Edit tour

Windows Analysis Report
https://url976.groupgreeting.com/ls/click?upn=u001.AR9Mx-2Futf8zCizRJR1zWQyjFk-2F3fmeHgwaoEX0sj7LNvLxadpcQbCDj9eJtuGOsRmTcCOtEDIvi3npIJpdt-2FygcYeLSRCs3fGYHfkoOHejg-3DgZ62_4R4PVUosj4-2FWzhrx0xFZHq-2FXxtG1noLp84vupaRf2f-2F6Jf4rFFugSxyqHO-2FVPdajKZ-2FPKCdfqHj1aQr4zVBYb-2FEiBjrf7ath0BgqOY6MdThf4Ae6yN8F

Overview

General Information

Sample URL:	https://url976.groupgreeting.com/ls/click?upn=u001.AR9Mx-2Futf8zCizRJR1zWQyjFk-2F3fmeHgwaoEX0sj7LNvLxadpcQbCDj9eJtuGOsRmTcCOtEDIvi3npIJpdt-2FygcYeLSRCs3fGYHfkoOHejg-3DgZ62_4R4PVUosj4-2FWzhrx0xFZHq-2FX
Analysis ID:	1638789
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains password input but no form action

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4728 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6708 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2252,i,15708138700965355644,3032480842205978425,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2312 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7896 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2252,i,15708138700965355644,3032480842205978425,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3240 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 8124 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url976.groupgreeting.com/ls/click?upn=u001.AR9Mx-2Futf8zCizRJR1zWQyjFk-2F3fmeHgwaoEX0sj7LNvLxadpcQbCDj9eJtuGOsRmTcCOtEDIvi3npIJpdt-2FygcYeLSRCs3fGYHfkoOHejg-3DgZ62_4R4PVUosj4-2FWzhrx0xFZHq-2FXxtG1noLp84vupaRf2f-2F6Jf4rFFugSxyqHO-2FVPdajKZ-2FPKCdfqHj1aQr4zVBYb-2FEiBjrf7ath0BgqOY6MdThf4Ae6yN8FoDZJ-2BES471XZIrwz7iAkdK0giDttZsBzovgq9NxI2-2BuYraN6hRcbg5qwW0IS05yUS-2BPM5pW0VKgLrNCJUgVrgrzp2w36AzstNmTrFZDmam4MO0pMwbNqPFZCmXMRYpEOCg3Y5zfycd31W586EO9HVlV7NTIqfFOApfW2AQ8BeOHlgje6iBlU-2Fd494BAvnto-2BkkldfXAJzgFqb-2Fw9gP0v6CLxifgeC3-2Fn9x825Lno7wROFv84v0gqYDmj0PBMsyCW6pksVIuBdLbNu1AK6m0Oxz2rwYMSz0uszf3d1mqsLV3QHi4lATMdkl3Xe-2B1t9H71pNVfArlAwSuTOueYLtMZOHS-2FCACoIdV-2F-2Byi-2BdX5-2BV48VlMGzeQ8XVuU-3D" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /report/v4?s=GHjP1sq2g9EQrI1uyYoVKPVC5AxvpwCXvBJEb1yMTV%2BUrjVpqJ8Sl%2B8CTHUb6Ql4ZJ21YwMRrBuTrLRtSmzh7MbjUaf13uwMmrp4cq0BJxm5p4xAGRcr0eo1qgM0unlO%2FkJ8ZLn%2B HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 462Content-Type: application/reports+jsonOrigin: https://cdnjs.cloudflare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PLXTXDT
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PLXTXDT
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: Iframe src: https://wsv3cdn.audioeye.com/static-scripts/v2/77be26f28/cookieStorage.html
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PLXTXDT
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: Iframe src: https://wsv3cdn.audioeye.com/static-scripts/v2/77be26f28/cookieStorage.html
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-DMHGTXLXQV&gacid=2036675460.1741975689&gtm=45je53d0v889987363z879844252za200zb79844252&dma=0&gcs=G111&gcd=13v3v3v3v5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719&z=205820238
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PLXTXDT
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: Iframe src: https://wsv3cdn.audioeye.com/static-scripts/v2/77be26f28/cookieStorage.html
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-DMHGTXLXQV&gacid=2036675460.1741975689&gtm=45je53d0v889987363z879844252za200zb79844252&dma=0&gcs=G111&gcd=13v3v3v3v5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719&z=205820238

Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: No favicon
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: No favicon

Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: No <meta name="author".. found
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: No <meta name="author".. found
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: No <meta name="author".. found
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: No <meta name="author".. found

Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: No <meta name="copyright".. found
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: No <meta name="copyright".. found
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: No <meta name="copyright".. found
Source: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.78.165:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.78.165:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.78.165:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.147.188:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.78.165:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.78.165:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.40.68:443 -> 192.168.2.5:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.40.68:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.40.68:443 -> 192.168.2.5:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.40.68:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.78.165:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.78.165:443 -> 192.168.2.5:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.79.73:443 -> 192.168.2.5:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.215.129:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.40.68:443 -> 192.168.2.5:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.59.91:443 -> 192.168.2.5:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.28.155:443 -> 192.168.2.5:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.76.87.51:443 -> 192.168.2.5:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.28.155:443 -> 192.168.2.5:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.37.163:443 -> 192.168.2.5:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.28.155:443 -> 192.168.2.5:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.29.155:443 -> 192.168.2.5:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.68.139.243:443 -> 192.168.2.5:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.59.91:443 -> 192.168.2.5:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.20.8:443 -> 192.168.2.5:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.76.87.51:443 -> 192.168.2.5:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.5:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.102.11:443 -> 192.168.2.5:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.76.87.51:443 -> 192.168.2.5:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.74:443 -> 192.168.2.5:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.5:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.233.166.154:443 -> 192.168.2.5:49869 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.16.194:443 -> 192.168.2.5:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49881 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.131
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.131
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_243.3.dr	String found in binary or memory: <a class="nav-link active" href="https://www.facebook.com/GroupGreeting-349307549146788/" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_243.3.dr	String found in binary or memory: <a class="nav-link active" href="https://www.linkedin.com/company/groupgreeting/" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_243.3.dr	String found in binary or memory: var facebook_url = 'http://www.facebook.com/share.php?u=' + sign_card_url + '&t=Sign the Group Greeting card for ' + selected_canvas_receiver_name + '.'; equals www.facebook.com (Facebook)
Source: chromecache_243.3.dr	String found in binary or memory: var linkedin_url = 'http://www.linkedin.com/shareArticle?mini=true&url=' + sign_card_url; equals www.linkedin.com (Linkedin)
Source: chromecache_234.3.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Qk:function(){e=sb()},Nd:function(){d()}}};var bc=wa(["data-gtm-yt-inspected-"]),DG=["www.youtube.com","www.youtube-nocookie.com"],EG,FG=!1; equals www.youtube.com (Youtube)
Source: chromecache_234.3.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Uh:f,Sh:g,Th:k,Ai:m,Bi:n,pf:p,Rb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var u=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){u&&u();d()};E(function(){for(var v=A.getElementsByTagName("script"),t=v.length,w=0;w<t;w++){var x=v[w].getAttribute("src");if(OG(x,"iframe_api")\|\|OG(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,C=0;C<B;C++)if(!FG&&MG(y[C],q.pf))return sc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_216.3.dr	String found in binary or memory: return f}BG.K="internal.enableAutoEventOnTimer";var bc=wa(["data-gtm-yt-inspected-"]),DG=["www.youtube.com","www.youtube-nocookie.com"],EG,FG=!1; equals www.youtube.com (Youtube)
Source: chromecache_277.3.dr	String found in binary or memory: tpl:'<div class="fancybox-share"><h1>{{SHARE}}</h1><p><a class="fancybox-share__button fancybox-share__button--fb" href="https://www.facebook.com/sharer/sharer.php?u={{url}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m287 456v-299c0-21 6-35 35-35h38v-63c-7-1-29-3-55-3-54 0-91 33-91 94v306m143-254h-205v72h196" /></svg><span>Facebook</span></a><a class="fancybox-share__button fancybox-share__button--tw" href="https://twitter.com/intent/tweet?url={{url}}&text={{descr}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m456 133c-14 7-31 11-47 13 17-10 30-27 37-46-15 10-34 16-52 20-61-62-157-7-141 75-68-3-129-35-169-85-22 37-11 86 26 109-13 0-26-4-37-9 0 39 28 72 65 80-12 3-25 4-37 2 10 33 41 57 77 57-42 30-77 38-122 34 170 111 378-32 359-208 16-11 30-25 41-42z" /></svg><span>Twitter</span></a><a class="fancybox-share__button fancybox-share__button--pt" href="https://www.pinterest.com/pin/create/button/?url={{url}}&description={{descr}}&media={{media}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m265 56c-109 0-164 78-164 144 0 39 15 74 47 87 5 2 10 0 12-5l4-19c2-6 1-8-3-13-9-11-15-25-15-45 0-58 43-110 113-110 62 0 96 38 96 88 0 67-30 122-73 122-24 0-42-19-36-44 6-29 20-60 20-81 0-19-10-35-31-35-25 0-44 26-44 60 0 21 7 36 7 36l-30 125c-8 37-1 83 0 87 0 3 4 4 5 2 2-3 32-39 42-75l16-64c8 16 31 29 56 29 74 0 124-67 124-157 0-69-58-132-146-132z" fill="#fff"/></svg><span>Pinterest</span></a></p><p><input class="fancybox-share__input" type="text" value="{{url_raw}}" onclick="select()" /></p></div>'}}),e(t).on("click","[data-fancybox-share]",function(){var t,o,i=e.fancybox.getInstance(),a=i.current\|\|null;a&&("function"===e.type(a.opts.share.url)&&(t=a.opts.share.url.apply(a,[i,a])),o=a.opts.share.tpl.replace(/\{\{media\}\}/g,"image"===a.type?encodeURIComponent(a.src):"").replace(/\{\{url\}\}/g,encodeURIComponent(t)).replace(/\{\{url_raw\}\}/g,n(t)).replace(/\{\{descr\}\}/g,i.$caption?encodeURIComponent(i.$caption.text()):""),e.fancybox.open({src:i.translate(i,o),type:"html",opts:{touch:!1,animationEffect:!1,afterLoad:function(t,e){i.$refs.container.one("beforeClose.fb",function(){t.close(null,0)}),e.$content.find(".fancybox-share__button").click(function(){return window.open(this.href,"Share","width=550, height=450"),!1})},mobile:{autoFocus:!1}}}))})}(document,jQuery),function(t,e,n){"use strict";function o(){var e=t.location.hash.substr(1),n=e.split("-"),o=n.length>1&&/^\+?\d+$/.test(n[n.length-1])?parseInt(n.pop(-1),10)\|\|1:1,i=n.join("-");return{hash:e,index:o<1?1:o,gallery:i}}function i(t){""!==t.gallery&&n("[data-fancybox='"+n.escapeSelector(t.gallery)+"']").eq(t.index-1).focus().trigger("click.fb-start")}function a(t){var e,n;return!!t&&(e=t.current?t.current.opts:t.opts,""!==(n=e.hash\|\|(e.$orig?e.$orig.data("fancybox")\|\|e.$orig.data("fancybox-trigger"):""))&&n)}n.escapeSelector\|\|(n.escapeSelector=function(t){return(t+"").replace(/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g,
Source: chromecache_277.3.dr	String found in binary or memory: tpl:'<div class="fancybox-share"><h1>{{SHARE}}</h1><p><a class="fancybox-share__button fancybox-share__button--fb" href="https://www.facebook.com/sharer/sharer.php?u={{url}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m287 456v-299c0-21 6-35 35-35h38v-63c-7-1-29-3-55-3-54 0-91 33-91 94v306m143-254h-205v72h196" /></svg><span>Facebook</span></a><a class="fancybox-share__button fancybox-share__button--tw" href="https://twitter.com/intent/tweet?url={{url}}&text={{descr}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m456 133c-14 7-31 11-47 13 17-10 30-27 37-46-15 10-34 16-52 20-61-62-157-7-141 75-68-3-129-35-169-85-22 37-11 86 26 109-13 0-26-4-37-9 0 39 28 72 65 80-12 3-25 4-37 2 10 33 41 57 77 57-42 30-77 38-122 34 170 111 378-32 359-208 16-11 30-25 41-42z" /></svg><span>Twitter</span></a><a class="fancybox-share__button fancybox-share__button--pt" href="https://www.pinterest.com/pin/create/button/?url={{url}}&description={{descr}}&media={{media}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m265 56c-109 0-164 78-164 144 0 39 15 74 47 87 5 2 10 0 12-5l4-19c2-6 1-8-3-13-9-11-15-25-15-45 0-58 43-110 113-110 62 0 96 38 96 88 0 67-30 122-73 122-24 0-42-19-36-44 6-29 20-60 20-81 0-19-10-35-31-35-25 0-44 26-44 60 0 21 7 36 7 36l-30 125c-8 37-1 83 0 87 0 3 4 4 5 2 2-3 32-39 42-75l16-64c8 16 31 29 56 29 74 0 124-67 124-157 0-69-58-132-146-132z" fill="#fff"/></svg><span>Pinterest</span></a></p><p><input class="fancybox-share__input" type="text" value="{{url_raw}}" onclick="select()" /></p></div>'}}),e(t).on("click","[data-fancybox-share]",function(){var t,o,i=e.fancybox.getInstance(),a=i.current\|\|null;a&&("function"===e.type(a.opts.share.url)&&(t=a.opts.share.url.apply(a,[i,a])),o=a.opts.share.tpl.replace(/\{\{media\}\}/g,"image"===a.type?encodeURIComponent(a.src):"").replace(/\{\{url\}\}/g,encodeURIComponent(t)).replace(/\{\{url_raw\}\}/g,n(t)).replace(/\{\{descr\}\}/g,i.$caption?encodeURIComponent(i.$caption.text()):""),e.fancybox.open({src:i.translate(i,o),type:"html",opts:{touch:!1,animationEffect:!1,afterLoad:function(t,e){i.$refs.container.one("beforeClose.fb",function(){t.close(null,0)}),e.$content.find(".fancybox-share__button").click(function(){return window.open(this.href,"Share","width=550, height=450"),!1})},mobile:{autoFocus:!1}}}))})}(document,jQuery),function(t,e,n){"use strict";function o(){var e=t.location.hash.substr(1),n=e.split("-"),o=n.length>1&&/^\+?\d+$/.test(n[n.length-1])?parseInt(n.pop(-1),10)\|\|1:1,i=n.join("-");return{hash:e,index:o<1?1:o,gallery:i}}function i(t){""!==t.gallery&&n("[data-fancybox='"+n.escapeSelector(t.gallery)+"']").eq(t.index-1).focus().trigger("click.fb-start")}function a(t){var e,n;return!!t&&(e=t.current?t.current.opts:t.opts,""!==(n=e.hash\|\|(e.$orig?e.$orig.data("fancybox")\|\|e.$orig.data("fancybox-trigger"):""))&&n)}n.escapeSelector\|\|(n.escapeSelector=function(t){return(t+"").replace(/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g,
Source: chromecache_216.3.dr	String found in binary or memory: var QF=function(a,b,c,d,e){var f=MC("fsl",c?"nv.mwt":"mwt",0),g;g=c?MC("fsl","nv.ids",[]):MC("fsl","ids",[]);if(!g.length)return!0;var k=RC(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!zB(k,BB(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: url976.groupgreeting.com
Source: global traffic	DNS traffic detected: DNS query: www.groupgreeting.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: storage.groupgreeting.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ka-p.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: www.dwin1.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: cdn-cookieyes.com
Source: global traffic	DNS traffic detected: DNS query: wsmcdn.audioeye.com
Source: global traffic	DNS traffic detected: DNS query: log.cookieyes.com
Source: global traffic	DNS traffic detected: DNS query: wsv3cdn.audioeye.com
Source: global traffic	DNS traffic detected: DNS query: analytics.audioeye.com
Source: global traffic	DNS traffic detected: DNS query: directory.cookieyes.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net

Source: chromecache_257.3.dr	String found in binary or memory: http://dreamerslab.com/)
Source: chromecache_277.3.dr	String found in binary or memory: http://fancyapps.com/fancybox/
Source: chromecache_276.3.dr	String found in binary or memory: http://hilios.github.io/jQuery.countdown/)
Source: chromecache_221.3.dr, chromecache_224.3.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_221.3.dr	String found in binary or memory: http://jqueryui.com/themeroller/?bgShadowXPos=&bgOverlayXPos=&bgErrorXPos=&bgHighlightXPos=&bgConten
Source: chromecache_267.3.dr	String found in binary or memory: http://kswedberg.github.com/jquery-carousel-lite/
Source: chromecache_267.3.dr	String found in binary or memory: http://kswedberg.github.com/jquery-carousel-lite/blob/master/LICENSE-MIT)
Source: chromecache_273.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_243.3.dr	String found in binary or memory: http://pinterest.com/pin/create/link/?url=
Source: chromecache_239.3.dr	String found in binary or memory: http://spin.js.org/#v2.3.2
Source: chromecache_240.3.dr, chromecache_269.3.dr	String found in binary or memory: http://wenzhixin.net.cn/)
Source: chromecache_271.3.dr	String found in binary or memory: http://www.dangrossman.info/
Source: chromecache_271.3.dr	String found in binary or memory: http://www.daterangepicker.com/
Source: chromecache_243.3.dr	String found in binary or memory: http://www.linkedin.com/shareArticle?mini=true&url=
Source: chromecache_271.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_229.3.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_229.3.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_243.3.dr	String found in binary or memory: https://accounts.google.com/gsi/client
Source: chromecache_229.3.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_229.3.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_229.3.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_229.3.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_229.3.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_229.3.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_229.3.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_229.3.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_229.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_229.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_234.3.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_243.3.dr	String found in binary or memory: https://alcdn.msauth.net/browser/2.38.0/js/msal-browser.min.js
Source: chromecache_227.3.dr	String found in binary or memory: https://analytics.audioeye.com/air/report
Source: chromecache_227.3.dr	String found in binary or memory: https://analytics.audioeye.com/air/v0/send
Source: chromecache_227.3.dr	String found in binary or memory: https://analytics.audioeye.com/v2/report
Source: chromecache_240.3.dr, chromecache_269.3.dr	String found in binary or memory: https://bootstrap-table.com
Source: chromecache_216.3.dr, chromecache_234.3.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_216.3.dr	String found in binary or memory: https://cdn-cookieyes.com/client_data/
Source: chromecache_243.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/
Source: chromecache_243.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap-table
Source: chromecache_243.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/canvas-confetti
Source: chromecache_243.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/daterangepicker/daterangepicker.css
Source: chromecache_243.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/daterangepicker/daterangepicker.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/emoji-mart
Source: chromecache_243.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/jcarousellite
Source: chromecache_243.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/swipe-listener
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/Chart.js/3.9.1/chart.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/UAParser.js/0.7.20/ua-parser.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/bootstrap-table/1.22.1/bootstrap-table.min.css
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.4/clipboard.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.5.6/jquery.fancybox.min.css
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.5.6/jquery.fancybox.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/flag-icon-css/6.4.4/css/flag-icons.min.css
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/google-palette/1.1.0/palette.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery-datetimepicker/2.5.20/jquery.datetimepicker.full.min.j
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery-datetimepicker/2.5.20/jquery.datetimepicker.min.css
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery.actual/1.0.19/jquery.actual.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery.blockUI/2.70/jquery.blockUI.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery.countdown/2.2.0/jquery.countdown.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery.form/4.2.2/jquery.form.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jqueryui-touch-punch/0.2.3/jquery.ui.touch-punch.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.css
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.33/moment-timezone-with-data.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.24.0/moment.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/moveable/0.53.0/moveable.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.6/umd/popper.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/css/select2.min.css
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/js/select2.full.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick-theme.min.css
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.css
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/spin.js/2.3.2/spin.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/typed.js/1.1.1/typed.min.js
Source: chromecache_229.3.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration
Source: chromecache_229.3.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_229.3.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_229.3.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_243.3.dr	String found in binary or memory: https://drive.google.com/file/d/1WGRrf9d46QvQevNvRrgHylYwcpIEVNak/view
Source: chromecache_205.3.dr, chromecache_211.3.dr, chromecache_263.3.dr, chromecache_274.3.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_205.3.dr, chromecache_211.3.dr, chromecache_263.3.dr, chromecache_274.3.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_243.3.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Caveat&display=swap
Source: chromecache_206.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIGpYSxP.woff2)
Source: chromecache_206.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIWpYQ.woff2)
Source: chromecache_206.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIipYSxP.woff2)
Source: chromecache_206.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIupYSxP.woff2)
Source: chromecache_188.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIMeaBXso.woff2)
Source: chromecache_188.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2)
Source: chromecache_188.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIO-aBXso.woff2)
Source: chromecache_188.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIOOaBXso.woff2)
Source: chromecache_188.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIOuaBXso.woff2)
Source: chromecache_207.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/schibstedgrotesk/v3/Jqz55SSPQuCQF3t8uOwiUL-taUTtap9Gayo.woff2)
Source: chromecache_207.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/schibstedgrotesk/v3/Jqz55SSPQuCQF3t8uOwiUL-taUTtap9Iayoxdg.woff2)
Source: chromecache_288.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_214.3.dr	String found in binary or memory: https://github.com/daybrush/moveable/blob/master/packages/moveable
Source: chromecache_283.3.dr	String found in binary or memory: https://github.com/jquery-form/form
Source: chromecache_283.3.dr	String found in binary or memory: https://github.com/jquery-form/form#license
Source: chromecache_210.3.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: chromecache_288.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_288.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_243.3.dr	String found in binary or memory: https://github.com/xdan/datetimepicker--
Source: chromecache_186.3.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_186.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.36.1/LICENSE
Source: chromecache_234.3.dr	String found in binary or memory: https://google.com
Source: chromecache_234.3.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_243.3.dr	String found in binary or memory: https://groupgreeting.freshdesk.com/support/home
Source: chromecache_243.3.dr	String found in binary or memory: https://instagram.com/groupgreeting
Source: chromecache_280.3.dr	String found in binary or memory: https://ka-p.fontawesome.com/releases/v6.7.2/css/pro-v4-font-face.min.css?token=2c85069754);
Source: chromecache_280.3.dr	String found in binary or memory: https://ka-p.fontawesome.com/releases/v6.7.2/css/pro-v4-shims.min.css?token=2c85069754);
Source: chromecache_280.3.dr	String found in binary or memory: https://ka-p.fontawesome.com/releases/v6.7.2/css/pro-v5-font-face.min.css?token=2c85069754);
Source: chromecache_280.3.dr	String found in binary or memory: https://ka-p.fontawesome.com/releases/v6.7.2/css/pro.min.css?token=2c85069754);
Source: chromecache_243.3.dr	String found in binary or memory: https://kit.fontawesome.com/2c85069754.css
Source: chromecache_238.3.dr	String found in binary or memory: https://login.chinacloudapi.cn
Source: chromecache_238.3.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_243.3.dr	String found in binary or memory: https://login.microsoftonline.com/$
Source: chromecache_238.3.dr	String found in binary or memory: https://login.microsoftonline.de
Source: chromecache_238.3.dr	String found in binary or memory: https://login.microsoftonline.us
Source: chromecache_238.3.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_243.3.dr	String found in binary or memory: https://markroland.com/portfolio/css-greeting-card--
Source: chromecache_229.3.dr	String found in binary or memory: https://meet.google.com
Source: chromecache_229.3.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_243.3.dr	String found in binary or memory: https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://oss.maxcdn.com/respond/1.4.2/respond.min.js
Source: chromecache_234.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_216.3.dr, chromecache_234.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_227.3.dr	String found in binary or memory: https://report-prod.audioeye.com/v1/report
Source: chromecache_227.3.dr	String found in binary or memory: https://report-prod.audioeye.com/v1/send
Source: chromecache_243.3.dr	String found in binary or memory: https://stackoverflow.com/a/42010694
Source: chromecache_243.3.dr	String found in binary or memory: https://stackoverflow.com/a/48173885
Source: chromecache_243.3.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.2.1/js/bootstrap.min.js
Source: chromecache_243.3.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Source: chromecache_216.3.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_234.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_234.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_243.3.dr, chromecache_217.3.dr, chromecache_282.3.dr	String found in binary or memory: https://storage.groupgreeting.com/assets/images/covers/ANN-woohoo-another-year-SH2-2025.jpg
Source: chromecache_243.3.dr	String found in binary or memory: https://storage.groupgreeting.com/assets/images/graphics/animated/envelope.gif
Source: chromecache_243.3.dr	String found in binary or memory: https://storage.groupgreeting.com/assets/images/graphics/animated/logomark-page-loader.gif
Source: chromecache_243.3.dr	String found in binary or memory: https://storage.groupgreeting.com/assets/images/graphics/delivered_card/stamp-default.png
Source: chromecache_243.3.dr	String found in binary or memory: https://storage.groupgreeting.com/assets/images/graphics/delivered_card/wax-seal.gif
Source: chromecache_217.3.dr, chromecache_282.3.dr	String found in binary or memory: https://storage.groupgreeting.com/assets/images/graphics/social_media/otp_tree_200x200.gif
Source: chromecache_243.3.dr	String found in binary or memory: https://storage.groupgreeting.com/users/logos/880717_1644609826.png
Source: chromecache_216.3.dr, chromecache_234.3.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_243.3.dr	String found in binary or memory: https://twitter.com/intent/tweet?url=
Source: chromecache_216.3.dr	String found in binary or memory: https://wsmcdn.audioeye.com/aem.js
Source: chromecache_226.3.dr	String found in binary or memory: https://wsv3cdn.audioeye.com
Source: chromecache_265.3.dr	String found in binary or memory: https://wsv3cdn.audioeye.com/static-scripts
Source: chromecache_227.3.dr	String found in binary or memory: https://wsv3cdn.audioeye.com/static-scripts/v2/__BROWSER_JS_VERSION__
Source: chromecache_227.3.dr	String found in binary or memory: https://wsv3cdn.audioeye.com/static-scripts/v2/__BROWSER_JS_VERSION__/
Source: chromecache_265.3.dr	String found in binary or memory: https://wsv3cdn.audioeye.com/v2
Source: chromecache_243.3.dr	String found in binary or memory: https://www.dwin1.com/19038.js
Source: chromecache_216.3.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_234.3.dr	String found in binary or memory: https://www.google.com
Source: chromecache_234.3.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_234.3.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_216.3.dr, chromecache_234.3.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_243.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_243.3.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-PLXTXDT
Source: chromecache_216.3.dr, chromecache_234.3.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_243.3.dr	String found in binary or memory: https://www.groupgreeting.com
Source: chromecache_243.3.dr	String found in binary or memory: https://www.groupgreeting.com/blog/
Source: chromecache_243.3.dr	String found in binary or memory: https://www.groupgreeting.com/card/new
Source: chromecache_243.3.dr	String found in binary or memory: https://www.instagram.com/groupgreetingartist/
Source: chromecache_258.3.dr, chromecache_271.3.dr, chromecache_266.3.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files
Source: chromecache_243.3.dr	String found in binary or memory: https://www.linkedin.com/company/groupgreeting/
Source: chromecache_234.3.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_243.3.dr	String found in binary or memory: https://www.pinterest.com/groupgreeting/
Source: chromecache_234.3.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_243.3.dr	String found in binary or memory: https://xdsoft.net/jqplugins/datetimepicker/
Source: chromecache_264.3.dr	String found in binary or memory: https://zenorocha.github.io/clipboard.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2252,i,15708138700965355644,3032480842205978425,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2312 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2252,i,15708138700965355644,3032480842205978425,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3240 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url976.groupgreeting.com/ls/click?upn=u001.AR9Mx-2Futf8zCizRJR1zWQyjFk-2F3fmeHgwaoEX0sj7LNvLxadpcQbCDj9eJtuGOsRmTcCOtEDIvi3npIJpdt-2FygcYeLSRCs3fGYHfkoOHejg-3DgZ62_4R4PVUosj4-2FWzhrx0xFZHq-2FXxtG1noLp84vupaRf2f-2F6Jf4rFFugSxyqHO-2FVPdajKZ-2FPKCdfqHj1aQr4zVBYb-2FEiBjrf7ath0BgqOY6MdThf4Ae6yN8FoDZJ-2BES471XZIrwz7iAkdK0giDttZsBzovgq9NxI2-2BuYraN6hRcbg5qwW0IS05yUS-2BPM5pW0VKgLrNCJUgVrgrzp2w36AzstNmTrFZDmam4MO0pMwbNqPFZCmXMRYpEOCg3Y5zfycd31W586EO9HVlV7NTIqfFOApfW2AQ8BeOHlgje6iBlU-2Fd494BAvnto-2BkkldfXAJzgFqb-2Fw9gP0v6CLxifgeC3-2Fn9x825Lno7wROFv84v0gqYDmj0PBMsyCW6pksVIuBdLbNu1AK6m0Oxz2rwYMSz0uszf3d1mqsLV3QHi4lATMdkl3Xe-2B1t9H71pNVfArlAwSuTOueYLtMZOHS-2FCACoIdV-2F-2Byi-2BdX5-2BV48VlMGzeQ8XVuU-3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2252,i,15708138700965355644,3032480842205978425,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2312 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2252,i,15708138700965355644,3032480842205978425,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3240 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://groupgreeting.freshdesk.com/support/home	0%	Avira URL Cloud	safe
https://login.microsoftonline.de	100%	Avira URL Cloud	phishing
https://zenorocha.github.io/clipboard.js	0%	Avira URL Cloud	safe
https://storage.groupgreeting.com/assets/images/graphics/delivered_card/wax-seal.gif	0%	Avira URL Cloud	safe
https://storage.groupgreeting.com/assets/images/graphics/delivered_card/stamp-default.png	0%	Avira URL Cloud	safe
https://storage.groupgreeting.com/assets/images/covers/ANN-woohoo-another-year-SH2-2025.jpg	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
static.cloudflareinsights.com	104.16.79.73	true	false	high
ka-p.fontawesome.com.cdn.cloudflare.net	104.18.40.68	true	false	high
event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com	54.76.87.51	true	false	high
cdn-cookieyes.com	104.22.59.91	true	false	high
stats.g.doubleclick.net	64.233.166.154	true	false	high
wsmcdn.audioeye.com.cdn.cloudflare.net	104.18.28.155	true	false	high
script.hotjar.com	13.33.187.74	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
storage.groupgreeting.com	104.22.78.165	true	false	unknown
analytics.audioeye.com	54.68.139.243	true	false	high
www.google.com	142.250.185.196	true	false	high
d2pbcviywxotf2.cloudfront.net	143.204.215.129	true	false	unknown
wsv3cdn.audioeye.com.cdn.cloudflare.net	104.18.28.155	true	false	high
static-cdn.hotjar.com	18.66.102.11	true	false	high
kit.fontawesome.com.cdn.cloudflare.net	172.64.147.188	true	false	high
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
www.groupgreeting.com	104.22.78.165	true	false	high
url976.groupgreeting.com	104.22.78.165	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
analytics-alv.google.com	216.239.38.181	true	false	high
td.doubleclick.net	172.217.16.194	true	false	high
log.cookieyes.com	54.76.87.51	true	false	high
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
www.dwin1.com	unknown	unknown	false	high
kit.fontawesome.com	unknown	unknown	false	high
directory.cookieyes.com	unknown	unknown	false	high
wsmcdn.audioeye.com	unknown	unknown	false	high
static.hotjar.com	unknown	unknown	false	high
wsv3cdn.audioeye.com	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high
ka-p.fontawesome.com	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://wsv3cdn.audioeye.com/static-scripts/v2/77be26f28/compliance.css	false		high
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false		high
https://www.groupgreeting.com/assets/favicons/favicon-62ce5cccb93c15b4337aaeb4a430862bfccf3836da9c44c91015a80fd53254dd.ico	false		high
https://cdn.jsdelivr.net/npm/@tarekraafat/autocomplete.js@10.2.7/dist/css/autoComplete.02.min.css	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.2.1/js/bootstrap.min.js	false		high
https://www.groupgreeting.com/tl/b667ec9166f40dcb0304b4fa8c4310	false		high
https://wsv3cdn.audioeye.com/static-scripts/v2/77be26f28/tangoEngine.bundle.js	false		high
https://www.groupgreeting.com/assets/application-0abda8d78d831a5f76a1452eed67349a60e9059e86cbc297914fbae0fee61dc4.css	false		high
https://cdnjs.cloudflare.com/ajax/libs/jquery.countdown/2.2.0/jquery.countdown.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/Chart.js/3.9.1/chart.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/typed.js/1.1.1/typed.min.js	false		high
https://static.hotjar.com/c/hotjar-1072459.js?sv=7	false		high
https://ka-p.fontawesome.com/releases/v6.7.2/css/pro-v4-font-face.min.css?token=2c85069754	false		high
https://cdn-cookieyes.com/client_data/0dc44954f3488501cd1a7843/audit-table/YbRzuYnw.json	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239354491534_1O3M85NN5LRG0CPTI&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://cdn.jsdelivr.net/npm/@tarekraafat/autocomplete.js@10.2.7/dist/autoComplete.min.js	false		high
https://www.groupgreeting.com/cards/5062286c0fd0eca/show_delivered_content?view=2	false		high
https://cdnjs.cloudflare.com/ajax/libs/jqueryui-touch-punch/0.2.3/jquery.ui.touch-punch.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.5.6/jquery.fancybox.min.css	false		high
https://ka-p.fontawesome.com/releases/v6.7.2/css/pro-v5-font-face.min.css?token=2c85069754	false		high
https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.css	false		high
https://cdn.jsdelivr.net/npm/daterangepicker/daterangepicker.css	false		high
https://www.groupgreeting.com/cdn-cgi/rum?	false		high
https://ka-p.fontawesome.com/releases/v6.7.2/webfonts/pro-fa-solid-900-16.woff2	false		high
https://storage.groupgreeting.com/assets/images/graphics/delivered_card/wax-seal.gif	false	Avira URL Cloud: safe	unknown
https://cdn-cookieyes.com/client_data/0dc44954f3488501cd1a7843/banner.js	false		high
https://cdn-cookieyes.com/client_data/0dc44954f3488501cd1a7843/script.js	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239370639702_1LY06F7YB2ZF9D3G5&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js	false		high
https://www.groupgreeting.com/assets/card/base64_fonts-5e14a2c0f3bb932bf3789592ce65d131dac45f95b31658bb3f3a06d901f1a899.css	false		high
https://analytics.audioeye.com/air/v0/send	false		high
https://cdnjs.cloudflare.com/ajax/libs/jquery.blockUI/2.70/jquery.blockUI.min.js	false		high
https://www.groupgreeting.com/assets/application-c82fd62a5f18df8544d6df93dbb0e2470c3cf07d237393877bacbb880d84db3a.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick-theme.min.css	false		high
https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/css/select2.min.css	false		high
https://www.groupgreeting.com/stylesheets/purpose-blue-light.css	false		high
https://cdn-cookieyes.com/client_data/0dc44954f3488501cd1a7843/URIOFcOs.json	false		high
https://storage.groupgreeting.com/assets/images/graphics/delivered_card/stamp-default.png	false	Avira URL Cloud: safe	unknown
https://log.cookieyes.com/api/v1/log	false		high
https://www.groupgreeting.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/f3b948d8acb8/main.js?	false		high
https://storage.groupgreeting.com/assets/images/covers/ANN-woohoo-another-year-SH2-2025.jpg	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=Wep10yhx3KLddZT3QxGnq9bfmFuprCZ9q%2Bk8zldCg1LCgUViWEkb1%2BOQ3qMrxuHDVX5tig8Yj9p0c5Lgy%2FHO%2B%2Fnrtfg25UFhKW2%2BAGVnXdM0XVYoJGvF%2B7Kvl1Z08GdcUJ%2B%2FjWC4	false		high
https://cdnjs.cloudflare.com/ajax/libs/bootstrap-table/1.22.1/bootstrap-table.min.css	false		high
https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/js/select2.full.min.js	false		high
https://ka-p.fontawesome.com/releases/v6.7.2/webfonts/pro-fa-solid-900-1.woff2	false		high
https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.css	false		high
https://directory.cookieyes.com/api/v1/ip	false		high
https://www.groupgreeting.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239354491532_17IT0YRW2RNM8C8YH&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://cdn.jsdelivr.net/npm/swipe-listener@1.2.0/dist/swipe-listener.min.js	false		high
https://www.groupgreeting.com/cdn-cgi/challenge-platform/h/g/jsd/r/0.29027215889572217:1741973222:DO_WZTCdmWMKor-fa9ramo5KfZyvg2ZO6bPtENrt2PE/9205b67589b24213	false		high
https://cdnjs.cloudflare.com/ajax/libs/UAParser.js/0.7.20/ua-parser.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js	false		high
https://cdn.jsdelivr.net/npm/bootstrap-table@1.22.1/dist/bootstrap-table.min.js	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_234.3.dr	false		high
https://github.com/xdan/datetimepicker--	chromecache_243.3.dr	false		high
https://github.com/zloirock/core-js	chromecache_186.3.dr	false		high
https://groupgreeting.freshdesk.com/support/home	chromecache_243.3.dr	false	Avira URL Cloud: safe	unknown
https://oss.maxcdn.com/respond/1.4.2/respond.min.js	chromecache_243.3.dr	false		high
https://github.com/select2/select2/blob/master/LICENSE.md	chromecache_210.3.dr	false		high
https://fontawesome.com	chromecache_205.3.dr, chromecache_211.3.dr, chromecache_263.3.dr, chromecache_274.3.dr	false		high
https://login.microsoftonline.us	chromecache_238.3.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_271.3.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_288.3.dr	false		high
https://stackoverflow.com/a/42010694	chromecache_243.3.dr	false		high
https://stackoverflow.com/a/48173885	chromecache_243.3.dr	false		high
https://twitter.com/intent/tweet?url=	chromecache_243.3.dr	false		high
https://login.microsoftonline.de	chromecache_238.3.dr	false	Avira URL Cloud: phishing	unknown
http://pinterest.com/pin/create/link/?url=	chromecache_243.3.dr	false		high
https://cdn.jsdelivr.net/npm/canvas-confetti	chromecache_243.3.dr	false		high
https://www.pinterest.com/groupgreeting/	chromecache_243.3.dr	false		high
https://ka-p.fontawesome.com/releases/v6.7.2/css/pro.min.css?token=2c85069754);	chromecache_280.3.dr	false		high
https://wsv3cdn.audioeye.com/static-scripts/v2/__BROWSER_JS_VERSION__/	chromecache_227.3.dr	false		high
https://wsv3cdn.audioeye.com/static-scripts	chromecache_265.3.dr	false		high
http://fancyapps.com/fancybox/	chromecache_277.3.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_288.3.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_234.3.dr	false		high
https://www.groupgreeting.com/blog/	chromecache_243.3.dr	false		high
https://cdn.jsdelivr.net/npm/emoji-mart	chromecache_243.3.dr	false		high
https://github.com/jquery-form/form	chromecache_283.3.dr	false		high
https://www.groupgreeting.com/card/new	chromecache_243.3.dr	false		high
https://report-prod.audioeye.com/v1/send	chromecache_227.3.dr	false		high
https://wsv3cdn.audioeye.com/static-scripts/v2/__BROWSER_JS_VERSION__	chromecache_227.3.dr	false		high
https://instagram.com/groupgreeting	chromecache_243.3.dr	false		high
https://login.chinacloudapi.cn	chromecache_238.3.dr	false		high
https://login.windows-ppe.net	chromecache_238.3.dr	false		high
https://zenorocha.github.io/clipboard.js	chromecache_264.3.dr	false	Avira URL Cloud: safe	unknown
https://ka-p.fontawesome.com/releases/v6.7.2/css/pro-v4-font-face.min.css?token=2c85069754);	chromecache_280.3.dr	false		high
https://login.microsoftonline.com	chromecache_238.3.dr	false		high
https://wsv3cdn.audioeye.com	chromecache_226.3.dr	false		high
https://wsv3cdn.audioeye.com/v2	chromecache_265.3.dr	false		high
https://meet.google.com	chromecache_229.3.dr	false		high
https://fontawesome.com/license	chromecache_205.3.dr, chromecache_211.3.dr, chromecache_263.3.dr, chromecache_274.3.dr	false		high
https://report-prod.audioeye.com/v1/report	chromecache_227.3.dr	false		high
https://ka-p.fontawesome.com/releases/v6.7.2/css/pro-v5-font-face.min.css?token=2c85069754);	chromecache_280.3.dr	false		high
https://googleads.g.doubleclick.net	chromecache_234.3.dr	false		high
https://static.hotjar.com/c/hotjar-	chromecache_216.3.dr	false		high
https://getbootstrap.com/)	chromecache_288.3.dr	false		high
https://www.linkedin.com/company/groupgreeting/	chromecache_243.3.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
172.64.147.188	kit.fontawesome.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
104.22.59.91	cdn-cookieyes.com	United States	13335	CLOUDFLARENETUS	false
18.66.102.11	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.18.40.68	ka-p.fontawesome.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
54.68.139.243	analytics.audioeye.com	United States	16509	AMAZON-02US	false
104.18.29.155	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.28.155	wsmcdn.audioeye.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
172.67.20.8	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
104.22.78.165	storage.groupgreeting.com	United States	13335	CLOUDFLARENETUS	false
143.204.215.129	d2pbcviywxotf2.cloudfront.net	United States	16509	AMAZON-02US	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.37.163	unknown	United States	13335	CLOUDFLARENETUS	false
54.76.87.51	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
13.33.187.74	script.hotjar.com	United States	16509	AMAZON-02US	false
172.217.16.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
64.233.166.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638789
Start date and time:	2025-03-14 19:06:47 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://url976.groupgreeting.com/ls/click?upn=u001.AR9Mx-2Futf8zCizRJR1zWQyjFk-2F3fmeHgwaoEX0sj7LNvLxadpcQbCDj9eJtuGOsRmTcCOtEDIvi3npIJpdt-2FygcYeLSRCs3fGYHfkoOHejg-3DgZ62_4R4PVUosj4-2FWzhrx0xFZHq-2FXxtG1noLp84vupaRf2f-2F6Jf4rFFugSxyqHO-2FVPdajKZ-2FPKCdfqHj1aQr4zVBYb-2FEiBjrf7ath0BgqOY6MdThf4Ae6yN8FoDZJ-2BES471XZIrwz7iAkdK0giDttZsBzovgq9NxI2-2BuYraN6hRcbg5qwW0IS05yUS-2BPM5pW0VKgLrNCJUgVrgrzp2w36AzstNmTrFZDmam4MO0pMwbNqPFZCmXMRYpEOCg3Y5zfycd31W586EO9HVlV7NTIqfFOApfW2AQ8BeOHlgje6iBlU-2Fd494BAvnto-2BkkldfXAJzgFqb-2Fw9gP0v6CLxifgeC3-2Fn9x825Lno7wROFv84v0gqYDmj0PBMsyCW6pksVIuBdLbNu1AK6m0Oxz2rwYMSz0uszf3d1mqsLV3QHi4lATMdkl3Xe-2B1t9H71pNVfArlAwSuTOueYLtMZOHS-2FCACoIdV-2F-2Byi-2BdX5-2BV48VlMGzeQ8XVuU-3D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@26/223@58/24
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	3147
Entropy (8bit):	4.828362396229382
Encrypted:	false
SSDEEP:	48:RZ7J8BsqueayZINZEI1UHJFelDENG3MEEsVekigw6LXprnosyGl233EsLEO:n7J8BsqRadZrUulOEEoi4X9nosB27X
MD5:	FBF6B9615A9874BF034224C01A2BFC64
SHA1:	BAB21A176D5D99911F4A72B061E21BE791DAB9D7
SHA-256:	998C246B0657B464E53C5AA1F17C5E2F01C59429580EEF373F18542C853ED084
SHA-512:	EC2EB561137637BB7FE1B1C43C7E8225EF9D0877BF0D23D86E26579D340D993C79F27A0BBE97143E3753929F4976F767833C142225459FB344610FD8993470ED
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/27025316.js
Preview:	(function(w,d,s){.. var fledgePageUrl = s + '/s/fledge/MSFledgePage.html';.. var fledgePageUETParameter = 'UETEventStr';.....var isEdgeBrowser = /Edg/.test(navigator.userAgent);...var isOpera = /OPR/.test(navigator.userAgent);.. var isChromeBrowser = /Chrome/.test(navigator.userAgent) && /Google Inc/.test(navigator.vendor) && !isEdgeBrowser && !isOpera;.... if(!isEdgeBrowser && !isChromeBrowser) {.. return;.. } .. .. if (typeof window.CustomEvent !== 'function').. return;.... d.addEventListener("UetEvent", function(event) {.. var UETParams = getFledgeParams([event.detail.uetEvent]);.. if (UETParams.size > 0) loadIframe(UETParams, fledgePageUrl);.. });.... var rndObjName = d.currentScript.getAttribute('data-ueto');.. if (!rndObjName) return;.... var uetInstance = w[rndObjName];.. if (!uetInstance) return;.... var fledgeParams = getFledgeParams(uetInstance.snippetEventQueue);.. if (fledgeParams.size > 0) loadIframe(f

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 14, 2025 19:07:44.153033018 CET	192.168.2.5	1.1.1.1	0x748e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:44.153183937 CET	192.168.2.5	1.1.1.1	0x59ac	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:45.179136992 CET	192.168.2.5	1.1.1.1	0xa26b	Standard query (0)	url976.groupgreeting.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:45.179358959 CET	192.168.2.5	1.1.1.1	0xc9ce	Standard query (0)	url976.groupgreeting.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:46.090619087 CET	192.168.2.5	1.1.1.1	0x90ac	Standard query (0)	www.groupgreeting.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:46.090950012 CET	192.168.2.5	1.1.1.1	0xc832	Standard query (0)	www.groupgreeting.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:48.353956938 CET	192.168.2.5	1.1.1.1	0xeadc	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.354288101 CET	192.168.2.5	1.1.1.1	0xf1f4	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:48.354712009 CET	192.168.2.5	1.1.1.1	0x853a	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.355518103 CET	192.168.2.5	1.1.1.1	0xca04	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 14, 2025 19:07:48.357615948 CET	192.168.2.5	1.1.1.1	0x6ec0	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.357937098 CET	192.168.2.5	1.1.1.1	0xad4e	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:48.367162943 CET	192.168.2.5	1.1.1.1	0x55b3	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.367384911 CET	192.168.2.5	1.1.1.1	0xa5dd	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:48.399029016 CET	192.168.2.5	1.1.1.1	0x5c77	Standard query (0)	storage.groupgreeting.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.399276972 CET	192.168.2.5	1.1.1.1	0x5be9	Standard query (0)	storage.groupgreeting.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:49.170382023 CET	192.168.2.5	1.1.1.1	0x9093	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:49.171232939 CET	192.168.2.5	1.1.1.1	0x41e3	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:49.207842112 CET	192.168.2.5	1.1.1.1	0x2b42	Standard query (0)	ka-p.fontawesome.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:49.208055973 CET	192.168.2.5	1.1.1.1	0x2a45	Standard query (0)	ka-p.fontawesome.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:49.225655079 CET	192.168.2.5	1.1.1.1	0x279c	Standard query (0)	storage.groupgreeting.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:49.225655079 CET	192.168.2.5	1.1.1.1	0x598a	Standard query (0)	storage.groupgreeting.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:51.269592047 CET	192.168.2.5	1.1.1.1	0x16f0	Standard query (0)	www.dwin1.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:51.269984007 CET	192.168.2.5	1.1.1.1	0xfeea	Standard query (0)	www.dwin1.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:51.310684919 CET	192.168.2.5	1.1.1.1	0x614b	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:51.312663078 CET	192.168.2.5	1.1.1.1	0x76d0	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:53.054996014 CET	192.168.2.5	1.1.1.1	0x6ae	Standard query (0)	cdn-cookieyes.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:53.055149078 CET	192.168.2.5	1.1.1.1	0x6df1	Standard query (0)	cdn-cookieyes.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:53.068161964 CET	192.168.2.5	1.1.1.1	0x8517	Standard query (0)	wsmcdn.audioeye.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:53.068392038 CET	192.168.2.5	1.1.1.1	0xe5f	Standard query (0)	wsmcdn.audioeye.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:54.155083895 CET	192.168.2.5	1.1.1.1	0x596a	Standard query (0)	log.cookieyes.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:54.155343056 CET	192.168.2.5	1.1.1.1	0x72a3	Standard query (0)	log.cookieyes.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:57.154917955 CET	192.168.2.5	1.1.1.1	0xd968	Standard query (0)	wsv3cdn.audioeye.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:57.155148983 CET	192.168.2.5	1.1.1.1	0xaff4	Standard query (0)	wsv3cdn.audioeye.com	65	IN (0x0001)	false
Mar 14, 2025 19:07:58.033786058 CET	192.168.2.5	1.1.1.1	0x75ac	Standard query (0)	www.groupgreeting.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:58.033786058 CET	192.168.2.5	1.1.1.1	0x61dc	Standard query (0)	www.groupgreeting.com	65	IN (0x0001)	false
Mar 14, 2025 19:08:00.419023991 CET	192.168.2.5	1.1.1.1	0x7eca	Standard query (0)	analytics.audioeye.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:00.419513941 CET	192.168.2.5	1.1.1.1	0xa7ab	Standard query (0)	analytics.audioeye.com	65	IN (0x0001)	false
Mar 14, 2025 19:08:00.469126940 CET	192.168.2.5	1.1.1.1	0x3ef8	Standard query (0)	wsv3cdn.audioeye.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:00.469479084 CET	192.168.2.5	1.1.1.1	0x223c	Standard query (0)	wsv3cdn.audioeye.com	65	IN (0x0001)	false
Mar 14, 2025 19:08:06.339679003 CET	192.168.2.5	1.1.1.1	0xb156	Standard query (0)	directory.cookieyes.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:06.339898109 CET	192.168.2.5	1.1.1.1	0x9b85	Standard query (0)	directory.cookieyes.com	65	IN (0x0001)	false
Mar 14, 2025 19:08:06.407222986 CET	192.168.2.5	1.1.1.1	0x69be	Standard query (0)	cdn-cookieyes.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:06.407433987 CET	192.168.2.5	1.1.1.1	0x1263	Standard query (0)	cdn-cookieyes.com	65	IN (0x0001)	false
Mar 14, 2025 19:08:07.396620989 CET	192.168.2.5	1.1.1.1	0x609b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:07.396779060 CET	192.168.2.5	1.1.1.1	0xd341	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2025 19:08:07.400408983 CET	192.168.2.5	1.1.1.1	0xb541	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:07.400546074 CET	192.168.2.5	1.1.1.1	0x5792	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Mar 14, 2025 19:08:07.464551926 CET	192.168.2.5	1.1.1.1	0x7d74	Standard query (0)	directory.cookieyes.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:07.464670897 CET	192.168.2.5	1.1.1.1	0x777c	Standard query (0)	directory.cookieyes.com	65	IN (0x0001)	false
Mar 14, 2025 19:08:08.685801029 CET	192.168.2.5	1.1.1.1	0x354f	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:08.686053991 CET	192.168.2.5	1.1.1.1	0x66be	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Mar 14, 2025 19:08:09.295039892 CET	192.168.2.5	1.1.1.1	0x7182	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:09.295192957 CET	192.168.2.5	1.1.1.1	0x8a67	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Mar 14, 2025 19:08:09.296130896 CET	192.168.2.5	1.1.1.1	0xe7e	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:09.296263933 CET	192.168.2.5	1.1.1.1	0xd0e9	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Mar 14, 2025 19:08:09.320259094 CET	192.168.2.5	1.1.1.1	0x76bc	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:09.320369959 CET	192.168.2.5	1.1.1.1	0xdaaa	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 14, 2025 19:07:44.161871910 CET	1.1.1.1	192.168.2.5	0x748e	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:44.163220882 CET	1.1.1.1	192.168.2.5	0x59ac	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2025 19:07:45.191657066 CET	1.1.1.1	192.168.2.5	0xa26b	No error (0)	url976.groupgreeting.com		104.22.78.165	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:45.191657066 CET	1.1.1.1	192.168.2.5	0xa26b	No error (0)	url976.groupgreeting.com		104.22.79.165	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:45.191657066 CET	1.1.1.1	192.168.2.5	0xa26b	No error (0)	url976.groupgreeting.com		172.67.37.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:45.192322016 CET	1.1.1.1	192.168.2.5	0xc9ce	No error (0)	url976.groupgreeting.com			65	IN (0x0001)	false
Mar 14, 2025 19:07:46.103118896 CET	1.1.1.1	192.168.2.5	0xc832	No error (0)	www.groupgreeting.com			65	IN (0x0001)	false
Mar 14, 2025 19:07:46.116022110 CET	1.1.1.1	192.168.2.5	0x90ac	No error (0)	www.groupgreeting.com		104.22.78.165	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:46.116022110 CET	1.1.1.1	192.168.2.5	0x90ac	No error (0)	www.groupgreeting.com		172.67.37.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:46.116022110 CET	1.1.1.1	192.168.2.5	0x90ac	No error (0)	www.groupgreeting.com		104.22.79.165	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.360532045 CET	1.1.1.1	192.168.2.5	0xeadc	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.360532045 CET	1.1.1.1	192.168.2.5	0xeadc	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.361073971 CET	1.1.1.1	192.168.2.5	0xf1f4	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 14, 2025 19:07:48.361388922 CET	1.1.1.1	192.168.2.5	0x853a	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:07:48.361388922 CET	1.1.1.1	192.168.2.5	0x853a	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.361388922 CET	1.1.1.1	192.168.2.5	0x853a	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.361388922 CET	1.1.1.1	192.168.2.5	0x853a	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.361388922 CET	1.1.1.1	192.168.2.5	0x853a	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.362325907 CET	1.1.1.1	192.168.2.5	0xca04	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:07:48.365122080 CET	1.1.1.1	192.168.2.5	0xad4e	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:07:48.365175009 CET	1.1.1.1	192.168.2.5	0x6ec0	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:07:48.365175009 CET	1.1.1.1	192.168.2.5	0x6ec0	No error (0)	kit.fontawesome.com.cdn.cloudflare.net		172.64.147.188	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.365175009 CET	1.1.1.1	192.168.2.5	0x6ec0	No error (0)	kit.fontawesome.com.cdn.cloudflare.net		104.18.40.68	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.373999119 CET	1.1.1.1	192.168.2.5	0x55b3	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.373999119 CET	1.1.1.1	192.168.2.5	0x55b3	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.374680996 CET	1.1.1.1	192.168.2.5	0xa5dd	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Mar 14, 2025 19:07:48.407747030 CET	1.1.1.1	192.168.2.5	0x5c77	No error (0)	storage.groupgreeting.com		104.22.78.165	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.407747030 CET	1.1.1.1	192.168.2.5	0x5c77	No error (0)	storage.groupgreeting.com		172.67.37.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.407747030 CET	1.1.1.1	192.168.2.5	0x5c77	No error (0)	storage.groupgreeting.com		104.22.79.165	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.412226915 CET	1.1.1.1	192.168.2.5	0xcc98	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:07:48.412226915 CET	1.1.1.1	192.168.2.5	0xcc98	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:48.425194025 CET	1.1.1.1	192.168.2.5	0x5be9	No error (0)	storage.groupgreeting.com			65	IN (0x0001)	false
Mar 14, 2025 19:07:49.177126884 CET	1.1.1.1	192.168.2.5	0x9093	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:49.214457989 CET	1.1.1.1	192.168.2.5	0x2b42	No error (0)	ka-p.fontawesome.com	ka-p.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:07:49.214457989 CET	1.1.1.1	192.168.2.5	0x2b42	No error (0)	ka-p.fontawesome.com.cdn.cloudflare.net		104.18.40.68	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:49.214457989 CET	1.1.1.1	192.168.2.5	0x2b42	No error (0)	ka-p.fontawesome.com.cdn.cloudflare.net		172.64.147.188	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:49.215121031 CET	1.1.1.1	192.168.2.5	0x2a45	No error (0)	ka-p.fontawesome.com	ka-p.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:07:49.240278959 CET	1.1.1.1	192.168.2.5	0x279c	No error (0)	storage.groupgreeting.com			65	IN (0x0001)	false
Mar 14, 2025 19:07:49.240755081 CET	1.1.1.1	192.168.2.5	0x598a	No error (0)	storage.groupgreeting.com		104.22.78.165	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:49.240755081 CET	1.1.1.1	192.168.2.5	0x598a	No error (0)	storage.groupgreeting.com		104.22.79.165	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:49.240755081 CET	1.1.1.1	192.168.2.5	0x598a	No error (0)	storage.groupgreeting.com		172.67.37.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:51.278842926 CET	1.1.1.1	192.168.2.5	0xfeea	No error (0)	www.dwin1.com	d2pbcviywxotf2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:07:51.279891968 CET	1.1.1.1	192.168.2.5	0x16f0	No error (0)	www.dwin1.com	d2pbcviywxotf2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:07:51.279891968 CET	1.1.1.1	192.168.2.5	0x16f0	No error (0)	d2pbcviywxotf2.cloudfront.net		143.204.215.129	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:51.279891968 CET	1.1.1.1	192.168.2.5	0x16f0	No error (0)	d2pbcviywxotf2.cloudfront.net		143.204.215.118	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:51.279891968 CET	1.1.1.1	192.168.2.5	0x16f0	No error (0)	d2pbcviywxotf2.cloudfront.net		143.204.215.5	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:51.279891968 CET	1.1.1.1	192.168.2.5	0x16f0	No error (0)	d2pbcviywxotf2.cloudfront.net		143.204.215.109	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:51.317423105 CET	1.1.1.1	192.168.2.5	0x614b	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:51.317423105 CET	1.1.1.1	192.168.2.5	0x614b	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:51.320133924 CET	1.1.1.1	192.168.2.5	0x76d0	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Mar 14, 2025 19:07:53.061755896 CET	1.1.1.1	192.168.2.5	0x6df1	No error (0)	cdn-cookieyes.com			65	IN (0x0001)	false
Mar 14, 2025 19:07:53.062958956 CET	1.1.1.1	192.168.2.5	0x6ae	No error (0)	cdn-cookieyes.com		104.22.59.91	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:53.062958956 CET	1.1.1.1	192.168.2.5	0x6ae	No error (0)	cdn-cookieyes.com		104.22.58.91	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:53.062958956 CET	1.1.1.1	192.168.2.5	0x6ae	No error (0)	cdn-cookieyes.com		172.67.20.8	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:53.077747107 CET	1.1.1.1	192.168.2.5	0x8517	No error (0)	wsmcdn.audioeye.com	wsmcdn.audioeye.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:07:53.077747107 CET	1.1.1.1	192.168.2.5	0x8517	No error (0)	wsmcdn.audioeye.com.cdn.cloudflare.net		104.18.28.155	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:53.077747107 CET	1.1.1.1	192.168.2.5	0x8517	No error (0)	wsmcdn.audioeye.com.cdn.cloudflare.net		104.18.29.155	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:53.078851938 CET	1.1.1.1	192.168.2.5	0xe5f	No error (0)	wsmcdn.audioeye.com	wsmcdn.audioeye.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:07:53.078851938 CET	1.1.1.1	192.168.2.5	0xe5f	No error (0)	wsmcdn.audioeye.com.cdn.cloudflare.net			65	IN (0x0001)	false
Mar 14, 2025 19:07:54.162432909 CET	1.1.1.1	192.168.2.5	0x596a	No error (0)	log.cookieyes.com		54.76.87.51	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:54.162432909 CET	1.1.1.1	192.168.2.5	0x596a	No error (0)	log.cookieyes.com		52.17.48.183	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:57.162883997 CET	1.1.1.1	192.168.2.5	0xd968	No error (0)	wsv3cdn.audioeye.com	wsv3cdn.audioeye.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:07:57.162883997 CET	1.1.1.1	192.168.2.5	0xd968	No error (0)	wsv3cdn.audioeye.com.cdn.cloudflare.net		104.18.28.155	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:57.162883997 CET	1.1.1.1	192.168.2.5	0xd968	No error (0)	wsv3cdn.audioeye.com.cdn.cloudflare.net		104.18.29.155	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:57.162944078 CET	1.1.1.1	192.168.2.5	0xaff4	No error (0)	wsv3cdn.audioeye.com	wsv3cdn.audioeye.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:07:57.162944078 CET	1.1.1.1	192.168.2.5	0xaff4	No error (0)	wsv3cdn.audioeye.com.cdn.cloudflare.net			65	IN (0x0001)	false
Mar 14, 2025 19:07:58.043976068 CET	1.1.1.1	192.168.2.5	0x61dc	No error (0)	www.groupgreeting.com			65	IN (0x0001)	false
Mar 14, 2025 19:07:58.046444893 CET	1.1.1.1	192.168.2.5	0x75ac	No error (0)	www.groupgreeting.com		172.67.37.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:58.046444893 CET	1.1.1.1	192.168.2.5	0x75ac	No error (0)	www.groupgreeting.com		104.22.78.165	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:07:58.046444893 CET	1.1.1.1	192.168.2.5	0x75ac	No error (0)	www.groupgreeting.com		104.22.79.165	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:00.435158014 CET	1.1.1.1	192.168.2.5	0x7eca	No error (0)	analytics.audioeye.com		54.68.139.243	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:00.435158014 CET	1.1.1.1	192.168.2.5	0x7eca	No error (0)	analytics.audioeye.com		52.11.158.123	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:00.435158014 CET	1.1.1.1	192.168.2.5	0x7eca	No error (0)	analytics.audioeye.com		54.191.147.154	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:00.476454973 CET	1.1.1.1	192.168.2.5	0x3ef8	No error (0)	wsv3cdn.audioeye.com	wsv3cdn.audioeye.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:08:00.476454973 CET	1.1.1.1	192.168.2.5	0x3ef8	No error (0)	wsv3cdn.audioeye.com.cdn.cloudflare.net		104.18.29.155	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:00.476454973 CET	1.1.1.1	192.168.2.5	0x3ef8	No error (0)	wsv3cdn.audioeye.com.cdn.cloudflare.net		104.18.28.155	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:00.478566885 CET	1.1.1.1	192.168.2.5	0x223c	No error (0)	wsv3cdn.audioeye.com	wsv3cdn.audioeye.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:08:00.478566885 CET	1.1.1.1	192.168.2.5	0x223c	No error (0)	wsv3cdn.audioeye.com.cdn.cloudflare.net			65	IN (0x0001)	false
Mar 14, 2025 19:08:06.347368956 CET	1.1.1.1	192.168.2.5	0xb156	No error (0)	directory.cookieyes.com	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:08:06.347368956 CET	1.1.1.1	192.168.2.5	0xb156	No error (0)	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		54.76.87.51	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:06.347368956 CET	1.1.1.1	192.168.2.5	0xb156	No error (0)	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		52.17.48.183	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:06.347609997 CET	1.1.1.1	192.168.2.5	0x9b85	No error (0)	directory.cookieyes.com	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:08:06.414675951 CET	1.1.1.1	192.168.2.5	0x1263	No error (0)	cdn-cookieyes.com			65	IN (0x0001)	false
Mar 14, 2025 19:08:06.414896011 CET	1.1.1.1	192.168.2.5	0x69be	No error (0)	cdn-cookieyes.com		172.67.20.8	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:06.414896011 CET	1.1.1.1	192.168.2.5	0x69be	No error (0)	cdn-cookieyes.com		104.22.59.91	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:06.414896011 CET	1.1.1.1	192.168.2.5	0x69be	No error (0)	cdn-cookieyes.com		104.22.58.91	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:07.405148983 CET	1.1.1.1	192.168.2.5	0xd341	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2025 19:08:07.405728102 CET	1.1.1.1	192.168.2.5	0x609b	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:07.407072067 CET	1.1.1.1	192.168.2.5	0x5792	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:08:07.407658100 CET	1.1.1.1	192.168.2.5	0xb541	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:08:07.407658100 CET	1.1.1.1	192.168.2.5	0xb541	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:07.407658100 CET	1.1.1.1	192.168.2.5	0xb541	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:07.407658100 CET	1.1.1.1	192.168.2.5	0xb541	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:07.407658100 CET	1.1.1.1	192.168.2.5	0xb541	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:07.409560919 CET	1.1.1.1	192.168.2.5	0xc19a	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:08:07.409560919 CET	1.1.1.1	192.168.2.5	0xc19a	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:07.409560919 CET	1.1.1.1	192.168.2.5	0xc19a	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:07.475811958 CET	1.1.1.1	192.168.2.5	0x7d74	No error (0)	directory.cookieyes.com	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:08:07.475811958 CET	1.1.1.1	192.168.2.5	0x7d74	No error (0)	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		54.76.87.51	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:07.475811958 CET	1.1.1.1	192.168.2.5	0x7d74	No error (0)	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		52.17.48.183	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:07.475825071 CET	1.1.1.1	192.168.2.5	0x777c	No error (0)	directory.cookieyes.com	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:08:08.692394018 CET	1.1.1.1	192.168.2.5	0x354f	No error (0)	script.hotjar.com		13.33.187.74	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:08.692394018 CET	1.1.1.1	192.168.2.5	0x354f	No error (0)	script.hotjar.com		13.33.187.109	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:08.692394018 CET	1.1.1.1	192.168.2.5	0x354f	No error (0)	script.hotjar.com		13.33.187.19	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:08.692394018 CET	1.1.1.1	192.168.2.5	0x354f	No error (0)	script.hotjar.com		13.33.187.92	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:09.303910971 CET	1.1.1.1	192.168.2.5	0x7182	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:08:09.303910971 CET	1.1.1.1	192.168.2.5	0x7182	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:09.303910971 CET	1.1.1.1	192.168.2.5	0x7182	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:09.303910971 CET	1.1.1.1	192.168.2.5	0x7182	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:09.303910971 CET	1.1.1.1	192.168.2.5	0x7182	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:09.303924084 CET	1.1.1.1	192.168.2.5	0x8a67	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 19:08:09.304980040 CET	1.1.1.1	192.168.2.5	0xe7e	No error (0)	stats.g.doubleclick.net		64.233.166.154	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:09.304980040 CET	1.1.1.1	192.168.2.5	0xe7e	No error (0)	stats.g.doubleclick.net		64.233.166.155	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:09.304980040 CET	1.1.1.1	192.168.2.5	0xe7e	No error (0)	stats.g.doubleclick.net		64.233.166.156	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:09.304980040 CET	1.1.1.1	192.168.2.5	0xe7e	No error (0)	stats.g.doubleclick.net		64.233.166.157	A (IP address)	IN (0x0001)	false
Mar 14, 2025 19:08:09.328869104 CET	1.1.1.1	192.168.2.5	0x76bc	No error (0)	td.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2025-03-14 18:07:30 UTC	375	OUT	GET /th?id=OADD2.10239370639702_1LY06F7YB2ZF9D3G5&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-14 18:07:30 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 634564 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 8B0967A9C5D44252A6C5CC2DB299DB0A Ref B: EWR30EDGE0718 Ref C: 2025-03-14T18:07:30Z Date: Fri, 14 Mar 2025 18:07:30 GMT Connection: close
2025-03-14 18:07:30 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1a a0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 31 31 3a 32 31 20 31 36 3a 32 38 3a 30 32 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ExifMM*bj(1r2i``Adobe Photoshop 25.1 (Windows)2023:11:21 16:28:028
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: 22 16 4a 4d b5 3e ca 46 4a 40 41 b6 93 6d 4e c9 48 c9 54 04 2c b4 9b 6a 6d b4 8c b4 01 03 03 4b b6 a5 db 49 40 11 62 92 a5 db 49 b7 14 01 1d 23 0a 93 6d 1b 68 02 2a 4d b5 2e da 4d b4 01 16 da 46 15 2e da 46 5a 00 89 85 35 85 4c cb 48 cb 40 11 50 c2 a4 a4 db 40 11 ed a4 db 52 30 a4 c5 16 01 94 98 a7 d0 c3 14 00 cc 51 8a 72 d2 f3 48 68 d7 f0 1d aa 5c eb d1 87 5d db 7f 86 bd 86 c5 02 7e ec 74 5a f2 0f 03 1b 94 d6 23 fb 3a ed 2c d8 dc df 75 7d 6b d7 f4 95 73 1e 64 6d cd 5e 16 65 7f 68 8f 5f 07 fc 32 ea 2d 39 96 9e ab 4b b6 bc d3 a8 8b 65 35 97 15 63 6d 46 eb 40 10 b2 fa d2 2c 78 6a 9b 6d 2a ae 68 01 8a b4 ec 66 97 18 a1 b8 a0 06 32 d3 58 53 99 a9 ad 40 02 8a 55 41 4a 83 34 f5 14 00 d5 4a 5d 94 f5 a7 63 34 01 0e ca 19 2a 5c 51 b6 80 2b 32 d3 1d 6a cb 25 31 d2 Data Ascii: "JM>FJ@AmNHT,jmKI@bI#mhM.MF.FZ5LH@P@R0QrHh\]~tZ#:,u}ksdm^eh_2-9Ke5cmF@,xjmhf2XS@UAJ4J]c4*\Q+2j%1
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: ad 4b 7f 69 3d b5 c6 25 89 a3 dd f7 77 52 2a b0 e0 57 42 b5 b4 31 d9 d8 6f 2d cd 3b cb 1b 68 da 43 7b 53 9b 23 a5 16 02 2d bf 37 34 bb 30 bc 54 ca 85 bf 86 94 c6 47 d2 80 3e df 98 40 d5 52 64 8c 37 15 88 b7 d3 8e bb aa 44 bd 62 d8 35 f3 1e c9 9e bf 3a 2e cd 20 15 56 49 f6 f2 1a a4 8e 68 df ef d2 b4 10 3f 22 9a 49 0b 52 aa 5d b9 91 76 6e cd 6c 5b db dc 35 be f9 6e 76 b7 f7 56 a8 b5 b4 69 ca 54 b8 22 3e 5a 9e 9d 03 52 c2 e8 b7 77 16 ed 25 bc ea c7 fd aa aa fa 2e bf 0c ca 65 81 a5 8f fe 99 b0 6a bd a5 6a 7f 65 93 cb 92 5d aa d5 d1 d8 de 09 d7 31 ce ac 29 7b 59 c7 a6 81 ec e3 23 9d b3 b5 96 39 17 ed 3e 7c 5f dd 5d b5 aa 91 a4 51 ef 93 76 2b 61 b0 cb f3 ed 6a 14 c1 f7 0d 63 29 f3 33 45 1b 18 49 7f 66 f2 6c f3 76 ed a6 dd 6a 36 f0 cc a3 cd 56 ad bb 8b 7b 37 e4 Data Ascii: Ki=%wR*WB1o-;hC{S#-740TG>@Rd7Db5:. VIh?"IR]vnl[5nvViT">ZRw%.ejje]1){Y#9>\|_]Qv+ajc)3EIflvj6V{7
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: e1 5b 49 e2 f3 06 e6 82 42 9e 5a 7e 39 dc 6b c6 23 8e cd ad d4 c9 3f 97 27 f1 7f b2 3e 95 14 96 c8 f2 32 5b 4a d2 2f 5d df 75 ab 9e a6 0e 8c b7 5a 9b 43 15 52 3b 3d 0f b1 fc 1b e3 cf 03 f8 bb ca 8f 4a d6 15 6e 64 5c b5 b4 bf 23 af b7 cd 8a dc 6b 4b 39 ee a4 b7 83 51 b6 69 62 ff 00 59 1a ce 19 97 ea 33 5f 12 d8 e9 b7 23 6c f2 ce d6 c5 57 30 36 ed ad 91 fc aa ce 95 77 ac 5b 5c 4b 2c 1a 9b 45 23 7c 92 4a d2 9d cc 33 fa d7 9b 57 2f 8a 7e e4 b4 3b 61 8c 6f 78 9f 66 dd 78 76 e1 97 72 32 d6 79 f0 bd cb b7 cf d6 be 76 d0 fe 30 fc 40 d2 b4 78 ec ad f5 af 36 18 24 f9 64 b9 84 3b c8 3d 32 79 c5 7a 07 86 3f 68 fb 39 b7 0d 7f 43 9e db 6b 01 e6 db 48 1d 7d fa ff 00 4a e7 78 5a d1 f8 5d cd a3 88 a4 f7 3d 3a 1d 06 ee 26 d9 4f b8 d2 2e 23 5f ba d9 6a 8f c1 ff 00 10 3c 35 Data Ascii: [IBZ~9k#?'>2[J/]uZCR;=Jnd\#kK9QibY3_#lW06w[\K,E#\|J3W/~;aoxfxvr2yv0@x6$d;=2yz?h9CkH}JxZ]=:&O.#_j<5
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: 54 ce 4b 62 a2 9b d4 a8 b0 ef f3 23 8d 59 b7 67 cc 6e 77 2e 7d 69 77 45 0d ab 07 89 58 af 0a cd f3 37 d4 d4 9a 85 c2 5b db b4 10 45 e6 aa ae 19 95 bd 7f 2a 21 49 5a 38 fe 5d ab 22 fc b1 47 8f 9a a7 a5 d9 7d 4a 91 cb f6 98 56 48 e2 93 ef 79 71 ee c7 5e e6 99 7f 11 2d 81 b9 59 7f bd f2 d6 fc 76 f0 24 8a ee b2 46 b0 2e 59 be ea 2e 7d 07 f1 1a c4 d6 2e 23 46 8d d2 39 3c c9 18 ff 00 ac fb b8 1d c8 14 53 95 de 81 25 65 a9 95 24 2f 04 db ce dd ad f7 7f cf 4a 7c 93 94 8f 9e af f7 b6 af cc b5 66 6d 92 43 88 f6 ca 37 7d ef 2f 6e df ce a9 dc 10 93 33 a2 ed 8f a3 6e ae 95 ae e6 3b 0c be 73 1c 6a 0b 48 dd 0f f7 79 34 db 11 28 93 cc 9d 59 8f 45 5f ad 4b 72 4d c3 2c b2 33 79 6b fe d7 f5 ab 56 26 54 8f fd 6f 3b 7e 5f 33 e5 eb e9 4d e9 12 3a 8f 51 12 48 d2 3f cc cd c2 c6 Data Ascii: TKb#Ygnw.}iwEX7[E*!IZ8]"G}JVHyq^-Yv$F.Y.}.#F9<S%e$/J\|fmC7}/n3n;sjHy4(YE_KrM,3ykV&To;~_3M:QH?
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: e8 6d a4 7b a8 e3 45 59 0c 8c 02 ab 7b d7 56 cb 53 0e aa c4 4c c5 9b fb c3 f8 ab 73 e1 df 86 ae fc 45 ac 2c 45 59 6d 57 fd 64 ab 19 66 5f 61 8e f5 de 78 47 c0 7a 3e 9d 0c 5a a6 b7 6c d7 82 45 ff 00 56 df 34 2a 47 56 ea 3e 5e d9 39 a8 ae 7c 53 6f a7 47 75 1e 9c b0 69 f6 f2 49 88 96 38 19 56 6c f7 cf 70 3d ab c8 ad 98 ba 8a 50 c3 ab be e7 7d 3c 27 2b 52 a8 fe 47 6d e1 3b ad 2a c2 e1 b4 2d 12 d3 cb 48 17 f7 ad 2b 6c dd c7 52 40 fe b5 8f ab 6b 51 41 74 b0 5e dc ac f1 c4 c6 48 e4 dc ea 8a 47 41 ce 33 8a 97 c2 36 3a 85 95 af da f5 0b cd d1 ce db 97 cb f9 77 03 f5 3c 7e b5 8d f1 0a dd 2e 64 51 24 17 37 9b 72 62 8a d1 b7 32 a6 3f 88 8c f1 9a f0 29 d3 84 ab b4 dd fc ff 00 e1 cf 5a 53 6a 9e 87 31 36 9f aa 78 bf 52 64 4b c5 88 46 ac ed 23 30 db 8c f0 02 2f 3f 9d 75 Data Ascii: m{EY{VSLsE,EYmWdf_axGz>ZlEV4GV>^9\|SoGuiI8Vlp=P}<'+RGm;-H+lR@kQAt^HGA36:w<~.dQ$7rb2?)ZSj16xRdKF#0/?u
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: 9d 83 6d 1e cb c0 15 9f 7d 3d c4 1a a4 0e 6f be d9 36 d3 b6 0e 7e 69 3b 0e 80 67 bd 3a 7a fc 2c a9 59 6a d1 76 ce 5c c7 28 b4 89 63 0b 21 76 91 9b 76 e3 df 27 ff 00 d7 50 c6 2e 04 32 3d ec 52 46 6f 23 0e aa cd b1 70 38 00 f2 7a fa 55 1d 56 e5 20 86 da d2 78 b6 86 50 f2 6d 6d aa a0 1c f7 e0 02 7f 3a b9 f6 98 e6 f3 6e 2e ef a3 55 9f 06 db cd 6d cb 18 ec c0 f7 fa 56 8e 2e d7 26 fa 8c b8 37 12 5a c8 6d fc c9 23 82 42 ed 1d b4 03 6b 71 f7 73 eb 9a 9a dd 2f 6f 6d 63 49 60 82 2b 89 f6 f9 8a df 3e d1 9f e3 3d db d8 74 a3 c3 ec 5e 69 e3 d3 e5 9d ad 77 80 b3 b4 9c 7b ed 1c 75 eb 55 bc 58 fa 44 7a 7c 49 73 73 3d 9b 47 23 6d 6d bd ba 67 38 a6 ae e7 c9 6d 43 45 1b 91 f8 d3 50 95 63 6d 2a 15 5b 9b fe 42 f9 0c 17 6a 75 25 f3 f7 78 ae 2a e5 85 95 8e 1e 0f 22 e6 4e 23 89 Data Ascii: m}=o6~i;g:z,Yjv\(c!vv'P.2=RFo#p8zUV xPmm:n.UmV.&7Zm#Bkqs/omcI`+>=t^iw{uUXDz\|Iss=G#mmg8mCEPcm[Bju%x"N#
2025-03-14 18:07:31 UTC	16067	IN	Data Raw: 3f 95 24 fe 23 9e 07 d6 9f 34 9b 4a c3 8a d0 ca b4 69 12 f1 ad e4 89 54 c5 cb 6e cd 6b 5b c5 6e 9a 2d f5 ce ef 30 c2 d1 a2 af bb 1e bf 95 45 a6 e9 d2 4f 1c 97 e6 db 70 59 04 6d e5 b6 ed ae 7b 7e 54 58 5a b5 bc 7e 56 d6 62 df bc 65 6f bb f9 d5 3e 84 f5 29 4c a2 69 3c f4 f9 76 af cc ac df 7b 15 4e fc 0f b5 28 2b ff 00 02 5f bd 53 da c8 4d d3 19 17 69 97 9f f6 5b e9 4d ba 89 04 cd f3 7f 0f dd ac 89 d6 e2 69 b0 bc b7 92 7a 7f b3 5a 36 68 f2 5a b0 8d 77 75 15 4e de ed ed a1 96 0b 2e 92 c7 e5 c8 cd e9 9c d6 b4 28 6d a1 58 9e e6 35 1e 51 75 65 cb 6d 1d 81 f7 a7 2b 58 a8 95 74 d5 8e 28 65 df b9 7f d9 5f 4a a9 a8 14 91 a4 3b 5b e5 51 b5 7f bb 53 a9 8a 18 54 6e f2 e4 db 96 f3 3e eb 1a 87 52 94 c8 b9 91 97 0a bf 75 7f 8b f1 a2 c5 74 31 37 05 65 07 a5 59 b6 25 99 47 Data Ascii: ?$#4JiTnk[n-0EOpYm{~TXZ~Vbeo>)Li<v{N(+_SMi[MizZ6hZwuN.(mX5Quem+Xt(e_J;[QSTn>Rut17eY%G
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: 6b 3f e4 59 30 ed 5b 7a e8 f3 5a 41 67 13 6d 81 42 2a aa fc cc 07 53 c5 64 e9 fe 62 5c 46 e8 ab 24 9b be 55 65 dd fa 57 da 45 24 b4 3e 76 5b 9a f6 22 6b 78 e4 b5 8a f1 ad ad af b1 e6 6e 5f f5 98 f6 1e 95 f4 17 ec f1 6b 6f 65 e1 1f b4 a6 a1 73 a8 5b d9 c8 4e 97 04 f6 c7 62 c8 4e 59 cf a8 c8 1e d9 f5 af 9e f4 ad 36 e7 56 f1 07 91 02 ed 93 97 91 64 60 ab 1e 3a 9e dc 0a fa 87 c1 a8 67 f0 6d 8d 84 76 d2 49 e7 c1 b3 4f 55 c4 63 8e 9f 2a fa 93 9c 9a f9 0e 28 c7 4b 0d 46 30 a6 f5 96 ff 00 d7 f5 d4 ef c0 45 b9 df b1 d5 f8 6e 1b 9d 52 48 2e a7 68 e0 b6 5d d2 48 b1 41 b3 71 3d 36 8e 06 3d 05 45 ab 5e 9b cf 15 59 cf f6 69 22 55 52 16 e6 55 3b 63 45 fb ea 83 d4 e7 93 d6 ae c3 e2 39 74 6b 58 f4 ed 42 29 1a e6 ea 4f b3 44 d6 39 79 b2 bd 77 1e 88 3e 9c d6 05 8d cc 8d e2 Data Ascii: k?Y0[zZAgmBSdb\F$UeWE$>v["kxn_koes[NbNY6Vd`:gmvIOUc(KF0EnRH.h]HAq=6=E^Yi"URU;cE9tkXB)OD9yw>
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: 97 04 f0 f9 92 2f c9 23 aa e4 82 d8 3b 39 1d 7f 5a e8 df 11 aa a5 84 0a d6 d0 45 e5 b5 ca af 92 d0 9c 70 aa 80 67 81 de b3 b5 4f 0c c1 ac d8 d8 9b 88 a0 6b 78 24 26 fa 5f 33 62 49 c6 02 b6 7d 38 1c e3 9a f9 9c 24 d4 71 31 a8 fa 7f 5a f9 9e ce de e9 bd f1 11 a2 f0 cf 82 f4 34 d4 35 7f b7 34 9a 6c 6f 77 2b 62 67 c3 a0 66 c3 71 85 c8 08 aa a3 3d 3e b5 f3 a7 c4 5f 89 9a e6 9d 7d 3c 1e 12 d6 67 b3 b0 b6 8c 88 e3 5f 7e 18 e4 12 32 49 3d 0f 15 df 7c 56 b8 f1 7f 8b bc 17 63 73 a5 4b a4 e9 f6 37 97 22 c2 d1 a3 bb 32 4d 7c 63 3e 5e 55 48 c4 31 2a 8e 49 3c d7 8f 69 be 03 bb d4 bc 44 ba 14 fa 9e 97 6a 5a e4 db 2d cc 93 ec 56 d8 f8 62 17 af 27 a0 20 66 be bf 2d c1 61 ef 2c 45 6b 37 ae 9d ba ea bb a3 87 1b 52 72 92 8c 34 f3 30 6e 3c 51 79 3e 93 6d 1c 70 41 03 40 cc d2 Data Ascii: /#;9ZEpgOkx$&_3bI}8$q1Z454low+bgfq=>_}<g_~2I=\|VcsK7"2M\|c>^UH1*I<iDjZ-Vb' f-a,Ek7Rr40n<Qy>mpA@

Timestamp	Bytes transferred	Direction	Data
2025-03-14 18:07:30 UTC	375	OUT	GET /th?id=OADD2.10239353582480_11Y0WDW5HLDOO8GP5&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-14 18:07:31 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 679925 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C6753F5226514607963FE53B90C2A1EA Ref B: EWR30EDGE1407 Ref C: 2025-03-14T18:07:30Z Date: Fri, 14 Mar 2025 18:07:30 GMT Connection: close
2025-03-14 18:07:31 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 17 86 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 35 3a 31 33 20 31 37 3a 35 38 3a 32 35 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ExifMM*bj(1r2i``Adobe Photoshop 24.4 (Windows)2023:05:13 17:58:258
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: 91 c9 6b a7 d8 27 fa 3e cf 97 ce 90 ff 00 77 fd 90 2b 4a 29 28 d9 ec 65 51 b9 3d 37 31 f1 2c 11 fd bb 50 92 4b 8b e9 5f 72 3b ff 00 7b db df d2 ae 59 d9 41 67 32 4d 75 e6 5c 5e 5c 6e 67 4f bd 54 34 5b 96 bf d4 be d9 37 98 cc af b6 18 53 ee c3 f8 d6 dc da ab 3c 8f 1d 8c 10 2c d1 27 ce f3 3a ff 00 95 1f ce b4 ab 29 dd 45 20 a3 4e 2b df 6f fc cd 1d 2e f3 6c 7b a4 b4 92 de 3f 9b fe 3e 3e 5d f5 83 ae 5f ad c5 8c d7 9b 24 f2 ed df f7 29 fc 53 31 f5 fa 55 ab e9 3f b4 6f 92 d6 39 e7 b8 55 ff 00 5b e4 ff 00 78 75 19 ae 76 fa 55 b8 f3 7c bf f5 76 bf 73 fe ba 51 42 9a dd 95 5a a5 f4 4c c1 d3 63 9e ea 74 fb 2d a4 8c cb b9 77 ec fe 2e a5 ce ea 8b c6 96 8a 90 23 47 24 8c cc 8a db ff 00 87 e9 5a 77 56 fa ad 9f d9 1a f3 cc 58 65 f9 66 74 f9 97 6f e1 eb 4e d4 a0 82 78 1e Data Ascii: k'>w+J)(eQ=71,PK_r;{YAg2Mu\^\ngOT4[7S<,':)E N+o.l{?>>]_$)S1U?o9U[xuvU\|vsQBZLct-w.#G$ZwVXeftoNx
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: cf 5c 2d ad be a7 65 fb cb 8b fb 58 95 be 68 77 a7 a7 f7 6b b8 f0 bb db 59 c7 6f af 6b 5a ec f7 ed 13 f9 bf 64 4d ab b1 bf 87 ee fd ef 7a e6 ad 87 a7 04 da d7 b6 ff 00 a1 db 87 c5 55 9c d4 5e 8f e5 fe 66 84 9a 56 a1 a3 6b 13 2c d6 11 fd 8e f3 73 43 14 d3 ed 97 fd 9d cb cf 4a ab 63 aa 5c e9 1a c7 db b5 8d 36 7b 7b 38 91 a2 b7 74 f9 9a 69 3f 88 b7 70 b5 b5 ac 6b b1 6a f6 2d 36 a5 7f 05 bd c3 3a cb 69 0d bb ee 64 c7 76 ff 00 0f 5a af 26 ab 7d ab c7 69 6f 63 24 f7 0d 13 ee ff 00 48 f9 be 6f fe 27 d2 b8 21 cc ff 00 89 1f 53 ba a5 96 90 6f ba 37 21 d4 35 3b 7b af f5 91 da ff 00 69 5b ee 47 4f 9a 78 7f b9 f2 0f e7 53 78 77 c0 36 d7 9a 95 be a5 af 47 24 bb 77 33 f9 db 59 5e 43 fc 41 7f bd 57 3c 13 6c d6 b2 4c d7 91 fd 9e e9 66 fd f3 bb f9 ad 37 cb fc 6d fd 3a 57 Data Ascii: \-eXhwkYokZdMzU^fVk,sCJc\6{{8ti?pkj-6:idvZ&}ioc$Ho'!So7!5;{i[GOxSxw6G$w3Y^CAW<lLf7m:W
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: e9 e9 76 87 49 ac 6a ad b2 6f ed 6b a6 6f fa ef 54 6e 27 b9 b8 fd e4 d7 73 b3 7f b6 f4 db a7 95 b6 2b 79 6a bf ec 53 63 55 fb b5 b2 8a 5d 0c 65 27 27 b9 b7 e1 bd 63 6c 89 0d e4 fb 7c a7 56 4f c3 de bb 9d 3f e6 85 ee 3f e5 8b 7f 1f de 67 af 2f 5b 76 f2 dd bc bd cb fd fa e8 fe 1c ea 12 c1 24 d6 72 79 9e 5b 3f dc 77 fb 9f 4a c6 ad 34 d5 d1 74 e7 24 d2 67 60 d1 ef 91 17 cf 8d 55 be 5f f7 29 9f 67 b6 49 d6 39 a4 fd da be d4 f9 ff 00 87 e9 4f f3 77 6d 5b 78 3e 56 fe 3a b7 0c 76 c9 27 cc 9f 33 3f ce ff 00 d2 b9 2f 63 ad 42 ef 46 64 5d 41 73 1d d2 47 63 24 f1 46 af bb e4 7a 86 48 2e 65 ba 79 2e 24 fb af fc 7f 75 2b 76 f9 be cf 22 47 1c 1f 7b fa d1 e4 79 f6 ae de 5e dd df c7 f4 f5 a6 a7 66 1e ce e6 2c c9 2f 98 8d e6 46 cc df 7f ce fe 3a b8 b1 ee 8f e6 92 49 64 5f Data Ascii: vIjokoTn's+yjScU]e''cl\|VO??g/[v$ry[?wJ4t$g`U_)gI9Owm[x>V:v'3?/cBFd]AsGc$FzH.ey.$u+v"G{y^f,/F:Id_
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: c6 df 79 91 1f fb be 98 ae 0a aa 7b 6e 75 59 72 e8 ac 68 58 95 b5 d4 53 cc 8e 36 56 dc cf fd dd c7 bb 7f 4a 83 58 3e 57 fc 83 64 92 29 25 7d cf 33 a6 ef 94 d5 0b 5b fd da c4 33 7e fe ea 4b 89 99 52 dd 3e ee ee a3 e6 fe 11 59 fe 3a f1 6d 9a ea 5f d9 77 17 11 ff 00 68 5e 7c b0 c3 6e ec df 87 fb d5 74 e9 b9 46 d6 32 94 92 9d d9 bf 6f 25 a2 78 46 ed 6c 7c 8d d1 4d e5 6c 4f 9b 63 7d e6 35 c8 5c 6b 8b 16 b1 0d 9d ac 11 fd aa eb 6a a7 f7 b6 ee e6 b1 bc 37 3d f6 9d a5 3e 9b a8 47 b9 af e6 dd e7 23 ed 68 57 6f dc 8f 6f f1 55 fd 42 e6 2b 3b af b6 7f 66 c7 2a c4 8b b1 21 4d d2 fa 72 7f 5a ea 74 94 64 96 e6 7e d2 f0 68 ef bc 5d 0b 3e b0 93 4d f2 b5 bd bf 9b fe e6 6a 28 e3 f2 be d0 d0 c7 e6 fd df b3 a2 7d d4 93 fb f9 fe f5 72 d6 fa a3 5d 6c fb 3d fe d5 95 15 93 e7 dd Data Ascii: y{nuYrhXS6VJX>Wd)%}3[3~KR>Y:m_wh^\|ntF2o%xFl\|MlOc}5\kj7=>G#hWooUB+;f*!MrZtd~h]>Mj(}r]l=
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: fc 23 8b 75 74 f7 1a 5c 76 b6 b7 1b db ef bf 94 bf f7 ce 2b 16 e3 41 ff 00 89 94 d7 1a b4 97 d6 ec bf 7e 64 f9 97 f2 5f 95 96 b0 b3 4f 53 77 24 d6 8f 51 b6 77 f6 7a a5 a2 5c 4d 24 91 4d b3 ef ff 00 15 75 9e 1b bf 8a d6 0b 78 e4 9e ea 55 5f 99 1e 17 fe 1f ee b7 ff 00 5e b8 6b 5b 7b 6b 3b e9 ad ed ee f7 5b cb f2 bf c9 f7 2a e6 cf b0 40 eb 0d fe d5 fe 07 d9 b9 53 d9 ab 9e 70 bc ac ce ba 75 1a 8a 68 f4 7b cb 98 2e a4 69 3f e3 f1 7f 83 e4 f2 99 1b ea b5 7f 4b 9e 09 63 b7 5f de 5b ae cd af e7 3f f1 7f b4 0d 79 de 9b e2 fd 3d 2d 61 d3 fc 88 ee 2e 25 7d ae 9b fc aa e8 ed ee 6f 3e ca f1 b4 93 b2 be d6 48 7e 5d c9 b7 fb b9 eb 59 b8 ce 28 da 33 84 b5 5b 9d 45 f4 31 45 3f ee 64 8e 2d df 7e 1f 21 7e f7 aa bf 5a 86 c4 5e 3c 89 67 35 dd d3 33 7d c7 47 5d ae db 78 5e 6b Data Ascii: #ut\v+A~d_OSw$Qwz\M$MuxU_^k[{k;[*@Spuh{.i?Kc_[?y=-a.%}o>H~]Y(3[E1E?d-~!~Z^<g53}G]x^k
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: bf 27 bf f4 af 19 6b 45 83 c4 10 f8 9b 56 92 49 7e d0 fb 6d ff 00 d8 c5 74 61 28 46 a3 bd 4d bf 33 97 15 5e 70 4a 30 df f2 3d 63 c3 7e 24 d2 9a 7f df 7f c4 b6 e2 eb f7 a9 6f 33 ff 00 ae 61 fc 35 a3 e2 0d 5e 0b cf 0f bd c5 d4 12 5b db fd e7 47 fb cf 86 ed 5c cc d6 9a 66 b9 a5 5a 5e 4d 61 ba 46 b8 56 b4 85 ff 00 ba 8b f3 73 58 9e 22 f1 0c ab 1b db dd 5a 4f a9 4d 16 ef 25 12 0f f5 2b df 2d d3 1e 95 70 a3 19 e8 96 a8 99 4a 50 bc 9b ba 3a 2d 63 c5 17 2d fe 8f a7 c9 6b 7b 1e cf f4 74 4d d1 2a 63 bb 6e eb 8a dd 5f 12 6a 17 b0 3d c2 f9 fa 5c 32 a2 ab cc 9b 65 95 18 7d ef 2b eb 5c 17 87 fc 43 7d aa 40 ba 7a f8 32 08 a3 95 d7 ed 2e e8 ca c9 18 6e bd 71 5d 85 f4 0c d0 23 4d 77 e5 46 bb b6 6c f9 6a e7 18 c3 dd d9 91 0b cf 56 53 be f1 0f db e3 4d 36 3b 48 e2 8e 27 dd Data Ascii: 'kEVI~mta(FM3^pJ0=c~$o3a5^[G\fZ^MaFVsX"ZOM%+-pJP:-c-k{tM*cn_j=\2e}+\C}@z2.nq]#MwFljVSM6;H'
2025-03-14 18:07:31 UTC	16067	IN	Data Raw: 1c 9c b4 3a 29 a8 c4 af e1 38 bf 70 bf 65 8f ed 56 f2 ed d9 32 7e f7 7a fa ee f4 ae aa de cd 52 fb 75 bf ef 57 67 df fe 14 cf f4 f4 af 15 ba 93 c4 7e 1a d7 2d ed 6d ee f5 2b 3b 76 9b e4 fb be 53 b3 ff 00 13 f5 c6 e6 ed 5d 87 85 7e 27 c1 71 6a 9a 5e bd fe 8b aa 5a ee f3 9e 18 19 62 b9 51 d0 a3 2f 03 e9 59 ca 84 ad cc b5 45 aa da f2 cb 43 be d5 20 fe d2 8d 2d 57 e6 6f 99 5d fe ef 93 85 f5 af 1d d7 bc 25 62 fe 23 7b 8b 58 d3 cc d9 fb e4 fa 7d ea f6 8f 0c ea 9a 7f 88 74 d4 fe c7 9e 3f e2 64 78 7e ee de fc bf 51 5c 9f 8b b4 bb 6d 3b c4 13 49 27 ee 9a 57 dd fb ef e3 c7 7f c6 aa 3e d2 9b b9 2a 50 93 e4 7f 89 e7 f0 e9 d0 4b 75 34 71 c9 b6 4b 54 f9 df eb eb fd 2a 6d 1f 46 5b 8f de 79 90 59 aa bf c9 bf f8 d7 f8 ab ab 6f 0d fd b2 07 9a 1b 49 3c b6 db bf 62 33 6f fe Data Ascii: :)8peV2~zRuWg~-m+;vS]~'qj^ZbQ/YEC -Wo]%b#{X}t?dx~Q\m;I'W>PKu4qKTmF[yYoI<b3o
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: bf b2 ab b6 ef bd f7 2a dc 96 ff 00 26 d8 e4 93 fe 07 4c 8e 56 f2 fc b9 3f dd ab 52 32 71 d6 c5 66 f9 be 6f e1 a4 64 fd df fa ca d0 f2 a2 f2 37 49 1c 6b fe e5 56 61 b6 3f f5 71 b5 3e 60 e5 20 86 46 8a 4d cb 57 96 ed 96 df 72 c9 f7 aa 8c c3 fb d5 a7 e1 5b 6b 1b a9 ff 00 e2 65 24 8b 6b 17 cd 37 93 f7 b6 d3 96 d7 16 c6 9f 87 6e 6e 6d e3 6b 88 ff 00 d5 aa 36 cf e2 fc 6a ac 33 dc db c7 f6 86 bf 93 cb ba dd 13 a7 dd df 56 18 45 3c 97 0b 6b f6 af b1 b3 aa c3 b3 e5 f2 57 ff 00 66 ab 17 d6 f1 35 ac 36 eb e5 ac 8b f3 6c fe fa ff 00 53 59 5d 26 5a d6 25 86 d1 d6 ce 08 66 93 52 91 77 3a b3 f9 3f 34 4e b4 49 65 67 04 92 cd 1f da ae 3c df bf b2 3f 2a 27 5a a3 1c f7 31 58 bf d9 e0 dd 6b 13 ed 9b e4 f9 a1 fa 66 b7 bc 0b 7b 63 ad f8 aa d3 c3 77 53 da e9 36 b7 08 ca f7 7f Data Ascii: &LV?R2qfod7IkVa?q>` FMWr[ke$k7nnmk6j3VE<kWf56lSY]&Z%fRw:?4NIeg<?'Z1Xkf{cwS6
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: ba 9b ce ff 00 4a b5 64 f2 a1 8b 7f 95 fa f5 f9 68 a8 dd 47 72 e1 cb 4d d8 9d b4 eb cf 92 4b c9 e3 b8 8f f8 fe ef e7 50 5a e9 da 7c 52 6e b7 bb 8e ea 16 79 1b c9 f9 55 91 bf df aa 53 69 f3 a5 a3 dc 5c 79 91 33 3f ef 9f 63 4a cf fd da ab a6 c7 e2 18 2d 5f ec fa 2d d4 b0 b6 e6 fb 45 c6 d5 5f 73 8a 51 83 b6 8c 52 a9 15 6d 1f e6 75 d7 1a 9c 1a 37 85 7e d1 aa 79 6a d6 ff 00 32 4d b1 7f 7d 9e 15 7f de 35 c6 da dc b5 f5 d3 de 5d 5d c8 d3 4a ec c9 bf ee a6 7f 80 7f 75 6a 9f c4 a9 ef 1e 0b 1b 3f bb e5 7e f6 e1 3f be df c3 8f f6 40 ab fe 1d d3 6d a7 8d 1a fb cc 95 bf e7 8f cd b7 8f f7 7a fe 75 a7 b3 8c 21 cc de ac 3d a4 a7 3e 55 d0 d9 fe d0 f2 20 db e5 c0 df 27 ef 93 f8 be b5 06 9f aa cb 74 f0 ac 30 4f 2e ff 00 fb e5 31 fd e3 49 af 4f 63 a2 e9 a9 e7 5a 5a c5 bb e6 Data Ascii: JdhGrMKPZ\|RnyUSi\y3?cJ-_-E_sQRmu7~yj2M}5]]Juj?~?@mzu!=>U 't0O.1IOcZZ

Timestamp	Bytes transferred	Direction	Data
2025-03-14 18:07:30 UTC	346	OUT	GET /th?id=OADD2.10239370639703_1XZVEAKL3PD7EZGL4&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-14 18:07:31 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 637660 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: EB0A7AF681CA42DA8F6814B362C2771D Ref B: EWR30EDGE0910 Ref C: 2025-03-14T18:07:31Z Date: Fri, 14 Mar 2025 18:07:30 GMT Connection: close
2025-03-14 18:07:31 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1d dc 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 31 31 3a 32 31 20 31 36 3a 32 38 3a 34 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ExifMM*bj(1r2i``Adobe Photoshop 25.1 (Windows)2023:11:21 16:28:408
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: 05 c2 c0 b0 c7 c2 c6 ab f3 31 f7 af 23 11 9a 53 8d d4 59 ec 50 cb 27 a3 99 e6 9f 0b 7e 15 dc ea 97 8b 77 a8 ed 58 63 6f f5 6c bf 7a bd 66 db e1 4f 86 a1 86 59 3f b3 e3 69 a5 5c 6e fb db 7e 82 bb ed 3f 4f 82 38 56 38 95 57 77 fc f3 ab ab 66 b1 af c9 d6 be 7b 11 98 55 a9 2b de c7 b3 47 0b 4e 9c 6c 91 e3 1a 6f c1 9d 00 ea 12 47 35 8c f2 47 bb e5 66 6a ec bc 2b f0 bf 43 d0 d7 fd 1a 05 f5 56 65 e7 f3 ae ce 45 78 f9 4e b5 2c 6e 7c bf 9f e6 35 cf 3c 5d 69 ab 39 33 58 d2 82 d9 1c cc de 17 d2 a3 9a 4b 97 b6 8d 99 b8 69 19 77 35 3b 4f d0 ac 85 d4 77 11 c7 b7 cb ad eb c1 e6 43 f2 2f 35 42 3d 42 de dd 96 09 65 55 3f ed 56 7c f3 6b 72 ac 91 d0 69 b2 8d aa 82 b4 a1 96 b9 88 ef c4 4d e6 2b 6e 8e ae e9 ba b4 57 3c c6 fb b6 d6 12 83 dc a4 74 b0 cb 9a b7 1c b5 91 6d 2e 6a Data Ascii: 1#SYP'~wXcolzfOY?i\n~?O8V8Wwf{U+GNloG5Gfj+CVeExN,n\|5<]i93XKiw5;OwC/5B=BeU?V\|kriM+nW<tm.j
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: 6e 6b 72 cb 8a c5 d4 d7 42 94 6e 71 f7 e4 bb 63 6f 3f de aa 13 5b 33 f4 ae d5 f4 bc f2 eb ba 96 1d 32 33 fc 35 4a aa 27 95 9c 03 69 f3 bb 63 6d 5a b5 d0 2e 24 e7 6b 57 a0 db e9 90 22 ff 00 aa a9 a4 86 da de dd a5 b8 96 38 22 5f bd 24 8c 15 7f 33 4f db b7 b0 f9 12 dc e0 24 d0 a4 45 ce da 8e da c3 62 b4 8f fb b8 e3 5c b3 37 dd 5a 9b e2 07 c5 4f 87 9e 1b 69 6d e7 d6 a3 bc bb 8f 8f b2 58 fe f1 f3 ee 7a 0f ce bc 03 e2 67 c5 fb ff 00 10 dd 34 76 cb f6 5b 05 6f dc db 46 df 7b fd ff 00 ef 1a eb a3 46 b5 4d 5a d0 c2 a5 58 47 a9 ec 3a f7 8b 34 2d 36 dd 8c 53 fd aa 5e 8a b1 fd dc fb 9a e0 35 5f 1d 1b 8b e6 8d a7 55 3f f3 cd 7e 55 af 27 be d7 ae 27 8f 74 8c ca 7f 85 77 7c b5 8d a8 5d c8 ec a4 37 3f de af 46 9e 13 b9 c7 3c 43 b1 eb 3a e6 bb 1c 71 f9 b2 6d 6e fb a8 af Data Ascii: nkrBnqco?[3235J'icmZ.$kW"8"_$3O$Eb\7ZOimXzg4v[oF{FMZXG:4-6S^5_U?~U''tw\|]7?F<C:qmn
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: d3 ad 46 cb 8a 62 2b b2 d2 32 d4 ce b4 d6 14 01 03 2e 7e 5a 7c 7a 7d d4 ed 20 82 da 79 0c 7f 7b cb 8c b6 da df f8 7f a1 4f ad 6b 51 a4 4b e6 08 d8 1d bb 6b e8 df 0c f8 5f 4c b0 d3 76 45 6d 1a 99 39 91 95 7e 66 35 e5 e3 b3 28 e1 9a 8a 57 67 a5 85 c0 fb 58 f3 49 d9 1f 3b 78 2f c0 1a be af 79 24 73 d9 b4 41 57 e5 8e 4e 1b ff 00 ad 5a da bf c1 7f 10 5b 59 b5 cc 57 36 d2 6d 52 7c a5 ce ea fa 2a c3 4e b7 b4 8d 84 11 2a ee e5 a8 bf b5 f3 ad 5a 23 f2 ee af 16 79 cd 77 2b c7 44 7a 31 c0 d0 4a cd 1e 5f fb 37 ff 00 6f da 69 f7 3a 66 af 17 97 6f 04 98 8b fb d5 eb b6 31 e1 b3 f7 85 65 59 d8 88 76 c5 1a aa 8a dd b3 8f 6c 6a 3f bb 5e 65 6a 9e d6 a3 95 ad 73 a9 45 42 0a 24 eb f7 68 53 4e a8 dc 81 50 22 1b 83 f3 53 d9 7f 77 51 33 a1 6c 1a 91 58 79 7f 7b 8a 43 2a fd 9c 19 Data Ascii: Fb+2.~Z\|z} y{OkQKk_LvEm9~f5(WgXI;x/y$sAWNZ[YW6mR\|NZ#yw+Dz1J_7oi:fo1eYvlj?^ejsEB$hSNP"SwQ3lXy{C*
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: ef 55 66 b4 b2 dd e5 45 7c ab 24 72 66 4f dd ee 56 34 93 59 db dd 48 d7 51 4e d1 2c 5f bb 8e 35 8b ef 3f ad 51 41 b5 96 2b d6 d8 bf c2 b1 c7 f3 31 f4 27 d2 88 45 5d b8 b1 cd bb 59 9b fa 55 cd bc 50 c9 6a b2 f9 90 c7 93 fb a5 3b b7 ff 00 2a ae d6 ba ad c5 e4 86 09 56 d6 2e 07 76 6e 9d 07 a9 fa 56 8e 8b 10 86 e2 da c2 d3 cc 79 24 5d fb 95 7e 5f cc ff 00 3a f1 ad 63 e3 16 a3 a6 7c 44 92 31 03 41 a6 59 ca d1 c9 03 36 f9 18 83 82 c5 bd 7e 9c 57 2c f1 10 a7 27 6d cd 23 4a 52 5e 47 b1 68 7a 24 9a 8f 88 13 4f 96 79 25 b7 8b 12 5c ee 5d a5 40 f4 f4 f4 ae 92 ce 5b 3b 5f 10 46 fe 54 76 6d e6 6c b4 f2 a3 df b4 1e ad b7 bb 76 19 ae 47 e0 7f 8e bf e1 32 f1 45 d2 68 10 49 1d a4 56 c4 fe fd 42 b4 d2 1e e4 f6 51 5e a3 e1 bb 6b 2f b6 2d fc 76 6a d2 aa 97 92 e7 cc dd f3 8e Data Ascii: UfE\|$rfOV4YHQN,_5?QA+1'E]YUPj;*V.vnVy$]~_:c\|D1AY6~W,'m#JR^Ghz$Oy%\]@[;_FTvmlvG2EhIVBQ^k/-vj
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: a8 2e 2d b6 cb 1e 36 b3 2f dd 1f e3 44 6f 2d 56 c5 3b 27 a9 61 a0 94 da af 96 aa b1 aa fd d5 f9 77 7e 75 4b 4c b6 bb 9e f9 a5 9e 5d b0 c7 93 23 6e fb de c2 ae 34 2c 1b cd bc f3 31 1b 13 fd ed c6 b4 33 6c 2c 55 ef 11 97 73 7c b0 fd dd c3 d0 e3 fa 52 73 e5 0e 5b b3 3e c2 cc bc 32 dc 09 64 8f fd af ee 8f 4f c6 aa 5c 80 cc c9 26 dc 37 dd dd f7 ab 7f 50 6b 6b 2d 2d 5e 75 58 37 36 63 89 7e 66 c7 ad 60 6b 57 76 90 b2 f9 10 2f 9d b7 2b bb 3f 37 a7 5a 74 9b 93 1c d2 48 86 48 22 95 58 18 97 e5 ff 00 81 55 06 e2 4f 2e 4d cb f3 6d 56 6f bb c5 69 47 22 36 d9 ff 00 b4 16 49 36 e7 6f 96 55 79 f7 f6 a8 52 72 d3 34 b3 ee 90 2f 3f 77 e5 fc eb a6 2d 98 15 2e 9a 49 db 11 4a ca 23 5a 29 8e c4 5c 34 83 e5 8b fb df c3 45 5d 89 bb 3e d3 48 e9 e9 16 69 f7 2f 6f 67 63 2d e5 e4 eb Data Ascii: .-6/Do-V;'aw~uKL]#n4,13l,Us\|Rs[>2dO\&7Pkk--^uX76c~f`kWv/+?7ZtHH"XUO.MmVoiG"6I6oUyRr4/?w-.IJ#Z)\4E]>Hi/ogc-
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: 2c 56 28 e3 8f 1f bb 6d ad f5 af 4a 71 a9 ca 94 4e 4a 6e 0a 5e f1 9f aa 69 92 4c b3 dc da 4b 1c 71 33 7d d6 90 6e 6f c2 a3 d2 e7 b3 b6 b3 50 6f a7 8e 46 e1 97 6f c9 d7 f5 35 46 49 9f ed 1c 33 36 e6 f9 7f bd cd 5a bf d2 fc 98 63 94 de 40 d2 49 83 e5 45 f3 6d 1e e6 b7 e5 f7 79 66 cc 23 2f 7b 9a 27 55 e2 c9 24 8b 4d b5 b8 8a 06 f2 f6 63 cd 66 1b 98 7a 7a d7 17 78 8e dc 47 2b 65 bf 87 fb d5 d0 47 a0 eb 66 38 be d2 de 45 bb 47 be 49 65 63 b6 31 db f1 3e 95 91 7d 0a 43 71 e5 24 be 60 e9 e6 2f f1 54 61 b9 63 a2 77 2a b3 72 d6 c5 68 c3 ab 60 ab 29 fe f5 49 70 b1 ca b8 db b8 ff 00 7a 9b 82 1b 86 a7 ad b5 c3 db c9 3a 44 cd 0a b7 cd 22 fd d5 3f 5a ea ba 31 b3 7b 15 9e 20 8d ca f1 56 ac a3 b4 13 28 b8 66 58 db fb bf e7 8a ab 31 fd de c2 df ee d5 8b 38 ed da 16 49 59 Data Ascii: ,V(mJqNJn^iLKq3}noPoFo5FI36Zc@IEmyf#/{'U$McfzzxG+eGf8EGIec1>}Cq$`/Tacw*rh`)Ipz:D"?Z1{ V(fX18IY
2025-03-14 18:07:31 UTC	16067	IN	Data Raw: 55 8b b5 cc b1 15 5f a8 26 ba 0b 79 6d f4 bd 2e 5b b2 d2 49 71 3b 17 97 77 dd 51 d0 74 e7 15 72 39 ae 2f 2f 1a 78 e0 5f b2 5b 7d d6 5f 95 73 db 1d ab 12 e2 fa 2b 9f b6 5b 5f ca aa 3e ee ef ef 7a d6 52 93 aa f6 29 a5 08 da e5 8b 39 20 7b 55 d5 07 97 10 97 ee b6 d0 a7 ea 2b 3a 47 82 69 2e 7c d9 e3 cc 5c c7 22 e1 df 27 b2 e7 af e1 52 5d 18 35 0b 3f b1 69 16 db 62 6e 3c c9 3e e2 e3 fa fb 54 3e 1e d0 22 b7 d7 15 12 29 24 66 5f 9a 46 fa 72 54 76 ad 22 a3 14 db 7a 91 2e 69 59 2d 89 3c 1b 77 71 6b 6b 75 1b b3 7e fd b3 17 9a bf 33 67 8e 58 ff 00 4a 4d 61 d2 4b 5b a0 65 81 a4 b6 61 e5 45 b7 6a ae 7b e7 f8 8d 33 54 d5 34 bb 79 25 95 6d a4 fb 54 5f 27 cc db 97 ae 00 1f 95 57 f1 39 fb 65 af 99 23 2c 07 ca 1f 75 77 75 ec bf e2 6a a3 16 e6 a5 6b 5c 5c fc b1 6b 73 9b d5 Data Ascii: U_&ym.[Iq;wQtr9//x_[}_s+[_>zR)9 {U+:Gi.\|\"'R]5?ibn<>T>")$f_FrTv"z.iY-<wqkku~3gXJMaK[eaEj{3T4y%mT_'W9e#,uwujk\\ks
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: 24 2d 23 67 dc f4 1d b1 47 c2 fd 3b 4f d5 b5 c9 23 bd 81 64 58 a2 32 6d 6f bb 91 eb 59 c2 75 29 46 73 aa ee 91 a4 94 66 e2 a0 6a fc 3f f0 d5 9b d9 ae b7 7b 3c 92 96 94 79 51 c6 bf 74 77 c9 3d eb b2 b3 d2 6c 9b 54 96 78 ac ed a2 95 54 18 d9 be 6f 2f dd 89 ef 53 3c 91 4b 62 be 64 b2 2c 31 63 6a ed d9 bb fd d1 d0 55 c6 df f6 55 16 71 2c 45 b9 66 da 5d 57 3e a7 ab 63 d2 be 77 13 8a a9 52 4d be a7 6d 3a 71 8c 6c 91 16 ac 44 b2 5a de 47 b9 7c b6 c3 34 4b fc 62 aa aa db db 5b c9 79 24 5e 6c b2 c9 fb a8 a5 fb ab 9e a4 f7 62 6a cc 97 b3 da 69 f7 26 05 9d 56 08 c9 8f cc 50 ad 21 c7 e4 05 63 e9 f7 91 b6 9b 26 aa f2 b4 72 34 58 5d cb f3 64 fd 6b 28 41 b8 ea 6d ca 97 a9 b4 8d 68 d3 47 72 5b 85 88 85 8d 57 77 3f c5 f4 15 c9 eb 62 7b 5d 3f 50 95 99 77 2c 67 ca f2 db e5 Data Ascii: $-#gG;O#dX2moYu)Fsfj?{<yQtw=lTxTo/S<Kbd,1cjUUq,Ef]W>cwRMm:qlDZG\|4Kb[y$^lbji&VP!c&r4X]dk(AmhGr[Ww?b{]?Pw,g
2025-03-14 18:07:31 UTC	16384	IN	Data Raw: c7 af ad 43 e4 5b dc ea d7 57 e7 74 92 ae 02 c5 1c 63 f7 64 75 f9 9b b9 ef 8a f8 bc 2d 49 c2 77 5a 2b 58 f4 b9 9c 5d 89 6e 34 3d 13 49 b7 83 46 b6 9e 08 2c ed d7 12 49 13 07 66 90 f5 07 fd ac d7 29 75 a4 25 94 93 db c5 aa c1 1b 5c c8 0a c7 c2 26 07 73 8f bd 57 e6 36 7a c5 d4 ba 65 96 9e d2 5c 33 07 69 65 ce c8 c7 f2 cd 67 eb 6f 20 f1 04 76 96 f0 2c f3 46 a1 e4 65 8c 32 e0 7e 1c 2d 75 46 35 5b e5 93 d5 ea 62 f7 b9 b3 12 2d ae 86 d2 5c 5e 2d e1 59 02 6d 8d 43 2c 63 dc f7 a8 f5 ed 42 28 34 b6 78 20 f3 da 49 14 2a ee fb c6 ab 78 09 35 8d 7b 4b 69 24 b6 6d d7 d7 66 d6 d2 35 5f 99 80 7f 9e 4e c1 54 0a da d6 f4 3d 0a cb e2 12 d8 59 5c c9 3b 5a a8 31 a7 de 1b f1 82 c7 f1 ae 4e 5a d0 9b 6e 3b 32 ad 26 ae 70 3f 1b af 4e 91 71 a1 d9 5b 6e 92 4b 9b 95 f3 24 65 74 b7 Data Ascii: C[Wtcdu-IwZ+X]n4=IF,If)u%\&sW6ze\3iego v,Fe2~-uF5[b-\^-YmC,cB(4x I*x5{Ki$mf5_NT=Y\;Z1NZn;2&p?Nq[nK$et

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Timestamp	Bytes transferred	Direction	Data
2025-03-14 18:07:31 UTC	346	OUT	GET /th?id=OADD2.10239353582481_1UFRZG7HSKJ6VOM8D&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-14 18:07:34 UTC	861	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 645633 Content-Type: image/jpeg Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: BC9335309C05452AA9824F42A2024557 Ref B: EWR30EDGE0418 Ref C: 2025-03-14T18:07:31Z Date: Fri, 14 Mar 2025 18:07:34 GMT Connection: close
2025-03-14 18:07:34 UTC	3517	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 35 3a 31 33 20 31 37 3a 35 38 3a 35 39 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.4 (Windows)2023:05:13 17:58:598C
2025-03-14 18:07:34 UTC	8192	IN	Data Raw: 75 ba b6 bd 25 d5 a4 88 96 7e 64 92 7e ee 4f fa 67 5e 92 a7 3a 13 b4 95 ec 71 ba ab 11 4f dc 7b 9e 6d 75 a6 47 a9 e9 f1 ea 36 bf f2 d2 4f 2e 4f 2b fb f5 af e0 bf 23 44 d7 22 49 e1 fd ff 00 fa ba e8 f4 ad 07 4c d3 21 f3 e7 fd df 99 ff 00 a1 d4 57 57 da 0f 87 f5 cf 3f 54 b3 9a 39 2e 3f 79 24 92 fc e9 b2 b4 a9 5b 9d 38 45 36 89 a7 42 30 f7 de 9d c6 ea 4d 05 ed 9f 9f 3c df b8 ff 00 59 24 9f c7 53 c9 ad 5a 4b a4 c9 65 65 37 fa 54 76 de 5f da 6b 22 fb 45 9f 55 ba 93 54 b2 bc 86 48 3f e5 95 b4 5f f2 ce a9 e8 fa 0f 89 6e 34 fb 99 bf d5 c9 fe ae 38 ff 00 8e a6 34 e0 e3 f1 6c 68 ea 54 4d a8 ad ca b6 32 c1 fb bd 3a ca 69 be d5 24 9f bc b9 a9 7c 78 d6 9a 87 d9 ad 63 9b cb f2 e3 fd e4 95 3d d7 83 9e 2d 3e 3d f3 45 1d d4 7f f2 d2 b1 bf b2 35 ab 7f 32 7b db 3f b4 41 27 Data Ascii: u%~d~Og^:qO{muG6O.O+#D"IL!WW?T9.?y$[8E6B0M<Y$SZKee7Tv_k"EUTH?_n484lhTM2:i$\|xc=->=E52{?A'
2025-03-14 18:07:34 UTC	4144	IN	Data Raw: de 17 c5 61 dc 16 96 09 f2 e1 eb 2a af 5b f9 6c 76 5e 3c 82 0d 1e 59 12 ea 1f b3 f9 91 fe ee bc 9e 4b 5d 93 7d aa d6 6f 2e 3f f9 e7 5d ff 00 c6 2f 88 9a 17 88 34 9f b1 5a f9 be 67 fc f4 ae 6b e1 ad b7 f6 9e a1 1a 3c 3f f5 d2 bb b0 aa 74 68 39 cd 58 e3 c5 4e 15 f1 2a 9c 1d ce bf c2 3e 25 fb 46 87 fd 9d 27 ef 23 8f fd 57 9b 2d 3f c4 1a 7c f7 b0 ef 79 bc c8 ea ad d6 99 1d a7 db 9d 2c fc b8 3f d6 56 7e 95 e2 18 13 cb 48 fc ef f4 7f f5 be 6d 71 c6 0b 99 ce 91 d9 35 a2 8d 47 a9 46 c6 09 34 fb bd 90 43 fb bb 89 2b b2 8d b5 3b 88 64 82 69 bc c8 e3 ff 00 59 6d ff 00 a0 d4 3a 97 88 f4 d9 bc bb ab 2b 38 64 f3 2b a4 d0 ec e7 d4 e1 fe db 82 18 6d e4 92 3f f5 75 35 ea bd dc 7e f2 69 d3 84 6e a3 2f b8 f0 e9 e4 bb 4b cb 94 93 f7 92 54 1a 1f 98 fa e7 9e 9f f2 ce 3a ec 7e Data Ascii: a[lv^<YK]}o.?]/4Zgk<?th9XN>%F'#W-?\|y,?V~Hmq5GF4C+;diYm:+8d+m?u5~in/KT:~
2025-03-14 18:07:34 UTC	8192	IN	Data Raw: 6f fd dc 96 52 79 72 57 6b ac 4f a9 7e f2 7b 2b 39 a3 92 b9 ed 2b c2 ba 97 9d 24 fe 4c df e9 3b fc c8 eb 4a 17 8a e6 93 48 cf 10 d4 df 2c 53 7d ff 00 42 c7 c3 55 8f fb 26 e7 cf 9b cc 8e 48 fc ba 34 98 a7 4d 0f 67 fc b3 f3 3f d5 d6 5f 95 7d a1 6a 12 25 af 9d 1c 7f ea ee 63 96 b6 64 96 7b 8d 3e 3f 22 19 bf eb 9d 69 36 9b 6e fb fe 86 74 d6 89 5a d6 29 6b 1e 5f f6 4e c7 87 ed 12 79 9f f0 38 ea ef 87 f4 f9 34 fb 59 35 18 7f 79 1f 95 fb c8 ff 00 8e 3a d1 fe ca 91 e6 b6 9b fe 7a 4b fb c8 ea 3d 56 f2 46 bb b9 4b 5b 3f f5 72 7f ab 8b fd 9a c6 53 72 5c b1 36 50 51 7c cc c8 f0 c3 6c bb be d9 fb b9 3f d6 56 a6 9b 67 1e a1 fb f8 ff 00 77 25 6d e8 76 7a 6e a7 a1 db 6a fa 5c 3e 5f 97 be 39 62 a6 ea da 64 76 90 c8 f6 5e 74 71 c9 5c f5 6a fb ed 6c ce ca 34 e3 ec d7 54 50 Data Ascii: oRyrWkO~{+9+$L;JH,S}BU&H4Mg?_}j%cd{>?"i6ntZ)k_Ny84Y5y:zK=VFK[?rSr\6PQ\|l?Vgw%mvznj\>_9bdv^tq\jl4TP
2025-03-14 18:07:34 UTC	8192	IN	Data Raw: bc fb 37 99 1c 71 56 3c 7a 9e fd 42 fb fd 0e 6f b5 49 2f 99 6d 27 fc f4 fe f5 65 2a f5 67 36 ad a1 a4 68 d2 50 46 6c fe 17 b4 bd 9a 49 ee a6 9a dd 3f e9 da 5f e3 ab 50 c1 a6 d9 68 77 da bc f3 7f ab 8d 23 92 f7 f8 ff 00 e0 34 eb b5 7f b2 ff 00 cf bd f4 92 79 9e 5d 4b 05 b6 85 fd 93 25 ae a9 79 35 c6 ab fe be 4b 68 a2 fd ce ca 1c a5 24 ae dd bc 8b 8c 61 19 7b a9 27 dd 8b 6b 79 3d c5 a5 b5 f4 fa 6f 97 24 91 f9 9f bc fb fb 1b e5 5a c8 be d2 92 d2 69 35 1f b6 7e ee 39 7c c8 ff 00 df ae a3 55 fb 26 b7 0c 9e 47 9b 6f f6 88 fc b8 bf b9 5c bf 8f e0 fe c2 d3 e3 d3 bc ef 32 7f 92 48 e4 ad 28 a5 cc 94 74 6c cb 11 2e 64 db d5 22 c7 83 bc 4b 68 90 ef f2 61 fb 77 94 e9 1c 7f f3 d2 a7 d6 16 0d 63 43 f9 ff 00 d1 e7 93 fe 79 55 7f 01 f8 56 4b d8 6d 9e d6 6b 49 27 93 f7 7e Data Ascii: 7qV<zBoI/m'e*g6hPFlI?_Phw#4y]K%y5Kh$a{'ky=o$Zi5~9\|U&Go\2H(tl.d"KhawcCyUVKmkI'~
2025-03-14 18:07:34 UTC	8192	IN	Data Raw: a4 dd 4b e2 1d 3f f7 ef f6 4b db 59 3f 79 24 71 7f cb 44 ae da 98 8e 49 7b 8e e7 9b 4f 07 29 c5 73 a5 f7 98 7a 07 85 fc 35 a6 69 fe 44 3a 6f 99 1c 75 87 a6 f8 5f ec fa 8d f4 9e 77 97 1f fc b3 fe e5 6e 4f a8 6a 4f 2c 90 69 7a 6f fd fd 97 e4 d9 58 d7 de 3a d4 b4 5d 73 fb 2f 5b d1 fc c8 23 ff 00 96 96 31 6f f3 28 a5 3a b3 6f 5b b1 d5 a3 08 2e 64 ac 91 c6 eb 16 37 77 57 7f 6a d3 bc e9 24 b7 91 23 93 fb 94 f9 fc 19 3d c6 a1 f6 ab 5f fa f8 93 fb 91 ff 00 bb 5d 07 87 ef 27 f1 6f 8b 2e 60 78 7e cf 1f fc b3 b6 fb 95 d7 fd a6 3d 13 50 b6 d1 1e 1f dc 49 27 97 24 92 ff 00 72 b6 96 2a a5 3b 41 6e 67 1c 25 2a 91 e7 9e c7 1b a5 78 32 c2 5b 4b 1d 47 44 9a 68 ef ad e4 79 24 92 5f 9e a9 ea be 3a 9e e3 56 93 64 df b8 8e 4f dd c9 14 5b 3c c7 aa 17 da e4 fa 67 c4 2d 4a ca ca Data Ascii: K?KY?y$qDI{O)sz5iD:ou_wnOjO,izoX:]s/[#1o(:o[.d7wWj$#=_]'o.`x~=PI'$r;Ang%x2[KGDhy$_:VdO[<g-J
2025-03-14 18:07:34 UTC	8192	IN	Data Raw: 4a 30 48 b1 e5 6c f9 1f fe da 54 57 de 65 bc bb d2 6a 7f 9b b2 99 ba 39 61 ff 00 c8 75 95 b5 2a 4e c4 ff 00 bf 7b 4f 3f ce fd e7 97 fb ba a3 a5 5f 7d a3 4f 8e ea 7f dd f9 92 51 75 a8 49 6f 0e c7 87 cc 8e 38 ea 96 ab 6d 23 da ca e9 ff 00 2d 24 ad a1 17 6b b4 73 4a cd 1a 3a ab 46 f1 7e fe 6f 33 cc ff 00 c8 95 4e 49 ff 00 75 f3 fe f2 b1 ad da 49 7e 49 e6 9a 4f dd fe ee b1 3c fd 49 75 0f b2 f9 d3 49 6b e6 7e ee ba 60 93 dc e5 b3 be 87 5f 7d 2c 7e 4f 91 fb 99 3f 77 fb b9 2b 8d d7 16 07 87 c8 83 fd 64 7f ea fc aa e8 66 b6 8e e3 49 93 cf ff 00 ae 75 8b a5 69 91 db f9 9e 7c d3 49 fb bf dd d3 8d 48 ad 4d 27 4d ec 37 c3 f7 7a 6d ed a7 90 9e 76 f8 ff 00 d6 7f ec d5 d3 6d b4 4d 0f f7 ff 00 bc 83 fe b8 d7 3d e0 7b 68 e5 9a fa 79 e1 fd ff 00 fa bf dd 7d ca e8 f5 2d 31 Data Ascii: J0HlTWej9au*N{O?_}OQuIo8m#-$ksJ:F~o3NIuI~IO<IuIk~`_},~O?w+dfIui\|IHM'M7zmvmM={hy}-1
2025-03-14 18:07:34 UTC	8192	IN	Data Raw: fe 11 79 ff 00 77 04 72 7f a3 49 51 df 68 b3 da 7d 87 fb 47 4d 9a 38 3c bf dd 5e ff 00 cf 4d bf df a9 8c 79 1a 72 34 53 a9 67 08 95 f4 dd 43 c4 31 68 92 69 09 fb cf ed 59 7e d1 24 71 7f 7e bb cf 07 68 37 fa 3f d9 b5 47 bc fb 44 91 fe ee 48 e2 ff 00 6a b1 ae 1a 0f 0b cd 6d a8 c1 fe b2 48 fc bf fb eb f8 ab 67 c1 77 3f 68 b4 b9 df 34 de 7c 9b 3f fd 9a 9a 92 73 8f 34 55 93 fc 49 94 95 39 72 b7 73 b2 d4 af 20 9a 19 26 b5 87 cc 92 4f f9 67 5e 77 aa f8 96 4f 26 2d 2f 51 86 19 20 f3 7c bf fc 7f f8 ab 56 d6 59 f4 fb 4b 6b a8 2f 26 f3 fc cf 33 cc 97 fe 59 a5 72 df 10 bc fb 7d 5b ed 50 7f ab 93 fe 5a ff 00 bd 45 1c 3c 39 ac cc dd 69 5a c8 cb 8e f2 7b bf 11 5c c0 93 79 92 49 27 97 27 fd f7 5d 44 0d 7c 9f 69 b5 83 ce 92 39 3f d5 ff 00 7e b8 3b 1b 9b 4d 3e ee e6 eb c9 Data Ascii: ywrIQh}GM8<^Myr4SgC1hiY~$q~h7?GDHjmHgw?h4\|?s4UI9rs &Og^wO&-/Q \|VYKk/&3Yr}[PZE<9iZ{\yI'']D\|i9?~;M>
2025-03-14 18:07:34 UTC	8192	IN	Data Raw: 76 f3 dc d8 69 f6 97 37 57 57 91 5c 7f cf 48 e2 fe ff 00 f0 fc b5 d1 78 56 5d 17 55 b4 fe db 82 6b 4b 98 e3 8f fd 67 fc f3 ff 00 62 a2 9d 49 d3 7c d6 b9 ac a1 4e 77 4c f0 cf 0c c1 1f ee e1 9f f7 77 de 5f 99 e5 fd fa ec 27 b9 d3 7c 2f a7 cb 7b 75 0c de 47 fa b9 24 8b ef d6 8c 9e 1a d0 93 c4 df 6d d3 e1 8a 39 3e 7f 33 fe 99 bd 73 ff 00 16 2f 2d 2d 3c 1d fd 88 f3 43 71 24 92 24 72 7f 7e 3f 9e b7 94 bd bd 68 c3 5d 7f af c0 51 a6 e9 51 94 ae af 63 a6 d2 b5 0b bd 63 c0 f2 5d 5e ff 00 a3 c1 a8 c9 e5 c7 fb 9f df 7d 9e b8 af 8b de 00 d3 74 fd 26 c6 0f 0f 4d 2c 73 ff 00 ac f2 ee 7f e5 a2 7f 13 57 a3 47 a7 c1 a5 69 36 3b e6 9a 48 e4 b6 48 e3 8e 5f f9 67 5e 7d f1 b3 c5 57 fa de ad 6d 6b 6b 67 e5 ff 00 65 7f cb 48 a2 ff 00 59 5a 61 63 35 34 e9 bb 6b 73 9b 15 28 38 35 Data Ascii: vi7WW\HxV]UkKgbI\|NwLw_'\|/{uG$m9>3s/--<Cq$$r~?h]QQcc]^}t&M,sWGi6;HH_g^}WmkkgeHYZac54ks(85
2025-03-14 18:07:34 UTC	8192	IN	Data Raw: e5 9c 7f bc a8 fe 1c ac 77 1e 26 b1 82 7f dd a4 92 7f c0 2b b2 eb d8 36 91 c7 1a 6b eb 51 52 93 77 3d 43 c3 3a 05 da 43 1e a3 f6 cf b3 c1 27 ee e3 8e 28 bf f1 ea bd 3f 86 64 5f f4 af f8 f9 8e 4f f9 69 2f fc b3 ad cd 1d ad 3e c9 be 7b c8 6d a3 8e b1 b5 9f 1c 69 3a 7c 3f 65 fb 1c b2 49 1c 9f f0 0a f9 8f 69 88 a9 37 c8 ae 7d 4c bd 8d 35 ef 68 70 7e 2e f0 3d df f6 4d b2 41 e4 ff 00 69 7d a5 e4 93 f7 df c1 fc 35 cf 78 75 a7 b7 d4 2e 74 fb d8 7f d5 ff 00 ac 8f ee 57 a7 3d cc 1a ad dc ba be 9d 79 f6 78 ec ad be d1 73 f6 ef f9 66 9f de 5f ad 79 2e b1 e3 6d ff 00 69 8e 08 7c c9 24 91 ff 00 79 27 f7 2b db c1 4f 11 5a 0e 0d 5e df 81 e0 e3 23 85 a7 28 d4 83 b7 ea 5a f1 55 e4 1a 94 df bf 9a 18 e3 8e 3f 2f fe ba 6d ae 4a 06 d9 37 fd 34 ab f2 45 bf cb ba 49 bf 79 e5 ff Data Ascii: w&+6kQRw=C:C'(?d_Oi/>{mi:\|?eIi7}L5hp~.=MAi}5xu.tW=yxsf_y.mi\|$y'+OZ^#(ZU?/mJ74EIy

Timestamp	Bytes transferred	Direction	Data
2025-03-14 18:07:31 UTC	375	OUT	GET /th?id=OADD2.10239354491532_17IT0YRW2RNM8C8YH&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-14 18:07:32 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 500116 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 4E6595497D14487CA394650406BFB70B Ref B: EWR30EDGE1119 Ref C: 2025-03-14T18:07:31Z Date: Fri, 14 Mar 2025 18:07:31 GMT Connection: close
2025-03-14 18:07:32 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 35 3a 31 33 20 31 38 3a 30 31 3a 33 33 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.4 (Windows)2023:05:13 18:01:338C
2025-03-14 18:07:32 UTC	16384	IN	Data Raw: 69 3c e1 d2 a9 a8 7e f5 22 64 50 05 85 90 1a 91 0f ad 41 11 cb 55 84 5a 00 76 c0 69 92 45 9e 94 f5 c8 eb 4a c7 14 01 55 d2 45 e9 4f 84 b9 a9 19 f3 42 03 40 0a c1 aa 19 17 7f 5a b3 51 c8 a0 b5 00 56 f2 41 fe 2a 54 41 fd ea 93 6f 6a 8b 3b 1b 8a 00 2e 03 af 5e 95 59 d4 6e c8 ab 2d 36 57 06 a2 60 0d 00 43 b6 93 06 a5 db 48 a3 14 01 1e 28 c5 49 8a 36 d0 04 78 22 9c b4 ed b4 6d a0 04 5c 1e 94 ac 94 aa 31 d2 97 34 01 1b 26 29 bb 6a 7a 36 d0 04 1b 68 db 53 6d 14 6d 14 01 0e da 5d b5 26 dc 51 b6 80 23 db 46 da 93 6d 2e 28 02 2d b4 6d a9 36 d1 b6 80 23 db 49 8a 97 6d 1b 68 02 2c 52 ed a9 36 d2 ed a0 08 b6 d2 aa d4 98 a3 14 00 cd b4 b8 a7 e3 da 8c 7b 50 03 54 52 a8 a7 62 97 1e d4 00 da 77 cd 4e a6 b0 a0 04 6a 63 28 a7 e0 d1 b6 80 22 d9 4b b6 a5 db 52 24 59 eb 40 15 Data Ascii: i<~"dPAUZviEJUEOB@ZQVA*TAoj;.^Yn-6W`CH(I6x"m\14&)jz6hSmm]&Q#Fm.(-m6#Imh,R6{PTRbwNjc("KR$Y@
2025-03-14 18:07:32 UTC	16384	IN	Data Raw: 7f ac db 86 5f bd bb dc 7b 54 09 b0 ae 1b e6 ff 00 d0 96 a7 98 a4 b2 2a c8 bb 4a ae 15 bf 8b f1 a6 2a 65 94 05 db 22 af cd bb f8 a9 69 60 11 18 c6 ae 3e f2 ff 00 77 fb d5 32 c9 85 c8 5d b2 2f 34 2c 2f bb 32 54 57 31 3c 32 2f a3 7d d6 a0 0b 76 13 46 f2 2c 66 5d a7 ff 00 1d ab 72 2a 9d a7 f8 76 ff 00 0b 73 59 70 8c c9 9d bc f5 ab 92 6f f2 d6 5e d2 a9 db fd 6a 1c 51 51 90 eb 85 48 d9 90 7d f5 fb db a9 19 11 e3 e7 f8 bf 8a 8b 72 82 6f de 7c cb c6 ef a5 5f 4b 58 65 91 84 52 6e f9 7e 5f f6 85 43 76 29 46 e6 7a c5 f2 ec ed ba 95 a1 f2 d5 b7 7f c0 6b 49 ac 24 0c af 1f cd 53 c3 1c 52 79 90 5c 2a e5 9b e6 6d df 77 de 8e 6d 03 93 53 32 c6 39 3c c5 4f bb bb 9f 99 6a c7 ef 12 65 01 da 31 fe ca d5 99 61 92 0d ce 92 f9 b1 2f 1e 62 ff 00 0f d6 a3 b6 28 2e 31 32 b4 87 6f Data Ascii: _{TJe"i`>w2]/4,/2TW1<2/}vF,f]rvsYpo^jQQH}ro\|_KXeRn~_Cv)FzkI$SRy\mwmS29<Oje1a/b(.12o
2025-03-14 18:07:32 UTC	16384	IN	Data Raw: 47 77 3c 92 48 cf 24 ac c5 98 96 66 6d dc fb 9e f5 13 36 1a 40 3f ba 36 d2 63 7f 5f 97 6d 39 76 1e 7b d7 6a 89 c6 e5 71 91 93 b6 37 f9 a9 b3 32 09 b8 6e 3a b5 0b 21 db b3 75 46 e4 f6 f9 8b 51 72 44 de 5a 3c 94 5f 5a 6a 94 ea bd 5a 89 3f d5 a8 dd bb fb aa bf c2 6a 25 e1 5b 3f 2e ea 96 49 33 19 1d b7 aa b6 37 7f 15 3e de c6 f2 ed 5b ec b6 d2 4a 23 6f 99 97 ee af d4 f4 ab 1a 56 8f 7d 7f f3 88 bc a8 97 ef 49 23 04 5f cc d6 f6 fd 0f 4d b3 8a d2 e7 5f f3 e6 89 4f ee a2 52 c8 b9 fc 83 35 72 56 c4 28 be 58 ea cd a9 51 e6 d6 5a 23 09 74 ab 48 66 51 aa 6a 71 c4 15 7f 78 b0 2e f3 1f e3 d0 9a bb 67 69 a7 bb 2b 69 7a 64 f7 5f de 9e e7 ee 75 e3 af 15 7e c6 6f 3e e9 5f 46 f0 f3 4b 33 29 1e 6d f2 87 6f aa af 41 56 ee 74 9d 55 d6 39 75 fd 5d 6c 63 93 8f 2f 77 cd c7 fb 2b Data Ascii: Gw<H$fm6@?6c_m9v{jq72n:!uFQrDZ<_ZjZ?j%[?.I37>[J#oV}I#_M_OR5rV(XQZ#tHfQjqx.gi+izd_u~o>_FK3)moAVtU9u]lc/w+
2025-03-14 18:07:32 UTC	16384	IN	Data Raw: 69 5b 8a 04 34 20 1c d2 37 a5 39 8d 27 56 f7 a0 77 42 30 c7 06 93 6e 69 ea b9 fa d4 ab 18 1d 68 1f 29 0a a9 35 2a 27 cb c7 fd f5 4a c4 2d 1c b7 27 a5 48 d0 8e 47 e1 42 a9 3d 7a d3 c4 63 ad 3d 54 77 a0 63 15 69 18 67 ad 4c d8 a6 e2 95 c0 62 a5 2b 60 52 b7 1c 54 8a 83 6e 4d 21 a5 72 3a 31 9a 7b 2e 69 f1 47 bb fd aa 68 2c 36 38 49 6f 9b e5 15 33 28 0b 8e d4 ec 62 99 2b 63 a7 fd f3 56 31 77 63 fd 9a 68 60 57 3d a9 88 a5 db 9f 98 ff 00 76 9d 8d ad 8f bc 7f d9 a5 70 24 53 b7 e9 48 ed 9f a7 fb 34 6c 27 6e 7a d0 ce 11 bf bc 7f f4 1a 57 b9 43 b2 04 6b 95 db 4e 44 2d fe c8 fe ed 11 c7 9d af 25 3e 66 da bf 27 4f ef 54 97 6d 01 d8 2f 03 fe fa fe ed 46 9e df 31 a7 c7 19 93 af cb 1d 39 15 17 bf 14 0d 26 22 28 0b bc ff 00 fb 54 92 28 f2 d8 8e b4 4d 26 78 ed 4a a3 7a af Data Ascii: i[4 79'VwB0nih)5*'J-'HGB=zc=TwcigLb+`RTnM!r:1{.iGh,68Io3(b+cV1wch`W=vp$SH4l'nzWCkND-%>f'OTm/F19&"(T(M&xJz
2025-03-14 18:07:32 UTC	16384	IN	Data Raw: 9d b5 cc 9f 2c 4d 9f dd e7 ef 46 31 d0 0a db f8 6a da c5 ed c5 e5 a7 8a 76 ac 2b c5 b3 2c 9f 2e 49 e3 03 ae 7d 6b e7 de 65 98 46 6f fd a3 5e cf 43 e8 23 97 e0 9d a3 ec d1 cc 78 87 c1 da a6 9b 1a dc c4 cb 79 6d 27 dd 68 5b e7 5f 66 4e ab 58 52 5b 5c 23 28 30 4f 1f fb d1 91 5e a9 7c fa 60 d6 2c ed 26 d4 e0 6b 9b a9 19 22 b2 f3 10 cc c1 7a 1d cb 8d b9 ff 00 6b 9a d4 b7 8f 4e 48 d4 99 25 dd bb 2d 17 99 b9 54 76 07 3f c5 5d f0 e2 7c 4d 18 a5 5a 95 df 7b d8 e1 a9 90 d2 94 9b a7 2b 2f bc f1 5c 22 70 dd 68 dd ff 00 7d 57 b4 5d 69 de 1d ba 8d 60 bb d3 e2 6f de 6f dd e5 8e a7 8e a2 a9 dc 78 1b c2 d7 12 48 5a 3d a7 fb b0 ce 46 df a7 5a ec a7 c5 98 47 fc 48 49 7e 27 24 f8 7e bf d8 9a 67 92 2f dd e6 9d 8f 6a f4 c9 be 1c e8 6f cc 17 d7 d6 cb fc 2c db 1d 57 f1 aa 57 5f Data Ascii: ,MF1jv+,.I}keFo^C#xym'h[_fNXR[\#(0O^\|`,&k"zkNH%-Tv?]\|MZ{+/\"ph}W]i`ooxHZ=FZGHI~'$~g/jo,WW_
2025-03-14 18:07:32 UTC	16384	IN	Data Raw: 0c db 7f bb 5b 45 ca d6 01 97 13 44 cd fe 8c ac b1 2f 0b fd ef c6 92 e9 62 92 18 23 b6 69 17 72 e6 55 dd fc 7e be f4 cb e8 0c 4c b1 c4 cc df de 65 6f bd 53 d8 5b 49 27 ee df 6e 79 0d fd ee 3a d5 a4 f5 d0 0a 6d 6d 8b 86 43 b9 82 ff 00 c0 6b 59 44 76 76 f1 bd b4 ad e7 6d c6 ed bf 32 e7 b5 36 e6 47 8e 35 6b 6b 65 8c 7d dd cd f7 b3 eb 9f 4a cf 69 1d e4 6f 9b 71 6f e7 49 be c0 49 7d 70 6e 23 68 93 f8 7f 85 be f3 1f 7a 86 ce c6 e6 7b 85 44 8b 76 e6 f9 77 7f 15 5c b5 b6 47 65 95 e0 69 0b 2e 15 7e f7 22 af 23 2c 36 ea f2 af ee ff 00 85 6b 36 f9 40 a3 25 a8 b6 91 52 e1 56 36 5e 37 46 bb 97 f3 aa d7 12 ce 61 68 63 da c9 bb 3b 97 ee fe 34 eb eb b4 7b a6 f9 24 65 fe 15 6f 95 57 eb eb 55 ed de 58 e4 de 3e eb 7f 0f f0 e2 9d ba 80 fb 68 7c d6 d9 23 6e 8d be f7 d6 a5 58 Data Ascii: [ED/b#irU~LeoS[I'ny:mmCkYDvvm26G5kke}JioqoII}pn#hz{Dvw\Gei.~"#,6k6@%RV6^7Fahc;4{$eoWUX>h\|#nX
2025-03-14 18:07:32 UTC	16067	IN	Data Raw: 62 b4 6e 6c 2f b5 0f f4 8f ec e6 89 a2 89 5e 48 e5 f9 9a 4e 76 ee 08 79 1f 85 5c 7f 01 dd 4e bf 69 48 3e cd b6 2d ed 24 0c 1b 77 aa ed ce 3a 56 6e 51 6b 54 5f 25 44 bc 8c bd 3e cf fb 62 e2 da d3 4f b6 58 1e 5e 1a 45 67 eb 8e 4b 7d 6b 76 4d 1a fe d2 48 e2 d2 ec e0 8e ea d5 b1 3f 9b 39 75 98 74 c6 d6 e8 09 ec 45 51 d3 f5 3f 0f 69 f6 b7 43 44 b9 b9 69 6e 54 c2 cd ff 00 2c d7 b6 36 82 3e 6f 7c f1 56 1f 56 bc bf 6f 36 09 ed 9a e2 35 d9 3a dc b6 c9 a6 e3 80 18 f3 f8 d6 55 1b 4b cc 7c d1 4b cc cc bd b2 bd 9a e9 ae 24 b3 f2 fe 6f 9a 0f 2f 6a 46 47 18 0b cf 5f 6e 2a 7b 3d 3c cc b2 7f 6a 3a d8 af f1 4f 34 68 cd fe ee 01 c8 15 17 8a 75 7d 52 08 62 8d 96 e6 c4 f1 bb a3 ee 04 71 f3 ae 6b 92 be 7b fb 89 be d0 8c b7 31 33 7d ef 3f 73 36 7a 8c 1e ff 00 5a d6 95 39 d4 8a Data Ascii: bnl/^HNvy\NiH>-$w:VnQkT_%D>bOX^EgK}kvMH?9utEQ?iCDinT,6>o\|VVo65:UK\|K$o/jFG_n*{=<j:O4hu}Rbqk{13}?s6zZ9
2025-03-14 18:07:32 UTC	16384	IN	Data Raw: b7 ba b6 ff 00 49 52 27 5d a0 2c 80 ff 00 7b 18 ae 77 5e f1 5e 95 a5 5b b4 b1 df 49 75 74 af 85 8a 09 cb 6e f5 24 f4 c5 73 d6 7a dd d6 a9 aa 47 3d c4 5b a1 66 f9 76 b1 3b 81 fc b9 15 ad 1c 2e 27 59 a7 ca 85 cd 0b d9 33 b0 d2 a2 82 48 5a db cf 68 66 8a 26 11 aa c8 92 6e 75 3e bc 00 a7 d2 99 aa 2e b1 34 6b 24 90 6e 55 c3 33 79 7b b7 63 b1 1d 71 f4 aa 9e 1d 68 da 4b 88 92 29 e0 dc bb e4 55 c7 41 ec 47 3f 9e 6b 7b 4f d4 b5 04 58 20 8a cf cc 97 60 dd ba 3f 96 48 fb 1f 5a d2 ac e7 7e 64 6f ec ef 1d cc ab 1d 19 12 66 bf b8 89 b7 2e 42 db 2c ff 00 23 16 1c 7c 98 07 8f 4a 7b 5d cf a5 d9 b0 32 dd ac 8d fe ad e5 f9 fa f6 2b d0 57 4b 63 61 61 77 79 73 2d 97 9f e6 b7 fc b5 5b 9d ab 8f 65 6f bb 8f d6 a3 93 44 bd d3 db 6d bd f7 f6 83 49 92 b0 dc ae ed a4 ff 00 b4 7d 2b Data Ascii: IR'],{w^^[Iutn$szG=[fv;.'Y3HZhf&nu>.4k$nU3y{cqhK)UAG?k{OX `?HZ~dof.B,#\|J{]2+WKcaawys-[eoDmI}+
2025-03-14 18:07:32 UTC	16384	IN	Data Raw: 05 c5 d4 6f 1c f3 ac b0 60 ca bf 77 cc 23 b1 a8 50 8d fc cb 8c 9c 76 35 21 bf 28 ab 01 96 38 e3 f3 32 ad ce d6 fc f9 06 b4 61 99 6e 15 62 79 e4 80 ed 3e 5b 47 8d b9 fc 6b 9c ba 12 89 bc c9 22 db e6 36 56 39 57 73 37 b8 a9 34 9b b4 59 23 96 55 8d 55 58 ee 8d 98 aa 49 e9 cf 6a 97 49 d8 49 b5 b9 d6 47 29 7b 59 92 e2 e6 49 15 63 21 b7 7d e6 f5 fc 7e 95 81 a8 78 9e 1b 35 8c 69 fa 56 a9 73 b7 01 bc cb 42 b1 fd 79 19 35 6a e7 55 b3 9e 4d 96 db a0 1c 6d 5f 71 e9 57 2d 7c 41 73 67 22 95 be 69 43 2e 19 59 b9 8f de a2 31 4a fa 5f cb 62 a4 94 b6 65 0d 37 5e bd b9 9b cb 8a 26 b3 96 46 ff 00 96 b6 c5 16 34 f5 04 0e bf 5a b5 05 bd de a1 71 b6 7b cd 53 1e 6e 3f 71 39 50 de e0 8e 31 5b 97 1a 97 da 34 f9 0c 93 f9 8b 3e 36 b2 e3 72 e3 a8 3c 71 4e d0 dc 69 eb 23 59 df 2a f9 Data Ascii: o`w#Pv5!(82anby>[Gk"6V9Ws74Y#UUXIjIIG){YIc!}~x5iVsBy5jUMm_qW-\|Asg"iC.Y1J_be7^&F4Zq{Sn?q9P1[4>6r<qNi#Y*

Timestamp	Bytes transferred	Direction	Data
2025-03-14 18:07:32 UTC	346	OUT	GET /th?id=OADD2.10239354491534_1O3M85NN5LRG0CPTI&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-03-14 18:07:32 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 449789 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 34A8086386A744B289FEE800F3A53540 Ref B: EWR30EDGE0714 Ref C: 2025-03-14T18:07:32Z Date: Fri, 14 Mar 2025 18:07:32 GMT Connection: close
2025-03-14 18:07:32 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 35 3a 31 33 20 31 38 3a 30 32 3a 30 37 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.4 (Windows)2023:05:13 18:02:078C
2025-03-14 18:07:33 UTC	16384	IN	Data Raw: ad 4d 6a b1 86 df 70 be 64 7d 19 bf 89 69 b6 af f6 7b 8f 30 2a c8 bf 77 e6 f4 aa 33 d1 ee 47 82 ca bf 2f ca bf c5 4c e7 bb 71 56 e6 31 86 90 86 dc cd fc 35 12 20 68 d9 d1 59 95 7e f5 32 5a 05 5c af 0d 4b 0e d6 6d 8f fc 54 8a 88 ca a6 2f f8 12 ff 00 76 a5 58 4b f2 9f 2b 2f f1 53 41 61 2d df 64 9b 3b 6e f9 6a f2 ae f8 5b 2b f7 7e f7 d6 aa c2 d1 37 c9 2f ca dd 3f dd a7 6c 11 7d c9 77 7f ec d4 9e e5 26 4f b2 36 8d 42 7e ec ff 00 75 a8 8c 4a 8c d9 fe 16 fb d4 eb 55 de cb 8f fb e5 a9 f2 23 ee ca 74 ff 00 6b fa d6 72 dc b8 ec 3a d6 62 92 37 f0 ee fb cb fc 35 2c db 1f e7 db b7 fd da 8a 3d 92 70 df 7b 77 de ed 53 2a 95 f9 5f a5 43 b2 63 19 18 25 7e 75 e3 fd 9a 67 93 2f 98 c7 72 ed 6f e1 fe 2a 9d 95 37 7e ef 76 2a 45 1b d7 8d bf ed 6d fb d4 f9 c9 e4 2b a2 8e 8b f2 Data Ascii: Mjpd}i{0w3G/LqV15 hY~2Z\KmT/vXK+/SAa-d;nj[+~7/?l}w&O6B~uJU#tkr:b75,=p{wS_Cc%~ug/ro7~vEm+
2025-03-14 18:07:33 UTC	16384	IN	Data Raw: da 37 e1 e4 da 7f da 8c f7 71 36 df 9a 29 23 f9 b3 e9 9a 9a b4 e7 0d 5a 0a 55 61 2d 2e 7a 85 f5 bf 94 de d5 5d 23 df d3 ad 79 85 e7 ed 33 e0 39 db 62 59 ea 0d 16 ec 34 ac a1 55 71 5c 3f c5 0f da 7e da 3b 76 b7 f0 2e 98 d1 c9 ff 00 3f d7 cb f7 7f dd 4f f1 a2 9d 39 c9 d9 20 a9 52 11 d6 e7 b9 f8 cb c4 1a 1f 85 b4 79 75 1d 7f 50 82 ce 38 d7 2a b2 37 cf 27 b2 af 52 6b e6 1f 89 df b4 6f 89 2f af 9a 3f 09 ed d2 2c 55 b1 1c 92 46 1e 69 3d db 3c 0f a5 78 e7 8b 3c 4d ac 78 8b 54 7d 4f 57 be 9e ea e6 46 2c cd 2b 17 db f4 f4 15 87 71 2b c8 bc 36 ea f4 29 e1 e3 0d 65 ab 38 2a 57 72 d1 6c 74 1e 2d f1 5e b3 e2 ad 71 b5 0d 77 50 92 f2 ea 4e 1a 49 3e ea 81 d8 01 c0 15 90 d7 30 a4 df 3f ef 02 ff 00 0f f7 ab 3d 9c aa e7 fe fa a3 72 7c ae 3e 6d bf f8 f5 6d ca 8e 7e 7d 4e e7 Data Ascii: 7q6)#ZUa-.z]#y39bY4Uq\?~;v.?O9 RyuP87'Rko/?,UFi=<x<MxT}OWF,+q+6)e8Wrlt-^qwPNI>0?=r\|>mm~}N
2025-03-14 18:07:33 UTC	16384	IN	Data Raw: 94 3c 60 fc c2 91 93 0b 91 4f 42 75 b0 f8 ae 09 eb 44 8c 1b ef 54 3b 4f 51 4e dc 7a 3a d1 64 98 b9 98 f8 c9 1f 4a 95 8b 6d c8 aa d1 b1 1b 96 ac db e0 f5 a1 82 1e bc d2 63 e6 e3 a5 3d 54 63 de 9d e5 ed 5d fb b7 06 ff 00 c7 6a 79 8b 13 3f 2d 28 6c f1 4d 64 23 76 3a 50 a3 6b 55 05 ec 49 b1 7a 8a 91 32 bc d4 1b bd 69 ca ce bf 4a 5a 81 32 c8 77 73 4e 50 8f c8 6a 6a 94 3c 15 a7 20 d9 bb 1d 2a 58 0a bb d5 b9 6c d4 8a c0 f4 a8 f1 9e 3e ed 39 90 85 f7 a4 35 72 4d c3 6d 27 cb fc 34 89 fe dd 3b 1e 94 0f 71 eb cf dd a5 c6 7a 54 7d 69 d1 9c 71 40 ef a8 ab 90 df dd a9 63 6f 57 a6 af cd d6 93 66 29 6e 32 75 e2 9e af 9e b5 14 79 3b 6a 44 e3 ad 40 12 e4 d3 94 e6 a2 53 dc 53 d5 80 6a 00 7a af cd 4f 55 34 d4 20 d4 1a a6 a7 a7 69 96 ed 2d fd dc 16 c8 bf f3 d1 b6 b5 17 4b 71 Data Ascii: <`OBuDT;OQNz:dJmc=Tc]jy?-(lMd#v:PkUIz2iJZ2wsNPjj< *Xl>95rMm'4;qzT}iq@coWf)n2uy;jD@SSjzOU4 i-Kq
2025-03-14 18:07:33 UTC	16384	IN	Data Raw: 6e 3d 18 05 f9 ff 00 87 fb b5 5e e2 5d b2 60 36 e1 4d de 42 ec cf f1 65 a9 7c d5 f2 fc b4 55 56 6f bd fd e6 fa d4 f2 8d 44 62 49 22 ee 39 fb df de 5f e5 4c 55 cf 5d cc 6a 46 07 e5 c3 6d 3f ec d1 93 d0 6e c7 f7 aa 8a 1b b0 95 c9 6d b4 ec 44 3a 32 b3 53 7e 70 df 3b 54 37 03 63 70 aa d4 01 24 8e 9f 28 db c3 7d da 86 e3 09 1e ed fb 89 fe 1a 8d a4 93 6e 36 ed a8 db 78 6d e7 ad 54 47 b0 ab 21 0b 8d cd 49 b8 ed e3 f8 bf 8a 91 9b 7c 8d 85 db fe ca d2 aa 85 e7 bd 51 17 05 07 f0 a9 a3 57 2b 8a 21 f2 fc b6 ce e6 3f c3 b6 9f 6b 1e d5 62 ec cc 3f f1 da 4c a4 d8 8e 7c b5 57 29 b9 57 a5 0b e6 cb f3 c9 d1 be ea d4 8d 04 af cf ca df ec ff 00 76 a4 02 40 dc 2e e6 fe f5 43 96 82 ea 31 13 c9 5c 1f e2 fb db a9 14 87 e0 55 a1 07 98 ab e6 7d ea 7b 5b a4 5c b3 2e 56 a3 99 0e e8 Data Ascii: n=^]`6MBe\|UVoDbI"9_LU]jFm?nmD:2S~p;T7cp$(}n6xmTG!I\|QW+!?kb?L\|W)Wv@.C1\U}{[\.V
2025-03-14 18:07:33 UTC	16384	IN	Data Raw: db 1b 7d dd d4 c0 49 fc d2 b8 d9 f3 37 dd a8 90 18 db 12 2f 98 7a 7e 35 6a 36 90 32 bc 6a cc 59 be 5d d5 23 40 89 27 ce db be 5f bd 4e ea 20 53 f2 91 b8 9f 6b 32 ff 00 0f f0 ad 39 20 f3 17 e5 da a3 ff 00 1d ab 5e 5a 33 7d de 16 9b 21 2c ac 13 e6 5f e1 5a 87 26 c0 b3 34 b6 ff 00 65 54 f2 3f 7d 1c 61 23 93 f8 54 56 6d c2 49 e6 6f db b9 bf da a9 55 36 f0 5b 8a 96 38 a5 95 b6 46 bc b7 f1 35 0e 4d 9a 15 d1 42 b2 f9 8d e6 37 f0 ad 4f 1a 90 df 3a f9 7b 7e f6 ef e2 a2 45 8e 05 69 3f 8b f8 bf c7 34 d5 23 6a e5 9b 3f ed 54 81 2a e4 f0 19 57 75 0e c8 bb 8b b6 ee d5 04 d3 ec e0 a6 e1 fd da 86 34 4f 98 ba f9 6b fd d6 6a 00 9d ae d8 b6 c4 dc dd a9 d6 ee 21 56 77 f9 9b fb cd fc 35 5d 4a 22 e7 e5 8e 3d df f0 2a ad ba 59 e4 6f de ed 55 fb aa de 94 25 d8 0b 13 5e ed 66 f2 Data Ascii: }I7/z~5j62jY]#@'_N Sk29 ^Z3}!,_Z&4eT?}a#TVmIoU6[8F5MB7O:{~Ei?4#j?TWu4Okj!Vw5]J"=YoU%^f
2025-03-14 18:07:33 UTC	16384	IN	Data Raw: 5c b8 8f 64 68 bf 2d 49 0a b8 65 0e ac de 63 66 9b 08 5f be 57 6e ef ba ab 52 47 79 24 12 79 90 2a b3 7f 0e ef e1 aa 43 64 12 23 a5 d7 94 62 6c ee f9 56 a4 f2 1c 46 de 63 33 37 fe 3b 51 c9 77 71 25 d6 f9 67 69 e5 6e 16 ad 26 03 29 b8 f9 47 f7 bf bb 44 84 43 34 3b d7 2c ad b9 57 e6 fe 15 a4 b2 8e 48 64 68 e4 da cb d7 f7 75 25 e3 48 d1 e2 06 69 17 f8 77 7a 55 68 bf 77 1b 37 cd fe d3 7f 15 2e 80 4a 90 c7 2c cc 43 37 ee da ac c3 12 aa b0 db b8 ff 00 7a ab 44 fb 79 75 68 d5 bf 8a ac 2c 92 89 36 a3 7c bb 7e 5d df 7a a1 dc 07 e3 6a f2 db 45 2c 80 18 f8 97 69 ff 00 66 98 c5 d9 94 1d bf f0 2a 47 f9 63 6f 9b ee fd da 90 19 18 80 36 c3 2c 8c 7f d9 f9 a9 ff 00 67 69 39 dd c7 f7 68 b7 74 55 fd dc 4c c7 fb d5 22 99 3c b5 05 bf e0 35 a0 08 98 85 57 7a ee 2b 4b f6 c7 91 Data Ascii: \dh-Iecf_WnRGy$yCd#blVFc37;Qwq%gin&)GDC4;,WHdhu%HiwzUhw7.J,C7zDyuh,6\|~]zjE,ifGco6,gi9htUL"<5Wz+K
2025-03-14 18:07:33 UTC	16067	IN	Data Raw: aa 1f 63 5a 46 9c 1c af d4 53 94 a2 b4 d5 1b 5a 4f 89 65 fe c9 8b 4f b0 b6 8e 35 b8 6f dc f9 9f 22 5d 3f 7c 11 f7 5b eb 53 5b c1 e1 ed 03 5e 92 f2 e2 f2 4d 54 f9 60 ac 1a 86 5b cb 72 70 46 17 f8 85 65 78 4e f2 5d 2b 7d c4 76 32 dc da 4a a5 25 da bb 96 3c f1 b9 18 f1 9f 6e f5 6f 56 d3 6d da c6 49 e1 96 36 5f 2d 4d b4 f6 9f 34 72 0c 7c cb 20 3c a3 d7 0d 6c b6 84 a4 ee ad 7e ab a9 71 af cf 4d 59 5d 9a b7 12 3d e5 9c f6 cf 79 22 d9 48 ab e5 6e 5d ab 0e 0e 46 77 73 c7 b5 6c fc 28 d6 ae 74 bd 3f c4 76 d0 6d d4 2f ad b4 f3 7b a5 c8 d1 ed 49 02 be 26 88 9f ee ba fa f7 a6 c0 74 ad 23 c0 f6 be 20 bd d2 a3 ba 17 32 88 24 82 56 3b a1 c0 ca 32 ff 00 79 48 ef 53 e9 7a c6 97 6d a5 f8 a3 50 d2 d9 71 fd 8d 10 db 14 67 f7 65 e6 e8 73 f4 af 36 35 aa 53 c4 ca 8d 9f 2f 47 d0 Data Ascii: cZFSZOeO5o"]?\|[S[^MT`[rpFexN]+}v2J%<noVmI6_-M4r\| <l~qMY]=y"Hn]Fwsl(t?vm/{I&t# 2$V;2yHSzmPqges65S/G
2025-03-14 18:07:33 UTC	16384	IN	Data Raw: f7 63 5c a2 63 db d6 ba af 08 e9 be 0a d6 ae 23 d2 af 6c ee 62 69 d7 62 ce b2 1d dc 56 ac 3a b6 9d e2 2b a5 b4 f1 0c 10 5a 19 65 53 0d ce dd 8b 1e 06 36 ed 1f c2 47 7a ad 67 a6 78 61 fc 4d 3d 8e e9 22 b4 95 84 71 4f e6 7f c7 bb e7 ae 47 de 5a 9a d8 88 62 68 b8 54 52 84 fc bf 3b f5 f4 2a 12 9c 67 75 aa 39 ff 00 16 69 16 5f 0d fe 23 69 5a a6 97 79 f6 e8 60 b9 8a 7d bb 83 32 85 71 b9 4e 3d ab d1 7c 7b e2 3d 23 52 f1 76 af 2e 99 3c 9a 95 b5 d4 ab 36 8d 3a a9 df 6e 0f ce 53 07 ef 00 78 ae 23 e3 a7 82 ad 3c 3b a5 ac 90 5f 49 25 d4 17 22 39 62 97 fe 79 b0 e1 b3 fc 59 ab 5e 05 36 0b f0 86 db 58 be d3 ee fe d3 63 78 d6 50 5f 47 27 ee d8 81 bd 61 23 fb c3 d6 a5 51 8c f0 e9 73 73 c9 69 77 a3 67 75 db 8b 56 b1 dc 45 71 79 ad 78 6e 7b f7 d4 24 8f 52 89 44 6b 05 cc 1b Data Ascii: c\c#lbibV:+ZeS6GzgxaM="qOGZbhTR;*gu9i_#iZy`}2qN=\|{=#Rv.<6:nSx#<;_I%"9byY^6XcxP_G'a#QssiwguVEqyxn{$RDk
2025-03-14 18:07:33 UTC	16384	IN	Data Raw: 7b 3a 48 5e d9 b7 1e 3a 73 b8 28 fb b8 c5 63 59 93 7d e1 1d 36 e6 d9 af a1 d3 f5 2d 52 6b 58 2d 27 97 cc fd da 01 9d 84 7b d6 95 af 81 b4 79 36 bc 9b a0 86 d6 7c cf e7 c9 b8 4c 7f 0c 7c be d5 e5 62 73 3a 54 63 c9 8c 5c ab d2 f7 f2 2e 55 1a 96 91 d4 67 89 bc 6b 67 ab de 68 f2 e9 9e 38 5b 11 3b 34 6d 69 15 a3 b7 d9 5c 7d d1 23 11 86 0d f9 0a e5 3f 68 0d 3b c4 1a 35 bc 72 eb 12 cf 24 3a 86 d7 8e 59 60 08 d2 73 f7 b6 8e a3 dc 56 87 c6 af 0e 68 9e 15 87 fb 52 dd 96 3b 5b ac 7d 92 d2 3c 7e f0 9f bd cf a0 af 2e b5 bf f1 1f 8f 35 88 34 58 1a f2 f0 c7 f2 2c 6d be 6f b2 c6 3a 95 1c e0 0f 4a f5 72 f7 81 a9 42 38 aa 49 28 db b2 5f 89 84 aa 39 49 c5 a3 d2 ad d3 fe 16 2f c0 bf 0d 5a 40 df f1 34 f0 d5 cc ba 7a b4 93 85 f3 a2 63 bd 46 de a7 15 ca ea ba 1e af a0 2c b1 de Data Ascii: {:H^:s(cY}6-RkX-'{y6\|L\|bs:Tc\.Ugkgh8[;4mi\}#?h;5r$:Y`sVhR;[}<~.54X,mo:JrB8I(_9I/Z@4zcF,

Timestamp	Bytes transferred	Direction	Data
2025-03-14 18:07:45 UTC	1345	OUT	GET /ls/click?upn=u001.AR9Mx-2Futf8zCizRJR1zWQyjFk-2F3fmeHgwaoEX0sj7LNvLxadpcQbCDj9eJtuGOsRmTcCOtEDIvi3npIJpdt-2FygcYeLSRCs3fGYHfkoOHejg-3DgZ62_4R4PVUosj4-2FWzhrx0xFZHq-2FXxtG1noLp84vupaRf2f-2F6Jf4rFFugSxyqHO-2FVPdajKZ-2FPKCdfqHj1aQr4zVBYb-2FEiBjrf7ath0BgqOY6MdThf4Ae6yN8FoDZJ-2BES471XZIrwz7iAkdK0giDttZsBzovgq9NxI2-2BuYraN6hRcbg5qwW0IS05yUS-2BPM5pW0VKgLrNCJUgVrgrzp2w36AzstNmTrFZDmam4MO0pMwbNqPFZCmXMRYpEOCg3Y5zfycd31W586EO9HVlV7NTIqfFOApfW2AQ8BeOHlgje6iBlU-2Fd494BAvnto-2BkkldfXAJzgFqb-2Fw9gP0v6CLxifgeC3-2Fn9x825Lno7wROFv84v0gqYDmj0PBMsyCW6pksVIuBdLbNu1AK6m0Oxz2rwYMSz0uszf3d1mqsLV3QHi4lATMdkl3Xe-2B1t9H71pNVfArlAwSuTOueYLtMZOHS-2FCACoIdV-2F-2Byi-2BdX5-2BV48VlMGzeQ8XVuU-3D HTTP/1.1 Host: url976.groupgreeting.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 18:07:46 UTC	375	IN	HTTP/1.1 302 Found Date: Fri, 14 Mar 2025 18:07:46 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://www.groupgreeting.com/tl/b667ec9166f40dcb0304b4fa8c4310 X-Robots-Tag: noindex, nofollow cf-cache-status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Server: cloudflare CF-RAY: 9205b6678b650f80-EWR
2025-03-14 18:07:46 UTC	92	IN	Data Raw: 35 36 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 6f 75 70 67 72 65 65 74 69 6e 67 2e 63 6f 6d 2f 74 6c 2f 62 36 36 37 65 63 39 31 36 36 66 34 30 64 63 62 30 33 30 34 62 34 66 61 38 63 34 33 31 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: 56<a href="https://www.groupgreeting.com/tl/b667ec9166f40dcb0304b4fa8c4310">Found</a>.
2025-03-14 18:07:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-14 18:07:46 UTC	704	OUT	GET /tl/b667ec9166f40dcb0304b4fa8c4310 HTTP/1.1 Host: www.groupgreeting.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 18:07:46 UTC	688	IN	HTTP/1.1 302 Found Date: Fri, 14 Mar 2025 18:07:46 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://www.groupgreeting.com/sign/5062286c0fd0eca?receiver_token=88c9df38f7addb66831a43852bdaa5c2 Cache-Control: no-cache referrer-policy: strict-origin-when-cross-origin x-permitted-cross-domain-policies: none x-xss-protection: 0 x-request-id: 22167083-b293-4f9c-a682-3bcd8615b6e8 x-download-options: noopen x-frame-options: SAMEORIGIN x-content-type-options: nosniff status: 302 Found machine: 00 cf-cache-status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Server: cloudflare CF-RAY: 9205b66ce89a42b8-EWR
2025-03-14 18:07:46 UTC	637	IN	Data Raw: 32 37 36 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 6f 75 70 67 72 65 65 74 69 6e 67 2e 63 6f 6d 2f 73 69 67 6e 2f 35 30 36 32 32 38 36 63 30 66 64 30 65 63 61 3f 72 65 63 65 69 76 65 72 5f 74 6f 6b 65 6e 3d 38 38 63 39 64 66 33 38 66 37 61 64 64 62 36 36 38 33 31 61 34 33 38 35 32 62 64 61 61 35 63 32 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2e 6d 69 6e 2e 6a 73 2f 76 63 64 31 35 63 62 65 37 37 37 32 66 34 39 63 33 39 39 63 36 61 35 62 61 62 66 32 32 Data Ascii: 276<html><body>You are being <a href="https://www.groupgreeting.com/sign/5062286c0fd0eca?receiver_token=88c9df38f7addb66831a43852bdaa5c2">redirected</a>.<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22
2025-03-14 18:07:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-14 18:07:47 UTC	739	OUT	GET /sign/5062286c0fd0eca?receiver_token=88c9df38f7addb66831a43852bdaa5c2 HTTP/1.1 Host: www.groupgreeting.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 18:07:47 UTC	1154	IN	HTTP/1.1 302 Found Date: Fri, 14 Mar 2025 18:07:47 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered Cache-Control: no-cache referrer-policy: strict-origin-when-cross-origin x-permitted-cross-domain-policies: none x-xss-protection: 0 x-request-id: 579be89f-6567-4d63-97e0-b8d3f1d1d765 x-download-options: noopen x-frame-options: SAMEORIGIN x-content-type-options: nosniff Set-Cookie: _groupgreeting_session=35Nn%2B%2BOMIvszdyZrcl7m%2BA0NfrWZa%2B5jV16h06eC25kwWW5bUBlx7xpbm8Yvb2mDPlNb%2B9dnH9h49qJyZdy7nKIhYMFgaxcV8ewdUqeJjMcvpd%2BN0A0BYiRqAlnC6WQja%2BrydnQ0Wz0xULeVYMBPN2arD3jOGi%2B2bCzxt7DbVHeaUkuOgNyiu2VGaauLwuc6cq2cIXprXlqhRct6S%2BUoj5AsySbDNbZ4H1Ooq1Yz5AKsFeeR8g7Ep3RVQ%2BBbxPBKWAd%2FZ%2FOnerClJt4dWNGowVZJ%2FMRTRM2hCO8My2De5kn17HnKHGh16L8KP1g%3D--1SNEHDb%2F4Sd4MM0u--TM5pvIIYj54HLclt%2FkfLkw%3D%3D; path=/; expires=Wed, 14 May 2025 18:07:47 GMT; HttpOnly; SameSite=Lax status: 302 Found machine: 00 cf-cache-status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Server: cloudflare CF-RAY: 9205b6711b1180d3-EWR
2025-03-14 18:07:47 UTC	215	IN	Data Raw: 32 35 30 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 6f 75 70 67 72 65 65 74 69 6e 67 2e 63 6f 6d 2f 63 61 72 64 2f 35 30 36 32 32 38 36 63 30 66 64 30 65 63 61 2f 64 65 6c 69 76 65 72 65 64 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2e 6d 69 6e 2e 6a 73 2f 76 63 64 31 35 63 62 65 37 37 37 32 66 34 39 63 33 39 39 63 36 61 35 62 61 62 66 Data Ascii: 250<html><body>You are being <a href="https://www.groupgreeting.com/card/5062286c0fd0eca/delivered">redirected</a>.<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf
2025-03-14 18:07:47 UTC	384	IN	Data Raw: 32 32 63 31 32 34 31 37 31 37 36 38 39 31 37 36 30 31 35 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 5a 70 73 4f 6d 6c 52 51 56 36 79 39 30 37 54 49 30 64 4b 42 48 71 39 4d 64 32 39 6e 6e 61 45 49 50 6c 6b 66 38 34 72 6e 61 45 52 6e 71 36 7a 76 57 76 50 55 71 72 32 66 74 38 4d 31 61 53 32 38 6f 4e 37 32 50 64 72 43 7a 53 6a 59 34 55 36 56 61 41 77 31 45 51 3d 3d 22 20 64 61 74 61 2d 63 66 2d 62 65 61 63 6f 6e 3d 27 7b 22 72 61 79 49 64 22 3a 22 39 32 30 35 62 36 37 31 31 62 31 31 38 30 64 33 22 2c 22 73 65 72 76 65 72 54 69 6d 69 6e 67 22 3a 7b 22 6e 61 6d 65 22 3a 7b 22 63 66 45 78 74 50 72 69 22 3a 74 72 75 65 2c 22 63 66 4c 34 22 3a 74 72 75 65 2c 22 63 66 53 70 65 65 64 42 72 61 69 6e 22 3a 74 72 75 65 2c 22 63 66 43 61 63 68 65 53 74 Data Ascii: 22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"rayId":"9205b6711b1180d3","serverTiming":{"name":{"cfExtPri":true,"cfL4":true,"cfSpeedBrain":true,"cfCacheSt
2025-03-14 18:07:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-14 18:07:47 UTC	1130	OUT	GET /card/5062286c0fd0eca/delivered HTTP/1.1 Host: www.groupgreeting.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _groupgreeting_session=35Nn%2B%2BOMIvszdyZrcl7m%2BA0NfrWZa%2B5jV16h06eC25kwWW5bUBlx7xpbm8Yvb2mDPlNb%2B9dnH9h49qJyZdy7nKIhYMFgaxcV8ewdUqeJjMcvpd%2BN0A0BYiRqAlnC6WQja%2BrydnQ0Wz0xULeVYMBPN2arD3jOGi%2B2bCzxt7DbVHeaUkuOgNyiu2VGaauLwuc6cq2cIXprXlqhRct6S%2BUoj5AsySbDNbZ4H1Ooq1Yz5AKsFeeR8g7Ep3RVQ%2BBbxPBKWAd%2FZ%2FOnerClJt4dWNGowVZJ%2FMRTRM2hCO8My2De5kn17HnKHGh16L8KP1g%3D--1SNEHDb%2F4Sd4MM0u--TM5pvIIYj54HLclt%2FkfLkw%3D%3D
2025-03-14 18:07:48 UTC	826	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 18:07:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=0, private, must-revalidate referrer-policy: strict-origin-when-cross-origin x-permitted-cross-domain-policies: none x-xss-protection: 0 x-request-id: 5ba92ac4-3112-4953-aaae-adfed6d94ba3 link: </assets/card/base64_fonts-5e14a2c0f3bb932bf3789592ce65d131dac45f95b31658bb3f3a06d901f1a899.css>; rel=preload; as=style; nopush,</assets/application-0abda8d78d831a5f76a1452eed67349a60e9059e86cbc297914fbae0fee61dc4.css>; rel=preload; as=style; nopush,</assets/application-c82fd62a5f18df8544d6df93dbb0e2470c3cf07d237393877bacbb880d84db3a.js>; rel=preload; as=script; nopush x-download-options: noopen x-frame-options: SAMEORIGIN x-content-type-options: nosniff
2025-03-14 18:07:48 UTC	793	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 67 72 6f 75 70 67 72 65 65 74 69 6e 67 5f 73 65 73 73 69 6f 6e 3d 64 6b 70 39 62 4c 6c 77 66 41 4c 43 61 63 63 66 51 4c 32 38 6d 31 36 33 6e 31 77 75 32 55 67 33 75 74 31 6c 74 76 4b 4c 47 6c 78 25 32 42 63 53 61 56 4f 61 69 79 64 4e 30 5a 4f 4a 73 58 57 45 34 67 32 43 4d 53 47 78 71 38 52 67 79 6f 71 43 56 54 79 5a 43 25 32 46 53 49 48 61 45 63 61 35 6c 53 35 41 59 54 79 4a 47 6d 66 62 25 32 42 57 54 6c 63 25 32 46 4f 55 67 59 43 46 78 64 37 6c 52 53 41 4a 35 61 73 78 43 6f 35 37 72 59 79 49 70 65 51 45 4e 54 53 54 79 4d 4a 75 4c 6f 6b 4b 6d 36 4a 61 68 66 35 48 52 46 4f 68 75 65 63 56 56 58 49 39 38 53 30 7a 61 4d 74 43 33 51 54 32 41 25 32 42 59 74 61 32 4c 25 32 46 31 59 4f 6b 31 36 25 32 42 53 4a 57 59 69 59 35 Data Ascii: Set-Cookie: _groupgreeting_session=dkp9bLlwfALCaccfQL28m163n1wu2Ug3ut1ltvKLGlx%2BcSaVOaiydN0ZOJsXWE4g2CMSGxq8RgyoqCVTyZC%2FSIHaEca5lS5AYTyJGmfb%2BWTlc%2FOUgYCFxd7lRSAJ5asxCo57rYyIpeQENTSTyMJuLokKm6Jahf5HRFOhuecVVXI98S0zaMtC3QT2A%2BYta2L%2F1YOk16%2BSJWYiY5
2025-03-14 18:07:48 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0a 20 20 20 20 20 20 20 20 20 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 6a Data Ascii: 7ff9<!DOCTYPE html><html lang="en"> <head> ... Google Tag Manager --> <script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j
2025-03-14 18:07:48 UTC	1369	IN	Data Raw: 70 75 72 70 6f 73 65 2d 62 6c 75 65 2d 6c 69 67 68 74 2e 63 73 73 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 75 69 2f 31 2e 31 32 2e 31 2f 6a 71 75 65 72 79 2d 75 69 2e 6d 69 6e 2e 63 73 73 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 40 74 61 72 65 6b 72 61 61 66 61 74 2f 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 40 31 30 2e 32 2e 37 2f 64 69 73 74 2f 63 73 73 2f 61 75 74 6f 43 6f 6d 70 6c 65 74 65 2e 30 Data Ascii: purpose-blue-light.css"> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.css"/> <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@tarekraafat/autocomplete.js@10.2.7/dist/css/autoComplete.0
2025-03-14 18:07:48 UTC	1369	IN	Data Raw: 42 42 58 77 61 61 78 71 6f 69 39 50 51 58 6e 52 57 71 6c 63 44 42 30 32 37 68 67 76 39 41 3d 3d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 6c 61 67 2d 69 63 6f 6e 2d 63 73 73 2f 36 2e 34 2e 34 2f 63 73 73 2f 66 6c 61 67 2d 69 63 6f 6e 73 2e 6d 69 6e 2e 63 73 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 75 76 58 64 4a 75 64 38 57 61 4f 6c 51 46 6a 6c 7a 39 42 31 35 59 79 32 41 75 2f 62 4d 41 76 7a 37 39 46 37 58 61 36 4f 61 6b 43 6c 32 6a 76 51 50 64 48 44 30 68 62 33 64 45 71 5a Data Ascii: BBXwaaxqoi9PQXnRWqlcDB027hgv9A==" crossorigin="anonymous" /> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/flag-icon-css/6.4.4/css/flag-icons.min.css" integrity="sha512-uvXdJud8WaOlQFjlz9B15Yy2Au/bMAvz79F7Xa6OakCl2jvQPdHD0hb3dEqZ
2025-03-14 18:07:48 UTC	1369	IN	Data Raw: 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 73 70 69 6e 2e 6a 73 2f 32 2e 33 2e 32 2f 73 70 69 6e 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 74 79 70 65 64 2e 6a 73 2f 31 2e 31 2e 31 2f 74 79 70 65 64 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 20 20 20 20 3c 21 2d 2d 20 48 54 4d 4c 35 20 73 68 69 6d 20 61 6e 64 20 52 65 73 70 6f 6e 64 2e 6a 73 20 66 6f 72 20 49 45 38 20 73 75 70 70 6f Data Ascii: e.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/spin.js/2.3.2/spin.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/typed.js/1.1.1/typed.min.js"></script> ... HTML5 shim and Respond.js for IE8 suppo
2025-03-14 18:07:48 UTC	1369	IN	Data Raw: 61 61 66 61 74 2f 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 40 31 30 2e 32 2e 37 2f 64 69 73 74 2f 61 75 74 6f 43 6f 6d 70 6c 65 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 70 6f 70 70 65 72 2e 6a 73 2f 31 2e 31 34 2e 36 2f 75 6d 64 2f 70 6f 70 70 65 72 2e 6d 69 6e 2e 6a 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 77 48 41 69 46 66 52 6c 4d 46 79 36 69 35 53 52 61 78 76 66 4f 43 69 66 42 55 51 79 31 78 48 64 4a 2f 79 6f 69 37 46 52 4e 58 4d 52 42 75 35 57 48 64 5a 59 75 31 68 41 36 5a 4f 62 6c 67 75 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 Data Ascii: aafat/autocomplete.js@10.2.7/dist/autoComplete.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.6/umd/popper.min.js" integrity="sha384-wHAiFfRlMFy6i5SRaxvfOCifBUQy1xHdJ/yoi7FRNXMRBu5WHdZYu1hA6ZOblgut" crossorigin="
2025-03-14 18:07:48 UTC	1369	IN	Data Raw: 31 32 2d 74 75 5a 4f 64 44 6c 50 64 5a 65 62 59 54 36 6d 56 67 76 45 59 4a 4e 6a 59 49 67 69 4f 78 74 62 75 33 6a 4a 62 4d 4f 52 47 31 55 44 56 36 42 45 45 33 6e 68 62 61 30 5a 41 6d 62 6e 31 45 4d 77 55 37 74 4c 62 58 4e 66 78 42 70 6a 45 69 38 43 64 7a 44 38 54 77 3d 3d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 72 65 66 65 72 72 65 72 70 6f 6c 69 63 79 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 61 6e 63 79 62 6f 78 2f 33 2e 35 2e 36 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 Data Ascii: 12-tuZOdDlPdZebYT6mVgvEYJNjYIgiOxtbu3jJbMORG1UDV6BEE3nhba0ZAmbn1EMwU7tLbXNfxBpjEi8CdzD8Tw==" crossorigin="anonymous" referrerpolicy="no-referrer"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.5.6/jquery.fancybox.min.js"></s
2025-03-14 18:07:48 UTC	1369	IN	Data Raw: 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 43 68 61 72 74 2e 6a 73 2f 33 2e 39 2e 31 2f 63 68 61 72 74 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 64 61 74 65 72 61 6e 67 65 70 69 63 6b 65 72 2f 64 61 74 65 72 61 6e 67 65 70 69 63 6b 65 72 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6d Data Ascii: ript> <script src="https://cdnjs.cloudflare.com/ajax/libs/Chart.js/3.9.1/chart.min.js"></script> <script src="https://cdn.jsdelivr.net/npm/daterangepicker/daterangepicker.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/m
2025-03-14 18:07:48 UTC	1369	IN	Data Raw: 74 65 64 2f 6c 6f 67 6f 6d 61 72 6b 2d 70 61 67 65 2d 6c 6f 61 64 65 72 2e 67 69 66 5c 27 29 3b 5c 6e 20 20 7d 5c 6e 3c 5c 2f 73 74 79 6c 65 3e 5c 6e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 5c 22 5c 6e 20 20 20 20 20 73 74 79 6c 65 3d 5c 22 77 69 64 74 68 3a 20 31 30 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 70 78 5c 22 3e 5c 6e 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 65 6e 74 65 72 2d 62 6c 6f 63 6b 20 74 65 78 74 2d 63 65 6e 74 65 72 5c 22 3e 5c 6e 20 20 20 20 3c 69 6d 67 20 63 6c 61 73 73 3d 5c 22 67 6c 6f 62 61 6c 5f 73 70 69 6e 6e 65 72 5f 69 6d 67 5c 22 3e 5c 6e 20 20 3c 5c 2f 64 69 76 3e 5c 6e 3c 5c 2f 64 69 76 3e 5c 6e 27 2c 0a 20 20 20 20 Data Ascii: ted/logomark-page-loader.gif\');\n }\n<\/style>\n\n<div class=\"modal-content\"\n style=\"width: 100px; margin: auto; padding-left:2px\">\n <div class=\"center-block text-center\">\n <img class=\"global_spinner_img\">\n <\/div>\n<\/div>\n',
2025-03-14 18:07:48 UTC	1369	IN	Data Raw: 69 76 65 72 65 64 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 61 67 65 2e 67 72 6f 75 70 67 72 65 65 74 69 6e 67 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 63 6f 76 65 72 73 2f 41 4e 4e 2d 77 6f 6f 68 6f 6f 2d 61 6e 6f 74 68 65 72 2d 79 65 61 72 2d 53 48 32 2d 32 30 32 35 2e 6a 70 67 22 3e 0a 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 72 6f 75 70 67 72 65 65 74 69 6e 67 2e 63 6f 6d 25 32 46 63 61 72 64 25 32 46 35 30 36 32 32 38 36 63 30 66 64 30 65 63 61 25 32 46 64 65 6c 69 76 65 72 65 64 22 20 2f 3e 0a 3c 6d 65 74 61 Data Ascii: ivered"><meta name="twitter:image" content="https://storage.groupgreeting.com/assets/images/covers/ANN-woohoo-another-year-SH2-2025.jpg"><meta property="og:url" content="https%3A%2F%2Fwww.groupgreeting.com%2Fcard%2F5062286c0fd0eca%2Fdelivered" /><meta

Timestamp	Bytes transferred	Direction	Data
2025-03-14 18:07:48 UTC	1214	OUT	GET /assets/card/base64_fonts-5e14a2c0f3bb932bf3789592ce65d131dac45f95b31658bb3f3a06d901f1a899.css HTTP/1.1 Host: www.groupgreeting.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _groupgreeting_session=dkp9bLlwfALCaccfQL28m163n1wu2Ug3ut1ltvKLGlx%2BcSaVOaiydN0ZOJsXWE4g2CMSGxq8RgyoqCVTyZC%2FSIHaEca5lS5AYTyJGmfb%2BWTlc%2FOUgYCFxd7lRSAJ5asxCo57rYyIpeQENTSTyMJuLokKm6Jahf5HRFOhuecVVXI98S0zaMtC3QT2A%2BYta2L%2F1YOk16%2BSJWYiY5pHkdiDZ5Y1eXa2%2BwgXMaXWgu8R1rCiwBf0ce6g8Pu3Jcrf0TO1zIjsEDiQJpQcQkTVhZ%2F270sTc5dPTmLT0%2BrslgY6AfuLt2G%2B7Fi4FVyOZDJGK7ds7tkGKc%2B%2BR67dDd1wA7AkaFWzkAdhQG9ComthYKBIVmn%2Ftolmn8sbutq0AbTiKgZ0RB%2FBNKChKLtwNmAHdcz5cyfPk%2FWzwCKlPv4NCA%3D%3D--%2F9ikku0Fl8DcmWN8--LOqsniyNLTtAfusoN0214w%3D%3D
2025-03-14 18:07:49 UTC	329	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 18:07:49 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Tue, 26 Oct 2021 19:15:59 GMT etag: W/"962f96-5cf464eb999c0-gzip" vary: Accept-Encoding machine: 00 CF-Cache-Status: HIT Age: 2637 Server: cloudflare CF-RAY: 9205b67b9ecb7539-EWR
2025-03-14 18:07:49 UTC	1040	IN	Data Raw: 37 65 35 38 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 67 67 2d 41 62 72 69 6c 20 46 61 74 66 61 63 65 27 3b 73 72 63 3a 75 72 6c 28 64 61 74 61 3a 66 6f 6e 74 2f 74 72 75 65 74 79 70 65 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 50 41 49 41 41 41 77 42 77 52 30 52 46 52 67 61 74 43 43 6b 41 41 4b 33 34 41 41 41 41 4e 45 64 51 54 31 4d 37 76 33 58 63 41 41 43 75 4c 41 41 41 4d 6d 35 48 55 31 56 43 34 32 62 57 2f 41 41 41 34 4a 77 41 41 41 4e 6f 54 31 4d 76 4d 6c 58 31 59 50 51 41 41 4a 38 45 41 41 41 41 59 47 4e 74 59 58 43 78 50 43 6d 34 41 41 43 66 5a 41 41 41 41 58 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 72 66 41 41 41 41 41 49 5a 32 78 35 5a 70 4a 32 4a 4b 34 41 41 41 44 Data Ascii: 7e58@font-face{font-family:'gg-Abril Fatface';src:url(data:font/truetype;charset=utf-8;base64,AAEAAAAPAIAAAwBwR0RFRgatCCkAAK34AAAANEdQT1M7v3XcAACuLAAAMm5HU1VC42bW/AAA4JwAAANoT1MvMlX1YPQAAJ8EAAAAYGNtYXCxPCm4AACfZAAAAXxnYXNwAAAAEAAArfAAAAAIZ2x5ZpJ2JK4AAAD
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 41 41 63 41 46 77 41 62 41 43 4d 41 4d 77 41 41 42 43 59 30 4e 6a 49 57 46 41 59 43 42 68 51 65 41 6a 49 32 4e 7a 59 30 4c 67 49 69 42 67 6b 42 4d 77 45 43 4a 6a 51 32 4d 68 59 55 42 67 49 47 46 42 34 43 4d 6a 59 33 4e 6a 51 75 41 69 49 47 41 65 68 5a 59 4a 39 5a 59 6e 6b 43 41 67 6b 56 4a 42 55 45 42 67 49 4a 46 43 51 56 2f 6f 55 42 70 53 6a 2b 58 45 78 5a 59 4a 39 5a 59 6e 6b 43 41 67 6b 56 4a 42 55 45 42 67 49 4a 46 43 51 56 43 6c 32 54 59 6c 61 66 58 51 45 41 4b 6c 34 6f 4c 78 45 53 47 53 56 34 4b 79 34 52 45 66 37 5a 41 72 7a 39 52 41 46 31 58 5a 4e 69 56 70 39 64 41 51 41 71 58 69 67 76 45 52 49 5a 4a 6e 63 72 4c 68 45 52 41 41 41 44 41 45 48 2f 42 67 4c 70 41 73 63 41 4d 51 41 37 41 45 55 41 41 41 55 79 4e 6a 51 6e 42 69 41 6d 4e 54 51 32 4e 79 59 Data Ascii: AAcAFwAbACMAMwAABCY0NjIWFAYCBhQeAjI2NzY0LgIiBgkBMwECJjQ2MhYUBgIGFB4CMjY3NjQuAiIGAehZYJ9ZYnkCAgkVJBUEBgIJFCQV/oUBpSj+XExZYJ9ZYnkCAgkVJBUEBgIJFCQVCl2TYlafXQEAKl4oLxESGSV4Ky4REf7ZArz9RAF1XZNiVp9dAQAqXigvERIZJncrLhERAAADAEH/BgLpAscAMQA7AEUAAAUyNjQnBiAmNTQ2NyY
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 52 51 4f 41 67 63 4f 41 51 38 42 4d 7a 49 32 4e 7a 4d 44 49 54 55 33 50 67 45 30 4a 69 49 47 46 42 63 7a 46 68 51 47 49 69 59 31 49 33 54 6f 66 51 6f 6a 49 53 67 38 68 41 73 39 38 45 55 36 44 42 45 4b 2f 69 70 6c 5a 31 59 6d 57 69 51 47 48 67 67 79 55 69 30 43 63 56 5a 57 56 68 77 74 4d 53 59 66 4d 46 38 49 4c 44 78 41 2f 75 74 30 58 56 36 54 73 55 45 75 4b 68 41 56 4f 79 73 31 4b 41 41 41 41 51 41 65 2f 2f 59 43 48 77 4c 48 41 44 4d 41 41 42 49 32 4d 7a 49 56 46 41 59 48 46 52 34 42 46 52 51 47 49 79 49 75 41 54 51 32 4d 68 59 55 42 79 4d 47 46 52 51 7a 4d 6a 59 30 4a 69 63 47 42 79 63 2b 41 54 51 6d 49 67 59 55 46 7a 4d 57 46 41 59 69 4a 6a 55 71 65 48 62 6b 61 32 52 38 64 70 75 4b 4e 6c 31 4a 4c 31 49 77 43 42 38 47 56 44 73 72 4b 53 67 6b 4d 77 4e 59 Data Ascii: RQOAgcOAQ8BMzI2NzMDITU3PgE0JiIGFBczFhQGIiY1I3TofQojISg8hAs98EU6DBEK/iplZ1YmWiQGHggyUi0CcVZWVhwtMSYfMF8ILDxA/ut0XV6TsUEuKhAVOys1KAAAAQAe//YCHwLHADMAABI2MzIVFAYHFR4BFRQGIyIuATQ2MhYUByMGFRQzMjY0JicGByc+ATQmIgYUFzMWFAYiJjUqeHbka2R8dpuKNl1JL1IwCB8GVDsrKSgkMwNY
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 59 41 44 77 41 41 45 41 63 41 45 66 2f 33 41 55 73 41 41 51 41 6e 41 46 59 42 36 77 48 78 41 41 59 41 41 43 30 42 4e 53 55 56 44 51 45 42 36 2f 34 38 41 63 54 2b 63 67 47 4f 56 73 49 61 76 79 4f 6f 71 77 41 43 41 43 59 41 76 67 48 73 41 58 73 41 41 77 41 48 41 41 41 6c 49 54 55 68 4a 53 45 56 49 51 48 73 2f 6a 6f 42 78 76 34 36 41 63 62 2b 4f 72 34 68 6e 43 45 41 41 51 41 6e 41 46 59 42 36 77 48 78 41 41 59 41 41 42 4d 46 46 51 55 31 4c 51 45 6e 41 63 54 2b 50 41 47 4f 2f 6e 49 42 38 63 49 61 76 79 4f 71 71 51 41 43 41 44 72 2f 39 67 49 43 41 73 63 41 48 67 41 6d 41 41 41 53 4e 6a 49 57 46 52 51 47 44 77 45 56 49 7a 55 30 50 77 45 2b 41 54 55 30 49 79 49 47 46 42 63 7a 46 68 51 47 49 69 59 31 45 69 59 30 4e 6a 49 57 46 41 59 36 64 74 74 33 4e 53 2b 58 47 Data Ascii: YADwAAEAcAEf/3AUsAAQAnAFYB6wHxAAYAAC0BNSUVDQEB6/48AcT+cgGOVsIavyOoqwACACYAvgHsAXsAAwAHAAAlITUhJSEVIQHs/joBxv46Acb+Or4hnCEAAQAnAFYB6wHxAAYAABMFFQU1LQEnAcT+PAGO/nIB8cIavyOqqQACADr/9gICAscAHgAmAAASNjIWFRQGDwEVIzU0PwE+ATU0IyIGFBczFhQGIiY1EiY0NjIWFAY6dtt3NS+XG
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 6a 73 37 75 65 50 58 73 55 43 67 59 4c 43 42 49 78 59 7a 32 5a 53 77 6f 6b 4b 38 49 57 46 76 37 6d 47 53 53 77 41 57 48 41 48 77 6b 4c 32 57 46 76 2f 74 56 50 6c 70 6b 41 41 51 41 56 41 41 41 43 32 41 4b 38 41 42 73 41 41 42 4d 68 46 53 4d 52 4d 78 45 6a 4e 53 45 56 49 78 45 7a 46 53 45 31 4d 78 45 6a 45 54 4d 56 49 54 55 7a 45 53 4d 56 41 54 67 36 78 7a 73 42 4f 54 73 37 2f 73 63 37 78 7a 72 2b 79 44 73 37 41 72 77 54 2f 73 6f 42 4e 68 4d 54 2f 57 6f 54 45 77 46 47 2f 72 6f 54 45 77 4b 57 41 41 45 41 47 51 41 41 41 55 6f 43 76 41 41 4c 41 41 41 54 49 52 55 6a 45 54 4d 56 49 54 55 7a 45 53 4d 5a 41 54 45 33 4e 2f 37 50 4e 7a 63 43 76 42 50 39 61 68 4d 54 41 70 59 41 41 51 41 61 2f 2f 63 42 39 51 4b 38 41 42 6f 41 41 42 4d 68 46 53 4d 52 46 41 59 6a 49 69 Data Ascii: js7uePXsUCgYLCBIxYz2ZSwokK8IWFv7mGSSwAWHAHwkL2WFv/tVPlpkAAQAVAAAC2AK8ABsAABMhFSMRMxEjNSEVIxEzFSE1MxEjETMVITUzESMVATg6xzsBOTs7/sc7xzr+yDs7ArwT/soBNhMT/WoTEwFG/roTEwKWAAEAGQAAAUoCvAALAAATIRUjETMVITUzESMZATE3N/7PNzcCvBP9ahMTApYAAQAa//cB9QK8ABoAABMhFSMRFAYjIi
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 4e 41 46 48 2f 73 78 47 54 78 31 50 4d 77 41 41 41 51 41 7a 2f 2f 59 43 4c 77 4c 48 41 43 34 41 41 43 55 79 4e 6a 51 75 41 69 63 6d 4e 54 51 32 4d 7a 49 57 4d 6a 63 7a 46 79 4d 75 41 53 49 47 46 42 34 46 46 78 59 56 46 41 59 6a 49 69 59 6a 49 67 63 6a 4a 7a 4d 65 41 51 46 46 4d 6b 31 54 6d 55 55 66 50 6e 39 75 4e 58 4d 63 43 77 73 48 45 44 42 70 65 30 52 52 64 69 55 33 49 79 63 4c 47 34 64 75 4f 5a 4d 49 44 67 30 4f 43 68 45 73 69 51 73 32 62 54 6f 72 49 42 6f 30 62 56 6d 41 48 78 54 4b 56 32 6b 35 58 7a 4d 67 44 42 55 58 49 78 55 77 51 6d 79 44 48 68 37 75 56 34 49 41 41 51 41 6b 41 41 41 43 68 67 4b 38 41 42 4d 41 41 41 45 58 49 79 34 42 4b 77 45 52 4d 78 55 68 4e 54 4d 52 49 79 49 47 42 79 4d 33 41 6e 77 4b 45 79 78 45 51 41 78 56 2f 70 4e 56 44 55 42 Data Ascii: NAFH/sxGTx1PMwAAAQAz//YCLwLHAC4AACUyNjQuAicmNTQ2MzIWMjczFyMuASIGFB4FFxYVFAYjIiYjIgcjJzMeAQFFMk1TmUUfPn9uNXMcCwsHEDBpe0RRdiU3IycLG4duOZMIDg0OChEsiQs2bTorIBo0bVmAHxTKV2k5XzMgDBUXIxUwQmyDHh7uV4IAAQAkAAAChgK8ABMAAAEXIy4BKwERMxUhNTMRIyIGByM3AnwKEyxEQAxV/pNVDUB
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 67 41 41 41 43 59 69 42 68 30 42 46 42 59 79 4e 6a 30 42 41 78 45 32 4d 7a 49 56 46 41 59 6a 49 69 59 6e 42 79 4d 31 4d 78 45 6a 4e 51 46 33 46 44 6f 75 49 30 45 59 66 43 5a 63 75 32 64 6e 4e 44 63 4b 42 2b 51 33 4e 77 46 30 52 30 67 2f 75 69 73 38 57 47 34 30 41 65 48 2b 6f 6c 62 35 66 33 67 67 4a 54 73 53 41 73 6f 53 41 41 45 41 44 2f 2f 32 41 64 51 42 35 67 41 67 41 41 41 42 49 67 59 64 41 52 51 57 4d 6a 59 33 46 77 59 48 42 69 4d 69 4a 6a 51 32 4d 7a 49 57 46 41 59 69 4a 6a 55 30 4e 7a 4d 32 4e 54 51 42 49 69 77 6d 4c 48 5a 47 43 68 49 54 4d 7a 52 62 64 48 79 4e 66 6c 6c 65 4c 55 38 77 42 53 45 48 41 64 52 67 62 7a 52 6a 56 6c 41 7a 41 6c 59 6d 4a 33 33 78 67 6b 56 6f 4d 43 6f 70 45 68 49 55 45 44 41 41 41 67 41 55 2f 2f 59 43 50 41 4c 75 41 41 73 41 Data Ascii: gAAACYiBh0BFBYyNj0BAxE2MzIVFAYjIiYnByM1MxEjNQF3FDouI0EYfCZcu2dnNDcKB+Q3NwF0R0g/uis8WG40AeH+olb5f3ggJTsSAsoSAAEAD//2AdQB5gAgAAABIgYdARQWMjY3FwYHBiMiJjQ2MzIWFAYiJjU0NzM2NTQBIiwmLHZGChITMzRbdHyNflleLU8wBSEHAdRgbzRjVlAzAlYmJ33xgkVoMCopEhIUEDAAAgAU//YCPALuAAsA
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 63 6d 49 79 49 47 46 52 45 7a 46 53 45 31 4d 78 45 30 4a 79 59 6a 49 67 59 56 45 54 4d 56 49 54 55 7a 45 53 4d 4b 38 53 48 68 47 43 4e 77 6b 7a 6a 2b 36 79 4d 4e 42 67 6f 64 4c 43 54 2b 2f 79 4d 4e 42 67 6f 63 4c 53 54 2b 36 7a 63 33 41 64 78 63 5a 6d 78 73 70 2f 37 54 45 68 49 42 52 55 77 4e 42 6b 34 38 2f 75 59 53 45 67 46 46 54 41 30 47 56 54 76 2b 37 42 49 53 41 62 67 41 41 51 41 4d 41 41 41 43 5a 51 48 6d 41 42 77 41 41 42 4d 7a 46 54 34 42 4d 7a 49 56 45 54 4d 56 49 54 55 7a 45 54 51 6d 49 79 49 47 46 52 45 7a 46 53 45 31 4d 78 45 6a 44 50 45 51 51 6b 4f 62 4f 50 37 6c 4b 52 41 56 49 44 45 72 2f 75 51 33 4e 77 48 63 58 43 34 34 70 2f 37 54 45 68 49 42 52 54 77 6a 56 44 7a 2b 37 42 49 53 41 62 67 41 41 67 41 53 2f 2f 59 43 44 51 48 6d 41 42 49 41 47 Data Ascii: cmIyIGFREzFSE1MxE0JyYjIgYVETMVITUzESMK8SHhGCNwkzj+6yMNBgodLCT+/yMNBgocLST+6zc3AdxcZmxsp/7TEhIBRUwNBk48/uYSEgFFTA0GVTv+7BISAbgAAQAMAAACZQHmABwAABMzFT4BMzIVETMVITUzETQmIyIGFREzFSE1MxEjDPEQQkObOP7lKRAVIDEr/uQ3NwHcXC44p/7TEhIBRTwjVDz+7BISAbgAAgAS//YCDQHmABIAG
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 64 51 6e 2b 59 4f 67 46 53 52 67 45 6e 6f 78 49 53 75 50 38 41 45 68 4b 30 74 42 49 53 79 50 41 53 45 67 41 41 41 51 41 43 2f 77 59 43 48 41 48 63 41 43 45 41 41 42 4d 31 49 52 55 6a 47 77 45 6a 4e 54 4d 56 49 77 4d 4f 41 53 49 6d 4e 44 59 7a 4d 68 55 55 42 79 4d 47 46 6a 4d 79 4e 6a 38 42 49 77 4d 46 41 53 49 32 62 58 52 44 6a 54 4b 37 49 56 4a 32 52 43 77 6b 55 77 59 6a 43 41 77 56 4b 55 41 64 46 6c 69 72 41 63 6f 53 45 76 36 30 41 55 77 53 45 76 33 6c 58 6b 73 32 56 43 78 46 44 78 55 58 48 6c 46 54 50 67 48 4b 41 41 41 42 41 43 51 41 41 41 48 62 41 64 77 41 45 51 41 41 41 52 55 44 4d 7a 49 32 4e 7a 4d 48 49 54 55 54 49 79 49 47 42 79 4d 33 41 64 76 74 44 56 52 67 47 77 34 51 2f 6c 7a 78 43 32 56 50 48 77 30 4e 41 64 77 53 2f 6b 68 59 59 38 30 50 41 62 Data Ascii: dQn+YOgFSRgEnoxISuP8AEhK0tBISyPASEgAAAQAC/wYCHAHcACEAABM1IRUjGwEjNTMVIwMOASImNDYzMhUUByMGFjMyNj8BIwMFASI2bXRDjTK7IVJ2RCwkUwYjCAwVKUAdFlirAcoSEv60AUwSEv3lXks2VCxFDxUXHlFTPgHKAAABACQAAAHbAdwAEQAAARUDMzI2NzMHITUTIyIGByM3AdvtDVRgGw4Q/lzxC2VPHw0NAdwS/khYY80PAb
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 51 70 52 31 65 48 68 34 50 66 37 44 50 58 4a 79 63 6d 53 63 4c 77 46 41 51 51 47 48 41 53 55 51 45 50 37 4e 48 45 6b 63 35 52 4d 54 35 52 78 4a 48 41 45 7a 45 42 41 41 41 41 49 41 6a 50 2b 42 41 4c 4d 44 47 77 41 44 41 41 63 41 41 42 4d 52 4d 78 45 44 45 54 4d 52 6a 43 63 6e 4a 77 47 63 41 58 2f 2b 67 66 33 6c 41 62 58 2b 53 77 41 43 41 45 62 2f 67 51 4a 72 41 73 63 41 4c 67 41 32 41 41 41 53 4e 6a 49 57 46 52 51 47 49 69 59 30 50 77 45 32 4e 54 51 6a 49 67 63 47 42 78 34 42 46 78 59 51 42 69 49 6d 4e 54 51 32 4d 68 59 55 44 77 45 47 46 52 51 7a 4d 6a 59 33 4c 67 45 6e 4a 67 55 30 4a 69 63 56 46 42 59 58 52 71 37 6c 61 79 31 53 4d 67 67 6b 42 6b 39 45 47 68 55 45 56 6e 77 7a 5a 36 37 6c 61 79 31 53 4d 67 67 6b 42 6b 39 43 4d 51 4e 57 66 44 4e 6d 41 57 78 Data Ascii: QpR1eHh4Pf7DPXJycmScLwFAQQGHASUQEP7NHEkc5RMT5RxJHAEzEBAAAAIAjP+BALMDGwADAAcAABMRMxEDETMRjCcnJwGcAX/+gf3lAbX+SwACAEb/gQJrAscALgA2AAASNjIWFRQGIiY0PwE2NTQjIgcGBx4BFxYQBiImNTQ2MhYUDwEGFRQzMjY3LgEnJgU0JicVFBYXRq7lay1SMggkBk9EGhUEVnwzZ67lay1SMggkBk9CMQNWfDNmAWx

Timestamp	Bytes transferred	Direction	Data
2025-03-14 18:07:48 UTC	1208	OUT	GET /assets/application-0abda8d78d831a5f76a1452eed67349a60e9059e86cbc297914fbae0fee61dc4.css HTTP/1.1 Host: www.groupgreeting.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _groupgreeting_session=dkp9bLlwfALCaccfQL28m163n1wu2Ug3ut1ltvKLGlx%2BcSaVOaiydN0ZOJsXWE4g2CMSGxq8RgyoqCVTyZC%2FSIHaEca5lS5AYTyJGmfb%2BWTlc%2FOUgYCFxd7lRSAJ5asxCo57rYyIpeQENTSTyMJuLokKm6Jahf5HRFOhuecVVXI98S0zaMtC3QT2A%2BYta2L%2F1YOk16%2BSJWYiY5pHkdiDZ5Y1eXa2%2BwgXMaXWgu8R1rCiwBf0ce6g8Pu3Jcrf0TO1zIjsEDiQJpQcQkTVhZ%2F270sTc5dPTmLT0%2BrslgY6AfuLt2G%2B7Fi4FVyOZDJGK7ds7tkGKc%2B%2BR67dDd1wA7AkaFWzkAdhQG9ComthYKBIVmn%2Ftolmn8sbutq0AbTiKgZ0RB%2FBNKChKLtwNmAHdcz5cyfPk%2FWzwCKlPv4NCA%3D%3D--%2F9ikku0Fl8DcmWN8--LOqsniyNLTtAfusoN0214w%3D%3D
2025-03-14 18:07:49 UTC	327	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 18:07:49 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Fri, 06 Dec 2024 23:32:46 GMT etag: W/"5ae2-628a26e9f2380-gzip" vary: Accept-Encoding machine: 00 CF-Cache-Status: HIT Age: 6392 Server: cloudflare CF-RAY: 9205b67b79586a53-EWR
2025-03-14 18:07:49 UTC	1042	IN	Data Raw: 35 61 65 32 0d 0a 2e 73 6d 61 6c 6c 2d 73 6d 69 6c 65 79 2d 62 74 6e 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 6c 73 78 2d 65 6d 6f 6a 69 70 69 63 6b 65 72 2d 65 6d 6f 6a 69 20 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 77 69 64 74 68 3a 33 33 70 78 3b 68 65 69 67 68 74 3a 33 35 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 6c 73 78 2d 65 6d 6f 6a 69 70 69 63 6b 65 72 2d 61 70 70 65 6e 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6c 73 78 2d 65 6d 6f 6a 69 70 69 63 6b 65 72 Data Ascii: 5ae2.small-smiley-btn:hover{border:transparent;background-color:transparent;cursor:pointer}.lsx-emojipicker-emoji span{display:inline-block;font-size:24px;width:33px;height:35px;cursor:pointer}.lsx-emojipicker-appender{position:relative}.lsx-emojipicker
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 64 20 69 6d 67 2e 65 6d 6f 6a 69 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 6c 73 78 2d 65 6d 6f 6a 69 70 69 63 6b 65 72 2d 65 6d 6f 6a 69 20 73 70 61 6e 20 69 6d 67 2e 65 6d 6f 6a 69 7b 77 69 64 74 68 3a 32 35 70 78 3b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 3a 35 70 78 20 34 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 31 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 31 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 6c 73 78 2d 65 6d 6f 6a 69 70 69 63 6b 65 72 2d 65 6d 6f 6a 69 2e 6c 73 78 2d 65 6d 6f 6a 69 2d 74 61 62 7b 77 69 64 74 68 3a 32 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 3b 68 65 69 67 68 74 3a Data Ascii: d img.emoji{opacity:1}.lsx-emojipicker-emoji span img.emoji{width:25px;height:25px;margin:5px 4px;cursor:pointer;transition:all 0.1ms ease-in-out;-webkit-transition:all 0.1ms ease-in-out}.lsx-emojipicker-emoji.lsx-emoji-tab{width:220px;padding:8px;height:
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 69 6d 61 67 65 2c 2e 74 65 61 6d 5f 75 70 6c 6f 61 64 65 64 5f 63 75 73 74 6f 6d 5f 63 6f 76 65 72 20 2e 63 6f 76 65 72 5f 69 6d 61 67 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 31 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 35 29 7d 2e 63 6f 76 65 72 5f 73 65 6c 65 63 74 65 64 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 6f 72 61 6e 67 65 7d 2e 64 65 6c 65 74 65 5f 6c 69 62 72 61 72 79 5f 63 75 73 74 6f 6d 5f 63 6f 76 65 72 7b 74 6f 70 3a 36 70 78 3b 6c 65 66 74 3a 31 30 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 63 61 72 64 5f 63 6f 76 65 72 5f 70 72 65 76 69 65 77 5f 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 Data Ascii: image,.team_uploaded_custom_cover .cover_image{display:block;box-shadow:0px 1px 2px rgba(0,0,0,0.25)}.cover_selected{border-color:orange}.delete_library_custom_cover{top:6px;left:10px;cursor:pointer}.card_cover_preview_container{display:flex;justify-conte
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 61 76 69 2d 6c 65 66 74 7b 77 69 64 74 68 3a 38 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 32 30 30 70 78 7d 23 63 61 6e 76 61 73 2d 6e 61 76 69 2d 72 69 67 68 74 7b 77 69 64 74 68 3a 38 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 32 30 30 70 78 7d 23 63 61 72 64 5f 70 72 65 76 69 65 77 7b 77 69 64 74 68 3a 34 34 32 70 78 7d 73 70 61 6e 2e 62 74 6e 2d 69 63 6f 6e 2d 6f 6e 6c 79 2e 63 61 6e 63 65 6c 5f 74 68 69 73 5f 65 6e 74 72 79 5f 74 72 61 73 68 5f 63 61 6e 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 6f 70 3a 2d 31 32 70 78 3b 6c 65 66 74 3a 2d 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 32 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 Data Ascii: avi-left{width:80px;position:relative;top:200px}#canvas-navi-right{width:80px;position:relative;top:200px}#card_preview{width:442px}span.btn-icon-only.cancel_this_entry_trash_can{cursor:pointer;top:-12px;left:-12px;position:absolute;z-index:2;font-size:14
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 35 35 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 34 34 30 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 30 35 29 7d 2e 63 61 6e 76 61 73 5f 70 61 67 65 2e 6c 6f 63 6b 65 64 5f 70 61 67 65 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 63 61 6e 76 61 73 5f 70 61 67 65 2e 6c 6f 63 6b 65 64 5f 70 61 67 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a Data Ascii: n:relative;float:left;height:550px;overflow:hidden;width:440px;box-shadow:inset 0 0 0 2px rgba(0,0,0,0.05)}.canvas_page.locked_page{cursor:not-allowed}.canvas_page.locked_page::before{content:'';position:absolute;left:0;right:0;top:0;bottom:0;user-select:
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 63 61 6c 63 28 2d 31 20 2a 20 28 76 61 72 28 2d 2d 6e 65 78 74 2d 74 6f 2d 61 63 74 69 76 65 2d 6f 76 65 72 68 61 6e 67 29 20 2b 20 30 70 78 29 29 7d 2e 73 69 67 6e 5f 76 65 72 73 69 6f 6e 5f 33 20 23 63 61 6e 76 61 73 5f 70 61 67 65 73 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 61 72 72 6f 77 5f 62 75 74 74 6f 6e 20 69 7b 2d 2d 66 61 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 2d 2d 66 61 2d 73 65 63 6f 6e 64 61 72 79 2d 6f 70 61 63 69 74 79 3a 20 31 3b 62 6f 72 64 65 72 3a 35 70 78 20 73 6f 6c 69 64 20 77 68 69 74 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 2e 73 69 67 6e 5f 76 65 72 73 69 6f 6e 5f 33 20 23 63 61 6e 76 61 73 5f 70 61 67 65 73 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 6c 65 66 74 5f 61 72 72 6f 77 5f 62 75 Data Ascii: calc(-1 * (var(--next-to-active-overhang) + 0px))}.sign_version_3 #canvas_pages_container .arrow_button i{--fa-primary-color: #ffffff;--fa-secondary-opacity: 1;border:5px solid white;border-radius:50%}.sign_version_3 #canvas_pages_container .left_arrow_bu
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 69 6e 65 72 7b 63 75 72 73 6f 72 3a 6d 6f 76 65 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 34 32 43 30 46 42 3b 74 6f 70 3a 32 30 30 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 38 7d 23 70 68 6f 74 6f 5f 70 72 65 76 69 65 77 5f 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 74 6f 70 3a 32 30 30 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 39 3b 63 75 72 73 6f 72 3a 6d 6f 76 65 7d 23 70 68 6f 74 6f 5f 70 72 65 76 69 65 77 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 23 34 32 43 30 46 42 3b 6f 75 74 6c 69 6e 65 2d 6f 66 Data Ascii: iner{cursor:move;border:2px solid #42C0FB;top:200px;display:none;position:absolute;z-index:8}#photo_preview_container{width:auto;height:auto;top:200px;display:none;position:absolute;z-index:9;cursor:move}#photo_preview{outline:2px solid #42C0FB;outline-of
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 70 61 67 65 5f 73 6c 69 64 65 72 20 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 2c 23 70 72 65 70 61 72 65 5f 65 6e 74 72 79 5f 73 6c 69 64 65 72 20 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 77 69 64 74 68 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 31 35 70 78 7d 2e 70 61 67 65 5f 73 6c 69 64 65 72 20 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 20 2e 73 6c 69 64 65 72 2d 74 69 70 2c 23 70 72 65 70 61 72 65 5f 65 6e 74 72 79 5f 73 6c 69 64 65 72 20 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 20 2e 73 6c 69 64 65 72 2d 74 69 70 7b 6f 70 61 63 69 74 79 3a 31 30 30 3b 62 6f Data Ascii: page_slider .ui-slider-handle,#prepare_entry_slider .ui-slider-handle{border-color:#000;border-radius:100%;background:#000;width:15px;height:15px}.page_slider .ui-slider-handle .slider-tip,#prepare_entry_slider .ui-slider-handle .slider-tip{opacity:100;bo
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 6e 74 3a 22 5c 66 30 64 38 22 7d 23 73 65 6c 65 63 74 32 2d 65 6e 74 72 79 5f 66 6f 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 23 73 68 61 72 65 5f 6d 6f 64 61 6c 5f 68 65 61 64 65 72 5f 63 6c 6f 73 65 5f 62 74 6e 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 35 30 70 78 7d 23 73 68 61 72 65 5f 6d 6f 64 61 6c 5f 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 39 39 2e 39 38 70 78 29 7b 5b 64 61 74 61 2d 73 68 61 70 65 2d 73 74 79 6c 65 3d 27 63 75 72 76 65 27 5d 7b 68 65 69 67 68 74 3a 36 30 70 78 7d 5b 64 61 74 61 2d 73 68 61 70 65 2d 73 74 79 6c 65 3d 27 77 61 76 65 27 5d Data Ascii: nt:"\f0d8"}#select2-entry_font-container{pointer-events:none}#share_modal_header_close_btn{float:right;margin-top:-50px}#share_modal_header{display:inline-block}@media (max-width: 1199.98px){[data-shape-style='curve']{height:60px}[data-shape-style='wave']
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 69 6e 65 72 3e 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 73 2c 23 67 69 70 68 79 5f 70 72 65 76 69 65 77 5f 63 6f 6e 74 61 69 6e 65 72 3e 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 6e 2c 23 67 69 70 68 79 5f 70 72 65 76 69 65 77 5f 63 6f 6e 74 61 69 6e 65 72 3e 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 73 2c 23 69 63 6f 6e 5f 70 72 65 76 69 65 77 5f 63 6f 6e 74 61 69 6e 65 72 3e 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 6e 2c 23 69 63 6f 6e 5f 70 72 65 76 69 65 77 5f 63 6f 6e 74 61 69 6e 65 72 3e 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 73 7b 6c 65 66 74 3a 34 35 25 3b 74 6f 70 3a 2d 31 30 70 78 7d 23 74 65 78 74 5f 70 72 65 76 69 65 77 5f 63 6f 6e 74 61 69 6e 65 72 3e 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 73 65 2c 2e 63 6f 6e 74 65 6e 74 65 64 69 74 Data Ascii: iner>.ui-resizable-s,#giphy_preview_container>.ui-resizable-n,#giphy_preview_container>.ui-resizable-s,#icon_preview_container>.ui-resizable-n,#icon_preview_container>.ui-resizable-s{left:45%;top:-10px}#text_preview_container>.ui-resizable-se,.contentedit

Timestamp	Bytes transferred	Direction	Data
2025-03-14 18:07:48 UTC	1155	OUT	GET /stylesheets/purpose-blue-light.css HTTP/1.1 Host: www.groupgreeting.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.groupgreeting.com/card/5062286c0fd0eca/delivered Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _groupgreeting_session=dkp9bLlwfALCaccfQL28m163n1wu2Ug3ut1ltvKLGlx%2BcSaVOaiydN0ZOJsXWE4g2CMSGxq8RgyoqCVTyZC%2FSIHaEca5lS5AYTyJGmfb%2BWTlc%2FOUgYCFxd7lRSAJ5asxCo57rYyIpeQENTSTyMJuLokKm6Jahf5HRFOhuecVVXI98S0zaMtC3QT2A%2BYta2L%2F1YOk16%2BSJWYiY5pHkdiDZ5Y1eXa2%2BwgXMaXWgu8R1rCiwBf0ce6g8Pu3Jcrf0TO1zIjsEDiQJpQcQkTVhZ%2F270sTc5dPTmLT0%2BrslgY6AfuLt2G%2B7Fi4FVyOZDJGK7ds7tkGKc%2B%2BR67dDd1wA7AkaFWzkAdhQG9ComthYKBIVmn%2Ftolmn8sbutq0AbTiKgZ0RB%2FBNKChKLtwNmAHdcz5cyfPk%2FWzwCKlPv4NCA%3D%3D--%2F9ikku0Fl8DcmWN8--LOqsniyNLTtAfusoN0214w%3D%3D
2025-03-14 18:07:49 UTC	328	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 18:07:49 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Tue, 26 Oct 2021 19:05:03 GMT etag: W/"71af1-5cf4627a21287-gzip" vary: Accept-Encoding machine: 00 CF-Cache-Status: HIT Age: 5049 Server: cloudflare CF-RAY: 9205b67ba84b42a6-EWR
2025-03-14 18:07:49 UTC	1041	IN	Data Raw: 37 65 35 38 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4e 75 6e 69 74 6f 3a 33 30 30 2c 34 30 30 2c 36 30 30 2c 37 30 30 29 3b 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 33 30 36 65 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 65 30 30 66 66 3b 2d 2d 70 75 72 70 6c 65 3a 23 35 31 30 66 61 38 3b 2d 2d 70 69 6e 6b 3a 23 66 30 37 34 61 64 3b 2d 2d 72 65 64 3a 23 66 66 35 36 33 30 3b 2d 2d 6f 72 61 6e 67 65 3a 23 66 66 61 62 30 30 3b 2d 2d 79 65 6c 6c 6f 77 3a 23 66 63 30 3b 2d 2d 67 72 65 65 6e 3a 23 33 36 62 33 37 65 3b 2d 2d 74 65 61 6c 3a 23 30 30 62 38 64 39 3b 2d 2d 63 79 61 6e 3a 23 34 62 64 36 65 35 3b 2d 2d 67 72 61 79 3a 23 63 30 63 63 Data Ascii: 7e58@import url(https://fonts.googleapis.com/css?family=Nunito:300,400,600,700);:root{--blue:#306eff;--indigo:#6e00ff;--purple:#510fa8;--pink:#f074ad;--red:#ff5630;--orange:#ffab00;--yellow:#fc0;--green:#36b37e;--teal:#00b8d9;--cyan:#4bd6e5;--gray:#c0cc
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 69 63 6c 65 2c 61 73 69 64 65 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 75 6e 69 74 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 3b 63 6f 6c 6f 72 3a 23 38 34 39 32 61 36 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 5b 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 5d 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 Data Ascii: icle,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:Nunito,sans-serif;font-size:1rem;font-weight:400;line-height:1.7;color:#8492a6;text-align:left;background-color:#fff}[tabindex="-1"]:focus{outline:0
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 2c 43 6f 75 72 69 65 72 20 4e 65 77 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 70 72 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 72 65 6d 7d 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 7d 63 61 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 3b 70 Data Ascii: egular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}table{border-collapse:collapse}caption{padding-top:1rem;p
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 6c 65 67 65 6e 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 32 37 35 72 65 6d 20 2b 20 2e 33 76 77 29 7d 7d 70 72 6f 67 72 65 73 73 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a Data Ascii: ;padding:0;margin-bottom:.5rem;font-size:1.5rem;line-height:inherit;color:inherit;white-space:normal}@media (max-width:1200px){legend{font-size:calc(1.275rem + .3vw)}}progress{vertical-align:baseline}[type=number]::-webkit-inner-spin-button,[type=number]:
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 33 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 64 69 73 70 6c 61 79 2d 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 36 37 35 72 65 6d 20 2b 20 35 2e 31 76 77 29 7d 7d 2e 64 69 73 70 6c 61 79 2d 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 64 69 73 70 6c 61 79 2d 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 35 37 35 72 65 6d 20 2b 20 33 2e 39 76 77 29 7d 7d 2e 64 69 73 70 6c 61 79 2d 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 Data Ascii: 3}@media (max-width:1200px){.display-2{font-size:calc(1.675rem + 5.1vw)}}.display-3{font-size:4.5rem;font-weight:300;line-height:1.3}@media (max-width:1200px){.display-3{font-size:calc(1.575rem + 3.9vw)}}.display-4{font-size:3.5rem;font-weight:300;line-he
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 37 33 34 34 34 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 2d 2e 31 72 65 6d 20 30 20 72 67 62 61 28 33 31 2c 34 35 2c 36 31 2c 2e 32 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 2d 2e 31 72 65 6d 20 30 20 72 67 62 61 28 33 31 2c 34 35 2c 36 31 2c 2e 32 35 29 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f Data Ascii: 73444;border-radius:.2rem;-webkit-box-shadow:inset 0 -.1rem 0 rgba(31,45,61,.25);box-shadow:inset 0 -.1rem 0 rgba(31,45,61,.25)}kbd kbd{padding:0;font-size:100%;font-weight:600;-webkit-box-shadow:none;box-shadow:none}pre{display:block;font-size:87.5%;colo
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 39 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 6f 6c 2d 78 6c 2d 31 2c 2e 63 6f 6c 2d 78 6c 2d 32 2c 2e 63 6f 6c 2d 78 6c 2d 33 2c 2e 63 6f 6c 2d 78 6c 2d 34 2c 2e 63 6f 6c 2d 78 6c 2d 35 2c 2e 63 6f 6c 2d Data Ascii: 9,.col-md-10,.col-md-11,.col-md-12,.col-md-auto,.col-sm,.col-sm-1,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-auto,.col-xl,.col-xl-1,.col-xl-2,.col-xl-3,.col-xl-4,.col-xl-5,.col-
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 30 2c 2e 63 6f 6c 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 7d 2e 63 6f 6c 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 Data Ascii: 0 75%;flex:0 0 75%;max-width:75%}.col-10{-ms-flex:0 0 83.3333333333%;flex:0 0 83.3333333333%;max-width:83.3333333333%}.col-10,.col-11{-webkit-box-flex:0}.col-11{-ms-flex:0 0 91.6666666667%;flex:0 0 91.6666666667%;max-width:91.6666666667%}.col-12{-webkit-b
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: fset-4{margin-left:33.3333333333%}.offset-5{margin-left:41.6666666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.3333333333%}.offset-8{margin-left:66.6666666667%}.offset-9{margin-left:75%}.offset-10{margin-left:83.3333333333%}.offset-11{margin-le
2025-03-14 18:07:49 UTC	1369	IN	Data Raw: 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 Data Ascii: it-box-flex:0;-ms-flex:0 0 83.3333333333%;flex:0 0 83.3333333333%;max-width:83.3333333333%}.col-sm-11{-webkit-box-flex:0;-ms-flex:0 0 91.6666666667%;flex:0 0 91.6666666667%;max-width:91.6666666667%}.col-sm-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0