sy5z0,sy3t2,DpX64d,uKlGbf,sy5z1,EufiNb,sy1ne,P10Owf,sy1hl,sy1hi,gSZvdb,WlNQGd,sy3ld,sy3lc,nabPbb,sy5pc,sy5pb,sy1bs,sy1j5,VD4Qme,sy6yv,sy3dw,sG005c,sy7yk,sy6yy,ZYZddd,sy7yl,sy6yw,peG5,sy6yz,sywb,sywg,sywf,SrMpob,sy7eq,sy2sd,SC7lYd,sy36n,rhe7Pb,sy1fu,n7qy6d,sy1fw,HPGtmd,sy1fx,uLYJpc,sy37w,tuZ5Wc,sy37v,bbfkFf,sy38c,EqdXlc,syfv,pU86Hd,dOwROe,zCncvb,sy2dt,sy7wm,sy2dr,sy8hr,sy28r,sy28x,sy28t,sy28q,sy28w,sy7zl,sy7zn,sy7wg,sy7wk,sy7wl,sy7wh,sy68i,X53Qnb,sy26p,O6y8ed,ZgGg9b,dIoSBb,b6knsb,sy12s,sy2jm,sydi,sydg,sy9z,sydk,sy2k7,JKoKVe,pXdRYb,sy4d7,sya0,sy9y,sy9x,sy8i,O1Gjze,TtcOte,wR5FRb,sy8tj,sy68j,J8jp6c,sy482,I6YDgd,syew,sydc,syev,syeu,syet,syes,syer,syeq,syep,syeo,syen,sye9,syel,sydn,sydo,syek,sybf,sye7,syej,syds,sydt,syeh,sydr,syeg,sydq,sye6,syef,sye5,syee,sye4,syed,sydu,sye3,syeb,sye2,syea,sye1,sye0,sydp,sydz,sydl,sydy,sydw,sydv,sye8,sydm,syde,sya4,sy7w,zbML3c,sy68l,WV0Qzb,g1ab0d,iRGlHb,VJjNif,sy8vo,sy68n,sAKfwc,sFczq,heHB1,sy2af,tuC8xe,sy8ti,sy8tz,sy8u1,sy8tx,sy8v1,sy4jm,sy8ul,sy8ro,sy8vp,sy1ut,sy1uu,sy1ur,sy1us,sy1uv,sy1un,sy1uo,sy1up,sy1ug,sy1uh,sy1c1,sy1um,sy1uk,sy1uz,sy1uj,sy1ul,sy1v0,sy8ty,sy4ef,sy5qr,sy4ee,sy1c0,sy5qq,sy5qs,sy8v2,sy274,sy68p,sy68q,fd7wz,sy26t,i5H9N,sy275,i5dxUd,sy8jg,sy6g9,sy27g,sy26o,sy1a3,qNG0Fc,sy5rw,sy5rx,sy5rv,sy27q,sy27o,sy276,sy27c,PHUIyb,sy8jh,sy6ga,sy1b0,ywOR5c,wg1P6b,sy30z,QqJ8Gd,sy4f4,HdB3Vb,sy5q8,ovIBV,sy4f5,yPDigb,sy5q9,XHXkqb,sy77y,sy376,sy374,sy1f4,sy1f5,sy375,sy373,sy372,sy371,sy36z,sy331,sy370,h9yvRb,sy8zg,sy65h,VFLpVe,MZQCA,sy66b,fK8Ihd,sy4a5,sy4bf,sy90n,sy65b,spYpfd,sy90t,sy65c,siOBCb,sy66m,m1MA8,sy1mr,sy1mq,q00IXe,sy1mw,sy1mv,sy1mt,Fh0l0,sy3a7,qcH9Lc,sy39a,gCngrf,pjDTFb,sy39j,sy2gh,KgxeNb,sy39f,khkNpe?xjs=s4	false		unknown
https://monitor.clickcease.com/tracker/tracker?id=mgLmCy9WawPXh6&adpos=&locphisical=1026339&locinterest=&adgrp=172181985511&kw=psychic%20near%20me&nw=s&url=https://www.google.com/search%3Fq%3DMAHADEV%2BSOLUTIONS%2BIN%2BTEXAS%26stick%3DH4sIAAAAAAAA_-NgU1I1qLAwM0k2SksyMDZMNUk2TzS1MqgwS041STJMMUhJSkk1S02yXMQq5evo4ejiGqYQ7O8TGuLp7xes4OmnEOIa4RgMAKkO97FGAAAA%26hl%3Den%26mat%3DCVQRu4gXOCuRElcBEKoLaWdOjq4TJdno4nxViy74uAG1sLRS3AEIR-IwF6cFkJiNrV-puB2zAvKg2o2NOfRFtXSKhfUWzInkf-MWDXzXcDEuo6l_fYsBx9hA0M3tfX-_saM%26authuser%3D1%26gad_source%3D5%23scso%3D_lHYOZ7-JOIeywt0P3IybuQc_56:1058&cpn=21832517997&device=c&ccpturl=devspiritualtherapy.com&pl=&gclid=EAIaIQobChMIp57XoMaliQMVz4CDBx1TIyzlEAAYASAAEgK1A_D_BwE	false		unknown
https://lh3.googleusercontent.com/geougc/AF1QipMFi36GQVW09Qk8HA6ldzzCvP7JGCDSec1YmsLD=w232-h130-p-no	false		unknown
http://img.sedoparking.com/templates/logos/sedo_logo.png	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=8smluj89zel&aqid=PngZZ-_aG6fFjuwP_ZjzuQY&psid=3259787283&pbt=bv&adbx=385.203125&adby=413.015625&adbh=530&adbw=493&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=688160506&csala=25%7C0%7C1601%7C1636%7C131&lle=0&ifv=1&hpt=0	false		unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=d7c57948-9bdf-462b-b924-29f49e3ed279	false		unknown
https://www.google.com/search?q=MAHADEV%20SOLUTIONS%20IN%20TEXAS&stick=H4sIAAAAAAAA_-NgU1I1qLAwM0k2SksyMDZMNUk2TzS1MqgwS041STJMMUhJSkk1S02yXMQq5evo4ejiGqYQ7O8TGuLp7xes4OmnEOIa4RgMAKkO97FGAAAA&hl=en&mat=CVQRu4gXOCuRElcBEKoLaWdOjq4TJdno4nxViy74uAG1sLRS3AEIR-IwF6cFkJiNrV-puB2zAvKg2o2NOfRFtXSKhfUWzInkf-MWDXzXcDEuo6l_fYsBx9hA0M3tfX-_saM&authuser=1&gad_source=5#scso=_lHYOZ7-JOIeywt0P3IybuQc_56:1058&gclid=EAIaIQobChMIp57XoMaliQMVz4CDBx1TIyzlEAAYASAAEgK1A_D_BwE	false		unknown
http://www.astrologermahadeva.com/css/font-awesome.css	false		unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0	false		unknown
https://www.google.com/gen_204?atyp=i&ei=YXgZZ8LxFJqH9u8P6dbR8Qo&ct=slh&v=t1&im=M&m=HV&aqid=YXgZZ5HXGYC7juwPm9C04Q0&pv=0.4049025782845068&me=1:1729722466287,V,0,0,1280,907:0,B,2461:0,N,1,YXgZZ8LxFJqH9u8P6dbR8Qo:0,R,1,8,102,36,92,33:0,R,1,CAYQAA,106,88,1120,57:0,R,1,CAYQAQ,106,88,670,45:0,R,1,CA0QAA,96,88,36,45:0,R,1,CA0QAQ,96,102,36,31:0,R,1,CA8QAA,134,90,66,42:0,R,1,CA8QAQ,134,90,66,42:0,R,1,CA4QAA,201,90,54,42:0,R,1,CA4QAQ,201,90,54,42:0,R,1,CAsQAA,258,90,63,42:0,R,1,CAsQAQ,258,90,63,42:0,R,1,CAwQAA,322,90,55,42:0,R,1,CAwQAQ,322,90,55,42:0,R,1,CAoQAA,379,90,79,42:0,R,1,CAoQAQ,379,90,79,42:0,R,1,CAgQAA,460,90,67,42:0,R,1,CAgQAQ,460,90,67,42:0,R,1,CAQQBw,106,163,652,1438:0,R,1,CBoQAA,106,163,652,1438:0,R,1,CB4QAQ,106,163,652,1438:0,R,1,CCAQAw,106,163,652,1438:0,R,1,CD0QAA,106,163,652,117:0,R,1,CCQQAA,106,163,600,117:0,R,1,CDkQAA,106,310,652,117:0,R,1,CC8QAA,106,310,600,117:0,R,1,CDwQAA,106,457,652,117:0,R,1,CCUQAA,106,457,600,117:0,R,1,CD4QAA,106,603,652,117:0,R,1,CDEQAA,106,603,600,117:0,R,1,CDsQAA,106,750,652,117:0,R,1,CCYQAA,106,750,600,117:0,R,1,CDoQAA,106,897,652,117:0,R,1,CDIQAA,106,897,600,117:0,R,1,CBMQAQ,834,157,372,2190:0,R,1,CBkQAA,814,163,392,176:0,R,1,CBkQAQ,814,163,392,176:0,R,1,CBgQAA,834,163,372,160:0,R,1,CBgQAQ,834,163,372,160:0,R,1,CBgQAg,834,163,132,160:0,R,1,CBgQCg,966,164,240,159:0,R,1,CBYQAA,814,339,392,138:0,R,1,CFUQAA,813,459,393,145:0,R,1,CE4QAA,834,459,372,105:0,R,1,CEsQAA,834,467,372,96:0,R,1,CEsQBg,834,521,85,36:0,R,1,CFsQAA,813,612,393,155:0,R,1,CEgQAA,834,612,372,22:0,R,1,CEYQAA,834,642,372,22:0,R,1,CEoQAA,834,672,372,22:0,R,1,CEcQAA,834,710,372,16:0,R,1,CFYQAA,813,767,393,331:0,R,1,CD8QAA,834,767,372,290:4174,x:2577,h,1,CCAQAw,o:0,h,1,CB4QAQ,o:1,h,1,CBoQAA,o:0,h,1,CAQQBw,o:0,h,1,CC8QAA,i:0,h,1,CDkQAA,i:3,h,1,CCAQAw,i:0,h,1,CB4QAQ,i:0,h,1,CBoQAA,i:0,h,1,CAQQBw,i:886,h,1,CC8QAA,o:0,h,1,CDkQAA,o:249,h,1,CCAQAw,o:0,h,1,CB4QAQ,o:0,h,1,CBoQAA,o:0,h,1,CAQQBw,o:0,h,1,CCQQAA,i&zx=1729722474178&opi=89978449	false		unknown
https://cdn.cookielaw.org/consent/5fbcd417-fbc1-4fcc-abad-f622f1bba72d/5fbcd417-fbc1-4fcc-abad-f622f1bba72d.json	false		unknown
http://www.astrologermahadeva.com/images/content/testi_bg.jpg	false		unknown
http://www.astrologermahadeva.com/css/responsive.css	false		unknown
http://www.astrologermahadeva.com/images/content/testi_client_img2.jpg	false		unknown
https://www.google.com/gen_204?atyp=i&ei=YXgZZ8LxFJqH9u8P6dbR8Qo&ct=fa&vt=paq:[0,0,null,null,0,null,null,[1,null,null,%22YXgZZ5HXGYC7juwPm9C04Q0%22,1729722476987,1729722474658]]&pvt=10688&s=0&pv=24703&authuser=0&zx=1729722476989&opi=89978449	false		unknown
https://img.sedoparking.com/templates/images/hero_nc.svg	false		unknown
https://tr.snapchat.com/p	false		unknown
https://lh3.googleusercontent.com/glsgmb/AMnFcur5AxxNAHFMq_VfJzaf7xvhaA5iSeirFZVcOzvluEbtBllgHchhM0aZxDnmUr-jR776QlcERp1X_YLdY0Rq8tDKNA=w148-h100-p-k-no	false		unknown
https://tr.snapchat.com/cm/s?bt=1d53c387&pnid=140&cb=1729722490328&u_scsid=d0dae75b-0ca2-4a0b-8009-4b8149ff4e16&u_sclid=31386a3b-4363-4898-a776-065819170f4d	false		unknown
http://www.astrologermahadeva.com/images/header/new-logo.png	false		unknown
https://www.yelp.com/ad_acknowledgment	false		unknown
https://www.yelp.com/cookie_sync/?partner=TTD&ttd_puid=n9v_evkC3AajooSqGUb1ITJnWF_-MCxHkLSywMb3qDQ,E9B56B66A29D8FBF,biz_details&ttd_id=d7c57948-9bdf-462b-b924-29f49e3ed279	false		unknown
http://www.footboi.com/search/tsc.php?ses=ogc-dcuXTs89JHhHpgtFkBYDW8UT_sMF9-IbODL3W-SIwpGa42V7eEk8tFi69-R9uXzyxJ-thKntNBckArXbCrUCfE8CMixCdF8_PcxzrRBfQXyMHdxrOp5X98obf7M4phLlkTfvIeZKjJubkq8NMIy0w3eswzoUYUifYBZ3Q3KoEZCS10VD54z7DwdfCQ6odGR23p9uCaeiMr2jd1-9M_c4pspK_37a29eX7e7IAvFXI15G0SRtgUWvtZyLrp5C42Eg6UGeycJMHwIo7bQnNaPNYwg4lgt-71-_12ALA11N_a_zcgnrLcCzLY9mOt9IVh3NM-bhIZpUkApK01pM4hh30zCZG9pvjMUG3XmtYuNzn6o40ku13sF0lTMq1Ny&cv=2	false		unknown
https://sc-static.net/scevent.min.js	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=4urzf5v5ezqo&aqid=UHgZZ6e2DM-BjuwP08awqQ4&psid=3259787283&pbt=bs&adbx=442.0625&adby=373.359375&adbh=1390&adbw=379&adbah=539%2C430%2C421&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=688160506&csala=27%7C0%7C1661%7C21%7C113&lle=0&ifv=1&hpt=1	false		unknown
https://ads.nextdoor.com/public/pixel/ndp.js	false		unknown
https://6372968.fls.doubleclick.net/activityi;dc_pre=CIKXh7PGpYkDFdGJgwcdeU0U8Q;src=6372968;type=invmedia;cat=qr3hlsqk;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=312432028697?	false		unknown
https://match.prod.bidr.io/cookie-sync/yelp?buyer_user_id=E9B56B66A29D8FBF&flow=biz_details&signature=WHasXwfzXSJpn5fQ4MfZyznT7fuAweNhesXWtuqgHAQ&_bee_ppp=1	false		unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	false	URL Reputation: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_323.6.dr, chromecache_459.6.dr	false	URL Reputation: safe	unknown
https://www.google.com/maps/contrib/104520635118499462521?hl=en-US&ved=1t:31296&ictx=111	chromecache_726.6.dr	false		unknown
https://maps.app.goo.gl/nKjdo6kwjh2GuWGr8	chromecache_726.6.dr	false		unknown
https://syndicatedsearch.goog	chromecache_424.6.dr, chromecache_440.6.dr, chromecache_689.6.dr, chromecache_734.6.dr	false	URL Reputation: safe	unknown
https://yelp.com	chromecache_376.6.dr	false		unknown
https://support.google.com	chromecache_735.6.dr, chromecache_349.6.dr	false	URL Reputation: safe	unknown
https://s3-media0.fl.yelpcdn.com/assets/srv0/yelp_styleguide/12b14ca44670/assets/img/logos/logo_desk	chromecache_321.6.dr, chromecache_461.6.dr, chromecache_340.6.dr, chromecache_376.6.dr	false		unknown
https://yelp.com/about	chromecache_321.6.dr, chromecache_461.6.dr, chromecache_340.6.dr, chromecache_376.6.dr	false		unknown
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/864073483/?random	chromecache_400.6.dr, chromecache_500.6.dr	false		unknown
https://business.google.com/create?hl=en&getstarted&authuser=0&fp=7846591961386348217&am	chromecache_726.6.dr	false		unknown
https://lh3.googleusercontent.com/geougc/AF1QipOgwxe_qncaEwLHlr8eM6c9CKIWIk2XXbt0kLG7	chromecache_726.6.dr	false		unknown
https://fontawesome.com	chromecache_525.6.dr, chromecache_572.6.dr, chromecache_600.6.dr, chromecache_364.6.dr	false	URL Reputation: safe	unknown
https://maps.google.com/maps/contrib/	chromecache_631.6.dr, chromecache_491.6.dr	false		unknown
https://www.google.com/maps/reviews/data%3D	chromecache_726.6.dr	false		unknown
https://datadome.co	chromecache_672.6.dr, chromecache_369.6.dr	false		unknown
https://medium.com/%40mahadevsolutionintexas&ved=2ahUKEwiCpu2oxqWJAxWag_0HHWlrNK4QFnoECCIQAQ	chromecache_726.6.dr	false		unknown
https://yelp.com/user_details	chromecache_321.6.dr, chromecache_461.6.dr, chromecache_340.6.dr, chromecache_376.6.dr	false		unknown
https://s3-media0.fl.yelpcdn.com/assets/srv0/error_pages/81b13bc440cd/assets/scss/maintenance-pkg.cs	chromecache_321.6.dr, chromecache_461.6.dr, chromecache_340.6.dr, chromecache_376.6.dr	false		unknown
https://api.whatsapp.com/send	chromecache_287.6.dr	false		unknown
http://ns.attribution.com/ads/1.0/	chromecache_551.6.dr, chromecache_367.6.dr, chromecache_595.6.dr, chromecache_325.6.dr, chromecache_655.6.dr, chromecache_401.6.dr, chromecache_438.6.dr, chromecache_695.6.dr	false	URL Reputation: safe	unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_726.6.dr, chromecache_424.6.dr, chromecache_440.6.dr, chromecache_689.6.dr, chromecache_734.6.dr	false		unknown
https://yelp.com/writeareview	chromecache_321.6.dr, chromecache_461.6.dr, chromecache_340.6.dr, chromecache_376.6.dr	false		unknown
https://lh3.googleusercontent.com/geougc/AF1QipPY8tG2rZAn591jX95M_cSJwjixSkEY5z2YZKxX	chromecache_726.6.dr	false		unknown
https://www.google.com/tools/feedback	chromecache_450.6.dr, chromecache_727.6.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_631.6.dr, chromecache_491.6.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/-pfpw05DcePY/AAAAAAAAAAI/AAAAAAAAAAA/YEuhgalyecY/s40-c-k-mo/photo.	chromecache_726.6.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AbDGNSGEF1Zya5tbD3gUAtSXfa-e5Ntzk	chromecache_494.6.dr	false		unknown
https://docs.google.com/picker	chromecache_491.6.dr	false		unknown
https://connect.facebook.net/	chromecache_694.6.dr, chromecache_363.6.dr	false	URL Reputation: safe	unknown
https://www.yelp.com	chromecache_726.6.dr	false		unknown
https://yelp.com/collections	chromecache_321.6.dr, chromecache_461.6.dr, chromecache_340.6.dr, chromecache_376.6.dr	false		unknown
https://business.google.com/travis-holp	chromecache_494.6.dr	false		unknown
https://medium.com/	chromecache_726.6.dr	false		unknown
https://s3-media0.fl.yelpcdn.com/assets/srv0/yelp_styleguide/d57e9bccd629/assets/img/logos/burst_des	chromecache_321.6.dr, chromecache_461.6.dr, chromecache_340.6.dr, chromecache_376.6.dr	false		unknown
https://unifiedid.com/docs/sdks/client-side-identity#event-types-and-payload-details	chromecache_693.6.dr, chromecache_656.6.dr	false	URL Reputation: safe	unknown
https://www.yelp.com/search	chromecache_321.6.dr, chromecache_461.6.dr, chromecache_340.6.dr, chromecache_376.6.dr	false		unknown
https://www.mylocalservices.com	chromecache_726.6.dr	false		unknown
https://www.yelp.com/tos/privacy_policy	chromecache_321.6.dr, chromecache_461.6.dr, chromecache_340.6.dr, chromecache_376.6.dr	false		unknown
https://play.google.com	chromecache_735.6.dr, chromecache_349.6.dr	false		unknown
https://yelp.com/search	chromecache_376.6.dr	false		unknown
https://github.com/InteractiveAdvertisingBureau/Global-Privacy-Platform/blob/main/Core/CMP%20API%20S	chromecache_693.6.dr, chromecache_656.6.dr	false		unknown
https://www.google.com/interests/saved	chromecache_692.6.dr, chromecache_643.6.dr	false		unknown
https://www.google.com/log?format=json&hasfast=true	chromecache_692.6.dr, chromecache_643.6.dr	false		unknown
https://lens.google.com	chromecache_692.6.dr, chromecache_643.6.dr	false	URL Reputation: safe	unknown
https://support.google.com/business?p=search_verification_required	chromecache_673.6.dr, chromecache_293.6.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
18.195.67.117	api-alb-eu-central-1.datadome.co	United States	16509	AMAZON-02US	false
3.211.26.249	data.adxcel-ec2.com	United States	14618	AMAZON-AESUS	false
142.250.185.226	unknown	United States	15169	GOOGLEUS	false
44.237.142.18	unknown	United States	16509	AMAZON-02US	false
37.252.171.52	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
35.71.131.137	unknown	United States	237	MERIT-AS-14US	false
172.217.16.142	unknown	United States	15169	GOOGLEUS	false
18.245.86.97	d1qug1xf2dk5z6.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.87.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
142.250.185.198	unknown	United States	15169	GOOGLEUS	false
142.250.185.238	play.google.com	United States	15169	GOOGLEUS	false
52.210.70.154	census.eu-west-1.nielsencollections.com	United States	16509	AMAZON-02US	false
172.217.18.1	unknown	United States	15169	GOOGLEUS	false
142.250.185.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
142.250.185.194	adservice.google.com	United States	15169	GOOGLEUS	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
99.80.55.90	unknown	United States	16509	AMAZON-02US	false
172.217.18.14	unknown	United States	15169	GOOGLEUS	false
142.250.186.130	unknown	United States	15169	GOOGLEUS	false
52.208.241.210	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
64.190.63.210	cc.sedoparking.com	United States	11696	NBS11696US	false
151.101.0.116	yelpcdn.map.fastly.net	United States	54113	FASTLYUS	false
52.58.2.31	unknown	United States	16509	AMAZON-02US	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
172.217.18.110	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
34.249.102.174	adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.245.86.120	unknown	United States	16509	AMAZON-02US	false
35.190.43.134	gcp.api.sc-gw.com	United States	15169	GOOGLEUS	false
18.66.122.7	unknown	United States	3	MIT-GATEWAYSUS	false
20.234.104.33	monitor.clickcease.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
205.234.175.175	unknown	United States	30081	CACHENETWORKSUS	false
52.26.233.33	flask.us.nextdoor.com	United States	16509	AMAZON-02US	false
162.255.119.221	footboi.com	United States	22612	NAMECHEAP-NETUS	false
151.101.128.116	unknown	United States	54113	FASTLYUS	false
54.188.42.129	sp-collector-lb-1480291537.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
18.239.236.108	js.datadome.co	United States	16509	AMAZON-02US	false
52.50.49.48	adserver-vpc-alb-1-1446435489.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
34.241.33.46	match.prod.bidr.io	United States	16509	AMAZON-02US	false
34.248.126.201	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.184.230	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
18.244.18.32	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
54.70.148.253	unknown	United States	16509	AMAZON-02US	false
91.195.240.19	parkingpage.namecheap.com	Germany	47846	SEDO-ASDE	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
172.217.16.193	unknown	United States	15169	GOOGLEUS	false
52.223.40.198	insight.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.70	unknown	United States	15169	GOOGLEUS	false
18.172.103.101	dg2iu7dxxehbo.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
35.161.222.164	ads.us.nextdoor.com	United States	16509	AMAZON-02US	false
212.1.210.18	astrologermahadeva.com	United States	47583	AS-HOSTINGERLT	false
3.163.248.4	sc-static.net	United States	16509	AMAZON-02US	false
172.217.23.97	unknown	United States	15169	GOOGLEUS	false
44.195.51.209	unknown	United States	14618	AMAZON-AESUS	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.250.214.229	unknown	United States	16509	AMAZON-02US	false
142.250.186.98	td.doubleclick.net	United States	15169	GOOGLEUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
204.93.142.142	vip1.g5.cachefly.net	United States	30081	CACHENETWORKSUS	false
142.250.186.166	ad.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.86.42	unknown	United States	13335	CLOUDFLARENETUS	false
157.240.251.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
216.239.34.157	tunnel.googlezip.net	United States	15169	GOOGLEUS	false

IP
192.168.2.10
192.168.2.8
192.168.2.5

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540629
Start date and time:	2024-10-24 00:26:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://footboi.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@32/726@194/74
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Input	Output
URL: http://www.footboi.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://www.footboi.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Psychicchat", "prominent_button_name": "Psychicchat", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://www.footboi.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Namecheap" ] }
	```json { "brands": [ "Namecheap" ] }
URL: http://www.footboi.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Namecheap" ] }
	```json { "brands": [ "Namecheap" ] }
URL: http://www.footboi.com/caf/?ses=Y3JlPTE3Mjk3MjI0MjcmdGNpZD13d3cuZm9vdGJvaS5jb202NzE5NzgzYjU3YjU5NS41ODcwNDc4MCZ0YXNrPXNlYXJjaCZkb21haW49Zm9vdGJvaS5jb20mYV9pZD0zJnNlc3Npb249TVVQMXFFcFFIUzZTWGtQN1pMNmI%3D&query=Psychicchat&afdToken=ChMI5Z-amMaliQMVZtkCBx13A Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "POWERFUL LOVE SPECIALIST - FAMOUS INDIAN ASTROLOGER - EXPERIENCED PSYCHIC READINGS", "prominent_button_name": "Visit Website", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://www.footboi.com/caf/?ses=Y3JlPTE3Mjk3MjI0MjcmdGNpZD13d3cuZm9vdGJvaS5jb202NzE5NzgzYjU3YjU5NS41ODcwNDc4MCZ0YXNrPXNlYXJjaCZkb21haW49Zm9vdGJvaS5jb20mYV9pZD0zJnNlc3Npb249TVVQMXFFcFFIUzZTWGtQN1pMNmI%3D&query=Psychicchat&afdToken=ChMI5Z-amMaliQMVZtkCBx13A Model: claude-3-haiku-20240307	```json { "brands": [ "Namecheap" ] }
	```json { "brands": [ "Namecheap" ] }
URL: https://www.google.com/search?q=MAHADEV%20SOLUTIONS%20IN%20TEXAS&stick=H4sIAAAAAAAA_-NgU1I1qLAwM0k2SksyMDZMNUk2TzS1MqgwS041STJMMUhJSkk1S02yXMQq5evo4ejiGqYQ7O8TGuLp7xes4OmnEOIa4RgMAKkO97FGAAAA&hl=en&mat=CVQRu4gXOCuRElcBEKoLaWdOjq4TJdno4nxViy74uAG1sLRS3AEIR Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2 Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.google.com/search?q=MAHADEV%20SOLUTIONS%20IN%20TEXAS&stick=H4sIAAAAAAAA_-NgU1I1qLAwM0k2SksyMDZMNUk2TzS1MqgwS041STJMMUhJSkk1S02yXMQq5evo4ejiGqYQ7O8TGuLp7xes4OmnEOIa4RgMAKkO97FGAAAA&hl=en&mat=CVQRu4gXOCuRElcBEKoLaWdOjq4TJdno4nxViy74uAG1sLRS3AEIR Model: claude-3-haiku-20240307	```json { "brands": [ "Google" ] }
	```json { "brands": [ "Google" ] }
URL: https://www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2 Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2 Model: claude-3-haiku-20240307	```json { "brands": [ "Supernatural Readi", "Yelp for Business", "Mahadev Solutions In Texas" ] }

URL: https://www.yelp.com/biz/mahadev-solutions-in-texas-carrollton-2 Model: claude-3-haiku-20240307	```json { "brands": [ "Yelp" ] }
	```json { "brands": [ "Yelp" ] }
URL: http://www.astrologermahadeva.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "BOOK APPOINTMENT", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://www.astrologermahadeva.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Astrologer Mahadev" ] }
	```json { "brands": [ "Astrologer Mahadev" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 21:27:06 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.977555015566641
Encrypted:	false
SSDEEP:	48:8vCZbduTkpH4idAKZdA1uehwiZUklqehoxy+3:8vCGYDzy
MD5:	891C9639E4D91B6352884F931C2B4C99
SHA1:	0C65B6F25752459E0904E35753B8CB8C312F2564
SHA-256:	B188A11CF0B85BC0096473948796CB3F91DCE92B624FE5047A18AFDE1DE16D72
SHA-512:	10B3CD5E660D932E7FFFC4FD7F63C65D1453B7651B19C92CA4411BF68F01893B4C315EFC9666A01D6ACE9FA717C11E075824B36A4CFCB7BBB624B6A8AEA32A95
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....;..%......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IWYb.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYb.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VWYb.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VWYb............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VWYd.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........@c.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:27:05.900509119 CEST	426	OUT	GET / HTTP/1.1 Host: footboi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:27:06.543335915 CEST	285	IN	HTTP/1.1 302 Found Date: Wed, 23 Oct 2024 22:27:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 46 Connection: keep-alive Location: http://www.footboi.com/ X-Served-By: Namecheap URL Forward Server: namecheap-nginx Data Raw: 3c 61 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 66 6f 6f 74 62 6f 69 2e 63 6f 6d 2f 27 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href='http://www.footboi.com/'>Found</a>.
Oct 24, 2024 00:27:06.751833916 CEST	285	IN	HTTP/1.1 302 Found Date: Wed, 23 Oct 2024 22:27:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 46 Connection: keep-alive Location: http://www.footboi.com/ X-Served-By: Namecheap URL Forward Server: namecheap-nginx Data Raw: 3c 61 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 66 6f 6f 74 62 6f 69 2e 63 6f 6d 2f 27 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href='http://www.footboi.com/'>Found</a>.

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:27:06.599265099 CEST	430	OUT	GET / HTTP/1.1 Host: www.footboi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:27:07.683862925 CEST	1236	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:27:07 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_O+4zsI7DGB/DC72CFXYA2a/2SRaHPMVmT73Yufv175OgZmR8+Rs1ybgaN+fkYnkf2H15aApxwp6NU8PK8N8stA== last-modified: Wed, 23 Oct 2024 22:27:07 GMT x-cache-miss-from: parking-697b9cf7ff-n4brc server: Parking/1.0 content-encoding: gzip Data Raw: 32 43 42 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ac 59 eb 6e db 38 16 fe bf 4f c1 f1 20 8b 76 6a d9 b2 13 3b 8e 9c 14 48 9a de a6 69 da f4 32 6d a6 28 0a 4a a2 2c d6 92 a8 15 29 5f ea 35 b0 af b1 af b7 4f b2 87 a4 24 4b b2 ec 26 83 a9 d1 58 22 79 0e cf e5 3b 17 d2 a7 bf 5c be 79 f2 e1 f6 ed 53 e4 8b 30 78 7c 2a ff a2 00 47 93 b3 16 89 5a 08 b9 58 60 03 bb 76 c0 9c e9 94 2c cf 5e 3f 9b cf 2f 6f 6e 7f 7f c5 fe 7c e9 cf 9c eb f3 9b a7 17 17 37 e7 97 ef e7 e7 f3 f7 e7 bf 5f 9c 5f 47 cb e0 d3 bc 3f bb ba 3d f2 3f 46 27 73 73 f8 e3 e6 95 ed bf ba f0 66 df 9f 7d 7c c2 dd 67 81 3d fc e0 de f8 0b fb e4 dd e7 4f 9f d3 97 47 e2 b0 e7 3c 62 23 ef f6 cd ac cb 47 ff ea 5d 3d 7f 3b c1 87 97 4f 7b 57 5d f1 e2 e3 d1 d5 d3 eb d7 4f ce e7 4f cf cf 6f ce ce be bd 79 74 f4 83 bf 3c be 7c 7e d1 bd 7c 72 dc 7f f2 ec f3 ed 79 1f 77 fb ef df e1 17 6f 5f ff 11 7e 38 3e bc 4d bd 59 ef 78 f0 66 f2 67 f8 6e f4 e8 1d ef 2d ed 09 be 7e e4 4d 6f a3 a9 d7 7f d1 1b e0 f3 78 31 8f 87 d7 1f 47 6f 5f 8d ae 47 5c 9c 9f 9d 81 ea 04 bb 8f 4f [TRUNCATED] Data Ascii: 2CBYn8O vj;Hi2m(J,)_5O$K&X"y;\yS0x\|*GZX`v,^?/on\|7__G?=?F'ssf}\|g=OG<b#G]=;O{W]OOoyt<\|~\|rywo_~8>MYxfgn-~Mox1Go_G\OC"0r\|p"ZQ" =ha?#cCe,M\2XbAY9j}CrQ2Y"Za l7\21KFTP9uv4LHI^#fKXQ-An%MA@1 JR?Mh"vxNHD bpB!dc!)"&<;$!mTQ!EO,&\-/a`
Oct 24, 2024 00:27:07.683877945 CEST	1236	IN	Data Raw: ce 09 4e 1c 3f 93 e3 17 b0 42 40 a3 e9 3f 50 f6 2f 21 c1 59 8b 82 01 5a c5 90 58 c6 60 20 1a e2 09 e9 c6 d1 64 33 e1 27 c4 3b 6b 75 bb 34 9c 74 38 71 59 8c 13 a9 9f 94 a7 2b 48 18 07 58 10 de 0d d8 84 f1 ae 9c ff 26 1f 3b 8a 45 f7 f1 29 17 4b 70 Data Ascii: N?B@?P/!YZX` d3';ku4t8qY+HX&;E)Kpu/(6q8G1:&T6U2<W17A0\|B'z`ld!+!ZfL`l=yvm3wq2eq"6%mePWgm~\KK[y*pI
Oct 24, 2024 00:27:07.683887959 CEST	424	IN	Data Raw: d7 20 5c 06 a9 59 f5 cc 2e 56 bb 81 5a 61 bc 73 15 0d 63 28 db 62 bf ee d9 a2 bb 2b 5e 27 d8 d2 7a 6b 81 0a ba aa fa e3 9d 42 ab 27 47 18 29 df 2f f7 66 dd dd 45 6f a0 d9 92 be 69 cd bd 14 00 e5 67 d8 59 be 65 70 a4 58 ee d7 a1 b2 f4 ee 6a 34 93 Data Ascii: \Y.VZasc(b+^'zkB'G)/fEoigYepXj4lJB'dUN< 8Y]mZrxS,.yPQad*C3=3I5mi$]\|VcR;qT20RrIY1`3.Irzidb}
Oct 24, 2024 00:27:07.683903933 CEST	1236	IN	Data Raw: 44 cd 2d 60 e5 42 80 43 1d 70 f3 21 79 30 4d b9 55 ca be 4a 78 d4 1f 34 b5 9f 5b d7 73 4a 88 5a 73 96 f9 42 31 d8 c0 1b a0 ad 04 34 0c 9e 3a 52 f5 06 5d fb bd d1 e8 70 54 f2 47 69 70 13 d0 a5 44 b0 30 54 2a a8 32 b6 7c 79 22 6f 60 df c3 43 bb ef Data Ascii: D-`BCp!y0MUJx4[sJZsB14:R]pTGipD0T*2\|y"o`Cgwgo=-i+G:ld@MXS3:~]{9;T,>\fW2g,d\!QX-_[um<GMsTfZ$
Oct 24, 2024 00:27:07.683907032 CEST	212	IN	Data Raw: 43 95 a5 6f 2f 51 99 e9 5b 54 dd 7b a8 65 85 74 bc cc e4 b5 1c f5 62 a7 2a d4 b5 ec a7 34 e0 6a bd a7 3e b0 95 d5 f4 42 6b 01 90 63 af 53 d9 0e f4 27 2c 00 af d6 d6 79 74 23 a2 bc 00 03 c9 12 61 ec 09 d3 3e 1b 6a f9 96 0a c6 88 b8 5d 58 f9 be ee Data Ascii: Co/Q[T{etb*4j>BkcS',yt#a>j]X;`dme%[6+z+0l/9{4~>n97J-WBvWfdxfQSE#>CqyB%a']`#
Oct 24, 2024 00:27:07.683911085 CEST	1236	IN	Data Raw: b0 36 2e 6a 1f d7 69 c9 a1 79 8b 39 5e e2 0b f6 4c ef 08 df 92 7d 79 11 60 af 1f a0 0d fe 61 23 ba 6a b7 a4 22 dd 98 cd c1 af 40 34 66 ea 42 2b 8b de 98 27 69 8d 56 57 e3 45 76 ad 95 ab 6b b9 9b 9e 29 14 41 89 fb 62 5a dc 1b fb d1 ac 47 83 df b4 Data Ascii: 6.jiy9^L}y`a#j"@4fB+'iVWEvk)AbZGe&nD^e11~k(au&s"Myd/,F,XVViS(&+TRK%KrI!.V#jN-xb.y5N\|,'0G?kT
Oct 24, 2024 00:27:07.683923006 CEST	1236	IN	Data Raw: 83 2e b7 e9 b6 fb be ea 2c 5d dc 53 3c 89 19 66 5b c4 8e 64 16 73 65 24 cc 46 6d 7e 5d 1e e4 78 60 e6 57 b8 dd c0 60 cd 1a 30 c6 87 f5 a1 4c 0f f6 35 75 c5 a7 8d ea 4a f3 8a fd 42 6e 4e 6c ba 4d 8a 0f 96 19 7f 89 b7 ca 56 77 2e 2b fd 70 ca 3a 42 Data Ascii: .,]S<f[dse$Fm~]x`W`0L5uJBnNlMVw.+p:B3!DlrE\|fa&qk3iI3h"Ok-{\|<8]!d%Cbp73$9zLmkEopvzR[#,]Uwq>~L IYhkn+2#bF5D
Oct 24, 2024 00:27:07.683938980 CEST	1236	IN	Data Raw: a7 03 9b f7 e3 c3 83 dc 0d 66 5d d8 af cb 22 22 38 aa 69 16 39 2d 75 49 87 6a 8e 9d ce c6 6e a7 40 64 ad 88 4c f5 3c f2 c2 10 2b 9a 62 22 7f 1c cb 8e 5c b2 74 1a 8a 9b 15 5e e0 32 5c 85 de 32 5a 50 99 37 1d de 0c 6e 73 1b ba 87 3a bf 5e 83 5f 2c Data Ascii: f]""8i9-uIjn@dL<+b"\t^2\2ZP7ns:^_,@xJw64U&<{+#A}`m!,mVr!Wxs,yN<:F#:`#3>}3]M3o+N{-](P=<y Ejj86}"&c
Oct 24, 2024 00:27:07.684186935 CEST	636	IN	Data Raw: f9 99 13 27 51 16 d1 02 ae 19 a3 00 0a 4d d6 a6 97 2d e8 fb 88 80 05 56 ff 00 6d de b5 dc 6a f6 59 64 2e f8 26 00 a8 ca 80 0d 52 53 2e e0 7a bf ad f1 00 5c 49 c5 4c f2 9a db 6b f1 8c d2 31 14 ab 23 4d 1e 34 65 dd 6a a8 b5 80 25 83 e1 4a aa 59 3a Data Ascii: 'QM-VmjYd.&RS.z\ILk1#M4ej%JY:[+LNN_gGx<xSOdqxK/!i4QZNA5]fCn$Hm,^$xUNcaZzd< o$Jt0p_RSM0")D%dbII
Oct 24, 2024 00:27:07.684201956 CEST	106	IN	Data Raw: 4f 09 b9 b3 3e 9f db b4 cf 0d c0 8d f5 ef 6e b4 4e 47 de 23 60 b9 6d 96 b1 e5 d8 52 22 ed b6 5a 91 4b 3b 48 53 3a 12 fc 7f e7 9b b7 54 ad 6c 51 57 5e c4 a4 3f 01 00 00 ff ff c2 ba b8 06 de 7b c7 63 00 fa 02 18 d0 d2 17 20 05 00 00 00 ff ff 02 df Data Ascii: O>nNG#`mR"ZK;HS:TlQW^?{c "'/<U`0
Oct 24, 2024 00:27:07.684272051 CEST	106	IN	Data Raw: 4f 09 b9 b3 3e 9f db b4 cf 0d c0 8d f5 ef 6e b4 4e 47 de 23 60 b9 6d 96 b1 e5 d8 52 22 ed b6 5a 91 4b 3b 48 53 3a 12 fc 7f e7 9b b7 54 ad 6c 51 57 5e c4 a4 3f 01 00 00 ff ff c2 ba b8 06 de 7b c7 63 00 fa 02 18 d0 d2 17 20 05 00 00 00 ff ff 02 df Data Ascii: O>nNG#`mR"ZK;HS:TlQW^?{c "'/<U`0
Oct 24, 2024 00:27:09.438430071 CEST	709	OUT	GET /search/tsc.php?ses=ogczn0HaWA0ubXovBVOHjx9c8wmqQrgJ52O_ZGiRMtVjHgbQ4u-Zln-Cun_NyqZYFBL3EbBS2qKYuFoVXSvZ9OGXDAhPbtKTe7kNOya_OQQBq1z7zeaFoR5y6XwtOPf_LokWS8wSQVrcnqo-pbpT4X9P0y14mkbYIjYQDvGWADDQYH8yWg7hK3DEXLXa3WzKcuD5gJudpEVCAk0wSO2Dsq6rq-PGiSkabVtf7nIJRygD4Gvqt2tIN_cLChzw3WwA8uP17UBCG57kQX6Ad8oTPHVSv38ghAhiTjcMmQQOZE3-fKPlxo7DkqpDD-QRnSNn0ab63XLX-o6X18irk1mLHG0-Q4Sh1EpZMny2p7pTOSK0ieTwQcN-oDZPO52gV-m&cv=2 HTTP/1.1 Host: www.footboi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.footboi.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:27:09.693917990 CEST	181	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:27:09 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-697b9cf7ff-jq5z8 server: Parking/1.0

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:27:07.784817934 CEST	397	OUT	GET /templates/bg/arrows-curved.png HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.footboi.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:27:08.625890017 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:27:08 GMT Content-Type: image/png Content-Length: 13502 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Expires: Wed, 30 Oct 2024 22:27:08 GMT X-CFHash: "107694ee1e94990d97b7e58651ffd6a0" X-CFF: B Last-Modified: Tue, 12 Oct 2021 05:19:02 GMT X-CF3: H CF4Age: 0 x-cf-tsc: 1719734638 CF4ttl: 31536000.000 X-CF2: H Accept-Ranges: bytes Server: CFS 1124 X-CF1: 11696:dB.scl1:cf:nom:cacheN.scl1-01:D X-CF-ReqID: aa2052ac08a6381716203938aedd1b12 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 9d 00 00 02 52 08 06 00 00 00 18 89 18 5e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 34 53 49 44 41 54 78 01 ed dd cd 93 5c d7 79 df f1 e7 dc 1e ca 88 94 94 46 91 55 e5 8a 62 b3 55 8e 1c 96 17 41 8b d9 07 23 56 d9 d1 ca 18 a2 ca 89 00 4a c2 cb 3f 00 80 2e 95 77 11 a0 55 44 26 e5 41 fe 01 f6 50 26 c1 8a 17 ec d9 51 d2 82 8d b5 23 a2 b1 71 41 a4 64 5c 96 45 5b 16 a5 a0 59 15 92 98 97 be 27 e7 dc e9 3b b8 d3 e8 99 e9 97 7b bb cf cb f7 a3 1a ce 2b 5f 84 99 ee df 3c cf 79 ce 39 ea 6b e7 6f bf 2d 4a 9a a2 25 15 43 29 49 33 c9 de 37 6f a6 92 65 a9 0c 92 be ec ee a4 bd ce e5 be 00 00 30 87 95 e1 eb 66 1e 3c 86 36 2f 4a 92 fd 8f 26 e6 b5 7d f3 a9 53 f2 b5 17 6e f7 25 93 9e 12 31 e1 a3 df cf 1a c9 03 d9 db bd 27 b2 97 f6 de b8 9c 0a 00 00 27 58 99 f8 2b b5 ac 9a 34 5a d3 f9 3b 4a 54 66 de 4a 56 f2 7f c4 d7 2e dc b6 1f ec 29 53 2d 65 2a bb 27 [TRUNCATED] Data Ascii: PNGIHDRR^pHYssRGBgAMAa4SIDATx\yFUbUA#VJ?.wUD&AP&Q#qAd\E[Y';{+_<y9ko-J%C)I37oe0f<6/J&}Sn%1''X+4Z;JTfJV.)S-e*'ZdOy'a{mMCr1VLK@:HN^}exN\/klP\j:vr_3n.!n?t8pNX5Dwd8`iBQ=L:`bL+Ne7tFVxSe{:H]!`6ooqNixNhz1%T?VlD+Bg9zZNBD-U[%~/DJ?F)5J
Oct 24, 2024 00:27:08.625900984 CEST	212	IN	Data Raw: c7 1f c3 f1 6b b9 49 f5 03 c0 57 84 8e 8f ec 35 0c 89 6e 73 fc 0e 00 df d0 5e f3 91 f9 25 21 6f bf 7d ee d4 83 67 2f dc 7e a5 f5 e7 af b5 04 00 3c 40 a5 13 0e 86 0f 00 38 8f 4a 27 1c 07 c3 07 54 3f 00 5c 45 a5 13 b6 fd 93 0f 58 fb 01 e0 08 2a 9d Data Ascii: kIW5ns^%!o}g/~<@8J'T?\EX\|vS`hY"`h}?J'^y7[@tP5ZQ5F`,&&6`VT:T3A`jy.7*z0
Oct 24, 2024 00:27:08.625912905 CEST	1236	IN	Data Raw: 11 2a 1d 54 e1 70 eb 8d a9 37 00 47 20 74 50 29 a6 de 00 1c 87 f6 1a ea c6 86 53 00 07 a8 74 50 37 36 9c 02 38 40 e8 60 61 0e b5 de ce bf be 2e 00 a2 43 e8 60 f1 4c 3b 57 29 f5 e6 d7 2e dc 7e c0 ba 0f 10 17 d6 74 e0 02 ae 59 00 22 41 a5 03 17 3c Data Ascii: *Tp7G tP)StP768@`a.C`L;W).~tY"A<f!_ T>+o]Zo@xhuvJ 5?kioo:yT:i=uB!`F9pk:]jZpL[\G5ZoZK,h\0,5A
Oct 24, 2024 00:27:08.625921011 CEST	1236	IN	Data Raw: ed af ff c8 25 f3 67 6c ab 9f a6 00 80 7b b4 ce e4 b9 de 1b e7 bb 52 b3 da 42 e7 09 c3 6a 28 11 e9 28 b3 68 77 ff ad f8 76 19 d3 7e 03 e0 b0 87 26 78 9e ad fb 2c bc c5 85 ce a8 88 43 88 f6 1b 00 47 3d d0 9f 3c 7a b6 ce c1 82 e5 85 ce 28 13 42 a2 Data Ascii: %gl{RBj((hwv~&x,CG=<z(BnlwBIY*bL0t:Xr@$n8KfN)&tFDSQXz\oKK!j$w%<K`8JJE2?#CF@w'j-
Oct 24, 2024 00:27:08.625931025 CEST	1236	IN	Data Raw: fb 0d 4b b2 c8 c0 b1 08 1d 78 c9 3c 50 7a 4a ab 8d 10 5a 6f 16 d3 6f 58 02 ad 33 b9 d2 7b e3 7c 5b 16 88 d0 81 ef 82 69 bd 15 58 ff c1 02 2c 25 70 2c 42 07 c1 08 a9 f5 56 d8 3f 78 54 4c 0b 4e d6 05 a8 c6 43 2d d9 73 bd d7 5f e8 c9 12 10 3a 08 4e Data Ascii: Kx<PzJZooX3{\|[iX,%p,BV?xTLNC-s_:Nh7Tdc:Y0NG LE !88xQ@0DV?~vZ_:cQ.*:^7d8mpCXD_W)QM_W
Oct 24, 2024 00:27:08.631381989 CEST	636	IN	Data Raw: 92 0c 0e 9e f4 8b e0 92 a9 ac 34 8b b7 b2 ac b1 aa 13 9d ff a2 9b 68 f9 bc 69 ff 7f 41 ab c4 be ff 79 f3 1c b4 6a fe 7b 56 cd eb a6 e8 6c 75 f8 0b b1 36 af 2f bf fb d6 85 4d f1 dc b8 d0 19 f3 55 ba ab b5 dc c9 92 a4 fb 68 6f bb d7 ef 6d 04 bb b8 Data Ascii: 4hiAyj{Vlu6/MUhomW:{B;L}8Y<w{$\1w>?4[<O]%G#y&t3x`65x<u(wBlN(XvMENYUt\nYt
Oct 24, 2024 00:27:08.631407022 CEST	1236	IN	Data Raw: c9 0b b5 9f e2 42 e8 54 c3 cb ea 87 b3 de 00 94 68 d3 09 b9 fc ee 5b 17 36 a5 46 84 4e e5 fc 9b 7c fb ea 9f bc d6 52 4a 5f a3 f5 06 44 af f6 f3 da 08 9d fa 78 37 f9 c6 35 0b 00 a4 e6 e0 21 74 16 c2 c3 ea c7 b4 de 58 f7 01 e2 55 d7 9d 3c 84 ce 62 Data Ascii: BTh[6FN\|RJ_Dx75!tXU<bLO_gZ%N;o"U;l#t#kfgUjBgu-_Zo\Q29wx7x5~g?TqO\|;^B\y"fnr#@@~8/~\|B^X<
Oct 24, 2024 00:27:08.631421089 CEST	1236	IN	Data Raw: 3d 29 f3 31 13 4a 7e 4e d3 31 30 70 02 42 07 a8 98 bd f3 c7 3c 69 76 62 1a bf ae 4b f3 1b af 34 57 64 a5 69 df 2e c2 c9 be 6d 03 ca bc bf aa 45 af ee 7f 4e e5 1f 37 55 c6 6a e5 61 a5 75 df fc 33 f3 ef a3 f9 f7 a5 c3 0f e6 af 95 96 f7 95 4a 1e 66 Data Ascii: =)1J~N10pB<ivbK4Wdi.mEN7Ujau3JfJ>{z00-BO>~)O?}VY<>QBX!%+BXBLk@v! D<JSpa#$x;g$QkZ!8DD\|/Gq1DB-{pE:\|&
Oct 24, 2024 00:27:08.631428957 CEST	1236	IN	Data Raw: 6f 87 0f 86 67 bd d9 d6 5b 4b 00 c0 d3 76 5b 6c a1 73 c0 d7 ea 87 6b 16 00 94 3c 30 cf 05 37 7d 6a b7 45 1b 3a 25 5e 56 3f 8c 5c 03 28 f9 ab 0f de 79 e9 45 f1 00 a1 53 e2 63 f5 c3 41 a3 00 86 bc 68 b7 11 3a e3 79 59 fd 70 c7 0f 10 bd 87 99 c8 f7 Data Ascii: og[Kv[lsk<07}jE:%^V?\(yEScAh:yYp]>9L5nk v=7]zGnt>@2 tf`O=zcpOqD"KgEWliv@-wX\wPBb8Q;@8O>x
Oct 24, 2024 00:27:08.631434917 CEST	636	IN	Data Raw: a5 fd 36 4e 39 88 b4 52 5f 33 7f 28 4f b3 3e 24 f9 38 b4 d2 83 e7 69 a7 2d 06 a1 83 f8 68 dd 31 4f ba 9d 90 a7 df a6 61 5b 73 89 64 cd 41 92 98 d7 ea 74 5e 15 89 6a 46 b1 4e 44 3b 6d e1 08 1d 44 ab 98 7e 0b e1 d4 eb 3a 34 5b d7 9a 7b d2 68 e6 95 Data Ascii: 6N9R_3(O>$8i-h1Oa[sdAt^jFND;mD~:4[{hQ\|+8]``_uU{7m%y:KJijO;LjmXZIm@Dz-Y':9yTet${lN[B8@H-LF
Oct 24, 2024 00:27:08.636660099 CEST	1236	IN	Data Raw: 78 ef 07 53 3a fc 50 6a c2 ea 23 1b 52 f9 e7 4d 50 d9 d7 2a 93 7e 96 c8 c1 fa 52 11 5c 32 85 95 e1 2f b6 54 63 ee 58 6a e8 14 0e 06 10 b4 ba ca fa 0f 80 9a dc f8 f5 fd 57 6f 0a 96 ca 89 d0 29 b3 01 94 49 76 43 68 bf 01 a8 1e c1 b3 64 ce 85 4e d9 Data Ascii: xS:Pj#RMP*~R\2/TcXjWo)IvChdN[H@el7.3NN$lQKw$:E..,w#XB@NAe+\B`j,LSXm^Z}`XYB~Wo~!W-u7k{
Oct 24, 2024 00:27:12.847955942 CEST	396	OUT	GET /templates/logos/sedo_logo.png HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.footboi.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:27:13.098205090 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:27:12 GMT Content-Type: image/png Content-Length: 15086 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Expires: Wed, 30 Oct 2024 22:27:12 GMT X-CFHash: "def00c11b1596db4efee6a9fbe64fc27" X-CFF: B Last-Modified: Mon, 11 Jan 2021 07:44:34 GMT x-cf-rand: 7.161 X-CF3: H CF4Age: 2029871 x-cf-tsc: 1683860008 CF4ttl: 31536000.000 X-CF2: H Accept-Ranges: bytes Server: CFS 1124 X-CF1: 11696:dB.scl1:cf:nom:cacheN.scl1-01:D X-CF-ReqID: ab36c2699b842c3dd6c38b099b735245 Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 8b 41 07 11 8d 41 04 20 8d 41 04 20 8d 41 04 20 8e 41 03 2e 8d 41 04 20 8d 41 04 20 8b 41 07 11 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 8e 41 03 2e [TRUNCATED] Data Ascii: 00 %6 % h6(0` $@@@@AA A A A.A A A@@@@@@@@A.AU@@@@@@@@@@@@@@@@}AUA @@@@@A.@j@@@@@@@@@@@@@@@@@@@@@@@@}A.@@

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:27:08.668014050 CEST	302	OUT	GET /templates/bg/arrows-curved.png HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:27:09.261889935 CEST	540	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:27:09 GMT Content-Type: image/png Content-Length: 13502 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Expires: Wed, 30 Oct 2024 22:27:09 GMT X-CFHash: "107694ee1e94990d97b7e58651ffd6a0" X-CFF: B Last-Modified: Tue, 12 Oct 2021 05:19:02 GMT X-CF3: H CF4Age: 0 x-cf-tsc: 1713503259 CF4ttl: 31536000.000 X-CF2: H Server: CFS 1124 X-CF-ReqID: a2720d783b94212987b9bc77b0638790 X-CF1: 11696:fS.dfw1:cf:nom:cacheN.dfw1-01:H Accept-Ranges: bytes
Oct 24, 2024 00:27:09.261930943 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 9d 00 00 02 52 08 06 00 00 00 18 89 18 5e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 Data Ascii: PNGIHDRR^pHYssRGBgAMAa4SIDATx\yFUbUA#VJ?.wUD&AP&Q#qAd\E[Y';{+_<y9ko-J%C)I37oe
Oct 24, 2024 00:27:09.261965036 CEST	212	IN	Data Raw: 50 e9 00 f5 d9 bf 64 6e a0 ee 50 fd 00 fb a8 74 80 fa ec 5f 32 47 f5 03 1c a0 d2 01 16 8b ea 07 51 a3 d2 01 16 8b ea 07 51 a3 d2 01 96 8f ea 07 d1 a0 d2 01 96 8f ea 07 d1 a0 d2 01 dc 94 2a ad b7 32 ad 36 a8 7e 10 12 42 07 70 9d 96 ae 4e 74 5b 3e Data Ascii: PdnPt_2GQQ26~BpNt[>u.5uS=Ov&7\|W~h+ov7[__Q%5M65*%}Y~RWZ:Ygou'Zg?t@
Oct 24, 2024 00:27:09.261986971 CEST	1236	IN	Data Raw: bc 35 bc 74 8e 00 c2 f2 29 99 41 1e 48 a7 4e b5 24 51 26 88 b2 af 99 7f cc d3 8a 75 21 c0 07 fb fb 7f f6 74 bb f7 37 2f f4 04 58 b0 99 42 e7 28 ad 0b a6 55 67 2b 23 b1 01 a4 4e 53 15 01 4e 23 80 b0 70 95 86 ce 38 04 11 e0 05 02 08 0b 51 7b e8 8c Data Ascii: 5t)AHN$Q&u!t7/XB(Ug+#NSN#p8Q{45TZ6KQo+jHBp~*wBG99:A;kBcDwY9:J!nOBI0)/BgTUP"gU>`dm8ti83lMtrBl;e]
Oct 24, 2024 00:27:09.262006044 CEST	1236	IN	Data Raw: 37 00 a3 8e dc 3c 4a e8 38 41 75 4c 09 b4 f9 ee 8f 2f 74 c4 53 5c 32 07 60 c4 d8 e0 21 74 dc 12 4a f5 73 89 75 1f 00 32 e6 d4 02 42 c7 59 aa 93 a8 c1 2d 9f d7 7e f2 d6 5b 22 57 cd cf d7 ba 00 88 d5 a1 e0 21 74 dc e7 fd e4 1b 23 d7 40 e4 b4 bc 7d Data Ascii: 7<J8AuL/tS\2`!tJsu2BY-~["W!t#@}G\|\|cWqNS+BosjO5Zo@j#ty-BM8_:ak c!tf$[x@7N;\|DXN\R-ozk
Oct 24, 2024 00:27:09.262020111 CEST	1236	IN	Data Raw: 10 3a 80 1b f2 f6 1b eb 3f d5 1a 9e b0 d0 cc df 49 ec eb 6c ff 6d b1 21 35 fc 78 de d2 53 a6 95 97 57 4e 8b a8 9e fa e6 7b bd 5f ad 68 49 4d 40 da b7 fb a2 f5 47 26 3c 1f 98 0f 7e 64 de 36 ef ab 9e 3c 7a d4 f7 bd b2 19 45 e8 00 ee b1 01 b4 25 99 Data Ascii: :?Ilm!5xSWN{_hIM@G&<~d6<zE%c^aX2d<>7?pC)uBI8?*JQZZ&&+u'nJTc&JD:542f~OG-Cp3P5Bpc
Oct 24, 2024 00:27:09.262034893 CEST	636	IN	Data Raw: e5 67 fb 8d d6 1b 80 49 2c 33 78 08 9d e3 a5 a2 e4 86 6f d5 0f ad 37 00 13 58 ca 45 70 84 ce 84 b4 92 8e f9 ed 60 d3 b7 d3 0f fe f0 4f 5f 5d 4f 54 72 95 0d a7 00 c6 58 78 f0 10 3a d3 4b 4d f8 b4 b3 4c 6d fa 54 fd b0 e1 14 c0 11 16 1a 3c 84 ce 1c Data Ascii: gI,3xo7XEp`O_]OTrXx:KMLmT<\|~p`:BTh[6FN\|RJ_Dx75!tXU<bLO_gZ%N;o"U;l#t#kfgUjBgu-_Zo\Q
Oct 24, 2024 00:27:09.262082100 CEST	1236	IN	Data Raw: 3b 8f 76 af bb 16 38 16 a1 83 19 f9 75 d4 4e 81 b1 6b 84 ce 54 38 1b ef fd e8 85 eb e2 28 42 07 f3 f1 70 dd c7 62 ed 07 41 5a e2 a6 cf 49 11 3a a8 8a 77 47 ed 14 98 7c 43 00 96 be e9 73 52 84 0e 6a e0 df c8 b5 c5 be 1f 78 49 eb 87 59 a2 cf fd fc Data Ascii: ;v8uNkT8(BpbAZI:wG\|CsRjxIYowjQ;R\@grM"t^\>3B8r]WgBQoX,LyzI~C<>W>+O:?7#'!t [oVCanSB.f@w#
Oct 24, 2024 00:27:09.262109041 CEST	212	IN	Data Raw: 0b 66 aa 94 4e b5 a8 be d2 fa 7d f3 7e 3f 93 46 2a 66 0d 29 ff 82 15 49 1f 3d da ee 13 50 7e f1 2e 74 ca f2 00 4a e4 9a d6 fa 2c eb 3f 40 d4 fa 36 94 6c 48 95 3e b6 ff b6 96 8f 74 7e 57 d1 63 79 78 4d 20 91 41 b3 fc be 79 9e 79 ba f4 6e fe 39 ad Data Ascii: fN}~?F*f)I=P~.tJ,?@6lH>t~WcyxM Ayyn9U>Tp$C@,<<G&tOA`)c:e,s\| {k;x~dz/=2qj:ob
Oct 24, 2024 00:27:09.262120008 CEST	1236	IN	Data Raw: fc 7f fc 1e d5 0f 80 9a 3d 54 59 76 ee 97 bd ff d1 15 e4 0e 85 ce 13 b4 f4 b4 64 77 b4 5a e9 fc e6 7e bb 2b 81 a1 fa 01 b0 00 e6 69 54 2e 7f d0 7b 69 53 70 42 e8 94 84 5c 05 51 fd 00 a8 99 d6 22 37 ff f1 9d 97 6e 4a e4 26 0e 9d 51 5a 74 57 4c 00 Data Ascii: =TYvdwZ~+iT.{iSpB\Q"7nJ&QZtWLD&:#RpT?j}T:e46C U2'#tu 5~n#J]H`.Ztr.<NYhdOsnB,~!`6$bD36
Oct 24, 2024 00:27:09.267450094 CEST	1236	IN	Data Raw: 21 53 8d 75 a6 df 50 39 2d 77 07 3a 39 17 eb c0 c0 51 08 1d 54 65 7f c3 e9 a3 64 ab 9f b6 bd 5b 24 5d 6d 5d 5b fd 9c 3c b5 ce fa 0f aa c1 fa cd 51 08 1d 54 cd eb d6 9b 55 1a bf 26 80 30 ad 28 37 7c 4e 83 d0 41 6d 6c f8 a8 ac 71 eb d7 ef b6 3b e2 Data Ascii: !SuP9-w:9QTed[$]m][<QTU&0(7\|NAmlq;)`Rf&Mtv9 t^6dgKhz?H"tPJN.v7\|Nr{~FLy?xPVJYA*]QZ?:p8;eofCEAU?{
Oct 24, 2024 00:27:13.638425112 CEST	301	OUT	GET /templates/logos/sedo_logo.png HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:27:13.775772095 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:27:13 GMT Content-Type: image/png Content-Length: 15086 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Expires: Wed, 30 Oct 2024 22:27:13 GMT X-CFHash: "def00c11b1596db4efee6a9fbe64fc27" X-CFF: B Last-Modified: Mon, 11 Jan 2021 07:44:34 GMT x-cf-rand: 1.896 X-CF3: M CF4Age: 0 x-cf-tsc: 1682322452 CF4ttl: 31536000.000 X-CF2: H Server: CFS 1124 X-CF-ReqID: 819f336e010d7a64ae507a3d05c1bacd X-CF1: 11696:fS.dfw1:cf:nom:cacheN.dfw1-01:H Accept-Ranges: bytes Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 8b 41 07 11 8d 41 04 20 8d 41 04 20 8d 41 04 20 8e 41 03 2e 8d 41 04 20 8d 41 04 20 8b 41 07 11 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 8e 41 03 2e [TRUNCATED] Data Ascii: 00 %6 % h6(0` $@@@@AA A A A.A A A@@@@@@@@A.AU@@@@@@@@@@@@@@@@}AUA @@@@@A.@j@@@@@@@@@@@@@@@@@@@@@@@@}A.@@

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:27:09.756088972 CEST	675	OUT	GET /search/tsc.php?ses=ogczn0HaWA0ubXovBVOHjx9c8wmqQrgJ52O_ZGiRMtVjHgbQ4u-Zln-Cun_NyqZYFBL3EbBS2qKYuFoVXSvZ9OGXDAhPbtKTe7kNOya_OQQBq1z7zeaFoR5y6XwtOPf_LokWS8wSQVrcnqo-pbpT4X9P0y14mkbYIjYQDvGWADDQYH8yWg7hK3DEXLXa3WzKcuD5gJudpEVCAk0wSO2Dsq6rq-PGiSkabVtf7nIJRygD4Gvqt2tIN_cLChzw3WwA8uP17UBCG57kQX6Ad8oTPHVSv38ghAhiTjcMmQQOZE3-fKPlxo7DkqpDD-QRnSNn0ab63XLX-o6X18irk1mLHG0-Q4Sh1EpZMny2p7pTOSK0ieTwQcN-oDZPO52gV-m&cv=2 HTTP/1.1 Host: www.footboi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:27:10.629915953 CEST	181	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:27:10 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-697b9cf7ff-px5gg server: Parking/1.0

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:27:25.964078903 CEST	1005	OUT	GET /caf/?ses=Y3JlPTE3Mjk3MjI0MjcmdGNpZD13d3cuZm9vdGJvaS5jb202NzE5NzgzYjU3YjU5NS41ODcwNDc4MCZ0YXNrPXNlYXJjaCZkb21haW49Zm9vdGJvaS5jb20mYV9pZD0zJnNlc3Npb249TVVQMXFFcFFIUzZTWGtQN1pMNmI%3D&query=Psychicchat&afdToken=ChMI5Z-amMaliQMVZtkCBx13AzhfEmoBlLqpj1NEhxINBsQwzXDy_Gdt5wiyL46XN3_Zp11bC5KS7MdeT-JW5Pij_L5GtR6p4XLigrrLnvS-6GLFdSCoAHwudcw80G7FNjIjpVQpiptBV1zY3j6hSh3y4xi8lLzgZpRc2vcC8ARVIAE&pcsa=false&nb=0&nm=5&nx=238&ny=72&is=493x530&clkt=3 HTTP/1.1 Host: www.footboi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4e606af5a3431b96:T=1729722430:RT=1729722430:S=ALNI_MaMkDzMyf542q1VIHVgUq60oZx5Qg
Oct 24, 2024 00:27:26.845736980 CEST	1236	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:27:26 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_hHMCx6LuFyWOfL+mhpvJEB98T3jnXZz8tU8qTtwl0QC2+Z5CKn5HjKtsog+fn6UwFOKAnQTIbT84Pq9PzgGAHA== last-modified: Wed, 23 Oct 2024 22:27:26 GMT x-cache-miss-from: parking-697b9cf7ff-k6vp5 server: Parking/1.0 content-encoding: gzip Data Raw: 32 43 42 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ac 59 fb 73 da b8 16 fe fd fe 15 5e 76 72 a7 dd 62 30 24 10 62 42 67 92 34 6d da a4 6d b2 9b de be a6 d3 91 6d 19 ab b1 25 d7 92 79 84 e5 7f bf 47 92 0d b6 31 34 d9 d9 32 0d b6 1e 9f ce e3 3b e7 48 e2 f8 b7 17 ef cf 6e 3f 5f 9f 1b 81 88 c2 e7 c7 f2 af 11 22 3a 1e 35 30 6d 18 86 87 04 32 91 e7 84 cc bd bb c3 f3 d1 db 97 d3 e9 8b 9b cf 6f 2e d9 97 d7 c1 c4 7d 77 72 73 7e 7a 7a 73 f2 e2 af e9 c9 f4 af 93 37 a7 27 ef e8 3c fc 38 ed 4e ae 3e 1f 04 1f e8 d1 d4 ea df df 5c 3a c1 e5 a9 3f f9 f1 f2 c3 19 f7 5e 86 4e ff d6 bb 09 66 ce d1 9f 9f 3e 7e 4a 5f 1f 88 fd 8e fb 8c 0d fc cf ef 27 6d 3e f8 d9 b9 7a 75 3d 46 fb 2f ce 3b 57 6d 71 f1 e1 e0 ea fc dd db b3 93 e9 f9 c9 c9 cd 68 f4 3d b8 78 7b 36 eb 5f a5 2f e7 1f df fb 57 cf a2 20 9e bc 39 3f 3d 1a dc ee ff a0 9f be dc 0f c4 87 c1 cf 5b 31 0d ad 9b b3 ee b3 2f bd b3 4b da bb f8 71 29 38 1b 3f f3 69 ff c3 f4 e5 fb cb 13 7a 73 fb da b9 1d 1c 5c ff 3c ba be 1f bf 3a b9 38 19 8d 40 75 8c bc e7 c7 11 16 c8 70 03 94 70 [TRUNCATED] Data Ascii: 2CBYs^vrb0$bBg4mmm%yG142;Hn?_":50m2o.}wrs~zzs7'<8N>\:?^Nf>~J_'m>zu=F/;Wmqh=x{6_/W 9?=[1/Kq)8?izs\<:8@upp,FTX>ca_\|Ys&., E/AQG%aLa)D0T/MB (4B<ff$JBKq^-VXQXA1$\(Z0Z9,FAq,!)Ca;S18A!`#6k$5*I70$?FV5(
Oct 24, 2024 00:27:26.845815897 CEST	212	IN	Data Raw: d7 58 35 89 79 0c ca 93 08 8d 71 3b a6 e3 75 47 90 60 7f d4 68 b7 49 34 6e 71 ec b1 18 25 12 57 5a a2 2d 70 14 83 ac 98 b7 43 36 66 bc 2d fb bf cb c7 96 82 68 3f 3f e6 62 0e 6e 5c 81 b5 ff f8 cd a0 d2 34 21 b9 c7 2d 97 73 63 72 d8 b2 5a 96 f1 b7 Data Ascii: X5yq;uG`hI4nq%WZ-pC6f-h??bn\4!-scrZq~ u",D]G[f8va$DC576e)v]:/"%JqCDx)$=\|Q4irJ.<s[2,\| 8
Oct 24, 2024 00:27:26.845827103 CEST	1236	IN	Data Raw: 66 78 ad fe 21 8e 0c 6b e9 93 b1 8b 14 b3 9a f0 98 26 18 b8 49 aa 20 ba 27 17 a5 03 13 0f ac 78 b6 0c 92 85 c3 66 12 1a 8c 6f 67 bc 34 a1 69 98 69 6f 0d d9 04 27 7e c8 a6 f6 84 70 02 cc 5e c6 80 a3 04 f2 51 44 c2 b9 1d 31 ca 78 8c 5c 58 37 7f 1a Data Ascii: fx!k&I 'xfog4iio'~p^QD1x\X7h nz&%H,W6~IM~Gb9?*\|'@L!XdSF2p"`>NVj&4c259GiUIemweYKxq7,
Oct 24, 2024 00:27:26.845839024 CEST	212	IN	Data Raw: 7a 8a 4f c6 0e 7a d2 b5 ac 66 fe 1f 8e 25 4f 87 52 7c 6b 98 09 bd 66 bd 16 71 7d 33 22 0f 95 1a 1d cc 65 b4 f6 f9 50 1d 8c 6a da eb 9a ea 32 c0 86 02 e5 3d 50 c9 49 9d 9e b5 b7 e6 9e 66 df 6e 8c 22 73 b3 bb d3 1c a0 63 ed e9 bd 62 5e 44 e5 45 54 Data Ascii: zOzf%OR\|kfq}3"ePj2=PIfn"scb^DET)}Y21AA\|-BlV7\|: 'gG1p\|b`Cz<.7mq/[`bWH6-G-`BC&y0M
Oct 24, 2024 00:27:26.846190929 CEST	1236	IN	Data Raw: b9 5d c8 be 4a 78 a3 db ab db 7e 6e 5c cf 29 21 2a 9b b3 cc 17 0a 60 4d 6f a0 b6 12 d0 34 79 ea 4a d5 6b 74 ed 76 06 83 fd 41 c1 1f 85 c6 75 40 17 12 c1 cc 54 a9 a0 0c 6c 07 f2 44 5e 03 df 41 7d a7 eb 56 e0 b3 c6 87 c3 9b 3c fa 37 44 cf e2 6c 03 Data Ascii: ]Jx~n\)!`Mo4yJktvAu@TlD^A}V<7Dl8z=pzGU:U;gb]570DW$k}\l8?)GB4Y!>ZV6!z]T*`%N(F#QIx
Oct 24, 2024 00:27:26.846369982 CEST	212	IN	Data Raw: 44 c7 d3 42 d9 28 71 2f 71 aa 42 dd 28 5e 46 87 ae d6 4b e6 9d 08 ad 57 37 b0 56 10 39 f1 6c 28 b6 0f 1e 08 1f 4a ad 0d 4a f8 44 64 65 05 07 d2 e5 bf c4 03 a1 7f 36 d4 f6 2c 0d 8e 51 49 bb 18 7a 1e 58 6b 3b 08 0e 61 14 3d b4 83 8a ad cc 8f 2b ba Data Ascii: DB(q/qB(^FKW7V9l(JJDde6,QIzXk;a=+!yz7xHwaFm9~\IU:)ToX:@%=}Ts}c<9$O'{N@9n}j'8)&*J`^
Oct 24, 2024 00:27:26.846380949 CEST	1236	IN	Data Raw: 5d d3 3d c2 b7 15 4f 59 f9 c4 f3 3b 6c c3 7f c4 84 6d d8 ed 7e 99 95 16 4b f8 5b a7 e4 d2 64 a5 57 65 77 5a a2 59 9d d5 c2 e9 4a dc e8 d5 c6 46 e9 65 17 2a 43 31 f2 be 9c 95 f7 f3 fd 64 31 60 e1 6f 56 ee 71 f4 6b 49 8b e4 92 c6 49 c5 29 35 19 cb Data Ascii: ]=OY;lm~K[dWewZYJFeC1d1`oVqkII)5^{,qcKMexVlk'4TJ>OjiWW^k&-x6>z;;I;,'<.0>:aZ5tr
Oct 24, 2024 00:27:26.846391916 CEST	212	IN	Data Raw: c6 a6 0e a6 cd 45 23 54 97 6f 82 2c d5 77 54 c4 02 3f da 3b 83 c9 c0 32 26 85 29 db 61 9b 4e 79 5a ec d1 d4 b0 94 e5 f6 7c 29 d2 8d 62 27 e7 e8 d5 2e c3 ba 62 58 54 80 25 79 cc 42 a7 49 51 9a 69 9c eb bb cd 19 cb 2b 8c 08 c6 3c e0 eb f9 4d 65 5c Data Ascii: E#To,wT?;2&)aNyZ\|)b'.bXT%yBIQi+<Me\UG"ATv'f<Wki}k"^>4YY"U>ue&KnW$Qfe7ZS0t"
Oct 24, 2024 00:27:26.846457958 CEST	444	IN	Data Raw: 83 8a 13 6a d4 ac 88 ec 64 dd 69 c7 96 73 ac 5b cc 20 70 fd e7 d8 bc 46 83 d8 b6 86 7e 27 fa a6 d4 4f 1b d9 48 09 ea ea 3c e5 26 ce d7 b1 b2 42 da 94 b8 b8 91 60 df 06 f6 79 07 6d ed cd dc 83 69 8e d4 9d 66 5b da b2 ef 61 5b 0e b7 71 9a 53 8a b3 Data Ascii: jdis[ pF~'OH<&B`ymif[a[qS)6[?Uha0"HdP+7\|O+<`hP j4X\|MMj~x)TL}[I:^qW3[7s"M\.D^@
Oct 24, 2024 00:27:26.846884966 CEST	1236	IN	Data Raw: 35 37 31 0d 0a ac 1c 6b 4f e3 46 f0 af f8 5c 29 c4 b2 31 09 f4 5e 31 4b 05 39 68 91 68 ef 0a 57 a9 15 8a 90 93 38 e0 3b 13 fb 6c 07 48 c3 fe f7 ce cc ae d7 eb 47 42 4e 3d 3e a0 ec ee ec 78 66 76 5e 3b eb 35 f6 fb 63 8d e5 3a 63 eb 9f 40 47 46 db Data Ascii: 571kOF\)1^1K9hhW8;lHGBN=>xfv^;5c:c@GF(52wQWrFMc,GJqj<+xup4~Q3d08\r` 1x.L dx]e0%~4$pbH85s
Oct 24, 2024 00:27:26.853272915 CEST	935	IN	Data Raw: 26 c5 cf 14 53 5d ad d7 e2 4e 15 9f e5 29 39 8b de 5c ca 9f 5d 37 38 1b a1 6e 4c fc bc 46 ab c5 03 48 fd 56 eb f0 34 d0 70 ae db 5e e9 df 54 f2 a0 58 93 5e e0 78 32 09 12 50 1a 08 ef 7e be c8 84 3e 80 fb 04 95 91 75 30 f4 e1 4a 93 42 70 f6 60 ce Data Ascii: &S]N)9\]78nLFHV4p^TX^x2P~>u0JBp`W\ TaLdL$R(r\TZ~z1dPh*\|aiCXqk2F7$%/ Vkc]s79@,~-L6\usT/
Oct 24, 2024 00:27:27.160818100 CEST	1243	OUT	GET /search/tsc.php?ses=ogc-dcuXTs89JHhHpgtFkBYDW8UT_sMF9-IbODL3W-SIwpGa42V7eEk8tFi69-R9uXzyxJ-thKntNBckArXbCrUCfE8CMixCdF8_PcxzrRBfQXyMHdxrOp5X98obf7M4phLlkTfvIeZKjJubkq8NMIy0w3eswzoUYUifYBZ3Q3KoEZCS10VD54z7DwdfCQ6odGR23p9uCaeiMr2jd1-9M_c4pspK_37a29eX7e7IAvFXI15G0SRtgUWvtZyLrp5C42Eg6UGeycJMHwIo7bQnNaPNYwg4lgt-71-_12ALA11N_a_zcgnrLcCzLY9mOt9IVh3NM-bhIZpUkApK01pM4hh30zCZG9pvjMUG3XmtYuNzn6o40ku13sF0lTMq1Ny&cv=2 HTTP/1.1 Host: www.footboi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.footboi.com/caf/?ses=Y3JlPTE3Mjk3MjI0MjcmdGNpZD13d3cuZm9vdGJvaS5jb202NzE5NzgzYjU3YjU5NS41ODcwNDc4MCZ0YXNrPXNlYXJjaCZkb21haW49Zm9vdGJvaS5jb20mYV9pZD0zJnNlc3Npb249TVVQMXFFcFFIUzZTWGtQN1pMNmI%3D&query=Psychicchat&afdToken=ChMI5Z-amMaliQMVZtkCBx13AzhfEmoBlLqpj1NEhxINBsQwzXDy_Gdt5wiyL46XN3_Zp11bC5KS7MdeT-JW5Pij_L5GtR6p4XLigrrLnvS-6GLFdSCoAHwudcw80G7FNjIjpVQpiptBV1zY3j6hSh3y4xi8lLzgZpRc2vcC8ARVIAE&pcsa=false&nb=0&nm=5&nx=238&ny=72&is=493x530&clkt=3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4e606af5a3431b96:T=1729722430:RT=1729722430:S=ALNI_MaMkDzMyf542q1VIHVgUq60oZx5Qg
Oct 24, 2024 00:27:27.419892073 CEST	181	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:27:27 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-697b9cf7ff-px5gg server: Parking/1.0

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:27:27.504735947 CEST	775	OUT	GET /search/tsc.php?ses=ogc-dcuXTs89JHhHpgtFkBYDW8UT_sMF9-IbODL3W-SIwpGa42V7eEk8tFi69-R9uXzyxJ-thKntNBckArXbCrUCfE8CMixCdF8_PcxzrRBfQXyMHdxrOp5X98obf7M4phLlkTfvIeZKjJubkq8NMIy0w3eswzoUYUifYBZ3Q3KoEZCS10VD54z7DwdfCQ6odGR23p9uCaeiMr2jd1-9M_c4pspK_37a29eX7e7IAvFXI15G0SRtgUWvtZyLrp5C42Eg6UGeycJMHwIo7bQnNaPNYwg4lgt-71-_12ALA11N_a_zcgnrLcCzLY9mOt9IVh3NM-bhIZpUkApK01pM4hh30zCZG9pvjMUG3XmtYuNzn6o40ku13sF0lTMq1Ny&cv=2 HTTP/1.1 Host: www.footboi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4e606af5a3431b96:T=1729722430:RT=1729722430:S=ALNI_MaMkDzMyf542q1VIHVgUq60oZx5Qg
Oct 24, 2024 00:27:28.379420996 CEST	181	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:27:28 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-697b9cf7ff-9j6x4 server: Parking/1.0

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:27:31.701967001 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Oct 24, 2024 00:28:16.882324934 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:28:13.315725088 CEST	1093	OUT	GET /css/bootstrap.css HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:13.472799063 CEST	532	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:13 GMT content-type: text/css last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 21312 date: Wed, 23 Oct 2024 22:28:13 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Oct 24, 2024 00:28:13.472855091 CEST	1236	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 93 e4 36 92 d8 f7 fe 15 dc 51 28 34 23 55 d5 b0 9e dd d5 13 1a df 79 cf e1 db 88 db fb 60 af 23 1c a1 95 1d 2c 12 d5 c5 15 8b e4 92 ac 9e 1e ad c7 bf dd 81 17 09 20 33 41 b0 aa 25 79 2f 56 7d b7 d3 4d 64 26 Data Ascii: }k6Q(4#Uy`#, 3A%y/V}Md& ]mk&b~\|u]H;O.Z\|/w>]Y2]pSV,.e$ryw8CIU{jIirN:?
Oct 24, 2024 00:28:13.472870111 CEST	1236	IN	Data Raw: f1 8b 70 19 ff 7b 75 69 b8 a4 10 cf f3 b4 3d d4 ef f9 b8 b0 9d 1f aa bc 60 8d f0 3e 2c 0f b4 6d d2 f7 69 db be e7 ce 96 f6 1d ff e9 cc b2 3c 89 ea 26 2f a5 bc bf 9d f1 ff 79 3c b0 63 c5 87 79 fe 7b 72 ec d4 a8 60 4d e5 d1 ef f2 73 5d 35 5d 52 76 Data Ascii: p{ui=`>,mi<&/y<cy{r`Ms]5]RvxJ2.-La#h<.OTsi>J^zS?:B1z}%]@7x[6+ldQWo9i&7V-(^*eu%?Q\&q^
Oct 24, 2024 00:28:13.472955942 CEST	424	IN	Data Raw: 7b a0 c2 71 14 d0 ad c5 72 9d 04 07 fa ae 93 4b 4b 4b e0 1e a8 bb e5 d1 01 12 1c a8 fb 58 35 7e fe 81 c6 85 a8 46 d1 90 45 17 ab c7 d1 80 fe d9 5f 58 4a db e3 3d 74 ca 4f ec b9 a9 46 86 cd 7b a0 7f 8d e6 1f 2d 1e 80 fe 79 cc 41 ac 1c 68 1c b8 7c Data Ascii: {qrKKKX5~FE_XJ=tOF{-yAh\|!$`r5i_/<`yyFpIce{<1?~AriL"ipH~@`y<=uw0qx)5gbh48JErNFwYO9%e,!*K:
Oct 24, 2024 00:28:13.473124027 CEST	1236	IN	Data Raw: c3 60 5a 77 ba 9c 0f ad cf fa 60 24 4d e1 78 8d 0f 06 d3 4e 49 99 f9 e7 a0 25 0c a8 09 24 df 6c b7 84 41 35 81 e3 6b 10 30 03 81 e1 6d 0e 8c a9 c9 99 3b 64 6a 5d c2 f0 9a 85 ec 6d 1e 8c b3 59 b8 9e 66 c2 90 9b 85 e9 6f 2e b0 93 a7 a2 3a d0 76 05 Data Ascii: `Zw`$MxNI%$lA5k0m;dj]mYfo.:vCoV2Kv'2c^xKm;49;g<7_H?D1,iOY[IV'},NF$WK$c4<{}iO5!K#"Z0O3Qpg0M<
Oct 24, 2024 00:28:13.473138094 CEST	1236	IN	Data Raw: ab 6c 8b cd ea 61 7b bf dc ac 8d 9c 1a 5f ad d7 eb 0f 68 aa 1a 7e 0d f4 83 ce 18 30 73 32 6a 38 e9 3b 2c ce 8d c4 1d 06 4b c6 57 8b 2b 23 a9 47 a2 0c 4b 33 76 9f 1c ee 3f dc 21 97 b8 fb 2c 3b 32 69 0e cf 9e 23 f2 5b 58 f8 ab f5 76 75 9f a2 f8 c6 Data Ascii: la{_h~0s2j8;,KW+#GK3v?!,;2i#[Xvu%/nyg[\|??Gxh~ec4_/HBzv,SW?PWe+-wE$4iKc;v/VWn%p7B2F]WNJDwsV#qSvM]P*5
Oct 24, 2024 00:28:13.473148108 CEST	472	IN	Data Raw: 92 4e cf ff 2a 99 9c 58 c1 ee 94 21 e1 0b 53 be cc 63 49 63 22 22 ae 42 ff 79 20 c1 8a 22 af db bc 55 95 61 13 bd 4a b8 e6 30 ac bd 27 ab e1 cb 87 78 70 a0 8c 9c 84 33 f9 47 96 74 c9 bc 6a f2 a7 bc 4c 8a b9 91 45 5a af 40 4f ac a8 89 de 22 b3 4a Data Ascii: NX!ScIc""By "UaJ0'xp3GtjLEZ@O"Jx^"U{v}x'?a,y{CtQYX)/Yp),!;/k\|1Zjsbnb#}d+X^n??975EkQ_pAd"[d)
Oct 24, 2024 00:28:13.473179102 CEST	1236	IN	Data Raw: 4d 69 a3 e2 6d 87 c6 ec 8a dd 93 a5 df 71 6e ea 86 cd b5 7b 33 f2 30 06 60 49 8e ee 9c 42 9b 36 fc 4e 8c 4e 84 cb 37 8b b4 30 d7 9b d8 de 47 98 f3 57 52 04 bc 40 e7 43 4c 92 3b 09 f0 fd 93 d3 d2 d2 ad 86 b5 77 02 14 a8 0e f7 8f 38 a1 36 13 bd b3 Data Ascii: Mimqn{30`IB6NN70GWR@CL;w86y58~#XxrigM!V:KXU1iY$~mx}iv5`z]v3n`vv7{?0>`~
Oct 24, 2024 00:28:13.473193884 CEST	1236	IN	Data Raw: 4d 76 e6 9c dd 76 6b 0f da d8 62 36 76 90 8d 0d 62 63 ff d7 d8 de 35 76 6f 8d cd 59 63 ef d5 dc 57 35 f7 4c 87 fd 50 da 9b 33 61 28 6f 4e d0 0c f4 e6 04 2f 81 de 1c 6f 82 df 9b e3 ed 0d f4 e6 b8 94 02 bd 39 2e 5b bf 37 c7 15 11 e8 cd 71 f5 05 7a Data Ascii: Mvvkb6vbc5voYcW5LP3a(oN/o9.[7qzs\~o[H7O\F4X7C9?iPoNzs~`\0oNys.>~oNCzs<~oNCzs<~oNCzs29=O9a7g N onx/
Oct 24, 2024 00:28:13.473201990 CEST	1236	IN	Data Raw: d8 dc f2 1f c1 7b 72 60 d3 1f 7c 70 f8 de 22 89 a8 75 36 48 f1 3c c9 0f 3c 92 fe fd 9b 96 25 4d 7a 52 21 e6 5f e7 29 18 b3 7a 9e ad a8 e2 91 6f f3 a3 78 5d fc 50 bd 28 ae fa 64 a5 22 df 95 a9 a4 7e ab f2 cf 7b a0 10 9d d4 cc ae 8f 3f cc a9 c8 ba Data Ascii: {r`\|p"u6H<<%MzR!_)zox]P(d"~{?v2V>Q M\|ZdT_H+ )u+TtD={+VFyKY5xdq/*MLy@Jshqnx^TMhJXn(rpByY
Oct 24, 2024 00:28:13.480331898 CEST	1236	IN	Data Raw: b5 f9 1d eb 59 1a ef 37 ed 59 28 b7 be 3d 22 f9 46 ec 6b f4 ac 34 4e 96 bb c3 eb f4 2c 4d cb 6d 95 bf 67 0d 1a f0 1c 51 26 f5 e6 93 20 de b3 1c 4c d6 34 55 83 f4 2b f5 1d eb 55 aa c8 ec 53 1a da ee 51 26 a0 dd 61 1c 78 a4 10 e9 4b f2 3b da 93 0c Data Ascii: Y7Y(="Fk4N,MmgQ& L4U+USQ&axK;t/6C7Cto Jb+ En&uFK=^#mH;[_m3;Tdi3LkLeo8I' `P#w# 6{S]w*s1@Gsgd
Oct 24, 2024 00:28:14.210715055 CEST	1101	OUT	GET /css/owl.theme.default.css HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:14.363358974 CEST	1052	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:14 GMT content-type: text/css last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 522 date: Wed, 23 Oct 2024 22:28:14 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 53 4d 8f da 30 10 3d 37 bf 62 a4 3d 6c 9b d6 21 61 3f e8 1a f5 04 e2 54 a9 87 3d 56 3d 38 f1 90 58 18 db b2 9d 00 5b ed 7f af 9c 84 8f 50 40 bd 34 be 58 6f c6 33 f3 de bc 8c e2 38 82 18 7e 6c 24 cc 98 d5 b5 43 09 cd 38 19 27 59 80 67 da ec ac 28 2b 0f e3 34 7b 20 e3 34 9b c0 9c 35 82 c3 1c 6b ef 8a 2a 24 7d 17 05 2a 87 1c 6a c5 d1 02 7c fc 14 41 3c 8a 46 6d e1 0f 73 5c b2 5a 7a f0 15 ae 11 c8 b0 d3 ec f5 15 16 42 62 fb 20 d1 1b 49 ba b4 f6 aa 58 03 bf 23 80 35 b3 a5 50 c4 6b 43 21 4b cd 76 1a 01 78 dc 7a c2 a4 28 15 85 02 95 47 1b 50 b2 c1 7c 25 3c f1 cc 90 4a 94 95 0c a3 93 42 4b 6d 29 78 cb 94 33 cc a2 f2 53 78 8f 00 2e f5 fb 59 48 e6 5c fc ed 3e 00 f7 bf da fe 00 7d 85 bb c5 62 31 6d 81 a5 56 9e 38 f1 86 14 b2 c7 6e a2 fd 9c 14 9e f6 80 61 9c 0b 55 52 78 34 5b 98 ec d1 9c 15 ab d2 ea 5a 71 0a 77 f3 e7 70 ba 00 17 ce 48 b6 a3 20 94 14 0a 49 2e 75 b1 ea 42 45 6d 5d 98 c0 68 b1 e7 0a 90 6b cb d1 12 cb b8 a8 1d 85 07 b3 ed 78 fd 13 33 5a e9 06 6d cf ef 6c a8 af cf 2f [TRUNCATED] Data Ascii: SM0=7b=l!a?T=V=8X[P@4Xo38~l$C8'Yg(+4{ 45k$}j\|A<Fms\ZzBb IX#5PkC!Kvxz(GP\|%<JBKm)x3Sx.YH\>}b1mV8naURx4[ZqwpH I.uBEm]hkx3Zml/l"y^5\"iwiwf.Xsqe\pio=}zM9>Kag:,p#G*G'@'r!wDg~0Ndu2$V/S{td\|x~S
Oct 24, 2024 00:28:14.539130926 CEST	1155	OUT	GET /images/content/services/pooja.png HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:14.690011978 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:14 GMT content-type: image/png last-modified: Tue, 16 Apr 2024 12:30:21 GMT accept-ranges: bytes content-length: 188707 date: Wed, 23 Oct 2024 22:28:14 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 72 00 00 00 fa 08 06 00 00 00 bc b0 cc 08 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 fc 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 27 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 27 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 27 3e 0a 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 27 27 0a 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 64 63 3d 27 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 27 3e 0a 20 20 20 20 20 20 20 20 3c 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c [TRUNCATED] Data Ascii: PNGIHDRrpHYs+iTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x='adobe:ns:meta/'> <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'> <rdf:Description rdf:about='' xmlns:dc='http://purl.org/dc/elements/1.1/'> <dc:title> <rdf:Alt> <rdf:li xml:lang='x-default'>Untitled design - pooja</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> <rdf:Description rdf:about='' xmlns:Attrib='http://ns.attribution.com/ads/1.0/'> <Attrib:Ads> <rdf:Seq> <rdf:li rdf:parseType='Resource'> <Attrib:Created>2024-04-16</Attrib:Created> <Attrib:ExtId>a91a5de8-9716-46f3-8823-6e8c57424c93
Oct 24, 2024 00:28:16.019380093 CEST	1158	OUT	GET /images/header/slide.jpg HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.astrologermahadeva.com/css/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:16.168560028 CEST	488	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:16 GMT content-type: image/jpeg last-modified: Wed, 03 Apr 2024 15:40:44 GMT accept-ranges: bytes content-length: 284111 date: Wed, 23 Oct 2024 22:28:16 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Oct 24, 2024 00:28:17.183996916 CEST	1154	OUT	GET /images/content/services/palm.png HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:17.334644079 CEST	487	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:17 GMT content-type: image/png last-modified: Tue, 16 Apr 2024 12:30:20 GMT accept-ranges: bytes content-length: 180710 date: Wed, 23 Oct 2024 22:28:17 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://footboi.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Windows Analysis Report
http://footboi.com/

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:28:13.377234936 CEST	1096	OUT	GET /css/font-awesome.css HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:13.928801060 CEST	531	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:13 GMT content-type: text/css last-modified: Thu, 04 Apr 2024 18:17:44 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 7385 date: Wed, 23 Oct 2024 22:28:13 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Oct 24, 2024 00:28:13.929390907 CEST	1236	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 5d 5d 8f ec 36 72 7d bf bf 42 f1 62 e3 6b 63 34 77 a4 f9 9e 20 81 37 09 16 59 60 93 2c b0 bb 40 1e f2 42 49 a5 16 3d 92 28 93 54 cf cc 0d fc df 03 4a dd cd 23 75 57 e9 06 d8 97 0c 0c db 2d 9d a2 48 b1 58 2c 56 1d Data Ascii: ]]6r}Bbkc4w 7Y`,@BI=(TJ#uW-HX,VR_~OI{woLGMR\|$?UjO;WI4/_j^kOpe'=LL?%?X\|c$_-<"ezPZ$_n?^3>%K2
Oct 24, 2024 00:28:13.929425001 CEST	212	IN	Data Raw: ac de 2b 4f c9 5f 1d 25 bf b3 a4 92 cf 7f fa eb ef 7e 08 ab 01 ea dd 68 29 71 a5 25 ea c3 e4 60 49 55 64 5d 52 99 a4 37 7e fa 99 98 ba 4e ac ea 2b d3 25 65 a3 ac 2a 7d 40 f8 46 85 fb 83 25 47 bd 9f d6 14 ee b8 94 d8 b5 ca b9 97 82 6a 63 8f 95 ee Data Ascii: +O_%~h)q%`IUd]R7~N+%e}@F%Gjc=w]\|wlX7:]tl~O(5<nHY^<~pBOZ{:\|N=X%j'-_y`yZXyq+^w$ORthGNkx{
Oct 24, 2024 00:28:13.929435015 CEST	1236	IN	Data Raw: 01 9f 45 f5 1c cc 1b d9 d4 d4 35 0f 06 15 d5 bb 5e b5 3c 32 aa e8 8e 4e ba 74 78 03 66 c7 cb 45 65 f5 56 b9 46 50 ae 2c aa 6b 63 3a 5e 11 b2 7b 54 2e 69 a4 64 51 5d cb 60 8c 25 68 d4 58 6b 54 c5 e3 a2 c6 56 e6 ad 6f 45 6c d4 58 65 ad 79 4b 4b 6d Data Ascii: E5^<2NtxfEeVFP,kc:^{T.idQ]`%hXkTVoElXeyKKmPIS8BQu_w9Vy4<K)~eG"NqQVa8M;v$au \Nb#FjTzg0FjQ{AQhTGVh=)
Oct 24, 2024 00:28:13.929456949 CEST	1236	IN	Data Raw: 6f 10 ca 58 bb ba 55 c2 12 a9 84 41 38 2e a3 76 ae d4 ce 19 a9 1d e8 91 0f 1f 0b e1 90 af 73 82 41 29 e3 70 1b d4 40 b6 6c 35 af a1 65 1c 6e 4e ad 92 b2 75 6b 86 e1 43 7a 12 84 f1 e4 69 a3 8c 23 ae 57 fb 40 14 58 1a 52 9a 39 a3 2b 8f 55 78 3f cb Data Ascii: oXUA8.vsA)p@l5enNukCzi#W@XR9+Ux?hv:TKq9o+q21 ,`avBBg:!HKW9x;cv--KR<,=%/qzLBLW3<psWW-X!
Oct 24, 2024 00:28:13.929469109 CEST	1236	IN	Data Raw: ce ee 31 6e 22 d8 34 e0 b6 9e 22 48 3c 78 15 f5 56 ed d0 28 29 48 9d dd 57 97 24 a4 b8 78 06 14 d7 59 a4 33 63 2f 86 c2 33 e0 b9 a2 88 f8 18 20 bb 4e 32 fd d8 91 d5 a5 fc 9c fc b2 8c fc 20 d8 50 33 73 98 84 e1 0e 34 d7 03 58 34 34 c0 75 fd 30 a3 Data Ascii: 1n"4"H<xV()HW$xY3c/3 N2 P3s4X44u0M=R3/<Y2ff\|l)`yxf+o(@p=5p]-_c`}<+ z@yJ"XM='+k4?=.
Oct 24, 2024 00:28:13.929481030 CEST	636	IN	Data Raw: a5 0b 10 ba 0f 3b 53 de 54 2b f1 25 81 d1 5d 96 e9 5e 3b 7e b1 03 8c ee b2 4c bb e9 a8 0d 69 0b 6a 06 9c ee b2 4c 2b ed 4a b3 17 86 23 d0 ba cb 32 55 1d f1 8b 24 dc 27 5a 6e bd 13 a4 76 97 d3 06 29 21 32 0b e4 ee 89 5b 2e d3 7c 90 db 7d 42 0b ea Data Ascii: ;ST+%]^;~LijL+J#2U$'Znv)!2[.\|}B@L\|3\|: v0f@YAM?T_Xj*;16IJ>!zI7}7h8sR9_X3rL>DC"s`p$3A{cve] I`XhWZ:euIBS
Oct 24, 2024 00:28:13.929555893 CEST	1236	IN	Data Raw: 21 ff 28 1d 99 96 df e2 a9 4e 43 38 55 87 2a e7 04 65 c4 13 cb c2 29 42 1f e9 dd b2 c3 e6 ab 97 ae e1 76 95 f3 92 81 a0 7d c4 df 5e 2c c5 37 96 28 0d 9e a7 17 82 10 39 50 b8 8f 92 f9 c5 f2 a4 d3 ba 72 a0 76 1f f1 d9 c5 52 0e f5 e1 0b ba 3d 2b e8 Data Ascii: !(NC8Ue)Bv}^,7(9PrvR=+bAB1qhuft!s 4.q\~COJGX92BOkKVp#`~N[>9eF;}Eh$#\|S9H%`xG[$M\|x@U
Oct 24, 2024 00:28:13.929570913 CEST	357	IN	Data Raw: b9 65 4b fb c6 64 0a 70 cd 51 3a 67 cb 15 63 c5 40 45 47 99 8c 2d 6d 2b b9 02 9c 75 14 bb 61 0b 94 93 2c 78 9c 78 13 76 32 f0 48 70 02 95 6f fc b8 dc 9b e2 b2 fb c5 ef 42 62 e2 00 3b 7d 30 55 29 cd 42 40 4b 9f b7 84 87 d3 aa 74 17 3e 3d cf 89 00 Data Ascii: eKdpQ:gc@EG-m+ua,xxv2HpoBb;}0U)B@Kt>=(l-RFx>,u/u2X`^6pwV`xE@8]XnB,h\|:H<rne$Mx;$a3H<y#+Q3>%$
Oct 24, 2024 00:28:14.258596897 CEST	1077	OUT	GET /js/jquery_min.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:14.410186052 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:14 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 29638 date: Wed, 23 Oct 2024 22:28:14 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd fb 97 9b 46 b6 30 fa fb f9 2b 5a 8c 0f a1 ac 92 5a 72 92 b9 67 90 ab 59 8e 9d 4c 32 b1 f3 b2 33 49 86 96 b3 0a 28 10 dd 08 d4 42 72 b7 23 34 7f fb b7 f6 ae 07 05 42 76 e6 7c f7 ae 75 97 97 5b 50 d4 fb b1 6b bf f7 e5 e3 d1 c5 cd 8f 7b b1 7d 7f f1 ee c9 74 3e fd ec a2 b9 f0 62 72 f1 64 36 fb 9c 5e 3c 99 cd 3f d7 9f bf aa f6 65 c2 77 79 55 d2 8b 6f ca 78 7a d1 5c dc dc c1 97 69 b5 cd 2e 8b 3c 16 65 2d 2e 1e 5f fe d7 28 dd 97 31 e4 f3 38 8d c8 c1 a9 a2 1b 11 ef 1c c6 76 ef 37 a2 4a 2f d6 55 b2 2f 84 eb 9e f9 30 15 0f 9b 6a bb ab 83 ee 2b e3 d3 a4 8a f7 6b 51 ee 82 c8 e3 74 34 23 7e db 10 39 e4 a9 37 6a b3 90 dd 6a 5b dd 5f 94 e2 fe e2 cb ed b6 da 7a 8e 1a c5 56 dc ed f3 ad a8 2f f8 c5 7d 5e 26 d5 fd c5 7d be 5b 5d f0 0b 5d d2 21 8b ad d8 ed b7 e5 45 e4 71 72 f4 f1 af e7 ec cb 44 a4 79 29 12 67 a4 bb 2b cb 07 f2 c7 df ad f2 9a 76 47 fe 8e 6f 2f 62 16 2e 69 c2 e2 69 0d 33 44 05 8b a7 71 55 c6 7c 47 53 16 4f 37 fb 7a 45 33 16 4f f3 32 11 0f df a7 74 c5 0e 47 9a b3 d5 74 [TRUNCATED] Data Ascii: F0+ZZrgYL23I(Br#4Bv\|u[Pk{}t>brd6^<?ewyUoxz\i.<e-._(18v7J/U/0j+kQt4#~97jj[_zV/}^&}[]]!EqrDy)g+vGo/b.ii3DqU\|GSO7zE3O2tGtWm27l5]m{zkB9x-Yj,04-yVmx]_2vv']N:?2vh~l9GhU0y wqU>U[(>:-DVg-i((<zruv(F+@g_2mw+ymJXfNxvL7[{7GywA^)\|\54ohls9P)!Gs`{'SUHm;WfH,99Rq70
Oct 24, 2024 00:28:14.410243988 CEST	1236	IN	Data Raw: e5 8c fc 99 99 ef 5e 3f e3 2b 36 73 dd e8 2a 0e 42 5c e0 78 b9 f4 c3 25 54 5f 26 67 47 69 16 ac 69 4e d6 16 b6 91 da 17 7e 4a eb 6a bb f3 e3 29 fc d0 7a 83 53 17 4f e5 c3 91 96 53 f1 b0 13 65 c2 f0 c4 a9 67 ab 4d 18 12 a7 30 f7 09 15 34 a5 19 33 Data Ascii: ^?+6sB\x%T_&gGiiN~Jj)zSOSegM043Ms8MCa"pUU!xuu[cBOm44Hx;]1r2qWYWT<QD+Nb=?Ps%`K!'OcI#
Oct 24, 2024 00:28:14.410257101 CEST	1236	IN	Data Raw: 9c f1 fc 31 60 56 30 9d f4 9d 4d 18 df b3 19 7d 60 33 fa 9e ad b8 47 e8 1f f2 e7 99 fc f9 62 98 7c 05 9c 08 76 61 c1 46 33 42 67 47 fa 9c cd 9f 3e fd 74 4e 5f b0 c3 b1 4f 8b 7f 09 a7 fc 2b f6 e5 74 53 6d e8 df e1 17 48 fa af f5 c3 37 ec 4b 45 f9 Data Ascii: 1`V0M}`3Gb\|vaF3BgG>tN_O+tSmH7KED35IE,KBH.b<~x%[4fIeJx_4UQ7HIGHU$lz7MQUf/vMe<}&ISF$}zw}.C_1i^_OM
Oct 24, 2024 00:28:14.566303015 CEST	1076	OUT	GET /js/bootstrap.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:14.717060089 CEST	546	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:14 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 14437 date: Wed, 23 Oct 2024 22:28:14 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Oct 24, 2024 00:28:14.720860004 CEST	1082	OUT	GET /js/jquery.menu-aim.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:15.033086061 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:14 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 3752 date: Wed, 23 Oct 2024 22:28:14 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 1b 6b 93 db b6 f1 f3 e9 57 6c d4 9b 88 ba ea 28 77 3a 9d ce 9c 7b ee b8 3e b7 b9 a9 9d b4 b1 d3 34 d3 c9 78 20 72 25 a2 07 02 2c 01 ea 51 df fd f7 ce e2 c1 87 48 ca 72 93 e8 43 7c 12 80 c5 be 5f d8 2c af ae 26 70 05 39 ca ea 9a f1 1c b8 06 06 ff fe 7b 85 e5 01 0a 51 6d b8 84 b5 2a 21 2d 55 91 aa 9d b4 1b 35 98 8c 19 48 98 84 94 af d7 58 a2 34 9c 19 24 40 2b 34 3b 44 09 0c 2a 8d 25 98 f2 c0 e5 06 32 b5 c5 12 ec 7f 58 03 8b 1b cc 61 ab c3 26 a3 40 b2 2d df 30 83 c0 a5 51 04 8e 81 ae 56 74 e7 4c 43 a2 a4 41 69 74 3c 81 2e ce 4c eb 2a 47 8f d5 41 55 90 b1 2d 02 2b 11 2a 4d 80 99 dd 0a 3b 6e b2 00 ce 6f c6 7d c1 64 4a c0 8c 02 93 21 f8 ab 4a be c9 4c 0c f7 06 76 5c 08 58 f3 12 01 b7 74 39 ec 32 94 76 2b d1 37 d3 90 ab 4a 23 a0 34 58 12 eb 24 ee 08 5c 97 c6 2b 26 d3 ab 70 92 19 f7 23 d7 b0 42 42 8f 5b b2 b8 92 4c 88 83 63 15 a6 96 59 81 d2 0f a3 1f 5a 7d 84 b7 4a 3e e0 41 03 bc 78 04 80 bf a8 92 0b c1 00 1e dd aa ff ae dd ea 2b c7 c5 7a f5 55 c6 f3 42 83 3f fb 15 96 08 f4 [TRUNCATED] Data Ascii: kWl(w:{>4x r%,QHrC\|_,&p9{Qm!-U5HX4$@+4;D%2Xa&@-0QVtLCAit<.LGAU-+M;no}dJ!JLv\Xt92v+7J#4X$\+&p#BB[LcYZ}J>Ax+zUB?qx;V"LS"R`L"/tFLSlB6\c]IUjUgt%`5;@NXyFZf!;SJ Sx34SH@"aVKdAdQp:!U[EJl1lx221E:nZ=XBK$u_=9J;&h]<XfRs-]RAb0'g],9\WPsJ2A'_4Le *`q~@d?Wt?/y}\Rb\ZkOIK[
Oct 24, 2024 00:28:16.862135887 CEST	1081	OUT	GET /js/jquery.countTo.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:17.009958029 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:16 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 910 date: Wed, 23 Oct 2024 22:28:16 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 56 4d 73 db 38 0c 3d 4b bf 02 07 4f 2d 4d 54 39 bd 3a a3 bd 74 67 67 7a e8 a1 33 6d ef b4 04 46 dc 50 a4 87 84 ec a4 a9 ff 7b 87 5f 92 e5 d8 6d 73 70 2c 01 7c 00 1e 1e 08 17 7c 54 2d 09 ad a0 58 95 f0 9a 67 ab 9a ab ba d5 a3 a2 af 1a 1a 98 cd 7a ef fe 5b ef 94 c5 07 68 20 7d fb f9 13 5e 4f 0f 79 9e 65 06 69 34 0a 56 05 f5 c2 96 35 b2 b6 2f 66 98 70 3e db 6c c0 22 4d a7 b9 36 d0 8e c6 a0 22 40 89 03 2a 72 5e 07 66 9c 1b 09 f5 e8 62 ad 6a 7c 26 54 5d f1 7a aa e0 3c d1 ba 43 ce 46 49 b6 0a e8 19 37 7a d8 c2 d9 5f ca a6 63 c4 8a b5 33 af cb ca bb 92 5e 38 5e ba 92 4e 8e 76 8f d8 6d 6f 3a 7a 73 f2 35 c8 0d da fe 93 22 34 07 26 b7 17 be d1 fc 5e 44 7b 3a d6 61 2b 06 26 ed f6 7a 88 64 5e 97 ce fb 54 25 fa 4a cf bb e3 b4 d7 47 18 98 7a 01 12 03 5a 20 0d e3 be 63 84 40 3d c2 81 c9 11 2b 60 aa 0b 7e 63 db 3b 0f a1 5a e3 19 9f 9d 40 2b 70 7d 8b a7 53 2b a4 d6 7b d7 87 cf 8c fa ba 45 21 8b d4 9c da 57 0f 9b a9 5b f5 05 03 b1 c0 39 56 03 f3 61 d2 f0 7e 3e e9 9a 53 c2 26 44 9b 2a [TRUNCATED] Data Ascii: VMs8=KO-MT9:tggz3mFP{_msp,\|\|T-Xgz[h }^Oyei4V5/fp>l"M6"@r^fbj\|&T]z<CFI7z_c3^8^Nvmo:zs5"4&^D{:a+&zd^T%JGzZ c@=+`~c;Z@+p}S+{E!W[9Va~>S&D3j;80#N{FpRB3p_3o"i!2.F!8(uy659)ga]H)!p=V"3 0P8:yDOK3b@Sn\$?yFs?%CS3]g[q}Xv.\CL57uN7u$95OD<yJ[I0R^+X?a/6[E~L4vLY7f-9gxOkSrfafm
Oct 24, 2024 00:28:17.223328114 CEST	1146	OUT	GET /images/content/cycle.jpg HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:17.370029926 CEST	486	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:17 GMT content-type: image/jpeg last-modified: Wed, 03 Apr 2024 15:40:08 GMT accept-ranges: bytes content-length: 6356 date: Wed, 23 Oct 2024 22:28:17 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Oct 24, 2024 00:28:17.376637936 CEST	1139	OUT	GET /fonts/Flaticon.woff HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive Origin: http://www.astrologermahadeva.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.astrologermahadeva.com/css/flaticon.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:17.523782969 CEST	486	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:17 GMT content-type: font/woff last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-length: 12316 date: Wed, 23 Oct 2024 22:28:17 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:28:13.377440929 CEST	1089	OUT	GET /css/fonts.css HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:13.944267035 CEST	1231	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:13 GMT content-type: text/css last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 701 date: Wed, 23 Oct 2024 22:28:13 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 95 c9 72 e2 30 10 86 ef 54 f1 0e be 91 4d 71 4b 5e 21 97 b1 8d 4d 12 b6 10 20 2c 17 ca 18 61 3c 78 01 db 38 c0 d4 bc fb 94 6d b2 1d 53 e1 30 3e 75 fd 6a 49 a5 fa fa ef 16 7b c5 58 87 d0 71 5d c7 42 74 1f 33 57 6c b9 f4 6b 19 f8 31 5a 9a 16 65 fe 94 4b 0c 73 92 9e e3 1e 6a 4c e5 39 98 07 71 50 b9 7b cf 44 f1 c1 a5 35 c6 0f 42 cf 74 3f 96 5f a9 63 af e2 1a c3 03 64 8b 51 68 d5 18 37 b0 4c f7 e2 ed 8e cb 9b af 0b e8 99 da 3b d7 0c d3 c4 2e 74 2f 56 71 bc 89 6a 2c 9b de 17 dd da 51 6c c6 8e 75 6b 05 1e 1b b1 61 76 82 4d b0 cc d2 35 6f 1f a7 a8 41 c7 ca 93 d5 9f df c7 1a ed 3d cc 68 34 1d 91 7d b7 87 f6 51 67 db e5 25 4f 10 ea ca ed 6b b0 5c 92 4b 66 99 3e 36 be a8 64 b2 72 99 3d 70 e7 3b 56 b0 a0 28 34 7d 9b d6 98 e1 35 f0 22 20 10 88 71 c3 0c af b1 26 03 c2 9a 2c a7 82 80 ca 67 b1 ae 03 22 75 23 db a1 88 3c 20 45 ac 66 c2 d0 89 8e 0c 9d 18 77 e5 d2 df 72 89 fd c0 5c 48 c4 9e 1e 26 2d 75 62 cf ac 71 83 0b 5b c9 30 6a 0e 66 cb 73 20 06 40 c0 0b 19 33 e0 ab a9 a8 e2 5c a8 [TRUNCATED] Data Ascii: r0TMqK^!M ,a<x8mS0>ujI{Xq]Bt3Wlk1ZeKsjL9qP{D5Bt?_cdQh7L;.t/Vqj,QlukavM5oA=h4}Qg%Ok\Kf>6dr=p;V(4}5" q&,g"u#< Efwr\H&-ubq[0jfs @3\P3A0A!llrdNs@0h;g`OTgaTvy:(.DY'b]uAE}G-k/^{HXt<*a98"dD@)#ZD@DE"w3TOy~`0R#Rm" Mc]9E-)\|T?!ObBH[r6\|'V%'_3)av~KVhZiO#w?m{qyr\|6x7mn9PmN?
Oct 24, 2024 00:28:14.251182079 CEST	1094	OUT	GET /css/responsive.css HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:14.404721975 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:14 GMT content-type: text/css last-modified: Sat, 04 May 2024 11:18:24 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 2095 date: Wed, 23 Oct 2024 22:28:14 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 5a 5b 6f a3 38 14 7e 9e 4a fd 0f ac 46 23 b5 52 a9 62 12 42 c8 4a ab f9 27 c8 80 43 ac 82 8d 8c d3 66 b7 9a ff be 32 e6 62 1b 9b 4b 67 5f 76 fa 92 c1 e7 1c fb 7c 3e 77 f8 59 a1 1c c3 a7 0a 13 ff 03 e7 fc 7a f6 a2 e3 a9 be 3f 7b 90 e4 de 53 05 ef fd e3 38 0e ea fb f3 e7 e3 c3 b7 d7 6b 93 54 10 93 a4 42 e4 e6 41 f1 e8 5b 0d f3 1c 93 e2 ec 05 61 7d f7 c0 ae be 8f bf fe 7c 7c f8 f6 eb f1 e1 d7 e3 c3 e3 c3 cf 76 3b 4d 30 00 71 3c 6e 38 9e 23 8e 81 b2 61 ca 49 f2 c1 60 5d 23 d6 6e 58 41 56 60 e2 33 5c 5c f9 39 1c 36 69 69 39 ad 93 5b 83 58 52 33 7a c1 25 52 4f e8 97 e8 c2 cf 3b 95 fc 8a 60 8e 58 02 f3 dc b6 c3 48 ff 4d 1e 0c c4 9d 4e 3d 05 a7 f5 59 55 d4 14 8a 33 4a bc cf 51 80 b7 ef 05 5c 51 7b fc f1 41 89 09 f2 27 4f 2f 94 70 bf c1 ff a0 b3 07 a2 d9 6d 92 8c 12 ae a9 2b 0e 27 4f af 01 b0 42 8c 77 0d 3f f5 dd c1 61 05 57 6d 32 05 3a 53 f6 77 56 22 69 3f 2e b4 63 e3 3e 1b 5c 90 44 ac 24 1c a6 4d 92 52 26 b6 ed b8 81 d7 d4 90 9c e1 85 23 a6 a1 0c e2 a0 47 55 08 f5 fa ff b5 [TRUNCATED] Data Ascii: Z[o8~JF#RbBJ'Cf2bKg_v\|>wYz?{S8kTBA[a}\|\|v;M0q<n8#aI`]#nXAV`3\\96ii9[XR3z%RO;`XHMN=YU3JQ\Q{A'O/pm+'OBw?aWm2:SwV"i?.c>\D$MR&#GUum"E~BYufC1GsK"^5g[@D,N<2[FF# Qh?,XXd%`Ji%~Eb9:a<P^%)[W,RpyID6xu+<uIp^w1h4%fM#22I`\`lKYl"hD,rJ`%3XI^`*uB`AC]m8lBNvG3fl#^cmKF&,1PG+"wh+9&>q;
Oct 24, 2024 00:28:14.404757977 CEST	1236	IN	Data Raw: 42 29 47 2c b9 a2 b2 ee d5 97 66 f0 e2 b9 96 25 2e 9f 4a 43 75 88 d4 fe a6 29 71 8e 98 0f 19 82 de 6b 06 19 bd 35 a8 f4 31 21 88 79 af 98 a3 4a 79 9a c1 9a 63 4a 1a ef 55 34 33 48 74 41 81 d1 d0 84 46 c0 7f cb bb 9b 6b 50 46 49 9e e0 aa 68 3b a1 Data Ascii: B)G,f%.JCu)qk51!yJycJU43HtAFkPFIh;\|^&Yib],+++t_6$eBSi'BZAhKP&"C\J@(vrcJ)eih8s }~M^[2nPi0VNi
Oct 24, 2024 00:28:14.404767990 CEST	154	IN	Data Raw: a3 8a 77 05 1d 41 fe 8e 98 63 4d 9f 5a 0f 11 cf 10 3e 0c a8 85 2b 08 22 d7 fa 90 03 06 02 c5 7e d4 c2 74 58 d7 1a f1 71 d1 18 b6 6b e5 a1 75 ba bb 7d 7e 66 2b 79 da 7f eb 37 9a f7 00 b9 8f 7b 03 7b 45 bf df ab 9d 87 a3 0e 76 c6 ca b1 72 1a a7 49 Data Ascii: wAcMZ>+"~tXqku}~f+y7{{EvrI]H8-<'mBimnbz!+okOBy<ocj.V/>h.
Oct 24, 2024 00:28:14.521353960 CEST	1149	OUT	GET /images/header/horoscope.gif HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:14.676331997 CEST	487	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:14 GMT content-type: image/gif last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-length: 206371 date: Wed, 23 Oct 2024 22:28:14 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Oct 24, 2024 00:28:14.676598072 CEST	1236	IN	Data Raw: 47 49 46 38 39 61 c8 00 c8 00 e6 7f 00 ff bb 53 57 57 34 66 38 35 a4 5b 31 c6 78 32 ff bb 4a 35 35 35 b3 68 32 9b 55 33 72 3a 34 5c 45 35 79 3f 34 ff bd 5a ff ab 3b d6 87 32 ca 74 2d 2d 2d 2d ff c4 5e 12 12 12 ff b3 42 ff b4 4a ff c9 61 ff a2 2c Data Ascii: GIF89aSWW4f85[1x2J555h2U3r:4\E5y?4Z;2t----^BJa,;a-g.z-5.Sd]())) $$$+2b38:9S85d^`-I7Fe000C3D+j,J2,X(-AL1<9D-aXP(p4/M/C0G2(XL2
Oct 24, 2024 00:28:14.676623106 CEST	1236	IN	Data Raw: ea e9 e8 e7 e6 e5 e4 e3 e2 e1 e0 df de dd dc db da d9 d8 d7 d6 d5 d4 d3 d2 d1 d0 cf ce cd cc cb ca c9 c8 c7 c6 c5 c4 c3 c2 c1 c0 bf be bd bc bb ba b9 b8 b7 b6 b5 b4 b3 b2 b1 b0 af ae ad ac ab aa a9 a8 a7 a6 a5 a4 a3 a2 a1 a0 9f 9e 9d 9c 9b 9a 99 Data Ascii: ~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-,+*)('&%$#"! !
Oct 24, 2024 00:28:14.676629066 CEST	424	IN	Data Raw: e0 59 da 17 12 04 50 83 c4 d8 39 d2 3a 69 60 b8 90 9e 1c 00 ae ae e0 d6 31 98 f0 40 0b 07 82 04 81 1e 04 11 ba c1 07 78 48 24 bd ff 22 42 39 14 83 02 40 54 d0 c3 15 29 cc 30 be 6e 76 61 69 83 0c 35 b0 f1 7a f2 7e a8 b0 23 13 35 04 8f 3f 24 42 81 Data Ascii: YP9:i`1@xH$"B9@T)0nvai5z~#5?$B@f!A bzfJ ,!nJ9P}SFE.bb@&`` GVaN]9bah54@(8}2@\`U1.
Oct 24, 2024 00:28:14.676711082 CEST	1236	IN	Data Raw: c1 13 28 f5 48 4a 5c 25 06 5a 69 40 65 e6 24 0f ca 90 e0 09 32 c8 0c 09 b8 67 90 76 25 87 02 0b 38 8e 44 b8 04 83 75 56 f3 10 bb 9b 01 07 5c 90 00 13 74 06 14 95 79 41 42 11 a8 46 78 c8 6a 09 3d 28 c0 7f 5c 08 af 2c 51 60 08 7e a0 65 67 74 b4 01 Data Ascii: (HJ\%Zi@e$2gv%8DuV\tyABFxj=(\,Q`~egtaI@08/p\A}X)HB^H1!zq>0;ATX]EhP60FCg.}#
Oct 24, 2024 00:28:14.676717043 CEST	1236	IN	Data Raw: 12 00 17 e0 2b ae e3 3e 84 40 66 09 85 80 26 31 03 3d c0 00 0a 40 02 bc 77 0a 85 95 6c 14 b0 82 b1 22 01 7d 77 00 7f d7 86 5c 62 06 71 d8 06 4d 40 4b c6 e6 07 26 30 54 3d 10 71 06 70 82 3a a0 82 24 d0 0a 17 33 00 b2 c4 1c 8a 50 14 23 60 01 18 f0 Data Ascii: +>@f&1=@wl"}w\bqM@K&0T=qp:$3P#`n*K'3piX0\|I0;4'h8AK`#i>J';$`bb@IFFr VAc05xySw/.p@]l!a
Oct 24, 2024 00:28:14.676731110 CEST	424	IN	Data Raw: 05 98 9b 08 6e 98 02 09 b0 76 6f d0 38 a0 ab 2c 93 88 30 4d 40 93 e4 33 ac 8c f8 01 45 13 96 ad 4b 3e 99 c5 00 a6 76 91 b2 91 2a 5f b0 07 36 a5 6b 76 99 bb 8a 80 15 36 30 06 1c 06 97 23 4b 4b 4f 47 ba 26 e0 8f c6 fb 40 f3 f5 01 bf 02 97 f1 43 02 Data Ascii: nvo8,0M@3EK>v_6kv60#KKOG&@COAUu%@d+P2 \d]Yutzq]\|5/%B\|1!Pn;tp[k`#Psba3#j/$k`4 A
Oct 24, 2024 00:28:14.677321911 CEST	1236	IN	Data Raw: 4c 4c 2d 18 40 09 31 ac c6 d6 d7 84 7e 06 b7 0b 1e 41 19 49 57 0a 38 36 d0 38 12 10 92 d8 eb b5 5b 33 26 6f 4c 42 52 7f 29 12 82 31 5e 42 11 02 12 c3 ec 00 47 69 1b 01 c1 c8 87 03 f6 b6 7c f9 92 c7 44 8a 01 1f 42 8c 20 a1 2e a0 c5 4a 8d f4 98 60 Data Ascii: LL-@1~AIW868[3&oLBR)1^BGi\|DB .J`"XmE7B]\WIc3\:a=,"(T@TX0COHH@d\|tW20~LHVh-4gD-~DH0}3@0RIv@d
Oct 24, 2024 00:28:14.677328110 CEST	272	IN	Data Raw: 02 86 c3 43 e2 88 77 91 a2 c5 40 02 23 a0 02 10 2e 44 83 05 d1 25 4a 7e 58 05 1d 30 80 85 2c 1c 60 00 56 b8 43 05 26 d0 8f d3 5d 22 0f 13 b1 c0 18 a8 40 90 1e 02 04 06 85 91 80 0a 72 25 84 03 98 e0 0f b1 38 54 2c 78 37 06 0e f4 21 6e 72 7b 42 00 Data Ascii: Cw@#.D%J~X0,`VC&]"@r%8T,x7!nr{Bbu@Iqi$:@t<9p"@npR( Y4 0pQJ`Sc\Q\Ua$?T]D'=&9JIAFRXP "LTvjPT
Oct 24, 2024 00:28:16.863754034 CEST	1088	OUT	GET /js/jquery.magnific-popup.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:17.018687010 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:16 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 12481 date: Wed, 23 Oct 2024 22:28:16 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 7d fb 77 db c6 95 f0 cf e4 5f 31 56 1d 03 b4 48 50 76 bb 6d 42 45 ce ca b2 9c a8 f5 6b 2d b5 69 d7 eb e3 05 89 21 09 0b 04 18 00 94 ac c4 fa df bf 73 1f 33 73 07 00 29 a5 df e6 9c d6 e2 bc 1f 77 ee fb 5e 8c 1f 3f 50 af e3 45 9e ce d3 99 7a 57 ac 37 6b 35 52 57 4f a2 27 d1 81 1a a9 a7 07 4f fe 3c 3a 78 3a 7a 7a d0 7f ac 96 75 bd 9e 8c c7 49 ba aa f4 4a e7 c5 55 34 2b 56 e3 75 b6 59 a4 79 35 5e f1 20 a3 35 0c 32 ee 3f 56 27 c5 fa a6 4c 17 cb 5a 85 b3 01 0e a5 5e ac d2 ba bc 51 e7 d4 ff 50 3d 1e f7 0f c3 f9 26 9f d5 69 91 ab 70 1e cf ea a2 bc 19 a8 df 54 3f 9d ab b0 be 59 eb 62 ae 12 3d 4f 73 ad 8e 8e 8e 54 60 1a 07 ea d1 23 ae 88 e2 55 82 5d d4 78 ac 8e 5f bf 88 d4 7b bd 48 ab 5a 97 2a ae 54 9c ab 38 2f f2 9b 55 b1 a9 d4 aa 48 36 99 8e 54 9f bb 86 1f 82 cf bf 6c 74 79 13 7c 1c 2a 33 fb a1 ea ab 5b a5 b3 4a 2b b1 08 fd 65 5d 94 75 45 ab 28 a6 9f f5 ac 0e ec ac 6f 8a 44 8f 4f 8a d5 aa c8 ff 7a ae fa 66 a8 b0 d4 bf 6c d2 52 87 66 96 81 1c 9c fb 3e 2f 8b eb 4a 97 6a 91 15 [TRUNCATED] Data Ascii: }w_1VHPvmBEk-i!s3s)w^?PEzW7k5RWO'O<:x:zzuIJU4+VuYy5^ 52?V'LZ^QP=&ipT?Yb=OsT`#U]x_{HZT8/UH6Tlty\|3[J+e]uE(oDOzflRf>/Jj8D4OA_`?~lV?~+_ORyin2MwezZUu\35+VWqN^=?t7H'YQ`=?}Fs=/Jm8}ls<u7/:OO^f..iNkCOo~[X9~`'/i;uX?^Wit^ut^fx.ksLZ~>wbVBZWZyv\oqU1@@=.Ze,U
Oct 24, 2024 00:28:17.210059881 CEST	1150	OUT	GET /images/content/about_img.jpg HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:17.362907887 CEST	487	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:17 GMT content-type: image/jpeg last-modified: Thu, 11 Apr 2024 12:27:57 GMT accept-ranges: bytes content-length: 76570 date: Wed, 23 Oct 2024 22:28:17 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:28:13.377556086 CEST	1092	OUT	GET /css/flaticon.css HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:13.935818911 CEST	1225	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:13 GMT content-type: text/css last-modified: Thu, 04 Apr 2024 17:59:32 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 695 date: Wed, 23 Oct 2024 22:28:13 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 93 db 4e dc 30 10 86 af 9b a7 b0 c2 0d 20 bc bb d9 16 4a b3 42 45 aa d4 97 e8 41 9a 38 93 64 b4 89 9d da de 13 68 df bd ca 1e 80 0e 0c d0 5c 44 b2 e7 9b f1 9c fe 0f e3 f3 44 a9 0f df 5b 88 64 9c 55 bb 5f e5 6c cc d5 f1 6e b0 7f f3 08 91 9c 55 25 44 cc 55 76 35 9e 4c c7 d3 c9 74 aa 26 d7 f9 65 36 20 e7 e3 24 b9 1d 3c 75 05 06 d5 7d a2 d4 e1 d4 51 bb c9 55 7a 8c 97 ce 12 a5 82 37 b9 5a f8 f6 34 1d 8d c6 03 17 c6 47 fb 08 5d 4c cf de 01 7d 3d 21 ac 68 9d 9e a9 ca f9 0e e2 69 8a 5d 81 65 89 a5 76 3d da b8 e9 31 3d bb 48 d4 fe 13 e2 ac 5c 55 3d 89 b0 3f be e5 14 e3 53 9f e8 17 f8 be c7 c2 b2 3e 79 68 c3 63 80 b0 ac f7 05 ef 1a b6 42 aa 9b 98 2b 3b 58 db 87 eb 10 37 2d 3e de 6e 93 e4 b6 c3 92 40 05 e3 11 ad 02 5b aa 53 bd c2 62 4e 51 77 64 75 89 4b 32 a8 7b 5a 63 ab fd 30 be 7c 72 b6 9b 0b 1b d3 ab 83 fa 67 0a ef af 64 3b 24 f8 c3 b4 10 c2 ef 9b b4 3a 90 3a fd 95 17 58 39 8f 17 6a 6f 3c bf 49 d5 0b d6 97 5d a1 8a e8 25 cf 9d f1 f9 da 1d 93 9c 1d 47 73 e8 26 dd 61 ae a6 93 [TRUNCATED] Data Ascii: N0 JBEA8dh\DD[dU_lnU%DUv5Lt&e6 $<u}QUz7Z4G]L}=!hi]ev=1=H\U=?S>yhcB+;X7->n@[SbNQwduK2{Zc0\|rgd;$::X9jo<I]%Gs&a~=K^jo&[&C^g#IVdZ:)C;gD`a\|P;1+F{(H5zf[KgID:7'[k1$`tF(6$BUpk9ZFFms=6.[ON@ot'\aaUYEw$0:Pmutqu=Bq''\"-$+dIvBu5h*p(fcq3.;\|;xjK#+n,!="jR%v/\|/
Oct 24, 2024 00:28:14.237859011 CEST	1089	OUT	GET /css/reset.css HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:14.391290903 CEST	531	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:14 GMT content-type: text/css last-modified: Sat, 04 May 2024 11:19:27 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 4480 date: Wed, 23 Oct 2024 22:28:14 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Oct 24, 2024 00:28:14.391351938 CEST	1236	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 6f dc 38 92 9f d3 bf 82 c8 60 10 db 6b b5 a5 7e d8 4e 07 17 cc 61 81 c5 7e d9 c5 01 f3 65 92 c3 e1 40 4b ec 6e 5e d4 a2 20 aa fd 98 20 ff 7d 41 8a 94 48 8a 0f 49 dd 99 f1 ec 4d 3c c8 38 7c 16 ab 8a c5 7a 91 Data Ascii: =ko8`k~Na~e@Kn^ }AHIM<8\|z\(f%)nf{3T3o<"eFe)Zf9\|\@CN/fb*?V;\l".A~~dzhK:B=.vC2@~}U
Oct 24, 2024 00:28:14.391370058 CEST	1236	IN	Data Raw: 0d 29 85 e1 ab 1a c1 92 e8 f0 58 13 05 a3 f2 9f 01 59 b7 8e 7f bc ec 0a 3e 35 05 21 d9 e7 e9 e4 94 85 ee 3e 4e d9 e8 ec 32 b6 7d 7b 5c 2d 35 76 4a 9c 4e 17 c7 36 36 49 cf 49 3b 05 c1 61 83 7a d2 10 e3 90 1f 32 ca 27 0c 70 4a 6f 37 ae 95 7d 74 0a Data Ascii: )XY>5!>N2}{\-5vJN66II;az2'pJo7}t=122Iu\|o\>J\|hq$]ON&JDK?q{~*RhsT%GXO4<{:bmnkq6zV9{1%$Qk 'b
Oct 24, 2024 00:28:14.391381979 CEST	424	IN	Data Raw: 88 7d 9c 00 a1 99 34 c4 a1 76 66 0a f9 6e 21 f5 73 87 06 52 b2 e5 03 c9 16 9e 4b 4a 15 2a 11 bb 54 55 10 f1 ab 51 df 81 93 a2 82 25 cc 34 ff 33 5a 35 88 67 c3 8b 39 4e 40 e0 9c fd 15 25 1a 1e 95 a9 78 da d8 06 1c ab fc e2 ed 7c 7e 83 0f bb 9b e2 Data Ascii: }4vfn!sRKJ*TUQ%43Z5g9N@%x\|~dNwo,&B8,j"AlNlMlOlASER\|>&d`Lxc;hkF/iqr\|E3WFE;m=QyV!kN76[
Oct 24, 2024 00:28:14.391402006 CEST	1236	IN	Data Raw: e3 2c 92 b0 c4 f3 85 9a 00 18 6a e4 af 9f 84 74 72 74 45 5b dc 58 1f d8 47 41 3b 53 02 5e 0d de 19 30 61 c4 eb ad 02 0d 46 a2 9e 29 44 3b c2 93 67 46 20 7f 64 af 46 dc 76 7d 04 01 82 69 bb 03 60 17 be f0 91 b0 8f e8 d5 c2 2e bd ee fe 2b 09 52 8b Data Ascii: ,jtrtE[XGA;S^0aF)D;gF dFv}i`.+R^%sk}S-sY~=HA>'vC8]<3dD=!zLlSM5.l,!#y);e>v=J>jy4OUJS-$CGz
Oct 24, 2024 00:28:14.391408920 CEST	348	IN	Data Raw: 8d 3c 14 bd da 5e e3 67 87 1e d1 b5 e7 1c 94 88 c3 eb fa 84 d2 20 2e f6 be 71 fd c7 ff 86 d2 f7 dd e4 c6 3e 09 49 26 ed 12 6c a5 5e b8 9c 24 8e 74 39 b3 23 88 ea cf de f0 0f b1 45 a0 ed 69 da ed f2 93 60 86 ce db e2 3f 22 15 e6 8e c7 f7 e5 b3 94 Data Ascii: <^g .q>I&l^$t9#Ei`?"0:-h{*<&YX308kzb'ce)tdphcFo>q[vuqz#\.c]`b?{Ox~u\=fm/9zh k=R
Oct 24, 2024 00:28:14.532571077 CEST	1154	OUT	GET /images/content/services/face.png HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:14.683775902 CEST	487	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:14 GMT content-type: image/png last-modified: Tue, 16 Apr 2024 12:30:21 GMT accept-ranges: bytes content-length: 177823 date: Wed, 23 Oct 2024 22:28:14 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Oct 24, 2024 00:28:14.684350014 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 72 00 00 00 fa 08 06 00 00 00 bc b0 cc 08 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 fb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 Data Ascii: PNGIHDRrpHYs+iTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x='adobe:ns:meta/'> <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'> <rdf:Description rdf:about='' x
Oct 24, 2024 00:28:14.684400082 CEST	1236	IN	Data Raw: 6e 64 65 72 65 72 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 52 44 46 3e 0a 20 Data Ascii: nderer)</xmp:CreatorTool> </rdf:Description> </rdf:RDF> </x:xmpmeta>NGbJIDATxlu{3Ee*HI[Ed;l%.! ;3y}kKUWy3]U7'4Q<}@k<
Oct 24, 2024 00:28:14.684406042 CEST	424	IN	Data Raw: 50 ca 81 bc 91 f6 5d a5 11 52 a2 75 a5 61 3b 30 97 b8 31 68 cf 4d 53 6b a0 16 c0 dd 77 e4 21 0b ba 01 2f 10 e8 5a 99 13 0d 48 69 61 81 12 ab e0 15 a5 5b 88 a4 40 49 41 59 5a 8b 2c cf ad 66 5d 81 3d 58 0c d2 c6 60 74 89 d6 25 45 59 80 d6 2d 20 4f Data Ascii: P]Rua;01hMSkw!/ZHia[@IAYZ,f]=X`t%EY- O))"H,K-jk0(A"~V#B"ed7-.S0#L=C84~f72Jhza2L{^[&G)aW!vtZr[{W%gOv
Oct 24, 2024 00:28:14.684633017 CEST	1236	IN	Data Raw: b7 b2 1b 2a b4 fd b7 a0 c1 b4 5d 30 77 35 69 81 19 18 6d c0 81 96 05 45 e1 b0 c4 5a 01 4a 1a 0a e1 39 fa 55 20 85 01 53 a2 0b c8 4b 2b 4b 59 9e 58 65 b2 52 5a 8c b5 a6 2c a8 3b 3a a5 c8 28 cb 9c b2 28 28 8b 8c 22 cb c8 8b 9c 2c cf ea 45 cc e1 70 Data Ascii: *]0w5imEZJ9U SK+KYXeRZ,;:(((",EpR0M-Mm,v@Zk=K0-ETcA5-K())fMlgs^O{)rgZ4-&E0Y<Ey2+u2mv~_#yC~`1<~rM0"xIB
Oct 24, 2024 00:28:14.684638977 CEST	1236	IN	Data Raw: bc 52 e1 fb 1e be ef 13 f8 01 61 10 10 f9 1e 9d d0 27 0e 42 e2 30 64 b5 9c b3 5a 2f 59 ad 56 6c b7 1b 6b 69 d5 0b 17 28 a9 ea c5 ba bd 38 95 b6 e6 e0 28 8f b6 5c 54 ce cf 46 5e ac 06 2c 68 16 b2 1d 2b c9 fd d9 2c 96 ad 1e dc 51 1a 0e 75 54 d3 3f Data Ascii: Ra'B0dZ/YVlki(8(\TF^,h+,QuT?\k Vvkr#"<dm&Z)&?1#xwMUpR?h-xW q,}!*5>`:n+B8e:Rq0
Oct 24, 2024 00:28:16.968669891 CEST	1073	OUT	GET /js/custom.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:17.120714903 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:17 GMT content-type: application/javascript last-modified: Sat, 13 Apr 2024 09:29:52 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 1867 date: Wed, 23 Oct 2024 22:28:17 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5a eb 6f e3 36 12 ff dc 02 fd 1f 06 de 00 92 73 b6 ec a4 db 1e e0 34 01 8a ec 16 e8 87 de e6 90 e0 1e 28 7a 06 2d 8d 64 6e 29 52 20 29 3b be 22 ff 7b 41 ea 61 3d 28 27 9b 2c ba 7b 3d f3 4b 24 72 5e 9c 99 df 70 28 c7 8f 73 1e 6a 2a b8 7f 32 86 df be fa 12 00 60 94 2b 04 a5 25 0d f5 e8 e2 ab 2f 8b c9 0d 91 a0 b3 f7 70 09 ef ff 9e a3 dc 5d ec a7 25 6e 48 46 cf 5f 97 53 b3 19 dc 48 64 82 44 28 a1 98 2a 58 fc 2d e5 91 d8 8e 03 c1 7d cf ac 7b 13 a8 d5 d7 da 1b f4 a3 57 4a 13 9d ab d1 38 88 49 84 ef 72 ed 8f 2f 1c 54 59 a5 6e 34 0e 22 64 64 e7 7f fd cd 7c cf 33 52 4c 6c 47 15 e7 c3 d8 ee a9 b6 55 70 90 48 a2 5d 6d 4a cb e4 48 84 79 8a 5c 8f 03 4b e4 77 dc b5 97 54 4a bb 34 03 6e 43 29 18 03 2d e0 4e 64 76 0e f6 54 27 b5 1f 94 25 f3 dd 3e 30 83 c6 e0 9f f8 7a 4d 55 45 7c 27 32 7f 0c 57 97 70 36 9f f7 c8 0b e9 de 2b 89 3a 97 7c aa c5 54 8b cc 2b 1c f1 23 f7 cf e7 f3 a6 fb ac 33 00 99 c2 0f 91 63 1c ea 12 b4 7f 7d 68 ae b9 c4 98 f0 87 8c 86 bf 0e c6 bf e4 5c 89 68 37 59 eb 94 [TRUNCATED] Data Ascii: Zo6s4(z-dn)R );"{Aa=(',{=K$r^p(sj2`+%/p]%nHF_SHdD(X-}{WJ8Ir/TYn4"dd\|3RLlGUpH]mJHy\KwTJ4nC)-NdvT'%>0zMUE\|'2Wp6+:\|T+#3c}h\h7Yyp3w7m[[/c+bzf Q/~_};`lhB5_n%2]QtR"v7P0"!->(#1\|GD([FMQP>P.T$3+<@DQ0Uf$\#5#r1Aazo_5QKwI>M'$ef24,#&WZ[:/LQ@[\~2FFs@k"EYzu$N(i\|~S
Oct 24, 2024 00:28:17.266752958 CEST	1158	OUT	GET /images/content/testi_client_img1.jpg HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:17.417275906 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:17 GMT content-type: image/jpeg last-modified: Wed, 03 Apr 2024 15:40:10 GMT accept-ranges: bytes content-length: 2713 date: Wed, 23 Oct 2024 22:28:17 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 57 00 00 00 03 a0 04 00 01 00 00 00 57 00 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 57 00 [TRUNCATED] Data Ascii: ExifIIV^(ifHH02100100WWC!"$"$CWW";!1"AQa#2BRqr3$b!!"1A2?}"A{KSq}_XR]uKSnhUxMmHQHbNCUt-]vW6^#;:BXLQ&C%B6*j&orm!MD<?%rOA>.,O#eMw{E+WtHkQq\h7Gz&hCc;w"EM'r_gGU
Oct 24, 2024 00:28:17.458795071 CEST	1162	OUT	GET /images/content/testi_bg.jpg HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.astrologermahadeva.com/css/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:17.608179092 CEST	487	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:17 GMT content-type: image/jpeg last-modified: Wed, 03 Apr 2024 15:40:44 GMT accept-ranges: bytes content-length: 63200 date: Wed, 23 Oct 2024 22:28:17 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Oct 24, 2024 00:28:19.285919905 CEST	1147	OUT	GET /images/header/favicon.ico HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:19.437938929 CEST	489	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:19 GMT content-type: image/x-icon last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-length: 15870 date: Wed, 23 Oct 2024 22:28:19 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:28:13.377748966 CEST	1097	OUT	GET /css/sign_flaticon.css HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:13.934922934 CEST	947	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:13 GMT content-type: text/css last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 417 date: Wed, 23 Oct 2024 22:28:13 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 53 db 6e db 30 0c 7d ae be 82 50 5f 92 a0 8a ed 3c 0c ab 83 62 05 06 ec 27 76 83 62 53 1e 31 59 32 24 e6 b6 20 ff 3e 28 b1 d3 34 c8 ba c6 0f 82 45 9e 73 24 92 47 77 d9 44 00 dc 7d b1 9a a9 f2 0e 0e 8b f1 8e 4b 18 62 29 ff 39 a0 66 f2 0e 6a cd 58 c2 ac c8 f2 8f d9 2c 2f 1e a1 c8 cb e2 43 82 4c 32 21 9e 13 53 19 5d 21 ec 04 40 bf 6b c9 6e 4b 90 83 9e 9c 0b 80 18 aa 12 96 c1 8e e4 74 9a 25 5c cc 22 35 ee e7 f1 77 80 4e d1 b3 1c df 86 ff 74 4f 68 68 23 c7 60 7c 68 35 8f 24 b6 0b ac 6b ac 95 ef d0 f1 b6 43 39 7e 10 70 fc fe 2f b9 f6 c6 cc ce d4 fa fd 8d 0a 17 02 37 f1 99 cf e9 1c 96 78 73 11 71 d5 dc 9f fa ff a2 15 57 cd b1 bd 87 49 ad 91 9a 5f 5c 82 4b 59 7b 0a 47 de 5a 7c 89 ee 85 78 6e b1 26 0d b1 0a 88 0e b4 ab 61 a4 d6 b8 f8 4d ac 5a 72 aa c6 15 55 a8 3a da a0 55 21 f9 a6 cc c7 07 43 5c f8 e3 4d 87 bc 9a f9 fb 2b d9 a7 0b 7e ad ac 8e f1 c7 93 34 3d 52 c9 ef e5 02 8d 0f f8 00 c7 e4 e4 49 c2 95 ec 75 aa 36 8c e1 5f cc 43 12 76 00 70 69 f9 e1 9e f3 61 50 7d 43 e9 4f 7a [TRUNCATED] Data Ascii: Sn0}P_<b'vbS1Y2$ >(4Es$GwD}Kb)9fjX,/CL2!S]!@knKt%\"5wNtOhh#`\|h5$kC9~p/7xsqWI_\KY{GZ\|xn&aMZrU:U!C\M+~4=RIu6_CvpiaP}COzCyknuh)^bQZ*Lr3vGtoM~'
Oct 24, 2024 00:28:14.239708900 CEST	1089	OUT	GET /css/style.css HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:14.394045115 CEST	532	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:14 GMT content-type: text/css last-modified: Sat, 13 Apr 2024 10:23:06 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 16836 date: Wed, 23 Oct 2024 22:28:14 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Oct 24, 2024 00:28:14.394277096 CEST	1236	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 73 db 46 b2 e8 67 e9 57 cc 49 6a 2b 71 8e 48 03 20 c1 87 5c 37 75 bd 8e 37 71 9d ac 95 b2 9c dd 93 5b a7 4a 05 82 90 88 35 49 70 01 c8 8f a3 f2 7f bf 35 2f 60 1e 3d 0f 90 94 45 3a b2 52 b1 05 0c 7a a6 7b 7a Data Ascii: }ksFgWIj+qH \7u7q[J5Ip5/`=E:Rz{zzz5O9EjLNV9(-67-MsvW(^-cTzQC6ZS+YYa?8B;%_D^oGC}8=o/N\|7/
Oct 24, 2024 00:28:14.394350052 CEST	1236	IN	Data Raw: e9 ef 38 15 1b 21 c9 69 2b 0a 79 be 97 9c 48 6b e3 04 5a f3 ea 4e 44 16 de 19 6a ff 8d a7 b7 5b 7b 37 1a e7 e7 b3 ec ba 28 33 8c 4e 5a ac eb 6c 5d 9f a3 ef be 93 a6 b5 dd e6 4e c8 82 ee 31 d6 a6 a2 8e ff c6 b7 3f fe 3b db fc 9a d7 02 55 5a a6 82 Data Ascii: 8!i+yHkZNDj[{7(3NZl]N1?;UZ)0OsOIR)A,Dc0>OPP<\{XX)%/^o!4}ubZgoUdRq~]r{PD?_uJd88M>Lb'!?
Oct 24, 2024 00:28:14.394356966 CEST	424	IN	Data Raw: 00 5a f3 fc 89 65 d4 6c f8 54 c0 f8 db 24 4f 38 d6 d6 6f 0c 88 43 25 c4 a2 cb 32 94 4e a4 2d 6c 85 1e 48 20 08 2c 29 48 db 4d 52 66 eb da 1a 95 d1 76 01 ed 7a b1 22 32 a1 cf ac 72 c1 e8 f7 6f 5e 1a a5 83 25 f2 80 bf f6 90 11 fc d4 4c 2c 12 da 29 Data Ascii: ZelT$O8oC%2N-lH ,)HMRfvz"2ro^%L,)\ tl0A%]k_ McE $%(#xcPIT,{o=I=p7\#'Q''Y"#&H`[g_t'A8GpDS!%j9],F2j
Oct 24, 2024 00:28:14.394367933 CEST	1236	IN	Data Raw: 67 ab 4a 64 6c 11 9d 55 f2 91 69 11 a8 3f ac ce 10 f3 ff 20 e2 0c 41 c2 6b a6 ed 8a 7e de 76 e1 f5 3e b5 66 4e 40 76 88 31 b3 e8 47 d4 c7 7f f7 a8 a0 27 28 c9 16 59 79 80 8d 2e 83 c7 d7 bc 54 ec 8c 7f 7c df 1b 04 8d 31 d2 a2 96 31 93 2f 19 ce bc Data Ascii: gJdlUi? Ak~v>fN@v1G'(Yy.T\|11/18 ~I5\U~W$=D2SrdlldUeI.fcjVI?pqpJp9&\ZNlNq;?,4[y#w3MFx
Oct 24, 2024 00:28:14.394381046 CEST	1236	IN	Data Raw: 51 13 f7 0f 4e b8 54 ff 09 5a 33 dc 6c f1 cd 6f c5 66 93 af ab 6f 64 cb 05 14 c4 03 c8 7a 8d 97 86 22 2f 09 86 42 39 28 42 c1 ab 8d 1c 82 dc 23 6a 0c be f2 62 cb 89 c6 0b b1 bf be 5d cd d8 ce 68 08 df da 05 7a ca a2 12 8c 91 61 30 5b c9 b6 ef c6 Data Ascii: QNTZ3lofodz"/B9(B#jb]hza0[0v&8Gesmz=MGcaYDORL2`c%]y,pQ=0<;opD9<"ULsu]GQeypUu$AdAdB;
Oct 24, 2024 00:28:14.394438982 CEST	1236	IN	Data Raw: aa 04 4a b3 df 35 f7 9e 92 9c c3 62 8d f1 0a 0c 47 c3 33 14 45 21 b9 4c 88 14 47 0a 63 56 2c 29 7c 62 88 8e 96 ca 8d 90 1f ba b6 83 e1 59 38 9a 9e 0d 87 24 6e 99 7c 2d dc 82 43 f1 8b 2a 94 af af f3 75 ce 6a d7 91 a7 42 ed 42 e1 03 1e 76 0e 5d d1 Data Ascii: J5bG3E!LGcV,)\|bY8$n\|-CujBBv]'O:.E)B)@a@b0 ->B$p6zvY..g1%_h~5;p"}05#ii$} }8I}(}O=q\|$Ct>F0ci`
Oct 24, 2024 00:28:14.394444942 CEST	1236	IN	Data Raw: e4 2b 6f f8 b8 f2 0e 6c 2e 0e 6c e5 4d bd 36 bd a9 6b d3 9b 3a 37 bd a9 7d d3 9b aa 9b 5e 2f 3c f0 4b 7f 9c f3 1d 3f ae bd 03 9b 8b fd ac bd c9 d0 77 ed 8d ad 47 fa 28 88 bd 02 01 63 fb da 93 1b c0 81 80 b1 6d ed c9 af a9 73 e2 d8 4d 69 a3 c7 b5 Data Ascii: +ol.lM6k:7}^/<K?wG(cmsMiw`s(G[Ak/tiR`c0>^6%5tx.jPE1}WtFq?K>Qxywk>\|ynnv&tlo\|:fEc{>_z7O&hysi
Oct 24, 2024 00:28:14.394450903 CEST	1236	IN	Data Raw: 2b 4c 62 23 95 99 13 e2 1d e9 9b 65 7e 7e 9d 97 e0 f5 c6 b4 70 b3 c7 a0 54 e6 8f 7d 7a 35 dc a9 1c 81 a2 52 05 e6 2d bd 65 16 64 18 58 1c 28 44 8b 1b 40 0a b1 db 88 cc 4f a1 dc e0 21 1f 4a 03 3b 16 68 11 43 9e 22 8b f0 f6 70 22 89 4e 53 c4 a6 f3 Data Ascii: +Lb#e~~pT}z5R-edX(D@O!J;hC"p"NS(;1w>22_}}=usa@Q!"Y:\|-#Z%$ADLS\|BnFB!\}$@PGcL<hG%T6GKi-r7cF
Oct 24, 2024 00:28:14.394526005 CEST	1236	IN	Data Raw: eb 7c e0 67 9d 14 09 18 42 37 4b 30 83 e1 8e e3 b7 e5 9f e8 40 98 ad e9 be dc bd 8c 9c 58 63 91 aa f2 1a 87 a3 78 81 b4 64 81 c8 74 8c de cb 70 91 5a 70 3e 1a cf c6 11 d3 13 34 cb 18 37 7d c5 9e 66 66 b6 78 7b cc 17 e2 af e4 01 74 ea 17 d7 d7 f8 Data Ascii: \|gB7K0@XcxdtpZp>47}ffx{t"gcw`.KX}"Q@eqSl]$7#[h}iG,gU,gWb-eGx#V!<3EC;aJb-Z2R%]hSN]sp(q$NlG,1j_h
Oct 24, 2024 00:28:14.395251036 CEST	1236	IN	Data Raw: ec 32 52 86 ff 22 4b f0 3e 49 dd 11 9a df 00 36 57 b7 97 dc e0 48 9f c8 e0 9f 90 8d da c6 2a 1c cd 24 7a 65 a5 28 99 2c 8d 38 9c 67 69 51 52 6b a0 68 df df 9d 2c fd b4 58 2e 93 4d 95 cd d1 5d 8b 13 70 55 10 9b 6c d9 da a3 11 d4 8f 74 e6 92 25 30 Data Ascii: 2R"K>I6WH*$ze(,8giQRkh,X.M]pUlt%0`($C3T%Wee~Q6rY,f>\|8L'aZ(y'F'?a,(ZPMt%yk_/iM}+YU2o2jK<JWlPXf
Oct 24, 2024 00:28:14.574733973 CEST	1076	OUT	GET /js/modernizr.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:14.728569031 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:14 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 8069 date: Wed, 23 Oct 2024 22:28:14 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 3d 6b 77 db 36 b2 df f3 2b 60 b5 2b 92 35 44 c9 79 ec 43 0a eb 9b b8 cd 6e f7 34 6d 4f 9d 6e 3f a8 ea 1e 88 84 24 d8 14 c9 12 90 1f 31 75 7f fb 3d 83 07 09 be 24 3b ed de 73 af 3e 38 24 38 33 18 0c 06 83 c1 60 80 8c bf 40 ef d3 88 e6 09 fb 98 a3 e7 fe 5f fd 17 c8 bd d8 71 91 6e d1 db 1d 8b 23 0f 15 e8 fd 37 1f d0 10 bd bd fc ea 19 fa 42 95 4e d1 46 88 6c 3a 1e 6f 0d ae 1f a6 db 71 94 de 26 71 4a a2 f1 67 a3 55 9a 88 15 09 e9 68 49 c2 eb 75 9e ee 92 88 b3 8f 74 b4 4c f3 88 e6 6c 4b d6 e6 39 27 11 db f1 d1 32 bd e3 1b 12 a5 b7 a3 55 4c ef 96 e9 dd 68 c3 63 32 da ee 62 c1 b2 98 2e d7 7c 94 66 24 64 e2 7e 94 af 97 64 24 e8 9d d0 08 21 e7 24 61 5b 22 58 9a 70 78 0b d3 78 b7 4d f8 68 4d 13 9a 13 41 a3 30 4d 04 4d 04 7c 5b 43 7d 34 11 12 30 a7 ab 98 86 25 9e c8 49 c2 57 69 be 6d bc bd 88 ca 77 a6 80 49 96 c5 2c 94 35 86 24 dc d0 51 48 92 1b c2 f5 3f c0 db 28 ca c9 9a 24 51 94 a7 d9 68 43 f8 26 dc 90 64 4d 47 1b c6 45 9a df 8f c8 2e 62 e9 e8 86 45 34 1d b1 24 a2 77 34 8a 96 [TRUNCATED] Data Ascii: =kw6+`+5DyCn4mOn?$1u=$;s>8$83`@_qn#7BNFl:oq&qJgUhIutLlK9'2ULhc2b.\|f$d~d$!$a["XpxxMhMA0MM\|[C}40%IWimwI,5$QH?($QhC&dMGE.bE4$w4#d;Q$Xr3+-]4$\~Mk<R\XoY<70fYFD7G\|n\c9#Er1rbw4116cx z=Q(J33gnY~rWDvW4mi"0%]FC!A@(@ko6.YBH;?EiuL*A4Q`Sp6~S"viiK#/KI9H@zF"9KRyMfbFRx#<px:0
Oct 24, 2024 00:28:14.733252048 CEST	1079	OUT	GET /js/parallax.min.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:15.033226013 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:14 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 2310 date: Wed, 23 Oct 2024 22:28:14 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 58 4b 93 db 36 12 be e7 57 48 a8 94 02 58 10 45 3a b5 39 50 03 cf da 93 b8 76 aa 1c ef ac c7 55 1b d5 ac 0e 10 09 89 70 28 82 0b 40 33 1a 0f f5 df b7 40 f0 01 50 52 ec e3 de f0 e8 6e 74 7f e8 17 30 7f 35 fe 61 f4 6a 54 52 49 f3 9c 1e 82 2f 6a f4 18 05 7f 0b c2 11 cc b4 2e e3 f9 bc e4 07 96 27 62 1b 6c b9 ce f6 eb 80 8b b9 43 3d 47 86 fd ef 89 28 9f 25 df 66 7a f4 3a 8c 7e 19 dd 19 9e 1b b1 c5 a3 db 22 09 6a 8a 9c 27 ac 50 6c f4 fb ed 67 2b 5a c5 f3 79 23 32 11 bb ee 18 4f f8 3a 17 eb f9 8e 2a cd e4 fc c3 ed cd 6f 1f ef 7f 33 e7 cd 7f 18 6f f6 45 a2 b9 28 a0 c6 1c 33 ac d0 4b bb 32 12 90 63 86 5e 1e a9 1c 65 44 67 5c 2d 80 58 7f 61 89 06 84 e8 e7 92 89 cd 88 4d 26 30 65 39 d3 6c c4 02 c9 36 92 a9 0c 3b 0b 45 ca 24 d6 01 3b 68 56 a4 d0 c8 c0 0c 21 6c 06 c1 8f 2c 67 3b 56 68 a2 21 47 78 5c af f1 1d dd b2 7b 99 4c 26 1e 49 c0 15 04 7c b7 05 68 32 81 1e 21 f1 e9 a8 d6 12 02 25 13 80 d0 c2 28 2e 89 a5 2f 85 e2 c6 a8 29 00 28 d0 e2 83 78 62 f2 86 2a 06 51 b0 a3 3a c9 e0 fc [TRUNCATED] Data Ascii: XK6WHXE:9PvUp(@3@PRnt05ajTRI/j.'blC=G(%fz:~"j'Plg+Zy#2O:o3oE(3K2c^eDg\-XaM&0e9l6;E$;hV!l,g;Vh!Gx\{L&I\|h2!%(./)(xbQ:?Uj7P9+:&{AB3i]Z`Ld2kmt=fZUP3v@j57fr"kue"nwn@>RBBipwRPTZ@2mq@@S0S_YeTo&ND*~GS4GH2\qd2{F\|Y"5b9lhO'_Y\|Xc}+S[RKk=zhR8((%+Y~,(46A6"M
Oct 24, 2024 00:28:16.863414049 CEST	1084	OUT	GET /js/jquery.inview.min.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.astrologermahadeva.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:17.014236927 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:16 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 753 date: Wed, 23 Oct 2024 22:28:16 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 53 5d 8b db 38 14 fd 2b 89 59 8c 44 ee 8a 99 c2 be 38 a3 e4 a1 0c ec 42 4b 29 5d d8 5d 86 3c 28 f2 75 ac a2 48 46 be f6 74 6a f9 bf 17 d9 f9 68 b2 7d b2 cf 91 ee 3d 47 f7 63 59 75 4e 93 f1 8e 11 1f ce ff 0b 64 7c e8 55 58 20 18 70 72 a8 d1 1c 6a 2a 94 30 ce 61 f8 73 42 f0 6a 4a aa cf dc 3f 09 8c eb 80 d4 05 b7 70 62 8e 88 91 a1 0c 42 fb 63 a3 e8 a3 2f 11 18 c6 b8 24 d1 76 4d e3 03 89 bd ff 96 68 cb f3 9c 19 99 bd ff f2 e5 f1 fd 74 39 93 52 e2 b6 2a 82 d8 fb f2 ed 27 0f 46 68 6b d0 d1 8d 89 33 39 bb e0 1c dc 78 79 8a 61 7c 98 6d 0d e4 9b 42 89 46 1d f0 bf 4f 55 d5 22 c5 58 89 56 07 6f ed df be 89 71 16 bb 32 60 b1 a2 53 c4 bf f7 11 1f b0 a2 bb 90 44 8d 57 65 77 2a a2 03 2b 89 71 08 f2 61 6d 2a 46 02 95 ae 59 09 d7 ca 03 ce 37 8d 44 51 2a 52 a2 45 8b 9a 7c 00 27 51 fc 86 16 8f e8 68 6d a5 15 aa 2c 99 d9 3a 51 19 57 32 c3 0b c7 47 0e 4e 5a 61 d1 1d a8 e6 95 0f cc 4b 1f 23 32 0e b5 ac 63 34 8c af dd 26 ac c3 6a c5 27 79 ed 1d 29 e3 5a 56 81 7d 09 3b 3e 6b 2b d0 d0 40 2b [TRUNCATED] Data Ascii: mS]8+YD8BK)]]<(uHFtjh}=GcYuNd\|UX prj0asBjJ?pbBc/$vMht9R'Fhk39xya\|mBFOU"XVoq2`SDWew+qamFY7DQRE\|'Qhm,:QW2GNZaK#2c4&j'y)ZV};>k+@+M$tn2~w+/#d+Tde_3c\z>`}UwJ}fM=34OL,,Yq{66K(+:-'6)n7Tl^JxWh`We/Cw\|S<`A^wi^@WJ>Zor_AmTY)E>/()Rm!y-sZKg\|#>zXcdVH9+}7-.~)>jEfi*\,+]g-G 5]lw\M
Oct 24, 2024 00:28:17.328025103 CEST	1161	OUT	GET /images/content/sign_bg.jpg HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.astrologermahadeva.com/css/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:17.477233887 CEST	487	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:17 GMT content-type: image/jpeg last-modified: Wed, 03 Apr 2024 15:40:44 GMT accept-ranges: bytes content-length: 23261 date: Wed, 23 Oct 2024 22:28:17 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:28:20.383842945 CEST	1031	OUT	GET /js/bootstrap.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.015614033 CEST	546	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:20 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 14437 date: Wed, 23 Oct 2024 22:28:20 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Oct 24, 2024 00:28:21.015808105 CEST	1236	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6d 7b db 36 b2 e8 77 ff 0a 38 f5 09 c9 58 96 9c 66 cf d9 56 ad e2 c7 89 dd 5d 9f 9b c6 be b1 db 9e 73 bd de 2d 25 42 16 13 8a d4 92 94 1d b7 f1 fe f6 fb cc e0 6d 00 82 94 e4 a6 e9 39 cf 13 7f 68 23 02 18 0c 80 Data Ascii: }m{6w8XfV]s-%Bm9h#`0<bOYY,b8\zbALg5r/M=vOPU:y^z',V:ea}K^hh1MsuzV,,24*M\|>)EJ
Oct 24, 2024 00:28:21.015840054 CEST	212	IN	Data Raw: fa 33 3d c8 70 74 8b b8 e4 79 8d 83 33 3d 81 9e f2 45 c0 0e d8 e5 15 1b ea ae c8 58 78 c4 78 7f 51 22 43 3c e2 d3 78 99 d5 36 37 15 60 fb 19 cf af eb 99 19 30 e9 ce ac 6b 05 6a 07 92 8b 1c b4 c4 4f 01 51 a7 07 47 fd 05 0f 69 a0 93 a2 e2 fd 71 a5 Data Ascii: 3=pty3=EXxxQ"C<x67`0kjOQGiqRi%:($f.a\|^Y\Uaj4-r%,u<iYc0g9[.=}>4SB%imk"v`w6sdduEl-
Oct 24, 2024 00:28:21.015844107 CEST	1236	IN	Data Raw: 6b 0e c5 2e a6 8c e7 ec d5 0f 7f 39 79 bd 26 e7 b1 85 e9 b3 6c 79 9d e6 61 b1 a0 b2 10 91 11 fa 1c e6 b8 29 1f d0 bd 6d 6f 6c c9 d7 e2 3a 66 9a 4c e1 17 cc 94 a6 52 22 72 6e 43 61 e4 af d8 63 21 02 1a a1 3a 8b 53 25 8f e4 88 40 90 46 02 31 06 d0 Data Ascii: k.9y&lya)mol:fLR"rnCac!:S%@F1u!"Qc00.D%cyHNU\J^s(`ez}^"fvDI(G{g'$'r/RzxOO&uhY1;/~8}~xFb
Oct 24, 2024 00:28:21.015851974 CEST	1236	IN	Data Raw: a4 35 9f 57 56 7f 0d 5c fb ef f8 dd b8 88 cb 04 c4 09 7b cc c0 3f de f1 bb a4 b8 cd 81 53 a8 b1 83 c2 29 35 44 ac 2f ab 48 e5 26 f2 74 81 e3 46 21 62 56 dc f0 12 25 97 ed 30 28 f2 ba 58 4e 66 55 1d 97 75 00 ee 74 1d 6b a0 fe a1 8c be 0d dc 24 eb Data Ascii: 5WV\{?S)5D/H&tF!bV%0(XNfUutk$AX.,<j>d90[l}V}^WPMv+z\V+:T:5Mp8Pu\xjf_`MtBI\qCJ~FqwVe8
Oct 24, 2024 00:28:21.015914917 CEST	1236	IN	Data Raw: 37 b4 7a 57 85 56 b7 c4 56 8b f0 67 69 ae 33 a7 ac d9 b8 96 30 df b1 7d 15 0c b5 5b e9 de 25 21 e8 b0 bb 94 1e de 18 30 96 ee d5 45 e0 c8 7c c2 30 c0 5c c2 d6 8c 18 6b 5b ee c8 5a 0a 23 3a ec cc 0b 50 1f 10 14 77 9b 6f c1 6e 24 4d d6 b3 27 76 bb Data Ascii: 7zWVVgi30}[%!0E\|0\k[Z#:Pwon$M'vi57}j8(=^]4 fi"*7p8%kyTi`KWdY\|g/C/{[R,O"<}\Wf3vG'OQK`G_l)q3
Oct 24, 2024 00:28:21.015921116 CEST	636	IN	Data Raw: ec e0 8f cc 94 35 f8 e2 f2 70 ef ff c5 7b bf 5c c9 43 cd 40 ff 3d f2 68 d1 ae 4d 4e 2d 3b 20 85 18 5e ed 24 00 ec 40 97 29 c6 b3 30 f6 7c 5b b4 c3 80 d7 ef 79 be ac ec 3b 24 78 92 cb bb 20 18 1d ff cc b2 8b ee 84 8a ca 9c f4 52 3b a1 5c f6 f5 04 Data Ascii: 5p{\C@=hMN-; ^$@)0\|[y;$x R;\up65URlagsU,xb*i#B'E^i^W=oa=w&.S1e-jJj&.LL 6J@yE:<t1=6c<f+Mz-T'TCu/@(sR
Oct 24, 2024 00:28:21.016014099 CEST	1236	IN	Data Raw: 0f d6 32 ba b6 23 ad 94 db b6 a3 23 0d cc 59 c1 cd 6c 47 1a fa 3a b6 a3 c4 e8 84 ab f2 6b 9e 9d bd fa 6f 76 71 ca ce 2f 0e 5f 1f 1d be 39 32 f8 1d bf 3a fe fe f8 f5 c5 f9 da cf 20 ac 8e d8 d4 83 20 46 26 57 28 58 dd c2 f0 1a 4c b0 d7 30 46 f9 4e Data Ascii: 2##YlG:kovq/_92: F&W(XL0FN+WK'tY{-D6lJ\`~";Htf-PoGesQ{6LVvErp#k@'nIqV\;SD}+HB+J:5y](4Erw':"d".P']E_H^fE
Oct 24, 2024 00:28:21.016081095 CEST	212	IN	Data Raw: 54 fb 1b d6 48 8c ed f7 5a a9 37 8a ad bb eb e5 32 68 e6 ce 8d 3e 86 07 03 78 ee a0 02 f1 14 5e 8e 82 1b 60 73 5e cf 8a a4 62 71 89 51 3f 09 a8 b9 42 06 60 90 93 7a aa aa 09 67 8a ef 28 27 02 43 fb 79 e5 d8 19 5a ce 1f 5a ab 55 32 40 54 4e aa 53 Data Ascii: THZ72h>x^`s^bqQ?B`zg('CyZZU2@TNS9C\d[,yB58b*!>{8{67r^A_)oNrFeB D~\NQ6y";i
Oct 24, 2024 00:28:21.016084909 CEST	1236	IN	Data Raw: 70 20 c2 ee e4 f8 2b 4b d4 b0 e8 e6 0d 47 cf 78 2b 59 5d f3 fa 05 74 93 e6 d7 2f 91 c2 a0 81 66 55 cd 91 78 c0 f7 85 9b 71 8f 7d 1f d7 b3 7e 3c ae 42 5f 25 c8 4c 6a 76 39 6b a3 1b 82 2a 0a c2 82 ec 45 ef df ba f8 18 40 0e 41 c9 7d 36 e7 71 b5 2c Data Ascii: p +KGx+Y]t/fUxq}~<B_%Ljv9k*E@A}6q,-DTn]twuHd&@R1`Q='R>s\w$-6`$uj91wZ~hA=;:?wY5#sBOp<pyYD%p)DPC4!,gaI)@
Oct 24, 2024 00:28:21.023665905 CEST	1236	IN	Data Raw: 93 88 c0 6f ab bc a7 0b c1 a7 e9 14 fa 68 40 4e a1 b9 22 d1 b5 14 e2 72 b6 6f 06 a9 ae ad 0f bd 11 fb f5 5e 7f 4d cc 42 36 27 92 d0 a3 26 38 4c 66 80 a6 2a eb 3b d5 d2 de f1 bb 1e bb 89 b3 a5 73 c1 5d f5 75 f9 8e df 41 ec 92 aa 23 41 88 cf f2 ab Data Ascii: oh@N"ro^MB6'&8Lf*;s]uA#AR66:ID X1~K/=^zCPQ-d ZGvOZPs-?=}{d.3Cqt@mFzChu#7+e(p(xP${r}Zkw8$bm~EeM
Oct 24, 2024 00:28:21.136451960 CEST	1039	OUT	GET /images/header/slide.jpg HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.286117077 CEST	488	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:21 GMT content-type: image/jpeg last-modified: Wed, 03 Apr 2024 15:40:44 GMT accept-ranges: bytes content-length: 284111 date: Wed, 23 Oct 2024 22:28:21 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:28:20.384000063 CEST	1031	OUT	GET /js/modernizr.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.012305975 CEST	545	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:20 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 8069 date: Wed, 23 Oct 2024 22:28:20 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Oct 24, 2024 00:28:21.163225889 CEST	1236	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 3d 6b 77 db 36 b2 df f3 2b 60 b5 2b 92 35 44 c9 79 ec 43 0a eb 9b b8 cd 6e f7 34 6d 4f 9d 6e 3f a8 ea 1e 88 84 24 d8 14 c9 12 90 1f 31 75 7f fb 3d 83 07 09 be 24 3b ed de 73 af 3e 38 24 38 33 18 0c 06 83 c1 60 80 Data Ascii: =kw6+`+5DyCn4mOn?$1u=$;s>8$83`@_qn#7BNFl:oq&qJgUhIutLlK9'2ULhc2b.\|f$d~d$!$a["XpxxMhM
Oct 24, 2024 00:28:21.163273096 CEST	1236	IN	Data Raw: 4e 39 b5 0a 2a 50 9a e7 69 2e 89 6c d7 00 08 ce 88 f5 4a 96 69 2e cc bb 69 73 69 b1 4c 1b 5a 0d 74 91 f4 77 94 c1 a7 da 7f b0 1a 8a ca c2 a0 7c ea 37 94 46 24 f3 92 e8 02 a0 9b c6 ab fc 0a 6a 9b 26 0e 3a ad 8a 66 75 fb 02 82 66 dc ee 8f 0a 99 25 Data Ascii: N9*Pi.lJi.isiLZtw\|7F$j&:fuf%%I55G!rmi?kYpX+=C:iNu1jV`.15QPPuvmHjp]JOeq+Hxo4/}{~]5]@>
Oct 24, 2024 00:28:21.163280964 CEST	1236	IN	Data Raw: 69 3f 08 d0 df 6a 2b f1 ee c5 49 e9 f7 a5 71 8f 76 58 fb 7d 47 75 a4 06 0c 1d 97 90 1b b6 26 22 cd bb f5 c3 da 8b 3c 62 12 4a ed 03 94 f7 0a a5 9b 66 7d e7 f2 b1 64 d3 8c 26 5f 69 9c ce b1 ac b7 57 bf 7a 7b 94 62 cd 7a 0d 4a bc 01 36 6a dc 49 bf Data Ascii: i?j+IqvX}Gu&"<bJf}d&_iWz{bzJ6jI=RA+Hhup[6F5/_z8UGjjxH?o.kxTFTQC4+;YRZM.`u9$0WNN-28^a\e2
Oct 24, 2024 00:28:21.163286924 CEST	1236	IN	Data Raw: 08 09 67 8e 57 97 d8 23 86 43 f9 f4 94 d1 60 0f 07 fb f0 4a ff a8 68 ab b1 c4 bb 54 78 90 9b f7 8d a0 5b 57 e6 3a c3 41 89 59 3f ac ca 6c 33 e0 0d 48 e3 79 35 f6 0d aa b6 75 41 5b 1b a1 95 50 1a a3 be 7e 14 e7 29 0d d5 98 8f 6c 6a 03 fa 7f b1 b1 Data Ascii: gW#C`JhTx[W:AY?l3Hy5uA[P~)ljvkDOwJ<Jx`vsIv.e`W7>Yc$kG<vc2L_&p+s!3[2~R~Lc3cH*+Ul:^,
Oct 24, 2024 00:28:21.163403988 CEST	1236	IN	Data Raw: 91 24 4a 41 c8 ff 96 b2 83 fb 67 ba 24 2d 01 bf f9 0a c9 cd b3 3e 32 b0 c6 93 37 77 1c e0 e7 a7 e4 3a 49 6f 13 ad dd 36 4f 6e 4f 1a 4e 3b 96 27 cf 0a 1e 8a ec 37 03 ac a4 11 b8 b9 bb ff f8 e5 eb 31 fc ed b8 02 01 7e 1d d2 83 a5 9e b9 a0 00 8c 2e Data Ascii: $JAg$->27w:Io6OnON;'71~.i<=-D"~>"7:0)g2`Q)zmUYdI~UZ)'k?NeV5N&>HyOP2U~ou-h&%@"TnzHrY}K]9BRd
Oct 24, 2024 00:28:21.163409948 CEST	1236	IN	Data Raw: b3 59 22 7f 81 51 8a 36 5c 79 e3 b8 82 33 af b3 26 9c 7d 1d b8 9c a6 ca d7 16 68 fd 96 71 b8 7a d7 2e 30 3b 46 15 c2 86 a8 ab 19 0c af ed 6b 2a 1b 08 e6 fc 96 41 a8 e5 5b 59 8b 9d d6 ad 40 ea 66 ae 46 0a 60 9d ee 9b 38 fe 41 5d 76 14 d4 ce 89 b5 Data Ascii: Y"Q6\y3&}hqz.0;Fk*A[Y@fF`8A]vzTlwiyRlSG)tyXuKdW$PJJ>tnBZ$]q^\|1r>?9Q~ZHo#]qu!W>2fG{HqO$Y~1~VPKU
Oct 24, 2024 00:28:21.163415909 CEST	653	IN	Data Raw: 96 95 cd 79 be f7 6c 9b b7 51 7a 5c 6d b5 c0 14 29 a7 42 22 ff 82 c9 f3 c2 a2 70 af 6c db ac 14 76 be f0 3b 2f 35 9e 5d eb 9b 92 a5 ed 86 b1 ec 7a 7b 0f 83 8a 5c e1 25 9e e0 8d 37 d3 3b 6b e6 ba 67 e2 05 41 40 3c d0 38 48 4c 45 db 66 6d cb 60 82 Data Ascii: ylQz\m)B"plv;/5]z{\%7;kgA@<8HLEfm`CJz!1pX:~'v8tAqyZKT<YxRzd!Af8TlU@\|?_W84P\|r<eSNlQS(
Oct 24, 2024 00:28:21.165405989 CEST	1039	OUT	GET /js/jquery.inview.min.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.315562010 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:21 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 753 date: Wed, 23 Oct 2024 22:28:21 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 53 5d 8b db 38 14 fd 2b 89 59 8c 44 ee 8a 99 c2 be 38 a3 e4 a1 0c ec 42 4b 29 5d d8 5d 86 3c 28 f2 75 ac a2 48 46 be f6 74 6a f9 bf 17 d9 f9 68 b2 7d b2 cf 91 ee 3d 47 f7 63 59 75 4e 93 f1 8e 11 1f ce ff 0b 64 7c e8 55 58 20 18 70 72 a8 d1 1c 6a 2a 94 30 ce 61 f8 73 42 f0 6a 4a aa cf dc 3f 09 8c eb 80 d4 05 b7 70 62 8e 88 91 a1 0c 42 fb 63 a3 e8 a3 2f 11 18 c6 b8 24 d1 76 4d e3 03 89 bd ff 96 68 cb f3 9c 19 99 bd ff f2 e5 f1 fd 74 39 93 52 e2 b6 2a 82 d8 fb f2 ed 27 0f 46 68 6b d0 d1 8d 89 33 39 bb e0 1c dc 78 79 8a 61 7c 98 6d 0d e4 9b 42 89 46 1d f0 bf 4f 55 d5 22 c5 58 89 56 07 6f ed df be 89 71 16 bb 32 60 b1 a2 53 c4 bf f7 11 1f b0 a2 bb 90 44 8d 57 65 77 2a a2 03 2b 89 71 08 f2 61 6d 2a 46 02 95 ae 59 09 d7 ca 03 ce 37 8d 44 51 2a 52 a2 45 8b 9a 7c 00 27 51 fc 86 16 8f e8 68 6d a5 15 aa 2c 99 d9 3a 51 19 57 32 c3 0b c7 47 0e 4e 5a 61 d1 1d a8 e6 95 0f cc 4b 1f 23 32 0e b5 ac 63 34 8c af dd 26 ac c3 6a c5 27 79 ed 1d 29 e3 5a 56 81 7d 09 3b 3e 6b 2b d0 d0 40 2b [TRUNCATED] Data Ascii: mS]8+YD8BK)]]<(uHFtjh}=GcYuNd\|UX prj0asBjJ?pbBc/$vMht9R'Fhk39xya\|mBFOU"XVoq2`SDWew+qamFY7DQRE\|'Qhm,:QW2GNZaK#2c4&j'y)ZV};>k+@+M$tn2~w+/#d+Tde_3c\z>`}UwJ}fM=34OL,,Yq{66K(+:-'6)n7Tl^JxWh`We/Cw\|S<`A^wi^@WJ>Zor_AmTY)E>/()Rm!y-sZKg\|#>zXcdVH9+}7-.~)>jEfi*\,+]g-G 5]lw\M
Oct 24, 2024 00:28:21.315644026 CEST	61	IN	Data Raw: 5d bd ee 28 1f bc ac a7 d8 91 c3 b2 4a 7b f8 9c 6a f6 c1 b4 84 0e 43 9e 57 42 11 29 5d 4f f4 1d 64 99 77 95 d7 5d 6b dc 4d ce 73 c6 91 7d fd dc 61 78 e3 eb 1f ee a6 31 d2 90 05 00 00 Data Ascii: ](J{jCWB)]Odw]kMs}ax1
Oct 24, 2024 00:28:21.319720030 CEST	1028	OUT	GET /js/custom.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.466489077 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:21 GMT content-type: application/javascript last-modified: Sat, 13 Apr 2024 09:29:52 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 1867 date: Wed, 23 Oct 2024 22:28:21 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5a eb 6f e3 36 12 ff dc 02 fd 1f 06 de 00 92 73 b6 ec a4 db 1e e0 34 01 8a ec 16 e8 87 de e6 90 e0 1e 28 7a 06 2d 8d 64 6e 29 52 20 29 3b be 22 ff 7b 41 ea 61 3d 28 27 9b 2c ba 7b 3d f3 4b 24 72 5e 9c 99 df 70 28 c7 8f 73 1e 6a 2a b8 7f 32 86 df be fa 12 00 60 94 2b 04 a5 25 0d f5 e8 e2 ab 2f 8b c9 0d 91 a0 b3 f7 70 09 ef ff 9e a3 dc 5d ec a7 25 6e 48 46 cf 5f 97 53 b3 19 dc 48 64 82 44 28 a1 98 2a 58 fc 2d e5 91 d8 8e 03 c1 7d cf ac 7b 13 a8 d5 d7 da 1b f4 a3 57 4a 13 9d ab d1 38 88 49 84 ef 72 ed 8f 2f 1c 54 59 a5 6e 34 0e 22 64 64 e7 7f fd cd 7c cf 33 52 4c 6c 47 15 e7 c3 d8 ee a9 b6 55 70 90 48 a2 5d 6d 4a cb e4 48 84 79 8a 5c 8f 03 4b e4 77 dc b5 97 54 4a bb 34 03 6e 43 29 18 03 2d e0 4e 64 76 0e f6 54 27 b5 1f 94 25 f3 dd 3e 30 83 c6 e0 9f f8 7a 4d 55 45 7c 27 32 7f 0c 57 97 70 36 9f f7 c8 0b e9 de 2b 89 3a 97 7c aa c5 54 8b cc 2b 1c f1 23 f7 cf e7 f3 a6 fb ac 33 00 99 c2 0f 91 63 1c ea 12 b4 7f 7d 68 ae b9 c4 98 f0 87 8c 86 bf 0e c6 bf e4 5c 89 68 37 59 eb 94 [TRUNCATED] Data Ascii: Zo6s4(z-dn)R );"{Aa=(',{=K$r^p(sj2`+%/p]%nHF_SHdD(X-}{WJ8Ir/TYn4"dd\|3RLlGUpH]mJHy\KwTJ4nC)-NdvT'%>0zMUE\|'2Wp6+:\|T+#3c}h\h7Yyp3w7m[[/c+bzf Q/~_};`lhB5_n%2]QtR"v7P0"!->(#1\|GD([FMQP>P.T$3+<@DQ0Uf$\#5#r1Aazo_5QKwI>M'$ef24,#&WZ[:/LQ@[\~2FFs@k"EYzu$N(i\|~S
Oct 24, 2024 00:28:21.466547012 CEST	1176	IN	Data Raw: f3 e4 ad 89 aa 91 b3 97 1a c4 94 47 be 17 50 8d e9 c2 52 9b 02 6d e6 46 3f 9b 90 4c 6b 47 c0 7f 2e c1 ab 10 e8 fd 32 1a f7 12 67 36 fb 91 53 4d 09 a3 ff 45 a8 ec ec 6c aa a9 ba 22 f1 5d a2 be 2f b1 55 83 8a 9a 62 2a 95 2e d0 76 c8 71 2d 9c b9 5c Data Ascii: GPRmF?LkG.2g6SMEl"]/Ub.vq-\wCLR[xS{([+/Yu}Rin@"3w5=Nzn/$gN8ilVW;\|8HK3=#u>F2\GcIR:)xiM
Oct 24, 2024 00:28:21.468153000 CEST	1052	OUT	GET /images/content/testi_client_img2.jpg HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.617289066 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:21 GMT content-type: image/jpeg last-modified: Wed, 03 Apr 2024 15:40:10 GMT accept-ranges: bytes content-length: 2267 date: Wed, 23 Oct 2024 22:28:21 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 57 00 00 00 03 a0 04 00 01 00 00 00 57 00 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 57 00 [TRUNCATED] Data Ascii: ExifII*V^(ifHH02100100WWC!"$"$CWW":!"#1Aaq$2BQRr3b4CS$!1A"3qQa?}O;/_;$1yDxdy ,/w-l,NxIE8Bt@U:VshN0.5t]7a\~I)X8UV=Y2Q:7iq:eHI#KLfv\|{]YSwe;J]VN6]
Oct 24, 2024 00:28:21.617331028 CEST	1236	IN	Data Raw: 45 d8 3d 0d b7 89 f1 1f cc 77 f7 2d 63 b8 f3 e9 fe 67 7f 72 d5 82 54 34 36 c5 d0 e7 01 8e 62 a9 ed 22 d6 a5 e8 d9 7b 35 24 11 db a4 be 52 c3 a6 77 a9 7d a5 ef a2 bd 40 63 d2 c7 c5 7f f6 8a e3 89 4a 37 a4 1f cc be 75 96 cb 28 95 90 f3 3d 31 fc cb Data Ascii: E=w-cgrT46b"{5$Rw}@cJ7u(=1@8\mv.k5aDqxpZck[I)Ps'E3t`w_d3IHeSl6W)egc4]41:&p"WS=19,BGagV[

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:28:20.396478891 CEST	1048	OUT	GET /images/content/services/face.png HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.015577078 CEST	487	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:20 GMT content-type: image/png last-modified: Tue, 16 Apr 2024 12:30:21 GMT accept-ranges: bytes content-length: 177823 date: Wed, 23 Oct 2024 22:28:20 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Oct 24, 2024 00:28:21.015600920 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 72 00 00 00 fa 08 06 00 00 00 bc b0 cc 08 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 fb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 Data Ascii: PNGIHDRrpHYs+iTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x='adobe:ns:meta/'> <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'> <rdf:Description rdf:about='' x
Oct 24, 2024 00:28:21.015608072 CEST	224	IN	Data Raw: 6e 64 65 72 65 72 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 52 44 46 3e 0a 20 Data Ascii: nderer)</xmp:CreatorTool> </rdf:Description> </rdf:RDF> </x:xmpmeta>NGbJIDATxlu{3Ee*HI[Ed;l%.! ;3y}kKUWy3]U7'
Oct 24, 2024 00:28:21.017343044 CEST	1236	IN	Data Raw: fc ca bf 34 51 3c c4 f3 7d ca b2 40 6b 83 94 12 a5 3c a4 90 28 cf c3 0b 43 94 54 68 ad 91 52 02 a0 b5 a6 28 72 b4 2e 91 08 fc 30 44 2a 0f 25 15 4a 09 a4 14 48 29 91 52 20 84 40 08 03 02 00 84 10 f5 6b f5 63 ff 37 7c d8 22 84 c0 18 73 e3 3d 00 63 Data Ascii: 4Q<}@k<(CThR(r.0D*%JH)R @kc7\|"s=cL^sr3~bcn(,K(tYRj.Kh]mi54VR)+RY<R\|\m~R}j46[FRSRXMMI;G)%[}
Oct 24, 2024 00:28:21.017349958 CEST	212	IN	Data Raw: ed 7b bb 9f 57 1d ba 7f dd 8e 25 b0 67 ca ed 4f d0 86 76 a8 fe 7f 3e a0 a8 af d1 66 67 2e fe f8 16 99 9b da 5c 55 76 14 f2 1f 51 23 af 9e 72 fb d3 9a eb 9a 87 db 52 14 05 69 e2 80 3b cf 90 52 e0 07 21 61 18 d2 ef 0f 1a ad da c0 de 9a e4 b4 95 dd Data Ascii: {W%gOv>fg.\UvQ#rRi;R!a}mjeNkkiZNN`)On/zN$r4a>R90osCXL~u{riG`i!%hLCT*]0
Oct 24, 2024 00:28:21.017357111 CEST	1236	IN	Data Raw: 77 35 69 81 19 18 6d c0 81 96 05 45 e1 b0 c4 5a 01 4a 1a 0a e1 39 fa 55 20 85 01 53 a2 0b c8 4b 2b 4b 59 9e 58 65 b2 52 5a 8c b5 a6 2c a8 3b 3a a5 c8 28 cb 9c b2 28 28 8b 8c 22 cb c8 8b 9c 2c cf ea 45 cc e1 70 bd f8 b9 c1 a8 c7 a7 52 30 4d 2d 8b Data Ascii: w5imEZJ9U SK+KYXeRZ,;:(((",EpR0M-Mm,v@Zk=K0-ETcA5-K())fMlgs^O{)rgZ4-&E0Y<Ey2+u2mv~_#yC~`1<~rM0"xIBlI^
Oct 24, 2024 00:28:21.017415047 CEST	1236	IN	Data Raw: 10 f9 1e 9d d0 27 0e 42 e2 30 64 b5 9c b3 5a 2f 59 ad 56 6c b7 1b 6b 69 d5 0b 17 28 a9 ea c5 ba bd 38 95 b6 e6 e0 28 8f b6 5c 54 ce cf 46 5e ac 06 2c 68 16 b2 1d 2b c9 fd d9 2c 96 ad 1e dc 51 1a 0e 75 54 d3 3f b5 bc b6 19 b9 d6 a2 da a6 a6 ab 11 Data Ascii: 'B0dZ/YVlki(8(\TF^,h+,QuT?\k Vvkr#"<dm&Z)&?1#xwMUpR?h-xW q,}!*5>`:n+B8e:Rq06m
Oct 24, 2024 00:28:21.017421007 CEST	1236	IN	Data Raw: 59 b4 d6 ac 57 4b b6 db 2d 9d 4e 87 93 d3 b3 03 1c 33 76 83 c5 7a 43 9a a5 f8 41 40 a7 db 65 30 3a a2 a5 63 01 20 84 62 7f 11 d9 1f e3 34 b1 0e c5 b8 13 e3 79 fe cd eb 9c 46 62 43 b8 ac 70 d6 1c 31 7b f6 65 4b 33 ac 2c c0 a6 93 aa 49 d4 5c 6d 0e Data Ascii: YWK-N3vzCA@e0:c b4yFbCp1{eK3,I\m,*z56(' m("ToyFG52ySuzIQ'5+nPPoVXzjhkJlBRm<ur"dK]XWk#f
Oct 24, 2024 00:28:21.017427921 CEST	636	IN	Data Raw: 09 c3 e1 c8 dd d7 82 60 92 6c 19 8c ac d6 2f 95 15 ee 64 9b d4 fc a3 9d 05 da c5 6a 57 6d b2 0d dd 91 99 fd ff 5b a5 92 bb 67 5d b3 4b 87 b4 b5 6f 07 78 15 a7 0b f5 64 4a d3 84 5e 7f 00 c6 b0 5e 2f c9 b3 0c d9 eb a3 75 c9 c0 b5 73 b9 98 a3 3a 8a Data Ascii: `l/djWm[g]KoxdJ^^/us:f:OqCYW+.<&CA{eY\,X.(n^ALd]/1jleQARYzEPR:<\|_yO,Vk<T
Oct 24, 2024 00:28:21.017433882 CEST	1236	IN	Data Raw: eb d4 c6 e5 45 b1 bb 68 44 0b 94 ab f8 95 b6 ec 4a b4 db eb aa b5 b5 e2 b4 b6 93 b7 5e 9b 4c 89 10 4d 42 34 e9 76 ef 1a 17 67 df 76 ac 37 a3 64 ff 16 02 0a ed 76 f8 b8 c5 40 08 81 a7 dc ae ad 4a 45 a7 55 c1 aa 63 6f 5f 9d 4d 0b c4 d9 e1 3f 6f 72 Data Ascii: EhDJ^LMB4vgv7dv@JEUco_M?orx+U;%c}4k[kb>(r.j S9h!u= das}4tCe^a!#k%y.SVd8A<}(&)Q"
Oct 24, 2024 00:28:21.023117065 CEST	1236	IN	Data Raw: dc b0 3c ad 26 ad dd f0 b4 69 a5 dd 3d e2 55 3f 95 ba dc 99 a6 55 34 a1 81 1d 46 5d 08 81 27 0e 6c 4f 14 a2 72 36 34 17 1e 5a 7d 76 df b3 b7 b9 8d 56 d9 69 b4 60 87 92 a8 ad bd ba 21 34 f1 b1 ed d7 9f f4 22 a8 1d 67 d5 22 b5 3b b4 3f 7a a9 e8 95 Data Ascii: <&i=U?U4F]'lOr64Z}vVi`!4"g";?z,N')89=!Y0B7CuQ ^-fyn7IBYAHTQQR,X v+`>[rqa)%Q!MraLF/uyg8@!H;/z1[2<q
Oct 24, 2024 00:28:21.375152111 CEST	1040	OUT	GET /images/content/cycle.jpg HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.521770954 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:21 GMT content-type: image/jpeg last-modified: Wed, 03 Apr 2024 15:40:08 GMT accept-ranges: bytes content-length: 6356 date: Wed, 23 Oct 2024 22:28:21 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 27 01 00 00 03 a0 04 00 01 00 00 00 28 01 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 28 01 [TRUNCATED] Data Ascii: ExifIIV^(ifHH02100100'(C!"$"$C('"3!1AQa"q2#BR$br#!1A"QB2q?GK$p!"ZG-rQ{8\@qaDG4+W$D#A-HJ~A"T%+$9,r!-PQBAH5Q,r#QD#r`b\Z%JAc@_"ZzKGa!iizJ8W!DUB^D\|rH(lDpJH
Oct 24, 2024 00:28:21.526135921 CEST	1042	OUT	GET /images/content/sign_bg.jpg HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.673671961 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:21 GMT content-type: image/jpeg last-modified: Wed, 03 Apr 2024 15:40:44 GMT accept-ranges: bytes content-length: 23261 date: Wed, 23 Oct 2024 22:28:21 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 32 03 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 03 32 06 [TRUNCATED] Data Ascii: ExifII*V^(ifHH02100100@2C!"$"$C2@"7!1AQR"aq2#3Bbr4S$CDc?ssMPw>7>@'ssMPw>7>@'ssMPw>7>@'ssMPw>7>@'ssMPw>7>@'ssMPw>7>@'ssMPw>7>@'ssMPw>7>@'ss

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:28:20.396842003 CEST	1043	OUT	GET /images/header/horoscope.gif HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.031807899 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:20 GMT content-type: image/gif last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-length: 206371 date: Wed, 23 Oct 2024 22:28:20 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 47 49 46 38 39 61 c8 00 c8 00 e6 7f 00 ff bb 53 57 57 34 66 38 35 a4 5b 31 c6 78 32 ff bb 4a 35 35 35 b3 68 32 9b 55 33 72 3a 34 5c 45 35 79 3f 34 ff bd 5a ff ab 3b d6 87 32 ca 74 2d 2d 2d 2d ff c4 5e 12 12 12 ff b3 42 ff b4 4a ff c9 61 ff a2 2c ff b2 3b ff c5 61 eb 94 2d b9 67 2e d3 7a 2d ff aa 35 da 83 2e ff c1 53 ff c9 64 ff c1 5d fe 9c 28 29 29 29 20 20 20 24 24 24 f1 94 2b 1c 1c 1c ff a4 32 aa 62 33 08 08 08 38 3a 39 53 38 35 ff c6 64 ff c7 5e ff c2 60 e6 8c 2d 49 37 46 18 18 18 ff cc 65 30 30 30 80 43 33 ff b8 44 eb 8e 2b c2 6a 2c 8d 4a 32 f1 9b 2c ff c0 58 fc 99 28 e1 86 2d ff ae 41 92 4c 31 3c 39 44 ff a9 2d ff cb 61 ff c5 58 ff b7 50 f8 95 28 ba 70 34 e6 92 2f 97 4d 2f 87 43 30 89 47 32 fc 96 28 58 4c 32 ff bf 4e 36 3a 3b ff a7 38 cd 81 34 85 48 34 f5 a1 2b 9d 52 30 e0 8c 2f 78 3b 31 ff 9e 2e d1 7d 2f 58 51 33 ff bf 5f fe a1 28 f5 94 29 33 33 33 f1 90 2a ff c7 66 92 50 34 37 37 37 af 60 2f 7f 3f 31 dc 8d 31 ff c3 63 f6 98 29 3a 3e 3f 52 57 33 ee 8c 29 e2 82 2a be 6d 2f e7 88 2b 80 47 37 6c [TRUNCATED] Data Ascii: GIF89aSWW4f85[1x2J555h2U3r:4\E5y?4Z;2t----^BJa,;a-g.z-5.Sd]())) $$$+2b38:9S85d^`-I7Fe000C3D+j,J2,X(-AL1<9D-aXP(p4/M/C0G2(XL2N6:;84H4+R0/x;1.}/XQ3_()333fP4777`/?11c):>?RW3)m/+G7l43087Ae33Xd'K5,+4652q0444111+q51W222!NETSCAPE2.0!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
Oct 24, 2024 00:28:21.031836033 CEST	212	IN	Data Raw: 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 Data Ascii: //ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:5B3B828F196A11E889698374C06B9B6C" xmpMM:Docum
Oct 24, 2024 00:28:21.031855106 CEST	1236	IN	Data Raw: 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 42 33 42 38 32 39 30 31 39 36 41 31 31 45 38 38 39 36 39 38 33 37 34 43 30 36 42 39 42 36 43 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 Data Ascii: entID="xmp.did:5B3B8290196A11E889698374C06B9B6C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5B3B828D196A11E889698374C06B9B6C" stRef:documentID="xmp.did:5B3B828E196A11E889698374C06B9B6C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket
Oct 24, 2024 00:28:21.031872034 CEST	1236	IN	Data Raw: 40 05 0d 0b 24 10 40 19 24 74 79 5b a3 85 88 80 ad 0e 6f c4 60 6a ae 34 49 10 43 19 0b a4 61 43 0f 58 80 00 42 0b 04 13 1c 01 00 27 58 e1 45 00 ed 92 56 51 a5 3b d0 6b af b7 84 7c 31 43 ff 0c 91 25 71 86 86 2d 80 80 05 05 67 74 60 c5 03 0f 58 61 Data Ascii: @$@$ty[o`j4ICaCXB'XEVQ;k\|1C%q-gt`XaCA4p@PyS1i;Xx8A:Aa6&#L@=[9\AP1=Tf}z`FHX)*h13TFTejX'\DyB
Oct 24, 2024 00:28:21.031877995 CEST	1236	IN	Data Raw: ec 2f c7 21 c2 18 d8 b0 d5 0b b3 70 a3 84 f6 d0 29 dc b6 83 31 4c 75 4b d5 43 00 06 5a 70 00 3c 05 65 1c 63 9c 01 19 84 40 44 42 81 45 78 04 15 c4 b5 28 d0 87 2b 58 d8 10 a9 4a 40 04 aa 90 87 ce a6 e2 38 78 f8 c0 9c bb 5a 14 11 31 e1 03 1a 30 c1 Data Ascii: /!p)1LuKCZp<ec@DBEx(+XJ@8xZ10Pa*0AKbW`(cTh>ekz:^s3ScS.0Mi+X_P/\zgD.,`c\EpW/b>,DM9w?QX6T
Oct 24, 2024 00:28:21.031893969 CEST	1236	IN	Data Raw: 40 28 15 04 59 79 2d d9 91 18 20 61 58 04 00 02 f4 e3 03 01 06 70 eb 10 98 5d 22 02 5e 40 01 0c e0 62 0d e0 00 0b 93 11 12 c1 14 bd 94 3c de f6 08 42 e1 3a 64 21 03 1b 80 25 fc 37 90 60 51 06 73 f0 02 58 10 04 35 a0 01 2a a0 19 e2 e9 0e 0d d1 3e Data Ascii: @(Yy- aXp]"^@b<B:d!%7`QsX5*>48 EW m'0DKGCKO@3`Prpox''oaxYm3D\|~ZPLa%$He``4@")p+`
Oct 24, 2024 00:28:21.031908989 CEST	848	IN	Data Raw: 11 33 5c a6 3a f0 61 80 04 3d 2c 83 22 d2 e6 ea 80 8b 0d 28 18 54 e8 40 ed cf 96 54 03 58 a4 91 30 43 a8 d5 4f 06 48 48 40 80 05 0b 86 1a 64 7c 84 74 ba 93 05 8a 9f 57 d3 0e 32 93 c5 05 05 30 7e ff 4c 8c 08 e5 f2 8f 88 0c 11 a8 48 a8 a8 56 68 02 Data Ascii: 3\:a=,"(T@TX0COHH@d\|tW20~LHVh-4gD-~DH0}3@0RIv@dH0,6!4@uoR5:)8QAbD)F-27-21Yg?Lo)K&H \*
Oct 24, 2024 00:28:21.031960964 CEST	1236	IN	Data Raw: 14 fa 24 28 01 82 02 54 45 72 89 1f 5f a8 eb 01 07 2b 8c 60 be 2c 32 d8 80 04 52 40 02 56 fd 6f 37 01 98 00 05 60 f0 24 80 09 e2 1d 60 e8 c2 00 64 76 c0 3f f8 81 40 0f 60 c1 01 56 91 3a 63 10 46 07 36 98 06 48 be 80 18 4b 3c 26 00 43 98 80 0a d8 Data Ascii: $(TEr_+`,2R@Vo7`$`dv?@`V:cF6HK<&CS>ARu/@.k(2K`N3 i(x<hC':h%-`2O2P$HcX*a "6>TI 2h=X
Oct 24, 2024 00:28:21.031966925 CEST	1236	IN	Data Raw: eb 08 f6 20 8a 00 80 20 14 00 0c ba fb 36 79 b4 81 4d 57 e2 60 08 0c 00 94 dc a6 80 00 ff 05 f8 87 ed 44 bd 19 d5 4d 0d f7 4c 80 6a 8e 76 11 c4 11 09 51 80 0d 28 60 3d 8f 08 c8 26 54 90 82 86 eb 80 ad 74 30 09 33 26 e0 00 04 08 00 06 b7 90 cb 69 Data Ascii: 6yMW`DMLjvQ(`=&Tt03&iP]A< \`f!^>q!KC?I`tX@UTj\0x` p`4B@!@^`We}d\p}(-N4
Oct 24, 2024 00:28:21.031972885 CEST	1236	IN	Data Raw: 45 84 16 e6 29 08 48 e1 fb fa b5 2f 23 4c 3c f8 93 41 84 04 15 91 06 89 80 62 a5 84 15 1f 74 44 80 80 04 33 fc e5 9e 35 8c 49 e0 c5 07 17 04 90 c2 17 84 88 c2 d0 1f 23 48 90 c2 1a 2c 78 d7 cf 81 d6 b0 f3 c7 15 35 44 10 06 3f ed 55 33 03 04 c0 d0 Data Ascii: E)H/#L<AbtD35I#H,x5D?U3B#!LAH*#$E,!AMX$(@@ A`pr=$1&LQd\`$a\&A}yh\|NB }thFZ`X8"
Oct 24, 2024 00:28:21.039395094 CEST	1236	IN	Data Raw: 26 b0 01 06 70 60 4f b6 5a 64 0b 06 d8 55 0d 5c 90 40 94 1c 22 35 6f 70 41 03 44 37 c5 80 c4 e0 07 14 40 e3 08 2c cb 21 6d a4 40 0a 1f b0 40 5d 54 69 93 ba 40 80 08 15 08 df 1f 4f 51 42 2a 94 ee 54 50 32 40 7c 70 1a 51 d3 1a 02 39 09 c0 c0 04 aa Data Ascii: &p`OZdU\@"5opAD7@,!m@@]Ti@OQB*TP2@\|pQ9(q,@d$(;rFr$=`fk?NaR f1pf`@v%t<T >cKvH `d)>fC{D@aL@"$I\|b,C=E
Oct 24, 2024 00:28:21.396914005 CEST	1052	OUT	GET /images/content/testi_client_img1.jpg HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.547390938 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:21 GMT content-type: image/jpeg last-modified: Wed, 03 Apr 2024 15:40:10 GMT accept-ranges: bytes content-length: 2713 date: Wed, 23 Oct 2024 22:28:21 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 57 00 00 00 03 a0 04 00 01 00 00 00 57 00 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 57 00 [TRUNCATED] Data Ascii: ExifIIV^(ifHH02100100WWC!"$"$CWW";!1"AQa#2BRqr3$b!!"1A2?}"A{KSq}_XR]uKSnhUxMmHQHbNCUt-]vW6^#;:BXLQ&C%B6*j&orm!MD<?%rOA>.,O#eMw{E+WtHkQq\h7Gz&hCc;w"EM'r_gGU
Oct 24, 2024 00:28:21.549004078 CEST	1043	OUT	GET /images/content/testi_bg.jpg HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.700788975 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:21 GMT content-type: image/jpeg last-modified: Wed, 03 Apr 2024 15:40:44 GMT accept-ranges: bytes content-length: 63200 date: Wed, 23 Oct 2024 22:28:21 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 6f 02 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 02 6f 06 [TRUNCATED] Data Ascii: ExifIIV^(ifHH02100100@oC!"$"$Co@"<!1AQ"aq2#BR3rSbCc4$?!QqP8XB1~}y'Q'w1B?sKFI@t..)zXAHa`Arghhufmm\|iNM_Z PEvXc<;F} }aBHBb[x!m?a2\|Ji+?UE@Xa@3

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:28:20.396962881 CEST	1034	OUT	GET /js/parallax.min.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.013219118 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:20 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 2310 date: Wed, 23 Oct 2024 22:28:20 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 58 4b 93 db 36 12 be e7 57 48 a8 94 02 58 10 45 3a b5 39 50 03 cf da 93 b8 76 aa 1c ef ac c7 55 1b d5 ac 0e 10 09 89 70 28 82 0b 40 33 1a 0f f5 df b7 40 f0 01 50 52 ec e3 de f0 e8 6e 74 7f e8 17 30 7f 35 fe 61 f4 6a 54 52 49 f3 9c 1e 82 2f 6a f4 18 05 7f 0b c2 11 cc b4 2e e3 f9 bc e4 07 96 27 62 1b 6c b9 ce f6 eb 80 8b b9 43 3d 47 86 fd ef 89 28 9f 25 df 66 7a f4 3a 8c 7e 19 dd 19 9e 1b b1 c5 a3 db 22 09 6a 8a 9c 27 ac 50 6c f4 fb ed 67 2b 5a c5 f3 79 23 32 11 bb ee 18 4f f8 3a 17 eb f9 8e 2a cd e4 fc c3 ed cd 6f 1f ef 7f 33 e7 cd 7f 18 6f f6 45 a2 b9 28 a0 c6 1c 33 ac d0 4b bb 32 12 90 63 86 5e 1e a9 1c 65 44 67 5c 2d 80 58 7f 61 89 06 84 e8 e7 92 89 cd 88 4d 26 30 65 39 d3 6c c4 02 c9 36 92 a9 0c 3b 0b 45 ca 24 d6 01 3b 68 56 a4 d0 c8 c0 0c 21 6c 06 c1 8f 2c 67 3b 56 68 a2 21 47 78 5c af f1 1d dd b2 7b 99 4c 26 1e 49 c0 15 04 7c b7 05 68 32 81 1e 21 f1 e9 a8 d6 12 02 25 13 80 d0 c2 28 2e 89 a5 2f 85 e2 c6 a8 29 00 28 d0 e2 83 78 62 f2 86 2a 06 51 b0 a3 3a c9 e0 fc [TRUNCATED] Data Ascii: XK6WHXE:9PvUp(@3@PRnt05ajTRI/j.'blC=G(%fz:~"j'Plg+Zy#2O:o3oE(3K2c^eDg\-XaM&0e9l6;E$;hV!l,g;Vh!Gx\{L&I\|h2!%(./)(xbQ:?Uj7P9+:&{AB3i]Z`Ld2kmt=fZUP3v@j57fr"kue"nwn@>RBBipwRPTZ@2mq@@S0S_YeTo&ND*~GS4GH2\qd2{F\|Y"5b9lhO'_Y\|Xc}+S[RKk=zhR8((%+Y~,(46A6"M
Oct 24, 2024 00:28:21.013237953 CEST	1236	IN	Data Raw: 56 82 99 ca 79 5a 67 b0 82 8c a3 45 48 08 6d d2 98 f5 fb 1f ed 7e 7d 30 df 6d cf 1e dc 28 87 62 e8 b1 d0 4b 74 e6 a8 b0 cd f8 76 2d a0 69 7a 93 53 a5 20 e8 34 b3 3b 00 59 b8 1f b9 e2 6b 9e 73 fd 1c 83 8c a7 29 2b 00 fe 7a 5b a4 ec 60 61 b3 63 dc Data Ascii: VyZgEHm~}0m(bKtv-izS 4;Yks)+z[`ac?`-8&O!6or8jXAUH{I0&n<YUoDq4R';LdD5g"}YU"Pf5TdaH=SS]!:"\Tw*PmmCa
Oct 24, 2024 00:28:21.013243914 CEST	383	IN	Data Raw: 88 8e 47 9c 88 62 c3 b7 7b c9 7a 97 e6 e8 e5 e4 87 95 f7 3f ac 7c f8 c3 ca cf fe b0 3a fd 31 b7 85 e6 b4 69 0d 18 4d 32 4b dd 44 20 1e f6 b4 1d 7a c7 ce 94 06 c2 f0 5c f1 72 49 9a e7 5d 8f ff f7 9d d7 22 68 c4 3b a0 9e 96 48 fb 55 d2 c7 a9 f9 bd Data Ascii: Gb{z?\|:1iM2KD z\rI]"h;HU1Y#NR<'aTS[E\|!N<'}-j7jEHX*8B8$Mgb>!G&uFG&/lmVzf'&E^B~XZ]h@
Oct 24, 2024 00:28:21.077480078 CEST	1037	OUT	GET /js/jquery.menu-aim.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.226998091 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:21 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 3752 date: Wed, 23 Oct 2024 22:28:21 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 1b 6b 93 db b6 f1 f3 e9 57 6c d4 9b 88 ba ea 28 77 3a 9d ce 9c 7b ee b8 3e b7 b9 a9 9d b4 b1 d3 34 d3 c9 78 20 72 25 a2 07 02 2c 01 ea 51 df fd f7 ce e2 c1 87 48 ca 72 93 e8 43 7c 12 80 c5 be 5f d8 2c af ae 26 70 05 39 ca ea 9a f1 1c b8 06 06 ff fe 7b 85 e5 01 0a 51 6d b8 84 b5 2a 21 2d 55 91 aa 9d b4 1b 35 98 8c 19 48 98 84 94 af d7 58 a2 34 9c 19 24 40 2b 34 3b 44 09 0c 2a 8d 25 98 f2 c0 e5 06 32 b5 c5 12 ec 7f 58 03 8b 1b cc 61 ab c3 26 a3 40 b2 2d df 30 83 c0 a5 51 04 8e 81 ae 56 74 e7 4c 43 a2 a4 41 69 74 3c 81 2e ce 4c eb 2a 47 8f d5 41 55 90 b1 2d 02 2b 11 2a 4d 80 99 dd 0a 3b 6e b2 00 ce 6f c6 7d c1 64 4a c0 8c 02 93 21 f8 ab 4a be c9 4c 0c f7 06 76 5c 08 58 f3 12 01 b7 74 39 ec 32 94 76 2b d1 37 d3 90 ab 4a 23 a0 34 58 12 eb 24 ee 08 5c 97 c6 2b 26 d3 ab 70 92 19 f7 23 d7 b0 42 42 8f 5b b2 b8 92 4c 88 83 63 15 a6 96 59 81 d2 0f a3 1f 5a 7d 84 b7 4a 3e e0 41 03 bc 78 04 80 bf a8 92 0b c1 00 1e dd aa ff ae dd ea 2b c7 c5 7a f5 55 c6 f3 42 83 3f fb 15 96 08 f4 [TRUNCATED] Data Ascii: kWl(w:{>4x r%,QHrC\|_,&p9{Qm!-U5HX4$@+4;D%2Xa&@-0QVtLCAit<.LGAU-+M;no}dJ!JLv\Xt92v+7J#4X$\+&p#BB[LcYZ}J>Ax+zUB?qx;V"LS"R`L"/tFLSlB6\c]IUjUgt%`5;@NXyFZf!;SJ Sx34SH@"aVKdAdQp:!U[EJl1lx221E:nZ=XBK$u_=9J;&h]<XfRs-]RAb0'g],9\WPsJ2A'_4Le *`q~@d?Wt?/y}\Rb\ZkOIK[
Oct 24, 2024 00:28:21.227011919 CEST	1236	IN	Data Raw: 29 1e 9f ed 1f ad f7 b4 0f 3f cd 9f 07 14 e3 38 36 0a 4a 4c 90 6f bb ee 85 d5 7e 48 ed 20 63 e4 28 50 42 51 95 85 d2 9e 69 51 8a f3 80 42 da e8 12 89 4a 08 b5 b3 c6 50 38 21 91 9f 5e 21 14 4c 6b 4c 89 cb 9e 19 31 bc 24 df 56 c9 c4 ed c3 3d 26 95 Data Ascii: )?86JLo~H c(PBQiQBJP8!^!LkL1$V=&A'K$D[&a2oU`nqHAD3R#,g0!x6Vt18V`xD'g9\|\|Zi9FGxTyKD\+X<m] n"%
Oct 24, 2024 00:28:21.227018118 CEST	1236	IN	Data Raw: 9e 3d 77 95 8b 76 2d 14 c7 46 5b e2 b0 a2 40 56 5a 00 2b ec 73 b6 31 51 6a 97 86 cf 15 fc 15 b1 70 37 86 8e 0a 69 27 ac 71 d7 42 ca af 58 5c e3 d6 e9 65 87 6a bb 4c de e6 ce 27 7d 6d 4f 81 c7 26 0c 6d 23 89 8b 4a 67 d1 c7 fd 0d 60 5c b0 0d fe 73 Data Ascii: =wv-F[@VZ+s1Qjp7i'qBX\ejL'}mO&m#Jg`\sk9.PnL/8?tonl<ue\|HJm@m,W~+QN3[FaH8N=D{'rlc*}cYmSE!XIURZ"kJzI/x8<F/&hj
Oct 24, 2024 00:28:21.227030993 CEST	589	IN	Data Raw: 15 a5 17 42 a2 72 7a 2f 4c fd 8c c1 10 98 80 f0 4c 5b 31 3e 48 b5 1b b7 98 b6 42 9e 2b ce af 95 09 55 46 ed 39 0e d7 6c cf 75 20 81 68 ac 6d 91 a6 22 c9 d1 0c da 43 3d 9b a7 93 12 51 5a 8c 69 cc 45 28 65 73 f7 20 05 a7 20 9f d6 0c ba ac a3 09 5e Data Ascii: Brz/LL[1>HB+UF9lu hm"C=QZiE(es ^UJ7Y~RAheglymc:bX}"G/~U+r2LQH{Y.p;h+3PLT#O{J!K,Bhj.:#sX
Oct 24, 2024 00:28:21.230062008 CEST	1036	OUT	GET /js/jquery.countTo.js HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.378330946 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:21 GMT content-type: application/javascript last-modified: Sat, 23 Mar 2024 19:29:50 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 910 date: Wed, 23 Oct 2024 22:28:21 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 56 4d 73 db 38 0c 3d 4b bf 02 07 4f 2d 4d 54 39 bd 3a a3 bd 74 67 67 7a e8 a1 33 6d ef b4 04 46 dc 50 a4 87 84 ec a4 a9 ff 7b 87 5f 92 e5 d8 6d 73 70 2c 01 7c 00 1e 1e 08 17 7c 54 2d 09 ad a0 58 95 f0 9a 67 ab 9a ab ba d5 a3 a2 af 1a 1a 98 cd 7a ef fe 5b ef 94 c5 07 68 20 7d fb f9 13 5e 4f 0f 79 9e 65 06 69 34 0a 56 05 f5 c2 96 35 b2 b6 2f 66 98 70 3e db 6c c0 22 4d a7 b9 36 d0 8e c6 a0 22 40 89 03 2a 72 5e 07 66 9c 1b 09 f5 e8 62 ad 6a 7c 26 54 5d f1 7a aa e0 3c d1 ba 43 ce 46 49 b6 0a e8 19 37 7a d8 c2 d9 5f ca a6 63 c4 8a b5 33 af cb ca bb 92 5e 38 5e ba 92 4e 8e 76 8f d8 6d 6f 3a 7a 73 f2 35 c8 0d da fe 93 22 34 07 26 b7 17 be d1 fc 5e 44 7b 3a d6 61 2b 06 26 ed f6 7a 88 64 5e 97 ce fb 54 25 fa 4a cf bb e3 b4 d7 47 18 98 7a 01 12 03 5a 20 0d e3 be 63 84 40 3d c2 81 c9 11 2b 60 aa 0b 7e 63 db 3b 0f a1 5a e3 19 9f 9d 40 2b 70 7d 8b a7 53 2b a4 d6 7b d7 87 cf 8c fa ba 45 21 8b d4 9c da 57 0f 9b a9 5b f5 05 03 b1 c0 39 56 03 f3 61 d2 f0 7e 3e e9 9a 53 c2 26 44 9b 2a [TRUNCATED] Data Ascii: VMs8=KO-MT9:tggz3mFP{_msp,\|\|T-Xgz[h }^Oyei4V5/fp>l"M6"@r^fbj\|&T]z<CFI7z_c3^8^Nvmo:zs5"4&^D{:a+&zd^T%JGzZ c@=+`~c;Z@+p}S+{E!W[9Va~>S&D3j;80#N{FpRB3p_3o"i!2.F!8(uy659)ga]H)!p=V"3 0P8:yDOK3b@Sn\$?yFs?%CS3]g[q}Xv.\CL57uN7u$95OD<yJ[I0R^+X?a/6[E~L4vLY7f-9gxOkSrfafm
Oct 24, 2024 00:28:21.378349066 CEST	218	IN	Data Raw: 51 76 41 d9 c0 dc 3c ba 6d f2 06 e0 2f 20 50 75 01 20 6e 99 0f f7 f7 0b 98 78 b7 4b ed ee 86 e9 14 b1 27 74 57 b8 af 07 76 48 47 44 e5 e1 89 99 47 a4 18 d0 e6 57 36 d2 07 1f 20 e2 6a 4e f1 e0 45 5e 3b 8c 93 d8 e5 e7 eb e9 32 b7 b3 e2 34 87 e8 07 Data Ascii: QvA<m/ Pu nxK'tWvHGDGW6 jNE^;24{ly`L76$grj:KIf'zyT<{qQgG<q1"$1..9y[M?<}/TeDR/
Oct 24, 2024 00:28:21.389374971 CEST	1048	OUT	GET /images/content/services/palm.png HTTP/1.1 Host: www.astrologermahadeva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ii9BN1ozNDdBc3RkZk9Ud3NySkVpWGc9PSIsInZhbHVlIjoia0VyTzEyeUw1SHh0cmZtZjVYMi9ydzRuemhScUxHb2RHTmFFU3lseEJQL2FzU2RlN2llQ0tDVytST05qNlV3UTZNZXR3RzU2MUx1bms2VjFOMkN3b005VUh3MVNOMjNEWlBmbituWHppSDJ3eEorbjZka1hia2libW9NZGNiRHIiLCJtYWMiOiI2Yjg4OWVhOTE3ODU4NjQ1OTFjZjhkZWYwMjZmNDk4ZWFjZTM2NGNhZjJmMDg4YWM3ZmU2Yzc0YjJjOTk4NTIyIiwidGFnIjoiIn0%3D; astrologer_mahadev_ji_session=eyJpdiI6IklXdUg4d25IZHFIUGE2aEU5R2U2eEE9PSIsInZhbHVlIjoibDNDZDFUMkZQNDBJdVB1R0p0NW9aK0NPN2wxZ3BKZXJUUkp2TSsrbVBVdWI3ckp6M09QRkdycnZWenhpaXdWWDQ3NGlOZUNOQUJLK3pXWnkxUEJGdjJrbFFHMGlHTVFsZ25wdC8zWEZwRVNzODdXWThoWmZ3Tm5IZzdHQWN6WmIiLCJtYWMiOiI3MWQwNmUyYzQ2YzAxOGU4YTI4NmIwMzZjYTVlMjhiZmQ3NGJmMWViNzQzZTI1YzVjNGRkMzhjY2E2N2QwM2QzIiwidGFnIjoiIn0%3D
Oct 24, 2024 00:28:21.537375927 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Wed, 30 Oct 2024 22:28:21 GMT content-type: image/png last-modified: Tue, 16 Apr 2024 12:30:20 GMT accept-ranges: bytes content-length: 180710 date: Wed, 23 Oct 2024 22:28:21 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 72 00 00 00 fa 08 06 00 00 00 bc b0 cc 08 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 fb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 27 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 27 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 27 3e 0a 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 27 27 0a 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 64 63 3d 27 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 27 3e 0a 20 20 20 20 20 20 20 20 3c 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c [TRUNCATED] Data Ascii: PNGIHDRrpHYs+iTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x='adobe:ns:meta/'> <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'> <rdf:Description rdf:about='' xmlns:dc='http://purl.org/dc/elements/1.1/'> <dc:title> <rdf:Alt> <rdf:li xml:lang='x-default'>Untitled design - palm</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> <rdf:Description rdf:about='' xmlns:Attrib='http://ns.attribution.com/ads/1.0/'> <Attrib:Ads> <rdf:Seq> <rdf:li rdf:parseType='Resource'> <Attrib:Created>2024-04-16</Attrib:Created> <Attrib:ExtId>66f8ab5a-8497-4149-9194-6868a64f18e4<
Oct 24, 2024 00:28:21.537415981 CEST	1236	IN	Data Raw: 2f 41 74 74 72 69 62 3a 45 78 74 49 64 3e 0a 20 20 20 20 20 20 20 20 3c 41 74 74 72 69 62 3a 46 62 49 64 3e 35 32 35 32 36 35 39 31 34 31 37 39 35 38 30 3c 2f 41 74 74 72 69 62 3a 46 62 49 64 3e 0a 20 20 20 20 20 20 20 20 3c 41 74 74 72 69 62 3a Data Ascii: /Attrib:ExtId> <Attrib:FbId>525265914179580</Attrib:FbId> <Attrib:TouchType>2</Attrib:TouchType> </rdf:li> </rdf:Seq> </Attrib:Ads> </rdf:Description> <rdf:Description rdf:about=''
Oct 24, 2024 00:28:21.537764072 CEST	1236	IN	Data Raw: b1 56 d1 7c 00 25 9e bd 64 da be 83 35 40 d0 94 f1 ed 11 95 44 6a 67 f0 86 4e 05 99 0e 11 93 29 45 0c 4b c6 7b 85 94 41 4b 9c b1 75 cc 2c ee 59 3b 43 99 e2 75 a1 88 55 10 89 e7 54 0a 82 61 9e b0 74 03 6f 7e 04 69 81 3c 71 3a 9f d9 f7 15 c7 31 37 Data Ascii: V\|%d5@DjgN)EK{AKu,Y;CuUTato~i<q:17DCNehfN.YqsqTW7"xaNC9Hf\|i3x3[<BVw\|!2{o!\|?~bN@zayu/~@
Oct 24, 2024 00:28:21.537812948 CEST	1236	IN	Data Raw: 1c 48 e2 91 64 9c 48 b0 f9 63 51 74 1f 39 46 2c e2 da 0c 91 00 1f 66 60 3d c0 46 00 85 88 f5 5e eb 4b a1 77 1c 33 27 a9 0e 68 13 ff 8e 1b 42 24 00 15 e8 bd 47 81 77 1f c9 b8 c7 19 f6 8e 59 05 8b 0b a8 65 c0 1c f7 e8 54 70 ac 75 3c 39 2a 0a 2a 08 Data Ascii: HdHcQt9F,f`=F^Kw3'hB$GwYeTpu<9**wGug\|:+%ygQ[ \|VI6}qW4ES Zt!-c!1]-e>}y_z!xi<-LH)uq?k\VK{
Oct 24, 2024 00:28:21.538424015 CEST	1236	IN	Data Raw: a7 67 f2 54 06 2f 1c ad fe f1 36 2e 42 37 47 cb 8c e6 4c e7 4a 03 45 02 8c 76 39 62 a6 f5 1a ef c3 3a 7d 5f 47 c6 8a 8b 3d 4f 53 24 19 73 52 59 d8 4e 27 74 74 03 e7 d3 53 24 c9 9c 31 84 f9 78 60 9e 0a 6f 5f dd f2 ea ee c8 e7 9f bc e5 93 4f 3f e1 Data Ascii: gT/6.B7GLJEv9b:}_G=OS$sRYN'ttS$1x`o_O?p{tg:LeLun\!+Mu_->g$bkXXF_8WqTm$6@ qDBaeG`Y1.>),^1%+D.W:H(dWTr]+J-:eAsS

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:04 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:27:04 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:27:04 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 04de7e24-801e-008f-0e20-242c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T222704Z-16849878b78lhh9t0fb3392enw00000006q000000000k121 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:27:04 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 22:27:04 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-23 22:27:04 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-23 22:27:04 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-23 22:27:04 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-23 22:27:04 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-23 22:27:04 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-23 22:27:04 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-23 22:27:04 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-23 22:27:04 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <